[Summary view] [Print] [Text view]

   1  <?php // $Id: environment.php,v 1.12.2.5 2008/09/18 16:14:12 stronk7 Exp $
   2  /**
   3   * Info about the local environment, wrt RPC
   4   *
   5   * This should really be a singleton. A PHP5 Todo I guess.
   6   */
   7  
   8  class mnet_environment {
   9  
  10      var $id                 = 0;
  11      var $wwwroot            = '';
  12      var $ip_address         = '';
  13      var $public_key         = '';
  14      var $public_key_expires = 0;
  15      var $last_connect_time  = 0;
  16      var $last_log_id        = 0;
  17      var $keypair            = array();
  18      var $deleted            = 0;
  19  
  20      function mnet_environment() {
  21          return true;
  22      }
  23  
  24      function init() {
  25          global $CFG;
  26  
  27          if (empty($CFG->mnet_dispatcher_mode)) {
  28              set_config('mnet_dispatcher_mode', 'off');
  29          }
  30  
  31          // Bootstrap the object data on first load.
  32          if (empty($CFG->mnet_localhost_id) ) {
  33              if (!$CFG->mnet_localhost_id = get_config(NULL, 'mnet_localhost_id')) {  // Double-check db
  34                  $this->wwwroot    = $CFG->wwwroot;
  35                  if (empty($_SERVER['SERVER_ADDR'])) {
  36                      // SERVER_ADDR is only returned by Apache-like webservers
  37                      $my_hostname = mnet_get_hostname_from_uri($CFG->wwwroot);
  38                      $my_ip       = gethostbyname($my_hostname);  // Returns unmodified hostname on failure. DOH!
  39                      if ($my_ip == $my_hostname) {
  40                          $this->ip_address = 'UNKNOWN';
  41                      } else {
  42                          $this->ip_address = $my_ip;
  43                      }
  44                  } else {
  45                      $this->ip_address = $_SERVER['SERVER_ADDR'];
  46                  }
  47  
  48                  if ($existingrecord = get_record('mnet_host', 'ip_address', $this->ip_address)) {
  49                      $this->id = $existingrecord->id;
  50                  } else {  // make a new one
  51                      $this->id       = insert_record('mnet_host', $this, true);
  52                  }
  53      
  54                  set_config('mnet_localhost_id', $this->id);
  55                  $this->get_keypair();
  56              }
  57          } else {
  58              $hostobject = get_record('mnet_host','id', $CFG->mnet_localhost_id);
  59              if(is_object($hostobject)) {
  60                  $temparr = get_object_vars($hostobject);
  61                  foreach($temparr as $key => $value) {
  62                      $this->$key = $value;
  63                  }
  64                  unset($hostobject, $temparr);
  65              } else {
  66                  return false;
  67              }
  68  
  69              // Unless this is an install/upgrade, generate the SSL keys.
  70              if(empty($this->public_key)) {
  71                  $this->get_keypair();
  72              }
  73          }
  74  
  75          // We need to set up a record that represents 'all hosts'. Any rights
  76          // granted to this host will be conferred on all hosts.
  77          if (empty($CFG->mnet_all_hosts_id) ) {
  78              $hostobject                     = new stdClass();
  79              $hostobject->wwwroot            = '';
  80              $hostobject->ip_address         = '';
  81              $hostobject->public_key         = '';
  82              $hostobject->public_key_expires = 0;
  83              $hostobject->last_connect_time  = 0;
  84              $hostobject->last_log_id        = 0;
  85              $hostobject->deleted            = 0;
  86              $hostobject->name               = 'All Hosts';
  87  
  88              $hostobject->id = insert_record('mnet_host',$hostobject, true);
  89              set_config('mnet_all_hosts_id', $hostobject->id);
  90              $CFG->mnet_all_hosts_id = $hostobject->id;
  91              unset($hostobject);
  92          }
  93      }
  94  
  95      function get_keypair() {
  96          // We don't generate keys on install/upgrade because we want the USER
  97          // record to have an email address, city and country already.
