PHP生成RSA/ECC密钥对

使用PHP生成RSA/ECC密钥对，可用于签发证书、微信/支付宝支付签名等。

<?php
$options = ['private_key_bits' => 384,'private_key_type' => OPENSSL_KEYTYPE_EC,'curve_name' => 'secp384r1','config' => __DIR__ . '/openssl.cnf',
];
$private_key = openssl_pkey_new($options);
$keyDetail = openssl_pkey_get_details($private_key);$publicKey = $keyDetail['key'];$result = openssl_pkey_export($private_key, $privateKey, null, $options);openssl_pkey_free($private_key);echo json_encode(compact('privateKey', 'publicKey'), 256 | 128);/*
{"privateKey": "-----BEGIN EC PRIVATE KEY-----\nMIGkAgEBBDAmtrPgKoBN3pyuxqhbLerF7R1z34wM4+A6KZ9mVuILcRQMMg\/1R7al\nIBi1nloOsg6gBwYFK4EEACKhZANiAAQfI7zwMKkTd2mSdPDkOmLWlpi\/4rw30Kvw\n5k4G3Hv+gx6Nz6n1wKL7syRCvlG9JX2k+5UecsUfe1N6j+4QVQdF78pFp9paHIKg\n9opts2wcfM28sRmqcxn7o5JpqtXMc1Y=\n-----END EC PRIVATE KEY-----\n","publicKey": "-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEHyO88DCpE3dpknTw5Dpi1paYv+K8N9Cr\n8OZOBtx7\/oMejc+p9cCi+7MkQr5RvSV9pPuVHnLFH3tTeo\/uEFUHRe\/KRafaWhyC\noPaKbbNsHHzNvLEZqnMZ+6OSaarVzHNW\n-----END PUBLIC KEY-----\n"
}
*/

openssl.cnf

HOME			= .
RANDFILE		= $ENV::HOME/.rnd

生成ECC椭圆算法密钥对的options-两个推荐的曲线

//推荐最低384
$options = ['private_key_bits' => 256,'private_key_type' => OPENSSL_KEYTYPE_EC,'curve_name' => 'prime256v1','config' => __DIR__ . '/openssl.cnf',
];$options = ['private_key_bits' => 384,'private_key_type' => OPENSSL_KEYTYPE_EC,'curve_name' => 'secp384r1','config' => __DIR__ . '/openssl.cnf',
];

RSA 参数

$options = ['private_key_bits' => 2048 ,'private_key_type' => OPENSSL_KEYTYPE_RSA ,'config' => __DIR__ . '/openssl.cnf',
];