Java数字证书对文件/加密/解密/签名/校验签名
本文中的Base64Utils.java在其他随笔中已经贴出。Java证书生成命令如下，不做过多解释，可先到网上查询下资料，本文仅提供工具类代码：
? 把生成的密钥库和证书都放到类的同包下。
?
keytool?-validity?365?-genkey?-v?-alias?www.asdc.com.cn?-keyalg?RSA?-keystore?D:\key\asdc.keystore?-dname?"CN=172.25.67.98,OU=stos,O=asdc,L=Haidian,ST=Beijing,c=cn"?-storepass?123456?-keypass?123456
keytool?-export?-v?-alias?www.asdc.com.cn?-keystore?D:\key\asdc.keystore?-storepass?123456?-rfc?-file?D:\key\asdc.cer
CertificateUtils.java
?
import java.io.ByteArrayOutputStream;import java.io.File;import java.io.FileInputStream;import java.io.FileOutputStream;import java.io.InputStream;import java.io.OutputStream;import java.nio.MappedByteBuffer;import java.nio.channels.FileChannel;import java.security.KeyStore;import java.security.PrivateKey;import java.security.PublicKey;import java.security.Signature;import java.security.cert.Certificate;import java.security.cert.CertificateFactory;import java.security.cert.X509Certificate;import java.util.Date;import javax.crypto.Cipher;/** * <p> * 数字签名/加密解密工具包 * </p> * * @author IceWee * @date 2012-4-26 * @version 1.0 */public class CertificateUtils { /** * Java密钥库(Java 密钥库，JKS)KEY_STORE */ public static final String KEY_STORE = "JKS"; public static final String X509 = "X.509"; /** * 文件读取缓冲区大小 */ private static final int CACHE_SIZE = 2048; /** * 最大文件加密块 */ private static final int MAX_ENCRYPT_BLOCK = 117; /** * 最大文件解密块 */ private static final int MAX_DECRYPT_BLOCK = 128; /** * <p> * 根据密钥库获得私钥 * </p> * * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ private static PrivateKey getPrivateKey(String keyStorePath, String alias, String password) throws Exception { KeyStore keyStore = getKeyStore(keyStorePath, password); PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, password.toCharArray()); return privateKey; } /** * <p> * 获得密钥库 * </p> * * @param keyStorePath 密钥库存储路径 * @param password 密钥库密码 * @return * @throws Exception */ private static KeyStore getKeyStore(String keyStorePath, String password) throws Exception { FileInputStream in = new FileInputStream(keyStorePath); KeyStore keyStore = KeyStore.getInstance(KEY_STORE); keyStore.load(in, password.toCharArray()); in.close(); return keyStore; } /** * <p> * 根据证书获得公钥 * </p> * * @param certificatePath 证书存储路径 * @return * @throws Exception */ private static PublicKey getPublicKey(String certificatePath) throws Exception { Certificate certificate = getCertificate(certificatePath); PublicKey publicKey = certificate.getPublicKey(); return publicKey; } /** * <p> * 获得证书 * </p> * * @param certificatePath 证书存储路径 * @return * @throws Exception */ private static Certificate getCertificate(String certificatePath) throws Exception { CertificateFactory certificateFactory = CertificateFactory.getInstance(X509); FileInputStream in = new FileInputStream(certificatePath); Certificate certificate = certificateFactory.generateCertificate(in); in.close(); return certificate; } /** * <p> * 根据密钥库获得证书 * </p> * * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ private static Certificate getCertificate(String keyStorePath, String alias, String password) throws Exception { KeyStore keyStore = getKeyStore(keyStorePath, password); Certificate certificate = keyStore.getCertificate(alias); return certificate; } /** * <p> * 私钥加密 * </p> * * @param data 源数据 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static byte[] encryptByPrivateKey(byte[] data, String keyStorePath, String alias, String password) throws Exception { // 取得私钥 PrivateKey privateKey = getPrivateKey(keyStorePath, alias, password); Cipher cipher = Cipher.getInstance(privateKey.getAlgorithm()); cipher.init(Cipher.ENCRYPT_MODE, privateKey); int inputLen = data.length; ByteArrayOutputStream out = new ByteArrayOutputStream(); int offSet = 0; byte[] cache; int i = 0; // 对数据分段加密 while (inputLen - offSet > 0) { if (inputLen - offSet > MAX_ENCRYPT_BLOCK) { cache = cipher.doFinal(data, offSet, MAX_ENCRYPT_BLOCK); } else { cache = cipher.doFinal(data, offSet, inputLen - offSet); } out.write(cache, 0, cache.length); i++; offSet = i * MAX_ENCRYPT_BLOCK; } byte[] encryptedData = out.toByteArray(); out.close(); return encryptedData; } /** * <p> * 文件私钥加密 * </p> * <p> * 过大的文件可能会导致内存溢出 * </> * * @param filePath 文件路径 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static byte[] encryptFileByPrivateKey(String filePath, String keyStorePath, String alias, String password) throws Exception { byte[] data = fileToByte(filePath); return encryptByPrivateKey(data, keyStorePath, alias, password); } /** * <p> * 文件加密 * </p> * * @param srcFilePath 源文件 * @param destFilePath 加密后文件 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @throws Exception */ public static void encryptFileByPrivateKey(String srcFilePath, String destFilePath, String keyStorePath, String alias, String password) throws Exception { // 取得私钥 PrivateKey privateKey = getPrivateKey(keyStorePath, alias, password); Cipher cipher = Cipher.getInstance(privateKey.getAlgorithm()); cipher.init(Cipher.ENCRYPT_MODE, privateKey); File srcFile = new File(srcFilePath); FileInputStream in = new FileInputStream(srcFile); File destFile = new File(destFilePath); if (!destFile.getParentFile().exists()) { destFile.getParentFile().mkdirs(); } destFile.createNewFile(); OutputStream out = new FileOutputStream(destFile); byte[] data = new byte[MAX_ENCRYPT_BLOCK]; byte[] encryptedData; // 加密块 while (in.read(data) != -1) { encryptedData = cipher.doFinal(data); out.write(encryptedData, 0, encryptedData.length); out.flush(); } out.close(); in.close(); } /** * <p> * 文件加密成BASE64编码的字符串 * </p> * * @param filePath 文件路径 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static String encryptFileToBase64ByPrivateKey(String filePath, String keyStorePath, String alias, String password) throws Exception { byte[] encryptedData = encryptFileByPrivateKey(filePath, keyStorePath, alias, password); return Base64Utils.encode(encryptedData); } /** * <p> * 私钥解密 * </p> * * @param encryptedData 已加密数据 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static byte[] decryptByPrivateKey(byte[] encryptedData, String keyStorePath, String alias, String password) throws Exception { // 取得私钥 PrivateKey privateKey = getPrivateKey(keyStorePath, alias, password); Cipher cipher = Cipher.getInstance(privateKey.getAlgorithm()); cipher.init(Cipher.DECRYPT_MODE, privateKey); // 解密byte数组最大长度限制: 128 int inputLen = encryptedData.length; ByteArrayOutputStream out = new ByteArrayOutputStream(); int offSet = 0; byte[] cache; int i = 0; // 对数据分段解密 while (inputLen - offSet > 0) { if (inputLen - offSet > MAX_DECRYPT_BLOCK) { cache = cipher.doFinal(encryptedData, offSet, MAX_DECRYPT_BLOCK); } else { cache = cipher.doFinal(encryptedData, offSet, inputLen - offSet); } out.write(cache, 0, cache.length); i++; offSet = i * MAX_DECRYPT_BLOCK; } byte[] decryptedData = out.toByteArray(); out.close(); return decryptedData; } /** * <p> * 公钥加密 * </p> * * @param data 源数据 * @param certificatePath 证书存储路径 * @return * @throws Exception */ public static byte[] encryptByPublicKey(byte[] data, String certificatePath) throws Exception { // 取得公钥 PublicKey publicKey = getPublicKey(certificatePath); Cipher cipher = Cipher.getInstance(publicKey.getAlgorithm()); cipher.init(Cipher.ENCRYPT_MODE, publicKey); int inputLen = data.length; ByteArrayOutputStream out = new ByteArrayOutputStream(); int offSet = 0; byte[] cache; int i = 0; // 对数据分段加密 while (inputLen - offSet > 0) { if (inputLen - offSet > MAX_ENCRYPT_BLOCK) { cache = cipher.doFinal(data, offSet, MAX_ENCRYPT_BLOCK); } else { cache = cipher.doFinal(data, offSet, inputLen - offSet); } out.write(cache, 