2018/Feb/28 -i állapot hozzáadva, mint a módosítások kiindulási állapota

1 files changed, 461 insertions, 0 deletions

diff --git a/mayor-orig/www/include/share/ssl/ssl.php b/mayor-orig/www/include/share/ssl/ssl.php
new file mode 100644
index 00000000..0b6e2e04
--- /dev/null
+++ b/mayor-orig/www/include/share/ssl/ssl.php
@@ -0,0 +1,461 @@
+<?php
+/*
+
+    Küldés:
+
+    Fogadás:
+	skin=rpc
+	    rights.php
+		require_once ssl.php
+		$_POST[senderNodeId] beolvasás
+		$RPC construct...
+		setRemoteNodeId
+		processRequest (sessionKey, request)
+	    *-pre.php
+		getIncomingRequest ($request['func'])
+		prepareReply
+		    _encodeRequest
+		setMyResponse
+	    skin-rpc/base.phtml
+		global $RPC
+		echo $RPC->getResponse()
+
+    Küldés:
+	    __construct
+		getSSLKeyPair
+		_genSessionKey
+	    setRemoteNodeId
+		_setRemotePublicKey
+		    getSslPublicKeyByNodeId
+	    setRemoteHost (HOST, publicKey)
+		_setRemotePublicKey
+	    setRequestTarget (PSF)
+	    sendRequest
+		_prepareRequest
+		_encodeRequest($ADAT)
+		    AES::encrypt !! json, base64 - nincs AES :(
+		    _sessionKeyEncode
+		_curlGet --> response
+		_decodeRequest !! jelenleg csak json...
+		_sessionKeyDecode
+		json_decode - AES::decrypt
+*/
+
+    function getSslKeyPair() {
+	$q = "SELECT * FROM mayorSsl";
+	$r = db_query($q, array('fv'=>'getSslKeyPair','modul'=>'login','result'=>'record'));
+	if ($r=='') {
+		$SSLKeyPair = generateSSLKeyPair();
+		$secret = sha1(mt_rand(100000000000000,999999999999999));
+		$q = "INSERT INTO mayorSsl (privateKey,publicKey,secret) VALUES ('%s','%s','%s')";
+		$values = array($SSLKeyPair['privateKey'],$SSLKeyPair['publicKey'],$secret);
+		$r = db_query($q, array('fv'=>'getSslKeyPair','modul'=>'login', 'values'=>$values));
+		return $SSLKeyPair;
+	} else {
+	    return $r;
+	}
+    }
+
+    function generateSSLKeyPair() {
+        $SSL_KEY_PAIR=openssl_pkey_new();
+        // Get private key
+        openssl_pkey_export($SSL_KEY_PAIR, $privatekey);
+        // Get public key
+        $publickey=openssl_pkey_get_details($SSL_KEY_PAIR);                                                                                                                                                
+        $publickey=$publickey["key"];                                                                                                                                                                                               
+	return array('fv'=>'geneateSslKeyPair','privateKey'=>$privatekey,'publicKey'=>$publickey);                        
+    }
+    function setNodeId($nodeId, $publicKey) {
+	$q = "UPDATE mayorSsl SET nodeId=%u where publicKey='%s'";
+	$v = array($nodeId, $publicKey);
+	return db_query($q, array('debug'=>false,'fv'=>'setNodeId','modul'=>'login', 'values'=>$v));
+    }
+
+    function getSslPublicKey() {
+	$SSLKeyPair = getSslKeyPair();
+	return $SSLKeyPair['publicKey'];
+    }
+
+    function getSslPublicKeyByNodeId($nodeId) {
+	if (is_numeric($nodeId)) {
+	    $q = "SELECT publicKey FROM mayorKeychain WHERE valid=1 AND nodeId='%u'";
+	    $values = array($nodeId);
+	    $result = db_query($q, array('debug'=>false,'fv'=>'getSslPublicKeyByNodeId','modul'=>'login', 'values'=>$values,'result'=>'value'));
+	    if ($result=='') return false;
+	    else return $result;
+	} else {
+	    return false;
+	}
+    }
+
+    function getPublicDataFromLocalKeychain($nodeId) {
+	if (is_numeric($nodeId)) {
+	    // lekérdezés a helyi adatbázisból
+	    $q = "SELECT * FROM mayorKeychain WHERE valid=1 AND nodeId='%u'";
+	    $values = array($nodeId);
+	    $result = db_query($q, array('debug'=>false,'fv'=>'getPublicDataFromLocalKeychain','modul'=>'login', 'values'=>$values,'result'=>'record'));
+	    if ($result=='') return false;
+	    else return $result;
+	} elseif (is_null($nodeId)) {
+	    // Az összes eltárolt node adatának lekérdezése
+	    $q = "SELECT * FROM mayorKeychain WHERE valid=1 ORDER BY nodeTipus DESC, nev";
+	    $result = db_query($q, array('debug'=>false,'fv'=>'getPublicDataFromLocalKeychain','modul'=>'login','result'=>'indexed'));
+	    if ($result=='') return false;
+	    else return $result;	    
+	}
+    }
+
+    function addPublicDataToLocalKeychain($DATA) {
+	// egy új rekord felvétele...
