使用TrueLicense来保护我们的JAVA软件产品
我们的JAVA软件产品有时需要限制非法用户，只有购买了LICENSE的用户才能使用，因此，我们可以通过TrueLicense来实现。
首先要用KeyTool工具来生成私匙库：
keytool -genkey -alias privatekey -keystore privateKeys.store
然后把私匙库内的公匙导出到一个文件当中：
keytool -export -alias privatekey -file certfile.cer -keystore privateKeys.store
然后再把这个证书文件导入到公匙库：
keytool -import
-alias publiccert -file certfile.cer -keystore publicCerts.store
服务器端利用私匙库来创建license的代码例子：
package com.sourceware.license; import de.schlichtherle.license.*; import java.io.*; import java.util.*; import javax.security.auth.x500.X500Principal; import java.util.prefs.Preferences; /** * <p>Title: CMVP通用媒体增值业务平台</p> * * <p>Description: CMVP通用媒体增值业务平台</p> * * <p>Copyright: Copyright (c) 2005</p> * * <p>Company: source-ware.com inc.</p> * * @author 黑山 * @version 2.0 */ public class SWLicenseManager { public SWLicenseManager() { } LicenseContent verifyLicenseKey(LicenseParam parameter) { // Create a configured license manager. LicenseManager manager = new LicenseManager(parameter); try { // Verify the previously installed current license certificate. return manager.verify(); } catch (Exception exc) { System .err.println("Could not verify license key" ); exc.printStackTrace(); return null ; } } void installLicenseKey(LicenseParam parameter, File keyFile) { // Create a configured license manager. LicenseManager manager = new LicenseManager(parameter); try { // Load the license key, verify and install it as the current license key. manager.install(keyFile); } catch (Exception exc) { System .err.println("Could not install license certificate" ); exc.printStackTrace(); } } void createLicenseKey(LicenseParam parameter, LicenseContent content) { // Create a configured license manager. LicenseManager manager = new LicenseManager(parameter); try { // Create the license key from the license content and save it to a file. manager.store(content, new File("license.lic" )); } catch (Exception exc) { System .err.println("Could not save license key" ); exc.printStackTrace(); } } // // Customizable global properties. // /** The product id of your software */ public static final String PRODUCT_ID = "cmvp20" ; // CUSTOMIZE /** * The subject for the license manager and also the alias of the private * key entry in the keystore. */ public static final String SUBJECT = "别名" ; // CUSTOMIZE /** The resource name of your private keystore file. */ public static final String KEYSTORE_RESOURCE = "私匙库文件名" ; // CUSTOMIZE /** The password for the keystore. */ public static final String KEYSTORE_STORE_PWD = "私匙库密码" ; // CUSTOMIZE /* The password for the private key entry in the keystore. */ public static final String KEYSTORE_KEY_PWD = "私匙库主键密码" ; // CUSTOMIZE /** The password to encrypt the generated license key file. */ public static final String CIPHER_KEY_PWD = "即将生成的license密码" ; // CUSTOMIZE /** * The filename to be displayed for the generated binary key file when * delivered. Please note that this is not used to write to a file of * this name. */ public static final String DISPLAY_FILENAME = "license.lic" ; // CUSTOMIZE // // The rest of this key generator does not need to get customized. // /** The MIME type of the generated binary key file. */ public static final String MIME_TYPE = "application/octet-stream" ; // // Possible key generator exit codes // /** * Return <code>ERC_SUCCESS</code> on succesful creation of a textual key. * Note that this example creates a binary key and thus this constant is not * used here */ //public static final int ERC_SUCCESS = 00; /** * Return <code>ERC_SUCCESS_BIN</code> on succesful creation of a binary * key. (Which could contain text as well, if the content type is specified * as <code>text/plain</code>) */ public static final int ERC_SUCCESS_BIN = 01; /** * Return <code>ERC_ERROR</code> for general errors. */ public static final int ERC_ERROR = 10; /** * Return <code>ERC_MEMORY</code> if memory allocation fails. */ public static final int ERC_MEMORY = 11; /** * Return <code>ERC_FILE_IO</code> on IOException */ public static final int ERC_FILE_IO = 12; /** * Return <code>ERC_BAD_ARGS</code> if the command line parameters are * bad. */ public static final int ERC_BAD_ARGS = 13; /** * Return <code>ERC_BAD_INPUT</code> if a particular input value is * missing or has a bad value. Don't forget to supply a meaningful error * message naming the exact cause of the error. */ public static final int ERC_BAD_INPUT = 14; /** * Return <code>ERC_EXPIRED</code> if this generator is expired. This can * be used to limit the lifetime of this generator. */ //public static final int ERC_EXPIRED = 15; /** * Return <code>ERC_INTERNAL</code> if an unhandled exception occurs. * * @see java.lang.Exception */ //public static final int ERC_INTERNAL = 16; /** Encoding keys in