SHA256WithRSA 生成签名

SHA256WithRSA 生成签名

//取出从api开始后面的方法
$path = parse_url('https://baidu.com:9443/api/pmss/doSendTransferMsg/v1',PHP_URL_PATH);

$params['app_id'] = 'appid12344567';
$params['msg_id'] = uniqid();
$params['fmt_type'] = 'json';
$params['charset'] = 'UTF-8';
$params['timestamp'] = date('Y-m-d H:i:s');
$strToSign = $this->buildOrderedSignStr($path, $params);
$signedStr = $this->sign($strToSign, 'SHA256WithRSA', $PRIVATE_KEY, 'UTF-8');
$params['sign'] = $signedStr;

//将筛选的参数按照第一个字符的键值 ASCII 码递增排序（字母升序排序），如果遇到相同字符则按照第二个字符的键值 ASCII 码递增排序，以此类推
//将排序后的参数与其对应值，组合成“参数=参数值”的格式，并且把这些参数用&字符连接起来，此时生成的字符串为待签名字符串
public function buildOrderedSignStr($path,$params){
        $isSorted = ksort ( $params );
        $comSignStr = $path . '?';

        $hasParam = false;
        foreach ( $params as $key => $value ) {
            if (null == $key || "" == $key || null == $value || "" == $value) {
            } else {
                if ($hasParam) {
                    $comSignStr = $comSignStr . '&';

                } else {
                    $hasParam = true;
                }

                $comSignStr = $comSignStr . $key . '=' . $value;
                // 	print_r($comSignStr);
                // print_r('<hr>');

            }
        }

        return $comSignStr;
    }

//选择签名方式
public function sign($strToSign, $signType, $privateKey){
	return $this->rsa($strToSign,$privateKey,$signType);
}

//开始签名
public function rsa($content,$privateKey,$algorithm){
        $signature = "";

        if( $algorithm == 'SHA1WithRSA'){
            openssl_sign($content,$signature,"-----BEGIN PRIVATE KEY-----\n".wordwrap($privateKey,64,"\n",true)."\n-----END PRIVATE KEY-----", OPENSSL_ALGO_SHA1);
        }elseif ($algorithm == 'SHA256WithRSA') {
            //  print_r(111);
            openssl_sign($content,$signature,"-----BEGIN PRIVATE KEY-----\n".wordwrap($privateKey,64,"\n",true)."\n-----END PRIVATE KEY-----",OPENSSL_ALGO_SHA256);
        }else{
            throw new Exception("Only support OPENSSL_ALGO_SHA1 or OPENSSL_ALGO_SHA256 algorithm signature!");
        }
        return base64_encode($signature);
    }