1 | <?php |
||
19 | use Sop\X509\Certificate\Extension\PolicyConstraintsExtension; |
||
20 | use Sop\X509\Certificate\Extension\PolicyMappingsExtension; |
||
21 | use Sop\X509\Certificate\Extension\SubjectAlternativeNameExtension; |
||
22 | use Sop\X509\Certificate\Extension\SubjectKeyIdentifierExtension; |
||
23 | |||
24 | /** |
||
25 | * Implements <i>Extensions</i> ASN.1 type. |
||
26 | * |
||
27 | * Several convenience methods are provided to fetch commonly used |
||
28 | * standard extensions. Others can be accessed using <code>get($oid)</code>. |
||
29 | * |
||
30 | * @see https://tools.ietf.org/html/rfc5280#section-4.1.2.9 |
||
31 | */ |
||
32 | class Extensions implements \Countable, \IteratorAggregate |
||
33 | { |
||
34 | /** |
||
35 | * Extensions. |
||
36 | * |
||
37 | * @var Extension[] |
||
38 | */ |
||
39 | protected $_extensions; |
||
40 | |||
41 | /** |
||
42 | * Constructor. |
||
43 | * |
||
44 | * @param Extension ...$extensions Extension objects |
||
45 | */ |
||
46 | 65 | public function __construct(Extension ...$extensions) |
|
47 | { |
||
48 | 65 | $this->_extensions = []; |
|
49 | 65 | foreach ($extensions as $ext) { |
|
50 | 40 | $this->_extensions[$ext->oid()] = $ext; |
|
51 | } |
||
52 | 65 | } |
|
53 | |||
54 | /** |
||
55 | * Initialize from ASN.1. |
||
56 | * |
||
57 | * @param Sequence $seq |
||
58 | * |
||
59 | * @return self |
||
60 | */ |
||
61 | 26 | public static function fromASN1(Sequence $seq): Extensions |
|
62 | { |
||
63 | 26 | $extensions = array_map( |
|
64 | function (UnspecifiedType $el) { |
||
65 | 23 | return Extension::fromASN1($el->asSequence()); |
|
66 | 26 | }, $seq->elements()); |
|
67 | 26 | return new self(...$extensions); |
|
68 | } |
||
69 | |||
70 | /** |
||
71 | * Generate ASN.1 structure. |
||
72 | * |
||
73 | * @return Sequence |
||
74 | */ |
||
75 | 66 | public function toASN1(): Sequence |
|
76 | { |
||
77 | 66 | $elements = array_values( |
|
78 | 66 | array_map( |
|
79 | function ($ext) { |
||
80 | 60 | return $ext->toASN1(); |
|
81 | 66 | }, $this->_extensions)); |
|
82 | 66 | return new Sequence(...$elements); |
|
83 | } |
||
84 | |||
85 | /** |
||
86 | * Get self with extensions added. |
||
87 | * |
||
88 | * @param Extension ...$exts One or more extensions to add |
||
89 | * |
||
90 | * @return self |
||
91 | */ |
||
92 | 5 | public function withExtensions(Extension ...$exts): Extensions |
|
93 | { |
||
94 | 5 | $obj = clone $this; |
|
95 | 5 | foreach ($exts as $ext) { |
|
96 | 5 | $obj->_extensions[$ext->oid()] = $ext; |
|
97 | } |
||
98 | 5 | return $obj; |
|
99 | } |
||
100 | |||
101 | /** |
||
102 | * Check whether extension is present. |
||
103 | * |
||
104 | * @param string $oid Extensions OID |
||
105 | * |
||
106 | * @return bool |
||
107 | */ |
||
108 | 108 | public function has(string $oid): bool |
|
109 | { |
||
110 | 108 | return isset($this->_extensions[$oid]); |
|
111 | } |
||
112 | |||
113 | /** |
||
114 | * Get extension by OID. |
||
115 | * |
||
116 | * @param string $oid |
||
117 | * |
||
118 | * @throws \LogicException If extension is not present |
||
119 | * |
||
120 | * @return Extension |
||
121 | */ |
||
122 | 86 | public function get(string $oid): Extension |
