From 8ae0fe9b7dfc0f18b7a30681dcce7f914d4485cd Mon Sep 17 00:00:00 2001
From: ypsdf1 <nihaoshidifu@gitee.com>
Date: Wed, 15 Jul 2026 00:11:38 +0800
Subject: [PATCH] =?UTF-8?q?revert(pay):=20=E6=81=A2=E5=A4=8DSHA256?=
 =?UTF-8?q?=E7=AD=BE=E5=90=8D=E7=AE=97=E6=B3=95=EF=BC=88=E5=BD=A9=E8=99=B9?=
 =?UTF-8?q?=E6=98=93=E6=94=AF=E4=BB=98V2=E6=A0=87=E5=87=86=EF=BC=89\n\n-?=
 =?UTF-8?q?=20=E6=B5=8B=E8=AF=95SHA1=E7=AE=97=E6=B3=95=E5=90=8E=E4=BB=8D?=
 =?UTF-8?q?=E5=A4=B1=E8=B4=A5=EF=BC=8C=E6=94=B9=E5=9B=9ESHA256=EF=BC=88?=
 =?UTF-8?q?=E6=96=87=E6=A1=A3=E6=98=8E=E7=A1=AEV2=E4=BD=BF=E7=94=A8SHA256W?=
 =?UTF-8?q?ithRSA=EF=BC=89\n-=20=E8=AF=8A=E6=96=AD=E8=84=9A=E6=9C=AC?=
 =?UTF-8?q?=E8=AF=81=E5=AE=9E=EF=BC=9A=E5=95=86=E6=88=B7=E7=A7=81=E9=92=A5?=
 =?UTF-8?q?=E4=B8=8E=E5=95=86=E6=88=B7=E5=85=AC=E9=92=A5=E4=B8=8D=E6=98=AF?=
 =?UTF-8?q?=E4=B8=80=E5=AF=B9=EF=BC=8C=E5=AF=BC=E8=87=B4=E6=89=80=E6=9C=89?=
 =?UTF-8?q?=E7=AD=BE=E5=90=8D=E6=96=B9=E5=BC=8F=E9=AA=8C=E7=AD=BE=E5=A4=B1?=
 =?UTF-8?q?=E8=B4=A5\n-=20=E6=A0=B9=E6=9C=AC=E9=97=AE=E9=A2=98=EF=BC=9A?=
 =?UTF-8?q?=E5=AF=86=E9=92=A5=E4=B8=8D=E5=8C=B9=E9=85=8D=EF=BC=8C=E9=9C=80?=
 =?UTF-8?q?=E7=94=A8=E6=88=B7=E6=A0=B8=E5=AF=B9=E6=94=AF=E4=BB=98=E5=B9=B3?=
 =?UTF-8?q?=E5=8F=B0=E5=90=8E=E5=8F=B0=E5=85=AC=E9=92=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 api/pay.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/pay.php b/api/pay.php
index a0958aa..f493eff 100644
--- a/api/pay.php
+++ b/api/pay.php
@@ -165,7 +165,7 @@ function buildSign($params, $privateKeyPem) {
     if ($key === false) {
         throw new Exception('商户私钥加载失败: ' . openssl_error_string());
     }
-    openssl_sign($data, $signature, $key, OPENSSL_ALGO_SHA1); // 尝试SHA1算法，彩虹易支付可能使用SHA1而非SHA256
+    openssl_sign($data, $signature, $key, OPENSSL_ALGO_SHA256); // 彩虹易支付V2接口使用SHA256WithRSA
     // PHP 8.0+ 已弃用 openssl_free_key，资源会自动释放；显式调用会触发弃用警告，污染 JSON 响应
     if (PHP_VERSION_ID < 80000) {
         @openssl_free_key($key);