@@ -71,7 +71,7 @@ discard block |
||
| 71 | 71 | $delProfiles[] = $ssid; |
| 72 | 72 | } |
| 73 | 73 | if ($cipher == 'TKIP') { |
| 74 | - $delProfiles[] = $ssid . ' (TKIP)'; |
|
| 74 | + $delProfiles[] = $ssid.' (TKIP)'; |
|
| 75 | 75 | } |
| 76 | 76 | } |
| 77 | 77 | |
@@ -81,7 +81,7 @@ discard block |
||
| 81 | 81 | $iterator = 0; |
| 82 | 82 | foreach ($allSSID as $ssid => $cipher) { |
| 83 | 83 | if ($cipher == 'TKIP') { |
| 84 | - $windowsProfile[$iterator] = $this->writeWLANprofile($ssid . ' (TKIP)', $ssid, 'WPA', 'TKIP', $eapConfig, $iterator); |
|
| 84 | + $windowsProfile[$iterator] = $this->writeWLANprofile($ssid.' (TKIP)', $ssid, 'WPA', 'TKIP', $eapConfig, $iterator); |
|
| 85 | 85 | $iterator++; |
| 86 | 86 | } |
| 87 | 87 | $windowsProfile[$iterator] = $this->writeWLANprofile($ssid, $ssid, 'WPA2', 'AES', $eapConfig, $iterator); |
@@ -142,10 +142,10 @@ discard block |
||
| 142 | 142 | $profileFileCont = '<EAPConfig><EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig"> |
| 143 | 143 | <EapMethod> |
| 144 | 144 | <Type xmlns="http://www.microsoft.com/provisioning/EapCommon">' . |
| 145 | - $this->selectedEap["OUTER"] . '</Type> |
|
| 145 | + $this->selectedEap["OUTER"].'</Type> |
|
| 146 | 146 | <VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId> |
| 147 | 147 | <VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType> |
| 148 | -<AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">' . $authorId . '</AuthorId> |
|
| 148 | +<AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">' . $authorId.'</AuthorId> |
|
| 149 | 149 | </EapMethod> |
| 150 | 150 | '; |
| 151 | 151 | |
@@ -158,9 +158,9 @@ discard block |
||
| 158 | 158 | $profileFileCont .= ' |
| 159 | 159 | <Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig"> |
| 160 | 160 | <EAPIdentityProviderList xmlns="urn:ietf:params:xml:ns:yang:ietf-eap-metadata"> |
| 161 | -<EAPIdentityProvider ID="' . $this->deviceUUID . '" namespace="urn:UUID"> |
|
| 161 | +<EAPIdentityProvider ID="' . $this->deviceUUID.'" namespace="urn:UUID"> |
|
| 162 | 162 | <ProviderInfo> |
| 163 | -<DisplayName>' . $this->translateString($attr['general:instname'][0], $this->codePage) . '</DisplayName> |
|
| 163 | +<DisplayName>' . $this->translateString($attr['general:instname'][0], $this->codePage).'</DisplayName> |
|
| 164 | 164 | </ProviderInfo> |
| 165 | 165 | <AuthenticationMethods> |
| 166 | 166 | <AuthenticationMethod> |
@@ -172,7 +172,7 @@ discard block |
||
| 172 | 172 | if ($outerUser == '') { |
| 173 | 173 | $profileFileCont .= '<AnonymousIdentity>@</AnonymousIdentity>'; |
| 174 | 174 | } else { |
| 175 | - $profileFileCont .= '<AnonymousIdentity>' . $outerUser . '@' . $realm . '</AnonymousIdentity>'; |
|
| 175 | + $profileFileCont .= '<AnonymousIdentity>'.$outerUser.'@'.$realm.'</AnonymousIdentity>'; |
|
| 176 | 176 | } |
| 177 | 177 | } |
| 178 | 178 | $profileFileCont .= '</ClientSideCredential> |
@@ -190,7 +190,7 @@ discard block |
||
| 190 | 190 | $profileFileCont .= ' |
| 191 | 191 | </ServerSideCredential> |
| 192 | 192 | <InnerAuthenticationMethod> |
| 193 | -<NonEAPAuthMethod>' .$innerMethod. '</NonEAPAuthMethod> |
|
| 193 | +<NonEAPAuthMethod>' .$innerMethod.'</NonEAPAuthMethod> |
|
| 194 | 194 | </InnerAuthenticationMethod> |
| 195 | 195 | <VendorSpecific> |
| 196 | 196 | <SessionResumption>false</SessionResumption> |
@@ -215,11 +215,11 @@ discard block |
||
| 215 | 215 | </eapTls:CredentialsSource> |
| 216 | 216 | <eapTls:ServerValidation> |
| 217 | 217 | <eapTls:DisableUserPromptForServerValidation>true</eapTls:DisableUserPromptForServerValidation> |
| 218 | -<eapTls:ServerNames>' . $servers . '</eapTls:ServerNames>'; |
|
| 218 | +<eapTls:ServerNames>' . $servers.'</eapTls:ServerNames>'; |
|
| 219 | 219 | if ($caArray) { |
| 220 | 220 | foreach ($caArray as $certAuthority) { |
| 221 | 221 | if ($certAuthority['root']) { |
| 222 | - $profileFileCont .= "<eapTls:TrustedRootCA>" . $certAuthority['sha1'] . "</eapTls:TrustedRootCA>\n"; |
|
| 222 | + $profileFileCont .= "<eapTls:TrustedRootCA>".$certAuthority['sha1']."</eapTls:TrustedRootCA>\n"; |
|
| 223 | 223 | } |
| 224 | 224 | } |
| 225 | 225 | } |
@@ -251,11 +251,11 @@ discard block |
||
| 251 | 251 | <msPeap:EapType> |
| 252 | 252 | <msPeap:ServerValidation> |
| 253 | 253 | <msPeap:DisableUserPromptForServerValidation>true</msPeap:DisableUserPromptForServerValidation> |
| 254 | -<msPeap:ServerNames>' . $servers . '</msPeap:ServerNames>'; |
|
| 254 | +<msPeap:ServerNames>' . $servers.'</msPeap:ServerNames>'; |
|
| 255 | 255 | if ($caArray) { |
| 256 | 256 | foreach ($caArray as $certAuthority) { |
| 257 | 257 | if ($certAuthority['root']) { |
| 258 | - $vistaExt .= "<msPeap:TrustedRootCA>" . $certAuthority['sha1'] . "</msPeap:TrustedRootCA>\n"; |
|
| 258 | + $vistaExt .= "<msPeap:TrustedRootCA>".$certAuthority['sha1']."</msPeap:TrustedRootCA>\n"; |
|
| 259 | 259 | } |
| 260 | 260 | } |
| 261 | 261 | } |
@@ -268,7 +268,7 @@ discard block |
||
| 268 | 268 | <msChapV2:UseWinLogonCredentials>false</msChapV2:UseWinLogonCredentials> |
| 269 | 269 | </msChapV2:EapType> |
| 270 | 270 | </baseEap:Eap> |
| 271 | -<msPeap:EnableQuarantineChecks>' . $nea . '</msPeap:EnableQuarantineChecks> |
|
| 271 | +<msPeap:EnableQuarantineChecks>' . $nea.'</msPeap:EnableQuarantineChecks> |
|
| 272 | 272 | <msPeap:RequireCryptoBinding>false</msPeap:RequireCryptoBinding> |
| 273 | 273 | </msPeap:EapType> |
| 274 | 274 | </baseEap:Eap> |
@@ -280,11 +280,11 @@ discard block |
||
| 280 | 280 | <EapType xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV1"> |
| 281 | 281 | <ServerValidation> |
| 282 | 282 | <DisableUserPromptForServerValidation>true</DisableUserPromptForServerValidation> |
| 283 | -<ServerNames>' . $servers . '</ServerNames>'; |
|
| 283 | +<ServerNames>' . $servers.'</ServerNames>'; |
|
| 284 | 284 | if ($caArray) { |
| 285 | 285 | foreach ($caArray as $certAuthority) { |
| 286 | 286 | if ($certAuthority['root']) { |
| 287 | - $w7Ext .= "<TrustedRootCA>" . $certAuthority['sha1'] . "</TrustedRootCA>\n"; |
|
| 287 | + $w7Ext .= "<TrustedRootCA>".$certAuthority['sha1']."</TrustedRootCA>\n"; |
|
| 288 | 288 | } |
| 289 | 289 | } |
| 290 | 290 | } |
@@ -297,14 +297,14 @@ discard block |
||
| 297 | 297 | <UseWinLogonCredentials>false</UseWinLogonCredentials> |
| 298 | 298 | </EapType> |
| 299 | 299 | </Eap> |
| 300 | -<EnableQuarantineChecks>' . $nea . '</EnableQuarantineChecks> |
|
| 300 | +<EnableQuarantineChecks>' . $nea.'</EnableQuarantineChecks> |
|
| 301 | 301 | <RequireCryptoBinding>false</RequireCryptoBinding> |
| 302 | 302 | '; |
| 303 | 303 | if ($useAnon) { |
| 304 | 304 | $w7Ext .= '<PeapExtensions> |
| 305 | 305 | <IdentityPrivacy xmlns="http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV2"> |
| 306 | 306 | <EnableIdentityPrivacy>true</EnableIdentityPrivacy> |
| 307 | -<AnonymousUserName>' . $outerUser . '</AnonymousUserName> |
|
| 307 | +<AnonymousUserName>' . $outerUser.'</AnonymousUserName> |
|
| 308 | 308 | </IdentityPrivacy> |
| 309 | 309 | </PeapExtensions> |
| 310 | 310 | '; |
@@ -322,8 +322,8 @@ discard block |
||
| 322 | 322 | $profileFileContEnd = '</EapHostConfig></EAPConfig> |
| 323 | 323 | '; |
| 324 | 324 | $returnArray = []; |
| 325 | - $returnArray['vista'] = $profileFileCont . $vistaExt . $profileFileContEnd; |
|
| 326 | - $returnArray['w7'] = $profileFileCont . $w7Ext . $profileFileContEnd; |
|
| 325 | + $returnArray['vista'] = $profileFileCont.$vistaExt.$profileFileContEnd; |
|
| 326 | + $returnArray['w7'] = $profileFileCont.$w7Ext.$profileFileContEnd; |
|
| 327 | 327 | return $returnArray; |
| 328 | 328 | } |
| 329 | 329 | |
@@ -342,10 +342,10 @@ discard block |
||
| 342 | 342 | private function writeWLANprofile($wlanProfileName, $ssid, $auth, $encryption, $eapConfig, $profileNumber) { |
| 343 | 343 | $profileFileCont = '<?xml version="1.0"?> |
| 344 | 344 | <WLANProfile xmlns="http://www.microsoft.com/networking/WLAN/profile/v1"> |
| 345 | -<name>' . $wlanProfileName . '</name> |
|
| 345 | +<name>' . $wlanProfileName.'</name> |
|
| 346 | 346 | <SSIDConfig> |
| 347 | 347 | <SSID> |
| 348 | -<name>' . $ssid . '</name> |
|
| 348 | +<name>' . $ssid.'</name> |
|
| 349 | 349 | </SSID> |
| 350 | 350 | <nonBroadcast>true</nonBroadcast> |
| 351 | 351 | </SSIDConfig> |
@@ -355,8 +355,8 @@ discard block |
||
| 355 | 355 | <MSM> |
| 356 | 356 | <security> |
| 357 | 357 | <authEncryption> |
| 358 | -<authentication>' . $auth . '</authentication> |
|
| 359 | -<encryption>' . $encryption . '</encryption> |
|
| 358 | +<authentication>' . $auth.'</authentication> |
|
| 359 | +<encryption>' . $encryption.'</encryption> |
|
| 360 | 360 | <useOneX>true</useOneX> |
| 361 | 361 | </authEncryption> |
| 362 | 362 | '; |
@@ -386,9 +386,9 @@ discard block |
||
| 386 | 386 | mkdir('vista'); |
| 387 | 387 | } |
| 388 | 388 | $vistaFileName = "vista/wlan_prof-$profileNumber.xml"; |
| 389 | - file_put_contents($vistaFileName, $profileFileCont . $eapConfig['vista'] . $closing); |
|
| 389 | + file_put_contents($vistaFileName, $profileFileCont.$eapConfig['vista'].$closing); |
|
| 390 | 390 | $sevenFileName = "w7/wlan_prof-$profileNumber.xml"; |
| 391 | - file_put_contents($sevenFileName, $profileFileCont . $eapConfig['w7'] . $closing); |
|
| 391 | + file_put_contents($sevenFileName, $profileFileCont.$eapConfig['w7'].$closing); |
|
| 392 | 392 | $this->loggerInstance->debug(2, "Installer has been written into directory $this->FPATH\n"); |
| 393 | 393 | $this->loggerInstance->debug(4, "WLAN_Profile:$wlanProfileName:$encryption\n"); |
| 394 | 394 | return("\"$wlanProfileName\" \"$encryption\""); |
@@ -424,8 +424,8 @@ discard block |
||
| 424 | 424 | mkdir('vista'); |
| 425 | 425 | } |
| 426 | 426 | |
| 427 | - file_put_contents("vista/lan_prof.xml", $profileFileCont . $eapConfig['vista'] . $closing); |
|
| 428 | - file_put_contents("w7/lan_prof.xml", $profileFileCont . $eapConfig['w7'] . $closing); |
