Public Member Functions
	createCrt ($name, $destPath=null)
	delSslCertificate ()
	delSslCertificateHandler ($window, $id, $ctrl, $param1, $param2)
	existsCrt ($name)
	genSslCertificate ()
	genSslCertificateHandler ($window, $id, $ctrl, $param1, $param2)
	getCrts ()
	isExpired ($name)
	makeRootCa ()
	rebuildAllCerts ()
	removeCrt ($name, $destPath=null)

Private Member Functions
	ensureMkcertExeExists ()
	ensureRootCaExists ($destPath)
	ensureSslDirExists ()
	validateCertificateName ($name)

Private Attributes
	$rootCaName = 'BearsamppRootCA'
	$wbDelSslBtnCancel
	$wbDelSslBtnDelete
	$wbDelSslBtnDest
	$wbDelSslInputDest
	$wbDelSslListCerts
	$wbDelSslProgressBar
	$wbGenSslBtnCancel
	$wbGenSslBtnDest
	$wbGenSslBtnSave
	$wbGenSslInputDest
	$wbGenSslInputName
	$wbGenSslProgressBar

Detailed Description

Definition at line 11 of file class.openssl.php.

Member Function Documentation

◆ createCrt()

createCrt	(		$name,
			$destPath = null )

Creates a certificate with the specified name and destination path.

Parameters

string	$name	The name of the certificate.
string \| null	$destPath	The destination path where the certificate files will be saved. If null, the default SSL path is used.

Returns: bool True if the certificate was created successfully, false otherwise.

Definition at line 187 of file class.openssl.php.

    {
        Log::trace('createCrt called for: ' . $name . ($destPath ? ' (dest: ' . $destPath . ')' : ''));
 
        if (!$this->validateCertificateName($name)) {
            Log::error('Invalid certificate name: ' . $name);
            return false;
        }
 
        if (!$this->ensureMkcertExeExists()) {
            return false;
        }
        if (empty($destPath)) {
            $destPath = $this->ensureSslDirExists();
        }
        $mkcertExe = Path::getMkcertExe();
 
        if (!$this->ensureRootCaExists($destPath)) {
            Log::error('Failed to ensure Root CA exists for: ' . $name);
            return false;
        }
 
        $crtPath = '"' . Path::formatWindowsPath($destPath . '/' . $name . '.crt') . '"';
        $pubPath = '"' . Path::formatWindowsPath($destPath . '/' . $name . '.pub') . '"';
        $keyPath = '"' . Path::formatWindowsPath($destPath . '/' . $name . '.ppk') . '"'; // Using .ppk as requested in previous tasks
        $opensslExe = '"' . Path::formatWindowsPath(Path::getOpenSslExe()) . '"';
 
        $batch = 'SET "CAROOT=' . Path::formatWindowsPath($destPath) . '"' . PHP_EOL;
 
        $mkcertNames = '"' . $name . '"';
        if ($name === 'localhost') {
            $mkcertNames .= ' 127.0.0.1 ::1';
        } else {
            $mkcertNames .= ' "*.' . $name . '" localhost 127.0.0.1 ::1';
        }
 
        Log::trace('Executing mkcert for "' . $name . '"');
        // Use -- to terminate flag parsing before hostname arguments as defense-in-depth
        $batch .= '"' . $mkcertExe . '" -cert-file ' . $crtPath . ' -key-file ' . $keyPath . ' -- ' . $mkcertNames . PHP_EOL;
        $batch .= $opensslExe . " rsa -in " . $keyPath . " -out " . $keyPath . " -passin pass:" . PHP_EOL;
        $batch .= "COPY /Y " . $keyPath . " " . $pubPath . PHP_EOL;
        $batch .= 'IF EXIST ' . $crtPath . ' IF EXIST ' . $keyPath . ' ECHO OK' . PHP_EOL;
 
