PHP 代碼示例( Linux 版)?

解壓后，參考 phplinux/v3.4.0.1/文檔/PHP版服務器端工具包(Linux版)軟件使用手冊.pdf

Demo 運行

1.安裝對應版本的 PHP

2.安裝運行時環境(glibc 庫等)

3.修改 PHP 的配置文件 php.ini

修改 php.ini，使 php 允許加載擴展，并將當前擴展添加到其擴展列表中

enable_dl = On

extension=libSADKExtension.so.3.4.0.1

4.在 DemoRSA 目錄下替換證書和 cer 文件

pfx 為私鑰文件請妥善保管不要泄露給他人

cer 文件為頒發者公鑰，用來驗證匯付公鑰

5.配置 cfcalog.conf cfca 日志文件

6.通過命令行終端運行 Demo 文件

php huifuCFCALinuxDemo.php

Msg PKCS7-attached Sign

為使用 pfx 證書加簽

PKCS7-attached-Verify

為驗證匯付的簽名

cfca_verifyCertificate

為驗證證書鏈合法性

cfca_getCertificateInfo

為獲取證書信息(非必要)

php

class HuifuCFCA

{

private $apiUrl = 'https://eacloud.testpnr.com/api/publicRequests'; //企賬通商戶交易接口,此處使用的是聯調環境地址

private $strSignAlg = 'RSA'; //RSA證書類型

private $strPfxPassword = '888888'; //導出時設置的密碼

private $strHashAlg = 'SHA-256'; //加簽算法

private $strPfxFilePath = './RSA/AS0381.pfx'; //匯付下發的證書，此處換成商戶自己的證書 .pfx 格式 加簽使用

private $strTrustedCACertFilePath = './RSA/CFCA_ACS_TEST_OCA31.cer|./RSA/CFCA_ACS_TEST_CA.cer'; //匯付下發的.cer證書 ，需要一對證書 解簽使用

private $strLogCofigFilePath = './cfcalog.conf'; //CFCA log 目錄

public function __construct()

{

$this->getCFCAInitialize(); //CFCA工具初始化

}

/**

* CFCA工具初始化

*/

private function getCFCAInitialize()

{

$nResult = cfca_initialize($this->strLogCofigFilePath);

if (0 != $nResult) {

//記錄log

echo new Exception("\n cfca_Initialize error:".$nResult."\n");

}

}

/**

* 調用接口 此處是企賬通的接口請求

*

* @return string

*/

public function apiRequest(){

//請求參數，依據商戶自己的參數為準

$requestParam['version'] = '10';

$requestParam['cmd_id'] = 'Q01'; //交易訂單查詢

$requestParam['mer_cust_id'] = '6666000000002619';

$requestParam['user_cust_id'] = '6666000000054387';

$requestParam['order_date'] = '20180918';

$requestParam['order_id'] = '201809189000001';

$requestParam['trans_type'] = '01';

$requestParam['mer_priv'] = '';

//加簽

$strSignSourceData = json_encode($requestParam);

$cfcaSign = $this->CFCASignature($strSignSourceData);

//接口請求參數

$param = [

'requestData' => [

'cmd_id' => $requestParam['cmd_id'],

'mer_cust_id' => $requestParam['mer_cust_id'],

'version' => $requestParam['version'],

'check_value' => $cfcaSign,

],

'headers' => ['Content-type' => 'application/x-www-form-urlencoded;charset=UTF-8']

];

$requestData = $this->requestData($param);

$checkValue = json_decode($requestData['body'],1)['check_value'];

//驗證接口返回的簽名數據

$sourceData = $this->getCFCASignSourceData($checkValue);

$SignCertContent = !empty($sourceData['strMsgP7AttachedSignCertContent']) ? $sourceData['strMsgP7AttachedSignCertContent'] : '';

//驗證返回數據的CFCA證書有效性

$verifyCertificat = $this->verifyCertificat($SignCertContent);

$signSourceData = '';

if(!empty($sourceData['strMsgP7AttachedSource']) && $verifyCertificat){ //校驗證書有效性

$signSourceData = $sourceData['strMsgP7AttachedSource'];

}

return $signSourceData;

}

/**

* CFCA 加簽方法

*

* @param $strSignSourceData base64 encode 加簽原串

* @return string base64 encode 加簽串

*/

private function CFCASignature($strSignSourceData){

$strMsgPKCS7AttachedSignature = '';//加簽生成串 ,輸出變量，無需傳值

try{

//調用加簽方法

$nResult = cfca_signData_PKCS7Attached($this->strSignAlg, $strSignSourceData,

$this->strPfxFilePath, $this->strPfxPassword, $this->strHashAlg,$strMsgPKCS7AttachedSignature);

//加簽方法異常判斷及記錄

if (0 != $nResult) {

//記錄log

echo new Exception("\n cfca_signData_PKCS7Attached error:".$nResult."\n");

}

}catch (Exception $e){

throw new Exception("\n cfca_verifyCertificate error:".$e."\n");

}

return base64_encode($strMsgPKCS7AttachedSignature);

}

/**

* CFCA 驗證簽名數據

*

* @param $signature

* @return array

*/

private function getCFCASignSourceData($signature){

$strMsgP7AttachedSignCertContent = ''; //PKCS#7 中的簽名證書 輸出變量，無需傳值

$strMsgP7AttachedSource = ''; //簽名原文字符串 輸出變量，無需傳值

try{

//調用驗證簽名數據方法

$nResult = cfca_verifyDataSignature_PKCS7Attached($this->strSignAlg, base64_decode($signature),

$strMsgP7AttachedSignCertContent,$strMsgP7AttachedSource);

//驗證簽名方法異常判斷及記錄

if (0 != $nResult) {

//記錄log

echo new Exception("cfca_verifyDataSignature error:".$nResult);

}

}catch (Exception $e){

//記錄log

throw new Exception("cfca_verifyDataSignature_PKCS7Attached error:".$e);

}

return array(

'strMsgP7AttachedSource' => $strMsgP7AttachedSource,

'strMsgP7AttachedSignCertContent' => $strMsgP7AttachedSignCertContent,

);

}

/**

* CFCA 證書有效性驗證

*

* @param $strMsgP7AttachedSignCertContent PKCS#7 中的簽名證書 base64

* @return int

*/

private function verifyCertificat($strMsgP7AttachedSignCertContent = ''){

$nCertVerifyFlag = '4'; //驗證證書鏈完整性

$strTrustedCACertFilePath = $this->strTrustedCACertFilePath;

$isVerify = false;

try{

//調用驗證方法

$nResult = cfca_verifyCertificate($strMsgP7AttachedSignCertContent, $nCertVerifyFlag, $strTrustedCACertFilePath,"");

if (0 == $nResult) { // 0 為驗證通過 ，其他驗證失敗

$isVerify = true;

}else{

//記錄log

echo new Exception("cfca_verifyCertificate error:".$nResult);

}

}catch (Exception $e){

//記錄log

throw new Exception("cfca_verifyCertificate error:".$e);

}

return $isVerify;

}

/**

* 請求接口返回數據

* @param $param

* @return array

*/

private function requestData($param)

{

try{

// 請求接口所以參數初始化

$data = [

'url' => $this->apiUrl, // 接口 url

'requestData' => $param['requestData'], // 請求接口參數

'headers' =>$param['headers']

];

$res = $this->httpPostRequest($data['url'],$data['headers'],$data['requestData']);

} catch (\Exception $e) {

//記錄log

throw new Exception("api requestData error :".$e);

}

return [

'status' => $res['info']['http_code'],

'body' => $res['body']

];

}

/**

* curl post 請求方法

*

* @param string $url

* @param array $header

* @param array $requestData

* @return array

*/

private function httpPostRequest($url = '',$header = array(),$requestData = array()){

$curl = curl_init();

curl_setopt ( $curl, CURLOPT_HTTPHEADER,$header);

curl_setopt($curl, CURLOPT_URL, $url);

curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);

curl_setopt($curl, CURLOPT_POST, true);

curl_setopt($curl, CURLOPT_POSTFIELDS,http_build_query($requestData));

$res = curl_exec($curl);

$info = curl_getinfo($curl);

$error = curl_error($curl);

curl_close($curl);

return [

'body' => $res,

'info' => $info,

'error' => $error,

];

}

/**

*CFCA工具結束

*/

public function __destruct()

{

cfca_uninitialize();

}

}

//調用

$demoObj = new HuifuCFCA();

$data = $demoObj->apiRequest();

print_r('

');

print_r($data);

?>

總結

以上是生活随笔為你收集整理的java软件开发ea介绍_开发说明 — Eacloud 1.0 documentation的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。