BouncyCastle-生成MS Windows理解的证书文件

Question

有人帮忙吗？

谢了。

Answer 1

通常，您会生成私钥和证书签名请求，然后将csr发送给CA，由CA颁发证书。最后，您可以生成keystore并将私钥和证书一起存储在其中。因此，我不明白您的CA是如何将私钥存储在数据库中的，因为私钥没有发送给CA。

省略这些信息（也许你有一个自签名的CA，用于基础设施的目的，数据库存储私钥不安全，等等），事情是这样的；要在windows上加载私钥和证书，需要keystore文件（对于windows来说通常是PFX或PKCS12)，而不是只需要证书。要使用java和bouncycastle按照您的要求这样做，您可以使用以下示例代码（正如您所说，我假设您有证书和私钥）：

import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.security.Key;
import java.security.KeyStore;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;

import org.bouncycastle.jce.provider.BouncyCastleProvider;

public class Sample {

    public static void main(String[] args) throws Exception {

        // generate your certificate
        CertificateFactory cf = CertificateFactory.getInstance("X509", new BouncyCastleProvider());
        Certificate yourCert = cf.generateCertificate(new FileInputStream("C:/your_certificate_path"));
        // here you can add also the issuer of your cert
        Certificate[] certChain = { yourCert };
        // depending on your private key format you've a different
        // ways to parse its
        Key privatekey = null;//...
        String alias = "yourKSEntry";
        // generate the keystore
        KeyStore ks = KeyStore.getInstance("PKCS12", new BouncyCastleProvider());
        // necessary to init a new keystore
        ks.load(null, null);
        String keyPass = null;// your key pass or null if the key file has no password
        // adds the key and cert to the keystore
        ks.setKeyEntry(alias, privatekey, null, certChain);
        // save to file in order that then you
        // can install on windows keystore
        ks.store(new FileOutputStream("C:/where_save_your_keystore.p12"), "your_keystore_pass".toCharArray());

    }
}

希望这能有所帮助，