|
| 427 | + file_put_contents("vista/lan_prof.xml", $profileFileCont.$eapConfig['vista'].$closing); |
|
| 428 | + file_put_contents("w7/lan_prof.xml", $profileFileCont.$eapConfig['w7'].$closing); |
|
| 429 | 429 | |
| 430 | 430 | } |
| 431 | 431 | |
@@ -439,7 +439,7 @@ discard block |
||
| 439 | 439 | private function writeMainNSH($eap, $attr) { |
| 440 | 440 | $this->loggerInstance->debug(4, "writeMainNSH"); |
| 441 | 441 | $this->loggerInstance->debug(4, $attr); |
| 442 | - $this->loggerInstance->debug(4, "MYLANG=" . $this->lang . "\n"); |
|
| 442 | + $this->loggerInstance->debug(4, "MYLANG=".$this->lang."\n"); |
|
| 443 | 443 | |
| 444 | 444 | $eapOptions = [ |
| 445 | 445 | \core\common\EAP::PEAP => ['str' => 'PEAP', 'exec' => 'user'], |
@@ -470,8 +470,8 @@ discard block |
||
| 470 | 470 | $this->loggerInstance->debug(4, "EAP_STR=$eapStr\n"); |
| 471 | 471 | $this->loggerInstance->debug(4, $eap); |
| 472 | 472 | |
| 473 | - $fcontents .= '!define ' . $eapStr; |
|
| 474 | - $fcontents .= "\n" . '!define EXECLEVEL "' . $execLevel . '"'; |
|
| 473 | + $fcontents .= '!define '.$eapStr; |
|
| 474 | + $fcontents .= "\n".'!define EXECLEVEL "'.$execLevel.'"'; |
|
| 475 | 475 | $fcontents .= $this->writeNsisDefines($attr); |
| 476 | 476 | file_put_contents('main.nsh', $fcontents); |
| 477 | 477 | } |
@@ -500,7 +500,7 @@ discard block |
||
| 500 | 500 | } |
| 501 | 501 | foreach ($caArray as $certAuthority) { |
| 502 | 502 | $store = $certAuthority['root'] ? "root" : "ca"; |
| 503 | - $contentCerts .= '!insertmacro install_ca_cert "' . $certAuthority['file'] . '" "' . $certAuthority['sha1'] . '" "' . $store . "\"\n"; |
|
| 503 | + $contentCerts .= '!insertmacro install_ca_cert "'.$certAuthority['file'].'" "'.$certAuthority['sha1'].'" "'.$store."\"\n"; |
|
| 504 | 504 | } |
| 505 | 505 | fwrite($fileHandleCerts, $contentCerts); |
| 506 | 506 | fclose($fileHandleCerts); |
@@ -515,7 +515,7 @@ discard block |
||
| 515 | 515 | */ |
| 516 | 516 | private function copyFiles($eap) { |
| 517 | 517 | $this->loggerInstance->debug(4, "copyFiles start\n"); |
| 518 | - $this->loggerInstance->debug(4, "code_page=" . $this->codePage . "\n"); |
|
| 518 | + $this->loggerInstance->debug(4, "code_page=".$this->codePage."\n"); |
|
| 519 | 519 | $this->copyBasicFiles(); |
| 520 | 520 | |
| 521 | 521 | switch ($eap["OUTER"]) { |
@@ -117,7 +117,7 @@ discard block |
||
| 117 | 117 | $cryptoJson = openssl_encrypt($clearJson, 'AES-256-CBC', $encryptionKey, OPENSSL_RAW_DATA, $initVector); |
| 118 | 118 | $hmac = hash_hmac("sha1", $cryptoJson, $encryptionKey, TRUE); |
| 119 | 119 | |
| 120 | - $this->loggerInstance->debug(4, "Clear = $clearJson\nSalt = $salt\nPW = " . $password . "\nb(IV) = " . base64_encode($initVector) . "\nb(Cipher) = " . base64_encode($cryptoJson) . "\nb(HMAC) = " . base64_encode($hmac)); |
|
| 120 | + $this->loggerInstance->debug(4, "Clear = $clearJson\nSalt = $salt\nPW = ".$password."\nb(IV) = ".base64_encode($initVector)."\nb(Cipher) = ".base64_encode($cryptoJson)."\nb(HMAC) = ".base64_encode($hmac)); |
|
| 121 | 121 | |
| 122 | 122 | // now, generate the container that holds all the crypto data |
| 123 | 123 | $finalArray = [ |
@@ -188,7 +188,7 @@ discard block |
||
| 188 | 188 | */ |
| 189 | 189 | private function wiredBlock($eapdetails) { |
| 190 | 190 | return [ |
| 191 | - "GUID" => \core\common\Entity::uuid('', "wired-dot1x-ethernet") . "}", |
|
| 191 | + "GUID" => \core\common\Entity::uuid('', "wired-dot1x-ethernet")."}", |
|
| 192 | 192 | "Name" => "eduroam configuration (wired network)", |
| 193 | 193 | "Remove" => false, |
| 194 | 194 | "Type" => "Ethernet", |
@@ -228,7 +228,7 @@ discard block |
||
| 228 | 228 | // if silverbullet, we deliver the client cert inline |
| 229 | 229 | |
| 230 | 230 | if ($selectedEap == \core\common\EAP::EAPTYPE_SILVERBULLET) { |
| 231 | - $eaparray['ClientCertRef'] = "[" . $this->clientCert['GUID'] . "]"; |
|
| 231 | + $eaparray['ClientCertRef'] = "[".$this->clientCert['GUID']."]"; |
|
| 232 | 232 | $eaparray['ClientCertType'] = "Ref"; |
| 233 | 233 | } |
| 234 | 234 | |
@@ -261,7 +261,7 @@ discard block |
||
| 261 | 261 | $jsonArray = ["Type" => "UnencryptedConfiguration"]; |
| 262 | 262 | |
| 263 | 263 | foreach ($this->attributes['internal:CAs'][0] as $ca) { |
| 264 | - $caRefs[] = "{" . $ca['uuid'] . "}"; |
|
| 264 | + $caRefs[] = "{".$ca['uuid']."}"; |
|
| 265 | 265 | } |
| 266 | 266 | // define CA certificates |
| 267 | 267 | foreach ($this->attributes['internal:CAs'][0] as $ca) { |
@@ -271,15 +271,15 @@ discard block |
||
| 271 | 271 | if ($caSanitized1 === FALSE) { |
| 272 | 272 | throw new Exception("Error cropping PEM data at its BEGIN marker."); |
| 273 | 273 | } |
| 274 | - $this->loggerInstance->debug(4, $caSanitized1 . "\n"); |
|
| 274 | + $this->loggerInstance->debug(4, $caSanitized1."\n"); |
|
| 275 | 275 | // remove \n |
| 276 | 276 | $caSanitized = str_replace("\n", "", $caSanitized1); |
