多春鱼小屋

一.pfx格式证书处理
//获取证书详细信息
$pkcs12certdata = file_get_contents ( $cert_path );
openssl_pkcs12_read ( $pkcs12certdata, $certs, SDK_SIGN_CERT_PWD );
$x509data = $certs ['cert'];
openssl_x509_read ( $x509data );
//通过打印certdata可查看证书详细信息
$certdata = openssl_x509_parse ( $x509data );
$cert_id = $certdata ['serialNumber'];
2.签名
$pkcs12    = file_get_contents($pri_key_dir);
openssl_pkcs12_read($pkcs12, $certs, $sign_cert_pwd);
$sign_falg = openssl_sign($data, $signature, $certs['pkey'], OPENSSL_ALGO_SHA1);
二.cer格式证书处理
//获取证书序列号serialNumber
$x509data = file_get_contents($cert_path);
openssl_x509_read($x509data);
$certdata = openssl_x509_parse($x509data);
$cert_id  = $certdata ['serialNumber'];
2.验签
$pub_key = file_get_contents($pub_key_dir);
$result  = openssl_verify($data, $sign, $pub_key,OPENSSL_ALGO_SHA1);