function signSPKAC($signatureAlgorithm = 'sha1WithRSAEncryption')
    {
        if (!is_object($this->privateKey)) {
            return false;
        }

        $origPublicKey = $this->publicKey;
        $class = get_class($this->privateKey);
        $this->publicKey = new $class();
        $this->publicKey->loadKey($this->privateKey->getPublicKey());
        $this->publicKey->setPublicKey();
        $publicKey = $this->_formatSubjectPublicKey();
        if (!$publicKey) {
            return false;
        }
        $this->publicKey = $origPublicKey;

        $currentCert = isset($this->currentCert) ? $this->currentCert : null;
        $signatureSubject = isset($this->signatureSubject) ? $this->signatureSubject: null;

        // re-signing a SPKAC seems silly but since everything else supports re-signing why not?
        if (isset($this->currentCert) && is_array($this->currentCert) && isset($this->currentCert['publicKeyAndChallenge'])) {
            $this->currentCert['signatureAlgorithm']['algorithm'] = $signatureAlgorithm;
            $this->currentCert['publicKeyAndChallenge']['spki'] = $publicKey;
            if (!empty($this->challenge)) {
                // the bitwise AND ensures that the output is a valid IA5String
                $this->currentCert['publicKeyAndChallenge']['challenge'] = $this->challenge & str_repeat("\x7F", strlen($this->challenge));
            }
        } else {
            $this->currentCert = array(
                'publicKeyAndChallenge' =>
                    array(
                        'spki' => $publicKey,
                        // quoting <https://developer.mozilla.org/en-US/docs/Web/HTML/Element/keygen>,
                        // "A challenge string that is submitted along with the public key. Defaults to an empty string if not specified."
                        // both Firefox and OpenSSL ("openssl spkac -key private.key") behave this way
                        // we could alternatively do this instead if we ignored the specs:
                        // Random::string(8) & str_repeat("\x7F", 8)
                        'challenge' => !empty($this->challenge) ? $this->challenge : ''
                    ),
                    'signatureAlgorithm' => array('algorithm' => $signatureAlgorithm),
                    'signature'          => false // this is going to be overwritten later
            );
        }

        // resync $this->signatureSubject
        // save $publicKeyAndChallenge in case there are any \phpseclib\File\ASN1\Element objects in it
        $publicKeyAndChallenge = $this->currentCert['publicKeyAndChallenge'];
        $this->loadSPKAC($this->saveSPKAC($this->currentCert));

        $result = $this->_sign($this->privateKey, $signatureAlgorithm);
        $result['publicKeyAndChallenge'] = $publicKeyAndChallenge;

        $this->currentCert = $currentCert;
        $this->signatureSubject = $signatureSubject;

        return $result;
    }
function signSPKAC($signatureAlgorithm = 'sha1WithRSAEncryption')
    {
        if (!is_object($this->privateKey)) {
            return false;
        }

        $origPublicKey = $this->publicKey;
        $class = get_class($this->privateKey);
        $this->publicKey = new $class();
        $this->publicKey->loadKey($this->privateKey->getPublicKey());
        $this->publicKey->setPublicKey();
        $publicKey = $this->_formatSubjectPublicKey();
        if (!$publicKey) {
            return false;
        }
        $this->publicKey = $origPublicKey;

        $currentCert = isset($this->currentCert) ? $this->currentCert : null;
        $signatureSubject = isset($this->signatureSubject) ? $this->signatureSubject: null;

        // re-signing a SPKAC seems silly but since everything else supports re-signing why not?
        if (isset($this->currentCert) && is_array($this->currentCert) && isset($this->currentCert['publicKeyAndChallenge'])) {
            $this->currentCert['signatureAlgorithm']['algorithm'] = $signatureAlgorithm;
            $this->currentCert['publicKeyAndChallenge']['spki'] = $publicKey;
            if (!empty($this->challenge)) {
                // the bitwise AND ensures that the output is a valid IA5String
                $this->currentCert['publicKeyAndChallenge']['challenge'] = $this->challenge & str_repeat("\x7F", strlen($this->challenge));
            }
        } else {
            $this->currentCert = array(
                'publicKeyAndChallenge' =>
                    array(
                        'spki' => $publicKey,
                        // quoting <https://developer.mozilla.org/en-US/docs/Web/HTML/Element/keygen>,
                        // "A challenge string that is submitted along with the public key. Defaults to an empty string if not specified."
                        // both Firefox and OpenSSL ("openssl spkac -key private.key") behave this way
                        // we could alternatively do this instead if we ignored the specs:
                        // Random::string(8) & str_repeat("\x7F", 8)
                        'challenge' => !empty($this->challenge) ? $this->challenge : ''
                    ),
                    'signatureAlgorithm' => array('algorithm' => $signatureAlgorithm),
                    'signature'          => false // this is going to be overwritten later
            );
        }

