Comments (2)
xy-peng
commented on May 23, 2024
平台证书是会不定期更新。 但是httpclient build 之后，httpclient 的平台证书固定下来了，那如何将平台证书更新？
你说得没错。目前只能通过外部工具更新证书，再重启服务来使用新证书。
从库的设计上来说，是计划有扩展的，可通过实现新的verifier来达到证书更新，比如内部定时更新证书，诸如此类。
从架构上来说，我觉得采用类似中心服务器，负责私钥证书管理更新、签名验签更合理。这时的signer/verifier走rpc去交给中心服务器干活，更安全，更职责单一。
总而言之，我们会提供内部定时更新证书的verifier实现。也欢迎开发者参与建设，提交pr。
from wechatpay-apache-httpclient.
wonderlq
commented on May 23, 2024
ok ，了解了。另外希望能提供 回调通知消息的验签实现，目前只有对response 的签名验签。
from wechatpay-apache-httpclient.
Related Issues (20)
- 对小程序支付生成的httpClient进行代理设置不生效 HOT 11
- 请问如何构造测试回调数据？ HOT 10
- 不支持httpClient5版本库 HOT 1
- 如何正确初始化CloseableHttpClient？何时关闭CloseableHttpClient？ HOT 3
- 使用DefaultHttpClientBuilder构造出来的HttpClient需要关闭吗？ HOT 1
- 使用了定时更新平台证书功能，并且使用Verifier在调用接口时获取平台证书。但是怎么获取平台证书序列号以满足接口对header里的Wechatpay-Serial的需求呢 HOT 9
- 为什么我用certificate.getSerialNumber()获取到的序列号和正确的序列号不一样
- empty [Wechatpay-Serial] 应答的微信支付签名验证失败
- 仅签名不验签 HOT 1
- 日志打印body内容乱码 HOT 1
- 回调验签失败 HOT 2
- AutoUpdateCertificatesVerifier弃用后有其他替代方案吗 HOT 1
- No 0.4.9 in Maven Central HOT 1
- Start
- 是否提供一个Spring Boot 3.0的支持版本？ HOT 4
- 【Help】使用demo中的例子上传图片返回400 badrequest HOT 4
- 支付回调验签报错 HOT 2
- 使用时Verifier没有办法初始化在springboot中 HOT 2
- 吊毛写的什么够吧文档
- 下单按照文档的格式写，遇到报错：Http头Authorization值格式错误，请参考《微信支付商户REST API签名规则》 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wechatpay-apache-httpclient.