FilesExpand file tree

 v3

/

generate_upload_policy.php

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

executable file

·

62 lines (56 loc) · 1.56 KB

 v3

/

generate_upload_policy.php

Copy path

Top

File metadata and controls

• Code
• Blame

executable file

·

62 lines (56 loc) · 1.56 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

#!/usr/bin/env php

<?php

/*

* From: http://raamdev.com/2008/amazon-s3-hmac-signatures-without-pear-or-php5/

*/

/*

* Calculate HMAC-SHA1 according to RFC2104

* See http://www.faqs.org/rfcs/rfc2104.html

*/

function hmacsha1($key,$data) {

$blocksize=64;

$hashfunc='sha1';

if (strlen($key)>$blocksize)

$key=pack('H*', $hashfunc($key));

$key=str_pad($key,$blocksize,chr(0x00));

$ipad=str_repeat(chr(0x36),$blocksize);

$opad=str_repeat(chr(0x5c),$blocksize);

$hmac = pack(

'H*',$hashfunc(

($key^$opad).pack(

'H*',$hashfunc(

($key^$ipad).$data

)

)

)

);

return bin2hex($hmac);

}

/*

* Used to encode a field for Amazon Auth

* (taken from the Amazon S3 PHP example library)

*/

function hex2b64($str)

{

$raw = '';

for ($i=0; $i < strlen($str); $i+=2)

{

$raw .= chr(hexdec(substr($str, $i, 2)));

}

return base64_encode($raw);

}

if (count($argv) != 3) {

echo "Usage: " . $argv[0] . " <S3 Policy File> <S3 secret key>\n";

exit(1);

}

$policy = file_get_contents($argv[1]);

$secret = $argv[2];

/*

* Base64 encode the Policy Document and then

* create HMAC SHA-1 signature of the base64 encoded policy

* using the secret key. Finally, encode it for Amazon Authentication.

*/

$base64_policy = base64_encode($policy);

$signature = hex2b64(hmacsha1($secret, $base64_policy));

echo "S3_POLICY=\"" . $base64_policy . "\"\nS3_SIGNATURE=\"" . $signature . "\"\n"

?>