holinhot

本帖最后由 holinhot 于 2013-6-5 20:49 编辑
[ol]

"CN",

    "stateOrProvinceName" => "Somerset",

    "localityName" => "Glastonbury",

    "organizationName" => "The Brain Room Limited",

    "organizationalUnitName" => "PHP Documentation Team",

    "commonName" => "qq.com",

    "emailAddress" => "wez@example.com"

);

$config = array(

   "digest_alg" => "sha1",

   "private_key_bits" => 2048,

   "private_key_type" => OPENSSL_KEYTYPE_DSA,

   "encrypt_key" => false,

);

// Generate a new private (and public) key pair

$privkey = openssl_pkey_new();

// Generate a certificate signing request

$csr = openssl_csr_new($dn, $privkey);

// You will usually want to create a self-signed certificate at this

// point until your CA fulfills your request.

// This creates a self-signed cert that is valid for 365 days

$sscert = openssl_csr_sign($csr, null, $privkey, 365);

// Now you will want to preserve your private key, CSR and self-signed

// cert so that they can be installed into your web server, mail server

// or mail client (depending on the intended use of the certificate).

// This example shows how to get those things into variables, but you

// can also store them directly into files.

// Typically, you will send the CSR on to your CA who will then issue

// you with the "real" certificate.

openssl_csr_export($csr, $csrout) and var_dump($csrout);

openssl_x509_export($sscert, $certout) and var_dump($certout);

openssl_pkey_export($privkey, $pkeyout, "mypassword") and var_dump($pkeyout);

// Show any errors that occurred here

while (($e = openssl_error_string()) !== false) {

    echo $e . "\n";

}

?>

[/ol]复制代码怎么不行啊。说我的key加密不是2048bit
我不是指定了2048吗


还有神马方式

holinhot

27.$privkey = openssl_pkey_new();
27.$privkey = openssl_pkey_new($config);
没作用