请教：openresty是否支持RSA加密

99486926

在openresty官方文档中没找到RSA加密相关库，请大神指点！

谢谢

lhmwzy

https://github.com/doujiang24/lua-resty-rsa

这个行吗？

2016-03-03 11:48 GMT+08:00 牛德恒 <994...@qq.com>:

在openresty官方文档中没找到RSA加密相关库，请大神指点！

谢谢

--

99486926

非常感谢！

下载并使用网站上的公钥，私钥进行加解密，都运行正常，只是当公钥，密钥换成以下两个字符串时，运行错误：

使用公钥加密，提示："no start line"

使用私钥加密，提示："not inited for encrypt"

但这对公钥，私钥在php中使用openssl_public_encrypt和openssl_private_decrypt进行加密解密都能正常运行。

是不是resty-rsa.lua在使用公钥，私钥时需要进行特殊处理？请指点。

谢谢

测试代码：

local RSA_PUBLIC_KEY = [[

-----BEGIN PUBLIC KEY-----

MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3//sR2tXw0wrC2DySx8vNGlqt

3Y7ldU9+LBLI6e1KS5lfc5jlTGF7KBTSkCHBM3ouEHWqp1ZJ85iJe59aF5gIB2kl

Bd6h4wrbbHA2XE1sq21ykja/Gqx7/IRia3zQfxGv/qEkyGOx+XALVoOlZqDwh76o

2n1vP1D+tD3amHsK7QIDAQAB

-----END PUBLIC KEY-----

]]

local RSA_PRIV_KEY = [[

-----BEGIN RSA PRIVATE KEY-----

MIICXQIBAAKBgQC3//sR2tXw0wrC2DySx8vNGlqt3Y7ldU9+LBLI6e1KS5lfc5jl

TGF7KBTSkCHBM3ouEHWqp1ZJ85iJe59aF5gIB2klBd6h4wrbbHA2XE1sq21ykja/

Gqx7/IRia3zQfxGv/qEkyGOx+XALVoOlZqDwh76o2n1vP1D+tD3amHsK7QIDAQAB

AoGBAKH14bMitESqD4PYwODWmy7rrrvyFPEnJJTECLjvKB7IkrVxVDkp1XiJnGKH

2h5syHQ5qslPSGYJ1M/XkDnGINwaLVHVD3BoKKgKg1bZn7ao5pXT+herqxaVwWs6

ga63yVSIC8jcODxiuvxJnUMQRLaqoF6aUb/2VWc2T5MDmxLhAkEA3pwGpvXgLiWL

3h7QLYZLrLrbFRuRN4CYl4UYaAKokkAvZly04Glle8ycgOc2DzL4eiL4l/+x/gaq

deJU/cHLRQJBANOZY0mEoVkwhU4bScSdnfM6usQowYBEwHYYh/OTv1a3SqcCE1f+

qbAclCqeNiHajCcDmgYJ53LfIgyv0wCS54kCQAXaPkaHclRkQlAdqUV5IWYyJ25f

oiq+Y8SgCCs73qixrU1YpJy9yKA/meG9smsl4Oh9IOIGI+zUygh9YdSmEq0CQQC2

4G3IP2G3lNDRdZIm5NZ7PfnmyRabxk/UgVUWdk47IwTZHFkdhxKfC8QepUhBsAHL

QjifGXY4eJKUBm3FpDGJAkAFwUxYssiJjvrHwnHFbg0rFkvvY63OSmnRxiL4X6EY

yI9lblCsyfpl25l7l5zmJrAHn45zAiOoBrWqpM5edu7c

-----END RSA PRIVATE KEY-----

]]

local resty_rsa = require "resty.rsa"

--[[

local pub, err = resty_rsa:new({ public_key = RSA_PUBLIC_KEY })

if not pub then

ngx.say("new rsa err: ", err)

return

end

local encrypted, err = pub:encrypt("hello")

if not encrypted then

ngx.say("failed to encrypt: ", err)

return

end

ngx.say("encrypted:"..ngx.encode_base64(encrypted))

ngx.say("encrypted length: ", #encrypted)

local priv, err = resty_rsa:new({ private_key = RSA_PRIV_KEY })

if not priv then

ngx.say("new rsa err: ", err)

return

end

local decrypted = priv:decrypt(encrypted)

ngx.say("decrypted:"..decrypted)

ngx.say(decrypted == "hello")

