PHP使用SSL 证书请求curl、P12证书转pem证书

布满荆棘的人生 2022-10-14 11:00 316阅读 0赞

最近对接了一个来自于深圳\*\*\*的JAVA接口、他们给了一个p12 的证书，貌似对PHP来说不达标，需要将该证转换为PEM格式。  
使用Linux命令直接转换：

openssl pkcs12 -clcerts -nokeys -out cbip0151.pem -in cbip0151.p12
    或
    openssl pkcs12 -in cbip0151.p12 -out cbip0151.pem -nodes

转换后获得的pem 证书内容是：（用Notepad++打开 缺陷显示）

Bag Attributes
        friendlyName: cbip0151
        localKeyID: 1F 51 54 7F 17 F3 06 1B 88 CB 14 4D D5 4A 78 CD B7 46 C7 20 
    Key Attributes: <No Attributes>
    -----BEGIN PRIVATE KEY-----
    MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQDZsIpDpPuaskSP
    nk8B4i+6nAFvWJ7Qoxqnqm2peDxxctE31fe+TeJdfQcj
    NMrnU/fx7SzC2p7e8WbycElnRK+/8gvNtp8RMGwfMf4KOypXJ+3Ze2Z3Bvn26zH2
    VGOStB6Tcm1rBxusud6/QU2zHrOOY0BsycxGDylD+Rb6T72z+MtLZ1oiSPubXG4O
    BronioSg1lGFEptIK5CCc8EWPn81aIzOt5EnnQ7Vo5PFQ1er/9mDRz1BxrjIIaSA
    iqVFo2VMPp4VRDCnlCr7nJraKGhggV8w4mDbKxkCHeLGkSjPknTyk
    9ahBwLWtAgMBAAECggEAAIkd6fkxskl+gDD2Rk2paubf3QeFioNgORlNh96GsMB0
    eQA3bT+Xy58AepKEaY4MBDxnSeVUqYC5gAVs+2E6QrLf8ZHKosdKxs1ubM3fNdRx
    YX3xyb/KAFCl7J4FJmY/gFG8qI3QlyIwgwfln9KIIbo+GS2RDJ1/dg6B068/Z1oH
    gOCwgGLoJsIZM5Y87xCKVRQCHHfp3MtMRFJP16XGTbT8E+LJi1g/OOCk2+hFYXlo
    xFiNM9irmGFAs8ArjpTZ+tz3o9JlrPG+GeNcfmtRXfb5qydTkamKTA7KQp46uaWd
    A8THxC4LO4o4mQNuTVRTwXhDM/t0iCFtycIcPnvzSQKBgQDvibQRLCHL7a8ZglIQ
    uR0gQnEMyWk0n8+trpi2jrtNTPK63sNb7GVeAVI2ouHJzrViry72NOv0z/EZ5LYK
    yCgFe2tde5be/7tLu2AokxJvYaFcOPBMPSkkPtyly5vfQU9
    /GkjmvMXtJb7yrZm7MyiIoPapQKBgQDopnMxp15rwqSMDuibbsspdSv61EVBS3gE
    DYsf11VyGRZWKRqSGdLKt1JhfRQD/qYUrrSVja81ubvfFL+ddUDoucDhTK1GY1II
    Y5ahj4qNBexn6P8o9HV78uU6fwSl/rS54WLVT4xUb2/KsswFfZaHN+dcbN51e/+S
    WKs0AyVoaQKBgHMSCMGzHK01ikdL1paYBsjngh1taC/SkdbSqCQS3yGcVIK23sx6
    /JszMUZz6tmihnpYw8uc0rkxZ5ZTy6vUSX2Qs5wd8fVAjr4rzl7PgCzfxWDm1c9y
    PlQJmkbruWbDO3YkSXIA//olbDY8rdcAOZXUKvF5XIqq8ALzwL4mrIbNAoGAPx4J
    WotBvpKL+cOBr8mbLKAxUleMgm5rHQ5flD/jWpUbzjxQjRqcaYrausAoUf0gKbRM
    IdbSlgzRv2/tnFZXScw7W+RljhccBlKeZy5+NExLGtXHg+DujrYTIo+bPz2e4l8X
    ZS+zrqSc+60OVN8Bm6W7CwQuRklhyN5tdCr2VyECgYBTjxkKa+DI+H5ygVa9i5TU
    Bo6Et+EofxwGmxyQJuTduggXglB+GtUqF79x+v4nkJZP3dZKtMYwpDU5qkiuyzWG
    8G3Z/2NQRzx0sM3QyPU3q92jf06/EsCDP/YzAm/RWqZM2lzvfHvi5qQQFlDLyRHc
    CSjwNNPpDLFrt49InhI6Tg==
    -----END PRIVATE KEY-----
