java JSch 在尝试通过 KeyPairGenerator 加载 RSA 私钥时获取“无效私钥：”

Question

提问by user627110

I'm using java.security.KeyPairGenerator to gen an RSA key pair, and then try to load the private key via the KeyPair class provided in Jsch(0.1.49). The code:

我正在使用 java.security.KeyPairGenerator 生成 RSA 密钥对，然后尝试通过 Jsch(0.1.49) 中提供的 KeyPair 类加载私钥。代码：

public static void main(String[] args) {
    String header = "-----BEGIN RSA PRIVATE KEY-----";
    String footer = "-----END RSA PRIVATE KEY-----";
    KeyPairGenerator keyPairGenerator;
    try {
        keyPairGenerator = KeyPairGenerator.getInstance("RSA");
        keyPairGenerator.initialize(2048, new SecureRandom());
        PrivateKey privateKey = keyPairGenerator.genKeyPair().getPrivate();
        String key = new String(Base64.encodeBase64(privateKey.getEncoded()));
        StringBuffer pem = new StringBuffer(header+"\n");
        int len=key.length();
        for( int idx=0 ; idx < len ; idx+= 64 )
            pem.append(key.substring(idx, (idx+64)<len?(idx+64):len)+"\n");
        pem.append(footer);
        String privateKeyStr = pem.toString();
        System.out.println(privateKeyStr);
        com.jcraft.jsch.KeyPair.load(null, privateKeyStr.getBytes(), null);
    } catch (JSchException e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    } catch (NoSuchAlgorithmException e1) {
        // TODO Auto-generated catch block
        e1.printStackTrace();
    }
}

The output by System.out:

System.out 的输出：

Then I see exceptions from KeyPair saying it's an invalid private key, I checked the source code of JSch, the exception is due to an indexoutofboundswhile the data's being parsed. The stacktrace:

然后我看到来自 KeyPair 的异常说它是一个无效的私钥，我检查了 JSch 的源代码，异常是由于在解析数据时indexoutofbounds。堆栈跟踪：

com.jcraft.jsch.JSchException: invalid privatekey: [B@5f2e5f2e
    at com.jcraft.jsch.KeyPair.load(KeyPair.java:809)
    at com.ibm.maestro.common.utils.Test.main(Test.java:149)

I'm guessing I can fix this issue by adding/changing some parms while generating the key pair, any clue? Your help will be highly appreciated!

我猜我可以通过在生成密钥对时添加/更改一些参数来解决这个问题，有什么线索吗？您的帮助将不胜感激！

Answer 1

采纳答案by Duncan Jones

The Sun JCA provider will return an DER-encoded unencrypted PKCS #8 structure, rather than an RSAPrivateKey object when you call PrivateKey.getEncoded().

Sun JCA 提供程序将在您调用PrivateKey.getEncoded().

You can use BouncyCastle to give you the key in the format you require:

您可以使用 BouncyCastle 为您提供所需格式的密钥：

import java.io.StringWriter;
import java.security.KeyPairGenerator;
import java.security.PrivateKey;
import java.security.SecureRandom;

import org.bouncycastle.openssl.PEMWriter;

public class JSCH {

  public static void main(String[] args) throws Exception {
    KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");
    keyPairGenerator.initialize(2048, new SecureRandom());
    PrivateKey privateKey = keyPairGenerator.genKeyPair().getPrivate();

    StringWriter writer = new StringWriter();

    try (PEMWriter pemWriter = new PEMWriter(writer)) {
      pemWriter.writeObject(privateKey);
    }

    String privateKeyStr = writer.toString();
    System.out.println(privateKeyStr);
    com.jcraft.jsch.KeyPair
        .load(null, privateKeyStr.getBytes("US-ASCII"), null);
  }
}

There may be a more elegant way to get the encoded key as a byte string. It feels ugly to write it as a string and call getBytes(), but perhaps you can look into this.

可能有一种更优雅的方法将编码的密钥作为字节字符串获取。把它写成一个字符串并调用感觉很难getBytes()看，但也许你可以看看这个。

Example output:

示例输出：

Answer 2

回答by Abdelhameed Mahmoud

You can use PEMWriter to convert your private key to PEM format that will be accepted by JSch

您可以使用 PEMWriter 将您的私钥转换为 JSch 接受的 PEM 格式

The following example converts a key returned from KeyStore (JKS)

以下示例转换从 KeyStore (JKS) 返回的密钥

Key privateKey = KeyStore.getKey(privateKeyAlias, keyStorePassword);//get key from JKS
StringWriter stringWriter = new StringWriter();
PEMWriter pemWriter = new PEMWriter(stringWriter);
pemWriter.writeObject(privateKey);
pemWriter.close();

byte[] privateKeyPEM = stringWriter.toString().getBytes();

java JSch 在尝试通过 KeyPairGenerator 加载 RSA 私钥时获取“无效私钥：”

提问by user627110

采纳答案by Duncan Jones

回答by Abdelhameed Mahmoud

相关推荐

最近更新

标签

java JSch 在尝试通过 KeyPairGenerator 加载 RSA 私钥时获取“无效私钥：”

提问by user627110

采纳答案by Duncan Jones

回答by Abdelhameed Mahmoud

相关推荐

java 当我调用取消时 timer.scheduleAtFixedRate 不会停止

java jaxws-maven-plugin 解析相对于类位置的 WSDL 位置，为什么？

java 可以递增的锁存器

获取 Apache POI java.lang.IllegalStateException：尝试读取 xlsx 文件时 Zip 文件已关闭

相关推荐

最近更新

标签