2016-09-24 91 views
0

我正在使用应用内购买在我的应用程序...现在我想验证收据,并验证收据签名我使用AppDelegate下面的代码(按顺序要知道,如果用户启动应用程序时)Xcode验证收据签名错误

实际的代码来自WWDC 2013已经购买了它 - 会话308 ;-)

NSURL *receiptURL = [[NSBundle mainBundle] appStoreReceiptURL]; 
NSData *receiptData = [NSData dataWithContentsOfURL:receiptURL]; 
NSData *certificateData = [NSData dataWithContentsOfURL:[[NSBundle mainBundle] URLForResource:@"AppleIncRootCertificate" withExtension:@"cer"]]; 

/* The PKCS #7 container (the receipt) and The Apple root certificate. */ 
BIO *b_receipt = BIO_new_mem_buf((void *) [receiptData bytes], (int)[receiptData length]); 
BIO *b_x509 = BIO_new_mem_buf((void *)[certificateData bytes], (int)[certificateData length]); 

// Convert receipt data to PKCS #7 Representation 
PKCS7 *p7 = d2i_PKCS7_bio(b_receipt, NULL); 

/* Create the root certificate */ 
X509_STORE *store = X509_STORE_new(); 
X509 *appleRootCA = d2i_X509_bio(b_x509, NULL); 
X509_STORE_add_cert(store, appleRootCA); 

/* Verify the signature. If the verification is correct, b_receiptPayload will contain the PKCS #7 payload and result will be 1. */ 
BIO *b_receiptPayload = BIO_new(BIO_s_mem()); 
int result = PKCS7_verify(p7, NULL, store, NULL, b_receiptPayload, 0); 
if (result == 1) 
{ 
    NSLog(@"Receipt Signature is valid"); 
} else { 
    unsigned long error = ERR_get_error(); 
    const char* error_str = ERR_error_string(error, NULL); 
    NSLog(@"OpenSSL Error: %s",error_str); 
} 

,但我总是得到以下OpenSSL的错误:错误:2006F079 :lib(32):func(111):reason(121)

我已经googl它但没有任何结果......任何建议?

验证收据签名的另一种方法是?

预先感谢您的合作...

+0

我使用这个库 - https://github.com/robotmedia/RMStore。这里是如何使用收据验证的信息https://github.com/robotmedia/RMStore/wiki/Receipt-verification – Traveler

+0

谢谢,我会检查它... – jankoesp

回答

0

解决这里

两件事情:

1)我忘了 “AppleIncRootCertificate.cer” 添加到我的应用程序的资源包,这是对我的项目,显然这是强制性的。

2)在下面的代码行是必要过于:

OpenSSL_add_all_digests(); 

(或OpenSSL_add_all_algorithms();代替)

,它有前

int result = PKCS7_verify(p7, NULL, store, NULL, b_receiptPayload, 0); 

现在将要放置工作...

PS:顺便说一句,在Term中使用下面的代码行是个好主意inal(为了知道错误是指什么):

openssl errstr "errornumber" (i.e.openssl errstr 2006F079)