javaopenssl签名_java–使用PHPopenssl_verify()函数来验证Android客户端APP创建的签名和数据...

我在

openssl_verify()上看过帖子

我想问一些与openssl_verify()有关的问题.

因为我的PHP代码无法验证从Java创建的签名…

对于服务器端,这是我的PHP代码

$data &＃61;$_POST[&＃39;data&＃39;];

$signature&＃61;$_POST[&＃39;sig&＃39;];

$pub_key&＃61;$_POST[&＃39;pubkey&＃39;];

function print_input()

{

global $data;

global $signature;

global $pub_key;

// I output the public key to file, and check it to make sure they

// are in correct pem format.

///

$f&＃61;fopen("./Personnel_Pubkey/pubkey.pem", "w");

fwrite($f,"$pub_key");

fclose($f);

$key &＃61; openssl_pkey_get_public ("./Personnel_Pubkey/pubkey.pem");

// doesn&＃39;t work if you use PEM format public key, only works with X.509 format

// certificate, and cert and private key in PEM format.

$result&＃61;openssl_public_decrypt ( $signature, $data, $key);

$sig&＃61;base64_decode($signature);

// for some reason, the value of $ok is always 0

$ok &＃61; openssl_verify($data, $sig, $key);

if ($ok &＃61;&＃61; 1) {

echo "good";

}

elseif ($ok &＃61;&＃61; 0) {

echo "bad";}

else {

echo "ugly, error checking signature";

}

}

print_input();

?>

对于客户端Android APP,这里是相关的代码部分&＃xff1a;

// create public key and private key pair

keyGen &＃61; KeyPairGenerator.getInstance("DSA");

SecureRandom random &＃61; SecureRandom.getInstance("SHA1PRNG");

keyGen.initialize(1024, random);

// Generate the Pair of Keys The final step is to generate the key pair

// and to store the keys in PrivateKey and PublicKey objects.

pair &＃61; keyGen.generateKeyPair();

priv &＃61; pair.getPrivate();

pub &＃61; pair.getPublic();

// Change to PEM format from original openssl format

stringWriter &＃61; new StringWriter();

PEMWriter pemWriter &＃61; new PEMWriter(stringWriter);

pemWriter.writeObject( pair.getPublic());

pemWriter.close();

// initialize the signature

sig &＃61; Signature.getInstance("SHA1withDSA");

sig.initSign(priv);

// this is the original data

String msg &＃61; "original msg";

OriginalMsgByteArray &＃61; msg.getBytes();

// put original data to signature

sig.update(OriginalMsgByteArray);

// sign the data, and get the byte array of signature

byte[] realSig &＃61; sig.sign();

// change the binary to base64 format

signatureB &＃61; new String(Base64.encode(realSig));

基本上,我将msg,signatureB和stringWriter.toString()这三个参数上传到PHP服务器,但它似乎不起作用….这是我的PEM文件内容&＃xff1a;

-----BEGIN PUBLIC KEY-----

MIIBtzCCASsGByqGSM44BAEwggEeAoGBAJ6ZIDqo1sh4pVzK8kUUA8SPxWva3sVH

hrK0D86q&＃43;xpD11qhzlw28vLnZNLSq7MaPyUNKRLZL2D3x/e4fkILf7IBh6BdfOlo

dI3CtAQ5Xqfw0aU8UZ35H8HlkrvrTu3qw/Ilb9wcc8Ag9C73TzuG6URK65fgvPK2

oN9MdDlVJztNAhUAkI2VBs/8eHWoG7RBCyTqyVyCwXMCgYBFj9BXduZIhDBGkoub

bLwGWI6zkmC8Xel1jsRFFaRtPVS08li&＃43;SQ/XSzekidY6NP3lmYwj/kC9biG9x3mW

c5hELzOVGvLM94y1KksGC&＃43;v89M99Tlrx4zVqpajRCFDyPzJQWB/HO493q6J4HwmP

1/ihdtk5THRGmPkx2uSgLKWlJAOBhQACgYEAirx5dLO2EG71ZFnUQ7FtU8FCVOYW

VgZRP9SLqH8Ig5nnwmg5XFSpngzNvQ8FcWRKZkKFxYoo2j7lmQN9gl5O5cKPtuqj

KecFAJA4/0y3jPzM/&＃43;1dTizM6n3WLReH2xlS6OOY5EZQmpWB//qepgTT9GUGPyOL

ampB86OjNSicv0Y&＃61;

-----END PUBLIC KEY-----