228 lines
7.7 KiB
PowerShell
228 lines
7.7 KiB
PowerShell
# 一键生成证书并转换为C++代码
|
||
# 使用方法：powershell -ExecutionPolicy Bypass -File .\generate-and-convert.ps1
|
||
|
||
param(
|
||
[string]$CertDir = ".\certs",
|
||
[string]$ServerPass = "MyServerPass123",
|
||
[string]$ClientPass = "MyClientPass123",
|
||
[string]$Country = "CN",
|
||
[string]$State = "Beijing",
|
||
[string]$City = "Beijing",
|
||
[string]$Organization = "MyCompany",
|
||
[string]$OrgUnit = "IT",
|
||
[string]$ServerCN = "localhost",
|
||
[string]$ClientCN = "MyClient",
|
||
[string]$CACN = "MyCA"
|
||
)
|
||
|
||
Write-Host "=====================================" -ForegroundColor Cyan
|
||
Write-Host " HP-Socket SSL证书生成工具" -ForegroundColor Cyan
|
||
Write-Host "=====================================" -ForegroundColor Cyan
|
||
Write-Host ""
|
||
|
||
# 创建证书目录
|
||
if (Test-Path $CertDir) {
|
||
Write-Host "警告: 目录 $CertDir 已存在" -ForegroundColor Yellow
|
||
$confirm = Read-Host "是否删除并重新生成? (y/n)"
|
||
if ($confirm -eq 'y') {
|
||
Remove-Item -Recurse -Force $CertDir
|
||
} else {
|
||
Write-Host "已取消" -ForegroundColor Red
|
||
exit
|
||
}
|
||
}
|
||
|
||
New-Item -ItemType Directory -Force -Path $CertDir | Out-Null
|
||
Push-Location $CertDir
|
||
|
||
Write-Host "[1/5] 生成CA证书..." -ForegroundColor Green
|
||
|
||
# 生成CA私钥
|
||
openssl genrsa -out ca-key.pem 4096 2>&1 | Out-Null
|
||
|
||
# 生成CA证书
|
||
openssl req -new -x509 -days 3650 -key ca-key.pem -out ca-cert.pem `
|
||
-subj "/C=$Country/ST=$State/L=$City/O=$Organization/OU=$OrgUnit/CN=$CACN" 2>&1 | Out-Null
|
||
|
||
Write-Host "✓ CA证书生成完成" -ForegroundColor Green
|
||
|
||
Write-Host "[2/5] 生成服务器证书..." -ForegroundColor Green
|
||
|
||
# 生成服务器私钥
|
||
openssl genrsa -aes256 -passout pass:$ServerPass -out server-key.pem 2048 2>&1 | Out-Null
|
||
|
||
# 生成服务器CSR
|
||
openssl req -new -key server-key.pem -passin pass:$ServerPass -out server-csr.pem `
|
||
-subj "/C=$Country/ST=$State/L=$City/O=$Organization/OU=$OrgUnit/CN=$ServerCN" 2>&1 | Out-Null
|
||
|
||
# 签发服务器证书
|
||
openssl x509 -req -days 3650 -in server-csr.pem `
|
||
-CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem 2>&1 | Out-Null
|
||
|
||
Write-Host "✓ 服务器证书生成完成" -ForegroundColor Green
|
||
|
||
Write-Host "[3/5] 生成客户端证书..." -ForegroundColor Green
|
||
|
||
# 生成客户端私钥
|
||
openssl genrsa -aes256 -passout pass:$ClientPass -out client-key.pem 2048 2>&1 | Out-Null
|
||
|
||
# 生成客户端CSR
|
||
openssl req -new -key client-key.pem -passin pass:$ClientPass -out client-csr.pem `
|
||
-subj "/C=$Country/ST=$State/L=$City/O=$Organization/OU=$OrgUnit/CN=$ClientCN" 2>&1 | Out-Null
|
||
|
||
# 签发客户端证书
|
||
