Google_P12Signer
Signs data.
Defined (1)
The class is defined in the following location(s).
- /src/auth/Google_P12Signer.php
- class Google_P12Signer extends Google_Signer {
- // OpenSSL private key resource
- private $privateKey;
- // Creates a new signer from a .p12 file.
- function __construct($p12, $password) {
- if (!function_exists('openssl_x509_read')) {
- throw new Exception(
- 'The Google PHP API library needs the openssl PHP extension');
- }
- // This throws on error
- $certs = array();
- if (!openssl_pkcs12_read($p12, $certs, $password)) {
- throw new Google_AuthException("Unable to parse the p12 file. " .
- "Is this a .p12 file? Is the password correct? OpenSSL error: " .
- openssl_error_string());
- }
- // TODO(beaton): is this part of the contract for the openssl_pkcs12_read
- // method? What happens if there are multiple private keys? Do we care?
- if (!array_key_exists("pkey", $certs) || !$certs["pkey"]) {
- throw new Google_AuthException("No private key found in p12 file.");
- }
- $this->privateKey = openssl_pkey_get_private($certs["pkey"]);
- if (!$this->privateKey) {
- throw new Google_AuthException("Unable to load private key in ");
- }
- }
- function __destruct() {
- if ($this->privateKey) {
- openssl_pkey_free($this->privateKey);
- }
- }
- function sign($data) {
- if(version_compare(PHP_VERSION, '5.3.0') < 0) {
- throw new Google_AuthException(
- "PHP 5.3.0 or higher is required to use service accounts.");
- }
- if (!openssl_sign($data, $signature, $this->privateKey, "sha256")) {
- throw new Google_AuthException("Unable to sign data");
- }
- return $signature;
- }
- }