+	$fields = array_keys($DATA);
+	$values = array_values($DATA);
+	$q = "INSERT INTO mayorKeychain (".implode(',', array_fill(0, count($fields), "%s")).") VALUES (".implode(',', array_fill(0, count($values), "'%s'")).")";
+	$v = array_merge($fields, $values);
+	$r = db_query($q, array('debug'=>false,'func'=>'addPublicDataToLocalKeychain','modul'=>'login','values'=>$v,'result'=>'insert'));
+	return $r;
+    }
+    function removeNodeFromLocalKeychain($nodeId) {
+	$q = "DELETE FROM mayorKeychain WHERE nodeId=%u";
+	$v = array($nodeId);
+	$r = db_query($q, array('debug'=>false,'func'=>'removeNodeFromLocalKeychain','modul'=>'login','values'=>$v));
+	return $r;	
+    }
+    function sendPublicRequest($data) {
+	if (defined('_DEVEL') && _DEVEL===true) $host = 'localhost';
+	else $host = 'www.mayor.hu';
+	$url = "https://$host/index.php?page=portal&sub=regisztracio&f=regisztracio&skin=ajax";
+	$salt_name='MS_'.sha1('portal_regisztracio_regisztracio');
+            $ch = curl_init();
+            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); // a választ feldolgozzuk
+            curl_setopt($ch, CURLOPT_URL, $url);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYSTATUS, false);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); // a helyi gépen nekem ez kellett :(
+            curl_setopt($ch, CURLOPT_HEADER, 0);
+//          curl_setopt($ch, CURLOPT_TIMEOUT,60);
+            curl_setopt($ch, CURLOPT_USERAGENT, "MaYoR-registration (php; cURL)");
+            curl_setopt($ch, CURLOPT_VERBOSE, true);
+	    // Cookie
+	    curl_setopt($ch, CURLOPT_COOKIE, $salt_name.'=portal_regisztracio_regisztracio');
+            // POST
+            curl_setopt($ch, CURLOPT_POST, true);
+            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
+         
+            $response = curl_exec($ch);
+            $INFO = curl_getinfo($ch); // ha kell
+            if ($INFO['http_code'] == 200) { // minden ok
+                //dump($INFO['url']);
+                //dump("response:",$response);
+            } else {
+                echo '<a href="'.$url.'">URL</a>';
+                dump($INFO['http_code'],$response,$INFO);
+                throw new Exception($INFO['http_code']);
+            }
+            curl_close($ch);
+
+        return $response;
+    }
+    
+//function base64url_encode($data) { 
+//  return rtrim(strtr(base64_encode($data), '+/', '-_'), '='); 
+//} 
+//function base64url_decode($data) { 
+//  return base64_decode(str_pad(strtr($data, '-_', '+/'), strlen($data) % 4, '=', STR_PAD_RIGHT)); 
+//}
+function random_str($length, $keyspace = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
+{
+    $str = '';
+    $max = mb_strlen($keyspace, '8bit') - 1;
+    for ($i = 0; $i < $length; ++$i) {
+        $str .= $keyspace[random_int(0, $max)];
+    }
+    return $str;
+}
+    /* symmetric cryptographic module */
+    class AES {
+
+	public function __construct() { }
+	public function encrypt($data, $key) {
+	    $data = urlencode($data);
+
+//	    $return = $data;
+//	    $return = $key . $data;
+//	    $return = openssl_encrypt($data, 'aes-256-cbc', $key, OPENSSL_RAW_DATA);
+//	    $return = db_query("SELECT aes_encrypt('%s','%s')",array('fv'=>'class AES','result'=>'value','modul'=>'login','values'=>array($data,$key)));
+
+	    if (function_exists('mcrypt_encrypt')) {
+		$return = mcrypt_encrypt(MCRYPT_RIJNDAEL_128,$key,$data,MCRYPT_MODE_CBC,"\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0");
+	    } else {
+		$_SESSION['alert'][] = 'info:mcrypt függvény nem található (tipp! telepítsd a php5-mcrypt csomagot a szerverre)';
+	    }
+	    return base64_encode($return);
+	}
+	public function decrypt($data,$key) {
+	    $data = base64_decode($data);
+
+//	    $return = $data;
+//	    $return = substr($data,strlen($key));
+//	    $return = openssl_decrypt($data, 'aes-256-cbc', $key, OPENSSL_RAW_DATA);
+//	    $return = db_query("SELECT aes_decrypt('%s','%s')",array('fv'=>'class AES','result'=>'value','modul'=>'login','values'=>array($data,$key)));
