Crypto.php

<?php

declare(strict_types=1);

namespace App\Utils;

final readonly class Crypto
{
    public function generateSslCertificate(): string
    {
        if (!extension_loaded('openssl')) {
            throw new \RuntimeException('OpenSSL extension is required.');
        }

        $privateKey = openssl_pkey_new();
        $certSignRequest = openssl_csr_new([], $privateKey);
        $certificate = openssl_csr_sign($certSignRequest, null, $privateKey, 1);

        $tmpDir = sys_get_temp_dir();
        $privateKeyPath = tempnam($tmpDir, 'pkey');
        $certificatePath = tempnam($tmpDir, 'cert');

        if (!openssl_pkey_export_to_file($privateKey, $privateKeyPath, 'powercloud')) {
            throw new \RuntimeException('Private key generation failed: ' . openssl_error_string());
        }
        if (!openssl_x509_export_to_file($certificate, $certificatePath)) {
            throw new \RuntimeException('OpenSSL certificate generation failed: ' . openssl_error_string());
        }

        register_shutdown_function(static function () use ($privateKeyPath, $certificatePath): void {
            unlink($privateKeyPath);
            unlink($certificatePath);
        });

        return $certificatePath;
    }
}