在Windows中使用C++使用PFX/P12证书对字符串签名

#include <windows.h>
#include <wincrypt.h>
#include <iostream>

#pragma comment(lib, "crypt32.lib")

int main()
{
    // 打开证书存储
    HCERTSTORE hCertStore = CertOpenStore(
        CERT_STORE_PROV_SYSTEM,
        0,
        NULL,
        CERT_SYSTEM_STORE_CURRENT_USER,
        L"MY"
    );
    if (hCertStore == NULL)
    {
        std::cout << "Failed to open certificate store." << std::endl;
        return 1;
    }

    // 查找证书
    PCCERT_CONTEXT pCertContext = CertFindCertificateInStore(
        hCertStore,
        X509_ASN_ENCODING | PKCS_7_ASN_ENCODING,
        0,
        CERT_FIND_SUBJECT_STR,
        L"YourCertificateSubject",
        NULL
    );
    if (pCertContext == NULL)
    {
        std::cout << "Failed to find certificate." << std::endl;
        CertCloseStore(hCertStore, 0);
        return 1;
    }

    // 获取私钥句柄
    HCRYPTPROV hCryptProv;
    if (!CryptAcquireCertificatePrivateKey(
        pCertContext,
        0,
        NULL,
        &hCryptProv,
        NULL,
        NULL
    ))
    {
        std::cout << "Failed to acquire private key." << std::endl;
        CertFreeCertificateContext(pCertContext);
        CertCloseStore(hCertStore, 0);
        return 1;
    }

    // 待签名的字符串
    const char* message = "Hello, World!";

    // 创建签名
    BYTE* pbSignature = NULL;
    DWORD dwSignatureSize = 0;
    if (!CryptSignMessage(
        &CRYPT_SIGN_MESSAGE_PARA{ sizeof(CRYPT_SIGN_MESSAGE_PARA) },
        FALSE,
        1,
        (const BYTE**)&message,
        (DWORD*)&strlen(message),
        NULL,
        &dwSignatureSize
    ))
    {
        std::cout << "Failed to get signature size." << std::endl;
        CryptReleaseContext(hCryptProv, 0);
        CertFreeCertificateContext(pCertContext);
        CertCloseStore(hCertStore, 0);
        return 1;
    }

    pbSignature = new BYTE[dwSignatureSize];
    if (!CryptSignMessage(
        &CRYPT_SIGN_MESSAGE_PARA{ sizeof(CRYPT_SIGN_MESSAGE_PARA) },
        FALSE,
        1,
        (const BYTE**)&message,
        (DWORD*)&strlen(message),
        pbSignature,
        &dwSignatureSize
    ))
    {
        std::cout << "Failed to sign message." << std::endl;
        delete[] pbSignature;
        CryptReleaseContext(hCryptProv, 0);
        CertFreeCertificateContext(pCertContext);
        CertCloseStore(hCertStore, 0);
        return 1;
    }

    // 输出签名结果
    std::cout << "Signature: ";
    for (DWORD i = 0; i < dwSignatureSize; i++)
    {
        printf("%02X", pbSignature[i]);
    }
    std::cout << std::endl;

    // 清理资源
    delete[] pbSignature;
    CryptReleaseContext(hCryptProv, 0);
    CertFreeCertificateContext(pCertContext);
    CertCloseStore(hCertStore, 0);

    return 0;
}