PHP实现SHA1WithRSA签名和验签

慕芷涵

对接第三方服务时一般都会对数据签名和验签，sha1WithRSA是比较常用的一种签名算法,特别是和支付相关的的服务。
以下是使用 php 实现 SHA1WithRSA 签名和验签的方法:

1. <?php
   
2. 
   
3. //生成 sha1WithRSA 签名
   
4. function genSign($toSign, $privateKey){
   
5.     $privateKey = "-----BEGIN RSA PRIVATE KEY-----\n" .
   
6.         wordwrap($privateKey, 64, "\n", true) .
   
7.         "\n-----END RSA PRIVATE KEY-----";
   
8. 
   
9.     $key = openssl_get_privatekey($privateKey);
   
10.     openssl_sign($toSign, $signature, $key);
    
11.     openssl_free_key($key);
    
12.     $sign = base64_encode($signature);
    
13.     return $sign;
    
14. }
    
15. 
    
16. //校验 sha1WithRSA 签名
    
17. function verifySign($data, $sign, $pubKey){
    
18.     $sign = base64_decode($sign);
    
19. 
    
20.     $pubKey = "-----BEGIN PUBLIC KEY-----\n" .
    
21.                 wordwrap($pubKey, 64, "\n", true) .
    
22.                 "\n-----END PUBLIC KEY-----";
    
23. 
    
24.     $key = openssl_pkey_get_public($pubKey);
    
25.     $result = openssl_verify($data, $sign, $key, OPENSSL_ALGO_SHA1) === 1;
    
26.     return $result;
    
27. }
    
28. 
    
29. //测试
    
30. $privateKey = "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";
    
31. $pubKey = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCCxS3ZhcHzRwhpN76cI/xUfV6RPY41a3i5TmiBJEgDljn88Qhe6THkstFA66ES4Hyw+J0G1HCuQE+4IPDxDOh/fUhB3KQZEyoXytYiOYlPbDf1hi9hbeU/7sKPig+19wrKjA9B7DELb/2ByXgM/0j3+c8g+SrbcKIV18zvGtz9aQIDAQAB";
    
32. 
    
33. //生成签名
    
34. $sign = genSign("test", $privateKey);
    
35. //校验签名
    
36. $rs = verifySign("test", $sign, $pubKey);
    
37. var_dump($rs);

复制代码