pfSense

/****f* certs/cert_get_lifetime

 * NAME

 *   cert_get_lifetime - Returns the number of days the certificate is valid

 * INPUTS

 *   $untilexpire: Boolean

 *     true: The number of days returned is from now until the certificate expiration.

 *     false (default): The number of days returned is the total lifetime of the certificate.

 * RESULT

 *   Integer number of days in the certificate total or remaining lifetime

 ******/

function cert_get_lifetime($cert, $untilexpire = false) {

	/* If the certificate is not valid, bail. */

	/* Read certificate details */

	/* Determine which start time to use (now, or cert start) */

	$fromtime = ($untilexpire) ? time() : $cert_details['validFrom_time_t'];

	/* Calculate and return the requested duration, converting from seconds to days. */

	return (int) round(($cert_details['validTo_time_t'] - $fromtime) / 86400);

}

/****f* certs/cert_analyze_lifetime

 * NAME

 *   cert_analyze_lifetime - Analyze a certificate lifetime for expiration notices

 * INPUTS

 *   $expiredays: Number of days until the certificate expires (See cert_get_lifetime())

 * RESULT

 *   An array of two entries:

 *   0/$lrclass: A bootstrap name for use with classes like text-<x>

 *   1/$expstring: A text analysis describing the expiration timeframe.

 ******/

function cert_analyze_lifetime($expiredays) {

	/* Number of days at which to warn of expiration.

	 * Might move to to global or a user setting. */

	$warning_days = 30;

	if ($expiredays > $warning_days) {

		/* Not expiring soon */

		$lrclass = 'normal';

		$expstring = gettext("%d %s until expiration");

	} elseif ($expiredays > 0) {

		/* Still valid but expiring soon */

		$lrclass = 'warning';

		$expstring = gettext("Expiring soon, in %d %s");

	} else {

		/* Certificate has expired */

		$lrclass = 'danger';

		$expstring = gettext("Expired %d %s ago");

	}

	$days = (abs($expiredays) == 1) ? gettext('day') : gettext('days');

	$expstring = sprintf($expstring, abs($expiredays), $days);

	return array($lrclass, $expstring);

}

/****f* certs/cert_print_dates

 * NAME

 *   cert_print_dates - Print the start and end timestamps for the given certificate

 * INPUTS

 *   $cert: CA or Cert entry for which the dates will be printed

 * RESULT

 *   Returns null if the passed entry is invalid

 *   Otherwise, outputs the dates to the user with formatting.

 ******/

function cert_print_dates($cert) {

	/* If the certificate is not valid, bail. */

	if (!is_array($cert) || empty($cert['crt'])) {

		return null;

	}

	/* Attempt to extract the dates from the certificate */

	list($startdate, $enddate) = cert_get_dates($cert['crt']);

	/* If either of the timestamps are empty, then do not print anything.

	 * The entry may not be valid or it may just be missing date information */

	if (empty($startdate) || empty($enddate)) {

		return null;

	}

	/* Get the expiration days */

	$expiredays = cert_get_lifetime($cert, true);

	/* Analyze the lifetime value */

	list($lrclass, $expstring) = cert_analyze_lifetime($expiredays);

	/* Output the dates, with a tooltip showing days until expiration, and

	 * a visual indication of warning/expired status. */

	?>

	<br />

	<small>

	<?=gettext("Valid From")?>: <b><?=$startdate ?></b><br />

	<?=gettext("Valid Until")?>:

	<span class="text-<?=$lrclass?>" data-toggle="tooltip" data-placement="bottom" title="<?= $expstring ?>">

	<b><?=$enddate ?></b>

	</span>

	</small>

	<?php

/****f* certs/cert_print_infoblock

 * NAME

 *   cert_print_infoblock - Print an information block containing certificate details

 * INPUTS

 *   $cert: CA or Cert entry for which the information will be printed

 * RESULT

 *   Returns null if the passed entry is invalid

 *   Otherwise, outputs information to the user with formatting.

 ******/

	/* If the certificate is not valid, bail. */

	/* Variable to hold the formatted information */

	/* Serial number */

	/* Digest type */

	/* Subject Alternative Name (SAN) list */

	/* Key usage */

	/* Extended key usage */

	/* OCSP / Must Staple */

	/* Private key information */

		/* Key type (RSA or EC) */

			/* RSA Key size */

			/* Elliptic curve (EC) key curve name */

	/* Distinguished name (DN) */

	/* Hash value */

	/* Subject Key Identifier (SKID) */

	/* Authority Key Identifier (AKID) */

	/* Total Lifetime (days from cert start to end) */

	$lifetime = cert_get_lifetime($cert);

	$certextinfo .= '<b>' . gettext("Total Lifetime: ") . '</b> ';

	$certextinfo .= sprintf("%d %s", $lifetime, (abs($lifetime) == 1) ? gettext('day') : gettext('days'));

	/* Lifetime before certificate expires (days from now to end) */

	$expiredays = cert_get_lifetime($cert, true);

	list($lrclass, $expstring) = cert_analyze_lifetime($expiredays);

	$certextinfo .= '<b>' . gettext("Lifetime Remaining: ") . '</b> ';

	$certextinfo .= "<span class=\"text-{$lrclass}\">{$expstring}</span>";

	$certextinfo .= '<br/>';

	/* Output the infoblock */

						<?php cert_print_dates($ca);?>

						<?php cert_print_dates($cert);?>