|
|
|---|---|
|
|
|
|
|
找到问题了，是要设置ctricial，谢谢 |
|
|
|
|
|
写了一个注册机，欢迎品尝
最后于 2022-9-28 14:56
被angelkyo028编辑
，原因：
|
|
|
咋用4096根证书去签，就知道public_key |
|
|
根据大家讨论搞了一天半没搞定，求指点。目前好像没人提注册码生成的步骤，下面是尝试生成注册码的代码。 #自建证书和密钥
crt = sys.argv[1]
pem = sys.argv[2]
with open('key', 'r') as f:
key = f.read()
licenseId, licensePartBase64, signatureBase64, certBase64 = key.split('-')
with open(crt, 'rb') as f:
lines = f.read()
crt = x509.load_pem_x509_certificate(lines, default_backend())
newCertBase64 = ''.join(lines.decode("utf-8").split('\n')[1:-2])
#print(newCertBase64)
# 自建证书的签名信息
sign = int.from_bytes(crt.signature, byteorder="big")
#print(sign)
# 自建证书sha256摘要结果
m = hashlib.sha256()
m.update(crt.tbs_certificate_bytes)
m.block_size
k = m.hexdigest()
print(k)
with open(pem, 'rb') as f:
private_key = serialization.load_pem_private_key(f.read(), password=None, backend=default_backend())
#print(private_key)
with open('jetbrains_CA.pem', 'rb') as f:
ca_public_key = serialization.load_pem_public_key(f.read(), backend=default_backend())
#print(licenseId, licensePartBase64, signatureBase64, certBase64)
#print('licensePart: ', base64.b64decode(licensePartBase64))
newLicensePart = base64.b64decode(licensePartBase64).decode('utf-8').replace('2025-08-01','2050-12-31').encode('utf-8')
newLicensePartBase64 = base64.b64encode(newLicensePart)
#print(newLicensePartBase64)
mgf = padding.MGF1(hashes.SHA256())
salt_length = padding.PSS.MAX_LENGTH
sign = private_key.sign(newLicensePart, padding.PSS(mgf=mgf, salt_length=salt_length), hashes.SHA256())
#print(len(sign))
newSignatureBase64 = base64.b64encode(sign)
#print(sign)
#print(newSignatureBase64)
#private_key.public_key().verify(
crt.public_key().verify(
sign,
newLicensePart,
padding.PSS(mgf=mgf, salt_length=salt_length),
algorithm=hashes.SHA256(),
)
newKey = f"{licenseId}-{newLicensePartBase64.decode('utf-8')}-{newSignatureBase64.decode('utf-8')}-{newCertBase64}"
print(newKey)
最后于 2022-10-1 16:01
被wangzhehyd编辑
，原因：
|
|
|
|
|
|
大佬有兴趣写个证书生成的教程嘛 |
|
|
大佬们不出现，我们交流交流，哈哈哈 with open('fake_ca_4096/fake_ca.pem', 'rb') as f:
ca_private_key = serialization.load_pem_private_key(f.read(), password=None, backend=default_backend())
private_key = rsa.generate_private_key(public_exponent=65537, key_size=4096, backend=default_backend())
public_key = private_key.public_key()
builder = x509.CertificateBuilder()
builder = builder.subject_name(x509.Name([x509.NameAttribute(NameOID.COMMON_NAME, 'JetBrains'),]))
builder = builder.issuer_name(x509.Name([x509.NameAttribute(NameOID.COMMON_NAME, 'JetProfile CA'),]))
builder = builder.not_valid_before(datetime.today())
builder = builder.not_valid_after(datetime.today() + timedelta(days=18250))
builder = builder.serial_number(x509.random_serial_number())
builder = builder.public_key(public_key)
builder = builder.add_extension(x509.BasicConstraints(ca=False, path_length=None), critical=False)
builder = builder.add_extension(x509.SubjectKeyIdentifier.from_public_key(public_key), critical=False)
with open('jetbrains_CA.crt', "rb") as f:
crt = x509.load_pem_x509_certificate(f.read(), default_backend())
#print(crt.extensions)
key_identifier = crt.extensions[1].value.key_identifier
authority_cert_issuer = crt.extensions[1].value.authority_cert_issuer
authority_cert_serial_number = crt.extensions[1].value.authority_cert_serial_number
builder = builder.add_extension(x509.AuthorityKeyIdentifier(key_identifier, authority_cert_issuer, authority_cert_serial_number), critical=False)
builder = builder.add_extension(x509.ExtendedKeyUsage([x509.oid.ExtendedKeyUsageOID.SERVER_AUTH]), critical=False)
builder = builder.add_extension(x509.KeyUsage(digital_signature=True, key_encipherment=True, key_cert_sign=False, key_agreement=False, content_commitment=False, data_encipherment=False, crl_sign=False, encipher_only=False, decipher_only=False), critical=False)
certificate = builder.sign(private_key=ca_private_key, algorithm=hashes.SHA256(), backend=default_backend())
