Question

我使用bccyv-jdk15on-147罐子使用BouncyCastle API生成CSR。

CertificationRequestInfo certInfo = new CertificationRequestInfo(subject, subKeyInfo, new DERSet(attribute));
org.bouncycastle.operator.ContentSigner sigGen = null;
sigGen = new JcaContentSignerBuilder("SHA1withRSA").setProvider("BC").build(privateKey);
org.bouncycastle.asn1.pkcs.CertificationRequest ctest = new org.bouncycastle.asn1.pkcs.CertificationRequest(certInfo,sigAlgName,new DERBitString(sigGen.getSignature()));

我将这个obejct传递给我的调用函数：

GenerateCSR gcsr = GenerateCSR.getInstance();
System.out.println("Public Key:\n"+gcsr.getPublicKey().toString());

System.out.println("Private Key:\n"+gcsr.getPrivateKey().toString());
org.bouncycastle.asn1.pkcs.CertificationRequest  csr = gcsr.getCSR("IMO");
System.out.println("CSR Request Generated!!");
FileWriter fcsr = new FileWriter("C:\\test.txt");
PEMWriter w1 = new PEMWriter(fcsr);
w1.writeObject(csr);

但我得到以下例外：

Exception in thread "main" org.bouncycastle.util.io.pem.PemGenerationException: unknown object passed - can't encode.
    at org.bouncycastle.openssl.MiscPEMGenerator.createPemObject(Unknown Source)"

Answer 1

更好的解决方案是使用PemObject。

    String type = "CERTIFICATE REQUEST";
    byte[] encoding = pkcs10.getEncoded();

    PemObject pemObject = new PemObject(type, encoding);

    StringWriter str = new StringWriter();
    PEMWriter pemWriter = new PEMWriter(str);
    pemWriter.writeObject(pemObject);
    pemWriter.close();
    str.close();

    System.out.println(str);

Answer 2

我最终像这样用手创建了pem对象..

    String code = "-----BEGIN CERTIFICATE REQUEST-----\n";
    code += new String(Base64.encodeBase64Chunked(request.getEncoded()));
    code += "-----END CERTIFICATE REQUEST-----";
    System.out.println(code);

我猜这是PemWriter无法输出CertificationRequest对象的错误，因为它看起来像BouncyCastle v1.47还充满了其他错误。

无法使用PEM文件格式的org.bouncycastle.asn1.pkcs.CertificationRequest编写CSR

2 个答案: