openssl_sign not accepting pem file?

T

tuxx2019-03-04 18:09:25

PHP

tuxx, 2019-03-04 18:09:25

Gives a constant error:

PHP Warning:  openssl_sign(): supplied key param cannot be coerced into a private key in

Code example:

class SomeClass {
    public function verify() {
        $key = openssl_get_privatekey('./private_key.pem', 'strong_password');
        $signature = null;
        if (openssl_sign(base64_decode($data), $signature, $key, OPENSSL_ALGO_SHA256) === false) {
            throw new \Exception(openssl_error_string());
        }
    }
}

PEM files were generated with the following commands:

openssl genrsa -aes256 -out private_key.pem 2048
openssl rsa -pubout -in private_key.pem -out public_key.pem

OpenSSL version: OpenSSL 1.1.1b 26 Feb 2019
Sample files. private_key.pem:

public_key.pem

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

T

tuxx, 2019-03-05
@tuxx

Decided so.
I generate key files with the commands:

openssl genrsa -des3 -out private_rsa.pem 2048
openssl rsa -in private_rsa.pem -outform PEM -pubout -out public_rsa.pem

The code to work is like this:

class SomeClass
{
    #region PROPERTIES
    protected static $public_key;
    protected static $private_key;

    const KEY_PASSPHRASE = 'key_passphrase';
    #endregion

    #region PUBLIC METHODS

    public function __construct()
    {
        $keys_dir = dirname(__FILE__) . '/../keys/encrypt/';
        $public_key_path = realpath($keys_dir . 'public_rsa.pem');
        $private_key_path = realpath($keys_dir . 'private_rsa.pem');
        self::$public_key = file_get_contents($public_key_path);
        self::$private_key = file_get_contents($private_key_path);
    }

    public function encode($data)
    {
        if (is_numeric($data) === false || is_string($data) === false) {
            $data = JSON::encode($data);
        }

        $encrypted = null;
        if (openssl_public_encrypt($data, $encrypted, self::$public_key)) {
            $encrypted = base64_encode($encrypted);
        } else {
            throw new Exception('Не удалось зашифровать данные. ' . openssl_error_string());
        }

        return $encrypted;
    }

    public function decode($data)
    {
        $decrypted = null;
        openssl_private_decrypt(base64_decode($data), $decrypted, openssl_pkey_get_private(self::$private_key, self::KEY_PASSPHRASE));

        return $decrypted;
    }

    #endregion
}