Skip to content
项目
群组
代码片段
帮助
当前项目
正在载入...
登录 / 注册
切换导航面板
N
Nse
概览
Overview
Details
Activity
Cycle Analytics
版本库
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
问题
0
Issues
0
列表
Board
标记
里程碑
合并请求
0
Merge Requests
0
CI / CD
CI / CD
流水线
作业
日程表
图表
维基
Wiki
代码片段
Snippets
成员
Members
Collapse sidebar
Close sidebar
活动
图像
聊天
创建新问题
作业
提交
Issue Boards
Open sidebar
吴超
Nse
Commits
17e4ec8a
Commit
17e4ec8a
authored
Aug 19, 2025
by
wuchao
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
改中文
parent
0efad932
全部展开
隐藏空白字符变更
内嵌
并排
正在显示
5 个修改的文件
包含
109 行增加
和
109 行删除
+109
-109
src/main/resources/HsmConfig.properties
+4
-4
src/main/resources/config.properties
+65
-65
src/main/resources/msg_cn.properties
+0
-0
src/main/resources/proxyconfig.properties
+1
-1
src/main/resources/webtoolsmsg_cn.properties
+39
-39
没有找到文件。
src/main/resources/HsmConfig.properties
View file @
17e4ec8a
##################
下面是物理加密机配置
####################
###
加密机
IP
##################
??????????
####################
###
???
IP
hsm.ips
=
192.168.2.101
###
加密机端口
###
?????
hsm.port
=
10000
###
加密机密钥随机方式一般不需要修改
###
????????????????
strategy
=
poll
src/main/resources/config.properties
View file @
17e4ec8a
[\u6570\u636E\u6301\u4E45\u5316\u914D\u7F6E]
#IP
信息
#IP
??
#jdbc.host=192.168.2.127
#
正式环境
#
????
jdbc.host
=
127.0.0.1
#jdbc.host=192.168.2.228
#
端口信息
#
????
#jdbc.port=54321
jdbc.port
=
3306
#
数据库实例
#
?????
jdbc.kingbase.dbname
=
security
#jdbc.dbname=encryption_gateway
#jdbc.dbname=encryption_king
#
如果配置数据库类型是H2,则jdbc.dbname的值是
public
#
??????????H2,?jdbc.dbname???
public
jdbc.dbname
=
public
#jdbc.dbname=encryption
basePath
=
/home/trustz
...
...
@@ -22,7 +22,7 @@ maskingPath=/home/masking
jdbc.driver
=
org.h2.Driver
#jdbc-kingbase8
#jdbc.driver: com.kingbase8.Driver
#
正式环境
#
????
#url-kingbase8
#jdbc.url=jdbc:kingbase8://${jdbc.host}:${jdbc.port}/${jdbc.kingbase.dbname}?currentSchema=${jdbc.dbname}
#jdbc.url=jdbc:mysql://${jdbc.host}:${jdbc.port}/${jdbc.dbname}?useSSL=false&useUnicode=true&characterEncoding=UTF-8&serverTimezone=GMT%2B8
...
...
@@ -48,11 +48,11 @@ licensedir=${basePath}/data/infa_file/lic
#licensedir=D:/lic
#\u662F\u5426\u9700\u8981licenseKey 0:\u4E0D\u9700\u8981\u9A8C\u8BC1 1\uFF1A\u9700\u8981\u9A8C\u8BC1
isNeedLicenseKey
=
0
#
错误登录允许次数
#
????????
login_limit_num
=
5
#
平台jar包部署路径
#
??jar?????
deployPath
=
${basePath}/data
#
系统版本号
#
?????
sys_version
=
v2.9
[\u65E5\u5FD7\u5C5E\u6027]
#\u8BBE\u7F6E\u65E5\u5FD7\u6587\u4EF6\u8DEF\u5F84
...
...
@@ -87,61 +87,61 @@ rateDir=${basePath}/data/infa_project/rate/
confidenceRate
=
0.6
#\u53D1\u73B0\u4EFB\u52A1\uFF0C\u65E0\u7ED3\u6784\u6587\u4EF6\u56FE\u7247\u53D1\u73B0\uFF0C\u4E0B\u8F7D\u672C\u5730\u8DEF\u5F84\uFF08FTP/SFTP\uFF09
pictureDir
=
${basePath}/data/infa_project/pic/
#
发现任务 一次查询的条数
#
???? ???????
readCntByOneTime
=
10000
#
发现任务 JDBC一次插入的条数
#
???? JDBC???????
jdbc_insert_batche_size
=
10000
#
是否为重复数据
#
???????
isrepeatvalue
=
0.1
#excelModelDown=D:\\masking\\
#
数据域-发现规则导入模板
#
???-????????
