You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
SOP/sop-sdk/sdk-python/common/SignUtil.py

106 lines
2.8 KiB

5 years ago
#!/usr/bin/python
# -*- coding: UTF-8 -*-
import rsa
import base64
__pem_begin = '-----BEGIN RSA PRIVATE KEY-----\n'
__pem_end = '\n-----END RSA PRIVATE KEY-----'
def create_sign(all_params, private_key, sign_type):
"""创建签名
:param all_params: 参数
:type all_params: dict
:param private_key: 私钥字符串
:type private_key: str
:param sign_type: 签名类型'RSA', 'RSA2'二选一
:type sign_type: str
:return: 返回签名内容
:rtype: str
"""
sign_content = get_sign_content(all_params)
private_key = _format_private_key(private_key)
return sign(sign_content, private_key, sign_type)
def _format_private_key(private_key):
if not private_key.startswith(__pem_begin):
private_key = __pem_begin + private_key
if not private_key.endswith(__pem_end):
private_key = private_key + __pem_end
return private_key
def get_sign_content(params):
"""构建签名内容
1.筛选并排序
获取所有请求参数不包括字节类型参数如文件字节流剔除sign字段剔除值为空的参数并按照参数名ASCII码递增排序字母升序排序
如果遇到相同字符则按照第二个字符的键值ASCII码递增排序以此类推
2.拼接
将排序后的参数与其对应值组合成参数=参数值的格式并且把这些参数用&字符连接起来此时生成的字符串为待签名字符串
:param params: 参数
:type params: dict
:return: 返回签名内容
:rtype: str
"""
keys = params.keys()
keys.sort()
result = []
for key in keys:
value = str(params.get(key))
if len(value) > 0:
result.append(key + '=' + value)
return '&'.join(result)
def sign(content, private_key, sign_type):
"""签名
:param content: 签名内容
:type content: str
:param private_key: 私钥字符串
:type private_key: str
:param sign_type: 签名类型'RSA', 'RSA2'二选一
:type sign_type: str
:return: 返回签名内容
:rtype: str
"""
if sign_type.upper() == 'RSA':
return rsa_sign(content, private_key, 'SHA-1')
elif sign_type.upper() == 'RSA2':
return rsa_sign(content, private_key, 'SHA-256')
else:
raise Exception('sign_type错误')
5 years ago
def rsa_sign(content, private_key, _hash):
5 years ago
"""SHAWithRSA
:param content: 签名内容
:type content: str
:param private_key: 私钥
:type private_key: str
5 years ago
:param _hash: hash算法SHA-1,SHA-256
:type _hash: str
5 years ago
:return: 签名内容
:rtype: str
"""
pri_key = rsa.PrivateKey.load_pkcs1(private_key.encode('utf-8'))
5 years ago
sign_result = rsa.sign(content, pri_key, _hash)
5 years ago
return base64.b64encode(sign_result)