0

我使用 javascript 打开 CAPICOM 商店来选择证书。之后，我导出选定的证书、该证书的公钥和私钥，并将它们放在三个隐藏字段中。

    var privateKey = certificates.Item(1).PrivateKey;
    var cert = certificates.Item(1);
    var publicKey = cert.PublicKey().EncodedKey.Value

签署 xml 时，我使用：

拿证

    Dim hideCertCapicom As String = Replace(HiddenCert.Value, " ", "+")
    Dim certificate As New X509Certificate2(Convert.FromBase64String(hideCertCapicom))

为了定义我使用的私钥 

    Dim keyC As String = hideKey 

    Dim cspp As New CspParameters()
    cspp.KeyContainerName = keyC

    Dim tmpRsa As New RSACryptoServiceProvider(cspp)
    tmpRsa.PersistKeyInCsp = True

这将成功签署我的 xml。

为了验证我使用的 xml：

    Dim hidePublicKey As String = HiddenPublicKey.Value

    Dim keyC As String = hidePublicKey

    Dim cspp As New CspParameters()
    cspp.KeyContainerName = keyC 

    Dim tmpRsa As New RSACryptoServiceProvider(cspp)
    tmpRsa.PersistKeyInCsp = True

但这不起作用。只有当我再次使用私钥时它才有效。

使用相同的私钥签名和验证还是使用公钥进行签名和验证是一种好习惯？

4

1 回答 1

0

我能够用私钥签名并用公钥验证签名，我想与你分享。

在 SignXml() 函数中，我从私钥导出了公钥：

 Dim publicKey as String = tmpRsa.ToXmlString(False)

然后在同一个函数中我调用 verifyXml() 函数：

 Dim verifySign As Boolean

 verifySign = VerifyXml(doc, publicKey)

在 verifyXml() 函数中，我以这种方式获取了公钥：

Public Function VerifyXml(Doc As XmlDocument, Key As String) As Boolean

 Dim tmpRsa As New RSACryptoServiceProvider()
 tmpRsa.FromXmlString(Key)

 Dim signedXml As New SignedXml(Doc)

 Dim nodeList As XmlNodeList = Doc.GetElementsByTagName("Signature")

 If nodeList.Count <= 0 Then
    Throw New CryptographicException("Verification failed: No Signature was found in the document.")
 End If

 If nodeList.Count >= 2 Then
    Throw New CryptographicException("Verification failed: More that one signature was found for the document.")
 End If

 signedXml.LoadXml(DirectCast(nodeList(0), XmlElement))

 Return signedXml.CheckSignature(tmpRsa)

End Function
于 2016-05-26T13:48:32.370 回答