        Log::trace('Creating SSL Certificate for "' . $name . '" using mkcert. Batch content: ' . $batch);
        $result = Batch::exec('createCertificateMkcert', $batch);
 
        if ($result === false || !is_array($result)) {
            Log::error('Batch execution failed for mkcert generation of "' . $name . '". Check logs for createCertificateMkcert.');
            return false;
        }
 
        $success = false;
        foreach ($result as $line) {
            if (trim($line) === 'OK') {
                $success = true;
                break;
            }
        }
        
        if (!$success) {
            Log::error('mkcert generation for "' . $name . '" did not return OK. Output: ' . implode(' | ', $result));
        }
        Log::trace('mkcert generation for "' . $name . '": ' . ($success ? 'SUCCESS' : 'FAILURE'));
 
        return $success;
    }

References $result, ensureMkcertExeExists(), ensureRootCaExists(), ensureSslDirExists(), Log\error(), Batch\exec(), Path\formatWindowsPath(), Path\getMkcertExe(), Path\getOpenSslExe(), Log\trace(), and validateCertificateName().

Referenced by makeRootCa(), and rebuildAllCerts().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ delSslCertificate()

delSslCertificate ( )

Displays a WinBinder GUI for deleting an SSL certificate.

Definition at line 293 of file class.openssl.php.

    {
        global $bearsamppLang, $bearsamppWinbinder;
 
        $initServerName = 'test.local';
        $initDocumentRoot = Path::formatWindowsPath(Path::getSslPath());
 
        $bearsamppWinbinder->reset();
        $wbWindow = $bearsamppWinbinder->createAppWindow($bearsamppLang->getValue(Lang::DELSSL_TITLE), 490, 160, WBC_NOTIFY, WBC_KEYDOWN | WBC_KEYUP);
 
        $wbLabelName = $bearsamppWinbinder->createLabel($wbWindow, $bearsamppLang->getValue(Lang::NAME) . ' :', 15, 15, 85, null, WBC_RIGHT);
        $this->wbDelSslListCerts = $bearsamppWinbinder->createInputText($wbWindow, $initServerName, 105, 13, 150, null);
 
        $wbLabelDest = $bearsamppWinbinder->createLabel($wbWindow, $bearsamppLang->getValue(Lang::TARGET) . ' :', 15, 45, 85, null, WBC_RIGHT);
        $this->wbDelSslInputDest = $bearsamppWinbinder->createInputText($wbWindow, $initDocumentRoot, 105, 43, 190, null, null, WBC_READONLY);
        $this->wbDelSslBtnDest = $bearsamppWinbinder->createButton($wbWindow, $bearsamppLang->getValue(Lang::BUTTON_BROWSE), 300, 43, 110);
 
        $this->wbDelSslProgressBar = $bearsamppWinbinder->createProgressBar($wbWindow, 3, 15, 97, 275);
        $this->wbDelSslBtnDelete = $bearsamppWinbinder->createButton($wbWindow, $bearsamppLang->getValue(Lang::BUTTON_DELETE), 300, 92);
        $this->wbDelSslBtnCancel = $bearsamppWinbinder->createButton($wbWindow, $bearsamppLang->getValue(Lang::BUTTON_CANCEL), 387, 92);
 
        $bearsamppWinbinder->setHandler($wbWindow, $this, 'delSslCertificateHandler');
 
        $bearsamppWinbinder->mainLoop();
        $bearsamppWinbinder->reset();
    }

References $bearsamppLang, Lang\BUTTON_BROWSE, Lang\BUTTON_CANCEL, Lang\BUTTON_DELETE, Lang\DELSSL_TITLE, Path\formatWindowsPath(), Path\getSslPath(), Lang\NAME, and Lang\TARGET.

Here is the call graph for this function:

◆ delSslCertificateHandler()

delSslCertificateHandler	(	$window,
		$id,
		$ctrl,
		$param1,
		$param2 )

Handler for the SSL certificate deletion WinBinder GUI.

Definition at line 323 of file class.openssl.php.

