PayEase.php 26.7 KB
Newer Older
D
pay  
devil_gong 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25
<?php
// +----------------------------------------------------------------------
// | ShopXO 国内领先企业级B2C免费开源电商系统
// +----------------------------------------------------------------------
// | Copyright (c) 2011~2019 http://shopxo.net All rights reserved.
// +----------------------------------------------------------------------
// | Licensed ( http://www.apache.org/licenses/LICENSE-2.0 )
// +----------------------------------------------------------------------
// | Author: Devil
// +----------------------------------------------------------------------
namespace payment;

/**
 * 首信易支付
 * @author   Devil
 * @blog    http://gong.gg/
 * @version 1.0.0
 * @date    2018-09-19
 * @desc    description
 */
class PayEase
{
    // 插件配置参数
    private $config;

G
gongfuxiang 已提交
26 27 28 29 30
    // 证书,应用私钥,应用公钥,平台公钥
    private $private_key = ROOT.'rsakeys/client.pfx';
    private $public_key = ROOT.'rsakeys/server.cer';
    private $out_public_key = ROOT.'rsakeys/out_server.cer';

D
pay  
devil_gong 已提交
31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57
    /**
     * 构造方法
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-17
     * @desc    description
     * @param   [array]           $params [输入参数(支付配置参数)]
     */
    public function __construct($params = [])
    {
        $this->config = $params;
    }

    /**
     * 配置信息
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-19
     * @desc    description
     */
    public function Config()
    {
        // 基础信息
        $base = [
            'name'          => '首信易支付',  // 插件名称
G
gongfuxiang 已提交
58
            'version'       => '1.0.0',  // 插件版本
D
pay  
devil_gong 已提交
59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88
            'apply_version' => '不限',  // 适用系统版本描述
            'apply_terminal'=> ['pc','h5'], // 适用终端 默认全部 ['pc', 'h5', 'app', 'alipay', 'weixin', 'baidu']
            'desc'          => '适用PC+H5,致力于打造汇通全球的、领先的国际支付平台,为商家提供更优质、更安全的支付清算服务。<a href="https://www.beijing.com.cn/" target="_blank">立即申请</a>',  // 插件描述(支持html)
            'author'        => 'Devil',  // 开发者
            'author_url'    => 'http://shopxo.net/',  // 开发者主页
        ];

        // 配置信息
        $element = [
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'merchantId',
                'placeholder'   => '商户编号',
                'title'         => '商户编号',
                'is_required'   => 0,
                'message'       => '请填写商户编号',
            ],
            [
                'element'       => 'input',
                'type'          => 'text',
                'default'       => '',
                'name'          => 'password',
                'placeholder'   => '密码',
                'title'         => '密码',
                'is_required'   => 0,
                'message'       => '请填写密码',
            ],
            [
G
gongfuxiang 已提交
89 90
                'element'       => 'message',
                'message'       => '请按照相应路径、将密钥证书对应放入文件夹中。<br />&nbsp;&nbsp;&nbsp;应用公钥:'.$this->public_key.' <br /> &nbsp;&nbsp;&nbsp;应用私钥:'.$this->private_key.' <br /> &nbsp;&nbsp;&nbsp;平台公钥:'.$this->out_public_key,
D
pay  
devil_gong 已提交
91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122
            ],
        ];

        return [
            'base'      => $base,
            'element'   => $element,
        ];
    }

    /**
     * 支付入口
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-19
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    public function Pay($params = [])
    {
        // 参数
        if(empty($params))
        {
            return DataReturn('参数不能为空', -1);
        }
        
        // 配置信息
        if(empty($this->config))
        {
            return DataReturn('支付缺少配置', -1);
        }

G
gongfuxiang 已提交
123 124 125 126 127 128
        // 证书是否配置
        if(!file_exists($this->private_key) || !file_exists($this->public_key) || !file_exists($this->out_public_key))
        {
            return DataReturn('密钥证书未配置', -1);
        }

D
devil_gong 已提交
129 130
        $data = [
            'merchantId'        => $this->config['merchantId'],
D
devil_gong 已提交
131
            'orderAmount'       => $params['total_price']*100,
D
devil_gong 已提交
132
            'orderCurrency'     => 'CNY',
D
devil_gong 已提交
133
            'requestId'         => $params['order_no'].GetNumberCode(6),
D
devil_gong 已提交
134 135 136
            'notifyUrl'         => $params['notify_url'],
            'callbackUrl'       => $params['call_back_url'],
        ];
G
gongfuxiang 已提交
137 138 139 140
        $payer = [
            'idType'    => 'IDCARD',
        ];
        $data['payer'] = $payer;
D
devil_gong 已提交
141 142
        $detail = [
            [
D
devil_gong 已提交
143
                'name'      => $params['name'],
D
devil_gong 已提交
144
                'quantity'  => 1,
D
devil_gong 已提交
145
                'amount'    => $params['total_price']*100,
D
devil_gong 已提交
146 147
            ]
        ];
G
gongfuxiang 已提交
148
        $data['productDetails'] = $detail;
D
devil_gong 已提交
149

G
gongfuxiang 已提交
150 151
        $str = $this->buildJson($this->private_key, $this->config['password'], $data);
        $date = $this->creatdate($str, $this->public_key);
D
devil_gong 已提交
152 153

        $url = 'https://apis.5upay.com/onlinePay/order';
D
devil_gong 已提交
154
        return $this->execute(
G
gongfuxiang 已提交
155
            $this->private_key,
D
devil_gong 已提交
156
            $this->config['password'],
G
gongfuxiang 已提交
157
            $this->public_key,
D
devil_gong 已提交
158
            $url,
G
gongfuxiang 已提交
159
            $date
D
devil_gong 已提交
160
        );
D
pay  
devil_gong 已提交
161 162 163 164 165 166 167 168 169 170 171 172 173
    }

    /**
     * 支付回调处理
     * @author   Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2018-09-19
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    public function Respond($params = [])
    {
D
devil_gong 已提交
174 175
        // 同步返回,直接进入订单详情页面
        if(substr(CurrentScriptName(), -20) == '_payease_respond.php' && empty($params['hmac']) && !empty($params['requestId']))
D
pay  
devil_gong 已提交
176
        {
D
devil_gong 已提交
177
            exit(header('location:'.MyUrl('index/order/detail', ['orderno'=>substr($params['requestId'], 0, strlen($params['requestId'])-6)])));
D
devil_gong 已提交
178
        }
D
devil_gong 已提交
179

D
devil_gong 已提交
180 181 182
        // 异步处理
        $params['encryptKey'] = isset($_SERVER['HTTP_ENCRYPTKEY']) ? $_SERVER['HTTP_ENCRYPTKEY'] : '';
        $params['merchantId'] = isset($_SERVER['HTTP_MERCHANTID']) ? $_SERVER['HTTP_MERCHANTID'] : '';
G
gongfuxiang 已提交
183
        $ret = $this->NotifyCheckHmac($this->private_key, $params, $this->out_public_key, $this->config['password']);
D
devil_gong 已提交
184

D
devil_gong 已提交
185
        // 支付状态
D
devil_gong 已提交
186
        if(isset($ret['code']) && $ret['code'] == 0 && isset($ret['data']['status']) && $ret['data']['status'] == 'SUCCESS')
D
devil_gong 已提交
187
        {
D
devil_gong 已提交
188
            return DataReturn('支付成功', 0, $this->ReturnData($ret['data']));
D
pay  
devil_gong 已提交
189
        }
D
devil_gong 已提交
190 191 192 193 194 195 196 197 198 199 200 201 202 203 204

        return DataReturn('支付失败', -100);
    }

    /**
     * [ReturnData 返回数据统一格式]
     * @author   Devil
     * @blog     http://gong.gg/
     * @version  1.0.0
     * @datetime 2018-10-06T16:54:24+0800
     * @param    [array]                   $data [返回数据]
     */
    private function ReturnData($data)
    {
        // 参数处理
D
devil_gong 已提交
205
        $out_trade_no = substr($data['requestId'], 0, strlen($data['requestId'])-6);
D
devil_gong 已提交
206 207 208 209 210

        // 返回数据固定基础参数
        $data['trade_no']       = isset($data['serialNumber']) ? $data['serialNumber'] : '';  // 支付平台 - 订单号
        $data['buyer_user']     = isset($data['bindCardId']) ? $data['bindCardId'] : '';      // 支付平台 - 用户
        $data['subject']        = isset($data['orderCurrency']) ? $data['orderCurrency'] : ''; // 本系统发起支付的 - 商品名称
D
devil_gong 已提交
211
        $data['out_trade_no']   = $out_trade_no; // 本系统发起支付的 - 订单号
D
devil_gong 已提交
212 213
        $data['pay_price']      = $data['orderAmount']/100;   // 本系统发起支付的 - 总价
        return $data;
D
pay  
devil_gong 已提交
214
    }
D
devil_gong 已提交
215

