cn.tdchain.tdmsp.util

类 PkiUtil

java.lang.Object

cn.tdchain.tdmsp.util.PkiUtil

public final class PkiUtil
extends Object

Utility.

版本:

2.0

作者:

Houmj 2018-09-18

方法概要

限定符和类型	方法和说明
static org.bouncycastle.pkcs.PKCS10CertificationRequest	generateEccEncryptEnrollCARequest(KeyPair keyPair, String country, String company, String name)
static KeyPair	generateEccKeyPair() Generate ECC key pair.
static KeyPair	generateEcEncryptKeyPair() Create encryption key pair.
static org.bouncycastle.pkcs.PKCS10CertificationRequest	generateEnrollRequest(KeyPair keyPair, String algorithm, String name, String company, String country) Create E-cert request.
static KeyPair	generateRsaKeyPair() Create a random 1024 bit RSA key pair.
static KeyPair	generateSm2KeyPair() Generate SM2 keys.
static X509Certificate	getCertFromCer(String filePath)
static byte[]	getEncodedHolder(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo subPubKeyInfo, org.bouncycastle.asn1.x500.X500Name x500Name, int validTime, org.bouncycastle.asn1.x500.X500Name subject, PrivateKey privateKey, String algorithm, PublicKey rootPublickey) Get encoded X509CertificateHolder.
static KeyStore	getKeyStore(String filePath, String ksPassword, String keyStoreType) Get enroll keystore.
static org.bouncycastle.asn1.x500.X500Name	getNameBuilder(String name, String company, String country) Get X500Name.
static org.bouncycastle.asn1.x500.X500Name	getOuNameBuilder(String name, String company, String country)
static byte[]	getRootEncodedHolder(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo subPubKeyInfo, org.bouncycastle.asn1.x500.X500Name x500Name, int validTime, org.bouncycastle.asn1.x500.X500Name subject, PrivateKey privateKey, String algorithm)
static org.bouncycastle.operator.ContentSigner	getSigner(PrivateKey privateKey, String algorithm) Create signer.
static void	saveCertToFile(String fileName, X509Certificate cert)
static void	saveCertToKeystore(SystemConfig param, PrivateKey privateKey, String keyStoreType)
static void	saveRootToKeystore(SystemConfig param, PrivateKey privateKey, String keyStoreType) Save cert to key store.

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

方法详细资料

generateRsaKeyPair

public static KeyPair generateRsaKeyPair()
                                  throws NoSuchAlgorithmException,
                                         NoSuchProviderException

Create a random 1024 bit RSA key pair.

返回:

keypair

抛出:

NoSuchProviderException - exception

NoSuchAlgorithmException - exception

generateSm2KeyPair

public static KeyPair generateSm2KeyPair()
                                  throws Exception

Generate SM2 keys.

返回:

KeyPair

抛出:

Exception - NoSuchAlgorithmException, NoSuchProviderException, InvalidAlgorithmParameterException

generateEccKeyPair

public static KeyPair generateEccKeyPair()
                                  throws InvalidAlgorithmParameterException,
                                         NoSuchAlgorithmException,
                                         NoSuchProviderException

Generate ECC key pair.

Private keypairs are encoded using PKCS8 Private keys are encoded using X.509

返回:

ECC KeyPair

抛出:

InvalidAlgorithmParameterException - This is the exception for invalid or inappropriate algorithm parameters.

NoSuchAlgorithmException - This exception is thrown when a particular cryptographic algorithm is requested but is not available in the environment.

NoSuchProviderException - This exception is thrown when a particular security provider is requested but is not available in the environment.

generateEcEncryptKeyPair

public static KeyPair generateEcEncryptKeyPair()
                                        throws NoSuchAlgorithmException,
                                               NoSuchProviderException,
                                               InvalidAlgorithmParameterException

Create encryption key pair.

返回:

KeyPair

抛出:

NoSuchAlgorithmException

NoSuchProviderException

InvalidAlgorithmParameterException

getNameBuilder

public static org.bouncycastle.asn1.x500.X500Name getNameBuilder(String name,
                                                                 String company,
                                                                 String country)

Get X500Name.

参数:

name - user full name

company - String

country - String

返回:

X500Name

getOuNameBuilder

public static org.bouncycastle.asn1.x500.X500Name getOuNameBuilder(String name,
                                                                   String company,
                                                                   String country)

getRootEncodedHolder

public static byte[] getRootEncodedHolder(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo subPubKeyInfo,
                                          org.bouncycastle.asn1.x500.X500Name x500Name,
                                          int validTime,
                                          org.bouncycastle.asn1.x500.X500Name subject,
                                          PrivateKey privateKey,
                                          String algorithm)
                                   throws Exception

抛出:

Exception

getEncodedHolder

public static byte[] getEncodedHolder(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo subPubKeyInfo,
                                      org.bouncycastle.asn1.x500.X500Name x500Name,
                                      int validTime,
                                      org.bouncycastle.asn1.x500.X500Name subject,
                                      PrivateKey privateKey,
                                      String algorithm,
                                      PublicKey rootPublickey)
                               throws Exception

Get encoded X509CertificateHolder.

参数:

subPubKeyInfo -

x500Name -

validTime -

subject -

privateKey -

algorithm -

rootPublickey -

返回:

byte[]

抛出:

Exception

generateEnrollRequest

public static org.bouncycastle.pkcs.PKCS10CertificationRequest generateEnrollRequest(KeyPair keyPair,
                                                                                     String algorithm,
                                                                                     String name,
                                                                                     String company,
                                                                                     String country)
                                                                              throws Exception

Create E-cert request.

参数:

keyPair - KeyPair

algorithm - SHA256withRSA/SHA256withECDSA/SM3withSM2

name - user full name

company - user company

country - user country

返回:

PKCS10CertificationRequest

抛出:

Exception - exception

generateEccEncryptEnrollCARequest

public static org.bouncycastle.pkcs.PKCS10CertificationRequest generateEccEncryptEnrollCARequest(KeyPair keyPair,
                                                                                                 String country,
                                                                                                 String company,
                                                                                                 String name)
                                                                                          throws Exception

抛出:

Exception

getSigner

public static org.bouncycastle.operator.ContentSigner getSigner(PrivateKey privateKey,
                                                                String algorithm)
                                                         throws org.bouncycastle.operator.OperatorCreationException

Create signer.

参数:

privateKey - PrivateKey

algorithm - SHA256withRSA/SHA256withECDSA/SM3withSM2

返回:

ContentSigner

抛出:

org.bouncycastle.operator.OperatorCreationException - OperatorCreationException

saveRootToKeystore

public static void saveRootToKeystore(SystemConfig param,
                                      PrivateKey privateKey,
                                      String keyStoreType)
                               throws Exception

Save cert to key store.

参数:

param - KeyStoreParam

privateKey - private key

keyStoreType - key store type: JCELS, PKCS12

抛出:

Exception - exception

saveCertToKeystore

public static void saveCertToKeystore(SystemConfig param,
                                      PrivateKey privateKey,
                                      String keyStoreType)
                               throws Exception

抛出:

Exception

getKeyStore

public static KeyStore getKeyStore(String filePath,
                                   String ksPassword,
                                   String keyStoreType)
                            throws Exception

Get enroll keystore.

参数:

filePath -

ksPassword -

keyStoreType -

返回:

KeyStore

抛出:

Exception

saveCertToFile

public static void saveCertToFile(String fileName,
                                  X509Certificate cert)

getCertFromCer

public static X509Certificate getCertFromCer(String filePath)