masakielastic · March 3, 2026 21:59
diff --git a/README.md b/README.md
diff --git a/client.php b/client.php
 <?php
 declare(strict_types=1);

 /**
 * Minimal HTTP/2 over TLS client using PHP streams + ALPN (h2).
 * Sends: client preface, SETTINGS, HEADERS (HPACK minimal), then reads frames.
 *
 * Usage:
 *   php h2_stream_client.php example.com 443 /
 */

 function hexdump(string $bin, int $max = 512): string {
    $bin = substr($bin, 0, $max);
    $out = '';
    $len = strlen($bin);
    for ($i = 0; $i < $len; $i += 16) {
        $chunk = substr($bin, $i, 16);
        $hex = implode(' ', str_split(bin2hex($chunk), 2));
        $asc = preg_replace('/[^\x20-\x7E]/', '.', $chunk);
        $out .= sprintf("%04x  %-47s  %s\n", $i, $hex, $asc);
    }
    return $out;
 }

 function packFrame(int $type, int $flags, int $streamId, string $payload): string {
    $len = strlen($payload);
    if ($len > 0xFFFFFF) throw new RuntimeException("Frame too large: $len");

    // 24-bit length + type + flags + 31-bit stream id (reserved bit must be 0)
    $hdr = chr(($len >> 16) & 0xFF) . chr(($len >> 8) & 0xFF) . chr($len & 0xFF);
    $hdr .= chr($type & 0xFF);
    $hdr .= chr($flags & 0xFF);
    $hdr .= pack('N', $streamId & 0x7FFFFFFF);
    return $hdr . $payload;
 }

 function readN($fp, int $n): string {
    $buf = '';
    while (strlen($buf) < $n) {
        $r = fread($fp, $n - strlen($buf));
        if ($r === false || $r === '') {
            if (feof($fp)) break;
            usleep(10_000);
            continue;
        }
        $buf .= $r;
    }
    return $buf;
 }

 function readFrame($fp): ?array {
    $h = readN($fp, 9);
    if (strlen($h) < 9) return null;

    $len = (ord($h[0]) << 16) | (ord($h[1]) << 8) | ord($h[2]);
    $type = ord($h[3]);
    $flags = ord($h[4]);
    $sid = (unpack('N', substr($h, 5, 4))[1]) & 0x7FFFFFFF;

    $payload = $len ? readN($fp, $len) : '';
    if (strlen($payload) < $len) return null;

    return [$len, $type, $flags, $sid, $payload];
 }

 /**
 * HPACK minimal header block:
 *   :method: GET   -> static indexed #2 => 0x82
 *   :path: <path>  -> if "/" then static indexed #4 => 0x84 else literal
 *   :scheme: https -> static indexed #7 => 0x87
 *   :authority: <host> -> literal without indexing, indexed name #1
 *
 * NOTE: For simplicity, path is literal if not "/".
 */
 function hpackStringLiteral(string $s): string {
    // H=0 (no Huffman), length in 7-bit prefix (assume <= 127 for demo)
    $len = strlen($s);
    if ($len > 127) throw new RuntimeException("String too long for demo: $len");
    return chr($len) . $s;
 }

 function buildHpackHeaders(string $host, string $path): string {
    $block = '';

    $block .= "\x82"; // :method GET
    if ($path === '/') {
        $block .= "\x84"; // :path /
    } else {
        // Literal Header Field without Indexing — Indexed Name
        // :path is static table #4 => index=4 with 4-bit prefix => 0x04
        $block .= "\x04" . hpackStringLiteral($path);
    }
    $block .= "\x87"; // :scheme https (static #7)

    // :authority (indexed name = 1), literal value without indexing
    $block .= "\x01" . hpackStringLiteral($host);

    // 追加で User-Agent を入れたい場合（static table #58 is "user-agent", but value differs）
    // -> literal without indexing, indexed name (#58) requires base-128 integer encoding; demoでは省略
    return $block;
 }

 // ---- main ----

 $host = $argv[1] ?? 'example.com';
 $port = (int)($argv[2] ?? 443);
 $path = $argv[3] ?? '/';

 $ssl = [
    // ALPN で h2 を要求（これがないと HTTP/2 にならない）
    'alpn_protocols' => 'h2',

    // SNI
    'SNI_enabled' => true,
    'peer_name' => $host,

    // 検証（実験でまず動かす目的なら verify_peer=false も可能だが推奨しない）
    'verify_peer' => true,
    'verify_peer_name' => true,

