-
Notifications
You must be signed in to change notification settings - Fork 271
/
testssl.php
162 lines (132 loc) · 7.41 KB
/
testssl.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
<?php
/**
* This diagnostic page helps you to check openssl setup and to generate a pair of keys.
* Please note that the configuration is not exposed by this page and that the pair of keys
* is calculated each time the page is reloaded.
* @copyright Copyright (c) 2014-2023 Benjamin BALET
* @license http://opensource.org/licenses/AGPL-3.0 AGPL-3.0
* @link https://github.com/bbalet/jorani
* @since 0.4.3
*/
define('BASEPATH', '.'); //Make this script works with nginx
define('KEY_SIZE', 1024); //Change the RSA key size
//You can define additionnal constants (please read phpseclib doc), for example:
//CRYPT_RSA_MODE to 1 if you want to test the speed of Internal mode (without OpenSSL)
//CRYPT_RSA_EXPONENT to 65537
//CRYPT_RSA_SMALLEST_PRIME to 64 and multi-prime RSA is used
?>
<html>
<head>
<title>Jorani OpenSSL Configuration</title>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<link rel="icon" type="image/x-icon" href="favicon.ico" sizes="32x32">
<link rel="stylesheet" href="assets/dist/requirements.css">
<script type="text/javascript" src="assets/dist/requirements.js"></script>
</head>
<body>
<div class="container">
<ul class="nav nav-pills">
<li class="nav-item"><a class="nav-link" href="home" title="login to Jorani"><i class="mdi mdi-home nolink"></i></a></li>
<li class="nav-item"><a class="nav-link" href="requirements.php">Requirements</a></li>
<li class="nav-item"><a class="nav-link" href="testmail.php">Email</a></li>
<li class="nav-item"><a class="nav-link" href="testldap.php">LDAP</a></li>
<li class="nav-item"><a class="nav-link active" href="#">SSL</a></li>
<li class="nav-item"><a class="nav-link" href="testoauth2.php">OAuth2</a></li>
<li class="nav-item"><a class="nav-link" href="testapi.php">API HTTP</a></li>
</ul>
<h1>Test of your OpenSSL setup</h1>
<p>This page will help you to check your OpenSSL setup and to generate a <a href="#pair">private and public key pair</a>.</p>
<p>The public and private keys are generated on the fly each time the page is loaded.</p>
<h2>PHP Security library</h2>
<table class="table table-bordered table-hover table-condensed">
<thead class="thead-dark">
<tr>
<th>Requirement</th>
<th>Value / Description</th>
</tr>
</thead>
<tbody>
<?php
$pathLibFile = realpath(join(DIRECTORY_SEPARATOR, array('vendor', 'autoload.php')));
include $pathLibFile;
$cnfFile = realpath(join(DIRECTORY_SEPARATOR, array('application', 'third_party', 'phpseclib', 'phpseclib', 'openssl.cnf')));
$privateKeyFile = realpath(join(DIRECTORY_SEPARATOR, array('assets', 'keys', 'private.pem')));
$publicKeyFile = realpath(join(DIRECTORY_SEPARATOR, array('assets', 'keys', 'public.pem')));
if (file_exists($privateKeyFile)) $privateKey=file_get_contents($privateKeyFile); else $privateKey = "";
if (file_exists($publicKeyFile)) $publicKey=file_get_contents($publicKeyFile); else $publicKey = "";
ob_start();
@phpinfo();
$content = ob_get_contents();
ob_end_clean();
preg_match_all('#OpenSSL (Header|Library) Version(.*)#im', $content, $matches);
$versions = array();
if (!empty($matches[1])) {
$len = count($matches[1]);
for ($i = 0; $i < $len; $i++) {
$fullVersion = trim(str_replace('=>', '', strip_tags($matches[2][$i])));
// Remove letter part in OpenSSL version
if (!preg_match('/(\d+\.\d+\.\d+)/i', $fullVersion, $m)) {
