erlang证书加密
-module(。。。).
-include("ewp.hrl").
-include("backend.hrl").
-include_lib("public_key/include/public_key.hrl").
-compile(export_all).
-define(ISSCODE,"49990014"). %% 03040000
-define(MaxMoney,"99999999").
-define(FilePath,"./config/key/enc.cer").
-spec get_mp_param(string(),string()) -> string().
'US0101'(_UserObj, _TranID, _P) ->
ClientOS = get(client_os), %%ios 01,ipad02, iwatch06,android 03,pad 04
VersionFlag = backend_util:check_new_version(ClientOS,["4.0.13","4.0.11"]), %%生产可能["4.0.13","4.0.11"]
case VersionFlag of
low ->
throw(?VERSION_LOW_ERROR); %%二维码支付功能需要更新客户端，请快快点击体验吧
high ->
go_on
end,
[].
'US0102'(UserObj, TranID, P) ->
transaction:start(TranID, UserObj),
REG_CHANNEL = user_obj:get_field('REG_CHANNEL', UserObj),
case REG_CHANNEL of
"3" ->
throw(?REG_TYPE_1_ERROR);
_ ->
ok
end,
UserCode = user_obj:get_field('USER_CODE', UserObj),
transaction:set_log_field('USER_CODE', UserCode, TranID),
NewCard = ewp_params:get("newCard",P),
NewCardType = ewp_params:get("newCardType",P),
RefreshTime = backend_params:get_value("people_valid_time"),
%%有返回卡列表，卡需要按照时间加挂最早的顺序
CardInfo = backend_db:select("select account_no,account_alias,account_type from MY_PEOPLECODE_ACCOUNTS t where t.user_code = :1 and t.delete_flag = '0' and t.ok_flag = '1' order by t.create_time",[UserCode]),
case CardInfo of
[] -> throw(?NO_PEOPLECARD_ERROR);
_ -> ok
end,
[FirstCardInfo|_] = CardInfo,
[FirstCard,_,FaccountType] = FirstCardInfo, %%第一张卡,其他卡
TheCardInfo = case NewCard of
undefined ->
[FirstCard,FaccountType];
[] ->
[FirstCard,FaccountType];
_ ->
[NewCard,NewCardType]
end,
[TheCard,TheType] = TheCardInfo,
TranNo = transaction:get_serial_no(TranID), %%流水号
QRcode = get_code(UserObj,TranNo,TheCard,TheType),%%刷新，重新请求接口，得到新的二维码编号
CardInfo1= [[{"account_no",Account_no},{"account_alias",Account_alias},{"account_type",Account_type}] || [Account_no,Account_alias,Account_type] <- CardInfo],
Now = now(),
transaction:set_log_field('TRAN_TIME',{datetime, calendar:now_to_local_time(Now)},TranID),
transaction:set_log_field('FINANCIAL_TYPE',"0",TranID),
UserName = user_obj:get_field('NAME',UserObj),
transaction:set_log_field('OUT_USER_NAME',UserName,TranID),
[{acc,TheCard},{type,TheType},{acclist,CardInfo1},{refreshTime,RefreshTime},{qrcode,QRcode}].
get_cert_serialno()->
{ok, PemServerCert} = file:read_file(?FilePath),
[{'Certificate', DerServerCert, not_encrypted}] = public_key:pem_decode(PemServerCert),
OtpServerCert = public_key:pkix_decode_cert(DerServerCert, otp),
TbsCertificate = OtpServerCert#'OTPCertificate'.tbsCertificate,
SerialNumber = TbsCertificate#'OTPTBSCertificate'.serialNumber,
integer_to_list(SerialNumber).
%%获取二维码编码
%%请求接口，根据新的卡生成新的二维码
get_code(UserObj,TranNo,CardNo,CardType)->
UserCode = user_obj:get_field('USER_CODE', UserObj),
IssCode = ?ISSCODE,
QrType = case CardType of
"0" -> "35"; %%借记卡
_ -> "51" %%贷记卡,目前状态下只有借记卡和信用卡
%% _ -> "40" %%其他
end,
UserName = user_obj:get_field('NAME',UserObj),
AcctClass = "1", %%几类账户
CardAttr = case CardType of
"0" -> "01"; %%借记卡
_ -> "02" %%贷记卡
end,
PayerInfo1 = "{accNo=" ++ CardNo ++ "&name=" ++ UserName ++ "&issCode=" ++ IssCode ++ "&acctClass=" ++ AcctClass ++ "&cardAttr=" ++ CardAttr ++"}",
PayerInfo = binary_to_list(base64:encode(public_encode(PayerInfo1))), %%public_encode(list_to_binary(PayerInfo1))
MaxAmont0 = case CardType of
"0" ->
backend_params:get_value("people_simple_cardlimit") ++ "00"; %%借记卡
_ ->
backend_params:get_value("people_simple_creditlimit") ++ "00" %%其他
end,
MaxAmont = ?MaxMoney,
AddnCondInit = "{currency=156&pinFree=0&maxAmont=" ++ MaxAmont ++"}",
AddnCond = binary_to_list(base64:encode(AddnCondInit)),
EncryptCertId = get_cert_serialno(),
ReqReserved = "01", %%请求方自定义域，若出现则后续交易中自动带回
%%先加密，再需要base64 encode
Xbody = "<version>1.0.0</version><reqType>0210000903</reqType><issCode>" ++ IssCode ++
"</issCode><qrType>" ++ QrType ++ "</qrType><payerInfo>" ++ PayerInfo ++ "</payerInfo>"
++ "<addnCond>" ++ AddnCond ++"</addnCond>" ++ "<encryptCertId>" ++ EncryptCertId ++ "</encryptCertId>"
++ "<reqReserved>" ++ ReqReserved ++ "</reqReserved>",
%% "<qrValidTime></qrValidTime><qrNo></qrNo><addnOpUrl>" ++ AddnOpUrl ++ "</addnOpUrl>" ++
%% "<backUrl></backUrl>",
Res_Cert = wailian_client_qm:peoplecode_xml_request("MBU001",TranNo,Xbody),
%%Xml_ResBody = wailian_client_qm:get_peoplecode_value(Res_Cert),
ResCode = proplists:get_value('ErrorCode', proplists:get_value('Head',proplists:get_value('Agw', Res_Cert))),
ResDetail = proplists:get_value('ErrorMsg', proplists:get_value('Head',proplists:get_value('Agw', Res_Cert))),
%%获取返回报文状态 “00”表示返回成功
case ResCode of
"00" ->
go_on;
_ ->
throw({ResCode,ResDetail})
end,
Xml_ResBody = proplists:get_value('Body', proplists:get_value('Agw', Res_Cert)),
QrNo = proplists:get_value('qrNo', Xml_ResBody),
backend_db:insert(lists:concat(["insert into MY_PEOPLECODE_STATUSLOGS (qrNo,usercode,STATUS,tran_time) values(",QrNo, ",",UserCode,",'00',to_date(sysdate))"])),
QrNo.
%%公钥加密，私钥解密,但是公钥格式不是pem而是cer
public_encode(Params)->
PlainText = list_to_binary(Params),
{ok, PemServerCert} = file:read_file(?FilePath),
[{'Certificate', DerServerCert, not_encrypted}] = public_key:pem_decode(PemServerCert),
OtpServerCert = public_key:pkix_decode_cert(DerServerCert, otp),
TbsCertificate = OtpServerCert#'OTPCertificate'.tbsCertificate,
SubjectPublicKeyInfo =TbsCertificate#'OTPTBSCertificate'.subjectPublicKeyInfo,
PublicKey = SubjectPublicKeyInfo#'OTPSubjectPublicKeyInfo'.subjectPublicKey,
CipherText = public_key:encrypt_public(PlainText, PublicKey),
CipherText.
%%银联根据时间判断
change_code(UserObj, TranID, P)->
TranNo = transaction:get_serial_no(TranID), %%流水号
CardNo = ewp_params:get("newCard",P),
CardType = ewp_params:get("newCardType",P),
QRcode = get_code(UserObj,TranNo,CardNo,CardType),
[{qrcode,QRcode}].
%%Function：get_mp_param
%%Description:从数据库中获取各种参数 unionpay_scancode:get_mp_param("people_valid_time","20")
%%Returns:string
get_mp_param(ParamName,DefaultValue)->
Data_db = backend_db:select("select param_value from MP_PARAMS t where param_code = :1",[ParamName]),
case Data_db of
[] ->
Data = DefaultValue; %%最开始时候定的生产的地址
_ ->
[[Data]] = Data_db
end,
Data.
'US0103'(_UserObj, _TranID, _P) ->
Chn_encryption_flag =backend_params:get_value("chn_encryption_flag"),
Pay_type = backend_params:get_value("people_pay_type"), %%1：卡密；0：卡密和短信验证码
[{pay_type,Pay_type},{"Chn_encryption_flag",Chn_encryption_flag}].
check_status(UserObj, _TranID, P)->
Qrcode = ewp_params:get("qrcode",P),
Acctype = ewp_params:get("acctype",P),
Data_db = backend_db:select("select STATUS,MONEY from MY_PEOPLECODE_STATUSLOGS t where QRNO = :1 AND TRAN_TIME = to_date(sysdate)",[Qrcode]),
case Data_db of %%金额从数据库得到 MY_PEOPLECODE_STATUSLOGS
[["0 ",_]] ->
[[STATUS,_MONEY]] = Data_db,
[{status,STATUS}];
[["00",_]] ->
[[STATUS,_MONEY]] = Data_db,
[{status,STATUS}];
[["0",_]] ->
[[STATUS,_MONEY]] = Data_db,
[{status,STATUS}];
[[_,_]] ->
[[STATUS,MONEY]] = Data_db,
[LimitFlag,Limit,Left] = limit_check(UserObj,MONEY,Acctype),
%% 1:超过单笔 2:超过日累计 3:超过月累计 4:正常
[{status,STATUS},{money,MONEY},{limitFlag,LimitFlag},{limit,Limit},{left,Left}]
end.
check_info(UserObj, TranID, P)->
Money = ewp_params:get("money",P),
Accno = ewp_params:get("accno",P),
QrNo = ewp_params:get("qrNo",P),
transaction:set_log_field('REMARK_ONE', QrNo, TranID), %%二维码放入tran_log表
Pay_type = ewp_params:get("pay_type",P),
Acctype = ewp_params:get("acctype",P),
case Pay_type of
"0"->
SmsID = ewp_params:get("smsid", P),
SmsCode = ewp_params:get("smscode", P),
smsic_service:identify_code(TranID, SmsID, SmsCode); %%验证动态密码
_ -> ok
end,
%点击付款的时候验证单笔限额、日累计、月累计
transaction:set_log_field('MONEY',Money,TranID),
transaction:set_log_field('ACC_OUTWARD',Accno,TranID),
Password1 = yaws_api:url_decode(ewp_params:get("password", P)), %%获取要修改的卡号
PasswordRnc =
case ewp_params:get("passwordRnc", P) of
undefined ->
undefined;
_ ->
yaws_api:url_decode(ewp_params:get("passwordRnc", P))
end,
PasswordRNS = get(passwordRNS),
case PasswordRnc of
undefined ->
Password = Password1;
_ ->
{A, B, C} = decryptKits:decode(Password1,PasswordRnc,PasswordRNS),
Password =
case {A, B, C} of
{1,Pass,_Err} ->
Pass;
{0, _Pass,_Err} ->
throw(?NOT_DECODE_PASS)
end
end,
TranNo = transaction:get_serial_no(TranID), %%流水号 algenc:encrypt()
case Acctype of %%账户类型(0借记卡、2信用卡)
"0" ->
%% 验证卡状态
transfer_api:judge_card_status(transaction:get_serial_no(TranID), Accno),
%%检测黑白名单(2为正常用户，0为黑名单，1为灰名单，0和1统一为else) check_blackorgray(Accno)
List_type = user_obj:get_field('List_type',UserObj),
case List_type of
"2" -> go_on;
_ -> throw(?UNKNOWN_CARD_STATES)
end,
%%验证卡的交易密码
transfer_api:check_acct_password(TranNo,Accno,Password);
_ -> %%"2"
Res1 = credit_api:get_Sxy001(TranNo, credit_api:get_credit_seq(), Accno, "0", ""),
case proplists:get_value(card_stat, Res1) of
"" -> go_on;
_ -> throw(?CREDIT_STATE_ERROR)
end,
Res024 = credit_api:get_Sxy024(TranNo, credit_api:get_credit_seq(), Accno, "0", ""),
case proplists:get_value(cardstat, Res024) of
"" -> go_on;
_ -> throw(?CREDIT_STATE_ERROR)
end%%, %%;
%%credit_api:get_Sxy001(TranNo, credit_api:get_credit_seq(), Accno, "2", backend_util:encrypt_cc_pin(Accno, Password))
end,
backend_db:update("update MY_PEOPLECODE_STATUSLOGS set status = : 1 where qrNo = : 2 and tran_time = to_date(sysdate) ",["02", QrNo]),
%%transfer_api:check_acct_password(TranNo, AcctNoFk,algenc:encrypt(Password),MobileNo),%%
[{result,"02"}]. %%只要不throw就是正常的,验密正确
send_addresult(_UserObj, TranID, P) ->
%%请求附加结果操作
QrNo = ewp_params:get("qrNo",P),
Data_db = backend_db:select("select VOUCHERNUM from MY_PEOPLECODE_STATUSLOGS t where QRNO = :1 AND TRAN_TIME = to_date(sysdate)",[QrNo]),
[[VOUCHERNUM]] = case Data_db of %%金额从数据库得到 MY_PEOPLECODE_STATUSLOGS
[[_Data]] ->
Data_db
end,
IssCode = ?ISSCODE,
Xbody = "<version>1.0.0</version><reqType>0240000903</reqType><issCode>" ++ IssCode ++
"</issCode><qrNo>" ++ QrNo ++ "</qrNo><respCode>00</respCode><respMsg>成功</respMsg><voucherNum>" ++
VOUCHERNUM ++ "</voucherNum>",
%%"<upReserved></upReserved>"
TranNo = transaction:get_serial_no(TranID), %%流水号
Res_Cert = wailian_client_qm:peoplecode_xml_request("MBU002",TranNo,Xbody),
Xml_ResBody = wailian_client_qm:get_peoplecode_value(Res_Cert), %%发送成功即可
RespCode = proplists:get_value('respCode', Xml_ResBody,undefined),
RespMsg = proplists:get_value('respMsg', Xml_ResBody,undefined),
case RespCode of
"00" ->
backend_db:update("update MY_PEOPLECODE_STATUSLOGS set status = : 1, OrigRespCode = : 2, OrigRespMsg = : 3 where qrNo = : 4 and tran_time = to_date(sysdate)", ["03",RespCode,RespMsg,QrNo]),
[{status,"03"}]; %%表示成功
"0000" ->
backend_db:update("update MY_PEOPLECODE_STATUSLOGS set status = : 1, OrigRespCode = : 2, OrigRespMsg = : 3 where qrNo = : 4 and tran_time = to_date(sysdate)", ["03",RespCode,RespMsg,QrNo]),
[{status,"03"}]; %%表示成功
_ ->
backend_db:update("update MY_PEOPLECODE_STATUSLOGS set status = : 1, OrigRespCode = : 2, OrigRespMsg = : 3 where qrNo = : 4 and tran_time = to_date(sysdate)", ["04",RespCode,RespMsg,QrNo]),
?ewp_err("get data error:==========================~p~n",[RespCode]),
[{status,"04"}] %%表示失败
end.
get_result(UserObj, TranID, P) ->
UserCode = user_obj:get_field('USER_CODE', UserObj),
QrNo = ewp_params:get("qrNo",P),
Acctype = ewp_params:get("acctype",P),
Money = ewp_params:get("money",P),
final_page(QrNo,Acctype,Money,UserCode,TranID).
%%查询数据库得到交易结果，根据返回成功是成功页面，否则为失败页面
final_page(QrNo,Acctype,Money,UserCode,TranID)->
Data_db = backend_db:select("select STATUS,MERNAME,VOUCHERNUM, OrigRespCode,OrigRespMsg from MY_PEOPLECODE_STATUSLOGS t where QRNO = :1 AND TRAN_TIME = to_date(sysdate)",[QrNo]),
SysDateTime = backend_date_util:get_total_time(),
case Data_db of %%金额从数据库得到 MY_PEOPLECODE_STATUSLOG
%% [["00",_,_]]-> %%判断变更为前台
%% timer:sleep(1000), %1s
%% final_page(QrNo);
%% [["01",_,_]] ->
%% timer:sleep(1000), %1s
%% final_page(QrNo);
%% [["02",MERNAME,VOUCHERNUM]] -> %%成功
%% [{status,'02'},{mername,MERNAME},{vouchernum,VOUCHERNUM},{time,SysDateTime}];
[["05",MERNAME,VOUCHERNUM,OrigRespCode,OrigRespMsg]]-> %%成功
%% case Acctype of
%% "0" ->
%% cum_transfer_sum(UserCode, Money);
%% _ ->
%% cum_transfer_sum1(UserCode, Money)
%% end,
transaction:set_log_field('INWARD_NAME',MERNAME,TranID),
transaction:finish_success(TranID),
[{status,"05"},{mername,MERNAME},{vouchernum,VOUCHERNUM},{origRespCode,OrigRespCode},{origRespMsg,OrigRespMsg},{time,SysDateTime}];
[[STATUS,MERNAME,VOUCHERNUM,OrigRespCode,OrigRespMsg]]-> %%失败
case Acctype of
"0" ->
cum_transfer_sub(UserCode, Money);
_ ->
cum_transfer_sub1(UserCode, Money)
end,
transaction:set_log_field('INWARD_NAME',MERNAME,TranID),
[{status,STATUS},{mername,MERNAME},{vouchernum,VOUCHERNUM},{origRespCode,OrigRespCode},{origRespMsg,OrigRespMsg},{time,SysDateTime}]
end.
