com.yeepay.yop.sdk.utils

类 X509CertUtils

java.lang.Object

com.yeepay.yop.sdk.utils.X509CertUtils

public class X509CertUtils
extends Object

title: x509证书工具类
description:
Copyright: Copyright (c) 2018
Company: 易宝支付(YeePay)

从以下版本开始:

2021/2/3 4:58 下午

版本:

1.0.0

作者:

yunmei.wu

构造器概要

构造器

构造器和说明
X509CertUtils()

方法概要

限定符和类型	方法和说明
static boolean	checkCertDate(String provider, String env, X509Certificate certificate)
static boolean	checkCertDate(X509Certificate certificate) 校验证书有效期（过期后24小时内继续可用，过期前72小时需刷新）
static String	getLocalCertDirByProvider(String baseDir, String provider)
static String	getLocalCertDirByProviderAndEnv(String baseDir, String provider, String env, String appKey)
static Set<String>	getLocalCertDirs(String baseDir, String provider, String env, String appKey)
static X509Certificate	getX509Certificate(CertTypeEnum certType, byte[] certBytes)
static X509Certificate	getX509Certificate(CertTypeEnum certType, InputStream is)
static String	parseToDecimal(String hexSerialNo) (CFCA证书在Linux操作系统解析出来的证书序列号是10进制)将16进制穿换成10进制
static String	parseToHex(String decimalSerialNo) (CFCA证书在Windows操作系统解析出来的证书序列号是16进制)将10进制转换成16进制
static void	verifyCertificate(CertTypeEnum certType, PublicKey issuerPubKey, X509Certificate cert) 校验证书签名
static void	verifyCertificate(String provider, String env, CertTypeEnum certType, PublicKey issuerPubKey, X509Certificate cert)

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

构造器详细资料

X509CertUtils

public X509CertUtils()

方法详细资料

verifyCertificate

public static void verifyCertificate(CertTypeEnum certType,
                                     PublicKey issuerPubKey,
                                     X509Certificate cert)
                              throws NoSuchProviderException,
                                     CertificateException,
                                     NoSuchAlgorithmException,
                                     InvalidKeyException,
                                     SignatureException

校验证书签名

参数:

certType - 证书类型

issuerPubKey - 从颁发者CA证书中提取出来的公钥

cert - 待校验的证书

抛出:

NoSuchProviderException

CertificateException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

verifyCertificate

public static void verifyCertificate(String provider,
                                     String env,
                                     CertTypeEnum certType,
                                     PublicKey issuerPubKey,
                                     X509Certificate cert)
                              throws NoSuchProviderException,
                                     CertificateException,
                                     NoSuchAlgorithmException,
                                     InvalidKeyException,
                                     SignatureException

抛出:

NoSuchProviderException

CertificateException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

checkCertDate

public static boolean checkCertDate(X509Certificate certificate)
                             throws CertificateExpiredException,
                                    CertificateNotYetValidException

校验证书有效期（过期后24小时内继续可用，过期前72小时需刷新）

参数:

certificate - 证书

返回:

true: 需要刷新，false：不需要

抛出:

CertificateExpiredException

CertificateNotYetValidException

checkCertDate

public static boolean checkCertDate(String provider,
                                    String env,
                                    X509Certificate certificate)
                             throws CertificateExpiredException,
                                    CertificateNotYetValidException

抛出:

CertificateExpiredException

CertificateNotYetValidException

getX509Certificate

public static X509Certificate getX509Certificate(CertTypeEnum certType,
                                                 byte[] certBytes)
                                          throws CertificateException,
                                                 NoSuchProviderException

抛出:

CertificateException

NoSuchProviderException

getX509Certificate

public static X509Certificate getX509Certificate(CertTypeEnum certType,
                                                 InputStream is)
                                          throws CertificateException,
                                                 NoSuchProviderException

抛出:

CertificateException

NoSuchProviderException

parseToHex

public static String parseToHex(String decimalSerialNo)

(CFCA证书在Windows操作系统解析出来的证书序列号是16进制)将10进制转换成16进制

返回:

长度为10的16进制字符串

parseToDecimal

public static String parseToDecimal(String hexSerialNo)

(CFCA证书在Linux操作系统解析出来的证书序列号是10进制)将16进制穿换成10进制

返回:

10进制字符串

getLocalCertDirs

public static Set<String> getLocalCertDirs(String baseDir,
                                           String provider,
                                           String env,
                                           String appKey)

getLocalCertDirByProviderAndEnv

public static String getLocalCertDirByProviderAndEnv(String baseDir,
                                                     String provider,
                                                     String env,
                                                     String appKey)

getLocalCertDirByProvider

public static String getLocalCertDirByProvider(String baseDir,
                                               String provider)