SimpleSAML\XML\Signer Class Reference

Collaboration diagram for SimpleSAML\XML\Signer:

Public Member Functions
	__construct ($options=array())
	Constructor for the metadata signer. More...
	loadPrivateKeyArray ($privatekey)
	Set the private key from an array. More...
	loadPrivateKey ($file, $pass=null, $full_path=false)
	Set the private key. More...
	loadPublicKeyArray ($publickey)
	Set the public key / certificate we should include in the signature. More...
	loadCertificate ($file, $full_path=false)
	Set the certificate we should include in the signature. More...
	setIDAttribute ($idAttrName)
	Set the attribute name for the ID value. More...
	addCertificate ($file, $full_path=false)
	Add an extra certificate to the certificate chain in the signature. More...

Private Attributes
	$idAttrName = ''
	$privateKey = false
	$certificate = ''
	$extraCertificates = array()

Detailed Description

Definition at line 21 of file Signer.php.

Constructor & Destructor Documentation

__construct()

SimpleSAML\XML\Signer::__construct

(

$options = array()

)

Constructor for the metadata signer.

You can pass an list of options as key-value pairs in the array. This allows you to initialize a metadata signer in one call.

The following keys are recognized:

• privatekey The file with the private key, relative to the cert-directory.
• privatekey_pass The passphrase for the private key.
• certificate The file with the certificate, relative to the cert-directory.
• privatekey_array The private key, as an array returned from SimpleSAML_Utilities::loadPrivateKey.
• publickey_array The public key, as an array returned from SimpleSAML_Utilities::loadPublicKey.
• id The name of the ID attribute.

Parameters

array

$options

Associative array with options for the constructor. Defaults to an empty array.

Definition at line 61 of file Signer.php.

References PHPMailer\PHPMailer\$options, $pass, SimpleSAML\XML\Signer\loadCertificate(), SimpleSAML\XML\Signer\loadPrivateKey(), SimpleSAML\XML\Signer\loadPrivateKeyArray(), and SimpleSAML\XML\Signer\loadPublicKeyArray().

    {
        assert(is_array($options));

        if (array_key_exists('privatekey', $options)) {
            $pass = null;
            if (array_key_exists('privatekey_pass', $options)) {
                $pass = $options['privatekey_pass'];
            }

            $this->loadPrivateKey($options['privatekey'], $pass);
        }

        if (array_key_exists('certificate', $options)) {
            $this->loadCertificate($options['certificate']);
        }

        if (array_key_exists('privatekey_array', $options)) {
            $this->loadPrivateKeyArray($options['privatekey_array']);
        }

        if (array_key_exists('publickey_array', $options)) {
            $this->loadPublicKeyArray($options['publickey_array']);
        }

        if (array_key_exists('id', $options)) {
            $this->setIdAttribute($options['id']);
        }
    }

Here is the call graph for this function:

Member Function Documentation

addCertificate()

SimpleSAML\XML\Signer::addCertificate	(		$file,
			$full_path = false
	)

Add an extra certificate to the certificate chain in the signature.

Extra certificates will be added to the certificate chain in the order they are added.

Parameters

string	$file	The file which contains the certificate, relative to the cert-directory.
bool	$full_path	Whether the filename found in the configuration contains the full path to the private key or not. Default to false.

Exceptions

Definition at line 236 of file Signer.php.

References SimpleSAML\XML\Signer\$certificate, SimpleSAML\XML\Signer\$idAttrName, PHPMailer\PHPMailer\$options, RobRichards\XMLSecLibs\XMLSecurityDSig\EXC_C14N, SimpleSAML\Utils\Config\getCertPath(), and RobRichards\XMLSecLibs\XMLSecurityDSig\SHA256.

    {
        assert(is_string($file));
        assert(is_bool($full_path));

        if (!$full_path) {
            $certFile = Config::getCertPath($file);
        } else {
            $certFile = $file;
        }

        if (!file_exists($certFile)) {
            throw new \Exception('Could not find extra certificate file "' . $certFile . '".');
        }

        $certificate = file_get_contents($certFile);
        if ($certificate === false) {
            throw new \Exception('Unable to read extra certificate file "' . $certFile . '".');
        }

        $this->extraCertificates[] = $certificate;
    }

Here is the call graph for this function:

loadCertificate()

SimpleSAML\XML\Signer::loadCertificate	(		$file,
			$full_path = false
	)

Set the certificate we should include in the signature.

If this function isn't called, no certificate will be included. Will throw an exception if unable to load the certificate.

Parameters

string	$file	The file which contains the certificate. The path is assumed to be relative to the cert-directory.
bool	$full_path	Whether the filename found in the configuration contains the full path to the private key or not. Default to false.

Exceptions

Definition at line 189 of file Signer.php.

References SimpleSAML\Utils\Config\getCertPath().

Referenced by SimpleSAML\XML\Signer\__construct().

