PHP docking Java reality plus sign verification

My implementation of the method, mainly to the Java generated key to PHP can recognize the key in PEM format, the other add-sign, check the use of call OpenSSL built-in signature method.

The key generated by Java is primarily a string, whereas the PEM format key is a 64-bit line with the following header and footer file formats, and PHP then obtains the relative PEM format string.

PEM format key

-----Begin public Key-----//64chars row (multiline)-----END public Key----------BEGIN RSA PRIVATE Key-----//64chars Row (multiline)----- END RSA PRIVATE KEY-----

1.java key to PEM-formatted PHP code

/** * Format the string format Public private key as a PEM format public key * @param $secret _key * @param $type * @return string */public static function Format_secret_ke Y ($secret _key, $type) {    //64 English characters followed by line feed "\ n", followed by line break "\ n"    $key = (WordWrap ($secret _key, (+), "\ n", true). " \ n ";    Add PEM format Header and tail    if ($type = = ' pub ') {        $pem _key = "-----BEGIN public key-----\ n". $key. "-----END public KEY-----\ n";    } else if ($type = = ' pri ') {        $pem _key = "-----BEGIN RSA PRIVATE key-----\ n". $key. "-----END RSA PRIVATE KEY-----\ n";    } else{        Echo (' Public private key type illegal ');        Exit ();    }    return $PEM _key;}

2. Add Sign

/** * RSA plus * @param $paramStr * @param $priKey * @return string */public static function sign ($PARAMSTR, $priKey) {    $s IGN = ";    Convert the string format Public private key to PEM format Public private key    $priKeyPem = Signutil::format_secret_key ($priKey, ' pri ');    Convert to OpenSSL key, must be a private key without pkcs8 conversion    $res = Openssl_get_privatekey ($priKeyPem);    Call OpenSSL built-in signature method, generate signature $sign    openssl_sign ($paramStr, $sign, $res);    Release Resource    Openssl_free_key ($res);    Base64 encoded signature    $signBase = Base64_encode ($sign);    URL encoded signature    $sign = UrlEncode ($signBase);    return $sign;}

3. Verification

/** * RSA Verification * @param $PARAMSTR * @param $sign * @param $pubKey * @return bool */public static function Verify ($PARAMSTR, $ Sign, $pubKey)  {    //Convert string format Public private key to PEM format Public private key    $pubKeyPem = Signutil::format_secret_key ($pubKey, ' Pub ');    The conversion to the OpenSSL key must be a public key that is not pkcs8 converted    $res = Openssl_get_publickey ($pubKeyPem);    URL decoding signature    $signUrl = UrlDecode ($sign);    Base64 decoding signature    $signBase = Base64_decode ($SIGNURL);    Call OpenSSL built-in method verification, return bool value    $result = (bool) openssl_verify ($PARAMSTR, $signBase, $res);    Release Resource    Openssl_free_key ($res);    Returns whether the resource was successfully returned    $result;}

The above describes the PHP docking Java reality plus sign verification, including the aspects of the content, I hope that the PHP tutorial interested in a friend helpful.

