文章标题

/// 验证签名
public static boolean Verify(String Xml, String publicKeyPath) throws Exception {
int begin = Xml.indexOf("<Signature>") + "<Signature>".length();
int len = Xml.indexOf("</Signature>") - begin;

String SignatureString = Xml.substring(begin, len+begin);
String OriginalString = Xml.replace("<Signature>" + SignatureString + "</Signature>", "");
// 将base64签名数据转码为字节
byte[] signedBase64 = Base64Utils.decodeFromString(SignatureString);//(OriginalString.getBytes());
// TODO 数字证书
InputStream inStream = new FileInputStream(publicKeyPath);// 文件
CertificateFactory cf = CertificateFactory.getInstance("X.509");//X.509
X509Certificate cert = (X509Certificate) cf.generateCertificate(inStream);
inStream.close();
// 得到公钥
RSAPublicKey publicKey = (RSAPublicKey) cert.getPublicKey();
// 构建签名
Signature signature = Signature.getInstance(cert.getSigAlgName());//SHA1WithRSA
signature.initVerify(publicKey);
signature.update(Base64Utils.encode(OriginalString.getBytes()));
return signature.verify(signedBase64);
}

/**
* <p>
* 生成数据签名
* </p>
*
* @param data 源数据
* @param keyStorePath 密钥库存储路径
* @param alias 密钥库别名
* @param password 密钥库密码
* @return
* @throws Exception
*/
//如果已知私钥XXX.pfx，和私钥密码，但不清楚密钥库别名是什么，可以用以下命令查看私钥信息
//keytool -v -list -storetype pkcs12 -keystore XXX.pfx
public static String sign(String data, String keyStorePath, String alias, String password)
throws Exception {
// 获取私钥
FileInputStream in = new FileInputStream(keyStorePath);
KeyStore keyStore = KeyStore.getInstance("PKCS12");
keyStore.load(in, password.toCharArray());
in.close();
// 获得证书
X509Certificate x509Certificate =(X509Certificate)keyStore.getCertificate(alias);
// X509Certificate x509Certificate = (X509Certificate) getCertificate(keyStorePath, alias, password);
// 取得私钥
PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, password.toCharArray());
// 构建签名
Signature signature = Signature.getInstance(x509Certificate.getSigAlgName());
signature.initSign(privateKey);
signature.update(data.getBytes("utf-8"));
byte[] sing = signature.sign();
return Base64Utils.encodeToString(sing);
}