0, cache.length); i++; offSet = i * MAX_ENCRYPT_BLOCK; } byte[] encryptedData = out.toByteArray(); out.close(); return encryptedData; } /** * <p> * 公钥解密 * </p> * * @param encryptedData 已加密数据 * @param certificatePath 证书存储路径 * @return * @throws Exception */ public static byte[] decryptByPublicKey(byte[] encryptedData, String certificatePath) throws Exception { PublicKey publicKey = getPublicKey(certificatePath); Cipher cipher = Cipher.getInstance(publicKey.getAlgorithm()); cipher.init(Cipher.DECRYPT_MODE, publicKey); int inputLen = encryptedData.length; ByteArrayOutputStream out = new ByteArrayOutputStream(); int offSet = 0; byte[] cache; int i = 0; // 对数据分段解密 while (inputLen - offSet > 0) { if (inputLen - offSet > MAX_DECRYPT_BLOCK) { cache = cipher.doFinal(encryptedData, offSet, MAX_DECRYPT_BLOCK); } else { cache = cipher.doFinal(encryptedData, offSet, inputLen - offSet); } out.write(cache, 0, cache.length); i++; offSet = i * MAX_DECRYPT_BLOCK; } byte[] decryptedData = out.toByteArray(); out.close(); return decryptedData; } /** * <p> * 文件解密 * </p> * * @param srcFilePath 源文件 * @param destFilePath 目标文件 * @param certificatePath 证书存储路径 * @throws Exception */ public static void decryptFileByPublicKey(String srcFilePath, String destFilePath, String certificatePath) throws Exception { PublicKey publicKey = getPublicKey(certificatePath); Cipher cipher = Cipher.getInstance(publicKey.getAlgorithm()); cipher.init(Cipher.DECRYPT_MODE, publicKey); File srcFile = new File(srcFilePath); FileInputStream in = new FileInputStream(srcFile); File destFile = new File(destFilePath); if (!destFile.getParentFile().exists()) { destFile.getParentFile().mkdirs(); } destFile.createNewFile(); OutputStream out = new FileOutputStream(destFile); byte[] data = new byte[MAX_DECRYPT_BLOCK]; byte[] decryptedData; // 解密块 while (in.read(data) != -1) { decryptedData = cipher.doFinal(data); out.write(decryptedData, 0, decryptedData.length); out.flush(); } out.close(); in.close(); } /** * <p> * 生成数据签名 * </p> * * @param data 源数据 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static byte[] sign(byte[] data, String keyStorePath, String alias, String password) throws Exception { // 获得证书 X509Certificate x509Certificate = (X509Certificate) getCertificate(keyStorePath, alias, password); // 获取私钥 KeyStore keyStore = getKeyStore(keyStorePath, password); // 取得私钥 PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, password.toCharArray()); // 构建签名 Signature signature = Signature.getInstance(x509Certificate.getSigAlgName()); signature.initSign(privateKey); signature.update(data); return signature.sign(); } /** * <p> * 生成数据签名并以BASE64编码 * </p> * * @param data 源数据 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static String signToBase64(byte[] data, String keyStorePath, String alias, String password) throws Exception { return Base64Utils.encode(sign(data, keyStorePath, alias, password)); } /** * <p> * 生成文件数据签名(BASE64) * </p> * <p> * 需要先将文件私钥加密，再根据加密后的数据生成签名(BASE64)，适用于小文件 * </p> * * @param filePath 源文件 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ public static String signFileToBase64WithEncrypt(String filePath, String keyStorePath, String alias, String password) throws Exception { byte[] encryptedData = encryptFileByPrivateKey(filePath, keyStorePath, alias, password); return signToBase64(encryptedData, keyStorePath, alias, password); } /** * <p> * 生成文件签名 * </p> * <p> * 注意：<br> * 方法中使用了FileChannel，其巨大Bug就是不会释放文件句柄，导致签名的文件无法操作(移动或删除等)<br> * 该方法已被generateFileSign取代 * </p> * * @param filePath 文件路径 * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return * @throws Exception */ @Deprecated public static byte[] signFile(String filePath, String keyStorePath, String alias, String password) throws Exception { byte[] sign = new byte[0]; // 获得证书 X509Certificate x509Certificate = (X509Certificate) getCertificate(keyStorePath, alias, password); // 获取私钥 KeyStore keyStore = getKeyStore(keyStorePath, password); // 取得私钥 PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, password.toCharArray()); // 构建签名 Signature signature = Signature.getInstance(x509Certificate.getSigAlgName()); signature.initSign(privateKey); File file = new File(filePath); if (file.exists()) { FileInputStream in = new FileInputStream(file); FileChannel fileChannel = in.getChannel(); MappedByteBuffer byteBuffer = fileChannel.map(FileChannel.MapMode.READ_ONLY, 0, file.length()); signature.update(byteBuffer); fileChannel.close(); in.close(); sign = signature.sign(); } return sign; } /** * <p> * 生成文件数字签名 * </p> * * <p> * <b>注意：</b><br> * 生成签名时update的byte数组大小和验证签名时的大小应相同，否则验证无法通过 * </p> * * @param filePath * @param keyStorePath * @param alias * @param password * @return * @throws Exception */ public static byte[] generateFileSign(String filePath, String keyStorePath, String alias, String password) throws Exception { byte[] sign = new byte[0]; // 获得证书 X509Certificate x509Certificate = (X509Certificate) getCertificate(keyStorePath, alias, password); // 获取私钥 KeyStore keyStore = getKeyStore(keyStorePath, password); // 取得私钥 PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, password.toCharArray()); // 构建签名 Signature signature = Signature.getInstance(x509Certificate.getSigAlgName()); signature.initSign(privateKey); File file = new File(filePath); if (file.exists()) { FileInputStream in = new FileInputStream(file); byte[] cache = new byte[CACHE_SIZE]; int nRead = 0; while ((nRead = in.read(cache)) != -1) { signature.update(cache, 0, nRead); } in.close(); sign = signature.sign(); } return sign; } /** * <p> * 文件签名成BASE64编码字符串 * </p> * * @param filePath * @param keyStorePath * @param alias * @param password * @return * @throws Exception */ public static String signFileToBase64(String filePath, String keyStorePath, String alias, String password) throws Exception { return Base64Utils.encode(generateFileSign(filePath, keyStorePath, alias, password)); } /** * <p> * 验证签名 * </p> * * @param data 已加密数据 * @param sign 数据签名[BASE64] * @param certificatePath 证书存储路径 * @return * @throws Exception */ public static boolean verifySign(byte[] data, String sign, String certificatePath) throws Exception { // 获得证书 X509Certificate x509Certificate = (X509Certificate) getCertificate(certificatePath); // 获得公钥 PublicKey publicKey = x509Certificate.getPublicKey(); // 构建签名 Signature signature = Signature.getInstance(x509Certificate.getSigAlgName()); signature.initVerify(publicKey); signature.update(data); return signature.verify(Base64Utils.decode(sign)); } /** * <p> * 校验文件完整性 * </p> * <p> * 鉴于FileChannel存在的巨大Bug，该方法已停用，被validateFileSign取代 * </p> * * @param filePath 文件路径 * @param sign 数据签名[BASE64] * @param certificatePath 证书存储路径 * @return * @throws Exception */ @Deprecated public static boolean verifyFileSign(String filePath, String sign, String certificatePath) throws Exception { boolean result = false; // 获得证书 X509Certificate x509Certificate = (X509Certificate) getCertificate(certificatePath); // 获得公钥 PublicKey publicKey = x509Certificate.getPublicKey(); // 构建签名 Signature signature = Signature.getInstance(x509Certificate.getSigAlgName()); signature.initVerify(publicKey); File file = new File(filePath); if (file.exists()) { byte[] decodedSign = Base64Utils.decode(sign); FileInputStream in = new FileInputStream(file); FileChannel fileChannel = in.getChannel(); MappedByteBuffer byteBuffer = fileChannel.map(FileChannel.MapMode.READ_ONLY, 0, file.length()); signature.update(byteBuffer); in.close(); result = signature.verify(decodedSign); } return result; } /** * <p> * 校验文件签名 * </p> * * @param filePath * @param sign * @param certificatePath * @return * @throws Exception */ public static boolean validateFileSign(String filePath, String sign, String certificatePath) throws Exception { boolean result = false; // 获得证书 X509Certificate x509Certificate = (X509Certificate) getCertificate(certificatePath); // 获得公钥 PublicKey publicKey = x509Certificate.getPublicKey(); // 构建签名 Signature signature = Signature.getInstance(x509Certificate.getSigAlgName()); signature.initVerify(publicKey); File file = new File(filePath); if (file.exists()) { byte[] decodedSign = Base64Utils.decode(sign); FileInputStream in = new FileInputStream(file); byte[] cache = new byte[CACHE_SIZE]; int nRead = 0; while ((nRead = in.read(cache)) != -1) { signature.update(cache, 0, nRead); } in.close(); result = signature.verify(decodedSign); } return result; } /** * <p> * BASE64解码->签名校验 * </p> * * @param base64String BASE64编码字符串 * @param sign 数据签名[BASE64] * @param certificatePath 证书存储路径 * @return * @throws Exception */ public static boolean verifyBase64Sign(String base64String, String sign, String certificatePath) throws Exception { byte[] data = Base64Utils.decode(base64String); return verifySign(data, sign, certificatePath); } /** * <p> * BASE64解码->公钥解密-签名校验 * </p> * * * @param base64String BASE64编码字符串 * @param sign 数据签名[BASE64] * @param certificatePath 证书存储路径 * @return * @throws Exception */ public static boolean verifyBase64SignWithDecrypt(String base64String, String sign, String certificatePath) throws Exception { byte[] encryptedData = Base64Utils.decode(base64String); byte[] data = decryptByPublicKey(encryptedData, certificatePath); return verifySign(data, sign, certificatePath); } /** * <p> * 文件公钥解密->签名校验 * </p> * * @param encryptedFilePath 加密文件路径 * @param sign 数字证书[BASE64] * @param certificatePath * @return * @throws Exception */ public static boolean verifyFileSignWithDecrypt(String encryptedFilePath, String sign, String certificatePath) throws Exception { byte[] encryptedData = fileToByte(encryptedFilePath); byte[] data = decryptByPublicKey(encryptedData, certificatePath); return verifySign(data, sign, certificatePath); } /** * <p> * 校验证书当前是否有效 * </p> * * @param certificate 证书 * @return */ public static boolean verifyCertificate(Certificate certificate) { return verifyCertificate(new Date(), certificate); } /** * <p> * 验证证书是否过期或无效 * </p> * * @param date 日期 * @param certificate 证书 * @return */ public static boolean verifyCertificate(Date date, Certificate certificate) { boolean isValid = true; try { X509Certificate x509Certificate = (X509Certificate) certificate; x509Certificate.checkValidity(date); } catch (Exception e) { isValid = false; } return isValid; } /** * <p> * 验证数字证书是在给定的日期是否有效 * </p> * * @param date 日期 * @param certificatePath 证书存储路径 * @return */ public static boolean verifyCertificate(Date date, String certificatePath) { Certificate certificate; try { certificate = getCertificate(certificatePath); return verifyCertificate(certificate); } catch (Exception e) { e.printStackTrace(); return false; } } /** * <p> * 验证数字证书是在给定的日期是否有效 * </p> * * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return */ public static boolean verifyCertificate(Date date, String keyStorePath, String alias, String password) { Certificate certificate; try { certificate = getCertificate(keyStorePath, alias, password); return verifyCertificate(certificate); } catch (Exception e) { e.printStackTrace(); return false; } } /** * <p> * 验证数字证书当前是否有效 * </p> * * @param keyStorePath 密钥库存储路径 * @param alias 密钥库别名 * @param password 密钥库密码 * @return */ public static boolean verifyCertificate(String keyStorePath, String alias, String password) { return verifyCertificate(new Date(), keyStorePath, alias, password); } /** * <p> * 验证数字证书当前是否有效 * </p> * * @param certificatePath 证书存储路径 * @return */ public static boolean verifyCertificate(String certificatePath) { return