.Net版本SHA256WithRSA算法

在與建設銀行做對接的項目的時候，簽名的時候需要用SHA256WithRSA算法，因為只有java版本的代碼，所以需要自己改寫一版.Net算法代碼。

1、證書的生成(OpenSSL)

由於我們對接需要互相認證對方的證書，這里的證書要求是SSL證書，網上有很多安裝教程可以參考，這里給大家介紹一種比較好的OpenSSL插件，在我們經常使用的項目管理器Git，在安裝的時候已經自帶了一個OpenSSL插件，我們可以直接運行這個文件，路徑是：“C:\Program Files\Git\mingw64\bin\openssl.exe”，如下圖（注：需要使用管理員身份運行）

命令行如下

openssl genrsa -des3 -out test.key 2048 //需要輸入私鑰密碼   
openssl req -new -key test.key -out test.csr
openssl x509 -req -in test.csr -out test.cer -signkey test.key -days 7500  //有效時間
openssl pkcs12 -export -clcerts -in test.cer -inkey test.key -out test.pfx

//test.cer為公鑰證書，test.pfx為私鑰證書

證書如下（test.cer為公鑰證書，test.pfx為私鑰證書）

2、算法代碼

生成好證書就可以寫算法代碼了，直接上代碼。

項目引用： using System.Security.Cryptography;using System.Security.Cryptography.X509Certificates;

 /// <summary>
        /// 簽名算法--SHA256WithRSA
        /// </summary>
        /// <param name="dataStr">配置json</param>
        /// <param name="keyFile">證書路徑</param>
        /// <param name="password">證書密碼</param>
        /// <returns></returns>
        public static string Sha256Sign(string dataStr, string keyFile, string password)
        {
            using (RSACryptoServiceProvider sha256 = new RSACryptoServiceProvider())
            {
                var privateKey = GetPrivateKey(keyFile, password);  //獲取私鑰
                byte[] dataInBytes = DafaultEncoding.GetBytes(dataStr);
                sha256.FromXmlString(privateKey);
                byte[] inArray = sha256.SignData(dataInBytes, CryptoConfig.MapNameToOID("SHA256"));
                string sign = Convert.ToBase64String(inArray);
                return sign;
            }
        }

 /// <summary>
        /// 獲取私鑰
        /// </summary>
        /// <param name="path">文件路徑</param>
        /// <param name="password">文件秘鑰</param>
        /// <returns></returns>
        public static string GetPrivateKey(string path, string password)
        {
            try
            {
                X509Certificate2 cert = new X509Certificate2(path, password, X509KeyStorageFlags.Exportable | X509KeyStorageFlags.PersistKeySet);
                return cert.PrivateKey.ToXmlString(true);
            }
            catch
            {
                return "";
            }
        }

3、發簽名和數據

 public static string SendPostRequestJson(string url, string appId, string jsonData,string version, string tenancyId,string passWord, Encoding encoding)
        {
            if (string.IsNullOrEmpty(url))
                throw new ArgumentNullException("url");

            if (encoding == null)
                encoding = Encoding.UTF8;

            //var dataString = string.Join("&", data.Select(pattern => pattern.Key + "=" + pattern.Value));

            var sign = SignHelper.Sha256Sign(jsonData, "E:/1-trunk/CCB.JobService/CcbApi/files/test.pfx", passWord);

            HttpWebRequest request = (HttpWebRequest)WebRequest.Create(url);
            request.Method = "POST";
            request.ContentType = "application/json; charset=" + encoding.WebName;
            request.Timeout = 60000;
            request.UserAgent = "IIS";
            request.Headers.Add("C-Signature", sign);
            request.Headers.Add("C-App-Id", appId);
            request.Headers.Add("C-Business-Id", SignHelper.GetBussinessId(appId));
            request.Headers.Add("C-Timestamp", DateTime.Now.ToString("yyyy-MM-dd HH:mm:ss"));
            request.Headers.Add("version", version);
            request.Headers.Add("C-Tenancy-Id", tenancyId);
            if (jsonData != null)
            {
                byte[] buffer = encoding.GetBytes(jsonData);
                string json = Convert.ToBase64String(buffer);

                byte[] buffer1 = encoding.GetBytes(json);

                using (Stream stream = request.GetRequestStream())
                {
                    stream.Write(buffer1, 0, buffer1.Length);
                }
            }

            using (HttpWebResponse response = request.GetResponse() as HttpWebResponse)
            {
                return ReadResponse(response);
            }
        }

        /// <summary>
        /// 讀取響應內容。
        /// </summary>
        /// <param name="response"></param>
        /// <returns></returns>
        private static string ReadResponse(HttpWebResponse response)
        {
            if (response == null) return string.Empty;
            Stream strem = null;
            if (response.Headers["Content-Encoding"] == "gzip")
                strem = new GZipStream(response.GetResponseStream(), CompressionMode.Decompress);
            else
                strem = response.GetResponseStream();

            if (strem == null) return string.Empty;
            using (StreamReader reader = new StreamReader(strem))
            {
                return reader.ReadToEnd();
            }
        }

4、通用接口

/// <summary>
        /// 通用接口
        /// </summary>
        /// <typeparam name="T">返回數據實體</typeparam>
        /// <param name="jsonDate">要傳輸的參數json字符串</param>
        /// <param name="url">接口URL</param>
        /// <returns>響應數據</returns>
        private static ResponseBase<T> InvokApi<T>(string jsonDate, string url)
        {
            try
            {
                url = CcbUrl + url;
                var result = HttpWebRequestHelper.SendPostRequestJson(url, AppId, jsonDate, Version, TenancyId, PassWord, Encoding.UTF8);
                if (!string.IsNullOrEmpty(result))
                {
                    result = DecodeBase64(Encoding.UTF8, result);
                }
                var res = JsonConvert.DeserializeObject<ResponseBase<T>>(result);
                if (res.Status != "00")
                {
                    LogHelper.Log(DateTime.Now + url + ":調用建設銀行接口：" + jsonDate);
                    LogHelper.Log(DateTime.Now + ": 調用建設銀行返回：" + JsonConvert.SerializeObject(result));
                }

                return res;
            }
            catch (Exception e)
            {
                return new ResponseBase<T>();
            }

        }

over。。