java keystore pkcs12_Java密钥库的不同类型 -- PKCS12

Different types of keystore in Java -- PKCS12

Java密钥库的不同类型 -- PKCS12

JKCS12 is an active file format for storing cryptography objects as a single file. It can be used to store secret key, private key and certificate.It is a standardized format published by RSA Laboratories which means it can be used not only in Java but also in other libraries in C, C++ or C# etc. This file format is frequently used to import and export entries from or to other keystore types.

JKCS12是一种活动文件格式，用于将加密对象存储为单个文件。它可以用来存储密钥、私钥和证书。它是RSA实验室发布的标准格式，它不仅可以用于java，而且可以用于C、C++或C等的其他库。这种文件格式经常用于从和向其他密钥存储类型导入和导出条目。

Next we will explain the operations which can be performed on PKCS12 keystore.

接下来我们将解释可以在PKCS12密钥库上执行的操作。

Create PKCS12 keystore

创建PKCS12密钥库

Before storing an entry into a PKCS12 keystore, the keystore has to be loaded first. This means we have to have a keystore created first. The simplest way of creating a PKCS12 keystore is :

在将条目存储到PKCS12密钥库之前，必须先加载密钥库。这意味着我们必须首先创建一个密钥库。创建PKCS12密钥库的最简单方法是：

try{

KeyStore keyStore= KeyStore.getInstance("PKCS12");

keyStore.load(null, null);

keyStore.store(new FileOutputStream("output.p12"), "password".toCharArray());

}catch(Exception ex){

ex.printStackTrace();

}

Note, when calling keyStore.load(null, null), two nulls are passed as the input keystore stream and password. This is because we don't have the keystore available yet. After running this program, there should be a keystore file named output.p12 in current working directory.

注意，当调用keyStore.load(null, null)，传递两个null作为输入密钥库流和密码。这是因为我们还没有密钥库。运行此程序后，当前工作目录中应该有一个名为output.p12的密钥库文件。

Store secret key

存储密钥

PKCS12 allows to store secret keys on a limited base. Secret keys are frequently used to encrypt/decrypt data. To transfer the keys conveniently, they can be stored in a keystore like PKCS12 and transferred.

PKCS12允许在有限的基础上存储密钥。密钥经常用于加密/解密数据。为了方便地传输密钥，可以将它们存储在PKCS12这样的密钥库中并进行传输。

try{

KeyStore keyStore= KeyStore.getInstance("PKCS12");

keyStore.load(null, null);

KeyGenerator keyGen= KeyGenerator.getInstance("AES");

keyGen.init(128);

Ke