private_bytes = private_key.private_bytes(encoding=serialization.Encoding.PEM, format=serialization.PrivateFormat.TraditionalOpenSSL, encryption_algorithm=serialization.NoEncryption())
public_bytes = certificate.public_bytes(encoding=serialization.Encoding.PEM)
with open("fake_ca.pem", "wb") as fout:
fout.write(private_bytes + public_bytes)
with open("fake_ca.crt", "wb") as fout:
fout.write(public_bytes) |
|
|
执行报错NameError: name 'serialization' is not defined 可以吧import贴出来吗，我用openssl生成的证书居然用不了，https://github.com/Nasller/LicenseServer 这个项目的证书配合jb的根证书竟然可以使用，好奇怪啊 |
|
|
我也是没设置这个就不行，但是官方的证书也没有设置，奇怪了 |
|
|
from cryptography.hazmat.primitives.asymmetric import rsa from cryptography.hazmat.primitives import hashes, serialization from cryptography.hazmat.backends import default_backend from cryptography import x509 from cryptography.x509.oid import NameOID from datetime import datetime, timedelta |
|
|
能贴个生成signatureBase64的过程么 |
|
|
signatureBase64就是用私钥去签base64加密之前的licensePartBase64就行了， private static String generateActivationCode() {
try {
LicenseData licenseData =
new LicenseData("F5TRIB85C7", "maoxikun", "0120220715LPAA006008", "33275345/16983092:1750569653");
byte[] licenseBytes = licenseData.toString().getBytes(StandardCharsets.UTF_8);
Signature signature = Signature.getInstance("SHA1withRSA");
PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(Base64.getDecoder().decode(Configs.PRIVATE_KEY));
signature.initSign(KeyFactory.getInstance("RSA").generatePrivate(keySpec));
signature.update(licenseBytes);
return String.format("%s-%s-%s-%s",
licenseData.getLicenseId(),
Base64.getEncoder().encodeToString(licenseBytes),
Base64.getEncoder().encodeToString(signature.sign()),
Configs.PUBLIC_KEY);
} catch (Exception e) {
throw new RuntimeException(e);
}
}
最后于 2022-10-8 23:44
被mqk233编辑
，原因：
|
|
|
搞定，多谢多谢。
最后于 2022-10-10 12:25
被wangzhehyd编辑
，原因：
|
|
|
{ "licenseId": "F5TRIB85C7", "licenseeName": "Shandong University", "assigneeName": "ao li", "assigneeEmail": "2867816268@qq.com", "licenseRestriction": "For educational use only", "checkConcurrentUse": false, "products": [ { "code": "DPN", "paidUpTo": "2023-04-18", "extended": false }, { "code": "DB", "paidUpTo": "2023-04-18", "extended": false }, { "code": "PS", "paidUpTo": "2023-04-18", "extended": false }, { "code": "II", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RSC", "paidUpTo": "2023-04-18", "extended": true }, { "code": "GO", "paidUpTo": "2023-04-18", "extended": false }, { "code": "DM", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RSF", "paidUpTo": "2023-04-18", "extended": true }, { "code": "DS", "paidUpTo": "2023-04-18", "extended": false }, { "code": "PC", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RC", "paidUpTo": "2023-04-18", "extended": false }, { "code": "CL", "paidUpTo": "2023-04-18", "extended": false }, { "code": "WS", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RD", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RS0", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RM", "paidUpTo": "2023-04-18", "extended": false }, { "code": "AC", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RSV", "paidUpTo": "2023-04-18", "extended": true }, { "code": "DC", "paidUpTo": "2023-04-18", "extended": false }, { "code": "RSU", "paidUpTo": "2023-04-18", "extended": false }, { "code": "DP", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PDB", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PWS", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PSI", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PPS", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PCWMP", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PGO", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PPC", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PRB", "paidUpTo": "2023-04-18", "extended": true }, { "code": "PSW", "paidUpTo": "2023-04-18", "extended": true }, { "code": "RS", "paidUpTo": "2023-04-18", "extended": true } ], "metadata": "0120220715LPAA006008", "hash": "33275345/16983092:1750569653", "gracePeriodDays": 7, "autoProlongated": false, "isAutoProlongated": false } |
|
|
学习了，谢谢！
|
