@@ -19,7 +19,7 @@ discard block |
||
19 | 19 | * License: see the web/copyright.inc.php file in the file structure or |
20 | 20 | * <base_url>/copyright.php after deploying the software |
21 | 21 | */ |
22 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
22 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
23 | 23 | $languageInstance = new \core\common\Language(); |
24 | 24 | $languageInstance->setTextDomain("diagnostics"); |
25 | 25 | $loggerInstance = new \core\common\Logging(); |
@@ -61,43 +61,43 @@ discard block |
||
61 | 61 | $select = "<div id='sp_abuse_problem'> |
62 | 62 | <select style='margin-left: 0px;' id='select_sp_problem'>"; |
63 | 63 | foreach ($sp_problem as $pname => $pdesc) { |
64 | - $select = $select . "<option value='$pname'>$pdesc</option>\n"; |
|
64 | + $select = $select."<option value='$pname'>$pdesc</option>\n"; |
|
65 | 65 | } |
66 | - $select = $select . "</select></div>"; |
|
66 | + $select = $select."</select></div>"; |
|
67 | 67 | $res = " |
68 | 68 | <input type='hidden' name='token' id='token' value=''> |
69 | 69 | <input type='hidden' name='tests_result' id='tests_result' value=''> |
70 | 70 | <table id='sp_questions'> |
71 | 71 | <tr id='sp_problem_selector'> |
72 | - <td>" . _("Select your problem") . "</td> |
|
72 | + <td>" . _("Select your problem")."</td> |
|
73 | 73 | <td>$select</td> |
74 | 74 | </tr> |
75 | 75 | <tr> |
76 | - <td>" . _("What is the realm of the IdP in question?") . "</td> |
|
76 | + <td>"._("What is the realm of the IdP in question?")."</td> |
|
77 | 77 | <td> |
78 | 78 | <input type='text' name='admin_realm' id='admin_realm' value='$realmFromURL'> |
79 | - <button class='diag_button' id='realm_in_db_admin' style='display: none;' accesskey='R' type='button'>" . |
|
80 | - _("Check this realm") . |
|
79 | + <button class='diag_button' id='realm_in_db_admin' style='display: none;' accesskey='R' type='button'>". |
|
80 | + _("Check this realm"). |
|
81 | 81 | "</button> |
82 | 82 | <div id='tests_info_area'></div> |
83 | 83 | </td> |
84 | 84 | </tr> |
85 | 85 | <tr class='hidden_row'> |
86 | - <td>" . _("What is the authentication timestamp of the user session in question?") . "</td> |
|
86 | + <td>" . _("What is the authentication timestamp of the user session in question?")."</td> |
|
87 | 87 | <td><input type='text' id='timestamp' name='timestamp'> |
88 | 88 | <div id='datepicker'></div> |
89 | 89 | </td> |
90 | 90 | </tr> |
91 | 91 | <tr class='hidden_row'> |
92 | - <td>" . _("What is the MAC address of the user session in question?") . "</td> |
|
92 | + <td>" . _("What is the MAC address of the user session in question?")."</td> |
|
93 | 93 | <td><input type='text' id='mac' name='mac'></td> |
94 | 94 | </tr> |
95 | 95 | <tr class='hidden_row'> |
96 | - <td>" . _("Additional comments") . "</td> |
|
96 | + <td>" . _("Additional comments")."</td> |
|
97 | 97 | <td><textarea id='freetext' name='freetext' cols='60' rows='5'></textarea></td> |
98 | 98 | </tr> |
99 | 99 | <tr class='hidden_row'> |
100 | - <td>" . _("Please specify an email address on which the IdP can contact you") . "</td> |
|
100 | + <td>" . _("Please specify an email address on which the IdP can contact you")."</td> |
|
101 | 101 | <td><input type='text' id='email' name='email'></td> |
102 | 102 | </tr> |
103 | 103 | <tr> |
@@ -105,82 +105,82 @@ discard block |
||
105 | 105 | <td></td> |
106 | 106 | </tr> |
107 | 107 | <tr class='hidden_row' id='send_query_to_idp'> |
108 | - <td>" . _("Now you can send your query") . "</td> |
|
109 | - <td><button type='submit' class='diag_button' id='submit_idp_query' name='go'>" . _("Send") . "</button></td> |
|
108 | + <td>" . _("Now you can send your query")."</td> |
|
109 | + <td><button type='submit' class='diag_button' id='submit_idp_query' name='go'>" . _("Send")."</button></td> |
|
110 | 110 | </tr> |
111 | 111 | </table>"; |
112 | - $res = $res . $javascript; |
|
112 | + $res = $res.$javascript; |
|
113 | 113 | } |
114 | 114 | if ($queryType == 'idp') { |
115 | 115 | $select = "<div id='idp_reported_problem' style='display:;'> |
116 | 116 | <select style='margin-left:0px;' id='select_idp_problem'>"; |
117 | 117 | foreach ($idp_problem as $pname => $pdesc) { |
118 | - $select = $select . "<option value='$pname'>$pdesc</option>\n"; |
|
118 | + $select = $select."<option value='$pname'>$pdesc</option>\n"; |
|
119 | 119 | } |
120 | - $select = $select . "</select></div>"; |
|
120 | + $select = $select."</select></div>"; |
|
121 | 121 | $res = " |
122 | 122 | <table id='idp_questions'> |
123 | 123 | <tr> |
124 | - <td>" . _("Select your problem") . "</td> |
|
124 | + <td>" . _("Select your problem")."</td> |
|
125 | 125 | <td>$select</td> |
126 | 126 | </tr> |
127 | 127 | <tr> |
128 | - <td>" . _("Identify the SP by one of following means") . "</td> |
|
128 | + <td>"._("Identify the SP by one of following means")."</td> |
|
129 | 129 | <td></td> |
130 | 130 | </tr> |
131 | 131 | <tr id='by_opname'> |
132 | - <td>" . _("SP Operator-Name attribute") . "</td> |
|
132 | + <td>" . _("SP Operator-Name attribute")."</td> |
|
133 | 133 | <td><input type='text' id='opname' name='opname' value=''></td> |
134 | 134 | </tr> |
135 | 135 | <tr id='spmanually'> |
136 | - <td>" . _("Select the SP manually:") . "</td> |
|
136 | + <td>" . _("Select the SP manually:")."</td> |
|
137 | 137 | <td> |
138 | 138 | <div id='select_asp_country'><a href='' id='asp_countries_list'> |
139 | - <span id='opnameselect'>" . _("click to select country and organisation") . "</a></span> |
|
139 | + <span id='opnameselect'>" . _("click to select country and organisation")."</a></span> |
|
140 | 140 | </div> |
141 | 141 | <div id='select_asp_area'></div> |
142 | 142 | </td> |
143 | 143 | </tr> |
144 | 144 | <tr id='asp_desc' style='display: none;'> |
145 | - <td>" . _("or") . ' ' . _("at least describe the SP location") . "</td> |
|
145 | + <td>" . _("or").' '._("at least describe the SP location")."</td> |
|
146 | 146 | <td><input type='text' id='asp_location' name='asp_location' value=''></td> |
147 | 147 | </tr> |
148 | 148 | <tr> |
149 | - <td>" . _("What is the outer ID of the user session in question?") . "</td> |
|
149 | + <td>" . _("What is the outer ID of the user session in question?")."</td> |
|
150 | 150 | <td><input type='text' id='outer_id' name='outer_id' value=''></td> |
151 | 151 | </tr> |
152 | 152 | <tr> |
153 | - <td>" . _("What is the authentication timestamp of the user session in question?") . "</td> |
|
153 | + <td>" . _("What is the authentication timestamp of the user session in question?")."</td> |
|
154 | 154 | <td> |
155 | 155 | <input type='text' id='timestamp' name='timestamp'> |
156 | 156 | <div id='datepicker'></div> |
157 | 157 | </td> |
158 | 158 | </tr> |
159 | 159 | <tr> |
160 | - <td>" . _("What is the MAC address of the user session in question?") . "</td> |
|
160 | + <td>" . _("What is the MAC address of the user session in question?")."</td> |
|
161 | 161 | <td><input type='text' id='mac' name='mac'></td> |
162 | 162 | </tr> |
163 | 163 | <tr> |
164 | - <td>" . _("Additional comments about the problem") . "</td> |
|
164 | + <td>" . _("Additional comments about the problem")."</td> |
|
