• <ins id="pjuwb"></ins>
    <blockquote id="pjuwb"><pre id="pjuwb"></pre></blockquote>
    <noscript id="pjuwb"></noscript>
          <sup id="pjuwb"><pre id="pjuwb"></pre></sup>
            <dd id="pjuwb"></dd>
            <abbr id="pjuwb"></abbr>

            S.l.e!ep.¢%

            像打了激速一樣,以四倍的速度運轉,開心的工作
            簡單、開放、平等的公司文化;尊重個性、自由與個人價值;
            posts - 1098, comments - 335, trackbacks - 0, articles - 1
              C++博客 :: 首頁 :: 新隨筆 :: 聯系 :: 聚合  :: 管理

            OPENSSL 生成 CERT 參考

            Posted on 2010-06-06 17:57 S.l.e!ep.¢% 閱讀(1136) 評論(1)  編輯 收藏 引用 所屬分類: OpenSSL
            #pragma comment(lib,"libeay32.lib")
            #pragma comment(lib,"ssleay32.lib")
            char mainkey[17]="0123456789abcdef";
            char *c1="CN";
            char *pr1="hunan";
            char *ct1="xiangtan";
            char *or1="hnust";
            char *dp1="computer";
            char *co1="Ling";
            char *c;
            char *pr;
            char *ct;
            char *or;
            char *dp;
            char *co;
            X509_REQ *req=X509_REQ_new(); ?
            X509_NAME *subj=X509_NAME_new(); ?
            EVP_PKEY *m_pClientKey=EVP_PKEY_new();
            EVP_PKEY *m_pCAKey;
            X509 *m_pCACert;
            X509 *ptemp=NULL;
            X509 *m_pClientCert=X509_new();
            BIO *pbio;
            FILE *fp;
            char *Save="E:\\畢業設計\\openssl_help\\CCert.der";
            char *KeyName="E:\\畢業設計\\openssl_help\\RootKey.pem";
            char *CerName="E:\\畢業設計\\openssl_help\\RootCert.crt";
            char *KeyPwd1="481511220";
            char *KeyPwd2="srvca";
            char *KeyPwd3="1tian=1day";
            char *crp="e:\\畢業設計\\openssl_help\\RootCert.pem";
            char *ck="e:\\畢業設計\\openssl_help\\RootKey.pem";
            char *country="cn";
            --------------------------------------加解密----------------------------------------------
            void md5(unsigned char *str,unsigned char *md)
            {

