PhpBackend.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Rsaauth\Backend;

class PhpBackend extends \TYPO3\CMS\Rsaauth\Backend\AbstractBackend {
    public function createNewKeyPair() {
        $keyPair = \TYPO3\CMS\Core\Utility\GeneralUtility::makeInstance('TYPO3\\CMS\\Rsaauth\\Keypair');
        if ($keyPair->isReady()) {
            return $keyPair;
        }

        $privateKey = @openssl_pkey_new();
        if ($privateKey !== FALSE) {
            // Create private key as string
            $privateKeyStr = '';
            openssl_pkey_export($privateKey, $privateKeyStr);
            // Prepare public key information
            $exportedData = '';
            $csr = openssl_csr_new(array(
                'localityName' => 'foo',
                'organizationName' => 'bar',
            ), $privateKey);
            openssl_csr_export($csr, $exportedData, FALSE);
            // Get public key (in fact modulus) and exponent
            $publicKey = $this->extractPublicKeyModulus($exportedData);
            $exponent = $this->extractExponent($exportedData);

            $keyPair->setExponent($exponent);
            $keyPair->setPrivateKey($privateKeyStr);
            $keyPair->setPublicKey($publicKey);
            // Clean up all resources
            openssl_free_key($privateKey);
        } else {
            $keyPair = NULL;
        }

        return $keyPair;
    }

    public function decrypt($privateKey, $data) {
        $result = '';
        if (!@openssl_private_decrypt(base64_decode($data), $result, $privateKey)) {
            $result = NULL;
        }
        return $result;
    }

    public function isAvailable() {
        $result = FALSE;
        if (is_callable('openssl_pkey_new')) {
            // PHP extension has to be configured properly. It
            // can be installed and available but will not work unless
            // properly configured. So we check if it works.
            $testKey = @openssl_pkey_new();
            if (is_resource($testKey)) {
                openssl_free_key($testKey);
                $result = TRUE;
            }
        }
        return $result;
    }

    protected function extractExponent($data) {
        $index = strpos($data, 'Exponent: ');
        // We do not check for '$index === FALSE' because the exponent is
        // always there!
        return (int)substr($data, $index + 10);
    }

    protected function extractPublicKeyModulus($data) {
        $fragment = preg_replace('/.*Modulus.*?\\n(.*)Exponent:.*/ms', '\\1', $data);
        $fragment = preg_replace('/[\\s\\n\\r:]/', '', $fragment);
        $result = trim(strtoupper(substr($fragment, 2)));
        return $result;
    }

}