Question

我正在尝试为Apple推送通知创建服务器端连接。首先，我要求用户（可能是ios dev）提供Apple提供的.cer和.p12文件，以使其成为.pem文件。

以下是.pem证书的创建。

$dir =  $this->directory.'/certificates';
$password = 'a_user_password';
$certificate = $dir.'/certificate.cer';
$key_password =  $dir.'/key.p12';

exec('openssl x509 -inform der -in '.$certificate.' -out '.$dir.'/certificate.pem');
exec('openssl pkcs12 -nocerts -out '.$dir.'/key.pem -in '.$key_password.' -passout pass:'.$password.' -passin pass:'.$password);

$filename = $key_password;
$results = array();
$worked = openssl_pkcs12_read(file_get_contents($filename), $results, $obj->password);
if($worked) {
   $current = file_get_contents($dir.'/key.pem');
   $current .= $results['pkey'];
   file_put_contents($dir.'/key.pem', $current);
} else {
   echo openssl_error_string();
}
exec('cat '.$dir.'/certificate.pem '.$dir.'/key.pem > '.$dir.'/apns_certificate.pem');

到目前为止，这么好。我通过命令行测试了上面生成的apns_certificate.pem是否成功通过：

s_client -connect gateway.sandbox.push.apple.com:2195 -cert certificate.pem -key key.pem

然而，当我尝试通过PHP连接apns我不能。按照我尝试的最后一个PHP代码，我已经看到其他人已经工作过了：

$this->certificate = ROOT.'/certificates/apns_certificate.pem';
$this->socket = 'ssl://gateway.push.apple.com:2195';
if (!file_exists($this->certificate)) {
        $this->error = 'Certificate file not found';
        return false;
    }

    $this->stream_context = stream_context_create();
    $this->stream_options = array(
        'ssl' => array(
            'local_cert' => $this->certificate,
            'passphrase' => 'a_user_password', //same with the one used in my previous code
        )
    );
    $success = stream_context_set_option($this->stream_context, $this->stream_options);
    if ($success == false) {
        $this->error = 'Secure connection failed';
        return false;
    }

    $this->socket_client = stream_socket_client($this->socket, $con_error, $con_error_string, $this->timeout, STREAM_CLIENT_CONNECT, $this->stream_context);

    if ($this->socket_client === false) {
        $this->error = $con_error_string;
        return false;
    } else {
        return true;
    }

上面的代码给我一个错误：警告：stream_socket_client（）：SSL操作失败，代码为1. OpenSSL错误消息：错误：14094416：SSL例程：SSL3_READ_BYTES：sslv3警报证书未知警告：stream_socket_client（）：无法连接到ssl：//gateway.push.apple.com：2195

提前感谢您的帮助！

Answer 1

上面的代码是正确的。认证.p12出错。我还将.p12转换文件的exec更改为：

exec('openssl pkcs12 -out '.$dir.'/key.pem -in '.$key_password.' -passout pass:'.$password.' -passin pass:'.$password.' -nodes');

APNS证书.pem

1 个答案: