Java PrivateKeyEntry.getCertificate方法代码示例

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
public PatchBuilder(File outFile, File dexFile, PrivateKeyEntry key,
                    PrintStream verboseStream) {
    try {
        if (null != key) {
            mBuilder = new SignedJarBuilder(
                    new FileOutputStream(outFile, false), key.getPrivateKey(),
                    (X509Certificate) key.getCertificate());
        } else {
            mBuilder = new SignedJarBuilder(
                    new FileOutputStream(outFile, false), null,
                    null);
        }
        mBuilder.writeFile(dexFile, "classes.dex");
    } catch (Exception e) {
        e.printStackTrace();
    }
}
 

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
private static KeyPair entry2Pair(Entry entry) {
    PublicKey pub = null;
    PrivateKey priv = null;

    if (entry instanceof PrivateKeyEntry) {
        PrivateKeyEntry pk = (PrivateKeyEntry) entry;
        if (pk.getCertificate() != null) {
            pub = pk.getCertificate().getPublicKey();
        }
        priv = pk.getPrivateKey();
    } else if (entry instanceof TrustedCertificateEntry) {
        TrustedCertificateEntry tc = (TrustedCertificateEntry) entry;
        pub = tc.getTrustedCertificate().getPublicKey();
    } else {
        throw new IllegalArgumentException(
                "Only entry types PrivateKeyEntry and TrustedCertificateEntry are supported.");
    }
    return new KeyPair(pub, priv);
}
 

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
public JettyKeystoreConvertorBuilder setKeystore(InputStream inputStream, String password, String alias, String type) throws JettyKeystoreException {
    KeyStore keystore = loadKeyStore(inputStream, password, type);

    try {
        PrivateKeyEntry privateKeyEntry = getPrivateKeyEntryOfKeyStore(keystore, password, alias);

        privateKey = privateKeyEntry.getPrivateKey();
        certificate = privateKeyEntry.getCertificate();
    } catch (JettyKeystoreException e) {
        throw new JettyKeystoreException(JettyKeystoreException.ERROR_LOAD_KEYSTORE, "Can not load file (Keystore)", e);
    }

    return this;
}
 

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
private static OCSPResp generateOCSPResponse(PrivateKeyEntry server, PrivateKeyEntry issuer,
        CertificateStatus status) throws CertificateException {
    try {
        X509Certificate serverCertJca = (X509Certificate) server.getCertificate();
        X509Certificate caCertJca = (X509Certificate) issuer.getCertificate();

        X509CertificateHolder caCert = new JcaX509CertificateHolder(caCertJca);

        DigestCalculatorProvider digCalcProv = new BcDigestCalculatorProvider();
        BasicOCSPRespBuilder basicBuilder = new BasicOCSPRespBuilder(
                SubjectPublicKeyInfo.getInstance(caCertJca.getPublicKey().getEncoded()),
                digCalcProv.get(CertificateID.HASH_SHA1));

        CertificateID certId = new CertificateID(digCalcProv.get(CertificateID.HASH_SHA1),
                caCert, serverCertJca.getSerialNumber());

        basicBuilder.addResponse(certId, status);

        BasicOCSPResp resp = basicBuilder.build(
                new JcaContentSignerBuilder("SHA256withRSA").build(issuer.getPrivateKey()),
                null, new Date());

        OCSPRespBuilder builder = new OCSPRespBuilder();
        return builder.build(OCSPRespBuilder.SUCCESSFUL, resp);
    } catch (Exception e) {
        throw new CertificateException("cannot generate OCSP response", e);
    }
}
 

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
@Test
public void testPKCS1viaPKCS11() throws Exception {
	File tmpConfigFile = File.createTempFile("pkcs11-", "conf");
	tmpConfigFile.deleteOnExit();
	PrintWriter configWriter = new PrintWriter(new FileOutputStream(tmpConfigFile), true);
	configWriter.println("name=SmartCard");
	configWriter.println("library=/usr/lib/libbeidpkcs11.so.0");
	configWriter.println("slotListIndex=2");

	SunPKCS11 provider = new SunPKCS11(tmpConfigFile.getAbsolutePath());
	Security.addProvider(provider);
	KeyStore keyStore = KeyStore.getInstance("PKCS11", provider);
	keyStore.load(null, null);
	PrivateKeyEntry privateKeyEntry = (PrivateKeyEntry) keyStore.getEntry("Authentication", null);
	PrivateKey privateKey = privateKeyEntry.getPrivateKey();
	Signature signature = Signature.getInstance("SHA1withRSA");
	signature.initSign(privateKey);
	byte[] toBeSigned = "hello world".getBytes();
	signature.update(toBeSigned);
	byte[] signatureValue = signature.sign();

	X509Certificate certificate = (X509Certificate) privateKeyEntry.getCertificate();
	RSAPublicKey publicKey = (RSAPublicKey) certificate.getPublicKey();
	BigInteger signatureValueBigInteger = new BigInteger(signatureValue);
	BigInteger messageBigInteger = signatureValueBigInteger.modPow(publicKey.getPublicExponent(),
			publicKey.getModulus());
	LOG.debug("original message: " + new String(Hex.encodeHex(messageBigInteger.toByteArray())));

	// LOG.debug("ASN.1 signature: " + ASN1Dump.dumpAsString(obj)
}
 

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
public JettyKeystoreConvertorBuilder setCertificateFromKeystore(InputStream inputStream, String password, String alias, String type) throws JettyKeystoreException {
    KeyStore keystore = loadKeyStore(inputStream, password, type);

    try {
        PrivateKeyEntry privateKeyEntry = getPrivateKeyEntryOfKeyStore(keystore, password, alias);

        certificate = privateKeyEntry.getCertificate();
    } catch (JettyKeystoreException e) {
        throw new JettyKeystoreException(JettyKeystoreException.ERROR_LOAD_KEYSTORE, "Can not load file (Keystore)", e);
    }

    return this;
}
 

import java.security.KeyStore.PrivateKeyEntry; //导入方法依赖的package包/类
/**
 * Signs and returns the w3c representation of the document containing the SAML assertion.
 * 
 * @param document
 *            w3c document to be signed.
 * @return w3c representation of the signed document.
 * @throws TransformerException
 * @throws NoSuchAlgorithmException
 * @throws InvalidAlgorithmParameterException
 * @throws KeyException
 * @throws MarshalException
 * @throws XMLSignatureException
 */
public Document signSamlAssertion(Document document) throws TransformerException, NoSuchAlgorithmException,
        InvalidAlgorithmParameterException, KeyException, MarshalException, XMLSignatureException {
    if (document != null) {
        PrivateKeyEntry entry = getPrivateKeyEntryFromKeystore();
        PrivateKey privateKey = entry.getPrivateKey();
        X509Certificate certificate = (X509Certificate) entry.getCertificate();
        Element signedElement = signSamlAssertion(document, privateKey, certificate);
        return signedElement.getOwnerDocument();
    }
    return null;
}