在不使用bouncycastle的情况下将PrivateKey转换为pem字符串

编程入门行业动态更新时间:2024-10-28 08:25:14

本文介绍了在不使用bouncycastle的情况下将PrivateKey转换为pem字符串的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！问题描述

我正尝试在不使用bouncycastle的情况下将PrivateKey对象转换为pem格式的字符串. 以前我是这样的:

I'm trying to convert a PrivateKey object to pem format string without using bouncycastle. previously I was doing it like this:

StringWriter str = new StringWriter(); PEMWriter pemWriter = new PEMWriter(str); pemWriter.writeObject(privKey); pemWriter.close(); str.close(); return str.toString().getBytes();

现在，我不想使用bouncycastle.如果我使用

Now I don't want to use bouncycastle. If I use

String code = "-----BEGIN RSA PRIVATE KEY-----\n"; String codenew =Base64.encodeBase64String(privKey.getEncoded()); String myOutput = ""; for (String substring : Splitter.fixedLength(64).split(codenew)) { myOutput += substring + "\n"; } code += myOutput.substring(0, myOutput.length() - 1); code += "\n-----END RSA PRIVATE KEY-----"; return code.getBytes();

上面的代码可以工作，我可以通过传递此byte []来使用openssl进行解密. 现在，我的问题是，如果我要为以上两段代码打印pem字符串值，则它们是不同的. 如果我使用下面的openssl命令

The code above works and I'm able to decrypt using openssl by passing this byte[]. Now, my problem is, if I'm printing the pem string value for the above two piece of code, they are different. If I'm using the below openssl command

$ openssl pkcs12-输入接收器.p12-输出接收器.pem-节点

$ openssl pkcs12 -in receiver.p12 -out receiver.pem -nodes

生成的pem字符串与PEMWriter的pem字符串相同，但与另一个不相同.我想知道我是否可以对代码进行一些修改，以使打印时的字符串与openssl命令或PEMWriter生成的字符串匹配.

the pem string thats generated is same as PEMWriter's pem string but not the other one. I wanted to know can I modify my code a bit so that the string when printed, matches the one thats generated by openssl command or PEMWriter.

openssl/PEMWriter生成的Pem:

pem generated by openssl/PEMWriter:

不使用BC时生成的Pem:

pem generated when not using BC:

来自BouncyCastle的

推荐答案

PEMWriter类以PKCS#1格式存储私钥(有关更多详细信息，请参见在 RFC 3447 ):

PEMWriter class from BouncyCastle stores private key in PKCS#1 format (for more details please see RsaPrivateKey stucture defined in RFC 3447):

您的代码以PKCS#8格式存储私钥(有关更多详细信息，请参阅 RFC 5208 ):

Your code stores private key in PKCS#8 format (for more details please see PrivateKeyInfo structure defined in RFC 5208):

PKCS#1定义了如何存储RSA密钥，而PKCS#8定义了可以存储任何非对称密钥对的信封.如您在所附图片PKCS#8上看到的那样，只需封装PKCS#1并指定该密钥可用于RSA算法.

PKCS#1 defines how to store RSA keys while PKCS#8 defines an envelope that can store any asymmetric key pair. As you can see on the attached pictures PKCS#8 just envelopes PKCS#1 and specifies that key is usable with RSA algorithm.

更多推荐

在不使用bouncycastle的情况下将PrivateKey转换为pem字符串

本文发布于:2023-10-25 22:34:28，感谢您对本站的认可！

本文链接:https://www.elefans.com/category/jswz/34/1528311.html