165 | 165 | <td><textarea id='freetext' name='freetext' cols='60' rows='5'></textarea></td> |
166 | 166 | </tr> |
167 | 167 | <tr> |
168 | - <td>" . _("Do you have any contact details by which the user wishes to be contacted by the SP?") . "</td> |
|
168 | + <td>" . _("Do you have any contact details by which the user wishes to be contacted by the SP?")."</td> |
|
169 | 169 | <td><textarea id='c_details' name='c_details' cols='60' rows='5'></textarea></td> |
170 | 170 | </tr> |
171 | 171 | <tr> |
172 | - <td>" . _("Please specify an email address on which the SP can contact you") . "</td> |
|
172 | + <td>" . _("Please specify an email address on which the SP can contact you")."</td> |
|
173 | 173 | <td><input type='text' id='email' name='email'></td> |
174 | 174 | </tr> |
175 | 175 | <tr class='hidden_row' id='send_query_to_sp'> |
176 | - <td>" . _("Now you can send your query") . "</td> |
|
177 | - <td><button type='submit' class='diag_button' id='submit_sp_query' name='go'>" . _("Send") . "</button></td> |
|
176 | + <td>" . _("Now you can send your query")."</td> |
|
177 | + <td><button type='submit' class='diag_button' id='submit_sp_query' name='go'>" . _("Send")."</button></td> |
|
178 | 178 | </tr> |
179 | 179 | </table>"; |
180 | - $res = $res . $javascript; |
|
180 | + $res = $res.$javascript; |
|
181 | 181 | } |
182 | 182 | if ($queryType == 'idp_send' || $queryType == 'sp_send') { |
183 | - include_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
183 | + include_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
184 | 184 | $cat = new \core\CAT(); |
185 | 185 | $returnArray = array(); |
186 | 186 | if (count((array) $o) > 0) { |
@@ -189,8 +189,8 @@ discard block |
||
189 | 189 | switch ($key) { |
190 | 190 | case 'realm': |
191 | 191 | $pos = strpos($value, '@'); |
192 | - if ($pos !== FALSE ) { |
|
193 | - $value = substr($value, $pos+1); |
|
192 | + if ($pos !== FALSE) { |
|
193 | + $value = substr($value, $pos + 1); |
|
194 | 194 | } |
195 | 195 | case 'email': |
196 | 196 | $returnArray[$key] = filter_var($value, FILTER_VALIDATE_EMAIL); |
@@ -231,7 +231,7 @@ discard block |
||
231 | 231 | $mail = \core\common\OutsideComm::mailHandle(); |
232 | 232 | $emails = ['[email protected]']; |
233 | 233 | //$emails = explode(',', $returnArray['idpcontact']); |
234 | - $mail->FromName = \config\Master::APPEARANCE['productname'] . " Notification System"; |
|
234 | + $mail->FromName = \config\Master::APPEARANCE['productname']." Notification System"; |
|
235 | 235 | foreach ($emails as $email) { |
236 | 236 | $mail->addAddress($email); |
237 | 237 | } |
@@ -241,11 +241,11 @@ discard block |
||
241 | 241 | } else { |
242 | 242 | $link = 'http://'; |
243 | 243 | } |
244 | - $link .= $_SERVER['SERVER_NAME'] . \core\CAT::getRootUrlPath() . '/diag/show_realmcheck.php?token=' . $returnArray['token']; |
|
244 | + $link .= $_SERVER['SERVER_NAME'].\core\CAT::getRootUrlPath().'/diag/show_realmcheck.php?token='.$returnArray['token']; |
|
245 | 245 | $returnArray['testurl'] = $link; |
246 | 246 | $mail->Subject = _('Suspected a technical problem with the IdP'); |
247 | - $txt = _("We suspect a technical problem with the IdP handling the realm") . ' ' . |
|
248 | - $returnArray['realm'] . ".\n"; |
|
247 | + $txt = _("We suspect a technical problem with the IdP handling the realm").' '. |
|
248 | + $returnArray['realm'].".\n"; |
|
249 | 249 | $txt .= _("The CAT diagnostic test was run for this realm during reporting.\n"); |
250 | 250 | $txt .= _("The overall result was "); |
251 | 251 | if ($returnArray['tests_result'] == 0) { |
@@ -253,15 +253,15 @@ discard block |
||
253 | 253 | } else { |
254 | 254 | $txt .= _("failure"); |
255 | 255 | } |
256 | - $txt .= ".\n" . _("To see details go to "); |
|
256 | + $txt .= ".\n"._("To see details go to "); |
|
257 | 257 | $txt .= "$link\n\n"; |
258 | - $txt .= _("The reported problem details are as follows") . "\n"; |
|
259 | - $txt .= _("timestamp") . ": " . $returnArray['timestamp'] . "\n"; |
|
260 | - $txt .= _("client MAC address") . ": " . $returnArray['mac'] . "\n"; |
|
258 | + $txt .= _("The reported problem details are as follows")."\n"; |
|
259 | + $txt .= _("timestamp").": ".$returnArray['timestamp']."\n"; |
|
260 | + $txt .= _("client MAC address").": ".$returnArray['mac']."\n"; |
|
261 | 261 | if ($returnArray['freetext']) { |
262 | - $txt .= _("additional comments") . ': ' . $returnArray['freetext'] . "\n"; |
|
262 | + $txt .= _("additional comments").': '.$returnArray['freetext']."\n"; |
|
263 | 263 | } |
264 | - $txt .= "\n" . _("You can contact the incident reporter at") . ' ' . $returnArray['email']; |
|
264 | + $txt .= "\n"._("You can contact the incident reporter at").' '.$returnArray['email']; |
|
265 | 265 | |
266 | 266 | $mail->Body = $txt; |
267 | 267 | $sent = $mail->send(); |
@@ -26,7 +26,7 @@ discard block |
||
26 | 26 | */ |
27 | 27 | ?> |
28 | 28 | <?php |
29 | -require_once dirname(dirname(dirname(__FILE__))) . "/config/_config.php"; |
|
29 | +require_once dirname(dirname(dirname(__FILE__)))."/config/_config.php"; |
|
30 | 30 | |
31 | 31 | $auth = new \web\lib\admin\Authentication(); |
32 | 32 | $deco = new \web\lib\admin\PageDecoration(); |
@@ -61,13 +61,13 @@ discard block |
||
61 | 61 | ?> |
62 | 62 | </h1> |
63 | 63 | <div class='infobox'> |
64 | - <h2><?php $tablecaption = sprintf(_("%s Properties"),$uiElements->nomenclatureFed); echo $tablecaption?></h2> |
|
64 | + <h2><?php $tablecaption = sprintf(_("%s Properties"), $uiElements->nomenclatureFed); echo $tablecaption?></h2> |
|
65 | 65 | <table> |
66 | - <caption><?php echo $tablecaption;?></caption> |
|
66 | + <caption><?php echo $tablecaption; ?></caption> |
|
67 | 67 | <tr> |
68 | - <th class="wai-invisible" scope="col"><?php echo _("Property Type");?></th> |
|
69 | - <th class="wai-invisible" scope="col"><?php echo _("Language if applicable");?></th> |
|
70 | - <th class="wai-invisible" scope="col"><?php echo _("Property Value");?></th> |
|
68 | + <th class="wai-invisible" scope="col"><?php echo _("Property Type"); ?></th> |
|
69 | + <th class="wai-invisible" scope="col"><?php echo _("Language if applicable"); ?></th> |
|
70 | + <th class="wai-invisible" scope="col"><?php echo _("Property Value"); ?></th> |
|
71 | 71 | </tr> |
72 | 72 | <tr> |
73 | 73 | <td><?php echo _("Country:"); ?></td> |
@@ -78,11 +78,11 @@ discard block |
||
78 | 78 | </table> |
79 | 79 | </div> |
80 | 80 | <?php |
81 | - echo "<form enctype='multipart/form-data' action='edit_federation_result.php?fed_id=$my_fed->tld" . "' method='post' accept-charset='UTF-8'> |
|
82 | - <input type='hidden' name='MAX_FILE_SIZE' value='" . \config\Master::MAX_UPLOAD_SIZE . "'>"; |
|
81 | + echo "<form enctype='multipart/form-data' action='edit_federation_result.php?fed_id=$my_fed->tld"."' method='post' accept-charset='UTF-8'> |
|
82 | + <input type='hidden' name='MAX_FILE_SIZE' value='" . \config\Master::MAX_UPLOAD_SIZE."'>"; |
|
83 | 83 | ?> |
84 | 84 | <fieldset class="option_container"> |
85 | - <legend><strong><?php echo sprintf(_("%s Properties"),$uiElements->nomenclatureFed); ?></strong></legend> |
|
85 | + <legend><strong><?php echo sprintf(_("%s Properties"), $uiElements->nomenclatureFed); ?></strong></legend> |
|
86 | 86 | <?php |
