My implementation of the method, mainly to the Java generated key to PHP can recognize the key in PEM format, the other add-sign, check the use of call OpenSSL built-in signature method.
The key generated by Java is primarily a string, whereas the PEM format key is a 64-bit line with the following header and footer file formats, and PHP then obtains the relative PEM format string.
PEM format key
-----Begin public Key-----//64chars row (multiline)-----END public Key----------BEGIN RSA PRIVATE Key-----//64chars Row (multiline)----- END RSA PRIVATE KEY-----
1.java key to PEM-formatted PHP code
/** * Format the string format Public private key as a PEM format public key * @param $secret _key * @param $type * @return string */public static function Format_secret_ke Y ($secret _key, $type) { //64 English characters followed by line feed "\ n", followed by line break "\ n" $key = (WordWrap ($secret _key, (+), "\ n", true). " \ n "; Add PEM format Header and tail if ($type = = ' pub ') { $pem _key = "-----BEGIN public key-----\ n". $key. "-----END public KEY-----\ n"; } else if ($type = = ' pri ') { $pem _key = "-----BEGIN RSA PRIVATE key-----\ n". $key. "-----END RSA PRIVATE KEY-----\ n"; } else{ Echo (' Public private key type illegal '); Exit (); } return $PEM _key;}
2. Add Sign
/** * RSA plus * @param $paramStr * @param $priKey * @return string */public static function sign ($PARAMSTR, $priKey) { $s IGN = "; Convert the string format Public private key to PEM format Public private key $priKeyPem = Signutil::format_secret_key ($priKey, ' pri '); Convert to OpenSSL key, must be a private key without pkcs8 conversion $res = Openssl_get_privatekey ($priKeyPem); Call OpenSSL built-in signature method, generate signature $sign openssl_sign ($paramStr, $sign, $res); Release Resource Openssl_free_key ($res); Base64 encoded signature $signBase = Base64_encode ($sign); URL encoded signature $sign = UrlEncode ($signBase); return $sign;}
3. Verification
/** * RSA Verification * @param $PARAMSTR * @param $sign * @param $pubKey * @return bool */public static function Verify ($PARAMSTR, $ Sign, $pubKey) { //Convert string format Public private key to PEM format Public private key $pubKeyPem = Signutil::format_secret_key ($pubKey, ' Pub '); The conversion to the OpenSSL key must be a public key that is not pkcs8 converted $res = Openssl_get_publickey ($pubKeyPem); URL decoding signature $signUrl = UrlDecode ($sign); Base64 decoding signature $signBase = Base64_decode ($SIGNURL); Call OpenSSL built-in method verification, return bool value $result = (bool) openssl_verify ($PARAMSTR, $signBase, $res); Release Resource Openssl_free_key ($res); Returns whether the resource was successfully returned $result;}
Above this PHP docking Java Reality plus sign verification of the example is small part of the whole content to share to everyone, I hope to give you a reference, but also hope that we support the script home.