X509\Certificate\Extension\AAControlsExtension

Complexity

Total Complexity

22

Size/Duplication

Total Lines	214
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	7

Test Coverage

Coverage

100%

Importance

Changes

0

10 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	9	2
B	_fromDER()	0	41	5
A	hasPathLen()	0	4	1
A	pathLen()	0	7	2
A	hasPermittedAttrs()	0	4	1
A	permittedAttrs()	0	7	2
A	hasExcludedAttrs()	0	4	1
A	excludedAttrs()	0	7	2
A	permitUnspecified()	0	4	1
A	_valueASN1()	0	25	5

<?php

declare(strict_types = 1);

namespace X509\Certificate\Extension;

use ASN1\Element;
use ASN1\Type\UnspecifiedType;
use ASN1\Type\Constructed\Sequence;
use ASN1\Type\Primitive\Boolean;
use ASN1\Type\Primitive\Integer;
use ASN1\Type\Primitive\ObjectIdentifier;
use ASN1\Type\Tagged\ImplicitlyTaggedType;

/**
 * Implements 'AA Controls' certificate extension.
 *
 * @link https://tools.ietf.org/html/rfc5755#section-7.4
 */
class AAControlsExtension extends Extension
{
    /**
     * Path length contraint.
     *
     * @var int|null $_pathLenConstraint
     */
    protected $_pathLenConstraint;
    
    /**
     * Permitted attributes.
     *
     * Array of OID's.
     *
     * @var string[]|null $_permittedAttrs
     */
    protected $_permittedAttrs;
    
    /**
     * Excluded attributes.
     *
     * Array of OID's.
     *
     * @var string[]|null $_excludedAttrs
     */
    protected $_excludedAttrs;
    
    /**
     * Whether to permit unspecified attributes.
     *
     * @var bool $_permitUnSpecified
     */
    protected $_permitUnSpecified;
    
    /**
     * Constructor.
     *
     * @param bool $critical
     * @param int|null $path_len
     * @param string[]|null $permitted
     * @param string[]|null $excluded
     * @param bool $permit_unspecified
     */
    public function __construct(bool $critical, $path_len = null,
        array $permitted = null, array $excluded = null, bool $permit_unspecified = true)
    {
        parent::__construct(self::OID_AA_CONTROLS, $critical);
        $this->_pathLenConstraint = isset($path_len) ? intval($path_len) : null;
        $this->_permittedAttrs = $permitted;
        $this->_excludedAttrs = $excluded;
        $this->_permitUnSpecified = $permit_unspecified;
    }
    
    /**
     *
     * {@inheritdoc}
     * @return self
     */
    protected static function _fromDER(string $data, bool $critical): self
    {
        $seq = UnspecifiedType::fromDER($data)->asSequence();
        $path_len = null;
        $permitted = null;
        $excluded = null;
        $permit_unspecified = true;
        $idx = 0;
        if ($seq->has($idx, Element::TYPE_INTEGER)) {
            $path_len = $seq->at($idx++)
                ->asInteger()
                ->intNumber();
        }
        if ($seq->hasTagged(0)) {
            $attr_seq = $seq->getTagged(0)
                ->asImplicit(Element::TYPE_SEQUENCE)
                ->asSequence();
            $permitted = array_map(
                function (UnspecifiedType $el) {
                    return $el->asObjectIdentifier()->oid();
                }, $attr_seq->elements());
            $idx++;
        }
        if ($seq->hasTagged(1)) {
            $attr_seq = $seq->getTagged(1)
                ->asImplicit(Element::TYPE_SEQUENCE)
                ->asSequence();
            $excluded = array_map(
                function (UnspecifiedType $el) {
                    return $el->asObjectIdentifier()->oid();
                }, $attr_seq->elements());
            $idx++;
        }
        if ($seq->has($idx, Element::TYPE_BOOLEAN)) {
            $permit_unspecified = $seq->at($idx++)
                ->asBoolean()
                ->value();
        }
        return new self($critical, $path_len, $permitted, $excluded,

It seems like $permitted defined by array_map(function (\ASN1\Type\UnspecifiedType $el) { return $el->asObjectIdentifier()->oid(); }, $attr_seq->elements()) on line 95 can also be of type array; however, X509\Certificate\Extension\AAControlsExtension::__construct() does only seem to accept null|array<integer,string>, maybe add an additional type check?

It seems like $excluded defined by array_map(function (\ASN1\Type\UnspecifiedType $el) { return $el->asObjectIdentifier()->oid(); }, $attr_seq->elements()) on line 105 can also be of type array; however, X509\Certificate\Extension\AAControlsExtension::__construct() does only seem to accept null|array<integer,string>, maybe add an additional type check?

            $permit_unspecified);
    }
    
    /**
     * Check whether path length constraint is present.
     *
     * @return bool
     */
    public function hasPathLen(): bool
    {
        return isset($this->_pathLenConstraint);
    }
    
    /**
     * Get path length constraint.
     *
     * @throws \LogicException
     * @return int
     */
    public function pathLen(): int
    {
        if (!$this->hasPathLen()) {
            throw new \LogicException("pathLen not set.");
        }
        return $this->_pathLenConstraint;
    }
    
    /**
     * Check whether permitted attributes are present.
     *
     * @return bool
     */
    public function hasPermittedAttrs(): bool
    {
        return isset($this->_permittedAttrs);
    }
    
    /**
     * Get OID's of permitted attributes.
     *
     * @throws \LogicException
     * @return string[]
     */
    public function permittedAttrs(): array
    {
        if (!$this->hasPermittedAttrs()) {
            throw new \LogicException("permittedAttrs not set.");
        }
        return $this->_permittedAttrs;
    }
    
    /**
     * Check whether excluded attributes are present.
     *
     * @return bool
     */
    public function hasExcludedAttrs(): bool
    {
        return isset($this->_excludedAttrs);
    }
    
    /**
     * Get OID's of excluded attributes.
     *
     * @throws \LogicException
     * @return string[]
     */
    public function excludedAttrs(): array
    {
        if (!$this->hasExcludedAttrs()) {
            throw new \LogicException("excludedAttrs not set.");
        }
        return $this->_excludedAttrs;
    }
    
    /**
     * Whether to permit attributes that are not explicitly specified in
     * neither permitted nor excluded list.
     *
     * @return bool
     */
    public function permitUnspecified(): bool
    {
        return $this->_permitUnSpecified;
    }
    
    /**
     *
     * {@inheritdoc}
     * @return Sequence
     */
    protected function _valueASN1(): Sequence
    {
        $elements = array();
        if (isset($this->_pathLenConstraint)) {
            $elements[] = new Integer($this->_pathLenConstraint);
        }
        if (isset($this->_permittedAttrs)) {
            $oids = array_map(
                function ($oid) {
                    return new ObjectIdentifier($oid);
                }, $this->_permittedAttrs);
            $elements[] = new ImplicitlyTaggedType(0, new Sequence(...$oids));
        }
        if (isset($this->_excludedAttrs)) {
            $oids = array_map(
                function ($oid) {
                    return new ObjectIdentifier($oid);
                }, $this->_excludedAttrs);
            $elements[] = new ImplicitlyTaggedType(1, new Sequence(...$oids));
        }
        if ($this->_permitUnSpecified !== true) {
            $elements[] = new Boolean(false);
        }
        return new Sequence(...$elements);
    }
}