php 使用ssl加密,PHP实现SSL加密解密、验证及签名

这篇文章主要介绍了PHP实现SSL加密解密、验证及签名的方法,结合实例形式分析了php基于openssl相关函数的签名、加密、解密、验证等操作技巧,需要的朋友可以参考下

具体如下:

1. sign签名代码:

function sign($data) {

//读取私钥文件

$priKey = file_get_contents('key/rsa_private_key.pem');

//转换为openssl密钥,必须是没有经过pkcs8转换的私钥

$res = openssl_get_privatekey($priKey);

//调用openssl内置签名方法,生成签名$sign

openssl_sign($data, $sign, $res);

//释放资源

openssl_free_key($res);

return $sign;

}

2. verify 验证代码:

function verify($data, $sign) {

//读取支付宝公钥文件

$pubKey = file_get_contents('key/alipay_public_key.pem');

//转换为openssl格式密钥

$res = openssl_get_publickey($pubKey);

//调用openssl内置方法验签,返回bool值

$result = (bool)openssl_verify($data, $sign, $res);

//释放资源

openssl_free_key($res);

return $result;

}

3. 解密代码

function decrypt($content) {

//读取商户私钥

$priKey = file_get_contents('key/rsa_private_key.pem');

//转换为openssl密钥,必须是没有经过pkcs8转换的私钥

$res = openssl_get_privatekey($priKey);

//声明明文字符串变量

$result = '';

//循环按照128位解密

for($i = 0; $i < strlen($content)/128; $i++ ) {

$data = substr($content, $i * 128, 128);

//拆分开长度为128的字符串片段通过私钥进行解密,返回$decrypt解析后的明文

openssl_private_decrypt($data, $decrypt, $res);

//明文片段拼接

$result .= $decrypt;

}

//释放资源

openssl_free_key($res);

//返回明文

return $result;

}

相关推荐:

  • 0
    点赞
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
好的,下面是使用 Python 和 gnupg 模块对邮件进行加密、解密、签名验证等一系列操作的详细说明: 1. 安装 GnuPG 软件和 gnupg 模块:在使用 gnupg 模块之前,需要先安装 GnuPG 软件并安装 gnupg 模块。在 Ubuntu 上,可以使用以下命令安装: ``` sudo apt-get install gnupg pip install python-gnupg ``` 2. 导入 gnupg 和 smtplib 模块: ``` import gnupg import smtplib from email.mime.text import MIMEText from email.mime.multipart import MIMEMultipart from email.mime.application import MIMEApplication from email.utils import COMMASPACE from email import encoders ``` 3. 初始化 GPG 对象: ``` gpg = gnupg.GPG() ``` 4. 生成密钥对: ``` input_data = gpg.gen_key_input( name_real='Real Name', name_email='[email protected]', passphrase='passphrase' ) key = gpg.gen_key(input_data) ``` 5. 创建邮件: ``` from_addr = '[email protected]' to_addr = '[email protected]' subject = 'Test Email' body = 'Hello, world!' attachment_path = '/path/to/attachment' msg = MIMEMultipart() msg['From'] = from_addr msg['To'] = to_addr msg['Subject'] = subject msg.attach(MIMEText(body)) with open(attachment_path, 'rb') as f: part = MIMEApplication( f.read(), Name='attachment.txt' ) part['Content-Disposition'] = f'attachment; filename="{part["Name"]}"' msg.attach(part) ``` 6. 加密邮件: ``` encrypted_data = gpg.encrypt(str(msg), '[email protected]') msg_encrypted = MIMEMultipart() msg_encrypted['From'] = from_addr msg_encrypted['To'] = to_addr msg_encrypted['Subject'] = subject msg_encrypted.attach(MIMEText(str(encrypted_data))) ``` 7. 发送加密邮件: ``` smtp_host = 'smtp.gmail.com' smtp_port = 587 smtp_username = 'username' smtp_password = 'password' smtp_conn = smtplib.SMTP(smtp_host, smtp_port) smtp_conn.starttls() smtp_conn.login(smtp_username, smtp_password) smtp_conn.sendmail(from_addr, to_addr, str(msg_encrypted)) smtp_conn.quit() ``` 8. 接收加密邮件并解密: ``` mail_server = 'imap.gmail.com' mail_port = 993 mail_username = 'username' mail_password = 'password' mail_conn = imaplib.IMAP4_SSL(mail_server, mail_port) mail_conn.login(mail_username, mail_password) mail_conn.select('INBOX') _, data = mail_conn.search(None, 'FROM', '[email protected]') for num in data[0].split(): _, msg_data = mail_conn.fetch(num, '(RFC822)') msg = email.message_from_bytes(msg_data[0][1]) if 'encrypted.asc' in msg.get_payload()[0].get_filename(): encrypted_data = msg.get_payload()[0].get_payload() decrypted_data = gpg.decrypt(str(encrypted_data), passphrase='passphrase') decrypted_msg = email.message_from_string(str(decrypted_data)) print(decrypted_msg) ``` 9. 签名邮件: ``` signed_data = gpg.sign(str(msg), keyid=key.fingerprint, passphrase='passphrase') msg_signed = MIMEMultipart() msg_signed['From'] = from_addr msg_signed['To'] = to_addr msg_signed['Subject'] = subject msg_signed.attach(MIMEText(str(signed_data))) ``` 10. 发送签名邮件: ``` smtp_host = 'smtp.gmail.com' smtp_port = 587 smtp_username = 'username' smtp_password = 'password' smtp_conn = smtplib.SMTP(smtp_host, smtp_port) smtp_conn.starttls() smtp_conn.login(smtp_username, smtp_password) smtp_conn.sendmail(from_addr, to_addr, str(msg_signed)) smtp_conn.quit() ``` 11. 接收签名邮件并验证: ``` mail_server = 'imap.gmail.com' mail_port = 993 mail_username = 'username' mail_password = 'password' mail_conn = imaplib.IMAP4_SSL(mail_server, mail_port) mail_conn.login(mail_username, mail_password) mail_conn.select('INBOX') _, data = mail_conn.search(None, 'FROM', '[email protected]') for num in data[0].split(): _, msg_data = mail_conn.fetch(num, '(RFC822)') msg = email.message_from_bytes(msg_data[0][1]) if 'signature.asc' in msg.get_payload()[0].get_filename(): signed_data = msg.get_payload()[0].get_payload() verified_data = gpg.verify(str(signed_data)) print(verified_data) ``` 以上就是使用 Python 和 gnupg 模块对邮件进行加密、解密、签名验证等一系列操作的详细说明。希望对您有所帮助。

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值