Update readme.md

2023-12-11 05:55:58 +00:00
parent e2640f3cfd
commit 3ebb3cc429
1 changed files with 104 additions and 0 deletions
--- a/readme.md
+++ b/readme.md
@@ -4,4 +4,108 @@

 ```shell script
 apt install opensc-pkcs11 libpam-pkcs11 openssl opensc make build-essential libpkcs11-helper1 libpkcs11-helper1-dev libengine-gost-openssl1.1 -y
+```
+
+```shell script
+apt install composer php7.4 php7.4-cli php7.4-curl php7.4-fpm php7.4-gd php7.4-json php7.4-mbstring php7.4-mysql php7.4-snmp php7.4-xml php7.4-zip -y
+```
+
+```shell script
+wget https://dist.opendnssec.org/source/softhsm-2.3.0.tar.gz
+tar -zxvf softhsm-2.3.0.tar.gz
+cd softhsm-2.3.0
+./configure
+make
+make install
+```
+
+```shell script
+git clone https://github.com/gamringer/php-pkcs11
+cd php-pkcs11
+phpize
+```
+
+```shell script
+make
+make install
+```
+
+2. We set up our config files according to what we will use and what we need
+
+```shell script
+vi /etc/softhsm/softhsm.conf
+vi /etc/softhsm/softhsm2.conf
+vi /etc/opensc/opensc-pkcs11.conf
+vi /etc/opensc/opensc.conf
+vi /etc/opensc/opensc-pkcs11.conf
+```
+
+3. We generate a certificate and create a virtual slot and add a token
+
+```shell script
+openssl req -new -x509 -subj "/CN=MyCertTEST" -engine pkcs11 -keyform engine -key "pkcs11object=mykey1;pin-value=mysecret1" -outform der -out mycert.der
+```
+
+```shell script
+pkcs11-tool --module /usr/lib/softhsm/libsofthsm2.so -l -k --key-type rsa:2048 --id 4142 --label mykey1 --pin mysecret1
+```
+
+```shell script
+softhsm2-util --init-token --slot 0 --label "Astra WorldOfTV" --pin 1234 --so-pin 1234
+```
+
+We check if the virtual slot is created
+
+```
+➜ ~ pkcs11-tool --module /usr/lib/softhsm/libsofthsm2.so --list-slots
+Available slots:
+Slot 0 (0x45a3cef9): SoftHSM slot ID 0x45a3cef9
+token label : Astra WorldofTV
+token manufacturer : SoftHSM project
+token model : SoftHSM v2
+token flags : login required, rng, token initialized, PIN initialized, other flags=0x20
+hardware version : 2.2
+firmware version : 2.2
+serial num : c604edf445a3cef9
+pin min/max : 4/255
+Slot 1 (0x1): SoftHSM slot ID 0x1
+```
+
+4. The script that will check the licenses
+
+```
+<?php
+header('Content-Type: text/plain; charset=utf-8');
+header('Connection: keep-alive');
+$g = '+400';
+$today = date("D, j M Y H:i:s",strtotime($g));  
+$today = str_replace("AM","",str_replace("","",str_replace('','',$today)));
+$test = " GMT";
+header('Date: '.$today.''.$test.'');
+
+
+$module = "/usr/lib/softhsm/libsofthsm2.so"; 
+$slot = "0"; 
+$pin = "1234"; 
+$message = $_GET['media']; 
+ 
+$pkcs11 = new \pkcs11($module); 
+$pkcs11->login($slot, $pin); 
+$privateKey = $pkcs11->findPrivateKey("CN=My Certificate"); 
+ 
+$signature = $pkcs11->sign($privateKey, $message); 
+//echo "Signature: " . bin2hex($signature) . "\n"; 
+
+sleep(1);
+  
+     echo '{
+  "email": "test@gmail.com()",
+  "message": "OK",
+  "id": "e49d90",
+  "type": 4,
+  "epass": "$key",
+  "expire": 1680566400
+ }';
+
+?>
 ```