    {
        assert(is_string($file));
        assert(is_bool($full_path));

        if (!$full_path) {
            $certFile = Config::getCertPath($file);
        } else {
            $certFile = $file;
        }

        if (!file_exists($certFile)) {
            throw new \Exception('Could not find certificate file "' . $certFile . '".');
        }

        $cert = file_get_contents($certFile);
        if ($cert === false) {
            throw new \Exception('Unable to read certificate file "' . $certFile . '".');
        }
        $this->certificate = $cert;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

loadPrivateKey()

SimpleSAML\XML\Signer::loadPrivateKey	(		$file,
			$pass = null,
			$full_path = false
	)

Set the private key.

Will throw an exception if unable to load the private key.

Parameters

string	$file	The file which contains the private key. The path is assumed to be relative to the cert-directory.
string | null	$pass	The passphrase on the private key. Pass no value or NULL if the private key is unencrypted.
bool	$full_path	Whether the filename found in the configuration contains the full path to the private key or not. Default to false.

Exceptions

Definition at line 126 of file Signer.php.

References $pass, SimpleSAML\Utils\Config\getCertPath(), and SimpleSAML\XML\Signer\loadPrivateKeyArray().

Referenced by SimpleSAML\XML\Signer\__construct().

    {
        assert(is_string($file));
        assert(is_string($pass) || $pass === null);
        assert(is_bool($full_path));

        if (!$full_path) {
            $keyFile = Config::getCertPath($file);
        } else {
            $keyFile = $file;
        }

        if (!file_exists($keyFile)) {
            throw new \Exception('Could not find private key file "' . $keyFile . '".');
        }
        $keyData = file_get_contents($keyFile);
        if ($keyData === false) {
            throw new \Exception('Unable to read private key file "' . $keyFile . '".');
        }

        $privatekey = array('PEM' => $keyData);
        if ($pass !== null) {
            $privatekey['password'] = $pass;
        }
        $this->loadPrivateKeyArray($privatekey);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

loadPrivateKeyArray()

SimpleSAML\XML\Signer::loadPrivateKeyArray

(

$privatekey

)

Set the private key from an array.

This function loads the private key from an array matching what is returned by SimpleSAML_Utilities::loadPrivateKey(...).

Parameters

array

$privatekey

The private key.

Definition at line 100 of file Signer.php.

References RobRichards\XMLSecLibs\XMLSecurityKey\RSA_SHA256.

Referenced by SimpleSAML\XML\Signer\__construct(), and SimpleSAML\XML\Signer\loadPrivateKey().

    {
        assert(is_array($privatekey));
        assert(array_key_exists('PEM', $privatekey));

        $this->privateKey = new XMLSecurityKey(XMLSecurityKey::RSA_SHA256, array('type' => 'private'));
        if (array_key_exists('password', $privatekey)) {
            $this->privateKey->passphrase = $privatekey['password'];
        }
        $this->privateKey->loadKey($privatekey['PEM'], false);
    }

Here is the caller graph for this function:

loadPublicKeyArray()

SimpleSAML\XML\Signer::loadPublicKeyArray

(

$publickey

)

Set the public key / certificate we should include in the signature.

This function loads the public key from an array matching what is returned by SimpleSAML_Utilities::loadPublicKey(...).

Parameters

array

$publickey

The public key.

Exceptions

Definition at line 163 of file Signer.php.

Referenced by SimpleSAML\XML\Signer\__construct().

    {
        assert(is_array($publickey));

        if (!array_key_exists('PEM', $publickey)) {
            // We have a public key with only a fingerprint
            throw new \Exception('Tried to add a certificate fingerprint in a signature.');
        }

        // For now, we only assume that the public key is an X509 certificate
        $this->certificate = $publickey['PEM'];
    }

Here is the caller graph for this function:

setIDAttribute()

SimpleSAML\XML\Signer::setIDAttribute

(

$idAttrName

)

Set the attribute name for the ID value.

Parameters

string

$idAttrName

The name of the attribute which contains the id.

Definition at line 217 of file Signer.php.

References SimpleSAML\XML\Signer\$idAttrName.

    {
        assert(is_string($idAttrName));

        $this->idAttrName = $idAttrName;
    }

Field Documentation

$certificate

SimpleSAML\XML\Signer::$certificate = ''

private

Definition at line 36 of file Signer.php.

Referenced by SimpleSAML\XML\Signer\addCertificate().

$extraCertificates

SimpleSAML\XML\Signer::$extraCertificates = array()

private

Definition at line 42 of file Signer.php.

$idAttrName

SimpleSAML\XML\Signer::$idAttrName = ''

private

Definition at line 26 of file Signer.php.

Referenced by SimpleSAML\XML\Signer\addCertificate(), and SimpleSAML\XML\Signer\setIDAttribute().

$privateKey

SimpleSAML\XML\Signer::$privateKey = false

private

Definition at line 31 of file Signer.php.

---

The documentation for this class was generated from the following file:

• libs/composer/vendor/simplesamlphp/simplesamlphp/lib/SimpleSAML/XML/Signer.php