n20-common-lib 2.9.13 → 2.9.14

package/src/plugins/Sign/index.js

@@ -1,137 +1,189 @@
 import importG from '../../utils/importGlobal.js'
 
 import CaMap from './CaMap.js'
-import { getCert as itrusGetCert } from './Itrus/index'
-import { getCertInfo as NetSM3 } from './NetSM3/index'
-import { getCertInfo as SkfSign } from './SkfSign/index'
-import { getCertInfo } from './sign'
+
+/**
+ * 统一处理签名逻辑
+ * @param {Object} config - 签名配置
+ * @param {string} config.type - 签名类型
+ * @param {string|Function} config.path - 签名模块路径
+ * @param {boolean} config.needAvailable - 是否需要检查可用性
+ * @param {*} p1 - 签名参数1
+ * @param {*} p2 - 签名参数2
+ * @param {*} p3 - 签名参数3
+ * @returns {Promise<*>} 签名结果
+ */
+async function disposeSign(config, p1, p2, p3) {
+  try {
+    // 如果是信安CA且在银河麒麟系统上，则使用国密签名
+    // 使用更可靠的系统和环境检测方法
+    if (
+      config.type === 'inetSign' &&
+      // 检查操作系统
+      (navigator.platform.toLowerCase().includes('linux') ||
+        navigator.userAgent.toLowerCase().includes('linux') ||
+        // 检查是否为银河麒麟特有的环境变量或特征
+        typeof window.KylinOS !== 'undefined' ||
+        document.documentElement.dataset.osType === 'kylin')
+    ) {
+      // 确保CaMap中存在SkfSign配置
+      if (!CaMap['SkfSign']) {
+        console.warn('未找到SkfSign配置，将继续使用原始配置')
+        return
+      }
+      config = CaMap['SkfSign']
+    }
+
+    const path = typeof config.path === 'function' ? config.path(p3) : config.path
+    const module = await importG(config.type, () => import(`${path}`))
+
+    if (config.needAvailable) {
+      await new Promise((resolve, reject) => {
+        module.availableSign((available) => {
+          available ? resolve() : reject(new Error('签名不可用'))
+        }, systemIdentification())
+      })
+    }
+
+    return await module.getSign(p1, p2, p3)
+  } catch (error) {
+    console.error('签名处理失败:', error)
+    throw error
+  }
+}
+
+function systemIdentification() {
+  const userAgent = navigator.userAgent || navigator.vendor || window.opera
+  let url = window.NetSignName || '/portal/NetSignCNG-v2.1.152.2.exe'
+  if (/windows/i.test(userAgent)) {
+    url = window.NetSignName
+  } else if (/linux/i.test(userAgent)) {
+    url = /Kylin/i.test(userAgent)
+      ? window.KylinSignName || '/portal/NetSignCNG-v2.1.152.2.rpm' // 麒麟系统
+      : window.linuxSignName || '/portal/NetSignCNG-v2.1.152.2.deb' // 普通Linux
+  }
+  return url
+}
+
+/**
+ * 获取签名
+ * @param {*} p1 - 签名参数1
+ * @param {*} p2 - 签名参数2
+ * @param {*} p3 - 签名参数3
+ * @returns {Promise<*>} 签名结果
+ */
 export async function getSign(p1, p2, p3) {
   let signType = window.sessionStorage.getItem('signType')
   if (!signType || !CaMap[signType]) {
-    console.error('请设置签名服务公司sessionStorage.signType,公司字段映射:', CaMap)
+    console.error('请设置签名服务公司sessionStorage.signType')
     signType = CaMap['null'] ? CaMap['null'].type : ''
   }
-  let url = window.NetSignName
+  // 是否使用信安3.0版本sdk (默认使用2.0版本)
+  if (window.NetSignVersion === 'signV3') {
+    return await disposeSign(CaMap['signV3'], p1, p2, p3)
+  } else {
+    return await disposeSign(CaMap[signType], p1, p2, p3)
+  }
+}
 
-  const por = new Promise((resolve, reject) => {
+/**
+ * 获取证书信息
+ * @param {string} dn - 证书DN
+ * @returns {Promise<*>} 证书信息
+ */
+export function getCert(dn) {
+  let signType = window.sessionStorage.getItem('signType')
+  console.log('signType', signType)
+  return new Promise((resolve, reject) => {
     if (signType === 'inetSign' /* 信安CA */) {
-      importG('inetSign', () => import(/*webpackChunkName: "inetSign"*/ './sign.js')).then(
-        ({ availableSign, getSign }) => {
-          availableSign((available) => {
-            if (available) {
-              const sign = getSign(p1, p2, p3)
-              resolve(sign)
-            } else {
-              reject()
-            }
-          }, url)
-        }
-      )
-    } else if (signType === 'bjcaSign' /* 北京CA */) {
-      importG('bjcaSign', () => import(/*webpackChunkName: "bjcaSign"*/ './bjca/index.js')).then(({ getSign }) => {
-        getSign(p1, p2, p3)
-          .then((sign) => {
-            resolve(sign)
-          })
-          .catch(() => {
-            reject()
-          })
-      })
-    } else if (signType === 'ItrusSign' /* 天威CA */) {
-      if (p3 && p3 === '3720') {
-        importG('ItrusSign', () => import(/*webpackChunkName: "ItrusSign"*/ './Itrus/sign_3720.js')).then(
-          ({ getSign }) => {
+      // 是否使用信安3.0版本sdk (默认使用2.0版本)
+      if (window.NetSignVersion === 'signV3') {
+        importG('inetSign', () => import(/*webpackChunkName: "inetSign"*/ './signV3/sign.js')).then(
+          ({ getCertInfo }) => {
             try {
-              const ItrusSign = getSign(p1, p2, p3)
-              resolve(ItrusSign)
+              const itrusGetCert = getCertInfo(dn)
+              resolve(itrusGetCert)
             } catch (error) {
               reject()
             }
           }
         )
       } else {
-        importG('ItrusSign', () => import(/*webpackChunkName: "ItrusSign"*/ './Itrus/index.js')).then(({ getSign }) => {
+        importG('inetSign', () => import(/*webpackChunkName: "inetSign"*/ './sign.js')).then(({ getCertInfo }) => {
           try {
-            const ItrusSign = getSign(p1, p2, p3)
-            resolve(ItrusSign)
+            const itrusGetCert = getCertInfo(dn)
+            resolve(itrusGetCert)
           } catch (error) {
             reject()
           }
         })
       }
-    } else if (signType === 'SkfSign' /* 信安国密CA */) {
-      importG('SkfSign', () => import(/*webpackChunkName: "SkfSign"*/ './SkfSign/index.js')).then(
-        ({ availableSign, getSign }) => {
-          availableSign((available) => {
-            if (available) {
-              const SkfSign = getSign(p1, p2, p3)
-              resolve(SkfSign)
-            } else {
-              reject()
-            }
-          }, url)
+    } else if (signType === 'SkfSign') {
+      importG('SkfSign', () => import(/*webpackChunkName: "SkfSign"*/ './SkfSign/index.js')).then(({ getCertInfo }) => {
+        try {
+          const itrusGetCert = getCertInfo(dn)
+          resolve(itrusGetCert)
+        } catch (error) {
+          reject()
         }
-      )
-    } else if (signType === 'netcaSign' /* 网证通 */) {
-      importG('netcaSign', () => import(/*webpackChunkName: "netcaSign"*/ './netca/index.js')).then(({ getSign }) => {
-        getSign(p1, p2, p3)
-          .then((sign) => {
-            resolve(sign)
-          })
-          .catch(() => {
-            reject()
-          })
       })
-    } else if (signType === 'NetSM3' /* 信安国密CA软签 */) {
-      importG('NetSM3', () => import(/*webpackChunkName: "NetSM3"*/ './NetSM3/index.js')).then(
-        ({ availableSign, getSign }) => {
-          availableSign((available) => {
-            if (available) {
-              const SkfSign = getSign(p1, p2, p3)
-              resolve(SkfSign)
-            } else {
-              reject()
-            }
-          }, url)
+    } else if (signType === 'NetSM3') {
+      importG('NetSM3', () => import(/*webpackChunkName: "NetSM3"*/ './NetSM3/index.js')).then(({ getCertInfo }) => {
+        try {
+          const itrusGetCert = getCertInfo(dn)
+          resolve(itrusGetCert)
+        } catch (error) {
+          reject()
+        }
+      })
+    } else if (signType === 'ItrusSign') {
+      importG('ItrusSign', () => import(/*webpackChunkName: "ItrusSign"*/ './Itrus/index.js')).then(({ getCert }) => {
+        try {
+          const itrusGetCert = getCert(dn)
+          resolve(itrusGetCert)
+        } catch (error) {
+          reject()
+        }
+      })
+    } else if (signType === 'bjcaSign') {
+      importG('bjcaSign', () => import(/*webpackChunkName: "ItrusSign"*/ './bjca/index.js')).then(({ getCert }) => {
+        try {
+          const itrusGetCert = getCert(dn)
+          console.log('itrusGetCert', itrusGetCert)
+          resolve(itrusGetCert)
+        } catch (error) {
+          reject()
+        }
+      })
+    } else if (signType === 'hncaSign') {
+      importG('hncaSign', () => import(/*webpackChunkName: "ItrusSign"*/ './hnca/index.js')).then(({ getCert }) => {
+        try {
+          const hncaGetCert = getCert(dn)
+          resolve(hncaGetCert)
+        } catch (error) {
+          reject()
         }
-      )
-    } else if (signType === 'cfcaSign' /* CFCA */) {
-      importG('CFCA', () => import(/*webpackChunkName: "CFCA"*/ './cfca/index.js')).then(({ getSign }) => {
-        getSign(p1, p2, p3)
-          .then((sign) => {
-            resolve(sign)
-          })
-          .catch(() => {
-            reject()
-          })
       })
     }
   })
-
-  return por
-}
-
-export function getCert(dn) {
-  let signType = window.sessionStorage.getItem('signType')
-  if (signType === 'inetSign' /* 信安CA */) {
-    return getCertInfo(dn)
-  } else if (signType === 'SkfSign') {
-    return SkfSign(dn)
-  } else if (signType === 'NetSM3') {
-    return NetSM3(dn)
-  } else if (signType === 'ItrusSign') {
-    return itrusGetCert(dn)
-  }
 }
 
-export function updateCert(cspName) {
-  return importG('NetV3', () => import(/*webpackChunkName: "NetV3"*/ './NetV3/index.js')).then(({ updateCert }) => {
-    updateCert(cspName)
-  })
+/**
+ * 更新证书
+ * @param {string} cspName - CSP名称
+ * @returns {Promise<void>}
+ */
+export async function updateCert(cspName, onSuccess, dnInfo) {
+  const { updateCert } = await importG('NetV3', () => import(/*webpackChunkName: "NetV3"*/ './NetV3/index.js'))
+  await updateCert(cspName, onSuccess, dnInfo)
 }
 
-export function updateCertHG(uno) {
-  return importG('NetV3', () => import(/*webpackChunkName: "NetV3"*/ './NetV3/index.js')).then(({ updateCertHG }) => {
-    updateCertHG(uno)
-  })
+/**
+ * 更新证书(海港)
+ * @param {string} uno - 用户编号
+ * @returns {Promise<void>}
+ */
+export async function updateCertHG(uno) {
+  const { updateCertHG } = await importG('NetV3', () => import(/*webpackChunkName: "NetV3"*/ './NetV3/index.js'))
+  await updateCertHG(uno)
 }

package/src/plugins/Sign/kySign/base64.js

@@ -0,0 +1,160 @@
+/*******************************************************
+ *
+ * 函数名称：Base64encode()
+ * 功    能：对数据进行Base64加密
+ * 说	明：函数中将数据使用_utf8_encode()进行编码转换后再加密,保证数据完整
+ *
+ **********************************************************/
+
+var _keyStr = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/='
+
+function _Base64encode(input) {
+  var output = ''
+  var chr1, chr2, chr3, enc1, enc2, enc3, enc4
+  var i = 0
+
+  input = _utf8_encode(input)
+
+  while (i < input.length) {
+    chr1 = input.charCodeAt(i++)
+    chr2 = input.charCodeAt(i++)
+    chr3 = input.charCodeAt(i++)
+
+    enc1 = chr1 >> 2
+    enc2 = ((chr1 & 3) << 4) | (chr2 >> 4)
+    enc3 = ((chr2 & 15) << 2) | (chr3 >> 6)
+    enc4 = chr3 & 63
+
+    if (isNaN(chr2)) {
+      enc3 = enc4 = 64
+    } else if (isNaN(chr3)) {
+      enc4 = 64
+    }
+
+    output = output + _keyStr.charAt(enc1) + _keyStr.charAt(enc2) + _keyStr.charAt(enc3) + _keyStr.charAt(enc4)
+  }
+  return output
+}
+
+/*******************************************************
+ *
+ * 函数名称：Base64decode()
+ * 功    能：对数据进行Base64解密
+ * 说	明：函数中将数据使用_utf8_decode()将解密后的数据编码,保证数据完整
+ *
+ **********************************************************/
+function _Base64decode(input) {
+  var output = ''
+  var chr1, chr2, chr3
+  var enc1, enc2, enc3, enc4
+  var i = 0
+
+  input = input.replace(/[^A-Za-z0-9\+\/\=]/g, '')
+
+  while (i < input.length) {
+    enc1 = _keyStr.indexOf(input.charAt(i++))
+    enc2 = _keyStr.indexOf(input.charAt(i++))
+    enc3 = _keyStr.indexOf(input.charAt(i++))
+    enc4 = _keyStr.indexOf(input.charAt(i++))
+
+    chr1 = (enc1 << 2) | (enc2 >> 4)
+    chr2 = ((enc2 & 15) << 4) | (enc3 >> 2)
+    chr3 = ((enc3 & 3) << 6) | enc4
+
+    output = output + String.fromCharCode(chr1)
+
+    if (enc3 != 64) {
+      output = output + String.fromCharCode(chr2)
+    }
+    if (enc4 != 64) {
+      output = output + String.fromCharCode(chr3)
+    }
+  }
+
+  output = _utf8_decode(output)
+
+  return output
+}
+
+/*******************************************************
+ *
+ * 函数名称：_utf8_encode()
+ * 功    能：将数据进行utf8编码
+ * 说	明：
+ *
+ **********************************************************/
+function _utf8_encode(string) {
+  string = string.replace(/\r\n/g, '\n')
+  var utftext = ''
+
+  for (var n = 0; n < string.length; n++) {
+    var c = string.charCodeAt(n)
+
+    if (c < 128) {
+      utftext += String.fromCharCode(c)
+    } else if (c > 127 && c < 2048) {
+      utftext += String.fromCharCode((c >> 6) | 192)
+      utftext += String.fromCharCode((c & 63) | 128)
+    } else {
+      utftext += String.fromCharCode((c >> 12) | 224)
+      utftext += String.fromCharCode(((c >> 6) & 63) | 128)
+      utftext += String.fromCharCode((c & 63) | 128)
+    }
+  }
+  return utftext
+}
+
+/*******************************************************
+ *
+ * 函数名称：_utf8_decode()
+ * 功    能：将数据进行utf8解码
+ * 说	明：
+ *
+ **********************************************************/
+function _utf8_decode(utftext) {
+  var string = ''
+  var i = 0
+  var c = (c1 = c2 = 0)
+
+  while (i < utftext.length) {
+    c = utftext.charCodeAt(i)
+
+    if (c < 128) {
+      string += String.fromCharCode(c)
+      i++
+    } else if (c > 191 && c < 224) {
+      c2 = utftext.charCodeAt(i + 1)
+      string += String.fromCharCode(((c & 31) << 6) | (c2 & 63))
+      i += 2
+    } else {
+      c2 = utftext.charCodeAt(i + 1)
+      c3 = utftext.charCodeAt(i + 2)
+      string += String.fromCharCode(((c & 15) << 12) | ((c2 & 63) << 6) | (c3 & 63))
+      i += 3
+    }
+  }
+  return string
+}
+
+function base64ToHex(base64String) {
+  const binaryString = atob(base64String)
+  let hexString = ''
+
+  for (let i = 0; i < binaryString.length; i++) {
+    const hex = binaryString.charCodeAt(i).toString(16)
+    hexString += hex.length === 1 ? '0' + hex : hex
+  }
+
+  return hexString
+}
+
+function hexToBase64(hexString) {
+  const binaryString = hexString
+    .match(/.{1,2}/g)
+    .map((hex) => String.fromCharCode(parseInt(hex, 16)))
+    .join('')
+  const base64String = btoa(binaryString)
+  return base64String
+}
+
+export { _Base64encode, hexToBase64, base64ToHex, _Base64decode }

package/src/plugins/Sign/kySign/hex.js

@@ -0,0 +1,92 @@
+/**
+ * Hex 16 进制转换
+ */
+
+/**
+ * 将字节数组转换为 16 进制字符串
+ *
+ * @param  {Uint8Array} bytes 8bits 大小的字节数组
+ *
+ * @return {String}       16 进制的字符串
+ *
+ * @static
+ *
+ * @example
+ *
+ *      let bytes = [1, 2, 3, 4, 5, 6];
+ *      let hexstr = KeyouCryptography.util.Hex.stringify(bytes);
+ *      assert(hexstr === "010203040506");
+ */
+function stringify(bytes) {
+  if (bytes?.length) {
+    let hexstr = []
+    const length = bytes.length
+    for (let i = 0; i < length; i++) {
+      let byte = bytes[i]
+      hexstr.push((byte >>> 4).toString(16))
+      hexstr.push((byte & 0x0f).toString(16))
+      alert(hexstr)
+    }
+    return hexstr.join('').toUpperCase()
+  } else {
+    return bytes
+  }
+}
+function encode(bytes) {
+  return stringify(bytes)
+}
+
+/**
+ * 将 16 进制的字符串转换为字节数组
+ *
+ * @param  {String} hexstr 16 进制的字符串
+ *
+ * @return {Uint8Array}        字节数组
+ *
+ * @static
+ *
+ * @example
+ *
+ *     let hexstr = "313233343536";
+ *     let bytes = KeyouCryptography.util.Hex.parse(hexstr);
+ *     assert(bytes === ['1', '2', '3', '4', '5', '6']);
+ */
+function parse(hexstr) {
+  let bytes = []
+  if (!(hexstr != undefined && hexstr.length % 2 == 0)) {
+    throw new TypeError('illegal Hex string:' + hexstr)
+  }
+  let regExp = new RegExp('[A-Fa-f0-9]+$', 'g')
+  if (!hexstr.match(regExp)) {
+    throw new TypeError('illegal Hex string:' + hexstr)
+  }
+  const length = hexstr.length / 2
+  for (let i = 0; i < length; i++) {
+    bytes[i] = parseInt(hexstr.substring(i * 2, i * 2 + 2), 16)
+  }
+  return bytes
+}
+function decode(hexstr) {
+  return parse(hexstr)
+}
+/*
+ * 负数的bytes转为正数
+ */
+function toUnsignBytes(bytes) {
+  let bs = []
+  for (let i = 0; i < bytes.length; i++) {
+    let b = bytes[i]
+    if (b < 0) {
+      b += 256
+    }
+    bs[i] = b
+  }
+  return bs
+}
+function stringToRawHex(str) {
+  return Array.from(str)
+    .map((char) => char.charCodeAt(0).toString(16).padStart(2, '0').toUpperCase())
+    .join('')
+}
+
+export { encode, decode, toUnsignBytes, stringToRawHex }