使用openssl和python签名数据

Question

我目前正在使用下一个opensll命令签署数据:

openssl dgst -sign key.pem -sha256 -out signature.sig data.txt

我怎样才能用Python实现这一目标？

Answer 1

我在这里找到了答案(http://nullege.com/和https://pyopenssl.readthedocs.org/en/stable/api/crypto.html):

import OpenSSL
from OpenSSL import crypto
import base64
key_file = open("C:\my.pem", "r")
key = key_file.read()
key_file.close()
password = "password of prk"

if key.startswith('-----BEGIN '):
    pkey = crypto.load_privatekey(crypto.FILETYPE_PEM, key, password)
else:
    pkey = crypto.load_pkcs12(key, password).get_privatekey()
print pkey
data = "data"
sign = OpenSSL.crypto.sign(pkey, data, "sha256") 
print sign

data_base64 = base64.b64encode(sign)
print data_base64