How does PHP support CURL string certificate transmission (detailed solution process)-PHP Tutorial-php.cn

How does PHP support CURL string certificate transmission (detailed solution process)

little bottle

Release： 2023-04-05 22:02:01

forward

2594 people have browsed it

Background

Recently, when connecting to WeChat payment, we need to use certificates at the refund point. Since we are a SAAS platform, we need to support multi-party and multi-channel payments. If we save all certificate files in the application server, it will Affected by SLB, the files on a certain machine will be out of sync and hinder the refund process. However, if the files are stored in OSS, the backend must download them from OSS to the application server to ensure consistency. After much deliberation, we finally decided to save the certificate content in the database. Different customers correspond to one certificate file. No matter how many machines are used in the cluster, the consistency of the file can be ensured and redundant downloading steps can be avoided.

Problem

But I encountered a problem just after I did it. PHP's CURL certificate does not support the transmission of strings, and can only fill in the certificate path (the following is the official statement)

Client certificates must be specified by a path expression to a certificate store.

Solution process

My first thought is to create a blank file and write the certificate content Go in, wait for the certificate to be used, and then delete the file. However, the operation of creating an entity file and then deleting it consumes performance and is very troublesome. Is there a way to create a temporary file? Yes, the tmpfile() function can help us create a temporary file and get the file path, so I wrote a method to get the temporary file path

<?php
    public function getTmpPathByContent($content)
    {
        $tmpFile = tmpfile();
        fwrite($tmpFile, $content);
        $tempPemPath = stream_get_meta_data($tmpFile);
        return $tempPemPath[&#39;uri&#39;];  ///tmp/phpXZCtAO
    }
?>

Copy after login

What is sad is that through this The content of the path returned by the method cannot be read at all, and I even thought that I had been cheated.

file_get_contents(/tmp/phpyyiOZv): failed to open stream: No such file or directory

Copy after login

I found the reason after reading the official documentation. Iftmpfile()the handle reference count returned is 0 If so, the temporary file will be recycled, and the temporary path will naturally become invalid. Obviously, after the method getTmpPathByContent() is executed, the life cycle of the local variable $tmpFile will end (official document As follows)

The file is automatically removed when closed (for example, by calling fclose(), or when there are no remaining references to the file handle returned by tmpfile()), or when the script ends.

After confirming the root cause, we now urgently need to find a variable type whose life cycle terminates when the process ends to save the handle. What type can meet the conditions? static variables. The difference between static variables and local variables is that memory space is allocated for them at the beginning of the PHP life cycle and stored in the global variable area. Global variables are destroyed during the module shutdown phase. In this case, declare static variables You can make $tmpFile the reference count continue to remain greater than 0, then our code can do the following processing

<?php
    public function getTmpPathByContent($content)
    {
        static $tmpFile = null;
        $tmpFile = tmpfile();
        fwrite($tmpFile, $content);
        $tempPemPath = stream_get_meta_data($tmpFile);
        return $tempPemPath[&#39;uri&#39;];
    }
?>

Copy after login

Execute it again and successfully read the contents of the temporary file

Copy after login

Now you can set the generated temporary file address to CURLOPT_SSLCERT

<?php
    $sslCertPath = getTmpPathByContent($content);
    curl_setopt($ch,CURLOPT_SSLCERT, $sslCertPath);
    //......
?>

Copy after login

[Recommended course: PHP video tutorial]

The above is the detailed content of How does PHP support CURL string certificate transmission (detailed solution process). For more information, please follow other related articles on the PHP Chinese website!