文章标题

    /// 验证签名
    public static boolean Verify(String Xml, String publicKeyPath) throws Exception {
        int begin = Xml.indexOf("<Signature>") + "<Signature>".length();
        int len = Xml.indexOf("</Signature>") - begin;

        String SignatureString = Xml.substring(begin, len+begin);
        String OriginalString = Xml.replace("<Signature>" + SignatureString + "</Signature>", "");
        // 将base64签名数据转码为字节
        byte[] signedBase64 = Base64Utils.decodeFromString(SignatureString);//(OriginalString.getBytes());
            // TODO 数字证书
            InputStream inStream = new FileInputStream(publicKeyPath);// 文件
            CertificateFactory cf = CertificateFactory.getInstance("X.509");//X.509
            X509Certificate cert = (X509Certificate) cf.generateCertificate(inStream);
            inStream.close();
            // 得到公钥
            RSAPublicKey publicKey = (RSAPublicKey) cert.getPublicKey();
            // 构建签名
            Signature signature = Signature.getInstance(cert.getSigAlgName());//SHA1WithRSA
            signature.initVerify(publicKey);
            signature.update(Base64Utils.encode(OriginalString.getBytes()));
            return signature.verify(signedBase64);
    }

    /**
     * <p>
     * 生成数据签名
     * </p>
     * 
     * @param data 源数据
     * @param keyStorePath 密钥库存储路径
     * @param alias 密钥库别名
     * @param password 密钥库密码
     * @return
     * @throws Exception
     */
     //如果已知私钥XXX.pfx，和私钥密码，但不清楚密钥库别名是什么，可以用以下命令查看私钥信息
     //keytool -v -list -storetype pkcs12 -keystore XXX.pfx
    public static String sign(String data, String keyStorePath, String alias, String password) 
            throws Exception {
         // 获取私钥
        FileInputStream in = new FileInputStream(keyStorePath);
        KeyStore keyStore = KeyStore.getInstance("PKCS12");
        keyStore.load(in, password.toCharArray());
        in.close();
        // 获得证书
        X509Certificate x509Certificate =(X509Certificate)keyStore.getCertificate(alias);
       // X509Certificate x509Certificate = (X509Certificate) getCertificate(keyStorePath, alias, password);
        // 取得私钥
        PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, password.toCharArray());
        // 构建签名
        Signature signature = Signature.getInstance(x509Certificate.getSigAlgName());
        signature.initSign(privateKey);
        signature.update(data.getBytes("utf-8"));
        byte[] sing = signature.sign();
        return Base64Utils.encodeToString(sing);
    }