+	    if (function_exists('mcrypt_decrypt')) {
+		$return = mcrypt_decrypt(MCRYPT_RIJNDAEL_128,$key,$data,MCRYPT_MODE_CBC,"\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0");
+	    } else {
+		$_SESSION['alert'][] = 'info:mcrypt függvény nem található (tipp! telepítsd a php5-mcrypt csomagot a szerverre)';
+	    }
+	    return trim(urldecode($return));
+	}
+    }
+
+    class Interconnect {
+
+	/*  A: küldő, B: fogadó használja  */
+
+	private $sessionKey;	// egy kommunikációhoz használt session kulcs
+	private $KP;		// a saját kulcspárom
+	private $nodeId;
+	private $privateKey;
+	private $publicKey;
+	private $remotePublicKey;
+	private $remoteNodeId;
+	private $remoteHost;
+	private $psf;
+	private $myRequest;		// a küldendő kérés (object)
+	private $myResponse;		// a küldendő válasz (object)
+	private $incomingRequest;	// a beérkező kérés (object)
+	private $incomingResponse;	// a beérkező válasz (object)
+	private $status;		// a művelet eredményességéek visszajelzése, hibaok kódja...
+	private $controllerNodeId = '09862967'; // Ez van jelenleg az adatbázisban...
+
+	/* Konstruktor */
+	public function __construct() {
+	    $this->sessionKey  = $this->_genSessionKey();
+	    $this->KP = getSSLKeyPair();
+	    $this->nodeId = $this->KP['nodeId'];
+	    $this->privateKey = $this->KP['privateKey'];
+	    $this->publicKey = $this->KP['publicKey'];
+	    $this->status = 'ok:created';
+	    $this->psf = 'page=rpc&f=rpc';
+	}
+	/* Privát metódusok */
+//        private function _yconv($get) {
+//            $get = str_replace(' ','+',$get);   // hm. erre miért van szükség??? autokonverzió?
+//            $get = str_replace('\/','/',$get);  // hm. erre miért van szükség??? autokonverzió?
+//            $get = str_replace('\\','',$get);  // hm. erre miért van szükség??? autokonverzió?\"'
+//            return $get;
+//        }
+	private function _curlGet($data) {
+	    $host = $this->remoteHost;
+	    $url = $this->remoteHost."/index.php?skin=rpc&".$this->psf;
+	    //dump('url',$url);
+	    $ch = curl_init();
+	    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); // a választ feldolgozzuk
+	    curl_setopt($ch, CURLOPT_URL, $url);
+	    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+	    curl_setopt($ch, CURLOPT_SSL_VERIFYSTATUS, false);
+	    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+	    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); // a helyi gépen nekem ez kellett :(
+	    curl_setopt($ch, CURLOPT_HEADER, 0); 
+//	    curl_setopt($ch, CURLOPT_TIMEOUT,60);
+	    curl_setopt($ch, CURLOPT_USERAGENT, "MaYoR-interconnect (php; cURL)");
+	    curl_setopt($ch, CURLOPT_VERBOSE, true);
+	    // POST
+	    $data['senderNodeId'] = $this->nodeId;
+	    curl_setopt($ch, CURLOPT_POST, true);
+	    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
+
+	    $response = curl_exec($ch);
+	    $INFO = curl_getinfo($ch); // ha kell
+	    if ($INFO['http_code'] == 200) { // minden ok
+		//dump($INFO['url']);
+		//dump($response);
+	    } else {
+		echo '<a href="'.$url.'">URL</a>';
+		dump($response,$INFO);
+		throw new Exception($INFO['http_code']);
+	    }
+	    curl_close($ch);
+	    return $response;
+	}
+	private function _genSessionKey() {
+	    return base64_encode(pack('N6', mt_rand(), mt_rand(), mt_rand(),mt_rand(), mt_rand(), mt_rand()));
+	    //return random_str( 32 );
+	}
+	private function _sessionKeyEncode() {
+	    $crypttext = '';
+	    $res = openssl_public_encrypt($this->sessionKey, $crypttext, $this->remotePublicKey); // majd a távoli publikus kulccal
+    	    return base64_encode($crypttext);
+	}
+	private function _sessionKeyDecode($in) {
+	    $decodedtext = '';
+    	    $res = openssl_private_decrypt(base64_decode($in), $decodedtext, $this->privateKey); // a saját privát kulccsal
+    	    return $decodedtext;
+	}
+	private function _genHash($in) {
+	    // hash generálás
+	    return hash('sha256', $in, false);
+	}
+	private function _hashEncode($in) {
+	    // a mi privát kulcsunkkal...
