Sunyard/sydapi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix:key漏洞

Browse Source
This commit is contained in:
waner 2025-07-31 11:57:12 +08:00
parent 1df1e64783
commit 8de764c731
3 changed files with 20 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/main/java/com/jmeter/test/Test4Jemter.java
View File

@ -58,7 +58,7 @@ public class Test4Jemter extends AbstractJavaSamplerClient {
Arguments arguments = new Arguments(); Arguments arguments = new Arguments();
arguments.addArgument("SM2dn", "C=CN,ST=zz,L=zz,O=zzz,CN=zzzzz"); arguments.addArgument("SM2dn", "C=CN,ST=zz,L=zz,O=zzz,CN=zzzzz");
arguments.addArgument("RSAdn", "C=cn,O=CFCA TEST CA,OU=NCS2,OU=Enterprises,CN=041@Z402451000010@ShanDong@00000001"); arguments.addArgument("RSAdn", "C=cn,O=CFCA TEST CA,OU=NCS2,OU=Enterprises,CN=041@Z402451000010@ShanDong@00000001");
arguments.addArgument("orgData", "12345678"); arguments.addArgument("orgData", "null");
arguments.addArgument("ip", "172.1.41.139"); arguments.addArgument("ip", "172.1.41.139");
arguments.addArgument("ip2", "172.1.41.96"); arguments.addArgument("ip2", "172.1.41.96");
arguments.addArgument("port", "8889"); arguments.addArgument("port", "8889");
@ -135,7 +135,11 @@ public class Test4Jemter extends AbstractJavaSamplerClient {
sr.sampleStart(); sr.sampleStart();
SydUtils sydUtils = null; SydUtils sydUtils = null;
try { try {
orgData = oData.getBytes(); //SM2裸签 if ("null".equals(oData)) {
orgData = null;
} else {
orgData = oData.getBytes(); //SM2裸签
}
sydUtils = new SydUtils(ip, ip2, port, timeout); sydUtils = new SydUtils(ip, ip2, port, timeout);
// orgData = new byte[dataLength]; // orgData = new byte[dataLength];
//执行业务逻辑 //执行业务逻辑

8
src/main/java/com/sunyard/SYMEnDeLongData.java
View File

@ -9,7 +9,7 @@ import racal.sunyard.main.SydApi4j;
public class SYMEnDeLongData { public class SYMEnDeLongData {
private SydApi4j api; private SydApi4j api;
private String key = ""; private String sykey = "";
private String keyValue = ""; private String keyValue = "";
private int keyType = 0; private int keyType = 0;
private int inType = 0; private int inType = 0;
@ -95,11 +95,11 @@ public class SYMEnDeLongData {
public String getKey() { public String getKey() {
return key; return sykey;
} }
public SYMEnDeLongData setKey(String key) { public SYMEnDeLongData setKey(String sykey) {
this.key = key; this.sykey = sykey;
return this; return this;
} }

20
src/test/java/sample/Test4NongxinCW.java
View File

@ -58,14 +58,14 @@ public class Test4NongxinCW {
// System.out.println("SM2大数据裸签："+ Util.bytes2HexString(nakedSign1)); // System.out.println("SM2大数据裸签："+ Util.bytes2HexString(nakedSign1));
// boolean nakedVerify1 = api.SYD_NakedVerifyAll(4,orgData, nakedSign1, SM2dn); // boolean nakedVerify1 = api.SYD_NakedVerifyAll(4,orgData, nakedSign1, SM2dn);
// System.out.println("SM2数据验签："+nakedVerify1 ); // System.out.println("SM2数据验签："+nakedVerify1 );
for (int i = 0; i < 10000; i++) { // for (int i = 0; i < 10000; i++) {
byte[] nakedSign = api.SYD_NakedSign(orgData,SM2dn); byte[] nakedSign = api.SYD_NakedSign(orgData,SM2dn);
System.out.println("SM2签名："+ Util.encodeBase64(nakedSign)); System.out.println("SM2签名："+ Util.encodeBase64(nakedSign));
// byte[] nakedSign1 = api.SYD_NakedSignAll(4,orgData, SM2dn); byte[] nakedSign1 = api.SYD_NakedSignAll(4,orgData, SM2dn);
// System.out.println("SM2大数据裸签："+ Util.bytes2HexString(nakedSign1)); // System.out.println("SM2大数据裸签："+ Util.bytes2HexString(nakedSign1));
// boolean nakedVerify1 = api.SYD_NakedVerifyAll(4,orgData, nakedSign1, SM2dn); // boolean nakedVerify1 = api.SYD_NakedVerifyAll(4,orgData, nakedSign1, SM2dn);
// System.out.println("SM2数据验签："+nakedVerify1 ); // System.out.println("SM2数据验签："+nakedVerify1 );
} // }
} }
/** /**
@ -191,16 +191,16 @@ public class Test4NongxinCW {
@Test @Test
public void detSign(){ public void detSign(){
orgData = new byte[1024]; orgData = new byte[1024];
byte[] orgData1 = "12345678".getBytes(StandardCharsets.UTF_8);
for (int i = 0; i < 10000; i++) { // for (int i = 0; i < 10000; i++) {
//detach签名 //detach签名
String detachedSign = api.detachedSign(orgData, SM2dn); String detachedSign = api.detachedSign(orgData1, SM2dn);
System.out.println("detach签名："+ detachedSign); System.out.println("detach签名："+ detachedSign);
//detach验签 //detach验签
boolean ver = api.detachedVerify(orgData, detachedSign); boolean ver = api.detachedVerify(orgData1, detachedSign);
// System.out.println("detach验签："+ ver); System.out.println("detach验签："+ ver);
} // }
} }
@ -364,7 +364,7 @@ public class Test4NongxinCW {
"FAYIKwYBBQUHAwIGCCsGAQUFBwMEMAwGCCqBHM9VAYN1BQADSAAwRQIhAL8uWl4K\n" + "FAYIKwYBBQUHAwIGCCsGAQUFBwMEMAwGCCqBHM9VAYN1BQADSAAwRQIhAL8uWl4K\n" +
"hUEIUnSsM0RlUn4aSkK3R0QFpqdBu7AYCtXcAiB5tIOkP1ycAtp0W3mSHPabAgUq\n" + "hUEIUnSsM0RlUn4aSkK3R0QFpqdBu7AYCtXcAiB5tIOkP1ycAtp0W3mSHPabAgUq\n" +
"dHXEO3AzKABKxIAH7Q==\n" + "dHXEO3AzKABKxIAH7Q==\n" +
"-----END CERTIFICATE-----"; "-----END";
List<String> masterNodes = new ArrayList<>(); List<String> masterNodes = new ArrayList<>();
// masterNodes.add("172.16.18.99:8889"); // masterNodes.add("172.16.18.99:8889");
// masterNodes.add("172.16.18.5:8889"); // masterNodes.add("172.16.18.5:8889");