sop / x509

examples/create-csr.php

<?php
/**
 * Create certification request.
 *
 * php create-csr.php
 */

use Sop\CryptoEncoding\PEM;
use Sop\CryptoTypes\AlgorithmIdentifier\Hash\SHA256AlgorithmIdentifier;
use Sop\CryptoTypes\AlgorithmIdentifier\Signature\SignatureAlgorithmIdentifierFactory;
use Sop\CryptoTypes\Asymmetric\PrivateKeyInfo;
use X501\ASN1\Name;
use X509\CertificationRequest\CertificationRequestInfo;

require dirname(__DIR__) . "/vendor/autoload.php";

// load EC private key from PEM
$private_key_info = PrivateKeyInfo::fromPEM(
    PEM::fromFile(dirname(__DIR__) . "/test/assets/ec/private_key.pem"));
// extract public key from private key
$public_key_info = $private_key_info->publicKeyInfo();
// DN of the subject
$subject = Name::fromString("cn=example.com, O=Example\, Inc., C=US");
// create certification request info
$cri = new CertificationRequestInfo($subject, $public_key_info);
// sign certificate request with private key
$algo = SignatureAlgorithmIdentifierFactory::algoForAsymmetricCrypto(
    $private_key_info->algorithmIdentifier(), new SHA256AlgorithmIdentifier());

$private_key_info->algorithmIdentifier() of type object<Sop\CryptoTypes\AlgorithmIdentifier\Feature\AlgorithmIdentifierType> is not a sub-type of object<Sop\CryptoTypes\AlgorithmIdentifier\Feature\AsymmetricCryptoAlgorithmIdentifier>. It seems like you assume a child interface of the interface Sop\CryptoTypes\AlgorithmIdentifier\Feature\AlgorithmIdentifierType to be always present.

$csr = $cri->sign($algo, $private_key_info);
echo $csr;