roave/signature

Sign and verify stuff

1.9.0 2025-02-05 15:43 UTC

Requires

• php: ~8.2.0 || ~8.3.0 || ~8.4.0

Requires (Dev)

• doctrine/coding-standard: ^12.0.0
• phpunit/phpunit: ^11.5.6
• psalm/plugin-phpunit: ^0.19.2
• roave/infection-static-analysis-plugin: ^1.36.0
• vimeo/psalm: ^6.4.0

MIT

README

Sign and validate signed files made easy.

Note: this is not a cryptographic signing library.

Installation

The suggested installation method is via composer:

$ composer require roave/signature

Usage examples

Signing a file

// Creating a signer
$signer = new \Roave\Signature\FileContentSigner(
    new \Roave\Signature\Encoder\Sha1SumEncoder()
);

// It'll give you a signature to the provided code content
$signature = $signer->sign(file_get_contents('/var/tmp/file.php'));

Validating a signed file

// Creating a signer checker
$signer = new \Roave\Signature\FileContentChecker(
    new \Roave\Signature\Encoder\Sha1SumEncoder()
);

// It'll validate the signature on file content
$signer->check(file_get_contents('/var/tmp/signed-file.php'));