包简介

An SSL service for Laravel

README 文档

README

An SSL/TLS service and facade for Laravel. Capture peer certificates using 'openssl' or 'stream' drivers, or create your own driver.

Driver	Description
openssl	Executes the openssl command
stream	PHP's `stream_*()` functions
file	Parses local certificate files

Installation

Install the package via composer:

composer require jinomial/laravel-ssl

The default configuration is to use the openssl driver.

'openssl' => [
    'driver' => 'openssl',
],

Publish the config file to change the default driver:

php artisan vendor:publish --provider="Jinomial\LaravelSsl\SslServiceProvider" --tag="laravel-ssl-config"

Usage

Capture the certificate of jinomial.com:443 using the default driver:

use Jinomial\LaravelSsl\Facades\Ssl;

// Returns a CertificateCollection
$certificates = Ssl::show('google.com');

$cert = $certificates->first();

echo $cert->getCommonName(); // "google.com"
echo $cert->isValid() ? 'Valid' : 'Expired/Invalid';
echo $cert->getValidTo()->diffForHumans(); // "in 3 months"

Certificate Helper Methods

The Certificate DTO provides several helpful methods:

Method	Description
`isValid()`	Returns true if the cert is not expired and verification passed
`isExpired()`	Returns true if the current time is past the `validTo` date
`getCommonName()`	Get the Common Name (CN) from the subject
`getIssuerCommonName()`	Get the Common Name (CN) from the issuer
`getValidFrom()`	Returns a `Carbon` instance for the start date
`getValidTo()`	Returns a `Carbon` instance for the expiration date
`getSubjectAlternativeNames()`	Returns an array of SANs
`getHost()` / `getPort()`	The connection details used for this certificate

Advanced Usage

Multiple lookups at once:

$results = Ssl::show([
    ['host' => 'google.com', 'port' => '443'],
    ['host' => 'github.com', 'port' => '443'],
]);

// Find a specific result
$githubCert = $results->where('host', 'github.com')->first();

Use a specific driver:

$response = Ssl::driver('stream')->show('google.com', '443', [
    // Get the certificate only without the CA Chain.
    \Jinomial\LaravelSsl\Drivers\Stream::OPTION_CHAIN => false,
]);

The openssl driver executes the openssl binary (must be in your $PATH) to retrieve the X509 certificate.

Each response is indexed.

certificate is the return value from openssl_x509_parse().

verification contains the verification code and verification message.

Local File Driver

You can also parse local certificate files using the file driver. This is useful for checking certificates stored on disk.

use Jinomial\LaravelSsl\Facades\Ssl;

// Provide a path to a certificate file
$certificates = Ssl::driver('file')->show('/path/to/certificate.crt');

The id-ad-caIssuers property can be followed to get the issuer certificate:

$response = Ssl::show(
    'http://cacerts.digicert.com/CloudflareIncECCCA-3.crt',
    443,
    ['id-ad-caIssuers' => true]
);

stream driver responses

The stream driver uses PHP's stream_* functions and SSL context to capture entire peer certificate chains.

Each response is indexed. The subindex is the chain sequence with 0 being the host, 1 being the issuer (if not self signed), etc. Results are the return value from openssl_x509_parse().

Artisan Commands

Show Certificate

Show details for a specific host:

php artisan ssl:show google.com

Bulk SSL Check

Monitor multiple hosts at once. This command can check hosts provided as arguments or those configured in config/ssl.php.

# Check specific hosts
php artisan ssl:check google.com github.com

# Check all hosts configured in ssl.monitored_hosts
php artisan ssl:check

The command will output a table showing the status, common name, and expiration time for each host.

Custom Drivers

Create a class that extends Jinomial\LaravelSsl\Drivers\Driver.

Implement public function show() according to the Jinomial\LaravelSsl\Contracts\Ssl\Driver contract.

Register a driver factory with the Jinomial\LaravelSsl\SslManager.

    /**
     * Application service provider bootstrap for package services.
     *
     * \App\Ssl\Drivers\SslCapture is my custom driver class I made.
     * The SslManager needs to know how to construct it.
     */
    public function boot(): void
    {
        $sslLoader = $this->app->get(\Jinomial\LaravelSsl\SslManager::class);
        $driverName = 'my-custom-driver';
        $sslLoader->extend($driverName, function () use ($driverName) {
            return new \App\Ssl\Drivers\SslCapture($driverName);
        });
    }

Testing

Run all tests:

composer test

Test suites are separated into "unit" and "integration". Run each suite:

composer test:unit
composer test:integration

Tests are grouped into the following groups:

network
drivers
openssl
manager
facades
commands

Run tests for groups:

composer test -- --include=manager,facades

Network tests make remote calls that can take time or fail. Exclude them:

composer test:unit -- --exclude=network

Changelog

Please see CHANGELOG for more information on what has changed recently.

Contributing

Please see CONTRIBUTING for details.

Security Vulnerabilities

Please review our security policy on how to report security vulnerabilities.

Credits

Jason Schmedes

License

The MIT License (MIT). Please see License File for more information.

jinomial/laravel-ssl 适用场景与选型建议

jinomial/laravel-ssl 是一款基于 PHP 开发的 Composer 扩展包，目前已累计 19 次下载、GitHub Stars 达 2，最近一次更新时间为 2021 年 10 月 30 日，在 PHP 生态内属于活跃度较高的组件。

它主要适用于以下技术方向：「laravel」「ssl」「tls」「laravel-ssl」「jinomial」等业务场景。在实际项目中，围绕这些方向常见需要落地的问题包括：接口对接、性能调优、并发安全、与既有框架（Laravel / ThinkPHP / Yii / Webman 等）的兼容适配，以及生产环境的日志埋点与稳定性保障。

我们在过去多个企业项目中使用过 jinomial/laravel-ssl 或与其功能相近的方案，如果你在选型或落地过程中遇到问题，例如 版本兼容、二次改造、私有化封装、与内部系统对接、生产 BUG 排查，欢迎联系我们协助评估。

围绕 jinomial/laravel-ssl 我们能提供哪些服务？

定制开发 / 二次开发

基于 jinomial/laravel-ssl 在你已有业务上做功能扩展、字段裁剪、UI 适配、与内部账号 / 权限 / 日志系统的深度对接。

BUG 修复 & 性能优化

线上偶发问题、内存泄漏、慢查询、并发异常等排查修复；针对高流量场景做缓存、队列、索引层面的调优。

项目外包 & 长期维护

承接完整的项目从需求 → 设计 → 开发 → 上线 → 长期运维；也可按月提供技术保姆服务。

yvsm@zunyunkeji.com QQ：316430983 微信：yvsm316 西安尊云信息科技 · 专注 PHP / Go / 分布式系统研发

与 jinomial/laravel-ssl 相关的其它包

同方向 / 同关键字的高下载量 PHP Composer 包推荐，方便对比选型：

maurohmartinez/impersonate-users-backpack-laravel 11

A simple package that adds the impersonate operation for admins

originphp/socket 1

OriginPHP Socket

kelunik/acme-client 396

Let's Encrypt / ACME client written in PHP for the CLI.

rickmacgillis/sftp-and-ftp-client 2

A flexible FTP, SSL-FTP, and SSH-based SFTP client for PHP. This lib provides helpers that are easy to use to manage the remote files.

detain/myadmin-ssl-module 4

SSL Certificates Module for MyAdmin

php-standard-library/tls 0

Transport-agnostic TLS encryption for any connected stream

jinomial/laravel-ssl

包简介

关键字：