On 05/23/2012 02:00 PM, Matijn Woudt wrote:
On Wed, May 23, 2012 at 9:42 PM, Jason Gerfen<jason.gerfen@xxxxxxxx> wrote:
On 05/23/2012 01:26 PM, Matijn Woudt wrote:
On Wed, May 23, 2012 at 9:12 PM, Jason Gerfen<jason.gerfen@xxxxxxxx>
wrote:
On 05/23/2012 01:05 PM, Matijn Woudt wrote:
On Wed, May 23, 2012 at 8:29 PM, jas<jason.gerfen@xxxxxxxx> wrote:
I have run into a problem that I am altogether unfamiliar with.
A scenario. I retrieve a users private key from a database.
I then use the openssl_pkey_get_private() function to load it as a
resource
object and proceed to call the openssl_sign() function to obtain a
digital
signature of a string.
No problem, I get a valid signature which I then base64 encode and
store
in
a database.
Now lets say a couple of days from now I load up the public key which
corresponds to the private key which was used to originally sign the
data
to
verify it and it does not work.
The kicker is if I perform the very same routine without saving the
signature and attempting to verify it it works without problems.
Have you checked what $signed looks like after running the script?
Compare it to $signature. Most likely you corrupted your date
elsewhere, maybe when inserting it into the database.
- Matijn
The example that accompanies the post shows two examples, one works& one
does not. Neither however use any type of database, as both simply assign
or
use the valid signature stored within either the $signature or $signed
variables.
I wish I could say that is the problem, I took care to properly
encode/decode when saving or retrieving the information and as well in
the
original post I removed this as a possible cause by simply defining the
$signature variable and assigning a valid signature to it for testing.
First of all, it seems $signature is in base64 format, so I think you
should base64_decode that one first. Then it appears to me that
$signature is not the same as $signed, on my system. If I
base64_encode $signed, save it by copying it from my browser, and then
enter it as $signature, and then use base64_decode on $signature it
works fine.
- Matijn
Those are the same steps I just mentioned. The base64_decoding is a typo on
the second example. It should read
openssl_verify($unsigned, base64_decode($signature), $id);
Well, then maybe you should explain the problem further, because with
this it works fine, and it appears to me the problem is not here but
it comes when you try to store/retrieve the data.
- Matijn
Well without you saying "should explain the problem further" I wouldn't
have conducted the series of tests to verify each component being used
within the sign/save & retrieve/verify processes.
I was passing the wrong argument in during my retrieve/verify flow.
Thanks again!
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
