From f66ab8dae2f3d0418759f81a3a64dc9517a62449 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sun, 14 Apr 2024 15:17:31 +0200
Subject: Adding upstream version 1.10.2.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 library/Director/CoreBeta/StreamContext.php | 89 +++++++++++++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 library/Director/CoreBeta/StreamContext.php

(limited to 'library/Director/CoreBeta/StreamContext.php')

diff --git a/library/Director/CoreBeta/StreamContext.php b/library/Director/CoreBeta/StreamContext.php
new file mode 100644
index 0000000..4844b79
--- /dev/null
+++ b/library/Director/CoreBeta/StreamContext.php
@@ -0,0 +1,89 @@
+<?php
+
+namespace Icinga\Module\Director\CoreBeta;
+
+use Icinga\Exception\ProgrammingError;
+
+class StreamContext
+{
+    protected $options = array();
+
+    public function ssl()
+    {
+        if ($this->ssl === null) {
+            $this->ssl = new StreamContextSslOptions();
+        }
+
+        return $this->ssl;
+    }
+
+    public function isSsl()
+    {
+        return $this->ssl !== null;
+    }
+
+    public function setCA(CA $ca)
+    {
+        // $this->options
+    }
+
+    protected function createSslContext()
+    {
+        $local  = 'ssl://' . $this->local;
+        $context = stream_context_create();
+
+        // Hack, we need key and cert:
+        $certfile = preg_replace('~\..+$~', '', $this->certname) . '.combi';
+
+        $options = array(
+            'ssl' => array(
+                'verify_host' => true,
+                'cafile'      => $this->ssldir . '/ca.crt',
+                'local_cert'  => $this->ssldir . '/' . $certfile,
+                'CN_match'    => 'monitor1',
+            )
+        );
+
+        $result = stream_context_set_option($context, $options);
+
+        return $context;
+    }
+
+    public function setContextOptions($options)
+    {
+        if (array_key_exists('ssl', $options)) {
+            throw new ProgrammingError('Direct access to ssl options is not allowed');
+        }
+    }
+
+    protected function reallySetContextOptions($options)
+    {
+        if ($this->context === null) {
+            $this->options = $options;
+        } else {
+            stream_context_set_option($this->context, $options);
+        }
+    }
+
+    protected function lazyContext()
+    {
+        if ($this->context === null) {
+            $this->context = stream_context_create();
+            $this->setContextOptions($this->getOptions());
+
+            // stream_context_set_option($this->context
+            if ($this->isSsl()) {
+                $this->options['ssl'] = $this->ssl()->getOptions();
+            }
+
+            $result = stream_context_set_option($this->context, $this->options);
+        }
+
+        return $this->context;
+    }
+
+    public function getRawContext()
+    {
+        return $this->lazyContext();
+    }
+}
-- 
cgit v1.2.3