You can see who made the signature by checking its fingerprint:
<?php
$res = gnupg_init();
$info = gnupg_verify($res,$signed_text,$signature);
if($info !== false){
$fingerprint = $info['fingerprint'];
var_dump(gnupg_keyinfo($res, $fingerprint));
}
gnupg_verify
(PECL gnupg:0.1-1.3.1)
gnupg_verify — Verifies a signed text
Описание
array gnupg_verify
( resource $identifier
, string $signed_text
, string $signature
[, string &$plaintext
] )
Verifies the given signed_text and returns information about the signature.
Список параметров
- identifier
-
The gnupg identifier, from a call to gnupg_init() or gnupg.
- signed_text
-
The signed text.
- signature
-
The signature. To verify a clearsigned text, set signature to FALSE.
- plaintext
-
The plain text. If this optional parameter is passed, it is filled with the plain text.
Возвращаемые значения
On success, this function returns informations about the signature. On failure, this function returns FALSE.
Примеры
Пример #1 Procedural gnupg_verify() example
<?php
$plaintext = "";
$res = gnupg_init();
// clearsigned
$info = gnupg_verify($res,$signed_text,false,$plaintext);
print_r($info);
// detached signature
$info = gnupg_verify($res,$signed_text,$signature);
print_r($info);
?>
Пример #2 OO gnupg_verify() example
<?php
$plaintext = "";
$gpg = new gnupg();
// clearsigned
$info = $gpg -> verify($signed_text,false,$plaintext);
print_r($info);
// detached signature
$info = $gpg -> verify($signed_text,$signature);
print_r($info);
?>
gnupg_verify
kae at verens dot com
19-Sep-2008 01:27
19-Sep-2008 01:27
