Adding module for checking expiration date for certificates on LDAPs hosts

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1212 44740490-163a-0410-bde0-09ae8108e29a

modules/certcheck/templates/certcheck.php

+<?php
+$this->data['header'] = 'LDAP status page';
+$this->includeAtTemplateBase('includes/header.php');
+
+
+?>
+<div id="content">
+
+<h2>Certificate check</h2>
+
+<table class="attributes" style="font-size: small; width: 100%; border: 1px solid #aaa">
+	<tr>
+		<th>Host</th>
+		<th colspan="3">Expires</th>
+		<th>Issuer</th>
+	</tr>
+
+<?php
+
+$i = 0;
+$classes = array('odd', 'even');
+
+# $this->data['results']
+foreach($this->data['results'] as $orgkey => $org) {
+	echo('<tr class="' . ($classes[($i++ % 2)]) . '">');
+	
+	echo '<td>' . $orgkey . '</td><td>' . $org . ' days</td><td>';
+	
+	if ($org < 30) {
+		echo '<img src="/' . $this->data['baseurlpath'] . 'resources/icons/delete.png" />';
+	} else {
+		echo '<img src="/' . $this->data['baseurlpath'] . 'resources/icons/accept.png" />';
+	}
+	echo '</td>';
+	echo '<td>';
+	if (array_key_exists('expire', $this->data['resultsm'][$orgkey])) echo $this->data['resultsm'][$orgkey]['expire'];
+	echo '</td>';
+	echo '<td>';
+	if (array_key_exists('issuer', $this->data['resultsm'][$orgkey])) echo $this->data['resultsm'][$orgkey]['issuer'];
+	echo '</td>';
+
+	echo('</tr>');
+}
+?>
+</table>
+<?php $this->includeAtTemplateBase('includes/footer.php'); ?>
\ No newline at end of file

modules/certcheck/www/index.php

+<?php
+
+
+$config = SimpleSAML_Configuration::getInstance();
+$session = SimpleSAML_Session::getInstance();
+
+if (!$session->isValid('login-admin') ) {
+	SimpleSAML_Utilities::redirect('/' . $config->getBaseURL() . 'auth/login-admin.php',
+		array('RelayState' => SimpleSAML_Utilities::selfURL())
+	);
+}
+
+
+function phpping($host, $port) {
+	SimpleSAML_Logger::debug('ldapstatus phpping(): ping [' . $host . ':' . $port . ']' );
+	$timeout = 1.0;
+	$socket = @fsockopen($host, $port, $errno, $errstr, $timeout);
+	@fclose($socket);
+	if ($errno) {
+		return array(FALSE, $errno . ':' . $errstr);
+	} else {		
+		return array(TRUE,NULL);
+	}
+}
+
+
+$ldapconfig = $config->copyFromBase('loginfeide', 'config-login-feide.php');
+$ldapStatusConfig = $config->copyFromBase('ldapstatus', 'module_ldapstatus.php');
+
+$pingcommand = $ldapStatusConfig->getValue('ping');
+
+$debug = $ldapconfig->getValue('ldapDebug', FALSE);
+
+$orgs = $ldapconfig->getValue('orgldapconfig');
+
+#echo '<pre>'; print_r($orgs); exit;
+
+$results = array();
+$resultsm = array();
+
+$i = 0;
+foreach ($orgs AS $orgkey => $orgconfig) {
+
+#	if (++$i > 10) continue;
+
+	if (empty($orgconfig['hostname'])) continue;
+
+	$urldef = explode(' ', $orgconfig['hostname']);
+	$url = parse_url($urldef[0]);
+	$port = 389;
+	if (preg_match('/^ldaps/', $urldef[0])) $port = 636;
+	if (!empty($url['port'])) $port = $url['port'];
+	
+	if (!array_key_exists('host', $url)) {
+		echo 'could not resolve host name in ' . $urldef[0]; exit;
+	}
+	
+	$host = $url['host'];
+	
+#	echo 'pinging ' . $host . ' port ' . $port;
+	$ping = phpping($host, $port);
+	if ($ping[0] === FALSE) continue;
+	
+	
+	$cmd = 'echo "" | openssl s_client -connect ' . $host . ':' . $port . ' 2> /dev/null | openssl x509 -enddate -noout';
+	$output = shell_exec($cmd);
+	
+	if (!empty($output)) {
+	
+		$cmd2 = 'echo "" | openssl s_client -connect ' . $host . ':' . $port . ' 2> /dev/null | openssl x509 -issuer -noout';
+		$output2 = shell_exec($cmd2);
+// 		echo $output; exit;
+		if (preg_match('/issuer=(.{0,40})/', $output2, $matches) ) {
+			$resultsm[$host]['issuer'] = $matches[1];
+		}
+	}
+
+	if (preg_match('/notAfter=(.*)/', $output, $matches) ) {
+		$rawdate = $matches[1];
+		$date = strtotime($rawdate) - time();
+// 		echo '<pre>';
+// 		print_r($date); 
+		$days = floor($date / (60*60*24));
+#		echo '<p>expires in ' . $days . ' days';
+		
+		$results[$host] = $days;
+		$resultsm[$host]['expire'] = date('jS F Y', strtotime($rawdate));		
+
+	}
+	
+}
+
+asort($results);
+// echo '<pre>';
+// print_r($results);
+// print_r($resultsm);
+// exit;
+
+$t = new SimpleSAML_XHTML_Template($config, 'certcheck:certcheck.php');
+$t->data['results'] = $results;
+$t->data['resultsm'] = $resultsm;
+$t->show();
+exit;
+
+?>