https://github.com/demetrous-fd/cryptopro-adapter
Модуль для работы с утилитами КриптоПро на Windows и Linux.
https://github.com/demetrous-fd/cryptopro-adapter
cades cryptopro cryptoprocsp linux nmcades windows
Last synced: 3 months ago
JSON representation
Модуль для работы с утилитами КриптоПро на Windows и Linux.
- Host: GitHub
- URL: https://github.com/demetrous-fd/cryptopro-adapter
- Owner: Demetrous-fd
- Created: 2024-07-26T06:51:23.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2025-02-11T05:44:10.000Z (over 1 year ago)
- Last Synced: 2025-05-21T15:54:41.918Z (about 1 year ago)
- Topics: cades, cryptopro, cryptoprocsp, linux, nmcades, windows
- Language: Go
- Homepage:
- Size: 70.3 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# CryptoPro Adapter
Модуль для работы с certmgr и nmcades на Windows и Linux.
### Требования
- КриптоПро ЭЦП 4-5 версии
- КриптоПро ЭЦП Browser plug-in
### Запуск процессов
- `NewNMCadesProcess() (*CadesProcess, error)`
```golang
type CadesProcess struct {
cmd *exec.Cmd
stdout *io.ReadCloser
stdin *io.WriteCloser
}
func PostMessage(file io.WriteCloser, message []byte) error
func GetMessage(stdout io.ReadCloser) string
```
- `NewCertManagerProcess(args ...string) (string, error)`
### CadesManager
```golang
type CadesManager struct{}
type Container struct {
ContainerName string `json:"containerName"`
UniqueContainerName string `json:"uniqueContainerName"`
}
type InstallPfxResult struct {
Container Container `json:"container"`
Thumbprint string `json:"thumbprint"`
Output string `json:"output"`
OK bool `json:"ok"`
}
func (cm *CadesManager) GetContainer(partOfContainerName string) (*Container, error)
func (cm *CadesManager) GetListOfContainers() ([]Container, error)
func (cm *CadesManager) CopyContainer(container *Container, newLocation string) (*Container, error)
func (cm *CadesManager) LinkCertWithContainer(certPath, containerName string) (bool, error)
func (cm *CadesManager) DeleteCertificate(thumbprint string) (bool, error)
func (cm *CadesManager) DeleteContainer(container *Container) (bool, error)
func (cm *CadesManager) AbsorbCertificates(pattern string) (string, error)
func (cm *CadesManager) IsCertificateExists(thumbprint string, store string) (bool, error)
func (cm *CadesManager) GetCertificatesInfo(thumbprint string, store string) ([]GostCertificate, error)
func (cm *CadesManager) RenameContainer(container *Container, newContainerName string) (*Container, error)
func (cm *CadesManager) InstallContainerFromFolder(containerFolderPath string, rootContainersFolderPath string, containerStorageName string, containerName string) (*Container, error)
func (cm *CadesManager) InstallPfx(path string, password string, exportable bool) (*InstallPfxResult, error)
func (cm *CadesManager) ExportContainerToPfx(filePath string, containerName string, password string) (string, error)
func (cm *CadesManager) ExportContainerToPfxByThumbprint(filePath string, thumbprint string, password string) (string, error)
func (cm *CadesManager) InstallCertificate(filePath string, storeName string, autoDist bool) error
func (cm *CadesManager) GetCSPInfo() (string, error)
```
### Utils
- Методы для получения Отпечатока SHA1 из сертификата
```golang
func GetCertificateThumbprintFromFile(path string) (string, error)
func GetCertificateThumbprint(data []byte) (string, error)
func GetThumbprint(certificate *x509.Certificate) string
```
- Метод для получения открытого ключа из сертификата
```golang
func GetCertificatePublicKey(publicKeyInfo *SubjectPublicKeyInfoAsn1) string
```
- Методы для получения первых 8 байт открытого ключа из сертификата и контейнера
```golang
func ParseSubjectPublicKeyInfo(cert *x509.Certificate) (*SubjectPublicKeyInfoAsn1, error)
func GetCertificateShortPublicKey(publicKeyInfo *SubjectPublicKeyInfoAsn1) string
func GetShortPublicKeyFromPrivateKey(headerData []byte) string
```
- Метод для создания нового имени ключевого носителя (name.key)
```golang
func NewPrivateKeyName(cp1251Name string) []byte
```
- Методы для прямого переименования контейнера
```golang
func DirectRenameContainerFolder(path string, newNameInCP1251 string) (bool, error)
func DirectRenameContainerHDImage(username string, uniqueContainerName string, newNameInCP1251 string) (bool, error)
func GetUserSid(username string) (string, error)
func DirectRenameContainerRegistry(userSid string, containerName string, newNameInCP1251 string) (bool, error)
```
- Метод для парсинга сертификата
```golang
type AlgorithmInfo struct {
OID string `json:"oid"`
