OpenSSL_PKey.php

<?php
class OpenSSL_PKey
{
  protected $pkey;

  public function __construct()
  {
    $this->pkey = openssl_pkey_new();
  }

  public function __toString()
  {
    $key = '';

    openssl_pkey_export($this->pkey, $key);

    return $key;
  }

  public function getDetails()
  {
    return openssl_pkey_get_details($this->pkey);
  }

  public function __destruct()
  {
    openssl_pkey_free($this->pkey);
  }
}

OpenSSLCert.php

<?php
class OpenSSLCert
{
  protected $options;
  protected $pkey;

  public function __construct(OpenSSLCertOptions $options, OpenSSLKey $key)
  {
    $this->options = $options;
    $this->pkey    = $key;
  }
}

OpenSSLCertOptions.php

<?php
class OpenSSLCertOptions
{
  protected $availableKeys = array( "countryName",
                                    "stateOrProvinceName",
                                    "localityName",
                                    "organizationName",
                                    "organizationalUnitName",
                                    "commonName",
                                    "emailAddress" );
  protected $dn = array();

  public function __call($name, $args)
  {
    if (in_array($name, $this->availableKeys)) {
      if (isset($args[0])) {
        $this->dn[$name] = $args[0];
        return $this;
      } else {
        return $this->dn[$name];
      }
    }
  }
}

OpenSSLManager.php

<?php
class OpenSSLManager
{
  public function createNewKey()
  {
    return new PKey();
  }
}

openssl_pkey_get_private et openssl_pkey_get_public retournent des ressources de type "OpenSSL key"

openssl_pkey_export permet d'obtenir une clée sous forme d'une chaine de caractères

openssl_sign prend une ressource de type "OpenSSL key" pour signer les données