@@ -22,7 +22,7 @@ discard block |
||
22 | 22 | ?> |
23 | 23 | <?php |
24 | 24 | |
25 | -require_once dirname(dirname(dirname(dirname(__FILE__)))) . "/config/_config.php"; |
|
25 | +require_once dirname(dirname(dirname(dirname(__FILE__))))."/config/_config.php"; |
|
26 | 26 | |
27 | 27 | $validator = new \web\lib\common\InputValidation(); |
28 | 28 | $idRaw = $_GET["id"] ?? ""; |
@@ -37,7 +37,7 @@ discard block |
||
37 | 37 | // Set data type and caching for 30 days |
38 | 38 | $info = new finfo(); |
39 | 39 | $filetype = $info->buffer($finalBlob, FILEINFO_MIME_TYPE); |
40 | - header("Content-type: " . $filetype); |
|
40 | + header("Content-type: ".$filetype); |
|
41 | 41 | |
42 | 42 | switch ($filetype) { |
43 | 43 | case "text/rtf": // fall-through, same treatment |
@@ -54,7 +54,7 @@ discard block |
||
54 | 54 | header("Cache-Control: must-revalidate"); |
55 | 55 | $offset = 60 * 60 * 24 * 30; |
56 | 56 | // gmdate can't possibly fail, because it operates on time() and an integer offset |
57 | - $ExpStr = "Expires: " . /** @scrutinizer ignore-type */ gmdate("D, d M Y H:i:s", time() + $offset) . " GMT"; |
|
57 | + $ExpStr = "Expires: "./** @scrutinizer ignore-type */ gmdate("D, d M Y H:i:s", time() + $offset)." GMT"; |
|
58 | 58 | header($ExpStr); |
59 | 59 | // Print out the image |
60 | 60 | echo $finalBlob; |
@@ -9,7 +9,7 @@ discard block |
||
9 | 9 | * ****************************************************************************** |
10 | 10 | */ |
11 | 11 | |
12 | -require_once dirname(dirname(dirname(dirname(__FILE__)))) . "/config/_config.php"; |
|
12 | +require_once dirname(dirname(dirname(dirname(__FILE__))))."/config/_config.php"; |
|
13 | 13 | |
14 | 14 | $auth = new \web\lib\admin\Authentication(); |
15 | 15 | $auth->authenticate(); |
@@ -29,31 +29,31 @@ discard block |
||
29 | 29 | ?> |
30 | 30 | |
31 | 31 | <h1><?php $tablecaption = _("User Authentication Records"); echo $tablecaption; ?></h1> |
32 | -<p><?php echo _("Note that:");?></p> |
|
32 | +<p><?php echo _("Note that:"); ?></p> |
|
33 | 33 | <ul> |
34 | - <li><?php echo _("Authentication records are deleted after six months retention time");?></li> |
|
35 | - <li><?php echo _("Operator Domain is based on the RADIUS attribute 'Operator-Name' and not sent by all hotspots");?></li> |
|
36 | - <li><?php echo _("Different MAC addresses per credential may be due to MAC Address randomisation in recent operating systems");?></li> |
|
34 | + <li><?php echo _("Authentication records are deleted after six months retention time"); ?></li> |
|
35 | + <li><?php echo _("Operator Domain is based on the RADIUS attribute 'Operator-Name' and not sent by all hotspots"); ?></li> |
|
36 | + <li><?php echo _("Different MAC addresses per credential may be due to MAC Address randomisation in recent operating systems"); ?></li> |
|
37 | 37 | </ul> |
38 | 38 | <table class='authrecord'> |
39 | - <caption><?php echo $tablecaption;?></caption> |
|
39 | + <caption><?php echo $tablecaption; ?></caption> |
|
40 | 40 | <tr> |
41 | - <th scope="col"><strong><?php echo _("Timestamp");?></strong></th> |
|
42 | - <th scope="col"><strong><?php echo _("Credential");?></strong></th> |
|
43 | - <th scope="col"><strong><?php echo _("MAC Address");?></strong></th> |
|
44 | - <th scope="col"><strong><?php echo _("Result");?></strong></th> |
|
45 | - <th scope="col"><strong><?php echo _("Operator Domain");?></strong></th> |
|
41 | + <th scope="col"><strong><?php echo _("Timestamp"); ?></strong></th> |
|
42 | + <th scope="col"><strong><?php echo _("Credential"); ?></strong></th> |
|
43 | + <th scope="col"><strong><?php echo _("MAC Address"); ?></strong></th> |
|
44 | + <th scope="col"><strong><?php echo _("Result"); ?></strong></th> |
|
45 | + <th scope="col"><strong><?php echo _("Operator Domain"); ?></strong></th> |
|
46 | 46 | </tr> |
47 | 47 | <?php |
48 | 48 | $userAuthData = $profile->getUserAuthRecords($userInt); |
49 | 49 | foreach ($userAuthData as $oneRecord) { |
50 | - echo "<tr class='".($oneRecord['RESULT'] == "Access-Accept" ? "auth-success" : "auth-fail" )."'>" |
|
50 | + echo "<tr class='".($oneRecord['RESULT'] == "Access-Accept" ? "auth-success" : "auth-fail")."'>" |
|
51 | 51 | . "<td>".$oneRecord['TIMESTAMP']."</td>" |
52 | 52 | // $oneRecord['CN'] is a simple string, not an array, so disable Scrutinizer type check here |
53 | - . "<td>"./** @scrutinizer ignore-type */ substr_replace($oneRecord['CN'], "@…", strpos($oneRecord['CN'],"@"))."</td>" |
|
53 | + . "<td>"./** @scrutinizer ignore-type */ substr_replace($oneRecord['CN'], "@…", strpos($oneRecord['CN'], "@"))."</td>" |
|
54 | 54 | . "<td>".$oneRecord['MAC']."</td>" |
55 | 55 | . "<td>".($oneRecord['RESULT'] == "Access-Accept" ? _("Success") : _("Failure"))."</td>" |
56 | - . "<td>".substr($oneRecord['OPERATOR'] ?? "1(unknown)",1)."</td>" |
|
56 | + . "<td>".substr($oneRecord['OPERATOR'] ?? "1(unknown)", 1)."</td>" |
|
57 | 57 | . "</tr>"; |
58 | 58 | } |
59 | 59 | ?> |
@@ -16,10 +16,10 @@ discard block |
||
16 | 16 | class CertificationAuthorityEmbeddedECDSA extends EntityWithDBProperties implements CertificationAuthorityInterface |
17 | 17 | { |
18 | 18 | |
19 | - private const LOCATION_ROOT_CA = ROOT . "/config/SilverbulletClientCerts/rootca-ECDSA.pem"; |
|
20 | - private const LOCATION_ISSUING_CA = ROOT . "/config/SilverbulletClientCerts/real-ECDSA.pem"; |
|
21 | - private const LOCATION_ISSUING_KEY = ROOT . "/config/SilverbulletClientCerts/real-ECDSA.key"; |
|
22 | - private const LOCATION_CONFIG = ROOT . "/config/SilverbulletClientCerts/openssl-ECDSA.cnf"; |
|
19 | + private const LOCATION_ROOT_CA = ROOT."/config/SilverbulletClientCerts/rootca-ECDSA.pem"; |
|
20 | + private const LOCATION_ISSUING_CA = ROOT."/config/SilverbulletClientCerts/real-ECDSA.pem"; |
|
21 | + private const LOCATION_ISSUING_KEY = ROOT."/config/SilverbulletClientCerts/real-ECDSA.key"; |
|
22 | + private const LOCATION_CONFIG = ROOT."/config/SilverbulletClientCerts/openssl-ECDSA.cnf"; |
|
23 | 23 | |
24 | 24 | /** |
25 | 25 | * string with the PEM variant of the root CA |
@@ -66,29 +66,29 @@ discard block |
||
66 | 66 | parent::__construct(); |
67 | 67 | $this->rootPem = file_get_contents(CertificationAuthorityEmbeddedECDSA::LOCATION_ROOT_CA); |
68 | 68 | if ($this->rootPem === FALSE) { |
69 | - throw new Exception("Root CA PEM file not found: " . CertificationAuthorityEmbeddedECDSA::LOCATION_ROOT_CA); |
|
69 | + throw new Exception("Root CA PEM file not found: ".CertificationAuthorityEmbeddedECDSA::LOCATION_ROOT_CA); |
|
70 | 70 | } |
71 | 71 | $this->issuingCertRaw = file_get_contents(CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA); |
72 | 72 | if ($this->issuingCertRaw === FALSE) { |
73 | - throw new Exception("Issuing CA PEM file not found: " . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA); |
|
73 | + throw new Exception("Issuing CA PEM file not found: ".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA); |
|
74 | 74 | } |
75 | 75 | $rootParsed = openssl_x509_read($this->rootPem); |
76 | 76 | $issuingCertCandidate = openssl_x509_read($this->issuingCertRaw); |
77 | - if ($issuingCertCandidate === FALSE || is_resource($issuingCertCandidate)|| $rootParsed === FALSE) { |
|
77 | + if ($issuingCertCandidate === FALSE || is_resource($issuingCertCandidate) || $rootParsed === FALSE) { |
|
78 | 78 | throw new Exception("At least one CA PEM file did not parse correctly (or not a PHP8 resource)!"); |
79 | 79 | } |
80 | 80 | $this->issuingCert = $issuingCertCandidate; |
81 | 81 | |
82 | 82 | if (stat(CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY) === FALSE) { |
83 | - throw new Exception("Private key not found: " . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY); |
|
83 | + throw new Exception("Private key not found: ".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY); |
|
84 | 84 | } |
85 | - $issuingKeyTemp = openssl_pkey_get_private("file://" . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY); |
|
85 | + $issuingKeyTemp = openssl_pkey_get_private("file://".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY); |
|
86 | 86 | if ($issuingKeyTemp === FALSE || is_resource($issuingKeyTemp)) { |
87 | 87 | throw new Exception("The private key did not parse correctly (or not a PHP8 resource)!"); |
88 | 88 | } |
89 | 89 | $this->issuingKey = $issuingKeyTemp; |
90 | 90 | if (stat(CertificationAuthorityEmbeddedECDSA::LOCATION_CONFIG) === FALSE) { |
91 | - throw new Exception("openssl configuration not found: " . CertificationAuthorityEmbeddedECDSA::LOCATION_CONFIG); |
|
91 | + throw new Exception("openssl configuration not found: ".CertificationAuthorityEmbeddedECDSA::LOCATION_CONFIG); |
|
92 | 92 | } |
93 | 93 | $this->conffile = CertificationAuthorityEmbeddedECDSA::LOCATION_CONFIG; |
94 | 94 | } |
@@ -131,27 +131,27 @@ discard block |
||
131 | 131 | // generate stub index.txt file |
132 | 132 | $tempdirArray = \core\common\Entity::createTemporaryDirectory("test"); |
133 | 133 | $tempdir = $tempdirArray['dir']; |
134 | - $nowIndexTxt = (new \DateTime())->format("ymdHis") . "Z"; |
|
135 | - $expiryIndexTxt = $originalExpiry->format("ymdHis") . "Z"; |
|
134 | + $nowIndexTxt = (new \DateTime())->format("ymdHis")."Z"; |
|
135 | + $expiryIndexTxt = $originalExpiry->format("ymdHis")."Z"; |
|
136 | 136 | // serials for our CA are always integers |
137 | 137 | $serialHex = strtoupper(dechex((int) $cert->serial)); |
138 | 138 | if (strlen($serialHex) % 2 == 1) { |
139 | - $serialHex = "0" . $serialHex; |
|
139 | + $serialHex = "0".$serialHex; |
|
140 | 140 | } |
141 | 141 | |
142 | - $indexStatement = "$certstatus\t$expiryIndexTxt\t" . ($certstatus == "R" ? "$nowIndexTxt,unspecified" : "") . "\t$serialHex\tunknown\t/O=" . \config\ConfAssistant::CONSORTIUM['name'] . "/OU=$federation/CN=$cert->username\n"; |
|
142 | + $indexStatement = "$certstatus\t$expiryIndexTxt\t".($certstatus == "R" ? "$nowIndexTxt,unspecified" : "")."\t$serialHex\tunknown\t/O=".\config\ConfAssistant::CONSORTIUM['name']."/OU=$federation/CN=$cert->username\n"; |
|
143 | 143 | $this->loggerInstance->debug(4, "index.txt contents-to-be: $indexStatement"); |
144 | - if (!file_put_contents($tempdir . "/index.txt", $indexStatement)) { |
|
144 | + if (!file_put_contents($tempdir."/index.txt", $indexStatement)) { |
|
145 | 145 | $this->loggerInstance->debug(1, "Unable to write openssl index.txt file for revocation handling!"); |
146 | 146 | } |
147 | 147 | // index.txt.attr is dull but needs to exist |
148 | - file_put_contents($tempdir . "/index.txt.attr", "unique_subject = yes\n"); |
|
