Node.js中的肥皂请求，带有两个证券：TLS和WSS

Question

我正在尝试创建SOAP客户端并将请求发送到外部服务器。这是代码：

const options = {
  endpoint: endpoint,
  pfx: fs.readFileSync(
    "[cert-tls.p12]"
  ),
  passphrase: "[password]",
};
soap.createClient(url, options, function (err, client) {
  if (err) {
    console.log("Error Occurred!!");
    console.log(err);
  } else {
    var WssSecurity = new soap.WSSecurityCert(
      fs.readFileSync(
        "[privateKey.pem]"
      ),
      fs.readFileSync(
        "[publickey.pem]"
      ),
      "[password]"
    );
    client.setSecurity(WssSecurity);
    client.ObslugaRecepty.ObslugaReceptyWS.zapisPakietuRecept(
      recepta_podpisana,
      function (err, result) {
        if (err) {
          console.log("Error Occurred!!");
          console.log(err);
        }
      }
    );
  }
});

我需要添加两个不同的证券以要求：SSL安全性和WS安全性。 如果我要运行我在这里提供的代码，我会遇到错误：

Error: write EPROTO 6512:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:c:\ws\deps\openssl\openssl\ssl\record\rec_layer_s3.c:1546:SSL alert number 40

因此，第一件事是，我的客户不应用选项中的PFX CERT。要解决这个问题，我需要在soap.createclient（）{}中添加它：

    var tlsSecurity = new soap.ClientSSLSecurityPFX(
      fs.readFileSync(
        "[cert-tls.p12]"
      ),
      "[password]"
    );
    client.setSecurity(tlsSecurity);

在添加client.setsecurity（tlssecurity）之前看到这些值

      transitional: [Object],
      pfx: <Buffer 30 82 18 51 02 01 03 30 82 18 0b 06 09 2a 86 48 86 f7 0d 01 07 01 a0 82 17 fc 04 82 17 f8 30 82 17 f4 30 82 05 b9 06 09 2a 86 48 86 f7 0d 01 07 01 a0 ... 6179 more bytes>,
      passphrase: '[password]'
    },
    request: ClientRequest {
      _events: [Object: null prototype],
      _eventsCount: 7,

我 WSSECURITY和新错误是：

Error: wsse:InvalidSecurity: Missing wsse:Security header in request

是否有可能使用client.setsecurity（）;有两个不同的证书？ 或不使用客户端的情况下正确提供TLS证书。Setsecurity（TLSSECURITY）还是对WSSECURITY做某事？ 你有什么想法吗？

Answer 1

我找到了解决问题的解决方案。这是一个带有类的安全性

"use strict";
exports.__esModule = true;
var SecurityStack = /** @class */ (function () {
  function SecurityStack() {
    var security = [];
    for (var _i = 0; _i < arguments.length; _i++) {
      security[_i] = arguments[_i];
    }
    this.stack = security;
    var hasPostProcessMethod = this.stack.some(function (s) {
      return s["postProcess"];
    });
    var hasToXmlMethod = this.stack.some(function (s) {
      return s["toXML"];
    });
    if (!hasPostProcessMethod) this.postProcess = undefined;
  }
  SecurityStack.prototype.addOptions = function (options) {
    this.stack.forEach(function (security) {
      if (security["addOptions"]) security.addOptions(options);
    });
  };
  SecurityStack.prototype.toXML = function () {
    var result = "";
    this.stack.forEach(function (security) {
      if (security["toXML"]) result += security.toXML();
    });
    return result;
  };
  SecurityStack.prototype.addHeaders = function (headers) {
    this.stack.forEach(function (security) {
      if (security["addHeaders"]) security.addHeaders(headers);
    });
  };
  SecurityStack.prototype.postProcess = function (xml, envelopeKey) {
    var result = xml;
    this.stack.forEach(function (security) {
      if (security["postProcess"])
        result = security.postProcess(xml, envelopeKey);
    });
    return result;
  };
  return SecurityStack;
})();

module.exports = SecurityStack;

。

const securityStack = new SecurityStack(tlsSecurity, WssSecurity);
client.setSecurity(securityStack);