X509\Certificate\Extension\BasicConstraintsExtension

Complexity

Total Complexity

12

Size/Duplication

Total Lines	105
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Test Coverage

Coverage

100%

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	hasPathLen()	0	3	1
A	__construct()	0	5	1
A	isCA()	0	3	1
A	_valueASN1()	0	10	3
A	_fromDER()	0	13	3
A	pathLen()	0	6	2

<?php

declare(strict_types = 1);

namespace Sop\X509\Certificate\Extension;

use Sop\ASN1\Element;
use Sop\ASN1\Type\Constructed\Sequence;
use Sop\ASN1\Type\Primitive\Boolean;
use Sop\ASN1\Type\Primitive\Integer;
use Sop\ASN1\Type\UnspecifiedType;

/**
 * Implements 'Basic Constraints' certificate extension.
 *
 * @see https://tools.ietf.org/html/rfc5280#section-4.2.1.9
 */
class BasicConstraintsExtension extends Extension
{
    /**
     * Whether certificate is a CA.
     *
     * @var bool
     */
    protected $_ca;

    /**
     * Maximum certification path length.
     *
     * @var null|int
     */
    protected $_pathLen;

    /**
     * Constructor.
     *
     * @param bool     $critical
     * @param bool     $ca
     * @param null|int $path_len
     */
    public function __construct(bool $critical, bool $ca, ?int $path_len = null)
    {
        parent::__construct(self::OID_BASIC_CONSTRAINTS, $critical);
        $this->_ca = $ca;
        $this->_pathLen = $path_len;
    }

    /**
     * Whether certificate is a CA.
     *
     * @return bool
     */
    public function isCA(): bool
    {
        return $this->_ca;
    }

    /**
     * Whether path length is present.
     *
     * @return bool
     */
    public function hasPathLen(): bool
    {
        return isset($this->_pathLen);
    }

    /**
     * Get path length.
     *
     * @throws \LogicException If not set
     *
     * @return int
     */
    public function pathLen(): int
    {
        if (!$this->hasPathLen()) {
            throw new \LogicException('pathLenConstraint not set.');
        }
        return $this->_pathLen;
    }

    /**
     * {@inheritdoc}
     */
    protected static function _fromDER(string $data, bool $critical): Extension
    {
        $seq = UnspecifiedType::fromDER($data)->asSequence();
        $ca = false;
        $path_len = null;
        $idx = 0;
        if ($seq->has($idx, Element::TYPE_BOOLEAN)) {
            $ca = $seq->at($idx++)->asBoolean()->value();
        }
        if ($seq->has($idx, Element::TYPE_INTEGER)) {
            $path_len = $seq->at($idx)->asInteger()->intNumber();
        }
        return new self($critical, $ca, $path_len);
    }

    /**
     * {@inheritdoc}
     */
    protected function _valueASN1(): Element
    {
        $elements = [];
        if ($this->_ca) {
            $elements[] = new Boolean(true);
        }
        if (isset($this->_pathLen)) {
            $elements[] = new Integer($this->_pathLen);
        }
        return new Sequence(...$elements);
    }
}