148 | + file_put_contents($tempdir."/index.txt.attr", "unique_subject = yes\n"); |
|
149 | 149 | // call "openssl ocsp" to manufacture our own OCSP statement |
150 | 150 | // adding "-rmd sha1" to the following command-line makes the |
151 | 151 | // choice of signature algorithm for the response explicit |
152 | 152 | // but it's only available from openssl-1.1.0 (which we do not |
153 | 153 | // want to require just for that one thing). |
154 | - $execCmd = \config\Master::PATHS['openssl'] . " ocsp -issuer " . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA . " -sha1 -ndays 10 -no_nonce -serial 0x$serialHex -CA " . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA . " -rsigner " . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA . " -rkey " . CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY . " -index $tempdir/index.txt -no_cert_verify -respout $tempdir/$serialHex.response.der"; |
|
154 | + $execCmd = \config\Master::PATHS['openssl']." ocsp -issuer ".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA." -sha1 -ndays 10 -no_nonce -serial 0x$serialHex -CA ".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA." -rsigner ".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_CA." -rkey ".CertificationAuthorityEmbeddedECDSA::LOCATION_ISSUING_KEY." -index $tempdir/index.txt -no_cert_verify -respout $tempdir/$serialHex.response.der"; |
|
155 | 155 | $this->loggerInstance->debug(2, "Calling openssl ocsp with following cmdline: $execCmd\n"); |
156 | 156 | $output = []; |
157 | 157 | $return = 999; |
@@ -159,11 +159,11 @@ discard block |
||
159 | 159 | if ($return !== 0) { |
160 | 160 | throw new Exception("Non-zero return value from openssl ocsp!"); |
161 | 161 | } |
162 | - $ocsp = file_get_contents($tempdir . "/$serialHex.response.der"); |
|
162 | + $ocsp = file_get_contents($tempdir."/$serialHex.response.der"); |
|
163 | 163 | // remove the temp dir! |
164 | - unlink($tempdir . "/$serialHex.response.der"); |
|
165 | - unlink($tempdir . "/index.txt.attr"); |
|
166 | - unlink($tempdir . "/index.txt"); |
|
164 | + unlink($tempdir."/$serialHex.response.der"); |
|
165 | + unlink($tempdir."/index.txt.attr"); |
|
166 | + unlink($tempdir."/index.txt"); |
|
167 | 167 | rmdir($tempdir); |
168 | 168 | $this->databaseHandle->exec("UPDATE silverbullet_certificate SET OCSP = ?, OCSP_timestamp = NOW() WHERE serial_number = ?", "si", $ocsp, $cert->serial); |
169 | 169 | return $ocsp; |
@@ -19,7 +19,7 @@ discard block |
||
19 | 19 | * License: see the web/copyright.inc.php file in the file structure or |
20 | 20 | * <base_url>/copyright.php after deploying the software |
21 | 21 | */ |
22 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
22 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
23 | 23 | $languageInstance = new \core\common\Language(); |
24 | 24 | $languageInstance->setTextDomain("diagnostics"); |
25 | 25 | $loggerInstance = new \core\common\Logging(); |
@@ -61,43 +61,43 @@ discard block |
||
61 | 61 | $select = "<div id='sp_abuse_problem'> |
62 | 62 | <select style='margin-left: 0px;' id='select_sp_problem'>"; |
63 | 63 | foreach ($sp_problem as $pname => $pdesc) { |
64 | - $select = $select . "<option value='$pname'>$pdesc</option>\n"; |
|
64 | + $select = $select."<option value='$pname'>$pdesc</option>\n"; |
|
65 | 65 | } |
66 | - $select = $select . "</select></div>"; |
|
66 | + $select = $select."</select></div>"; |
|
67 | 67 | $res = " |
68 | 68 | <input type='hidden' name='token' id='token' value=''> |
69 | 69 | <input type='hidden' name='tests_result' id='tests_result' value=''> |
70 | 70 | <table id='sp_questions'> |
71 | 71 | <tr id='sp_problem_selector'> |
72 | - <td>" . _("Select your problem") . "</td> |
|
72 | + <td>" . _("Select your problem")."</td> |
|
73 | 73 | <td>$select</td> |
74 | 74 | </tr> |
75 | 75 | <tr> |
76 | - <td>" . _("What is the realm of the IdP in question?") . "</td> |
|
76 | + <td>"._("What is the realm of the IdP in question?")."</td> |
|
77 | 77 | <td> |
78 | 78 | <input type='text' name='admin_realm' id='admin_realm' value='$realmFromURL'> |
79 | - <button class='diag_button' id='realm_in_db_admin' style='display: none;' accesskey='R' type='button'>" . |
|
80 | - _("Check this realm") . |
|
79 | + <button class='diag_button' id='realm_in_db_admin' style='display: none;' accesskey='R' type='button'>". |
|
80 | + _("Check this realm"). |
|
81 | 81 | "</button> |
82 | 82 | <div id='tests_info_area'></div> |
83 | 83 | </td> |
84 | 84 | </tr> |
85 | 85 | <tr class='hidden_row'> |
86 | - <td>" . _("What is the authentication timestamp of the user session in question?") . "</td> |
|
86 | + <td>" . _("What is the authentication timestamp of the user session in question?")."</td> |
|
87 | 87 | <td><input type='text' id='timestamp' name='timestamp'> |
88 | 88 | <div id='datepicker'></div> |
89 | 89 | </td> |
90 | 90 | </tr> |
91 | 91 | <tr class='hidden_row'> |
92 | - <td>" . _("What is the MAC address of the user session in question?") . "</td> |
|
92 | + <td>" . _("What is the MAC address of the user session in question?")."</td> |
|
93 | 93 | <td><input type='text' id='mac' name='mac'></td> |
94 | 94 | </tr> |
95 | 95 | <tr class='hidden_row'> |
96 | - <td>" . _("Additional comments") . "</td> |
|
96 | + <td>" . _("Additional comments")."</td> |
|
97 | 97 | <td><textarea id='freetext' name='freetext' cols='60' rows='5'></textarea></td> |
98 | 98 | </tr> |
99 | 99 | <tr class='hidden_row'> |
100 | - <td>" . _("Please specify an email address on which the IdP can contact you") . "</td> |
|
100 | + <td>" . _("Please specify an email address on which the IdP can contact you")."</td> |
|
101 | 101 | <td><input type='text' id='email' name='email'></td> |
102 | 102 | </tr> |
103 | 103 | <tr> |
@@ -105,82 +105,82 @@ discard block |
||
105 | 105 | <td></td> |
106 | 106 | </tr> |
107 | 107 | <tr class='hidden_row' id='send_query_to_idp'> |
108 | - <td>" . _("Now you can send your query") . "</td> |
|
109 | - <td><button type='submit' class='diag_button' id='submit_idp_query' name='go'>" . _("Send") . "</button></td> |
|
108 | + <td>" . _("Now you can send your query")."</td> |
|
109 | + <td><button type='submit' class='diag_button' id='submit_idp_query' name='go'>" . _("Send")."</button></td> |
|
110 | 110 | </tr> |
111 | 111 | </table>"; |
112 | - $res = $res . $javascript; |
|
112 | + $res = $res.$javascript; |
|
113 | 113 | } |
114 | 114 | if ($queryType == 'idp') { |
115 | 115 | $select = "<div id='idp_reported_problem' style='display:;'> |
116 | 116 | <select style='margin-left:0px;' id='select_idp_problem'>"; |
117 | 117 | foreach ($idp_problem as $pname => $pdesc) { |
118 | - $select = $select . "<option value='$pname'>$pdesc</option>\n"; |
|
118 | + $select = $select."<option value='$pname'>$pdesc</option>\n"; |
|
119 | 119 | } |
120 | - $select = $select . "</select></div>"; |
|
120 | + $select = $select."</select></div>"; |
|
121 | 121 | $res = " |
122 | 122 | <table id='idp_questions'> |
123 | 123 | <tr> |
124 | - <td>" . _("Select your problem") . "</td> |
|
124 | + <td>" . _("Select your problem")."</td> |
|
125 | 125 | <td>$select</td> |
126 | 126 | </tr> |
127 | 127 | <tr> |
128 | - <td>" . _("Identify the SP by one of following means") . "</td> |
|
128 | + <td>"._("Identify the SP by one of following means")."</td> |
|
129 | 129 | <td></td> |
130 | 130 | </tr> |
131 | 131 | <tr id='by_opname'> |
132 | - <td>" . _("SP Operator-Name attribute") . "</td> |
|
132 | + <td>" . _("SP Operator-Name attribute")."</td> |
|
133 | 133 | <td><input type='text' id='opname' name='opname' value=''></td> |
134 | 134 | </tr> |
135 | 135 | <tr id='spmanually'> |
136 | - <td>" . _("Select the SP manually:") . "</td> |
|
136 | + <td>" . _("Select the SP manually:")."</td> |
|
137 | 137 | <td> |
138 | 138 | <div id='select_asp_country'><a href='' id='asp_countries_list'> |
139 | - <span id='opnameselect'>" . _("click to select country and organisation") . "</a></span> |
|
139 | + <span id='opnameselect'>" . _("click to select country and organisation")."</a></span> |
|
140 | 140 | </div> |
141 | 141 | <div id='select_asp_area'></div> |
142 | 142 | </td> |
143 | 143 | </tr> |
144 | 144 | <tr id='asp_desc' style='display: none;'> |
145 | - <td>" . _("or") . ' ' . _("at least describe the SP location") . "</td> |
|
145 | + <td>" . _("or").' '._("at least describe the SP location")."</td> |
|
146 | 146 | <td><input type='text' id='asp_location' name='asp_location' value=''></td> |
147 | 147 | </tr> |
148 | 148 | <tr> |
149 | - <td>" . _("What is the outer ID of the user session in question?") . "</td> |
|
149 | + <td>" . _("What is the outer ID of the user session in question?")."</td> |
|
150 | 150 | <td><input type='text' id='outer_id' name='outer_id' value=''></td> |
151 | 151 | </tr> |
152 | 152 | <tr> |
153 | - <td>" . _("What is the authentication timestamp of the user session in question?") . "</td> |
|
153 | + <td>" . _("What is the authentication timestamp of the user session in question?")."</td> |
|
154 | 154 | <td> |
155 | 155 | <input type='text' id='timestamp' name='timestamp'> |
156 | 156 | <div id='datepicker'></div> |
157 | 157 | </td> |
158 | 158 | </tr> |
159 | 159 | <tr> |
160 | - <td>" . _("What is the MAC address of the user session in question?") . "</td> |
|
160 | + <td>" . _("What is the MAC address of the user session in question?")."</td> |
|
161 | 161 | <td><input type='text' id='mac' name='mac'></td> |
162 | 162 | </tr> |
163 | 163 | <tr> |
164 | - <td>" . _("Additional comments about the problem") . "</td> |
|
164 | + <td>" . _("Additional comments about the problem")."</td> |
|
165 | 165 | <td><textarea id='freetext' name='freetext' cols='60' rows='5'></textarea></td> |
166 | 166 | </tr> |
167 | 167 | <tr> |
168 | - <td>" . _("Do you have any contact details by which the user wishes to be contacted by the SP?") . "</td> |
|
168 | + <td>" . _("Do you have any contact details by which the user wishes to be contacted by the SP?")."</td> |
|
169 | 169 | <td><textarea id='c_details' name='c_details' cols='60' rows='5'></textarea></td> |
170 | 170 | </tr> |
171 | 171 | <tr> |
172 | - <td>" . _("Please specify an email address on which the SP can contact you") . "</td> |
|
172 | + <td>" . _("Please specify an email address on which the SP can contact you")."</td> |
|
173 | 173 | <td><input type='text' id='email' name='email'></td> |
174 | 174 | </tr> |
175 | 175 | <tr class='hidden_row' id='send_query_to_sp'> |
176 | - <td>" . _("Now you can send your query") . "</td> |
|
