通过Java生成.pfx（.p12)证书文件

scx_link

已于 2023-02-21 17:13:26 修改

阅读量1.6k

点赞数 1

分类专栏：数字证书文章标签： https java 网络协议

于 2023-02-03 16:43:24 首次发布

本文链接：https://blog.csdn.net/adminstate/article/details/128871090

版权

数字证书专栏收录该内容

8 篇文章 2 订阅

订阅专栏

private void  createPfxCert() throws InvalidAlgorithmParameterException, NoSuchAlgorithmException, NoSuchProviderException, IOException, CertificateException, InvalidKeySpecException, KeyStoreException {
        String keyType = "RSA";//密钥算法
        String certPassword = "111111";//证书密码
        String commonName = "某某测试设备证书";//公司名称
        String ucsCode = "ait1234567890";//公司社会信用码
        String duration = "1";//证书有效期 单位为:月
        KeyPair keyPair = KeyUtils.generateKeyPair(keyType.toLowerCase());
        String dn = "CN="+commonName + ",OU="+ucsCode+",C=CN";
        PKCS10CertificationRequest pkcs10CertificationRequest = CertUtils.generateCSR(new X500Name(dn), keyPair.getPublic(), keyPair.getPrivate());
        String p10= Base64.encodeBytes(pkcs10CertificationRequest.getEncoded());
        JSONObject certResult = applySemiCert(p10,commonName,ucsCode,duration);//申请证书
        //log.info("certResult==="+certResult.toJSONString());
        String errorCode = certResult.getString("errorCode");
        if (StringUtils.equals("0", errorCode)) {
            JSONObject certInfo = certResult.getJSONObject("certInfo");
            String cert = certInfo.getString("cert");
            //String serialNumber = certInfo.getString("serialNumber");
            X509Certificate pubKey = new JcaX509CertificateConverter().setProvider("BC")
                    .getCertificate(new X509CertificateHolder(Base64.decode(cert)));

            String privateKeyStr = Base64.encodeBytes(keyPair.getPrivate().getEncoded());
            byte[] privateKeyBytes = Base64.decode(privateKeyStr);
            KeyFactory kf = KeyFactory.getInstance("RSA");
            PrivateKey privateKey = kf.generatePrivate(new PKCS8EncodedKeySpec(privateKeyBytes));

            // 创建KeyStore,存储证书ca
            Security.insertProviderAt(new BouncyCastleProvider(), 1);
            //KeyStore store = KeyStore.getInstance("BKS", "BC");
            KeyStore store = KeyStore.getInstance("PKCS12");
            store.load(null, null);
            store.setKeyEntry("pc", privateKey,
                    certPassword.toCharArray(), new Certificate[]{pubKey});
            String outPath = "D:\\"+commonName+".pfx";
            OutputStream outputStream = new FileOutputStream(outPath);
            store.store(outputStream, certPassword.toCharArray());
        } else {
            throw new RuntimeException("error");
        }
    }

关键点，获取到cert后的代码部分，把公钥和私钥及密码存储到一个文件中。