version 1.8.2.3.2.3, 2022/02/20 21:06:30
|
version 1.11, 2018/08/09 14:04:30
|
Line 37 use lib '/home/httpd/lib/perl/';
|
Line 37 use lib '/home/httpd/lib/perl/';
|
use LONCAPA; |
use LONCAPA; |
use Apache::lonnet; |
use Apache::lonnet; |
use GDBM_File; |
use GDBM_File; |
use Net::OAuth; |
use Crypt::OpenSSL::X509; |
use Crypt::CBC; |
|
|
|
sub dump_with_regexp { |
sub dump_with_regexp { |
my ( $tail, $clientversion ) = @_; |
my ( $tail, $clientversion ) = @_; |
Line 240 sub check_homecourses {
|
Line 240 sub check_homecourses {
|
} |
} |
} |
} |
unless (&untie_domain_hash($hashref)) { |
unless (&untie_domain_hash($hashref)) { |
&Apache::lonnet::logthis("Failed to untie tied hash for nohist_courseids.db for $domain"); |
&logthis("Failed to untie tied hash for nohist_courseids.db for $domain"); |
} |
} |
} else { |
} else { |
&Apache::lonnet::logthis("Failed to tie hash for nohist_courseids.db for $domain"); |
&logthis("Failed to tie hash for nohist_courseids.db for $domain"); |
} |
} |
} |
} |
foreach my $hashid (keys(%recent)) { |
foreach my $hashid (keys(%recent)) { |
Line 315 sub get_courseinfo_hash {
|
Line 315 sub get_courseinfo_hash {
|
}; |
}; |
if ($@) { |
if ($@) { |
if ($@ eq "timeout\n") { |
if ($@ eq "timeout\n") { |
&Apache::lonnet::logthis("<font color='blue'>WARNING courseiddump for $cnum:$cdom from $home timedout</font>"); |
&logthis("<font color='blue'>WARNING courseiddump for $cnum:$cdom from $home timedout</font>"); |
} else { |
} else { |
&Apache::lonnet::logthis("<font color='yellow'>WARNING unexpected error during eval of call for courseiddump from $home</font>"); |
&logthis("<font color='yellow'>WARNING unexpected error during eval of call for courseiddump from $home</font>"); |
} |
} |
} else { |
} else { |
if (ref($info{$cdom.'_'.$cnum}) eq 'HASH') { |
if (ref($info{$cdom.'_'.$cnum}) eq 'HASH') { |
Line 803 sub is_course {
|
Line 803 sub is_course {
|
} |
} |
&Apache::lonnet::do_cache_new('iscourse',$hashid,$iscourse,3600); |
&Apache::lonnet::do_cache_new('iscourse',$hashid,$iscourse,3600); |
unless (&untie_domain_hash($hashref)) { |
unless (&untie_domain_hash($hashref)) { |
&Apache::lonnet::logthis("Failed to untie tied hash for nohist_courseids.db for $cdom"); |
&logthis("Failed to untie tied hash for nohist_courseids.db for $cdom"); |
} |
} |
} else { |
} else { |
&Apache::lonnet::logthis("Failed to tie hash for nohist_courseids.db for $cdom"); |
&logthis("Failed to tie hash for nohist_courseids.db for $cdom"); |
} |
} |
} |
} |
return $iscourse; |
return $iscourse; |
} |
} |
|
|
sub get_dom { |
sub server_certs { |
my ($userinput) = @_; |
my ($perlvar) = @_; |
my ($cmd,$udom,$namespace,$what) =split(/:/,$userinput,4); |
my %pemfiles = ( |
my $hashref = &tie_domain_hash($udom,$namespace,&GDBM_READER()) or |
key => 'lonnetPrivateKey', |
return "error: ".($!+0)." tie(GDBM) Failed while attempting $cmd"; |
host => 'lonnetCertificate', |
my $qresult=''; |
hostname => 'lonnetHostnameCertificate', |
if (ref($hashref)) { |
ca => 'lonnetCertificateAuthority', |
chomp($what); |
); |
my @queries=split(/\&/,$what); |
my (%md5hash,%info); |
for (my $i=0;$i<=$#queries;$i++) { |
