在Scala中使用BouncyCastle验证PKCS#7签名

libraryDependencies += "org.bouncycastle" % "bcprov-jdk15on" % "1.68"

import java.io.File
import java.security.Security
import org.bouncycastle.cms.CMSSignedData
import org.bouncycastle.cms.CMSSignedDataParser
import org.bouncycastle.cms.SignerInformation
import org.bouncycastle.cms.jcajce.JcaSimpleSignerInfoVerifierBuilder
import org.bouncycastle.jce.provider.BouncyCastleProvider

// 加载BouncyCastle提供的加密算法提供者
Security.addProvider(new BouncyCastleProvider())

// 读取PKCS#7文件内容
val pkcs7File = new File("path/to/pkcs7.p7")
val pkcs7Data = Files.readAllBytes(pkcs7File.toPath())

// 解析PKCS#7数据
val parser = new CMSSignedDataParser(pkcs7Data)
val signedData = parser.getSignedContent()

// 获取签名信息
val signerInfos = signedData.getSignerInfos().getSigners()

// 加载证书
val certificateFile = new File("path/to/certificate.cer")
val certificate = CertificateFactory.getInstance("X.509").generateCertificate(new FileInputStream(certificateFile))

// 验证签名
for (signerInfo <- signerInfos) {
  val verifier = new JcaSimpleSignerInfoVerifierBuilder().build(certificate)
  val isValid = signerInfo.verify(verifier)
  
  if (isValid) {
    println("Signature is valid.")
  } else {
    println("Signature is invalid.")
  }
}