. * * @category Plugin * @package GNUsocial * @author Diogo Cordeiro * @author Daniel Supernault * @copyright 2018 Free Software Foundation http://fsf.org * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 * @link https://www.gnu.org/software/social/ */ if (!defined('GNUSOCIAL')) { exit(1); } /** * ActivityPub Keys System * * @category Plugin * @package GNUsocial * @author Diogo Cordeiro * @license http://www.fsf.org/licensing/licenses/agpl-3.0.html GNU Affero General Public License version 3.0 * @link http://www.gnu.org/software/social/ */ class Activitypub_rsa extends Managed_DataObject { public $__table = 'Activitypub_rsa'; /** * Return table definition for Schema setup and DB_DataObject usage. * * @author Diogo Cordeiro * @return array array of column definitions */ public static function schemaDef() { return [ 'fields' => [ 'profile_id' => ['type' => 'integer'], 'private_key' => ['type' => 'text'], 'public_key' => ['type' => 'text', 'not null' => true], 'created' => ['type' => 'datetime', 'not null' => true], 'modified' => ['type' => 'datetime', 'not null' => true], ], 'primary key' => ['profile_id'], 'unique keys' => [ 'Activitypub_rsa_profile_id_key' => ['profile_id'], ], 'foreign keys' => [ 'Activitypub_profile_profile_id_fkey' => ['profile', ['profile_id' => 'id']], ], ]; } public function get_private_key($profile) { $this->profile_id = $profile->getID(); $apRSA = self::getKV('profile_id', $this->profile_id); if (!$apRSA instanceof Activitypub_rsa) { // No existing key pair for this profile if ($profile->isLocal()) { self::generate_keys($this->private_key, $this->public_key); $this->store_keys(); } else { throw new Exception('This is a remote Profile, there is no Private Key for this Profile.'); } } return $apRSA->private_key; } /** * Guarantees a Public Key for a given profile. * * @author Diogo Cordeiro * @param Profile $profile * @return string The public key * @throws Exception It should never occur */ public function ensure_public_key($profile) { $this->profile_id = $profile->getID(); $apRSA = self::getKV('profile_id', $this->profile_id); if (!$apRSA instanceof Activitypub_rsa) { // No existing key pair for this profile if ($profile->isLocal()) { self::generate_keys($this->private_key, $this->public_key); $this->store_keys(); } else { throw new Exception('No Keys for this Profile. That\'s odd.'); } } return $apRSA->public_key; } /** * Insert the current object variables into the database. * * @author Diogo Cordeiro * @access public * @throws ServerException */ public function store_keys() { $this->created = $this->modified = common_sql_now(); $ok = $this->insert(); if ($ok === false) { $profile->query('ROLLBACK'); throw new ServerException('Cannot save ActivityPub RSA.'); } } /** * Generates a pair of RSA keys. * * @author PHP Manual Contributed Notes * @param string $private_key in/out * @param string $public_key in/out */ public static function generate_keys(&$private_key, &$public_key) { $config = [ 'digest_alg' => 'sha512', 'private_key_bits' => 2048, 'private_key_type' => OPENSSL_KEYTYPE_RSA, ]; // Create the private and public key $res = openssl_pkey_new($config); // Extract the private key from $res to $private_key openssl_pkey_export($res, $private_key); // Extract the public key from $res to $pubKey $pubKey = openssl_pkey_get_details($res); $public_key = $pubKey["key"]; unset($pubKey); } }