java生成私钥、公钥和密钥

通过jmeter客户端去访问服务端程序，需要用到私钥、公钥和密钥，还有服务端公钥 image.png

定义ApiEncryptUtil.java文件为OpenApi通信协议加解密工具类，以下代码：

package com.niiwoo.sdk.test;

import java.security.KeyFactory;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.spec.InvalidKeySpecException;
import java.security.spec.PKCS8EncodedKeySpec;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Random;
import java.util.Set;

import org.apache.commons.codec.binary.Base64;


/**
 * OpenApi通信协议加解密工具类
 * 
 * 
 */
public class ApiEncryptUtil {

    private final static Random random = new Random();

    public static void main(String[] args) throws Exception {
        
        Map<String, Object> map = generateRSAKeyPairs();
        System.out.println("publicKey:===>"+map.get("publicKey"));
        System.out.println("privateKey:===>"+map.get("privateKey"));
        
        System.out.println(KeyCreate(24));
        
    }
    
    /**
     * 生成RSA公、私钥对
     * 
     * @return
     * @throws NoSuchAlgorithmException
     */
    public static Map<String, Object> generateRSAKeyPairs() throws NoSuchAlgorithmException {
        Map<String, Object> keyPairMap = new HashMap<String, Object>();
        KeyPairGenerator generator = KeyPairGenerator.getInstance("RSA");
        KeyPair keyPair = generator.genKeyPair();
        PublicKey publicKey = keyPair.getPublic();
        PrivateKey privateKey = keyPair.getPrivate();
        keyPairMap.put("publicKey", Base64.encodeBase64String(publicKey.getEncoded()));
        keyPairMap.put("privateKey", Base64.encodeBase64String(privateKey.getEncoded()));
        return keyPairMap;
    }

    public static byte[] signByPrivateKey(byte[] data, PrivateKey privateKey)
            throws Exception {
        Signature sig = Signature.getInstance("SHA256withRSA");
        sig.initSign(privateKey);
        sig.update(data);
        byte[] ret = sig.sign();
        return ret;
    }
    public static PrivateKey getPrivateKeyFromString(String base64String)
            throws InvalidKeySpecException, NoSuchAlgorithmException {
        byte[] bt = Base64.decodeBase64(base64String.getBytes());
        PKCS8EncodedKeySpec privateKeySpec = new PKCS8EncodedKeySpec(bt);
        KeyFactory keyFactory = KeyFactory.getInstance("RSA");
        PrivateKey privateKey = keyFactory.generatePrivate(privateKeySpec);
        return privateKey;
    }
    


    /**
     * 生成16位AES随机密钥
     * @return
     */
    public static String getAESRandomKey(){
        long longValue = random.nextLong();
        return String.format("%016x", longValue);
    }
    

    public static String KeyCreate(int KeyLength) {
        String base = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%&*:_+<>?~#$@";
        Random random = new Random();
        StringBuffer Keysb = new StringBuffer();
        // 生成指定位数的随机秘钥字符串
        for (int i = 0; i < KeyLength; i++) {
            int number = random.nextInt(base.length());
            Keysb.append(base.charAt(number));
        }
        return Keysb.toString();
    }
    
    

}

Eclipse客户端执行代码生成私钥、公钥和密钥 image.png 服务端公钥是在配置文件已经配置好了 image.png

使用生成的私钥、公钥和密钥替换在jmeter上的配置，修改验签TianChengSampler.java文件

/**
 *TianCheng Sampler ,for tiancheng uap2.0
 */

package org.apache.niiwoo;

