Home >php教程 >php手册 >Java对PHP服务器hmac

Java对PHP服务器hmac

WBOY
WBOYOriginal
2016-06-06 19:51:091393browse

如果你的API服务安全认证协议中要求使用hmac_sha1方法对信息进行编码, 而你的服务是由PHP实现的,客户端是由JAVA实现的,那么为了对签名正确比对,就需要在两者之间建立能匹配的编码方式. PHP侧如下: define('ID','123456');define('KEY','k123456');$strToSign

如果你的API服务安全认证协议中要求使用hmac_sha1方法对信息进行编码,

而你的服务是由PHP实现的,客户端是由JAVA实现的,那么为了对签名正确比对,就需要在两者之间建立能匹配的编码方式.


PHP侧如下:

define('ID','123456');
define('KEY','k123456');

$strToSign = "test_string";

$utf8Str = mb_convert_encoding($strToSign, "UTF-8");
$hmac_sha1_str = base64_encode(hash_hmac("sha1", $utf8Str, KEY));
$signature = urlencode($hmac_sha1_str);
print_r($signature);

JAVA侧需要注意如下几点:

1. hmac_sha1编码结果需要转换成hex格式

2. java中base64的实现和php不一致,其中java并不会在字符串末尾填补=号以把字节数补充为8的整数

3. hmac_sha1并非sha1, hmac_sha1是需要共享密钥的


参考实现如下:

import java.io.UnsupportedEncodingException;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import org.apache.wicket.util.crypt.Base64UrlSafe;

public class test {
	 public static void main(String[] args) {
		String key = "f85b8b30f73eb2bf5d8063a9224b5e90";
	  String toHash =  "GET"+"\n"+"Thu, 09 Aug 2012 13:33:46 +0000"+"\n"+"/ApiChannel/Report.m";
	  //String toHashUtf8 = URLEncoder.encode(toHash, "UTF-8");
		String res = hmac_sha1(toHash, key);
		//System.out.print(res+"\n");
		
		String signature;
		try {
			signature = new String(Base64UrlSafe.encodeBase64(res.getBytes()),"UTF-8");
			signature = appendEqualSign(signature);
			System.out.print(signature);
		} catch (UnsupportedEncodingException e) {
			e.printStackTrace();
		}
	}
	
	public static String hmac_sha1(String value, String key) {
        try {
            // Get an hmac_sha1 key from the raw key bytes
            byte[] keyBytes = key.getBytes();           
            SecretKeySpec signingKey = new SecretKeySpec(keyBytes, "HmacSHA1");

            // Get an hmac_sha1 Mac instance and initialize with the signing key
            Mac mac = Mac.getInstance("HmacSHA1");
            mac.init(signingKey);

            // Compute the hmac on input data bytes
            byte[] rawHmac = mac.doFinal(value.getBytes());

            // Convert raw bytes to Hex
            String hexBytes = byte2hex(rawHmac);
            return hexBytes;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

	private static String byte2hex(final byte[] b){
	    String hs="";
	    String stmp="";
	    for (int n=0; n<b.length n stmp="(java.lang.Integer.toHexString(b[n]" if hs='hs+"0"+stmp;' else return private static string appendequalsign s int len="s.length();" appendnum="8" for><br>iefreer<br><br>


</b.length>
Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn