src/Biz/Util/Phpsec/File/X509.php

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<?php

/**
 * Pure-PHP X.509 Parser.
 *
 * PHP version 5
 *
 * Encode and decode X.509 certificates.
 *
 * The extensions are from {@link http://tools.ietf.org/html/rfc5280 RFC5280} and
 * {@link http://web.archive.org/web/19961027104704/http://www3.netscape.com/eng/security/cert-exts.html Netscape Certificate Extensions}.
 *
 * Note that loading an X.509 certificate and resaving it may invalidate the signature.  The reason being that the signature is based on a
 * portion of the certificate that contains optional parameters with default values.  ie. if the parameter isn't there the default value is
 * used.  Problem is, if the parameter is there and it just so happens to have the default value there are two ways that that parameter can
 * be encoded.  It can be encoded explicitly or left out all together.  This would effect the signature value and thus may invalidate the
 * the certificate all together unless the certificate is re-signed.
 *
 * @category  File
 *
 * @author    Jim Wigginton <terrafrost@php.net>
 * @copyright 2012 Jim Wigginton
 * @license   http://www.opensource.org/licenses/mit-license.html  MIT License
 *
 * @see      http://phpseclib.sourceforge.net
 */

namespace Biz\Util\Phpsec\File;

use Biz\Util\Phpsec\Crypt\RSA;
use Biz\Util\Phpsec\Crypt\Hash;
use Biz\Util\Phpsec\Crypt\Random;
use Biz\Util\Phpsec\Math\BigInteger;
use Biz\Util\Phpsec\File\ASN1\Element;

/**
 * Pure-PHP X.509 Parser.
 *
 *
 * @author  Jim Wigginton <terrafrost@php.net>
 */
class X509
{
    /**
     * Flag to only accept signatures signed by certificate authorities.
     *
     * Not really used anymore but retained all the same to suppress E_NOTICEs from old installs
     */
    const VALIDATE_SIGNATURE_BY_CA = 1;

    /**#@+
     * @access public
     * @see \Biz\Util\Phpsec\File\X509::getDN()
     */
    /**
     * Return internal array representation.
     */
    const DN_ARRAY = 0;
    /**
     * Return string.