  98          if (!empty($_SESSION['upgraderunning'])) return true;
  99          if (!extension_loaded("openssl")) return true;
 100          if (!empty($this->keypair)) return true;
 101  
 102          $this->keypair = array();
 103          $keypair = get_field('config_plugins', 'value', 'plugin', 'mnet', 'name', 'openssl');
 104  
 105          if (!empty($keypair)) {
 106              // Explode/Implode is faster than Unserialize/Serialize
 107              list($this->keypair['certificate'], $this->keypair['keypair_PEM']) = explode('@@@@@@@@', $keypair);
 108          }
 109  
 110          if ($this->public_key_expires > time()) {
 111              $this->keypair['privatekey'] = openssl_pkey_get_private($this->keypair['keypair_PEM']);
 112              $this->keypair['publickey']  = openssl_pkey_get_public($this->keypair['certificate']);
 113          } else {
 114              // Key generation/rotation
 115  
 116              // 1. Archive the current key (if there is one).
 117              $result = get_field('config_plugins', 'value', 'plugin', 'mnet', 'name', 'openssl_history');
 118              if(empty($result)) {
 119                  set_config('openssl_history', serialize(array()), 'mnet');
 120                  $openssl_history = array();
 121              } else {
 122                  $openssl_history = unserialize($result);
 123              }
 124  
 125              if(count($this->keypair)) {
 126                  $this->keypair['expires'] = $this->public_key_expires;
 127                  array_unshift($openssl_history, $this->keypair);
 128              }
 129  
 130              // 2. How many old keys do we want to keep? Use array_slice to get 
 131              // rid of any we don't want
 132              $openssl_generations = get_field('config_plugins', 'value', 'plugin', 'mnet', 'name', 'openssl_generations');
 133              if(empty($openssl_generations)) {
 134                  set_config('openssl_generations', 3, 'mnet');
 135                  $openssl_generations = 3;
 136              }
 137  
 138              if(count($openssl_history) > $openssl_generations) {
 139                  $openssl_history = array_slice($openssl_history, 0, $openssl_generations);
 140              }
 141  
 142              set_config('openssl_history', serialize($openssl_history), 'mnet');
 143  
 144              // 3. Generate fresh keys
 145              $this->replace_keys();
 146          }
 147          return true;
 148      }
 149  
 150      function replace_keys() {
 151          global $CFG;
 152          $this->keypair = array();
 153          $this->keypair = mnet_generate_keypair();
 154          $this->public_key         = $this->keypair['certificate'];
 155          $this->wwwroot = $CFG->wwwroot;
 156          $details                  = openssl_x509_parse($this->public_key);
 157          $this->public_key_expires = $details['validTo_time_t'];
 158          if (empty($_SERVER['SERVER_ADDR'])) {
 159              // SERVER_ADDR is only returned by Apache-like webservers
 160              $my_hostname = mnet_get_hostname_from_uri($CFG->wwwroot);
 161              $my_ip       = gethostbyname($my_hostname);  // Returns unmodified hostname on failure. DOH!
 162              if ($my_ip == $my_hostname) {
 163                  $this->ip_address = 'UNKNOWN';
 164              } else {
 165                  $this->ip_address = $my_ip;
 166              }
 167          } else {
 168              $this->ip_address = $_SERVER['SERVER_ADDR'];
 169          }
 170          set_config('openssl', implode('@@@@@@@@', $this->keypair), 'mnet');
 171  
 172          update_record('mnet_host', $this);
 173          error_log('New public key has been generated. It expires ' . date('Y/m/d h:i:s', $this->public_key_expires));
 174      }
 175  
 176      function get_private_key() {
 177          if (empty($this->keypair)) $this->get_keypair();
 178          if (isset($this->keypair['privatekey'])) return $this->keypair['privatekey'];
 179          $this->keypair['privatekey'] = openssl_pkey_get_private($this->keypair['keypair_PEM']);
 180          return $this->keypair['privatekey'];
 181      }
 182  
 183      function get_public_key() {
 184          if (!isset($this->keypair)) $this->get_keypair();
 185          if (isset($this->keypair['publickey'])) return $this->keypair['publickey'];
 186          $this->keypair['publickey'] = openssl_pkey_get_public($this->keypair['certificate']);
 187          return $this->keypair['publickey'];
 188      }
 189  }
 190  
 191  ?>