尝试在 Android 中获取 X.509 证书

Question

我正在使用 Keystore 在 Android 中制作，所以我需要创建一个 3072 位长度的 RSA 公钥和私钥（这个长度对我来说是强制性的，Android 文档说它完全有效）。

因此，我创建这些 RSA 密钥的第一选择（记住我需要 3072 位长）是使用这个在线工具 https://www.lddgo.net/en/encrypt/rsakey 我能够在其中创建这两个密钥键 ->

之后，我执行我的代码，在测试的第一部分中，我尝试将这些 RSA 密钥导入到 Android 的密钥库中。为此，我需要创建或获取 X.509 证书，所以我尝试了

// this method import the private key, this is the first part of my test

 fun importPrivateKey() {
        val keyProtection = KeyProtection.Builder(
            listOf(KeyProperties.PURPOSE_ENCRYPT,
                KeyProperties.PURPOSE_DECRYPT,
                KeyProperties.PURPOSE_WRAP_KEY).sum()).run {

                setBlockModes(*listOf(BlockMode.ECB.value).toTypedArray())
                setEncryptionPaddings(*listOf(EncryptionPadding.RSA_PKCS1.value, EncryptionPadding.RSA_OAEP.value).toTypedArray())
                setSignaturePaddings(KeyProperties.SIGNATURE_PADDING_RSA_PKCS1)
                setDigests(KeyProperties.DIGEST_SHA256)
                setKeyValidityStart(DateTime.now().toDate())
                setKeyValidityEnd(DateTime.now().plusYears(1).toDate())
                build()
        }
        // this method is the one that import the key to the keystore, but the issue is 
        // on getCertificate method.
        KeystoreWrapperUtil.importKey(privateKey3072, PRIVATE_KEY_ALIAS, getCertificate(publicKey3072), keyProtection)
    }

...

// this method get the X.509 certificate

    private fun getCertificate(certificateString : String) : Certificate {
        val certificateFactory = CertificateFactory.getInstance("X.509")
        val decoded = Base64.decode(certificateString, Base64.DEFAULT)
        val inputStream = ByteArrayInputStream(decoded)
        // here´s where i´m getting the exception
        return certificateFactory.generateCertificate(inputStream)
    }


// these are the keys ( same as above )
    private val publicKey3072 = "MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmIGJKHqxEMVEb2xD4nhV\n" +
            "0Ps4lPVzvVGOO1OGOhabuZ2cDFeocpWhRUNWkswUNs0LBOG6tPRtEkiEkYerKxyk\n" +
            "i8j1vfzWMIsNeJm4Ol14D/PXXLe0r+K466DPWrrz0oZcbOhaoiP/Z8qgVCfS3hp1\n" +
            "nUgTn53qiI/VFUiIgA76HOeLI/TSnRVU3CYwz17eu3M99aTeuqkTD9Nm3JK4cVTi\n" +
            "KotaTt2D18mRvGh9UEluncJ3lGjfbOwhkEb0FXqxW339HhDyBTx1XZLJCPYbicDg\n" +
            "iucGw4lnEEoQQSjmrey7XtVZgFddNOuWpGnfLWnNi0iMo9s3d+s5qrnNk82TiEVb\n" +
            "5SaX0tKM/0Z/EHgKUz9T3O5di3Vo0wwIsbdR7DkpQvw5IOjRXE9KTW2nRyGpxFXX\n" +
            "TGv5RTJHSi2fodV3h47hNuDmh084Hm0mZrw02hsskCbpYAaUM0nw1TKx/57nbAZ2\n" +
            "LdPzeL8VZvEG647AOhGoworoj7bi24AqMX1sWArPWdszAgMBAAE="

    private val privateKey3072 = "MIIG/QIBADANBgkqhkiG9w0BAQEFAASCBucwggbjAgEAAoIBgQCVQ5sho8IQkvT4\n" +
            "MXX55O7IO8SmyL7FAa+OfGSiyVMgX6MjhAIA94YnS6wCfa+KfD1fISwUHm+C9lz5\n" +
            "ol/rRvu4xGFBSWkRXwtZJ78dN0/hp8BKEkc7qk2pS4h3twcqGbgIoSSI1R9RWm8c\n" +
            "vzuduk+fa0ZSAxos7xC+IFFDFUDFSm/5ZkjH088wyMDbtIHm3ffyZdqgI1iUw5F6\n" +
            "53+pH6ajWYTDJLkEeD6yX8xVXDOXQko73AfwqrPkgIPCzCaUKyvFEPgiA/EBmDPl\n" +
            "IHPSZQu4i+m82pJkV4IooZu6jpxDYKzC4FkidqtdvVih73ZcZuof1n2ZPtPajImN\n" +
            "cMjngfKwjqUMl9WDmIxX9amTNCPRoFGBPoS1BOsEaQduknvo83aqvJ9ReKwiKs2g\n" +
            "AIjDaY0oMpSoAeRNu5P5iMjBLQuhmUvYuQZ2CXKJSf1O7wRRZOqFNmBE1j5sTf6p\n" +
            "IiwRIUCKJvhETWZhE3vkWklzvG20vbQjhVgcTKefCNF5WYdFj3MCAwEAAQKCAYA6\n" +
            "HAnG/OPOZAfuoALX+KJlXa9fZwOt2swn4pGjNlGgZtsyNnA5RCP8JF+g0KGIfnm+\n" +
            "EUIByx+KkrL7lJVXGVliQ0HBkvzOgHwAh5LFowT8Srx3mcoVlmWJpRhJ0v19DGoz"

但是，不幸的是，当我运行代码时，我遇到了这个异常 ->

java.security.cert.CertificateException: com.android.org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: com.android.org.conscrypt.OpenSSLX509CertificateFactory$ParsingException: java.lang.RuntimeException: error:0c0000be:ASN.1 encoding routines:OPENSSL_internal:WRONG_TAG
at com.android.org.conscrypt.OpenSSLX509CertificateFactory.engineGenerateCertificate(OpenSSLX509CertificateFactory.java:311)

它发生在这个特定的行 ->

return certificateFactory.generateCertificate(inputStream)

我尝试使用另一个 RSA 公钥（2048 位）进行同样的操作，它似乎有效。
我错误地获取了 3072 位 RSA 公钥？我做错了什么？

提前致谢。

Answer 1

所以我发现了问题，错误是我试图使用公钥，而我需要使用证书。我找到了此链接中的所有步骤https://www.scottbrady91.com/openssl/creating-rsa-keys-using-openssl

尝试在 Android 中获取 X.509 证书

问题描述投票：0回答：1

1个回答

最新问题

尝试在 Android 中获取 X.509 证书

问题描述 投票：0回答：1

1个回答

最新问题

问题描述投票：0回答：1