adapik / cms Goto Github PK

abstract class OCSPRequest
{
	/*
	    https://tools.ietf.org/html/rfc5280
		OCSPRequest     ::=     SEQUENCE {
			tbsRequest                  TBSRequest,
			optionalSignature   [0]     EXPLICIT Signature OPTIONAL
		}
	*/
	const MAP = [
		'type'     => Identifier::SEQUENCE,
		'children' => [
			'tbsRequest'        => [ 'type' => TBSRequest::MAP ],
			'optionalSignature' => [
				'type'     => Signature::MAP,
				'optional' => true,
				'explicit' => true,
				'constant' => 0,
			],
		],
	];
}

abstract class TBSRequest
{
	/*
		TBSRequest      ::=     SEQUENCE {

		   version             [0]     EXPLICIT Version DEFAULT v1,
		   requestorName       [1]     EXPLICIT GeneralName OPTIONAL,
		   requestList                 SEQUENCE OF Request,
		   requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }

	 */
	const MAP = [
		'type'     => Identifier::SEQUENCE,
		'children' => [
			'version'           => [
				'type'     => Identifier::INTEGER,
				'constant' => 0,
				'optional' => true,
				'explicit' => true,
				'mapping'  => [ 'v1', 'v2', 'v3' ],
				'default'  => 'v1',
			],
			'requestorName'     => [
				'constant' => 1,
				'optional' => true,
				'explicit' => true,
			],
			'requestList'       => [
				'type' => Request::MAP,
			],
			'requestExtensions' => [
									   'constant' => 2,
									   'optional' => true,
									   'explicit' => true,
								   ] + Extensions::MAP,
		],
	];
}

abstract class Request
{
	/**
	 *    Request         ::=     SEQUENCE {
	 *        reqCert                     CertID,
	 *        singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL
	 *    }
	 */
	const MAP = [
		'type'     => Identifier::SEQUENCE,
		'children' => [
			'reqCert'                 => [ 'type' => CertID::MAP ],
			'singleRequestExtensions' => [
											 'constant' => 0,
											 'optional' => true,
											 'explicit' => true,
										 ] + Extensions::MAP,
		],
	];
}

abstract class CertID
{
	/**
	 *  CertID          ::=     SEQUENCE {
	 *        hashAlgorithm       AlgorithmIdentifier,
	 *        issuerNameHash      OCTET STRING, -- Hash of Issuer's DN
	 *        issuerKeyHash       OCTET STRING, -- Hash of Issuers public key
	 *      serialNumber        CertificateSerialNumber
	 *    }
	 */
	const MAP = [
		'type'     => Identifier::SEQUENCE,
		'children' => [
			'hashAlgorithm'  => [ 'type' => AlgorithmIdentifier::MAP ],
			'issuerNameHash' => [ 'type' => Identifier::OCTETSTRING ],
			'issuerKeyHash'  => [ 'type' => Identifier::OCTETSTRING ],
			'serialNumber'   => [ 'type' => CertificateSerialNumber::MAP ],

		],
	];
}

abstract class Signature
{
	/**
	 * Signature       ::=     SEQUENCE {
	 *        signatureAlgorithm   AlgorithmIdentifier,
	 *        signature            BIT STRING,
	 *        certs                [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL
	 * }
	 */
	const MAP = [
		'type'     => Identifier::SEQUENCE,
		'children' => [
			'signatureAlgorithm' => [ 'type' => AlgorithmIdentifier::MAP ],
			'signature'          => [ 'type' => Identifier::BITSTRING ],
			'certs'              => [
				'type'     => Certificate::MAP,
				'optional' => true,
				'explicit' => true,
				'constant' => 0,
			],

		],
	];
}