lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-14 16:44:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Confirm KU/EKU for server certs (#2463)

Browse Source
This commit is contained in:
Justin Coffman 2018-06-15 02:27:45 -04:00 committed by Ad Schellevis
parent b0a4a27a1f
commit ec9b710b68
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/etc/inc/certs.inc
View File

@ -414,7 +414,13 @@ function cert_get_purpose($str_crt, $decode = true)
$crt_details = openssl_x509_parse($str_crt);
$purpose = array();
$purpose['ca'] = (stristr($crt_details['extensions']['basicConstraints'], 'CA:TRUE') === false) ? 'No': 'Yes';
if (isset($crt_details['extensions']['extendedKeyUsage']) && strstr($crt_details['extensions']['extendedKeyUsage'], "TLS Web Server Authentication") !== false) {
if (
isset($crt_details['extensions']['extendedKeyUsage'])
&& strstr($crt_details['extensions']['extendedKeyUsage'], "TLS Web Server Authentication") !== false
&& isset($crt_details['extensions']['keyUsage'])
&& strpos($crt_details['extensions']['keyUsage'], "Digital Signature") !== false
&& strpos($crt_details['extensions']['keyUsage'], "Key Encipherment") !== false
)
$purpose['server'] = 'Yes';
} else {
$purpose['server'] = 'No';