if (ref($perlvar) eq 'HASH') { |
$qresult.="$hashref->{$queries[$i]}&"; |
my $certsdir = $perlvar->{'lonCertificateDirectory'}; |
} |
if (-d $certsdir) { |
$qresult=~s/\&$//; |
foreach my $key (keys(%pemfiles)) { |
} |
if ($perlvar->{$pemfiles{$key}}) { |
&untie_user_hash($hashref) or |
my $file = $certsdir.'/'.$perlvar->{$pemfiles{$key}}; |
return "error: ".($!+0)." untie(GDBM) Failed while attempting $cmd"; |
if (-e $file) { |
return $qresult; |
if ($key eq 'key') { |
} |
if (open(PIPE,"openssl rsa -noout -in $file -check |")) { |
|
my $check = <PIPE>; |
sub store_dom { |
close(PIPE); |
my ($userinput) = @_; |
chomp($check); |
my ($cmd,$dom,$namespace,$rid,$what) =split(/:/,$userinput); |
$info{$key}{'status'} = $check; |
my $hashref = &tie_domain_hash($dom,$namespace,&GDBM_WRCREAT(),"S","$rid:$what") or |
} |
return "error: ".($!+0)." tie(GDBM) Failed while attempting $cmd"; |
if (open(PIPE,"openssl rsa -noout -modulus -in $file | openssl md5 |")) { |
$hashref->{"version:$rid"}++; |
$md5hash{$key} = <PIPE>; |
my $version=$hashref->{"version:$rid"}; |
close(PIPE); |
my $allkeys=''; |
} |
my @pairs=split(/\&/,$what); |
} else { |
foreach my $pair (@pairs) { |
if ($key eq 'ca') { |
my ($key,$value)=split(/=/,$pair); |
if (open(PIPE,"openssl verify -CAfile $file $file |")) { |
$allkeys.=$key.':'; |
my $check = <PIPE>; |
$hashref->{"$version:$rid:$key"}=$value; |
close(PIPE); |
} |
chomp($check); |
my $now = time; |
if ($check eq "$file: OK") { |
$hashref->{"$version:$rid:timestamp"}=$now; |
$info{$key}{'status'} = 'ok'; |
$allkeys.='timestamp'; |
} else { |
$hashref->{"$version:keys:$rid"}=$allkeys; |
$check =~ s/^\Q$file\E\:?\s*//; |
&untie_user_hash($hashref) or |
$info{$key}{'status'} = $check; |
return "error: ".($!+0)." untie(GDBM) Failed while attempting $cmd"; |
} |
return 'ok'; |
} |
} |
} else { |
|
if (open(PIPE,"openssl x509 -noout -modulus -in $file | openssl md5 |")) { |
sub restore_dom { |
$md5hash{$key} = <PIPE>; |
my ($userinput) = @_; |
close(PIPE); |
my ($cmd,$dom,$namespace,$rid) = split(/:/,$userinput); |
} |
my $hashref = &tie_domain_hash($dom,$namespace,&GDBM_READER()) or |
} |
return "error: ".($!+0)." tie(GDBM) Failed while attempting $cmd"; |
my $x509 = Crypt::OpenSSL::X509->new_from_file($file); |
my $qresult=''; |
my @items = split(/,\s+/,$x509->subject()); |
if (ref($hashref)) { |
foreach my $item (@items) { |
chomp($rid); |
my ($name,$value) = split(/=/,$item); |
my $version=$hashref->{"version:$rid"}; |
if ($name eq 'CN') { |
$qresult.="version=$version&"; |
$info{$key}{'cn'} = $value; |
my $scope; |
} |
for ($scope=1;$scope<=$version;$scope++) { |
} |
my $vkeys=$hashref->{"$scope:keys:$rid"}; |
$info{$key}{'start'} = $x509->notBefore(); |
my @keys=split(/:/,$vkeys); |
$info{$key}{'end'} = $x509->notAfter(); |
my $key; |
$info{$key}{'alg'} = $x509->sig_alg_name(); |
$qresult.="$scope:keys=$vkeys&"; |
$info{$key}{'size'} = $x509->bit_length(); |
foreach $key (@keys) { |
$info{$key}{'email'} = $x509->email(); |
$qresult.="$scope:$key=".$hashref->{"$scope:$rid:$key"}."&"; |
} |
} |
|
} |
|
$qresult=~s/\&$//; |
|
} |
|
&untie_user_hash($hashref) or |
|
return "error: ".($!+0)." untie(GDBM) Failed while attempting $cmd"; |
