本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
# `CreateKeysAndCertificate`与 Amazon SDK 或 CLI 配合使用
`CreateKeysAndCertificate`
以下代码示例演示如何使用 `CreateKeysAndCertificate`。
------
#### [ .NET ]
**适用于 .NET 的 Amazon SDK (v4)**
还有更多相关信息 GitHub。在 [Amazon 代码示例存储库](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/dotnetv4/IoT#code-examples)中查找完整示例，了解如何进行设置和运行。
```
///
/// Creates a device certificate for AWS IoT.
///
/// The certificate details including ARN and certificate PEM, or null if creation failed.
public async Task<(string CertificateArn, string CertificatePem, string CertificateId)?> CreateKeysAndCertificateAsync()
{
try
{
var request = new CreateKeysAndCertificateRequest
{
SetAsActive = true
};
var response = await _amazonIoT.CreateKeysAndCertificateAsync(request);
_logger.LogInformation($"Created certificate with ARN {response.CertificateArn}");
return (response.CertificateArn, response.CertificatePem, response.CertificateId);
}
catch (Amazon.IoT.Model.ThrottlingException ex)
{
_logger.LogWarning($"Request throttled, please try again later: {ex.Message}");
return null;
}
catch (Exception ex)
{
_logger.LogError($"Couldn't create certificate. Here's why: {ex.Message}");
return null;
}
}
```
+ 有关 API 的详细信息，请参阅 *适用于 .NET 的 Amazon SDK API 参考[CreateKeysAndCertificate](https://docs.amazonaws.cn/goto/DotNetSDKV4/iot-2015-05-28/CreateKeysAndCertificate)*中的。
------
#### [ C\$1\$1 ]
**SDK for C\$1\$1**
还有更多相关信息 GitHub。在 [Amazon 代码示例存储库](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/cpp/example_code/iot#code-examples)中查找完整示例，了解如何进行设置和运行。
```
//! Create keys and certificate for an Aws IoT device.
//! This routine will save certificates and keys to an output folder, if provided.
/*!
\param outputFolder: Location for storing output in files, ignored when string is empty.
\param certificateARNResult: A string to receive the ARN of the created certificate.
\param certificateID: A string to receive the ID of the created certificate.
\param clientConfiguration: AWS client configuration.
\return bool: Function succeeded.
*/
bool AwsDoc::IoT::createKeysAndCertificate(const Aws::String &outputFolder,
Aws::String &certificateARNResult,
Aws::String &certificateID,
const Aws::Client::ClientConfiguration &clientConfiguration) {
Aws::IoT::IoTClient client(clientConfiguration);
Aws::IoT::Model::CreateKeysAndCertificateRequest createKeysAndCertificateRequest;
Aws::IoT::Model::CreateKeysAndCertificateOutcome outcome =
client.CreateKeysAndCertificate(createKeysAndCertificateRequest);
if (outcome.IsSuccess()) {
std::cout << "Successfully created a certificate and keys" << std::endl;
certificateARNResult = outcome.GetResult().GetCertificateArn();
certificateID = outcome.GetResult().GetCertificateId();
std::cout << "Certificate ARN: " << certificateARNResult << ", certificate ID: "
<< certificateID << std::endl;
if (!outputFolder.empty()) {
std::cout << "Writing certificate and keys to the folder '" << outputFolder
<< "'." << std::endl;
std::cout << "Be sure these files are stored securely." << std::endl;
Aws::String certificateFilePath = outputFolder + "/certificate.pem.crt";
std::ofstream certificateFile(certificateFilePath);
if (!certificateFile.is_open()) {
std::cerr << "Error opening certificate file, '" << certificateFilePath
<< "'."
<< std::endl;
return false;
}
certificateFile << outcome.GetResult().GetCertificatePem();
certificateFile.close();
const Aws::IoT::Model::KeyPair &keyPair = outcome.GetResult().GetKeyPair();
Aws::String privateKeyFilePath = outputFolder + "/private.pem.key";
std::ofstream privateKeyFile(privateKeyFilePath);
if (!privateKeyFile.is_open()) {
std::cerr << "Error opening private key file, '" << privateKeyFilePath
<< "'."