#dataAreaExportTemplate=E:/
dataAreaExportTemplate
=
${basePath}/data/infa_file/dataAreaExportTemplate/
[OTHERS]
#
要导出的数据库名称
#
?????????
#jdbc.exportDatabaseName=encryption_test
jdbc.exportDatabaseName
=
${jdbc.dbname}
#
要导入的数据库所在路径
#
???????????
jdbc.importPath
=
${basePath}/data/importMysqlSql/backup.sql
#mysql
下的bin文件的路径
#mysql
??bin?????
#MysqlPath=C:\\Program Files (x86)\\MySQL\\MySQL Server 5.5\\bin\\
MysqlPath
=
/usr/bin/
#MysqlPath=C:\\Program Files (x86)\\Mysql\\mysql-8.0.23-winx64\\bin\\
#
导出的数据库存放路径
#
??????????
jdbc.exportPath
=
${basePath}/data/exportMysqlSql/backup.sql
#jdbc.exportPath=D:/ghca/data/exportMysqlSql/backup.sql
#
要导入的目标数据库
#
?????????
jdbc.importDatabaseName
=
${jdbc.dbname}
#jdbcproxypath = E:\\IdeaProjects\\p6-encryption-pom\\target\\encryption-proxy-jar-with-dependencies.jar
#jdbcproxypath = C:\\work\\repo\\com\\ghca\\encryption-proxy\\1.0\\encryption-proxy-1.0-jar-with-dependencies.jar
jdbcproxypath
=
${basePath}/data/encryption/encryption-proxy.jar
# udf
目录
# udf
??
udfproxypath
=
${basePath}/data/udf/
# sqlserverudf
文件位置
# sqlserverudf
????
sqlserverudfpath
=
${basePath}/data/udf/sqlserver-udf.dll
odbcproxypath
=
${basePath}/data/encryption/masking_odbc.zip
jdbcmaskingfilename
=
encryption.properties
desensitizationStrategyfilename
=
masking.properties
#
数据库连接文件的存储路径
#
????????????
databaselink
=
${basePath}/data
#exceptionSqlPath = D:/exceptionSql/
exceptionSqlPath
=
${basePath}/data/exceptionSql/
#
轮询自检下载文件路径
#
??????????
#exceptionKmLogPath = D:/kmlog/
#
轮询自检 下载文件地址
#
???? ??????
exceptionKmLogPath
=
${basePath}/data/kmlog/
logDetail
=
logDetail.log
#
加密机SDKKeyId index SM2内部加密专用 SM4不需要
#SDKKeyId
:110 是密钥索引 SDKPassword:pass是私钥授权码
#
???SDKKeyId index SM2?????? SM4???
#SDKKeyId
?110 ????? SDKPassword?pass??????
SDKKeyId
=
110
#
加密机password SM2内部加密专用 SM4不需要
#
???password SM2?????? SM4???
SDKPassword
=
pass
SDKPath
=
${basePath}/data/HsmConfig.properties
#SDKPath = E:/HsmConfig/HsmConfig.properties
...
...
@@ -153,49 +153,49 @@ digestSuffix = _enc
checkNum
=
100
corePoolSize
=
4
maxPoolSize
=
4
#
线程池最大队列数
#
????????
queueCapacity
=
4
#oceanbase
最大提交条数
#oceanbase
??????
oceanbasecount
=
3
encbatchcount
=
10000
#ES
等待时间
#ES
????
esWaitTime
=
2000
loginfilepath
=
D:/login.properties
#
告警
begin
#
??
begin
app_alert_interface
=
http://127.0.0.1:8180/core/applog/sendAlertInfo
db_alert_interface
=
http://127.0.0.1:8180/core/dblog/sendAlertInfo
#
邮件接收人
#
?????
mailTo
=
shuyi666@aliyun.com
#
告警
end
#
??
end
#
审计日志
begin
# app
审计日志存储路径\app规则匹配日志存储路径
#
????
begin
# app
????????\app??????????
#appserverlogpath = E:/app/
appserverlogpath
=
${maskingPath}/app/appdata/
#
审计日志转
syslog
#
?????
syslog
#syslog4auditserverlogpath = E:/s4a
syslog4auditserverlogpath
=
${maskingPath}/s4a/s4adata/
# db
访问日志存储路径
# db
????????
#dbaccesslogpath = E:/syslog/access/
dbaccesslogpath
=
${maskingPath}/app/syslog/access/
# db
规则匹配日志存储路径
# db
??????????
#dbrulelogpath = E:/syslog/rule/
dbrulelogpath
=
${maskingPath}/app/syslog/rule/
#
语句类型
#
????
auditlog_type
=
SELECT,UPDATE,DELETE
# app
审计服务地址
# app
??????
applogServerHost
=
127.0.0.1
applogServerPort
=
32376
# db
审计服务地址
# db
??????
dblogServerHost
=
127.0.0.1
dblogServerPort
=
40000
#
审计日志转
syslog
#
?????
syslog
s4aServerHost
=
127.0.0.1
s4aServerPost
=
40000
#
审计日志
end
#
????
end
#
数据源字符编码
#
???????
oraclecharset
=
AL32UTF8,ZHS16GBK
mysqlcharset
=
UTF8,GBK
postgresqlcharset
=
UTF8,GBK
...
...
@@ -225,55 +225,55 @@ mongodbcharset = UTF8,GBK
escharset
=
UTF8,GBK
oceanbasecharset
=
UTF8,GBK
gaussdbcharset
=
UTF8,GBK
#like
是否执行按照单个字符进行加密开关。1表示按照单个字符进行加密。0表示按照字符串整体进行加密。 默认不开启为
0
#like
?????????????????1?????????????0?????????????? ??????
0
encryption.like.open
=
1
#
单个字符加密后连接起来用某个字符进行分割
#
????????????????????
encryption.like.split
=
#
#
加密标识
#
????
encryption.label = jm_
#
加密标识后缀
#
??????
encryption.label.suffix
=
_jm
#
加密标识
#
????
encryption.es.label
=
jmjzrjjm
#
程序中一切跟配置库相关的操作 默认是mysql 为0。peizhikudbtype 为1时 代表 人大金仓 peizhikudbtype 为2时 代表达梦配置库 为3时 代表h2database配置库
#
?????????????? ???mysql ?0?peizhikudbtype ?1? ?? ???? peizhikudbtype ?2? ??????? ?3? ??h2database???
peizhikudbtype
=
3
#
是否开启操作日志记录
#
??????????
isSaveServerClientLog
=
false
#
加密卡秘钥配置 x,y分量可以通过导出公玥接口每次获取 M是密钥明文的哈希值,C是密钥的密文 L 向量长度是16字节的
#
??????? x,y???????????????? M??????????C?????? L ?????16???
ECCCipher.bits
=
0L
ECCCipher.x
=
0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -83, 42, -40, -13, -22, -108, 70, 42, 123, 40, 88, -37, 76, 90, 105, 55, 46, -59, -3, -43, 71, -120, 104, -84, 42, -77, 94, -112, 45, -93, 58, -45
ECCCipher.y
=
0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, -65, 18, -33, -28, -99, 39, -126, 89, 37, -15, -82, -46, -25, 40, 2, -44, 71, 102, 30, 113, -63, -78, -89, -55, -52, 38, 61, -109, 4, -122, 38, -30
ECCCipher.M
=
0, 27, 28, 35, 90, -3, -128, 76, -117, -31, 83, 84, 46, 61, -97, -92, 120, -19, 46, -121, -27, -107, -58, 90, 118, 0, 6, 105, 68, -41, 96, 30
ECCCipher.C
=
-18, 92, 111, -108, 103, -78, 28, 59, 67, -5, -101, -38, 40, 115, -72, 71, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
ECCCipher.L
=
16
#
加密卡句柄获取权限密码配置
#
?????????????
Ccore.PhKeyHandle.password
=
11111111
#
加密校验定时任务时间
#
??????????
digestperiod
=
5
#
加密校验秘钥
#
??????
digestkey
=
ghca
#
加密/解密生成copy列,列最大长度设置
#
??/????copy?????????
encryption.field.max
=
10000
#mongodb
主键
#mongodb
??
encryption.mongodbpk
=
_id
#
达梦拼
sql
#
???
sql
dmschema
=
encryption
#
导入导出 0 excel 1 加密
txt
#
???? 0 excel 1 ??
txt
is_enc_backupfile
=
1
#
加密txt秘钥
#
??txt??
is_enc_backupfile_key
=
6C603060274AED6FFB93EDB40E23E173
#0
拉取当前项目下的加密配置信息 1 拉取平台下 所有项目的配置信息
#0
?????????????? 1 ????? ?????????
is_pull_all
=
0
#
保存旧日志路径
#
???????
oldlogpath
=
${basePath}/data/systemlog
#
系统控制台路径
#
???????
commandpath
=
${basePath}/data/commandlog
#json
加密标识
#json
????
jsonkey
=
jsonkey
#
三未JCE接口配置文件
#
??JCE??????
