{

// Determine ANSI output from --ansi and --no-ansi flags

setUseAnsi($argv);

if (in_array('--help', $argv)) {

displayHelp();

exit(0);

}

$check = in_array('--check', $argv);

$help = in_array('--help', $argv);

$force = in_array('--force', $argv);

$quiet = in_array('--quiet', $argv);

$channel = in_array('--snapshot', $argv) ? 'snapshot' : (in_array('--preview', $argv) ? 'preview' : 'stable');

$disableTls = in_array('--disable-tls', $argv);

$installDir = getOptValue('--install-dir', $argv, false);

$version = getOptValue('--version', $argv, false);

$filename = getOptValue('--filename', $argv, 'composer.phar');

$cafile = getOptValue('--cafile', $argv, false);

if (!checkParams($installDir, $version, $cafile)) {

exit(1);

}

$ok = checkPlatform($quiet, $disableTls);

if (true === $disableTls) {

out("You have instructed the Installer not to enforce SSL/TLS security on remote HTTPS requests.", 'info');

out("This will leave all downloads during installation vulnerable to Man-In-The-Middle (MITM) attacks.", 'info');

}

if ($check) {

exit($ok ? 0 : 1);

}

if ($ok || $force) {

installComposer($version, $installDir, $filename, $quiet, $disableTls, $cafile, $channel);

exit(0);

}

exit(1);

{

echo <<<EOF

Composer Installer

------------------

Options

--help this help

--check for checking environment only

--force forces the installation

--ansi force ANSI color output

--no-ansi disable ANSI color output

--quiet do not output unimportant messages

--install-dir="..." accepts a target installation directory

--preview install the latest version from the preview (alpha/beta/rc) channel instead of stable

--snapshot install the latest version from the snapshot (dev builds) channel instead of stable

--version="..." accepts a specific version to install instead of the latest

--filename="..." accepts a target filename (default: composer.phar)

--disable-tls disable SSL/TLS security for file downloads

--cafile="..." accepts a path to a Certificate Authority (CA) certificate file for SSL/TLS verification

EOF;

{

// --no-ansi wins over --ansi

if (in_array('--no-ansi', $argv)) {

define('USE_ANSI', false);

} elseif (in_array('--ansi', $argv)) {

define('USE_ANSI', true);

} else {

// On Windows, default to no ANSI, except in ANSICON and ConEmu.

// Everywhere else, default to ANSI if stdout is a terminal.

define(

'USE_ANSI',

(DIRECTORY_SEPARATOR == '\\')

? (false !== getenv('ANSICON') || 'ON' === getenv('ConEmuANSI'))

: (function_exists('posix_isatty') && posix_isatty(1))

);

}

{

$optLength = strlen($opt);

foreach ($argv as $key => $value) {

$next = $key + 1;

if (0 === strpos($value, $opt)) {

if ($optLength === strlen($value) && isset($argv[$next])) {

return trim($argv[$next]);

} else {

return trim(substr($value, $optLength + 1));

}

}

}

return $default;

{

$result = true;

if (false !== $installDir && !is_dir($installDir)) {

out("The defined install dir ({$installDir}) does not exist.", 'info');

$result = false;

}

if (false !== $version && 1 !== preg_match('/^\d+\.\d+\.\d+(\-(alpha|beta)\d+)*$/', $version)) {

out("The defined install version ({$version}) does not match release pattern.", 'info');

$result = false;

}

if (false !== $cafile && (!file_exists($cafile) || !is_readable($cafile))) {

out("The defined Certificate Authority (CA) cert file ({$cafile}) does not exist or is not readable.", 'info');

$result = false;

}

return $result;

{

$errors = array();

$warnings = array();

$iniPath = php_ini_loaded_file();

$displayIniMessage = false;

if ($iniPath) {

$iniMessage = PHP_EOL.PHP_EOL.'The php.ini used by your command-line PHP is: ' . $iniPath;

} else {

$iniMessage = PHP_EOL.PHP_EOL.'A php.ini file does not exist. You will have to create one.';

}

$iniMessage .= PHP_EOL.'If you can not modify the ini file, you can also run `php -d option=value` to modify ini values on the fly. You can use -d multiple times.';

if (ini_get('detect_unicode')) {

$errors['unicode'] = 'On';