properties. */ public static final String ENCODING_KEY = "ENCODING" ; public static final String PRODUCT_ID_KEY = "PRODUCT_ID" ; public static final String PURCHASE_ID_KEY = "PURCHASE_ID" ; public static final String RUNNING_NO_KEY = "RUNNING_NO" ; public static final String PURCHASE_DATE_KEY = "PURCHASE_DATE" ; public static final String LANGUAGE_ID_KEY = "LANGUAGE_ID" ; public static final String QUANTITY_KEY = "QUANTITY" ; public static final String REG_NAME_KEY = "REG_NAME" ; public static final String ADDITIONAL1_KEY = "ADDITIONAL1" ; public static final String ADDITIONAL2_KEY = "ADDITIONAL2" ; public static final String RESELLER_KEY = "RESELLER" ; public static final String LASTNAME_KEY = "LASTNAME" ; public static final String FIRSTNAME_KEY = "FIRSTNAME" ; public static final String COMPANY_KEY = "COMPANY" ; public static final String EMAIL_KEY = "EMAIL" ; public static final String PHONE_KEY = "PHONE" ; public static final String FAX_KEY = "FAX" ; public static final String STREET_KEY = "STREET" ; public static final String ZIP_KEY = "ZIP" ; public static final String CITY_KEY = "CITY" ; public static final String STATE_KEY = "STATE" ; public static final String COUNTRY_KEY = "COUNTRY" ; /** Default encoding for properties. */ public static final String ENCODING_PROPERTIES = "ISO-8859-1" ; /** Default share-it encoding if key not present in properties. */ public static final String ENCODING_DEFAULT = ENCODING_PROPERTIES; protected static final LicenseManager manager = new LicenseManager( new DefaultLicenseParam( SUBJECT, Preferences.userRoot(), new DefaultKeyStoreParam( SWLicenseManager.class, // CUSTOMIZE KEYSTORE_RESOURCE, SUBJECT, KEYSTORE_STORE_PWD, KEYSTORE_KEY_PWD), new DefaultCipherParam(CIPHER_KEY_PWD))); /** * Validates the properties and generates a license certificate file. */ private static void generateLicense(Properties props, File certFile) throws Exception { // Check for supported product id. final String productId = props.getProperty(PRODUCT_ID_KEY); if (!PRODUCT_ID.equals(productId)) { throw new BadInputException("Bad product ID: " + productId); } final StringBuffer dn = new StringBuffer (); addAttribute(dn, "CN" , props.getProperty(FIRSTNAME_KEY) + ' ' + props.getProperty(LASTNAME_KEY)); if (dn.length() == 0) { addAttribute(dn, "CN" , props, REG_NAME_KEY); } addAttribute(dn, "O" , props, COMPANY_KEY); addAttribute(dn, "STREET" , props, STREET_KEY); addAttribute(dn, "L" , props.getProperty(ZIP_KEY) + ' ' + props.getProperty(CITY_KEY)); addAttribute(dn, "ST" , props, STATE_KEY); addAttribute(dn, "C" , props, COUNTRY_KEY); final X500Principal holder = new X500Principal(dn.toString()); final X500Principal issuer = new X500Principal( "OU=share-it!,O=element 5 AG,STREET=Vogelsanger Strasse 78,L=50823 K\u00F6ln,ST=Nordrhein-Westfalen,C=DE" ); final LicenseContent content = new LicenseContent(); content.setHolder(holder); content.setIssuer(issuer); content.setConsumerType("User" ); content.setConsumerAmount(1); content.setInfo(props.toString()); content.setSubject(SUBJECT); java.util.Calendar cal =java.util.Calendar.getInstance(); cal.set(2006,1,1); content.setNotAfter(cal.getTime()); manager.store(content, certFile); } private static final void addAttribute( final StringBuffer dn, final String oid, final Properties props, final String key) { addAttribute(dn, oid, props.getProperty(key)); } private static void addAttribute( final StringBuffer dn, final String oid, String value) { if (value == null ) { return ; } final String trimmedValue = value.trim(); if ("".equals(trimmedValue)) { return ; } // See http://www.ietf.org/rfc/rfc2253.txt boolean quote = false ; if (!value.equals(trimmedValue)) { quote = true ; } else if (value.matches(".*[+,;<>\" ].*")) { ; } quote = true ; if (dn.length() != 0) { dn.append(','); } dn.append(oid); dn.append('='); if (quote) { dn.append('"'); } // Replace every single backslash with two backslashes // whereas both parameters are expressed as regular expressions. value = value.replaceAll("\\\\" , "\\\\\\\\" ); // Replace every single quote with an escaped quote // whereas both parameters are expressed as regular expressions. value = value.replaceAll("\" ", " \\\\\""); dn.append(value); if (quote) { dn.append('"'); } } private static Properties readInput(String pathname) throws IOException { Properties props = new EncodedProperties(); InputStream in = new FileInputStream(pathname); try { props.load(in); } catch (IllegalArgumentException iae) { throw new BadInputException(iae); } finally { in.close(); } return props; } /** * This is the main entry point for JAVA key generators. It processes the * command line arguments, loads and parses the input file, calls the key * generator and writes output files. * * JAVA Exceptions