Jalle19\CertificateParser\Provider\StreamSocketProvider

Complexity

Total Complexity

7

Size/Duplication

Total Lines	94
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
B	getRawCertificate()	0	43	5
A	getRequestUrl()	0	4	1

<?php

namespace Jalle19\CertificateParser\Provider;

use Jalle19\CertificateParser\Exception\DomainMismatchException;
use Jalle19\CertificateParser\Exception\NameResolutionException;
use Jalle19\CertificateParser\Exception\CertificateNotFoundException;
use Jalle19\CertificateParser\Exception\UnknownErrorException;

/**
 * Class StreamSocketProvider
 * @package Jalle19\CertificateParser\Provider
 */
class StreamSocketProvider implements ProviderInterface
{

    const DEFAULT_TIMEOUT_SECONDS = 15;
    const DEFAULT_PORT            = 443;

    /**
     * @var int
     */
    private $timeout;

    /**
     * @var string
     */
    private $hostname;

    /**
     * @var int
     */
    private $port;


    /**
     * StreamSocketProvider constructor.
     *
     * @param string $hostname
     * @param int    $port    (optional)
     * @param int    $timeout (optional)
     */
    public function __construct($hostname, $port = self::DEFAULT_PORT, $timeout = self::DEFAULT_TIMEOUT_SECONDS)
    {
        $this->hostname = $hostname;
        $this->port     = $port;
        $this->timeout  = $timeout;
    }


    /**
     * @inheritdoc
     */
    public function getRawCertificate()
    {
        $streamContext = stream_context_create([
            'ssl' => [
                'capture_peer_cert' => true,
                'verify_peer'       => false,
            ],
        ]);

        try {
            $client = stream_socket_client(
                $this->getRequestUrl(),
                $errorNumber,
                $errorDescription,
                $this->timeout,
                STREAM_CLIENT_CONNECT,
                $streamContext
            );

            $response = stream_context_get_params($client);

            return $response['options']['ssl']['peer_certificate'];
        } catch (\Throwable $e) {
            $errorMessage = $e->getMessage();

            // Check for name resolution errors
            if (strpos($errorMessage, 'getaddrinfo failed') !== false) {
                throw new NameResolutionException();
            }

            // Check for unknown SSL protocol (usually means no SSL is configured on the endpoint)
            if (strpos($errorMessage, 'GET_SERVER_HELLO:unknown protocol') !== false) {
                throw new CertificateNotFoundException();
            }

            // Check for domain mismatches
            if (strpos($errorMessage, 'did not match expected') !== false) {
                throw new DomainMismatchException();
            }

            throw new UnknownErrorException($errorMessage);
        }
    }


    /**
     * @return string
     */
    private function getRequestUrl()
    {
        return 'ssl://' . $this->hostname . ':' . $this->port;
    }

}