验证使用openssl生成的分离xml签名

Question

public PublicKey pubTest(String path) throws Exception
 {
     FileInputStream fin = new FileInputStream(path);
     CertificateFactory f = CertificateFactory.getInstance("X.509");
     X509Certificate certificate = (X509Certificate)f.generateCertificate(fin);
     PublicKey pk = certificate.getPublicKey();
     System.out.println(pk);
     return pk;
 }
 public byte[] signature(String sigPath) throws Exception
 {
     FileInputStream sigfis = new FileInputStream(sigPath);
     byte[] sigToVerify = new byte[sigfis.available()]; 
     sigfis.read(sigToVerify);
     sigfis.close();
     System.out.println(sigToVerify.length);

     return sigToVerify ;
 }

 public boolean verification(PublicKey pubKey , String dataPath , byte[] sigToVerify ) throws Exception, NoSuchProviderException ,SignatureException
{

    Signature sig = Signature.getInstance("SHA1withRSA");
    sig.initVerify(pubKey);
    FileInputStream datafis = new FileInputStream(dataPath);
    BufferedInputStream bufin = new BufferedInputStream(datafis);
    byte[] buffer = new byte[1024];
    int len;
    while (bufin.available() != 0)
    {
        len = bufin.read(buffer);
      sig.update(buffer, 0, len);
    }
    System.out.println(buffer.length);
    bufin.close();
    boolean verifies = sig.verify(sigToVerify);
    System.out.println("signature verifies: " + verifies);
    return verifies ;
}

Answer 1

现在很晚了，但如果有人遇到它：

openSSL smime-sign默认情况下生成“间接”分离签名，即不包含encapContentInfo中的数据但使用Signedattrs的签名。见https://www.ietf.org/RFC/RFC3369.txt 5.3至5.6；您需要将数据的哈希值与signedAttrs中的message-digest属性进行比较，然后根据signedAttrs验证签名（隐式标记恢复为basic）。

标准Java加密没有（目前？）做CMS/PKCS#7，但如果可以的话，BouncyCastle会做。考虑使用bouncycastle签名和验证签名的正确方法。