87 | 87 | $optionDisplay = new \web\lib\admin\OptionDisplay($fed_options, \core\Options::LEVEL_FED); |
88 | 88 | echo $optionDisplay->prefilledOptionTable("fed", $my_fed->tld); |
@@ -90,5 +90,5 @@ discard block |
||
90 | 90 | <button type='button' class='newoption' onclick='getXML("fed", "<?php echo $my_fed->tld ?>")'><?php echo _("Add new option"); ?></button> |
91 | 91 | </fieldset> |
92 | 92 | <?php |
93 | - echo "<div><button type='submit' name='submitbutton' value='" . web\lib\common\FormElements::BUTTON_SAVE . "'>" . _("Save data") . "</button> <button type='button' class='delete' name='abortbutton' value='abort' onclick='javascript:window.location = \"overview_federation.php\"'>" . _("Discard changes") . "</button></div></form>"; |
|
93 | + echo "<div><button type='submit' name='submitbutton' value='".web\lib\common\FormElements::BUTTON_SAVE."'>"._("Save data")."</button> <button type='button' class='delete' name='abortbutton' value='abort' onclick='javascript:window.location = \"overview_federation.php\"'>"._("Discard changes")."</button></div></form>"; |
|
94 | 94 | echo $deco->footer(); |
@@ -19,11 +19,11 @@ |
||
19 | 19 | * <base_url>/copyright.php after deploying the software |
20 | 20 | */ |
21 | 21 | |
22 | -require_once dirname(dirname(dirname(dirname(__FILE__)))) . "/config/_config.php"; |
|
22 | +require_once dirname(dirname(dirname(dirname(__FILE__))))."/config/_config.php"; |
|
23 | 23 | |
24 | 24 | \core\CAT::sessionStart(); |
25 | 25 | |
26 | -if (!isset($_GET["class"] )) { |
|
26 | +if (!isset($_GET["class"])) { |
|
27 | 27 | throw new Exception("Unknown type of option!"); |
28 | 28 | } |
29 | 29 |
@@ -19,7 +19,7 @@ discard block |
||
19 | 19 | * <base_url>/copyright.php after deploying the software |
20 | 20 | */ |
21 | 21 | |
22 | -require_once dirname(dirname(dirname(dirname(__FILE__)))) . "/config/_config.php"; |
|
22 | +require_once dirname(dirname(dirname(dirname(__FILE__))))."/config/_config.php"; |
|
23 | 23 | |
24 | 24 | $auth = new \web\lib\admin\Authentication(); |
25 | 25 | $loggerInstance = new \core\common\Logging(); |
@@ -85,7 +85,7 @@ discard block |
||
85 | 85 | $remaining_attribs = $my_profile->beginFlushMethodLevelAttributes($eaptype->getIntegerRep(), NULL); |
86 | 86 | $optionParser->processSubmittedFields($my_profile, $_POST, $_FILES, $eaptype->getIntegerRep(), NULL); |
87 | 87 | } |
88 | - $loggerInstance->writeAudit($_SESSION['user'], "MOD", "Profile " . $my_profile->identifier . " - device/EAP-Type settings changed"); |
|
88 | + $loggerInstance->writeAudit($_SESSION['user'], "MOD", "Profile ".$my_profile->identifier." - device/EAP-Type settings changed"); |
|
89 | 89 | header("Location: ../overview_installers.php?inst_id=$my_inst->identifier&profile_id=$my_profile->identifier"); |
90 | 90 | exit; |
91 | 91 | } |
@@ -99,7 +99,7 @@ discard block |
||
99 | 99 | } |
100 | 100 | $captiontext = sprintf(_("device <strong>%s</strong>"), $device['display']); |
101 | 101 | $keyword = "device-specific"; |
102 | - $extrainput = "<input type='hidden' name='device' value='" . $device_key . "'/>"; |
|
102 | + $extrainput = "<input type='hidden' name='device' value='".$device_key."'/>"; |
|
103 | 103 | } elseif ($eaptype !== NULL) { |
104 | 104 | foreach ($my_profile->getAttributes() as $attrib) { |
105 | 105 | if (isset($attrib['eapmethod']) && $attrib['eapmethod'] == $eaptype->getArrayRep()) { |
@@ -109,12 +109,12 @@ discard block |
||
109 | 109 | |
110 | 110 | $captiontext = sprintf(_("EAP-Type <strong>%s</strong>"), $eaptype->getPrintableRep()); |
111 | 111 | $keyword = "eap-specific"; |
112 | - $extrainput = "<input type='hidden' name='eaptype' value='" . $eaptype->getIntegerRep() . "'>"; |
|
112 | + $extrainput = "<input type='hidden' name='eaptype' value='".$eaptype->getIntegerRep()."'>"; |
|
113 | 113 | } else { |
114 | 114 | throw new Exception("previous type checks make it impossible to reach this code path."); |
115 | 115 | } |
116 | 116 | ?> |
117 | -<p><?php echo _("Fine-tuning options for ") . $captiontext; ?></p> |
|
117 | +<p><?php echo _("Fine-tuning options for ").$captiontext; ?></p> |
|
118 | 118 | <hr/> |
119 | 119 | |
120 | 120 | <form action='inc/toggleRedirect.inc.php?inst_id=<?php echo $my_inst->identifier; ?>&profile_id=<?php echo $my_profile->identifier; ?>' method='post' accept-charset='UTF-8'><?php echo $extrainput; ?> |
@@ -123,7 +123,7 @@ discard block |
||
123 | 123 | $interesting_attribs = []; |
124 | 124 | |
125 | 125 | foreach ($attribs as $attrib) { |
126 | - if ($attrib['level'] == \core\Options::LEVEL_METHOD && preg_match('/^' . $keyword . ':/', $attrib['name'])) { |
|
126 | + if ($attrib['level'] == \core\Options::LEVEL_METHOD && preg_match('/^'.$keyword.':/', $attrib['name'])) { |
|
127 | 127 | $interesting_attribs[] = $attrib; |
128 | 128 | } |
129 | 129 | } |
@@ -131,7 +131,7 @@ discard block |
||
131 | 131 | echo $optionDisplay->prefilledOptionTable($keyword, $my_inst->federation); |
132 | 132 | if (\config\Master::DB['INST']['readonly'] === FALSE) { |
133 | 133 | ?> |
134 | - <button type='button' class='newoption' onclick='getXML("<?php echo $keyword;?>", "<?php echo $my_inst->federation;?>")'><?php echo _("Add new option"); ?></button> |
|
134 | + <button type='button' class='newoption' onclick='getXML("<?php echo $keyword; ?>", "<?php echo $my_inst->federation; ?>")'><?php echo _("Add new option"); ?></button> |
|
135 | 135 | <br/> |
136 | 136 | <hr/> |
137 | 137 | <button type='submit' name='submitbutton' id='submitbutton' value='<?php echo web\lib\common\FormElements::BUTTON_SAVE; ?>'><?php echo _("Save data"); ?></button> |
@@ -165,7 +165,7 @@ discard block |
||
165 | 165 | } |
166 | 166 | } |
167 | 167 | |
168 | - $this->loggerInstance->debug(4, "RADIUSTests is in opMode " . $this->opMode . ", parameters were: $realm, $outerUsernameForChecks, " . /** @scrutinizer ignore-type */ print_r($supportedEapTypes, true)); |
|
168 | + $this->loggerInstance->debug(4, "RADIUSTests is in opMode ".$this->opMode.", parameters were: $realm, $outerUsernameForChecks, "./** @scrutinizer ignore-type */ print_r($supportedEapTypes, true)); |
|
169 | 169 | $this->loggerInstance->debug(4, /** @scrutinizer ignore-type */ print_r($expectedServerNames, true)); |
170 | 170 | $this->loggerInstance->debug(4, /** @scrutinizer ignore-type */ print_r($expectedCABundle, true)); |
171 | 171 | |
@@ -252,7 +252,7 @@ discard block |
||
252 | 252 | $returnarray[] = RADIUSTests::CERTPROB_WILDCARD_IN_NAME; |
253 | 253 | continue; // otherwise we'd ALSO complain that it's not a real hostname |
254 | 254 | } |
255 | - if ($onename != "" && filter_var("foo@" . idn_to_ascii($onename), FILTER_VALIDATE_EMAIL) === FALSE) { |
|
255 | + if ($onename != "" && filter_var("foo@".idn_to_ascii($onename), FILTER_VALIDATE_EMAIL) === FALSE) { |
|
256 | 256 | $returnarray[] = RADIUSTests::CERTPROB_NOT_A_HOSTNAME; |
257 | 257 | } |
258 | 258 | } |
@@ -278,7 +278,7 @@ discard block |
||
278 | 278 | $probValue = RADIUSTests::CERTPROB_SHA1_SIGNATURE; |
279 | 279 | $returnarray[] = $probValue; |
280 | 280 | } |
281 | - $this->loggerInstance->debug(4, "CERT IS: " . /** @scrutinizer ignore-type */ print_r($intermediateCa, TRUE)); |
|
281 | + $this->loggerInstance->debug(4, "CERT IS: "./** @scrutinizer ignore-type */ print_r($intermediateCa, TRUE)); |
|
282 | 282 | if ($intermediateCa['basicconstraints_set'] == 0) { |
283 | 283 | $returnarray[] = RADIUSTests::CERTPROB_NO_BASICCONSTRAINTS; |
284 | 284 | } |
@@ -326,7 +326,7 @@ discard block |
||
326 | 326 | public function udpReachability($probeindex, $opnameCheck = TRUE, $frag = TRUE) { |
327 | 327 | // for EAP-TLS to be a viable option, we need to pass a random client cert to make eapol_test happy |
328 | 328 | // the following PEM data is one of the SENSE EAPLab client certs (not secret at all) |
329 | - $clientcert = file_get_contents(dirname(__FILE__) . "/clientcert.p12"); |
|
329 | + $clientcert = file_get_contents(dirname(__FILE__)."/clientcert.p12"); |
|
330 | 330 | if ($clientcert === FALSE) { |
331 | 331 | throw new Exception("A dummy client cert is part of the source distribution, but could not be loaded!"); |
332 | 332 | } |
@@ -335,7 +335,7 @@ discard block |
||
335 | 335 | if ($this->opMode == self::RADIUS_TEST_OPERATION_MODE_THOROUGH) { |
336 | 336 | return $this->udpLogin($probeindex, $this->supportedEapTypes[0]->getArrayRep(), $this->outerUsernameForChecks, 'eaplab', $opnameCheck, $frag, $clientcert); |
337 | 337 | } |
338 | - return $this->udpLogin($probeindex, \core\common\EAP::EAPTYPE_ANY, "cat-connectivity-test@" . $this->realm, 'eaplab', $opnameCheck, $frag, $clientcert); |
|
338 | + return $this->udpLogin($probeindex, \core\common\EAP::EAPTYPE_ANY, "cat-connectivity-test@".$this->realm, 'eaplab', $opnameCheck, $frag, $clientcert); |
|
339 | 339 | } |
340 | 340 | |
341 | 341 | /** |
@@ -356,7 +356,7 @@ discard block |
||
356 | 356 | return RADIUSTests::CERTPROB_NO_CDP_HTTP; |
357 | 357 | } |
358 | 358 | // first and second sub-match is the full URL... check it |
359 | - $crlcontent = \core\common\OutsideComm::downloadFile(trim($crlUrl[1] . $crlUrl[2])); |
|
359 | + $crlcontent = \core\common\OutsideComm::downloadFile(trim($crlUrl[1].$crlUrl[2])); |
|
360 | 360 | if ($crlcontent === FALSE) { |
361 | 361 | return RADIUSTests::CERTPROB_NO_CRL_AT_CDP_URL; |
362 | 362 | } |
@@ -371,7 +371,7 @@ discard block |
||
371 | 371 | // $pem = chunk_split(base64_encode($crlcontent), 64, "\n"); |
372 | 372 | // inspired by https://stackoverflow.com/questions/2390604/how-to-pass-variables-as-stdin-into-command-line-from-php |
373 | 373 | |
374 | - $proc = \config\Master::PATHS['openssl'] . " crl -inform der"; |
|
374 | + $proc = \config\Master::PATHS['openssl']." crl -inform der"; |
|
375 | 375 | $descriptorspec = [ |
376 | 376 | 0 => ["pipe", "r"], |
377 | 377 | 1 => ["pipe", "w"], |
@@ -409,7 +409,7 @@ discard block |
||
409 | 409 | $origLength = strlen($hex); |
410 | 410 | for ($i = 1; $i < $origLength; $i++) { |
411 | 411 | if ($i % 2 == 1 && $i != strlen($hex)) { |
412 | - $spaced .= $hex[$i] . " "; |
|
412 | + $spaced .= $hex[$i]." "; |
|
413 | 413 | } else { |
414 | 414 | $spaced .= $hex[$i]; |
415 | 415 | } |
@@ -534,19 +534,19 @@ discard block |
||
534 | 534 | $eapText = \core\common\EAP::eapDisplayName($eaptype); |
535 | 535 | $config = ' |
536 | 536 | network={ |
537 | - ssid="' . \config\Master::APPEARANCE['productname'] . ' testing" |
|
537 | + ssid="' . \config\Master::APPEARANCE['productname'].' testing" |
|
538 | 538 | key_mgmt=WPA-EAP |
539 | 539 | proto=WPA2 |
540 | 540 | pairwise=CCMP |
541 | 541 | group=CCMP |
542 | 542 | '; |
543 | 543 | // phase 1 |
544 | - $config .= 'eap=' . $eapText['OUTER'] . "\n"; |
|
544 | + $config .= 'eap='.$eapText['OUTER']."\n"; |
|
545 | 545 | $logConfig = $config; |
546 | 546 | // phase 2 if applicable; all inner methods have passwords |
547 | 547 | if (isset($eapText['INNER']) && $eapText['INNER'] != "") { |
548 | - $config .= ' phase2="auth=' . $eapText['INNER'] . "\"\n"; |
|
549 | - $logConfig .= ' phase2="auth=' . $eapText['INNER'] . "\"\n"; |
|
548 | + $config .= ' phase2="auth='.$eapText['INNER']."\"\n"; |
|
549 | + $logConfig .= ' phase2="auth='.$eapText['INNER']."\"\n"; |
|
550 | 550 | } |
551 | 551 | // all methods set a password, except EAP-TLS |
552 | 552 | if ($eaptype != \core\common\EAP::EAPTYPE_TLS) { |
@@ -562,11 +562,11 @@ discard block |
||
562 | 562 | } |
563 | 563 | |
564 | 564 | // inner identity |
565 | - $config .= ' identity="' . $inner . "\"\n"; |
|
566 | - $logConfig .= ' identity="' . $inner . "\"\n"; |
|
565 | + $config .= ' identity="'.$inner."\"\n"; |
|
566 | + $logConfig .= ' identity="'.$inner."\"\n"; |
|
567 | 567 | // outer identity, may be equal |
568 | - $config .= ' anonymous_identity="' . $outer . "\"\n"; |
|
569 | - $logConfig .= ' anonymous_identity="' . $outer . "\"\n"; |
|
568 | + $config .= ' anonymous_identity="'.$outer."\"\n"; |
|
569 | + $logConfig .= ' anonymous_identity="'.$outer."\"\n"; |
|
570 | 570 | // done |
571 | 571 | $config .= "}"; |
572 | 572 | $logConfig .= "}"; |
@@ -627,13 +627,13 @@ discard block |
||
627 | 627 | * @return string the command-line for eapol_test |
628 | 628 | */ |
629 | 629 | private function eapolTestConfig($probeindex, $opName, $frag) { |
630 | - $cmdline = \config\Diagnostics::PATHS['eapol_test'] . |
|
631 | - " -a " . \config\Diagnostics::RADIUSTESTS['UDP-hosts'][$probeindex]['ip'] . |
|
632 | - " -s " . \config\Diagnostics::RADIUSTESTS['UDP-hosts'][$probeindex]['secret'] . |
|
633 | - " -o serverchain.pem" . |
|
634 | - " -c ./udp_login_test.conf" . |
|
635 | - " -M 22:44:66:CA:20:" . sprintf("%02d", $probeindex) . " " . |
|
636 | - " -t " . \config\Diagnostics::RADIUSTESTS['UDP-hosts'][$probeindex]['timeout'] . " "; |
|
630 | + $cmdline = \config\Diagnostics::PATHS['eapol_test']. |
|
631 | + " -a ".\config\Diagnostics::RADIUSTESTS['UDP-hosts'][$probeindex]['ip']. |
|
632 | + " -s ".\config\Diagnostics::RADIUSTESTS['UDP-hosts'][$probeindex]['secret']. |
|
633 | + " -o serverchain.pem". |
|
634 | + " -c ./udp_login_test.conf". |
|
635 | + " -M 22:44:66:CA:20:".sprintf("%02d", $probeindex)." ". |
|
636 | + " -t ".\config\Diagnostics::RADIUSTESTS['UDP-hosts'][$probeindex]['timeout']." "; |
|
637 | 637 | if ($opName) { |
638 | 638 | $cmdline .= '-N126:s:"1cat.eduroam.org" '; |
639 | 639 | } |
@@ -662,10 +662,10 @@ discard block |
||
662 | 662 | * @throws Exception |
663 | 663 | */ |
664 | 664 | private function createCArepository($tmpDir, &$intermOdditiesCAT, $servercert, $eapIntermediates, $eapIntermediateCRLs) { |
665 | - if (!mkdir($tmpDir . "/root-ca-allcerts/", 0700, true)) { |
|
665 | + if (!mkdir($tmpDir."/root-ca-allcerts/", 0700, true)) { |
|
666 | 666 | throw new Exception("unable to create root CA directory (RADIUS Tests): $tmpDir/root-ca-allcerts/\n"); |
667 | 667 | } |
668 | - if (!mkdir($tmpDir . "/root-ca-eaponly/", 0700, true)) { |
|
668 | + if (!mkdir($tmpDir."/root-ca-eaponly/", 0700, true)) { |
|
669 | 669 | throw new Exception("unable to create root CA directory (RADIUS Tests): $tmpDir/root-ca-eaponly/\n"); |
670 | 670 | } |
671 | 671 | // make a copy of the EAP-received chain and add the configured intermediates, if any |
@@ -679,15 +679,15 @@ discard block |
||
679 | 679 | } |
680 | 680 | if ($decoded['ca'] == 1) { |
681 | 681 | if ($decoded['root'] == 1) { // save CAT roots to the root directory |
682 | - file_put_contents($tmpDir . "/root-ca-eaponly/configuredroot" . count($catRoots) . ".pem", $decoded['pem']); |
