Java PEMReader.readObject方法代码示例

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public List<Certificate> parseChain(final String chain) throws IOException {

        final List<Certificate> certs = new ArrayList<>();
        final PEMReader reader = new PEMReader(new StringReader(chain));

        Certificate crt = null;

        while ((crt = (Certificate) reader.readObject()) != null) {
            if (crt instanceof X509Certificate) {
                certs.add(crt);
            }
        }
        if (certs.size() == 0) {
            throw new IllegalArgumentException("Unable to decode certificate chain");
        }

        return certs;
    }
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public static List<Certificate> parseChain(final String chain) throws IOException {

        final List<Certificate> certs = new ArrayList<>();
        final PEMReader reader = new PEMReader(new StringReader(chain));

        Certificate crt = null;

        while ((crt = (Certificate) reader.readObject()) != null) {
            if (crt instanceof X509Certificate) {
                certs.add(crt);
            }
        }
        if (certs.size() == 0) {
            throw new IllegalArgumentException("Unable to decode certificate chain");
        }

        return certs;
    }
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
@Override
protected void doPost(HttpServletRequest request, HttpServletResponse response)
		throws ServletException, IOException {
	Provider provider = null;
	if (null == Security.getProvider(BouncyCastleProvider.PROVIDER_NAME)) {
		provider = new BouncyCastleProvider();
		Security.addProvider(provider);
	}
	String serverCertificatePem = request.getParameter("serverCertificate");
	PEMReader pemReader = new PEMReader(new StringReader(serverCertificatePem));
	Object object = pemReader.readObject();
	pemReader.close();
	if (object instanceof X509Certificate) {
		X509Certificate serverCertificate = (X509Certificate) object;
		HttpSession httpSession = request.getSession();
		httpSession.setAttribute("test.be.fedict.eid.applet.model.ChannelBindingServiceBean.serverCertificate",
				serverCertificate);
	}
	response.sendRedirect("channel-binding.jsp");
	if (null != provider) {
		Security.removeProvider(BouncyCastleProvider.PROVIDER_NAME);
	}
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
protected PrivateKey toPrivateKey(String privateKey) {
    StringReader reader = new StringReader(privateKey);

    // プライベートキーを読み込み
    PEMReader pemReader = new PEMReader(reader);
    try {
        Object pemObject = pemReader.readObject();
        KeyPair keyPair = KeyPair.class.cast(pemObject);
        return keyPair.getPrivate();
    } catch (Exception e) {
        // プライベートキーの読み込みに失敗した場合
        throw new AutoApplicationException("ESERVICE-000705", e);
    } finally {
        try {
            pemReader.close();
        } catch (IOException ignore) {
        }
    }
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public PEMKeyManager() {
    try {
        final Properties p = Play.configuration;

        PEMReader keyReader = new PEMReader(new FileReader(Play.getFile(p.getProperty("certificate.key.file",
                                                                                       "conf/host.key"))),
                                            new PasswordFinder() {
            public char[] getPassword() {
                return p.getProperty("certificate.password", "secret").toCharArray();
            }
        });
        key = ((KeyPair) keyReader.readObject()).getPrivate();

        PEMReader reader = new PEMReader(new FileReader(Play.getFile(p.getProperty("certificate.file", "conf/host.cert"))));
        cert = (X509Certificate) reader.readObject();
    } catch (Exception e) {
        e.printStackTrace();
        Logger.error(e, "");
    }
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
private void doOpenSslTestFile(
    String  fileName,
    Class   expectedPrivKeyClass)
    throws IOException
{
    PEMReader pr = openPEMResource("data/" + fileName, new Password("changeit".toCharArray()));
    Object o = pr.readObject();

    if (o == null || !(o instanceof KeyPair))
    {
        fail("Didn't find OpenSSL key");
    }

    KeyPair kp = (KeyPair) o;
    PrivateKey privKey = kp.getPrivate();

    if (!expectedPrivKeyClass.isInstance(privKey))
    {
        fail("Returned key not of correct type");
    }
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
/**
 * makes RSA public key from PEM string
 * 
 * @param s    PEM string that contains the key
 * @return
 * @see JCERSAPublicKey
 */
public static RSAPublicKey extractPublicRSAKey(String s) {
    RSAPublicKey theKey;
    try {
        PEMReader reader = new PEMReader(new StringReader(s));
        Object o = reader.readObject();
        if (!(o instanceof JCERSAPublicKey)) {
            throw new IOException("Encryption.extractPublicRSAKey: no public key found in string '" + s + "'");
        }
        JCERSAPublicKey JCEKey = (JCERSAPublicKey) o;
        theKey = getRSAPublicKey(JCEKey.getModulus(), JCEKey.getPublicExponent());
   
    } catch (Exception e) {
        log.warning("Encryption.extractPublicRSAKey: Caught exception:" + e.getMessage());
        theKey = null;
    }

    return theKey;
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public static KeyPair makeKeyPair(String publicKeyString,
		String privateKeyString) throws SshProxyJException {
	PublicKey publicKey = null;
	KeyPair kp = null;
	try {
		PublicKeyRead pkr = new PublicKeyRead();
		publicKey = pkr.decodePublicKey(publicKeyString);

