Download the PHP package hoels/ocsp-php without Composer
On this page you can find all versions of the php package hoels/ocsp-php. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package ocsp-php
OCSP PHP
ocsp-php is a library for checking if certificates are revoked by using Online Certificate Status Protocol (OCSP), entirely written in PHP.
Note that this library does not include any HTTP client. You can use any client of your choice, e.g. Curl or GuzzleHTTP.
Installation
Requirements
- PHP 8.1+
- Composer
Composer
Loading the certificates
By using CertificateLoader, you can load certificates from a file or string.
Getting the issuer certificate from certificate
The certificate usually contains a URL where you can find certificate of the certificate issuer.
You can use this code to extract this URL from the certificate.
$issuerCertificateUrl will contain the URL where the issuer certificate can be downloaded. When it is an empty string,
that means the issuer certificate URL is not included in the SSL certificate.
Getting the OCSP responder URL
To check if a SSL Certificate is valid, you need to know the OCSP URL, that is provided by the authority that issued the certificate. This URL can be called to check if the certificate has been revoked.
This URL may be included in the SSL Certificate itself.
You can use this code to extract the OCSP responder URL from the SSL Certificate.
When it is an empty string, that means the OCSP responder URL is not included in the SSL Certificate.
Checking the revocation status of an SSL Certificate
Once you have the SSL Certificate, the issuer certificate, and the OCSP responder URL, you can check whether the SSL certificate has been revoked or is still valid.
$response contains instance of the OCSP\OcspResponse class:
$response->isRevoked() === falsewhen the certificate is not revoked$response->isRevoked() === truewhen the certificate is revoked (to get revoke reason, call$response->getRevokeReason())- when
$response->isRevoked()returnsnull, then the certificate revoke status is unknown
To get more detailed information from the response you can use:
Following methods can be called with $basicResponse:
$basicResponse->getResponses()- returns array of the responses$basicResponse->getCertificates()- returns array of X.509 certificates (phpseclib3\File\X509)$basicResponse->getSignature()- returns signature$basicResponse->getProducedAt()- returns DateTime object$basicResponse->getThisUpdate()- returns DateTime object$basicResponse->getNextUpdate()- returns DateTime object (isnullwhennextUpdatefield does not exist)$basicResponse->getSignatureAlgorithm()- returns signature algorithm as string (throws exception, when signature algorithm is not implemented)$basicResponse->getNonceExtension()- returns nonce (when value isnullthen nonce extension does not exist in response)$basicResponse->getCertID()- returns response certificateID
To get the full response for debugging or logging purposes, use $response->getResponse()