+    	    $res = openssl_private_encrypt($in, $encodedHash, $this->privateKey); // a saját privát kulccsal
+    	    return base64_encode($encodedHash);
+	}
+	private function _hashDecode($in) {
+	    // a remotePublic-kal
+	    $res = openssl_public_decrypt(base64_decode($in), $decodedHash, $this->remotePublicKey); // majd a távoli publikus kulccal
+    	    return $decodedHash;
+	}
+	private function _verifyHash($PACKED) {
+	    return ($this->_genHash($PACKED['details']))===($this->_hashDecode($PACKED['hashEncoded']));
+	}
+	private function _packData($DATA) { // --> array(details|sessionKeyEncoded)
+	    $ADAT['details'] = AES::encrypt(json_encode($DATA),$this->sessionKey); // implicit base64_encode
+	    $ADAT['hashEncoded'] = $this->_hashEncode($this->_genHash($ADAT['details'])); 
+	    $ADAT['sessionKeyEncoded'] = $this->_sessionKeyEncode(); // implicit base64_encode
+	    $ADAT['status'] = $this->status;
+	    return $ADAT;
+	}
+	private function _unpackData($PACKED) { // packed[details] --> object !! feltesszük, hogy már be van állítva a sessionKey, ellenőrizve van a hash!
+	    return json_decode(AES::decrypt($PACKED['details'],$this->sessionKey), true);
+	}
+	private function _encodeRequest($IN = array()) { // HTTP GET paraméter
+	    return urlencode(json_encode($IN)); 
+	}
+	private function _decodeRequest($IN) { // HTTP GET paraméter
+	    return json_decode($IN, true);
+	}
+	private function _encodeResponse($IN=array()) { // HTTP - tartalom
+	    return json_encode($IN);
+	}
+	private function _decodeResponse($IN=array()) { // HTTP - tartalom
+	    return json_decode($IN, true);
+	}
+	/* Publikus metódusok */
+	public function setRequestTarget($target) {
+	    if ($target == 'controller') $this->psf='page=rpc&sub=controller&f=rpc';
+	    else if ($target == 'naplo') $this->psf='page=rpc&sub=naplo&f=rpc';
+	    else $this->psf='page=rpc&f=rpc'; // alap funkciók
+	}
+	public function getRegistrationDataByNodeId($nodeId) { // feltesszük, hogy valid
+	    $origRemoteNodeId = $this->remoteNodeId;
+	    $this->setRemoteHostByNodeId($this->controllerNodeId);
+	    $ret = $this->sendRequest(array('func'=>'getPublicDataByNodeId', 'nodeId'=>$nodeId));
+	    $this->setRemoteHostByNodeId($origRemoteNodeId);
+
+	    return $ret;
+	}
+	public function getPublicDataByNodeId($nodeId) {
+	    if (defined('_DEVEL') && _DEVEL===true) {
+		// A helyi gép adatait adjuk meg
+		$ret = array('nodeId'=>$this->nodeId, 'url'=>'https://localhost','publicKey'=>$this->publicKey);
+	    } else {
+		if ($nodeId == '') $nodeId = $this->controllerNodeId;
+		// Adott nodeId adatainak lekérdezése a helyi adatbázisból
+		$ret = getPublicDataFromLocalKeychain($nodeId);
+		if ($ret === false) {
+		    $RPC = new Interconnect();
+		    $RPC->setRequestTarget('controller');
+		    $RPC->setRemoteHostByNodeId($this->controllerNodeId);
+		    $ret2 = $RPC->sendRequest(array('func'=>'getPublicDataByNodeId', 'nodeId'=>$nodeId));
+		    $ret = $ret2['nodeData'];
+		    foreach (array(
+			'regId','dij','utemezes','egyebTamogatas','szamlazasiCim','szamlaHelyseg','szamlaIrsz','szamlaKozteruletNev',
+			'szamlaKozteruletJelleg','szamlaHazszam'
+		    ) as $field) {
+			unset($ret[$field]);
+		    }
+		    if (is_array($ret)) addPublicDataToLocalKeychain($ret);
+/*
+		} elseif (false) {
+		    // Adott nodeId adatainak lekérdezése a www.mayor.hu-tól (controller) Interconnect-tel
+		    $origRemoteNodeId = $this->remoteNodeId;
+		    $origPsf = $this->psf;
+		    $this->setRequestTarget('controller');
