jinomial/laravel-ssl

An SSL service for Laravel

v1.0.0-beta.1 2021-10-30 23:07 UTC

This package is auto-updated.

Last update: 2024-03-29 04:33:24 UTC


README

An SSL/TLS service for Laravel. Use the openssl driver it includes or create your own custom driver.

Installation

You can install the package via composer:

composer require jinomial/laravel-ssl

You can publish the config file with:

php artisan vendor:publish --provider="Jinomial\LaravelSsl\SslServiceProvider" --tag="laravel-ssl-config"

This is the contents of the published config file:

return [

    /*
    |--------------------------------------------------------------------------
    | Default SSL
    |--------------------------------------------------------------------------
    |
    | This option controls the default SSL driver that is used by the SSL
    | service. Alternative SSL drivers may be setup and used as needed;
    | however, this driver will be used by default.
    |
    */

    'default' => env('SSL_DRIVER', 'openssl'),

    /*
    |--------------------------------------------------------------------------
    | SSL Driver Configurations
    |--------------------------------------------------------------------------
    |
    | Here you may configure all of the SSL drivers used by your application
    | plus their respective settings. Several examples have been configured for
    | you and you are free to add your own as your application requires.
    |
    | Supported: "openssl"
    |
    */

    'drivers' => [
        'openssl' => [
            'driver' => 'openssl',
        ],
    ],

];

Usage

$response = Ssl::show('jinomial.com', 443);
print_r($response);

// Array
// (
//     [0] => Array
//         (
//             [certificate] => Array
//                 (
//                     [name] => /C=US/ST=California/L=San Francisco/O=Cloudflare, Inc./CN=sni.cloudflaressl.com
//                     [subject] => Array
//                         (
//                             [C] => US
//                             [ST] => California
//                             [L] => San Francisco
//                             [O] => Cloudflare, Inc.
//                             [CN] => sni.cloudflaressl.com
//                         )
//
//                     [hash] => c959965e
//                     [issuer] => Array
//                         (
//                             [C] => US
//                             [O] => Cloudflare, Inc.
//                             [CN] => Cloudflare Inc ECC CA-3
//                         )
//
//                     [version] => 2
//                     [serialNumber] => 7490133585878873344260773043003356172
//                     [serialNumberHex] => 05A28C18F8F74ACBCCF6A4542736740C
//                     [validFrom] => 211004000000Z
//                     [validTo] => 221003235959Z
//                     [validFrom_time_t] => 1633305600
//                     [validTo_time_t] => 1664841599
//                     [signatureTypeSN] => ecdsa-with-SHA256
//                     [signatureTypeLN] => ecdsa-with-SHA256
//                     [signatureTypeNID] => 794
//                     [purposes] => Array
//                         (
//                             [1] => Array
//                                 (
//                                     [0] => 1
//                                     [1] =>
//                                     [2] => sslclient
//                                 )
//
//                             [2] => Array
//                                 (
//                                     [0] => 1
//                                     [1] =>
//                                     [2] => sslserver
//                                 )
//
//                             [3] => Array
//                                 (
//                                     [0] =>
//                                     [1] =>
//                                     [2] => nssslserver
//                                 )
//
//                             [4] => Array
//                                 (
//                                     [0] =>
//                                     [1] =>
//                                     [2] => smimesign
//                                 )
//
//                             [5] => Array
//                                 (
//                                     [0] =>
//                                     [1] =>
//                                     [2] => smimeencrypt
//                                 )
//
//                             [6] => Array
//                                 (
//                                     [0] =>
//                                     [1] =>
//                                     [2] => crlsign
//                                 )
//
//                             [7] => Array
//                                 (
//                                     [0] => 1
//                                     [1] => 1
//                                     [2] => any
//                                 )
//
//                             [8] => Array
//                                 (
//                                     [0] => 1
//                                     [1] =>
//                                     [2] => ocsphelper
//                                 )
//
//                             [9] => Array
//                                 (
//                                     [0] =>
//                                     [1] =>
//                                     [2] => timestampsign
//                                 )
//
//                         )
//
//                     [extensions] => Array
//                         (
//                             [authorityKeyIdentifier] => keyid:A5:CE:37:EA:EB:B0:75:0E:94:67:88:B4:45:FA:D9:24:10:87:96:1F
//
//                             [subjectKeyIdentifier] => 1B:20:D1:CD:00:32:24:77:9F:F8:22:94:0F:B6:48:7F:39:B1:BE:C8
//                             [subjectAltName] => DNS:*.jinomial.com, DNS:sni.cloudflaressl.com, DNS:jinomial.com
//                             [keyUsage] => Digital Signature
//                             [extendedKeyUsage] => TLS Web Server Authentication, TLS Web Client Authentication
//                             [crlDistributionPoints] =>
// Full Name:
//   URI:http://crl3.digicert.com/CloudflareIncECCCA-3.crl
//
// Full Name:
//   URI:http://crl4.digicert.com/CloudflareIncECCCA-3.crl
//
//                             [certificatePolicies] => Policy: 2.23.140.1.2.2
//   CPS: http://www.digicert.com/CPS
//
//                             [authorityInfoAccess] => OCSP - URI:http://ocsp.digicert.com
// CA Issuers - URI:http://cacerts.digicert.com/CloudflareIncECCCA-3.crt
//
//                             [basicConstraints] => CA:FALSE
//                             [ct_precert_scts] => Signed Certificate Timestamp:
//     Version   : v1 (0x0)
//     Log ID    : 46:A5:55:EB:75:FA:91:20:30:B5:A2:89:69:F4:F3:7D:
//                 11:2C:41:74:BE:FD:49:B8:85:AB:F2:FC:70:FE:6D:47
//     Timestamp : Oct  4 22:14:44.288 2021 GMT
//     Extensions: none
//     Signature : ecdsa-with-SHA256
//                 30:45:02:20:48:67:EF:28:F6:F2:B7:C8:F5:0D:7C:3D:
//                 21:7B:D3:C9:37:4E:B2:7C:AC:70:22:9D:7F:4C:75:D1:
//                 27:97:89:9C:02:21:00:D9:44:6B:10:0B:F0:6E:2D:99:
//                 79:77:D7:C8:91:51:C5:E9:50:92:13:EE:99:80:50:FF:
//                 CB:BD:E6:87:5F:47:A6
// Signed Certificate Timestamp:
//     Version   : v1 (0x0)
//     Log ID    : 51:A3:B0:F5:FD:01:79:9C:56:6D:B8:37:78:8F:0C:A4:
//                 7A:CC:1B:27:CB:F7:9E:88:42:9A:0D:FE:D4:8B:05:E5
//     Timestamp : Oct  4 22:14:44.292 2021 GMT
//     Extensions: none
//     Signature : ecdsa-with-SHA256
//                 30:44:02:20:02:92:85:B2:A1:C6:09:18:E5:F4:48:12:
//                 32:C9:D6:FF:AE:F8:85:DC:E0:06:0D:CB:86:62:5C:E1:
//                 24:6B:F3:7D:02:20:03:20:01:0B:91:19:AD:4A:87:18:
//                 FA:5F:A3:98:13:95:CD:EC:8E:1D:63:22:EB:6A:E2:FE:
//                 33:BC:B1:D8:6C:6B
// Signed Certificate Timestamp:
//     Version   : v1 (0x0)
//     Log ID    : 41:C8:CA:B1:DF:22:46:4A:10:C6:A1:3A:09:42:87:5E:
//                 4E:31:8B:1B:03:EB:EB:4B:C7:68:F0:90:62:96:06:F6
//     Timestamp : Oct  4 22:14:44.184 2021 GMT
//     Extensions: none
//     Signature : ecdsa-with-SHA256
//                 30:46:02:21:00:C3:35:6C:A6:27:01:94:88:CF:85:C6:
//                 3D:33:06:08:DE:BB:14:61:D4:34:8C:AD:A4:24:1B:0F:
//                 FB:A7:17:13:EA:02:21:00:AE:AB:D7:C2:22:B6:FA:FE:
//                 7E:20:DA:94:44:18:41:91:DB:98:AC:EA:F8:03:36:57:
//                 D5:7C:33:4B:71:03:05:9B
//                         )
//
//                 )
//
//             [verification] => Array
//                 (
//                     [code] => 0
//                     [message] => ok
//                 )
//
//         )
//
// )

To show the certificate of a CA Issuer from an id-ad-caIssuers property:

$response = Ssl::show(
    'http://cacerts.digicert.com/CloudflareIncECCCA-3.crt',
    443,
    ['id-ad-caIssuers' => true]
);
print_r($response);

Testing

Run all tests:

composer test

Test suites are separated into "unit" and "integration". Run each suite:

composer test-unit
composer test-integration

Tests are grouped into the following groups:

  • network
  • drivers
  • openssl
  • manager
  • facades
  • commands

Run tests for groups:

composer test -- --include=manager,facades

Network tests make remote calls that can take time or fail. Exclude them:

composer test-unit -- --exclude=network

Changelog

Please see CHANGELOG for more information on what has changed recently.

Contributing

Please see CONTRIBUTING for details.

Security Vulnerabilities

Please review our security policy on how to report security vulnerabilities.

Credits

License

The MIT License (MIT). Please see License File for more information.