		StringReader r = new StringReader(privateKeyString);
		PEMReader pr = new PEMReader(r);
			kp = (KeyPair) pr.readObject();
		pr.close();
	} catch (IOException e) {
		throw new SshProxyJException("Failed to decode private key", e);
	}
	return new KeyPair(publicKey, kp.getPrivate());
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
private void encryptedTest(PrivateKey key, ASN1ObjectIdentifier algorithm)
    throws NoSuchProviderException, NoSuchAlgorithmException, IOException
{
    ByteArrayOutputStream bOut = new ByteArrayOutputStream();
    PEMWriter pWrt = new PEMWriter(new OutputStreamWriter(bOut), "BC");
    PKCS8Generator pkcs8 = new PKCS8Generator(key, algorithm, "BC");

    pkcs8.setPassword("hello".toCharArray());
    
    pWrt.writeObject(pkcs8);

    pWrt.close();

    PEMReader pRd = new PEMReader(new InputStreamReader(new ByteArrayInputStream(bOut.toByteArray())), new PasswordFinder()
    {
        public char[] getPassword()
        {
            return "hello".toCharArray();
        }
    });

    PrivateKey rdKey = (PrivateKey)pRd.readObject();

    assertEquals(key, rdKey);
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public Certificate parseCertificate(final String cert) {
    final PEMReader certPem = new PEMReader(new StringReader(cert));
    try {
        return (Certificate) certPem.readObject();
    } catch (final Exception e) {
        throw new InvalidParameterValueException("Invalid Certificate format. Expected X509 certificate. Failed due to " + e.getMessage());
    } finally {
        IOUtils.closeQuietly(certPem);
    }
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public PrivateKey parsePrivateKey(final String key, final String password) throws IOException {

        PasswordFinder pGet = null;

        if (password != null) {
            pGet = new KeyPassword(password.toCharArray());
        }

        final PEMReader privateKey = new PEMReader(new StringReader(key), pGet);
        Object obj = null;
        try {
            obj = privateKey.readObject();
        } finally {
            IOUtils.closeQuietly(privateKey);
        }

        try {

            if (obj instanceof KeyPair) {
                return ((KeyPair) obj).getPrivate();
            }

            return (PrivateKey) obj;
        } catch (final Exception e) {
            throw new IOException("Invalid Key format or invalid password.", e);
        }
    }
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
/**
 * Obtains the fingerprint of the key in the "ab:cd:ef:...:12" format.
 */
public String getFingerprint() throws IOException {
    Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
    Reader r = new BufferedReader(new StringReader(privateKey.toString()));
    PEMReader pem = new PEMReader(r,new PasswordFinder() {
        public char[] getPassword() {
            throw PRIVATE_KEY_WITH_PASSWORD;
        }
    });

    try {
        KeyPair pair = (KeyPair) pem.readObject();
        if(pair==null)  return null;
        PrivateKey key = pair.getPrivate();
        return digest(key);
    } catch (RuntimeException e) {
        if (e==PRIVATE_KEY_WITH_PASSWORD)
            throw new IOException("This private key is password protected, which isn't supported yet");
        throw e;
    }
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
public String getPublicFingerprint() throws IOException {
    Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
    Reader r = new BufferedReader(new StringReader(privateKey.toString()));
    PEMReader pem = new PEMReader(r,new PasswordFinder() {
        public char[] getPassword() {
            throw PRIVATE_KEY_WITH_PASSWORD;
        }
    });

    try {
        KeyPair pair = (KeyPair) pem.readObject();
        if(pair==null)  return null;
        PublicKey key = pair.getPublic();
        return digestOpt(key,"MD5");
    } catch (RuntimeException e) {
        if (e==PRIVATE_KEY_WITH_PASSWORD)
            throw new IOException("This private key is password protected, which isn't supported yet");
        throw e;
    }
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
private KeyPair stringToKeyPair(String keyPairString) throws IOException {
	StringReader stringReader = new StringReader(keyPairString);
	PEMReader pemReader = new PEMReader(stringReader);
	Object obj = pemReader.readObject();
	if (obj instanceof KeyPair) {
		return (KeyPair) obj;
	} else {
		throw new IOException(
				"Reader did not produce a key pair but an object of type "
						+ obj.getClass().getName());
	}
}
 

import org.bouncycastle.openssl.PEMReader; //导入方法依赖的package包/类
/**
 * Decodes the given certificate from PEM format.
 *
 * @param pemCert
 *            PEM-encoded certificate text to decode.
 *
 * @return Certificate.
 *
 * @throws IOException
 *             On decoding error.
 */
@SuppressWarnings("resource")
public static Certificate decodeCert(final String pemCert)
		throws IOException {
	final PEMReader reader = new PEMReader(new StringReader(pemCert));
	final Certificate cert = (Certificate) reader.readObject();
	if (cert != null) {
		return cert;
	} else {
		throw new IOException("Error decoding certificate.");
	}
}