kshkulev/hcs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Pass PIN

Browse Source
This commit is contained in:
HOME-LAPTOP\kshkulev
2025-09-28 16:43:36 +09:00
parent 584e43bfa9
commit 3a2325aef8
2 changed files with 21 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
Hcs.Broker/Api/Request/GostSigningMessageInspector.cs
View File

@ -2,6 +2,7 @@
using CryptoPro.Security.Cryptography.X509Certificates; using CryptoPro.Security.Cryptography.X509Certificates;
using CryptoPro.Security.Cryptography.Xml; using CryptoPro.Security.Cryptography.Xml;
using Hcs.Broker.Internal; using Hcs.Broker.Internal;
using System.Security;
using System.Security.Cryptography; using System.Security.Cryptography;
using System.ServiceModel; using System.ServiceModel;
using System.ServiceModel.Channels; using System.ServiceModel.Channels;
@ -40,11 +41,15 @@ namespace Hcs.Broker.Api.Request
var xmlDocument = new XmlDocument(); var xmlDocument = new XmlDocument();
xmlDocument.LoadXml(messageBody); xmlDocument.LoadXml(messageBody);
var provider = client.Certificate.PrivateKey as Gost3410_2012_256CryptoServiceProvider;
provider.SetContainerPassword(client.CertificatePin);
var signedXml = SignXmlFileXades( var signedXml = SignXmlFileXades(
xmlDocument, xmlDocument,
client.Certificate, client.Certificate,
client.Certificate.PrivateKey as Gost3410_2012_256CryptoServiceProvider, provider,
CpSignedXml.XmlDsigGost3411_2012_256Url); CpSignedXml.XmlDsigGost3411_2012_256Url,
false);
stopwatch.Stop(); stopwatch.Stop();
@ -107,7 +112,7 @@ namespace Hcs.Broker.Api.Request
CpX509Certificate certificate, CpX509Certificate certificate,
AsymmetricAlgorithm key, AsymmetricAlgorithm key,
string digestMethod, string digestMethod,
bool useDsPrefix = false) bool useDsPrefix)
{ {
var keyInfo = new CpKeyInfo(); var keyInfo = new CpKeyInfo();
keyInfo.AddClause(new CpKeyInfoX509Data(certificate)); keyInfo.AddClause(new CpKeyInfoX509Data(certificate));

15
Hcs.Broker/Client.cs
View File

@ -3,6 +3,7 @@ using Hcs.Broker.Api;
using Hcs.Broker.Internal; using Hcs.Broker.Internal;
using Hcs.Broker.Logger; using Hcs.Broker.Logger;
using Hcs.Broker.MessageCapturer; using Hcs.Broker.MessageCapturer;
using System.Security;
using System.Security.Cryptography.X509Certificates; using System.Security.Cryptography.X509Certificates;
namespace Hcs.Broker namespace Hcs.Broker
@ -65,15 +66,25 @@ namespace Hcs.Broker
/// <summary> /// <summary>
/// Сертификат клиента для применения при формировании запросов /// Сертификат клиента для применения при формировании запросов
/// </summary> /// </summary>
internal CpX509Certificate2 Certificate { get; set; } internal CpX509Certificate2 Certificate { get; private set; }
public void SetSigningCertificate(string serialNumber) internal SecureString CertificatePin { get; private set; }
public void SetSigningCertificate(string serialNumber, string? pin = null)
{ {
using var store = new CpX509Store(StoreName.My, StoreLocation.CurrentUser); using var store = new CpX509Store(StoreName.My, StoreLocation.CurrentUser);
store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly); store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);
var cert = store.Certificates.Find(X509FindType.FindBySerialNumber, serialNumber, false)[0]; var cert = store.Certificates.Find(X509FindType.FindBySerialNumber, serialNumber, false)[0];
Certificate = cert ?? throw new ArgumentNullException("Certificate not found"); Certificate = cert ?? throw new ArgumentNullException("Certificate not found");
pin ??= Constants.DEFAULT_CERTIFICATE_PIN;
CertificatePin = new SecureString();
foreach (var character in pin)
{
CertificatePin.AppendChar(character);
}
} }
internal string ComposeEndpointUri(string endpointName) internal string ComposeEndpointUri(string endpointName)