Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(PHP ActiveX) RSASSA-PSS Sign String to Create Base64 PCKS7 SignatureSigns a string to create a PKCS7 signature in the base64 encoding. The signature algorithm is RSASSA-PSS with SHA256. Note: This example requires Chilkat v9.5.0.67 or greater.
<?php // This example requires the Chilkat Crypt API to have been previously unlocked. // See Unlock Chilkat Crypt for sample code. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2') $crypt = new COM("Chilkat.Crypt2"); // Get a digital certificate with private key from a .pfx // (Chilkat has many different ways to provide a cert + private key for siging. // Using a PFX is just one possible option.) // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Pfx') $pfx = new COM("Chilkat.Pfx"); $success = $pfx->LoadPfxFile('qa_data/rsassa-pss/privatekey.pfx','PFX_PASSWORD'); if ($success != 1) { print $pfx->LastErrorText . "\n"; exit; } // Get the certificate to be used for signing. // (The typical case for a PFX is that it contains a cert with an associated private key, // as well as other certificates in the chain of authentication. The cert with the private // key should be in the first position at index 0.) // cert is a Chilkat.Cert $cert = $pfx->GetCert(0); if ($pfx->LastMethodSuccess != 1) { print $pfx->LastErrorText . "\n"; exit; } $crypt->SetSigningCert($cert); // Indicate that RSASSA-PSS with SHA256 should be used. $crypt->SigningAlg = 'pss'; $crypt->HashAlgorithm = 'sha256'; $crypt->EncodingMode = 'base64'; // Sign a string and return the base64 PKCS7 detached signature $originalText = 'This is a test'; $pkcs7sig = $crypt->signStringENC($originalText); print 'Detached Signature:' . "\n"; print $pkcs7sig . "\n"; // This signature looks like this: // MIIG5wYJKoZIhvcNAQcCoIIG2DCCBtQCAQExDzANBgl .. YToLqEwTdU87ox5g7rvw== // The ASN.1 of the signature can be examined by browsing to https://lapo.it/asn1js/ , // then copy-and-paste the Base64 signature into the form and decode.. // The signature can be verified against the original data like this: $success = $crypt->VerifyStringENC($originalText,$pkcs7sig); print 'Signature verified: ' . $success . "\n"; $success = $crypt->VerifyStringENC('Not the original text',$pkcs7sig); print 'Signature verified: ' . $success . "\n"; // Now we'll create an opaque signature (the opposite of a detached signature). // An opaque signature is a PKCS7 message that contains both the original data and // the signature. The verification process extracts the original data. $opaqueSig = $crypt->opaqueSignStringENC($originalText); print 'Opaque Signature:' . "\n"; print $opaqueSig . "\n"; // The ASN.1 of the signature can be examined by browsing to https://lapo.it/asn1js/ , // then copy-and-paste the Base64 signature into the form and decode.. // We can verify and extract the original data: $origTxt = $crypt->opaqueVerifyStringENC($opaqueSig); if ($crypt->LastMethodSuccess != 1) { print 'Signature verification failed.' . "\n"; print $crypt->LastErrorText . "\n"; exit; } print 'Signature verified.' . "\n"; print 'Extracted text:' . $origTxt . "\n"; ?> |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.