Bouncy Castle Generate Key Pair

Bouncy Castle Generate Key Pair Rating: 6,0/10 4222 votes

Generate a self signed X509 certificate with Bouncy Castle

cert.java

//Generate a self signed X509 certificate with Bouncy Castle.

// StringBuilder sb = new StringBuilder();

// for (int i = 0; i < pub.length; ++i)

// {

// sb.append(Integer.toHexString(0x0100 + (pub[i] & 0x00FF)).substring(1));

// }

// System.out.println(sb);

// sb.setLength(0);

// for (int i = 0; i < pri.length; ++i)

// {

// sb.append(Integer.toHexString(0x0100 + (pri[i] & 0x00FF)).substring(1));

// }

// byte[] enc = new PKCS8Generator(privateKey).generate().getContent();

// System.out.println(new String(Base64.encodeBase64(enc)));

//// new JcaPKCS8Generator(privateKey, new Output)

// Cipher cipher = SecurityUtils.getCipher('RSA');

// cipher.init(Cipher.DECRYPT_MODE, privateKey);

// byte[] doFinal = cipher.doFinal(pub);

// System.out.println(new String(doFinal));

// System.out.println(sb);

/**

* Generate a self signed X509 certificate with Bouncy Castle.

staticvoid generateSelfSignedX509Certificate() throws Exception {

// yesterday

Date validityBeginDate =newDate(System.currentTimeMillis() -24*60*60*1000);

// in 2 years

Date validityEndDate =newDate(System.currentTimeMillis() +2*365*24*60*60*1000);

// GENERATE THE PUBLIC/PRIVATE RSA KEY PAIR

KeyPairGenerator keyPairGenerator =KeyPairGenerator.getInstance('RSA', 'BC');

keyPairGenerator.initialize(1024, newSecureRandom());

java.security.KeyPair keyPair = keyPairGenerator.generateKeyPair();

// GENERATE THE X509 CERTIFICATE

X509V1CertificateGenerator certGen =newX509V1CertificateGenerator();

X500Principal dnName =newX500Principal('CN=John Doe');

certGen.setSerialNumber(BigInteger.valueOf(System.currentTimeMillis()));

certGen.setSubjectDN(dnName);

certGen.setIssuerDN(dnName); // use the same

certGen.setNotBefore(validityBeginDate);

certGen.setNotAfter(validityEndDate);

certGen.setPublicKey(keyPair.getPublic());

certGen.setSignatureAlgorithm('SHA256WithRSAEncryption');

X509Certificate cert = certGen.generate(keyPair.getPrivate(), 'BC');

// DUMP CERTIFICATE AND KEY PAIR