dam.asimetrico.Cert.java Source code

Introduction

Here is the source code for dam.asimetrico.Cert.java

Source

/*
 * To change this license header, choose License Headers in Project Properties.
 * To change this template file, choose Tools | Templates
 * and open the template in the editor.
 */
package dam.asimetrico;

import java.io.ByteArrayInputStream;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.IOException;

import java.security.InvalidKeyException;
import java.security.Key;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.KeyStore;
import java.security.KeyStore.PrivateKeyEntry;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Security;
import java.security.Signature;
import java.security.SignatureException;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.crypto.Cipher;
import javax.naming.InvalidNameException;
import javax.naming.ldap.LdapName;
import javax.naming.ldap.Rdn;

import org.bouncycastle.asn1.x500.RDN;
import org.bouncycastle.asn1.x500.style.BCStyle;
import org.bouncycastle.asn1.x500.style.IETFUtils;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import sun.security.tools.keytool.CertAndKeyGen;
import sun.security.x509.X500Name;

/**
 *
 * @author oscar
 */
public class Cert {

    public static void main(String[] args) {

        try {
            // Anadir provider JCE (provider por defecto no soporta RSA)
            Security.addProvider(new BouncyCastleProvider()); // Cargar el provider BC
            CertAndKeyGen certGen = new CertAndKeyGen("RSA", "SHA256WithRSA", null);
            // generate it with 2048 bits
            certGen.generate(2048);
            // prepare the validity of the certificate
            long validSecs = (long) 365 * 24 * 60 * 60; // valid for one year
            // add the certificate information, currently only valid for one year.

            X509Certificate cert = certGen.getSelfCertificate(
                    // enter your details according to your application
                    new X500Name("CN=Pedro Salazar,O=My Organisation,L=My City,C=DE"), validSecs);

            PrivateKey pk = certGen.getPrivateKey();
            PublicKey publicKey = certGen.getPublicKeyAnyway();
            System.out.println(cert.getIssuerX500Principal());

            String dn = cert.getSubjectX500Principal().getName();
            LdapName ldapDN = new LdapName(dn);
            for (Rdn rdn : ldapDN.getRdns()) {
                if (rdn.getType().equals("CN")) {
                    System.out.println(rdn.getValue());
                }
            }

            //KeyPairGenerator generadorRSA = KeyPairGenerator.getInstance("RSA", "BC"); // Hace uso del provider BC
            //generadorRSA.initialize(1024);
            KeyPair clavesRSA = null;
            PrivateKey clavePrivada = null;
            PublicKey clavePublica = null;

            KeyStore ks = KeyStore.getInstance("PKCS12", "BC");
            char[] password = "abc".toCharArray();
            ks.load(null, null);
            ks.setCertificateEntry("publica", cert);
            ks.setKeyEntry("privada", pk, null, new Certificate[] { cert });
            FileOutputStream fos = new FileOutputStream("keystore.pfx");
            ks.store(fos, password);
            fos.close();

            //leer fichero
            KeyStore ksLoad = KeyStore.getInstance("PKCS12", "BC");
            ksLoad.load(new FileInputStream("keystore.pfx"), password);

            X509Certificate certLoad = (X509Certificate) ksLoad.getCertificate("publica");
            KeyStore.PasswordProtection pt = new KeyStore.PasswordProtection(password);
            PrivateKeyEntry privateKeyEntry = (PrivateKeyEntry) ksLoad.getEntry("privada", pt);
            RSAPrivateKey keyLoad = (RSAPrivateKey) privateKeyEntry.getPrivateKey();

            System.out.println(cert.getIssuerX500Principal());
            System.out.println(cert.getSubjectX500Principal());
            //certLoad.verify(clavePublica);

            dn = certLoad.getSubjectX500Principal().getName();
            ldapDN = new LdapName(dn);
            for (Rdn rdn : ldapDN.getRdns()) {
                if (rdn.getType().equals("CN")) {
                    System.out.println(rdn.getValue());
                }
            }

            clavesRSA = new KeyPair(certLoad.getPublicKey(), keyLoad);

            Cipher cifrador = Cipher.getInstance("RSA/ECB/PKCS1Padding", "BC");
            cifrador.init(Cipher.ENCRYPT_MODE, clavesRSA.getPrivate());
            cifrador.doFinal("hola".getBytes());

            Signature sign = Signature.getInstance("SHA256WithRSA");

            sign.initSign(clavesRSA.getPrivate());

            MessageDigest hash = MessageDigest.getInstance("SHA512");

            sign.update(hash.digest("hola".getBytes()));
            byte[] firma = sign.sign();

            sign.initVerify(certLoad.getPublicKey());
            sign.update(hash.digest("hola".getBytes()));
            System.out.println(sign.verify(firma));

            try {
                CertificateFactory cf = CertificateFactory.getInstance("X.509");
                Certificate cert2 = cf.generateCertificate(new ByteArrayInputStream(certLoad.getEncoded()));

                System.out.println(cert2);
            } catch (Exception ex) {
                ex.printStackTrace();
            }

            KeyStore ksMX = KeyStore.getInstance("WINDOWS-MY", "SunMSCAPI");
            ksLoad.load(null, null);

        } catch (Exception ex) {
            Logger.getLogger(Cert.class.getName()).log(Level.SEVERE, null, ex);
        }

    }

}