| 277 | - $jsonArray["Certificates"][] = ["GUID" => "{" . $ca['uuid'] . "}", "Remove" => false, "Type" => "Authority", "X509" => $caSanitized]; |
|
| 278 | - $this->loggerInstance->debug(3, $caSanitized . "\n"); |
|
| 277 | + $jsonArray["Certificates"][] = ["GUID" => "{".$ca['uuid']."}", "Remove" => false, "Type" => "Authority", "X509" => $caSanitized]; |
|
| 278 | + $this->loggerInstance->debug(3, $caSanitized."\n"); |
|
| 279 | 279 | } |
| 280 | 280 | // if we are doing silverbullet, include the unencrypted(!) P12 as a client certificate |
| 281 | 281 | if ($this->selectedEap == \core\common\EAP::EAPTYPE_SILVERBULLET) { |
| 282 | - $jsonArray["Certificates"][] = ["GUID" => "[" . $this->clientCert['GUID'] . "]", "PKCS12" => base64_encode($this->clientCert['certdataclear']), "Remove" => false, "Type" => "Client"]; |
|
| 282 | + $jsonArray["Certificates"][] = ["GUID" => "[".$this->clientCert['GUID']."]", "PKCS12" => base64_encode($this->clientCert['certdataclear']), "Remove" => false, "Type" => "Client"]; |
|
| 283 | 283 | } |
| 284 | 284 | $eaparray = $this->eapBlock($caRefs); |
| 285 | 285 | // define Wi-Fi networks |
@@ -300,7 +300,7 @@ discard block |
||
| 300 | 300 | |
| 301 | 301 | file_put_contents('installer_profile', $finalJson); |
| 302 | 302 | |
| 303 | - $fileName = $this->installerBasename . '.onc'; |
|
| 303 | + $fileName = $this->installerBasename.'.onc'; |
|
| 304 | 304 | |
| 305 | 305 | if (!$this->sign) { |
| 306 | 306 | rename("installer_profile", $fileName); |
@@ -311,7 +311,7 @@ discard block |
||
| 311 | 311 | // have the notion of signing |
| 312 | 312 | // but if they ever change their mind, we are prepared |
| 313 | 313 | |
| 314 | - $outputFromSigning = system($this->sign . " installer_profile '$fileName' > /dev/null"); |
|
| 314 | + $outputFromSigning = system($this->sign." installer_profile '$fileName' > /dev/null"); |
|
| 315 | 315 | if ($outputFromSigning === FALSE) { |
| 316 | 316 | $this->loggerInstance->debug(2, "Signing the ONC installer $fileName FAILED!\n"); |
| 317 | 317 | } |
@@ -118,7 +118,7 @@ discard block |
||
| 118 | 118 | if (is_scalar($value)) { |
| 119 | 119 | $this->value = strval($value); |
| 120 | 120 | } else { |
| 121 | - throw new Exception("unexpected value type passed" . gettype($value)); |
|
| 121 | + throw new Exception("unexpected value type passed".gettype($value)); |
|
| 122 | 122 | } |
| 123 | 123 | } |
| 124 | 124 | |
@@ -434,7 +434,7 @@ discard block |
||
| 434 | 434 | $qualClassName = get_class($object); |
| 435 | 435 | // remove namespace qualifier |
| 436 | 436 | $pos = strrpos($qualClassName, '\\'); |
| 437 | - $className = substr($qualClassName, $pos + 1); |
|
| 437 | + $className = substr($qualClassName, $pos + 1); |
|
| 438 | 438 | $name = preg_replace("/_/", "-", $className); |
| 439 | 439 | if ($object->getValue()) { |
| 440 | 440 | $val = preg_replace('/&/', '&', $object->getValue()); |
@@ -31,7 +31,7 @@ discard block |
||
| 31 | 31 | */ |
| 32 | 32 | namespace devices\xml; |
| 33 | 33 | use Exception; |
| 34 | -require_once dirname(__FILE__) . '/XML.inc.php'; |
|
| 34 | +require_once dirname(__FILE__).'/XML.inc.php'; |
|
| 35 | 35 | |
| 36 | 36 | /** |
| 37 | 37 | * This class implements full functionality of the generic XML device |
@@ -132,11 +132,11 @@ discard block |
||
| 132 | 132 | marshalObject($root, $eapIdp); |
| 133 | 133 | $dom = dom_import_simplexml($root)->ownerDocument; |
| 134 | 134 | //TODO schema validation makes sense so probably should be used |
| 135 | - if ($dom->schemaValidate(ROOT . '/devices/xml/eap-metadata.xsd') === FALSE) { |
|
| 135 | + if ($dom->schemaValidate(ROOT.'/devices/xml/eap-metadata.xsd') === FALSE) { |
|
| 136 | 136 | throw new Exception("Schema validation failed for eap-metadata"); |
| 137 | 137 | } |
| 138 | - file_put_contents($this->installerBasename . '.eap-config', $dom->saveXML()); |
|
| 139 | - return($this->installerBasename . '.eap-config'); |
|
| 138 | + file_put_contents($this->installerBasename.'.eap-config', $dom->saveXML()); |
|
| 139 | + return($this->installerBasename.'.eap-config'); |
|
| 140 | 140 | } |
| 141 | 141 | |
| 142 | 142 | private $AttributeNames = [ |
@@ -162,7 +162,7 @@ discard block |
||
| 162 | 162 | $this->loggerInstance->debug(4, "Missing class definition for $attrName\n"); |
| 163 | 163 | return([]); |
| 164 | 164 | } |
| 165 | - $className = "\devices\xml\\" . $this->AttributeNames[$attrName]; |
|
| 165 | + $className = "\devices\xml\\".$this->AttributeNames[$attrName]; |
|
| 166 | 166 | $objs = []; |
| 167 | 167 | if ($this->langScope === 'global') { |
| 168 | 168 | foreach ($attributeList['langs'] as $language => $value) { |
@@ -200,7 +200,7 @@ discard block |
||
| 200 | 200 | $displayname = new DisplayName(); |
| 201 | 201 | if (isset($profileNameLangs)) { |
| 202 | 202 | $langOrC = isset($profileNameLangs[$language]) ? $profileNameLangs[$language] : $profileNameLangs['C']; |
| 203 | - $value .= ' - ' . $langOrC; |