177 | - <td><button type='submit' class='diag_button' id='submit_sp_query' name='go'>" . _("Send") . "</button></td> |
|
176 | + <td>" . _("Now you can send your query")."</td> |
|
177 | + <td><button type='submit' class='diag_button' id='submit_sp_query' name='go'>" . _("Send")."</button></td> |
|
178 | 178 | </tr> |
179 | 179 | </table>"; |
180 | - $res = $res . $javascript; |
|
180 | + $res = $res.$javascript; |
|
181 | 181 | } |
182 | 182 | if ($queryType == 'idp_send' || $queryType == 'sp_send') { |
183 | - include_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
183 | + include_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
184 | 184 | $cat = new \core\CAT(); |
185 | 185 | $returnArray = array(); |
186 | 186 | if (count((array) $o) > 0) { |
@@ -189,8 +189,8 @@ discard block |
||
189 | 189 | switch ($key) { |
190 | 190 | case 'realm': |
191 | 191 | $pos = strpos($value, '@'); |
192 | - if ($pos !== FALSE ) { |
|
193 | - $value = substr($value, $pos+1); |
|
192 | + if ($pos !== FALSE) { |
|
193 | + $value = substr($value, $pos + 1); |
|
194 | 194 | } |
195 | 195 | case 'email': |
196 | 196 | $returnArray[$key] = filter_var($value, FILTER_VALIDATE_EMAIL); |
@@ -231,7 +231,7 @@ discard block |
||
231 | 231 | $mail = \core\common\OutsideComm::mailHandle(); |
232 | 232 | $emails = ['[email protected]']; |
233 | 233 | //$emails = explode(',', $returnArray['idpcontact']); |
234 | - $mail->FromName = \config\Master::APPEARANCE['productname'] . " Notification System"; |
|
234 | + $mail->FromName = \config\Master::APPEARANCE['productname']." Notification System"; |
|
235 | 235 | foreach ($emails as $email) { |
236 | 236 | $mail->addAddress($email); |
237 | 237 | } |
@@ -241,11 +241,11 @@ discard block |
||
241 | 241 | } else { |
242 | 242 | $link = 'http://'; |
243 | 243 | } |
244 | - $link .= $_SERVER['SERVER_NAME'] . \core\CAT::getRootUrlPath() . '/diag/show_realmcheck.php?token=' . $returnArray['token']; |
|
244 | + $link .= $_SERVER['SERVER_NAME'].\core\CAT::getRootUrlPath().'/diag/show_realmcheck.php?token='.$returnArray['token']; |
|
245 | 245 | $returnArray['testurl'] = $link; |
246 | 246 | $mail->Subject = _('Suspected a technical problem with the IdP'); |
247 | - $txt = _("We suspect a technical problem with the IdP handling the realm") . ' ' . |
|
248 | - $returnArray['realm'] . ".\n"; |
|
247 | + $txt = _("We suspect a technical problem with the IdP handling the realm").' '. |
|
248 | + $returnArray['realm'].".\n"; |
|
249 | 249 | $txt .= _("The CAT diagnostic test was run for this realm during reporting.\n"); |
250 | 250 | $txt .= _("The overall result was "); |
251 | 251 | if ($returnArray['tests_result'] == 0) { |
@@ -253,15 +253,15 @@ discard block |
||
253 | 253 | } else { |
254 | 254 | $txt .= _("failure"); |
255 | 255 | } |
256 | - $txt .= ".\n" . _("To see details go to "); |
|
256 | + $txt .= ".\n"._("To see details go to "); |
|
257 | 257 | $txt .= "$link\n\n"; |
258 | - $txt .= _("The reported problem details are as follows") . "\n"; |
|
259 | - $txt .= _("timestamp") . ": " . $returnArray['timestamp'] . "\n"; |
|
260 | - $txt .= _("client MAC address") . ": " . $returnArray['mac'] . "\n"; |
|
258 | + $txt .= _("The reported problem details are as follows")."\n"; |
|
259 | + $txt .= _("timestamp").": ".$returnArray['timestamp']."\n"; |
|
260 | + $txt .= _("client MAC address").": ".$returnArray['mac']."\n"; |
|
261 | 261 | if ($returnArray['freetext']) { |
262 | - $txt .= _("additional comments") . ': ' . $returnArray['freetext'] . "\n"; |
|
262 | + $txt .= _("additional comments").': '.$returnArray['freetext']."\n"; |
|
263 | 263 | } |
264 | - $txt .= "\n" . _("You can contact the incident reporter at") . ' ' . $returnArray['email']; |
|
264 | + $txt .= "\n"._("You can contact the incident reporter at").' '.$returnArray['email']; |
|
265 | 265 | |
266 | 266 | $mail->Body = $txt; |
267 | 267 | $sent = $mail->send(); |
@@ -124,7 +124,7 @@ discard block |
||
124 | 124 | public function divSilverbullet() { |
125 | 125 | $retval = " |
126 | 126 | <div id='silverbullet'>" |
127 | - .$this->Gui->textTemplates->templates[user\SB_GO_AWAY] . |
|
127 | + .$this->Gui->textTemplates->templates[user\SB_GO_AWAY]. |
|
128 | 128 | "</div> |
129 | 129 | "; |
130 | 130 | return $retval; |
@@ -222,7 +222,7 @@ discard block |
||
222 | 222 | <div id='profiles'> <!-- this is the profile selection filled during run time --> |
223 | 223 | <div id='profiles_h' class='sub_h'>".$this->Gui->textTemplates->templates[user\PROFILE_SELECTION]." |
224 | 224 | </div>" . |
225 | - "<select id='profile_list'></select><div id='profile_desc' class='profile_desc'></div>" . |
|
225 | + "<select id='profile_list'></select><div id='profile_desc' class='profile_desc'></div>". |
|
226 | 226 | "</div>"; |
227 | 227 | } |
228 | 228 | |
@@ -250,7 +250,7 @@ discard block |
||
250 | 250 | public function divInstitution($selectButton = TRUE) { |
251 | 251 | $retval = "<div id='institution_name'> |
252 | 252 | <span id='inst_name_span'></span> <div id='inst_extra_text'></div><!-- this will be filled with the IdP name -->" . |
253 | - ($selectButton ? "<a id='select_another' class='signin' href=\"\">".$this->Gui->textTemplates->templates[user\INSTITUTION_SELECTION]."</a>" : "") . |
|
253 | + ($selectButton ? "<a id='select_another' class='signin' href=\"\">".$this->Gui->textTemplates->templates[user\INSTITUTION_SELECTION]."</a>" : ""). |
|
254 | 254 | "</div>"; |
255 | 255 | $retval .= $this->emptyImage('idp_logo', 'IdP Logo'); |
256 | 256 | return $retval; |
@@ -124,7 +124,7 @@ discard block |
||
124 | 124 | public function divSilverbullet() { |
125 | 125 | $retval = " |
126 | 126 | <div id='silverbullet'>" |
127 | - .$this->Gui->textTemplates->templates[user\SB_GO_AWAY] . |
|
127 | + .$this->Gui->textTemplates->templates[user\SB_GO_AWAY] . |
|
128 | 128 | "</div> |
129 | 129 | "; |
130 | 130 | return $retval; |
@@ -293,8 +293,8 @@ discard block |
||
293 | 293 | } |
294 | 294 | |
295 | 295 | $retval .= "<td><button name='$d' class='other_os' id='$d'>".$D['display']."</button>" |
296 | - ."</td>" |
|
297 | - ."<td><button name='$d' class='more_info_b' id='info_b_$d'>i</button></td></tr>\n"; |
|
296 | + ."</td>" |
|
297 | + ."<td><button name='$d' class='more_info_b' id='info_b_$d'>i</button></td></tr>\n"; |
|
298 | 298 | $deviceIndex++; |
299 | 299 | } |
300 | 300 | $retval .= "</tbody>"; |
@@ -341,11 +341,11 @@ discard block |
||
341 | 341 | <tr> |
342 | 342 | <td>" . |
343 | 343 | $this->Gui->catVersion |
344 | - ." |
|
344 | + ." |
|
345 | 345 | </td>"; |
346 | 346 | |
347 | 347 | if (!empty(\config\Master::APPEARANCE['privacy_notice_url'])) { |
348 | - $retval .= "<td>".$this->Gui->catCopyrifhtAndLicense."<br><span id='privacy_notice_cons'>".\config\ConfAssistant::CONSORTIUM['display_name']."</span> <a href='".\config\Master::APPEARANCE['privacy_notice_url']."'>".sprintf(_("%s Privacy Notice"), '')."</a></td>"; |
|
348 | + $retval .= "<td>".$this->Gui->catCopyrifhtAndLicense."<br><span id='privacy_notice_cons'>".\config\ConfAssistant::CONSORTIUM['display_name']."</span> <a href='".\config\Master::APPEARANCE['privacy_notice_url']."'>".sprintf(_("%s Privacy Notice"), '')."</a></td>"; |
|
349 | 349 | } |
350 | 350 | $retval .= "<td>"; |
351 | 351 | if (\config\ConfAssistant::CONSORTIUM['name'] == "eduroam" && isset(\config\ConfAssistant::CONSORTIUM['deployment-voodoo']) && \config\ConfAssistant::CONSORTIUM['deployment-voodoo'] == "Operations Team") { |
@@ -121,7 +121,7 @@ discard block |
||
121 | 121 | $cryptoJson = openssl_encrypt($clearJson, 'AES-256-CBC', $encryptionKey, OPENSSL_RAW_DATA, $initVector); |
122 | 122 | $hmac = hash_hmac("sha1", $cryptoJson, $encryptionKey, TRUE); |
123 | 123 | |
124 | - $this->loggerInstance->debug(4, "Clear = $clearJson\nSalt = $salt\nPW = " . $password . "\nb(IV) = " . base64_encode($initVector) . "\nb(Cipher) = " . base64_encode($cryptoJson) . "\nb(HMAC) = " . base64_encode($hmac)); |
|
124 | + $this->loggerInstance->debug(4, "Clear = $clearJson\nSalt = $salt\nPW = ".$password."\nb(IV) = ".base64_encode($initVector)."\nb(Cipher) = ".base64_encode($cryptoJson)."\nb(HMAC) = ".base64_encode($hmac)); |
|
125 | 125 | |
126 | 126 | // now, generate the container that holds all the crypto data |
127 | 127 | $finalArray = [ |
@@ -195,7 +195,7 @@ discard block |
||
195 | 195 | private function wiredBlock($eapdetails) |
196 | 196 | { |
197 | 197 | return [ |
198 | - "GUID" => \core\common\Entity::uuid('', "wired-dot1x-ethernet") . "}", |
|
198 | + "GUID" => \core\common\Entity::uuid('', "wired-dot1x-ethernet")."}", |
|
199 | 199 | "Name" => "eduroam configuration (wired network)", |
200 | 200 | "Remove" => false, |
201 | 201 | "Type" => "Ethernet", |
@@ -236,7 +236,7 @@ discard block |
||
236 | 236 | // if silverbullet, we deliver the client cert inline |
237 | 237 | |
238 | 238 | if ($selectedEap == \core\common\EAP::EAPTYPE_SILVERBULLET) { |
239 | - $eaparray['ClientCertRef'] = "[" . $this->clientCert['GUID'] . "]"; |
|
239 | + $eaparray['ClientCertRef'] = "[".$this->clientCert['GUID']."]"; |
|
240 | 240 | $eaparray['ClientCertType'] = "Ref"; |
241 | 241 | } |
242 | 242 | |
@@ -271,7 +271,7 @@ discard block |
||
271 | 271 | $jsonArray = ["Type" => "UnencryptedConfiguration"]; |
272 | 272 | |
273 | 273 | foreach ($this->attributes['internal:CAs'][0] as $ca) { |
274 | - $caRefs[] = "{" . $ca['uuid'] . "}"; |
|
274 | + $caRefs[] = "{".$ca['uuid']."}"; |
|
275 | 275 | } |
276 | 276 | // define CA certificates |
277 | 277 | foreach ($this->attributes['internal:CAs'][0] as $ca) { |
@@ -281,15 +281,15 @@ discard block |
||
281 | 281 | if ($caSanitized1 === FALSE) { |
282 | 282 | throw new Exception("Error cropping PEM data at its BEGIN marker."); |
283 | 283 | } |
284 | - $this->loggerInstance->debug(4, $caSanitized1 . "\n"); |
|
284 | + $this->loggerInstance->debug(4, $caSanitized1."\n"); |
|
285 | 285 | // remove \n |
286 | 286 | $caSanitized = str_replace("\n", "", $caSanitized1); |
287 | - $jsonArray["Certificates"][] = ["GUID" => "{" . $ca['uuid'] . "}", "Remove" => false, "Type" => "Authority", "X509" => $caSanitized]; |
|
288 | - $this->loggerInstance->debug(3, $caSanitized . "\n"); |
|
287 | + $jsonArray["Certificates"][] = ["GUID" => "{".$ca['uuid']."}", "Remove" => false, "Type" => "Authority", "X509" => $caSanitized]; |
|
288 | + $this->loggerInstance->debug(3, $caSanitized."\n"); |
|
289 | 289 | } |
290 | 290 | // if we are doing silverbullet, include the unencrypted(!) P12 as a client certificate |
291 | 291 | if ($this->selectedEap == \core\common\EAP::EAPTYPE_SILVERBULLET) { |
