终于找到原因了，写微信开发文档的真是垃圾，需要去掉 CDATA 标记
string nonce_str = Get_GuidStr();//随机字符串
string sign = "";//签名
string mch_id = "100000000";//商户号
string mch_billno = Get_BillNo(mch_id);//商户订单号
string wxappid = "wx8asdfderqweqweqwe2b";//公众账号appid
string nick_name = "aa";//提供方名称
string send_name = "aa";//商户名称
string re_openid = "asdfasfwerqweqeqweqe";//用户openid
int total_amount = 100;//付款金额(分)
int min_value = 100;//最小红包金额
int max_value = 100;//最大红包金额
int total_num = 1;//红包发放总人数
string wishing = "新年新气象，祝您身体健康，万事如意！";//红包祝福语
string client_ip = "114.249.210.173"; //"221.5.252.231";//Ip地址
string act_name = "测试红包功能。";//活动名称
string remark = "测的越多，送的越多。";//备注
string logo_imgurl = "";//商户logo的url
string share_content = "";//分享文案
string share_url = "";//分享链接
string share_imgurl = "";//分享的图片
<?phpconst API = ‘https://api.mch.weixin.qq.com/mmpaymkttransfers/sendredpack‘;
const MCH_ID = ‘‘;
const MCH_SECRET = ‘‘;
const APP_KEY = ‘‘;
const APP_SECRET = ‘‘;
const OPENID = ‘‘;
$money = 100;
//------------------logic----------------------$params = [
‘mch_billno‘=>gen_mch_billno(),
‘mch_id‘=>MCH_ID,
‘wxappid‘=>APP_KEY,
‘nick_name‘=>‘xxxxx‘,
‘send_name‘=>‘xxxx‘,
‘re_openid‘=>OPENID,
‘total_amount‘=>$money,
‘min_value‘=>$money,
‘max_value‘=>$money,
‘total_num‘=>1,
‘wishing‘=>‘感谢您参加！‘,
‘client_ip‘=>‘127.0.0.1‘,
‘act_name‘=>‘测试红包‘,
‘act_id‘=>17481,
‘remark‘=>‘备注提示‘,
‘logo_imgurl‘=>‘http://www.sogou.com/images/logo/new/sogou.png‘ ,
‘share_url‘=>‘http://xxxx.com‘,
‘share_imgurl‘=>‘http://www.sogou.com/images/logo/new/sogou.png‘,
‘share_content‘=>‘恭喜发财‘,
‘remark‘=>‘新年红包哦～‘,
‘nonce_str‘=>gen_nonce(),
];$res = post(API, gen_xml($params), true);
var_dump($res);
//-----------------func-----------------------function gen_xml($params) {
$xml = ‘<xml>‘;
$fmt = ‘<%s><![CDATA[%s]]></%s>‘;
foreach($params as $key=>$val){
$xml.=sprintf($fmt, $key, $val, $key);
}
$xml.=‘</xml>‘;
return $xml;
}function sign($params){
ksort($params);
$beSign = array_filter($params, ‘strlen‘);
$pairs = array();
foreach ($beSign as $k => $v) {
$pairs[] = "$k=$v";
}
$sign_data = implode(‘&‘, $pairs);
$sign_data.=‘&key=‘.MCH_SECRET;
return strtoupper(md5($sign_data));
}function gen_nonce(){
return md5(uniqid(‘‘, true));
}function gen_mch_billno(){
return MCH_ID.date(‘Ymd‘).time();
}function post($url, $strXml, $CA = true) {
//$arrHeader[] = ‘Content-Length: ‘ . strlen($strXml);
$cacert = __DIR__ . ‘/cacert.pem‘; //CA根证书
$SSL = substr($url, 0, 8) == "https://" ? true : false;
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
//curl_setopt($ch, CURLOPT_HTTPHEADER, $arrHeader);
if ($SSL && $CA) {
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, true); // 只信任CA颁布的证书
curl_setopt($ch, CURLOPT_SSLCERT,__DIR__.‘/apiclient_cert.pem‘);
curl_setopt($ch, CURLOPT_SSLKEY,__DIR__.‘/apiclient_key.pem‘);
curl_setopt($ch, CURLOPT_CAINFO, $cacert); // CA根证书（用来验证的网站证书是否是CA颁布）
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2); // 检查证书中是否设置域名，并且是否与提供的主机名匹配
} else if ($SSL && !$CA) {
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // 信任任何证书
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2); // 检查证书中是否设置域名
}
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, $strXml);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_HEADER, 0);
$res = curl_exec($ch);
curl_close($ch);
return $res;
}