请教：如何用JAVA程序实现数字证书的产生？

[jeffzhou]

已有用于签名的根CA证书和用户的的一些身份信息，JAVA中有没有
相应的变成接口可以生成新证书啊？谢谢赐教！

[huchengyu]

我也想知道，帮你顶一下

[yll6865]

up

[bjgxjob]

What Java Tool Can Generate, Display, Import, and Export X.509 Certificates?
There is a tool named keytool ( for Solaris ) ( for Windows ) that can be used to create public/private key pairs and self-signed X.509 v1 certificates, and to manage keystores. Keys and certificates are used to digitally sign your Java applications and applets (see the jarsigner ( for Solaris ) ( for Windows ) tool).
A keystore is a protected database that holds keys and certificates for an enterprise. Access to a keystore is guarded by a password (defined at the time the keystore is created, by the person who creates the keystore, and changeable only when providing the current password). In addition, each private key in a keystore can be guarded by its own password.

Using keytool, it is possible to display, import, and export X.509 v1, v2, and v3 certificates stored as files, and to generate new self-signed v1 certificates. For examples, see the "EXAMPLES" section of the keytool documentation ( for Solaris ) ( for Windows ).