/**
* Initialize private key from PEM.
*
* @param PEM $pem
* @throws \UnexpectedValueException
* @return self
*/
public static function fromPEM(PEM $pem)
{
switch ($pem->type()) {
case PEM::TYPE_RSA_PRIVATE_KEY:
return RSAPrivateKey::fromDER($pem->data());
case PEM::TYPE_EC_PRIVATE_KEY:
return ECPrivateKey::fromDER($pem->data());
case PEM::TYPE_PRIVATE_KEY:
return PrivateKeyInfo::fromDER($pem->data())->privateKey();
}
throw new \UnexpectedValueException("PEM type " . $pem->type() . " is not a valid private key.");
}
/**
* Get private key.
*
* @throws \RuntimeException
* @return PrivateKey
*/
public function privateKey()
{
$algo = $this->algorithmIdentifier();
switch ($algo->oid()) {
// RSA
case AlgorithmIdentifier::OID_RSA_ENCRYPTION:
return RSAPrivateKey::fromDER($this->_privateKeyData);
// elliptic curve
// elliptic curve
case AlgorithmIdentifier::OID_EC_PUBLIC_KEY:
$pk = ECPrivateKey::fromDER($this->_privateKeyData);
// if private key doesn't encode named curve, assign from parameters
if (!$pk->hasNamedCurve()) {
if (!$algo instanceof ECPublicKeyAlgorithmIdentifier) {
throw new \UnexpectedValueException("Not an EC algorithm.");
}
$pk = $pk->withNamedCurve($algo->namedCurve());
}
return $pk;
}
throw new \RuntimeException("Private key " . $algo->oid() . " not supported.");
}