libresign/bkp/signer/lib/Handler/CfsslHandler.php

<?php

namespace OCA\Signer\Handler;

use GuzzleHttp\Client;
use OCA\Signer\Exception\SignerException;

class CfsslHandler
{
    public function generateCertificate(
        string $commonName,
        array $hosts,
        string $country,
        string $organization,
        string $organizationUnit,
        string $password
    ) {
        $certKeys = $this->newCert(
            $commonName,
            $hosts,
            $country,
            $organization,
            $organizationUnit
        );
        $certContent = null;
        $isCertGenerated = openssl_pkcs12_export($certKeys['certificate'], $certContent, $certKeys['private_key'], $password);
        if (!$isCertGenerated) {
            throw new SignerException('Error while creating certificate file', 500);
        }

        return $certContent;
    }

    private function newCert(
        string $commonName,
        array $hosts,
        string $country,
        string $organization,
        string $organizationUnit
    ) {
        $response = (new Client(['base_uri' => 'http://cfssl:8888/api/v1/cfssl/']))
            ->request('POST', 'newcert', [
                'json' => [
                    'profile' => 'CA',
                    'request' => [
                        'hosts' => $hosts,
                        'CN' => $commonName,
                        'key' => [
                            'algo' => 'rsa',
                            'size' => 2048,
                        ],
                        'names' => [
                            [
                                'C' => $country,
                                'O' => $organization,
                                'OU' => $organizationUnit,
                                'CN' => $commonName,
                            ],
                        ],
                    ],
                ],
            ]
        )
        ;

        $responseDecoded = json_decode($response->getBody(), true);
        if (!$responseDecoded['success']) {
            throw new SignerException('Error while generating certificate keys!', 500);
        }

        return $responseDecoded['result'];
    }
}