    {
        global $bearsamppLang, $bearsamppOpenSsl, $bearsamppWinbinder;
 
        switch ($id) {
            case $this->wbDelSslBtnDest[WinBinder::CTRL_ID]:
                $target = $bearsamppWinbinder->getText($this->wbDelSslInputDest[WinBinder::CTRL_OBJ]);
                $target = $bearsamppWinbinder->sysDlgPath($window, $bearsamppLang->getValue(Lang::GENSSL_PATH), $target);
                if ($target && is_dir($target)) {
                    $bearsamppWinbinder->setText($this->wbDelSslInputDest[WinBinder::CTRL_OBJ], $target . '\\');
                }
                break;
            case $this->wbDelSslBtnDelete[WinBinder::CTRL_ID]:
                $cert = $bearsamppWinbinder->getText($this->wbDelSslListCerts[WinBinder::CTRL_OBJ]);
                $target = $bearsamppWinbinder->getText($this->wbDelSslInputDest[WinBinder::CTRL_OBJ]);
 
                if ($cert) {
                    $existingCerts = $this->getCrts();
                    if (!in_array($cert, $existingCerts)) {
                        $bearsamppWinbinder->messageBoxError(sprintf($bearsamppLang->getValue(Lang::ERROR_FILE_NOT_FOUND), $cert, $target), $bearsamppLang->getValue(Lang::DELSSL_TITLE));
                        return;
                    }
 
                    $bearsamppWinbinder->setProgressBarMax($this->wbDelSslProgressBar, 3);
                    $bearsamppWinbinder->incrProgressBar($this->wbDelSslProgressBar);
 
                    $target = Path::formatUnixPath($target);
                    if ($bearsamppOpenSsl->removeCrt($cert, $target)) {
                        $bearsamppWinbinder->incrProgressBar($this->wbDelSslProgressBar);
                        $bearsamppWinbinder->messageBoxInfo(
                            sprintf($bearsamppLang->getValue(Lang::DELSSL_DELETED), $cert),
                            $bearsamppLang->getValue(Lang::DELSSL_TITLE)
                        );
                        $bearsamppWinbinder->destroyWindow($window);
                    } else {
                        $bearsamppWinbinder->messageBoxError($bearsamppLang->getValue(Lang::DELSSL_DELETED_ERROR), $bearsamppLang->getValue(Lang::DELSSL_TITLE));
                        $bearsamppWinbinder->resetProgressBar($this->wbDelSslProgressBar);
                    }
                }
                break;
            case IDCLOSE:
            case $this->wbDelSslBtnCancel[WinBinder::CTRL_ID]:
                $bearsamppWinbinder->destroyWindow($window);
                break;
        }
    }

References $bearsamppLang, WinBinder\CTRL_ID, WinBinder\CTRL_OBJ, Lang\DELSSL_DELETED, Lang\DELSSL_DELETED_ERROR, Lang\DELSSL_TITLE, Lang\ERROR_FILE_NOT_FOUND, Path\formatUnixPath(), Lang\GENSSL_PATH, and getCrts().

Here is the call graph for this function:

◆ ensureMkcertExeExists()

ensureMkcertExeExists ( )

private

Ensures that the mkcert executable exists, attempting to download it if missing.

Returns: bool True if mkcert exists or was successfully downloaded.

Definition at line 34 of file class.openssl.php.

    {
        $mkcertExe = Path::getMkcertExe();
        if (file_exists($mkcertExe)) {
            return true;
        }
 
        Log::error('mkcert.exe missing at: ' . $mkcertExe . '. It must be fetched during build time (prepareBase/buildFull/buildLite).');
        return false;
    }

References Log\error(), and Path\getMkcertExe().

Referenced by createCrt(), ensureRootCaExists(), and makeRootCa().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ ensureRootCaExists()

ensureRootCaExists ( $destPath )

private

Ensures that the Root CA exists, creating it if necessary.

Parameters

string $destPath The destination path.

Returns: bool True if the Root CA exists or was created successfully.