        // resync $this->signatureSubject
        // save $publicKeyAndChallenge in case there are any \phpseclib\File\ASN1\Element objects in it
        $publicKeyAndChallenge = $this->currentCert['publicKeyAndChallenge'];
        $this->loadSPKAC($this->saveSPKAC($this->currentCert));

        $result = $this->_sign($this->privateKey, $signatureAlgorithm);
        $result['publicKeyAndChallenge'] = $publicKeyAndChallenge;

        $this->currentCert = $currentCert;
        $this->signatureSubject = $signatureSubject;

        return $result;
    }
function signSPKAC ( $ signatureAlgorithm = 'sha1WithRSAEncryption' ) { if ( ! is_object ( $ this -> privateKey ) ) { return false ; } $ origPublicKey = $ this -> publicKey ; $ class = get_class ( $ this -> privateKey ) ; $ this -> publicKey = new $ class ( ) ; $ this -> publicKey -> loadKey ( $ this -> privateKey -> getPublicKey ( ) ) ; $ this -> publicKey -> setPublicKey ( ) ; $ publicKey = $ this -> _formatSubjectPublicKey ( ) ; if ( ! $ publicKey ) { return false ; } $ this -> publicKey = $ origPublicKey ; $ currentCert = isset ( $ this -> currentCert ) ? $ this -> currentCert : null ; $ signatureSubject = isset ( $ this -> signatureSubject ) ? $ this -> signatureSubject : null ; // re-signing a SPKAC seems silly but since everything else supports re-signing why not? if ( isset ( $ this -> currentCert ) && is_array ( $ this -> currentCert ) && isset ( $ this -> currentCert [ 'publicKeyAndChallenge' ] ) ) { $ this -> currentCert [ 'signatureAlgorithm' ] [ 'algorithm' ] = $ signatureAlgorithm ; $ this -> currentCert [ 'publicKeyAndChallenge' ] [ 'spki' ] = $ publicKey ; if ( ! empty ( $ this -> challenge ) ) { // the bitwise AND ensures that the output is a valid IA5String $ this -> currentCert [ 'publicKeyAndChallenge' ] [ 'challenge' ] = $ this -> challenge & str_repeat ( "\x7F" , strlen ( $ this -> challenge ) ) ; } } else { $ this -> currentCert = array ( 'publicKeyAndChallenge' => array ( 'spki' => $ publicKey , // quoting <https://developer.mozilla.org/en-US/docs/Web/HTML/Element/keygen>, // "A challenge string that is submitted along with the public key. Defaults to an empty string if not specified." // both Firefox and OpenSSL ("openssl spkac -key private.key") behave this way // we could alternatively do this instead if we ignored the specs: // Random::string(8) & str_repeat("\x7F", 8) 'challenge' => ! empty ( $ this -> challenge ) ? $ this -> challenge : '' ) , 'signatureAlgorithm' => array ( 'algorithm' => $ signatureAlgorithm ) , 'signature' => false // this is going to be overwritten later ) ; } // resync $this->signatureSubject // save $publicKeyAndChallenge in case there are any \phpseclib\File\ASN1\Element objects in it $ publicKeyAndChallenge = $ this -> currentCert [ 'publicKeyAndChallenge' ] ; $ this -> loadSPKAC ( $ this -> saveSPKAC ( $ this -> currentCert ) ) ; $ result = $ this -> _sign ( $ this -> privateKey , $ signatureAlgorithm ) ; $ result [ 'publicKeyAndChallenge' ] = $ publicKeyAndChallenge ; $ this -> currentCert = $ currentCert ; $ this -> signatureSubject = $ signatureSubject ; return $ result ; }
Sign a SPKAC

@access public
@return mixed
Sign a SPKAC