<!-- enable persistent sessions -->
−
<session-config>
<save-mode>after-request</save-mode>
<use-persistent-store/>
</session-config>
−
<!--
增加save-mode這個child
並設定其質為after-request
一有request就存進去
解決這問題
(題外 管理介面有做一些小變更 包含登入驗證等頁面改變 可以去看看？)
<?php
$message = 'test'; // Original Message
try {
$dbh = new PDO('mysql:dbname=FAST;host=127.0.0.1', 'user', 'pass');
} catch (PDOException $e) {
echo 'Connection failed: ' . $e->getMessage();
}
$sth = $dbh->prepare('SELECT `Public_Key` FROM XXX WHERE ID = ?');
$sth->bindParam(1, $tagID, PDO::PARAM_STR, 8);
$sth->execute();
$row = $sth->fetch();
$pubkeyid = openssl_get_publickey($row['Public_Key']);
// state whether signature is okay or not
$ok = openssl_verify($message, base64_decode($_POST['sigData']), $pubkeyid);
if ($ok == 1) {
echo "good";
} elseif ($ok == 0) {
echo "bad";
} else {
echo "ugly, error checking signature";
}
// free the key from memory
openssl_free_key($pubkeyid);
?>
public static byte[] signature(byte[] data){
try{
AsymmetricCipherKeyPair keyPair;
using(var reader = File.OpenText(@"D:\Programs\OpenSSL\user1.key")) { // Direct read pem format RSA private key file
keyPair = (AsymmetricCipherKeyPair) new PemReader(reader).ReadObject();
}
RsaDigestSigner rds = new RsaDigestSigner(new Sha1Digest());
rds.Init(true, keyPair.Private);
rds.BlockUpdate(data, 0, data.Length);
return rds.GenerateSignature();
}catch(Exception e){
throw new IOException("problem creating private key: " + e.ToString());
}
}
public static bool verify(byte[] message, byte[] sig){
var crt = new X509Certificate2(@"D:\Programs\OpenSSL\user1.crt"); // Read X509 Certificate file
var rsa = (RSACryptoServiceProvider) crt.PublicKey.Key; // Get public key
return rsa.VerifyData(message, "SHA1", sig);
}
workers.tomcat_home=/usr/share/tomcat6
這個值預設是安裝 Tomcat 5 的位置，因為我是安裝新版的 6 版，不修改一定不能用。改成 /usr/share/tomcat6 就可以順利指定 Tomcat6 的目錄。
workers.java_home=/usr/lib/jvm/default-java
這個值預設是 JavaVM 沒錯，但是現在已經有開放原始碼的 OpenJRE/OpenJDK，如果你也是安裝了 OpenJRE，那記得改一下位置: /usr/lib/jvm/default-java，這個路徑是一個 Symbolic Link，不知道其他版本是不是也有這個 link。
加上一行 JkMountCopy All
加這行的用意是因為預設 mod_jk 只會運作在 Apache 主網站，其他的虛擬網站 (VirtualHost) 設定不會套用。但是 Ubuntu 預設的結構是，主網站也是使用虛擬網站設定，並沒有主網站設定，所以按照預設值 mod_jk 會無法對應到正確的檔案 (這可以從 log 看的出來)。而這行就是將設定複製到全部的虛擬網站。
因為我的網站設定只有 80 port 跟 443 port，而且網站內容一模一樣，這樣的設定沒有什麼問題。但是如果你的虛擬網站很複雜，各自有不同內容，那就請只在想要連接到 Tomcat 的網站設定檔內修改加入一行 JkMountCopy On，讓你指定的虛擬網站能夠正常運作 mod_jk 設定。
ln -s ../mods-available/jk.conf jk.conf
MessageDigest mdAlgorithm = MessageDigest.getInstance("MD5");
mdAlgorithm.update(User_ID.getBytes());
byte[] digest = mdAlgorithm.digest();
StringBuffer hexString = new StringBuffer();
for (int i = 0; i < digest.length; i++) {
User_ID = Integer.toHexString(0xFF & digest[i]);
if (User_ID.length() < 2) {
User_ID = "0" + User_ID;
}
hexString.append(User_ID);
}
User_ID=hexString.toString();
就可以成功執行hash動作
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIBgTAbBgkqhkiG9w0BBQMwDgQIjgXxhGkmgGcCAggABIIBYEXZfHjLUnXJ8h+F
...
mtuOc9U=
-----END ENCRYPTED PRIVATE KEY-----
-----BEGIN RSA PRIVATE KEY-----
MIIBOQIBAAJBAOWeK9TSYVnPEkmK45TeI7NrC8MzvwabSVg1aEuTmcNkLRg/Qibv
...
Ft4zOc8TnbXnGxXRfGVG0RZfXmxcQNv2yX2G4Vc=
-----END RSA PRIVATE KEY-----
using System;
using System.IO;
using System.Text;
using Org.BouncyCastle.Asn1;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Pkcs;
using Org.BouncyCastle.Security;
const String pemp8header = "-----BEGIN ENCRYPTED PRIVATE KEY-----";
const String pemp8footer = "-----END ENCRYPTED PRIVATE KEY-----";
char[] password = "xxxxxx".ToCharArray(); // 解密密碼
// 取出檔案中 BASE64 編碼的部分，還原
StringBuilder sb = new StringBuilder(File.ReadAllText(@"B:\tmp.key"));
sb.Replace(pemp8header, "");
sb.Replace(pemp8footer, "");
String pubstr = sb.ToString().Trim();
byte[] binkey = Convert.FromBase64String(pubstr);
var info = EncryptedPrivateKeyInfo.GetInstance(Asn1Object.FromByteArray(binkey));
// 開始建立解密引擎，準備進行 DES-CBC 解密
var algId = info.EncryptionAlgorithm;
var cipher = (BufferedBlockCipher) PbeUtilities.CreateEngine(algId.ObjectID);
var param = PbeUtilities.GenerateCipherParameters(algId.ObjectID, password, algId.Parameters);
cipher.Init(false, param);
// 取出加密資料，進行解密
byte[] data = info.GetEncryptedData();
byte[] outBytes = new byte[cipher.GetOutputSize(data.Length)];
int len = cipher.ProcessBytes(data, 0, data.Length, outBytes, 0);
try {
len += cipher.DoFinal(outBytes, len);
} catch(Exception e) {
throw new Exception("failed DoFinal - exception " + e.ToString());
}
// outBytes 為解密完的 PrivateKeyInfo (PKCS#8)，接著取出 PrivateKey
var p = PrivateKeyInfo.GetInstance(Asn1Object.FromByteArray(outBytes));
var rsa = new RsaPrivateKeyStructure((Asn1Sequence) p.PrivateKey);
// privSpec 可用於解密
var privSpec = new RsaKeyParameters(true, rsa.Modulus, rsa.PrivateExponent);
using System;
using System.IO;
using System.Text;
using Org.BouncyCastle.Asn1;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Pkcs;
using Org.BouncyCastle.Security;
const String pemp8header = "-----BEGIN ENCRYPTED PRIVATE KEY-----";
const String pemp8footer = "-----END ENCRYPTED PRIVATE KEY-----";
char[] password = "xxxxxx".ToCharArray(); // 解密密碼
// 取出檔案中 BASE64 編碼的部分，還原
StringBuilder sb = new StringBuilder(File.ReadAllText(@"B:\tmp.key"));
sb.Replace(pemp8header, "");
sb.Replace(pemp8footer, "");
String pubstr = sb.ToString().Trim();
byte[] binkey = Convert.FromBase64String(pubstr);
var info = EncryptedPrivateKeyInfo.GetInstance(Asn1Object.FromByteArray(binkey));
// 重點方法: PrivateKeyInfoFactory.CreatePrivateKeyInfo() 一行抵十行
var p = PrivateKeyInfoFactory.CreatePrivateKeyInfo(password, info);
var rsa = new RsaPrivateKeyStructure((Asn1Sequence) p.PrivateKey);
// privSpec 可用於解密
var privSpec = new RsaKeyParameters(true, rsa.Modulus, rsa.PrivateExponent);
| Tag_ID | Database_ID | Changed |
| 1212343456567878 | 98000001 | 0 |
| 1212343456567899 | 98000002 | 1 |
| 1212343456567800 | 98000003 | 2 |
| 1212343456567812 | 98000004 | 3 |
| Database_ID | Public_Key |
| 98000001 | qwerasdfzxcvtgbh |
| 98000002 | qasdfghjklmnbvcx |
| 98000003 | qasdfghjklmnbaaa |
| 98000004 | qasdfghjklmasdfg |
| Database_ID | Paper_Read |
| 98000001 | y |
| 98000002 | n |
| 98000003 | n |
| 98000004 | y |
| Database_ID | Name | Level | User_ID |
| 98000001 | Jimmy | Chairman | A123456789 |
| 98000002 | RobertCamel | Manager | B123456789 |
| 98000003 | Scribe | Manager | C123456789 |
| 98000004 | Soultaker | Chairman | D123456789 |
| Database_ID | Set_1 | Set_2 | Set_3 |
| 98000001 | 0 | 1 | 1 |
| 98000002 | 1 | 1 | 1 |
| 98000003 | 0 | 1 | 0 |
| 98000004 | 1 | 0 | 1 |
public static byte[] useSHA256(byte[] data){
SHA256 sha = new SHA256Managed();
return sha.ComputeHash(data);
}
public static byte[] signature(byte[] data){
