java pem 私钥_Java-如何解锁受密码保护的PEM私钥

openssl rsa -in testfile.pem -out testfile_pub.pub does not export the public key, it actually exports the private key out in clear text (if you provided the correct password). To export the public key use the -pubout option.

是的，您将需要密码来导出公共密钥。

要在Java中导入私钥，您需要先将其转换为PKCS8：

openssl pkcs8 -topk8 -in testfile.pem -inform pem -out testfile_pkcs8.pem -outform pem

然后，您可以像下面这样在Java中导入它：

String encrypted = new String(Files.readAllBytes(Paths.get("testfile_pkcs8.pem")));

encrypted = encrypted.replace("-----BEGIN ENCRYPTED PRIVATE KEY-----", "");

encrypted = encrypted.replace("-----END ENCRYPTED PRIVATE KEY-----", "");

EncryptedPrivateKeyInfo pkInfo = new EncryptedPrivateKeyInfo(Base64.decode(encrypted));

PBEKeySpec keySpec = new PBEKeySpec("mypassword".toCharArray()); // password

SecretKeyFactory pbeKeyFactory = SecretKeyFactory.getInstance(pkInfo.getAlgName());

PKCS8EncodedKeySpec encodedKeySpec = pkInfo.getKeySpec(pbeKeyFactory.generateSecret(keySpec));

KeyFactory keyFactory = KeyFactory.getInstance("RSA");

PrivateKey encryptedPrivateKey = keyFactory.generatePrivate(encodedKeySpec);

不，这并不意味着任何人都可以读取密钥，因为您仍然必须提供密码。