<< std::endl;
return false;
}
privateKeyFile << keyPair.GetPrivateKey();
privateKeyFile.close();
Aws::String publicKeyFilePath = outputFolder + "/public.pem.key";
std::ofstream publicKeyFile(publicKeyFilePath);
if (!publicKeyFile.is_open()) {
std::cerr << "Error opening public key file, '" << publicKeyFilePath
<< "'."
<< std::endl;
return false;
}
publicKeyFile << keyPair.GetPublicKey();
}
}
else {
std::cerr << "Error creating keys and certificate: "
<< outcome.GetError().GetMessage() << std::endl;
}
return outcome.IsSuccess();
}
```
+ 有关 API 的详细信息，请参阅 *适用于 C\$1\$1 的 Amazon SDK API 参考[CreateKeysAndCertificate](https://docs.amazonaws.cn/goto/SdkForCpp/iot-2015-05-28/CreateKeysAndCertificate)*中的。
------
#### [ CLI ]
**Amazon CLI**
**创建 RSA 密钥对并发放 X.509 证书**
以下 `create-keys-and-certificate` 命令创建一个 2048 位 RSA 密钥对，并使用发出的公钥发放 X.509 证书。由于这是 Amazon 物联网唯一一次为此证书提供私钥，因此请务必将其保存在安全的地方。
```
aws iot create-keys-and-certificate \
--certificate-pem-outfile "myTest.cert.pem" \
--public-key-outfile "myTest.public.key" \
--private-key-outfile "myTest.private.key"
```
输出：
```
{
"certificateArn": "arn:aws:iot:us-west-2:123456789012:cert/9894ba17925e663f1d29c23af4582b8e3b7619c31f3fbd93adcb51ae54b83dc2",
"certificateId": "9894ba17925e663f1d29c23af4582b8e3b7619c31f3fbd93adcb51ae54b83dc2",
"certificatePem": "
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----\n",
"keyPair": {
"PublicKey": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkEXAMPLEQEFAAOCAQ8AMIIBCgKCAQEAEXAMPLE1nnyJwKSMHw4h\nMMEXAMPLEuuN/dMAS3fyce8DW/4+EXAMPLEyjmoF/YVF/gHr99VEEXAMPLE5VF13\n59VK7cEXAMPLE67GK+y+jikqXOgHh/xJTwo+sGpWEXAMPLEDz18xOd2ka4tCzuWEXAMPLEahJbYkCPUBSU8opVkR7qkEXAMPLE1DR6sx2HocliOOLtu6Fkw91swQWEXAMPLE\GB3ZPrNh0PzQYvjUStZeccyNCx2EXAMPLEvp9mQOUXP6plfgxwKRX2fEXAMPLEDa\nhJLXkX3rHU2xbxJSq7D+XEXAMPLEcw+LyFhI5mgFRl88eGdsAEXAMPLElnI9EesG\nFQIDAQAB\n-----END PUBLIC KEY-----\n",
"PrivateKey": "-----BEGIN RSA PRIVATE KEY-----\nkey omittted for security reasons\n-----END RSA PRIVATE KEY-----\n"
}
}
```
有关更多信息，请参阅《[Amazon 物联网**开发者指南》中的创建和注册Amazon 物联网**设备证书](https://docs.amazonaws.cn/iot/latest/developerguide/device-certs-create.html)。
+ 有关 API 的详细信息，请参阅*Amazon CLI 命令参考[CreateKeysAndCertificate](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/iot/create-keys-and-certificate.html)*中的。
------
#### [ Java ]
**适用于 Java 的 SDK 2.x**
还有更多相关信息 GitHub。在 [Amazon 代码示例存储库](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/javav2/example_code/iot#code-examples)中查找完整示例，了解如何进行设置和运行。
```
/**
* Creates an IoT certificate asynchronously.
*
* @return The ARN of the created certificate.
*
* This method initiates an asynchronous request to create an IoT certificate.
* If the request is successful, it prints the certificate details and returns the certificate ARN.
* If an exception occurs, it prints the error message.
*/
public String createCertificate() {
CompletableFuture future = getAsyncClient().createKeysAndCertificate();
final String[] certificateArn = {null};
future.whenComplete((response, ex) -> {
if (response != null) {
String certificatePem = response.certificatePem();
certificateArn[0] = response.certificateArn();
// Print the details.
System.out.println("\nCertificate:");
System.out.println(certificatePem);
System.out.println("\nCertificate ARN:");
System.out.println(certificateArn[0]);
} else {
Throwable cause = (ex instanceof CompletionException) ? ex.getCause() : ex;
if (cause instanceof IotException) {
System.err.println(((IotException) cause).awsErrorDetails().errorMessage());
} else {
System.err.println("Unexpected error: " + cause.getMessage());
}
}
});
future.join();
return certificateArn[0];
}
```
+ 有关 API 的详细信息，请参阅 *Amazon SDK for Java 2.x API 参考[CreateKeysAndCertificate](https://docs.amazonaws.cn/goto/SdkForJavaV2/iot-2015-05-28/CreateKeysAndCertificate)*中的。
------
#### [ Kotlin ]
**适用于 Kotlin 的 SDK**
还有更多相关信息 GitHub。在 [Amazon 代码示例存储库](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/kotlin/services/iot#code-examples)中查找完整示例，了解如何进行设置和运行。
```
suspend fun createCertificate(): String? {
IotClient.fromEnvironment { region = "us-east-1" }.use { iotClient ->
val response = iotClient.createKeysAndCertificate()
val certificatePem = response.certificatePem
val certificateArn = response.certificateArn
// Print the details.
println("\nCertificate:")
println(certificatePem)
println("\nCertificate ARN:")
println(certificateArn)
return certificateArn
}
}
```
+ 有关 API 的详细信息，请参阅适用[CreateKeysAndCertificate](https://sdk.amazonaws.com/kotlin/api/latest/index.html)于 K *otlin 的Amazon SDK API 参考*。
------
#### [ Python ]
**适用于 Python 的 SDK（Boto3）**
还有更多相关信息 GitHub。在 [Amazon 代码示例存储库](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/python/example_code/iot#code-examples)中查找完整示例，了解如何进行设置和运行。
```
class IoTWrapper:
"""Encapsulates AWS IoT actions."""
def __init__(self, iot_client, iot_data_client=None):
"""
:param iot_client: A Boto3 AWS IoT client.
:param iot_data_client: A Boto3 AWS IoT Data Plane client.
"""
self.iot_client = iot_client
self.iot_data_client = iot_data_client
@classmethod
def from_client(cls):
iot_client = boto3.client("iot")
iot_data_client = boto3.client("iot-data")
return cls(iot_client, iot_data_client)
def create_keys_and_certificate(self):
"""
Creates keys and a certificate for an AWS IoT thing.
:return: The certificate ID, ARN, and PEM.
"""
try:
response = self.iot_client.create_keys_and_certificate(setAsActive=True)
logger.info("Created certificate %s.", response["certificateId"])
except ClientError as err:
if err.response["Error"]["Code"] == "ThrottlingException":
logger.error("Request throttled. Please try again later.")
else:
logger.error(
"Couldn't create keys and certificate. Here's why: %s: %s",
err.response["Error"]["Code"],
err.response["Error"]["Message"],
)
raise
else:
return response
```
+ 有关 API 的详细信息，请参阅适用[CreateKeysAndCertificate](https://docs.amazonaws.cn/goto/boto3/iot-2015-05-28/CreateKeysAndCertificate)于 *Python 的Amazon SDK (Boto3) API 参考*。
------
有关 S Amazon DK 开发者指南和代码示例的完整列表，请参阅[Amazon IoT 与 Amazon SDK 一起使用](sdk-general-information-section.md)。本主题还包括有关入门的信息以及有关先前的 SDK 版本的详细信息。