|
return $qresult; |
|
} |
|
|
|
sub crslti_itemid { |
|
my ($cdom,$cnum,$url,$method,$params,$loncaparev) = @_; |
|
unless (ref($params) eq 'HASH') { |
|
return; |
|
} |
|
if (($cdom eq '') || ($cnum eq '')) { |
|
return; |
|
} |
|
my ($itemid,$consumer_key,$secret); |
|
|
|
if (exists($params->{'oauth_callback'})) { |
|
$Net::OAuth::PROTOCOL_VERSION = Net::OAuth::PROTOCOL_VERSION_1_0A; |
|
} else { |
|
$Net::OAuth::PROTOCOL_VERSION = Net::OAuth::PROTOCOL_VERSION_1_0; |
|
} |
|
|
|
my $consumer_key = $params->{'oauth_consumer_key'}; |
|
return if ($consumer_key eq ''); |
|
|
|
my (%crslti,%crslti_by_key); |
|
my $hashid=$cdom.'_'.$cnum; |
|
my ($result,$cached)=&Apache::lonnet::is_cached_new('courseltienc',$hashid); |
|
if (defined($cached)) { |
|
if (ref($result) eq 'HASH') { |
|
%crslti = %{$result}; |
|
} |
|
} else { |
|
my $reply = &dump_with_regexp(join(":",($cdom,$cnum,'nohist_ltienc','','')),$loncaparev); |
|
%crslti = %{&Apache::lonnet::unserialize($reply)}; |
|
my $cachetime = 24*60*60; |
|
&Apache::lonnet::do_cache_new('courseltienc',$hashid,\%crslti,$cachetime); |
|
} |
|
|
|
return if (!keys(%crslti)); |
|
|
|
foreach my $id (keys(%crslti)) { |
|
if (ref($crslti{$id}) eq 'HASH') { |
|
my $key = $crslti{$id}{'key'}; |
|
if (($key ne '') && ($crslti{$id}{'secret'} ne '')) { |
|
push(@{$crslti_by_key{$key}},$id); |
|
} |
|
} |
|
} |
|
|
|
return if (!keys(%crslti_by_key)); |
|
|
|
my %courselti = &Apache::lonnet::get_course_lti($cnum,$cdom,'provider'); |
|
|
|
if (ref($crslti_by_key{$consumer_key}) eq 'ARRAY') { |
|
foreach my $id (@{$crslti_by_key{$consumer_key}}) { |
|
my $secret = $crslti{$id}{'secret'}; |
|
if (ref($courselti{$id}) eq 'HASH') { |
|
if ((exists($courselti{$id}{'cipher'})) && |
|
($courselti{$id}{'cipher'} =~ /^\d+$/)) { |
|
my $keynum = $courselti{$id}{'cipher'}; |
|
my $privkey = &get_dom("getdom:$cdom:private:$keynum:lti:key"); |
|
if ($privkey ne '') { |
|
my $cipher = new Crypt::CBC($privkey); |
|
$secret = $cipher->decrypt_hex($secret); |
|
} |
} |
} |
} |
} |
} |
my $request = Net::OAuth->request('request token')->from_hash($params, |
|
request_url => $url, |
|
request_method => $method, |
|
consumer_secret => $secret,); |
|
if ($request->verify()) { |
|
$itemid = $id; |
|
last; |
|
} |
|
} |
|
} |
|
return $itemid; |
|
} |
|
|
|
sub domlti_itemid { |
|
my ($dom,$context,$url,$method,$params,$loncaparev) = @_; |
|
unless (ref($params) eq 'HASH') { |
|
return; |
|
} |
|
if ($dom eq '') { |
|
return; |
|
} |
|
my ($itemid,$consumer_key,$secret); |
|
|
|
if (exists($params->{'oauth_callback'})) { |
|
$Net::OAuth::PROTOCOL_VERSION = Net::OAuth::PROTOCOL_VERSION_1_0A; |
|
} else { |
|
$Net::OAuth::PROTOCOL_VERSION = Net::OAuth::PROTOCOL_VERSION_1_0; |
|
} |
|
|
|
my $consumer_key = $params->{'oauth_consumer_key'}; |
|
return if ($consumer_key eq ''); |
|
|
|
my ($name,$cachename); |
|
if ($context eq 'linkprot') { |
|
$name = $context; |
|
} else { |
|
$name = 'lti'; |
|
} |
|
$cachename = $name.'enc'; |
|
my %ltienc; |
|
my ($encresult,$enccached)=&Apache::lonnet::is_cached_new($cachename,$dom); |
|
if (defined($enccached)) { |
|
