Digital certificate format compliance detection system

Abstract

The invention provides a digital certificate format compliance detection system. The system comprises an application program, a CRL analysis module, a certificate analysis module, a certificate verification module, a cryptographic algorithm library, an SSL protocol interface module, an LDAP protocol module, an OCSP protocol module and a cryptographic device interface module. The application program provides service for a user; the SSL protocol interface module is used for realizing a standard SSL protocol communication process and data analysis; the LDAP protocol module is used for downloadinga CRL format file and a digital certificate file; the OCSP protocol module is used for verifying the validity of the certificate on line; the CRL analysis module is used for analyzing the CRL formatfile downloaded from the CRL node by the LDAP protocol module; the certificate analysis module is used for analyzing the digital certificate file according to different certificate formats and data encoding formats and extracting all effective information from the digital certificate file; the certificate verification module is used for verifying each piece of certificate information according tostandards and a cryptographic algorithm library, verifying a revocation state of a certificate and verifying a signature of the certificate; the detection efficiency is improved.

Description

technical field [0001] The invention relates to the technical field of digital certificate compliance detection, in particular to a digital certificate format compliance detection system. Background technique [0002] At present, the Encryption Law of the People's Republic of China has been reviewed and passed, and under the guidance of the Encryption Law, the security assessment of the application of passwords in information systems will be carried out. As an important part of PKI (Public Key Infrastructure), digital certificates provide information systems with information confidentiality, integrity, authenticity, and non-repudiation services. Therefore, digital certificate compliance testing is indispensable in security assessment. lack. [0003] The functions of existing related tools or systems are not perfect enough to be directly applied to security assessment work. There are problems such as a single source of certificates, no support for national secret algorithms ...

AI Technical Summary

Problems solved by technology

[0003] The functions of existing related tools or systems are not perfect enough to be directly applied to security assessment work. There are problems such as a single source of certificates, no support for national secret algorithms and national standard certificates, no support for verification of individual information, and no support for verification of licenses from issuing agencies Certificate information, etc.

Moreover, the detection efficiency of the existing detection tools is low, and the results can only be obtained after repeated tests many times

Images