Installation¶
The library is distributed on Packagist; the source lives on GitHub.
There is no bundle, no configuration file and no service to register. Every class is constructed through
a static factory — create(), fromPEM(), fromDER(), fromASN1() — and nothing is read from the
environment.
use SpomkyLabs\Pki\CryptoEncoding\PEM;
use SpomkyLabs\Pki\X509\Certificate\Certificate;
require 'vendor/autoload.php';
$certificate = Certificate::fromPEM(PEM::fromFile('server.crt'));
Everything lives under the SpomkyLabs\Pki namespace, autoloaded with PSR-4 from src/.
Versions¶
A release line is named 1.x, maintained on a branch named 1.x.x. Only the latest stable line
receives fixes, security fixes included, and nothing is backported to an older one: upgrade before you
report a problem. The lines currently maintained are listed in
SECURITY.md.
This documentation is published once per maintained line. The version selector in the header of the site switches between them, and the root of the site leads to the newest one.
Reporting a vulnerability¶
Do not open a public issue, pull request or discussion for a security problem. Report it privately,
either through
GitHub private vulnerability reporting
or by email to security AT spomky-labs.com. What a report should contain, and what happens next, are in
the security policy.