|
| 203 | + $value .= ' - '.$langOrC; |
|
| 204 | 204 | } |
| 205 | 205 | $displayname->setValue($value); |
| 206 | 206 | $displayname->setAttributes(['lang' => $language]); |
@@ -210,7 +210,7 @@ discard block |
||
| 210 | 210 | $displayname = new DisplayName(); |
| 211 | 211 | $value = $attr['general:instname'][0]; |
| 212 | 212 | if ($attr['internal:profile_count'][0] > 1) { |
| 213 | - $value .= ' - ' . $attr['profile:name'][0]; |
|
| 213 | + $value .= ' - '.$attr['profile:name'][0]; |
|
| 214 | 214 | } |
| 215 | 215 | $displayname->setValue($value); |
| 216 | 216 | $objs[] = $displayname; |
@@ -227,7 +227,7 @@ discard block |
||
| 227 | 227 | $attr = $this->attributes; |
| 228 | 228 | if (isset($attr['general:logo_file'][0])) { |
| 229 | 229 | $logoString = base64_encode($attr['general:logo_file'][0]); |
| 230 | - $logoMime = 'image/' . $attr['internal:logo_file'][0]['mime']; |
|
| 230 | + $logoMime = 'image/'.$attr['internal:logo_file'][0]['mime']; |
|
| 231 | 231 | $providerlogo = new ProviderLogo(); |
| 232 | 232 | $providerlogo->setAttributes(['mime' => $logoMime, 'encoding' => 'base64']); |
| 233 | 233 | $providerlogo->setValue($logoString); |
@@ -327,7 +327,7 @@ discard block |
||
| 327 | 327 | |
| 328 | 328 | if (isset($inner["METHOD"]) && $inner["METHOD"]) { |
| 329 | 329 | $innerauthmethod = new InnerAuthenticationMethod(); |
| 330 | - $typeOfInner = "\devices\xml\\" . ($inner["EAP"] ? 'EAPMethod' : 'NonEAPAuthMethod'); |
|
| 330 | + $typeOfInner = "\devices\xml\\".($inner["EAP"] ? 'EAPMethod' : 'NonEAPAuthMethod'); |
|
| 331 | 331 | $eapmethod = new $typeOfInner(); |
| 332 | 332 | $eaptype = new Type(); |
| 333 | 333 | $eaptype->setValue($inner['METHOD']); |
@@ -364,7 +364,7 @@ discard block |
||
| 364 | 364 | return($serversidecredential); |
| 365 | 365 | } |
| 366 | 366 | |
| 367 | - private function setClientSideRealm ($clientsidecredential) { |
|
| 367 | + private function setClientSideRealm($clientsidecredential) { |
|
| 368 | 368 | $attr = $this->attributes; |
| 369 | 369 | $realm = \core\common\Entity::getAttributeValue($attr, 'internal:realm', 0); |
| 370 | 370 | if ($realm === NULL) { |
@@ -30,7 +30,7 @@ |
||
| 30 | 30 | final public function __construct() { |
| 31 | 31 | parent::__construct(); |
| 32 | 32 | $this->setSupportedEapMethods([\core\common\EAP::EAPTYPE_NONE]); |
| 33 | - $this->loggerInstance->debug(4,"RedirectEx called"); |
|
| 33 | + $this->loggerInstance->debug(4, "RedirectEx called"); |
|
| 34 | 34 | } |
| 35 | 35 | |
| 36 | 36 | /** |
@@ -138,8 +138,8 @@ |
||
| 138 | 138 | */ |
| 139 | 139 | private function zipInstaller() { |
| 140 | 140 | // one can always access $this->attributes to check things |
| 141 | - $fileName = $this->installerBasename . '.zip'; |
|
| 142 | - $output = system('zip -q ' . $fileName . ' *'); |
|
| 141 | + $fileName = $this->installerBasename.'.zip'; |
|
| 142 | + $output = system('zip -q '.$fileName.' *'); |
|
| 143 | 143 | if ($output === FALSE) { |
| 144 | 144 | $this->loggerInstance->debug(2, "unable to zip the installer\n"); |
| 145 | 145 | } |
@@ -54,9 +54,9 @@ discard block |
||
| 54 | 54 | * |
| 55 | 55 | */ |
| 56 | 56 | public function writeInstaller() { |
| 57 | - $installerPath = $this->installerBasename . ".py"; |
|
| 57 | + $installerPath = $this->installerBasename.".py"; |
|
| 58 | 58 | $this->copyFile("main.py", $installerPath); |
| 59 | - $installer = fopen($installerPath,"a"); |
|
| 59 | + $installer = fopen($installerPath, "a"); |
|
| 60 | 60 | if ($installer === FALSE) { |
| 61 | 61 | throw new Exception("Unable to open installer file for writing!"); |
| 62 | 62 | } |
@@ -83,9 +83,9 @@ discard block |
||
| 83 | 83 | $out .= "<p>"; |
| 84 | 84 | if ($ssidCount > 1) { |
| 85 | 85 | if ($ssidCount > 2) { |
| 86 | - $out .= sprintf(_("In addition to <strong>%s</strong> the installer will also configure access to the following networks:"), implode(', ', CONFIG_CONFASSISTANT['CONSORTIUM']['ssid'])) . " "; |
|
| 86 | + $out .= sprintf(_("In addition to <strong>%s</strong> the installer will also configure access to the following networks:"), implode(', ', CONFIG_CONFASSISTANT['CONSORTIUM']['ssid']))." "; |
|
| 87 | 87 | } else { |
| 88 | - $out .= sprintf(_("In addition to <strong>%s</strong> the installer will also configure access to:"), implode(', ', CONFIG_CONFASSISTANT['CONSORTIUM']['ssid'])) . " "; |
|
| 88 | + $out .= sprintf(_("In addition to <strong>%s</strong> the installer will also configure access to:"), implode(', ', CONFIG_CONFASSISTANT['CONSORTIUM']['ssid']))." "; |
|
| 89 | 89 | } |
| 90 | 90 | $iterator = 0; |
| 91 | 91 | foreach ($this->attributes['internal:SSID'] as $ssid => $v) { |
@@ -123,8 +123,8 @@ discard block |
||
| 123 | 123 | * @return void |
| 124 | 124 | */ |
| 125 | 125 | private function writeConfigLine($file, $prefix, $name, $text) { |
| 126 | - $out = $prefix . $name . ' = "' . $text; |
|
| 127 | - fwrite($file, wordwrap($out, 70, " \" \\\n \"") . "\n"); |