D
devil_gong 已提交
216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260
    /**
     * 退款处理
     * @author  Devil
     * @blog    http://gong.gg/
     * @version 1.0.0
     * @date    2019-05-28
     * @desc    description
     * @param   [array]           $params [输入参数]
     */
    public function Refund($params = [])
    {
        // 参数
        $p = [
            [
                'checked_type'      => 'empty',
                'key_name'          => 'order_no',
                'error_msg'         => '订单号不能为空',
            ],
            [
                'checked_type'      => 'empty',
                'key_name'          => 'trade_no',
                'error_msg'         => '交易平台订单号不能为空',
            ],
            [
                'checked_type'      => 'empty',
                'key_name'          => 'pay_price',
                'error_msg'         => '支付金额不能为空',
            ],
            [
                'checked_type'      => 'empty',
                'key_name'          => 'refund_price',
                'error_msg'         => '退款金额不能为空',
            ],
        ];
        $ret = ParamsChecked($params, $p);
        if($ret !== true)
        {
            return DataReturn($ret, -1);
        }

        // 退款原因
        $refund_reason = empty($params['refund_reason']) ? $params['order_no'].'订单退款'.$params['refund_price'].'元' : $params['refund_reason'];

        $data = [
            'merchantId'        => $this->config['merchantId'],
D
devil_gong 已提交
261
            'requestId'         => $params['order_no'].GetNumberCode(6),
D
devil_gong 已提交
262
            'amount'            => $params['refund_price']*100,
D
devil_gong 已提交
263
            'orderId'           => $params['trade_no'],
D
devil_gong 已提交
264 265
            'remark'            => $refund_reason,
        ];
G
gongfuxiang 已提交
266 267
        $str = $this->buildJson($this->private_key, $this->config['password'], $data);
        $date = $this->creatdate($str, $this->public_key);
D
devil_gong 已提交
268 269 270

        $url = 'https://apis.5upay.com/onlinePay/refund';
        $ret = $this->execute(
G
gongfuxiang 已提交
271
            $this->private_key,
D
devil_gong 已提交
272
            $this->config['password'],
G
gongfuxiang 已提交
273
            $this->public_key,
D
devil_gong 已提交
274 275 276
            $url,
            $date
        );
D
devil_gong 已提交
277
        if(isset($ret['code']))
D
devil_gong 已提交
278
        {
D
devil_gong 已提交
279
            if($ret['code'] == 0 && isset($ret['data']['status']) && $ret['data']['status'] == 'SUCCESS')
D
devil_gong 已提交
280 281 282
            {
                // 统一返回格式
                $data = [
D
devil_gong 已提交
283 284 285 286
                    'out_trade_no'  => isset($ret['data']['requestId']) ? $ret['data']['requestId'] : '',
                    'trade_no'      => isset($ret['data']['serialNumber']) ? $ret['data']['serialNumber'] : '',
                    'buyer_user'    => isset($ret['data']['currency']) ? $ret['data']['currency'] : '',
                    'refund_price'  => isset($ret['data']['amount']) ? $ret['data']['amount']/100 : 0.00,
D
devil_gong 已提交
287 288 289 290
                    'return_params' => $ret['data'],
                ];
                return DataReturn('退款成功', 0, $data);
            }
D
devil_gong 已提交
291
            return $ret;
D
devil_gong 已提交
292 293 294 295
        }
        return DataReturn('退款失败', -100);
    }

D
devil_gong 已提交
296

D
devil_gong 已提交
297 298 299
    /*
      * 生成16位随机数(AES秘钥)
      */
D
devil_gong 已提交
300 301
    public function creatdate($strdata,$public_key)
    {
D
devil_gong 已提交
302 303 304 305 306 307 308
        $str1='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890';
        $randStr = str_shuffle($str1);//打乱字符串
        $rands= substr($randStr,0,16);//生成16位aes密钥

        $encrypted=$this->rsaPublicEncode($public_key,$rands);

