通知验签

青旅半醒 2022-03-20 06:57 240阅读 0赞

// 3.验签
    		boolean isOk = XhPayUtil.verifyCer(transData, signMsg,
    				Dict_xhPay_encoding.XHPAY_ENCODING_UTF8);
    		if (!isOk) {
    			log.error("==信合支付回调前台响应信息验签失败！");
    			return;
    		}
    
    		log.info("==信合支付回调前台响应信息验签成功！={}", isOk);

/**
    	 * 验证签名(SHA-256摘要算法)
    	 * 
    	 * @author CNZZ
    	 * @time 2019-1-5
    	 * 
    	 * @param resData
    	 *            返回报文数据<br>
    	 * @param encoding
    	 *            上送请求报文域encoding字段的值<br>
    	 * @return true 通过 false 未通过<br>
    	 */
    	public static boolean verifyCer(String transData, String signMsg,
    			String encoding) {
    		log.info("=========验签处理开始");
    		log.info("验签数据明文transData={}", transData);
    		log.info("验签数据密文signMsg={}", signMsg);
    
    		// 1.加载公钥证书路径
    		getCerPath();
    
    		// 2.验签
    		try {
    			// 验证签名需要用发给商户的公钥证书.
    			return SecureUtil.validateSignBySoft(
    					CertUtil.getValidateCert(cert_path).getPublicKey(),
    					BASE64.decode(signMsg), transData.getBytes(encoding));
    		} catch (UnsupportedEncodingException e) {
    			LogUtil.writeErrorLog(e.getMessage(), e);
    		} catch (Exception e) {
    			LogUtil.writeErrorLog(e.getMessage(), e);
    		}
    		return false;
    	}

/**
    	 * 获取公钥证书路径
    	 */
    	private static void getCerPath() {
    
    		String webappPath = FileUtils.getProjectPath();
    
    		if (cert_path == null) {
    			cert_path = webappPath + Properties.getString("pfxDir") + "/"
    					+ Properties.getString("paygate") + "/"
    					+ Properties.getString("paygate") + ".cer";
    			// cert_path = Properties.getString("pfxDir") + "/"
    			// + Properties.getString("paygate") + "/"
    			// + Properties.getString("paygate") + ".cer";
    			log.info("==验签公钥证书加载路径为={}", cert_path);
    		}
    		if (!new File(cert_path).exists()) {
    			log.error(cert_path + "文件不存在!");
    		}
    	}

/**
    	 * 获取项目路径
    	 * 
    	 * @return
    	 */
    	public static String getProjectPath() {
    		String pathProject = null;
    		String pathWebapp = null;
    		try {
    			pathProject = FileUtils.class.getClassLoader().getResource("../..")
    					.getPath();
    
    			log.info("项目路径pathProject=" + pathProject);
    
    			int ch = pathProject.lastIndexOf("/") - 8;// 截取最后一个"/"索引
    			log.info("索引=" + ch);
    			pathWebapp = pathProject.substring(0, ch);
    		} catch (Exception e) {
    			pathWebapp = "D:/";
    		}
    		// String path=System.getProperty("catalina.home");
    		log.info("项目Webapp路径pathWebapp=" + pathWebapp);
    		return pathWebapp;
    	}

/**
    	 * 软验证签名
    	 * 
    	 * @param publicKey
    	 *            公钥
    	 * @param signData
    	 *            签名数据
    	 * @param srcData
    	 *            摘要
    	 * @param validateMethod
    	 *            签名方法.
    	 * @return
    	 * @throws Exception
    	 */
    	public static boolean validateSignBySoft(PublicKey publicKey,
    			byte[] signData, byte[] srcData) throws Exception {
    		Signature st = Signature.getInstance(BC_PROV_ALGORITHM_SHA256RSA);
    		st.initVerify(publicKey);
    		st.update(srcData);
    		return st.verify(signData);
    	}

/**
    	 * 从指定目录下加载验证签名证书
    	 * 
    	 */
    	public static X509Certificate getValidateCert(String ValidateCertPath) {
    		if (validateCert != null) {
    			return validateCert;
    		}
    
    		LogUtil.writeLog("加载验证签名证书路径==>" + ValidateCertPath);
    		if (StringUtils.isEmpty(ValidateCertPath)) {
    			LogUtil.writeLog("ERROR: acpsdk.validateCert.dir is empty");
    			return null;
    		}
    		File file = new File(ValidateCertPath);
    		CertificateFactory cf = null;
    		FileInputStream in = null;
    		try {
    			cf = CertificateFactory.getInstance("X.509");
    			in = new FileInputStream(file.getAbsolutePath());
    			validateCert = (X509Certificate) cf.generateCertificate(in);
    			// 打印证书加载信息,供测试阶段调试
    			LogUtil.writeLog("[" + file.getAbsolutePath() + "][CertId="
    					+ validateCert.getSerialNumber().toString() + "]");
    			LogUtil.writeLog("LoadVerifyCert Successful");
    		} catch (CertificateException e) {
    			LogUtil.writeErrorLog("LoadVerifyCert Error", e);
    		} catch (FileNotFoundException e) {
    			LogUtil.writeErrorLog("LoadVerifyCert Error File Not Found", e);
    		} finally {
    			if (null != in) {
    				try {
    					in.close();
    				} catch (IOException e) {
    					LogUtil.writeErrorLog(e.toString());
    				}
    			}
    		}
    		return validateCert;
    	}