終於成功讓它運作了。
$dn = array(
"countryName" => "XX",
"stateOrProvinceName" => "所在地",
"localityName" => "地區",
"organizationName" => "範例組織",
"organizationalUnitName" => "組織單位",
"commonName" => "範例",
"emailAddress" => "contactus@email.com"
);
// 產生新的私鑰（以及公鑰）對
$privkey = openssl_pkey_new(array(
"private_key_bits" => 4096,
"private_key_type" => OPENSSL_KEYTYPE_RSA,
));
// 產生憑證簽署請求 (CSR)
$csr = openssl_csr_new($dn, $privkey, array('digest_alg' => 'sha512'));
// 產生有效期為 365 天的自簽憑證
$x509 = openssl_csr_sign($csr, null, $privkey, $days=365, array('digest_alg' => 'sha512'));
// 儲存您的私鑰、CSR 和自簽憑證以供稍後使用
openssl_csr_export($csr, $csrout) and var_dump($csrout); // .csr
openssl_x509_export($x509, $certout) and var_dump($certout); // .crt.pem
openssl_pkey_export($privkey, $pkeyout, "user_defined_password") and var_dump($pkeyout); // .key.pem
if(openssl_cms_sign ( "file_to_sign", "Sample.p7m" , $x509 , $privkey, null , 0 , 0 , null )){
echo "簽署成功！已建立 Sample.p7m... \r\n";
}
else
{
echo "簽署失敗！\r\n";
}
