Jalle19\CertificateParser\Provider\StreamSocketProvider

Complexity

Total Complexity

7

Size/Duplication

Total Lines	119
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	1

Importance

Changes	1
Bugs	0	Features	0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	11	1
B	getRawCertificate()	0	28	4
A	getStreamContext()	0	10	1
A	getRequestUrl()	0	4	1

<?php

namespace Jalle19\CertificateParser\Provider;

use Jalle19\CertificateParser\Exception\ConnectionTimeoutException;
use Jalle19\CertificateParser\Exception\DomainMismatchException;
use Jalle19\CertificateParser\Exception\NameResolutionException;
use Jalle19\CertificateParser\Exception\CertificateNotFoundException;
use Jalle19\CertificateParser\Exception\ConnectionFailedException;

/**
 * Class StreamSocketProvider
 * @package Jalle19\CertificateParser\Provider
 */
class StreamSocketProvider implements ProviderInterface
{

    const DEFAULT_TIMEOUT_SECONDS = 15;
    const DEFAULT_PORT            = 443;

    /**
     * @var string
     */
    private $hostname;

    /**
     * @var int
     */
    private $port;

    /**
     * @var int
     */
    private $timeout;

    /**
     * @var boolean
     */
    private $verifyPeerName;

    /**
     * @var array maps partial error messages to exception types
     */
    private static $errorExceptionMap = [
        // Check for name resolution errors
        'getaddrinfo failed'                => NameResolutionException::class,
        // Check for unknown SSL protocol (usually means no SSL is configured on the endpoint)
        'GET_SERVER_HELLO:unknown protocol' => CertificateNotFoundException::class,
        // Check for domain mismatches
        'did not match expected'            => DomainMismatchException::class,
        // Check for connection timeouts
        'timed out'                         => ConnectionTimeoutException::class,
    ];


    /**
     * StreamSocketProvider constructor.
     *
     * @param string  $hostname
     * @param int     $port           (optional)
     * @param int     $timeout        (optional)
     * @param boolean $verifyPeerName (optional)
     */
    public function __construct(
        $hostname,
        $port = self::DEFAULT_PORT,
        $timeout = self::DEFAULT_TIMEOUT_SECONDS,
        $verifyPeerName = true
    ) {
        $this->hostname       = $hostname;
        $this->port           = $port;
        $this->timeout        = $timeout;
        $this->verifyPeerName = $verifyPeerName;
    }


    /**
     * @inheritdoc
     */
    public function getRawCertificate()
    {
        try {
            $client = stream_socket_client(
                $this->getRequestUrl(),
                $errorNumber,
                $errorDescription,
                $this->timeout,
                STREAM_CLIENT_CONNECT,
                $this->getStreamContext()
            );

            $response = stream_context_get_params($client);

            return $response['options']['ssl']['peer_certificate'];
        } catch (\Throwable $e) {
            $errorMessage = $e->getMessage();

            // Throw mapped exceptions
            foreach (self::$errorExceptionMap as $needle => $exceptionClass) {
                if (strpos($errorMessage, $needle) !== false) {
                    throw new $exceptionClass();
                }
            }

            throw new ConnectionFailedException($e->getMessage());
        }
    }


    /**
     * @return resource
     */
    private function getStreamContext()
    {
        return stream_context_create([
            'ssl' => [
                'capture_peer_cert' => true,
                'verify_peer'       => false,
                'verify_peer_name'  => $this->verifyPeerName,
            ],
        ]);
    }


    /**
     * @return string
     */
    private function getRequestUrl()
    {
        return 'ssl://' . $this->hostname . ':' . $this->port;
    }

}