}

if (extension_loaded('suhosin')) {

$suhosin = ini_get('suhosin.executor.include.whitelist');

$suhosinBlacklist = ini_get('suhosin.executor.include.blacklist');

if (false === stripos($suhosin, 'phar') && (!$suhosinBlacklist || false !== stripos($suhosinBlacklist, 'phar'))) {

$errors['suhosin'] = $suhosin;

}

}

if (!function_exists('json_decode')) {

$errors['json'] = true;

}

if (!extension_loaded('Phar')) {

$errors['phar'] = true;

}

if (!extension_loaded('filter')) {

$errors['filter'] = true;

}

if (!extension_loaded('hash')) {

$errors['hash'] = true;

}

if (!extension_loaded('iconv') && !extension_loaded('mbstring')) {

$errors['iconv_mbstring'] = true;

}

if (!ini_get('allow_url_fopen')) {

$errors['allow_url_fopen'] = true;

}

if (extension_loaded('ionCube Loader') && ioncube_loader_iversion() < 40009) {

$errors['ioncube'] = ioncube_loader_version();

}

if (version_compare(PHP_VERSION, '5.3.2', '<')) {

$errors['php'] = PHP_VERSION;

}

if (version_compare(PHP_VERSION, '5.3.4', '<')) {

$warnings['php'] = PHP_VERSION;

}

if (!extension_loaded('openssl') && true === $disableTls) {

$warnings['openssl'] = true;

} elseif (!extension_loaded('openssl')) {

$errors['openssl'] = true;

}

if (extension_loaded('openssl') && OPENSSL_VERSION_NUMBER < 0x1000100f) {

$warnings['openssl_version'] = true;

}

if (!defined('HHVM_VERSION') && !extension_loaded('apcu') && ini_get('apc.enable_cli')) {

$warnings['apc_cli'] = true;

}

ob_start();

phpinfo(INFO_GENERAL);

$phpinfo = ob_get_clean();

if (preg_match('{Configure Command(?: *</td><td class="v">| *=> *)(.*?)(?:</td>|$)}m', $phpinfo, $match)) {

$configure = $match[1];

if (false !== strpos($configure, '--enable-sigchild')) {

$warnings['sigchild'] = true;

}

if (false !== strpos($configure, '--with-curlwrappers')) {

$warnings['curlwrappers'] = true;

}

}

if (!empty($errors)) {

out("Some settings on your machine make Composer unable to work properly.", 'error');

out('Make sure that you fix the issues listed below and run this script again:', 'error');

foreach ($errors as $error => $current) {

switch ($error) {

case 'json':

$text = PHP_EOL."The json extension is missing.".PHP_EOL;

$text .= "Install it or recompile php without --disable-json";

break;

case 'phar':

$text = PHP_EOL."The phar extension is missing.".PHP_EOL;

$text .= "Install it or recompile php without --disable-phar";

break;

case 'filter':

$text = PHP_EOL."The filter extension is missing.".PHP_EOL;

$text .= "Install it or recompile php without --disable-filter";

break;

case 'hash':

$text = PHP_EOL."The hash extension is missing.".PHP_EOL;

$text .= "Install it or recompile php without --disable-hash";

break;

case 'iconv_mbstring':

$text = PHP_EOL."The iconv OR mbstring extension is required and both are missing.".PHP_EOL;

$text .= "Install either of them or recompile php without --disable-iconv";

break;

case 'unicode':

$text = PHP_EOL."The detect_unicode setting must be disabled.".PHP_EOL;

$text .= "Add the following to the end of your `php.ini`:".PHP_EOL;

$text .= " detect_unicode = Off";

$displayIniMessage = true;

break;

case 'suhosin':

$text = PHP_EOL."The suhosin.executor.include.whitelist setting is incorrect.".PHP_EOL;

$text .= "Add the following to the end of your `php.ini` or suhosin.ini (Example path [for Debian]: /etc/php5/cli/conf.d/suhosin.ini):".PHP_EOL;

$text .= " suhosin.executor.include.whitelist = phar ".$current;

$displayIniMessage = true;

break;

case 'php':

