<?php
       
//------------------------------------------------------------------------------
//  Licensed Materials - Property of IBM
//  (c) Copyright IBM Corporation 2001,2002 All Rights Reserved.
//  US Government Users Restricted Rights - Use, duplication or disclosure 
//  restricted by GSA ADP Schedule Contract with IBM Corp.
//------------------------------------------------------------------------------
//  Import Communication Certificates
//  
//  Filename:  ml_set_certificate_import.htm
//
//  This file imports communication certificates.
//
//  When a POST is received, POST data is retrieved and the appropriate
//  extension is called.  Return information is sent via a POST (form_out). 
//
//  Input:  POST data
//      url             original request page
//      rootCert        Root certificate file
//      clientCert      Client certificate file
//      clientPassword  Password for client certificate file
//
//  Ouput:  POST ('form_out')
//
//      url             original request page
//      errorCode       result of operation
//      returnMessage   text information about the operation results 
//      
//  Change History:
//      
//  Date        Defect  Changed By  Description of Change
//  ----        ------  ----------  ---------------------
//  06/29/2015          dtorske     File Created
//
//------------------------------------------------------------------------------  
   include('common_admin_inc.htm');

   include('main_inc.htm');


   //initialize variables
   $errorCode     = 0;
   $returnMessage = " ";
   $url           = " " ;
   

    if ($_SERVER['REQUEST_METHOD'] == "POST")
    {

       $url              = $_REQUEST['url'];
       $clientPassword   = $_REQUEST['clientPassword'];  

       error_log("url: ".print_r($url,true));
       error_log("files: ".print_r($_FILES, TRUE));

       // Test the validity of the files
       $Root =  "/tmp/".$_FILES['rootCert']['name'];
       $filename = $_FILES['clientCert']['tmp_name'];
       $password = $_POST['clientPassword'];


       $tmp_name= $_FILES['rootCert']['tmp_name'];
       $fileName= "/tmp/".$_FILES['rootCert']['name'];

       error_log("The file has been uploaded. We are now going to move it to ". $fileName );
       if(!move_uploaded_file($tmp_name, $fileName))
       {
             error_log("Failed to moved the uploaded file ". $fileName);
             $returnMessage="Root certificate file failed to upload.";
       }

       $tmp_name= $_FILES['clientCert']['tmp_name'];
       $fileName= "/tmp/".$_FILES['clientCert']['name'];

       error_log("The file has been uploaded. We are now going to move it to ". $fileName );
       if(!move_uploaded_file($tmp_name, $fileName))
       {
             error_log("Failed to moved the uploaded file ". $fileName);
             $returnMessage="Client certificate file failed to upload.";
       }

       // Client cert Filetype for KMIP is 9
       $fileType = 9;
       error_log("****************** Running akm_validate_cert with $Root, $fileName, $fileType, $password **********************\n");
       $Ret = @akm_validate_cert($user, $Root, $fileName, $fileType, $password );
       error_log("akm_validate_cert for the client returned a ". print_r($Ret, true) );

       if( $Ret->resCode == 0 || $Ret->resCode == -2147483648 /* Result::Succeeded */)
       {
           // The resCode was Unknow or Succedded so lets look at the other codes
           // Set the reCode to succes so it's not used below.
           $Ret->resCode = -2147483648;
           if( $Ret->caCertRes == 1 && $Ret->certRes == 1 )
           {
               // The files were so bad we did not even get to the validate.
               // So set both files as corrupted.
               error_log("Root certificate ". $_FILES['rootCert']['name'] .
                                    " and Client certificate ".$_FILES['clientCert']['name'] ."");
               $returnMessage="Root and client certificate failed to validate.";
            }
            else if( $Ret->caCertRes != -2147483648 ) // Result::Succeeded)
            {
               error_log("Root certificate: ".$_FILES['rootCert']['name']);
               $returnMessage="Root certificate failed to validate.";
            }
            else if($Ret->certRes != -2147483648 ) // Result::Succeeded)
            {
               error_log("Client certificate: ".$_FILES['clientCert']['name']);
               $returnMessage="Client certificate failed to validate.";
            }
            else
            {
               error_log("****************** Running akm_install_cert with $Root, 8, null password **********************\n");
               $iRet = akm_install_cert($user, $Root, 8, "" );
               if( $iRet == 0 )
               {
                   error_log("Certificate imported.");
                   error_log("****************** Running akm_install_cert with $fileName, $fileType, $password **********************\n");
                   $iRet = akm_install_cert($user, $fileName, $fileType, $password );
                   if( $iRet == 0 )
                   {
                       error_log("Client Certificate imported.");
                       $returnMessage = "Communication certificates have been successfully imported.";
                   }
                   else
                   {
                       error_log("Problem Importing Client Certificate");
                       $returnMessage="Problem Importing Client Certificate";
                   }
               }
               else
               {
                   error_log("Problem Importing Root Certificate");
                   $returnMessage="Problem Importing Root Certificate";
               }
            }
        }
              
   }

?>

<!doctype html >
  <html dir="LTR" lang="en-us">
  <head>
    <title>Communication certificate import</title>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
    <link href="css/3576.css" rel="stylesheet" type="text/css">

    <script type="text/javascript">

    function doWork()
    {
       
       // doWork is executed after all the php has completed and the work
       // (call to the extension) has been done, so submit the outgoing form
       // to the url passed in to this page (this is the return url)

       window.parent.stopTimer('<?=$returnMessage;?>','<?=$url;?>');
       document.form_out.submit(); 

       return;

    }
    </script>

    
  </head>                       
    
    <body dir="LTR" onload="javascript:doWork();" id="main">
    
     
      <form dir="ltr" id="form_out" method="POST" name="form_out" action="main_complete.htm" target="pretitlebar">
        <input id="errorCode"     name="errorCode"     type="hidden" value="<?=$errorCode;?>">
        <input id="url"           name="url"           type="hidden" value="<?=$url;?>">
        <input id="returnMessage" name="returnMessage" type="hidden" value="<?=$returnMessage;?>">
      </form>  

    </body>

</html>