Download the PHP package spatie/ssl-certificate-chain-resolver without Composer
On this page you can find all versions of the php package spatie/ssl-certificate-chain-resolver. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download spatie/ssl-certificate-chain-resolver
More information about spatie/ssl-certificate-chain-resolver
Files in spatie/ssl-certificate-chain-resolver
Package ssl-certificate-chain-resolver
Short Description SSL certificate chain resolver
License MIT
Homepage https://github.com/spatie/ssl-certificate-chain-resolver
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package ssl-certificate-chain-resolver
SSL Certificate Chain Resolver
All operating systems contain a set of default trusted root certificates. But Certificate Authorities usually don't use their root certificate to sign customer certificates. They use so called intermediate certificates instead, because these can be rotated more frequently.
If not all intermediate certificates are installed on your server, some clients —mostly mobile browsers— will think you are on an insecure connection.
This tool can help you fix the Qualys SSL Server Test.
Spatie is a webdesign agency in Antwerp, Belgium. You'll find an overview of all our open source projects on our website.
Support us
We invest a lot of resources into creating best in class open source packages. You can support us by buying one of our paid products.
We highly appreciate you sending us a postcard from your hometown, mentioning which of our package(s) you are using. You'll find our address on our contact page. We publish all received postcards on our virtual postcard wall.
Postcardware
You're free to use this package (it's MIT-licensed), but if it makes it to your production environment you are required to send us a postcard from your hometown, mentioning which of our package(s) you are using.
Our address is: Spatie, Kruikstraat 22, 2018 Antwerp, Belgium.
The best postcards will get published on the open source page on our website.
Installation
This package can be installed using composer by running this command.
Usage
Let's assume you have an incomplete certificate called . To generate the a file containing the certificate and the entire trust chain, you can use this command:
A file containing the certificate and the entire trust chain will be saved as
You can also pass the name of the file of the outputfile as the second argument:
If the outputfile already exists, you will be asked if it's ok to overwrite it.
Updating
You can update ssl-certificate-chain-resolver to the latest version by running:
Limitations
Currently this package does not work with Entity validation certificates or certificates issued by Let's Encrypt. A PR that adds this to package would be highly appreciated.
Testing
Functional and unit tests are included with the package.
You can run them yourself with
Credits
- Freek Van der Herten
- All Contributors
This package was inspired by cert-chain-resolver written by Jan Žák. Some text, mainly the background about the trust chain, was copied from the readme of his repo.
Background: the trust chain
All operating systems contain a set of default trusted root certificates. But Certificate Authorities usually don't use their root certificate to sign customer certificates. Instead of they use so called intermediate certificates, because they can be rotated more frequently.
A certificate can contain a special Authority Information Access extension (RFC-3280) with URL to issuer's certificate. Most browsers can use the AIA extension to download missing intermediate certificate to complete the certificate chain. This is the exact meaning of the Extra download message. But some clients, mostly mobile browsers, don't support this extension, so they report such certificate as untrusted.
This results in 'untrusted'-warnings like this, since the browser thinks you are on an insecure connection.
A server should always send a complete chain, which means concatenated all certificates from the certificate to the trusted root certificate (exclusive, in this order), to prevent such issues. So when installing a SSL certificate on a server you should install all intermediate certificates as well. You should be able to fetch intermediate certificates from the issuer and concat them together by yourself.
This tool helps you automatize that boring task by looping over certificate's AIA extension field.
About Spatie
Spatie is a webdesign agency in Antwerp, Belgium. You'll find an overview of all our open source projects on our website.
License
The MIT License (MIT). Please see License File for more information.
All versions of ssl-certificate-chain-resolver with dependencies
guzzlehttp/guzzle Version ^7.4
illuminate/collections Version ^9.17
phpseclib/phpseclib Version ^3.0
symfony/console Version ^6.0.9|^7.0