Services for working with PEM encoded private keys, public keys and certificates.

Read a public key

PublicKey readPublicKey(Path path) {
 try (ReadableByteChannel pem = Files.newByteChannel(path)) {
  return Pem.decoder()
            .decodePublicKey(pem);
  }
}

Read an unencrypted private key

PrivateKey readPrivateKey(Path path) {
 try (ReadableByteChannel pem = Files.newByteChannel(path)) {
  return Pem.decoder()
            .decodePrivateKey(pem);
  }
}

Read an encrypted private key

PrivateKey readPrivateKey(Path path, char[] passphrase) {
 try (ReadableByteChannel pem = Files.newByteChannel(path)) {
  return Pem.decoder()
            .with(passphrase)
            .decodePrivateKey(pem);
  }
}

Write a public key

void writePublicKey(Path path,final PublicKey publicKey) {
 try (WritableByteChannel pem = Files.newByteChannel(path)) {
  return Pem.encoder()
            .write(pem,publicKey);
  }
}

Write an unencrypted private key

void writePrivateKey(Path path,final PrivateKey privateKey) {
 try (WritableByteChannel pem = Files.newByteChannel(path)) {
  return Pem.encoder()
            .write(pem,privateKey);
  }
}

Write an encrypted private key in PKCS1 format

void writePkcs1PrivateKey(Path path,final PrivateKey privateKey, char[] passphrase) {
 try (WritableByteChannel pem = Files.newByteChannel(path)) {
  return Pem.encoder()
            .with(Pem.Format.LEGACY)
            .with(passphrase)
            .write(pem,privateKey);
  }
}