292 | - $jsonArray["Certificates"][] = ["GUID" => "[" . $this->clientCert['GUID'] . "]", "PKCS12" => base64_encode($this->clientCert['certdataclear']), "Remove" => false, "Type" => "Client"]; |
|
292 | + $jsonArray["Certificates"][] = ["GUID" => "[".$this->clientCert['GUID']."]", "PKCS12" => base64_encode($this->clientCert['certdataclear']), "Remove" => false, "Type" => "Client"]; |
|
293 | 293 | } |
294 | 294 | $eaparray = $this->eapBlock($caRefs); |
295 | 295 | // define Wi-Fi networks |
@@ -312,7 +312,7 @@ discard block |
||
312 | 312 | |
313 | 313 | file_put_contents('installer_profile', $finalJson); |
314 | 314 | |
315 | - $fileName = $this->installerBasename . '.onc'; |
|
315 | + $fileName = $this->installerBasename.'.onc'; |
|
316 | 316 | |
317 | 317 | if (!$this->sign) { |
318 | 318 | rename("installer_profile", $fileName); |
@@ -323,7 +323,7 @@ discard block |
||
323 | 323 | // have the notion of signing |
324 | 324 | // but if they ever change their mind, we are prepared |
325 | 325 | |
326 | - $outputFromSigning = system($this->sign . " installer_profile '$fileName' > /dev/null"); |
|
326 | + $outputFromSigning = system($this->sign." installer_profile '$fileName' > /dev/null"); |
|
327 | 327 | if ($outputFromSigning === FALSE) { |
328 | 328 | $this->loggerInstance->debug(2, "Signing the ONC installer $fileName FAILED!\n"); |
329 | 329 | } |
@@ -755,7 +755,22 @@ |
||
755 | 755 | } |
756 | 756 | ?> |
757 | 757 | <div id="tabs-<?php echo $i;?>"> |
758 | - <button id="run_<?php if ($i==3) echo 'd'; else echo 'o';?>_tests"; onclick="run_<?php if ($i==3) echo 'dynamic'; else echo 'openroaming';?>()"><?php if ($i==3) echo _("Repeat dynamic connectivity tests"); else echo _("Repeat OpenRoaming connectivity tests");?></button> |
|
758 | + <button id="run_<?php if ($i==3) { |
|
759 | + echo 'd'; |
|
760 | +} else { |
|
761 | + echo 'o'; |
|
762 | +} |
|
763 | +?>_tests"; onclick="run_<?php if ($i==3) { |
|
764 | + echo 'dynamic'; |
|
765 | +} else { |
|
766 | + echo 'openroaming'; |
|
767 | +} |
|
768 | +?>()"><?php if ($i==3) { |
|
769 | + echo _("Repeat dynamic connectivity tests"); |
|
770 | +} else { |
|
771 | + echo _("Repeat OpenRoaming connectivity tests"); |
|
772 | +} |
|
773 | +?></button> |
|
759 | 774 | |
760 | 775 | <?php |
761 | 776 | echo "<div id='"; |
@@ -578,9 +578,9 @@ discard block |
||
578 | 578 | $naptr = $rfc7585suite->relevantNAPTR(); |
579 | 579 | if ($naptr == \core\diag\RADIUSTests::RETVAL_NOTCONFIGURED) { |
580 | 580 | if ($dynType == "") { |
581 | - echo "<tr><td>" . _("Dynamic discovery test is not configured") . "</td><td>"; |
|
581 | + echo "<tr><td>" . _("Dynamic discovery test is not configured") . "</td><td>"; |
|
582 | 582 | } else { |
583 | - echo "<tr><td>" . _("OpenRoaming connectivity test is not configured") . "</td><td>"; |
|
583 | + echo "<tr><td>" . _("OpenRoaming connectivity test is not configured") . "</td><td>"; |
|
584 | 584 | } |
585 | 585 | } else { |
586 | 586 | echo "<table>"; |
@@ -698,7 +698,7 @@ discard block |
||
698 | 698 | echo "} |
699 | 699 | </script>"; |
700 | 700 | } else { |
701 | - echo ' |
|
701 | + echo ' |
|
702 | 702 | function run_openroaming() { |
703 | 703 | running_ajax_openroaming = 0; |
704 | 704 | $("#main_openroaming_ico").attr("src",icon_loading); |
@@ -720,10 +720,10 @@ discard block |
||
720 | 720 | } |
721 | 721 | } |
722 | 722 | if ($dynType == '') { |
723 | - $naptrs[0] = $naptr; |
|
724 | - } else { |
|
725 | - $naptrs[1] = $naptr; |
|
726 | - } |
|
723 | + $naptrs[0] = $naptr; |
|
724 | + } else { |
|
725 | + $naptrs[1] = $naptr; |
|
726 | + } |
|
727 | 727 | } |
728 | 728 | echo "<strong>" . _("Static connectivity tests") . "</strong> |
729 | 729 | <table><tr> |
@@ -736,7 +736,7 @@ discard block |
||
736 | 736 | </tr></table>"; |
737 | 737 | } |
738 | 738 | if (isset($orrealm) && count($orrealm) && ($naptrs[1] > 0)) { |
739 | - echo "<hr><strong>" . _("OpenRoaming connectivity tests") . "</strong> |
|
739 | + echo "<hr><strong>" . _("OpenRoaming connectivity tests") . "</strong> |
|
740 | 740 | <table><tr> |
741 | 741 | <td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='main_openroaming_ico' class='icon'></td><td id='main_openroaming_result' style='display:none'> </td> |
742 | 742 | </tr></table>"; |
@@ -774,12 +774,12 @@ discard block |
||
774 | 774 | <?php |
775 | 775 | for ($i=3; $i<5; $i++) { |
776 | 776 | if ($i == 3 && $naptrs[0] <= 0) { |
777 | - continue; |
|
777 | + continue; |
|
778 | 778 | } |
779 | 779 | if ($i == 4) { |
780 | - if ((count($orrealm) == 0) || ($naptrs[1] <= 0)) { |
|
781 | - continue; |
|
782 | - } |
|
780 | + if ((count($orrealm) == 0) || ($naptrs[1] <= 0)) { |
|
781 | + continue; |
|
782 | + } |
|
783 | 783 | } |
784 | 784 | if ($i == 3) { |
785 | 785 | $rfc7585suite = $dnsChecks; |
@@ -796,16 +796,16 @@ discard block |
||
796 | 796 | echo "_tests'><fieldset class='option_container'> |
797 | 797 | <legend><strong>"; |
798 | 798 | if ($i==3) { |
799 | - echo _("DYNAMIC connectivity tests"); |
|
799 | + echo _("DYNAMIC connectivity tests"); |
|
800 | 800 | } else { |
801 | - echo _("OpenRoaming connectivity tests"); |
|
801 | + echo _("OpenRoaming connectivity tests"); |
|
802 | 802 | } |
803 | 803 | echo "</strong></legend>"; |
804 | 804 | $prefix1 = 'dynamic'; |
805 | 805 | $prefix2 = ''; |
806 | 806 | if ($i == 4) { |
807 | - $prefix1 = 'openroaming'; |
|
808 | - $prefix2 = $prefix1; |
|
807 | + $prefix1 = 'openroaming'; |
|
808 | + $prefix2 = $prefix1; |
|
809 | 809 | } |
810 | 810 | $resultstoprint = []; |
811 | 811 | if (count($rfc7585suite->NAPTR_hostname_records) > 0) { |
@@ -19,7 +19,7 @@ discard block |
||
19 | 19 | * <base_url>/copyright.php after deploying the software |
20 | 20 | */ |
21 | 21 | |
22 | -require_once dirname(dirname(__DIR__)) . "/config/_config.php"; |
|
22 | +require_once dirname(dirname(__DIR__))."/config/_config.php"; |
|
23 | 23 | |
24 | 24 | $loggerInstance = new \core\common\Logging(); |
25 | 25 | |
@@ -69,13 +69,13 @@ discard block |
||
69 | 69 | $dnsChecksOR = new \core\diag\RFC7585Tests($check_realm, "aaa+auth:radius.tls.tcp"); |
70 | 70 | } |
71 | 71 | } else { |
72 | - $error_message = _("You asked for a realm check, but we don't know the realm for this profile!") . "</p>"; |
|
72 | + $error_message = _("You asked for a realm check, but we don't know the realm for this profile!")."</p>"; |
|
73 | 73 | } |
74 | 74 | } else { // someone else's realm, and we don't know anything about it... only shallow checks |
75 | 75 | $check_realm = $validator->realm($realm ?? $_SESSION['check_realm'] ?? ""); |
76 | 76 | if ($check_realm !== FALSE) { |
77 | 77 | $_SESSION['check_realm'] = $check_realm; |
78 | - $testsuite = new \core\diag\RADIUSTests($check_realm, "@" . $check_realm); |
|
78 | + $testsuite = new \core\diag\RADIUSTests($check_realm, "@".$check_realm); |
|
79 | 79 | $dnsChecks = new \core\diag\RFC7585Tests($check_realm); |
80 | 80 | } else { |
81 | 81 | $error_message = _("No valid realm name given, cannot execute any checks!"); |
@@ -122,7 +122,7 @@ discard block |
||
122 | 122 | var listofcas = "<?php echo _("You should update your list of accredited CAs") ?>"; |
123 | 123 | var getitfrom = "<?php echo _("Get it from here.") ?>"; |
124 | 124 | var listsource = "<?php echo \config\Diagnostics::RADIUSTESTS['accreditedCAsURL'] ?>"; |
125 | - var moretext = "<?php echo _("more") . "»" ?>"; |
|
125 | + var moretext = "<?php echo _("more")."»" ?>"; |
|
126 | 126 | var lesstext = "<?php echo "«" ?>"; |
127 | 127 | var morealltext = "<?php echo _("Show detailed information for all tests") ?>"; |
128 | 128 | var eof_error = "<?php echo \core\diag\RADIUSTests::CERTPROB_UNEXPECTED_EOF ?>"; |
@@ -273,10 +273,10 @@ discard block |
||
273 | 273 | |
274 | 274 | cliinfo = cliinfo + '<li>'; |
275 | 275 | if (data.ca[key].certificate[c].finalerror && data.ca[key].certificate[c].finalerror==2) { |
276 | - cliinfo = cliinfo + ' <?php echo _("this test was skipped - no appropriate client certificate");?>' + '</ul></li>'; |
|
276 | + cliinfo = cliinfo + ' <?php echo _("this test was skipped - no appropriate client certificate"); ?>' + '</ul></li>'; |
|
277 | 277 | } else { |
278 | 278 | cliinfo = cliinfo + '<table><tbody><tr><td class="icon_td"><img class="icon" src="' + icons[level] + '" style="width: 24px;"></td><td>' + state; |
279 | - cliinfo = cliinfo + ' <?php echo "(" . sprintf(_("elapsed time: %sms."), "'+data.ca[key].certificate[c].time_millisec+' ") . ")"; ?>' + add + '</td></tr>'; |
|
279 | + cliinfo = cliinfo + ' <?php echo "(".sprintf(_("elapsed time: %sms."), "'+data.ca[key].certificate[c].time_millisec+' ").")"; ?>' + add + '</td></tr>'; |
|
280 | 280 | cliinfo = cliinfo + '</tbody></table></ul></li>'; |
281 | 281 | } |
282 | 282 | |
@@ -475,7 +475,7 @@ discard block |
||
475 | 475 | }); |
476 | 476 | } |
477 | 477 | o = o + cert_data + '</table>'; |
478 | - $("#eap_test" + data.hostindex).append('<strong><img style="position: relative; top: 2px;" src="' + icons[v.level] + '"><span style="position: relative; top: -5px; <?php echo $start;?>: 1em">' + v.eap + ' – <?php printf(_("elapsed time: %sms."), "'+v.time_millisec+' ") ?></span></strong><div class="more" style="padding-<?php echo $start;?>: 40px"><div class="morecontent"><div style="display:none; background: #eee;">' + o + '</div><a href="" class="morelink">' + moretext + '</a></div></div>'); |
|
478 | + $("#eap_test" + data.hostindex).append('<strong><img style="position: relative; top: 2px;" src="' + icons[v.level] + '"><span style="position: relative; top: -5px; <?php echo $start; ?>: 1em">' + v.eap + ' – <?php printf(_("elapsed time: %sms."), "'+v.time_millisec+' ") ?></span></strong><div class="more" style="padding-<?php echo $start; ?>: 40px"><div class="morecontent"><div style="display:none; background: #eee;">' + o + '</div><a href="" class="morelink">' + moretext + '</a></div></div>'); |
|
479 | 479 | }); |
480 | 480 | } |
481 | 481 | |
@@ -486,8 +486,8 @@ discard block |
||
486 | 486 | <?php |
487 | 487 | foreach (\config\Diagnostics::RADIUSTESTS['UDP-hosts'] as $hostindex => $host) { |
488 | 488 | print " |
489 | -$(\"#live_src" . $hostindex . "_img\").attr('src',icon_loading); |
|
490 | -$(\"#live_src" . $hostindex . "_img\").show(); |
|
489 | +$(\"#live_src" . $hostindex."_img\").attr('src',icon_loading); |
|
490 | +$(\"#live_src" . $hostindex."_img\").show(); |
|
491 | 491 | $.ajax({ |
492 | 492 | url: 'radius_tests.php?src=0&hostindex=$hostindex&realm='+realm, |
493 | 493 | type: 'POST', |
@@ -520,15 +520,15 @@ discard block |
||
