证书文件或者流的导入导出

最新推荐文章于 2021-02-20 14:33:03 发布

gregbond

最新推荐文章于 2021-02-20 14:33:03 发布

阅读量1.2k

点赞数

本文链接：https://blog.csdn.net/gregbond/article/details/1570914

版权

也可以把证书写到ByteArrayOutputStream里，因为它有toByteArray方法，可以直接生成字节流保存证书

// This method writes a certificate to a file. If binary is false, the
    // certificate is base64 encoded.
    public static void export(java.security.cert.Certificate cert, File file, boolean binary) {
        try {
            // Get the encoded form which is suitable for exporting
            byte[] buf = cert.getEncoded();

            FileOutputStream os = new FileOutputStream(file);
            if (binary) {
                // Write in binary form
                os.write(buf);
            } else {
                // Write in text form
                Writer wr = new OutputStreamWriter(os, Charset.forName("UTF-8"));
                wr.write("-----BEGIN CERTIFICATE-----/n");
                wr.write(new sun.misc.BASE64Encoder().encode(buf));
                wr.write("/n-----END CERTIFICATE-----/n");
                wr.flush();
            }
            os.close();
        } catch (CertificateEncodingException e) {
        } catch (IOException e) {
        }
    }
If the certificate is in the key store, it can exported using keytool:

    // Export in binary
    > keytool -storepass my-keystore-password -alias myalias -export -file outfilename.cer
    
    // Export in text format
    > keytool -storepass my-keystore-password -alias myalias -export -rfc -file outfilename.cer

Here's an example of the text form of an exported certificate:

 // This method reads a certificate to a file. The certificate can be either
    // binary or base64 encoded.
    public static java.security.cert.Certificate importCertificate(File file) {
        try {
            FileInputStream is = new FileInputStream(file);
    
            CertificateFactory cf = CertificateFactory.getInstance("X.509");
            java.security.cert.Certificate cert = cf.generateCertificate(is);
            return cert;
        } catch (CertificateException e) {
        } catch (IOException e) {
        }
        return null;
    }
A certificate can be imported into a keystore using keytool:     > keytool -storepass my-keystore-password -alias myalias -import -file infilename.cer