if (ref($encresult) eq 'HASH') { |
|
%ltienc = %{$encresult}; |
|
} |
|
} else { |
|
my $reply = &get_dom("getdom:$dom:encconfig:$name"); |
|
my $ltiencref = &Apache::lonnet::thaw_unescape($reply); |
|
if (ref($ltiencref) eq 'HASH') { |
|
%ltienc = %{$ltiencref}; |
|
} |
} |
my $cachetime = 24*60*60; |
|
&Apache::lonnet::do_cache_new($cachename,$dom,\%ltienc,$cachetime); |
|
} |
} |
|
foreach my $key ('host','hostname') { |
return if (!keys(%ltienc)); |
if ($md5hash{$key}) { |
|
if ($md5hash{$key} eq $md5hash{'key'}) { |
my %lti_by_key; |
$info{$key}{'status'} = 'ok'; |
foreach my $id (keys(%ltienc)) { |
} elsif ($info{'key'}{'status'} =~ /ok/) { |
if (ref($ltienc{$id}) eq 'HASH') { |
$info{$key}{'status'} = 'otherkey'; |
my $key = $ltienc{$id}{'key'}; |
} else { |
if (($key ne '') && ($ltienc{$id}{'secret'} ne '')) { |
$info{$key}{'status'} = 'nokey'; |
push(@{$lti_by_key{$key}},$id); |
|
} |
} |
} |
} |
} |
} |
return if (!keys(%lti_by_key)); |
my $result; |
|
foreach my $key (keys(%info)) { |
my %lti = &Apache::lonnet::get_domain_lti($dom,$context); |
$result .= &escape($key).'='.&Apache::lonnet::freeze_escape($info{$key}).'&'; |
|
|
if (ref($lti_by_key{$consumer_key}) eq 'ARRAY') { |
|
foreach my $id (@{$lti_by_key{$consumer_key}}) { |
|
my $secret = $ltienc{$id}{'secret'}; |
|
if (ref($lti{$id}) eq 'HASH') { |
|
if ((exists($lti{$id}{'cipher'})) && |
|
($lti{$id}{'cipher'} =~ /^\d+$/)) { |
|
my $keynum = $lti{$id}{'cipher'}; |
|
my $privkey = &get_dom("getdom:$dom:private:$keynum:lti:key"); |
|
if ($privkey ne '') { |
|
my $cipher = new Crypt::CBC($privkey); |
|
$secret = $cipher->decrypt_hex($secret); |
|
} |
|
} |
|
} |
|
my $request = Net::OAuth->request('request token')->from_hash($params, |
|
request_url => $url, |
|
request_method => $method, |
|
consumer_secret => $secret,); |
|
if ($request->verify()) { |
|
$itemid = $id; |
|
last; |
|
} |
|
} |
|
} |
} |
return $itemid; |
$result =~ s/\&$//; |
|
return $result; |
} |
} |
|
|
1; |
1; |
Line 1162 courseID -- for the course for which the
|
Line 1018 courseID -- for the course for which the
|
The contents of the inner hash, for that single item in the outer hash |
The contents of the inner hash, for that single item in the outer hash |
are returned (and cached in memcache for 10 minutes). |
are returned (and cached in memcache for 10 minutes). |
|
|
=item get_dom ( $userinput ) |
|
|
|
get_dom() will retrieve domain configuration information from a GDBM file |
|
in /home/httpd/lonUsers/$dom on the primary library server in a domain. |
|
The single argument passed is the string: $cmd:$udom:$namespace:$what |
|
where $cmd is the command historically passed to lond - i.e., getdom |
|
or egetdom, $udom is the domain, $namespace is the name of the GDBM file |
|
(encconfig or configuration), and $what is a string containing names of |
|
items to retrieve from the db file (each item name is escaped and separated |
|
from the next item name with an ampersand). The return value is either: |
|
error: followed by an error message, or a string containing the value (escaped) |
|
for each item, again separated from the next item with an ampersand. |
|
|
|
=back |
=back |
|
|