520 | 520 | <?php |
521 | 521 | foreach (\config\Diagnostics::RADIUSTESTS['UDP-hosts'] as $hostindex => $host) { |
522 | 522 | if ($testedProfile !== NULL) { |
523 | - $extraarg = "profile_id: " . $testedProfile->identifier . ", "; |
|
523 | + $extraarg = "profile_id: ".$testedProfile->identifier.", "; |
|
524 | 524 | } else { |
525 | 525 | $extraarg = ""; |
526 | 526 | } |
527 | 527 | print " |
528 | -$(\"#src" . $hostindex . "_img\").attr('src',icon_loading); |
|
528 | +$(\"#src" . $hostindex."_img\").attr('src',icon_loading); |
|
529 | 529 | $(\"#src$hostindex\").html(''); |
530 | 530 | running_ajax_stat++; |
531 | -$.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'udp', $extraarg realm: realm, src: $hostindex, lang: '" . $gui->languageInstance->getLang() . "', hostindex: '$hostindex'}, hostindex: '$hostindex', error: error_handler, success: udp, dataType: 'json'}); |
|
531 | +$.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'udp', $extraarg realm: realm, src: $hostindex, lang: '".$gui->languageInstance->getLang()."', hostindex: '$hostindex'}, hostindex: '$hostindex', error: error_handler, success: udp, dataType: 'json'}); |
|
532 | 532 | "; |
533 | 533 | } |
534 | 534 | |
@@ -586,7 +586,7 @@ discard block |
||
586 | 586 | if ($check_realm === FALSE) { |
587 | 587 | print "<p>$error_message</p>"; |
588 | 588 | } else { |
589 | - print "<h1>" . sprintf(_("Realm testing for: %s"), $check_realm) . "</h1>\n"; |
|
589 | + print "<h1>".sprintf(_("Realm testing for: %s"), $check_realm)."</h1>\n"; |
|
590 | 590 | ?> |
591 | 591 | <div id="debug_out" style="display: none"></div> |
592 | 592 | <div id="tabs" style="min-width: 600px; max-width:1000px"> |
@@ -608,25 +608,25 @@ discard block |
||
608 | 608 | // NAPTR existence check |
609 | 609 | if ($dynType == "") { |
610 | 610 | $rfc7585suite = $dnsChecks; |
611 | - echo "<strong>" . _("DNS checks") . "</strong><div>"; |
|
611 | + echo "<strong>"._("DNS checks")."</strong><div>"; |
|
612 | 612 | } else { |
613 | 613 | if (count($orrealm) == 0) { |
614 | 614 | continue; |
615 | 615 | } |
616 | 616 | $rfc7585suite = $dnsChecksOR; |
617 | - echo "<strong>" . _("OpenRoaming DNS checks") . "</strong><div>"; |
|
617 | + echo "<strong>"._("OpenRoaming DNS checks")."</strong><div>"; |
|
618 | 618 | } |
619 | 619 | $naptr = $rfc7585suite->relevantNAPTR(); |
620 | 620 | if ($naptr == \core\diag\RADIUSTests::RETVAL_NOTCONFIGURED) { |
621 | 621 | if ($dynType == "") { |
622 | - echo "<tr><td>" . _("Dynamic discovery test is not configured") . "</td><td>"; |
|
622 | + echo "<tr><td>"._("Dynamic discovery test is not configured")."</td><td>"; |
|
623 | 623 | } else { |
624 | - echo "<tr><td>" . _("OpenRoaming connectivity test is not configured") . "</td><td>"; |
|
624 | + echo "<tr><td>"._("OpenRoaming connectivity test is not configured")."</td><td>"; |
|
625 | 625 | } |
626 | 626 | } else { |
627 | 627 | echo "<table>"; |
628 | 628 | // output in friendly words |
629 | - echo "<tr><td>" . _("Checking NAPTR existence:") . "</td><td>"; |
|
629 | + echo "<tr><td>"._("Checking NAPTR existence:")."</td><td>"; |
|
630 | 630 | switch ($naptr) { |
631 | 631 | case \core\diag\RFC7585Tests::RETVAL_NONAPTR: |
632 | 632 | echo _("This realm has no NAPTR records."); |
@@ -641,7 +641,7 @@ discard block |
||
641 | 641 | |
642 | 642 | // compliance checks for NAPTRs |
643 | 643 | if ($naptr > 0) { |
644 | - echo "<tr><td>" . _("Checking NAPTR compliance (flag = S and regex = {empty}):") . "</td><td>"; |
|
644 | + echo "<tr><td>"._("Checking NAPTR compliance (flag = S and regex = {empty}):")."</td><td>"; |
|
645 | 645 | $naptr_valid = $rfc7585suite->relevantNAPTRcompliance(); |
646 | 646 | switch ($naptr_valid) { |
647 | 647 | case \core\diag\RADIUSTests::RETVAL_OK: |
@@ -656,7 +656,7 @@ discard block |
||
656 | 656 | // SRV resolution |
657 | 657 | if ($naptr > 0 && $naptr_valid == \core\diag\RADIUSTests::RETVAL_OK) { |
658 | 658 | $srv = $rfc7585suite->relevantNAPTRsrvResolution(); |
659 | - echo "<tr><td>" . _("Checking SRVs:") . "</td><td>"; |
|
659 | + echo "<tr><td>"._("Checking SRVs:")."</td><td>"; |
|
660 | 660 | switch ($srv) { |
661 | 661 | case \core\diag\RADIUSTests::RETVAL_SKIPPED: |
662 | 662 | echo _("This check was skipped."); |
@@ -672,7 +672,7 @@ discard block |
||
672 | 672 | // IP addresses for the hosts |
673 | 673 | if ($naptr > 0 && $naptr_valid == \core\diag\RADIUSTests::RETVAL_OK && $srv > 0) { |
674 | 674 | $hosts = $rfc7585suite->relevantNAPTRhostnameResolution(); |
675 | - echo "<tr><td>" . _("Checking IP address resolution:") . "</td><td>"; |
|
675 | + echo "<tr><td>"._("Checking IP address resolution:")."</td><td>"; |
|
676 | 676 | switch ($srv) { |
677 | 677 | case \core\diag\RADIUSTests::RETVAL_SKIPPED: |
678 | 678 | echo _("This check was skipped."); |
@@ -689,12 +689,12 @@ discard block |
||
689 | 689 | echo "</table><br/>"; |
690 | 690 | if ($dynType == "") { |
691 | 691 | if (count($testsuite->listerrors()) == 0) { |
692 | - echo sprintf(_("Realm is <strong>%s</strong> "), _(($naptr > 0 ? "DYNAMIC" : "STATIC"))) . _("with no DNS errors encountered. Congratulations!"); |
|
692 | + echo sprintf(_("Realm is <strong>%s</strong> "), _(($naptr > 0 ? "DYNAMIC" : "STATIC")))._("with no DNS errors encountered. Congratulations!"); |
|
693 | 693 | } else { |
694 | - echo sprintf(_("Realm is <strong>%s</strong> "), _(($naptr > 0 ? "DYNAMIC" : "STATIC"))) . _("but there were DNS errors! Check them!") . " " . _("You should re-run the tests after fixing the errors; more errors might be uncovered at that point. The exact error causes are listed below."); |
|
694 | + echo sprintf(_("Realm is <strong>%s</strong> "), _(($naptr > 0 ? "DYNAMIC" : "STATIC")))._("but there were DNS errors! Check them!")." "._("You should re-run the tests after fixing the errors; more errors might be uncovered at that point. The exact error causes are listed below."); |
|
695 | 695 | echo "<div class='notacceptable'><table>"; |
696 | 696 | foreach ($testsuite->listerrors() as $details) { |
697 | - echo "<tr><td>" . $details['TYPE'] . "</td><td>" . $details['TARGET'] . "</td></tr>"; |
|
697 | + echo "<tr><td>".$details['TYPE']."</td><td>".$details['TARGET']."</td></tr>"; |
|
698 | 698 | } |
699 | 699 | echo "</table></div>"; |
700 | 700 | } |
@@ -713,7 +713,7 @@ discard block |
||
713 | 713 | $("#dynamic_tests").show(); |
714 | 714 | '; |
715 | 715 | foreach ($rfc7585suite->NAPTR_hostname_records as $hostindex => $addr) { |
716 | - $host = ($addr['family'] == "IPv6" ? "[" : "") . $addr['IP'] . ($addr['family'] == "IPv6" ? "]" : "") . ":" . $addr['port']; |
|
716 | + $host = ($addr['family'] == "IPv6" ? "[" : "").$addr['IP'].($addr['family'] == "IPv6" ? "]" : "").":".$addr['port']; |
|
717 | 717 | $expectedName = $addr['hostname']; |
718 | 718 | $ssltest = 1; |
719 | 719 | if (isset($addr['unavailable']) && $addr['unavailable']) { |
@@ -722,9 +722,9 @@ discard block |
||
722 | 722 | //$rfc6614suite = new \core\diag\RFC6614Tests([$host], $expectedName, $consortiumName); |
723 | 723 | print " |
724 | 724 | running_ajax_dyn++; |
725 | - $.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'capath', realm: realm, src: '$host', lang: '" . $gui->languageInstance->getLang() . "', hostindex: '$hostindex', expectedname: '$expectedName', ssltest: $ssltest }, hostindex: '$hostindex', error: error_handler, success: capath, dataType: 'json'}); |
|
725 | + $.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'capath', realm: realm, src: '$host', lang: '".$gui->languageInstance->getLang()."', hostindex: '$hostindex', expectedname: '$expectedName', ssltest: $ssltest }, hostindex: '$hostindex', error: error_handler, success: capath, dataType: 'json'}); |
|
726 | 726 | running_ajax_dyn++; |
727 | - $.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'clients', realm: realm, src: '$host', lang: '" . $gui->languageInstance->getLang() . "', hostindex: '$hostindex', ssltest: $ssltest }, hostindex: '$hostindex', error: error_handler, success: clients, dataType: 'json'}); |
|
727 | + $.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'clients', realm: realm, src: '$host', lang: '".$gui->languageInstance->getLang()."', hostindex: '$hostindex', ssltest: $ssltest }, hostindex: '$hostindex', error: error_handler, success: clients, dataType: 'json'}); |
|
728 | 728 | "; |
729 | 729 | } |
730 | 730 | echo "} |
@@ -740,11 +740,11 @@ discard block |
||
740 | 740 | $("#openroaming_tests").show(); |
741 | 741 | '; |
742 | 742 | foreach ($rfc7585suite->NAPTR_hostname_records as $hostindex => $addr) { |
743 | - $host = ($addr['family'] == "IPv6" ? "[" : "") . $addr['IP'] . ($addr['family'] == "IPv6" ? "]" : "") . ":" . $addr['port']; |
|
743 | + $host = ($addr['family'] == "IPv6" ? "[" : "").$addr['IP'].($addr['family'] == "IPv6" ? "]" : "").":".$addr['port']; |
|
744 | 744 | $expectedName = $addr['hostname']; |
745 | 745 | print " |
746 | 746 | running_ajax_openroaming++; |
747 | - $.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'openroamingcapath', realm: realm, src: '$host', lang: '" . $gui->languageInstance->getLang() . "', hostindex: '$hostindex', expectedname: '$expectedName', ssltest: $ssltest, protocols: '$protstr' }, hostindex: '$hostindex', openroaming: true, error: error_handler, success: capath, dataType: 'json'}); |
|
747 | + $.ajax({url:'radius_tests.php', timeout: ajax_timeout, data:{test_type: 'openroamingcapath', realm: realm, src: '$host', lang: '".$gui->languageInstance->getLang()."', hostindex: '$hostindex', expectedname: '$expectedName', ssltest: $ssltest, protocols: '$protstr' }, hostindex: '$hostindex', openroaming: true, error: error_handler, success: capath, dataType: 'json'}); |
|
748 | 748 | "; |
749 | 749 | } |
750 | 750 | echo "} |
@@ -757,18 +757,18 @@ discard block |
||
757 | 757 | $naptrs[1] = $naptr; |
758 | 758 | } |
759 | 759 | } |
760 | - echo "<strong>" . _("Static connectivity tests") . "</strong> |
|
760 | + echo "<strong>"._("Static connectivity tests")."</strong> |
|
761 | 761 | <table><tr> |
762 | 762 | <td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='main_static_ico' class='icon'></td><td id='main_static_result' style='display:none'> </td> |
763 | 763 | </tr></table>"; |
764 | 764 | if ($naptrs[0] > 0) { |
765 | - echo "<hr><strong>" . _("Dynamic connectivity tests") . "</strong> |
|
765 | + echo "<hr><strong>"._("Dynamic connectivity tests")."</strong> |
|
766 | 766 | <table><tr> |
767 | 767 | <td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='main_dynamic_ico' class='icon'></td><td id='main_dynamic_result' style='display:none'> </td> |
