diff options
Diffstat (limited to 'usr/local/www/vpn_openvpn_certs_create.php')
| -rw-r--r-- | usr/local/www/vpn_openvpn_certs_create.php | 320 |
1 files changed, 0 insertions, 320 deletions
diff --git a/usr/local/www/vpn_openvpn_certs_create.php b/usr/local/www/vpn_openvpn_certs_create.php deleted file mode 100644 index 294e441..0000000 --- a/usr/local/www/vpn_openvpn_certs_create.php +++ /dev/null @@ -1,320 +0,0 @@ -<?php -/* $Id$ */ -/* - vpn_openvpn_certs_create.php - part of pfSense - - Copyright (C) 2004 Scott Ullrich - Copyright (C) 2008 Ermal Luçi - All rights reserved. - - Redistribution and use in source and binary forms, with or without - modification, are permitted provided that the following conditions are met: - - 1. Redistributions of source code must retain the above copyright notice, - this list of conditions and the following disclaimer. - - 2. Redistributions in binary form must reproduce the above copyright - notice, this list of conditions and the following disclaimer in the - documentation and/or other materials provided with the distribution. - - THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, - INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY - AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE - AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, - OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF - SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS - INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN - CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) - ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE - POSSIBILITY OF SUCH DAMAGE. -*/ - -##|+PRIV -##|*IDENT=page-vpn-openvpn-createcerts -##|*NAME=VPN: OpenVPN: Create Certs page -##|*DESCR=Allow access to the 'VPN: OpenVPN: Create Certs' page. -##|*MATCH=vpn_openvpn_certs_create.php* -##|-PRIV - - -require("globals.inc"); -require("guiconfig.inc"); - -$pgtitle = array("VPN", "OpenVPN", "Create Certs"); - -$ovpncapath = $g['varetc_path'] . "/openvpn/certificates"; -$easyrsapath = $g['easyrsapath']; - -$edit_mode = true; -if($_GET['add'] == "true") - $edit_mode = false; - -if ($_GET['ca']) { - if ($config['openvpn']['keys'][$_GET['ca']]) { - $data = &$config['openvpn']['keys'][$_GET['ca']]; - $caname = trim($_GET['ca']); - $cakeysize = $data['keysize']; - $caexpire = $data['caexpire']; - $cakeyexpire = $data['keyexpire']; - $countrycode= $data['keycountry']; - $descr = $data['descr']; - $stateorprovince= $data['keyprovince']; - $cityname= $data['keycity']; - $orginizationname= $data['keyorg']; - $email = $data['keyemail']; - $authmode = $data['auth_method']; - $edit_mode = true; - } else { - $input_errors[] = "Certificate does not exist."; - } -} - -if ($_POST) { - if (preg_match("/[^a-zA-Z0-9\.\-_]/", $_POST['descr'])) - $input_errors[] = "Description contains invalid characters."; - $descr = $_POST['descr']; - $cakeysize = $_POST['cakeysize']; - $caexpire = $_POST['caexpire']; - $cakeyexpire = $_POST['cakeyexpire']; - $countrycode=$_POST['countrycode']; - $stateorprovince=$_POST['stateorprovince']; - $cityname=$_POST['cityname']; - $orginizationname=$_POST['orginizationname']; - $email = $_POST['email']; - $authmode = $_POST['auth_method']; - $caname = trim(strtolower($_POST['descr'])); - - if ($caname) { - - /* XXX: do more input validation */ - - /* Create sane environment for easyrsa scripts */ - conf_mount_rw(); - if (!is_dir($g['varetc_path']."/openvpn")) - safe_mkdir($g['varetc_path']."/openvpn"); - - if (!is_dir($ovpncapath)) - safe_mkdir($ovpncapath); - else - mwexec("rm -rf $ovpncapath/$caname"); - - safe_mkdir("$ovpncapath/$caname", 0755); - mwexec("cp -r $easyrsapath ".$g['varetc_path']."