cn.ponfee.commons.jce.security

类 KeyStoreResolver

java.lang.Object

cn.ponfee.commons.jce.security.KeyStoreResolver

public class KeyStoreResolver
extends Object

密钥库解析类

作者:

Ponfee

嵌套类概要

嵌套类

限定符和类型	类和说明
static class	KeyStoreResolver.KeyStoreType

构造器概要

构造器

构造器和说明
KeyStoreResolver(KeyStoreResolver.KeyStoreType type)
KeyStoreResolver(KeyStoreResolver.KeyStoreType type, byte[] keyStore, String storePassword)
KeyStoreResolver(KeyStoreResolver.KeyStoreType type, InputStream input, String storePassword) 创建密钥库
KeyStoreResolver(KeyStoreResolver.KeyStoreType type, String storePassword)

方法概要

限定符和类型	方法和说明
void	delAlias(String alias)
void	export(OutputStream out, String storePassword) 导出密钥库
byte[]	export(String storePassword)
Certificate	getCertificate()
Certificate	getCertificate(String alias) 获取证书
String	getFirstAlias()
KeyStore	getKeyStore()
PrivateKey	getPrivateKey(String keyPassword)
PrivateKey	getPrivateKey(String alias, String keyPassword) 获取私钥
SSLContext	getSSLContext(String keyPassword)
SSLContext	getSSLContext(String keyPassword, KeyStore trustStore) 获取SSLContext
X509Certificate[]	getX509CertChain()
X509Certificate[]	getX509CertChain(String alias) 获取证书链
List<String>	listAlias() 枚举密钥库条目
static KeyStoreResolver	loadFromPem(String pem)
void	setCertificateEntry(String alias, Certificate cert) 添加证书
void	setKeyEntry(String alias, byte[] encryptedPkcs8Key, Certificate[] chain) set key entry
void	setKeyEntry(String alias, PrivateKey key, String keyPassword, Certificate[] chain) 设置私钥

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

KeyStoreResolver

public KeyStoreResolver(KeyStoreResolver.KeyStoreType type)

KeyStoreResolver

public KeyStoreResolver(KeyStoreResolver.KeyStoreType type,
                        String storePassword)

KeyStoreResolver

public KeyStoreResolver(KeyStoreResolver.KeyStoreType type,
                        byte[] keyStore,
                        String storePassword)

KeyStoreResolver

public KeyStoreResolver(KeyStoreResolver.KeyStoreType type,
                        InputStream input,
                        String storePassword)

创建密钥库

参数:

type - 密钥库类型

input - 密钥库输入流数据

storePassword - 用于解锁密钥库

方法详细资料

setCertificateEntry

public void setCertificateEntry(String alias,
                                Certificate cert)

添加证书

参数:

alias - 别名

cert - 证书

setKeyEntry

public final void setKeyEntry(String alias,
                              PrivateKey key,
                              String keyPassword,
                              Certificate[] chain)

设置私钥

参数:

alias - 别名

key - 私钥

keyPassword - 私钥加锁密码

chain -

setKeyEntry

public final void setKeyEntry(String alias,
                              byte[] encryptedPkcs8Key,
                              Certificate[] chain)

set key entry

参数:

alias -

encryptedPkcs8Key -

chain -

另请参阅:

RSAPrivateKeys.toEncryptedPkcs8(java.security.interfaces.RSAPrivateKey, String)

export

public byte[] export(String storePassword)

export

public void export(OutputStream out,
                   String storePassword)

导出密钥库

参数:

out - 目标输出流

storePassword - 设置要导出密钥库的密码

listAlias

public List<String> listAlias()

枚举密钥库条目

返回:

delAlias

public void delAlias(String alias)

getFirstAlias

public String getFirstAlias()

getCertificate

public Certificate getCertificate()

getCertificate

public Certificate getCertificate(String alias)

获取证书

参数:

alias -

返回:

getPrivateKey

public PrivateKey getPrivateKey(String keyPassword)

getPrivateKey

public PrivateKey getPrivateKey(String alias,
                                String keyPassword)

获取私钥

参数:

alias - 别名

keyPassword - the password for recovering the PrivateKey

返回:

getX509CertChain

public X509Certificate[] getX509CertChain()

getX509CertChain

public X509Certificate[] getX509CertChain(String alias)

获取证书链

参数:

alias -

返回:

getSSLContext

public SSLContext getSSLContext(String keyPassword)

getSSLContext

public SSLContext getSSLContext(String keyPassword,
                                KeyStore trustStore)

获取SSLContext

参数:

keyPassword - the password for recovering the PrivateKey

trustStore - 受信任的证书库

返回:

getKeyStore

public KeyStore getKeyStore()

loadFromPem

public static KeyStoreResolver loadFromPem(String pem)