README

用于生成自签名X509证书的简单库。

此PHP包对于仅使用PHP（绝对不使用OpenSSL控制台启动）生成简单的自签名SLL证书非常有用。

要求

• PHP >= 8.1

安装

使用composer（推荐）

composer phprivoxy/x509

手动证书生成示例

$rootNames = new PHPrivoxy\X509\DTO\Names('RU', 'PHP proxy', null, 'PHPrivoxy');
$rootCert = new PHPrivoxy\X509\DTO\Certificate($rootNames, ''ROOT_CA.crt');
$rootKey = new PHPrivoxy\X509\DTO\PrivateKey('ROOT_CA.key');
$rootCertCreator = new PHPrivoxy\X509\RootCertificateCreator($rootCert, $rootKey);
$rootCertCreator->getCertificate(); // It write CA certificate and it private key into it's files.

$names = new Names('RU', 'TEST', null, 'test');
$numberOfDays = 365; // One year.
$domains = ['*.test.local', 'www.test.local', 'test.local', 'test2.local', 'test3.local']; // Multidomains certificate.
$dns = new DNS($domains);
$key = new PrivateKey('self-signed-certificate.key');
$cert = new Certificate($names, 'self-signed-certificate.crt', $numberOfDays, $dns);

$certCreator = new CertificateCreator($cert, $key, $rootCert, $rootKey);

// It write certificate and it private key into it's files.
// Also returns PHPrivoxy\X509\DTO\Certificate object.
$certCreator->getCertificate();

按主机名动态生成证书示例

$rootNames = new PHPrivoxy\X509\DTO\Names('RU', 'PHP proxy', null, 'PHPrivoxy');
$rootCertificate = new PHPrivoxy\X509\DTO\Certificate($rootNames, ''ROOT_CA.crt');
$rootKey = new PHPrivoxy\X509\DTO\PrivateKey('ROOT_CA.key');

$certificateDir = __DIR__ . 'certificates';
// If certificate directory (third argument) is null, certificate files don't be write (only generated).
$creator = new PHPrivoxy\X509\ServerCertificateCreator($rootCertificate, $rootKey, $certificateDir);

// Create files "certificates/test1.local.key" and "certificates/test1.local.crt".
$obj1 = $creator->createCertificate('test1.local');

// Create files "certificates/test2.local.key" and "certificates/test2.local.crt".
$obj2 = $creator->createCertificate('test2.local');

print_r($obj2); // Contains PHPrivoxy\X509\DTO\Certificate object.

完整的示例可以在"tests/create.php"和"tests/server.php"文件中找到 - 只需运行它

php tests/create.php

php tests/server.php

别忘了将您生成的自签名CA证书（此示例中的ROOT_CA.crt）添加到受信任证书中！

许可

MIT许可 请参阅LICENSE