非对称签名验签

chsm-common/src/main/java/com/sunyard/chsm/mapper/AppCertMapper.java

@@ -2,6 +2,8 @@ package com.sunyard.chsm.mapper;
 
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.baomidou.mybatisplus.core.mapper.BaseMapper;
+import com.sunyard.chsm.enums.KeyUsage;
+import com.sunyard.chsm.model.Subject;
 import com.sunyard.chsm.model.entity.AppCert;
 import org.apache.ibatis.annotations.Mapper;
 import org.springframework.util.Assert;
@@ -28,5 +30,18 @@ public interface AppCertMapper extends BaseMapper<AppCert> {
         return certs.iterator().next();
     }
 
+    default AppCert selectSignBySubject(String dn) {
+        Assert.hasText(dn, "证书序列号不能为空");
+        String subject = Subject.fromDN(dn).getDN();
+        List<AppCert> certs = selectList(new LambdaQueryWrapper<AppCert>()
+                .eq(AppCert::getSubject, subject)
+                .eq(AppCert::getCertType, KeyUsage.SIGN_VERIFY.getCode())
+        );
+        if (CollectionUtils.isEmpty(certs)) {
+            return null;
+        }
+        return certs.iterator().next();
+    }
+
 
 }