kenblair1226 / apple-pay-signature-and-decrypt Goto Github PK

const publicCert = fs.readFileSync(path.join(__dirname, './ccr_p.pem'), 'utf8') // 使用Payment Processing Certificate file
const privateKey = fs.readFileSync(path.join(__dirname, './ccr.key'), 'utf8') // 使用Payment Processing Certificate private key file

// apple's root CA做verify
const AppleRootCABuffer = fs.readFileSync(
  path.join(__dirname, './AppleRootCA-G3.cer')
);
const AppleRootCAASN1 = asn1js.fromBER(new Uint8Array(AppleRootCABuffer).buffer);
const AppleRootCA = new pkijs.Certificate({ schema: AppleRootCAASN1.result });

{
  date: 2022-12-14T02:16:38.670Z,
  code: 5,
  message: "Validation of signer's certificate failed: No valid certificate paths found",
  signatureVerified: null,
  signerCertificate: Certificate {
    tbs: ArrayBuffer {
      [Uint8Contents]: <30 82 03 88 a0 03 02 01 02 02 08 4c 30 41 49 51 9d 54 36 30 0a 06 08 2a 86 48 ce 3d 04 03 02 30 7a 31 2e 30 2c 06 03 55 04 03 0c 25 41 70 70 6c 65 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 49 6e 74 65 67 72 61 74 69 6f 6e 20 43 41 20 2d 20 47 33 31 26 30 24 06 03 55 04 0b 0c 1d 41 70 70 6c 65 20 43 65 ... 808 more bytes>,
      byteLength: 908
    },
    version: 2,
    serialNumber: Integer {
      blockLength: 10,
      error: '',
      warnings: [],
      valueBeforeDecode: [ArrayBuffer],
      idBlock: [LocalIdentificationBlock],
      lenBlock: [LocalLengthBlock],
      valueBlock: [LocalIntegerValueBlock]
    },
    signature: AlgorithmIdentifier { algorithmId: '1.2.840.10045.4.3.2' },
    issuer: RelativeDistinguishedNames {
      typesAndValues: [Array],
      valueBeforeDecode: [ArrayBuffer]
    },
    notBefore: Time { type: 0, value: 2019-05-18T01:32:57.000Z },
    notAfter: Time { type: 0, value: 2024-05-16T01:32:57.000Z },
    subject: RelativeDistinguishedNames {
      typesAndValues: [Array],
      valueBeforeDecode: [ArrayBuffer]
    },
    subjectPublicKeyInfo: PublicKeyInfo {
      algorithm: [AlgorithmIdentifier],
      subjectPublicKey: [BitString],
      parsedKey: [ECPublicKey]
    },
    signatureAlgorithm: AlgorithmIdentifier { algorithmId: '1.2.840.10045.4.3.2' },
    signatureValue: BitString {
      blockLength: 75,
      error: '',
      warnings: [],
      valueBeforeDecode: [ArrayBuffer],
      idBlock: [LocalIdentificationBlock],
      lenBlock: [LocalLengthBlock],
      valueBlock: [LocalBitStringValueBlock]
    },
    extensions: [
      [Extension],
      [Extension],
      [Extension],
      [Extension],
      [Extension],
      [Extension],
      [Extension],
      [Extension]
    ]
  },
  signerCertificateVerified: false
}