Java程序实现密钥库的维护(二)
KeyEntry( )方法将私钥和证书一起写入密钥库，并使用store( )方法保存为文件即可。
import java.io.*;
import java.security.*;
import java.security.cert.*;
/*
* CA证书，已经签名的用户数字证书，用户密钥库名和密码以及相应证书的私钥名称，新生成的证书名称和密钥库名以及密码
*/
public class ImportCert{
public static void main(String args[ ]) throws Exception{
//参数
String cacert="new.cer";
String lfcert="hqy.cer";
String lfstore="mykeystore";
char[] lfstorepass="080302".toCharArray( );
char[] lfkeypass="080302".toCharArray( );
//CA的证书
CertificateFactory cf=CertificateFactory.getInstance("X.509");
FileInputStream in1=new FileInputStream(cacert);
java.security.cert.Certificate cac=cf.generateCertificate(in1);
//用户的签名证书
FileInputStream in2=new FileInputStream(lfcert);
java.security.cert.Certificate lfc=cf.generateCertificate(in2);
in2.close();
//证书链
java.security.cert.Certificate[] cchain={lfc,cac};
//用户的密钥库
FileInputStream in3=new FileInputStream(lfstore);
KeyStore ks=KeyStore.getInstance("JKS");
ks.load(in3,lfstorepass);
PrivateKey prk=(PrivateKey)ks.getKey("new",lfkeypass);
//导入证书
ks.setKeyEntry("new_signed",prk,lfstorepass,cchain);
//保存密钥库
FileOutputStream out4=new FileOutputStream("nostore");
ks.store(out4,"080302".toCharArray());
out4.close();
}
}