OCSPServer.php

<?php
error_reporting(E_ALL);
require('PKIX/OCSP/OCSPMessage.php');
require('PKIX/OCSP/Store.php');
//require_once('../PKIX/utils.php');

try {
	//  $storeCfg = array('basedir'	=> '/home/sova/proj/OCSP/data/store');
	$storeCfg = parse_ini_file('/usr/local/etc/OCSPServer.ini');

	$reqData = \PKIX\OCSP\Request::receive(array('GET', 'POST'));
	//  error_log ("main: rdata[".strlen($reqData)."] $reqData");
	$req = new \PKIX\OCSP\Request($reqData);
	/* DBG */
	//  error_log("req: ".var_export($req,true));
	$CertID = $req->getCertID();
	/* DBG */
	//  error_log("CertID: ".var_export($CertID,true));
	$store = new \OCSPServer\StoreFS($storeCfg);
	$respData = $store->getResp($CertID);
	$resp = new \PKIX\OCSP\Response($respData);
	//  $resp->setMaxAge(300);
	$cs = $resp->getCertStatus();
	//  error_log("certStatus:". var_export($cs, true));
	$resp->respond();

	exit;
} catch (\PKIX\OCSP\Exception $e) {
	logException($e);

	switch ($e->getCode()) {
		case \PKIX\OCSP\ERR_MALFORMED_ASN1:
		case \PKIX\OCSP\ERR_INTERNAL_ERROR:
		case \PKIX\OCSP\ERR_TRY_LATER:
		case \PKIX\OCSP\ERR_SIG_REQUIRED:
		case \PKIX\OCSP\ERR_UNAUTHORIZED:
			$r = \PKIX\OCSP\ExceptionResponse::createErrorResponse($e->getCode());
			break;

		case \PKIX\OCSP\ERR_REQLIST_EMPTY:
			$r = \PKIX\OCSP\ExceptionResponse::createErrorResponse(\PKIX\OCSP::ERR_MALFORMED_ASN1);
			break;

		case \PKIX\OCSP\ERR_SUCCESS:
			error_log("Caugth $e with status code " . $e->getCode()
				. "which should not happen! Check the code at "
				. $e->getFile() . ":" . $e->getLine());
		/* no break here - falling back to Internal Server Error */
		default:
			$r = new \PKIX\OCSP\InternalErrorResponse();
			break;
	}
	/* DBG */
	error_log("sending " . get_class($r));
	$r->respond();

} catch (\PKIX\ASN1\HTTPException $e) {
	logException($e);

	$c = $e->getCode();
	if ($c < 100 || $c > 599) {
		error_log(get_class($e) . " called with non HTTP error code $c! "
			. "Check the code at " . $e->getFile() . ":" . $e->getLine());
		$c = \PKIX\ASN1\HTTP_INTERNAL_SERVER_ERROR;
	}
	sendHTTPError($c);
} catch (\OCSPServer\Exception $e) {
	logException($e);

	switch ($e->getCode()) {
		case \OCSPServer\ERR_CONFIG_ERROR:
			$r = new \PKIX\OCSP\InternalErrorResponse ();
			break;
		case \OCSPServer\ERR_NOT_FOUND:
			$r = new \PKIX\OCSP\UnauthorizedResponse ();
			break;
		default:
			error_log(get_class($e) . " caught with unexpected code " . $e->getCode() . "! "
				. "Check the code at " . $e->getFile() . ":" . $e->getLine());
			$r = new \PKIX\OCSP\InternalErrorResponse ();
			break;
	}

	$r->respond();

} catch (Exception $e) {
	error_log("Oops! Caught by enexpected exception "
		. get_class($e) . ":[" . $e->getCode() . "] "
		. $e->getMessage() . " at " . $e->getFile() . ":" . $e->getLine() . "\n");
	$r = new \PKIX\OCSP\InternalErrorResponse();
	$r->respond();
}

/* utils */
function sendHTTPError($status) {
	//  header($e->getMessage(), 1, $e->getCode());
	header($_SERVER['SERVER_PROTOCOL'] . " $status");
}

function logException($e) {
	error_log("Caught " . get_class($e) . ":[" . $e->getCode() . "] "
		. $e->getMessage() . " at " . $e->getFile() . ":" . $e->getLine());
}