Certificate Setup

protected $fillable = [
    'certificado_pem',      // PEM certificate content
    'certificado_password', // Original .pfx password (if needed)
];

protected $hidden = [
    'certificado_pem',      // Never expose in API responses
    'certificado_password',
];

protected function initializeSee(): See
{
    $see = new See();
    
    // Load certificate from filesystem
    try {
        $certificadoPath = storage_path('app/public/certificado/certificado.pem');
        
        if (!file_exists($certificadoPath)) {
            throw new Exception("Certificate file not found: " . $certificadoPath);
        }
        
        $certificadoContent = file_get_contents($certificadoPath);
        
        if ($certificadoContent === false) {
            throw new Exception("Could not read certificate file");
        }
        
        $see->setCertificate($certificadoContent);
        Log::info("Certificate loaded from: " . $certificadoPath);
        
    } catch (Exception $e) {
        Log::error("Error configuring certificate: " . $e->getMessage());
        throw new Exception("Error configuring certificate: " . $e->getMessage());
    }
    
    return $see;
}

protected function isValidPemStructure(string $pem): bool
{
    // Must have private key and certificate (in any order)
    $hasPrivateKey = strpos($pem, '-----BEGIN PRIVATE KEY-----') !== false && 
                    strpos($pem, '-----END PRIVATE KEY-----') !== false;
    
    $hasCertificate = strpos($pem, '-----BEGIN CERTIFICATE-----') !== false && 
                     strpos($pem, '-----END CERTIFICATE-----') !== false;
    
    // Also support RSA PRIVATE KEY format
    $hasRsaPrivateKey = strpos($pem, '-----BEGIN RSA PRIVATE KEY-----') !== false && 
                       strpos($pem, '-----END RSA PRIVATE KEY-----') !== false;
    
    $hasValidPrivateKey = $hasPrivateKey || $hasRsaPrivateKey;
    
    return $hasValidPrivateKey && $hasCertificate;
}

protected function removeBagAttributes(string $pem): string
{
    $lines = explode("\n", $pem);
    $cleanedLines = [];
    $inPemBlock = false;
    
    foreach ($lines as $line) {
        $trimmedLine = trim($line);
        
        // Detect start of PEM block
        if (strpos($trimmedLine, '-----BEGIN') === 0) {
            $inPemBlock = true;
        }
        
        // Only include lines that are part of PEM block
        if ($inPemBlock) {
            $cleanedLines[] = $line;
        }
        
        // Detect end of PEM block
        if (strpos($trimmedLine, '-----END') === 0) {
            $inPemBlock = false;
        }
    }
    
    return implode("\n", $cleanedLines);
}