composer/ca-bundle

Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.

1.5.4 2024-11-27 15:35 UTC

Requires

• php: ^7.2 || ^8.0
• ext-openssl: *
• ext-pcre: *

Requires (Dev)

• phpstan/phpstan: ^1.10
• phpunit/phpunit: ^8 || ^9
• psr/log: ^1.0 || ^2.0 || ^3.0
• symfony/process: ^4.0 || ^5.0 || ^6.0 || ^7.0

MIT

• Jordi Boggiano

• ssl
• tls
• certificate
• cabundle
• cacert

README

Small utility library that lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.

Originally written as part of composer/composer, now extracted and made available as a stand-alone library.

Installation

Install the latest version with:

$ composer require composer/ca-bundle

Requirements

• PHP 5.3.2 is required but using the latest version of PHP is highly recommended.

Basic usage

Composer\CaBundle\CaBundle

• CaBundle::getSystemCaRootBundlePath(): Returns the system CA bundle path, or a path to the bundled one as fallback
• CaBundle::getBundledCaBundlePath(): Returns the path to the bundled CA file
• CaBundle::validateCaFile($filename): Validates a CA file using openssl_x509_parse only if it is safe to use
• CaBundle::isOpensslParseSafe(): Test if it is safe to use the PHP function openssl_x509_parse()
• CaBundle::reset(): Resets the static caches

To use with curl

$curl = curl_init("https://example.org/");

$caPathOrFile = \Composer\CaBundle\CaBundle::getSystemCaRootBundlePath();
if (is_dir($caPathOrFile)) {
    curl_setopt($curl, CURLOPT_CAPATH, $caPathOrFile);
} else {
    curl_setopt($curl, CURLOPT_CAINFO, $caPathOrFile);
}

$result = curl_exec($curl);

To use with php streams

$opts = array(
    'http' => array(
        'method' => "GET"
    )
);

$caPathOrFile = \Composer\CaBundle\CaBundle::getSystemCaRootBundlePath();
if (is_dir($caPathOrFile)) {
    $opts['ssl']['capath'] = $caPathOrFile;
} else {
    $opts['ssl']['cafile'] = $caPathOrFile;
}

$context = stream_context_create($opts);
$result = file_get_contents('https://example.com', false, $context);

To use with Guzzle

$client = new \GuzzleHttp\Client([
    \GuzzleHttp\RequestOptions::VERIFY => \Composer\CaBundle\CaBundle::getSystemCaRootBundlePath()
]);

License

composer/ca-bundle is licensed under the MIT License, see the LICENSE file for details.