+		    $this->setRemoteHostByNodeId($this->controllerNodeId);
+		    $ret2 = $this->sendRequest(array('func'=>'getPublicDataByNodeId', 'nodeId'=>$nodeId));
+		    $ret = $ret2['nodeData'];
+		    foreach (array(
+			'regId','dij','utemezes','egyebTamogatas','szamlazasiCim','szamlaHelyseg','szamlaIrsz','szamlaKozteruletNev',
+			'szamlaKozteruletJelleg','szamlaHazszam'
+		    ) as $field) {
+			unset($ret[$field]);
+		    }
+		    if (is_array($ret)) addPublicDataToLocalKeychain($ret);
+		    if ($origRemoteNodeId!='') $this->setRemoteHostByNodeId($origRemoteNodeId);		    
+		    $this->psf = $origPsf;
+*/
+		}
+	    }
+	    return $ret;
+    	}
+	public function setRemoteHostByNodeId($nodeId) {
+	    $rData = $this->getPublicDataByNodeId($nodeId);
+	    if (is_array($rData)) {
+		$this->remoteHost = $rData['url'];
+		$this->remoteNodeId = $rData['nodeId'];
+		$this->remotePublicKey = $rData['publicKey'];
+		$this->status = 'ok:remoteHost';
+	    } else {
+		$this->remoteHost = ''; // controller
+		$this->remoteNodeId = $this->controllerNodeId;
+		$this->remotePublicKey = $rData['publicKey'];
+		$this->status = 'ok:remoteHostController';
+	    }
+	}
+	/* A oldal */
+	public function sendRequest($ADAT = array()) {
+	    $PACKED = $this->_packData($ADAT);
+	    $this->myRequest = $PACKED;
+	    // $this->myRequest = $this->_encodeRequest($PACKED);
+
+	    $response = $this->_curlGet($this->myRequest);
+
+	    $decodedResponse = $this->_decodeResponse($response);
+	    if ($this->sessionKey === $this->_sessionKeyDecode($decodedResponse['sessionKeyEncoded'])) {
+		if ($this->_verifyHash($decodedResponse)) {
+		    $this->incomingResponse = $this->_unpackData($decodedResponse);
+		    $this->status = 'ok:success response';
+		} else {
+		    $this->incomingResponse = false;
+		    $this->status = 'error:wrong response hash';
+		}
+	    } else {
+		$this->status = 'error:wrong response sessionKey ('.($this->sessionKey).' != '.($this->_sessionKeyDecode($decodedResponse['sessionKeyEncoded'])).') response: '.$response;
+		$this->incomingResponse = false;
+	    }
+	    return $this->incomingResponse;
+	}
+	/* B oldal! */
+	public function processRequest() { 	// rights.php
+	    $PACKED = $_POST;
+	    $this->sessionKey = $this->_sessionKeyDecode($PACKED['sessionKeyEncoded']);
+	    if ($this->_verifyHash($PACKED)) {
+		$this->incomingRequest = $this->_unpackData($PACKED);
+openlog("MaYoR Interconnect", LOG_PID | LOG_PERROR, LOG_LOCAL0);
+syslog(LOG_WARNING, "Data unpacked: ".(json_encode($this->incomingRequest))." {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
+closelog();
+		$this->status = 'ok:success request';
+	    } else {
+		$this->incomingRequest = false;
+		$this->status = 'error:wrong request hash';		
+	    }
+	    return $this->incomingRequest;
+	}
+	public function setResponse($DATA) { // ez kell a pre-be
+	    $this->myResponse = $this->_encodeResponse($this->_packData($DATA));
+	}
+	public function sendResponse() { // skin=rpc - csak ki kell írnunk az elküldendő adatsort - ezt a skin csinálja
+	    echo $this->myResponse;
+	}
+	public function getIncomingRequest() { return $this->incomingRequest; } // a pre-ben
+
+	public function getPublicKey() { return $this->publicKey; }
+	public function getSessionKey() { return $this->sessionKey; }
+	public function getStatus() { return $this->status; }
+	public function getRemoteNodeId() { return $this->remoteNodeId; }
+	public function getControllerNodeId() { return $this->controllerNodeId; }
+	public function getNodeId() { return $this->nodeId; }
+    }
+
+
+?>