本文介紹了java.security.InvalidKeyException：生成RSA公鑰時(shí)密鑰格式無效的處理方法，對(duì)大家解決問題具有一定的參考價(jià)值，需要的朋友們下面隨著小編來一起學(xué)習(xí)吧！
問題描述
背景：
我已經(jīng)創(chuàng)建了一個(gè)小程序來提取從智能卡提取的證書的公鑰。
然后將該公鑰存儲(chǔ)在數(shù)據(jù)庫中。
證書的私鑰被用來簽署數(shù)據(jù)，然后公鑰被用來驗(yàn)證簽名。
證書公鑰提取代碼：
private byte[] getPublicKey(KeyStore paramKeyStore)
throws GeneralSecurityException {
Enumeration localEnumeration = paramKeyStore.aliases();
if (localEnumeration.hasMoreElements()) {
String element = (String) localEnumeration.nextElement();
Certificate[] arrayOfCertificate =
paramKeyStore.getCertificateChain(element);
byte[] publicKeyByteArray =
arrayOfCertificate[0].getPublicKey().getEncoded();
return publicKeyByteArray;
}
throw new KeyStoreException("The keystore is empty!");
}
此public KeyByteArray在使用bytes2String方法轉(zhuǎn)換為字符串后作為BLOB存儲(chǔ)在數(shù)據(jù)庫中：
private static String bytes2String(byte[] bytes) {
StringBuilder string = new StringBuilder();
for (byte b : bytes) {
String hexString = Integer.toHexString(0x00FF & b);
string.append(hexString.length() == 1 ? "0" + hexString : hexString);
}
return string.toString();
}
保存在數(shù)據(jù)庫中的blob(Key)內(nèi)容為：
30820122300d06092a864886f70d01010105000382010f003082010a02820101009bd307e4fc38adae43b93ba1152a4d6dbf82689336bb4e3af5160d16bf1599fe070f7acbfefd93e866e52043de1620bd57d9a3f244fb4e6ef758d70d19e0be86e1b12595af748fbc00aad9009bd61120d3348079b00af8462de46e254f6d2b092cbc85c7f6194c6c37f8955ef7b9b8937a7e9999541dbbea8c1b2349c712565482dbd573cd9b7ec56a59e7683b4c246620cf0d8148ed38da937f1e4e930eb05d5b4c6054712928fa59870763468c07e71265525e1e40839b51c833579f5742d3c8e0588766e3ed6deef1593b10baad0a2abea34734de1505d37710e1cfaa4225b562b96a6a4e87fecb1d627d4c61916e543eba87054ee9212e8183125cdb49750203010001
從數(shù)據(jù)庫讀取存儲(chǔ)的公鑰byte[]后，我嘗試使用以下代碼將其轉(zhuǎn)換回公鑰：
Cipher rsa;
rsa = Cipher.getInstance("RSA");
KeyFactory keyFactory = KeyFactory.getInstance("RSA");
X509EncodedKeySpec publicKeySpec = new X509EncodedKeySpec(pkey.getBytes());
PublicKey pk = keyFactory.generatePublic(publicKeySpec);
rsa.init(Cipher.DECRYPT_MODE, pk);
byte[] cipherDecrypt = rsa.doFinal(encryptedText.getBytes());
但出現(xiàn)以下錯(cuò)誤：
Caused by: java.security.InvalidKeyException: invalid key format
at sun.security.x509.X509Key.decode(X509Key.java:387)
at sun.security.x509.X509Key.decode(X509Key.java:403)
at sun.security.rsa.RSAPublicKeyImpl.<init>(RSAPublicKeyImpl.java:83)
at sun.security.rsa.RSAKeyFactory.generatePublic(RSAKeyFactory.java:298)
at sun.security.rsa.RSAKeyFactory.engineGeneratePublic(RSAKeyFactory.java:201)
請(qǐng)建議此問題的原因和解決方案。
推薦答案
您從數(shù)據(jù)庫讀回密鑰的方式肯定有錯(cuò)誤。下面的代碼非常適合我：
String key = "3082012230..."; // full key omitted for brevity
byte[] derPublicKey = DatatypeConverter.parseHexBinary(key);
KeyFactory keyFactory = KeyFactory.getInstance("RSA");
X509EncodedKeySpec publicKeySpec = new X509EncodedKeySpec(derPublicKey);
keyFactory.generatePublic(publicKeySpec);
根據(jù)pkey.getBytes()的用法，我猜您只是嘗試從字符串中獲取字節(jié)，而不是禍不單行解碼。
這篇關(guān)于java.security.InvalidKeyException：生成RSA公鑰時(shí)密鑰格式無效的文章就介紹到這了，希望我們推薦的答案對(duì)大家有所幫助，
