Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SM2证书的AlgorithmIdentifier与标准定义不一致 #477

Closed
lirc571 opened this issue Aug 17, 2023 · 4 comments
Closed

SM2证书的AlgorithmIdentifier与标准定义不一致 #477

lirc571 opened this issue Aug 17, 2023 · 4 comments

Comments

@lirc571
Copy link

lirc571 commented Aug 17, 2023

GMT 0015-2012中表C.3定义AlgorithmIdentifier.algorithm为SM2算法的OID(1.2.156.10197.1.301)，OpenSSL也是这样实现的。铜锁里却设成了标准EC公钥的ecPublicKey(1.2.840.10045.2.1)，导致铜锁和OpenSSL生成的证书和CSR不兼容。是否应该符合标准？
@zzl360
Copy link

zzl360 commented Aug 17, 2023

参考0015附录D.2以及0010附录A.2。openssl的实现并不一定就符合标准

@lirc571
Copy link
Author

lirc571 commented Aug 17, 2023 •
edited
Loading

参考0015附录D.2以及0010附录A.2。openssl的实现并不一定就符合标准

谢谢回复。那这两种都可以吗？应该两种都支持？现在主流的支持国密的应用一般用的哪种实现呢 😦

@zzl360
Copy link

zzl360 commented Aug 17, 2023

目前国内CA包括rootca在内，签发的证书用的都是铜锁的实现方式（也是openssl1.x版本的实现方式，openssl3.0才把这块给改了）

@lirc571
Copy link
Author

lirc571 commented Aug 17, 2023

目前国内CA包括rootca在内，签发的证书用的都是铜锁的实现方式（也是openssl1.x版本的实现方式，openssl3.0才把这块给改了）

了解了，谢谢！

@lirc571 lirc571 closed this as completed Aug 17, 2023
@emmansun emmansun mentioned this issue Jan 11, 2024
Closed
@CherryRum CherryRum mentioned this issue Jul 3, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@zzl360 @lirc571