    Bag Attributes
        friendlyName: cbip0151
        localKeyID: 1F 51 54 7F 17 F3 06 1B 88 CB 14 4D D5 4A 78 CD B7 46 C7 20 
    subject=/CN=cbip0151
    issuer=/CN=SZPost_CBIP
    -----BEGIN CERTIFICATE-----
    MIIEODCCAyCgAwIBAgIId8KwVKcy9a8wDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UE
    AwwLU1pQb3N0X0NCSVAwHhcNMjAwNzE0MDg1NjE1WhcNMjEwNzE0MDg1NjE1WjAT
    MREwDwYDVQQDDAhjYmlwMDE1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
    ggEBANmwikOk+5qyRI+eTwHjGo1WVTWr872NQWsQ86PzXmeqbal4
    PHFy0TfV975N4l19ByM0yudT9/HtLMLant7xZvJwSWdEr7/yC822nxEwbB8x/go7
    Klcn7dl7ZncG+fbrMr9BTbMes45jQGzJzEYPKUP5FvpP
    vbP4y0tnWiJI+5tcbg4GuieKhKDWUYUSm0grkIJzwRY+fzVojM63kSedDtWjk8VD
    V6v/2YNHPUHGuMghpICKpUWjZUw+nhVEMKeUKu0FhJzRkaO63ucmtooaGCBXzDiY
    NsrGQId4saRKM+SdPKT1qEHAta0CAwEAAaOCAYswggGHMFUGCCsGAQUFBwEBBEkw
    RzBFBggrBgEFBQcwAYY5aHR0cDovL2NhLnNoZW56aGVucG9zdC5jb20uY24vZWpi
    Y2EvcHVibGljd2ViL3N0YXR1cy9vY3NwMB0GA1UdDgQWBBQfUVR/F/MGG4jLFE3V
    SnjNt0bHIDAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFGSzOdkwnNR+mTfKZCqZ
    iMYOfhwbMIGLBgNVHR8EgYMwgYAwfqBgoF6GXGh0dHA6Ly9jYS5zaGVuemhlbnBv
    c3QuY29tLmNuL2VqYmNhL3B1YmxpY3dlYi93ZWJkaXN0L2NlcnRkaXN0P2NtZD1j
    cmwmaXNzdWVyPUNOPVNaUG9zdF9DQklQohqkGDAWMRQwEgYDVQQDDAtTWlBvc3Rf
    Q0JJUDAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF
    BwMEMCMGA1UdEQQcMBqgGAYIKwYBBQUHCAOgDDAKDAhjYmlwMDE1MTANBgkqhkiG
    9w0BAQsFAAOCAQEAO4JqcRtzbVdvUyvn4C7Wk7/1soOCw0/eYLH9WGOKRZhoRWA9
    4NvBf4uvzDyCBw4TNbehxgPAmJzYax7thrTfffMaEJft+2UDUg
    rJyqbwWbgGBWqr86WlyBwnajHYBIhlqhggGo1Def9tBVLBkEDGGDX3twprj89gsP
    87ORPGsl0OEty1XDgnaVPb5V11xlcC+k/MiHzFX6zzb48Ab9YLLDy0Ygobt86mw2
    QGqLoiAZZcYrMRnnOIIk6RQvE+iykAt8IMZ2R9v8nUHRaOmBG66NF7Y0C5q7tZ87
    pkrv4fwmgncTDvFDfgx4jO/e0jwV3Mti+xUW+Q==
    -----END CERTIFICATE-----
    Bag Attributes
        friendlyName: SZPostCA
    subject=/CN=SZPostCA/O=ShenZhenPost/C=CN
    issuer=/CN=SZPostCA/O=ShenZhenPost/C=CN
    -----BEGIN CERTIFICATE-----
    MIIDUzCCAjugAwIBAgIICjYCdpVViFwwDQYJKoZIhvcNAQELBQAwNzERMA8GA1UE
    AwwIU1pQb3N0Q0ExFTATBgNVBAoMDFNoZW5aaGVuUG9zdDELMAkGA1UEBhMCQ04w
    HhcNMTYwOTE0MDkwNDEQswCQYDVQQGEwJDTjCCASIwDQYJ
    KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKGwue8g7QzOfv69iTbEg2Efw/CLXGMK