|
| 126 | + $out = $prefix.$name.' = "'.$text; |
|
| 127 | + fwrite($file, wordwrap($out, 70, " \" \\\n \"")."\n"); |
|
| 128 | 128 | } |
| 129 | 129 | |
| 130 | 130 | /** |
@@ -163,7 +163,7 @@ discard block |
||
| 163 | 163 | 'user_cert_missing' => _("personal certificate file not found"), |
| 164 | 164 | ]; |
| 165 | 165 | foreach ($messages as $name => $value) { |
| 166 | - $this->writeConfigLine($file, 'Messages.', $name, $value . '"'); |
|
| 166 | + $this->writeConfigLine($file, 'Messages.', $name, $value.'"'); |
|
| 167 | 167 | } |
| 168 | 168 | \core\common\Entity::outOfThePotatoes(); |
| 169 | 169 | } |
@@ -207,39 +207,39 @@ discard block |
||
| 207 | 207 | } |
| 208 | 208 | |
| 209 | 209 | if ($outerId !== NULL) { |
| 210 | - $configRaw['anonymous_identity'] = '"' . $outerId . '"'; |
|
| 210 | + $configRaw['anonymous_identity'] = '"'.$outerId.'"'; |
|
| 211 | 211 | } |
| 212 | 212 | |
| 213 | 213 | if (!empty($this->attributes['internal:realm'][0])) { |
| 214 | 214 | $config['user_realm'] = $this->attributes['internal:realm'][0]; |
| 215 | 215 | } |
| 216 | 216 | |
| 217 | - if(!empty($this->attributes['internal:hint_userinput_suffix'][0]) && $this->attributes['internal:hint_userinput_suffix'][0] == 1) { |
|
| 217 | + if (!empty($this->attributes['internal:hint_userinput_suffix'][0]) && $this->attributes['internal:hint_userinput_suffix'][0] == 1) { |
|
| 218 | 218 | $configRaw['hint_user_input'] = "True"; |
| 219 | 219 | } |
| 220 | 220 | |
| 221 | - if(!empty($this->attributes['internal:verify_userinput_suffix'][0]) && $this->attributes['internal:verify_userinput_suffix'][0] == 1) { |
|
| 221 | + if (!empty($this->attributes['internal:verify_userinput_suffix'][0]) && $this->attributes['internal:verify_userinput_suffix'][0] == 1) { |
|
| 222 | 222 | $configRaw['verify_user_realm_input'] = "True"; |
| 223 | 223 | } |
| 224 | 224 | |
| 225 | 225 | foreach ($config as $name => $value) { |
| 226 | - $this->writeConfigLine($file, 'Config.', $name, $value . '"'); |
|
| 226 | + $this->writeConfigLine($file, 'Config.', $name, $value.'"'); |
|
| 227 | 227 | } |
| 228 | 228 | |
| 229 | 229 | foreach ($configRaw as $name => $value) { |
| 230 | - fwrite($file, 'Config.' . $name . ' = ' . $value . "\n"); |
|
| 230 | + fwrite($file, 'Config.'.$name.' = '.$value."\n"); |
|
| 231 | 231 | } |
| 232 | 232 | |
| 233 | 233 | if ($tou === '') { |
| 234 | - fwrite($file, 'Config.tou = ""' . "\n"); |
|
| 234 | + fwrite($file, 'Config.tou = ""'."\n"); |
|
| 235 | 235 | } else { |
| 236 | - fwrite($file, 'Config.tou = """' . $tou . '"""' . "\n"); |
|
| 236 | + fwrite($file, 'Config.tou = """'.$tou.'"""'."\n"); |
|
| 237 | 237 | } |
| 238 | 238 | |
| 239 | - fwrite($file, 'Config.CA = """' . $this->mkCAfile() . '"""' . "\n"); |
|
| 239 | + fwrite($file, 'Config.CA = """'.$this->mkCAfile().'"""'."\n"); |
|
| 240 | 240 | $sbUserFile = $this->mkSbUserFile(); |
| 241 | 241 | if ($sbUserFile !== '') { |
| 242 | - fwrite($file, 'Config.sb_user_file = """' . $sbUserFile . '"""' . "\n"); |
|
| 242 | + fwrite($file, 'Config.sb_user_file = """'.$sbUserFile.'"""'."\n"); |
|
| 243 | 243 | } |
| 244 | 244 | } |
| 245 | 245 | |
@@ -291,7 +291,7 @@ discard block |
||
| 291 | 291 | } |
| 292 | 292 | $out .= "'DNS:$oneServer'"; |
| 293 | 293 | } |
| 294 | - return "[" . $out. "]"; |
|
| 294 | + return "[".$out."]"; |
|
| 295 | 295 | } |
| 296 | 296 | |
| 297 | 297 | /** |
@@ -305,7 +305,7 @@ discard block |
||
| 305 | 305 | foreach ($ssids as $ssid => $cipher) { |
| 306 | 306 | $outArray[] = "'$ssid'"; |
| 307 | 307 | } |
| 308 | - return '[' . implode(', ', $outArray) . ']'; |
|
| 308 | + return '['.implode(', ', $outArray).']'; |
|
| 309 | 309 | } |
| 310 | 310 | |
| 311 | 311 | /** |
@@ -321,7 +321,7 @@ discard block |
||
| 321 | 321 | $outArray[] = "'$ssid'"; |
| 322 | 322 | } |
| 323 | 323 | } |
| 324 | - return '[' . implode(', ', $outArray) . ']'; |
|
| 324 | + return '['.implode(', ', $outArray).']'; |
|
| 325 | 325 | } |
| 326 | 326 | |
| 327 | 327 | /** |
@@ -329,7 +329,7 @@ discard block |
||
| 329 | 329 | * |
| 330 | 330 | * @return string |
| 331 | 331 | */ |
| 332 | - private function mkCAfile(){ |
|
| 332 | + private function mkCAfile() { |
|
| 333 | 333 | $out = ''; |
| 334 | 334 | $cAlist = $this->attributes['internal:CAs'][0]; |
| 335 | 335 | foreach ($cAlist as $oneCa) { |
@@ -345,7 +345,7 @@ discard block |
||
| 345 | 345 | */ |
| 346 | 346 | private function mkIntro() { |
| 347 | 347 | \core\common\Entity::intoThePotatoes(); |
| 348 | - $out = _("This installer has been prepared for {0}") . '\n\n' . _("More information and comments:") . '\n\nEMAIL: {1}\nWWW: {2}\n\n' . |
|
| 348 | + $out = _("This installer has been prepared for {0}").'\n\n'._("More information and comments:").'\n\nEMAIL: {1}\nWWW: {2}\n\n'. |
|
| 349 | 349 | _("Installer created with software from the GEANT project."); |
| 350 | 350 | \core\common\Entity::outOfThePotatoes(); |
