在 Swift iOS 中生成 X.509 证书（和公钥/私钥）

发布于 2025-01-11 23:06:28 字数 882 浏览 0 评论 0原文

我想生成公钥/私钥以及证书。我想将此证书发送到服务器以供将来验证。我可以使用 SecKeyCreateRandomKey 和 SecKeyCopyPublicKey 生成公钥和私钥。我还使用 SecKeyCopyExternalRepresentation 创建了密钥的外部表示形式，该表示形式采用 DER 格式。我不知道如何从中创建自签名 X.509 证书。

Android 上类似的东西：keyStore.getCertificate()

let tag = "com.example.keys.test".data(using: .utf8)!
let attributes: [String: Any] =
            [kSecAttrKeyType as String: kSecAttrKeyTypeRSA,
             kSecAttrKeySizeInBits as String:      2048,
             kSecPrivateKeyAttrs as String:
                [kSecAttrIsPermanent as String:    true,
                 kSecAttrApplicationTag as String: tag]
        ]
var error: Unmanaged<CFError>?
let privateKey = SecKeyCreateRandomKey(attributes as CFDictionary, &error)
let publicKey = SecKeyCopyPublicKey(privateKey!)
let publicKeyData = SecKeyCopyExternalRepresentation(publicKey!, &error)! as Data

原文

I want to generate a public/private key along with a certificate. I want to send this certificate to the server for future validation. I am able to generate the public and private key using SecKeyCreateRandomKey and SecKeyCopyPublicKey. I have also created an external representation of the key using SecKeyCopyExternalRepresentation, which is in DER format. I am stuck on how to create a self signed X.509 certificate from this.

Something similar to this on Android: keyStore.getCertificate()

let tag = "com.example.keys.test".data(using: .utf8)!
let attributes: [String: Any] =
            [kSecAttrKeyType as String: kSecAttrKeyTypeRSA,
             kSecAttrKeySizeInBits as String:      2048,
             kSecPrivateKeyAttrs as String:
                [kSecAttrIsPermanent as String:    true,
                 kSecAttrApplicationTag as String: tag]
        ]
var error: Unmanaged<CFError>?
let privateKey = SecKeyCreateRandomKey(attributes as CFDictionary, &error)
let publicKey = SecKeyCopyPublicKey(privateKey!)
let publicKeyData = SecKeyCopyExternalRepresentation(publicKey!, &error)! as Data

分享到QQ

分享到微博