Definition at line 260 of file class.openssl.php.

    {
        if (!$this->ensureMkcertExeExists()) {
            return false;
        }
        $mkcertExe = Path::getMkcertExe();
 
        $rootCaPath = $destPath . '/' . Path::getMkcertRootCaName(); // mkcert default root CA name
        if (!file_exists($rootCaPath)) {
            Log::info('Root CA missing at ' . $rootCaPath . '. Running mkcert -install');
            $batch = 'SET "CAROOT=' . Path::formatWindowsPath($destPath) . '"' . PHP_EOL;
            $batch .= '"' . $mkcertExe . '" -install' . PHP_EOL;
            $batch .= 'IF EXIST "' . Path::formatWindowsPath($rootCaPath) . '" (ECHO OK)' . PHP_EOL;
            $result = Batch::exec('mkcertInstall', $batch);
            
            if ($result === false) {
                Log::error('Batch execution failed for mkcert -install');
                return false;
            }
 
            // Re-check after installation
            if (!file_exists($rootCaPath)) {
                Log::error('Root CA still missing after mkcert -install at: ' . $rootCaPath);
                return false;
            }
            Log::info('Root CA successfully created and verified.');
        }
        return true;
    }

References $result, ensureMkcertExeExists(), Log\error(), Batch\exec(), Path\formatWindowsPath(), Path\getMkcertExe(), Path\getMkcertRootCaName(), and Log\info().

Referenced by createCrt().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ ensureSslDirExists()

ensureSslDirExists ( )

private

Ensures that the SSL directory exists, creating it if necessary.

Returns: string The SSL path.

Definition at line 50 of file class.openssl.php.

    {
        $sslPath = Path::getSslPath();
        if (!is_dir($sslPath)) {
            Log::info('SSL directory missing, creating: ' . $sslPath);
            if (mkdir($sslPath, 0700, true)) {
                @chmod($sslPath, 0700);
                // Create .gitignore if the directory was just created
                $gitignorePath = $sslPath . '/.gitignore';
                if (!file_exists($gitignorePath)) {
                    file_put_contents($gitignorePath, '# git holder' . PHP_EOL);
                }
            } else {
                Log::error('Failed to create SSL directory: ' . $sslPath);
            }
        } else {
            // Even if directory exists, ensure .gitignore is present
            $gitignorePath = $sslPath . '/.gitignore';
            if (!file_exists($gitignorePath)) {
                file_put_contents($gitignorePath, '# git holder' . PHP_EOL);
            }
        }
 
        if (!is_readable($sslPath) || !is_writable($sslPath)) {
            Log::warning('SSL directory is not fully accessible. Attempting to relax permissions: ' . $sslPath);
 
            // Set permissive permissions for local dev environment (0755 allows owner RWX, group/others RX)
            @chmod($sslPath, 0755);
            clearstatcache(true, $sslPath);
 
            if (!is_readable($sslPath) || !is_writable($sslPath)) {
                Log::error('SSL directory is still not readable/writable after permission adjustment: ' . $sslPath);
            }
        }
 
        return $sslPath;
    }

References Log\error(), Path\getSslPath(), Log\info(), and Log\warning().

Referenced by createCrt(), getCrts(), and removeCrt().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ existsCrt()

existsCrt ( $name )

Checks if a certificate with the specified name exists.

Parameters

string $name The name of the certificate.

Returns: bool True if the certificate exists, false otherwise.

Definition at line 376 of file class.openssl.php.

    {
        $ppkPath = Path::getSslPath() . '/' . $name . '.ppk';
        $crtPath = Path::getSslPath() . '/' . $name . '.crt';
 
        return is_file($ppkPath) && is_file($crtPath);
    }

References Path\getSslPath().

Here is the call graph for this function:

◆ genSslCertificate()

genSslCertificate ( )

Displays a WinBinder GUI for generating an SSL certificate.

Definition at line 387 of file class.openssl.php.

