n20-common-lib 2.9.13 → 2.9.14

package/src/plugins/Sign/kySign/index.js

@@ -0,0 +1,186 @@
+import { Message, MessageBox, Notification } from 'element-ui'
+import { hexToBase64 } from './base64'
+import { stringToRawHex } from './hex'
+import SKF from './skf'
+
+/*
+获取证书列表接口：2.7.1  IWSASkfGetCertList (DllFilePath, SucceedFunction)
+Attached签名接口：2.7.2 IWSASkfSignData (PlainText, CertIndex, UsbKeyPin, DigestArithmetic, SucceedFunction)
+Attached 方式验签接口：2.7.4 IWSASkfVerifySignData (signedMsg ,SucceedFunction)
+*/
+let {
+  SKF_EnumDev,
+  SKF_ConnectDev,
+  SKF_EnumApplication,
+  SKF_OpenApplication,
+  SKF_EnumContainer,
+  SKF_OpenContainer,
+  SKF_PKCS7SignData,
+  SKF_VerifyPIN,
+  SKF_ExportCertificate,
+  SKF_ParseCert
+} = new SKF(location.port, 'http://127.0.0.1:2020/ssm/ukey/')
+
+function IWSAGetAvailable() {
+  return true
+}
+
+function IWSASendAvailable() {
+  return true
+}
+
+function getDN() {
+  let dn
+  let userInfo = JSON.parse(sessionStorage.getItem('userInfo'))
+  if (userInfo && userInfo.dn) {
+    dn = userInfo.dn
+  }
+  return dn
+}
+
+/* 检测本地签名端口是否可用 */
+export function availableSign(fn, url) {
+  let available = IWSAGetAvailable()
+  if (available) {
+    fn && fn(available)
+  } else {
+    IWSASendAvailable()
+    url || (url = '/portal/NetSignCNG-v2.1.152.2.exe')
+    let count = 0
+    checkAvailable(fn, url, count)
+  }
+}
+
+function checkAvailable() {
+  let name = window.NetSignDownloadName || '科友签名助手'
+  let url = '/portal/ukeyd_v2.0.17_386.exe'
+  Notification({
+    title: '提示',
+    dangerouslyUseHTMLString: true,
+    message: `<div>检测到您的电脑中没有安装签名助手，为了不影响使用请使用管理员权限<a class="color-primary" href="${url}" download>下载安装</a>${name}</div>`,
+    duration: 5000
+  })
+}
+
+// 签名
+export async function getSign(plain, dn = getDN()) {
+  // 验证DN参数
+  if (!dn) {
+    Message.error('签名参数DN错误!')
+    return false
+  }
+  // 处理签名文本
+  const plainText =
+    typeof plain === 'object' ? hexToBase64(stringToRawHex(JSON.stringify(plain))) : hexToBase64(stringToRawHex(plain))
+  // 获取并验证证书信息
+  const checkRes = await getCertInfo(dn)
+  console.log('checkRes', checkRes)
+  if (checkRes === -1) {
+    return ''
+  }
+  // 获取PIN码并执行签名
+  try {
+    const { value: pin } = await MessageBox.prompt('请输入PIN码', '提示', {
+      confirmButtonText: '确定',
+      cancelButtonText: '取消',
+      closeOnClickModal: false,
+      inputType: 'password'
+    })
+
+    return await performSign(plainText, pin, checkRes)
+  } catch (error) {
+    return ''
+  }
+}
+
+/**
+ * 获取证书信息
+ * @param dn
+ * @returns {Promise<*>}
+ */
+export async function getCertInfo(dn) {
+  return new Promise((resolve, reject) => {
+    let arg
+    if (
+      navigator.platform.toLowerCase().includes('linux') ||
+      navigator.userAgent.toLowerCase().includes('linux') ||
+      // 检查是否为银河麒麟特有的环境变量或特征
+      typeof window.KylinOS !== 'undefined' ||
+      document.documentElement.dataset.osType === 'kylin'
+    ) {
+      arg = window.VUE_APP_NetSign_ARG_Linux
+    } else {
+      arg = process.env.VUE_APP_NetSign_ARG || window.VUE_APP_NetSign_ARG || 'WTSKFInterface.dll'
+    }
+    // 获取证书列表
+    try {
+      var rv = SKF_EnumDev(1) // 1: 获取ukey列表
+      if (rv.DevList.length === 0) {
+        Message.error('没有检测到Ukey!')
+        resolve(-1)
+        return
+      }
+    } catch (error) {
+      checkAvailable()
+      resolve(-1)
+      return
+    }
+    const rvList = rv.DevList?.split(',')
+    let indexDn = -1
+    let Container = ''
+    let Application = ''
+    let DNList = []
+    rvList.forEach((item) => {
+      var rv1 = SKF_ConnectDev(item) // 连接设备
+      var rv2 = SKF_EnumApplication(rv1.DevHandle) // 获取容器
+      var rv3 = SKF_OpenApplication(rv1.DevHandle, rv2.ApplicationList)
+      var rv4 = SKF_EnumContainer(rv3.Application)
+      var rvList4 = rv4.ContainerList?.split(',')
+      rvList4.forEach((item2, index) => {
+        var rv5 = SKF_OpenContainer(rv3.Application, item2)
+        var rv6 = SKF_ExportCertificate(rv5.Container, true)
+        var rv7 = SKF_ParseCert(rv6.Cert)
+        DNList.push(rv7.Subject)
+        if (rv7.Subject === dn) {
+          indexDn = index
+          Container = rv5.Container
+          Application = rv3.Application
+        }
+      })
+    })
+    // 检测dn是否匹配
+    if (indexDn === -1) {
+      console.log(DNList)
+      // resolve(-1)
+      // Message.error('当前Ukey不匹配!')
+      resolve({ Container, Application })
+    } else {
+      resolve({ Container, Application })
+    }
+  })
+}
+
+/**
+ * 执行签名
+ * @param plainText
+ * @param value
+ * @returns {Promise<*>}
+ */
+async function performSign(plainText, value, { Container, Application }) {
+  return new Promise((resolve, reject) => {
+    var rv5 = SKF_VerifyPIN(Application, 1, value)
+    console.log(rv5)
+    if (rv5.Status !== 0) {
+      Message.error('PIN码错误!')
+      reject()
+      return false
+    }
+    var rv7 = SKF_PKCS7SignData(Container, plainText)
+    if (rv7.Status === 0) {
+      resolve(rv7.Signature + '@@@' + Container)
+    } else {
+      Message.error('签名失败!')
+      reject()
+    }
+  })
+}