TungNT (Blue)

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

====== 1. Tạo key RSA ======

**Một số lệnh tạo key file:**

<code bash>
openssl genrsa -des3 -out private_key.key 2048
openssl genrsa -out private_key.key 2048 # without password
openssl req -new -key private_key.key -out private_key.csr
openssl req -new -x509 -days 1001 -key private_key.key -sha256  -out public_key.cer
openssl req -new -x509 -nodes -sha256 -days 365 -key private_key.key -out public_key.cert
openssl pkcs12 -export -in public_key.cer -inkey private_key.key -out private_key.pfx
openssl pkcs12 -in private_key.pfx -nocerts -out private_key.pem
openssl pkcs12 -export -in public_key.cer -inkey private_key.key -out private_key.p12 
openssl x509 -in public_key.cer -out public_key.der -outform DER
openssl x509 -inform der -in public_key.der -out public_key.cer

keytool -importkeystore -srckeystore private_key.p12 -srcstoretype PKCS12 -destkeystore private_key.jks -deststoretype JKS 
keytool -importkeystore -srckeystore private_key.jks -destkeystore private_key.jks -deststoretype pkcs12
keytool -changealias -alias 1 -destalias custom-alias-name -keystore private_key.jks
</code>

**Tham khảo:**
  * [[https://www.scottbrady91.com/openssl/creating-rsa-keys-using-openssl|Creating RSA Keys using OpenSSL]]
  * [[https://8gwifi.org/RSAFunctionality?rsasignverifyfunctions=rsasignverifyfunctions&keysize=2048|Tool debug online]]
  * [[https://www.sslshopper.com/ssl-converter.html|SSL converter (to binary)]]
  * [[https://packagist.org/packages/phpseclib/phpseclib|Package phpseclib]]
  * [[https://phpseclib.sourceforge.net/rsa/2.0/examples.html|phpseclib: RSA Examples and Notes]]
====== 2. Sử dụng RSA từ postman ======

**Cài đặt thư viện:** https://joolfe.github.io/postman-util-lib/dist/bundle.js

**Add đoạn code mẫu sau vào tab scripts của postman:**

<file javascript>
const uuid = require('uuid'); 
eval(pm.globals.get('pmlib_code'));
const requestId = uuid.v4();    
const partnerId = pm.environment.get("partner_id");
const amount = 20000;
const expires_time = 12;
// Merchant's Private Key
const merchantPrivateKey = pm.environment.get("merchant_private_key");
const sig = new pmlib.rs.crypto.Signature({"alg": "SHA1withRSA"}); // If use rsa sha1 algorithm
//const sig = new pmlib.rs.crypto.Signature({"alg": "SHA256withRSA"}); // If use rsa sha256 algorithm

const payload = requestId + "|" + partnerId + "|" + amount;
    
sig.init(merchantPrivateKey);
sig.updateString(payload);

var sigVal = sig.sign();
var sigStr = pmlib.rs.hextob64u(sigVal);

sigStr = sigStr.replace(/_/g,"/");
sigStr = sigStr.replace(/-/g,"+") + '==';

pm.environment.set("request_id", requestId);
pm.environment.set("partner_id", partnerId);
pm.environment.set("amount", amount);
pm.environment.set("expires_time", expires_time);
pm.environment.set("signature", sigStr);
</file>

====== 3. Tra cứu chứng thư số ======

<code bash>
openssl x509 -in public_key.cer -text -noout
openssl x509 -noout -serial -in public_key.cer
</code>

https://i-ca.vn/chung-thu-so/tra-cuu

====== 4. Tra cứu Remote Certificates ======

<code bash>
openssl s_client -connect www.example.com:443 < /dev/null | openssl x509 -noout -dates
</code>

Please fill all the letters into the box to prove you're human. U G Z A H Please keep this field empty:

Edit summary