如何使用php';s openssl_x509_解析
我正在使用php的OpenSSL函数(OpenSSL_x509_parse)解析给定站点的SSL证书信息。 示例代码:如何使用php';s openssl_x509_解析,php,php-openssl,Php,Php Openssl,我正在使用php的OpenSSL函数(OpenSSL_x509_parse)解析给定站点的SSL证书信息。 示例代码: $stream = stream_context_create( array( "ssl" => array( "allow_self_signed" => true, "capture_peer_cert" => true, "capture_peer_cert_
$stream = stream_context_create(
array(
"ssl" => array(
"allow_self_signed" => true,
"capture_peer_cert" => true,
"capture_peer_cert_chain" => true,
"verify_peer" => false,
"verify_peer_name" => false,
"sni_enabled" => true,
),
)
);
$streamRead = @stream_socket_client("ssl://stackoverflow.com:443", $streamErrNo, $streamErrStr, 30, STREAM_CLIENT_CONNECT, $stream);
if (!$streamErrNo && $streamRead) {
$streamContext = stream_context_get_params($streamRead);
$streamContextMeta = stream_get_meta_data($streamRead);
$certChainsRes = $streamContext["options"]["ssl"]["peer_certificate_chain"];
$certChainArr = array();
for ($i = 0; $i < count($certChainsRes); $i++) {
$certChainData = openssl_x509_parse($certChainsRes[$i]);
var_dump($certChainData);
}
}
问题:
- 1:我得到了signatureTypeSN、signatureTypeLN等详细信息,
SignaturePenid但如何获取签名算法Id(哈希
算法OID)如SHA256WithRSA加密=>1.2.840.113549.1.1.11 - 2:这些详细信息显示证书的版本为2
但浏览器显示证书版本为3'version'=>int 2
oid=
)
同样在前面的RFC7427()中,您可以找到这些OID
array (size=16)
'name' => string '/C=US/ST=NY/L=New York/O=Stack Exchange, Inc./CN=*.stackexchange.com' (length=68)
'subject' =>
array (size=5)
'C' => string 'US' (length=2)
'ST' => string 'NY' (length=2)
'L' => string 'New York' (length=8)
'O' => string 'Stack Exchange, Inc.' (length=20)
'CN' => string '*.stackexchange.com' (length=19)
'hash' => string '07cc7bb0' (length=8)
'issuer' =>
array (size=4)
'C' => string 'US' (length=2)
'O' => string 'DigiCert Inc' (length=12)
'OU' => string 'www.digicert.com' (length=16)
'CN' => string 'DigiCert SHA2 High Assurance Server CA' (length=38)
'version' => int 2
'serialNumber' => string '9833040086282421696121167723365753840' (length=37)
'serialNumberHex' => string '0765C64E74E591D68039CA2A847563F0' (length=32)
'validFrom' => string '181005000000Z' (length=13)
'validTo' => string '190814120000Z' (length=13)
'validFrom_time_t' => int 1538697600
'validTo_time_t' => int 1565784000
'signatureTypeSN' => string 'RSA-SHA256' (length=10)
'signatureTypeLN' => string 'sha256WithRSAEncryption' (length=23)
'signatureTypeNID' => int 668