cn.hutool.crypto

Class OpensslKeyUtil

java.lang.Object

cn.hutool.crypto.OpensslKeyUtil

public class OpensslKeyUtil
extends Object

基于bcpkix封装的Openssl相关工具，包括密钥转换、Pem密钥文件读取等
注意此工具需要引入org.bouncycastle:bcpkix-jdk15to18

Since:

5.8.5

Author:

changhr2013, looly

Constructor Summary

Constructors

Constructor and Description
OpensslKeyUtil()

Method Summary

Modifier and Type	Method and Description
static org.bouncycastle.openssl.PEMKeyPair	decrypt(org.bouncycastle.openssl.PEMEncryptedKeyPair pemEncryptedKeyPair, char[] password) 解密PEMEncryptedKeyPair为PEMKeyPair
static org.bouncycastle.asn1.pkcs.PrivateKeyInfo	decrypt(org.bouncycastle.pkcs.PKCS8EncryptedPrivateKeyInfo pkcs8Info, char[] password) 解密PKCS8EncryptedPrivateKeyInfo为PrivateKeyInfo
static KeyPair	getKeyPair(org.bouncycastle.openssl.PEMKeyPair keyPair) 转换PEMKeyPair为KeyPair
static PrivateKey	getPrivateKey(org.bouncycastle.asn1.pkcs.PrivateKeyInfo privateKeyInfo) 转换PrivateKeyInfo为PrivateKey
static PublicKey	getPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo) 转换SubjectPublicKeyInfo为PublicKey
static Key	readPemKey(InputStream keyStream, char[] password) 从pem文件中读取公钥或私钥 根据类型返回 PublicKey 或者 PrivateKey

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

OpensslKeyUtil

public OpensslKeyUtil()

Method Detail

getPrivateKey

public static PrivateKey getPrivateKey(org.bouncycastle.asn1.pkcs.PrivateKeyInfo privateKeyInfo)
                                throws CryptoException

转换PrivateKeyInfo为PrivateKey

Parameters:

privateKeyInfo - PrivateKeyInfo

Returns:

PrivateKey

Throws:

CryptoException - PEMException包装

getPublicKey

public static PublicKey getPublicKey(org.bouncycastle.asn1.x509.SubjectPublicKeyInfo publicKeyInfo)
                              throws CryptoException

转换SubjectPublicKeyInfo为PublicKey

Parameters:

publicKeyInfo - SubjectPublicKeyInfo

Returns:

PublicKey

Throws:

CryptoException - PEMException包装

getKeyPair

public static KeyPair getKeyPair(org.bouncycastle.openssl.PEMKeyPair keyPair)
                          throws CryptoException

转换PEMKeyPair为KeyPair

Parameters:

keyPair - PEMKeyPair

Returns:

KeyPair

Throws:

CryptoException - PEMException包装

readPemKey

public static Key readPemKey(InputStream keyStream,
                             char[] password)

从pem文件中读取公钥或私钥
根据类型返回 PublicKey 或者 PrivateKey

Parameters:

keyStream - pem 流

password - 私钥密码

Returns:

Key，null 表示无法识别的密钥类型

Since:

5.8.5

decrypt

public static org.bouncycastle.asn1.pkcs.PrivateKeyInfo decrypt(org.bouncycastle.pkcs.PKCS8EncryptedPrivateKeyInfo pkcs8Info,
                                                                char[] password)
                                                         throws CryptoException

解密PKCS8EncryptedPrivateKeyInfo为PrivateKeyInfo

Parameters:

pkcs8Info - PKCS8EncryptedPrivateKeyInfo

password - 密码

Returns:

PrivateKeyInfo

Throws:

CryptoException - OperatorCreationException和PKCSException包装

decrypt

public static org.bouncycastle.openssl.PEMKeyPair decrypt(org.bouncycastle.openssl.PEMEncryptedKeyPair pemEncryptedKeyPair,
                                                          char[] password)
                                                   throws IORuntimeException

解密PEMEncryptedKeyPair为PEMKeyPair

Parameters:

pemEncryptedKeyPair - PKCS8EncryptedPrivateKeyInfo

password - 密码

Returns:

PEMKeyPair

Throws:

IORuntimeException - IOException包装