byte[] hash = useSHA256(data);
try{
var seq = (Asn1Sequence) Asn1Object.FromStream(File.OpenRead(@"B:\OpenSSL\1-der.key"));
var rsa = new RsaPrivateKeyStructure(seq);
var privSpec = new RsaPrivateCrtKeyParameters(
rsa.Modulus, rsa.PublicExponent, rsa.PrivateExponent,
rsa.Prime1, rsa.Prime2, rsa.Exponent1, rsa.Exponent2,
rsa.Coefficient
);
var encryptEngine = new Pkcs1Encoding(new RsaEngine());
encryptEngine.Init(true, privSpec);
return encryptEngine.ProcessBlock(hash, 0, hash.Length); // Digital Signature
}catch(Exception e){
throw new IOException("problem creating private key: " + e.ToString());
}
}
public static bool verify(byte[] message, byte[] sig){
byte[] hash = useSHA256(message);
var crt = new X509Certificate2(@"B:\OpenSSL\1.crt"); // Read X509 Certificate file
var rsa = (RSACryptoServiceProvider) crt.PublicKey.Key; // Get public key
return rsa.VerifyHash(hash, "SHA256", sig);
}
-----BEGIN RSA PRIVATE KEY-----
MIIBOQIBAAJBAOWeK9TSYVnPEkmK45TeI7NrC8MzvwabSVg1aEuTmcNkLRg/Qibv
B6ST5F056HCk0xvzm5rfO5A+q+4ncBMGMhkCAwEAAQJABGaLoICHrRjy2MX4ppm7
RWz/xLXxK0c+mJotbYVepQf1KYB6kPc4df1t4KrFFgxMyXzdJ/eiegf4j3HFT4Hs
gQIhAPiVVZNSMqp1uUx7OXB3GGW+3uslvA3+NvuAKqVguIo9AiEA7Hf6ykGeuRBN
k2EN+J+Vof4ryzFOtJGH+eyycmKPsQ0CIFJYteZ9nkcVhHKvh1GYQj7CQfpHn8pK
4k/iHz51kexJAiBwKs1kiVHv+QLDSQNmjtRcngNKBB6QWoQEkjlnNsdwNQIgbJYa
Ft4zOc8TnbXnGxXRfGVG0RZfXmxcQNv2yX2G4Vc=
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
using System;
using System.IO;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;
using System.Text;
using Org.BouncyCastle.Asn1;
using Org.BouncyCastle.Asn1.Pkcs;
using Org.BouncyCastle.Crypto;
using Org.BouncyCastle.Crypto.Encodings;
using Org.BouncyCastle.Crypto.Engines;
using Org.BouncyCastle.Crypto.Parameters;
using Org.BouncyCastle.OpenSsl;
namespace PKI_RSAEnDecryptDemo {
class Program {
static void Main(string[] args) {
byte[] plainTextByte = Encoding.UTF8.GetBytes("超爽的，撿到100塊咧～咧？");
byte[] encTextType = encrypt(plainTextByte);
string base64 = Convert.ToBase64String(encTextType);
Console.WriteLine(base64);
byte[] oristr = decrypt_DER(encTextType);
Console.WriteLine(Encoding.UTF8.GetString(oristr));
Console.ReadKey();
}
public static byte[] encrypt(byte[] plainTextByte) {
var crt = new X509Certificate2(@"B:\OpenSSL\1.crt"); // Read X509 Certificate file
var rsa = (RSACryptoServiceProvider) crt.PublicKey.Key; // Get public key
byte[] Cryptograph = rsa.Encrypt(plainTextByte, false); // Encrypt
return Cryptograph;
}
public static byte[] decrypt(byte[] encTextType) {
AsymmetricCipherKeyPair keyPair;
using(var reader = File.OpenText(@"B:\OpenSSL\1.key")) { // Direct read pem format RSA private key file
keyPair = (AsymmetricCipherKeyPair) new PemReader(reader).ReadObject();
}
var decryptEngine = new Pkcs1Encoding(new RsaEngine());
decryptEngine.Init(false, keyPair.Private);
return decryptEngine.ProcessBlock(encTextType, 0, encTextType.Length); // Decrypt
}
public static byte[] decrypt_DER(byte[] encText) {
try{
var seq = (Asn1Sequence) Asn1Object.FromStream(File.OpenRead(@"B:\OpenSSL\1-der.key"));
var rsa = new RsaPrivateKeyStructure(seq);
var privSpec = new RsaPrivateCrtKeyParameters(
rsa.Modulus, rsa.PublicExponent, rsa.PrivateExponent,
rsa.Prime1, rsa.Prime2, rsa.Exponent1, rsa.Exponent2,
rsa.Coefficient
);
var decryptEngine = new Pkcs1Encoding(new RsaEngine());
decryptEngine.Init(false, privSpec);
return decryptEngine.ProcessBlock(encText, 0, encText.Length); // Decrypt
}catch(Exception e){
throw new IOException("problem creating private key: " + e.ToString());
}
}
}
}
