Android上的XML SOAP签名

我需要在Android应用程序中签署XML SOAP请求。

我做了一些研究，似乎没有框架可以在Android上做到这一点。

有没有人设法做到这一点？

Answer 1

经过数周的尝试和测试，我终于设法在android上进行手动XML签名。 这是代码：

import java.security.MessageDigest; import java.security.NoSuchAlgorithmException; import java.security.PrivateKey; import javax.crypto.Cipher; import android.util.Log; /** * Generates Sha1withRSA XML signatures. */ public final class XmlSigner { /** Log tag. */ private static final String LOG_TAG = "XmlSigner"; /** * DER encoded ASN.1 identifier for SHA1 digest: "1.3.14.3.2.26". */ private static final byte[] DER_SHA1_DIGEST_IDENTIFIER = new byte[]{48, 33, 48, 9, 6, 5, 43, 14, 3, 2, 26, 5, 0, 4, 20}; /** The characters needed for base 64 encoding. */ private static final char[] CHARS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".toCharArray(); /** * Hide constructor. */ private XmlSigner() { } /** * Generates Sha1withRSA XML signature for the specified XML content and * private key. * * @param xml the XML content * @param privateKey the private key to generate the signature * @return the whole signature node XML string that should be inserted * somewhere in the XML * @throws XmlSignerException if the signature XML can not be generated */ public static String generateXmlSignature(String xml, PrivateKey privateKey) throws Throwable { try { // get canonized XML int soapBodyStart = xml.indexOf(""); int soapBodyEnd = xml.indexOf(""); String bodyXml = xml.substring(soapBodyStart + 12, soapBodyEnd - 1); // get bytes from the XML byte[] xmlBytes = bodyXml.getBytes("UTF-8"); // calculate SHA256 digest from the XML bytes byte[] xmlDigestBytes = sha1Digest(xmlBytes); // encode the XML digest to base64 string String base64XmlDigest = base64encode(xmlDigestBytes, false); // generate SignedInfo node to be signed with signature String signedInfo = "" + "" + "" + "" + "" + "" + "/soap:Envelope/soap:Body/*" + "" + "" + "" + base64XmlDigest + ""; // get the bytes from SignedInfo that will be signed byte[] signedInfoBytes = signedInfo.getBytes("UTF-8"); // calculate SHA1 digest of the signed info bytes byte[] signedInfoSha1Digest = sha1Digest(signedInfoBytes); // encode the digest identifier and the SHA1 digest in DER format byte[] signedInfoDerSha1Digest = mergeArrays(DER_SHA1_DIGEST_IDENTIFIER, signedInfoSha1Digest); // initialize RSA cipher with the parameters from the private key Cipher cipher = Cipher.getInstance("RSA/ECB/PKCS1PADDING"); cipher.init(Cipher.ENCRYPT_MODE, privateKey); // encrypt the DER encoded SHA1 digest of signed info byte[] signatureBytes = cipher.doFinal(signedInfoDerSha1Digest); // encode the signature bytes into base64 string String base64RsaSignature = base64encode(signatureBytes, true); // generate the whole signature node XML string String signature = "" + "" + signedInfo + "" + base64RsaSignature + ""; return signature; } catch (Throwable e) { Log.e(LOG_TAG, "Error generating signature for XML", e); throw e; } } /** * Merges two byte arrays in one. * * @param array1 the first array * @param array2 the second array * @return merged array */ public static byte[] mergeArrays(byte[] array1, byte[] array2) { byte[] temp = new byte[array1.length + array2.length]; System.arraycopy(array1, 0, temp, 0, array1.length); System.arraycopy(array2, 0, temp, array1.length, array2.length); return temp; } /** * Generates SHA-1 digest of the provided data. * * @param data the data to digest * @return SHA-1 digest of the provided data. */ public static byte[] sha1Digest(byte[] data) { MessageDigest mdSha1 = null; try { mdSha1 = MessageDigest.getInstance("SHA-1"); } catch (NoSuchAlgorithmException e1) { Log.e(LOG_TAG, "Error initializing SHA1 message digest"); } mdSha1.update(data); byte[] sha1hash = mdSha1.digest(); return sha1hash; } /** * Generates SHA-256 digest of the provided data. * * @param data the data to digest * @return SHA-256 digest of the provided data. */ public static byte[] sha256Digest(byte[] data) { MessageDigest mdSha256 = null; try { mdSha256 = MessageDigest.getInstance("SHA-256"); } catch (NoSuchAlgorithmException e1) { Log.e(LOG_TAG, "Error initializing SHA1 message digest"); } mdSha256.update(data); byte[] sha256hash = mdSha256.digest(); return sha256hash; } /** * Encoded byte arrays into Base64 strings. * * @param data the byte array to encode * @param wrapLines true to add \r\n * @return base64 encoded string */ public static String base64encode(byte[] data, boolean wrapLines) { int length = data.length; StringBuilder sb = new StringBuilder(length * 3 / 2); int end = length - 3; int i = 0; int n = 0; while (i <= end) { int d = ((((int) data[i]) & 0x0ff) << 16) | ((((int) data[i + 1]) & 0x0ff) << 8) | (((int) data[i + 2]) & 0x0ff); sb.append(CHARS[(d >> 18) & 63]); sb.append(CHARS[(d >> 12) & 63]); sb.append(CHARS[(d >> 6) & 63]); sb.append(CHARS[d & 63]); i += 3; if (n++ >= 14) { n = 0; if (wrapLines) { sb.append("\r\n"); } } } if (i == length - 2) { int d = ((((int) data[i]) & 0x0ff) << 16) | ((((int) data[i + 1]) & 255) << 8); sb.append(CHARS[(d >> 18) & 63]); sb.append(CHARS[(d >> 12) & 63]); sb.append(CHARS[(d >> 6) & 63]); sb.append("="); } else if (i == length - 1) { int d = (((int) data[i]) & 0x0ff) << 16; sb.append(CHARS[(d >> 18) & 63]); sb.append(CHARS[(d >> 12) & 63]); sb.append("=="); } return sb.toString(); } }