//import java.io.ByteArrayOutputStream;
//import java.io.IOException;
//import java.io.InputStream;
//import java.io.PrintStream;
//import java.io.UnsupportedEncodingException;
//import java.net.MalformedURLException;
//import java.net.URISyntaxException;
//import java.net.URL;
//import java.security.MessageDigest;
//import java.security.NoSuchAlgorithmException;
//import java.util.ArrayList;
//import java.util.Arrays;
//import java.util.Collections;
import java.util.HashMap;
//import java.util.HashSet;
//import java.util.Iterator;
//import java.util.List;
import java.util.Map;
//import java.util.Set;
//import java.util.concurrent.Callable;
//import java.util.concurrent.ExecutionException;
//import java.util.concurrent.Future;
import java.util.concurrent.atomic.AtomicInteger;
import java.util.Date;
import java.util.UUID;
//import org.apache.commons.io.IOUtils;
//import org.apache.commons.lang3.StringUtils;
//import org.apache.jmeter.config.Argument;
//import org.apache.jmeter.config.Arguments;
//import org.apache.jmeter.config.ConfigTestElement;
//import org.apache.jmeter.engine.event.LoopIterationEvent;
//import org.apache.jmeter.protocol.http.control.AuthManager;
//import org.apache.jmeter.protocol.http.control.CacheManager;
//import org.apache.jmeter.protocol.http.control.Cookie;
//import org.apache.jmeter.protocol.http.control.CookieManager;
//import org.apache.jmeter.protocol.http.control.DNSCacheManager;
//import org.apache.jmeter.protocol.http.control.HeaderManager;
//import org.apache.jmeter.protocol.http.parser.BaseParser;
//import org.apache.jmeter.protocol.http.parser.LinkExtractorParseException;
//import org.apache.jmeter.protocol.http.parser.LinkExtractorParser;
//import org.apache.jmeter.protocol.http.sampler.ResourcesDownloader.AsynSamplerResultHolder;
//import org.apache.jmeter.protocol.http.util.ConversionUtils;
//import org.apache.jmeter.protocol.http.util.EncoderCache;
//import org.apache.jmeter.protocol.http.util.HTTPArgument;
//import org.apache.jmeter.protocol.http.util.HTTPConstants;
//import org.apache.jmeter.protocol.http.util.HTTPConstantsInterface;
//import org.apache.jmeter.protocol.http.util.HTTPFileArg;
//import org.apache.jmeter.protocol.http.util.HTTPFileArgs;
import org.apache.jmeter.samplers.AbstractSampler;
import org.apache.jmeter.samplers.Entry;
import org.apache.jmeter.samplers.SampleResult;
//import org.apache.jmeter.testelement.TestElement;
//import org.apache.jmeter.testelement.TestIterationListener;
//import org.apache.jmeter.testelement.TestStateListener;
//import org.apache.jmeter.testelement.ThreadListener;
//import org.apache.jmeter.testelement.property.BooleanProperty;
//import org.apache.jmeter.testelement.property.CollectionProperty;
//import org.apache.jmeter.testelement.property.IntegerProperty;
//import org.apache.jmeter.testelement.property.JMeterProperty;
//import org.apache.jmeter.testelement.property.PropertyIterator;
//import org.apache.jmeter.testelement.property.StringProperty;
//import org.apache.jmeter.testelement.property.TestElementProperty;
//import org.apache.jmeter.threads.JMeterContext;
//import org.apache.jmeter.threads.JMeterContextService;
//import org.apache.jmeter.util.JMeterUtils;
import org.apache.jorphan.logging.LoggingManager;
//import org.apache.jorphan.util.JOrphanUtils;
import org.apache.log.Logger;
//import org.apache.oro.text.MalformedCachePatternException;
//import org.apache.oro.text.regex.Pattern;
//import org.apache.oro.text.regex.Perl5Matcher;
import org.apache.niiwoo.commons.Base64;
import org.apache.niiwoo.commons.ThreeDes;
import org.apache.niiwoo.commons.EncryptUtil;
import org.apache.niiwoo.commons.RSA;
import org.apache.niiwoo.commons.HttpRequestUtil;
import com.alibaba.fastjson.JSONObject;



/**
*TianCheng Sampler class
 */
public class TianChengSampler extends AbstractSampler {

    private static final long serialVersionUID = 240L;

    private static final Logger log = LoggingManager.getLoggerForClass();

