密钥库在哪里？

Question

我目前在我的 android 应用程序中存储了一个 RSA 密钥，它将用于用户应用程序数据的应用程序加密。

我生成密钥并将其存储为密钥目录中的文件，如下所示：

public RSA(char[] password) throws Exception
{
    private static final String filePath =   System.getProperty("user.dir") + "/keys/";
    mCurrentPassword = password;
    KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
    File possibleKeyFile = new File(filePath + "/" + keyAlias);
    //FileInputStream keyFile = new FileInputStream(filePath + "/" + keyAlias);

    if(!possibleKeyFile.exists()) //if keystore is empty, create a key
    {
        mCurrentCertificate = generateCert();
        //Store the new keypair
        ks.load(null, password);

        KeyStore.ProtectionParameter protParam =
                new KeyStore.PasswordProtection(password);

        java.security.cert.Certificate[] myCert =
                new java.security.cert.Certificate[] {
                        (java.security.cert.Certificate) mCurrentCertificate
                };

        KeyStore.PrivateKeyEntry pkEntry =
                new KeyStore.PrivateKeyEntry(mCurrentRSAKeyPair.getPrivate(),
                        myCert);

        ks.setEntry(keyAlias, pkEntry, protParam);
        OutputStream os = new FileOutputStream(new File(filePath + "/" + keyAlias));

        ks.store(os , password);

    }
    else
    {
        //retrieve keypair and assign it to mCurrentKeyPair
        mCurrentRSAKeyPair = getKey(keyAlias, password);
    }
}

当我在调试模式下检索我的 android 上的密钥库时，我收到一条错误消息，指出文件不存在（目录无效）。我想知道如果存储路径设置为那样，密钥实际存储在哪里？

获取密钥对的代码：

private static KeyPair getKey(String alias, char[] password) throws Exception
{
    KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
    FileInputStream keyFile = new FileInputStream(filePath + "/" + alias);
    ks.load(keyFile, password);

    KeyStore.ProtectionParameter protParam =
            new KeyStore.PasswordProtection(password);

    KeyStore.PrivateKeyEntry privateKeyEntry =
            (KeyStore.PrivateKeyEntry) ks.getEntry(alias, protParam);
    RSAPrivateKey privateKey = (RSAPrivateKey) privateKeyEntry.getPrivateKey();
    //get public key from private key
    KeyFactory kf = KeyFactory.getInstance("RSA");
    RSAPrivateKeySpec priv = kf.getKeySpec(privateKey, RSAPrivateKeySpec.class);
    RSAPublicKeySpec keySpec = new RSAPublicKeySpec(priv.getModulus(), BigInteger.valueOf(65537));
    PublicKey publicKey = kf.generatePublic(keySpec);

    KeyPair kp = new KeyPair(publicKey, privateKey);

    return kp;
}

Answer 1

OutputStream os = new FileOutputStream(new File(filePath + "/" + keyAlias));

在执行这一行之前，你应该执行这一行：

filePath.mkdirs();

目前可能目录“keys”不存在，而您没有采取任何措施来确保它存在。

您还需要在存储密钥库后关闭输出流。看来您也在某处忽略了IOException 或FileNotFoundException。