        $date=$this->aesEncrypt($strdata,$rands);
G
gongfuxiang 已提交
309
        $json = array("data" =>$date,"encryptKey"=>$encrypted,"merchantId"=>$strdata['merchantId'],"requestId"=>$strdata['requestId']);
D
devil_gong 已提交
310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342

        return $json;
    }

    /**
     * 填充算法
     * @param string $source
     * @return string
     */
    private function addPKCS7Padding($string, $blocksize = 16) {
        $len = strlen($string);
        $pad = $blocksize - ($len % $blocksize);
        $string .= str_repeat(chr($pad), $pad);
        return $string;

    }



    /**
     * hmac 验证
     * @return mixed
     */
    public function checkHmac($private_key,$public_key,$data,$password)
    {
        $aeskey=$this->rsaPrivateDecode($data,$private_key,$password);
        $encrypt_str=$this->aesDesc($data,$aeskey);
        return $this->hmacSign($encrypt_str,$public_key);
    }


    public function execute($private_key,$password,$public_key,$url, $param)
    {
D
devil_gong 已提交
343 344 345 346 347 348 349
        $ret = $this->httpRequestPost($url, $param,$public_key,$password,$private_key);
        if($ret['code'] != 0)
        {
            return $ret;
        }
        $this->handle($ret['data']);
        return $ret;
D
devil_gong 已提交
350 351 352 353 354 355 356 357
    }

    public function handle($data = array())
    {
        if (isset($data['status']) && $data['status'] == 'REDIRECT'){
            header("Location: {$data['redirectUrl']}");
            exit;
        } else if(isset($data['status']) && $data['status'] == 'SUCCESS'){
D
devil_gong 已提交
358 359 360 361 362 363 364 365
            if(isset($data["scanCode"]))
            {
                $aa=$data["scanCode"];
                $img = base64_decode($aa);
                header('Content-type: image/jpg');
                print_r($img);
            }
            return DataReturn('处理成功', 0, $data);
D
devil_gong 已提交
366
        } else if(isset($data['status']) && $data['status'] == 'CANCEL'){
D
devil_gong 已提交
367
            return DataReturn('处理失败', -1, $data);
D
devil_gong 已提交
368
        }else if(isset($data['status']) && $data['status'] == 'INIT'){
D
devil_gong 已提交
369
            return DataReturn('处理失败', -1, $data);
D
devil_gong 已提交
370
        }else{
D
devil_gong 已提交
371
            return DataReturn('响应错误', -1);
D
devil_gong 已提交
372 373 374 375 376 377 378 379 380 381 382 383 384
        }
    }

    /**
     * post请求
     * @return mixed
     */
    public function httpRequestPost($url, $param,$public_key,$password,$private_key)
    {
        $curl = curl_init($this->absoluteUrl($url));
        curl_setopt($curl,CURLOPT_HEADER, 1 ); // 过滤HTTP头
        curl_setopt($curl,CURLOPT_HTTPHEADER,array(
            'Content-Type: application/vnd.5upay-v3.0+json',
G
gongfuxiang 已提交
385 386 387
            'encryptKey: '.$param['encryptKey'],
            'merchantId: '.$param['merchantId'],
            'requestId: '.$param['requestId']
D
devil_gong 已提交
388 389 390
        ));
        curl_setopt($curl,CURLOPT_RETURNTRANSFER, 1);// 显示输出结果
        curl_setopt($curl,CURLOPT_POST,true); // post传输数据
G
gongfuxiang 已提交
391
        curl_setopt($curl,CURLOPT_POSTFIELDS,$param['data']);// post传输数据
D
devil_gong 已提交
392 393 394 395 396 397
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);//SSL证书认证
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);//严格认证

        $responseText = curl_exec($curl);
        if (curl_errno($curl) || $responseText === false) {
            curl_close($curl);
D
devil_gong 已提交
398
            return DataReturn('请求错误', -1);
D
devil_gong 已提交
399 400 401 402 403 404
        }
        curl_close($curl);
        preg_match_all('/(encryptKey|merchantId|data"):(\s+|")([^"\s]+)/s',$responseText,$m);
        list($encryptKey, $merchantId, $data) = $m[3];
        $responsedata = array("data" =>$data,"encryptKey"=>$encryptKey,"merchantId"=>$merchantId);
        if ($responsedata['merchantId'] == null){
D
devil_gong 已提交
405
            return DataReturn('请求错误', -1);
D
devil_gong 已提交
406
        }
D
devil_gong 已提交
407
        return $this->checkHmac($private_key,$public_key,$responsedata,$password);
D
devil_gong 已提交
408 409 410 411 412 413 414 415 416
    }


    /**
     *
     * @return string
     */
    private function buildJson($private_key,$password,$para=null)
    {
G
gongfuxiang 已提交
417
        unset($para['response_hmac_fields']);
D
devil_gong 已提交
418
        $data = array();
G
gongfuxiang 已提交
419
        foreach($para as $k=>$var){
D
devil_gong 已提交
420 421
            if(is_scalar($var) && $var !== '' && $var !== null){
                $data[$k] = $var;
D
devil_gong 已提交
422
            }else if(is_object($var)){
D
devil_gong 已提交
423 424 425 426 427 428 429 430 431 432 433 434 435 436 437
                $data[$k] =array_filter((array) $var);
            }else if(is_array($var)){
                $data[$k] =array_filter($var);

            }
            if(empty($data[$k])){
                unset($data[$k]);
            }
        }
        ksort($data);
        $hmacSource = '';
        foreach($data as $key => $value){
            if (is_array($value)){
                ksort($value);
                foreach ($value as $key2 => $value2) {
G
gongfuxiang 已提交
438
                    if(is_array($value2)) {
D
devil_gong 已提交
439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620
                        $value2 = array_filter((array)$value2);
                        ksort($value2);
                        foreach ($value2 as $oKey => $oValue) {
                            $oValue.='#';
                            $hmacSource .= trim($oValue);
                        }
                    }else{
                        $value2.='#';
                        $hmacSource .= trim($value2);
                    }
                }
            } else {
                $value.='#';
                $hmacSource .= trim($value);
            }
        }
        $sha1=sha1($hmacSource, true);
        $hmac=$this->rsaPrivateSign($sha1,$private_key,$password);
        $data['hmac'] = $hmac;
        return $data;
    }


    private function absoluteUrl($url, $param=null)
    {
        if ($param !== null) {
            $parse = parse_url($url);

            $port = '';
            if ( ($parse['scheme'] == 'http') && ( empty($parse['port']) || $parse['port'] == 80) ){
                $port = '';
            }else{
                $port = $parse['port'];
            }
            $url = $parse['scheme'].'//'.$parse['host'].$port. $parse['path'];

            if(!empty($parse['query'])){
                parse_str($parse['query'], $output);
                $param = array_merge($output, $param);
            }
            $url .= '?'. http_build_query($param);
        }

        return $url;
    }
    /**
     * AES加密方法
     * @param string $str
     * @return string
     */

    function aesEncrypt($data,$decrypted){
        $str =json_encode($data);
        $str = trim($str);
        $str = $this->addPKCS7Padding($str);
        $encrypt_str= openssl_encrypt($str, 'AES-128-ECB', $decrypted, OPENSSL_RAW_DATA|OPENSSL_ZERO_PADDING);
        return base64_encode($encrypt_str);
    }
    /**
     * AES解密方法
     * @param string $str
     * @return string
     */

    function aesDesc($data,$decrypted){
        $date = json_encode($data['data']);
        $screct_key = $decrypted;
        // $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128,MCRYPT_MODE_ECB),MCRYPT_RAND);
        // $encrypt_str =  mcrypt_decrypt(MCRYPT_RIJNDAEL_128, $screct_key, $date, MCRYPT_MODE_ECB, $iv);
        $encrypt_str=  openssl_decrypt($date,"AES-128-ECB",$screct_key);
        $encrypt_str = preg_replace('/[\x00-\x1F]/','', $encrypt_str);
        $encrypt_str = json_decode($encrypt_str,true);
        return $encrypt_str;
    }
    /**
     * 移去填充算法
     * @param string $source
     * @return string
     */
    function stripPKSC7Padding($source){
        $source = trim($source);
        $char = substr($source, -1);
        $num = ord($char);
        if($num==62)return $source;
        $source = substr($source,0,-$num);
        return $source;
    }

    /*
        * 去除空值的元素
        */

    function clearBlank($arr)
    {
        function odd($var)
        {
            return($var<>'');//return true or false
        }
        return (array_filter($arr, "odd"));
    }
    /*
       * RSA公钥加密
       */
    function rsaPublicEncode($public_key,$rands){

