Databases
StackOverflow2013
Postsdbo
POPHP's openssl_sign generates different signature than SSCrypto's sign
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POPHP's openssl_sign generates different signature than SSCrypto's sign
    primarykey
    data
    text
    <p>I'm writing an OS X client for a software that is written in PHP. This software uses a simple RPC interface to receive and execute commands. The RPC client has to sign the commands he sends to ensure that no MITM can modify any of them.</p> <p>However, as the server was not accepting the signatures I sent from my OS X client, I started investigating and found out that PHP's openssl_sign function generates a different signature for a given private key/data combination than the Objective-C <a href="http://septicus.com/products/opensource/" rel="nofollow noreferrer">SSCrypto</a> framework (which is only a wrapper for the openssl lib):</p> <pre><code>SSCrypto *crypto = [[SSCrypto alloc] initWithPrivateKey:self.localPrivKey]; NSData *shaed = [self sha1:@"hello"]; [crypto setClearTextWithData:shaed]; NSData *data = [crypto sign]; </code></pre> <p>generates a signature like <code>CtbkSxvqNZ+mAN</code>...</p> <p>The PHP code</p> <pre><code>openssl_sign("hello", $signature, $privateKey); </code></pre> <p>generates a signature like <code>6u0d2qjFiMbZ+</code>... (For my certain key, of course. base64 encoded)</p> <p>I'm not quite shure why this is happening and I unsuccessfully experimented with different hash-algorithms. As the PHP documentation states SHA1 is used by default.</p> <p>So why do these two functions generate different signatures and how can I get my Objective-C part to generate a signature that PHPs openssl_verify will accept?</p> <p>Note: I double checked that the keys and the data is correct!</p>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USrook
    1. This table or related slice is empty.
    plurals
    1. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POPHP's openssl_sign generates different signature than SSCrypto's sign
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POPHP's openssl_sign generates different signature than SSCrypto's sign
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POPHP's openssl_sign generates different signature than SSCrypto's sign
      1. USFrontierPsycho
      1. VTFavorite
    1. This table or related slice is empty.
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload