jsrsasign-如何提取x.509证书的指纹？

Question

Is it possible to use jsrsasign to extract the fingerprint of an x.509 certficate, similar to what can be achieved using this openssl command:

openssl x509 -sha1 -in cert.pem -noout -fingerprint - Ref: openssl x.509 doc

I'm reading my X509 like so:

var c = new X509(); c.readCertPEM(cert); \\\\ how to get the fingerprint?

Ref: jsrsasign x.509 apidoc

Answer 1

您只需要从“ ----- BEGIN CERTIFICATE -----”标头和“ ----- END CERTIFICATE -----”页脚之间提取字符串，base64对其进行解码并计算SHA1哈希解码数据。

Answer 2

Thank you for using jsrsasign. You can write like this:

hex = KEYUTIL.getHexFromPEM(certPEMstring);

fingerprint = KJUR.crypto.Util.hashHex(hex, 'sha256');

You can also find a fingerprint example here: http://kjur.github.io/jsrsasign/tool_certview.html