OpenSSL功能集合

OpenSSL中算法记录

 

1、证书(X.509证书、PKCS#7证书、PKCS#12证书)

 

# pfx证书操作
path = Rails.root.join('config/cert/citicpay.pfx')
str  = File.open(path).read.encode('utf-8')
str = Base64.decode64(str) rescue str
pfx = OpenSSL::PKCS12.new(str, pass)
{cer: pfx.certificate.to_pem, # X.509证书
 key: pfx.key.to_pem, # 私钥
 pub_key: pfx.certificate.public_key.to_pem # 公钥
}

 

 2、秘钥(RAS)  

 OpenSSL::PKey::RSA.new 2048
 OpenSSL::PKey::RSA.new File.read 'rsa.pem'
 OpenSSL::PKey::RSA.new File.read('rsa.pem'), 'my pass phrase'
 :to_der => '0\x81\x9F0\r\x06\t*\x86H\x86 ...' # 二进制数据
 :to_pem => '-----BEGIN PUBLIC KEY-----\n ...' # 二进制数据的Base64编码
 :to_text => 'Public-Key: (1024 bit)\nModulus ...' # 内容结构展示

 

 3、密码（）

 decipher = OpenSSL::Cipher::AES.new(128, :CBC)
 decipher.decrypt
 decipher.key = key
 decipher.iv = iv
 plain = decipher.update(encrypted) + decipher.final
 puts data == plain #=> true

 

 

# 参考：

https://cloud.tencent.com/developer/chapter/16473

https://www.jianshu.com/p/c93a993f8997

 

# java 工具包问题【Java采用PKCS#8标准】

https://www.hutool.cn/docs/#/crypto/%E9%9D%9E%E5%AF%B9%E7%A7%B0%E5%8A%A0%E5%AF%86-AsymmetricCrypto 

 

// 加解密的过程代码

        # 加密
        - PRIVATE_KEY = Base64("PKCS8 PRIVATE_KEY dir")
        - RSA rsa = new RSA(PRIVATE_KEY, null);
        - keyType = [privateKey or publicKey]
        - encryptStr(String data, KeyType keyType, Charset charset);
        - encrypt(StrUtil.bytes(data, StandardCharsets.UTF_8), keyType);
        - Cipher cipher = SecureUtil.createCipher("RSA");
        # 加密
        - int encryptBlockSize = encryptBlockSize = ((RSAKey) getKeyByType(keyType)).getModulus().bitLength() / 8 - 11;
        # 解密
        - int encryptBlockSize = encryptBlockSize = ((RSAKey) getKeyByType(keyType)).getModulus().bitLength() / 8;
        
        if (data.length <= encryptBlockSize) { 
            return this.cipher.doFinal(data, 0, dataLength); // 不足分段
        }else{
            return doFinalWithBlock(data, maxBlockSize); // 分段解密
        }
        
        int dataLength = data.length;
        int offSet = 0;
        int remainLength = dataLength; // 剩余长度
        int blockSize;
        // 对数据分段处理
        while (remainLength > 0) {
            blockSize = Math.min(remainLength, maxBlockSize);
            out.write(cipher.doFinal(data, offSet, blockSize));
            offSet += blockSize;
            remainLength = dataLength - offSet;
        }
        return out.toByteArray();
        HexUtil.encodeHexStr(byte[] res)

 

 

  # 分段加密思路；RSA用PKCS#1标准
  def encrypt_params(data)
    rsa = OpenSSL::PKey::RSA.new(rsa_pub_key)
    arr = data.unpack("C*").each_slice(rsa.n.num_bytes - 11)
    arr = arr.map { |str_bytes| rsa.public_encrypt(str_bytes.pack("C*")) }
    Base64.strict_encode64(arr.join)
  end

  def decrypt_result_data(data)
    rsa = OpenSSL::PKey::RSA.new(rsa_pri_key)
    arr = Base64.decode64(data).unpack("C*").each_slice(rsa.n.num_bytes)
    arr = arr.map { |str_bytes| rsa.private_decrypt(str_bytes.pack("C*")) }
    arr.join.force_encoding('UTF-8')
  end