openssl x509 -req -days 3650 -in client-csr.pem `
|
||
-CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -out client-cert.pem 2>&1 | Out-Null
|
||
|
||
Write-Host "✓ 客户端证书生成完成" -ForegroundColor Green
|
||
|
||
Write-Host "[4/5] 验证证书..." -ForegroundColor Green
|
||
|
||
$serverVerify = openssl verify -CAfile ca-cert.pem server-cert.pem 2>&1
|
||
$clientVerify = openssl verify -CAfile ca-cert.pem client-cert.pem 2>&1
|
||
|
||
if ($serverVerify -like "*OK*" -and $clientVerify -like "*OK*") {
|
||
Write-Host "✓ 证书验证通过" -ForegroundColor Green
|
||
} else {
|
||
Write-Host "✗ 证书验证失败" -ForegroundColor Red
|
||
Write-Host $serverVerify
|
||
Write-Host $clientVerify
|
||
Pop-Location
|
||
exit 1
|
||
}
|
||
|
||
Write-Host "[5/5] 转换为C++代码..." -ForegroundColor Green
|
||
|
||
# 读取证书内容
|
||
$serverCert = Get-Content "server-cert.pem" -Raw
|
||
$serverKey = Get-Content "server-key.pem" -Raw
|
||
$clientCert = Get-Content "client-cert.pem" -Raw
|
||
$clientKey = Get-Content "client-key.pem" -Raw
|
||
$caCert = Get-Content "ca-cert.pem" -Raw
|
||
|
||
# 转换函数
|
||
function Convert-ToCppString {
|
||
param([string]$content)
|
||
|
||
$lines = $content -split "`n" | ForEach-Object { $_.TrimEnd("`r") }
|
||
$cppLines = $lines | ForEach-Object { "`t`"$_\n`"" }
|
||
return ($cppLines -join "`n")
|
||
}
|
||
|
||
$serverCertCpp = Convert-ToCppString $serverCert
|
||
$serverKeyCpp = Convert-ToCppString $serverKey
|
||
$clientCertCpp = Convert-ToCppString $clientCert
|
||
$clientKeyCpp = Convert-ToCppString $clientKey
|
||
$caCertCpp = Convert-ToCppString $caCert
|
||
|
||
# 生成C++头文件
|
||
$cppCode = @"
|
||
// ============================================
|
||
// SSL证书配置
|
||
// 自动生成时间: $(Get-Date -Format "yyyy-MM-dd HH:mm:ss")
|
||
// ============================================
|
||
//
|
||
// 证书信息:
|
||
// CA CN: $CACN
|
||
// 服务器 CN: $ServerCN
|
||
// 客户端 CN: $ClientCN
|
||
// 有效期: 10年
|
||
//
|
||
// 使用说明:
|
||
// 1. 将此文件内容复制到 Server/main.cpp 和 Client/main.cpp 的证书定义部分
|
||
// 2. 服务器使用: g_s_lpszPemCert, g_s_lpszPemKey, g_s_lpszCAPemCert
|
||
// 3. 客户端使用: g_c_lpszPemCert, g_c_lpszPemKey, g_c_lpszCAPemCert
|
||
// 4. 修改密码: g_s_lpszKeyPassword, g_c_lpszKeyPassword
|
||
//
|
||
// ============================================
|
||
|
||
// CA证书（服务器和客户端共用）
|
||
static const char* g_s_lpszCAPemCert =
|
||
$caCertCpp;
|
||
|
||
// 服务器证书
|
||
static const char* g_s_lpszPemCert =
|
||
$serverCertCpp;
|
||
|
||
// 服务器私钥（密码保护）
|
||
static const char* g_s_lpszPemKey =
|
||
$serverKeyCpp;
|
||
|
||
// 服务器私钥密码
|
||
static const char* g_s_lpszKeyPassword = "$ServerPass";
|
||
|
||
// ============================================