|
683 | - file_put_contents($tmpDir . "/root-ca-allcerts/configuredroot" . count($catRoots) . ".pem", $decoded['pem']); |
|
682 | + file_put_contents($tmpDir."/root-ca-eaponly/configuredroot".count($catRoots).".pem", $decoded['pem']); |
|
683 | + file_put_contents($tmpDir."/root-ca-allcerts/configuredroot".count($catRoots).".pem", $decoded['pem']); |
|
684 | 684 | $catRoots[] = $decoded['pem']; |
685 | 685 | } else { // save the intermediates to allcerts directory |
686 | - file_put_contents($tmpDir . "/root-ca-allcerts/cat-intermediate" . count($catIntermediates) . ".pem", $decoded['pem']); |
|
686 | + file_put_contents($tmpDir."/root-ca-allcerts/cat-intermediate".count($catIntermediates).".pem", $decoded['pem']); |
|
687 | 687 | $intermOdditiesCAT = array_merge($intermOdditiesCAT, $this->propertyCheckIntermediate($decoded)); |
688 | 688 | if (isset($decoded['CRL']) && isset($decoded['CRL'][0])) { |
689 | 689 | $this->loggerInstance->debug(4, "got an intermediate CRL; adding them to the chain checks. (Remember: checking end-entity cert only, not the whole chain"); |
690 | - file_put_contents($tmpDir . "/root-ca-allcerts/crl_cat" . count($catIntermediates) . ".pem", $decoded['CRL'][0]); |
|
690 | + file_put_contents($tmpDir."/root-ca-allcerts/crl_cat".count($catIntermediates).".pem", $decoded['CRL'][0]); |
|
691 | 691 | } |
692 | 692 | $catIntermediates[] = $decoded['pem']; |
693 | 693 | } |
@@ -696,26 +696,26 @@ discard block |
||
696 | 696 | // save all intermediate certificates and CRLs to separate files in |
697 | 697 | // both root-ca directories |
698 | 698 | foreach ($eapIntermediates as $index => $onePem) { |
699 | - file_put_contents($tmpDir . "/root-ca-eaponly/intermediate$index.pem", $onePem); |
|
700 | - file_put_contents($tmpDir . "/root-ca-allcerts/intermediate$index.pem", $onePem); |
|
699 | + file_put_contents($tmpDir."/root-ca-eaponly/intermediate$index.pem", $onePem); |
|
700 | + file_put_contents($tmpDir."/root-ca-allcerts/intermediate$index.pem", $onePem); |
|
701 | 701 | } |
702 | 702 | foreach ($eapIntermediateCRLs as $index => $onePem) { |
703 | - file_put_contents($tmpDir . "/root-ca-eaponly/intermediateCRL$index.pem", $onePem); |
|
704 | - file_put_contents($tmpDir . "/root-ca-allcerts/intermediateCRL$index.pem", $onePem); |
|
703 | + file_put_contents($tmpDir."/root-ca-eaponly/intermediateCRL$index.pem", $onePem); |
|
704 | + file_put_contents($tmpDir."/root-ca-allcerts/intermediateCRL$index.pem", $onePem); |
|
705 | 705 | } |
706 | 706 | |
707 | 707 | $checkstring = ""; |
708 | 708 | if (isset($servercert['CRL']) && isset($servercert['CRL'][0])) { |
709 | 709 | $this->loggerInstance->debug(4, "got a server CRL; adding them to the chain checks. (Remember: checking end-entity cert only, not the whole chain"); |
710 | 710 | $checkstring = "-crl_check_all"; |
711 | - file_put_contents($tmpDir . "/root-ca-eaponly/crl-server.pem", $servercert['CRL'][0]); |
|
712 | - file_put_contents($tmpDir . "/root-ca-allcerts/crl-server.pem", $servercert['CRL'][0]); |
|
711 | + file_put_contents($tmpDir."/root-ca-eaponly/crl-server.pem", $servercert['CRL'][0]); |
|
712 | + file_put_contents($tmpDir."/root-ca-allcerts/crl-server.pem", $servercert['CRL'][0]); |
|
713 | 713 | } |
714 | 714 | |
715 | 715 | |
716 | 716 | // now c_rehash the root CA directory ... |
717 | - system(\config\Diagnostics::PATHS['c_rehash'] . " $tmpDir/root-ca-eaponly/ > /dev/null"); |
|
718 | - system(\config\Diagnostics::PATHS['c_rehash'] . " $tmpDir/root-ca-allcerts/ > /dev/null"); |
|
717 | + system(\config\Diagnostics::PATHS['c_rehash']." $tmpDir/root-ca-eaponly/ > /dev/null"); |
|
718 | + system(\config\Diagnostics::PATHS['c_rehash']." $tmpDir/root-ca-allcerts/ > /dev/null"); |
|
719 | 719 | return $checkstring; |
720 | 720 | } |
721 | 721 | |
@@ -747,12 +747,12 @@ discard block |
||
747 | 747 | // so test if there's something PEMy in the file at all |
748 | 748 | // serverchain.pem is the output from eapol_test; incomingserver.pem is written by extractIncomingCertsfromEAP() if there was at least one server cert. |
749 | 749 | if (filesize("$tmpDir/serverchain.pem") > 10 && filesize("$tmpDir/incomingserver.pem") > 10) { |
750 | - exec(\config\Master::PATHS['openssl'] . " verify $crlCheckString -CApath $tmpDir/root-ca-eaponly/ -purpose any $tmpDir/incomingserver.pem", $verifyResultEaponly); |
|
751 | - $this->loggerInstance->debug(4, \config\Master::PATHS['openssl'] . " verify $crlCheckString -CApath $tmpDir/root-ca-eaponly/ -purpose any $tmpDir/serverchain.pem\n"); |
|
752 | - $this->loggerInstance->debug(4, "Chain verify pass 1: " . /** @scrutinizer ignore-type */ print_r($verifyResultEaponly, TRUE) . "\n"); |
|
753 | - exec(\config\Master::PATHS['openssl'] . " verify $crlCheckString -CApath $tmpDir/root-ca-allcerts/ -purpose any $tmpDir/incomingserver.pem", $verifyResultAllcerts); |
|
754 | - $this->loggerInstance->debug(4, \config\Master::PATHS['openssl'] . " verify $crlCheckString -CApath $tmpDir/root-ca-allcerts/ -purpose any $tmpDir/serverchain.pem\n"); |
|
755 | - $this->loggerInstance->debug(4, "Chain verify pass 2: " . /** @scrutinizer ignore-type */ print_r($verifyResultAllcerts, TRUE) . "\n"); |
|
750 | + exec(\config\Master::PATHS['openssl']." verify $crlCheckString -CApath $tmpDir/root-ca-eaponly/ -purpose any $tmpDir/incomingserver.pem", $verifyResultEaponly); |
|
751 | + $this->loggerInstance->debug(4, \config\Master::PATHS['openssl']." verify $crlCheckString -CApath $tmpDir/root-ca-eaponly/ -purpose any $tmpDir/serverchain.pem\n"); |
|
752 | + $this->loggerInstance->debug(4, "Chain verify pass 1: "./** @scrutinizer ignore-type */ print_r($verifyResultEaponly, TRUE)."\n"); |
|
753 | + exec(\config\Master::PATHS['openssl']." verify $crlCheckString -CApath $tmpDir/root-ca-allcerts/ -purpose any $tmpDir/incomingserver.pem", $verifyResultAllcerts); |
|
754 | + $this->loggerInstance->debug(4, \config\Master::PATHS['openssl']." verify $crlCheckString -CApath $tmpDir/root-ca-allcerts/ -purpose any $tmpDir/serverchain.pem\n"); |
|
755 | + $this->loggerInstance->debug(4, "Chain verify pass 2: "./** @scrutinizer ignore-type */ print_r($verifyResultAllcerts, TRUE)."\n"); |
|
756 | 756 | } |
757 | 757 | |
758 | 758 | // now we do certificate verification against the collected parents |
@@ -817,7 +817,7 @@ discard block |
||
817 | 817 | // we are UNHAPPY if no names match! |
818 | 818 | $happiness = "UNHAPPY"; |
819 | 819 | foreach ($this->expectedServerNames as $expectedName) { |
820 | - $this->loggerInstance->debug(4, "Managing expectations for $expectedName: " . /** @scrutinizer ignore-type */ print_r($servercert['CN'], TRUE) . /** @scrutinizer ignore-type */ print_r($servercert['sAN_DNS'], TRUE)); |
|
820 | + $this->loggerInstance->debug(4, "Managing expectations for $expectedName: "./** @scrutinizer ignore-type */ print_r($servercert['CN'], TRUE)./** @scrutinizer ignore-type */ print_r($servercert['sAN_DNS'], TRUE)); |
|
821 | 821 | if (array_search($expectedName, $servercert['CN']) !== FALSE && array_search($expectedName, $servercert['sAN_DNS']) !== FALSE) { |
822 | 822 | $this->loggerInstance->debug(4, "Totally happy!"); |
