SMIME::JA - S/MIMEの署名、検証、暗号化、復号

NAME æ¦è¦ èª¬æ ã¨ã¯ã¹ãã¼ã ã¡ã½ãã é¢æ° èè

NAME

Crypt::SMIME::JA − S/MIMEã®ç½²åãæ¤è¨¼ãæå·åãå¾©å·

use Crypt::SMIME;
my $plain = <<'EOF';
From: [email protected]
To: [email protected]
Subject: Crypt::SMIME test
This is a test mail. Please ignore...
EOF
my $smime = Crypt::SMIME−>new();
$smime−>setPrivateKey($privkey, $crt);
# $smime−>setPublicKey([$icacert]); # if need be.
my $signed = $smime−>sign($plain);
print $signed;

èª¬æ

S/MIMEã®ç½²åãæ¤è¨¼ãæå·åãå¾©å·ãè¡ãã¯ã©ã¹ã libcrypto (<http://www.openssl.org>) ãå¿è¦ã

ã¨ã¯ã¹ãã¼ã

"check()" ãåç§ã

"FORMAT_SMIME"
"FORMAT_ASN1"
"FORMAT_PEM"

"extractCertificates()" ãåç§ã

":constants"

ä¸è¨ã®ãã®å¨ã¦ãã¨ã¯ã¹ãã¼ãããã

ã¡ã½ãã

new()

my $smime = Crypt::SMIME−>new();

å¼æ°ç¡ã

setPrivateKey()

$smime−>setPrivateKey($key, $crt);
$smime−>setPrivateKey($key, $crt, $password);

setPrivateKeyPkcs12()

$smime−>setPrivateKeyPkcs12($key, $pkcs12);
$smime−>setPrivateKeyPkcs12($key, $pkcs12, $password);

setPublicKey()

$smime−>setPublicKey($crt);
$smime−>setPublicKey([$crt1, $crt2, ...]);

setPublicKeyStore()

$smime−>setPublicKeyStore($path, ...);

è¨¼ææ¸ã¹ãã¢ã®èªã¿è¾¼ã¿ã«å¤±æããå ´åã¯dieããã

sign()

$signed_mime = $smime−>sign($raw_mime);

"Content−*", "MIME−*" åã³ "Subject" ãé¤ãããããã¯ multipartã®ãããã¬ãã«ã«ç§»ãããã "Subject" ã¯S/MIMEãèªè- ã§ããªãã¡ã¼ã©ã®ããã«, multipartã® ãããã¬ãã«ã¨ä¿è- ·ãããã¡ãã»ã¼ã¸ã®ä¸¡å´ã«éç½®ãããã

åã® MIME ã¡ãã»ã¼ã¸ãç§å¯éµãã¾ãã¯ãã®è¨¼ææ¸ã®ãããããæ±æããã¦ãã (tainted) ãªãã°ãç½²åãããã¡ãã»ã¼ã¸ãæ±æãããã

signonly()

$sign = $smime−>signonly($prepared_mime);

ç½²åã®è¨ç®ãè¡ãã $sign ã¯BASE64ã§ã¨ã³ã³ã¼ãããã¦è¿ãã $prepared_mime ã«ã¯, "prepareSmimeMessage" ã§è¿ãããå¤ãæ¸¡ãã

åã® MIME ã¡ãã»ã¼ã¸ãç§å¯éµãã¾ãã¯ãã®è¨¼ææ¸ã®ãããããæ±æããã¦ãã (tainted) ãªãã°ãçæãããç½²åãæ±æãããã

prepareSmimeMessage()

($prepared_mime, $outer_header)
= $smime−>prepareSmimeMessage($source_mime);

ç½²åç¨ã®ã¡ãã»ã¼ã¸ãæºåããã $prepared_mime ã«ã¯ç½²åç¨ã«ä¿®æ- £ãããMIMEã¡ãã»ã¼ã¸ãè¿ãã $outer_header ã¯ãS/MIMEã®å¤å´ã«ä»ä¸ããããããè¿ãã