|
||
|
||
// CA证书（客户端使用，与服务器相同）
|
||
static const char* g_c_lpszCAPemCert = g_s_lpszCAPemCert;
|
||
|
||
// 客户端证书
|
||
static const char* g_c_lpszPemCert =
|
||
$clientCertCpp;
|
||
|
||
// 客户端私钥（密码保护）
|
||
static const char* g_c_lpszPemKey =
|
||
$clientKeyCpp;
|
||
|
||
// 客户端私钥密码
|
||
static const char* g_c_lpszKeyPassword = "$ClientPass";
|
||
|
||
// ============================================
|
||
// 配置参数
|
||
// ============================================
|
||
|
||
// 服务器验证模式：要求客户端提供证书并验证
|
||
static const int g_s_iVerifyMode = SSL_VM_PEER | SSL_VM_FAIL_IF_NO_PEER_CERT;
|
||
|
||
// 客户端验证模式：验证服务器证书
|
||
static const int g_c_iVerifyMode = SSL_VM_PEER;
|
||
|
||
// 服务器监听地址和端口
|
||
static const LPCTSTR ADDRESS = _T("0.0.0.0");
|
||
static const USHORT PORT = 5555;
|
||
|
||
// 客户端连接地址和端口
|
||
static const LPCTSTR DEFAULT_ADDRESS = _T("127.0.0.1");
|
||
static const USHORT DEFAULT_PORT = 5555;
|
||
"@
|
||
|
||
$cppCode | Out-File -FilePath "certificates.h" -Encoding utf8 -NoNewline
|
||
|
||
Write-Host "✓ C++代码生成完成: certificates.h" -ForegroundColor Green
|
||
|
||
Pop-Location
|
||
|
||
# 生成摘要信息
|
||
Write-Host ""
|
||
Write-Host "=====================================" -ForegroundColor Cyan
|
||
Write-Host " 生成完成！" -ForegroundColor Cyan
|
||
Write-Host "=====================================" -ForegroundColor Cyan
|
||
Write-Host ""
|
||
Write-Host "证书目录: $CertDir" -ForegroundColor Yellow
|
||
Write-Host ""
|
||
Write-Host "生成的文件:" -ForegroundColor Yellow
|
||
Get-ChildItem $CertDir -Filter *.pem | Format-Table Name, @{Label="大小"; Expression={"{0:N0} bytes" -f $_.Length}}
|
||
Write-Host ""
|
||
Write-Host "下一步操作:" -ForegroundColor Cyan
|
||
Write-Host " 1. 查看 $CertDir\certificates.h" -ForegroundColor White
|
||
Write-Host " 2. 复制证书代码到 Server\main.cpp 和 Client\main.cpp" -ForegroundColor White
|
||
Write-Host " 3. 重新编译项目" -ForegroundColor White
|
||
Write-Host ""
|
||
Write-Host "快速查看C++代码:" -ForegroundColor Cyan
|
||
Write-Host " notepad $CertDir\certificates.h" -ForegroundColor White
|
||
Write-Host ""
|
||
Write-Host "证书信息:" -ForegroundColor Cyan
|
||
Write-Host " CA通用名称: $CACN" -ForegroundColor White
|
||
Write-Host " 服务器通用名称: $ServerCN" -ForegroundColor White
|
||
Write-Host " 客户端通用名称: $ClientCN" -ForegroundColor White
|
||
Write-Host " 服务器密钥密码: $ServerPass" -ForegroundColor White
|
||
Write-Host " 客户端密钥密码: $ClientPass" -ForegroundColor White
|
||
Write-Host " 证书有效期: 10年" -ForegroundColor White
|
||
Write-Host ""
|
||
|
||
# 询问是否打开certificates.h
|
||
$openFile = Read-Host "是否打开 certificates.h 文件? (y/n)"
|
||
if ($openFile -eq 'y') {
|
||
notepad "$CertDir\certificates.h"
|
||
}
|