swsdsPath
=
${basePath}/jdk_dev
#
是否依赖历史数据加密(0.不需要加密历史数据 1.必须加密历史数据 )
#
???????????0.????????? 1.???????? ?
is_encrypted
=
1
src/main/resources/msg_cn.properties
View file @
17e4ec8a
差异被折叠。
点击展开。
src/main/resources/proxyconfig.properties
View file @
17e4ec8a
#
发送应用用户”是否明文“等配置的接口地址
#
???????? ???? ?????????
proxy.sendAppUserOriginalUri
=
/encryptionGatewayController/receiveAppUserOriginalInfos
proxy.sendGatewayUserOriginalUri
=
/encryptionGatewayController/receiveGatewayUserOriginalInfos
proxy.sendGlobalOriginalConfig
=
/encryptionGatewayController/receiveAppUserGlobalOriginalConfig
...
...
src/main/resources/webtoolsmsg_cn.properties
View file @
17e4ec8a
POP_00001
=
{0}
项目的{1}名称不能为空!
POP_00002
=
{0}
名称已存在!
POP_00003
=
获取{0}数据条数为0条!
POP_00004
=
{0}
更新失败!
POP_00005
=
{0}
新增失败!
POP_00006
=
{0}
删除失败!
POP_00007
=
{0}
任务执行失败!
POP_00008
=
{0}
不存在!
POP_00009
=
连接成功。
POP_00014
=
成功。
POP_00015
=
失败。
POP_00017
=
测试成功。
POP_00018
=
测试失败。
POP_00019
=
数据域名已存在,不能重复进行注册。
POP_00001
=
{0}
???{1}???????
POP_00002
=
{0}
??????
POP_00003
=
??{0}?????0??
POP_00004
=
{0}
?????
POP_00005
=
{0}
?????
POP_00006
=
{0}
?????
POP_00007
=
{0}
???????
POP_00008
=
{0}
????
POP_00009
=
?????
POP_00014
=
???
POP_00015
=
???
POP_00017
=
?????
POP_00018
=
?????
POP_00019
=
?????????????????
DIS_ERR_01
=
本地数据库连接异常
:{0}
DIS_ERR_02
=
执行sql失败
:{0}
DIS_ERR_03
=
获取数据源连接失败
:{0}
DIS_ERR_01
=
?????????
:{0}
DIS_ERR_02
=
??sql??
:{0}
DIS_ERR_03
=
?????????
:{0}
DDM_10000
=
用户[{0}]执行[{1}]进行了查询操作。
DDM_10000
=
??[{0}]??[{1}]????????
#
登录信息
LGS_ERR_001
=
您未上传
LICENCE
LGS_ERR_002
=
IP
地址不匹配
LGS_ERR_0021
=
MAC
地址不匹配
LGS_ERR_003
=
时间不匹配
LGS_ERR_004
=
上传失败
LGS_ERR_005
=
用户已停用
LGS_ERR_006
=
您的账户已被锁定,请联系管理员!
LGS_ERR_007
=
密码错误!您还有"{0}"次机会
LGS_ERR_008
=
密码错误!
LGS_ERR_009
=
为保证用户安全,请联系管理员及时修改密码
!
LGS_ERR_010
=
请更新您的数据库表
LGS_ERR_011
=
用户不存在!
LGS_001
=
已激活!
#
????
LGS_ERR_001
=
????
LICENCE
LGS_ERR_002
=
IP
?????
LGS_ERR_0021
=
MAC
?????
LGS_ERR_003
=
?????
LGS_ERR_004
=
????
LGS_ERR_005
=
?????
LGS_ERR_006
=
????????????????
LGS_ERR_007
=
????????"{0}"???
LGS_ERR_008
=
?????
LGS_ERR_009
=
???????,????????????
!
LGS_ERR_010
=
?????????
LGS_ERR_011
=
??????
LGS_001
=
????
#
文件信息
FIS_001
=
文件不能为空!
FIS_002
=
上传的文件格式不对!
FIS_003
=
上传失败!
#
????
FIS_001
=
???????
FIS_002
=
??????????
FIS_003
=
?????
#Token
验证信息
TOK_ERR_001
=
无token,请重新登录
TOK_ERR_002
=
登录超时,请重新登录!
#Token
????
TOK_ERR_001
=
?token??????
TOK_ERR_002
=
???????????
编写
预览
Markdown
格式
0%
重试
或
添加新文件
添加附件
取消
您添加了
0
人
到此讨论。请谨慎行事。
请先完成此评论的编辑!
取消
请
注册
或者
登录
后发表评论