            ? EVP_Digest(str, strlen((char *)str), md, NULL, EVP_md5(), NULL);
            }
            void des_cpy(char *des,char *src)
            {
            int i;
            for(i=0;i<8;i++)
            {
            des[i]=src[i];
            }
            }
            void des_ini(DES_cblock cb)
            {
            int i;
            for(i=0;i<8;i++)
            cb[i]=0x00;
            }
            void des_e(unsigned char *key,char *input,char **output)
            {
            char *output1;
            char *output2;
            int i;
            int l=strlen(input);
            int m=l/8;
            int n=l%8;
            DES_cblock des_key;
            DES_string_to_key((char *)key, &des_key);
            DES_key_schedule schedule;
            ? DES_set_key_checked(&des_key, &schedule);
            DES_cblock des_input;
            DES_cblock des_output;
            if(n==0)?
            {
            output1=(char *)malloc(m*8+1);
            output2=(char *)malloc((m*8)*2+1);
            output1[m*8]='\0';
            output2[m*8*2]='\0';
            for(i=0;i<m;i++)
            {
            des_cpy((char *)des_input,input+i*8);
            DES_ecb_encrypt(&des_input, &des_output, &schedule, DES_ENCRYPT);
            des_cpy(output1+i*8,(char *)des_output);
            }
            for(i=0;i<m*8;i++)
            {
            output2[i*2]=(((output1[i]>>4)&0x0f)|0x40)+1;
            output2[i*2+1]=((output1[i]&0x0f)|0x40)+1;
            }
            }
            else?
            {
            output1=(char *)malloc((m+1)*8+1);
            output2=(char *)malloc(((m+1)*8)*2+1);
            output1[(m+1)*8]='\0';
            output2[(m+1)*8*2]='\0';
            for(i=0;i<m;i++)
            {
            des_cpy((char *)des_input,input+i*8);
            DES_ecb_encrypt(&des_input, &des_output, &schedule, DES_ENCRYPT);
            des_cpy(output1+i*8,(char *)des_output);
            }
            des_ini(des_input);
            for(i=0;i<n;i++)
            {
            des_input[i]=input[m*8+i];
            }
            DES_ecb_encrypt(&des_input, &des_output, &schedule, DES_ENCRYPT);
            des_cpy(output1+m*8,(char *)des_output);
            for(i=0;i<(m+1)*8;i++)
            {
            output2[i*2]=(((output1[i]>>4)&0x0f)|0x40)+1;
            output2[i*2+1]=((output1[i]&0x0f)|0x40)+1;
            }
            }
            *output=output2;
            }
            void des_d(unsigned char *key,char *input,char **output)
            {
            char *output1;
            char *input1;
            int l=strlen(input)/2;
            input1=(char *)malloc(l+1);
            int i;
            input1[l]='\0';
            int m=l/8;
            int n=l%8;
            for(i=0;i<l;i++)
            {
            ? input[2*i]--;
            ? input[2*i+1]--;
            input1[i]=((input[2*i]<<4)&0xf0)|(input[2*i+1]&0x0f);
            }
            DES_cblock des_key;
            DES_string_to_key((char *)key, &des_key);
            DES_key_schedule schedule;
            ? DES_set_key_checked(&des_key, &schedule);
            DES_cblock des_input;
            DES_cblock des_output;
            output1=(char *)malloc(l+1);
            output1[l]='\0';
            for(i=0;i<m;i++)
            {
            des_cpy((char *)des_input,input1+i*8);
            DES_ecb_encrypt(&des_input, &des_output, &schedule, DES_DECRYPT);
            des_cpy(output1+i*8,(char *)des_output);
            }
            *output=output1;
            }
            void ent()
            {
            ? char key[6][17];
            ? unsigned char md[6][16];
            ? int i;
            ? for(i=0;i<6;i++)
            ? {
            strcpy(key[i],mainkey);
            ? }
            ? strcat(key[0],REQ_COUNTRY_NAME);
            ? strcat(key[1],REQ_STATA_OR_PROVINCE_NAME);
            ? strcat(key[2],REQ_LOCALITE_NAME);
            ? strcat(key[3],REQ_ORG_NAME);
            ? strcat(key[4],REQ_DEPT_NAME);
            ? strcat(key[5],REQ_COMMON_NAME);
            ? for(i=0;i<6;i++)
            ? {
            md5((unsigned char *)key[i],md[i]);
            md[i][8]='\0';
            ? }
            ? des_e((unsigned char *)key[0],c1,&c);
            ? des_e((unsigned char *)key[1],pr1,&pr);
            ? des_e((unsigned char *)key[2],ct1,&ct);
            ? des_e((unsigned char *)key[3],or1,&or);
            ? des_e((unsigned char *)key[4],dp1,&dp);
            ? des_e((unsigned char *)key[5],co1,&co);
            }
            ------------------------------------------加解密部分完------------------------------------------------

            主函數部分
            void main(int argc,char* argv[])
            {
            ? OpenSSL_add_all_ciphers();
            ? OpenSSL_add_all_digests();
            ? ERR_load_crypto_strings();
            ? /*pbio = BIO_new_file((LPSTR)(LPCTSTR)KeyName,"r");
            ? if(pbio==NULL)
            ? {
            printf("CA私鑰文件讀取失敗\n");
            return;
            ? }
            ? m_pCAKey = PEM_read_bio_PrivateKey(pbio,NULL,0,(unsigned char*)(LPCTSTR)KeyPwd1);
            ? if(m_pCAKey==NULL)
            ? {
            printf("CA私鑰文件讀取失敗\n");
            return;
            ? }
            ? BIO_free_all(pbio);
            ? pbio = BIO_new_file((LPSTR)(LPCTSTR)CerName,"r");
            ? if(pbio==NULL)
            ? {
            printf("CA證書文件讀取失敗\n");
            return;
            ? }
            ? m_pCACert=d2i_X509_bio(pbio,NULL);
            ? if(m_pCACert==NULL)
            ? {
            printf("CA證書讀取失敗\n");
            return;
            ? }
            ? BIO_free_all(pbio);*/
            ?/*if(!(pbio = BIO_new_file((LPSTR)(LPCTSTR)crp,"r")))
            ? {
            printf("打開CA證書失敗");
            BIO_free_all(pbio);
            return;
            ? }
            ? m_pCACert=d2i_X509_bio(pbio,NULL);
            ? if(m_pCACert==NULL)
            ? {
            printf("打開證書失敗");
            BIO_free_all(pbio);
            return;
            ? }
            ? m_pCAKey = PEM_read_bio_PrivateKey(pbio,NULL,0,(unsigned char*)(LPCTSTR)KeyPwd2);
            ? if(m_pCAKey==NULL)
            ? {
            printf("打開私鑰失敗");
            BIO_free_all(pbio);
            return;
            ? }*/
            ? if (!(pbio = BIO_new_file((LPSTR)(LPCTSTR)crp,"r")))
            ? printf("打開CA文件時出錯");
            ? if (!(m_pCACert = PEM_read_bio_X509(pbio,NULL,NULL,NULL)))
            ? printf("從CA證書文件中讀取證書時出錯");
            ? BIO_free_all(pbio);
            ? if (!(pbio = BIO_new_file((LPSTR)(LPCTSTR)ck,"r")))
            ? printf("打開CA私鑰時出錯");
            ? if (!(m_pCAKey = PEM_read_bio_PrivateKey(pbio, NULL, NULL,KeyPwd3)))
            ? printf("從文件中讀取CA私鑰時出錯");
            ? BIO_free_all(pbio);

            ? ent();//<-------------------------------------------------------------------------------加密屬性值