| 351 | 351 | return $out; |
@@ -25,7 +25,7 @@ |
||
| 25 | 25 | * @author Stefan Winter <[email protected]> |
| 26 | 26 | * @package Core |
| 27 | 27 | */ |
| 28 | -require_once dirname(dirname(__FILE__)) . "/config/_config.php"; |
|
| 28 | +require_once dirname(dirname(__FILE__))."/config/_config.php"; |
|
| 29 | 29 | |
| 30 | 30 | $Gui = new \web\lib\user\Gui(); |
| 31 | 31 | // ... unless overwritten by direct GET/POST parameter in the request or a SESSION setting |
@@ -155,7 +155,7 @@ discard block |
||
| 155 | 155 | $invitationObject = new SilverbulletInvitation($token); |
| 156 | 156 | $profile = new ProfileSilverbullet($invitationObject->profile); |
| 157 | 157 | $inst = new IdP($profile->institution); |
| 158 | - $loggerInstance->debug(5, "tokenStatus: done, got " . $invitationObject->invitationTokenStatus . ", " . $invitationObject->profile . ", " . $invitationObject->userId . ", " . $invitationObject->expiry . ", " . $invitationObject->invitationTokenString . "\n"); |
|
| 158 | + $loggerInstance->debug(5, "tokenStatus: done, got ".$invitationObject->invitationTokenStatus.", ".$invitationObject->profile.", ".$invitationObject->userId.", ".$invitationObject->expiry.", ".$invitationObject->invitationTokenString."\n"); |
|
| 159 | 159 | if ($invitationObject->invitationTokenStatus != SilverbulletInvitation::SB_TOKENSTATUS_VALID && $invitationObject->invitationTokenStatus != SilverbulletInvitation::SB_TOKENSTATUS_PARTIALLY_REDEEMED) { |
| 160 | 160 | throw new Exception("Attempt to generate a SilverBullet installer with an invalid/redeemed/expired token. The user should never have gotten that far!"); |
| 161 | 161 | } |
@@ -168,12 +168,12 @@ discard block |
||
| 168 | 168 | throw new Exception("Despite a valid token, the corresponding user was not found in database or database query error!"); |
| 169 | 169 | } |
| 170 | 170 | $expiryObject = mysqli_fetch_object(/** @scrutinizer ignore-type */ $userrow); |
| 171 | - $loggerInstance->debug(5, "EXP: " . $expiryObject->expiry . "\n"); |
|
| 171 | + $loggerInstance->debug(5, "EXP: ".$expiryObject->expiry."\n"); |
|
| 172 | 172 | $expiryDateObject = date_create_from_format("Y-m-d H:i:s", $expiryObject->expiry); |
| 173 | 173 | if ($expiryDateObject === FALSE) { |
| 174 | 174 | throw new Exception("The expiry date we got from the DB is bogus!"); |
| 175 | 175 | } |
| 176 | - $loggerInstance->debug(5, $expiryDateObject->format("Y-m-d H:i:s") . "\n"); |
|
| 176 | + $loggerInstance->debug(5, $expiryDateObject->format("Y-m-d H:i:s")."\n"); |
|
| 177 | 177 | // date_create with no parameters can't fail, i.e. is never FALSE |
| 178 | 178 | $validity = date_diff(/** @scrutinizer ignore-type */ date_create(), $expiryDateObject); |
| 179 | 179 | $expiryDays = $validity->days + 1; |
@@ -222,7 +222,7 @@ discard block |
||
| 222 | 222 | $certString = ""; |
| 223 | 223 | openssl_x509_export($cert, $certString); |
| 224 | 224 | $parsedCert = $x509->processCertificate($certString); |
| 225 | - $loggerInstance->debug(5, "CERTINFO: " . print_r($parsedCert['full_details'], true)); |
|
| 225 | + $loggerInstance->debug(5, "CERTINFO: ".print_r($parsedCert['full_details'], true)); |
|
| 226 | 226 | $realExpiryDate = date_create_from_format("U", $parsedCert['full_details']['validTo_time_t'])->format("Y-m-d H:i:s"); |
| 227 | 227 | |
| 228 | 228 | // store new cert info in DB |
@@ -280,26 +280,26 @@ discard block |
||
| 280 | 280 | $cat = new CAT(); |
| 281 | 281 | $tempdirArray = $cat->createTemporaryDirectory("test"); |
| 282 | 282 | $tempdir = $tempdirArray['dir']; |
| 283 | - $nowIndexTxt = (new \DateTime())->format("ymdHis") . "Z"; |
|
| 284 | - $expiryIndexTxt = $originalExpiry->format("ymdHis") . "Z"; |
|
| 283 | + $nowIndexTxt = (new \DateTime())->format("ymdHis")."Z"; |
|
| 284 | + $expiryIndexTxt = $originalExpiry->format("ymdHis")."Z"; |
|
| 285 | 285 | $serialHex = strtoupper(dechex($this->serial)); |
| 286 | 286 | if (strlen($serialHex) % 2 == 1) { |
| 287 | - $serialHex = "0" . $serialHex; |
|
| 287 | + $serialHex = "0".$serialHex; |
|
| 288 | 288 | } |
| 289 | 289 | |
| 290 | - $indexStatement = "$certstatus\t$expiryIndexTxt\t" . ($certstatus == "R" ? "$nowIndexTxt,unspecified" : "") . "\t$serialHex\tunknown\t/O=" . CONFIG_CONFASSISTANT['CONSORTIUM']['name'] . "/OU=$federation/CN=$this->username\n"; |
|
| 290 | + $indexStatement = "$certstatus\t$expiryIndexTxt\t".($certstatus == "R" ? "$nowIndexTxt,unspecified" : "")."\t$serialHex\tunknown\t/O=".CONFIG_CONFASSISTANT['CONSORTIUM']['name']."/OU=$federation/CN=$this->username\n"; |
|
| 291 | 291 | $logHandle->debug(4, "index.txt contents-to-be: $indexStatement"); |
| 292 | - if (!file_put_contents($tempdir . "/index.txt", $indexStatement)) { |
|
| 292 | + if (!file_put_contents($tempdir."/index.txt", $indexStatement)) { |
|
| 293 | 293 | $logHandle->debug(1, "Unable to write openssl index.txt file for revocation handling!"); |
| 294 | 294 | } |
