128 lines
5.3 KiB
PHP
128 lines
5.3 KiB
PHP
<? /*
|
|
LibreSSL - CAcert web application
|
|
Copyright (C) 2004-2011 CAcert Inc.
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; version 2 of the License.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
if (array_key_exists('HTTP_USER_AGENT',$_SERVER) && strstr($_SERVER['HTTP_USER_AGENT'], "MSIE")) { ?>
|
|
|
|
<noscript>
|
|
<p><?=_('You have to enable JavaScript to generate certificates in the browser.')?></p>
|
|
<p><?=_('If you don\'t want to do that for any reason, you can use '.
|
|
'manually created certificate requests instead.')?></p>
|
|
</noscript>
|
|
|
|
<div id="noActiveX" style="color:red">
|
|
<p><?=_('Could not initialize ActiveX object required for certificate generation.')?></p>
|
|
<p><?=_('You have to enable ActiveX for this to work. On Windows Vista, Windows 7 and '.
|
|
'later versions you have to add this website to the list of trusted sites '.
|
|
'in the internet settings.')?></p>
|
|
<p><?php
|
|
printf(_('Go to "Extras -> Internet Options -> Security -> Trusted '.
|
|
'Websites", click on "Custom Level", set "ActiveX control '.
|
|
'elements that are not marked as safe initialized on start in '.
|
|
'scripts" to "Confirm" and click "OK". Now click "Sites", add '.
|
|
'"%s" and "%s" to your list of trusted sites and make the '.
|
|
'changes come into effect by clicking "Close" and "OK".'),
|
|
'https://'.$_SESSION['_config']['normalhostname'],
|
|
'https://'.$_SESSION['_config']['securehostname'])?>
|
|
</p>
|
|
</div>
|
|
|
|
<form method="post" style="display:none" action="account.php"
|
|
id="CertReqForm">
|
|
<input type="hidden" name="oldid" value="<?=intval($id)?>" />
|
|
<input type="hidden" id="CSR" name="CSR" />
|
|
<input type="hidden" name="keytype" value="MS" />
|
|
|
|
<p><?=_('Security level')?>:
|
|
<select id="SecurityLevel">
|
|
<option value="high" selected="selected"><?=_('High')?></option>
|
|
<option value="medium"><?=_('Medium')?></option>
|
|
<option value="custom"><?=_('Custom')?>…</option>
|
|
</select>
|
|
</p>
|
|
|
|
<fieldset id="customSettings" style="display:none">
|
|
<legend><?=_('Custom Parameters')?></legend>
|
|
|
|
<p><?=_('Cryptography Provider')?>:
|
|
<select id="CspProvider"></select>
|
|
</p>
|
|
<p><?=_('Algorithm')?>: <select id="algorithm"></select></p>
|
|
<p><?=_('Keysize')?>:
|
|
<input id="keySize" type="number" />
|
|
<?=_('Minimum Size')?>: <span id="keySizeMin"></span>,
|
|
<?=_('Maximum Size')?>: <span id="keySizeMax"></span>,
|
|
<?php
|
|
// TRANSLATORS: this specifies the step between two valid key
|
|
// sizes. E.g. if the step is 512 and the minimum is 1024 and
|
|
// the maximum is 2048, then only 1024, 1536 and 2048 bits may
|
|
// be specified as key size.
|
|
echo _('Step')?>: <span id="keySizeStep"></span></p>
|
|
<p style="color:red"><?php
|
|
printf(_('Please note that RSA key sizes smaller than %d bit '.
|
|
'will not be accepted by CAcert.'),
|
|
2048)?>
|
|
</p>
|
|
</fieldset>
|
|
|
|
<p><input type="submit" id="GenReq" name="GenReq" value="<?=_('Create Certificate')?>" /></p>
|
|
<p id="generatingKeyNotice" style="display:none">
|
|
<?=_('Generating your key. Please wait')?>…</p>
|
|
</form>
|
|
|
|
<!-- Error messages used in the JavaScript. Defined here so they can be
|
|
translated without passing the JavaScript code through PHP -->
|
|
<p id="createRequestErrorChooseAlgorithm" style="display:none">
|
|
<?=_('Could not generate certificate request. Probably you need to '.
|
|
'choose a different algorithm.')?>
|
|
</p>
|
|
<p id="createRequestErrorConfirmDialogue" style="display:none">
|
|
<?=_('Could not generate certificate request. Please confirm the '.
|
|
'dialogue if you are asked if you want to generate the key.')?>
|
|
</p>
|
|
<p id="createRequestErrorConnectDevice" style="display:none">
|
|
<?=_('Could not generate certificate request. Please make sure the '.
|
|
'cryptography device (e.g. the smartcard) is connected.')?>
|
|
</p>
|
|
<p id="createRequestError" style="display:none">
|
|
<?=_('Could not generate certificate request.')?>
|
|
</p>
|
|
<p id="invalidKeySizeError" style="display:none">
|
|
<?=_('You have specified an invalid key size')?>
|
|
</p>
|
|
<p id="unsupportedPlatformError" style="display:none">
|
|
<?=_('Could not initialize the cryptographic module for your '.
|
|
'platform. Currently we support Microsoft Windows XP, Vista '.
|
|
'and 7. If you\'re using one of these platforms and see this '.
|
|
'error message anyway you might have to enable ActiveX as '.
|
|
'described in the red explanation text and accept loading of '.
|
|
'the module.')?>
|
|
</p>
|
|
|
|
<script type="text/javascript" src="keygenIE.js"></script>
|
|
|
|
<? } else { ?>
|
|
<p>
|
|
<form method="post" action="account.php">
|
|
<input type="hidden" name="keytype" value="NS">
|
|
<?=_("Keysize:")?> <keygen name="SPKAC" challenge="<? $_SESSION['spkac_hash']=make_hash(); echo $_SESSION['spkac_hash']; ?>">
|
|
|
|
<input type="submit" name="submit" value="<?=_("Create Certificate Request")?>">
|
|
<input type="hidden" name="oldid" value="<?=intval($id)?>">
|
|
</form>
|
|
</p>
|
|
<? }
|