setAction('system_camanager.php?act=edit');
if (isset($id) && $thisca) {
$form->addGlobal(new Form_Input(
'id',
null,
'hidden',
$id
));
}
if ($act == "edit") {
$form->addGlobal(new Form_Input(
'refid',
null,
'hidden',
$pconfig['refid']
));
}
$section = new Form_Section('Create / Edit CA');
$section->addInput(new Form_Input(
'descr',
'*Descriptive name',
'text',
$pconfig['descr']
))->setHelp('The name of this entry as displayed in the GUI for reference.%s' .
'This name can contain spaces but it cannot contain any of the ' .
'following characters: %s', ' ', "?, >, <, &, /, \, \", '");
if (!isset($id) || $act == "edit") {
$section->addInput(new Form_Select(
'method',
'*Method',
$pconfig['method'],
$ca_methods
))->toggles();
}
$section->addInput(new Form_Checkbox(
'trust',
'Trust Store',
'Add this Certificate Authority to the Operating System Trust Store',
$pconfig['trust']
))->setHelp('When enabled, the contents of the CA will be added to the trust ' .
'store so that they will be trusted by the operating system.');
$section->addInput(new Form_Checkbox(
'randomserial',
'Randomize Serial',
'Use random serial numbers when signing certificates',
$pconfig['randomserial']
))->setHelp('When enabled, if this CA is capable of signing certificates then ' .
'serial numbers for certificates signed by this CA will be ' .
'automatically randomized and checked for uniqueness instead of ' .
'using the sequential value from Next Certificate Serial.');
$form->add($section);
$section = new Form_Section('Existing Certificate Authority');
$section->addClass('toggle-existing collapse');
$section->addInput(new Form_Textarea(
'cert',
'*Certificate data',
$pconfig['cert']
))->setHelp('Paste a certificate in X.509 PEM format here.');
$section->addInput(new Form_Textarea(
'key',
'Certificate Private Key (optional)',
$pconfig['key']
))->setHelp('Paste the private key for the above certificate here. This is '.
'optional in most cases, but is required when generating a '.
'Certificate Revocation List (CRL).');
$section->addInput(new Form_Input(
'serial',
'Next Certificate Serial',
'number',
$pconfig['serial']
))->setHelp('Enter a decimal number to be used as a sequential serial number for ' .
'the next certificate to be signed by this CA. This value is ignored ' .
'when Randomize Serial is checked.');
$form->add($section);
$section = new Form_Section('Internal Certificate Authority');
$section->addClass('toggle-internal', 'toggle-intermediate', 'collapse');
$allCas = array();
foreach ($a_ca as $ca) {
if (!$ca['prv']) {
continue;
}
$allCas[ $ca['refid'] ] = $ca['descr'];
}
$group = new Form_Group('*Signing Certificate Authority');
$group->addClass('toggle-intermediate', 'collapse');
$group->add(new Form_Select(
'caref',
null,
$pconfig['caref'],
$allCas
));
$section->add($group);
$section->addInput(new Form_Select(
'keytype',
'*Key type',
$pconfig['keytype'],
array_combine($ca_keytypes, $ca_keytypes)
));
$group = new Form_Group($i == 0 ? '*Key length':'');
$group->addClass('rsakeys');
$group->add(new Form_Select(
'keylen',
null,
$pconfig['keylen'],
array_combine($ca_keylens, $ca_keylens)
))->setHelp('The length to use when generating a new RSA key, in bits. %1$s' .
'The Key Length should not be lower than 2048 or some platforms ' .
'may consider the certificate invalid.', ' ');
$section->add($group);
$group = new Form_Group($i == 0 ? '*Elliptic Curve Name':'');
$group->addClass('ecnames');
$group->add(new Form_Select(
'ecname',
null,
$pconfig['ecname'],
$openssl_ecnames
))->setHelp('Curves may not be compatible with all uses. Known compatible curve uses are denoted in brackets.');
$section->add($group);
$section->addInput(new Form_Select(
'digest_alg',
'*Digest Algorithm',
$pconfig['digest_alg'],
array_combine($openssl_digest_algs, $openssl_digest_algs)
))->setHelp('The digest method used when the CA is signed. %1$s' .
'The best practice is to use SHA256 or higher. '.
'Some services and platforms, such as the GUI web server and OpenVPN, consider weaker digest algorithms invalid.', ' ');
$section->addInput(new Form_Input(
'lifetime',
'*Lifetime (days)',
'number',
$pconfig['lifetime'],
['max' => $max_lifetime]
));
$section->addInput(new Form_Input(
'dn_commonname',
'*Common Name',
'text',
$pconfig['dn_commonname'],
['placeholder' => 'e.g. internal-ca']
));
$section->addInput(new Form_StaticText(
null,
gettext('The following certificate authority subject components are optional and may be left blank.')
));
$section->addInput(new Form_Select(
'dn_country',
'Country Code',
$pconfig['dn_country'],
get_cert_country_codes()
));
$section->addInput(new Form_Input(
'dn_state',
'State or Province',
'text',
$pconfig['dn_state'],
['placeholder' => 'e.g. Texas']
));
$section->addInput(new Form_Input(
'dn_city',
'City',
'text',
$pconfig['dn_city'],
['placeholder' => 'e.g. Austin']
));
$section->addInput(new Form_Input(
'dn_organization',
'Organization',
'text',
$pconfig['dn_organization'],
['placeholder' => 'e.g. My Company Inc']
));
$section->addInput(new Form_Input(
'dn_organizationalunit',
'Organizational Unit',
'text',
$pconfig['dn_organizationalunit'],
['placeholder' => 'e.g. My Department Name (optional)']
));
$form->add($section);
print $form;
$internal_ca_count = 0;
foreach ($a_ca as $ca) {
if ($ca['prv']) {
$internal_ca_count++;
}
}
?>