我們的想法是讓這個簡單的請求正常工作，然后發出更復雜的請求，例如上傳資產。下面的代碼從請求中返回錯誤。import (? ? "bytes"? ? "crypto/ecdsa"? ? "crypto/rand"? ? "crypto/sha256"? ? "crypto/x509"? ? "encoding/base64"? ? "encoding/pem"? ? "fmt"? ? "math/big"? ? "net/http"? ? "time"? ? //...)func main() {? ? fmt.Printf("\nprivate key:\n")? ? const privPEM = `-----BEGIN EC PRIVATE KEY-----MyProvateKey-----END EC PRIVATE KEY-----`? ? // https://golang.org/pkg/crypto/x509/#example_ParsePKIXPublicKey? ? privBlock, _ := pem.Decode([]byte(privPEM))? ? if privBlock == nil {? ? ? ? panic("failed to parse PEM block containing the public key")? ? }? ? requestPathStr := "/database/1/iCloud.<MyContainer>/development/public/users/discover"? ? var requestPath []byte? ? requestPath = []byte(requestPathStr)? ? fmt.Printf("requestPath: %s\n", requestPath)? ? requestBody := ""? ? var jsonStr = []byte(requestBody)? ? //? ? h := sha256.New()? ? h.Write([]byte(requestBody))? ? b := h.Sum(nil)? ? hashedBody := base64.StdEncoding.EncodeToString(b)? ? //? ? f := "2006-01-02T15:04:05Z"? ? requestDate := time.Now().UTC().Format(f)? ? fmt.Println(requestDate)? ? rawPayload := []byte(requestDate + ":" + hashedBody + ":" + requestPathStr)? ? r, s, err := pkSign(rawPayload, privBlock)? ? if err != nil {? ? ? ? fmt.Printf("signing hash error: %s\n", err)? ? }? ? fmt.Printf("r: %v\n", r)? ? fmt.Printf("s: %v\n", s)? ? fmt.Printf("\npublic key:\n")? ? const pubPEM = `-----BEGIN PUBLIC KEY-----我得到的錯誤如下：resp:&{503 服務不可用 503 HTTP/1.1 1 1 映射[Access-Control-Expose-Headers:[X-Apple-Request-UUID Via] 連接:[keep-alive] 內容長度:[0] 內容類型：[text/plain] 日期：[2019 年 6 月 24 日星期一 07:47:52 GMT] 重試后：[30] 服務器：[AppleHttpServer/70a91026] 通過：[icloudedge:mi01p00ic-zteu02110401:7401:19RC207:邁阿密] X-Apple-Cache:[false] X-Apple-Request-Uuid:[ddeb0fa3-ea16-40e9-a15b-c2e68cb5fe78]] {} 0 [] false false 地圖[] 0xc00015c000 0xc0000ce2c0}分別是：{}
1 回答
呼喚遠方
TA貢獻1856條經驗 獲得超11個贊
如果有人需要它，這里是一個可行的解決方案。
package main
import (
"bytes"
"crypto/ecdsa"
"crypto/rand"
"crypto/sha256"
"crypto/x509"
"encoding/asn1"
"encoding/base64"
"encoding/pem"
"fmt"
"io/ioutil"
"math/big"
"net/http"
"time"
)
const projectID = "<your ID>"
//
const authKeyID = "your ID"
const path = "https://api.apple-cloudkit.com"
const version = "1"
const container = "your container"
const environment = "development"
const database = "public"
const privPEM = `-----BEGIN EC PRIVATE KEY-----
your privste key
-----END EC PRIVATE KEY-----`
const pubPEM = `-----BEGIN PUBLIC KEY-----
your public key
-----END PUBLIC KEY-----`
type ecdsaSignature struct {
R, S *big.Int
}
func main() {
t0 := time.Now().UTC()
t1 := time.Now().UTC()
// fmt.Printf("\nprivate key:\n")
// https://golang.org/pkg/crypto/x509/#example_ParsePKIXPublicKey
privBlock, _ := pem.Decode([]byte(privPEM))
if privBlock == nil {
panic("failed to parse PEM block containing the public key")
}
private_key, err := x509.ParseECPrivateKey(privBlock.Bytes)
if err != nil {
panic("failed to parse PEM block containing the public key")
}
pubBlock, _ := pem.Decode([]byte(pubPEM))
if pubBlock == nil {
panic("failed to parse PEM block containing the public key")
}
var public_key *ecdsa.PublicKey
public_k, err := x509.ParsePKIXPublicKey(pubBlock.Bytes)
if err != nil {
panic("failed to parse PEM block containing the public key")
}
switch public_k1 := public_k.(type) {
case *ecdsa.PublicKey:
public_key = public_k1
default:
//return false
}
//////////
// Config
//////////
requestPath := "/database/" +
version + "/" +
container + "/" +
environment + "/" +
database + "/" +
"records/query"
requestBody := `{"query": {"recordType": "<your record type"}}`
f := "2006-01-02T15:04:05Z"
requestDate := time.Now().UTC().Format(f)
h := sha256.New()
h.Write([]byte(requestBody))
b := h.Sum(nil)
hashedBody := base64.StdEncoding.EncodeToString(b)
rawPayload := requestDate + ":" + hashedBody + ":" + requestPath
signedSignature, err := SignMessage(private_key, []byte(rawPayload))
if err != nil {
fmt.Printf("SignMessage error: %s\n", err.Error())
}
verify := VerifyMessage(public_key, []byte(rawPayload), signedSignature)
fmt.Printf("signature verification result: %t\n", verify)
requestSignature := base64.StdEncoding.EncodeToString(signedSignature)
url := path + requestPath
req, err := http.NewRequest("POST", url, bytes.NewBuffer([]byte(requestBody)))
req.Header.Add("content-type", "text/plain")
req.Header.Add("X-Apple-CloudKit-Request-KeyID", authKeyID)
req.Header.Add("X-Apple-CloudKit-Request-ISO8601Date", requestDate)
req.Header.Add("X-Apple-CloudKit-Request-SignatureV1", requestSignature)
resp, err := http.DefaultClient.Do(req)
if err != nil {
fmt.Printf("\nresp.err:%v\n", err.Error())
}
defer resp.Body.Close()
rbody, err := ioutil.ReadAll(resp.Body)
if err != nil {
fmt.Printf("\nioutil.ReadAll.err:%v\n", err.Error())
}
fmt.Printf("\nrbody:%s\n", rbody)
curl := "curl -X POST -H \"content-type: text/plain\"" + " " +
"-H X-Apple-CloudKit-Request-KeyID:" + authKeyID + " " +
"-H X-Apple-CloudKit-Request-ISO8601Date:" + requestDate + " " +
"-H X-Apple-CloudKit-Request-SignatureV1:" + base64.StdEncoding.EncodeToString(signedSignature) + " " +
" -d " + "'" + requestBody + "'" + " " +
url
fmt.Printf("\n%s\n", curl)
}
func SignMessage(priv *ecdsa.PrivateKey, message []byte) ([]byte, error) {
hashed := sha256.Sum256(message)
r, s, err := ecdsa.Sign(rand.Reader, priv, hashed[:])
if err != nil {
return nil, err
}
return asn1.Marshal(ecdsaSignature{r, s})
}
func VerifyMessage(pub *ecdsa.PublicKey, message []byte, signature []byte) bool {
var rs ecdsaSignature
if _, err := asn1.Unmarshal(signature, &rs); err != nil {
return false
}
hashed := sha256.Sum256(message)
return ecdsa.Verify(pub, hashed[:], rs.R, rs.S)
}
- 1 回答
- 0 關注
- 122 瀏覽
添加回答
舉報
0/150
提交
取消