823 | 823 | $happiness = "TOTALLY"; |
@@ -861,11 +861,11 @@ discard block |
||
861 | 861 | $theconfigs = $this->wpaSupplicantConfig($eaptype, $finalInner, $finalOuter, $password); |
862 | 862 | // the config intentionally does not include CA checking. We do this |
863 | 863 | // ourselves after getting the chain with -o. |
864 | - file_put_contents($tmpDir . "/udp_login_test.conf", $theconfigs[0]); |
|
864 | + file_put_contents($tmpDir."/udp_login_test.conf", $theconfigs[0]); |
|
865 | 865 | |
866 | 866 | $cmdline = $this->eapolTestConfig($probeindex, $opnameCheck, $frag); |
867 | 867 | $this->loggerInstance->debug(4, "Shallow reachability check cmdline: $cmdline\n"); |
868 | - $this->loggerInstance->debug(4, "Shallow reachability check config: $tmpDir\n" . $theconfigs[1] . "\n"); |
|
868 | + $this->loggerInstance->debug(4, "Shallow reachability check config: $tmpDir\n".$theconfigs[1]."\n"); |
|
869 | 869 | $time_start = microtime(true); |
870 | 870 | $pflow = []; |
871 | 871 | exec($cmdline, $pflow); |
@@ -874,7 +874,7 @@ discard block |
||
874 | 874 | } |
875 | 875 | $time_stop = microtime(true); |
876 | 876 | $output = print_r($this->redact($password, $pflow), TRUE); |
877 | - file_put_contents($tmpDir . "/eapol_test_output_redacted_$probeindex.txt", $output); |
|
877 | + file_put_contents($tmpDir."/eapol_test_output_redacted_$probeindex.txt", $output); |
|
878 | 878 | $this->loggerInstance->debug(5, "eapol_test output saved to eapol_test_output_redacted_$probeindex.txt\n"); |
879 | 879 | return [ |
880 | 880 | "time" => ($time_stop - $time_start) * 1000, |
@@ -910,7 +910,7 @@ discard block |
||
910 | 910 | if ($packetflow[count($packetflow) - 1] == 3 && $this->checkLineparse($packetflow_orig, self::LINEPARSE_CHECK_REJECTIGNORE)) { |
911 | 911 | array_pop($packetflow); |
912 | 912 | } |
913 | - $this->loggerInstance->debug(5, "Packetflow: " . /** @scrutinizer ignore-type */ print_r($packetflow, TRUE)); |
|
913 | + $this->loggerInstance->debug(5, "Packetflow: "./** @scrutinizer ignore-type */ print_r($packetflow, TRUE)); |
|
914 | 914 | $packetcount = array_count_values($packetflow); |
915 | 915 | $testresults['packetcount'] = $packetcount; |
916 | 916 | $testresults['packetflow'] = $packetflow; |
@@ -950,7 +950,7 @@ discard block |
||
950 | 950 | */ |
951 | 951 | private function wasModernTlsNegotiated(&$testresults, $packetflow_orig) { |
952 | 952 | $negotiatedTlsVersion = $this->checkLineparse($packetflow_orig, self::LINEPARSE_TLSVERSION); |
953 | - $this->loggerInstance->debug(4, "TLS version found is: $negotiatedTlsVersion" . "\n"); |
|
953 | + $this->loggerInstance->debug(4, "TLS version found is: $negotiatedTlsVersion"."\n"); |
|
954 | 954 | if ($negotiatedTlsVersion === FALSE) { |
955 | 955 | $testresults['cert_oddities'][] = RADIUSTests::TLSPROB_UNKNOWN_TLS_VERSION; |
956 | 956 | } elseif ($negotiatedTlsVersion != self::TLS_VERSION_1_2 && $negotiatedTlsVersion != self::TLS_VERSION_1_3) { |
@@ -1008,7 +1008,7 @@ discard block |
||
1008 | 1008 | |
1009 | 1009 | $x509 = new \core\common\X509(); |
1010 | 1010 | // $eap_certarray holds all certs received in EAP conversation |
1011 | - $incomingData = file_get_contents($tmpDir . "/serverchain.pem"); |
|
1011 | + $incomingData = file_get_contents($tmpDir."/serverchain.pem"); |
|
1012 | 1012 | if ($incomingData !== FALSE && strlen($incomingData) > 0) { |
1013 | 1013 | $eapCertArray = $x509->splitCertificate($incomingData); |
1014 | 1014 | } else { |
@@ -1039,10 +1039,10 @@ discard block |
||
1039 | 1039 | case RADIUSTests::SERVER_CA_SELFSIGNED: |
1040 | 1040 | $servercert[] = $cert; |
1041 | 1041 | if (count($servercert) == 1) { |
1042 | - if (file_put_contents($tmpDir . "/incomingserver.pem", $cert['pem'] . "\n") === FALSE) { |
|
1042 | + if (file_put_contents($tmpDir."/incomingserver.pem", $cert['pem']."\n") === FALSE) { |
|
1043 | 1043 | $this->loggerInstance->debug(4, "The (first) server certificate could not be written to $tmpDir/incomingserver.pem!\n"); |
1044 | 1044 | } |
1045 | - $this->loggerInstance->debug(4, "This is the (first) server certificate, with CRL content if applicable: " . /** @scrutinizer ignore-type */ print_r($servercert[0], true)); |
|
1045 | + $this->loggerInstance->debug(4, "This is the (first) server certificate, with CRL content if applicable: "./** @scrutinizer ignore-type */ print_r($servercert[0], true)); |
|
1046 | 1046 | } elseif (!in_array(RADIUSTests::CERTPROB_TOO_MANY_SERVER_CERTS, $testresults['cert_oddities'])) { |
1047 | 1047 | $testresults['cert_oddities'][] = RADIUSTests::CERTPROB_TOO_MANY_SERVER_CERTS; |
1048 | 1048 | } |
@@ -1112,7 +1112,7 @@ discard block |
||
1112 | 1112 | public function autodetectCAWithProbe($outerId) { |
1113 | 1113 | // for EAP-TLS to be a viable option, we need to pass a random client cert to make eapol_test happy |
1114 | 1114 | // the following PEM data is one of the SENSE EAPLab client certs (not secret at all) |
1115 | - $clientcert = file_get_contents(dirname(__FILE__) . "/clientcert.p12"); |
|
1115 | + $clientcert = file_get_contents(dirname(__FILE__)."/clientcert.p12"); |
|
1116 | 1116 | if ($clientcert === FALSE) { |
1117 | 1117 | throw new Exception("A dummy client cert is part of the source distribution, but could not be loaded!"); |
1118 | 1118 | } |
@@ -1127,7 +1127,7 @@ discard block |
||
1127 | 1127 | $tmpDir = $temporary['dir']; |
1128 | 1128 | chdir($tmpDir); |
1129 | 1129 | $this->loggerInstance->debug(4, "temp dir: $tmpDir\n"); |
1130 | - file_put_contents($tmpDir . "/client.p12", $clientcert); |
|
1130 | + file_put_contents($tmpDir."/client.p12", $clientcert); |
|
1131 | 1131 | $testresults = ['cert_oddities' => []]; |
1132 | 1132 | $runtime_results = $this->executeEapolTest($tmpDir, $probeindex, \core\common\EAP::EAPTYPE_ANY, $outerId, $outerId, "eaplab", FALSE, FALSE); |
1133 | 1133 | $packetflow_orig = $runtime_results['output']; |
@@ -1143,8 +1143,7 @@ discard block |
||
1143 | 1143 | // that's not the case if we do EAP-pwd or could not negotiate an EAP method at |
1144 | 1144 | // all |
1145 | 1145 | // in that case: no server CA guess possible |
1146 | - if (! |
|
1147 | - ($radiusResult == RADIUSTests::RETVAL_CONVERSATION_REJECT && $negotiatedEapType) || $radiusResult == RADIUSTests::RETVAL_OK |
|
1146 | + if (!($radiusResult == RADIUSTests::RETVAL_CONVERSATION_REJECT && $negotiatedEapType) || $radiusResult == RADIUSTests::RETVAL_OK |
|
1148 | 1147 | ) { |
1149 | 1148 | return RADIUSTests::RETVAL_INVALID; |
1150 | 1149 | } |
@@ -1183,7 +1182,7 @@ discard block |
||
1183 | 1182 | // trust, and custom ones we may have configured |
1184 | 1183 | $ourRoots = file_get_contents(\config\ConfAssistant::PATHS['trust-store-custom']); |
1185 | 1184 | $mozillaRoots = file_get_contents(\config\ConfAssistant::PATHS['trust-store-mozilla']); |
1186 | - $allRoots = $x509->splitCertificate($ourRoots . "\n" . $mozillaRoots); |
|
1185 | + $allRoots = $x509->splitCertificate($ourRoots."\n".$mozillaRoots); |
|
1187 | 1186 | foreach ($allRoots as $oneRoot) { |
1188 | 1187 | $processedRoot = $x509->processCertificate($oneRoot); |
1189 | 1188 | if ($processedRoot['full_details']['subject'] == $currentHighestKnownIssuer) { |
@@ -1225,7 +1224,7 @@ discard block |
||
1225 | 1224 | chdir($tmpDir); |
