证书相关功能

2026-04-24 11:18:21 +08:00
parent 0e94269539
commit f47775692f
41 changed files with 1773 additions and 0 deletions
@@ -0,0 +1,72 @@
+-- -----------------------------------------------------------------------------
+-- Cert module tables
+-- -----------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS t_key_entity (
+    id BIGINT PRIMARY KEY,
+    entity_name VARCHAR(255) NOT NULL,
+    algo_type VARCHAR(16) NOT NULL COMMENT 'SM2',
+    key_len INT NOT NULL COMMENT 'SM2 fixed 256 in V1',
+    key_idx INT NOT NULL COMMENT 'card key index, allowed range [2..8]',
+    backup_data VARCHAR(500) NOT NULL COMMENT 'SDFE_BackupUserKey output',
+    public_key VARCHAR(500) NOT NULL COMMENT 'public key, Base64/PEM',
+    p10_data VARCHAR(2000) NULL COMMENT 'PKCS#10 PEM content',
+    subject_dn VARCHAR(500) NULL COMMENT 'DN used when generating P10',
+    allow_ips VARCHAR(500) NULL COMMENT 'allowed source IP list',
+    sign_data VARCHAR(512) NULL COMMENT 'reserved, not used in V1',
+    create_by VARCHAR(64) NULL,
+    create_time DATETIME(3) NOT NULL,
+    update_time DATETIME(3) NOT NULL,
+    UNIQUE KEY uk_t_key_entity_key_idx (key_idx),
+    KEY idx_t_key_entity_name (entity_name),
+    KEY idx_t_key_entity_algo (algo_type),
+    KEY idx_t_key_entity_create_time (create_time)
+);
+
+CREATE TABLE IF NOT EXISTS t_certificate (
+    id BIGINT PRIMARY KEY,
+    entity_id BIGINT NULL COMMENT 'required when cert_type=ENTITY',
+    cert_type VARCHAR(16) NOT NULL COMMENT 'ENTITY / USER',
+    subject_dn VARCHAR(500) NOT NULL,
+    issuer_dn VARCHAR(1024) NOT NULL,
+    serial_number VARCHAR(128) NOT NULL,
+    algo_type VARCHAR(16) NOT NULL COMMENT 'SM2 in V1',
+    fingerprint VARCHAR(128) NOT NULL COMMENT 'SHA-256 fingerprint',
+    cert_data VARCHAR(2000) NOT NULL COMMENT 'certificate PEM content',
+    valid_from DATETIME(3) NOT NULL,
+    valid_to DATETIME(3) NOT NULL,
+    import_time DATETIME(3) NOT NULL,
+    sign_data VARCHAR(512) NULL COMMENT 'reserved, not used in V1',
+    create_by VARCHAR(64) NULL,
+    create_time DATETIME(3) NOT NULL,
+    update_time DATETIME(3) NOT NULL,
+    UNIQUE KEY uk_t_certificate_fingerprint (fingerprint),
+    KEY idx_t_certificate_entity_id (entity_id),
+    KEY idx_t_certificate_cert_type (cert_type),
+    KEY idx_t_certificate_issuer_dn (issuer_dn),
+    KEY idx_t_certificate_valid_to (valid_to),
+    KEY idx_t_certificate_import_time (import_time)
+);
+
+CREATE TABLE IF NOT EXISTS t_trusted_cert (
+    id BIGINT PRIMARY KEY,
+    alias VARCHAR(128) NOT NULL,
+    subject_dn VARCHAR(1024) NOT NULL,
+    issuer_dn VARCHAR(1024) NOT NULL,
+    serial_number VARCHAR(128) NOT NULL,
+    algo_type VARCHAR(16) NOT NULL COMMENT 'SM2 in V1',
+    fingerprint VARCHAR(128) NOT NULL COMMENT 'SHA-256 fingerprint',
+    cert_data VARCHAR(2000) NOT NULL COMMENT 'certificate PEM content',
+    ca_level TINYINT NOT NULL COMMENT '0:Root, 1:Intermediate',
+    valid_from DATETIME(3) NOT NULL,
+    valid_to DATETIME(3) NOT NULL,
+    import_time DATETIME(3) NOT NULL,
+    sign_data VARCHAR(512) NULL COMMENT 'reserved, not used in V1',
+    create_by VARCHAR(64) NULL,
+    create_time DATETIME(3) NOT NULL,
+    update_time DATETIME(3) NOT NULL,
+    UNIQUE KEY uk_t_trusted_cert_fingerprint (fingerprint),
+    KEY idx_t_trusted_cert_subject_dn (subject_dn),
+    KEY idx_t_trusted_cert_issuer_dn (issuer_dn),
+    KEY idx_t_trusted_cert_valid_to (valid_to)
+);