Question

我用openssl生成了密钥对

openssl genrsa -des3 -out _private.pem 1024

openssl rsa -pubout -in _private.pem -out public.pem

公共

私人

当我尝试使用以下程序加载密钥时，它总是说＆＃34;流读取错误＆＃34;在Signatory1.LoadKeysFromStream(f, [partPrivate]);行

var
  f: TMemoryStream;
  Signatory1: TSignatory;
  codecRSA: TCodec;
  CryptographicLibrary1: TCryptographicLibrary;
  base64Ciphertext: string;
begin
   f:= TMemoryStream.Create;
   f.LoadFromFile('C:\OpenSSL-Win32\bin\private.pem');

  codecRSA :=TCodec.Create(nil);
  CryptographicLibrary1 := TCryptographicLibrary.Create(nil);
  Signatory1 :=TSignatory.Create(nil);

  //=============TCodec===================
  codecRSA.CryptoLibrary  := CryptographicLibrary1;
  codecRSA.StreamCipherId := 'native.RSA';
  codecRSA.ChainModeId:= 'native.CBC';
  codecRSA.AsymetricKeySizeInBits := 1024;

  //====Signatory1=====================
  Signatory1.Codec :=codecRSA;
  //===Load public key=============
  Signatory1.LoadKeysFromStream(f, [partPrivate]);
end;

有什么建议吗？我正在使用Delphi XE7和Github的最新版本的Lockbox 3

Answer 1

根据我的经验，在使用OpenSSL生成的密钥时，LockBox 3需要PKCS＃1公钥。在Lockbox3加载之前，您必须将公钥转换为PKCS＃1。（OpenSSL生成PKCS＃8密钥）。使用RSAPublicKey关键字。

openssl rsa -pubin -in yourpublickey -RSAPublicKey_out -out publicpkcs1

https://www.openssl.org/docs/apps/rsa.html

http://lockbox.seanbdurkin.id.au/tiki-view_forum_thread.php?comments_parentId=298&display=print

Answer 2

加载流后，应将其重置为开头，然后再将其移交给LoadKeysFromStream。

  //====Signatory1=====================
  Signatory1.Codec :=codecRSA;
  //===Load public key=============
  f.Position := 0;
  Signatory1.LoadKeysFromStream(f, [partPrivate]);

Lockbox 3无法加载公钥 - 流读取错误

2 个答案: