CertificateBuilder::clearDirectory() - Code Metrics - Inspection of "ea6624cc16878bc3633746d2d1ce9a488a6f47b4" - konsulting/porter - Measure and Improve Code Quality continuously with Scrutinizer

Test Failed

Branch — feature__set_up_scrutinizer (ea6624)

by Robin

created 2018-09-14 22:50 UTC

CertificateBuilder::clearDirectory() B

↳ Parent: CertificateBuilder

Complexity

Conditions	7
Paths	4

Size

Total Lines	16
Code Lines	8

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	56

Importance

Changes

Metric	Value
eloc	8
dl	0
loc	16
ccs	0
cts	9
cp	0
rs	8.8333
c	0
b	0
f	0
cc	7
nc	4
nop	1
crap	56

<?php

namespace App\Support\Ssl;

use App\Support\Mechanics\ChooseMechanic;

class CertificateBuilder
{
    protected $certificatesPath;
    protected $oName;
    protected $cName;
    protected $domain;
    protected $email;

    public function __construct($certificatesPath)
    {
        $this->certificatesPath = $certificatesPath;

        $this->oName = 'Klever Porter CA Self Signed Organization';
        $this->cName = 'Klever Porter CA Self Signed CN';
        $this->domain = 'klever.porter';
        $this->email = 'rootcertificate@'.$this->domain;
    }

    /**
     * List the certificate authority paths
     *
     * @return object
     */
    public function caPaths()
    {
        return (object) [
            'key' => $this->certificatesPath.'/KleverPorterSelfSigned.key',
            'pem' => $this->certificatesPath.'/KleverPorterSelfSigned.pem',
            'srl' => $this->certificatesPath.'/KleverPorterCASelfSigned.srl',
        ];
    }

    /**
     * List paths based on the certificate url
     *
     * @param $url
     * @return object
     */
    public function paths($url)
    {
        return (object) [
            'key' => $this->certificatesPath.'/'.$url.'.key',
            'csr' => $this->certificatesPath.'/'.$url.'.csr',
            'crt' => $this->certificatesPath.'/'.$url.'.crt',
            'conf' => $this->certificatesPath.'/'.$url.'.conf',
        ];
    }

    /**
     * Build a certificate based on the url.  Create CA if needed.
     *
     * @param $url
     */
    public function build($url)
    {
        $this->destroy($url);
        $this->createCa();
        $this->createCertificate($url);
    }

    /**
     * Destroy certificate for site based on url
     *
     * @param $url
     */
    public function destroy($url)
    {
        foreach ($this->paths($url) as $path) {
            @unlink($path);
            /** @scrutinizer ignore-unhandled */ @unlink($path);
        }
    }

    /**
     * Create certificate authority
     */
    public function createCa()
    {
        $paths = $this->caPaths();

        if (file_exists($paths->key) || file_exists($paths->pem)) {
            return;
        }

        exec(sprintf(
            'openssl req -new -newkey rsa:2048 -days 730 -nodes -x509 -subj "/C=GB/ST=Berks/O=%s/localityName=Reading/commonName=%s/organizationalUnitName=Developers/emailAddress=%s/" -keyout %s -out %s',
            $this->oName, $this->cName, $this->email, $paths->key, $paths->pem
        ));

        ChooseMechanic::forOS()->trustCA($paths->pem);
    }

    /**
     * Create a certificate for the given URL.
     *
     * @param  string  $url
     * @return void
     */
    public function createCertificate($url)
    {
        $paths = $this->paths($url);
        $caPaths = $this->caPaths();

        $this->createConf($paths->conf, $url);
        $this->createPrivateKey($paths->key);
        $this->createSigningRequest($url, $paths->key, $paths->csr, $paths->conf);

        $caSrlParam = ' -CAcreateserial';
        if (file_exists($caPaths->srl)) {
            $caSrlParam = ' -CAserial ' . $caPaths->srl;
        }

        exec(sprintf(
            'openssl x509 -req -sha256 -days 730 -CA %s -CAkey %s%s -in %s -out %s -extensions v3_req -extfile %s',
            $caPaths->pem, $caPaths->key, $caSrlParam, $paths->csr, $paths->crt, $paths->conf
        ));

        // Trusting the certificate shouldn't be necessary once the CA is trusted.
        // ChooseMechanic::forOS()->trustCertificate($paths->crt);
    }

    /**
     * Build the SSL config for the given URL.
     *
     * @param $path
     * @param $url
     */
    public function createConf($path, $url)
    {
        file_put_contents($path, view('ssl.conf')->withUrl($url)->render());
    }

    /**
     * Create the private key for the TLS certificate.
     *
     * @param  string  $keyPath
     * @return void
     */
    public function createPrivateKey($keyPath)
    {
        exec(sprintf('openssl genrsa -out %s 2048', $keyPath));
    }

    /**
     * Create the signing request for the TLS certificate.
     *
     * @param $url
     * @param  string $keyPath
     * @param $csrPath
     * @param $confPath
     * @return void
     */
    public function createSigningRequest($url, $keyPath, $csrPath, $confPath)
    {
        exec(sprintf(
            'openssl req -new -key %s -out %s -subj "/C=GB/ST=Berks/O=%s/localityName=Reading/commonName=%s/organizationalUnitName=Developers/emailAddress=%s%s/" -config %s',
            $keyPath, $csrPath, $this->domain, $url, $url, '@'.$this->domain, $confPath
        ));
    }

    /**
     * Clear generated certs. Optionally clear CA too.
     *
     * @param bool $dropCA
     */
    public function clearDirectory($dropCA = false)
    {
        $caPaths = (array) $this->caPaths();

        foreach (scandir($this->certificatesPath) as $item) {
            if ($item == '.' || $item == '..' || $item == '.gitkeep') {
                continue;
            }

            $current = $this->certificatesPath.'/'.$item;

            if (! $dropCA && in_array($current, $caPaths)) {
                continue;
            }

            unlink($current);
        }
    }
}


konsulting / porter

Branch — feature__set_up_scrutinizer (ea6624)

CertificateBuilder::clearDirectory() B

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like