|
123 | { |
||
124 | 86 | if (!$this->has($oid)) { |
|
125 | 1 | throw new \LogicException("No extension by OID {$oid}."); |
|
126 | } |
||
127 | 85 | return $this->_extensions[$oid]; |
|
128 | } |
||
129 | |||
130 | /** |
||
131 | * Check whether 'Authority Key Identifier' extension is present. |
||
132 | * |
||
133 | * @return bool |
||
134 | */ |
||
135 | 10 | public function hasAuthorityKeyIdentifier(): bool |
|
136 | { |
||
137 | 10 | return $this->has(Extension::OID_AUTHORITY_KEY_IDENTIFIER); |
|
138 | } |
||
139 | |||
140 | /** |
||
141 | * Get 'Authority Key Identifier' extension. |
||
142 | * |
||
143 | * @throws \LogicException If extension is not present |
||
144 | * |
||
145 | * @return AuthorityKeyIdentifierExtension |
||
146 | */ |
||
147 | 11 | public function authorityKeyIdentifier(): AuthorityKeyIdentifierExtension |
|
148 | { |
||
149 | 11 | return $this->get(Extension::OID_AUTHORITY_KEY_IDENTIFIER); |
|
1 ignored issue
–
show
|
|||
150 | } |
||
151 | |||
152 | /** |
||
153 | * Check whether 'Subject Key Identifier' extension is present. |
||
154 | * |
||
155 | * @return bool |
||
156 | */ |
||
157 | 14 | public function hasSubjectKeyIdentifier(): bool |
|
158 | { |
||
159 | 14 | return $this->has(Extension::OID_SUBJECT_KEY_IDENTIFIER); |
|
160 | } |
||
161 | |||
162 | /** |
||
163 | * Get 'Subject Key Identifier' extension. |
||
164 | * |
||
165 | * @throws \LogicException If extension is not present |
||
166 | * |
||
167 | * @return SubjectKeyIdentifierExtension |
||
168 | */ |
||
169 | 13 | public function subjectKeyIdentifier(): SubjectKeyIdentifierExtension |
|
170 | { |
||
171 | 13 | return $this->get(Extension::OID_SUBJECT_KEY_IDENTIFIER); |
|
1 ignored issue
–
show
|
|||
172 | } |
||
173 | |||
174 | /** |
||
175 | * Check whether 'Key Usage' extension is present. |
||
176 | * |
||
177 | * @return bool |
||
178 | */ |
||
179 | 41 | public function hasKeyUsage(): bool |
|
180 | { |
||
181 | 41 | return $this->has(Extension::OID_KEY_USAGE); |
|
182 | } |
||
183 | |||
184 | /** |
||
185 | * Get 'Key Usage' extension. |
||
186 | * |
||
187 | * @throws \LogicException If extension is not present |
||
188 | * |
||
189 | * @return KeyUsageExtension |
||
190 | */ |
||
191 | 21 | public function keyUsage(): KeyUsageExtension |
|
192 | { |
||
193 | 21 | return $this->get(Extension::OID_KEY_USAGE); |
|
1 ignored issue
–
show
|
|||
194 | } |
||
195 | |||
196 | /** |
||
197 | * Check whether 'Certificate Policies' extension is present. |
||
198 | * |
||
199 | * @return bool |
||
200 | */ |
||
201 | 44 | public function hasCertificatePolicies(): bool |
|
202 | { |
||
203 | 44 | return $this->has(Extension::OID_CERTIFICATE_POLICIES); |
|
204 | } |
||
205 | |||
206 | /** |
||
207 | * Get 'Certificate Policies' extension. |
||
208 | * |
||
209 | * @throws \LogicException If extension is not present |
||
210 | * |
||
211 | * @return CertificatePoliciesExtension |
||
212 | */ |
||
213 | 16 | public function certificatePolicies(): CertificatePoliciesExtension |
|
214 | { |
||
215 | 16 | return $this->get(Extension::OID_CERTIFICATE_POLICIES); |
|
1 ignored issue
–
show
|
|||
216 | } |
||
217 | |||
