unify line endings

[GitHub/Stricted/Domain-Control-Panel.git] / lib / util / DNSSECUtil.class.php

<?php
namespace dns\util;

/**
 * @author      Jan Altensen (Stricted)
 * @license     GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
 * @copyright   2015 Jan Altensen (Stricted)
 */
class DNSSECUtil {
	// see: http://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xhtml
	public static $availableAlgorithm = array(3, 5, 6, 7, 8, 10, 12, 13, 14);
	
	/**
	 * calculate the DS record for parent zone
	 *
	 * @param	string	$owner
	 * @param	string	$algorithm
	 * @param	string	$publicKey
	 * @return	array
	 */
	public static function calculateDS ($owner, $algorithm, $publicKey) {
		$owner = self::convertOwner($owner);
		$flags = '0101';
		$protocol = '03';
		$algorithm = '0'.dechex($algorithm);
		$publicKey = bin2hex(base64_decode($publicKey));
		
		$string = hex2bin($owner.$flags.$protocol.$algorithm.$publicKey);
		
		$sha1 = strtoupper(sha1($string));
		$sha256 = strtoupper(hash('sha256', $string));
		
		return array('sha1' => $sha1, 'sha256' => $sha256);
	}
	
	/**
	 * convert the domain name to HEX
	 *
	 * @param	string	$owner
	 * @return	string
	 */
	public static function convertOwner ($owner) {
		if (substr($owner, -1) == '.') {
			$owner = substr($owner, 0, -1);
		}
		
		$return = '';
		
		$parts = explode(".", $owner);
		foreach ($parts as $part) {
			$len = dechex(strlen($part));
			$return .= str_repeat('0', 2 - strlen($len)).$len;
			$part = str_split($part);
			for ($i = 0; $i < count($part); $i++) {
				$byte = strtoupper(dechex(ord($part[$i])));
				$byte = str_repeat('0', 2 - strlen($byte)).$byte;
				$return .= $byte;
			}
		}
		
		$return .= '00';
		
		return $return;
	}
	
	/**
	 * validate DNSSEC public key
	 *
	 * @param	string	$content
	 * @return	boolean
	 */
	public static function validatePublicKey ($content) {
		// unify newlines
		$content = preg_replace("/(\r\n)|(\r)/", "\n", $content);
		
		$pattern = "; This is a (key|zone)-signing key, keyid (?P<keyid>[0-9]+), for (?P<domain>[\s\S]+)\.\n";
		$pattern .= "; Created: (?P<created>[0-9]+) \(([a-z0-9: ]+)\)\n";
		$pattern .= "; Publish: (?P<publish>[0-9]+) \(([a-z0-9: ]+)\)\n";
		$pattern .= "; Activate: (?P<activate>[0-9]+) \(([a-z0-9: ]+)\)\n";
		$pattern .= "([\s\S]+). IN DNSKEY 25(6|7) 3 (?P<algorithm>[0-9]+) (?P<key>[\s\S]+)(\n)?";
		preg_match('/'.$pattern.'/i', $content, $matches);
		if (!empty($matches)) {
			if (!in_array($matches['algorithm'], self::$availableAlgorithm)) {
				return false;
			}
			
			$data = explode(' ', $matches['key']);
			foreach ($data as $d) {
				if (base64_encode(base64_decode($d, true)) !== $d) {
					return false;
				}
			}
		}
		else {
			return false;
		}
		
		return true;
	}
	
	/**
	 * validate DNSSEC private key
	 *
	 * @param	string	$content
	 * @return	boolean
	 */
	public static function validatePrivateKey ($content) {
		// unify newlines
		$content = preg_replace("/(\r\n)|(\r)/", "\n", $content);
		
		$pattern = "Private-key-format: v([0-9a-z.]+)\n";
		$pattern .= "Algorithm: (?P<algorithm>[0-9]+) \(([0-9a-z\-]+)\)\n";
		$pattern .= "Modulus: (?P<modulus>[\s\S]+)\n";
		$pattern .= "PublicExponent: (?P<publicexponent>[\s\S]+)\n";
		$pattern .= "PrivateExponent: (?P<privatexponent>[\s\S]+)\n";
		$pattern .= "Prime1: (?P<prime1>[\s\S]+)\n";
		$pattern .= "Prime2: (?P<prime2>[\s\S]+)\n";
		$pattern .= "Exponent1: (?P<exponent1>[\s\S]+)\n";
		$pattern .= "Exponent2: (?P<exponent2>[\s\S]+)\n";
		$pattern .= "Coefficient: (?P<coefficient>[\s\S]+)\n";
		$pattern .= "Created: (?P<created>[0-9]+)\n";
		$pattern .= "Publish: (?P<publish>[0-9]+)\n";
		$pattern .= "Activate: (?P<activate>[0-9]+)(\n)?";
		
		preg_match('/'.$pattern.'/i', $content, $matches);
		if (!empty($matches)) {
			if (!in_array($matches['algorithm'], self::$availableAlgorithm)) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['modulus'], true)) !== $matches['modulus']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['publicexponent'], true)) !== $matches['publicexponent']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['privatexponent'], true)) !== $matches['privatexponent']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['prime1'], true)) !== $matches['prime1']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['prime2'], true)) !== $matches['prime2']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['exponent1'], true)) !== $matches['exponent1']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['exponent2'], true)) !== $matches['exponent2']) {
				return false;
			}
			else if (base64_encode(base64_decode($matches['coefficient'], true)) !== $matches['coefficient']) {
				return false;
			}
		}
		else {
			return false;
		}
		
		return true;
	}
}