    {
        global $bearsamppLang, $bearsamppWinbinder;
 
        $initServerName = 'test.local';
        $initDocumentRoot = Path::formatWindowsPath(Path::getSslPath());
 
        $bearsamppWinbinder->reset();
        $wbWindow = $bearsamppWinbinder->createAppWindow($bearsamppLang->getValue(Lang::GENSSL_TITLE), 490, 160, WBC_NOTIFY, WBC_KEYDOWN | WBC_KEYUP);
 
        $wbLabelName = $bearsamppWinbinder->createLabel($wbWindow, $bearsamppLang->getValue(Lang::NAME) . ' :', 15, 15, 85, null, WBC_RIGHT);
        $this->wbGenSslInputName = $bearsamppWinbinder->createInputText($wbWindow, $initServerName, 105, 13, 150, null);
 
        $wbLabelDest = $bearsamppWinbinder->createLabel($wbWindow, $bearsamppLang->getValue(Lang::TARGET) . ' :', 15, 45, 85, null, WBC_RIGHT);
        $this->wbGenSslInputDest = $bearsamppWinbinder->createInputText($wbWindow, $initDocumentRoot, 105, 43, 190, null, null, WBC_READONLY);
        $this->wbGenSslBtnDest = $bearsamppWinbinder->createButton($wbWindow, $bearsamppLang->getValue(Lang::BUTTON_BROWSE), 300, 43, 110);
 
        $this->wbGenSslProgressBar = $bearsamppWinbinder->createProgressBar($wbWindow, 3, 15, 97, 275);
        $this->wbGenSslBtnSave = $bearsamppWinbinder->createButton($wbWindow, $bearsamppLang->getValue(Lang::BUTTON_SAVE), 300, 92);
        $this->wbGenSslBtnCancel = $bearsamppWinbinder->createButton($wbWindow, $bearsamppLang->getValue(Lang::BUTTON_CANCEL), 387, 92);
 
        $bearsamppWinbinder->setHandler($wbWindow, $this, 'genSslCertificateHandler');
 
        $bearsamppWinbinder->mainLoop();
        $bearsamppWinbinder->reset();
    }

References $bearsamppLang, Lang\BUTTON_BROWSE, Lang\BUTTON_CANCEL, Lang\BUTTON_SAVE, Path\formatWindowsPath(), Lang\GENSSL_TITLE, Path\getSslPath(), Lang\NAME, and Lang\TARGET.

Here is the call graph for this function:

◆ genSslCertificateHandler()

genSslCertificateHandler	(	$window,
		$id,
		$ctrl,
		$param1,
		$param2 )

Handler for the SSL certificate generation WinBinder GUI.

Definition at line 417 of file class.openssl.php.

    {
        global $bearsamppLang, $bearsamppOpenSsl, $bearsamppWinbinder;
 
        switch ($id) {
            case $this->wbGenSslBtnDest[WinBinder::CTRL_ID]:
                $target = $bearsamppWinbinder->getText($this->wbGenSslInputDest[WinBinder::CTRL_OBJ]);
                $target = $bearsamppWinbinder->sysDlgPath($window, $bearsamppLang->getValue(Lang::GENSSL_PATH), $target);
                if ($target && is_dir($target)) {
                    $bearsamppWinbinder->setText($this->wbGenSslInputDest[WinBinder::CTRL_OBJ], $target . '\\');
                }
                break;
            case $this->wbGenSslBtnSave[WinBinder::CTRL_ID]:
                $name = $bearsamppWinbinder->getText($this->wbGenSslInputName[WinBinder::CTRL_OBJ]);
                $target = $bearsamppWinbinder->getText($this->wbGenSslInputDest[WinBinder::CTRL_OBJ]);
 
                $bearsamppWinbinder->setProgressBarMax($this->wbGenSslProgressBar, 3);
                $bearsamppWinbinder->incrProgressBar($this->wbGenSslProgressBar);
 
                $target = Path::formatUnixPath($target);
                if ($bearsamppOpenSsl->createCrt($name, $target)) {
                    $bearsamppWinbinder->incrProgressBar($this->wbGenSslProgressBar);
                    $bearsamppWinbinder->messageBoxInfo(
                        sprintf($bearsamppLang->getValue(Lang::GENSSL_CREATED), $name),
                        $bearsamppLang->getValue(Lang::GENSSL_TITLE));
                    $bearsamppWinbinder->destroyWindow($window);
                } else {
                    $bearsamppWinbinder->messageBoxError($bearsamppLang->getValue(Lang::GENSSL_CREATED_ERROR), $bearsamppLang->getValue(Lang::GENSSL_TITLE));
                    $bearsamppWinbinder->resetProgressBar($this->wbGenSslProgressBar);
                }
                break;
            case IDCLOSE:
            case $this->wbGenSslBtnCancel[WinBinder::CTRL_ID]:
                $bearsamppWinbinder->destroyWindow($window);
                break;
        }
    }

References $bearsamppLang, WinBinder\CTRL_ID, WinBinder\CTRL_OBJ, Path\formatUnixPath(), Lang\GENSSL_CREATED, Lang\GENSSL_CREATED_ERROR, Lang\GENSSL_PATH, and Lang\GENSSL_TITLE.

Here is the call graph for this function:

◆ getCrts()

getCrts ( )

Retrieves existing certificates from the SSL directory.

Returns: array List of certificate names.

Definition at line 460 of file class.openssl.php.

    {
        $sslPath = $this->ensureSslDirExists();
        $certs = [];
        if (is_dir($sslPath)) {
            $files = glob($sslPath . '/*.crt');
            if ($files !== false) {
                foreach ($files as $file) {
                    $certs[] = basename($file, '.crt');
                }
            }
        }
        sort($certs);
        return $certs;
    }

References ensureSslDirExists().

Referenced by delSslCertificateHandler(), and rebuildAllCerts().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ isExpired()

isExpired ( $name )

Checks if a certificate with the specified name is expired or about to expire.

Parameters

string $name The name of the certificate.

Returns: bool True if the certificate is expired or missing, false otherwise.

Definition at line 482 of file class.openssl.php.

    {
        $crtPath = Path::getSslPath() . '/' . $name . '.crt';
        $pubPath = Path::getSslPath() . '/' . $name . '.pub';
 
        if (!is_file($crtPath)) {
            Log::trace('SSL certificate file missing: ' . $crtPath);
            return true;
        }
 
        if (!is_file($pubPath)) {
            Log::trace('SSL public certificate file missing: ' . $pubPath);
            return true;
        }
 
        if (!extension_loaded('openssl')) {
            Log::warning('OpenSSL extension not loaded. Cannot parse certificate for expiry check. Assuming NOT expired if file exists.');
            return false;
        }
 
        $crtContent = file_get_contents($crtPath);
        if ($crtContent === false) {
            Log::error('Could not read certificate file: ' . $crtPath);
            return true;
        }
 
        $certInfo = openssl_x509_parse($crtContent);
        if ($certInfo === false) {
            Log::error('Could not parse certificate: ' . $crtPath . '. OpenSSL error: ' . openssl_error_string());
            return true;
        }
 
        if (isset($certInfo['validTo_time_t'])) {
            $isExpired = $certInfo['validTo_time_t'] < time();
            if ($isExpired) {
                Log::trace('SSL certificate expired: ' . $name . ' (Expired on ' . date('Y-m-d H:i:s', $certInfo['validTo_time_t']) . ')');
            }
            return $isExpired;
        }
 
        Log::error('Could not find expiry date in certificate: ' . $crtPath);
        return true;
    }

References Log\error(), Path\getSslPath(), Log\trace(), and Log\warning().

Here is the call graph for this function:

◆ makeRootCa()

makeRootCa ( )

Creates a new Root CA and reinstalls it, then rebuilds all certificates.

Returns: bool True if successful.

Definition at line 93 of file class.openssl.php.

    {
        if (!$this->ensureMkcertExeExists()) {
            return false;
        }
        $destPath = Path::getSslPath();
        $mkcertExe = Path::getMkcertExe();
 
        Log::info('Creating new Root CA and installing it...');
        
        $rootCaPath = Path::getSslPath() . '/' . Path::getMkcertRootCaName();
        $batch = 'SET "CAROOT=' . Path::formatWindowsPath(Path::getSslPath()) . '"' . PHP_EOL;
        $batch .= '"' . $mkcertExe . '" -uninstall' . PHP_EOL;
        $batch .= '"' . $mkcertExe . '" -install' . PHP_EOL;
        $batch .= 'IF EXIST "' . Path::formatWindowsPath($rootCaPath) . '" (ECHO OK)' . PHP_EOL;
        
        // Wait for the Root CA file to appear or timeout
        $result = Batch::exec('mkcertMakeRootCa', $batch);
        
        if (!file_exists($rootCaPath)) {
            Log::error('Failed to create Root CA file at: ' . $rootCaPath);
            return false;
        }
 
        // Display info about the new Root CA
        $batch = 'SET "CAROOT=' . Path::formatWindowsPath(Path::getSslPath()) . '"' . PHP_EOL;
        $batch .= '"' . $mkcertExe . '" -CAROOT' . PHP_EOL;
        $caRootInfo = Batch::exec('mkcertCaRootInfo', $batch);
        if ($caRootInfo && isset($caRootInfo[0])) {
            Log::info('mkcert CAROOT is set to: ' . $caRootInfo[0]);
        }
 
        Log::info('Root CA created. Rebuilding all existing certificates and ensuring localhost exists...');
        
        // Ensure localhost is created/rebuilt
        $this->createCrt('localhost');
        
        return $this->rebuildAllCerts();
    }

References $result, createCrt(), ensureMkcertExeExists(), Log\error(), Batch\exec(), Path\formatWindowsPath(), Path\getMkcertExe(), Path\getMkcertRootCaName(), Path\getSslPath(), Log\info(), and rebuildAllCerts().

Here is the call graph for this function:

◆ rebuildAllCerts()

rebuildAllCerts ( )

Rebuilds all existing certificates in the SSL directory.

Returns: bool True if all certificates were rebuilt successfully.

Definition at line 138 of file class.openssl.php.

    {
        $certs = $this->getCrts();
        $success = true;
 
        foreach ($certs as $cert) {
            Log::info('Rebuilding certificate: ' . $cert);
            if (!$this->createCrt($cert)) {
                Log::error('Failed to rebuild certificate: ' . $cert);
                $success = false;
            }
        }
 
        return $success;
    }

References createCrt(), Log\error(), getCrts(), and Log\info().

Referenced by makeRootCa().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ removeCrt()

removeCrt	(		$name,
			$destPath = null )

Removes a certificate with the specified name.

Parameters

string	$name	The name of the certificate.
string \| null	$destPath	The destination path where the certificate files are saved. If null, the default SSL path is used.

Returns: bool True if the certificate was removed successfully, false otherwise.

Definition at line 533 of file class.openssl.php.

    {
        if ($name === 'localhost') {
            Log::warning('Attempted to remove protected "localhost" certificate. Operation cancelled.');
            return false;
        }
        $destPath = empty($destPath) ? $this->ensureSslDirExists() : $destPath;
 
        // Basic validation for name to prevent arbitrary file deletion
        if (!preg_match('/^[a-zA-Z0-9._-]+$/', $name)) {
            Log::error('Invalid certificate name for removal: ' . $name);
            return false;
        }
 
        $ppkPath = $destPath . '/' . $name . '.ppk';
        $crtPath = $destPath . '/' . $name . '.crt';
        $pubPath = $destPath . '/' . $name . '.pub';
 
        Log::info('Removing SSL certificate: ' . $name . ' from ' . $destPath);
        return @unlink($ppkPath) && @unlink($crtPath) && @unlink($pubPath);
    }

References ensureSslDirExists(), Log\error(), Log\info(), and Log\warning().

Here is the call graph for this function:

◆ validateCertificateName()

validateCertificateName ( $name )

private

Validates the certificate name to prevent command injection attacks. Requires names to start with alphanumeric character to prevent mkcert flag injection. Uses filesystem-safe whitelist (same as removeCrt) to support existing cert names and prevent CMD metacharacter injection. Allows: alphanumeric, dots, dashes, underscores.

Parameters

string $name The certificate name to validate.

Returns: bool True if the name is valid, false otherwise.

Definition at line 163 of file class.openssl.php.

    {
        if (empty($name)) {
            return false;
        }
 
        // Filesystem-safe whitelist with mandatory alphanumeric first character:
        // - Prevents CLI flag injection (leading `-`)
        // - Prevents relative path traversal (leading `.`)
        // - Allows remaining chars to be alphanumeric, dots, dashes, underscores
        if (!preg_match('/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/', $name)) {
            return false;
        }
 
        return true;
    }

Referenced by createCrt().

Here is the caller graph for this function:

Field Documentation

◆ $rootCaName

$rootCaName = 'BearsamppRootCA'

private

Definition at line 26 of file class.openssl.php.

◆ $wbDelSslBtnCancel

$wbDelSslBtnCancel

private

Definition at line 25 of file class.openssl.php.

◆ $wbDelSslBtnDelete

$wbDelSslBtnDelete

private

Definition at line 24 of file class.openssl.php.

◆ $wbDelSslBtnDest

$wbDelSslBtnDest

private

Definition at line 22 of file class.openssl.php.

◆ $wbDelSslInputDest

$wbDelSslInputDest

private

Definition at line 21 of file class.openssl.php.

◆ $wbDelSslListCerts

$wbDelSslListCerts

private

Definition at line 20 of file class.openssl.php.

◆ $wbDelSslProgressBar

$wbDelSslProgressBar

private

Definition at line 23 of file class.openssl.php.

◆ $wbGenSslBtnCancel

$wbGenSslBtnCancel

private

Definition at line 18 of file class.openssl.php.

◆ $wbGenSslBtnDest

$wbGenSslBtnDest

private

Definition at line 15 of file class.openssl.php.

◆ $wbGenSslBtnSave

$wbGenSslBtnSave

private

Definition at line 17 of file class.openssl.php.

◆ $wbGenSslInputDest

$wbGenSslInputDest

private

Definition at line 14 of file class.openssl.php.

◆ $wbGenSslInputName

$wbGenSslInputName

private

Definition at line 13 of file class.openssl.php.

◆ $wbGenSslProgressBar

$wbGenSslProgressBar

private

Definition at line 16 of file class.openssl.php.

The documentation for this class was generated from the following file:

E:/Bearsampp-development/sandbox/core/classes/class.openssl.php

Public Member Functions

Private Member Functions

Private Attributes

Detailed Description

Member Function Documentation

◆ createCrt()

◆ delSslCertificate()

◆ delSslCertificateHandler()

◆ ensureMkcertExeExists()

◆ ensureRootCaExists()

◆ ensureSslDirExists()

◆ existsCrt()

◆ genSslCertificate()

◆ genSslCertificateHandler()

◆ getCrts()

◆ isExpired()

◆ makeRootCa()

◆ rebuildAllCerts()

◆ removeCrt()

◆ validateCertificateName()

Field Documentation

◆ $rootCaName

◆ $wbDelSslBtnCancel

◆ $wbDelSslBtnDelete

◆ $wbDelSslBtnDest

◆ $wbDelSslInputDest

◆ $wbDelSslListCerts

◆ $wbDelSslProgressBar

◆ $wbGenSslBtnCancel

◆ $wbGenSslBtnDest

◆ $wbGenSslBtnSave

◆ $wbGenSslInputDest

◆ $wbGenSslInputName

◆ $wbGenSslProgressBar