证书类接口暂存

chsm-web-server/src/main/java/com/sunyard/chsm/controller/CertController.java

@@ -0,0 +1,93 @@
+package com.sunyard.chsm.controller;
+
+
+import com.sunyard.chsm.constant.AuditLogConst;
+import com.sunyard.chsm.model.R;
+import com.sunyard.chsm.model.dto.CertDTO;
+import com.sunyard.chsm.param.*;
+import com.sunyard.chsm.service.AppCertService;
+import com.sunyard.chsm.service.CertService;
+import com.sunyard.ssp.common.annotation.AuditControllerLog;
+import org.springframework.web.bind.annotation.*;
+import javax.annotation.Resource;
+import javax.validation.Valid;
+
+
+/**
+ * 证书管理类接口
+ *
+ */
+@RestController
+@RequestMapping("/cert")
+public class CertController {
+
+
+    @Resource
+    private AppCertService appCertService;
+
+    @Resource
+    private CertService certService;
+
+
+    /**
+     * 获取证书信息
+     *
+     * @param certString 证书内容
+     */
+    @GetMapping ("/info")
+    public R<CertInfoResp> getCertInfo(@RequestParam String certString) {
+        CertInfoResp certInfo = certService.getCertInfo(certString);
+        return R.data(certInfo);
+    }
+
+    /**
+     * 获取证书拓展信息
+     *
+     * @param certString 证书内容
+     */
+    @GetMapping ("/exinfo")
+    public R<CertExinfoResp> getCertExinfo(@RequestParam String certString) {
+        CertExinfoResp certExinfo = certService.getCertExinfo(certString);
+        return R.data(certExinfo);
+    }
+
+
+    /**
+     * 验证证书
+     *
+     * @param certString 证书内容
+     */
+    @GetMapping ("/check")
+    public R<Boolean> certCheck(@RequestParam String certString) {
+        Boolean res = certService.checkCert(certString);
+        return R.data(res);
+    }
+
+
+
+
+    /**
+     * 导入证书
+     *
+     * @param importCert 证书
+     */
+    @GetMapping ("/import")
+    public R<Void> importCert(@Valid @RequestBody CertDTO.ImportCert importCert) {
+        appCertService.importCert(importCert);
+        return R.ok();
+    }
+
+    /**
+     * 删除证书
+     *
+     * @param id id
+     * @return void
+     */
+    @DeleteMapping
+    @AuditControllerLog(description = "删除证书", operateType = AuditLogConst.DELETE)
+    public R<Void> delete(Long id) {
+        appCertService.delete(id);
+        return R.ok();
+    }
+
+}

chsm-web-server/src/main/java/com/sunyard/chsm/service/CertService.java

@@ -0,0 +1,62 @@
+package com.sunyard.chsm.service;
+
+import com.sunyard.chsm.param.CertCheckResp;
+import com.sunyard.chsm.param.CertExinfoResp;
+import com.sunyard.chsm.param.CertInfoResp;
+import com.sunyard.chsm.utils.CertUtil;
+import com.sunyard.chsm.utils.CodecUtils;
+import com.sunyard.chsm.utils.DateFormat;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+
+import java.security.cert.X509Certificate;
+import java.text.SimpleDateFormat;
+import java.util.Date;
+
+@Service
+@RequiredArgsConstructor
+public class CertService {
+    public CertInfoResp getCertInfo(String certString){
+        X509Certificate x509Certificate = CertUtil.convertToX509Cert(certString);
+        CertInfoResp certInfo = new CertInfoResp();
+        certInfo.setIssuerDN(x509Certificate.getIssuerDN().toString());
+        certInfo.setSubjectDN(x509Certificate.getSubjectDN().toString());
+        certInfo.setSerialNumber(CertUtil.getSn(certString));
+        certInfo.setSigAlgName(x509Certificate.getSigAlgName());
+        certInfo.setVersion(x509Certificate.getVersion());
+        certInfo.setNotAfter(DateFormat.formDate(x509Certificate.getNotAfter()));
+        certInfo.setNotBefore(DateFormat.formDate(x509Certificate.getNotBefore()));
+        certInfo.setPublicKey(CodecUtils.encodeHex(x509Certificate.getPublicKey().getEncoded()));
+        return certInfo;
+    }
+
+
+    public CertExinfoResp getCertExinfo(String certString){
+        X509Certificate x509Certificate = CertUtil.convertToX509Cert(certString);
+        CertExinfoResp certExinfo = new CertExinfoResp();
+        certExinfo.setSigAlgOID(x509Certificate.getSigAlgOID());
+        certExinfo.setSignature(CodecUtils.encodeBase64(x509Certificate.getSignature()));
+        return certExinfo;
+    }
+
+
+
+    public Boolean checkCert(String certString){
+        X509Certificate x509Certificate = CertUtil.convertToX509Cert(certString);
+        CertCheckResp certCheck = new CertCheckResp();
+        certCheck.setNotAfter(DateFormat.formDate(x509Certificate.getNotAfter()));
+        certCheck.setNotBefore(DateFormat.formDate(x509Certificate.getNotBefore()));
+        certCheck.setSignature(CodecUtils.encodeBase64(x509Certificate.getSignature()));
+
+        SimpleDateFormat sdf = new SimpleDateFormat("yyyyMMdd");
+        Date dt = new Date();
+        String nowTime = sdf.format(dt);
+        boolean after = Integer.parseInt(nowTime) < Integer.parseInt(certCheck.getNotAfter());
+        boolean before = Integer.parseInt(nowTime) > Integer.parseInt(certCheck.getNotBefore());
+        return after && before;
+    }
+
+
+
+
+}

chsm-web-server/src/test/java/api/TestCert.java

@@ -0,0 +1,73 @@
+package api;
+
+/**
+ * @author zyh
+ * @since 2024/12/19
+ */
+
+import com.sunyard.chsm.utils.CertUtil;
+
+import org.bouncycastle.asn1.x509.Extensions;
+import org.bouncycastle.asn1.x509.KeyUsage;
+import org.bouncycastle.cert.X509CertificateHolder;
+import org.bouncycastle.cert.jcajce.JcaX509CertificateHolder;
+import org.junit.jupiter.api.Test;
+
+import java.security.cert.CertificateEncodingException;
+import java.security.cert.CertificateParsingException;
+import java.security.cert.X509Certificate;
+import java.text.SimpleDateFormat;
+import java.util.ArrayList;
+import java.util.Date;
+import java.util.List;
+
+public class TestCert {
+
+
+    @Test
+    public void test1() throws CertificateParsingException, CertificateEncodingException {
+        String cert = "-----BEGIN CERTIFICATE-----\n" +
+                "MIIE+DCCA+CgAwIBAgIQXQbkqDIONNM6NOW9uz38tDANBgkqhkiG9w0BAQsFADAz\n" +
+                "MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxETAPBgNVBAMMCFNIRUNB\n" +
+                "IEcyMB4XDTIwMTAxMzA3NTgxM1oXDTIzMTAxMzE1NTk1OVowgdQxOTA3BgNVBAMM\n" +
+                "MOa1i+ivleW5v+WPkemTtuihjOiCoeS7veaciemZkOWFrOWPuOS4iua1t+WIhuih\n" +
+                "jDEzMDEGA1UECwwq5bm/5Y+R6ZO26KGM6IKh5Lu95pyJ6ZmQ5YWs5Y+45LiK5rW3\n" +
+                "5YiG6KGMMTMwMQYDVQQKDCrlub/lj5Hpk7booYzogqHku73mnInpmZDlhazlj7jk\n" +
+                "uIrmtbfliIbooYwxDzANBgNVBAcMBuS4iua1tzEPMA0GA1UECAwG5LiK5rW3MQsw\n" +
+                "CQYDVQQGEwJDTjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALRgbK63\n" +
+                "ZyrEmDkxgiwBZXjFp5KQAsqMKBGzORKDQ88I+hW6nKLMglbWTyfd26pPWoSy3TFs\n" +
+                "JN1HrBHkyfcKoYQ8KKN4bnH7hRrXV2LBBIPZdM6Tq3IHnTLg9KszCi1+Do/A7HQz\n" +
+                "yr9Rz0RyUkm7KnCt7dfGQKMfPGBGdabMY3HUs/kwGwVQG9KqyEu+wUGXP6nuty8A\n" +
+                "uI9u2OcUjPpfHcrH3gXwsFeiUUBt0/gEQX1UcTLaUYMcW67p5DQxi/pA3BGtbWvj\n" +
+                "yiAzIRyYcQgJpg0Ve0bI8nGqbdb1JDR3Spz1B90YOIIQ89oKfOLlkS3TUlJaTY2Q\n" +
+                "guQ8CrY4zMYsfI0CAwEAAaOCAWQwggFgMB8GA1UdIwQYMBaAFFaI3uMYQ4K3cqQm\n" +
+                "60SpYtCHxKwmMB0GA1UdDgQWBBRaOJdZxE5Q26SKcgRiQWdqkb8xlzAOBgNVHQ8B\n" +
+                "Af8EBAMCBsAwFAYDVR0lBA0wCwYJKoZIhvcvAQEFMCIGA1UdIAQbMBkwCgYIKoEc\n" +
+                "hu86AQMwCwYJKoEchu86AQIEMAwGA1UdEwEB/wQCMAAwfQYIKwYBBQUHAQEEcTBv\n" +
+                "MDgGCCsGAQUFBzABhixodHRwOi8vb2NzcDMuc2hlY2EuY29tL29jc3Avc2hlY2Ev\n" +
+                "c2hlY2Eub2NzcDAzBggrBgEFBQcwAoYnaHR0cDovL2xkYXAyLnNoZWNhLmNvbS9y\n" +
+                "b290L3NoZWNhZzIuZGVyMEcGA1UdHwRAMD4wPKA6oDiGNmh0dHA6Ly9sZGFwMi5z\n" +
+                "aGVjYS5jb20vQ0EyMDAxMS9SQTEyMDUwMTAwL0NSTDYzOTMyLmNybDANBgkqhkiG\n" +
+                "9w0BAQsFAAOCAQEAszG0ZWsZIylM3sPUKh1et2PIZtJ5jU4P4s8AwZAZEwuUpfay\n" +
+                "C6gJvfSqY4i6XQ+w2RVGKZFfq0oq23Sxv+jzzhuvL0bOyOzaVzS0pZwhBZ0ggfd7\n" +
+                "DY8irQ6CbKKp/ngE0vDILi00N/BujfFRQlg5Whr5i81wSBqXwry+EcVUa5t06ns/\n" +
+                "x545wQBnHNGrMtAaACFtjQiXdBfI02sEEd8uzdgMQn6FLxXuHFHbUF4VAue1TL5f\n" +
+                "UPNsAHFkqrdDDP5Ou7Dk2dE/5bti53wH1qQMbtTsdVp91Z9hzVAlw+WR3Ton7G1W\n" +
+                "S01olvhEUw9Bj7GhohZjFpzwcwwo7AQxA2aGFA==\n" +
+                "-----END CERTIFICATE-----\n";
+
+        X509Certificate x509Certificate = CertUtil.convertToX509Cert(cert);
+
+
+
+
+        SimpleDateFormat sdf = new SimpleDateFormat("yyyyMMdd");
+        Date dt = new Date();
+        String startTime = sdf.format(dt);
+        System.out.println(startTime);
+
+
+
+
+    }
+}