1226 | 1225 | $this->loggerInstance->debug(4, "temp dir: $tmpDir\n"); |
1227 | 1226 | if ($clientcertdata !== NULL) { |
1228 | - file_put_contents($tmpDir . "/client.p12", $clientcertdata); |
|
1227 | + file_put_contents($tmpDir."/client.p12", $clientcertdata); |
|
1229 | 1228 | } |
1230 | 1229 | $testresults = []; |
1231 | 1230 | // initialise the sub-array for cleaner parsing |
@@ -1330,7 +1329,7 @@ discard block |
||
1330 | 1329 | 'issuer' => $this->printDN($certdata['issuer']), |
1331 | 1330 | 'validFrom' => $this->printTm($certdata['validFrom_time_t']), |
1332 | 1331 | 'validTo' => $this->printTm($certdata['validTo_time_t']), |
1333 | - 'serialNumber' => $certdata['serialNumber'] . sprintf(" (0x%X)", $certdata['serialNumber']), |
|
1332 | + 'serialNumber' => $certdata['serialNumber'].sprintf(" (0x%X)", $certdata['serialNumber']), |
|
1334 | 1333 | 'sha1' => $certdata['sha1'], |
1335 | 1334 | 'extensions' => $certdata['extensions'] |
1336 | 1335 | ]; |
@@ -101,7 +101,7 @@ discard block |
||
101 | 101 | $optionClass = \core\Options::instance(); |
102 | 102 | $optionProps = $optionClass->optionType($optiontype); |
103 | 103 | $allowedValues = explode(',', substr($optionProps["flags"], 7)); |
104 | - if (in_array($incomingBinary,$allowedValues)) { |
|
104 | + if (in_array($incomingBinary, $allowedValues)) { |
|
105 | 105 | return TRUE; |
106 | 106 | } |
107 | 107 | return FALSE; |
@@ -346,14 +346,14 @@ discard block |
||
346 | 346 | case \core\Options::TYPECODE_TEXT: |
347 | 347 | case \core\Options::TYPECODE_COORDINATES: |
348 | 348 | case \core\Options::TYPECODE_INTEGER: |
349 | - $varName = $listOfEntries["$objId-" . self::VALIDATOR_FUNCTIONS[$optioninfo['type']]['field']]; |
|
349 | + $varName = $listOfEntries["$objId-".self::VALIDATOR_FUNCTIONS[$optioninfo['type']]['field']]; |
|
350 | 350 | if (!empty($varName)) { |
351 | 351 | $content = call_user_func_array([$this->validator, self::VALIDATOR_FUNCTIONS[$optioninfo['type']]['function']], array_merge([$varName], self::VALIDATOR_FUNCTIONS[$optioninfo['type']]['extraarg'])); |
352 | 352 | break; |
353 | 353 | } |
354 | 354 | continue 2; |
355 | 355 | case \core\Options::TYPECODE_BOOLEAN: |
356 | - $varName = $listOfEntries["$objId-" . \core\Options::TYPECODE_BOOLEAN]; |
|
356 | + $varName = $listOfEntries["$objId-".\core\Options::TYPECODE_BOOLEAN]; |
|
357 | 357 | if (!empty($varName)) { |
358 | 358 | $contentValid = $this->validator->boolean($varName); |
359 | 359 | if ($contentValid) { |
@@ -366,7 +366,7 @@ discard block |
||
366 | 366 | } |
367 | 367 | continue 2; |
368 | 368 | case \core\Options::TYPECODE_STRING: |
369 | - $previsionalContent = $listOfEntries["$objId-" . \core\Options::TYPECODE_STRING]; |
|
369 | + $previsionalContent = $listOfEntries["$objId-".\core\Options::TYPECODE_STRING]; |
|
370 | 370 | if (!empty($previsionalContent)) { |
371 | 371 | $content = $this->furtherStringChecks($objValue, $previsionalContent, $bad); |
372 | 372 | if ($content === FALSE) { |
@@ -377,7 +377,7 @@ discard block |
||
377 | 377 | continue 2; |
378 | 378 | |
379 | 379 | case \core\Options::TYPECODE_ENUM_OPENROAMING: |
380 | - $previsionalContent = $listOfEntries["$objId-" . \core\Options::TYPECODE_ENUM_OPENROAMING]; |
|
380 | + $previsionalContent = $listOfEntries["$objId-".\core\Options::TYPECODE_ENUM_OPENROAMING]; |
|
381 | 381 | if (!empty($previsionalContent)) { |
382 | 382 | $content = $this->furtherStringChecks($objValue, $previsionalContent, $bad); |
383 | 383 | if ($content === FALSE) { |
@@ -388,15 +388,15 @@ discard block |
||
388 | 388 | continue 2; |
389 | 389 | case \core\Options::TYPECODE_FILE: |
390 | 390 | // this is either actually an uploaded file, or a reference to a DB entry of a previously uploaded file |
391 | - $reference = $listOfEntries["$objId-" . \core\Options::TYPECODE_STRING]; |
|
391 | + $reference = $listOfEntries["$objId-".\core\Options::TYPECODE_STRING]; |
|
392 | 392 | if (!empty($reference)) { // was already in, by ROWID reference, extract |
393 | 393 | // ROWID means it's a multi-line string (simple strings are inline in the form; so allow whitespace) |
394 | 394 | $content = $this->validator->string(urldecode($reference), TRUE); |
395 | 395 | break; |
396 | 396 | } |
397 | - $fileName = $listOfEntries["$objId-" . \core\Options::TYPECODE_FILE] ?? ""; |
|
397 | + $fileName = $listOfEntries["$objId-".\core\Options::TYPECODE_FILE] ?? ""; |
|
398 | 398 | if ($fileName != "") { // let's do the download |
399 | - $rawContent = \core\common\OutsideComm::downloadFile("file:///" . $fileName); |
|
399 | + $rawContent = \core\common\OutsideComm::downloadFile("file:///".$fileName); |
|
400 | 400 | |
401 | 401 | if ($rawContent === FALSE || !$this->checkUploadSanity($objValue, $rawContent)) { |
402 | 402 | $bad[] = $objValue; |
@@ -407,7 +407,7 @@ discard block |
||
407 | 407 | } |
408 | 408 | continue 2; |
409 | 409 | default: |
410 | - throw new Exception("Internal Error: Unknown option type " . $objValue . "!"); |
|
410 | + throw new Exception("Internal Error: Unknown option type ".$objValue."!"); |
|
411 | 411 | } |
412 | 412 | // lang can be NULL here, if it's not a multilang attribute, or a ROWID reference. Never mind that. |
413 | 413 | $retval[] = ["$objValue" => ["lang" => $languageFlag, "content" => $content]]; |
@@ -124,7 +124,7 @@ discard block |
||
124 | 124 | public function divSilverbullet() { |
125 | 125 | $retval = " |
126 | 126 | <div id='silverbullet'>" |
127 | - .$this->Gui->textTemplates->templates[user\SB_GO_AWAY] . |
|
127 | + .$this->Gui->textTemplates->templates[user\SB_GO_AWAY]. |
|
128 | 128 | "</div> |
129 | 129 | "; |
130 | 130 | return $retval; |
@@ -222,7 +222,7 @@ discard block |
||
222 | 222 | <div id='profiles'> <!-- this is the profile selection filled during run time --> |
223 | 223 | <div id='profiles_h' class='sub_h'>".$this->Gui->textTemplates->templates[user\PROFILE_SELECTION]." |
224 | 224 | </div>" . |
225 | - "<select id='profile_list'></select><div id='profile_desc' class='profile_desc'></div>" . |
|
225 | + "<select id='profile_list'></select><div id='profile_desc' class='profile_desc'></div>". |
|
226 | 226 | "</div>"; |
227 | 227 | } |
228 | 228 | |
@@ -250,7 +250,7 @@ discard block |
||
250 | 250 | public function divInstitution($selectButton = TRUE) { |
251 | 251 | $retval = "<div id='institution_name'> |
252 | 252 | <span id='inst_name_span'></span> <div id='inst_extra_text'></div><!-- this will be filled with the IdP name -->" . |
253 | - ($selectButton ? "<a id='select_another' class='signin' href=\"\">".$this->Gui->textTemplates->templates[user\INSTITUTION_SELECTION]."</a>" : "") . |
|
253 | + ($selectButton ? "<a id='select_another' class='signin' href=\"\">".$this->Gui->textTemplates->templates[user\INSTITUTION_SELECTION]."</a>" : ""). |
|
254 | 254 | "</div>"; |
255 | 255 | $retval .= $this->emptyImage('idp_logo', 'IdP Logo'); |
256 | 256 | return $retval; |
@@ -124,7 +124,7 @@ discard block |
||
124 | 124 | public function divSilverbullet() { |
125 | 125 | $retval = " |
126 | 126 | <div id='silverbullet'>" |
127 | - .$this->Gui->textTemplates->templates[user\SB_GO_AWAY] . |
|
127 | + .$this->Gui->textTemplates->templates[user\SB_GO_AWAY] . |
|
