如何使用PHP的OpenSSL扩展验证CA？

Question

In the command line, I can verify that certificate is issued by trusted CA by typing

openssl verify mycert.pem

How do I do same with PHP's OpenSSL library? PHP has an openssl_verify function which takes many extra parameters:

data , string $signature , mixed $pub_key_id

How do I repeat that simple command line operation with corresponding PHP function?

Answer 1

In PHP the openssl_verify function is not used to verify that a certificate is issued by a trusted CA but used to verify that a signature is the right one for some data...

EDIT : How to verify CA with PHP : You can't only verify that subject and issuer name are matching, so by only using OpenSSL in Php it doesnt seem like totally possible