如何使用javascripts伪造从p12证书获取证书信息？

Question

我用

获得了p12

var p12Der = ...
var p12Asn1 = forge.asn1.fromDer(p12Der);
var p12 = forge.pkcs12.pkcs12FromAsn1(p12Asn1, password);

如何从certifiacte获取信息，例如主题名称，发行人名称，序列号......

Answer 1

p12结构包含＆＃34; bags＆＃34;不同类型。一种这样的类型是证书袋。您可以请求伪造的p12结构中的所有证书袋：

// get bags by type
var bags = p12.getBags({bagType: forge.pki.oids.certBag});
// bags are key'd by bagType and each bagType key's value
// is an array of matches (in this case, certificate objects)
var cert = bags[forge.pki.oids.certBag][0];

获得证书对象后，您可以console.log查看可用的信息。这是一些证书属性的快速抽样：

// version
cert.version;

// serial number
cert.serialNumber;

// validity
cert.validity;

// issuer
cert.issuer;
// all issuer attributes
cert.issuer.attributes;
// get, for example, common name via its short name "CN"
cert.issuer.getField('CN');

// subject
cert.subject;
// all subject attributes
cert.subject.attributes;
// get, for example, common name via its short name "CN"
cert.subject.getField('CN');