3. ABAP RSA签名- SAP调用上上签API(3)

Chuck_CQM

已于 2022-07-14 22:06:50 修改

阅读量989

点赞数 1

文章标签： java 服务器前端

于 2022-07-14 21:59:31 首次发布

本文链接：https://blog.csdn.net/m0_37774808/article/details/125793380

版权

这篇博客介绍了如何在SAP ABAP环境中调用上上签的合同模板列表接口，并对字符串进行加密签名。通过示例代码展示了使用SSFW_KRN_SIGN函数进行签名的过程，强调了签名与加密的区别，以及可能出现的错误情况。同时提到了SSF01程序和参考资源。

摘要由CSDN通过智能技术生成

ABAP上对字符串进行签密并调用上上签的合同模板列表接口

首先，上上签提供了这个工具，可以直接计算签名，便于开发验证，地址上上签在线算签

接着，写个验证程序：

*&---------------------------------------------------------------------*
*& Report  ZZZZZZ14
*&
*&---------------------------------------------------------------------*
*&
*&
*&---------------------------------------------------------------------*

REPORT ZZZZZZ14.

DATA: lv_output         TYPE string,
      lv_input_x        TYPE xstring,
      lv_input          TYPE string,
      lt_recipient_list TYPE STANDARD TABLE OF ssfinfo,
      ls_recipient_list LIKE LINE OF lt_recipient_list,
      lv_crc            TYPE ssfparms-ssfcrc.

DATA: lf_input_data    TYPE xstring,
          lf_signed_data   TYPE xstring,
          ls_signer        TYPE ssfinfo,          "ssfinfoext is tested by CL_SMIME
          lt_signer        TYPE TABLE OF ssfinfo, "ssfinfoext is tested by CL_SMIME
          lf_crc           TYPE ssfreturn,
          lf_signer_name   TYPE string,
          lf_chain_data TYPE xstring,
          lf_output_data TYPE xstring,
          lf_inputv_data TYPE xstring,
          ls_certificate TYPE ssfcertlin,
          lt_certificates TYPE TABLE OF ssfcertlin,
          lf_subject(256) TYPE c.

"原文
lv_input ='bestsign-client-id=1657177378014361480bestsign-sign-timestamp=1657789020295bestsign-signature-type=RSA256request-body=d41d8cd98f00b204e9800998ecf8427euri=/api/templates/v2'.

CALL FUNCTION'SCMS_STRING_TO_XSTRING'
  EXPORTING
    text = lv_input
  IMPORTING
    buffer = lv_input_x.
"签名
"ls_signer-id =  'CN=testRSA'.
ls_signer-id =  'CN=user3'.  " 'CN=user1'."一般为证书域名
"ls_signer-profile = '/usr/sap/FED/DVEBMGS00/sec/TEMP_5065F3F487881EDD80D77C72184D8504.pse'.

ls_signer-profile = '/usr/sap/FED/DVEBMGS00/sec/user3.pse'.

APPEND ls_signer TO lt_signer.
CALL FUNCTION 'SSFW_KRN_SIGN'
      EXPORTING
        ssftoolkit ='SAPSECULIB'
        str_format = 'PKCS1-V1.5'
        b_inc_certs = ''
        b_detached = 'X'
        b_inenc =''
        str_hashalg ='SHA256'"'SHA1'
        str_chainfmt =''
        ostr_input_data = lv_input_x
      IMPORTING
        ostr_signed_data = lf_signed_data
        str_signer_name = lf_signer_name
*ostr_signer_keyid =
        ostr_chain_data = lf_chain_data
        crc = lf_crc
      TABLES
        signer = lt_signer
      EXCEPTIONS
        ssf_krn_error =1
        ssf_krn_noop =2
        ssf_krn_nomemory =3
        ssf_krn_opinv =4
        ssf_krn_nossflib =5
        ssf_krn_signer_list_error =6
        ssf_krn_input_data_error =7
        ssf_krn_invalid_par =8
        ssf_krn_invalid_parlen =9
        ssf_fb_input_parameter_error =10
        OTHERS = 11.

  data: lv_encoded type string.
  CALL FUNCTION 'SCMS_BASE64_ENCODE_STR'
    EXPORTING
      INPUT  = lf_signed_data
    IMPORTING
      OUTPUT = lv_encoded.

  WRITE: / lv_encoded.

  PERFORM show_data USING lf_signed_data.

  CALL METHOD cl_http_utility=>escape_url
    EXPORTING
      unescaped = lv_encoded
    RECEIVING
      escaped   = lv_encoded.

   WRITE: / lv_encoded.