            ? EVP_PKEY_assign_RSA(m_pClientKey,RSA_generate_key(1024,0x10001,NULL,NULL));
            ? X509_NAME_add_entry_by_txt(subj,REQ_COUNTRY_NAME,MBSTRING_ASC,(unsigned char *)c,-1,-1,0);
            ? X509_NAME_add_entry_by_txt(subj,REQ_STATA_OR_PROVINCE_NAME,MBSTRING_ASC,(unsigned char *)pr,-1,-1,0);
            ? X509_NAME_add_entry_by_txt(subj,REQ_LOCALITE_NAME,MBSTRING_ASC,(unsigned char *)ct,-1,-1,0);
            ? X509_NAME_add_entry_by_txt(subj,REQ_ORG_NAME,MBSTRING_ASC,(unsigned char *)or,-1,-1,0);
            ? X509_NAME_add_entry_by_txt(subj,REQ_DEPT_NAME,MBSTRING_ASC,(unsigned char *)dp,-1,-1,0);
            ? X509_NAME_add_entry_by_txt(subj,REQ_COMMON_NAME,MBSTRING_ASC,(unsigned char *)co,-1,-1,0);
            ? //if(X509_REQ_set_subject_name(req,subj)!=1)
            ? //if(X509_NAME_set(&req->req_info->subject,subj)!=1)
            ? req->req_info->subject=X509_NAME_dup(subj);
            ? if(req->req_info->subject==NULL)
            ? {
            printf("加入主體信息失敗\n");
            return;
            ? }
            ??
            ? //加入一個主體公鑰(上小節生成的m_pClientKey)
            ? //X509_REQ_set_pubkey(req, m_pClientKey);
            ? X509_PUBKEY_set(&req->req_info->pubkey,m_pClientKey);
            ? //加入一組可選的擴展屬性
            ? STACK_OF(X509_EXTENSION) *extlist=sk_X509_EXTENSION_new_null();//<--------------------調試出錯在這行
            ? X509_EXTENSION *ext=X509V3_EXT_conf(NULL,NULL,"addr","hunanust");?
            ? //生成擴展對象
            ? sk_X509_EXTENSION_push(extlist,ext);
            ? X509_REQ_add_extensions(req,extlist);//加入擴展項目。
            ? //用主體的私鑰對上面的req進行簽名。在簽名是需要選擇摘要算法,
            ? EVP_MD const *digest=EVP_md5();//(選擇MD5算法)
            ? X509_REQ_sign(req,m_pClientKey,digest);
            ? ptemp=m_pClientCert;
            ? //設置版本號
            ? X509_set_version(ptemp, 2);
            ? //設置證書序列號,這個sn就是CA中心頒發的第N份證書
            ? ASN1_INTEGER_set(X509_get_serialNumber(ptemp),0);
            ? //設置證書開始時間
            ? X509_gmtime_adj(X509_get_notBefore(ptemp),0);
            ? //設置證書結束時間
            ? X509_gmtime_adj(X509_get_notAfter(ptemp), (long)60*60*24*365);
            ? //設置證書的主體名稱,req就是剛剛生成的請求證書
            ? X509_set_subject_name(ptemp, X509_REQ_get_subject_name(req));
            ? //設置證書的公鑰信息
            ? X509_set_pubkey(ptemp, X509_PUBKEY_get(req->req_info->pubkey));
            ? //設置證書的簽發者信息,m_pCACert是CA證書
            ? X509_set_issuer_name(ptemp, X509_get_subject_name(m_pCACert));
            ? //設置擴展項目
            ? X509V3_CTX ctx;
            ? X509V3_set_ctx(&ctx, m_pCACert, m_pClientCert, NULL, NULL, 0);
            ? X509_EXTENSION *x509_ext = X509_EXTENSION_new();
            ? x509_ext = X509V3_EXT_conf(NULL,NULL, "hellomsg","good luck");
            ? X509_add_ext(m_pClientCert,x509_ext,-1);
            ? //設置簽名值
            ? X509_sign(m_pClientCert,m_pCAKey,EVP_md5());
            ? pbio = BIO_new_file((LPSTR)(LPCTSTR)Save,"w");
            ? i2d_X509_bio(pbio, m_pClientCert); //DER格式
            ? printf("OK\n");

            }

            Feedback

            # re: OPENSSL 生成 CERT 參考  回復  更多評論   

            2013-04-18 19:29 by 呂文華
            REQ_DEPT_NAME 等 這些定義在哪? 最好把頭文件都給列出來。謝謝!
            婷婷久久综合| 一本久久a久久精品综合夜夜 | 91精品国产91久久久久福利| 一本大道久久香蕉成人网| 久久精品国产只有精品66| 伊人色综合久久天天| 色综合久久天天综合| 久久国产精品99久久久久久老狼| 久久久久久久久久久久中文字幕 | 国产精品亚洲综合专区片高清久久久 | 久久久国产精品亚洲一区| 久久99久久99精品免视看动漫 | 欧美国产成人久久精品| 2019久久久高清456| 久久狠狠爱亚洲综合影院| 中文字幕久久波多野结衣av| 亚洲人成网亚洲欧洲无码久久| 久久免费看黄a级毛片| 一本久道久久综合狠狠爱| 99久久成人国产精品免费| 精品亚洲综合久久中文字幕| 99久久国产亚洲高清观看2024| 亚洲狠狠综合久久| 久久成人小视频| 久久精品国产亚洲AV无码娇色 | 国产巨作麻豆欧美亚洲综合久久| 久久一区二区免费播放| 亚洲中文字幕无码久久综合网| 国内精品久久久久影院优| 国产精品亚洲综合专区片高清久久久 | 久久久久亚洲爆乳少妇无| 久久精品国产亚洲AV不卡| AV狠狠色丁香婷婷综合久久| 久久国产三级无码一区二区| 九九精品久久久久久噜噜| 国产精品99久久99久久久| 婷婷久久综合| 亚洲综合久久综合激情久久| 亚洲va中文字幕无码久久| 久久久久久久久久免免费精品 | www.久久热|