Examples with ServerPKCSUtil com.liumapp.digitalsign.test.ca.tianwei.utils.ServerPKCSUtil used on opensource projects

Example 1 with ServerPKCSUtil

use of com.liumapp.digitalsign.test.ca.tianwei.utils.ServerPKCSUtil in project spring-cloud-digital-sign by SpringForAll.

the class Certificate method begin.

/**
 * 直接生成pfx证书文件
 * @return
 */
@RequestMapping("/")
public String begin() {
    /**
     * 服务端生成证书,并保存成Pfx文件格式 *
     */
    String userName = "测试公司";
    String userEmail = "test@szitrus.com.cn";
    /**
     * 扩展字段是针对证书做扩展，即在证书的属性内增加如下内容，详细请联系天威诚信技术做解答 *
     */
    String userAdditionalField1 = "测试公司";
    // String userAdditionalField2 = "";
    // String userAdditionalField3 = "";
    // String userAdditionalField4 = "";
    // String userAdditionalField5 = "";
    // String userAdditionalField6 = "";
    // String userAdditionalField7 = "";
    // String userAdditionalField8 = "";
    // String userAdditionalField9 = "";
    // String userAdditionalField10 = "";
    UserInfo userInfo = new UserInfo();
    // 证书名称
    userInfo.setUserName(userName);
    // 证书所有者Email
    userInfo.setUserEmail(userEmail);
    // 扩展字段1
    userInfo.setUserAdditionalField1(userAdditionalField1);
    // userInfo.setUserAdditionalField2(userAdditionalField2); // 扩展字段2
    // userInfo.setUserAdditionalField3(userAdditionalField3); // 扩展字段3
    // userInfo.setUserAdditionalField4(userAdditionalField4); // 扩展字段4
    // userInfo.setUserAdditionalField5(userAdditionalField5); // 扩展字段5
    // userInfo.setUserAdditionalField6(userAdditionalField6); // 扩展字段6
    // userInfo.setUserAdditionalField7(userAdditionalField7); // 扩展字段7
    // userInfo.setUserAdditionalField8(userAdditionalField8); // 扩展字段8
    // userInfo.setUserAdditionalField9(userAdditionalField9); // 扩展字段9
    // userInfo.setUserAdditionalField10(userAdditionalField10);// 扩展字段10
    /**
     * 产生CSR(证书请求 即 p10) *
     */
    ServerPKCSUtil serverPKCSUtil = new ServerPKCSUtil();
    String certReqBuf = serverPKCSUtil.genCsr("RSA");
    /**
     * 调用接口制作证书 *
     */
    String passCode = "";
    // 不设置证书有效期，默认读取services.properties的属性值
    Integer certValidity = 0;
    JSONObject jsonObject = new JSONObject();
    try {
        jsonObject = raService.enrollCertAA(userInfo, certReqBuf, passCode, certValidity);
        CertInfo certInfo = new CertInfo();
        if (jsonObject.get("certInfo") != null) {
            certInfo = (CertInfo) jsonObject.get("certInfo");
            System.out.println("证书base64" + certInfo.getCertSignBuf());
        }
        // 公钥证书
        String certSignBufP7 = certInfo.getCertSignBuf();
        // 证书密码
        String password = "password";
        System.out.println("当前申请的证书序列号是：[" + certInfo.getCertSerialNumber() + "]");
        /**
         * 数字证书转换为pkcs12 格式 *
         */
        String pkcs12Cert = serverPKCSUtil.genP12(password, certSignBufP7);
        System.out.println(pkcs12Cert);
        /**
         * 将pkcs12 格式证书写到pfx文件中 *
         */
        String pfxPath = savePath + certInfo.getCertSerialNumber() + ".pfx";
        FileOutputStream fileOutputStream = new FileOutputStream(new File(pfxPath));
        fileOutputStream.write(Base64.decode(pkcs12Cert));
        fileOutputStream.close();
    } catch (JSONException e) {
        e.printStackTrace();
    } catch (FileNotFoundException e) {
        e.printStackTrace();
    } catch (IOException e) {
        e.printStackTrace();
    }
    return "success";
}