Detailed explanation of php generating signature and verifying signature

墨辰丷
Release: 2023-03-28 15:54:01
Original
5591 people have browsed it

This article mainly introduces the relevant information about php generating signatures and verifying signatures in detail. Friends who need it can refer to

php generating signatures and verifying signatures

<?php
  /**
   * 根据原文生成签名内容
   *
   * @param string $data 原文内容
   *
   * @return string
   * @author confu
   */
  function sign($data)
  {
    $filePath = &#39;test.p12&#39;;
    if(!file_exists($filePath)) {
      return false;
    }
 
    $pkcs12 = file_get_contents($filePath);
    if (openssl_pkcs12_read($pkcs12, $certs, &#39;读取证书所需要的密码&#39;)) {
      $privateKey = $certs[&#39;pkey&#39;]; //根据实际情况键值可能不同
      $publicKey = $certs[&#39;cert&#39;]; //根据实际情况键值可能不同
      $binary_signature = "";
      if (openssl_sign($data, $binarySignature, $privateKey, OPENSSL_ALGO_SHA1)) {
        return $binarySignature;
      } else {
        return &#39;&#39;;
      }
    } else {
      return &#39;&#39;;
    }
  }
 
  /**
   * 验证签名自己生成的是否正确
   *
   * @param string $data 签名的原文
   * @param string $signature 签名
   *
   * @return bool
   * @author confu
   */
  function verifySign($data, $signature)
  {
    $filePath = &#39;test.p12&#39;;
    if(!file_exists($filePath)) {
      return false;
    }
 
    $pkcs12 = file_get_contents($filePath);
    if (openssl_pkcs12_read($pkcs12, $certs, &#39;读取证书所需要的密码&#39;)) {
      $publicKey = $certs[&#39;cert&#39;];
      $ok = openssl_verify($data, $signature, $publicKey);
      if ($ok == 1) {
        return true;
      }
    }
    return false;
  }
 
  /**
   * 验证返回的签名是否正确
   *
   * @param string $data 要验证的签名原文
   * @param string $signature 签名内容
   *
   * @return bool
   * @author confu
   */
  function verifyRespondSign($data, $signature)
  {
    $filePath = &#39;allinpay-pds.pem&#39;;
    if(!file_exists($filePath)) {
      return false;
    }
 
    $fp = fopen($filePath, "r");
    $cert = fread($fp, 8192);
    fclose($fp);
    $pubkeyid = openssl_get_publickey($cert);
 
    if(!is_resource($pubkeyid)) {
      return false;
    }
 
    $ok = openssl_verify($data, $signature, $pubkeyid);
    if ($ok == 1) {
      openssl_free_key($pubkeyid);
      return true;
    }
    return false;
  }
?>
Copy after login

openssl_sign The default signature_alg parameter is OPENSSL_ALGO_SHA1

If you use DSA encryption, you need to use the OPENSSL_ALGO_DSS1 parameter

 signature_alg Other parameters

 OPENSSL_ALGO_DSS1 (integer)

 OPENSSL_ALGO_SHA1 (integer)

 OPENSSL_ALGO_SHA224 (integer)

 OPENSSL_ALGO_SHA256 (integer)

OPENSSL_ALGO_SHA384 (integer)

OPENSSL_ALGO_SHA512 (integer)

OPENSSL_ALGO_RMD160 (integer)

OPENSSL_ALGO_MD5 (integer)

OPENSSL_ALGO_MD4 (integer)

 OPENSSL_ALGO_MD2 (integer)

The above is the entire content of this article, I hope it will be helpful to everyone's study.


Related recommendations:

Detailed explanation of how PHP collects emails based on IMAP

PHP implements file lock and process lock

Detailed explanation of how to change hosts file in PHP

The above is the detailed content of Detailed explanation of php generating signature and verifying signature. For more information, please follow other related articles on the PHP Chinese website!

Related labels:
source:php.cn
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Popular Tutorials
More>
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn:Public welfare online PHP training,Help PHP learners grow quickly!