]]

local pub, err = resty_rsa:new({ private_key = RSA_PRIV_KEY })

if not pub then

ngx.say("new rsa err: ", err)

return

end

local encrypted, err = pub:encrypt("hello")

if not encrypted then

ngx.say("failed to encrypt: ", err)

return

end

ngx.say("encrypted:"..ngx.encode_base64(encrypted))

ngx.say("encrypted length: ", #encrypted)

local priv, err = resty_rsa:new({ public_key = RSA_PUBLIC_KEY })

if not priv then

ngx.say("new rsa err: ", err)

return

end

local decrypted = priv:decrypt(encrypted)

ngx.say("decrypted:"..decrypted)

ngx.say(decrypted == "hello")

------------------ 原始邮件 ------------------

发件人: "lhmwzy";<lh...@gmail.com>;

发送时间: 2016年3月3日(星期四) 中午1:55

收件人: "openresty"<openresty@googlegroups.com>;

主题: Re: [openresty] 请教：openresty是否支持RSA加密

https://github.com/doujiang24/lua-resty-rsa

这个行吗？

2016-03-03 11:48 GMT+08:00 牛德恒 <994...@qq.com>:

在openresty官方文档中没找到RSA加密相关库，请大神指点！

谢谢

--

doujiang24

Hello

因为 key 的格式不一样，目前还没有做兼容，请参考这个 [1]

1. https://github.com/doujiang24/lua-resty-rsa/issues/1

在 2016年3月3日下午3:46，牛德恒 <994...@qq.com>写道：

非常感谢！
下载并使用网站上的公钥，私钥进行加解密，都运行正常，只是当公钥，密钥换成以下两个字符串时，运行错误：
使用公钥加密，提示："no start line"
使用私钥加密，提示："not inited for encrypt"
但这对公钥，私钥在php中使用openssl_public_encrypt和openssl_private_decrypt进行加密解密都能正常运行。
是不是resty-rsa.lua在使用公钥，私钥时需要进行特殊处理？请指点。

谢谢

测试代码：
local RSA_PUBLIC_KEY = [[
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3//sR2tXw0wrC2DySx8vNGlqt
3Y7ldU9+LBLI6e1KS5lfc5jlTGF7KBTSkCHBM3ouEHWqp1ZJ85iJe59aF5gIB2kl
Bd6h4wrbbHA2XE1sq21ykja/Gqx7/IRia3zQfxGv/qEkyGOx+XALVoOlZqDwh76o
2n1vP1D+tD3amHsK7QIDAQAB
-----END PUBLIC KEY-----
]]

local RSA_PRIV_KEY = [[
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
]]

local resty_rsa = require "resty.rsa"
--[[
local pub, err = resty_rsa:new({ public_key = RSA_PUBLIC_KEY })
if not pub then
ngx.say("new rsa err: ", err)
return
end
local encrypted, err = pub:encrypt("hello")
if not encrypted then
ngx.say("failed to encrypt: ", err)
return
end
ngx.say("encrypted:"..ngx.encode_base64(encrypted))
ngx.say("encrypted length: ", #encrypted)

local priv, err = resty_rsa:new({ private_key = RSA_PRIV_KEY })
if not priv then
ngx.say("new rsa err: ", err)
return
end
local decrypted = priv:decrypt(encrypted)
ngx.say("decrypted:"..decrypted)
ngx.say(decrypted == "hello")
]]

local pub, err = resty_rsa:new({ private_key = RSA_PRIV_KEY })
if not pub then
ngx.say("new rsa err: ", err)
return
end
local encrypted, err = pub:encrypt("hello")
if not encrypted then
ngx.say("failed to encrypt: ", err)
return
end
ngx.say("encrypted:"..ngx.encode_base64(encrypted))
ngx.say("encrypted length: ", #encrypted)

local priv, err = resty_rsa:new({ public_key = RSA_PUBLIC_KEY })
if not priv then
ngx.say("new rsa err: ", err)
return
end
local decrypted = priv:decrypt(encrypted)
ngx.say("decrypted:"..decrypted)
ngx.say(decrypted == "hello")

------------------ 原始邮件 ------------------
发件人: "lhmwzy";<lh...@gmail.com>;
发送时间: 2016年3月3日(星期四) 中午1:55
收件人: "openresty"<openresty@googlegroups.com>;
主题: Re: [openresty] 请教：openresty是否支持RSA加密

https://github.com/doujiang24/lua-resty-rsa

这个行吗？

2016-03-03 11:48 GMT+08:00 牛德恒 <994...@qq.com>:
在openresty官方文档中没找到RSA加密相关库，请大神指点！

谢谢

--

--
class="HOEnZb">

--

uangxi

这个库很好，比自己写的好多了。

On Thursday, March 3, 2016 at 5:14:20 PM UTC+8, doujiang wrote:

Hello

因为 key 的格式不一样，目前还没有做兼容，请参考这个 [1]

1. https://github.com/doujiang24/lua-resty-rsa/issues/1

在 2016年3月3日下午3:46，牛德恒 <9948...@qq.com>写道：
非常感谢！
下载并使用网站上的公钥，私钥进行加解密，都运行正常，只是当公钥，密钥换成以下两个字符串时，运行错误：
使用公钥加密，提示："no start line"
使用私钥加密，提示："not inited for encrypt"
但这对公钥，私钥在php中使用openssl_public_encrypt和openssl_private_decrypt进行加密解密都能正常运行。
是不是resty-rsa.lua在使用公钥，私钥时需要进行特殊处理？请指点。

谢谢

测试代码：
local RSA_PUBLIC_KEY = [[
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3//sR2tXw0wrC2DySx8vNGlqt
3Y7ldU9+LBLI6e1KS5lfc5jlTGF7KBTSkCHBM3ouEHWqp1ZJ85iJe59aF5gIB2kl
Bd6h4wrbbHA2XE1sq21ykja/Gqx7/IRia3zQfxGv/qEkyGOx+XALVoOlZqDwh76o
2n1vP1D+tD3amHsK7QIDAQAB
-----END PUBLIC KEY-----
]]

local RSA_PRIV_KEY = [[
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
]]

local resty_rsa = require "resty.rsa"
--[[
local pub, err = resty_rsa:new({ public_key = RSA_PUBLIC_KEY })
if not pub then
ngx.say("new rsa err: ", err)
return
end
local encrypted, err = pub:encrypt("hello")
if not encrypted then
ngx.say("failed to encrypt: ", err)
return
end
ngx.say("encrypted:"..ngx.encode_base64(encrypted))
ngx.say("encrypted length: ", #encrypted)

local priv, err = resty_rsa:new({ private_key = RSA_PRIV_KEY })
if not priv then
ngx.say("new rsa err: ", err)
return
end
local decrypted = priv:decrypt(encrypted)
ngx.say("decrypted:"..decrypted)
ngx.say(decrypted == "hello")
]]

local pub, err = resty_rsa:new({ private_key = RSA_PRIV_KEY })
if not pub then
ngx.say("new rsa err: ", err)
return
end
local encrypted, err = pub:encrypt("hello")
if not encrypted then
ngx.say("failed to encrypt: ", err)
return
end
ngx.say("encrypted:"..ngx.encode_base64(encrypted))
ngx.say("encrypted length: ", #encrypted)

local priv, err = resty_rsa:new({ public_key = RSA_PUBLIC_KEY })
if not priv then
ngx.say("new rsa err: ", err)
return
end
local decrypted = priv:decrypt(encrypted)
ngx.say("decrypted:"..decrypted)
ngx.say(decrypted == "hello")

------------------ 原始邮件 ------------------
发件人: "lhmwzy";<lhm...@gmail.com>;
发送时间: 2016年3月3日(星期四) 中午1:55
收件人: "openresty"<open...@googlegroups.com>;
主题: Re: [openresty] 请教：openresty是否支持RSA加密

https://github.com/doujiang24/lua-resty-rsa

这个行吗？

2016-03-03 11:48 GMT+08:00 牛德恒 <9948...@qq.com>:
在openresty官方文档中没找到RSA加密相关库，请大神指点！

谢谢

--

--

--

yuansheng

> 在openresty官方文档中没找到RSA加密相关库，请大神指点！

可以效仿 resty-aes 的玩法，通过 FFI 完成加密库的调用，只要你知道标准 C 环境下如何调用就可以。

On Thu, Mar 3, 2016 at 1:55 PM, lhmwzy <lh...@gmail.com> wrote:

https://github.com/doujiang24/lua-resty-rsa

这个行吗？

2016-03-03 11:48 GMT+08:00 牛德恒 <994...@qq.com>:
在openresty官方文档中没找到RSA加密相关库，请大神指点！

谢谢

--

--

YuanSheng Wang

---------------------------------------

My Github: https://github.com/membphis

OpenResty lover ^_^