pki java相关代码参考

keytool -genkey -dname "CN=demo, OU=softDept, O=company,
L=puddong,S=shanghai, C=cn" -alias demo -keyalg RSA -keysize 1024
-keystore demoKeystore -validity 3650 -storepass storePwd -keypass
demoPwd
生成保存公钥和私钥的密钥仓库，保存在demoKeystore文件中。这里storepass 和 keypass
不要有java 正则表达式中的特殊字符，否则程序里要转义麻烦。
keytool -export -alias demo -keystore demoKeystore -rfc -file
demo.cer //从密钥仓库中导出保存公钥的证书
输入keypass 即demoPwd 
  try{     
   //
密钥仓库
   KeyStore ks = KeyStore.getInstance("JKS");
//读取密钥仓库
   FileInputStream
ksfis = new FileInputStream("demoKeystore");
   BufferedInputStream
ksbufin = new BufferedInputStream(ksfis);
   char[] storePwd =
"storePwd".toCharArray();
   ks.load(ksbufin, storePwd);
   ksbufin.close();
   char[]
keyPwd = "demoPwd".toCharArray();
//从密钥仓库得到私钥
   PrivateKey priK =
(PrivateKey) ks.getKey("demo", keyPwd);  
//生成cipher
   Cipher
cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding",new
org.bouncycastle.jce.provider.BouncyCastleProvider());
//用私钥初始化cipher
   cipher.init(Cipher.ENCRYPT_MODE,
priK);
   byte[] plain = "This is plain text".getBytes("UTF-8");
   
   //
因为用的1024位rsa算法，一次只能加密1024/8-11字节数据，分开加密
   byte[] code = new
byte[(((plain.length-1)/117+1))*128];  
            int ixplain = 0;
           
int ixcode = 0;
            while((plain.len