$versions[$matches[1][$i]] = $fullVersion;
} else {
$versions[$matches[1][$i]] = $m[0];
}
}
}
echo "<tr><td>PHP_VERSION</td><td>" . (version_compare(PHP_VERSION, '4.2.0', '>=')? '>=4.2.0' : '<4.2.0') . '</td></tr>';
echo "<tr><td>openssl</td><td>" . ((extension_loaded('openssl'))? 'extension loaded' : 'extension not loaded') . '</td></tr>';
echo "<tr><td>openssl_pkey_get_details</td><td>" . ((function_exists('openssl_pkey_get_details'))? 'exists' : 'doesn\'t exist') . '</td></tr>';
echo "<tr><td>Private key</td><td>" . (($privateKey!='')? 'Found' : 'Not found') . '</td></tr>';
echo "<tr><td>Public key</td><td>" . (($publicKey!='')? 'Found' : 'Not found') . '</td></tr>';
echo "<tr><td>OpenSSL Library</td><td>" . ((isset($versions['Library']))? $versions['Library'] : 'Not found') . '</td></tr>';
echo "<tr><td>OpenSSL Header</td><td>" . ((isset($versions['Header']))? $versions['Header'] : 'Not found') . '</td></tr>';
$rsa = new \phpseclib\Crypt\RSA();
echo "<tr><td>CRYPT_RSA_MODE</td><td>" . ((CRYPT_RSA_MODE==1)? 'MODE_INTERNAL' : 'MODE_OPENSSL') . '</td></tr>';
$rsa->setEncryptionMode(phpseclib\Crypt\RSA::ENCRYPTION_OAEP);
$plaintext = 'Jorani is the best open source Leave Management System';
$rsa->loadKey($publicKey);
$ciphertext = $rsa->encrypt($plaintext);
$time_start = microtime(true);
$rsa->loadKey($privateKey, phpseclib\Crypt\RSA::PRIVATE_FORMAT_PKCS1);
echo "<tr><td>Decrypted message</td><td>" . $rsa->decrypt($ciphertext) . '</td></tr>';
$time_end = microtime(true);
$time = $time_end - $time_start;
echo "<tr><td>Decryption speed (fallback)</td><td>" . $time . '</td></tr>';
if (function_exists('openssl_pkey_get_private')) {
$time_start = microtime(true);
$key = openssl_pkey_get_private($privateKey);
openssl_private_decrypt($ciphertext, $message, $key, OPENSSL_PKCS1_OAEP_PADDING);
echo "<tr><td>Decrypted message</td><td>" . $message . '</td></tr>';
$time_end = microtime(true);
$time = $time_end - $time_start;
echo "<tr><td>Decryption speed (native)</td><td>" . $time . '</td></tr>';
}
//Generate public and private keys for a single usage
extract($rsa->createKey(KEY_SIZE));
?>
</tbody>
</table>
<h2 id="pair">Private and public key pair</h2>
<p>This section will help you to create <code>assets/keys/private.pem</code> and <code>assets/keys/public.pem</code> files.
Beware that it is a pair of keys that must be set together (i.e. you must update the both files at the same time with the corresponding content).</p>
<h3>Private Key</h3>
<p>You can copy/paste the content below into <code>assets/keys/private.pem</code>.</p>
<textarea class="form-control" id="privateKey" rows="15" style="width:100%;"><?php echo $privatekey; ?></textarea>
<button class="btn btn-light btn-clipboard" data-clipboard-action="copy" data-clipboard-target="#privateKey" data-toggle="tooltip" data-placement="right" title="copied">
Copy to clipboard
</button>
<h3>Public Key</h3>
<p>You can copy/paste the content below into <code>assets/keys/public.pem</code>.</p>
<textarea class="form-control" id="publicKey" rows="6" style="width:100%;"><?php echo $publickey; ?></textarea>
<button class="btn btn-light btn-clipboard" data-clipboard-action="copy" data-clipboard-target="#publicKey" data-toggle="tooltip" data-placement="right" title="copied">
Copy to clipboard
</button>
<br /><br /><br />
</div>
<script type="text/javascript">
$(function () {
var client = new ClipboardJS(".btn-clipboard");
});
</script>
</body>
</html>