加载秘钥java.security.InvalidKeyException: IOException : Short read of DER length异常处理

发表于： 2022年1月25日 2022年1月25日
分类： Java
标签： Java, 异常, 秘钥

用如下方法加载私钥时，可能会抛出java.security.InvalidKeyException: IOException : Short read of DER length：

public static PrivateKey getPrivateKeyFromBytes(String crtBase64, String type) throws Exception {
		try {
			byte[] baKey = Base64.decode(crtBase64);
			KeyFactory keyFactory = KeyFactory.getInstance("RSA");
			PrivateKey prvkey = keyFactory.generatePrivate(
					type.equals("PKCS") ? new PKCS8EncodedKeySpec(baKey) : new X509EncodedKeySpec(baKey));
			return prvkey;
		} catch (Exception e) {
			throw new Exception("读取私钥失败" + e.getMessage());
		}
	}

异常详情类似如下：

Caused by: java.security.InvalidKeyException: IOException : Short read of DER length
        at sun.security.pkcs.PKCS8Key.decode(PKCS8Key.java:351)
        at sun.security.pkcs.PKCS8Key.decode(PKCS8Key.java:356)
        at sun.security.rsa.RSAPrivateCrtKeyImpl.<init>(RSAPrivateCrtKeyImpl.java:91)
        at sun.security.rsa.RSAPrivateCrtKeyImpl.newKey(RSAPrivateCrtKeyImpl.java:75)
        at sun.security.rsa.RSAKeyFactory.generatePrivate(RSAKeyFactory.java:316)
        at sun.security.rsa.RSAKeyFactory.engineGeneratePrivate(RSAKeyFactory.java:213)
		at com.alipay.api.internal.util.AlipaySignature.rsa256Sign(AlipaySignature.java:141)
        at com.alipay.api.internal.util.AlipaySignature.rsaSign(AlipaySignature.java:102)
        at com.alipay.api.DefaultAlipayClient.getRequestHolderWithSign(DefaultAlipayClient.java:323)
        at com.alipay.api.DefaultAlipayClient.doPost(DefaultAlipayClient.java:452)
        at com.alipay.api.DefaultAlipayClient._execute(DefaultAlipayClient.java:403)
        at com.alipay.api.DefaultAlipayClient.execute(DefaultAlipayClient.java:130)
        at com.alipay.api.DefaultAlipayClient.execute(DefaultAlipayClient.java:117)
        at com.alipay.api.DefaultAlipayClient.execute(DefaultAlipayClient.java:111)
        at sun.reflect.GeneratedMethodAccessor164.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205)
        at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:133)
        at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:97)
        at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:827)
        at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:738)
        at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:85)
        at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967)

导致异常的原因通常有两种：第一，JDK加密算法问题，第二，秘钥内容自身问题。