mnet/environment.php

   1 <?php // $Id$
   2 /**
   3  * Info about the local environment, wrt RPC
   4  *
   5  * This should really be a singleton. A PHP5 Todo I guess.
   6  */
   7
   8 class mnet_environment {
   9
  10     var $id                 = 0;
  11     var $wwwroot            = '';
  12     var $ip_address         = '';
  13     var $public_key         = '';
  14     var $public_key_expires = 0;
  15     var $last_connect_time  = 0;
  16     var $last_log_id        = 0;
  17     var $keypair            = array();
  18     var $deleted            = 0;
  19
  20     function mnet_environment() {
  21         return true;
  22     }
  23
  24     function init() {
  25         global $CFG;
  26
  27         if (empty($CFG->mnet_dispatcher_mode)) {
  28             set_config('mnet_dispatcher_mode', 'off');
  29         }
  30
  31         // Bootstrap the object data on first load.
  32         if (empty($CFG->mnet_localhost_id) ) {
  33             if (!$CFG->mnet_localhost_id = get_config(NULL, 'mnet_localhost_id')) {  // Double-check db
  34                 $this->wwwroot    = $CFG->wwwroot;
  35                 if (empty($_SERVER['SERVER_ADDR'])) {
  36                     // SERVER_ADDR is only returned by Apache-like webservers
  37                     $my_hostname = mnet_get_hostname_from_uri($CFG->wwwroot);
  38                     $my_ip       = gethostbyname($my_hostname);  // Returns unmodified hostname on failure. DOH!
  39                     if ($my_ip == $my_hostname) {
  40                         $this->ip_address = 'UNKNOWN';
  41                     } else {
  42                         $this->ip_address = $my_ip;
  43                     }
  44                 } else {
  45                     $this->ip_address = $_SERVER['SERVER_ADDR'];
  46                 }
  47
  48                 if ($existingrecord = get_record('mnet_host', 'ip_address', $this->ip_address)) {
  49                     $this->id = $existingrecord->id;
  50                 } else {  // make a new one
  51                     $this->id       = insert_record('mnet_host', $this, true);
  52                 }
  53
  54                 set_config('mnet_localhost_id', $this->id);
  55                 $this->get_keypair();
  56             }
  57         } else {
  58             $hostobject = get_record('mnet_host','id', $CFG->mnet_localhost_id);
  59             if(is_object($hostobject)) {
  60                 $temparr = get_object_vars($hostobject);
  61                 foreach($temparr as $key => $value) {
  62                     $this->$key = $value;
  63                 }
  64                 unset($hostobject, $temparr);
  65             } else {
  66                 return false;
  67             }
  68
  69             // Unless this is an install/upgrade, generate the SSL keys.
  70             if(empty($this->public_key)) {
  71                 $this->get_keypair();
  72             }
  73         }
  74
  75         // We need to set up a record that represents 'all hosts'. Any rights
  76         // granted to this host will be conferred on all hosts.
  77         if (empty($CFG->mnet_all_hosts_id) ) {
  78             $hostobject                     = new stdClass();
  79             $hostobject->wwwroot            = '';
  80             $hostobject->ip_address         = '';
  81             $hostobject->public_key         = '';
  82             $hostobject->public_key_expires = '';
  83             $hostobject->last_connect_time  = '0';
  84             $hostobject->last_log_id        = '0';
  85             $hostobject->deleted            = 0;
  86             $hostobject->name               = 'All Hosts';
  87
  88             $hostobject->id = insert_record('mnet_host',$hostobject, true);
  89             set_config('mnet_all_hosts_id', $hostobject->id);
  90             $CFG->mnet_all_hosts_id = $hostobject->id;
  91             unset($hostobject);
  92         }
  93     }
  94
  95     function get_keypair() {
  96         // We don't generate keys on install/upgrade because we want the USER
  97         // record to have an email address, city and country already.
  98         if (!empty($_SESSION['upgraderunning'])) return true;
  99         if (!extension_loaded("openssl")) return true;
 100         if (!empty($this->keypair)) return true;
 101
 102         $this->keypair = array();
 103         $keypair = get_field('config_plugins', 'value', 'plugin', 'mnet', 'name', 'openssl');
 104
 105         if (!empty($keypair)) {
 106             // Explode/Implode is faster than Unserialize/Serialize
 107             list($this->keypair['certificate'], $this->keypair['keypair_PEM']) = explode('@@@@@@@@', $keypair);
 108         }
 109
 110         if ($this->public_key_expires > time()) {
 111             $this->keypair['privatekey'] = openssl_pkey_get_private($this->keypair['keypair_PEM']);
 112             $this->keypair['publickey']  = openssl_pkey_get_public($this->keypair['certificate']);
 113         } else {
 114             // Key generation/rotation
 115
 116             // 1. Archive the current key (if there is one).
 117             $result = get_field('config_plugins', 'value', 'plugin', 'mnet', 'name', 'openssl_history');
 118             if(empty($result)) {
 119                 set_config('openssl_history', serialize(array()), 'mnet');
 120                 $openssl_history = array();
 121             } else {
 122                 $openssl_history = unserialize($result);
 123             }
 124
 125             if(count($this->keypair)) {
 126                 $this->keypair['expires'] = $this->public_key_expires;
 127                 array_unshift($openssl_history, $this->keypair);
 128             }
 129
 130             // 2. How many old keys do we want to keep? Use array_slice to get
 131             // rid of any we don't want
 132             $openssl_generations = get_field('config_plugins', 'value', 'plugin', 'mnet', 'name', 'openssl_generations');
 133             if(empty($openssl_generations)) {
 134                 set_config('openssl_generations', 3, 'mnet');
 135                 $openssl_generations = 3;
 136             }
 137
 138             if(count($openssl_history) > $openssl_generations) {
 139                 $openssl_history = array_slice($openssl_history, 0, $openssl_generations);
 140             }
 141
 142             set_config('openssl_history', serialize($openssl_history), 'mnet');
 143
 144             // 3. Generate fresh keys
 145             $this->replace_keys();
 146         }
 147         return true;
 148     }
 149
 150     function replace_keys() {
 151         global $CFG;
 152         $this->keypair = array();
 153         $this->keypair = mnet_generate_keypair();
 154         $this->public_key         = $this->keypair['certificate'];
 155         $this->wwwroot = $CFG->wwwroot;
 156         $details                  = openssl_x509_parse($this->public_key);
 157         $this->public_key_expires = $details['validTo_time_t'];
 158         if (empty($_SERVER['SERVER_ADDR'])) {
 159             // SERVER_ADDR is only returned by Apache-like webservers
 160             $my_hostname = mnet_get_hostname_from_uri($CFG->wwwroot);
 161             $my_ip       = gethostbyname($my_hostname);  // Returns unmodified hostname on failure. DOH!
 162             if ($my_ip == $my_hostname) {
 163                 $this->ip_address = 'UNKNOWN';
 164             } else {
 165                 $this->ip_address = $my_ip;
 166             }
 167         } else {
 168             $this->ip_address = $_SERVER['SERVER_ADDR'];
 169         }
 170         set_config('openssl', implode('@@@@@@@@', $this->keypair), 'mnet');
 171
 172         update_record('mnet_host', $this);
 173         error_log('New public key has been generated. It expires ' . date('Y/m/d h:i:s', $this->public_key_expires));
 174     }
 175
 176     function get_private_key() {
 177         if (empty($this->keypair)) $this->get_keypair();
 178         if (isset($this->keypair['privatekey'])) return $this->keypair['privatekey'];
 179         $this->keypair['privatekey'] = openssl_pkey_get_private($this->keypair['keypair_PEM']);
 180         return $this->keypair['privatekey'];
 181     }
 182
 183     function get_public_key() {
 184         if (!isset($this->keypair)) $this->get_keypair();
 185         if (isset($this->keypair['publickey'])) return $this->keypair['publickey'];
 186         $this->keypair['publickey'] = openssl_pkey_get_public($this->keypair['certificate']);
 187         return $this->keypair['publickey'];
 188     }
 189 }
 190
 191 ?>