/openvpn/"); - - if (!is_dir("$ovpncapath/$caname")) { - $input_errors[] = "Failed to create $ovpncapath/$caname environment certificate environment."; - Header("Location: vpn_openvpn_certs_create.php"); - } - - $fd = fopen($ovpncapath . "/$caname/vars", "w"); - fwrite($fd, "#!/bin/tcsh\n"); - fwrite($fd, "setenv EASY_RSA \"$easyrsapath\" \n"); - fwrite($fd, "setenv OPENSSL \"`which openssl`\"\n"); - fwrite($fd, "setenv PKCS11TOOL \"pkcs11-tool\" \n"); - fwrite($fd, "setenv GREP \"grep\" \n"); - fwrite($fd, "setenv KEY_CONFIG \"`$ovpncapath/whichopensslcnf $ovpncapath`\" \n"); - fwrite($fd, "setenv KEY_DIR \"$ovpncapath/$caname\" \n"); - fwrite($fd, "setenv KEY_SIZE \"$cakeysize\" \n"); - fwrite($fd, "setenv CA_EXPIRE \"$caexpire\" \n"); - fwrite($fd, "setenv KEY_EXPIRE \"$cakeyexpire\" \n"); - fwrite($fd, "setenv KEY_COUNTRY \"$countrycode\" \n"); - fwrite($fd, "setenv KEY_PROVINCE \"$stateorprovince\" \n"); - fwrite($fd, "setenv KEY_CITY \"$cityname\" \n"); - fwrite($fd, "setenv KEY_ORG \"$orginizationname\" \n"); - fwrite($fd, "setenv KEY_EMAIL \"$email\" \n"); - fwrite($fd, "setenv CA_OK \"$ovpncapath/$caname/finished_ok\" \n"); - fwrite($fd, "\n\n"); - fclose($fd); - - $fd = fopen($ovpncapath . "/RUNME_FIRST", "w"); - fwrite($fd, "cd $ovpncapath \n"); - fwrite($fd, "touch $ovpncapath/$caname/index.txt \n"); - fwrite($fd, "echo \"01\" > $ovpncapath/$caname/serial \n"); - fwrite($fd, "source $ovpncapath/$caname/vars \n"); - //fwrite($fd, "echo \"Creating Shared Key...\" \n"); - //fwrite($fd, "openvpn --genkey --secret $ovpncapath/$caname/shared.key \n"); - fwrite($fd, "echo \"Creating CA...\" \n"); - fwrite($fd, "$easyrsapath/pkitool --batch --initca $ovpncapath/$caname/ca.crt \n"); - fwrite($fd, "echo \"Done!\" \n"); - fclose($fd); - - } else { - $input_errors[] = "You should specify a name."; - } - if (!is_array($config['openvpn']['keys'])) - $config['openvpn']['keys'] = array(); - - $ovpnkeys =& $config['openvpn']['keys']; - if (!is_array($ovpnkeys[$caname])) - $ovpnkeys[$caname] = array(); - -} - - include("head.inc"); -?> - - <body link="#0000CC" vlink="#0000CC" alink="#0000CC"> - - <script type="text/javascript"> - function f() { - /* do nothing */ - } - function edit_mode() { - document.iform.cakeysize.disabled = true; - document.iform.caexpire.disabled = true; - document.iform.cakeyexpire.disabled = true; - document.iform.countrycode.disabled = true; - document.iform.stateorprovince.disabled = true; - document.iform.cityname.disabled = true; - document.iform.orginizationname.disabled = true; - document.iform.email.disabled = true; - document.iform.descr.disabled = true; - } - </script> - -<?php include("fbegin.inc"); ?> -<?php if ($input_errors) print_input_errors($input_errors); ?> - <form action="vpn_openvpn_certs_create.php" method="post" name="iform" id="iform"> -<?php if ($savemsg) print_info_box($savemsg); ?> - - <table width="100%" border="0" cellpadding="6" cellspacing="0"> - <tr><td colspan="2"> -<?php - $tab_array = array(); - $tab_array[] = array("Server", false, "pkg.php?xml=openvpn.xml"); - $tab_array[] = array("Client", false, "pkg.php?xml=openvpn_cli.xml"); - $tab_array[] = array("Client-specific overrides", false, "pkg.php?xml=openvpn_csc.xml"); - $tab_array[] = array("Certificate Authority", true, "vpn_openvpn_certs.php"); - $tab_array[] = array("Users", false, "vpn_openvpn_users.php"); - display_top_tabs($tab_array); -?> - </td></tr> -<?php - if ($_POST && $caname) { -?> -<tr><td> - <table class="tabcont" width="100%" border="0" cellpadding="6" cellspacing="0"> - <tr> - <td> - <textarea cols="80" rows="35" name="output" id="output" wrap="hard"></textarea> - </td> - </tr> - <tr> - <td> - <a href="vpn_openvpn_certs.php"><inpput name="OK" type="button" value="Return"></a> - </td> - </tr> - </table></td></tr> - </table> -<?php - if(!$input_errors) { - execute_command_return_output("/bin/tcsh $ovpncapath/RUNME_FIRST", "r"); - conf_mount_ro(); - /* vars */ - $ovpnkeys[$caname]['existing'] = "no"; - $ovpnkeys[$caname]['descr'] = $descr; - $ovpnkeys[$caname]['auth_method'] = "pki"; - $ovpnkeys[$caname]['keysize'] = $cakeysize; - $ovpnkeys[$caname]['keyexpire'] = $cakeyexpire; - $ovpnkeys[$caname]['caexpire'] = $caexpire; - $ovpnkeys[$caname]['keycountry'] = $countrycode; - $ovpnkeys[$caname]['keyprovince'] = $stateorprovince; - $ovpnkeys[$caname]['keycity'] = $cityname; - $ovpnkeys[$caname]['keyorg'] = $orginizationname; - $ovpnkeys[$caname]['keyemail'] = $email; - /* ciphers */ - $ovpnkeys[$caname]['ca.key'] = file_get_contents("$ovpncapath/$caname/ca.key"); - $ovpnkeys[$caname]['ca.crt'] = file_get_contents("$ovpncapath/$caname/ca.crt"); - - /* save it */ - write_config(); - } -} else { ?> -<tr><td> - <table class="tabcont" width="100%" border="0" cellpadding="0" cellspacing="0"> - <tr> - <td width="35%" class="vncell"><B>Certificate Name</td> - <td width="78%" class="vtable"> - <input name="descr" class="formfld" value="<?=$descr?>"> - </span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>Certificate Key Size</td> - <td width="78%" class="vtable"> - <select name="cakeysize" > -<?php - $strength = array("512", "1024", "2048"); - foreach ($strength as $key) { - echo "<option value=\"{$key}\" "; - if ($cakeysize == intval($key)) - echo " selected=\"true\" "; - echo ">{$key}</option>"; - } -?> - </select> - <br/><span>Higher you set this value the slower TLS negotiation and DH key creation performance gets.</span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>Certificate Expire</td> - <td width="78%" class="vtable"> - <input name="caexpire" class="formfld" value="<?=$caexpire?>"/> - <br/><span>In how many days should the root CA key expire?</span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>Certificate Key Expire</td> - <td width="78%" class="vtable"> - <input name="cakeyexpire" class="formfld" value="<?=$cakeyexpire?>"> - <br/><span>In how many days should certificates expire?</span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>Country Code (2 Letters)</td> - <td width="78%" class="vtable"> - <input size="2" maxlength="2" name="countrycode" class="formfld" value="<?=$countrycode?>"> - <br/></span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>State or Province name</td> - <td width="78%" class="vtable"> - <input name="stateorprovince" class="formfld" value="<?=$stateorprovince?>"> - <br/></span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>City name</td> - <td width="78%" class="vtable"> - <input name="cityname" class="formfld" value="<?=$cityname?>"> - <br/></span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>Organization name</td> - <td width="78%" class="vtable"> - <input name="orginizationname" class="formfld" value="<?=$orginizationname?>"> - <br/></span></td> - </tr> - <tr> - <td width="35%" class="vncell"><B>E-Mail address</td> - <td width="78%" class="vtable"> - <input name="email" class="formfld" value="<?=$email?>"> - <br/></span></td> - </tr> - <tr> - <td width="35%" > </td> - <td width="78%"> - <input name="Submit" type="submit" class="formbtn" value="Save"> - <a href="vpn_openvpn_certs.php?reset=<?=$caname;?>"><input name="Cancel" type="button" class="formbtn" value="Cancel"></a> - </td> - </tr> - </table> - </td></tr> - </table> - <?php - if($edit_mode) { - echo "<script language='javascript'>\n"; - echo "edit_mode();\n"; - echo "</script>\n"; - } - ?> - <?php include("fend.inc"); ?> - </body> - </html> -<? } ?> |