    // Debian 系の典型。環境に応じて調整
    'cafile' => '/etc/ssl/certs/ca-certificates.crt',

    // 失敗時の情報を取りたい場合
    'capture_peer_cert' => true,
 ];

 $ctx = stream_context_create(['ssl' => $ssl]);

 $fp = stream_socket_client(
    "tls://{$host}:{$port}",
    $errno,
    $errstr,
    8.0,
    STREAM_CLIENT_CONNECT,
    $ctx
 );

 if (!$fp) {
    fwrite(STDERR, "connect failed: {$errno} {$errstr}\n");
    exit(1);
 }

 stream_set_timeout($fp, 5);
 stream_set_blocking($fp, true);

 // ALPN / crypto の状態を目視
 $meta = stream_get_meta_data($fp);
 fwrite(STDOUT, "=== stream_get_meta_data() ===\n");
 foreach (['crypto', 'stream_type', 'timed_out', 'blocked', 'eof', 'unread_bytes'] as $k) {
    if (array_key_exists($k, $meta)) {
        fwrite(STDOUT, sprintf("%s: %s\n", $k, var_export($meta[$k], true)));
    }
 }
 // PHP の実装・バージョンでキー名が微妙に違うことがあるので dump
 fwrite(STDOUT, "meta keys: " . implode(', ', array_keys($meta)) . "\n");

 // ここが重要：ALPN の結果が取れる環境なら "alpn_protocol" が見える
 if (isset($meta['alpn_protocol'])) {
    fwrite(STDOUT, "ALPN negotiated: " . $meta['alpn_protocol'] . "\n");
 } else {
    fwrite(STDOUT, "ALPN negotiated: (meta['alpn_protocol'] not present on this build)\n");
 }

 // 交渉結果チェック（h2 じゃないなら HTTP/2 フレーム送っても意味がない）
 if (isset($meta['alpn_protocol']) && $meta['alpn_protocol'] !== 'h2') {
    fwrite(STDERR, "ERROR: negotiated ALPN is not h2\n");
    fclose($fp);
    exit(1);
 }

 // 1) client connection preface
 $preface = "PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n";

 // 2) SETTINGS (例: ENABLE_PUSH=0, MAX_CONCURRENT_STREAMS=100)
 $settingsPayload =
    "\x00\x02" . "\x00\x00\x00\x00" . // SETTINGS_ENABLE_PUSH = 0
    "\x00\x03" . "\x00\x00\x00\x64";  // SETTINGS_MAX_CONCURRENT_STREAMS = 100
 $settingsFrame = packFrame(0x04 /*SETTINGS*/, 0x00, 0, $settingsPayload);

 // 3) HEADERS on stream 1: END_STREAM|END_HEADERS
 $hpack = buildHpackHeaders($host, $path);
 $headersFrame = packFrame(0x01 /*HEADERS*/, 0x05 /*END_STREAM|END_HEADERS*/, 1, $hpack);

 // send bytes
 $toSend = $preface . $settingsFrame . $headersFrame;

 fwrite(STDOUT, ">>> sending " . strlen($toSend) . " bytes\n");
 fwrite(STDOUT, hexdump($toSend, 2048));

 $w = fwrite($fp, $toSend);
 if ($w === false) {
    fwrite(STDERR, "write failed\n");
    fclose($fp);
    exit(1);
 }

 fwrite(STDOUT, "<<< reading frames...\n");

 // read frames (demo)
 for ($i = 0; $i < 40; $i++) {
    $fr = readFrame($fp);
    if ($fr === null) {
        $m = stream_get_meta_data($fp);
        fwrite(STDOUT, "no more frames / timeout=" . ($m['timed_out'] ? 'yes' : 'no') . "\n");
        break;
    }

    [$len, $type, $flags, $sid, $payload] = $fr;
    fwrite(STDOUT, sprintf("FRAME len=%d type=0x%02x flags=0x%02x sid=%d\n", $len, $type, $flags, $sid));
    if ($len > 0) {
        fwrite(STDOUT, hexdump($payload, 1024));
    }

    // SETTINGS を受けたら ACK
    if ($type === 0x04 /*SETTINGS*/ && $len > 0 && ($flags & 0x01) === 0) {
        $ack = packFrame(0x04, 0x01, 0, '');
        fwrite(STDOUT, ">>> sending SETTINGS ACK\n");
        fwrite($fp, $ack);
    }

    // GOAWAY (0x07) が来たら終わり
    if ($type === 0x07) {
        fwrite(STDOUT, "GOAWAY received\n");
        break;
    }
 }

 fclose($fp);
	<?php
	declare(strict_types=1);

	/**
	* Minimal HTTP/2 over TLS client using PHP streams + ALPN (h2).
	* Sends: client preface, SETTINGS, HEADERS (HPACK minimal), then reads frames.
	*
	* Usage:
	* php h2_stream_client.php example.com 443 /
	*/

	function hexdump(string $bin, int $max = 512): string {
	$bin = substr($bin, 0, $max);
	$out = '';
	$len = strlen($bin);
	for ($i = 0; $i < $len; $i += 16) {
	$chunk = substr($bin, $i, 16);
	$hex = implode(' ', str_split(bin2hex($chunk), 2));
	$asc = preg_replace('/[^\x20-\x7E]/', '.', $chunk);
	$out .= sprintf("%04x %-47s %s\n", $i, $hex, $asc);
	}
	return $out;
	}

	function packFrame(int $type, int $flags, int $streamId, string $payload): string {
	$len = strlen($payload);
	if ($len > 0xFFFFFF) throw new RuntimeException("Frame too large: $len");

	// 24-bit length + type + flags + 31-bit stream id (reserved bit must be 0)
	$hdr = chr(($len >> 16) & 0xFF) . chr(($len >> 8) & 0xFF) . chr($len & 0xFF);
	$hdr .= chr($type & 0xFF);
	$hdr .= chr($flags & 0xFF);
	$hdr .= pack('N', $streamId & 0x7FFFFFFF);
	return $hdr . $payload;
	}

	function readN($fp, int $n): string {
	$buf = '';
	while (strlen($buf) < $n) {
	$r = fread($fp, $n - strlen($buf));
	if ($r === false \|\| $r === '') {
	if (feof($fp)) break;
	usleep(10_000);
	continue;
	}
	$buf .= $r;
	}
	return $buf;
	}

	function readFrame($fp): ?array {
	$h = readN($fp, 9);
	if (strlen($h) < 9) return null;

	$len = (ord($h[0]) << 16) \| (ord($h[1]) << 8) \| ord($h[2]);
	$type = ord($h[3]);
	$flags = ord($h[4]);
	$sid = (unpack('N', substr($h, 5, 4))[1]) & 0x7FFFFFFF;

	$payload = $len ? readN($fp, $len) : '';
	if (strlen($payload) < $len) return null;

	return [$len, $type, $flags, $sid, $payload];
	}

	/**
	* HPACK minimal header block:
	* :method: GET -> static indexed #2 => 0x82
	* :path: <path> -> if "/" then static indexed #4 => 0x84 else literal
	* :scheme: https -> static indexed #7 => 0x87
	* :authority: <host> -> literal without indexing, indexed name #1
	*
	* NOTE: For simplicity, path is literal if not "/".
	*/
	function hpackStringLiteral(string $s): string {
	// H=0 (no Huffman), length in 7-bit prefix (assume <= 127 for demo)
	$len = strlen($s);
	if ($len > 127) throw new RuntimeException("String too long for demo: $len");
	return chr($len) . $s;
	}

	function buildHpackHeaders(string $host, string $path): string {
	$block = '';

	$block .= "\x82"; // :method GET
	if ($path === '/') {
	$block .= "\x84"; // :path /
	} else {
	// Literal Header Field without Indexing — Indexed Name
	// :path is static table #4 => index=4 with 4-bit prefix => 0x04
	$block .= "\x04" . hpackStringLiteral($path);
	}
	$block .= "\x87"; // :scheme https (static #7)

	// :authority (indexed name = 1), literal value without indexing
	$block .= "\x01" . hpackStringLiteral($host);

	// 追加で User-Agent を入れたい場合（static table #58 is "user-agent", but value differs）
	// -> literal without indexing, indexed name (#58) requires base-128 integer encoding; demoでは省略
	return $block;
	}

	// ---- main ----

	$host = $argv[1] ?? 'example.com';
	$port = (int)($argv[2] ?? 443);
	$path = $argv[3] ?? '/';

	$ssl = [
	// ALPN で h2 を要求（これがないと HTTP/2 にならない）
	'alpn_protocols' => 'h2',

	// SNI
	'SNI_enabled' => true,
	'peer_name' => $host,

	// 検証（実験でまず動かす目的なら verify_peer=false も可能だが推奨しない）
	'verify_peer' => true,
	'verify_peer_name' => true,

