Refactor S/MIME encrypter to use certificate repository

Replaces direct certificate path usage with a repository interface for managing S/MIME certificates. This improves flexibility by allowing custom certificate retrieval logic through `SmimeCertificateRepositoryInterface`. Adjusted related tests, configuration, and event listener implementation accordingly.

Author: Spomky

DependencyInjection/Configuration.php

@@ -2314,8 +2314,8 @@ private function addMailerSection(ArrayNodeDefinition $rootNode, callable $enabl
                             ->canBeEnabled()
                             ->info('S/MIME encrypter configuration')
                             ->children()
-                                ->scalarNode('certificate')
-                                    ->info('Path to certificate (in PEM format without the `file://` prefix)')
+                                ->scalarNode('repository')
+                                    ->info('Path to the S/MIME certificate repository. Shall implement the `Symfony\Component\Mailer\EventListener\SmimeCertificateRepositoryInterface`.')
                                     ->defaultValue('')
                                     ->cannotBeEmpty()
                                 ->end()

DependencyInjection/FrameworkExtension.php

@@ -2893,11 +2893,9 @@ private function registerMailerConfiguration(array $config, ContainerBuilder $co
             if (!class_exists(SmimeEncryptedMessageListener::class)) {
                 throw new LogicException('S/MIME encrypted messages support cannot be enabled as this version of the Mailer component does not support it.');
             }
-            $smimeDecrypter = $container->getDefinition('mailer.smime_encrypter');
-            $smimeDecrypter->setArgument(0, $config['smime_encrypter']['certificate']);
-            $smimeDecrypter->setArgument(1, $config['smime_encrypter']['cipher']);
+            $container->setAlias('mailer.smime_encrypter.repository', $config['smime_encrypter']['repository']);
+            $container->setParameter('mailer.smime_encrypter.cipher', $config['smime_encrypter']['cipher']);
         } else {
-            $container->removeDefinition('mailer.smime_encrypter');
             $container->removeDefinition('mailer.smime_encrypter.listener');
         }
 

Resources/config/mailer.php

@@ -26,7 +26,6 @@
 use Symfony\Component\Mailer\Transport\TransportInterface;
 use Symfony\Component\Mailer\Transport\Transports;
 use Symfony\Component\Mime\Crypto\DkimSigner;
-use Symfony\Component\Mime\Crypto\SMimeEncrypter;
 use Symfony\Component\Mime\Crypto\SMimeSigner;
 
 return static function (ContainerConfigurator $container) {
@@ -102,12 +101,6 @@
                 abstract_arg('signOptions'),
             ])
 
-        ->set('mailer.smime_encrypter', SMimeEncrypter::class)
-            ->args([
-                abstract_arg('certificate'),
-                abstract_arg('cipher'),
-            ])
-
         ->set('mailer.dkim_signer.listener', DkimSignedMessageListener::class)
             ->args([
                 service(DkimSigner::class),
@@ -122,7 +115,8 @@
 
         ->set('mailer.smime_encrypter.listener', SmimeEncryptedMessageListener::class)
             ->args([
-                service('mailer.smime_encrypter'),
+                service('mailer.smime_encrypter.repository'),
+                param('mailer.smime_encrypter.cipher'),
             ])
             ->tag('kernel.event_subscriber')
 

Resources/config/schema/symfony-1.0.xsd

@@ -836,7 +836,7 @@
     </xsd:complexType>
 
     <xsd:complexType name="mailer_smime_encrypter">
-        <xsd:attribute name="certificate" type="xsd:string"/>
+        <xsd:attribute name="repository" type="xsd:string" />
         <xsd:attribute name="cipher" type="xsd:integer" />
     </xsd:complexType>
 

Tests/DependencyInjection/ConfigurationTest.php

@@ -941,7 +941,7 @@ class_exists(SemaphoreStore::class) && SemaphoreStore::isSupported() ? 'semaphor
                 ],
                 'smime_encrypter' => [
                     'enabled' => false,
-                    'certificate' => '',
+                    'repository' => '',
                     'cipher' => null,
                 ],
             ],