are handled and transformed into key generator error * codes. Exception messages will be written to <code>args[1]</code> and * display on the error console. */ public static int KeyMain(String args[]) { args = new String [3]; args[0] = "license.properties" ; args[1] = "license.status" ; args[2] = "license.lic" ; if (args.length != 3) { System .err.println("Usage: <input> <output1> <output2>" ); return ERC_BAD_ARGS; } int errorCode = ERC_ERROR; PrintWriter out = new PrintWriter(System .err); try { try { // Read input and get encoding final Properties props = readInput(args[0]); final String encoding = props.getProperty(ENCODING_KEY, ENCODING_DEFAULT); // Setup real output with encoding read from input file. out = new PrintWriter( new OutputStreamWriter( new FileOutputStream(args[1]), encoding)); // Validate input and generate key file. generateLicense(props, new File(args[2])); // Write status. out.write(MIME_TYPE + ":" + DISPLAY_FILENAME); } catch (BadInputException bie) { errorCode = ERC_BAD_INPUT; throw bie; } catch (IOException ioe) { errorCode = ERC_FILE_IO; throw ioe; } catch (OutOfMemoryError oome) { errorCode = ERC_MEMORY; throw oome; } } catch (Throwable t) { out.println("Error #" + errorCode); t.printStackTrace(out); return errorCode; } finally { out.close(); } return ERC_SUCCESS_BIN; } /** * NOTE: This main() method is never called by the actual key server. It is * just useful for debugging the key generator. */ public static final void main(String args[]) { KeyMain(args); /*try { manager.install(new java.io.File("swutil.log" )); System .out.println("subject=" + manager.verify().getSubject()); System .exit(0); }catch (Exception ex){ ex.printStackTrace(); }*/ } public static class EncodedProperties extends Properties { public EncodedProperties() { this (new Properties()); } /** * @throws NullPointerException if <tt>defaults</tt> is <tt>null </tt>. */ public EncodedProperties(Properties defaults) { super (defaults); // Make sure we have a proper default for the encoding. defaults.setProperty(ENCODING_KEY, ENCODING_DEFAULT); } public void load(InputStream inStream) throws IOException { super .load(inStream); String encoding = super .getProperty(ENCODING_KEY); if (ENCODING_PROPERTIES.equals(encoding)) { return ; } // Convert properties try { Map.Entry[] entries = new Map.Entry[entrySet().size()]; entrySet().toArray(entries); for (int i = entries.length; --i >= 0; ) { Map.Entry entry = entries[i]; String value = (String ) entry.getValue(); value = new String (value.getBytes(ENCODING_PROPERTIES), encoding); setProperty( (String ) entry.getKey(), value); } } catch (UnsupportedEncodingException ignored) {} } } public static class BadInputException extends IOException { public BadInputException(String message) { super (message); } public BadInputException(Throwable cause) { initCause(cause); } } }
客户端程序安装license以及检验license合法性的代码：
| 安全警告 不要把私匙库拷贝到客户端，而只拷贝公匙库，要不然黑客就可以用你的私匙库来生成许许多多的license了 |
package com.sourceware.cmvp.license; import de.schlichtherle.license.*; import java.io.*; import java.util.*; import javax.security.auth.x500.X500Principal; import java.util.prefs.Preferences; /** * <p>Title: CMVP通用媒体增值业务平台</p> * * <p>Description: CMVP通用媒体增值业务平台</p> * * <p>Copyright: Copyright (c) 2005</p> * * <p>Company: source-ware.com inc.</p> * * @author 黑山 * @version 2.0 */ public class CMVPLicenseManager { public CMVPLicenseManager() { } /** The product id of your software */ public static final String PRODUCT_ID = "cmvp20" ; // CUSTOMIZE /** * The subject for the license manager and also the alias of the private * key entry in the keystore. */ public static final String SUBJECT = "别名" ; // CUSTOMIZE /** The resource name of your private keystore file. */ public static final String KEYSTORE_RESOURCE = "公匙库文件名" ; // CUSTOMIZE /** The password for the keystore. */ public static final String KEYSTORE_STORE_PWD = "公匙库密码" ; // CUSTOMIZE /** The password to encrypt the generated license key file. */ public static final String CIPHER_KEY_PWD = "license文件密码" ; // CUSTOMIZE protected static final LicenseManager manager = new LicenseManager( new DefaultLicenseParam( SUBJECT, Preferences.userNodeForPackage(CMVPLicenseManager.class), new DefaultKeyStoreParam( CMVPLicenseManager.class, // CUSTOMIZE KEYSTORE_RESOURCE, SUBJECT, KEYSTORE_STORE_PWD, null ),//这里一定要是null new DefaultCipherParam(CIPHER_KEY_PWD))); /** * NOTE: This main() method is never called by the actual key server. It is * just useful for debugging the key generator. */ public static final void main(String args[]) { try { manager.install(new java.io.File("license.lic" )); String subject = manager.verify().getSubject(); System .out.println("subject========" +subject); } catch (Exception ex) { ex.printStackTrace(); } } }