Skip to content

算法标识用SHA256WITHECDSA而不是SM3WITHSM2生成的证书不会有影响吗? #1

Open

Description

@lvtaoleo

我是从你博客http://www.sitcoder.com/?post=54过来的
看到这段

} else if (alg.toUpperCase().equals("SM2")) {
signalg = "SHA256WITHECDSA";

算法标识用SHA256WITHECDSA而不是SM3WITHSM2生成的证书不会有影响吗?

Activity

  1. sitcode commented on Aug 15, 2017

    @sitcode
    Owner

    @lvtaoleo 可以用的,目前没关系

  2. lvtaoleo commented on Aug 15, 2017

    @lvtaoleo
    Author

    我和浙江CA确认了一下,他们家暂时不支持使用P10来申请SM2证书,然后我又要了一张他们家的SM2证书看了下,里面的签名算法为1.2.156.10197.1.501 公钥参数为1.2.156.10197.1.301 都是国密的oid结点 你生成的证书也是这样吗? 因为我感觉你那样写会都变成ECC的1.2.840.10045.2.1 那块去
    @lvtaoleo 你在哪家公司?

  3. lvtaoleo commented on Aug 15, 2017

    @lvtaoleo
    Author

    还有正好看到你的另一篇 java 解析国密SM2算法证书(修改版) 我到
    seq = (ASN1Sequence)aIn.readObject();
    就报"org.bouncycastle.asn1.DERApplicationSpecific cannot be cast to org.bouncycastle.asn1.ASN1Sequence" 你有遇到过吗?(用的是CA拿来的SM2证书)

    用电脑自带导出的证书则没问题
    @lvtaoleo 你下载这个Demo然后把博客上的代码拷进去,就可以了

  4. sitcode commented on Aug 15, 2017

    @sitcode
    Owner

    @lvtaoleo 你在哪家公司?

  5. lvtaoleo commented on Aug 15, 2017

    @lvtaoleo
    Author

    BestSign 不会遇到友商了吧。。。。。。

  6. lvtaoleo commented on Aug 15, 2017

    @lvtaoleo
    Author

    证书解析还是不行。。。正常的证书aIn.readObject()出来的是ASN1Sequence的子类 SM2证书出来的是ASN1Sequence的侄子类(ASN1Sequence的父类的孙子类)

  7. lvtaoleo commented on Aug 17, 2017

    @lvtaoleo
    Author

    证书解析搞定了 是我这边编码的问题 你的方法很棒!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions