mirror of https://github.com/jacekkow/uphpCAS

Jacek Kowalski
2015-09-03 501c90e5965ec99cd6de5191652707ae28fc3a75
Extract code that looks for CAfile to findCaFile() method
1 files modified
33 ■■■■■ changed files
uphpCAS.php 33 ●●●●● patch | view | raw | blame | history
uphpCAS.php
@@ -112,6 +112,24 @@
        }
    }
    
    protected function findCaFile() {
        $cafiles = array(
            '/etc/ssl/certs/ca-certificates.crt',
            '/etc/ssl/certs/ca-bundle.crt',
            '/etc/pki/tls/certs/ca-bundle.crt',
        );
        $cafile = NULL;
        foreach($cafiles as $file) {
            if(is_file($file)) {
                $cafile = $file;
                break;
            }
        }
        return $cafile;
    }
    public function verifyTicket($ticket) {
        $context = array(
            'http' => array(
@@ -129,21 +147,8 @@
        );
        
        if(version_compare(PHP_VERSION, '5.6', '<')) {
            $cafiles = array(
                '/etc/ssl/certs/ca-certificates.crt',
                '/etc/ssl/certs/ca-bundle.crt',
                '/etc/pki/tls/certs/ca-bundle.crt',
            );
            $cafile = NULL;
            foreach($cafiles as $file) {
                if(is_file($file)) {
                    $cafile = $file;
                    break;
                }
            }
            $url = parse_url($this->serverUrl);
            $context['ssl']['cafile'] = $cafile;
            $context['ssl']['cafile'] = $this->findCaFile();
            $context['ssl']['ciphers'] = 'ECDH:DH:AES:CAMELLIA:!SSLv2:!aNULL'
                    .':!eNULL:!EXPORT:!DES:!3DES:!MD5:!RC4:!ADH:!PSK:!SRP';
            $context['ssl']['CN_match'] = $url['host'];