{"action":"created","issue":{"url":"https://api.github.com/repos/guanzhi/GmSSL/issues/572","repository_url":"https://api.github.com/repos/guanzhi/GmSSL","labels_url":"https://api.github.com/repos/guanzhi/GmSSL/issues/572/labels{/name}","comments_url":"https://api.github.com/repos/guanzhi/GmSSL/issues/572/comments","events_url":"https://api.github.com/repos/guanzhi/GmSSL/issues/572/events","html_url":"https://github.com/guanzhi/GmSSL/issues/572","id":354207943,"node_id":"MDU6SXNzdWUzNTQyMDc5NDM=","number":572,"title":"360国密浏览器测试问题","user":{"login":"suxiaoyv","id":17041248,"node_id":"MDQ6VXNlcjE3MDQxMjQ4","avatar_url":"https://avatars0.githubusercontent.com/u/17041248?v=4","gravatar_id":"","url":"https://api.github.com/users/suxiaoyv","html_url":"https://github.com/suxiaoyv","followers_url":"https://api.github.com/users/suxiaoyv/followers","following_url":"https://api.github.com/users/suxiaoyv/following{/other_user}","gists_url":"https://api.github.com/users/suxiaoyv/gists{/gist_id}","starred_url":"https://api.github.com/users/suxiaoyv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/suxiaoyv/subscriptions","organizations_url":"https://api.github.com/users/suxiaoyv/orgs","repos_url":"https://api.github.com/users/suxiaoyv/repos","events_url":"https://api.github.com/users/suxiaoyv/events{/privacy}","received_events_url":"https://api.github.com/users/suxiaoyv/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-08-27T07:20:31Z","updated_at":"2018-08-29T09:53:25Z","closed_at":null,"author_association":"NONE","body":"#### 认证方式及加密套件\r\n1. 单向认证\r\n2. 加密套件为 ECC_SM4_SM3 0xe013\r\n\r\n#### 服务端：\r\n\r\n1. 自实现国密SSL服务端，360国密浏览器作为客户端联调，服务端发完 Server Hello、Certificate、Server Key Exchange、Server Hello Done消息后，客户端直接发送 TCP REST 包断开链接。\r\n2. Certificate 双证书发送顺序为：签名证书、加密证书、CA证书。（CA证书不发也试过）\r\n3. Server Key Exchange 源数据为 client random + server random + 加密证书 ASN.1编码（3字节证书长度+证书encode），然后使用 ”签名证书“ 私钥SM2签名 （ASN.1编码 R,S）\r\n\r\n#### 360国密浏览器客户端配置：\r\n\r\n1. C:\\Users\\xxx\\AppData\\Roaming\\360se6\\Application\\User Data\\Default\\ctl\\ctl.dat 文件中配置 （签名证书、加密证书、CA证书） PEM 格式明文。\r\n\r\n#### 补充说明\r\n\r\n1.  自实现国密SSL客户端，已经和中国银行 https://ebssec.boc.cn/boc15/login.html 通信成功，牵涉到 server key exchange 的 verify ，源数据也是通过 client random + server random + 加密证书 ASN.1编码（3字节证书长度+证书encode）计算的。\r\n2. 360国密浏览器 和 中国银行 https://ebssec.boc.cn/boc15/login.html 是可以通信成功的。\r\n3. 自实现国密SSL客户端和自实现国密SSL服务端是可以握手成功的。\r\n4. 自实现国密SSL服务端和速龙浏览器是可以握手成功的。\r\n\r\n#### 各位有谁和360联调过，这是什么问题？？？"},"comment":{"url":"https://api.github.com/repos/guanzhi/GmSSL/issues/comments/416895322","html_url":"https://github.com/guanzhi/GmSSL/issues/572#issuecomment-416895322","issue_url":"https://api.github.com/repos/guanzhi/GmSSL/issues/572","id":416895322,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNjg5NTMyMg==","user":{"login":"suxiaoyv","id":17041248,"node_id":"MDQ6VXNlcjE3MDQxMjQ4","avatar_url":"https://avatars0.githubusercontent.com/u/17041248?v=4","gravatar_id":"","url":"https://api.github.com/users/suxiaoyv","html_url":"https://github.com/suxiaoyv","followers_url":"https://api.github.com/users/suxiaoyv/followers","following_url":"https://api.github.com/users/suxiaoyv/following{/other_user}","gists_url":"https://api.github.com/users/suxiaoyv/gists{/gist_id}","starred_url":"https://api.github.com/users/suxiaoyv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/suxiaoyv/subscriptions","organizations_url":"https://api.github.com/users/suxiaoyv/orgs","repos_url":"https://api.github.com/users/suxiaoyv/repos","events_url":"https://api.github.com/users/suxiaoyv/events{/privacy}","received_events_url":"https://api.github.com/users/suxiaoyv/received_events","type":"User","site_admin":false},"created_at":"2018-08-29T09:53:25Z","updated_at":"2018-08-29T09:53:25Z","author_association":"NONE","body":"@gggin 感谢回复，OCSP 不太了解。。。"}}
{"actor":{"display_login":"suxiaoyv"}}