On Wed, Apr 13, 2011 at 3:44 PM, Nate Totura <ntot...@gmail.com> wrote:

>
> I am trying to do signature validation on a server instead of in the
> app iteself. I would ideally like to use the php openssl libraries and
> it looks like code such as the following should work:
...
>
> My problem is that I can not get this PHP code to successfully verify
> the data/signature and I do not know what needs to change to get it to
> work correctly.
>
> If I use openssl, create a private and public key, create a signature
> for the same data using sha1 and run it through the above php code, it
> works fine and validate successfully.
>

What format is the $signature openssl_sign() outputs? Try to print it.
My guess is that it's binary, whereas the signature you get from
Market is Base64-encoded. If so, you need to decode the Base64
and it should work.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to