Download the PHP package komma-softhouse/asice-engine without Composer

On this page you can find all versions of the php package komma-softhouse/asice-engine. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of komma-softhouse/asice-engine

Informations about the package asice-engine

ASiC-E engine

ASiC-E containers with XAdES signatures for Estonian eID. Hash in, container out: the engine builds the container and the signature document, hands you the digest to sign, and finishes the job when the value comes back — from an ID-kaart through Web eID, from Smart-ID or from Mobile-ID. It then fetches the OCSP answer and the time-stamp that make the signature long-term.

Used by komma-softhouse/filament-eesti-billing; usable on its own in any PHP application.

Requirements

PHP 8.3+, ext-openssl, ext-zip, ext-dom. No other dependency.

Installation

Signing

Then, once the signature value is back:

The signature value is verified against the hash before anything is written: a wrong value never lands in the container. A revoked certificate stops the process.

Validating

Validation recomputes every file digest against its Reference, so a file changed after signing is reported by name.

Services

By default the engine asks the OCSP responder named in the signer's certificate (SK's public AIA responder for Estonian eID) and http://tsa.sk.ee for the time-stamp. Point them elsewhere, or hand the issuer certificate over when you already have the chain:

If either service cannot be reached, the container is still written with a valid basic signature and notes explains what is missing.

Several signers

createSignature() can run again on a saved container; each finished signature becomes its own META-INF/signatures{n}.xml. The data files are untouched.

What is in the container

mimetype (stored, first), META-INF/manifest.xml, the data files, and one META-INF/signatures{n}.xml per signature holding the XAdES structure: a Reference per file, the signed properties with the signing time and the certificate digest, the signature value, and the unsigned properties with the time-stamp and the OCSP answer.

Testing

The suite signs with a throwaway key pair, so it runs offline; only the time-stamp and OCSP steps need a network, and their absence is a note, not a failure.

Security

If you discover a security issue, email [email protected] instead of using the issue tracker.

License

Commercial. See LICENSE.md.

All versions of asice-engine with dependencies

PHP Build Version
Package Version
Requires php Version ^8.3
ext-dom Version *
ext-openssl Version *
ext-zip Version *
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package komma-softhouse/asice-engine contains the following files

Loading the files please wait ...