768 | 768 | </tr></table>"; |
769 | 769 | } |
770 | 770 | if (isset($orrealm) && count($orrealm) && ($naptrs[1] > 0)) { |
771 | - echo "<hr><strong>" . _("OpenRoaming connectivity tests") . "</strong> |
|
771 | + echo "<hr><strong>"._("OpenRoaming connectivity tests")."</strong> |
|
772 | 772 | <table><tr> |
773 | 773 | <td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='main_openroaming_ico' class='icon'></td><td id='main_openroaming_result' style='display:none'> </td> |
774 | 774 | </tr></table>"; |
@@ -788,12 +788,12 @@ discard block |
||
788 | 788 | print "<p>"; |
789 | 789 | foreach (\config\Diagnostics::RADIUSTESTS['UDP-hosts'] as $hostindex => $host) { |
790 | 790 | print "<hr>"; |
791 | - printf(_("Testing from: %s"), "<strong>" . \config\Diagnostics::RADIUSTESTS['UDP-hosts'][$hostindex]['display_name'] . "</strong>"); |
|
791 | + printf(_("Testing from: %s"), "<strong>".\config\Diagnostics::RADIUSTESTS['UDP-hosts'][$hostindex]['display_name']."</strong>"); |
|
792 | 792 | print "<table id='results$hostindex' style='width:100%' class='udp_results'> |
793 | 793 | <tr> |
794 | -<td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='src" . $hostindex . "_img'></td> |
|
794 | +<td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='src".$hostindex."_img'></td> |
|
795 | 795 | <td id='src$hostindex' colspan=2> |
796 | -" . _("testing...") . " |
|
796 | +"._("testing...")." |
|
797 | 797 | </td> |
798 | 798 | </tr> |
799 | 799 | </table>"; |
@@ -804,7 +804,7 @@ discard block |
||
804 | 804 | |
805 | 805 | </div> |
806 | 806 | <?php |
807 | - for ($i=3; $i<5; $i++) { |
|
807 | + for ($i = 3; $i < 5; $i++) { |
|
808 | 808 | if ($i == 3 && $naptrs[0] <= 0) { |
809 | 809 | continue; |
810 | 810 | } |
@@ -819,15 +819,15 @@ discard block |
||
819 | 819 | $rfc7585suite = $dnsChecksOR; |
820 | 820 | } |
821 | 821 | ?> |
822 | - <div id="tabs-<?php echo $i;?>"> |
|
823 | - <button id="run_<?php if ($i==3) echo 'd'; else echo 'o';?>_tests"; onclick="run_<?php if ($i==3) echo 'dynamic'; else echo 'openroaming';?>()"><?php if ($i==3) echo _("Repeat dynamic connectivity tests"); else echo _("Repeat OpenRoaming connectivity tests");?></button> |
|
822 | + <div id="tabs-<?php echo $i; ?>"> |
|
823 | + <button id="run_<?php if ($i == 3) echo 'd'; else echo 'o'; ?>_tests"; onclick="run_<?php if ($i == 3) echo 'dynamic'; else echo 'openroaming'; ?>()"><?php if ($i == 3) echo _("Repeat dynamic connectivity tests"); else echo _("Repeat OpenRoaming connectivity tests"); ?></button> |
|
824 | 824 | |
825 | 825 | <?php |
826 | 826 | echo "<div id='"; |
827 | - if ($i==3) { echo 'dynamic'; } else { echo 'openroaming'; } |
|
827 | + if ($i == 3) { echo 'dynamic'; } else { echo 'openroaming'; } |
|
828 | 828 | echo "_tests'><fieldset class='option_container'> |
829 | 829 | <legend><strong>"; |
830 | - if ($i==3) { |
|
830 | + if ($i == 3) { |
|
831 | 831 | echo _("DYNAMIC connectivity tests"); |
832 | 832 | } else { |
833 | 833 | echo _("OpenRoaming connectivity tests"); |
@@ -841,11 +841,11 @@ discard block |
||
841 | 841 | } |
842 | 842 | $resultstoprint = []; |
843 | 843 | if (count($rfc7585suite->NAPTR_hostname_records) > 0) { |
844 | - $resultstoprint[] = '<div style="align:'.$end.'; display: none;" id="' . $prefix1 . '_result_fail">' . _("Some errors were found during the tests, see below") . '</div><div style="align:'.$end.'; display: none;" id="' . $prefix1 . '_result_pass">' . _("All tests passed, congratulations!") . '</div>'; |
|
845 | - $resultstoprint[] = '<div style="align:'.$end.';"><a href="" class="moreall">' . _('Show detailed information for all tests') . '</a></div>' . '<p><strong>' . _("Checking server handshake...") . "</strong><p>"; |
|
844 | + $resultstoprint[] = '<div style="align:'.$end.'; display: none;" id="'.$prefix1.'_result_fail">'._("Some errors were found during the tests, see below").'</div><div style="align:'.$end.'; display: none;" id="'.$prefix1.'_result_pass">'._("All tests passed, congratulations!").'</div>'; |
|
845 | + $resultstoprint[] = '<div style="align:'.$end.';"><a href="" class="moreall">'._('Show detailed information for all tests').'</a></div>'.'<p><strong>'._("Checking server handshake...")."</strong><p>"; |
|
846 | 846 | foreach ($rfc7585suite->NAPTR_hostname_records as $hostindex => $addr) { |
847 | - $bracketaddr = ($addr["family"] == "IPv6" ? "[" . $addr["IP"] . "]" : $addr["IP"]); |
|
848 | - $resultstoprint[] = '<p><strong>' . $bracketaddr . ' TCP/' . $addr['port'] . '</strong> (' . $addr['hostname'] . ')'; |
|
847 | + $bracketaddr = ($addr["family"] == "IPv6" ? "[".$addr["IP"]."]" : $addr["IP"]); |
|
848 | + $resultstoprint[] = '<p><strong>'.$bracketaddr.' TCP/'.$addr['port'].'</strong> ('.$addr['hostname'].')'; |
|
849 | 849 | $prots = []; |
850 | 850 | if (isset($addr['protocols'])) { |
851 | 851 | foreach ($addr['protocols'] as $protocol) { |
@@ -855,18 +855,18 @@ discard block |
||
855 | 855 | } |
856 | 856 | } |
857 | 857 | if (!empty($prots)) { |
858 | - $resultstoprint[] = ' ' . _("supported TLS protocols: "); |
|
858 | + $resultstoprint[] = ' '._("supported TLS protocols: "); |
|
859 | 859 | $resultstoprint[] = implode(', ', $prots); |
860 | 860 | if (!isset($addr['istls13']) || !$addr['istls13']) { |
861 | - $resultstoprint[] = ' ' . '<font color="red">' . _("not supported: ") . 'TLS1.3</font>'; |
|
861 | + $resultstoprint[] = ' '.'<font color="red">'._("not supported: ").'TLS1.3</font>'; |
|
862 | 862 | } |
863 | 863 | } |
864 | 864 | $resultstoprint[] = '<ul style="list-style-type: none;" class="caresult"><li>'; |
865 | - $resultstoprint[] = "<table id='" . $prefix2 . "caresults$hostindex' style='width:100%'> |
|
865 | + $resultstoprint[] = "<table id='".$prefix2."caresults$hostindex' style='width:100%'> |
|
866 | 866 | <tr> |
867 | -<td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='" . $prefix2 . "srcca$hostindex" . "_img'></td> |
|
868 | -<td id='" . $prefix2 . "srcca$hostindex'> |
|
869 | -" . _("testing...") . " |
|
867 | +<td class='icon_td'><img src='../resources/images/icons/loading51.gif' id='".$prefix2."srcca$hostindex"."_img'></td> |
|
868 | +<td id='" . $prefix2."srcca$hostindex'> |
|
869 | +"._("testing...")." |
|
870 | 870 | </td> |
871 | 871 | </tr> |
872 | 872 | </table>"; |
@@ -874,26 +874,26 @@ discard block |
||
874 | 874 | } |
875 | 875 | $clientstest = []; |
876 | 876 | foreach ($rfc7585suite->NAPTR_hostname_records as $hostindex => $addr) { |
877 | - $clientstest[] = '<p><strong>' . $addr['IP'] . ' TCP/' . $addr['port'] . '</strong></p><ol>'; |
|
878 | - $clientstest[] = "<span id='" . $prefix2 . "clientresults$hostindex'><table style='width:100%'> |
|
877 | + $clientstest[] = '<p><strong>'.$addr['IP'].' TCP/'.$addr['port'].'</strong></p><ol>'; |
|
878 | + $clientstest[] = "<span id='".$prefix2."clientresults$hostindex'><table style='width:100%'> |
|
879 | 879 | <tr> |
880 | 880 | <td class='icon_td'>"; |
881 | - if ($i == 4 ) { |
|
881 | + if ($i == 4) { |
|
882 | 882 | $clientstest[] = "<!--"; |
883 | 883 | } |
884 | - $clientstest[] = "<img src='../resources/images/icons/loading51.gif' id='" . $prefix2 . "srcclient$hostindex" . "_img'></td> |
|
885 | -<td id='" . $prefix2 . "srcclient$hostindex'> |
|
886 | -" . _("testing..."); |
|
884 | + $clientstest[] = "<img src='../resources/images/icons/loading51.gif' id='".$prefix2."srcclient$hostindex"."_img'></td> |
|
885 | +<td id='" . $prefix2."srcclient$hostindex'> |
|
886 | +"._("testing..."); |
|
887 | 887 | |
888 | - if ($i == 4 ) { |
|
889 | - $clientstest[] = "-->" . _("not implemented yet"); |
|
888 | + if ($i == 4) { |
|
889 | + $clientstest[] = "-->"._("not implemented yet"); |
|
890 | 890 | } |
891 | 891 | $clientstest[] = "</td></tr></table></span>"; |
892 | 892 | $clientstest[] = '</ol>'; |
893 | 893 | } |
894 | 894 | echo '<div style="align:'.$end.';">'; |
895 | 895 | echo join('', $resultstoprint); |
896 | - echo '<span id="' . $prefix2 . 'clientstest" style="display: none;"><p><hr><b>' . _('Checking if certificates from CAs are accepted...') . '</b><p>' . _('A few client certificates will be tested to check if servers are resistant to some certificate problems.') . '<p>'; |
|
896 | + echo '<span id="'.$prefix2.'clientstest" style="display: none;"><p><hr><b>'._('Checking if certificates from CAs are accepted...').'</b><p>'._('A few client certificates will be tested to check if servers are resistant to some certificate problems.').'<p>'; |
|
897 | 897 | print join('', $clientstest); |
898 | 898 | echo '</span>'; |
899 | 899 | echo '</div>'; |
@@ -907,7 +907,7 @@ discard block |
||
907 | 907 | // check if truncates/dies on Operator-Name |
908 | 908 | if ($my_profile !== NULL) { |
909 | 909 | echo "<div id='tabs-n'><fieldset class='option_container'> |
910 | - <legend><strong>" . _("Live login test") . "</strong></legend>"; |
|
910 | + <legend><strong>" . _("Live login test")."</strong></legend>"; |
|
911 | 911 | $prof_compl = $my_profile->getEapMethodsinOrderOfPreference(1); |
912 | 912 | if (count($prof_compl) > 0) { |
913 | 913 | $passwordReqired = FALSE; |
@@ -920,34 +920,34 @@ discard block |
||
920 | 920 | $clientCertRequired = TRUE; |
921 | 921 | } |
922 | 922 | } |
923 | - echo "<div id='disposable_credential_container'><p>" . _("If you enter an existing login credential here, you can test the actual authentication from various checkpoints all over the world.") . "</p> |
|
924 | - <p>" . _("The test will use all EAP types you have set in your profile information to check whether the right CAs and server names are used, and of course whether the login with these credentials and the given EAP type actually worked. If you have set anonymous outer ID, the test will use that.") . "</p> |
|
925 | - <p>" . _("Note: the tool purposefully does not offer you to save these credentials, and they will never be saved in any way on the server side. Please use only <strong>temporary test accounts</strong> here; permanently valid test accounts in the wild are considered harmful!") . "</p></div> |
|
923 | + echo "<div id='disposable_credential_container'><p>"._("If you enter an existing login credential here, you can test the actual authentication from various checkpoints all over the world.")."</p> |
|
924 | + <p>" . _("The test will use all EAP types you have set in your profile information to check whether the right CAs and server names are used, and of course whether the login with these credentials and the given EAP type actually worked. If you have set anonymous outer ID, the test will use that.")."</p> |