| 295 | 295 | // index.txt.attr is dull but needs to exist |
| 296 | - file_put_contents($tempdir . "/index.txt.attr", "unique_subject = yes\n"); |
|
| 296 | + file_put_contents($tempdir."/index.txt.attr", "unique_subject = yes\n"); |
|
| 297 | 297 | // call "openssl ocsp" to manufacture our own OCSP statement |
| 298 | 298 | // adding "-rmd sha1" to the following command-line makes the |
| 299 | 299 | // choice of signature algorithm for the response explicit |
| 300 | 300 | // but it's only available from openssl-1.1.0 (which we do not |
| 301 | 301 | // want to require just for that one thing). |
| 302 | - $execCmd = CONFIG['PATHS']['openssl'] . " ocsp -issuer " . ROOT . "/config/SilverbulletClientCerts/real-".$this->ca_type.".pem -sha1 -ndays 10 -no_nonce -serial 0x$serialHex -CA " . ROOT . "/config/SilverbulletClientCerts/real-".$this->ca_type.".pem -rsigner " . ROOT . "/config/SilverbulletClientCerts/real-".$this->ca_type.".pem -rkey " . ROOT . "/config/SilverbulletClientCerts/real-".$this->ca_type.".key -index $tempdir/index.txt -no_cert_verify -respout $tempdir/$serialHex.response.der"; |
|
| 302 | + $execCmd = CONFIG['PATHS']['openssl']." ocsp -issuer ".ROOT."/config/SilverbulletClientCerts/real-".$this->ca_type.".pem -sha1 -ndays 10 -no_nonce -serial 0x$serialHex -CA ".ROOT."/config/SilverbulletClientCerts/real-".$this->ca_type.".pem -rsigner ".ROOT."/config/SilverbulletClientCerts/real-".$this->ca_type.".pem -rkey ".ROOT."/config/SilverbulletClientCerts/real-".$this->ca_type.".key -index $tempdir/index.txt -no_cert_verify -respout $tempdir/$serialHex.response.der"; |
|
| 303 | 303 | $logHandle->debug(2, "Calling openssl ocsp with following cmdline: $execCmd\n"); |
| 304 | 304 | $output = []; |
| 305 | 305 | $return = 999; |
@@ -307,11 +307,11 @@ discard block |
||
| 307 | 307 | if ($return !== 0) { |
| 308 | 308 | throw new Exception("Non-zero return value from openssl ocsp!"); |
| 309 | 309 | } |
| 310 | - $ocsp = file_get_contents($tempdir . "/$serialHex.response.der"); |
|
| 310 | + $ocsp = file_get_contents($tempdir."/$serialHex.response.der"); |
|
| 311 | 311 | // remove the temp dir! |
| 312 | - unlink($tempdir . "/$serialHex.response.der"); |
|
| 313 | - unlink($tempdir . "/index.txt.attr"); |
|
| 314 | - unlink($tempdir . "/index.txt"); |
|
| 312 | + unlink($tempdir."/$serialHex.response.der"); |
|
| 313 | + unlink($tempdir."/index.txt.attr"); |
|
| 314 | + unlink($tempdir."/index.txt"); |
|
| 315 | 315 | rmdir($tempdir); |
| 316 | 316 | break; |
| 317 | 317 | default: |
@@ -365,7 +365,7 @@ discard block |
||
| 365 | 365 | $username = ""; |
| 366 | 366 | while ($usernameIsUnique === FALSE) { |
| 367 | 367 | $usernameLocalPart = common\Entity::randomString(64 - 1 - strlen($realm), "0123456789abcdefghijklmnopqrstuvwxyz"); |
| 368 | - $username = $usernameLocalPart . "@" . $realm; |
|
| 368 | + $username = $usernameLocalPart."@".$realm; |
|
| 369 | 369 | $uniquenessQuery = $databaseHandle->exec("SELECT cn from silverbullet_certificate WHERE cn = ?", "s", $username); |
| 370 | 370 | // SELECT -> resource, not boolean |
| 371 | 371 | if (mysqli_num_rows(/** @scrutinizer ignore-type */ $uniquenessQuery) == 0) { |
@@ -417,10 +417,10 @@ discard block |
||
| 417 | 417 | $databaseHandle = DBConnection::handle("INST"); |
| 418 | 418 | switch (CONFIG_CONFASSISTANT['SILVERBULLET']['CA']['type']) { |
| 419 | 419 | case "embedded": |
| 420 | - $rootCaPem = file_get_contents(ROOT . "/config/SilverbulletClientCerts/rootca-$certtype.pem"); |
|
| 421 | - $issuingCaPem = file_get_contents(ROOT . "/config/SilverbulletClientCerts/real-$certtype.pem"); |
|
| 420 | + $rootCaPem = file_get_contents(ROOT."/config/SilverbulletClientCerts/rootca-$certtype.pem"); |
|
| 421 | + $issuingCaPem = file_get_contents(ROOT."/config/SilverbulletClientCerts/real-$certtype.pem"); |
|
| 422 | 422 | $issuingCa = openssl_x509_read($issuingCaPem); |
| 423 | - $issuingCaKey = openssl_pkey_get_private("file://" . ROOT . "/config/SilverbulletClientCerts/real-$certtype.key"); |
|
| 423 | + $issuingCaKey = openssl_pkey_get_private("file://".ROOT."/config/SilverbulletClientCerts/real-$certtype.key"); |
|
| 424 | 424 | $nonDupSerialFound = FALSE; |
| 425 | 425 | do { |
| 426 | 426 | $serial = random_int(1000000000, PHP_INT_MAX); |
@@ -442,7 +442,7 @@ discard block |
||
| 442 | 442 | throw new Exception("Unknown cert type!"); |
| 443 | 443 | } |
| 444 | 444 | return [ |
| 445 | - "CERT" => openssl_csr_sign($csr, $issuingCa, $issuingCaKey, $expiryDays, ['digest_alg' => $alg, 'config' => dirname(__DIR__) . "/config/SilverbulletClientCerts/openssl-$certtype.cnf"], $serial), |
|
| 445 | + "CERT" => openssl_csr_sign($csr, $issuingCa, $issuingCaKey, $expiryDays, ['digest_alg' => $alg, 'config' => dirname(__DIR__)."/config/SilverbulletClientCerts/openssl-$certtype.cnf"], $serial), |
|
| 446 | 446 | "SERIAL" => $serial, |
| 447 | 447 | "ISSUER" => $issuingCaPem, |
| 448 | 448 | "ROOT" => $rootCaPem, |