使用Java直接创建keyStore文件

最新推荐文章于 2025-06-30 11:47:16 发布

小菜希

最新推荐文章于 2025-06-30 11:47:16 发布

阅读量2.9k

点赞数 1

分类专栏： JAVA

JAVA 专栏收录该内容

16 篇文章

订阅专栏

本文介绍了一种使用Java创建PKCS12格式KeyStore的方法，包括生成密钥对、自签名证书，并将它们存储在KeyStore中。示例代码展示了如何设置证书的有效期、别名和密码。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

import java.io.FileOutputStream;
import java.io.IOException;
import java.security.GeneralSecurityException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Date;

import sun.security.tools.keytool.CertAndKeyGen;
import sun.security.x509.X500Name;

/**
 * 主要用于创建keyStore文件，保存起来
 *
 */
public class KeyStoreCreate2 {
    public static String filePath = "d:\\new_KeyStore.keystore";
    private static final int keysize = 1024;
    private static final String commonName = "com.baidu.xxx";
    private static final String organizationalUnit = "IT";
    private static final String organization = "baidu";
    private static final String city = "beijing";
    private static final String state = "beijing";
    private static final String country = "beijing";
    private static final long validity = 20000 ; // 3 years
    private static final String alias = "beijingbaidu";
    private static final char[] keyPassword = "pwd123456".toCharArray();

    public static void main(String[] args) throws GeneralSecurityException {
        try {

            KeyStore ks = KeyStore.getInstance("pkcs12");
//            char[] password = "123456".toCharArray();
            ks.load(null, null);

            CertAndKeyGen keypair = new CertAndKeyGen("RSA", "SHA1WithRSA", null);
            X500Name x500Name = new X500Name(commonName, organizationalUnit, organization, city, state, country);
            keypair.generate(keysize);

            PrivateKey privateKey = keypair.getPrivateKey();
            X509Certificate[] chain = new X509Certificate[1];
            chain[0] = keypair.getSelfCertificate(x500Name, new Date(), (long)validity*24*60*60);

            // store away the key store
            FileOutputStream fos = new FileOutputStream(filePath);
            ks.setKeyEntry(alias, privateKey, keyPassword, chain);
            ks.store(fos, keyPassword);
            fos.close();
            System.out.println("create Success");
        } catch (KeyStoreException e) {
            e.printStackTrace();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (CertificateException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        }
    }

}