生成SAML所需X509证书

public static void genX509(String certPath, String password,
                               int keysize, String algorithm) throws Exception {
            // 创建KeyStore
            KeyStore store = KeyStore.getInstance("PKCS12");
            store.load(null, null);
            // 生成一对公私钥，这部分如果自己已经有了PublicKey，可以直接在下面使用，不用生成
            KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA");
            kpg.initialize(keysize);
            KeyPair keyPair = kpg.generateKeyPair();
            // 这个字符串根据自己情况填
            String issuer = "C=CN,ST=BJ,L=BJ,O=dingtalk,OU=dingtalk,CN=dingtalk";
            String subject = issuer;
            X509V3CertificateGenerator certGen = new X509V3CertificateGenerator();
            certGen.setSerialNumber(BigInteger.valueOf(System.currentTimeMillis()));
            certGen.setIssuerDN(new X500Principal(issuer));
            certGen.setNotBefore(new Date(System.currentTimeMillis() - 10 * 365
                    * 24 * 60 * 60 * 1000));
            certGen.setNotAfter(new Date(System.currentTimeMillis() + 10 * 365 * 24
                    * 60 * 60 * 1000));
            certGen.setSubjectDN(new X500Principal(subject));
            certGen.setPublicKey(keyPair.getPublic());// 此处可直接传入线程的PublicKey
            if (algorithm == null || algorithm.equals("")) {
                certGen.setSignatureAlgorithm("SHA256WithRSAEncryption");
            } else {
                certGen.setSignatureAlgorithm(algorithm);
            }
            X509Certificate cert = certGen.generateX509Certificate(keyPair
                    .getPrivate());
            // 私钥有现成的也可直接传入
            store.setKeyEntry("alias", keyPair.getPrivate(),
                    password.toCharArray(), new Certificate[] { cert });
            // 导出为 cer 证书 和 keystore文件
            try {
                FileOutputStream fos = new FileOutputStream(certPath + ".cer");
                FileOutputStream ksFOS = new FileOutputStream(certPath + ".keystore");
                fos.write(cert.getEncoded());
                fos.close();
                store.store(ksFOS, "123".toCharArray());
                ksFOS.close();
            } catch (FileNotFoundException e) {
                e.printStackTrace();
            } catch (CertificateEncodingException e) {
                e.printStackTrace();
            } catch (IOException e) {
                e.printStackTrace();
            }
    }




    public static void main(String[] args) throws Exception {
        X509Service impl=new X509ServiceImpl();
        String certDestPath = System.getProperty("user.dir") + "/src/main/resources/static/test/aaaa";

        genX509(certDestPath, "123", Default_KeySize, "");
        impl.printCert(certDestPath + ".keystore", "123");

    }