password_machine.cpp
3.42 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
#include "stdafx.h"
#include "password_machine.h"
#include <sstream>
#include "mangerCmd.h"
#include "commonCmd.h"
#include "afxinet.h"
PWDMachine::PWDMachine() : m_socket(-1)// "-1" indicates a invalid socket.
{}
PWDMachine::~PWDMachine()
{
Disconnect();
}
bool PWDMachine::Connect(const std::string& ip, uint32_t port) const
{
m_socket = union_syj1001_connect(const_cast<char*>(ip.c_str()), port, 0); // 该函数的连接超时为20秒左右，因此不做重试.
return m_socket > 0;
}
void PWDMachine::Disconnect() const
{
if (m_socket > 0)
{
if (union_syj1001_disConnect(m_socket) < 0)
throw std::exception("关闭加密机失败！");
}
m_socket = -1; // Reset.
}
std::string PWDMachine::GetCardPassword(const std::string& key_idx,
const std::string& card_sn,
uint32_t timeout) const
{
static const uint8_t MK_KEY_VAL = NULL;
static const uint8_t DISPERSE_COUNT = 2; // 离散次数
static const uint8_t NEED_READ_CFG = 0; // 0:不从配置文件读取hsmIp、hsmPort、timeOut、hsmLenOfMsgHeader、isLenOfHsmMsg.
static const uint8_t MSG_HEADER_LEN = 8; // hsmLenOfMsgHeader.
static const uint8_t NEED_HSM_MSG_LEN = 1; // 是否需要报文长度 0：不需要 1：需要.
static const uint8_t DISPERSE_VAR_LEN = 16; // 离散变量的最大单位长度为16个字符.
static const uint8_t KEY_VAL_LEN = 32;
typedef char NewKeyVal[KEY_VAL_LEN]; // MK加密下的过程密钥/子密钥密文, 长度为32个字符的字符数组。
static const uint8_t CHECK_VAL_LEN = 16;
typedef char ChkVal[CHECK_VAL_LEN]; // 过程密钥/子密钥的校验值, 长度为16个字符的字符数组。
if (card_sn.empty())
throw std::exception("SN号为空！");
NewKeyVal new_key = { 0 };
ChkVal chk_val = { 0 };
int32_t key_len = union_syj1001_disperseKey(NULL, 0, timeout, NEED_READ_CFG, MSG_HEADER_LEN, NEED_HSM_MSG_LEN, m_socket,
const_cast<char*>(key_idx.c_str()), MK_KEY_VAL, new_key, chk_val, DISPERSE_COUNT,
card_sn.substr(0, DISPERSE_VAR_LEN).c_str(), card_sn.substr(DISPERSE_VAR_LEN, DISPERSE_VAR_LEN).c_str()); // 离散变量如果大于16字符，要把离散量拆成数组.
if (key_len < 0)
{
std::stringstream err_msg;
err_msg << "获取秘钥失败, 秘钥标识: " << key_idx;
throw std::exception(err_msg.str().c_str());
}
return std::string(new_key, key_len);
}
//bool PWDMachine::ReadConfig()
//{
// bool bResult = false;
//
// CString sXMLPath = GetModulePath() + L"PWMConfig.xml";
//
// TiXmlDocument xmlDoc(wstr_2_str(sXMLPath.GetBuffer()).c_str());
// if (xmlDoc.LoadFile())
// {
// try
// {
// bResult = true;
// TiXmlElement *pRootEle = xmlDoc.RootElement();
// TiXmlElement *pPWMIP = pRootEle->FirstChildElement();
// m_sPWMIP = pPWMIP->GetText();
// TiXmlElement *pPWMPort = pPWMIP->NextSiblingElement();
// std::string sPWMPort = pPWMPort->GetText();
// m_u32PWMPort = atoi(sPWMPort.c_str());
// }
// catch (std::exception &e)
// {
// bResult = false;
// }
// }
//
// return bResult;
//}
CString PWDMachine::GetModulePath()
{
CString sPath;
TCHAR szPath[MAX_PATH];
GetModuleFileName(NULL, szPath, MAX_PATH);
CString sMudolePath = szPath;
CString sMudoleName = AfxGetAppName();
sPath = sMudolePath.Left(sMudolePath.GetLength() - sMudoleName.GetLength() - 4);
return sPath;
}
std::string PWDMachine::GetPassword(const std::string& key_idx, const std::string& card_sn, uint32_t timeout, std::string sPWMIP,
uint32_t u32PWMPort) const
{
if (!Connect(sPWMIP, u32PWMPort))
{
throw std::exception("加密机连接失败！");
}
std::string sPassWord = GetCardPassword(key_idx, card_sn, timeout);
Disconnect();
return sPassWord;
}