|
|
|
|
|
|
$ca):
$name = htmlspecialchars($ca['descr']);
$subj = cert_get_subject($ca['crt']);
$issuer = cert_get_issuer($ca['crt']);
list($startdate, $enddate) = cert_get_dates($ca['crt']);
if($subj == $issuer)
$issuer_name = "" . gettext("self-signed") . "";
else
$issuer_name = "" . gettext("external") . "";
$subj = htmlspecialchars($subj);
$issuer = htmlspecialchars($issuer);
$certcount = 0;
$issuer_ca = lookup_ca($ca['caref']);
if ($issuer_ca)
$issuer_name = $issuer_ca['descr'];
// TODO : Need gray certificate icon
$internal = (!!$ca['prv']);
foreach ($a_cert as $cert)
if ($cert['caref'] == $ca['refid'])
$certcount++;
foreach ($a_ca as $cert)
if ($cert['caref'] == $ca['refid'])
$certcount++;
?>
|
|
|
|
|
|
setAction('system_camanager.php?act=edit');
if (isset($id) && $a_ca[$id])
{
$form->addGlobal(new Form_Input(
'id',
null,
'hidden',
$id
));
}
if ($act == "edit")
{
$form->addGlobal(new Form_Input(
'refid',
null,
'hidden',
$pconfig['refid']
));
}
$section = new Form_Section('Create / edit CA');
$section->addInput(new Form_Input(
'descr',
'Descriptive name',
'text',
$pconfig['descr']
));
if (!isset($id) || $act == "edit")
{
$section->addInput(new Form_Select(
'method',
'Method',
$pconfig['method'],
$ca_methods
))->toggles(null);
}
$form->add($section);
$section = new Form_Section('Existing Certificate Authority');
$section->addClass('toggle-existing collapse');
$section->addInput(new Form_Textarea(
'cert',
'Certificate data',
$pconfig['cert']
))->setHelp('Paste a certificate in X.509 PEM format here.');
$section->addInput(new Form_Textarea(
'key',
'Certificate Private Key (optional)',
$pconfig['key']
))->setHelp('Paste the private key for the above certificate here. This is '.
'optional in most cases, but required if you need to generate a '.
'Certificate Revocation List (CRL).');
$section->addInput(new Form_Input(
'serial',
'Serial for next certificate',
'number',
$pconfig['serial']
))->setHelp('Enter a decimal number to be used as the serial number for the next '.
'certificate to be created using this CA.');
$form->add($section);
$section = new Form_Section('Internal Certificate Authority');
$section->addClass('toggle-internal', 'toggle-intermediate', 'collapse');
$allCas = array();
foreach ($a_ca as $ca)
{
if (!$ca['prv'])
continue;
$allCas[ $ca['refid'] ] = $ca['descr'];
}
$group = new Form_Group('Signing Certificate Authority');
$group->addClass('toggle-intermediate');
$group->add(new Form_Select(
'caref',
null,
$pconfig['caref'],
$allCas
));
$section->add($group);
$section->addInput(new Form_Select(
'keylen',
'Key length (bits)',
$pconfig['keylen'],
$ca_keylens
));
$section->addInput(new Form_Select(
'digest_alg',
'Digest Algorithm',
$pconfig['digest_alg'],
$openssl_digest_algs
))->setHelp('NOTE: It is recommended to use an algorithm stronger than SHA1 '.
'when possible.');
$section->addInput(new Form_Input(
'lifetime',
'Lifetime (days)',
'number',
$pconfig['lifetime']
));
$section->addInput(new Form_Select(
'dn_country',
'Country Code',
$pconfig['dn_country'],
$dn_cc
));
$section->addInput(new Form_Input(
'dn_state',
'State or Province',
'text',
$pconfig['dn_state'],
['placeholder' => 'e.g. Texas']
));
$section->addInput(new Form_Input(
'dn_city',
'City',
'text',
$pconfig['dn_city'],
['placeholder' => 'e.g. Austin']
));
$section->addInput(new Form_Input(
'dn_organization',
'Organization',
'text',
$pconfig['dn_organization'],
['placeholder' => 'e.g. My Company Inc.']
));
$section->addInput(new Form_Input(
'dn_email',
'Email Address',
'email',
$pconfig['dn_email'],
['placeholder' => 'e.g. admin@mycompany.com']
));
$section->addInput(new Form_Input(
'dn_commonname',
'Common Name',
'text',
$pconfig['dn_commonname'],
['placeholder' => 'e.g. internal-ca']
));
$form->add($section);
print $form;
include('foot.inc');