    IzBFLWkNSyBPpNhO+E8hscDWO4JEnBCHbU5zQOyfe7RtZF+v5WAxZzPPYBPzC315
    HdhL8mP7KHCgH0pVbw50tXqvKEiDFpYcTMTPvl9Ok9gd5VHxqL
    Bm7YfFfdnkAekMMKJ+DaPdXmUB2E2G4oQc4ensnXXKoY4P4vH/Ir0Hf/IgqPQQi4
    1kdaMecVQxjMVeNu60XVfuCZXFGGBBpZC9IAilEjPTx4v+a8YI+S7Wwq0C5Jwlsq
    tCK1EvPDZqw/b/BbytPFUGyDVuFB/ljtYOPROrkFm90s/1WHApn4/FECAwEAAaNj
    MGEwHQYDVR0OBBYEFILjuG/pQ5ekM5gGtuhyAlENySO2MA8GA1UdEwEB/wQFMAMB
    Af8wHwYDVR0jBBgwFoAUguO4b+lDl6QzmAa26HICUQ3JI7YwDgYDVR0PAQH/BAQD
    AgGGMA0GCSqGSIb3DQEBCwUAA4IBAQBHrkVI6/yvGgfFleBCoUTtICNcP6HoM5Vm
    CTxvfCH0GhetmUBVP3QGc4qH+gW3Yyg+h+HKRvH9ywzOmJEnoqNpdx7blZ2brHLw
    u/zpT01HwpRUuBXvczaSF+6Ou7XHmTgG9idIlqfoucHW7S9ZRh3nx6zydPG8XFE0
    WNG23hX49Ym7CWBOxsLpwwYlzco+o746d0tFBomvA0Nj1nUwphtd358Vbvf7MgqY
    L5a11YluhscuELF5GonbA3d0s1A+FIpRNdJYLkiZgyCQrcR9Ne4WNLUxs7JQOU5S
    atd64LggDScKDcOlcpAfW5IGqQZJe/Yo/dSMmVbhOKvvYMQN9d76
    -----END CERTIFICATE-----
    Bag Attributes
        friendlyName: SZPost_CBIP
    subject=/CN=SZPost_CBIP
    issuer=/CN=SZPostCA/O=ShenZhenPost/C=CN
    -----BEGIN CERTIFICATE-----
    MIIDMjCCAhqgAwIBAgIILPG7FUmycmowDQYJKoZIhvcNAQELBQAwNzERMA8GA1UE
    AwwIU1pQb3N0Q0ExFTATBgNVBAoMDFNoZW5aaGVuUG9zdDELMAkGA1UEBhMCQ04w
    HhcNMjAwNTI3MDYzNDA5WhcNMjYwOTEyMDkwNDE1WjAWMRQwEgYDVQQDDAtTWlBv
    c3RfQ0JJUDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANeZpTQXoBlM
    yok3rKPVcE8HfRluTGgv7P0nC3qIf6mKQ9D7JKs6ZGZTzZiIe8ZMzEg5QceZYzHe
    nv7zR+hP6XzGyTXLge2mSEg0oThfy21KbmWRnUXm5ska1ATppzu5th6xSldAdQOz
    ASUIKpEMCQQkRk3DPKaZWQdIgb9iLcejdz0hE/gwPzO5fptW+PT1gRKs7n17M/TT
    qDJlo/Ysnv9H/7PlRzWubSMVYOmLZIxlx3Jb7DgRJ/ex6ls
    rErYl1rRghcCAwEAAaNjMGEwHQYDVR0OBBYEFGSzOdkwnNR+mTfKZCqZiMYOfhwb
    MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUguO4b+lDl6QzmAa26HICUQ3J
    I7YwDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IBAQCHJ+eqzcTK8Swu
    svNYDeWdn9xXcYdeZma4yD1zg/qyq8vd/L3VUZDf3rZJtIs1+FwmFQ5x3xCPXF8K
    S0Uxe/l+2KbosVZyFGR1HDJ/VVuCC2qcvlz6eQMY8sU6D8uxWbtwo4zAaTbMSvR4
    7zAGyO43rw4iJWj2RZ7M7HZ1UNXuDK0TYbd6/dKvQf0IW7TL
    oaubDDg8ASojAxP3B35hTso/Qic9SfVrTPAvHdg+1GeD9zLIsKCQ5Vj1YVfMHw6C
    X30LXohY8PXQlnOxTCWzHW7jUGc7z2FSBGIWc2Vqzn/04gNT5j2mk96CDercanQ8
    aikj9PZ6
    -----END CERTIFICATE-----

