在 Springboot 和 JJWT 中使用 RSA 密钥时出错

Question

我目前正在按照此流程创建和使用我的 RSA 密钥

首先，我使用以下 bash 脚本创建 RSA 密钥。

# Generate pem private key in PEM-encoded X.509 format
openssl genrsa -out refresh.pem 4096
# generate public key
openssl rsa -in refresh.pem -out refresh.pub -pubout
# Convert the private key to PKCS#8 format
openssl pkcs8 -topk8 -inform PEM -in refresh.pem -outform PEM -out refresh.key -nocrypt

PRIVATE_KEY=$(sed '1d;$d' refresh.key | tr -d '\n' | base64 -w 0)
PUBLIC_KEY=$(sed '1d;$d' refresh.pub | tr -d '\n' | base64 -w 0)

echo "JWT_BE_PRIVATE_KEY=${PRIVATE_KEY}"
echo "JWT_BE_PUBLIC_KEY=${PUBLIC_KEY}"

然后使用终端中的变量，将它们添加到 .env 文件中

JWT_BE_PRIVATE_KEY=MIIJKA...
JWT_BE_PUBLIC_KEY=MIICIjA...

然后在我的 application.properties 中添加以下内容以使用环境变量。

jwt.private.key=${JWT_BE_PRIVATE_KEY}
jwt.public.key=${JWT_BE_PUBLIC_KEY}

最后我在我的组件中使用了这些变量

@Component
public class JJwtManager {

    private final SignatureAlgorithm alg = Jwts.SIG.RS512;
    private final RSAPrivateKey privateKey;
    private final RSAPublicKey publicKey;

    public JJwtManager(@Value("${jwt.private.key}") @NonNull String privateKeyStr,
                       @Value("${jwt.public.key}") @NonNull String publicKeyStr)
            throws Exception {
        KeyFactory keyFactory = KeyFactory.getInstance("RSA");
        this.privateKey = (RSAPrivateKey) keyFactory.generatePrivate(new PKCS8EncodedKeySpec
                (Decoders.BASE64.decode(privateKeyStr)));
        this.publicKey = (RSAPublicKey) keyFactory.generatePublic(new X509EncodedKeySpec
                (Decoders.BASE64.decode(publicKeyStr)));
    }
}

但是，我收到以下错误：

Caused by: java.security.spec.InvalidKeySpecException: java.security.InvalidKeyException: Unable to decode key
    at java.base/sun.security.rsa.RSAKeyFactory.engineGeneratePublic(RSAKeyFactory.java:241) ~[na:na]
    at java.base/java.security.KeyFactory.generatePublic(KeyFactory.java:351) ~[na:na]
    at com.example.security.manager.JJwtManager.<init>(JJwtManager.java:45) ~[classes/:na]
    at java.base/jdk.internal.reflect.DirectConstructorHandleAccessor.newInstance(DirectConstructorHandleAccessor.java:62) ~[na:na]
    at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Constructor.java:502) ~[na:na]
    at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:486) ~[na:na]
    at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:209) ~[spring-beans-6.2.0.jar:6.2.0]
    ... 37 common frames omitted
Caused by: java.security.InvalidKeyException: Unable to decode key
    at java.base/sun.security.x509.X509Key.decode(X509Key.java:375) ~[na:na]
    at java.base/sun.security.rsa.RSAPublicKeyImpl.<init>(RSAPublicKeyImpl.java:146) ~[na:na]
    at java.base/sun.security.rsa.RSAPublicKeyImpl.newKey(RSAPublicKeyImpl.java:78) ~[na:na]
    at java.base/sun.security.rsa.RSAKeyFactory.generatePublic(RSAKeyFactory.java:324) ~[na:na]
    at java.base/sun.security.rsa.RSAKeyFactory.engineGeneratePublic(RSAKeyFactory.java:237) ~[na:na]
    ... 43 common frames omitted
Caused by: java.io.IOException: extra data at the end
    at java.base/sun.security.util.DerValue.<init>(DerValue.java:432) ~[na:na]
    at java.base/sun.security.util.DerValue.<init>(DerValue.java:344) ~[na:na]
    at java.base/sun.security.x509.X509Key.decode(X509Key.java:373) ~[na:na]
    ... 47 common frames omitted

我会提前非常感谢任何可以帮助我的人。

目前组件构造函数代码已根据其他实现更改了多次，但它们相似或给出相同的错误。

Answer 1

在 bash 脚本中创建环境变量时遇到错误。 只需纠正一行即可避免使用已编码的密钥进行编码。

PRIVATE_KEY=$(sed '1d;$d' refresh.key | tr -d '\n')
PUBLIC_KEY=$(sed '1d;$d' refresh.pub | tr -d '\n')