利用bouncycastle 生成pfx公私钥文件

// 注册bouncycastleprovider
Security.addProvider(new BouncyCastleProvider());

String pfxPath = "d:/my.pfx";
KeyStore keyStore = KeyStore.getInstance("PKCS12");
keyStore.load(null, null);

// RSA算法产生公钥和私钥
KeyPairGenerator generator = KeyPairGenerator.getInstance("RSA");
generator.initialize(2048);
KeyPair keyPair = generator.generateKeyPair();

// 组装证书
String issuer = "C=CN,ST=BJ,L=BJ,O=SICCA,OU=SC,CN=SICCA";
String subject = issuer;
X509V3CertificateGenerator certGen = new X509V3CertificateGenerator();
certGen.setSerialNumber(BigInteger.valueOf(System.currentTimeMillis()));
certGen.setIssuerDN(new X500Principal(issuer));
// 设置证书有效期
certGen.setNotBefore((new Date(System.currentTimeMillis() - 3600 * 1000 * 5)));
certGen.setNotAfter((new Date(System.currentTimeMillis() + 3600 * 1000 * 5)));
certGen.setSubjectDN(new X500Principal(subject));
certGen.setPublicKey(keyPair.getPublic());
certGen.setSignatureAlgorithm("SHA256WithRSAEncryption");
X509Certificate cert = certGen.generateX509Certificate(keyPair.getPrivate());

keyStore.setKeyEntry("ts测试证书", keyPair.getPrivate(), "atlas".toCharArray(), new Certificate[]
{ cert });

FileOutputStream fos = new FileOutputStream(new File(pfxPath));
keyStore.store(fos, "atlas".toCharArray());
fos.flush();
fos.close();