没有 ActiveX/Java 小程序的浏览器中的数字签名
是否有任何解决方案/技术可以在浏览器中对文件(某些其他数据)进行数字签名,而无需使用 ActiveX 对象或 Java 小程序?
Is there any solutions / techniques to digitally sign file (of some other data) in browser without usage of ActiveX objects or Java applets?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
还需要其他东西,例如 Flash。虽然用纯 JavaScript 编写一些数字签名代码不会是一个大问题(尽管需要大量工作并且工作速度会非常慢),但使用纯 JavaScript 无法访问存储在本地系统上的证书。其中一个选项可能是创建一个现有对象(例如 CAPICOM 模块),但是 (a) 这可能仅限于 IE 和 Windows,并且 (b) CAPICOM 本身已被 Microsoft 弃用。
如果您的问题是需要写入此类对象,那么我们的 Secureblackbox 产品版本 9(即现已公开测试版)包括用于执行此类分布式签名的组件和客户端模块(Java 小程序、ActiveX 和 Flash 小程序)。
如果您只是想避免使用任何外部模块,那么恐怕您就不走运了。我还希望我们可以有一些纯 JavaScript 的东西(这也将简化和改进我们的产品),但问题在于访问客户端上的证书。
Something else is needed, such as Flash. While writing some digital signing code in pure JavaScript would not be a huge problem (though would require quite a lot of work and would work painfully slow), access to the certificate stored on local system is not possible with pure JavaScript. One of the options would probably be create an existing object (such as CAPICOM module), but (a) this is probably limited to IE and Windows, and (b) CAPICOM itself has been deprecated by Microsoft.
If your problem is that such objects need to be written, then our Secureblackbox product in version 9 (which is in public beta now) includes components and client modules (Java applet, ActiveX and Flash applet) to perform such distributed signing.
If you just want to avoid use of any external modules, then I am afraid you are out of luck. I also wish we could have something in pure JavaScript (this would simplify and improve our product as well), but the problem is with accessing the certificate on the client.
这个项目应该会让你充满希望。现在剩下的唯一事情就是弄清楚如何从浏览器证书存储中获取证书。 PKI 就像一部宝莱坞大片——不间断的动作、情感、戏剧、喜剧,最后完全浪费时间和金钱,但我们去看下一部,因为它似乎比上一部更好。
this project should get your hopes up. now the only thing left is to figure out how to get the certificate from the browser certificate store. PKI is like a bollywood blockbuster -non-stop action, emotion, drama, comedy and at the end a complete waste of time and money, but we go to the next one because it is seems better than the last.