asnData[1]->asnData[0]->asnData[0]->asnData; $e = $r[0]->asnData[1]->asnData[0]->asnData[1]->asnData; return 'RSA' . '.' . $m . '.' . $e ; } function base64url_encode($s) { return strtr(base64_encode($s),'+/','-_'); } function base64url_decode($s) { return base64_decode(strtr($s,'-_','+/')); } function get_salmon_key($uri,$keyhash) { $ret = array(); $debugging = get_config('system','debugging'); if($debugging) file_put_contents('salmon.out', "\n" . 'Fetch key' . "\n", FILE_APPEND); $arr = lrdd($uri); if(is_array($arr)) { foreach($arr as $a) { if($a['@attributes']['rel'] === 'magic-public-key') { $ret[] = $a['@attributes']['href']; } } } else { return ''; } // We have found at least one key URL // If it's inline, parse it - otherwise get the key if(count($ret)) { for($x = 0; $x < count($ret); $x ++) { if(substr($ret[$x],0,5) === 'data:') { if(strstr($ret[$x],',')) $ret[$x] = substr($ret[$x],strpos($ret[$x],',')+1); else $ret[$x] = substr($ret[$x],5); } else $ret[$x] = fetch_url($ret[$x]); } } if($debugging) file_put_contents('salmon.out', "\n" . 'Key located: ' . print_r($ret,true) . "\n", FILE_APPEND); if(count($ret) == 1) { // We only found one one key so we don't care if the hash matches. // If it's the wrong key we'll find out soon enough because // message verification will fail. This also covers some older // software which don't supply a keyhash. As long as they only // have one key we'll be right. return $ret[0]; } else { foreach($ret as $a) { $hash = base64url_encode(hash('sha256',$a)); if($hash == $keyhash) return $a; } } return ''; } function slapper($owner,$contact,$slap) { // does contact have a salmon endpoint? if(! strlen($contact['notify'])) return; // add all namespaces to item $namespaces = <<< EOT EOT; $slap = str_replace('',$namespaces,$slap); // create a magic envelope $data = base64url_encode($slap); $data_type = 'application/atom+xml'; $encoding = 'base64url'; $algorithm = 'RSA-SHA256'; $keyhash = base64url_encode(hash('sha256',salmon_key($owner['spubkey']))); // Setup RSA stuff to PKCS#1 sign the data set_include_path(get_include_path() . PATH_SEPARATOR . 'phpsec'); require_once('phpsec/Crypt/RSA.php'); $rsa = new CRYPT_RSA(); $rsa->signatureMode = CRYPT_RSA_SIGNATURE_PKCS1; $rsa->setHash('sha256'); $rsa->loadKey($owner['sprvkey']); $signature = $rsa->sign($data); $salmon_tpl = load_view_file('view/magicsig.tpl'); $salmon = replace_macros($salmon_tpl,array( '$data' => $data, '$encoding' => $encoding, '$algorithm' => $algorithm, '$keyhash' => $keyhash, '$signature' => $signature )); // slap them post_url($contact['notify'],$salmon); return; }