在Java 9-13中用于生成自签名证书的API是什么？

Question

[我们有一个代码可生成运行Java 8的自签名证书（该API已在Java 9中删除）。从JDK 9开始，似乎会有一个新的API用于生成自签名证书：https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8165481

是否有与之相同的示例：

   class Foo{
     public Foo(){
        CertAndKeyGen keyGen = new CertAndKeyGen("RSA", "SHA256withRSA", null);
        keyGen.generate(2048);
        rootPrivateKey = keyGen.getPrivateKey();
        rootCertificate = keyGen.getSelfCertificate(new X500Name("CN=FooBar"), (long) 24 * 60 * 60);
        CertAndKeyGen subKeyGen =new CertAndKeyGen("RSA","SHA256withRSA",null);
        subKeyGen.generate(2048);
        subPrivateKey = subKeyGen.getPrivateKey();
        subCertificate = subKeyGen.getSelfCertificate(new X500Name("CN=FizzBuzz"), (long) 24 * 60 * 60);

        rootCertificate   = signCertificate(rootCertificate, rootCertificate, rootPrivateKey);
        subCertificate = signCertificate(subCertificate, rootCertificate, rootPrivateKey);

        X509Certificate[] certChain = new X509Certificate[]{subCertificate,rootCertificate};

        KeyStore store = KeyStore.getInstance("PKCS12");
        store.load(null, null);
        store.setKeyEntry("FizzBuzz Private Key", subPrivateKey, certificatePassword.toCharArray(), certChain);
}

    public X509Certificate signCertificate (X509Certificate inputCertificate, X509Certificate issuerCertificate, PrivateKey issuerPrivateKey)throws Exception {
            X509CertInfo info = new X509CertInfo(inputCertificate.getTBSCertificate());
            info.set(X509CertInfo.ISSUER, issuerCertificate.getSubjectDN());
            X509CertImpl outCert = new X509CertImpl(info);
            outCert.sign(issuerPrivateKey, issuerCertificate.getSigAlgName());
            return outCert;
    }
}

在Java 11中？

============== << [更新 ============>功能请求在这里：https://bugs.java.com/bugdatabase/view_bug.do?bug_id=8058778

[我们有一个代码可生成运行Java 8的自签名证书（该API已在Java 9中删除）。似乎将有一个新的API，用于从...

Answer 1

您可以使用OkHttp中的实用程序类来实现此目的

Answer 2

似乎将有一个新的API从JDK 9开始生成自签名证书。