27.6.4 验证签名后台页面（verifySign.aspx.cs）

　　验证签名后台页面主要功能是验证客户端提交的签名，并解析XLML。
verifySign.aspx.cs的主要代码如下：
using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Xml;
using System.IO;

public partial class verifySign : System.Web.UI.Page
{
public string strUserSignedData;
public string strSrc;
CAPICOM.SignedDataClass oSignData = new CAPICOM.SignedDataClass();
public string sData1;
public string sData2;
public string sData3;
public string sData4;
public string sData5;
public string sData6;
public string sData7;
public string sData8;

protected void Page_Load(object sender, EventArgs e)
{
strUserSignedData = Request.Form["SignedData"].ToString();

try
{
oSignData.Verify(strUserSignedData, false, 0);//验证数据签名
}
catch (Exception ex)
{
Response.Redirect("err.aspx?errmsg=验证客户端签名错误：" + ex.Message);
return;
}
strSrc = oSignData.Content;//获取业务数据原文

Response.Write("<center><h1><br>您提交的数据经过了数字签名并验证通过。<br></h1></center>");

//解析业务数据原文
try
{
StringReader xmlio = new StringReader(strSrc);

XmlReader reader = XmlReader.Create(xmlio);

reader.Read();

reader.ReadStartElement("MSG");

string sDataType1 = reader.GetAttribute("Type");
reader.ReadStartElement("data1");
sData1 = reader.ReadString();
reader.ReadEndElement();

string sDataType2 = reader.GetAttribute("Type");
reader.ReadStartElement("data2");
sData2 = reader.ReadString();
reader.ReadEndElement();

string sDataType3 = reader.GetAttribute("Type");
reader.ReadStartElement("data3");
sData3 = reader.ReadString();
reader.ReadEndElement();

string sDataType4 = reader.GetAttribute("Type");
reader.ReadStartElement("data4");
sData4 = reader.ReadString();
reader.ReadEndElement();

string sDataType5 = reader.GetAttribute("Type");
reader.ReadStartElement("data5");
sData5 = reader.ReadString();
reader.ReadEndElement();

string sDataType6 = reader.GetAttribute("Type");
reader.ReadStartElement("data6");
string sData6 = reader.ReadString();
reader.ReadEndElement();

string sDataType7 = reader.GetAttribute("Type");
reader.ReadStartElement("data7");
sData7 = reader.ReadString();
reader.ReadEndElement();

string sDataType8 = reader.GetAttribute("Type");
reader.ReadStartElement("data8");
sData8 = reader.ReadString();
reader.ReadEndElement();
reader.Close();
}
catch (Exception ex)
{
Response.Write("从XML原文解析业务数据失败:" + ex.Message);
}
//以下代码把业务数据和签名数据保存到数据库，作为日后证据。
//忽略
//
}
}
客户端JS脚本的主要代码如下:
function SelectSignCert(strSerialNumber,strSubject)
{
var oStore = new ActiveXObject("CAPICOM.Store");
var oSignerCert;
oStore.Open(CAPICOM_CURRENT_USER_STORE,CAPICOM_MY_STORE,CAPICOM_STORE_OPEN_READ_ONLY | CAPICOM_STORE_OPEN_EXISTING_ONLY);
oStoreCerts = oStore.Certificates.Find(CAPICOM_CERTIFICATE_FIND_KEY_USAGE, CAPICOM_DIGITAL_SIGNATURE_KEY_USAGE, true);

for(var i=1;i<=oStoreCerts.Count;i++) //遍历个人证书
{
try
{
var oCert=oStoreCerts.Item(i);
var cerName=oCert.GetInfo(CAPICOM_CERT_INFO_SUBJECT_SIMPLE_NAME);

if( (cerName==strSubject) && (strSerialNumber==oCert.SerialNumber))
{
return oCert;
}
}
catch(e)
{
alert("SelectSignCert catch"+e);
//window.alert(e);
return null;
}
}//end for
}

function SignData(SignerCert,DataToSign)
{
var SignedResult="";
try
{
var oSignedData = new ActiveXObject("CAPICOM.SignedData");
var oSigner = new ActiveXObject("CAPICOM.Signer");
}
catch(e)
{
window.alert(e);
return SignedResult;
}

try
{
var oSignerCert = eval(SignerCert);

oSigner.Certificate = oSignerCert;
oSignedData.Content = DataToSign;//需要签名的数据
SignedResult = oSignedData.Sign(oSigner);
return SignedResult;
}
catch(e)
{
window.alert(e);
return SignedResult;
}
}
详细的代码请参考附属光盘，目录：Code/第五篇 电子商务网站应用-ASP/订单签名。订单提交即签名页面的运行效果如图所示。处理订单即验证签名页面运行效果如图所示。