弄清楚了:
>将CSR PEM转换为PKCS10CertificationRequest
>通过从PKCS10CertificationRequest实例访问getSubject()方法获取X500Name实例
>迭代RDN []数组并使用其中一个ASN1ObjectIdentifier获取所需的特定字段(例如COUNTRY为2.5.4.6)
这是代码:
public class EncryptDecrypt {
private Logger LOG = LoggerFactory.getLogger(EncryptDecrypt.class);
private final String COUNTRY = "2.5.4.6";
private final String STATE = "2.5.4.8";
private final String LOCALE = "2.5.4.7";
private final String ORGANIZATION = "2.5.4.10";
private final String ORGANIZATION_UNIT = "2.5.4.11";
private final String COMMON_NAME = "2.5.4.3";
@Test
public void testReadCertificateSigningRequest() {
String csrPEM = "-----BEGIN CERTIFICATE REQUEST-----\n" +
"MIICwjCCAaoCAQAwfTEL