如何使用工具驗簽

說明：   

工具下載下傳位址：【

點選檢視

】   

工具僅支援異步通知驗簽，不支援同步驗簽。  

 注意：工具解壓建議放到英文目錄下運作。 

驗簽流程：   

1.解壓檔案》打開secret_key_tools_RSA_win檔案夾》輕按兩下運作RSA簽名驗簽工具.bat》選擇驗簽視窗   

2.首先接收到POST數組（以php為例）其他語言也是一樣操作方式，傳回資訊如下

2017-08-31 05:52:07  array (
  'gmt_create' => '2017-08-31 13:51:56',
  'charset' => 'UTF-8',
  'gmt_payment' => '2017-08-31 13:52:03',
  'notify_time' => '2017-08-31 13:52:05',
  'subject' => '測試',
  'sign' => 'Kxpx0Z6qIdwdgq5GDM6EnFaXXgVAvKf96zriCOjVearIS9FgDaRPkfy4uHqbF36EO5rxICoQg9CDNlBVDjGjodzww//ePcv2HhpZGOEQWatvHyzLz9cSBUrUBCQBPbWs9nj7kGd+l5/OWpcpHg1WpSj8pRlwxoWLuw/cTj5DLgOJluhQp9evDnu9t4Fyfkj3fob3LX1t8k3uLAVcUIxv0GL16VIHRqEvRiXv+anWnPcigDhEyaOEpu2mlB5crl8QX9i2OxSNWnNjXx5QRxMx/GBv342GA5osc7xH+91bCOvdp4+svjzKOMP4IPsInbJPqkC5EX5Z5cVdGLwIXkD3UQ==',
  'buyer_id' => '2088102168729244',
  'invoice_amount' => '0.01',
  'version' => '1.0',
  'notify_id' => '1cb8069973eb1ff20aa509493936a8chuq',
  'fund_bill_list' => '[{"amount":"0.01","fundChannel":"ALIPAYACCOUNT"}]',
  'notify_type' => 'trade_status_sync',
  'out_trade_no' => '2017831135121293',
  'total_amount' => '0.01',
  'trade_status' => 'TRADE_SUCCESS',
  'trade_no' => '2017083121001004240200232787',
  'auth_app_id' => '2016072800109035',
  'receipt_amount' => '0.01',
  'point_amount' => '0.00',
  'app_id' => '2016072800109035',
  'buyer_pay_amount' => '0.01',
  'sign_type' => 'RSA2',
  'seller_id' => '2088102168834281',
)      

3.要把接收的數組資訊拼接成使用&符号連接配接的字元串，正确拼接示例如下  

注意：要去除空格，fund_bill_list中的資料“,”逗号保留，不要全部替換的時候把這裡也替換成了“&”符号

gmt_create=2017-08-31 13:51:56&charset=UTF-8&gmt_payment=2017-08-31 13:52:03¬ify_time=2017-08-31 13:52:05&subject=測試&sign=Kxpx0Z6qIdwdgq5GDM6EnFaXXgVAvKf96zriCOjVearIS9FgDaRPkfy4uHqbF36EO5rxICoQg9CDNlBVDjGjodzww//ePcv2HhpZGOEQWatvHyzLz9cSBUrUBCQBPbWs9nj7kGd+l5/OWpcpHg1WpSj8pRlwxoWLuw/cTj5DLgOJluhQp9evDnu9t4Fyfkj3fob3LX1t8k3uLAVcUIxv0GL16VIHRqEvRiXv+anWnPcigDhEyaOEpu2mlB5crl8QX9i2OxSNWnNjXx5QRxMx/GBv342GA5osc7xH+91bCOvdp4+svjzKOMP4IPsInbJPqkC5EX5Z5cVdGLwIXkD3UQ==&buyer_id=2088102168729244&invoice_amount=0.01&version=1.0¬ify_id=1cb8069973eb1ff20aa509493936a8chuq&fund_bill_list=[{"amount":"0.01","fundChannel":"ALIPAYACCOUNT"}]¬ify_type=trade_status_sync&out_trade_no=2017831135121293&total_amount=0.01&trade_status=TRADE_SUCCESS&trade_no=2017083121001004240200232787&auth_app_id=2016072800109035&receipt_amount=0.01&point_amount=0.00&app_id=2016072800109035&buyer_pay_amount=0.01&sign_type=RSA2&seller_id=2088102168834281      

4.把第三步拼接好的字元串放到》響應封包中，把對應的支付寶公鑰放到對應的框内注意編碼和簽名方式要和請求的時候相同》點選開始驗簽（如下圖）     

5.驗簽成功流程結束。

測試使用：   提供個人沙箱支付公鑰，可以和第三步拼接的字元串成功驗證，友善大家測試對比自己拼接參數是否正确  RSA2沙箱支付寶公鑰

MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmzTjhoCMfORUunhcE1yq2G8JY4pjnSl4hKZITHXBtFA5dMeEwDSLezTlX6QDJl3S3rBKWuXZetNMkJ+eCgIt5X3OAz1vKBM86nUAf3oywQSPi14kXQawambghL98/s0lUvn72HKOIgr53aeJwbdVm3bWD5tYvaYAwMRp5l9YKbLxs3mUXkmD2rpypVdBdav1dcohJt3VnvGhnRbRMbUdl5jXELM4G0Ky5pYTWYd+iT6FuqVZeiYh7MGloJ2j9ijRD/CeSs0XJvmg5ZxSysNK2DNLTRlQj/hXMpUAgav4ngTVHVvzGBzQDLHtIKY8gfjNVz+5PplczlSMKpuVHxC3wIDAQAB      

常見問題：  

 驗簽失敗自查：

https://openclub.alipay.com/read.php?tid=1598&fid=46

驗證公鑰正确性：

https://openclub.alipay.com/read.php?tid=1486&fid=46

如何擷取支付寶公鑰：

https://openclub.alipay.com/read.php?tid=2190&fid=46

大家如果在測試過程中有什麼疑問歡迎在文章下方追問吐槽