如何在Python中验证Aadhaar XML签名?

Question

我正在尝试做XML签名验证。这里是链接到Aadhaar无纸化离线电子kyc教程https://uidai.gov.in/ecosystem/authentication-devices-documents/about-aadhaar-paperless-offline-e-kyc.html

with open('/home/user/Downloads/uidai_auth_sign_prod_2023.cer', 'rb') as f:
key = f.read()
import xml.etree.ElementTree as ET
tree=ET.parse("/home/user/Downloads/offlineaadhaar202205040207.xml")
root = tree.getroot()
print(root)
try:
verified_data = XMLVerifier().verify(root, require_x509=False, x509_cert=key).signed_xml
print("Data is : %s" % verified_data)
except Exception as exce:
print(exce)

这个代码给出错误:

签名验证失败:invalid padding

是否有其他解决方案来验证xml签名。请告诉我们。

Answer 1

我发现XMLVerifier用于验证签名的xml。pip包需要安装

pip install signxml

这是我的工作片段

from signxml import XMLVerifier
aadhar_file = '<path_to_signed_aadhaar_xml>'
cert = open('path_to_uidai_auth_sign_prod_2023.pem', "r+").read()
root = le.parse(aadhar_file).getroot()
try:
verify = XMLVerifier().verify(root, x509_cert=cert)
except Exception as e:
print(str(e))

如果签名无效，将抛出异常

InvalidDigest:引用0的摘要不匹配

注意:请使用有效的证书(基于https://uidai.gov.in/ecosystem/authentication-devices-documents/about-aadhaar-paperless-offline-e-kyc.html推荐)来验证aadhaar xml