Kugwiritsa ntchito njira za PKCS#11 cryptographic token papulatifomu ya Android

Yakwana nthawi yogwiritsa ntchito cryptographic PKCS#1 njira1 komanso pa nsanja ya Android. Ena anganene kuti palibe zizindikiro za hardware za Android. Koma, ngati izi ziri choncho, ndiye kuti ichi ndi chodabwitsa chakanthawi. Koma lero mutha kuyika chizindikiro cha pulogalamu kapena kugwiritsa ntchito chizindikiro cha mtambo. Popeza zothandiza cryptoarmpkcs-A imapangidwira pa nsanja ya Android pogwiritsa ntchito Androwish m'chinenero cholembera cha Tcl/Tk, ndiye phukusili limagwiritsidwa ntchito kulumikiza zizindikiro. Mtundu wa TclPKCS11 1.0.1.

Pankhaniyi, palibe processing wa phukusi ankafunika. Zonse zomwe zidachitidwa ndikuwonjezera zolemba ku polojekiti yomanga laibulale ya phukusi yolembedwa m'chinenerocho Si, ya Android ndi kugawa laibulale yokha. Zinaganiza zowonjezera malaibulale a mapulogalamu ls11sw2016 ndi ma tokeni amtambo ls11cloud pamapulatifomu osiyanasiyana ku polojekiti yomweyi.

Zina zonse ndi zophweka. Timawonjezera mabatani osankha chizindikiro chogwira ntchito pawindo lachiwiri ndikupeza:

• chizindikiro cha mapulogalamu ls11sw2016;
• chizindikiro cha mtambo ls11cloud;
• chizindikiro china PKCS11#11.

Mwachikhazikitso, chizindikiro cha pulogalamu chimalumikizidwa. Ngati sichinapangidwe kale, mudzafunsidwa kuti muyambe. Tiyeni tikukumbutseni zimenezo chizindikiro choyamba imakhala ndi kugawa tag ndikuyika nambala ya PIN:

Dziwani kuti chizindikiro mapulogalamu anayamba motsatira malangizo a PKCS#11 v.2.40 ndi TK-26. Kuti mudziwe zambiri za chizindikirocho, kuphatikizapo makina osindikizira, ingodinani pa batani la "About token and cryptography" mumndandanda waukulu ("Ntchito"). Masiku ano, palibe chizindikiro chimodzi cha Hardware chothandizira ku Russia cryptography chomwe chili ndi izi:

Funso likubuka: - momwe mungayikitsire chiphaso chaumwini pa chizindikiro. Pali njira ziwiri. Njira yoyamba ndikulowetsa satifiketi yokha ndi makiyi ake awiri kudzera mu chidebe cha PKCS#12 (batani la "Ntchito ndi PKCS12/PFX"):

Njira yachiwiri ikuphatikizapo kupanga pempho (PKCS#10) la satifiketi "Pempho la Certificate") imapereka m'badwo wa awiri ofunikira mwachindunji pa chizindikiro:

Tsopano mutha kusunga pempho ku ma drive a Flash ndikupita ku certification center kwa satifiketi. Ngati mugwiritsa ntchito satifiketi poyesa mayeso kapena mkati, mutha kugwiritsanso ntchito zomwezo kuti mupereke satifiketi CAFL63. Satifiketi yotulukayo imatumizidwa kunja kwa chizindikiro pa tabu ya "Onani Pempho / Satifiketi":

Tsopano mutha kusaina zikalata ndi ziphaso zosungidwa pa chizindikirocho pogwiritsa ntchito tabu "Saina chikalata".

M'nkhani yotsatira tidzakuuzani momwe mungalumikizire chizindikiro cha mtambo. Ndipo funso losamutsa ntchito zopanga satifiketi kupita papulatifomu yam'manja likadali lotseguka. Kodi izi ndizofunikira?

Mtundu wosinthidwa wa cryptoarmpkcs-A zothandiza pa nsanja ya Android zitha kutsitsidwa apa:

• AndroWishApp-debug.apk

PS Kusunga chipika

Kuti mupange phukusi, gwiritsani ntchito mafupa kuchokera AndroWish SDK. Phukusilo likamangidwa bwino, batani la "Install & run" likuwonekera ndipo ikadina, zenera la chipika limatsegulidwa kuwonetsa zotuluka za adb logcat (Android Debug Bridge logger). Choyipa cha chophimba ichi ndikuti ndizovuta kupeza uthenga wolakwika, makamaka ndi mbendera ya "V" (verbose) yothandizidwa. Chifukwa chake, batani la "Sungani" linawonjezedwa, lomwe limasunga chipika mu fayilo /tmp/logBone.txt (tikulankhula za Linux):

Kubwera kwa batani ili, njira yosinthira pulogalamuyo yakhala yosavuta kwambiri.

Kuti muwonjezere batani, ingowonjezerani nambala yotsatira pafayilo yamafupa pambuyo pa mzere 2591:

	    ttk::button $l.frame.clear -text "Clear" -width 6 
		-command [list adb_logcat_clear $l.text]
#Добавленный код
	    ttk::button $l.frame.save -text "Save" -width 6 
		-command [list adb_logcat_save $l.text]

	    ttk::button $l.frame.run -text "Run" -width 6 
		-command [list adb_logcat_run $l]

Lamulo la adb_logcat_save likuwoneka motere:

proc adb_logcat_save {text} {
    set tt [$text get 1.0 end]
    set file "/tmp/logBone.txt"
    file delete -force $file
  #Собственно запись в файл
    set fd [open $file w]
    chan configure $fd -translation binary
    puts -nonewline $fd $tt
    close $fd
}

Source: www.habr.com