verifyCertificate(new Date(), certificatePath); } /** * <p> * 文件转换为byte数组 * </p> * * @param filePath 文件路径 * @return * @throws Exception */ public static byte[] fileToByte(String filePath) throws Exception { byte[] data = new byte[0]; File file = new File(filePath); if (file.exists()) { FileInputStream in = new FileInputStream(file); ByteArrayOutputStream out = new ByteArrayOutputStream(2048); byte[] cache = new byte[CACHE_SIZE]; int nRead = 0; while ((nRead = in.read(cache)) != -1) { out.write(cache, 0, nRead); out.flush(); } out.close(); in.close(); data = out.toByteArray(); } return data; } /** * <p> * 二进制数据写文件 * </p> * * @param bytes 二进制数据 * @param filePath 文件生成目录 */ public static void byteArrayToFile(byte[] bytes, String filePath) throws Exception { InputStream in = new ByteArrayInputStream(bytes); File destFile = new File(filePath); if (!destFile.getParentFile().exists()) { destFile.getParentFile().mkdirs(); } destFile.createNewFile(); OutputStream out = new FileOutputStream(destFile); byte[] cache = new byte[CACHE_SIZE]; int nRead = 0; while ((nRead = in.read(cache)) != -1) { out.write(cache, 0, nRead); out.flush(); } out.close(); in.close(); }}?CertificateTester.java
?
package security;import static org.junit.Assert.assertArrayEquals;import static org.junit.Assert.assertEquals;import static org.junit.Assert.assertTrue;public class CertificateTester { private static final String KEY_STORE_NAME = "asdc.keystore"; private static final String CERTIFICATE_NAME = "asdc.cer"; private static final String password = "123456"; private static final String alias = "www.asdc.com.cn"; private static String certificatePath; private static String keyStorePath; static { String currentDir = CertificateTester.class.getResource("").getPath(); if (currentDir.startsWith("/")) currentDir = currentDir.substring(1); if (!currentDir.endsWith("/")) currentDir += "/"; keyStorePath = currentDir + KEY_STORE_NAME; certificatePath = currentDir + CERTIFICATE_NAME; } public static void main(String[] args) throws Exception { simple(); simpleSign(); testFileSign(); } static void simple() throws Exception { System.err.println("公钥加密——私钥解密"); String source = "这是一行没有任何意义的文字，你看完了等于没看，不是吗？"; byte[] data = source.getBytes(); byte[] encrypt = CertificateUtils.encryptByPublicKey(data, certificatePath); byte[] decrypt = CertificateUtils.decryptByPrivateKey(encrypt, keyStorePath, alias, password); String outputStr = new String(decrypt); System.out.println("加密前: \r\n" + source + "\r\n" + "解密后: \r\n" + outputStr); // 验证数据一致 assertArrayEquals(data, decrypt); // 验证证书有效 assertTrue(CertificateUtils.verifyCertificate(certificatePath)); } static void simpleSign() throws Exception { System.err.println("私钥加密——公钥解密"); String source = "这是一行签名的测试文字"; byte[] data = source.getBytes(); byte[] encodedData = CertificateUtils.encryptByPrivateKey(data, keyStorePath, alias, password); byte[] decodedData = CertificateUtils.decryptByPublicKey(encodedData, certificatePath); String target = new String(decodedData); System.out.println("加密前: \r\n" + source + "\r\n" + "解密后: \r\n" + target); assertEquals(source, target); System.err.println("私钥签名——公钥验证签名"); // 产生签名 String sign = CertificateUtils.signToBase64(encodedData, keyStorePath, alias, password); System.out.println("签名:\r\n" + sign); // 验证签名 boolean status = CertificateUtils.verifySign(encodedData, sign, certificatePath); System.err.println("状态:\r\n" + status); assertTrue(status); } static void testFileSign() throws Exception { String filePath = "D:/software/eclipse-SDK-3.3.2-win32.zip"; String sign = CertificateUtils.signFileToBase64(filePath, keyStorePath, alias, password); System.err.println("生成签名：\r\n" + sign); boolean result = CertificateUtils.verifyFileSign(filePath, sign, certificatePath); System.err.println("校验结果：" + result); } }??