讀取Cert格式證書的密鑰

 

不想存儲Cert證書內容，只想存儲證書密鑰，可通過以下2種方式實現

 

一、通過java讀取證書的密鑰出來： 

package com.zat.ucop.service.util;

import sun.misc.BASE64Encoder;

import java.io.FileInputStream;
import java.security.PublicKey;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;

/**
 * 讀取cert格式證書的密鑰.
 *
 * @author weixiong.cao
 * @date 2019/4/3
 */
public class ReadCerDemo {
    public static void main(String[] args) throws Exception {
        String keyStorePath = "E:/mpay公鑰/client_02.cer";

        CertificateFactory cf = CertificateFactory.getInstance("X.509");
        X509Certificate cert = (X509Certificate) cf.generateCertificate(new FileInputStream(keyStorePath));
        PublicKey publicKey = cert.getPublicKey();
        BASE64Encoder base64Encoder = new BASE64Encoder();
        String publicKeyString = base64Encoder.encode(publicKey.getEncoded());
        System.out.println("-----------------公鑰--------------------");
        System.out.println(publicKeyString);
        System.out.println("-----------------公鑰--------------------");
    }
}

 

二、通過openssl命令讀取

進入linux控制臺，輸入以下命令：

openssl x509 -in ./client_02.cer -pubkey -noout > ./mpayPubKey.pubkey

以上命令會將證書內容生成到一個 mpayPubKey.pubkey 文件，文件內容如下：