java der格式_用Java读取OpenSSL生成的，PEM / DER格式的S / MIME消息

以下是使用BouncyCastle 1.57(受this article启发)解密的方法：

import org.bouncycastle.cms.CMSEnvelopedData;

import org.bouncycastle.cms.CMSException;

import org.bouncycastle.cms.KeyTransRecipientInformation;

import org.bouncycastle.cms.RecipientInformation;

import org.bouncycastle.cms.jcajce.JceKeyTransEnvelopedRecipient;

import org.bouncycastle.cms.jcajce.JceKeyTransRecipient;

import org.bouncycastle.util.encoders.Base64;

import java.security.KeyFactory;

import java.security.NoSuchAlgorithmException;

import java.security.PrivateKey;

import java.security.spec.InvalidKeySpecException;

import java.security.spec.PKCS8EncodedKeySpec;

import java.util.Collection;

public class PKCS7Decryptor {

private PrivateKey privateKey;

public PKCS7Decryptor(String privateKeyStr) {

try {

byte[] privateKeyData = extractRawData(privateKeyStr, "PRIVATE KEY");

PKCS8EncodedKeySpec kspec = new PKCS8EncodedKeySpec(privateKeyData);

KeyFactory kf = KeyFactory.getInstance("RSA");

privateKey = kf.generatePrivate(kspec);

} catch (NoSuchAlgorithmException | InvalidKeySpecException e) {

throw new RuntimeException("Unable to parse private key");

}

}

public String decrypt(String encryptedText) throws CMSException {

byte[] data = extractRawData(encryptedText, "PKCS7");

CMSEnvelopedData envelopedData = new CMSEnvelopedData(data);

Collection recipients = envelopedData.getRecipientInfos().getRecipients();

KeyTransRecipientInformation recipientInfo = (KeyTransRecipientInformation) recipients.iterator().next();

JceKeyTransRecipient recipient = new JceKeyTransEnvelopedRecipient(privateKey);

return new String(recipientInfo.getContent(recipient));

}

private byte[] extractRawData(String text, String dataType) {

return Base64.decode(text

.replace(String.format("-----BEGIN %s-----", dataType), "")

.replace(String.format("-----END %s-----", dataType), ""));

}

}

一些解释：

在类构造函数中，私钥被转换为适当的格式

页眉和页脚(如"-----BEGIN PKCS7-----")将被删除，内容将进行base64解码