    // The name of the property used to hold our data
    public static final String DATA = "TianChengSampler.data"; //$NON-NLS-1$
    public static final String serverURL = "TianChengSampler.serverURL"; //$NON-NLS-1$
    public static final String orgCode = "TianChengSampler.orgCode"; //$NON-NLS-1$
    public static final String userName = "TianChengSampler.userName"; //$NON-NLS-1$
    public static final String userPassword = "TianChengSampler.userPassword"; //$NON-NLS-1$
    public static final String functionCode = "TianChengSampler.functionCode"; //$NON-NLS-1$
    public static final String clientPrivateKey = "TianChengSampler.clientPrivateKey"; //$NON-NLS-1$
    public static final String clientPublicKey = "TianChengSampler.clientPublicKey"; //$NON-NLS-1$
    public static final String serverPublicKey = "TianChengSampler.serverPublicKey"; //$NON-NLS-1$
    public static final String threeDesKey = "TianChengSampler.threeDesKey"; //$NON-NLS-1$

    private static AtomicInteger classCount = new AtomicInteger(0); // keep track of classes created

    // (for instructional purposes only!)

    public TianChengSampler() {
        classCount.incrementAndGet();
                        
        trace("TianChengSampler()");
    }
    
    /**
     * 发送HTTP请求
     * 
     * @throws Exception
     */
    public String postHttpRequest() throws Exception
    {
        String data = getData(); // Sampler data
        String server_url = getServerURL();
        String org_code   = getOrgCode(); 
        String username = getUserName(); 
        String password = getUserPassword(); 
        String function_code = getFunctionCode(); 
        String client_private_key = getClientPrivateKey(); 
        //String client_public_key = getClientPublicKey(); 
        String server_public_key = getServerPublicKey();
        String three_des_key = getThreeDesKey(); 
        UUID uuid = UUID.randomUUID();
        String transNo = uuid.toString();
        
        
        Map<String, Object> root = new HashMap<String, Object>();
        Map<String, Object> header = new HashMap<String, Object>();
        Map<String, Object> securityInfo = new HashMap<String, Object>();
        
        header.put("orgCode", org_code.toString());
        header.put("transNo", transNo);
        header.put("transDate", new Date().toString());
        header.put("userName", username.toString());
        header.put("userPassword", EncryptUtil.md5(password.toString()));
        header.put("functionCode", function_code.toString());
        String headerStr = JSONObject.toJSONString(header);
        
        //使用pcks8编码格式的私钥
        String sigValue = RSA.sign(headerStr, client_private_key);
        securityInfo.put("signatureValue", sigValue);
        
        byte[] encBusiData = ThreeDes.encryptMode(three_des_key.getBytes(), data.getBytes("UTF-8"));
        
        root.put("header", headerStr);
        root.put("busiData", Base64.getBase64ByByteArray(encBusiData));
        root.put("securityInfo", securityInfo);
        String message = JSONObject.toJSONString(root);
        
        log.debug("向BOSS发送请求：" + message);

        String res = HttpRequestUtil.sendJsonWithHttp(server_url, message);