很显然我们要的就是这样的。

然后curl 请求的时候带上这个证书。

/** * 数据请求方式 * @param $url * @param int $isPost * @param string $postData * @param int $isHttps * @param int $timeout * @param array $header * @return bool|string */
        protected function getData($url, $isPost = 0, $postData = '', $isHttps = 0, $timeout = 45, $header = array())
        { 
            $ch = curl_init();
            if (false == $ch) { 
                return false;
            }
            if ($isHttps == 1) { 
                curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
            }
            if ($isPost == 1) { 
                curl_setopt($ch, CURLOPT_POST, 1);
                curl_setopt($ch, CURLOPT_POSTFIELDS, $postData);
            }
            curl_setopt($ch, CURLOPT_SSLCERT, getcwd() . '/cbip0151.pem');
            $options = array(
                CURLOPT_URL => $url,
                CURLOPT_HEADER => false, //true false 不显示
                CURLOPT_HTTPHEADER => $header,
                CURLOPT_CONNECTTIMEOUT => $timeout,
                CURLOPT_TIMEOUT => $timeout,
                CURLOPT_RETURNTRANSFER => 1,
            );
            if (!empty($header)) { 
                $options[CURLOPT_HTTPHEADER] = $header;
            }
            curl_setopt_array($ch, $options);
            $content = curl_exec($ch);
            curl_close($ch);
            return $content;
        }

## 请求方法： ##

$sign = $this->sign($data);
    $url = 'https://********';
    $header = array(
        'Content-Type: application/json',
        'partnercode:****',
        'datadigest:' . $sign,
    );
    $res = $this->getData($url, 1, $data, 1, 30, $header);

另外一种转换方法也可以尝试一下：  
找个软件[https://myssl.com/cert\_convert.html][https_myssl.com_cert_convert.html]将其转换后获得三个文件  
![在这里插入图片描述][20210521125116526.png]

## curl 二 ##

/** * 数据请求方法二 * @param $url * @param $data * @param $header * @return bool|string */
        protected function getPostData($url, $data, $header)
        { 
            $tuCurl = curl_init();
            curl_setopt($tuCurl, CURLOPT_URL, $url);
            curl_setopt($tuCurl, CURLOPT_PORT, 443);
            curl_setopt($tuCurl, CURLOPT_VERBOSE, 0);
            curl_setopt($tuCurl, CURLOPT_HEADER, 0);
            curl_setopt($tuCurl, CURLOPT_SSLVERSION, 3);
            curl_setopt($tuCurl, CURLOPT_SSLCERT, getcwd() . "/cbip0151.cer");
            curl_setopt($tuCurl, CURLOPT_SSLKEY, getcwd() . "/cbip0151.key");
            curl_setopt($tuCurl, CURLOPT_CAINFO, getcwd() . "/cbip0151_ca.crt");
            curl_setopt($tuCurl, CURLOPT_POST, 1);
            curl_setopt($tuCurl, CURLOPT_SSL_VERIFYPEER, 1);
            curl_setopt($tuCurl, CURLOPT_SSLVERSION, 0);
            curl_setopt($tuCurl, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($tuCurl, CURLOPT_POSTFIELDS, $data);
            curl_setopt($tuCurl, CURLOPT_HTTPHEADER, $header);
            $tuData = curl_exec($tuCurl);
    // if (!curl_errno($tuCurl)) { 
    // $info = curl_getinfo($tuCurl);
    // echo 'Took ' . $info['total_time'] . ' seconds to send a request to ' . $info['url'];
    // } else { 
    // echo 'Curl error: ' . curl_error($tuCurl);
    // }
    
            curl_close($tuCurl);
            return $tuData;
        }

经过测试两种方法都可以实现SSL证书访问https,殊途同归。

[https_myssl.com_cert_convert.html]: https://myssl.com/cert_convert.html
[20210521125116526.png]: /images/20221014/b097bf2a66ca4f289d5ab30784f9ac28.png