1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
<?php
namespace Icinga\Module\Director\CoreBeta;
use Exception;
class ApiClient extends Stream
{
protected $port;
public static function create($peer, $port = 5665)
{
$stream = new static();
}
protected function createClientConnection()
{
$context = $this->createSslContext();
if ($context === false) {
echo "Unable to set SSL options\n";
return false;
}
$conn = stream_socket_client(
'ssl://' . $this->peername . ':' . $this->peerport,
$errno,
$errstr,
15,
STREAM_CLIENT_CONNECT,
$context
);
return $conn;
}
protected function createSslContext()
{
$local = 'ssl://' . $this->local;
$context = stream_context_create();
// Hack, we need key and cert:
$certfile = preg_replace('~\..+$~', '', $this->certname) . '.combi';
$options = array(
'ssl' => array(
'verify_host' => true,
'cafile' => $this->ssldir . '/ca.crt',
'local_cert' => $this->ssldir . '/' . $certfile,
'CN_match' => 'monitor1',
)
);
$result = stream_context_set_option($context, $options);
return $context;
}
}
|
