php openssl sign file

Question

I want to create a signature with openssl. I have an executable command like the following, but I don't know how to translate it to PHP.

openssl cms -sign -inkey key.pem -signer signature.pem -outform DER -in xy.xml

How to call this command in PHP?

We are not a translation service. – Marc B Oct 01 '14 at 14:00 — Marc B, Oct 01 '14 at 14:00

Uxío · Answer 1 · 2014-10-01T17:17:15.047

2

exec('openssl cms -sign -inkey key.pem -signer signature.pem -outform DER -in xy.xml')

With this command you make php call the openssl command of the operating system, like you do when you write it on a terminal.

If you want to do it in a native way (php functions) you can take a look at the OpenSSL library http://php.net/manual/en/book.openssl.php and the function sign http://php.net/manual/en/function.openssl-sign.php

edited Oct 01 '14 at 17:17

answered Oct 01 '14 at 16:16

Uxío

4

Please add some explanation to your answer. Code-only answers are (sometimes) good enough, but Code+explanation answers are always better – Barranka Oct 01 '14 at 16:35
I was looking through the OpenSSL library, but I couldn't figure out how to execute the function with the preferred parameters in PHP. Therefore I asked the question. Because the sign function do not provide the used parameters and the pkcs7 function has restrictions. So I will use the shell_exec function anyway. – Irgendw Pointer Oct 02 '14 at 06:36

score -2 · Answer 2 · edited Jun 05 '22 at 09:12

-2

openssl_cms_sign('xy.xml', "xy.xml.sign", file_get_contents('signature.pem'), file_get_contents('key.pem'), null, 0, OPENSSL_ENCODING_DER)

edited Jun 05 '22 at 09:12

RiveN

answered Jun 04 '22 at 16:17

user19271341

Please add supporting info to your answer to improve it. – Ethan Jun 05 '22 at 19:04

2 Answers2