|
@@ -26,7 +26,7 @@ discard block |
|
|
block discarded – undo |
|
26
|
26
|
*/ |
|
27
|
27
|
?> |
|
28
|
28
|
<?php |
|
29
|
|
-require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
|
29
|
+require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
30
|
30
|
|
|
31
|
31
|
$auth = new \web\lib\admin\Authentication(); |
|
32
|
32
|
$deco = new \web\lib\admin\PageDecoration(); |
|
@@ -72,7 +72,7 @@ discard block |
|
|
block discarded – undo |
|
72
|
72
|
// also send user back to the overview page |
|
73
|
73
|
if (isset($_POST['requestcert']) && $_POST['requestcert'] == \web\lib\common\FormElements::BUTTON_SAVE) { |
|
74
|
74
|
// basic sanity checks before we hand this over to openssl |
|
75
|
|
- $sanitisedCsr = $validator->string($_POST['CSR'] ?? "" , TRUE); |
|
|
75
|
+ $sanitisedCsr = $validator->string($_POST['CSR'] ?? "", TRUE); |
|
76
|
76
|
if (openssl_csr_get_public_key($sanitisedCsr) === FALSE) { |
|
77
|
77
|
throw new Exception("Sorry: Unable to parse the submitted public key - no public key inside?"); |
|
78
|
78
|
} |
|
@@ -86,7 +86,7 @@ discard block |
|
|
block discarded – undo |
|
86
|
86
|
$fed = $validator->Federation($_POST['NRO-list']); |
|
87
|
87
|
$country = strtoupper($fed->tld); |
|
88
|
88
|
$DN[] = "C=$country"; |
|
89
|
|
- $DN[] = "O=NRO of " . $cat->knownFederations[strtoupper($fed->tld)]; |
|
|
89
|
+ $DN[] = "O=NRO of ".$cat->knownFederations[strtoupper($fed->tld)]; |
|
90
|
90
|
$DN[] = "CN=comes.from.eduroam.db"; |
|
91
|
91
|
$policies[] = "eduroam IdP"; |
|
92
|
92
|
$policies[] = "eduroam SP"; |
|
@@ -104,11 +104,11 @@ discard block |
|
|
block discarded – undo |
|
104
|
104
|
default: |
|
105
|
105
|
throw new Exception("Sorry: Unknown level of issuance requested."); |
|
106
|
106
|
} |
|
107
|
|
- echo "<p>" . _("Requesting a certificate with the following properties"); |
|
|
107
|
+ echo "<p>"._("Requesting a certificate with the following properties"); |
|
108
|
108
|
echo "<ul>"; |
|
109
|
|
- echo "<li>" . _("Policy OIDs: ") . implode(", ", $policies) . "</li>"; |
|
110
|
|
- echo "<li>" . _("Distinguished Name: ") . implode(", ", $DN) . "</li>"; |
|
111
|
|
- echo "<li>" . _("Requester Contact Details: will come from eduroam DB (using stub 'Someone, <[email protected]>').") . "</li>"; |
|
|
109
|
+ echo "<li>"._("Policy OIDs: ").implode(", ", $policies)."</li>"; |
|
|
110
|
+ echo "<li>"._("Distinguished Name: ").implode(", ", $DN)."</li>"; |
|
|
111
|
+ echo "<li>"._("Requester Contact Details: will come from eduroam DB (using stub 'Someone, <[email protected]>').")."</li>"; |
|
112
|
112
|
echo "</ul></p>"; |
|
113
|
113
|
/* $ossl = proc_open("openssl req -subj '/".implode("/", $DN)."'", [ 0 => ["pipe", "r"], 1 => ["pipe", "w"], 2 => [ "file", "/tmp/voodoo-error", "a"] ], $pipes); |
|
114
|
114
|
if (is_resource($ossl)) { |
|
@@ -121,13 +121,13 @@ discard block |
|
|
block discarded – undo |
|
121
|
121
|
throw new Exception("Calling openssl in a fancy way did not work."); |
|
122
|
122
|
} |
|
123
|
123
|
echo "<p>"._("This is the new CSR (return code was $retval)")."<pre>$newCsr</pre></p>"; */ |
|
124
|
|
- $newCsrWithMeta = ["CSR" => /* $newCsr */ $_POST['CSR'], "USERNAME" => "Someone", "USERMAIL" => "[email protected]", "SUBJECT" => implode(",", $DN) ,"FED" => $country]; |
|
|
124
|
+ $newCsrWithMeta = ["CSR" => /* $newCsr */ $_POST['CSR'], "USERNAME" => "Someone", "USERMAIL" => "[email protected]", "SUBJECT" => implode(",", $DN), "FED" => $country]; |
|
125
|
125
|
// our certs can be good for max 5 years |
|
126
|
126
|
$fed->requestCertificate($newCsrWithMeta, 1825); |
|
127
|
127
|
echo "<p>"._("The certificate was requested.")."</p>"; |
|
128
|
128
|
?> |
|
129
|
129
|
<form action="overview_certificates.php" method="GET"> |
|
130
|
|
- <button type="submit"><?php echo _("Back to Certificate Overview");?></button> |
|
|
130
|
+ <button type="submit"><?php echo _("Back to Certificate Overview"); ?></button> |
|
131
|
131
|
</form> |
|
132
|
132
|
<?php |
|
133
|
133
|
echo $deco->footer(); |
|
@@ -136,14 +136,14 @@ discard block |
|
|
block discarded – undo |
|
136
|
136
|
|
|
137
|
137
|
// if we did not get a SAVE button, display UI for a fresh request instead |
|
138
|
138
|
?> |
|
139
|
|
- <h2><?php echo _("1. Certificate Holder Details");?></h2> |
|
|
139
|
+ <h2><?php echo _("1. Certificate Holder Details"); ?></h2> |
|
140
|
140
|
<form action="action_req_certificate.php" method="POST"> |
|
141
|
141
|
<input type="radio" name="LEVEL" id="NRO" value="NRO" checked><?php printf(_("Certificate for %s role"), $uiElements->nomenclatureFed); ?></input> |
|
142
|
142
|
<?php |
|
143
|
143
|
if (count($feds) == 1) { |
|
144
|
144
|
$fedObject = new \core\Federation($feds[0]['value']); |
|
145
|
|
- echo " <strong>" . $cat->knownFederations[$fedObject->tld] . "</strong>"; |
|
146
|
|
- echo '<input type="hidden" name="NRO-list" id="NRO-list" value="' . $fedObject->tld . '"/>'; |
|
|
145
|
+ echo " <strong>".$cat->knownFederations[$fedObject->tld]."</strong>"; |
|
|
146
|
+ echo '<input type="hidden" name="NRO-list" id="NRO-list" value="'.$fedObject->tld.'"/>'; |
|
147
|
147
|
} else { |
|
148
|
148
|
?> |
|
149
|
149
|
<select name="NRO-list" id="NRO-list"> |
|
@@ -151,7 +151,7 @@ discard block |
|
|
block discarded – undo |
|
151
|
151
|
<?php |
|
152
|
152
|
foreach ($feds as $oneFed) { |
|
153
|
153
|
$fedObject = new \core\Federation($oneFed['value']); |
|
154
|
|
- echo '<option value="' . strtoupper($fedObject->tld) . '">' . $cat->knownFederations[$fedObject->tld] . "</option>"; |
|
|
154
|
+ echo '<option value="'.strtoupper($fedObject->tld).'">'.$cat->knownFederations[$fedObject->tld]."</option>"; |
|
155
|
155
|
} |
|
156
|
156
|
?> |
|
157
|
157
|
</select> |
|
@@ -171,15 +171,15 @@ discard block |
|
|
block discarded – undo |
|
171
|
171
|
} |
|
172
|
172
|
} |
|
173
|
173
|
foreach ($allIdPs as $id => $name) { |
|
174
|
|
- echo '<option value="' . $id . '">' . $name . "</option>"; |
|
|
174
|
+ echo '<option value="'.$id.'">'.$name."</option>"; |
|
175
|
175
|
} |
|
176
|
176
|
?> |
|
177
|
177
|
</select> |
|
178
|
178
|
<br/> |
|
179
|
|
- <h2><?php echo _("2. CSR generation");?></h2> |
|
180
|
|
- <p><?php echo _("One way to generate an acceptable certificate request is via this openssl one-liner:");?></p> |
|
|
179
|
+ <h2><?php echo _("2. CSR generation"); ?></h2> |
|
|
180
|
+ <p><?php echo _("One way to generate an acceptable certificate request is via this openssl one-liner:"); ?></p> |
|
181
|
181
|
<p>openssl req -new -newkey rsa:4096 -out test.csr -keyout test.key -subj /DC=test/DC=test/DC=eduroam/C=XY/O=WillBeReplaced/CN=will.be.replaced</p> |
|
182
|
|
- <h2><?php echo _("3. Submission");?></h2> |
|
|
182
|
+ <h2><?php echo _("3. Submission"); ?></h2> |
|
183
|
183
|
<?php echo _("Please paste your CSR here:"); ?><br/><textarea name="CSR" id="CSR" rows="20" cols="85"/></textarea><br/> |
|
184
|
184
|
<button type="submit" name="requestcert" id="requestcert" value="<?php echo \web\lib\common\FormElements::BUTTON_SAVE ?>"><?php echo _("Send request"); ?></button> |
|
185
|
185
|
</form> |