Ukusebenzisa i-PKCS#11 ithokheni ye-cryptographic kuplathifomu ye-Android

Isikhathi sokusebenzisa i-cryptographic sesifikile PKCS#1 izindlela1 naku-Android platform. Abanye bangase bathi awekho amathokheni wehadiwe we-Android. Kodwa, uma lokhu kunjalo, khona-ke lokhu kuyinto yesikhashana kuphela. Kodwa namuhla ungafaka ithokheni yesofthiwe noma usebenzise ithokheni yefu. Kuze kube usizo cryptoarmpkcs-A yenzelwe inkundla ye-Android kusetshenziswa i-Androwish ngolimi lokubhala lwe-Tcl/Tk, bese iphakheji isetshenziselwa ukuxhuma amathokheni. TclPKCS11 inguqulo 1.0.1.

Kulokhu, akukho ukucutshungulwa kwephakheji okudingekayo. Okwakwenziwa nje kwakuwukwengeza umbhalo kuphrojekthi yokwakha umtapo wezincwadi obhalwe ngolimi Si, ye-Android kanye nokusatshalaliswa kwelabhulali ngokwayo. Kunqunywe ukuthi kwengezwe imitapo yolwazi ye-software ls11sw2016 kanye namathokheni wefu ls11cloud wamapulatifomu ahlukahlukene kuphrojekthi efanayo.

Konke okunye kulula. Sengeza izinkinobho zokukhetha ithokheni esebenzayo ewindini lesibili bese sithola:

• ithokheni yesofthiwe ls11sw2016;
• uphawu lwefu ls11cloud;
• enye ithokheni ye-PKCS11#11.

Ngokuzenzakalelayo, ithokheni yesofthiwe ixhunyiwe. Uma ingazange idalwe ngaphambilini, uzocelwa ukuthi uyiqalise. Ake sikukhumbule lokho ukuqaliswa kwethokheni kuhlanganisa ukunikeza ithegi nokusetha ikhodi ye-PIN yomsebenzisi:

Qaphela ukuthi ithokheni yesofthiwe yasungulwa ngokuhambisana nezincomo ze-PKCS#11 v.2.40 kanye ne-TK-26. Ukuze uthole ulwazi oluphelele mayelana nethokheni, kuhlanganise nezindlela ezisekelwayo ze-cryptographic, vele uchofoze inkinobho ethi "Mayelana nethokheni kanye ne-cryptography yalo" kumenyu enkulu ("Iyasebenza"). Namuhla, alikho nelilodwa ithokheni yehadiwe elisekela i-cryptography yesiRashiya enalokhu kusebenza:

Umbuzo uphakama: - indlela yokufaka isitifiketi somuntu siqu kuthokheni. Kunezinketho ezimbili. Inketho yokuqala ukungenisa isitifiketi ngokwaso kanye nokubhanqwa kokhiye baso ngesiqukathi se-PKCS#12 (inkinobho ethi “Sebenza nge-PKCS12/PFX”):

Inketho yesibili ibandakanya ukudala isicelo (PKCS#10) sesitifiketi.Le nketho (umsebenzi "Isicelo sesitifiketi") ihlinzekela ukukhiqizwa kokupheya kokhiye ngokuqondile kuthokheni:

Manje ungagcina isicelo kuma-flash drive bese uya ku isikhungo sezitifiketi ngesitifiketi. Uma uzosebenzisa isitifiketi ngezinjongo zokuhlola noma zangaphakathi, ungasebenzisa futhi insiza ukuze ukhiphe isitifiketi I-CAFL63. Isitifiketi esiwumphumela singeniswa kuthokheni kuthebhu ethi “Buka Isicelo/Isitifiketi”:

Manje usungakwazi ukusayina amadokhumenti ngezitifiketi ezigcinwe kuthokheni usebenzisa ithebhu "Sayina idokhumenti".

Esihlokweni esilandelayo sizokutshela ukuthi ungaxhuma kanjani ithokheni yefu. Futhi umbuzo wokudlulisa imisebenzi yokukhiqiza isitifiketi kunkundla yeselula uhlala uvulekile. Ingabe lokhu kuyadingeka?

Inguqulo ebuyekeziwe yensiza ye-cryptoarmpkcs-A yenkundla ye-Android ingalandwa lapha:

• AndroWishApp-debug.apk

PS Ukugcina ilogi

Ukwakha iphakheji, sebenzisa insiza yamathambo kusuka I-AndroWish SDK. Uma iphakheji selakhiwe ngempumelelo, inkinobho ethi "Faka futhi sebenzisa" iyavela futhi lapho ichofozwa, iwindi lokungena liyavuleka elibonisa okukhiphayo kwe-adb logcat (logger ye-Android Debug Bridge). Okubi kulesi sikrini ukuthi kunzima ukuthola umlayezo wephutha, ikakhulukazi uma ifulegi elithi "V" (verbose) livuliwe. Ngakho-ke, inkinobho ethi “Londoloza” yengeziwe, egcina ilogi efayeleni /tmp/logBone.txt (sikhuluma ngeLinux):

Ngokufika kwale nkinobho, inqubo yokususa iphutha kuhlelo lokusebenza yenziwe yaba lula kakhulu.

Ukwengeza inkinobho, vele ungeze ikhodi elandelayo efayeleni lamathambo ngemva komugqa 2591:

	    ttk::button $l.frame.clear -text "Clear" -width 6 
		-command [list adb_logcat_clear $l.text]
#Добавленный код
	    ttk::button $l.frame.save -text "Save" -width 6 
		-command [list adb_logcat_save $l.text]

	    ttk::button $l.frame.run -text "Run" -width 6 
		-command [list adb_logcat_run $l]

Umyalo we-adb_logcat_save ugcine ubukeka kanjena:

proc adb_logcat_save {text} {
    set tt [$text get 1.0 end]
    set file "/tmp/logBone.txt"
    file delete -force $file
  #Собственно запись в файл
    set fd [open $file w]
    chan configure $fd -translation binary
    puts -nonewline $fd $tt
    close $fd
}

Source: www.habr.com