1 |
diff -Nur -x '*.orig' -x '*.rej' phpki/phpki-0.82/ca/main.php mezzanine_patched_phpki/phpki-0.82/ca/main.php |
2 |
--- phpki/phpki-0.82/ca/main.php 2005-11-17 02:17:20.000000000 +0100 |
3 |
+++ mezzanine_patched_phpki/phpki-0.82/ca/main.php 2008-12-09 01:49:39.000000000 +0100 |
4 |
@@ -10,6 +10,14 @@ |
5 |
|
6 |
switch($stage) { |
7 |
|
8 |
+case 'dl_takey': |
9 |
+ upload("$config[private_dir]/takey.pem", "$config[ca_prefix]takey.pem", 'application/octet-stream'); |
10 |
+ break; |
11 |
+ |
12 |
+case 'dl_dhparam': |
13 |
+ upload("$config[private_dir]/dhparam1024.pem", "$config[ca_prefix]dhparam1024.pem", 'application/octet-stream'); |
14 |
+ break; |
15 |
+ |
16 |
case 'dl_root': |
17 |
upload("$config[cacert_pem]", "$config[ca_prefix]cacert.crt", 'application/x-x509-ca-cert'); |
18 |
break; |
19 |
@@ -50,6 +58,34 @@ |
20 |
} |
21 |
break; |
22 |
|
23 |
+case 'display_takey': |
24 |
+ printHeader(false); |
25 |
+ |
26 |
+ ?> |
27 |
+ <center><h2>OpenVPN pre-shared Key</h2></center> |
28 |
+ <p> |
29 |
+ <form action=<?=$PHP_SELF?> method=post> |
30 |
+ <input type=submit name=submit value="Back to Menu"> |
31 |
+ </form> |
32 |
+ <? |
33 |
+ print '<pre>'.ta_key_text().'</pre>'; |
34 |
+ break; |
35 |
+ |
36 |
+case 'display_dhparam': |
37 |
+ printHeader(false); |
38 |
+ |
39 |
+ ?> |
40 |
+ <center><h2>OpenVPN Diffie-Helman parameters</h2></center> |
41 |
+ <p> |
42 |
+ <form action=<?=$PHP_SELF?> method=post> |
43 |
+ <input type=submit name=submit value="Back to Menu"> |
44 |
+ </form> |
45 |
+ <? |
46 |
+ print '<pre>'.dhparam_text().'</pre>'; |
47 |
+ break; |
48 |
+ |
49 |
+ |
50 |
+ |
51 |
default: |
52 |
printHeader('ca'); |
53 |
?> |
54 |
@@ -87,6 +123,17 @@ |
55 |
<td>This is the official list of revoked certificates. Using this list with your e-mail or |
56 |
browser application is optional. Some applications will automagically reference this list. </td></tr> |
57 |
|
58 |
+ <tr><td style="text-align: center; vertical-align: middle; font-weight: bold;"> |
59 |
+ <a href=<?=$PHP_SELF?>?stage=dl_takey>Download the static pre-shared key</a><br><br> |
60 |
+ <a href=<?=$PHP_SELF?>?stage=display_takey>Display the static pre-shared key</a></td> |
61 |
+ <td>This key can be used with OpenVPN as a standalone auth mecanism, or as an additionnal TLS authentication.</td></tr> |
62 |
+ |
63 |
+ <tr><td style="text-align: center; vertical-align: middle; font-weight: bold;"> |
64 |
+ <a href=<?=$PHP_SELF?>?stage=dl_dhparam>Download the Diffie-Hellman parameters</a><br><br> |
65 |
+ <a href=<?=$PHP_SELF?>?stage=display_dhparam>Display the Diffie-Hellman parameters</a></td> |
66 |
+ <td>This file is used by OpenVPN for the hand-shake. The Diffie-Hellman key agreement |
67 |
+ protocol enables two communication partners to exchange a secret key safely.</td></tr> |
68 |
+ |
69 |
</table> |
70 |
</center> |
71 |
<br><br> |
72 |
diff -Nur -x '*.orig' -x '*.rej' phpki/phpki-0.82/include/openssl_functions.php mezzanine_patched_phpki/phpki-0.82/include/openssl_functions.php |
73 |
--- phpki/phpki-0.82/include/openssl_functions.php 2008-12-09 01:50:28.000000000 +0100 |
74 |
+++ mezzanine_patched_phpki/phpki-0.82/include/openssl_functions.php 2008-12-09 01:50:05.000000000 +0100 |
75 |
@@ -416,6 +416,20 @@ |
76 |
return(shell_exec(CRL.' -in '.escshellarg($crlfile).' -text 2>&1')); |
77 |
} |
78 |
|
79 |
+// Returns the static takey.pem file |
80 |
+function ta_key_text() { |
81 |
+ global $config; |
82 |
+ return(shell_exec('cat '.escshellarg($config['private_dir']).'/takey.pem 2>&1')); |
83 |
+} |
84 |
+ |
85 |
+// Returns the dhparam file |
86 |
+function dhparam_text() { |
87 |
+ global $config; |
88 |
+ return(shell_exec('cat '.escshellarg($config['private_dir']).'/dhparam1024.pem 2>&1')); |
89 |
+} |
90 |
+ |
91 |
+ |
92 |
+ |
93 |
// |
94 |
// Returns the subject of a certificate. |
95 |
// |