123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106 |
- <?php
- /**
- * @copyright Copyright (c) 2016, ownCloud, Inc.
- *
- * @author Lukas Reschke <lukas@statuscode.ch>
- * @author Victor Dubiniuk <dubiniuk@owncloud.com>
- *
- * @license AGPL-3.0
- *
- * This code is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License, version 3,
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License, version 3,
- * along with this program. If not, see <http://www.gnu.org/licenses/>
- *
- */
- namespace OC\Core\Command\Integrity;
- use OC\IntegrityCheck\Checker;
- use OC\IntegrityCheck\Helpers\FileAccessHelper;
- use phpseclib\Crypt\RSA;
- use phpseclib\File\X509;
- use Symfony\Component\Console\Command\Command;
- use Symfony\Component\Console\Input\InputInterface;
- use Symfony\Component\Console\Input\InputOption;
- use Symfony\Component\Console\Output\OutputInterface;
- /**
- * Class SignCore
- *
- * @package OC\Core\Command\Integrity
- */
- class SignCore extends Command {
- /** @var Checker */
- private $checker;
- /** @var FileAccessHelper */
- private $fileAccessHelper;
- /**
- * @param Checker $checker
- * @param FileAccessHelper $fileAccessHelper
- */
- public function __construct(Checker $checker,
- FileAccessHelper $fileAccessHelper) {
- parent::__construct(null);
- $this->checker = $checker;
- $this->fileAccessHelper = $fileAccessHelper;
- }
- protected function configure() {
- $this
- ->setName('integrity:sign-core')
- ->setDescription('Sign core using a private key.')
- ->addOption('privateKey', null, InputOption::VALUE_REQUIRED, 'Path to private key to use for signing')
- ->addOption('certificate', null, InputOption::VALUE_REQUIRED, 'Path to certificate to use for signing')
- ->addOption('path', null, InputOption::VALUE_REQUIRED, 'Path of core to sign');
- }
- /**
- * {@inheritdoc }
- */
- protected function execute(InputInterface $input, OutputInterface $output) {
- $privateKeyPath = $input->getOption('privateKey');
- $keyBundlePath = $input->getOption('certificate');
- $path = $input->getOption('path');
- if(is_null($privateKeyPath) || is_null($keyBundlePath) || is_null($path)) {
- $output->writeln('--privateKey, --certificate and --path are required.');
- return null;
- }
- $privateKey = $this->fileAccessHelper->file_get_contents($privateKeyPath);
- $keyBundle = $this->fileAccessHelper->file_get_contents($keyBundlePath);
- if($privateKey === false) {
- $output->writeln(sprintf('Private key "%s" does not exists.', $privateKeyPath));
- return null;
- }
- if($keyBundle === false) {
- $output->writeln(sprintf('Certificate "%s" does not exists.', $keyBundlePath));
- return null;
- }
- $rsa = new RSA();
- $rsa->loadKey($privateKey);
- $x509 = new X509();
- $x509->loadX509($keyBundle);
- $x509->setPrivateKey($rsa);
- try {
- $this->checker->writeCoreSignature($x509, $rsa, $path);
- $output->writeln('Successfully signed "core"');
- } catch (\Exception $e){
- $output->writeln('Error: ' . $e->getMessage());
- return 1;
- }
- return 0;
- }
- }
|