java - 从 byte[] 生成 X509Certificate？

Question

是否有可能从 byte[] 生成 java.security.cert.X509Certificate？

Answer 1

当然。

证书对象可以由CertificateFactory的实例创建- 特别是配置为创建 X509 证书的实例。这可以像这样创建：

CertificateFactory certFactory = CertificateFactory.getInstance("X.509");

然后你需要向它传递一个包含证书字节的 InputStream。这可以通过将字节数组包装在ByteArrayInputStream中来实现：

InputStream in = new ByteArrayInputStream(bytes);
X509Certificate cert = (X509Certificate)certFactory.generateCertificate(in);

Answer 2

您可以执行以下操作：

X509Certificate certificate = signature.getKeyInfo().getX509Datas().get(0).getX509Certificates().get(0);

String lexicalXSDBase64Binary = certificate.getValue();
byte[] decoded = DatatypeConverter.parseBase64Binary(lexicalXSDBase64Binary);


CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
Certificate cert = certFactory.generateCertificate(new ByteArrayInputStream(decoded));

Answer 3

InputStream stream = null;
byte[] bencoded = javax.xml.bind.DatatypeConverter.parseBase64Binary(x509CertificateStr);

try {
    CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
    cert = (X509Certificate) certFactory.generateCertificate(stream);

} catch (java.security.cert.CertificateException e) {
    // TODO Auto-generated catch block
    e.printStackTrace();
}