Hi to all!
It is necessary to load the open certificate in a GOST format.
I use code
1.
$pem = file_get_contents
<http://www.php.su/functions/?file_get_contents>('test.pem');
2.
$res=openssl_pkey_get_public
<http://www.php.su/functions/?openssl_pkey_get_public>(array
<http://www.php.su/functions/?array>($pem, ''));
3.
print_r <http://www.php.su/functions/?print_r>(openssl_error_string
<http://www.php.su/functions/?openssl_error_string>());
And get error
error:0609E09C:digital envelope routines:PKEY_SET_TYPE:unsupported algorithm
On the server installed OpenSSL 1.0.1 14 Mar 2012
openssl ciphers write GOST2001-GOST89-GOST89:GOST94-GOST89-GOST89
How to check, whether algorithms of GOST in PHP are available?
How to load the GOST key and the certificate?
Test Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: GOST R 34.11-94 with GOST R 34.10-2001
Issuer: C=RU, ST=Russia, L=Moscow, O=SuperPlat, OU=SuperPlat
CA, CN=SuperPlat CA 01
Validity
Not Before: Aug 17 06:47:36 2012 GMT
Not After : Aug 17 06:47:36 2013 GMT
Subject: C=RU, ST=Russia, L=Moscow, O=SuperPlat, OU=SuperPlat
Terminals, CN=SuperTerm0000001
Subject Public Key <http://www.php.su/functions/?key> Info:
Public Key <http://www.php.su/functions/?key> Algorithm:
GOST R 34.10-2001
Public key <http://www.php.su/functions/?key>:
X:E035F2A840CFEA2563B5C1EBFAFD1D7F45D62A31965635752519F66269DBDAEB
Y:5741B2C1E21F7BD013C8DDEB9FBACB42A363C70BF4E924D7DDE9348D121867D8
Parameter set: id-GostR3410-2001-CryptoPro-A-ParamSet
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
OpenSSL Generated Certificate
X509v3 Subject Key <http://www.php.su/functions/?key>
Identifier:
43:FE:22:78:95:72:4F:4E:3A:74:F2:64:E4:FD:0B:80:0C:08:2E:03
X509v3 Authority Key <http://www.php.su/functions/?key>
Identifier:
keyid:98:75:A3:B7:85:C1:64:1B:23:34:4D:9B:FB:AE:0C:2A:25:6B:44:EB
Signature Algorithm: GOST R 34.11-94 with GOST R 34.10-2001
8f:37:24:fd:be:f0:37:d9:f3:1a:5c:31:5e:33:ef:35:61:93:
07:03:3d:4d:e8:2c:1b:39:a2:6c:d4:2f:85:35:b2:43:1d:ed:
b5:15:45:c7:10:38:41:28:68:29:62:20:e6:92:8a:64:34:87:
b8:b9:9f:ab:c8:04:6d:26:55:99
-----BEGIN CERTIFICATE-----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-----END <http://www.php.su/functions/?end> CERTIFICATE-----
Denis.