$prepared_mime ã®æ¬æã¯$source_mimeã¨åãç©ã¨ãªããã ãããã«é¢ãã¦ã¯"Content−*", "MIME−*", "Subject" ãé¤ãå¨ã¦ã åãé¤ããããåãé¤ããããããã¯ $outer_header ã«è¿ãããã S/MIMEã¡ãã»ã¼ã¸ãæ§ç¯ããéã«ã¯ãããS/MIMEã¡ãã»ã¼ã¸ã®ãããã«è¿½å ããã "Subject" ãããã®ã¿ã¯ $prepared_mime ã¨ $outer_header ã®ä¸¡æ¹ã« ç¾ããç¹ã«æ³¨æã

check()

use Crypt::SMIME qw(:constants);
$source_mime = $smime−>check($signed_mime);
$source_mime = $smime−>check($signed_mime, $flags);

æ¤è¨¼ãè¡ããæ¤è¨¼ã«å¤±æããå ´åã¯ãã®çç±ã¨å±ã«dieããã

$flags ã¨ãã¦ "Crypt::SMIME::NO_CHECK_CERTIFICATE" ãªãã·ã§ã³ãæå®ããå ´åã«ã¯ãç½²åèã®è¨¼ææ¸ãã§ã¼ã³ãæ¤è¨¼ããªãã $flags ã®ããã©ã«ãå¤ã¯ 0 ã§ããããã®å ´åã«ã¯å¨ã¦ã®æ´åæ§ã«ã¤ãã¦ã®æ¤è¨¼ãè¡ãã

åã® S/MIME ã¡ãã»ã¼ã¸, $flags, æ¤è¨¼æå» ("setAtTime"), ã¾ãã¯ å¬ééµã®å°ãªãã¨ãä¸ã¤ãæ±æããã¦ãã(tainted) ãªãã°ãæ¤è¨¼ãããã¡ãã»ã¼ã¸ãæ±æãããã

encrypt()

$encrypted_mime = $smime−>encrypt($raw_mime);

æå·åãè¡ãã

"Content−*", "MIME−*" åã³ "Subject" ãé¤ãããããã¯ multipartã®ãããã¬ãã«ã«ã³ãã¼ãããã "Subject" ã¯S/MIMEãèªè- ã§ããªãã¡ã¼ã©ã®ããã«, multipartã® ãããã¬ãã«ã¨ä¿è- ·ãããã¡ãã»ã¼ã¸ã®ä¸¡å´ã«éç½®ãããã

decrypt()

$decrypted_mime = $smime−>decrypt($encrypted_mime);

isSigned()

$is_signed = $smime−>isSigned($mime);

isEncrypted()

$is_encrypted = $smime−>isEncrypted($mime);

setAtTime()

$yesterday = time − (60*60*24);
$smime−>setAtTime($yesterday);

é¢æ°

extractCertificates()

use Crypt::SMIME qw(:constants);
@certs = @{Crypt::SMIME::extractCertificates($data)};
@certs = @{Crypt::SMIME::extractCertificates($data, FORMAT_SMIME)};

<S/MIMEã¡ãã»ã¼ã¸ã¾ãã¯PKCS#7ãªãã¸ã§ã¯ãã«å«ã¾ããX.509è¨¼ææ¸ (ãè¨¼ææ¸å¤±å¹ãªã¹ã) ããã¹ã¦åå¾ããã ãªãã·ã§ã³ã® $type ãã©ã¡ã¼ã¿ã§ãã¼ã¿ã®ç¨®é¡ãæå®ã§ããã "Crypt::SMIME::FORMAT_SMIME" (åæå¤) ã¯S/MIMEã¡ãã»ã¼ã¸ã "Crypt::SMIME::FORMAT_ASN1"ã¯ãã¤ããªå½¢å¼ã "Crypt::SMIME::FORMAT_PEM"ã¯PEMå½¢å¼ã

getSigners()

@certs = @{Crypt::SMIME::getSigners($data)};
@certs = @{Crypt::SMIME::getSigners($data, $type)};

èè

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself

Bug reports and comments to: [email protected]

Updated 2024-01-29 - jenkler.se | uex.se