218 | /** |
||
219 | * Check whether 'Policy Mappings' extension is present. |
||
220 | * |
||
221 | * @return bool |
||
222 | */ |
||
223 | 44 | public function hasPolicyMappings(): bool |
|
224 | { |
||
225 | 44 | return $this->has(Extension::OID_POLICY_MAPPINGS); |
|
226 | } |
||
227 | |||
228 | /** |
||
229 | * Get 'Policy Mappings' extension. |
||
230 | * |
||
231 | * @throws \LogicException If extension is not present |
||
232 | * |
||
233 | * @return PolicyMappingsExtension |
||
234 | */ |
||
235 | 5 | public function policyMappings(): PolicyMappingsExtension |
|
236 | { |
||
237 | 5 | return $this->get(Extension::OID_POLICY_MAPPINGS); |
|
1 ignored issue
–
show
|
|||
238 | } |
||
239 | |||
240 | /** |
||
241 | * Check whether 'Subject Alternative Name' extension is present. |
||
242 | * |
||
243 | * @return bool |
||
244 | */ |
||
245 | 3 | public function hasSubjectAlternativeName(): bool |
|
246 | { |
||
247 | 3 | return $this->has(Extension::OID_SUBJECT_ALT_NAME); |
|
248 | } |
||
249 | |||
250 | /** |
||
251 | * Get 'Subject Alternative Name' extension. |
||
252 | * |
||
253 | * @throws \LogicException If extension is not present |
||
254 | * |
||
255 | * @return SubjectAlternativeNameExtension |
||
256 | */ |
||
257 | 4 | public function subjectAlternativeName(): SubjectAlternativeNameExtension |
|
260 | } |
||
261 | |||
262 | /** |
||
263 | * Check whether 'Issuer Alternative Name' extension is present. |
||
264 | * |
||
265 | * @return bool |
||
266 | */ |
||
267 | 1 | public function hasIssuerAlternativeName(): bool |
|
270 | } |
||
271 | |||
272 | /** |
||
273 | * Get 'Issuer Alternative Name' extension. |
||
274 | * |
||
275 | * @return IssuerAlternativeNameExtension |
||
276 | */ |
||
277 | 1 | public function issuerAlternativeName(): IssuerAlternativeNameExtension |
|
278 | { |
||
279 | 1 | return $this->get(Extension::OID_ISSUER_ALT_NAME); |
|
1 ignored issue
–
show
|
|||
280 | } |
||
281 | |||
282 | /** |
||
283 | * Check whether 'Basic Constraints' extension is present. |
||
284 | * |
||
285 | * @return bool |
||
286 | */ |
||
287 | 43 | public function hasBasicConstraints(): bool |
|
288 | { |
||
289 | 43 | return $this->has(Extension::OID_BASIC_CONSTRAINTS); |
|
290 | } |
||
291 | |||
292 | /** |
||
293 | * Get 'Basic Constraints' extension. |
||
294 | * |
||
295 | * @throws \LogicException If extension is not present |
||
296 | * |
||
297 | * @return BasicConstraintsExtension |
||
298 | */ |
||
299 | 40 | public function basicConstraints(): BasicConstraintsExtension |
|
300 | { |
||
301 | 40 | return $this->get(Extension::OID_BASIC_CONSTRAINTS); |
|
1 ignored issue
–
show
|
|||
302 | } |
||
303 | |||
304 | /** |
||
305 | * Check whether 'Name Constraints' extension is present. |
||
306 | * |
||
307 | * @return bool |
||
308 | */ |
||
309 | 43 | public function hasNameConstraints(): bool |
|
310 | { |
||
311 | 43 | return $this->has(Extension::OID_NAME_CONSTRAINTS); |
|
312 | } |
||
313 | |||
314 | /** |
||
315 | * Get 'Name Constraints' extension. |
||
316 | * |
||
317 | * @throws \LogicException If extension is not present |
||
318 | * |
||
319 | * @return NameConstraintsExtension |
||
320 | */ |
||
