zhouyujie1231

Results 2 issues of zhouyujie1231

怎么进行国密asn1编码的数字签名（signedData）和数字信封加密（envelopedData）？

两个结构的定义在http://www.gmbz.org.cn/main/viewfile/20180110015355638195.html ![image](https://user-images.githubusercontent.com/38528498/195983137-5f711ded-e48f-4677-a27d-0a10c8acf649.png) ![image](https://user-images.githubusercontent.com/38528498/195983121-f4d59492-1997-4121-9907-e1601253cb90.png) 我看代码中有对应的代码，但是用起来还是报错 我的使用命令： openssl smime -sign -in test.txt -out test.msg -signer /usr/local/tassl_demo/cert/certs/CS.pem -inkey /usr/local/tassl_demo/cert/certs/CS.key 报错信息： Error writing output 139751253276480:error:06089093:digital envelope routines:EVP_PKEY_CTX_ctrl:command not supported:crypto/evp/pmeth_lib.c:403: 139751253276480:error:2108B098:PKCS7 routines:PKCS7_SIGNER_INFO_sign:ctrl error:crypto/pkcs7/pk7_doit.c:1128 gdb调试了一下发现是进入pkey_sm2_ctrl函数后没有EVP_PKEY_CTRL_PKCS7_SIGN对应的case

如何配置nginx使用国密连接上游服务器？

2 comment

我的配置： location / { # 连接上游的证书路径 proxy_ssl_certificate /var/zyjjj/certs/CS.crt; proxy_ssl_certificate_key /var/zyjjj/certs/CS.key; # proxy_ssl_certificate /var/zyjjj/certs/CE.crt; # proxy_ssl_certificate_key /var/zyjjj/certs/CE.key; # 验证服务器证书 proxy_ssl_verify on; proxy_ssl_trusted_certificate /var/zyjjj/certs/CA.crt; # 设置验证深度 proxy_ssl_verify_depth 2; include common/ngswaf_lua_empty_hook.conf; resolver 114.114.114.114...