支付签名

柔光的暖阳◎ 2022-03-20 05:14 232阅读 0赞

// 3.签名
    		Map signData = XhPayUtil.sign(reqData, "utf-8");

/**
    	 * 生成签名值(SHA1摘要算法)
    	 * 
    	 * @param data
    	 *            待签名数据Map键值对形式
    	 * @param encoding
    	 *            编码
    	 * @return 签名是否成功
    	 */
    	public static Map sign(Map<String, String> data, String encoding) {
    		Map signMap = new HashMap();
    		String transData = createTransDataByMap(data);
    		signMap.put("transData", transData);
    		signMap.put("signMsg", signByStr(transData, encoding));
    		System.out.println("数据：" + signMap);
    		return signMap;
    	}

/**
    	 * 将map数据按key=value&key=value进行组装
    	 * 
    	 * @param data
    	 * @param encoding
    	 * @return
    	 */
    	public static String createTransDataByMap(Map data) {
    		if (data == null || data.isEmpty()) {
    			return "";
    		}
    
    		StringBuffer sb = new StringBuffer();
    		Iterator iter = data.keySet().iterator();
    		while (iter.hasNext()) {
    			Object key = iter.next();
    			sb.append(key).append("=").append(data.get(key)).append("&");
    		}
    		sb.deleteCharAt(sb.length() - 1);// 清楚最后一个&
    		return sb.toString();
    	}

/**
    	 * 签名
    	 * 
    	 * @param transData
    	 * @param encoding
    	 * @return
    	 */
    	public static String signByStr(String transData, String encoding) {
    		System.out.println("调用签名方法....");
    		String webappPath = FileUtils.getProjectPath();
    		log.info("证书加载路径为={}", webappPath);
    
    		String[] b = transData.split("&");
    
    		String c = "";
    		String merchId = "";
    		for (int i = 0; i < b.length; i++) {
    			c = b[i];
    			if (c.indexOf("merchId=") != -1) {
    				merchId = c.substring(8, c.length());
    			}
    		}
    		if (pfx_path == null) {
    			pfx_path = webappPath + Properties.getString("pfxDir") + "/"
    					+ merchId + "/" + merchId + ".pfx";
    			// pfx_path = Properties.getString("pfxDir") + "/" + merchId + "/"
    			// + merchId + ".pfx";
    		}
    
    		if (pfx_pwd == null) {
    			pfx_pwd = Properties.getString("pfx_pwd");
    		}
    
    		if (!new File(pfx_path).exists()) {
    			System.err.println(pfx_path + "文件不存在");
    			pfx_path = null;
    			throw new RuntimeException("商户证书不存在");
    		}
    
    		byte[] byteSign = null;
    		try {
    			byte[] signDigest = transData.getBytes(encoding);// SecureUtil.sha1X16(stringData,
    																// encoding);
    			byteSign = SecureUtil
    					.signBySoft(CertUtil.getSignCertPrivateKeyByStoreMap(
    							pfx_path, pfx_pwd), signDigest);
    			pfx_path = null;
    			// 设置签名域值
    		} catch (Exception e) {
    			LogUtil.writeErrorLog("签名异常", e);
    		}
    		if (byteSign == null) {
    			LogUtil.writeErrorLog("签名异常");
    			pfx_path = null;
    			return "";
    		}
    		String signStr = Base64.encode(byteSign);
    
    		System.out.println("signStr:" + signStr);
    		return signStr;
    
    	}

public static PrivateKey getSignCertPrivateKeyByStoreMap(String certPath,
    			String certPwd) {
    		if (!certKeyStoreMap.containsKey(certPath)) {
    			loadRsaCert(certPath, certPwd);
    		}
    		try {
    			Enumeration<String> aliasenum = certKeyStoreMap.get(certPath)
    					.aliases();
    			String keyAlias = null;
    			if (aliasenum.hasMoreElements()) {
    				keyAlias = aliasenum.nextElement();
    			}
    			PrivateKey privateKey = (PrivateKey) certKeyStoreMap.get(certPath)
    					.getKey(keyAlias, certPwd.toCharArray());
    			return privateKey;
    		} catch (KeyStoreException e) {
    			LogUtil.writeErrorLog("getSignCertPrivateKeyByStoreMap Error", e);
    			return null;
    		} catch (UnrecoverableKeyException e) {
    			LogUtil.writeErrorLog("getSignCertPrivateKeyByStoreMap Error", e);
    			return null;
    		} catch (NoSuchAlgorithmException e) {
    			LogUtil.writeErrorLog("getSignCertPrivateKeyByStoreMap Error", e);
    			return null;
    		}
    	}

/**
    	 * 软签名
    	 * 
    	 * @param privateKey
    	 *            私钥
    	 * @param data
    	 *            待签名数据
    	 * @param signMethod
    	 *            签名方法
    	 * @return 结果
    	 * @throws Exception
    	 */
    	public static byte[] signBySoft(PrivateKey privateKey, byte[] data)
    			throws Exception {
    		byte[] result = null;
    		Signature st = Signature.getInstance(BC_PROV_ALGORITHM_SHA256RSA);
    		st.initSign(privateKey);
    		st.update(data);
    		result = st.sign();
    		String s = Base64.encodeBase64String(result);
    		System.out.println(s);
    		return result;
    	}

/**
    	 * 算法常量：SHA1withRSA
    	 */
    	private static final String BC_PROV_ALGORITHM_SHA256RSA = "SHA256withRSA";