321 | 1 | public function nameConstraints(): NameConstraintsExtension |
|
322 | { |
||
323 | 1 | return $this->get(Extension::OID_NAME_CONSTRAINTS); |
|
1 ignored issue
–
show
|
|||
324 | } |
||
325 | |||
326 | /** |
||
327 | * Check whether 'Policy Constraints' extension is present. |
||
328 | * |
||
329 | * @return bool |
||
330 | */ |
||
331 | 43 | public function hasPolicyConstraints(): bool |
|
334 | } |
||
335 | |||
336 | /** |
||
337 | * Get 'Policy Constraints' extension. |
||
338 | * |
||
339 | * @throws \LogicException If extension is not present |
||
340 | * |
||
341 | * @return PolicyConstraintsExtension |
||
342 | */ |
||
343 | 16 | public function policyConstraints(): PolicyConstraintsExtension |
|
344 | { |
||
345 | 16 | return $this->get(Extension::OID_POLICY_CONSTRAINTS); |
|
1 ignored issue
–
show
|
|||
346 | } |
||
347 | |||
348 | /** |
||
349 | * Check whether 'Extended Key Usage' extension is present. |
||
350 | * |
||
351 | * @return bool |
||
352 | */ |
||
353 | 1 | public function hasExtendedKeyUsage(): bool |
|
354 | { |
||
355 | 1 | return $this->has(Extension::OID_EXT_KEY_USAGE); |
|
356 | } |
||
357 | |||
358 | /** |
||
359 | * Get 'Extended Key Usage' extension. |
||
360 | * |
||
361 | * @throws \LogicException If extension is not present |
||
362 | * |
||
363 | * @return ExtendedKeyUsageExtension |
||
364 | */ |
||
365 | 1 | public function extendedKeyUsage(): ExtendedKeyUsageExtension |
|
368 | } |
||
369 | |||
370 | /** |
||
371 | * Check whether 'CRL Distribution Points' extension is present. |
||
372 | * |
||
373 | * @return bool |
||
374 | */ |
||
375 | 1 | public function hasCRLDistributionPoints(): bool |
|
378 | } |
||
379 | |||
380 | /** |
||
381 | * Get 'CRL Distribution Points' extension. |
||
382 | * |
||
383 | * @throws \LogicException If extension is not present |
||
384 | * |
||
385 | * @return CRLDistributionPointsExtension |
||
386 | */ |
||
387 | 1 | public function crlDistributionPoints(): CRLDistributionPointsExtension |
|
388 | { |
||
389 | 1 | return $this->get(Extension::OID_CRL_DISTRIBUTION_POINTS); |
|
1 ignored issue
–
show
|
|||
390 | } |
||
391 | |||
392 | /** |
||
393 | * Check whether 'Inhibit anyPolicy' extension is present. |
||
394 | * |
||
395 | * @return bool |
||
396 | */ |
||
397 | 43 | public function hasInhibitAnyPolicy(): bool |
|
398 | { |
||
399 | 43 | return $this->has(Extension::OID_INHIBIT_ANY_POLICY); |
|
400 | } |
||
401 | |||
402 | /** |
||
403 | * Get 'Inhibit anyPolicy' extension. |
||
404 | * |
||
405 | * @throws \LogicException If extension is not present |
||
406 | * |
||
407 | * @return InhibitAnyPolicyExtension |
||
408 | */ |
||
409 | 3 | public function inhibitAnyPolicy(): InhibitAnyPolicyExtension |
|
412 | } |
||
413 | |||
414 | /** |
||
415 | * @see \Countable::count() |
||
416 | * |
||
417 | * @return int |
||
418 | */ |
||
419 | 77 | public function count(): int |
|
422 | } |
||
423 | |||
424 | /** |
||
425 | * Get iterator for extensions. |
||
426 | * |
||
427 | * @see \IteratorAggregate::getIterator() |
||
428 | * |
||
429 | * @return \Traversable |
||
430 | */ |
||
431 | 1 | public function getIterator(): \Traversable |
|
432 | { |
||
436 |