JKS convert to PFX

最新推荐文章于 2022-09-01 11:31:23 发布
原创最新推荐文章于 2022-09-01 11:31:23 发布 · 268 阅读
0 ·
CC 4.0 BY-SA版权
文章标签：
#Java #Security
SSL 专栏收录该内容
6 篇文章
订阅专栏
package com.ssl;

import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.security.Key;
import java.security.KeyStore;
import java.security.cert.Certificate;
import java.util.Enumeration;
public class ConvertPFX {      
    public static final String PKCS12 = "PKCS12";      
    public static final String JKS = "JKS";      
    public static final String PFX_KEYSTORE_FILE = "G:\\test.pfx";      
    public static final String KEYSTORE_PASSWORD = "123456";      
    public static final String JKS_KEYSTORE_FILE = "G:\\study\\ssl\\sm\\Server1Keystore.jks";      
     
    public static void coverTokeyStore() {      
        try {      
            KeyStore inputKeyStore = KeyStore.getInstance("PKCS12");      
            FileInputStream fis = new FileInputStream(PFX_KEYSTORE_FILE);      
            char[] nPassword = null;      
     
            if ((KEYSTORE_PASSWORD == null)      
                    || KEYSTORE_PASSWORD.trim().equals("")) {      
                nPassword = null;      
            } else {      
                nPassword = KEYSTORE_PASSWORD.toCharArray();      
            }      
     
            inputKeyStore.load(fis, nPassword);      
            fis.close();      
     
            KeyStore outputKeyStore = KeyStore.getInstance("JKS");      
     
            outputKeyStore.load(null, KEYSTORE_PASSWORD.toCharArray());      
     
            Enumeration enums = inputKeyStore.aliases();      
     
            while (enums.hasMoreElements()) { //   we   are   readin   just   one   certificate.        
     
                String keyAlias = (String) enums.nextElement();      
     
                System.out.println("alias=[" + keyAlias + "]");      
     
                if (inputKeyStore.isKeyEntry(keyAlias)) {      
                    Key key = inputKeyStore.getKey(keyAlias, nPassword);      
                    Certificate[] certChain = inputKeyStore      
                            .getCertificateChain(keyAlias);      
     
                    outputKeyStore.setKeyEntry(keyAlias, key, KEYSTORE_PASSWORD      
                            .toCharArray(), certChain);      
                }      
            }      
     
            FileOutputStream out = new FileOutputStream(JKS_KEYSTORE_FILE);      
     
            outputKeyStore.store(out, nPassword);      
            out.close();      
        } catch (Exception e) {      
            e.printStackTrace();      
        }      
    }      
    public static void coverToPfx() {      
        try {      
            KeyStore inputKeyStore = KeyStore.getInstance("JKS");      
            FileInputStream fis = new FileInputStream(JKS_KEYSTORE_FILE);      
            char[] nPassword = null;      
     
            if ((KEYSTORE_PASSWORD == null)      
                    || KEYSTORE_PASSWORD.trim().equals("")) {      
                nPassword = null;      
            } else {      
                nPassword = KEYSTORE_PASSWORD.toCharArray();      
            }      
     
            inputKeyStore.load(fis, nPassword);      
            fis.close();      
     
            KeyStore outputKeyStore = KeyStore.getInstance("PKCS12");      
     
            outputKeyStore.load(null, KEYSTORE_PASSWORD.toCharArray());      
     
            Enumeration enums = inputKeyStore.aliases();      
     
            while (enums.hasMoreElements()) { //   we   are   readin   just   one   certificate.        
     
                String keyAlias = (String) enums.nextElement();      
     
                System.out.println("alias=[" + keyAlias + "]");      
     
                if (inputKeyStore.isKeyEntry(keyAlias)) {      
                    Key key = inputKeyStore.getKey(keyAlias, nPassword);      
                    Certificate[] certChain = inputKeyStore      
                            .getCertificateChain(keyAlias);      
     
                    outputKeyStore.setKeyEntry(keyAlias, key, KEYSTORE_PASSWORD      
                            .toCharArray(), certChain);      
                }      
            }      
     
            FileOutputStream out = new FileOutputStream(PFX_KEYSTORE_FILE);      
     
            outputKeyStore.store(out, nPassword);      
            out.close();      
        } catch (Exception e) {      
            e.printStackTrace();      
        }      
    }      
    public static void main(String[] args) {      
        coverToPfx();      
    }      
}