HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/1-1735672558.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
客户端随机数
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/3-1735672559.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
38758a4f2c93c59388659001892dc09a5eb1dbbfd4718c2e4f00a2522f5dc165服务端随机数
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/6-1735672561.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
6569aae8de02ef5a3aba4a36cac968265c190c4e3c922c508695d5786310d504加密证书
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/4-1735672562.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
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加密证书长度
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/0-1735672564.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
000291签名原始数据=客户端随机数+服务端随机数+加密证书长度+加密证书
38758a4f2c93c59388659001892dc09a5eb1dbbfd4718c2e4f00a2522f5dc1656569aae8de02ef5a3aba4a36cac968265c190c4e3c922c508695d5786310d5040002913082028d30820231a003020102021210020403230601104d759cd21a2aa4f7ae08300c06082a811ccf5501837505003042310b300906035504061302434e310d300b060355040a0c04424a4341310d300b060355040b0c04424a43413115301306035504030c0c746573745365636f6e644341301e170d3233303630313032313332325a170d3238303533303032313332325a30123110300e06035504030c07676d74657374323059301306072a8648ce3d020106082a811ccf5501822d03420004fd4ae27f61298af792d0fa870854d2e00909dcdcca7b9e820ef4c906f3b4ce3bbec4a90b1b67d4e5ef1dbcc5f122843ff4414a90a2656d5a1c82b8d6581f9bb8a38201333082012f30090603551d13040230003014060a2a811c86ef3202010a0204060c04585858583014060a2a811c86ef3202010a0104060c0458585858300e0603551d0f0101ff0404030203383081a50603551d1f04819d30819a304aa048a046a44430423115301306035504030c0c746573745365636f6e644341310d300b060355040b0c04424a4341310d300b060355040a0c04424a4341310b300906035504060c02434e304ca04aa0488646687474703a2f2f3139322e3136382e3131382e3131393a31383036302f63617765622f63726c2f746573745365636f6e6443412f746573745365636f6e6443415f302e63726c301d0603551d0e04160414ec410e88f155fa357a994b649a8c8f07038cd4a1301f0603551d2304183016801482f875517e694a219be9111651403e4b074b6c4b300c06082a811ccf55018375050003480030450220357ae6ad582b2812393b24fc9960b585c746e1f95fc0bc659df787dfaeb46a51022100e4f14bb131ed91b258650536def373e02698b0ec14f8e69edfd9185553ad7cdc签名结果
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/9-1735672566.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
3045022100bc15fee77d2cb8369561ea43ac7361c8f1df6e4f01e8c711310f7a1df416870b02201181427a28816b18a8c86163358c538de85d7bab7298cf288cf60e8434985f0d签名证书
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/8-1735672567.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
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签名公钥
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/6-1735672569.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/2-1735672570.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
03 42 00 04 C0 BE 91 EA 15 F1 96 47 F0 CA 00 6C AB 67 B9 CC 1C 73 C2 48 0A E3 C1 84 F7 F3 71 80 8D 5D 8E B7 4C DC B2 FE E3 3F 71 2F 8F CC 50 65 07 2A 31 B0 A3 DC 96 11 60 38 EF FE 9B 06 16 1B 22 93 B3 65![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/6-1735672572.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
03420004C0BE91EA15F19647F0CA006CAB67B9CC1C73C2480AE3C184F7F371808D5D8EB74CDCB2FEE33F712F8FCC5065072A31B0A3DC96116038EFFE9B06161B2293B365hex
04C0BE91EA15F19647F0CA006CAB67B9CC1C73C2480AE3C184F7F371808D5D8EB74CDCB2FEE33F712F8FCC5065072A31B0A3DC96116038EFFE9B06161B2293B365User ID
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/9-1735672573.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
当签发的证书为自签名证书时，缺省签名者ID用UFT_8字符串表示是“1234567812345678”，用十六进制表示是0x31323334353637383132333435363738
验签成功
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/10-1735672575.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/8-1735672576.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/8-1735672577.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/8-1735672579.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/1-1735672580.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/4-1735672582.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
![【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别](http://cn-sec.com/wp-content/uploads/2025/01/1-1735672583.png "【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别")
原文始发于微信公众号（利刃信安）：【扫盲系列】HTTPS 和 SSL/TLS 协议[8]：国密TLCP之身份鉴别
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论