Цитата:С новым плагином все работает. Проверено неоднократно.
Второй день бьюсь, не выходит ничего.
Вот что имею на текущий момент
Версия CryptoPro:
csptest -keyset -verifycontext | sed -n 's/.* Ver:*\([0-9.]\+\).*/\1/p'
4.0.9963
Версия CadesPlugin 3.0.6.0Сертификат:
=============================================================================
1-------
Issuer : E=pki@omskportal.ru, OGRN=1045504013906, INN=005503080925, C=RU, S=55 Омская область, L=Омск, STREET=Красный путь 109, OU=Отдел информационной безопасности, O=Главное управление информационных технологий и связи Омской области, CN=ГУИТ Омской области
Subject : OGRN=xxxxxxxxxx, SNILS=xxxxxxxxx, INN=005505016361, C=RU, S=55 Омская область, L=Омск, O="xxxxxxxxxxxxxxx", CN="БУЗОО ""ГП №3""", STREET=nnnnnnnn, T=xxxxxxxxx, G=xxxxxxxxxxx, SN=xxxxxxx
Serial : 0x278CDCFCF35EE480E911C359E55EB5A4
SHA1 Hash : 3120e224a6fbff6d47701e22b7b89f4fb3cd53c4
SubjKeyID : c635e2080069becc1ef1b4b878a8babdeba7a8d0
Signature Algorithm : ГОСТ Р 34.11-2012/34.10-2012 256 бит
PublicKey Algorithm : ГОСТ Р 34.10-2012 (512 bits)
Not valid before : 08/04/2019 05:50:44 UTC
Not valid after : 08/04/2020 06:00:44 UTC
PrivateKey Link : Yes
Container : HDIMAGE\\le-01e59.000\1726
Provider Name : Crypto-Pro GOST R 34.10-2012 KC1 CSP
Provider Info : ProvType: 80, KeySpec: 1, Flags: 0x0
CA cert URL :
http://www.pki.omskporta...dms/cdp3/guc_cer/guc.cerCDP :
http://pki.omskportal.ru/dms/cdp3/guc_crl/guc.crlExtended Key Usage : 1.3.6.1.5.5.7.3.2
1.3.6.1.5.5.7.3.4
1.2.643.5.1.29
1.2.643.5.1.24.2.6
1.2.643.2.2.34.6
1.2.643.100.2.1
=============================================================================
На тестовой страницеCryptoPro с помощью CadesPlugin проверил. Всё подписывается на ура!
ifc.conf
log = {
level = "DEBUG";
}
config = {
cert_from_registry = "false";
set_user_pin = "false";
}
params =
(
{ name = "Криптопровайдер VipNet CSP";
alias = "VIPNet";
type = "capi";
provider_name = "Infotecs Cryptographic Service Provider";
provider_num = "2";
skip_pkcs11_list = "true";
},
{ name = "Криптопровайдер VipNet CSP Linux";
alias = "VIPNet_linux";
type = "capi_linux";
provider_name = "Infotecs Cryptographic Service Provider";
provider_num = "2";
skip_pkcs11_list = "true";
},
{ name = "Криптопровайдер КриптоПро CSP";
alias = "CryptoPro";
type = "capi";
provider_name = "Crypto-Pro GOST R 34.10-2001 Cryptographic Service Provider";
provider_num = "75";
skip_pkcs11_list = "false";
},
{ name = "Криптопровайдер Рутокен CSP";
alias = "CryptoPro_Rutoken";
type = "capi";
provider_name = "GOST R 34.10-2001 Rutoken CSP";
provider_num = "75";
skip_pkcs11_list = "false";
},
{ name = "Криптопровайдер Signal-COM CSP";
alias = "SignalCom";
type = "capi";
provider_name = "Signal-COM CPGOST Cryptographic Provider";
provider_num = "75";
skip_pkcs11_list = "false";
},
{ name = "Криптопровайдер LISSI-CSP";
alias = "LISSI-CSP";
type = "capi";
provider_name = "LISSI-CSP";
provider_num = "75";
skip_pkcs11_list = "false";
},
{ name = "Токен JaCarta";
alias = "JaCarta";
type = "pkcs11";
alg = "gost2001";
model = "eToken GOST,JaCarta GOST 2.0";
lib_win = "jcPKCS11-2.DLL";
lib_linux = "libjcPKCS11-2.so.2.4.0";
lib_mac = "jcPKCS11-2";
},
{ name = "Рутокен ЭЦП";
alias = "ruTokenECP";
type = "pkcs11";
alg = "gost2001";
model = "Rutoken ECP";
lib_win = "rtpkcs11ecp.dll";
lib_linux = "librtpkcs11ecp.so";
lib_mac = "librtpkcs11ecp.dylib";
},
{
name = "CPPKCS11_2001";
alias = "CPPKCS11_2001";
type = "pkcs11";
alg = "gost2001";
model = "CPPKCS 3";
lib_linux = "/opt/cprocsp/lib/amd64/libcppkcs11.so";
lib_mac = "/opt/cprocsp/lib/libcppkcs11.dylib";
},
{
name = "CPPKCS11_2012_256";
alias = "CPPKCS11_2012_256";
type = "pkcs11";
alg = "gost2012_256";
model = "CPPKCS 3";
lib_linux = "/opt/cprocsp/lib/amd64/libcppkcs11.so";
lib_mac = "/opt/cprocsp/lib/libcppkcs11.dylib";
},
{
name = "CPPKCS11_2012_512";
alias = "CPPKCS11_2012_512";
type = "pkcs11";
alg = "gost2012_512";
model = "CPPKCS 3";
lib_linux = "/opt/cprocsp/lib/amd64/libcppkcs11.so";
lib_mac = "/opt/cprocsp/lib/libcppkcs11.dylib";
}
);
IFC выхлоп вот такой в конце выдаёт
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:p11 lib name: /opt/cprocsp/lib/amd64/libcppkcs11.so, slot: 0, engine lib name: pkcs11_engine
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:cached crypto slot found
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:result [0]
2019-04-16 19:31:32:IFC:ifc_engine:result [0]
2019-04-16 19:31:32:IFC:find_cert_in_store_by_id:STARTED
2019-04-16 19:31:32:IFC:find_cert_in_store_by_id:ID to find: E4EF3737171A8682BD3F8E9428D774C14F3BF09F
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_start:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_start:PASSED
2019-04-16 19:31:32:IFC:find_cert_in_store_by_id:STORE_list_certificate_start done
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_next:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:make_object_to_return:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:make_x509_by_handle:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:make_x509_by_handle:PASSED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:make_object_to_return:PASSED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_next:PASSED
2019-04-16 19:31:32:IFC:find_cert_in_store_by_id:STORE_list_certificate_next done
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_end:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_end:PASSED
2019-04-16 19:31:32:IFC:find_cert_in_store_by_id:STORE_list_certificate_end done
2019-04-16 19:31:32:IFC:find_cert_in_store_by_id:result [found cert handle]
2019-04-16 19:31:32:IFC:get_priv_key_by_id:STARTED
2019-04-16 19:31:32:IFC:get_priv_key_by_id:ID to find: E4EF3737171A8682BD3F8E9428D774C14F3BF09F
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_start:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_start:PASSED
2019-04-16 19:31:32:IFC:get_priv_key_by_id:STORE_list_private_key_start done
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_next:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_next:No such objects
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:gost_store_list_next:PASSED
2019-04-16 19:31:32:IFC:get_priv_key_by_id:result [NULL]
2019-04-16 19:31:32:IFC:do_work_sign_cms:ERROR:get_priv_key_by_id error:ifc_sign_cms.c:110
2019-04-16 19:31:32:IFC:do_work_sign_cms:result [1]
2019-04-16 19:31:32:IFC:ifc_p11_logout:STARTED
2019-04-16 19:31:32:IFC:ifc_engine:STARTED
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:STARTED
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:p11 lib name: /opt/cprocsp/lib/amd64/libcppkcs11.so, slot: 0, engine lib name: pkcs11_engine
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:cached crypto slot found
2019-04-16 19:31:32:IFC:ifc_init_pkcs11_engine:result [0]
2019-04-16 19:31:32:IFC:ifc_engine:result [0]
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:make_logout:STARTED
2019-04-16 19:31:32:pkcs11_engine-CPPKCS11_2001-0:make_logout:PASSED
2019-04-16 19:31:32:IFC:ifc_p11_logout:result [0]
2019-04-16 19:31:32:IFC:ifc_sign:result [1]
2019-04-16 19:31:32:WEBLIB:process_request:Response string(length = 16) = "{"error_code":1}"
Тоесть ни в какую не хочет видеть закрытый ключ в контейнере. В чём подвох непойму, второй день уже бьюсь с этим.
Под виндой проверил уже сертификат с ключём, всё работает, думал уже может с ключем что не так
Отредактировано пользователем 16 апреля 2019 г. 17:13:00(UTC)
| Причина: Не указана
