Question

我正在尝试为我的资源文件夹中的WS-security加载证书，证书在我的JAR中正确打包。但是当我尝试加载它时，我收到了FileNotFoundException。

我无法将证书放在JAR之外..

Caused by: org.apache.ws.security.components.crypto.CredentialException: Proxy file (vfs:/C:/Users/myuser/Redhat/jboss-eap-6.4/bin/content/myapp.ear/myapp.jar/CERT.PFX) not found.
    at org.apache.ws.security.components.crypto.Merlin.loadInputStream(Merlin.java:338) [wss4j-1.6.19.redhat-2.jar:1.6.19.redhat-2]
    at org.apache.ws.security.components.crypto.Merlin.loadProperties(Merlin.java:180) [wss4j-1.6.19.redhat-2.jar:1.6.19.redhat-2]
    at org.apache.ws.security.components.crypto.Merlin.<init>(Merlin.java:141) [wss4j-1.6.19.redhat-2.jar:1.6.19.redhat-2]
    at org.apache.ws.security.components.crypto.CryptoFactory.getInstance(CryptoFactory.java:117) [wss4j-1.6.19.redhat-2.jar:1.6.19.redhat-2]
    ... 71 more

Caused by: java.io.FileNotFoundException: vfs:/C:/Users/myuser/Redhat/jboss-eap-6.4/bin/content/myapp.ear/myapp.jar/CERT.PFX (The filename, directory name, or volume label syntax is incorrect)
    at java.io.FileInputStream.open0(Native Method) [rt.jar:1.8.0_102]
    at java.io.FileInputStream.open(FileInputStream.java:195) [rt.jar:1.8.0_102]
    at java.io.FileInputStream.<init>(FileInputStream.java:138) [rt.jar:1.8.0_102]
    at java.io.FileInputStream.<init>(FileInputStream.java:93) [rt.jar:1.8.0_102]
    at org.apache.ws.security.components.crypto.Merlin.loadInputStream(Merlin.java:333) [wss4j-1.6.19.redhat-2.jar:1.6.19.redhat-2]
    ... 74 more

Properties props = new Properties();
props.put("org.apache.ws.security.crypto.provider", "org.apache.ws.security.components.crypto.Merlin");
props.put("org.apache.ws.security.crypto.merlin.keystore.type", "PKCS12");
props.put("org.apache.ws.security.crypto.merlin.keystore.password", "passxxxx");
props.put("org.apache.ws.security.crypto.merlin.keystore.file", getClass().getResource("/CERT.PFX"));
props.put("org.apache.ws.security.crypto.merlin.keystore.alias", "aliasxxxx");

Map<String,Object> ctx = ((BindingProvider) iauthService).getRequestContext();

ctx.put("ws-security.signature.properties", props);

Answer 1

因此，您无法使用FileInputStream来读取JAR中打包的文件 - 它不再是文件。 FileInputStream仅适用于实际的磁盘文件。

我最终从证书流创建了一个临时文件。（How to convert InputStream to virtual File）

然后将file.getPath()传递给该物业。

在getResource中找不到文件

1 个答案: