devbox
不正经
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

Oracle 带Key的hmac_md5加密方法，调用Java实现_java hmac-md5

作者：不正经 | 2024-04-18 19:30:53

赞

踩

java hmac-md5

最近有个外围系统接口需要，对方要求报文经过带Key的hmac_md5加密，经过网上的查阅，找到Oracle提供标准的API，如下。

  1. FUNCTION MD5(PASSWD IN VARCHAR2) RETURN VARCHAR2 IS
  2.     --PASSWD 需要加密的字符
  3.     --@REMARK:MD5加密
  4.     retval varchar2(32);
  5. BEGIN
  6.     retval := UTL_RAW.CAST_TO_RAW(DBMS_OBFUSCATION_TOOLKIT.MD5(INPUT_STRING => PASSWD));
  7.     RETURN retval;
  8. END;

但是这个不满足对方系统要求，对方要求带Key加密，所以没有办法只能找他们提供java源码进行使用。对方提供的源码程序如下：

  1. package com.xxxxx.xxxxx.open.interfaces.utils;
  2.  
  3. import com.qiniu.common.Constants;
  4.  
  5. import javax.crypto.Mac;
  6. import javax.crypto.SecretKey;
  7. import javax.crypto.spec.SecretKeySpec;
  8. import java.io.IOException;
  9. import java.security.GeneralSecurityException;
  10. import java.security.MessageDigest;
  11. import java.util.Arrays;
  12. import java.util.HashMap;
  13. import java.util.Map;
  14.  
  15. public class ZrSignUtils {
  16.  
  17.     public static String signTopRequest(Map<String, String> params, String secret, String signMethod, String body) throws Exception {
  18.         // 第一步：检查参数是否已经排序
  19.         String[] keys = params.keySet().toArray(new String[0]);
  20.         Arrays.sort(keys);
  21.  
  22.         // 第二步：把所有参数名和参数值串在一起
  23.         StringBuilder query = new StringBuilder();
  24.         if ("hmac_md5".equalsIgnoreCase(signMethod)) {
  25.             query.append(secret);
  26.         }
  27.         for (String key : keys) {
  28.             String value = params.get(key);
  29.             if (areNotEmpty(new String[]{key, value})) {
  30.                 query.append(key).append(value);
  31.             }
  32.  
  33.         }
  34.         // 第三步：把请求主体拼接在参数后面
  35.         if (body != null) {
  36.             query.append(body);
  37.         }
  38.  
  39.         // 第四步：使用MD5/HMAC加密
  40.         byte[] bytes;
  41.         if ("hmac_md5".equalsIgnoreCase(signMethod)) {
  42.             bytes = encryptHMAC(query.toString(), secret);
  43.         } else {
  44.             query.append(body).append(secret);
  45.             bytes = encryptMD5(query.toString());
  46.         }
  47.  
  48.         // 第五步：把二进制转化为大写的十六进制(正确签名应该为32大写字符串，此方法需要时使用)
  49.         return byte2hex(bytes);
  50.     }
  51.  
  52.     public static boolean areNotEmpty(String[] values) {
  53.         boolean result = true;
  54.         if ((values == null) || (values.length == 0))
  55.             result = false;
  56.         else {
  57.             for (String value : values) {
  58.                 result &= !isEmpty(value);
  59.             }
  60.         }
  61.         return result;
  62.     }
  63.     public static boolean isEmpty(String value) {
  64.         int strLen;
  65.         if ((value == null) || ((strLen = value.length()) == 0))
  66.             return true;
  67.         for (int i = 0; i < strLen; i++) {
  68.             if (!Character.isWhitespace(value.charAt(i))) {
  69.                 return false;
  70.             }
  71.         }
  72.         return true;
  73.     }
  74.     public static byte[] encryptHMAC(String data, String secret) throws IOException {
  75.         byte[] bytes = null;
  76.         try {
  77.             SecretKey secretKey = new SecretKeySpec(secret.getBytes(Constants.UTF_8), "HmacMD5");
  78.             Mac mac = Mac.getInstance(secretKey.getAlgorithm());
  79.             mac.init(secretKey);
  80.             bytes = mac.doFinal(data.getBytes(Constants.UTF_8));
  81.         } catch (GeneralSecurityException gse) {
  82.             throw new IOException(gse.toString());
  83.         }
  84.         return bytes;
  85.     }
  86.  
  87.     public static byte[] encryptMD5(String data) throws Exception {
  88.         MessageDigest md = MessageDigest.getInstance("MD5");
  89.  
  90.         byte[] bytes = md.digest(data.getBytes(Constants.UTF_8));
  91.         return bytes;
  92. //        return encryptMD5(data.getBytes(Constants.CHARSET_UTF8));
  93.     }
  94.  
  95.     public static String byte2hex(byte[] bytes) {
  96.         StringBuilder sign = new StringBuilder();
  97.         for (int i = 0; i < bytes.length; i++) {
  98.             String hex = Integer.toHexString(bytes[i] & 0xFF);
  99.             if (hex.length() == 1) {
  100.                 sign.append("0");
  101.             }
  102.             sign.append(hex.toUpperCase());
  103.         }
  104.         return sign.toString();
  105.     }
  106.  
  107.     public static void main(String[] arg){
  108.         Map<String,String> map=new HashMap<>();
  109.         map.put("method","taobao.qimen.deliveryorder.confirm");
  110.         map.put("timestamp","2023-01-07 07:44:00");
  111.         map.put("format","json");
  112.         map.put("app_key","NRP_YST_KEY_20230101_TEST");
  113.         map.put("sign_method","hmac_md5");
  114.         try {
  115.             String a = signTopRequest(map,"BS@8p&xOZ6eY=BETA","hmac_md5","{\n" +
  116.                     "    \"request\":{\n" +
  117.                     "        \"deliveryOrder\":{\n" +
  118.                     "            \"deliveryOrderCode\":\"T1234\",\n" +
  119.                     "            \"deliveryOrderId\":\"C1234\",\n" +
  120.                     "            \"warehouseCode\":\"W1234\",\n" +
  121.                     "            \"orderType\":\"JYCK\",\n" +
  122.                     "            \"status\":\"NEW\",\n" +
  123.                     "            \"outBizCode\":\"WB1234\",\n" +
  124.                     "            \"confirmType\":\"0\",\n" +
  125.                     "            \"orderConfirmTime\":\"2016-09-08 12:00:00\",\n" +
  126.                     "            \"operatorCode\":\"O23\",\n" +
  127.                     "            \"operatorName\":\"老王\",\n" +
  128.                     "            \"operateTime\":\"2016-09-09 12:00:00\"\n" +
  129.                     "        },\n" +
  130.                     "        \"packages\":{\n" +
  131.                     "            \"package\":[\n" +
  132.                     "                {\n" +
  133.                     "                    \"logisticsCode\":\"SF\",\n" +
  134.                     "                    \"logisticsName\":\"顺丰\",\n" +
  135.                     "                    \"expressCode\":\"Y1234\"\n" +
  136.                     "                }\n" +
  137.                     "            ]\n" +
  138.                     "        },\n" +
  139.                     "        \"orderLines\":{\n" +
  140.                     "            \"orderLine\":[\n" +
  141.                     "                {\n" +
  142.                     "                    \"orderLineNo\":\"1\",\n" +
  143.                     "                    \"orderSourceCode\":\"P1234\",\n" +
  144.                     "                    \"subSourceCode\":\"J1234\",\n" +
  145.                     "                    \"itemCode\":\"I1234\",\n" +
  146.                     "                    \"itemId\":\"WI1234\",\n" +
  147.                     "                    \"inventoryType\":\"ZP\",\n" +
  148.                     "                    \"ownerCode\":\"OW1234\",\n" +
  149.                     "                    \"itemName\":\"淘公仔\",\n" +
  150.                     "                    \"planQty\":\"12\",\n" +
  151.                     "                    \"actualQty\":\"12\",\n" +
  152.                     "                    \"batchs\":{\n" +
  153.                     "                        \"batch\":[\n" +
  154.                     "                            {\n" +
  155.                     "                                \"batchCode\":\"PC1234\",\n" +
  156.                     "                                \"productDate\":\"2016-09-09\",\n" +
  157.                     "                                \"expireDate\":\"2017-09-09\",\n" +
  158.                     "                                \"produceCode\":\"PH1234\",\n" +
  159.                     "                                \"inventoryType\":\"ZP\",\n" +
  160.                     "                                \"actualQty\":\"12\"\n" +
  161.                     "                            }\n" +
  162.                     "                        ]\n" +
  163.                     "                    }\n" +
  164.                     "                },\n" +
  165.                     "                {\n" +
  166.                     "                    \"orderLineNo\":\"1\",\n" +
  167.                     "                    \"orderSourceCode\":\"P1234\",\n" +
  168.                     "                    \"subSourceCode\":\"J1234\",\n" +
  169.                     "                    \"itemCode\":\"I1234\",\n" +
  170.                     "                    \"itemId\":\"WI1234\",\n" +
  171.                     "                    \"inventoryType\":\"ZP\",\n" +
  172.                     "                    \"ownerCode\":\"OW1234\",\n" +
  173.                     "                    \"itemName\":\"淘公仔\",\n" +
  174.                     "                    \"planQty\":\"12\",\n" +
  175.                     "                    \"actualQty\":\"12\",\n" +
  176.                     "                    \"batchs\":{\n" +
  177.                     "                        \"batch\":[\n" +
  178.                     "                            {\n" +
  179.                     "                                \"batchCode\":\"PC1234\",\n" +
  180.                     "                                \"productDate\":\"2016-09-09\",\n" +
  181.                     "                                \"expireDate\":\"2017-09-09\",\n" +
  182.                     "                                \"produceCode\":\"PH1234\",\n" +
  183.                     "                                \"inventoryType\":\"ZP\",\n" +
  184.                     "                                \"actualQty\":\"12\"\n" +
  185.                     "                            }\n" +
  186.                     "                        ]\n" +
  187.                     "                    }\n" +
  188.                     "                }\n" +
  189.                     "            ]\n" +
  190.                     "        }\n" +
  191.                     "    }\n" +
  192.                     "}");
  193.             System.out.println("==========================================");
  194.             System.out.println(a);
  195.         } catch (Exception e) {
  196.             e.printStackTrace();
  197.         }
  198.     }
  199. }

有了对方的java源码，我们可以在Sql Developer中直接编写java程序并编译。具体的编写方法与使用方法请参考其他博主的案例，例如：Oracle数据库中使用java代码（Java Sources）_oracle中javasource_Once_Pluto的博客-CSDN博客

我们这里经过对上述java代码的处理，在Sql Developer改写后，代码如下：

  1. create or replace and compile java source named zrsignutils as
  2. import java.nio.charset.Charset;
  3. import javax.crypto.Mac;
  4. import javax.crypto.SecretKey;
  5. import javax.crypto.spec.SecretKeySpec;
  6. import java.io.IOException;
  7. import java.security.GeneralSecurityException;
  8. import java.security.MessageDigest;
  9. import java.util.Arrays;
  10. import java.util.HashMap;
  11. import java.util.Map;
  12.  
  13. public class ZrSignUtils {
  14.  
  15.     public static String signTopRequest( String secret, String signMethod, String body) throws Exception {
  16.  
  17.       StringBuilder query = new StringBuilder();
  18.       byte[] bytes;
  19.       if ("hmac_md5".equalsIgnoreCase(signMethod)) {
  20.           query.append(body);
  21.           bytes = encryptHMAC(query.toString(), secret);
  22.       } else {
  23.           query.append(body).append(secret);
  24.           bytes = encryptMD5(query.toString());
  25.       }
  26.  
  27.  
  28.       return byte2hex(bytes);
  29.     }
  30.     public static boolean areNotEmpty(String[] values) {
  31.         boolean result = true;
  32.         if ((values == null) || (values.length == 0))
  33.             result = false;
  34.         else {
  35.             for (String value : values) {
  36.                 result &= !isEmpty(value);
  37.             }
  38.         }
  39.         return result;
  40.     }
  41.     public static boolean isEmpty(String value) {
  42.         int strLen;
  43.         if ((value == null) || ((strLen = value.length()) == 0))
  44.             return true;
  45.         for (int i = 0; i < strLen; i++) {
  46.             if (!Character.isWhitespace(value.charAt(i))) {
  47.                 return false;
  48.             }
  49.         }
  50.         return true;
  51.     }
  52.     public static byte[] encryptHMAC(String data, String secret) throws IOException {
  53.         byte[] bytes = null;
  54.         try {
  55.             SecretKey secretKey = new SecretKeySpec(secret.getBytes(Charset.forName("UTF-8")), "HmacMD5");
  56.             Mac mac = Mac.getInstance(secretKey.getAlgorithm());
  57.             mac.init(secretKey);
  58.             bytes = mac.doFinal(data.getBytes(Charset.forName("UTF-8")));
  59.         } catch (GeneralSecurityException gse) {
  60.             throw new IOException(gse.toString());
  61.         }
  62.         return bytes;
  63.     }
  64.    public static byte[] encryptMD5(String data) throws Exception {
  65.         MessageDigest md = MessageDigest.getInstance("MD5");
  66.  
  67.         byte[] bytes = md.digest(data.getBytes(Charset.forName("UTF-8")));
  68.         return bytes;
  69.     }
  70.  
  71.     public static String byte2hex(byte[] bytes) {
  72.         StringBuilder sign = new StringBuilder();
  73.         for (int i = 0; i < bytes.length; i++) {
  74.             String hex = Integer.toHexString(bytes[i] & 0xFF);
  75.             if (hex.length() == 1) {
  76.                 sign.append("0");
  77.             }
  78.             sign.append(hex.toUpperCase());
  79.         }
  80.         return sign.toString();
  81.     }
  82.  
  83.  
  84. }

上述代码可以直接在Sql Developer编译，如果编译成功，可以再数据查对象是查到有对应的JAVA Resource和JAVA CLASS代码。如果编译有错误，编译的时候可能看不到，但是如果你通过这种查询方式，可以看到JAVA Resource有小红叉，你打开就能看到编译报的错误，并定位问题所在了。

 最后，我们写一个Function来调用它即可，然后package里面直接再调这个Fuction即可实现加密啦：

  1. FUNCTION MD5_N2(secret     in varchar2,
  2.                   signMethod in varchar2,
  3.                   body       in varchar2) RETURN VARCHAR2 IS
  4.     LANGUAGE JAVA NAME ' ZrSignUtils.signTopRequest(java.lang.String,java.lang.String,java.lang.String) return java.lang.String ';

我们验证下加密程序，在这个网址可以获取加密：

MD5/HMAC-MD5加密工具

获得结果：

代码调用过程：

  1. declare
  2.   secret     varchar2(1500);
  3.   signmethod varchar2(1500);
  4.   body       varchar2(4000);
  5.   result     varchar2(150);
  6. begin
  7.   secret     := '34014E57072C7AA3D57E8A30038B1AA1';
  8.   signmethod := 'hmac_md5';
  9.   body       := 'MAKE A SIMPLE TEST';
  10.   result     := cux_ww_person_pkg2.md5_n2(secret     => secret,
  11.                                           signmethod => signmethod,
  12.                                           body       => body);
  13.  
  14.   dbms_output.put_line(result);
  15. end;

 代码调用结果：

声明：本文内容由网友自发贡献，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：【wpsshop博客】
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号