        $encryptKey=file_get_contents($public_key);
        $pem = chunk_split(base64_encode($encryptKey),64,"\n");//转换为pem格式的公钥
        $public_key = "-----BEGIN CERTIFICATE-----\n".$pem."-----END CERTIFICATE-----\n";
        $pu_key =  openssl_pkey_get_public($public_key);
        openssl_public_encrypt($rands,$encrypted,$pu_key);
        $encryptKey=base64_encode($encrypted);

     //   $pem = chunk_split($public_key,64,"\n");//转换为pem格式的公钥
     //   $pem = "-----BEGIN PUBLIC KEY-----\n".$pem."-----END PUBLIC KEY-----\n";
     //   $publicKey = openssl_pkey_get_public($pem);//获取公钥内容
     //   openssl_public_encrypt($rands,$encryptKey,$publicKey,OPENSSL_PKCS1_PADDING);
     //   $encryptKey = base64_encode($encryptKey);//
        return $encryptKey;
    }
    /*
     * RSA公钥解密
     *
     */
    function rsaPublicDecode($public_key,$data){
        $pubkey=file_get_contents($public_key);
        $encryptKey =$data['encryptKey'];
        $pem1 = chunk_split(base64_encode($pubkey),64,"\n");
        $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n";
        $pi_key =  openssl_pkey_get_public($pem1);
        openssl_public_decrypt($encryptKey,$decrypted,$pem1);
        return base64_encode($decrypted);
    }
    /*
    * RSA私钥解密
    *
    */
    function rsaPrivateDecode($data,$private_key,$password){
        $prikey=file_get_contents($private_key);
        $encryptKey =$data['encryptKey'];
        $results=array();
        openssl_pkcs12_read($prikey,$results,$password);
        $private_key=$results['pkey'];
        $pi_key =  openssl_pkey_get_public($private_key);
        openssl_private_decrypt(base64_decode($encryptKey),$decrypted,$private_key);
        return $decrypted;
    }

    /*
     * RSA私钥签名
     */
    function rsaPrivateSign($data,$path,$password){
        $pubKey = file_get_contents($path);
        $results=array();
        openssl_pkcs12_read($pubKey,$results,$password);
        $private_key=$results['pkey'];
        $pi_key =  openssl_pkey_get_private($private_key);//这个函数可用来判断私钥是否是可用的,可用返回资源id Resource id
        openssl_sign($data, $signature,$private_key,"md5");
        $signature=base64_encode($signature);
        return $signature;
    }

    /*
     * RSA公钥验签
     *
     */
     function rsaPubilcSign($data,$path,$hmac){
         $public_key=file_get_contents($path);
         $pem1 = chunk_split(base64_encode($public_key),64,"\n");
         $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n";
         $pi_key =  openssl_pkey_get_public($pem1);
         $result=openssl_verify($data,base64_decode($hmac),$pem1,OPENSSL_ALGO_MD5);
         return $result;

     }

    /*
      * hamc签名验证
      *
      *
      */
    function hmacSign($encrypt_str,$path){

D
devil_gong 已提交
621 622
        if (empty($encrypt_str['hmac'])) {
            return DataReturn($encrypt_str['cause'].'['.$encrypt_str['code'].']', -1);
D
devil_gong 已提交
623 624 625 626 627 628 629
        }
        $hmac = $encrypt_str['hmac'];
        unset($encrypt_str['hmac']);

        ksort($encrypt_str);
        $hmacSource = '';
        foreach($encrypt_str as $key => $value){
D
devil_gong 已提交
630 631 632 633
            if($value == '')
            {
                continue;
            }
D
devil_gong 已提交
634 635 636
            if (is_array($value)) {
                ksort($value);
                foreach ($value as $key2 => $value2) {
D
devil_gong 已提交
637 638 639 640
                    if($value2 == '')
                    {
                        continue;
                    }
D
devil_gong 已提交
641 642 643 644
                    if (is_object($value2)) {
                        $value2 = array_filter((array)$value2);
                        ksort($value2);
                        foreach ($value2 as $oKey => $oValue) {
D
devil_gong 已提交
645 646 647 648
                            if($oValue == '')
                            {
                                continue;
                            }
D
devil_gong 已提交
649 650 651 652 653 654 655
                            $oValue .= '#';
                            $hmacSource .= trim($oValue);

                        }
                    } else if(is_array($value2)){
                        ksort($value2);
                        foreach ($value2 as $key3 => $value3) {
D
devil_gong 已提交
656 657 658 659
                            if($value3 == '')
                            {
                                continue;
                            }
D
devil_gong 已提交
660 661 662 663
                            if (is_object($value3)) {
                                $value3 = array_filter((array)$value3);
                                ksort($value3);
                                foreach ($value3 as $oKey => $oValue) {
D
devil_gong 已提交
664 665 666 667
                                    if($oValue == '')
                                    {
                                        continue;
                                    }
D
devil_gong 已提交
668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688
                                    $oValue .= '#';
                                    $hmacSource .= trim($oValue);
                                }
                            } else{
                                $value3 .= '#';
                                $hmacSource .= trim($value3);
                            }
                        }
                    } else{
                        $value2 .= '#';
                        $hmacSource .= trim($value2);
                    }
                }
            } else {
                $value .= '#';
                $hmacSource .= trim($value);
            }
        }
         $sourceHmac=sha1($hmacSource, true);
        $hh=$this->rsaPubilcSign($sourceHmac,$path,$hmac);
        if ($hh==0||$hh==-1){
D
devil_gong 已提交
689
            return DataReturn('HMAC验证错误', -1);
D
devil_gong 已提交
690
        }
D
devil_gong 已提交
691
        return DataReturn('校验成功', 0, $encrypt_str);
D
devil_gong 已提交
692
    }
D
devil_gong 已提交
693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716



    /**
     * hmac 验证
     * @return mixed
     */
    public function NotifyCheckHmac($private_key,$data,$public_key,$password)
    {
        $prikey=file_get_contents($private_key);
        $encryptKey =$data['encryptKey'];
        $results=array();
        openssl_pkcs12_read($prikey,$results,$password);
        $private_key=$results['pkey'];
        $pi_key =  openssl_pkey_get_public($private_key);
        openssl_private_decrypt(base64_decode($encryptKey),$decrypted,$private_key);

        $date = json_encode($data['data']);
        $screct_key = $decrypted;
        $encrypt_str=  openssl_decrypt($date,"AES-128-ECB",$screct_key);
        $encrypt_str = preg_replace('/[\x00-\x1F]/','', $encrypt_str);
        $encrypt_str = json_decode($encrypt_str,true);

        if (empty($encrypt_str['hmac'])){
D
devil_gong 已提交
717
            return DataReturn('HMAC验证错误', -1);
D
devil_gong 已提交
718 719 720 721 722 723 724
        }
        $hmac = $encrypt_str['hmac'];
        unset($encrypt_str['hmac']);

        ksort($encrypt_str);
        $hmacSource = '';
        foreach($encrypt_str as $key => $value){
D
devil_gong 已提交
725 726 727 728
            if($value == '')
            {
                continue;
            }
D
devil_gong 已提交
729 730 731
            if (is_array($value)) {
                ksort($value);
                foreach ($value as $key2 => $value2) {
D
devil_gong 已提交
732 733 734 735
                    if($value2 == '')
                    {
                        continue;
                    }
D
devil_gong 已提交
736
                    if (is_array($value2)) {
D
devil_gong 已提交
737 738 739
                        $value2 = array_filter((array)$value2);
                        ksort($value2);
                        foreach ($value2 as $oKey => $oValue) {
D
devil_gong 已提交
740 741 742 743
                            if($oValue == '')
                            {
                                continue;
                            }
D
devil_gong 已提交
744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770
                            $oValue .= '#';
                            $hmacSource .= trim($oValue);
                        }
                    } else {
                        $value2 .= '#';
                        $hmacSource .= trim($value2);
                    }
                }
            } else {
                $value .= '#';
                $hmacSource .= trim($value);
            }
        }
        $sourceHmac=sha1($hmacSource, true);

        $public_key=file_get_contents($public_key);
        $pem1 = chunk_split(base64_encode($public_key),64,"\n");
        $pem1 = "-----BEGIN CERTIFICATE-----\n".$pem1."-----END CERTIFICATE-----\n";
        $pi_key =  openssl_pkey_get_public($pem1);
        $result=openssl_verify($sourceHmac,base64_decode($hmac),$pem1,OPENSSL_ALGO_MD5);

        if($result==0||$result==-1)
        {
            return DataReturn('签名错误', -1);
        }
        return DataReturn('校验成功', 0, $encrypt_str);
    }
D
pay  
devil_gong 已提交
771 772
}
?>