以编程方式将.cer证书导入密钥库

Question

如何从类路径中将.p12证书导入到Java密钥库中？首先，我使用了InstallCert https://code.google.com/p/java-
use-
examples/source/browse/trunk/src/com/aw/ad/util/InstallCert.java

进行了一些更改，以便获得服务器证书将被导入到Java安装目录中的密钥库中。这工作正常，但现在我想从类路径中加载证书。

编辑：我只是使用一个.cer证书，请参阅下一个答案

Answer 1

答案：

InputStream certIn = ClassLoader.class.getResourceAsStream("/package/myCert.cer");

final char sep = File.separatorChar;
File dir = new File(System.getProperty("java.home") + sep + "lib" + sep + "security");
File file = new File(dir, "cacerts");
InputStream localCertIn = new FileInputStream(file);

KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());
keystore.load(localCertIn, passphrase);
if (keystore.containsAlias("myAlias")) {
    certIn.close();
    localCertIn.close();
    return;
}
localCertIn.close();

BufferedInputStream bis = new BufferedInputStream(certIn);
CertificateFactory cf = CertificateFactory.getInstance("X.509");
while (bis.available() > 0) {
    Certificate cert = cf.generateCertificate(bis);
    keystore.setCertificateEntry("myAlias", cert);
}

certIn.close();

OutputStream out = new FileOutputStream(file);
keystore.store(out, passphrase);
out.close();

对于Java Web Start，请不要使用ClassLoader，而应使用Class本身：

InputStream certIn = Certificates.class.getResourceAsStream("/package/myCert.cer");