Java RSA （SHA1withRSA）签名和验签

最新推荐文章于 2025-08-09 13:32:37 发布

weixin_34268753

最新推荐文章于 2025-08-09 13:32:37 发布

阅读量1.3k

点赞数

文章标签： java python

本文介绍了一种使用SHA1withRSA算法进行签名生成和验证的方法。该方法通过特定的私钥对请求参数进行签名，并利用公钥进行签名验证，确保了数据传输的安全性和完整性。

static {
    try {
        SIGNATURE = Signature.getInstance("SHA1withRSA", "BC");
    } catch (NoSuchAlgorithmException | NoSuchPaddingException | NoSuchProviderException e) {
        throw Throwables.propagate(e);
    }
}

public static String getSignature(Map<String, String> map, String pfxPath, String pfxPasswd) {
    try {
        SIGNATURE.initSign(X509Certs.getPrivateKey(pfxPath, pfxPasswd).getPrivateKey());
        SIGNATURE.update(DigestUtils.sha1Hex(buildReqParams(map, false)).getBytes(Charsets.UTF_8));
        return Base64.encodeBase64String(SIGNATURE.sign()).replaceAll("\r|\n", "");
    } catch (Throwable e) {
        throw Throwables.propagate(e);
    }
}

public static void verifySign(Map<String, String> map, String certPath) throws GatewayFrontException {
    try {
        byte[] sign = Base64.decodeBase64(map.get("signature").getBytes(Charsets.UTF_8));
        map.remove("signature");
        SIGNATURE.initVerify(X509Certs.getVerifyPublicKey(certPath));
        SIGNATURE.update(DigestUtils.sha1Hex(ExPayUtil.buildReqParams(map, false)).getBytes(Charsets.UTF_8));
        Preconditions.checkState(SIGNATURE.verify(sign), ExPayConstant.VERIFY_SIGNATURE_FAILUE);
    } catch (Exception e) {
        throw Throwables.propagate(e);
    }
}