Java - 生成keystore

有个需求，说要在生成PDF文件时加上signature。
操作PDF容易,用:

<dependency>    <groupId>com.itextpdf</groupId>    <artifactId>itextpdf</artifactId>    <version>5.1.3</version></dependency>

 

加个signature可以用这个方法:

public static PdfStamper createSignature(final PdfReader reader, final OutputStream os, final char pdfVersion){..}

 

然后我用PdfStamper对象.getSignatureAppearance()获得一个PdfSignatureAppearance再给他setCrypto...

    /**     * Sets the cryptographic parameters.     * @param privKey the private key     * @param certChain the certificate chain     * @param crlList the certificate revocation list. It may be <CODE>null</CODE>     * @param filter the cryptographic filter type. It can be SELF_SIGNED, VERISIGN_SIGNED or WINCER_SIGNED     */    public void setCrypto(PrivateKey privKey, Certificate[] certChain, CRL[] crlList, PdfName filter) {        this.privKey = privKey;        this.certChain = certChain;        this.crlList = crlList;        this.filter = filter;    }

 

参数列表的前两个东西我需要从KeyStore中得到....
KeyStore...java.security.KeyStore...

String mypassword = "hehe";KeyStore ks_ = KeyStore.getInstance("JKS");ks_.store(new FileOutputStream("papa.keystore"),mypassword.toCharArray());

但是却提示:
Exception in thread "main" java.security.KeyStoreException: Uninitialized keystore

那怎么才算initialized?

if (!initialized) {    throw new KeyStoreException("Uninitialized keystore");}

 

我们需要一个文件!

public final void load(InputStream stream, char[] password) throws IOException,NoSuchAlgorithmException, CertificateException {    keyStoreSpi.engineLoad(stream, password);    initialized = true;}

 

在此记录一下windows下生成keystore文件的方法...
先到我的JDK的bin目录下找keytool
输入keytool -genkey -alias hehe.keystore -keystore hehe.keystore,然后按提示走:

 

按提示再输入两次口令后发现生成了一个.keystore，可以拿来用了。

String PASSWORD = "papa";KeyStore ks = KeyStore.getInstance("jks");ks.load(new FileInputStream("hehe.keystore"), PASSWORD.toCharArray());String alias = (String)ks.aliases().nextElement();PrivateKey key = (PrivateKey)ks.getKey(alias, PASSWORD.toCharArray());Certificate[] chain = ks.getCertificateChain(alias);