|
925 | + <p>" . _("Note: the tool purposefully does not offer you to save these credentials, and they will never be saved in any way on the server side. Please use only <strong>temporary test accounts</strong> here; permanently valid test accounts in the wild are considered harmful!")."</p></div> |
|
926 | 926 | <form enctype='multipart/form-data' id='live_form' accept-charset='UTF-8'> |
927 | 927 | <input type='hidden' name='test_type' value='udp_login'> |
928 | - <input type='hidden' name='lang' value='" . $gui->languageInstance->getLang() . "'> |
|
929 | - <input type='hidden' name='profile_id' value='" . $my_profile->identifier . "'> |
|
928 | + <input type='hidden' name='lang' value='" . $gui->languageInstance->getLang()."'> |
|
929 | + <input type='hidden' name='profile_id' value='" . $my_profile->identifier."'> |
|
930 | 930 | <table id='live_tests'>"; |
931 | 931 | // if any password based EAP methods are available enable this section |
932 | 932 | if ($passwordReqired) { |
933 | - echo "<tr><td colspan='2'><strong>" . _("Password-based EAP types") . "</strong></td></tr> |
|
934 | - <tr><td>" . _("Real (inner) username:") . "</td><td><input type='text' id='username' class='mandatory' name='username'/></td></tr>"; |
|
935 | - echo "<tr><td>" . _("Anonymous outer ID (optional):") . "</td><td><input type='text' id='outer_username' name='outer_username'/></td></tr>"; |
|
936 | - echo "<tr><td>" . _("Password:") . "</td><td><input type='text' id='password' class='mandatory' name='password'/></td></tr>"; |
|
933 | + echo "<tr><td colspan='2'><strong>"._("Password-based EAP types")."</strong></td></tr> |
|
934 | + <tr><td>" . _("Real (inner) username:")."</td><td><input type='text' id='username' class='mandatory' name='username'/></td></tr>"; |
|
935 | + echo "<tr><td>"._("Anonymous outer ID (optional):")."</td><td><input type='text' id='outer_username' name='outer_username'/></td></tr>"; |
|
936 | + echo "<tr><td>"._("Password:")."</td><td><input type='text' id='password' class='mandatory' name='password'/></td></tr>"; |
|
937 | 937 | } |
938 | 938 | // ask for cert + privkey if TLS-based method is active |
939 | 939 | if ($clientCertRequired) { |
940 | - echo "<tr><td colspan='2'><strong>" . _("Certificate-based EAP types") . "</strong></td></tr> |
|
941 | - <tr><td>" . _("Certificate file (.p12 or .pfx):") . "</td><td><input type='file' id='cert' accept='application/x-pkcs12' name='cert'/></td></tr> |
|
942 | - <tr><td>" . _("Certificate password, if any:") . "</td><td><input type='text' id='privkey' name='privkey_pass'/></td></tr> |
|
943 | - <tr><td>" . _("Username, if different from certificate Subject:") . "</td><td><input type='text' id='tls_username' name='tls_username'/></td></tr>"; |
|
940 | + echo "<tr><td colspan='2'><strong>"._("Certificate-based EAP types")."</strong></td></tr> |
|
941 | + <tr><td>" . _("Certificate file (.p12 or .pfx):")."</td><td><input type='file' id='cert' accept='application/x-pkcs12' name='cert'/></td></tr> |
|
942 | + <tr><td>" . _("Certificate password, if any:")."</td><td><input type='text' id='privkey' name='privkey_pass'/></td></tr> |
|
943 | + <tr><td>" . _("Username, if different from certificate Subject:")."</td><td><input type='text' id='tls_username' name='tls_username'/></td></tr>"; |
|
944 | 944 | } |
945 | - echo "<tr><td colspan='2'><button id='submit_credentials'>" . _("Submit credentials") . "</button></td></tr></table></form>"; |
|
945 | + echo "<tr><td colspan='2'><button id='submit_credentials'>"._("Submit credentials")."</button></td></tr></table></form>"; |
|
946 | 946 | echo "<div id='live_login_results' style='display:none'>"; |
947 | 947 | foreach (\config\Diagnostics::RADIUSTESTS['UDP-hosts'] as $hostindex => $host) { |
948 | 948 | print "<hr>"; |
949 | - printf(_("Testing from: %s"), "<strong>" . \config\Diagnostics::RADIUSTESTS['UDP-hosts'][$hostindex]['display_name'] . "</strong>"); |
|
950 | - print "<span style='position:relative'><img src='../resources/images/icons/loading51.gif' id='live_src" . $hostindex . "_img' style='width:24px; position: absolute; $start: 20px; bottom: 0px; '></span>"; |
|
949 | + printf(_("Testing from: %s"), "<strong>".\config\Diagnostics::RADIUSTESTS['UDP-hosts'][$hostindex]['display_name']."</strong>"); |
|
950 | + print "<span style='position:relative'><img src='../resources/images/icons/loading51.gif' id='live_src".$hostindex."_img' style='width:24px; position: absolute; $start: 20px; bottom: 0px; '></span>"; |
|
951 | 951 | print "<div id='eap_test$hostindex' class='eap_test_results'></div>"; |
952 | 952 | } |
953 | 953 | echo "</div>"; |
@@ -962,9 +962,9 @@ discard block |
||
962 | 962 | } |
963 | 963 | |
964 | 964 | if (isset($_POST['comefrom'])) { |
965 | - $return = htmlspecialchars_decode($_POST['comefrom']) . ( $inst_id ? "?inst_id=" . $inst_id : "" ); |
|
965 | + $return = htmlspecialchars_decode($_POST['comefrom']).($inst_id ? "?inst_id=".$inst_id : ""); |
|
966 | 966 | echo "<form method='post' action='$return' accept-charset='UTF-8'> |
967 | - <button type='submit' name='submitbutton' value='" . web\lib\common\FormElements::BUTTON_CLOSE . "'>" . sprintf(_("Return to %s administrator area"), core\common\Entity::$nomenclature_idp) . "</button>" |
|
967 | + <button type='submit' name='submitbutton' value='".web\lib\common\FormElements::BUTTON_CLOSE."'>".sprintf(_("Return to %s administrator area"), core\common\Entity::$nomenclature_idp)."</button>" |
|
968 | 968 | . "</form>"; |
969 | 969 | } |
970 | 970 | if ($check_realm !== FALSE) { |
@@ -17,9 +17,9 @@ discard block |
||
17 | 17 | class CertificationAuthorityEduPki extends EntityWithDBProperties implements CertificationAuthorityInterface |
18 | 18 | { |
19 | 19 | |
20 | - private const LOCATION_RA_CERT = ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
21 | - private const LOCATION_RA_KEY = ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.clearkey"; |
|
22 | - private const LOCATION_WEBROOT = ROOT . "/config/SilverbulletClientCerts/eduPKI-webserver-root.pem"; |
|
20 | + private const LOCATION_RA_CERT = ROOT."/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
21 | + private const LOCATION_RA_KEY = ROOT."/config/SilverbulletClientCerts/edupki-test-ra.clearkey"; |
|
22 | + private const LOCATION_WEBROOT = ROOT."/config/SilverbulletClientCerts/eduPKI-webserver-root.pem"; |
|
23 | 23 | private const EDUPKI_RA_ID = 700; |
24 | 24 | private const EDUPKI_CERT_PROFILE = "User SOAP"; |
25 | 25 | private const EDUPKI_RA_PKEY_PASSPHRASE = "..."; |
@@ -35,13 +35,13 @@ discard block |
||
35 | 35 | parent::__construct(); |
36 | 36 | |
37 | 37 | if (stat(CertificationAuthorityEduPki::LOCATION_RA_CERT) === FALSE) { |
38 | - throw new Exception("RA operator PEM file not found: " . CertificationAuthorityEduPki::LOCATION_RA_CERT); |
|
38 | + throw new Exception("RA operator PEM file not found: ".CertificationAuthorityEduPki::LOCATION_RA_CERT); |
|
39 | 39 | } |
40 | 40 | if (stat(CertificationAuthorityEduPki::LOCATION_RA_KEY) === FALSE) { |
41 | - throw new Exception("RA operator private key file not found: " . CertificationAuthorityEduPki::LOCATION_RA_KEY); |
|
41 | + throw new Exception("RA operator private key file not found: ".CertificationAuthorityEduPki::LOCATION_RA_KEY); |
|
42 | 42 | } |
43 | 43 | if (stat(CertificationAuthorityEduPki::LOCATION_WEBROOT) === FALSE) { |
44 | - throw new Exception("CA website root CA file not found: " . CertificationAuthorityEduPki::LOCATION_WEBROOT); |
|
44 | + throw new Exception("CA website root CA file not found: ".CertificationAuthorityEduPki::LOCATION_WEBROOT); |
|
45 | 45 | } |
46 | 46 | } |
47 | 47 | |
@@ -75,19 +75,19 @@ discard block |
||
75 | 75 | // initialise connection to eduPKI CA / eduroam RA and send the request to them |
76 | 76 | try { |
77 | 77 | $altArray = [# Array mit den Subject Alternative Names |
78 | - "email:" . $csr["USERNAME"] |
|
78 | + "email:".$csr["USERNAME"] |
|
79 | 79 | ]; |
80 | 80 | $soapPub = $this->initEduPKISoapSession("PUBLIC"); |
81 | 81 | $this->loggerInstance->debug(5, "FIRST ACTUAL SOAP REQUEST (Public, newRequest)!\n"); |
82 | - $this->loggerInstance->debug(5, "PARAM_1: " . CertificationAuthorityEduPki::EDUPKI_RA_ID . "\n"); |
|
83 | - $this->loggerInstance->debug(5, "PARAM_2: " . $csr["CSR_STRING"] . "\n"); |
|
82 | + $this->loggerInstance->debug(5, "PARAM_1: ".CertificationAuthorityEduPki::EDUPKI_RA_ID."\n"); |
|
83 | + $this->loggerInstance->debug(5, "PARAM_2: ".$csr["CSR_STRING"]."\n"); |
|
84 | 84 | $this->loggerInstance->debug(5, "PARAM_3: "); |
85 | 85 | $this->loggerInstance->debug(5, $altArray); |
86 | - $this->loggerInstance->debug(5, "PARAM_4: " . CertificationAuthorityEduPki::EDUPKI_CERT_PROFILE . "\n"); |
|
87 | - $this->loggerInstance->debug(5, "PARAM_5: " . sha1("notused") . "\n"); |
|
88 | - $this->loggerInstance->debug(5, "PARAM_6: " . $csr["USERNAME"] . "\n"); |
|
89 | - $this->loggerInstance->debug(5, "PARAM_7: " . $csr["USERNAME"] . "\n"); |
|
90 | - $this->loggerInstance->debug(5, "PARAM_8: " . \config\ConfAssistant::SILVERBULLET['product_name'] . "\n"); |
|
86 | + $this->loggerInstance->debug(5, "PARAM_4: ".CertificationAuthorityEduPki::EDUPKI_CERT_PROFILE."\n"); |
|
87 | + $this->loggerInstance->debug(5, "PARAM_5: ".sha1("notused")."\n"); |
|
88 | + $this->loggerInstance->debug(5, "PARAM_6: ".$csr["USERNAME"]."\n"); |
|
89 | + $this->loggerInstance->debug(5, "PARAM_7: ".$csr["USERNAME"]."\n"); |
|
90 | + $this->loggerInstance->debug(5, "PARAM_8: ".\config\ConfAssistant::SILVERBULLET['product_name']."\n"); |
|
91 | 91 | $this->loggerInstance->debug(5, "PARAM_9: false\n"); |
92 | 92 | $soapNewRequest = $soapPub->newRequest( |
93 | 93 | CertificationAuthorityEduPki::EDUPKI_RA_ID, # RA-ID |
@@ -109,11 +109,11 @@ discard block |
||
109 | 109 | } catch (Exception $e) { |
110 | 110 | // PHP 7.1 can do this much better |
111 | 111 | if (is_soap_fault($e)) { |
112 | - throw new Exception("Error when sending SOAP request: " . "{$e->faultcode}: { |
|
112 | + throw new Exception("Error when sending SOAP request: "."{$e->faultcode}: { |
|
113 | 113 | $e->faultstring |
114 | 114 | }\n"); |
115 | 115 | } |
116 | - throw new Exception("Something odd happened while doing the SOAP request:" . $e->getMessage()); |
|
116 | + throw new Exception("Something odd happened while doing the SOAP request:".$e->getMessage()); |
|
117 | 117 | } |
118 | 118 | try { |
119 | 119 | $soap = $this->initEduPKISoapSession("RA"); |
@@ -125,8 +125,8 @@ discard block |
||
125 | 125 | $soapReqnum, [ |
126 | 126 | "RaID" => CertificationAuthorityEduPki::EDUPKI_RA_ID, |
127 | 127 | "Role" => CertificationAuthorityEduPki::EDUPKI_CERT_PROFILE, |
128 | - "Subject" => "DC=eduroam,DC=test,DC=test,C=" . $csr["FED"] . ",O=" . \config\ConfAssistant::CONSORTIUM['name'] . ",OU=" . $csr["FED"] . ",CN=" . $csr['USERNAME'] . ",emailAddress=" . $csr['USERNAME'], |
|
129 | - "SubjectAltNames" => ["email:" . $csr["USERNAME"]], |
|
128 | + "Subject" => "DC=eduroam,DC=test,DC=test,C=".$csr["FED"].",O=".\config\ConfAssistant::CONSORTIUM['name'].",OU=".$csr["FED"].",CN=".$csr['USERNAME'].",emailAddress=".$csr['USERNAME'], |
|
129 | + "SubjectAltNames" => ["email:".$csr["USERNAME"]], |
|
130 | 130 | "NotBefore" => (new \DateTime())->format('c'), |
131 | 131 | "NotAfter" => $expiry->format('c'), |
132 | 132 | ] |
@@ -145,7 +145,7 @@ discard block |
||
145 | 145 | // for obnoxious reasons, we have to dump the request into a file and let pkcs7_sign read from the file |
146 | 146 | // rather than just using the string. Grr. |
147 | 147 | $tempdir = \core\common\Entity::createTemporaryDirectory("test"); |
148 | - file_put_contents($tempdir['dir'] . "/content.txt", $soapCleartext); |
|
148 | + file_put_contents($tempdir['dir']."/content.txt", $soapCleartext); |
|
149 | 149 | // retrieve our RA cert from filesystem |
150 | 150 | // the RA certificates are not needed right now because we |
151 | 151 | // have resorted to S/MIME signatures with openssl command-line |
@@ -157,7 +157,7 @@ discard block |
||
157 | 157 | // sign the data, using cmdline because openssl_pkcs7_sign produces strange results |
158 | 158 | // -binary didn't help, nor switch -md to sha1 sha256 or sha512 |
159 | 159 | $this->loggerInstance->debug(5, "Actual content to be signed is this:\n $soapCleartext\n"); |
160 | - $execCmd = \config\Master::PATHS['openssl'] . " smime -sign -binary -in " . $tempdir['dir'] . "/content.txt -out " . $tempdir['dir'] . "/signature.txt -outform pem -inkey " . ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.clearkey -signer " . ROOT . "/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
160 | + $execCmd = \config\Master::PATHS['openssl']." smime -sign -binary -in ".$tempdir['dir']."/content.txt -out ".$tempdir['dir']."/signature.txt -outform pem -inkey ".ROOT."/config/SilverbulletClientCerts/edupki-test-ra.clearkey -signer ".ROOT."/config/SilverbulletClientCerts/edupki-test-ra.pem"; |
|
161 | 161 | $this->loggerInstance->debug(2, "Calling openssl smime with following cmdline: $execCmd\n"); |
162 | 162 | $output = []; |
163 | 163 | $return = 999; |
@@ -166,14 +166,14 @@ discard block |
||
166 | 166 | throw new Exception("Non-zero return value from openssl smime!"); |
167 | 167 | } |
168 | 168 | // and get the signature blob back from the filesystem |
169 | - $detachedSig = trim(file_get_contents($tempdir['dir'] . "/signature.txt")); |
|
169 | + $detachedSig = trim(file_get_contents($tempdir['dir']."/signature.txt")); |
|
170 | 170 | $this->loggerInstance->debug(5, "Request for server approveRequest has parameters:\n"); |
171 | - $this->loggerInstance->debug(5, $soapReqnum . "\n"); |
|
172 | - $this->loggerInstance->debug(5, $soapCleartext . "\n"); // PHP magically encodes this as base64 while sending! |
|
173 | - $this->loggerInstance->debug(5, $detachedSig . "\n"); |
|
171 | + $this->loggerInstance->debug(5, $soapReqnum."\n"); |
|
172 | + $this->loggerInstance->debug(5, $soapCleartext."\n"); // PHP magically encodes this as base64 while sending! |
|
173 | + $this->loggerInstance->debug(5, $detachedSig."\n"); |
|
174 | 174 | $soapIssueCert = $soap->approveRequest($soapReqnum, $soapCleartext, $detachedSig); |
175 | - $this->loggerInstance->debug(5, "approveRequest Request was: \n" . $soap->__getLastRequest()); |
|
176 | - $this->loggerInstance->debug(5, "approveRequest Response was: \n" . $soap->__getLastResponse()); |
|
175 | + $this->loggerInstance->debug(5, "approveRequest Request was: \n".$soap->__getLastRequest()); |
|
176 | + $this->loggerInstance->debug(5, "approveRequest Response was: \n".$soap->__getLastResponse()); |
|
177 | 177 | if ($soapIssueCert === FALSE) { |
178 | 178 | throw new Exception("The locally approved request was NOT processed by the CA."); |
179 | 179 | } |
@@ -210,9 +210,9 @@ discard block |
||
210 | 210 | throw new Exception("CAInfo has no root certificate for us!"); |
211 | 211 | } |
212 | 212 | } catch (SoapFault $e) { |
213 | - throw new Exception("SoapFault: Error when sending or receiving SOAP message: " . "{$e->faultcode}: {$e->faultname}: {$e->faultstring}: {$e->faultactor}: {$e->detail}: {$e->headerfault}\n"); |
|
213 | + throw new Exception("SoapFault: Error when sending or receiving SOAP message: "."{$e->faultcode}: {$e->faultname}: {$e->faultstring}: {$e->faultactor}: {$e->detail}: {$e->headerfault}\n"); |
|
214 | 214 | } catch (Exception $e) { |
215 | - throw new Exception("Exception: Something odd happened between the SOAP requests:" . $e->getMessage()); |
|
215 | + throw new Exception("Exception: Something odd happened between the SOAP requests:".$e->getMessage()); |
|
216 | 216 | } |
217 | 217 | return [ |
218 | 218 | "CERT" => openssl_x509_read($parsedCert['pem']), |
@@ -245,12 +245,12 @@ discard block |
||
245 | 245 | // for obnoxious reasons, we have to dump the request into a file and let pkcs7_sign read from the file |
246 | 246 | // rather than just using the string. Grr. |
247 | 247 | $tempdir = \core\common\Entity::createTemporaryDirectory("test"); |
248 | - file_put_contents($tempdir['dir'] . "/content.txt", $soapRawRevRequest); |
|
248 | + file_put_contents($tempdir['dir']."/content.txt", $soapRawRevRequest); |
|
249 | 249 | // retrieve our RA cert from filesystem |
250 | 250 | // sign the data, using cmdline because openssl_pkcs7_sign produces strange results |
251 | 251 | // -binary didn't help, nor switch -md to sha1 sha256 or sha512 |
252 | 252 | $this->loggerInstance->debug(5, "Actual content to be signed is this:\n$soapRawRevRequest\n"); |
253 | - $execCmd = \config\Master::PATHS['openssl'] . " smime -sign -binary -in " . $tempdir['dir'] . "/content.txt -out " . $tempdir['dir'] . "/signature.txt -outform pem -inkey " . CertificationAuthorityEduPki::LOCATION_RA_KEY . " -signer " . CertificationAuthorityEduPki::LOCATION_RA_CERT; |
|
253 | + $execCmd = \config\Master::PATHS['openssl']." smime -sign -binary -in ".$tempdir['dir']."/content.txt -out ".$tempdir['dir']."/signature.txt -outform pem -inkey ".CertificationAuthorityEduPki::LOCATION_RA_KEY." -signer ".CertificationAuthorityEduPki::LOCATION_RA_CERT; |
|
254 | 254 | $this->loggerInstance->debug(2, "Calling openssl smime with following cmdline: $execCmd\n"); |
255 | 255 | $output = []; |
256 | 256 | $return = 999; |
@@ -259,7 +259,7 @@ discard block |
||
259 | 259 | throw new Exception("Non-zero return value from openssl smime!"); |
260 | 260 | } |
261 | 261 | // and get the signature blob back from the filesystem |
262 | - $detachedSig = trim(file_get_contents($tempdir['dir'] . "/signature.txt")); |
|
262 | + $detachedSig = trim(file_get_contents($tempdir['dir']."/signature.txt")); |
|
263 | 263 | $soapIssueRev = $soap->approveRevocationRequest($soapRevocationSerial, $soapRawRevRequest, $detachedSig); |
264 | 264 | if ($soapIssueRev === FALSE) { |
265 | 265 | throw new Exception("The locally approved revocation request was NOT processed by the CA."); |
@@ -267,9 +267,9 @@ discard block |
||
267 | 267 | } catch (Exception $e) { |
268 | 268 | // PHP 7.1 can do this much better |
269 | 269 | if (is_soap_fault($e)) { |
270 | - throw new Exception("Error when sending SOAP request: " . "{$e->faultcode}: {$e->faultstring}\n"); |
|
270 | + throw new Exception("Error when sending SOAP request: "."{$e->faultcode}: {$e->faultstring}\n"); |
|
271 | 271 | } |
272 | - throw new Exception("Something odd happened while doing the SOAP request:" . $e->getMessage()); |
|
272 | + throw new Exception("Something odd happened while doing the SOAP request:".$e->getMessage()); |
|
273 | 273 | } |
274 | 274 | } |
275 | 275 | |
@@ -369,9 +369,9 @@ discard block |
||
369 | 369 | */ |
370 | 370 | public function soapToXmlInteger($x) |
371 | 371 | { |
372 | - return '<' . $x[0] . '>' |
|
372 | + return '<'.$x[0].'>' |
|
373 | 373 | . htmlentities($x[1], ENT_NOQUOTES | ENT_XML1) |
374 | - . '</' . $x[0] . '>'; |
|
374 | + . '</'.$x[0].'>'; |
|
375 | 375 | } |
376 | 376 | |
377 | 377 | /** |
@@ -390,9 +390,9 @@ discard block |
||
390 | 390 | // dump private key into directory |
391 | 391 | $outstring = ""; |
392 | 392 | openssl_pkey_export($privateKey, $outstring); |
393 | - file_put_contents($tempdir . "/pkey.pem", $outstring); |
|
393 | + file_put_contents($tempdir."/pkey.pem", $outstring); |
|
394 | 394 | // PHP can only do one DC in the Subject. But we need three. |
395 | - $execCmd = \config\Master::PATHS['openssl'] . " req -new -sha256 -key $tempdir/pkey.pem -out $tempdir/request.csr -subj /DC=test/DC=test/DC=eduroam/C=$fed/O=" . \config\ConfAssistant::CONSORTIUM['name'] . "/OU=$fed/CN=$username/emailAddress=$username"; |
|
395 | + $execCmd = \config\Master::PATHS['openssl']." req -new -sha256 -key $tempdir/pkey.pem -out $tempdir/request.csr -subj /DC=test/DC=test/DC=eduroam/C=$fed/O=".\config\ConfAssistant::CONSORTIUM['name']."/OU=$fed/CN=$username/emailAddress=$username"; |
|
396 | 396 | $this->loggerInstance->debug(2, "Calling openssl req with following cmdline: $execCmd\n"); |
397 | 397 | $output = []; |
398 | 398 | $return = 999; |
@@ -62,7 +62,7 @@ |
||
62 | 62 | they are from the same user group. You are not allowed to share them to an unlimited |
63 | 63 | audience (e.g. on a publicly accessible web server).</li> |
64 | 64 | <li>If You are an eduroam Identity Provider administrator, you are allowed to download and pass on the Installers to |
65 | -your own <?php echo \config\ConfAssistant::CONSORTIUM['nomenclature_idp'];?> end users, e.g. on the support web pages of your <?php echo \config\ConfAssistant::CONSORTIUM['nomenclature_idp'];?>, on Welcome Package CDs or USB sticks, etc.</li> |
|
65 | +your own <?php echo \config\ConfAssistant::CONSORTIUM['nomenclature_idp']; ?> end users, e.g. on the support web pages of your <?php echo \config\ConfAssistant::CONSORTIUM['nomenclature_idp']; ?>, on Welcome Package CDs or USB sticks, etc.</li> |
|
66 | 66 | <li>If You are a third-party not affiliated with eduroam, you are only allowed to download and pass on |
67 | 67 | the Metadata and/or the Installers after having received written permission by the eduroam Operations team.</li> |
68 | 68 | </ul> |