128 | 128 | "</div> |
129 | 129 | "; |
130 | 130 | return $retval; |
@@ -293,8 +293,8 @@ discard block |
||
293 | 293 | } |
294 | 294 | |
295 | 295 | $retval .= "<td><button name='$d' class='other_os' id='$d'>".$D['display']."</button>" |
296 | - ."</td>" |
|
297 | - ."<td><button name='$d' class='more_info_b' id='info_b_$d'>i</button></td></tr>\n"; |
|
296 | + ."</td>" |
|
297 | + ."<td><button name='$d' class='more_info_b' id='info_b_$d'>i</button></td></tr>\n"; |
|
298 | 298 | $deviceIndex++; |
299 | 299 | } |
300 | 300 | $retval .= "</tbody>"; |
@@ -341,7 +341,7 @@ discard block |
||
341 | 341 | <tr> |
342 | 342 | <td>" . |
343 | 343 | $this->Gui->catCopyright |
344 | - ." |
|
344 | + ." |
|
345 | 345 | </td>"; |
346 | 346 | |
347 | 347 | if (!empty(\config\Master::APPEARANCE['privacy_notice_url'])) { |
@@ -166,27 +166,27 @@ discard block |
||
166 | 166 | { |
167 | 167 | // it could match CN or sAN:DNS, we don't care which |
168 | 168 | if (isset($this->TLS_CA_checks_result[$host]['certdata']['subject'])) { |
169 | - $this->loggerInstance->debug(4, "Checking expected server name " . $this->expectedName . " against Subject: "); |
|
169 | + $this->loggerInstance->debug(4, "Checking expected server name ".$this->expectedName." against Subject: "); |
|
170 | 170 | $this->loggerInstance->debug(4, $this->TLS_CA_checks_result[$host]['certdata']['subject']); |
171 | 171 | // we are checking against accidental misconfig, not attacks, so loosely checking against end of string is appropriate |
172 | - if (preg_match("/CN=" . $this->expectedName . "/", $this->TLS_CA_checks_result[$host]['certdata']['subject']) === 1) { |
|
172 | + if (preg_match("/CN=".$this->expectedName."/", $this->TLS_CA_checks_result[$host]['certdata']['subject']) === 1) { |
|
173 | 173 | return TRUE; |
174 | 174 | } |
175 | 175 | } |
176 | 176 | if (isset($this->TLS_CA_checks_result[$host]['certdata']['extensions']['subjectaltname'])) { |
177 | - $this->loggerInstance->debug(4, "Checking expected server name " . $this->expectedName . " against sANs: "); |
|
177 | + $this->loggerInstance->debug(4, "Checking expected server name ".$this->expectedName." against sANs: "); |
|
178 | 178 | $this->loggerInstance->debug(4, $this->TLS_CA_checks_result[$host]['certdata']['extensions']['subjectaltname']); |
179 | 179 | $testNames = $this->TLS_CA_checks_result[$host]['certdata']['extensions']['subjectaltname']; |
180 | 180 | if (!is_array($testNames)) { |
181 | 181 | $testNames = [$testNames]; |
182 | 182 | } |
183 | 183 | foreach ($testNames as $oneName) { |
184 | - if (preg_match("/" . $this->expectedName . "/", $oneName) === 1) { |
|
184 | + if (preg_match("/".$this->expectedName."/", $oneName) === 1) { |
|
185 | 185 | return TRUE; |
186 | 186 | } |
187 | 187 | } |
188 | 188 | } |
189 | - $this->loggerInstance->debug(3, "Tried to check expected server name " . $this->expectedName . " but neither CN nor sANs matched."); |
|
189 | + $this->loggerInstance->debug(3, "Tried to check expected server name ".$this->expectedName." but neither CN nor sANs matched."); |
|
190 | 190 | |
191 | 191 | $this->TLS_CA_checks_result[$host]['cert_oddity'] = RADIUSTests::CERTPROB_DYN_SERVER_NAME_MISMATCH; |
192 | 192 | return FALSE; |
@@ -216,7 +216,7 @@ discard block |
||
216 | 216 | $this->TLS_clients_checks_result[$host]['ca'][$type]['certificate'][$k]['status'] = $cert['status']; |
217 | 217 | $this->TLS_clients_checks_result[$host]['ca'][$type]['certificate'][$k]['message'] = $this->TLS_certkeys[$cert['status']]; |
218 | 218 | $this->TLS_clients_checks_result[$host]['ca'][$type]['certificate'][$k]['expected'] = $cert['expected']; |
219 | - $add = ' -cert ' . ROOT . '/config/cli-certs/' . $cert['public'] . ' -key ' . ROOT . '/config/cli-certs/' . $cert['private']; |
|
219 | + $add = ' -cert '.ROOT.'/config/cli-certs/'.$cert['public'].' -key '.ROOT.'/config/cli-certs/'.$cert['private']; |
|
220 | 220 | if (!isset($this->TLS_clients_checks_result[$host]['ca'][$type]['certificate'][$k])) { |
221 | 221 | $this->TLS_clients_checks_result[$host]['ca'][$type]['certificate'][$k] = []; |
222 | 222 | } |
@@ -261,11 +261,11 @@ discard block |
||
261 | 261 | // but code analysers want this more explicit, so here is this extra |
262 | 262 | // call to escapeshellarg() |
263 | 263 | $escapedHost = escapeshellarg($host); |
264 | - $this->loggerInstance->debug(4, \config\Master::PATHS['openssl'] . " s_client -connect " . $escapedHost . " -tls1 -CApath " . ROOT . "/config/ca-certs/$this->consortium/ $arg 2>&1\n"); |
|
264 | + $this->loggerInstance->debug(4, \config\Master::PATHS['openssl']." s_client -connect ".$escapedHost." -tls1 -CApath ".ROOT."/config/ca-certs/$this->consortium/ $arg 2>&1\n"); |
|
265 | 265 | $time_start = microtime(true); |
266 | 266 | $opensslbabble = []; |
267 | 267 | $result = 999; // likely to become zero by openssl; don't want to initialise to zero, could cover up exec failures |
268 | - exec(\config\Master::PATHS['openssl'] . " s_client -connect " . $escapedHost . " -no_ssl3 -CApath " . ROOT . "/config/ca-certs/$this->consortium/ $arg 2>&1", $opensslbabble, $result); |
|
268 | + exec(\config\Master::PATHS['openssl']." s_client -connect ".$escapedHost." -no_ssl3 -CApath ".ROOT."/config/ca-certs/$this->consortium/ $arg 2>&1", $opensslbabble, $result); |
|
269 | 269 | $time_stop = microtime(true); |
270 | 270 | $testresults['time_millisec'] = floor(($time_stop - $time_start) * 1000); |
271 | 271 | $testresults['returncode'] = $result; |
@@ -44,8 +44,8 @@ discard block |
||
44 | 44 | $operatingSystem = $Gui->detectOS(); |
45 | 45 | $Gui->loggerInstance->debug(4, $operatingSystem); |
46 | 46 | if ($operatingSystem) { |
47 | - print "recognisedOS = '".$operatingSystem['device'] . "';\n"; |
|
48 | - print "recognisedOShs20 = '".$operatingSystem['hs20'] . "';\n"; |
|
47 | + print "recognisedOS = '".$operatingSystem['device']."';\n"; |
|
48 | + print "recognisedOShs20 = '".$operatingSystem['hs20']."';\n"; |
|
49 | 49 | $vendorlogo = $Gui->skinObject->findResourceUrl("IMAGES", "vendorlogo/"); |
50 | 50 | if ($vendorlogo !== FALSE) { |
51 | 51 | print "vendorlogo = '$vendorlogo';\n"; |
@@ -54,7 +54,7 @@ discard block |
||
54 | 54 | } |
55 | 55 | } |
56 | 56 | |
57 | -print 'downloadMessage = "'.$Gui->textTemplates->templates[\web\lib\user\DOWNLOAD_MESSAGE] . '";'; |
|
57 | +print 'downloadMessage = "'.$Gui->textTemplates->templates[\web\lib\user\DOWNLOAD_MESSAGE].'";'; |
|
58 | 58 | //TODO modify this based on OS detection |
59 | 59 | $userAgent = $_SERVER['HTTP_USER_AGENT'] ?? ""; |
60 | 60 | if (preg_match('/Android/', $userAgent)) { |
@@ -83,7 +83,7 @@ discard block |
||
83 | 83 | <?php echo $divs->divHeading($visibility); ?> |
84 | 84 | <div id="main_page"> |
85 | 85 | <div id="loading_ico"> |
86 | - <?php echo _("Authenticating") . "..." ?><br><img src="<?php echo $Gui->skinObject->findResourceUrl("IMAGES", "icons/loading51.gif"); ?>" alt="Authenticating ..."/> |
|
86 | + <?php echo _("Authenticating")."..." ?><br><img src="<?php echo $Gui->skinObject->findResourceUrl("IMAGES", "icons/loading51.gif"); ?>" alt="Authenticating ..."/> |
|
87 | 87 | </div> |
88 | 88 | <div id="info_overlay"> <!-- device info --> |
89 | 89 | <div id="info_window"></div> |