Java如何基于command調(diào)用openssl生成私鑰證書
在windows環(huán)境下進(jìn)行的測(cè)試,前提條件,windows上需要先安裝openssl。
配置環(huán)境變量,查看版本:
import java.io.*;import java.util.Properties;public class OpensslCommand { private static void runCMD(String[] CMD) { java.lang.Process process = null; try { process = Runtime.getRuntime().exec(CMD); ByteArrayOutputStream resultOutStream = new ByteArrayOutputStream(); InputStream errorInStream = new BufferedInputStream(process.getErrorStream()); InputStream processInStream = new BufferedInputStream(process.getInputStream()); int num = 0; byte[] bs = new byte[1024]; while ((num = errorInStream.read(bs)) != -1) {resultOutStream.write(bs, 0, num); } while ((num = processInStream.read(bs)) != -1) {resultOutStream.write(bs, 0, num); } String result = new String(resultOutStream.toByteArray(), 'gbk'); System.out.println(result); errorInStream.close(); processInStream.close(); resultOutStream.close(); } catch (IOException e) { e.printStackTrace(); } finally { if (process != null) process.destroy(); } } public static void main(String[] args) throws Exception { //需要指定openssl.exe路徑 //java生成私鑰 String[] cmdPrivateKey = {'cmd', '/C', 'C:softOpenSSL-Win64binopenssl.exe genrsa -out ca.key 2048'}; //java生成證書請(qǐng)求 String[] cmdCertificationReq = {'cmd', '/C', 'C:softOpenSSL-Win64binopenssl.exe req -new -key ca.key -out ca.csr -subj /C=CN'}; //java生成證書 String[] cmdCertification = {'cmd', '/C', 'C:softOpenSSL-Win64binopenssl.exe x509 -req -days 365 -in ca.csr -signkey ca.key -out ca.crt'}; runCMD(cmdPrivateKey); runCMD(cmdCertificationReq); runCMD(cmdCertification); Properties props=System.getProperties(); //系統(tǒng)屬性 System.out.println('用戶的當(dāng)前工作目錄:'+props.getProperty('user.dir')); }}
對(duì)應(yīng)目錄下可以生成:
其中,ca.crt是自簽名證書文件。ca.key是私鑰。ca.csr只是生成證書的中間請(qǐng)求,是用來指定一些信息,這邊只指定國(guó)家為CN。
以上就是本文的全部?jī)?nèi)容,希望對(duì)大家的學(xué)習(xí)有所幫助,也希望大家多多支持好吧啦網(wǎng)。
相關(guān)文章:
