用Java的Bouncy Castle自签名的X509证书

  • Z时代
  • 2024-01-10
  • 分类：问答

我需要使用Java的Bouncy Castle创建一个自签名的X509证书，但是我尝试包含的每个类均已弃用。我该如何解决？还有其他课程吗？谢谢

回答：

使用BouncyCastle的最新版本- 1.55 1.66

通过@Bewusstsein更新答案。截至此答案（5/11/2017），最新版本不推荐使用bouncycastle类。如果您使用的是1.55或更高版本：

public static Certificate selfSign(KeyPair keyPair, String subjectDN) throws OperatorCreationException, CertificateException, IOException
{
    Provider bcProvider = new BouncyCastleProvider();
    Security.addProvider(bcProvider);
    long now = System.currentTimeMillis();
    Date startDate = new Date(now);
    X500Name dnName = new X500Name(subjectDN);
    BigInteger certSerialNumber = new BigInteger(Long.toString(now)); // <-- Using the current timestamp as the certificate serial number
    Calendar calendar = Calendar.getInstance();
    calendar.setTime(startDate);
    calendar.add(Calendar.YEAR, 1); // <-- 1 Yr validity
    Date endDate = calendar.getTime();
    String signatureAlgorithm = "SHA256WithRSA"; // <-- Use appropriate signature algorithm based on your keyPair algorithm.
    ContentSigner contentSigner = new JcaContentSignerBuilder(signatureAlgorithm).build(keyPair.getPrivate());
    JcaX509v3CertificateBuilder certBuilder = new JcaX509v3CertificateBuilder(dnName, certSerialNumber, startDate, endDate, dnName, keyPair.getPublic());
    // Extensions --------------------------
    // Basic Constraints
    BasicConstraints basicConstraints = new BasicConstraints(true); // <-- true for CA, false for EndEntity
    certBuilder.addExtension(new ASN1ObjectIdentifier("2.5.29.19"), true, basicConstraints); // Basic Constraints is usually marked as critical.
    // -------------------------------------
    return new JcaX509CertificateConverter().setProvider(bcProvider).getCertificate(certBuilder.build(contentSigner));
}

以上是 用Java的Bouncy Castle自签名的X509证书 的全部内容， 来源链接： utcz.com/qa/410860.html

回到顶部