java pem 签名_如何在Java中验证PEM格式证书

您可以使用

BouncyCastle的PEMReader读取PEM文件中的证书.如果内容是X.509证书,您应该获得X509Certificate的实例并根据需要进行验证.

编辑：这是代码应该是什么样子(未尝试)：

// The key with which you want to verify the cert.

// This is probably a CA certificate's public key.

PublicKey publicKey = ...;

PEMReader reader = new PEMReader(new FileReader("/path/to/file.pem"));

Object pemObject = reader.readObject();

if (pemObject instanceof X509Certificate) {

X509Certificate cert = (X509Certificate)pemObject;

cert.checkValidity(); // to check it's valid in time

cert.verify(publicKey); // verify the sig. using the issuer's public key

}

(当然,与任何I / O操作一样,您可能需要使用try / finally关闭阅读器.)

请注意,checkValidity和verify不会返回任何内容：相反,如果它们失败,它们会抛出异常.