$text = PHP_EOL."Your PHP ({$current}) is too old, you must upgrade to PHP 5.3.2 or higher.";

break;

case 'allow_url_fopen':

$text = PHP_EOL."The allow_url_fopen setting is incorrect.".PHP_EOL;

$text .= "Add the following to the end of your `php.ini`:".PHP_EOL;

$text .= " allow_url_fopen = On";

$displayIniMessage = true;

break;

case 'ioncube':

$text = PHP_EOL."Your ionCube Loader extension ($current) is incompatible with Phar files.".PHP_EOL;

$text .= "Upgrade to ionCube 4.0.9 or higher or remove this line (path may be different) from your `php.ini` to disable it:".PHP_EOL;

$text .= " zend_extension = /usr/lib/php5/20090626+lfs/ioncube_loader_lin_5.3.so";

$displayIniMessage = true;

break;

case 'openssl':

$text = PHP_EOL."The openssl extension is missing, which means that secure HTTPS transfers are impossible.".PHP_EOL;

$text .= "If possible you should enable it or recompile php with --with-openssl";

break;

}

if ($displayIniMessage) {

$text .= $iniMessage;

}

out($text, 'info');

}

out('');

return false;

}

if (!empty($warnings)) {

out("Some settings on your machine may cause stability issues with Composer.", 'error');

out('If you encounter issues, try to change the following:', 'error');

foreach ($warnings as $warning => $current) {

switch ($warning) {

case 'apc_cli':

$text = PHP_EOL."The apc.enable_cli setting is incorrect.".PHP_EOL;

$text .= "Add the following to the end of your `php.ini`:".PHP_EOL;

$text .= " apc.enable_cli = Off";

$displayIniMessage = true;

break;

case 'sigchild':

$text = PHP_EOL."PHP was compiled with --enable-sigchild which can cause issues on some platforms.".PHP_EOL;

$text .= "Recompile it without this flag if possible, see also:".PHP_EOL;

$text .= " https://bugs.php.net/bug.php?id=22999";

break;

case 'curlwrappers':

$text = PHP_EOL."PHP was compiled with --with-curlwrappers which will cause issues with HTTP authentication and GitHub.".PHP_EOL;

$text .= "Recompile it without this flag if possible";

break;

case 'openssl':

$text = PHP_EOL."The openssl extension is missing, which means that secure HTTPS transfers are impossible.".PHP_EOL;

$text .= "If possible you should enable it or recompile php with --with-openssl";

break;

case 'openssl_version':

// Attempt to parse version number out, fallback to whole string value.

$opensslVersion = trim(strstr(OPENSSL_VERSION_TEXT, ' '));

$opensslVersion = substr($opensslVersion, 0, strpos($opensslVersion, ' '));

$opensslVersion = $opensslVersion ? $opensslVersion : OPENSSL_VERSION_TEXT;

$text = PHP_EOL."The OpenSSL library ({$opensslVersion}) used by PHP does not support TLSv1.2 or TLSv1.1.".PHP_EOL;

$text .= "If possible you should upgrade OpenSSL to version 1.0.1 or above.";

break;

case 'php':

$text = PHP_EOL."Your PHP ({$current}) is quite old, upgrading to PHP 5.3.4 or higher is recommended.".PHP_EOL;

$text .= "Composer works with 5.3.2+ for most people, but there might be edge case issues.";

break;

}

if ($displayIniMessage) {

$text .= $iniMessage;

}

out($text, 'info');

}

out('');

return true;

}

if (!$quiet) {

out("All settings correct for using Composer", 'success');

}

return true;

{

$installPath = (is_dir($installDir) ? rtrim($installDir, '/').'/' : '') . $filename;

$installDir = realpath($installDir) ? realpath($installDir) : getcwd();

$file = $installDir.DIRECTORY_SEPARATOR.$filename;

if (is_readable($file)) {

@unlink($file);

}

$home = getHomeDir();

file_put_contents($home.'/keys.dev.pub', <<<DEVPUBKEY

-----BEGIN PUBLIC KEY-----

MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnBDHjZS6e0ZMoK3xTD7f

FNCzlXjX/Aie2dit8QXA03pSrOTbaMnxON3hUL47Lz3g1SC6YJEMVHr0zYq4elWi

i3ecFEgzLcj+pZM5X6qWu2Ozz4vWx3JYo1/a/HYdOuW9e3lwS8VtS0AVJA+U8X0A

hZnBmGpltHhO8hPKHgkJtkTUxCheTcbqn4wGHl8Z2SediDcPTLwqezWKUfrYzu1f

o/j3WFwFs6GtK4wdYtiXr+yspBZHO3y1udf8eFFGcb2V3EaLOrtfur6XQVizjOuk

8lw5zzse1Qp/klHqbDRsjSzJ6iL6F4aynBc6Euqt/8ccNAIz0rLjLhOraeyj4eNn

8iokwMKiXpcrQLTKH+RH1JCuOVxQ436bJwbSsp1VwiqftPQieN+tzqy+EiHJJmGf

TBAbWcncicCk9q2md+AmhNbvHO4PWbbz9TzC7HJb460jyWeuMEvw3gNIpEo2jYa9

pMV6cVqnSa+wOc0D7pC9a6bne0bvLcm3S+w6I5iDB3lZsb3A9UtRiSP7aGSo7D72

8tC8+cIgZcI7k9vjvOqH+d7sdOU2yPCnRY6wFh62/g8bDnUpr56nZN1G89GwM4d4

r/TU7BQQIzsZgAiqOGXvVklIgAMiV0iucgf3rNBLjjeNEwNSTTG9F0CtQ+7JLwaE

wSEuAuRm+pRqi8BRnQ/GKUcCAwEAAQ==

-----END PUBLIC KEY-----

DEVPUBKEY

);

file_put_contents($home.'/keys.tags.pub', <<<TAGSPUBKEY

-----BEGIN PUBLIC KEY-----

MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Vi/2K6apCVj76nCnCl2

MQUPdK+A9eqkYBacXo2wQBYmyVlXm2/n/ZsX6pCLYPQTHyr5jXbkQzBw8SKqPdlh

vA7NpbMeNCz7wP/AobvUXM8xQuXKbMDTY2uZ4O7sM+PfGbptKPBGLe8Z8d2sUnTO

bXtX6Lrj13wkRto7st/w/Yp33RHe9SlqkiiS4MsH1jBkcIkEHsRaveZzedUaxY0M

mba0uPhGUInpPzEHwrYqBBEtWvP97t2vtfx8I5qv28kh0Y6t+jnjL1Urid2iuQZf

noCMFIOu4vksK5HxJxxrN0GOmGmwVQjOOtxkwikNiotZGPR4KsVj8NnBrLX7oGuM

nQvGciiu+KoC2r3HDBrpDeBVdOWxDzT5R4iI0KoLzFh2pKqwbY+obNPS2bj+2dgJ

rV3V5Jjry42QOCBN3c88wU1PKftOLj2ECpewY6vnE478IipiEu7EAdK8Zwj2LmTr

RKQUSa9k7ggBkYZWAeO/2Ag0ey3g2bg7eqk+sHEq5ynIXd5lhv6tC5PBdHlWipDK

tl2IxiEnejnOmAzGVivE1YGduYBjN+mjxDVy8KGBrjnz1JPgAvgdwJ2dYw4Rsc/e

TzCFWGk/HM6a4f0IzBWbJ5ot0PIi4amk07IotBXDWwqDiQTwyuGCym5EqWQ2BD95

RGv89BPD+2DLnJysngsvVaUCAwEAAQ==

-----END PUBLIC KEY-----

TAGSPUBKEY

);

if (false === $disableTls && empty($cafile) && !HttpClient::getSystemCaRootBundlePath()) {

$errorHandler = new ErrorHandler();

set_error_handler(array($errorHandler, 'handleError'));

$target = $home . '/cacert.pem';

$write = file_put_contents($target, HttpClient::getPackagedCaFile(), LOCK_EX);

@chmod($target, 0644);

restore_error_handler();

if (!$write) {

throw new RuntimeException('Unable to write bundled cacert.pem to: '.$target);

}

$cafile = $target;

}

$httpClient = new HttpClient($disableTls, $cafile);

$uriScheme = false === $disableTls ? 'https' : 'http';

if (!$version) {

$versions = json_decode($httpClient->get($uriScheme . '://getcomposer.org/versions'), true);

foreach ($versions[$channel] as $candidate) {

if ($candidate['min-php'] <= PHP_VERSION_ID) {

$version = $candidate['version'];

$downloadUrl = $candidate['path'];

break;

}

}

if (!$version) {

throw new RuntimeException('There is no version of Composer available for your PHP version ('.PHP_VERSION.')');

}

} else {

$downloadUrl = "/download/{$version}/composer.phar";

}

$retries = 3;

while ($retries--) {

if (!$quiet) {

out("Downloading $version...", 'info');

}

$url = "{$uriScheme}://getcomposer.org{$downloadUrl}";

$errorHandler = new ErrorHandler();

set_error_handler(array($errorHandler, 'handleError'));

// download signature file

if (false === $disableTls) {

$signature = $httpClient->get($url.'.sig');

if (!$signature) {

out('Download failed: '.$errorHandler->message, 'error');

} else {

$signature = json_decode($signature, true);

$signature = base64_decode($signature['sha384']);

}

}

$fh = fopen($file, 'w');

if (!$fh) {

out('Could not create file '.$file.': '.$errorHandler->message, 'error');

}

if (!fwrite($fh, $httpClient->get($url))) {

out('Download failed: '.$errorHandler->message, 'error');

}

fclose($fh);

restore_error_handler();

if ($errorHandler->message) {

continue;

}

try {

// create a temp file ending in .phar since the Phar class only accepts that

if ('.phar' !== substr($file, -5)) {

copy($file, $file.'.tmp.phar');

$pharFile = $file.'.tmp.phar';

} else {

$pharFile = $file;

}

// verify signature

if (false === $disableTls) {

$pubkeyid = openssl_pkey_get_public('file://'.$home.'/' . (preg_match('{^[0-9a-f]{40}$}', $version) ? 'keys.dev.pub' : 'keys.tags.pub'));

$algo = defined('OPENSSL_ALGO_SHA384') ? OPENSSL_ALGO_SHA384 : 'SHA384';

if (!in_array('SHA384', openssl_get_md_methods())) {

out('SHA384 is not supported by your openssl extension, could not verify the phar file integrity', 'error');

exit(1);

}

$verified = 1 === openssl_verify(file_get_contents($file), $signature, $pubkeyid, $algo);

openssl_free_key($pubkeyid);

if (!$verified) {

out('Signature mismatch, could not verify the phar file integrity', 'error');

exit(1);

}

}

// test the phar validity

if (!ini_get('phar.readonly')) {

$phar = new Phar($pharFile);

// free the variable to unlock the file

unset($phar);

}

// clean up temp file if needed

if ($file !== $pharFile) {

unlink($pharFile);

}

break;

} catch (Exception $e) {

if (!$e instanceof UnexpectedValueException && !$e instanceof PharException) {

throw $e;

}

// clean up temp file if needed

if ($file !== $pharFile) {

unlink($pharFile);

}

unlink($file);

if ($retries) {

if (!$quiet) {

out('The download is corrupt, retrying...', 'error');

}

} else {

out('The download is corrupt ('.$e->getMessage().'), aborting.', 'error');

exit(1);

}

}

}

if ($errorHandler->message) {

out('The download failed repeatedly, aborting.', 'error');

exit(1);

}

chmod($file, 0755);

if (!$quiet) {

out(PHP_EOL."Composer successfully installed to: " . $file, 'success', false);

out(PHP_EOL."Use it: php $installPath", 'info');

}

{

$styles = array(

'success' => "\033[0;32m%s\033[0m",

'error' => "\033[31;31m%s\033[0m",

'info' => "\033[33;33m%s\033[0m"

);

$format = '%s';

if (isset($styles[$color]) && USE_ANSI) {

$format = $styles[$color];

}

if ($newLine) {

$format .= PHP_EOL;

}

printf($format, $text);

{

$home = getenv('COMPOSER_HOME');

if (!$home) {

if (defined('PHP_WINDOWS_VERSION_MAJOR')) {

if (!getenv('APPDATA')) {

throw new RuntimeException('The APPDATA or COMPOSER_HOME environment variable must be set for composer to install correctly');

}

$home = strtr(getenv('APPDATA'), '\\', '/') . '/Composer';

} else {

if (!getenv('HOME')) {

throw new RuntimeException('The HOME or COMPOSER_HOME environment variable must be set for composer to install correctly');

}

$home = rtrim(getenv('HOME'), '/') . '/.composer';

}

}

if (!is_dir($home)) {

@mkdir($home, 0777, true);

}

return $home;

{

// assume the CA is valid if php is vulnerable to

// https://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html

if (

PHP_VERSION_ID <= 50327

|| (PHP_VERSION_ID >= 50400 && PHP_VERSION_ID < 50422)

|| (PHP_VERSION_ID >= 50500 && PHP_VERSION_ID < 50506)

) {

return !empty($contents);

}

return (bool) openssl_x509_parse($contents);

{

public $message = '';

public function handleError($code, $msg)

{

if ($this->message) {

$this->message .= "\n";

}

$this->message .= preg_replace('{^copy\(.*?\): }', '', $msg);

}

private $options = array('http' => array());

private $disableTls = false;

public function __construct($disableTls = false, $cafile = false)

{

$this->disableTls = $disableTls;

if ($this->disableTls === false) {

if (!empty($cafile) && !is_dir($cafile)) {

if (!is_readable($cafile) || !validateCaFile(file_get_contents($cafile))) {

throw new RuntimeException('The configured cafile (' .$cafile. ') was not valid or could not be read.');

}

}

$options = $this->getTlsStreamContextDefaults($cafile);

$this->options = array_replace_recursive($this->options, $options);

}

}

public function get($url)

{

$context = $this->getStreamContext($url);

$result = file_get_contents($url, null, $context);

if ($result && extension_loaded('zlib')) {

$decode = false;

foreach ($http_response_header as $header) {

if (preg_match('{^content-encoding: *gzip *$}i', $header)) {

$decode = true;

continue;

} elseif (preg_match('{^HTTP/}i', $header)) {

$decode = false;

}

}

if ($decode) {

if (version_compare(PHP_VERSION, '5.4.0', '>=')) {

$result = zlib_decode($result);

} else {

// work around issue with gzuncompress & co that do not work with all gzip checksums

$result = file_get_contents('compress.zlib://data:application/octet-stream;base64,'.base64_encode($result));

}

if (!$result) {

throw new RuntimeException('Failed to decode zlib stream');

}

}

}

return $result;

}

protected function getStreamContext($url)

{

if ($this->disableTls === false) {

$host = parse_url($url, PHP_URL_HOST);

if (PHP_VERSION_ID < 50600) {

$this->options['ssl']['CN_match'] = $host;

$this->options['ssl']['SNI_server_name'] = $host;

}

}

// Keeping the above mostly isolated from the code copied from Composer.

return $this->getMergedStreamContext($url);

}

protected function getTlsStreamContextDefaults($cafile)

{

$ciphers = implode(':', array(

'ECDHE-RSA-AES128-GCM-SHA256',

'ECDHE-ECDSA-AES128-GCM-SHA256',

'ECDHE-RSA-AES256-GCM-SHA384',

'ECDHE-ECDSA-AES256-GCM-SHA384',

'DHE-RSA-AES128-GCM-SHA256',

'DHE-DSS-AES128-GCM-SHA256',

'kEDH+AESGCM',

'ECDHE-RSA-AES128-SHA256',

'ECDHE-ECDSA-AES128-SHA256',

'ECDHE-RSA-AES128-SHA',

'ECDHE-ECDSA-AES128-SHA',

'ECDHE-RSA-AES256-SHA384',

'ECDHE-ECDSA-AES256-SHA384',

'ECDHE-RSA-AES256-SHA',

'ECDHE-ECDSA-AES256-SHA',

'DHE-RSA-AES128-SHA256',

'DHE-RSA-AES128-SHA',

'DHE-DSS-AES128-SHA256',

'DHE-RSA-AES256-SHA256',

'DHE-DSS-AES256-SHA',

'DHE-RSA-AES256-SHA',

'AES128-GCM-SHA256',

'AES256-GCM-SHA384',

'ECDHE-RSA-RC4-SHA',

'ECDHE-ECDSA-RC4-SHA',

'AES128',

'AES256',

'RC4-SHA',

'HIGH',

'!aNULL',

'!eNULL',

'!EXPORT',

'!DES',

'!3DES',

'!MD5',

'!PSK'

));

/**

* CN_match and SNI_server_name are only known once a URL is passed.

* They will be set in the getOptionsForUrl() method which receives a URL.

*

* cafile or capath can be overridden by passing in those options to constructor.

*/

$options = array(

'ssl' => array(

'ciphers' => $ciphers,

'verify_peer' => true,

'verify_depth' => 7,

'SNI_enabled' => true,

)

);

/**

* Attempt to find a local cafile or throw an exception.

* The user may go download one if this occurs.

*/

if (!$cafile) {

$cafile = self::getSystemCaRootBundlePath();

}

if (is_dir($cafile)) {

$options['ssl']['capath'] = $cafile;

} elseif ($cafile) {

$options['ssl']['cafile'] = $cafile;

} else {

throw new RuntimeException('A valid cafile could not be located automatically.');

}

/**

* Disable TLS compression to prevent CRIME attacks where supported.

*/

if (version_compare(PHP_VERSION, '5.4.13') >= 0) {

$options['ssl']['disable_compression'] = true;

}

return $options;

}

/**

* function copied from Composer\Util\StreamContextFactory::getContext

*

* Any changes should be applied there as well, or backported here.

*

* @param string $url URL the context is to be used for

* @return resource Default context

* @throws \RuntimeException if https proxy required and OpenSSL uninstalled

*/

protected function getMergedStreamContext($url)

{

$options = $this->options;

// Handle system proxy

if (!empty($_SERVER['HTTP_PROXY']) || !empty($_SERVER['http_proxy'])) {

// Some systems seem to rely on a lowercased version instead...

$proxy = parse_url(!empty($_SERVER['http_proxy']) ? $_SERVER['http_proxy'] : $_SERVER['HTTP_PROXY']);

}

if (!empty($proxy)) {

$proxyURL = isset($proxy['scheme']) ? $proxy['scheme'] . '://' : '';

$proxyURL .= isset($proxy['host']) ? $proxy['host'] : '';

if (isset($proxy['port'])) {

$proxyURL .= ":" . $proxy['port'];

} elseif ('http://' == substr($proxyURL, 0, 7)) {

$proxyURL .= ":80";

} elseif ('https://' == substr($proxyURL, 0, 8)) {

$proxyURL .= ":443";

}

// http(s):// is not supported in proxy

$proxyURL = str_replace(array('http://', 'https://'), array('tcp://', 'ssl://'), $proxyURL);

if (0 === strpos($proxyURL, 'ssl:') && !extension_loaded('openssl')) {

throw new RuntimeException('You must enable the openssl extension to use a proxy over https');

}

$options['http'] = array(

'proxy' => $proxyURL,

);

// enabled request_fulluri unless it is explicitly disabled

switch (parse_url($url, PHP_URL_SCHEME)) {

case 'http': // default request_fulluri to true

$reqFullUriEnv = getenv('HTTP_PROXY_REQUEST_FULLURI');

if ($reqFullUriEnv === false || $reqFullUriEnv === '' || (strtolower($reqFullUriEnv) !== 'false' && (bool) $reqFullUriEnv)) {

$options['http']['request_fulluri'] = true;

}

break;

case 'https': // default request_fulluri to true

$reqFullUriEnv = getenv('HTTPS_PROXY_REQUEST_FULLURI');

if ($reqFullUriEnv === false || $reqFullUriEnv === '' || (strtolower($reqFullUriEnv) !== 'false' && (bool) $reqFullUriEnv)) {

$options['http']['request_fulluri'] = true;

}

break;

}

if (isset($proxy['user'])) {

$auth = urldecode($proxy['user']);

if (isset($proxy['pass'])) {

$auth .= ':' . urldecode($proxy['pass']);

}

$auth = base64_encode($auth);

$options['http']['header'] = "Proxy-Authorization: Basic {$auth}\r\n";

}

}

if (isset($options['http']['header'])) {

$options['http']['header'] .= "Connection: close\r\n";

} else {

$options['http']['header'] = "Connection: close\r\n";

}

if (extension_loaded('zlib')) {

$options['http']['header'] .= "Accept-Encoding: gzip\r\n";

}

$options['http']['header'] .= "User-Agent: Composer Installer\r\n";

$options['http']['protocol_version'] = 1.1;

return stream_context_create($options);

}

/**

* This method was adapted from Sslurp.

* https://github.com/EvanDotPro/Sslurp

*

* (c) Evan Coury <me@evancoury.com>

*

* For the full copyright and license information, please see below:

*

* Copyright (c) 2013, Evan Coury

* All rights reserved.

*

* Redistribution and use in source and binary forms, with or without modification,

* are permitted provided that the following conditions are met:

*

* * Redistributions of source code must retain the above copyright notice,

* this list of conditions and the following disclaimer.

*

* * Redistributions in binary form must reproduce the above copyright notice,

* this list of conditions and the following disclaimer in the documentation

* and/or other materials provided with the distribution.

*

* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND

* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED

* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE

* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR

* ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES

* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON

* ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT

* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS

* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

*/

public static function getSystemCaRootBundlePath()

{

static $caPath = null;

if ($caPath !== null) {

return $caPath;

}

// If SSL_CERT_FILE env variable points to a valid certificate/bundle, use that.

// This mimics how OpenSSL uses the SSL_CERT_FILE env variable.

$envCertFile = getenv('SSL_CERT_FILE');

if ($envCertFile && is_readable($envCertFile) && validateCaFile(file_get_contents($envCertFile))) {

return $caPath = $envCertFile;

}

// If SSL_CERT_DIR env variable points to a valid certificate/bundle, use that.

// This mimics how OpenSSL uses the SSL_CERT_FILE env variable.

$envCertDir = getenv('SSL_CERT_DIR');

if ($envCertDir && is_dir($envCertDir) && is_readable($envCertDir)) {

return $caPath = $envCertDir;

}

$configured = ini_get('openssl.cafile');

if ($configured && strlen($configured) > 0 && is_readable($configured) && validateCaFile(file_get_contents($configured))) {

return $caPath = $configured;

}

$configured = ini_get('openssl.capath');

if ($configured && is_dir($configured) && is_readable($configured)) {

return $caPath = $configured;

}

$caBundlePaths = array(

'/etc/pki/tls/certs/ca-bundle.crt', // Fedora, RHEL, CentOS (ca-certificates package)

'/etc/ssl/certs/ca-certificates.crt', // Debian, Ubuntu, Gentoo, Arch Linux (ca-certificates package)

'/etc/ssl/ca-bundle.pem', // SUSE, openSUSE (ca-certificates package)

'/usr/local/share/certs/ca-root-nss.crt', // FreeBSD (ca_root_nss_package)

'/usr/ssl/certs/ca-bundle.crt', // Cygwin

'/opt/local/share/curl/curl-ca-bundle.crt', // OS X macports, curl-ca-bundle package

'/usr/local/share/curl/curl-ca-bundle.crt', // Default cURL CA bunde path (without --with-ca-bundle option)

'/usr/share/ssl/certs/ca-bundle.crt', // Really old RedHat?

'/etc/ssl/cert.pem', // OpenBSD

'/usr/local/etc/ssl/cert.pem', // FreeBSD 10.x

);

foreach ($caBundlePaths as $caBundle) {

if (@is_readable($caBundle) && validateCaFile(file_get_contents($caBundle))) {

return $caPath = $caBundle;

}

}

foreach ($caBundlePaths as $caBundle) {

$caBundle = dirname($caBundle);

if (is_dir($caBundle) && glob($caBundle.'/*')) {

return $caPath = $caBundle;

}

}

return $caPath = false;

}

public static function getPackagedCaFile()

{

return <<<CACERT

##

## Bundle of CA Root Certificates

##

## Certificate data from Mozilla as of: Wed Oct 28 22:42:42 2015

##

## This is a bundle of X.509 certificates of public Certificate Authorities

## (CA). These were automatically extracted from Mozilla's root certificates

## file (certdata.txt). This file can be found at

## https://raw.githubusercontent.com/bagder/ca-bundle/master/ca-bundle.crt