如何在Android上使用KeyStore创建证书签名请求? [英] How do you create a Certificate Signing Request using the KeyStore on Android?

问题描述

我正在使用 KeyStore在Android应用中生成SSL KeyPair API.我想从公钥/私钥对创建证书签名请求(CSR)，以便可以将其发送到外部CA进行签名.

这可能吗?如果可能的话，我想使用内置的Android库而不是BouncyCastle，以便让Android安全地存储密钥.

解决方案

证书注册过程

检查此链接.它生成密钥对和CSR.关于在Android手机上生成CSR(证书签发请求)，我认为使用Spongycastle代替它相当简单.这是Bouncycastle的android端口.

I'm generating a SSL KeyPair in an Android app using the KeyStore API. I want to create a Certificate Signing Request (CSR) from the Public/Private key pair so that it can be sent to an external CA for signing.

Is this possible? I'd like to use the builtin Android libraries rather than BouncyCastle if possible, in order to have Android store the keys securely.

解决方案

Certificate enrollment process

Check this link. It generate key pair and CSR. Regarding generating a CSR (certificate sign request) on the android phone, I think it is rather straightforward to use Spongycastle instead. It is an android port of Bouncycastle.

这篇关于如何在Android上使用KeyStore创建证书签名请求?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！