        //System.out.println("响应Message：" + res);
        JSONObject msgJSON = JSONObject.parseObject(res);
        String head = msgJSON.getString("header");
        if(!JSONObject.parseObject(head).getString("rtCode").equals("E0000000"))
        {
            log.debug("消息返回失败");
            String retMessage = "返回失败,错误码rtCode:";
            switch(JSONObject.parseObject(head).getString("rtCode")) {
                case "E0000001":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 请求消息为空!";
                    break;
                case "E0000002":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 验签失败!";
                    break;
                case "E0000003":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 请求数据解析失败!";
                    break;
                case "E0000004":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 请求的用户不存在!";
                    break;
                case "E0000005":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 用户名密码错误!";
                    break;
                case "E0000006":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 交易流水重复!";
                    break;
                case "E0000007":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", base64解码失败!";
                    break;
                case "E0000008":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 3des解码失败!";
                    break;
                case "E0000009":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 错误的请求方式!";
                    break;
                case "E0000010":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 用户余额不足!";
                    break;
                case "E0000011":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 内部响应超时!";
                    break;
                case "E0000012":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 功能号格式错误!";
                    break;
                case "E0000013":
                    retMessage += JSONObject.parseObject(head).getString("rtCode") + ", 系统正在升级中,请稍后再试!";
                    break;
                default : retMessage += ", 未定义的错误码!";
            }
            return retMessage;
        }
        //验证签名
        String securityInfo1 = msgJSON.getString("securityInfo");
        String signatureValue = JSONObject.parseObject(securityInfo1).getString("signatureValue");
        boolean verifyFlag = RSA.verify(msgJSON.getString("header"), signatureValue, server_public_key);
        if(verifyFlag == true){
            log.debug("验签成功");
            byte[] b64 = Base64.getFormBase64ByString(msgJSON.getString("busiData"));
            byte[] busiData = ThreeDes.decryptMode(three_des_key.getBytes(), b64);
            String rspData = new String(busiData, 0, busiData.length, "UTF-8"); 
            log.debug("响应BusiData明文：" + rspData);
            return rspData;
        }else{
            log.debug("验签失败");
            return "响应数据验签失败!";
        }
        
    }

    /**
     * {@inheritDoc}
     */
    @Override
    public SampleResult sample(Entry e) {
        log.debug("into SampleResult.sample");
        trace("sample()");
        SampleResult res = new SampleResult();
        boolean isOK = false; // Did sample succeed?
        String data = getData(); // Sampler data

        String response = null;

        res.setSampleLabel(getTitle());
        /*
         * Perform the sampling
         */
        res.sampleStart(); // Start timing
        try {

            // Do something here ...

            response = postHttpRequest(); //Thread.currentThread().getName();
            /*
             * Set up the sample result details
             */
            res.setSamplerData(data);
            res.setResponseData(response, null);
            res.setDataType(SampleResult.TEXT);

            res.setResponseCodeOK();
            res.setResponseMessage("OK");// $NON-NLS-1$
            isOK = true;
        } catch (Exception ex) {
            log.debug("", ex);
            res.setResponseCode("500");// $NON-NLS-1$
            res.setResponseMessage(ex.toString());
        }
        res.sampleEnd(); // End timimg

        res.setSuccessful(isOK);

        return res;
    }

    /**
     * @return a string for the sampleResult Title
     */
    private String getTitle() {
        log.debug("into getTitle");
        return this.getName();
    }

    /**
     * @return the data for the sample
     */
    public String getData() {
        return getPropertyAsString(DATA);
    }
    
    /**
     * @return the serverURL for the sample
     */
    public String getServerURL() {
        return getPropertyAsString(serverURL);
    }
    
    /**
     * @return the orgCode for the sample
     */
    public String getOrgCode() {
        return getPropertyAsString(orgCode);
    }
    
    public String getUserName() {
        return getPropertyAsString(userName);
    }
    
    public String getUserPassword() {
        return getPropertyAsString(userPassword);
    }
    
    public String getFunctionCode() {
        return getPropertyAsString(functionCode);
    }
    
    public String getClientPrivateKey() {
        return getPropertyAsString(clientPrivateKey);
    }
    
    public String getClientPublicKey() {
        return getPropertyAsString(clientPublicKey);
    }
    
    public String getServerPublicKey() {
        return getPropertyAsString(serverPublicKey);
    }
    
    public String getThreeDesKey() {
        return getPropertyAsString(threeDesKey);
    }
    

    /*
     * Helper method
     */
    private void trace(String s) {
        String tl = getTitle();
        String tn = Thread.currentThread().getName();
        String th = this.toString();
        log.debug(tn + " (" + classCount.get() + ") " + tl + " " + s + " " + th);
    }
}

修改前 image.png 修改后 image.png