sviolet.thistle.util.crypto.CertificateUtils Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of thistle-common Show documentation
Comprehensive Java common library (Java7+)
There is a newer version: 22.1.0
/*
 * Copyright (C) 2015-2018 S.Violet
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * Project GitHub: https://github.com/shepherdviolet/thistle
 * Email: [email protected]
 */

package sviolet.thistle.util.crypto;

import sviolet.thistle.util.crypto.base.BaseCertificateUtils;

import java.io.ByteArrayInputStream;
import java.io.InputStream;
import java.security.cert.*;

/**
 * 证书工具
 *
 * 更多功能见thistle-crypto-plus的AdvancedCertificateUtils
 *
 * @author S.Violet
 */
public class CertificateUtils {

    /***********************************************************************************************
     * Common
     ***********************************************************************************************/

    /**
     * 解析X509格式的证书, 返回Certificate对象, 可用来获取证书公钥实例等, JDK版本较弱.
     * 解析SM2等证书请使用thistle-crypto-plus的AdvancedCertificateUtils. 
     * @param certData X509格式证书数据
     */
    public static X509Certificate parseX509ToCertificate(byte[] certData) throws CertificateException {
        if (certData == null) {
            throw new NullPointerException("certData == null");
        }
        return (X509Certificate) BaseCertificateUtils.parseCertificate(new ByteArrayInputStream(certData), BaseCertificateUtils.TYPE_X509);
    }

    /**
     * 解析X509格式的证书, 返回Certificate对象, 可用来获取证书公钥实例等, JDK版本较弱.
     * 解析SM2等证书请使用thistle-crypto-plus的AdvancedCertificateUtils. 
     * @param inputStream X509格式证书数据流, 会被close掉
     */
    public static X509Certificate parseX509ToCertificate(InputStream inputStream) throws CertificateException {
        return (X509Certificate) BaseCertificateUtils.parseCertificate(inputStream, BaseCertificateUtils.TYPE_X509);
    }

    /**
     * 将证书编码为二进制数据, 适用于目前所有证书类型
     * @param certificate 证书
     * @return 二进制数据
     */
    public static byte[] parseCertificateToEncoded(Certificate certificate) throws CertificateEncodingException {
        return BaseCertificateUtils.encodeCertificate(certificate);
    }

    /**
     * 将证书链编码为PKCS7数据
     * @param certPath 证书链
     * @return 证书链的PKCS7数据
     */
    public static byte[] parseCertPathToPKCS7Encoded(CertPath certPath) throws CertificateEncodingException {
        return BaseCertificateUtils.encodeCertPath(certPath, "PKCS7");
    }

}