Name string `json:"name"`
Parameters []string `json:"parameters"`
}
type GostCertificate struct {
Issuer map[string]string `json:"issuer"`
Subject map[string]string `json:"subject"`
SerialNumber string `json:"serial_number"`
Thumbprint string `json:"thumbprint"`
PublicKey string `json:"public_key"`
ShortPublicKey string `json:"short_public_key"`
Container string `json:"container,omitempty"`
ContainerLink bool `json:"container_link,omitempty"`
Algorithm AlgorithmInfo `json:"algorithm"`
NotAfter time.Time `json:"not_after"`
NotBefore time.Time `json:"not_before"`
}
func ParseGostCertificate(x509Certificate *x509.Certificate) (*GostCertificate, error)
```
- Методы для реализаций интерфейсов COM через NMCades
```golang
type DefaultTypeValue[T any] struct {
Value T
}
type ErrorCollector struct {
err error
}
```
- `ValueToParam(value any) *CadesParam`
- `ArgumentsToParams(maxArgs uint8, args []any) []CadesParam`
- `GetProperty[T any](c *CadesObject, name string) (T, error)`
- `GetPropertyWithObject(c *CadesObject, name string) (*CadesObject, error)`
- `CallMethod(c *CadesObject, name string, params []CadesParam) (*CadesResponseData, error)`
- `CallVoidMethod(c *CadesObject, name string, params []CadesParam) error`
- `SafeExecute[T any](ec *ErrorCollector, f func() (T, error)) T`
- `SafeExecuteWithObject[T any](w *ErrorCollector, f func() (*T, error)) *T`
### NMCades
```golang
type CallbackData struct {
Id uint32 `json:"callback_id"`
Object string `json:"object"`
Type string `json:"type"`
Value string `json:"value"`
}
type CadesRequestData struct {
CallbackId uint32 `json:"callback_id,omitempty"`
RequestId uint32 `json:"requestid,omitempty"`
ObjId uint32 `json:"objid,omitempty"`
Object string `json:"object,omitempty"`
Destination string `json:"destination,omitempty"`
Type string `json:"type,omitempty"`
Value string `json:"value,omitempty"`
Method string `json:"method,omitempty"`
Property string `json:"get_property,omitempty"`
Url string `json:"url,omitempty"`
Params []CadesParam `json:"params,omitempty"`
}
type ReturnValue struct {
Type string `json:"type"`
Value interface{} `json:"value"`
Methods []string `json:"methods,omitempty"`
Properties []string `json:"properties,omitempty"`
}
type CadesResponseData struct {
RequestId uint32 `json:"requestid,omitempty"`
ReturnValue ReturnValue `json:"retval,omitempty"`
Type string `json:"type,omitempty"`
Value interface{} `json:"value,omitempty"`
Message string `json:"message,omitempty"`
}
type CadesRequestBody struct {
Tabid string `json:"tabid"`
Data *CadesRequestData `json:"data"`
}
type CadesResponseBody struct {
Tabid string `json:"tabid"`
Data *json.RawMessage `json:"data"`
}
type CadesParam struct {
Type string `json:"type"`
Value any `json:"value"`
}
type CadesProcess struct {
cmd *exec.Cmd
stdout *io.ReadCloser
stdin *io.WriteCloser
}
type Cades struct {
Id string
RequestId uint32
ObjId uint32
Process *CadesProcess
}
type CadesObject struct {
Cades *Cades
ObjId uint32
}
```
- `NewCades() (*Cades, error)` Создание экземляра nmcades
- `(cades *Cades) SendRequest(request *CadesRequestBody) (*CadesResponseData, error)`
- `(cades *Cades) Close()`
#### Пример использования nmcades
```golang
package main
import (
"log"
cades "github.com/Demetrous-fd/CryptoPro-Adapter"
)
func getCertificate(thumbprint string) (*cades.Certificate, error) {
defaultValue := cades.DefaultTypeValue[cades.Certificate]{}.Value
cadesObj, err := cades.NewCades()
if err != nil {
log.Println("Fail to create a cades object", err)
return &defaultValue, err
}
store, err := NewStore(cadesObj)
if err != nil {
log.Println("Fail to create a store object", err)
return &defaultValue, err
}
err = store.Open(cades.CAPICOM_CURRENT_USER_STORE, cades.CAPICOM_MY_STORE)
if err != nil {
log.Println("Fail to open store", err)
return &defaultValue, err
}
certificates, err := store.Certificates()
if err != nil {
log.Println("Fail to create a Certificates object", err)
return &defaultValue, err
}
certs, err := certificates.Find(cades.CAPICOM_CERTIFICATE_FIND_SHA1_HASH, thumbprint)
if err != nil {
log.Println("Fail to create a Certificates object", err)
return &defaultValue, err
}
count, err := certs.Count()
if err != nil {
log.Println("Fail to execute Certificates.Count method", err)
return &defaultValue, err
}
if count <= 0 {
return &defaultValue, cades.ErrEmpty
}
certificate, err := certificates.Item(1)
if err != nil {
log.Println("Fail to execute Certificates.Item method", err)
return &defaultValue, err
}
return certificate, nil
}
```