	// Debian 系の典型。環境に応じて調整
	'cafile' => '/etc/ssl/certs/ca-certificates.crt',

	// 失敗時の情報を取りたい場合
	'capture_peer_cert' => true,
	];

	$ctx = stream_context_create(['ssl' => $ssl]);

	$fp = stream_socket_client(
	"tls://{$host}:{$port}",
	$errno,
	$errstr,
	8.0,
	STREAM_CLIENT_CONNECT,
	$ctx
	);

	if (!$fp) {
	fwrite(STDERR, "connect failed: {$errno} {$errstr}\n");
	exit(1);
	}

	stream_set_timeout($fp, 5);
	stream_set_blocking($fp, true);

	// ALPN / crypto の状態を目視
	$meta = stream_get_meta_data($fp);
	fwrite(STDOUT, "=== stream_get_meta_data() ===\n");
	foreach (['crypto', 'stream_type', 'timed_out', 'blocked', 'eof', 'unread_bytes'] as $k) {
	if (array_key_exists($k, $meta)) {
	fwrite(STDOUT, sprintf("%s: %s\n", $k, var_export($meta[$k], true)));
	}
	}
	// PHP の実装・バージョンでキー名が微妙に違うことがあるので dump
	fwrite(STDOUT, "meta keys: " . implode(', ', array_keys($meta)) . "\n");

	// ここが重要：ALPN の結果が取れる環境なら "alpn_protocol" が見える
	if (isset($meta['alpn_protocol'])) {
	fwrite(STDOUT, "ALPN negotiated: " . $meta['alpn_protocol'] . "\n");
	} else {
	fwrite(STDOUT, "ALPN negotiated: (meta['alpn_protocol'] not present on this build)\n");
	}

	// 交渉結果チェック（h2 じゃないなら HTTP/2 フレーム送っても意味がない）
	if (isset($meta['alpn_protocol']) && $meta['alpn_protocol'] !== 'h2') {
	fwrite(STDERR, "ERROR: negotiated ALPN is not h2\n");
	fclose($fp);
	exit(1);
	}

	// 1) client connection preface
	$preface = "PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n";

	// 2) SETTINGS (例: ENABLE_PUSH=0, MAX_CONCURRENT_STREAMS=100)
	$settingsPayload =
	"\x00\x02" . "\x00\x00\x00\x00" . // SETTINGS_ENABLE_PUSH = 0
	"\x00\x03" . "\x00\x00\x00\x64"; // SETTINGS_MAX_CONCURRENT_STREAMS = 100
	$settingsFrame = packFrame(0x04 /SETTINGS/, 0x00, 0, $settingsPayload);

	// 3) HEADERS on stream 1: END_STREAM\|END_HEADERS
	$hpack = buildHpackHeaders($host, $path);
	$headersFrame = packFrame(0x01 /HEADERS/, 0x05 /END_STREAM\|END_HEADERS/, 1, $hpack);

	// send bytes
	$toSend = $preface . $settingsFrame . $headersFrame;

	fwrite(STDOUT, ">>> sending " . strlen($toSend) . " bytes\n");
	fwrite(STDOUT, hexdump($toSend, 2048));

	$w = fwrite($fp, $toSend);
	if ($w === false) {
	fwrite(STDERR, "write failed\n");
	fclose($fp);
	exit(1);
	}

	fwrite(STDOUT, "<<< reading frames...\n");

	// read frames (demo)
	for ($i = 0; $i < 40; $i++) {
	$fr = readFrame($fp);
	if ($fr === null) {
	$m = stream_get_meta_data($fp);
	fwrite(STDOUT, "no more frames / timeout=" . ($m['timed_out'] ? 'yes' : 'no') . "\n");
	break;
	}

	[$len, $type, $flags, $sid, $payload] = $fr;
	fwrite(STDOUT, sprintf("FRAME len=%d type=0x%02x flags=0x%02x sid=%d\n", $len, $type, $flags, $sid));
	if ($len > 0) {
	fwrite(STDOUT, hexdump($payload, 1024));
	}

	// SETTINGS を受けたら ACK
	if ($type === 0x04 /SETTINGS/ && $len > 0 && ($flags & 0x01) === 0) {
	$ack = packFrame(0x04, 0x01, 0, '');
	fwrite(STDOUT, ">>> sending SETTINGS ACK\n");
	fwrite($fp, $ack);
	}

	// GOAWAY (0x07) が来たら終わり
	if ($type === 0x07) {
	fwrite(STDOUT, "GOAWAY received\n");
	break;
	}
	}

	fclose($fp);
No results found