利用java代码生成keyStore

在前面的章节中介绍了如何利用KeyTool工具生成keyStore：传送门。

但是很多时候，在javaWeb项目中，比如给每个用户加上独特的数字签名，那么我们需要在创建用户的时候，给其生成独一无二的keystore。我现在主要的功能是，给每个用户下载pdf的时候加上数字签名。

下面说一下生成keystore的主要思想：借助keyTool中的生成keyStore的方法。主要利用sun.security.tools.keytool包文件来处理。

import java.io.FileOutputStream;
import java.io.IOException;
import java.security.GeneralSecurityException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Date;

import sun.security.tools.keytool.CertAndKeyGen;
import sun.security.x509.X500Name;

/**
 * 主要用于创建keyStore文件，保存起来
 *
 * @author Xia
 *
 */
public class KeyStoreCreate2 {
    public static String filePath = "src/main/resources/pdf0090createEncrypt/new_KeyStore.keystore";
    private static final int keysize = 1024;
    private static final String commonName = "www.ctbri.com";
    private static final String organizationalUnit = "IT";
    private static final String organization = "test";
    private static final String city = "beijing";
    private static final String state = "beijing";
    private static final String country = "beijing";
    private static final long validity = 1096; // 3 years
    private static final String alias = "tomcat";
    private static final char[] keyPassword = "123456".toCharArray();

    public static void main(String[] args) throws GeneralSecurityException {
        try {

            KeyStore ks = KeyStore.getInstance("pkcs12");
//            char[] password = "123456".toCharArray();
            ks.load(null, null);

            CertAndKeyGen keypair = new CertAndKeyGen("RSA", "SHA1WithRSA", null);
            X500Name x500Name = new X500Name(commonName, organizationalUnit, organization, city, state, country);
            keypair.generate(keysize);

            PrivateKey privateKey = keypair.getPrivateKey();
            X509Certificate[] chain = new X509Certificate[1];
            chain[0] = keypair.getSelfCertificate(x500Name, new Date(), (long)validity*24*60*60);

            // store away the key store
            FileOutputStream fos = new FileOutputStream(filePath);
            ks.setKeyEntry(alias, privateKey, keyPassword, chain);
            ks.store(fos, keyPassword);
            fos.close();
            System.out.println("create Success");
        } catch (KeyStoreException e) {
            e.printStackTrace();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (CertificateException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        }
    }

}