1.URL签名生成规则
|
API的有效访问URL包括以下三个部分：
1. 资源访问路径，如/v1/deal/find_deals;
2. 请求参数：即API对应所需的参数名和参数值param=value，多个请求参数间用&连接如deal_id=1-85462&appid=00000；
3. 签名串，由签名算法生成
|
签名算法如下：
1. 对所有请求参数进行字典升序排列；
2. 将以上排序后的参数表进行字符串连接，如key1value1key2value2key3value3...keyNvalueN；
3. app secret作为后缀，对该字符串进行SHA-1计算，并转换成16进制编码；
4. 转换为全大写形式后即获得签名串
==================================================
2.对称加密
与url签名规则类似，服务端与客户端定义一个随机生成token并加密，每次客户端连接服务端时，验证token是否一致
3.非对称加密
生成公钥与私钥，公钥分配给客户端，私钥只有服务端自己保存。
客户端把信息用公钥加密，发送给服务端，服务端将信息用私钥解密。
服务端将信息用私钥加密，发送给客户端，客户端将信息用公钥解密。
创建非对称加密，需配置apache。
/**
* 使用openssl实现非对称加密
*
* @since
2015-11-10
*/
class Rsa
{
/**
* 私钥
*
*/
private
$_privKey;
/**
* 公钥
*
*/
private
$_pubKey;
/**
* 保存文件地址
*/
private
$_keyPath;
/**
* 指定密钥文件地址
*
*/
public function
__construct($path)
{
if (empty($path) || !is_dir($path))
{
throw new
Exception('请指定密钥文件地址目录');
}
$this->_keyPath
= $path;
}
/**
* 创建公钥和私钥
*
*/
public function
createKey()
{
$config = [
// "config" => 'D:\wamp\bin\apache\apache2.4.9\conf\openssl.cnf',
"config"
=> 'D:/phpStudy/Apache/conf/openssl.cnf',
"digest_alg"
=> "sha512",
"private_key_bits"
=> 4096,
"private_key_type"
=> OPENSSL_KEYTYPE_RSA,
];
// 生成私钥
$rsa
= openssl_pkey_new($config);
openssl_pkey_export($rsa,
$privKey,
NULL,
$config);
file_put_contents($this->_keyPath
. DIRECTORY_SEPARATOR
. 'priv.key',
$privKey);
$this->_privKey
= openssl_pkey_get_public($privKey);
// 生成公钥
$rsaPri
= openssl_pkey_get_details($rsa);
$pubKey
= $rsaPri['key'];
file_put_contents($this->_keyPath
. DIRECTORY_SEPARATOR
. 'pub.key',
$pubKey);
$this->_pubKey
= openssl_pkey_get_public($pubKey);
}
/**
* 设置私钥
*
*/
public function
setupPrivKey()
{
if (is_resource($this->_privKey)) {
return true;
}
$file = $this->_keyPath
. DIRECTORY_SEPARATOR
. 'priv.key';
$privKey
= file_get_contents($file);
$this->_privKey
= openssl_pkey_get_private($privKey);
return true;
}
/**
* 设置公钥
*
*/
public function
setupPubKey()
{
if (is_resource($this->_pubKey)) {
return true;
}
$file = $this->_keyPath
. DIRECTORY_SEPARATOR
. 'pub.key';
$pubKey
= file_get_contents($file);
$this->_pubKey
= openssl_pkey_get_public($pubKey);
return true;
}
/**
* 用私钥加密
*
*/
public function
privEncrypt($data)
{
if (!is_string($data)) {
return null;
}
$this->setupPrivKey();
$result
= openssl_private_encrypt($data,
$encrypted,
$this->_privKey);
if
($result) {
return base64_encode($encrypted);
}
return null;
}
/**
* 私钥解密
*
*/
public function
privDecrypt($encrypted)
{
if (!is_string($encrypted)) {
return null;
}
$this->setupPrivKey();
$encrypted
= base64_decode($encrypted);
$result
= openssl_private_decrypt($encrypted,
$decrypted,
$this->_privKey);
if
($result) {
return $decrypted;
}
return null;
}
/**
* 公钥加密
*
*/
public function
pubEncrypt($data)
{
if (!is_string($data)) {
return null;
}
$this->setupPubKey();
$result
= openssl_public_encrypt($data,
$encrypted,
$this->_pubKey);
if
($result) {
return base64_encode($encrypted);
}
return null;
}
/**
* 公钥解密
*
*/
public function
pubDecrypt($crypted)
{
if (!is_string($crypted)) {
return null;
}
$this->setupPubKey();
$crypted
= base64_decode($crypted);
$result
= openssl_public_decrypt($crypted,
$decrypted,
$this->_pubKey);
if
($result) {
return $decrypted;
}
return null;
}
/**
* __destruct
*
*/
public function
__destruct() {
@fclose($this->_privKey);
@fclose($this->_pubKey);
}
}
$rsa = new
Rsa('ssl-key');
//私钥加密，公钥解密
echo "待加密数据：segmentfault.com\n";
$pre = $rsa->privEncrypt("segmentfault.com");
echo "加密后的密文:\n"
. $pre . "\n";
$pud = $rsa->pubDecrypt($pre);
echo "解密后数据:"
. $pud . "\n";
//公钥加密，私钥解密
echo "待加密数据：segmentfault.com\n";
$pue = $rsa->pubEncrypt("segmentfault.com");
echo "加密后的密文:\n"
. $pue . "\n";
$prd = $rsa->privDecrypt($pue);
echo "解密后数据:"
. $prd;
============================================
============================================
============================================
$private_key
= '-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----';
$public_key = '-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3//sR2tXw0wrC2DySx8vNGlqt
3Y7ldU9+LBLI6e1KS5lfc5jlTGF7KBTSkCHBM3ouEHWqp1ZJ85iJe59aF5gIB2kl
Bd6h4wrbbHA2XE1sq21ykja/Gqx7/IRia3zQfxGv/qEkyGOx+XALVoOlZqDwh76o
2n1vP1D+tD3amHsK7QIDAQAB
-----END PUBLIC KEY-----';
//echo $private_key;
$pi_key = openssl_pkey_get_private($private_key);//这个函数可用来判断私钥是否是可用的，可用返回资源id Resource id
$pu_key = openssl_pkey_get_public($public_key);//这个函数可用来判断公钥是否是可用的
print_r($pi_key);echo
"\n";
echo '<br/>';
print_r($pu_key);echo
"\n";
echo '<br/>';
$data = "aassssasssddd";//原始数据
$encrypted = "";
$decrypted = "";
echo "source data:",$data,"\n";
echo '<br/>';
echo "private key encrypt:\n";
echo '<br/>';
echo '=======================<br/>';
openssl_private_encrypt($data,$encrypted,$pi_key);//私钥加密
$encrypted = base64_encode($encrypted);//加密后的内容通常含有特殊字符，需要编码转换下，在网络间通过url传输时要注意base64编码是否是url安全的
echo $encrypted,"\n";
echo '<br/>';
echo '=======================<br/>';
echo "public key decrypt:\n";
echo '<br/>';
openssl_public_decrypt(base64_decode($encrypted),$decrypted,$pu_key);//私钥加密的内容通过公钥可用解密出来
echo $decrypted,"\n";
echo '<br/>';
echo "---------------------------------------\n";
echo "public key encrypt:\n";
echo '<br/>';
openssl_public_encrypt($data,$encrypted,$pu_key);//公钥加密
$encrypted = base64_encode($encrypted);
echo $encrypted,"\n";
echo '<br/>';
echo "private key decrypt:\n";
openssl_private_decrypt(base64_decode($encrypted),$decrypted,$pi_key);//私钥解密
echo $decrypted,"\n";
echo '<br/>';
|
