我需要创建一个分离的PKCS7签名,以便与Apple Wallet通行证一起使用。
代码
private function createSignature()
{
$cert = '/etc/ssl/local.crt';
$key = '/etc/ssl/local.key';
$wwdr = '/var/www/app/storage/passes/AppleWWDRCA.cer';
$headers = [
'signing-time' => (new DateTime())->format('o-m-d H:i:s'),
];
return openssl_pkcs7_sign("$this->dir/manifest.json", "$this->dir/signature",
$cert, $key, $headers, PKCS7_DETACHED, $wwdr);
}
错误
openssl_pkcs7_sign(): no certificates in file, /var/www/app/storage/passes/AppleWWDRCA.cer
AppleWWDRCA.cer
已从下载https://www.apple.com/certificateauthority/.我下载的确切证书是WWDR Certificate (Expiring 02/07/23)
。我已经查看了该文件,并确认它不是空白的。我是不是少了一步?
通过将AppleWWDR.cer添加到我的钥匙链中并将其从钥匙链导出为.pem
文件,问题得到了解决。