$unix=new unix();

$squid=new squidbee();

writelogs("->BuildBlockedSites",__FUNCTION__,__FILE__,__LINE__);

$squid->BuildBlockedSites();

if(!is_file("/etc/squid3/squid-block.acl")){@file_put_contents("/etc/squid3/squid-block.acl","");}

$SQUID_CONFIG_PATH=$unix->SQUID_CONFIG_PATH();

if(!is_file($SQUID_CONFIG_PATH)){

writelogs("Unable to stat squid configuration file \"$SQUID_CONFIG_PATH\"",__FUNCTION__,__FILE__,__LINE__);

return;

}

echo "Starting......: Squid building main configuration done\n";

$squid=new squidbee();

$conf=$squid->BuildSquidConf();

@file_put_contents("/etc/artica-postfix/settings/Daemons/GlobalSquidConf",$conf);

@file_put_contents($SQUID_CONFIG_PATH,$conf);

certificate_generate();

$unix=new unix();

$array=$unix->getDirectories("/tmp");

while (list ($num, $ligne) = each ($array) ){

if(preg_match("#(.+?)\/temporaryFolder\/bases\/av#",$ligne,$re)){

$folder=$re[1];

}

}

if(is_dir($folder)){

$cmd=$unix->find_program("du")." -h -s $folder 2>&1";

exec($cmd,$results);

$text=trim(implode(" ",$results));

if(preg_match("#^([0-9\.\,A-Z]+)#",$text,$re)){

$dbsize=$re[1];

}

}else{

$dbsize="0M";

}

echo $dbsize;

include_once('ressources/class.ssl.certificate.inc');

$ssl=new ssl_certificate();

$array=$ssl->array_ssl;

$users=new usersMenus();

$sock=new sockets();

$cc=$array["artica"]["country"]."_".$array["default_ca"]["countryName_value"];

$country_code="US";

$contryname="Delaware";

$locality="Wilmington";

$organizationalUnitName="Artica Web Proxy Unit";

$organizationName="Artica";

$emailAddress="root@$users->hostname";

$commonName=$users->hostname;

if(preg_match("#(.+?)_(.+?)$#",$cc,$re)){

$contryname=$re[1];

$country_code=$re[2];

}

if($array["server_policy"]["localityName"]<>null){$locality=$array["server_policy"]["localityName"];}

if($array["server_policy"]["organizationalUnitName"]<>null){$organizationalUnitName=$array["server_policy"]["organizationalUnitName"];}

if($array["server_policy"]["emailAddress"]<>null){$emailAddress=$array["server_policy"]["emailAddress"];}

if($array["server_policy"]["organizationName"]<>null){$organizationName=$array["server_policy"]["organizationName"];}

if($array["server_policy"]["commonName"]<>null){$commonName=$array["server_policy"]["commonName"];}

@mkdir("/etc/squid3/ssl/new",0666,true);

$conf[]="[ca]";

$conf[]="default_ca=default_db";

$conf[]="unique_subject=no";

$conf[]="";

$conf[]="[default_db]";

$conf[]="dir=.";

$conf[]="certs=.";

$conf[]="new_certs_dir=/etc/squid3/ssl/new";

$conf[]="database= /etc/squid3/ssl/ca.index";

$conf[]="serial = /etc/squid3/ssl/ca.serial";

$conf[]="RANDFILE=.rnd";

$conf[]="certificate=/etc/squid3/ssl/key.pem";

$conf[]="private_key=/etc/squid3/ssl/ca.key";

$conf[]="default_days= 730";

$conf[]="default_crl_days=30";

$conf[]="default_md=md5";

$conf[]="preserve=no";

$conf[]="name_opt=ca_default";

$conf[]="cert_opt=ca_default";

$conf[]="unique_subject=no";

$conf[]="policy=policy_match";

$conf[]="";

$conf[]="[server_policy]";

$conf[]="countryName=supplied";

$conf[]="stateOrProvinceName=supplied";

$conf[]="localityName=supplied";

$conf[]="organizationName=supplied";

$conf[]="organizationalUnitName=supplied";

$conf[]="commonName=supplied";

$conf[]="emailAddress=supplied";

$conf[]="";

$conf[]="[server_cert]";

$conf[]="subjectKeyIdentifier=hash";

$conf[]="authorityKeyIdentifier=keyid:always";

$conf[]="extendedKeyUsage=serverAuth,clientAuth,msSGC,nsSGC";

$conf[]="basicConstraints= critical,CA:false";

$conf[]="";

$conf[]="[user_policy]";

$conf[]="commonName=supplied";

$conf[]="emailAddress=supplied";

$conf[]="";

$conf[]="[user_cert]";

$conf[]="subjectAltName=email:copy";

$conf[]="basicConstraints= critical,CA:false";

$conf[]="authorityKeyIdentifier=keyid:always";

$conf[]="extendedKeyUsage=clientAuth,emailProtection";

$conf[]="";

$conf[]="[req]";

$conf[]="default_bits=1024";

$conf[]="default_keyfile=ca.key";

$conf[]="distinguished_name=default_ca";

$conf[]="x509_extensions=extensions";

$conf[]="string_mask=nombstr";

$conf[]="req_extensions=req_extensions";

$conf[]="input_password=secret";

$conf[]="output_password=secret";

$conf[]="";

$conf[]="[default_ca]";

$conf[]="countryName=Country Code";

$conf[]="countryName_value=$country_code";

$conf[]="countryName_min=2";

$conf[]="countryName_max=2";

$conf[]="stateOrProvinceName=State Name";

$conf[]="stateOrProvinceName_value=$contryname";

$conf[]="localityName=Locality Name";

$conf[]="localityName_value=$locality";

$conf[]="organizationName=Organization Name";

$conf[]="organizationName_value=$organizationName";

$conf[]="organizationalUnitName=Organizational Unit Name";

$conf[]="organizationalUnitName_value=$organizationalUnitName";

$conf[]="commonName=Common Name";

$conf[]="commonName_value=$commonName";

$conf[]="commonName_max=64";

$conf[]="emailAddress=Email Address";

$conf[]="emailAddress_value=$emailAddress";

$conf[]="emailAddress_max=40";

$conf[]="unique_subject=no";

$conf[]="";

$conf[]="[extensions]";

$conf[]="subjectKeyIdentifier=hash";

$conf[]="authorityKeyIdentifier=keyid:always";

$conf[]="basicConstraints=critical,CA:false";

$conf[]="";

$conf[]="[req_extensions]";

$conf[]="nsCertType=objsign,email,server";

$conf[]="";

$conf[]="[CA_default]";

$conf[]="policy=policy_match";

$conf[]="";

$conf[]="[policy_match]";

$conf[]="countryName=match";

$conf[]="stateOrProvinceName=match";

$conf[]="organizationName=match";

$conf[]="organizationalUnitName=optional";

$conf[]="commonName=match";

$conf[]="emailAddress=optional";

$conf[]="";

$conf[]="[policy_anything]";

$conf[]="countryName=optional";

$conf[]="stateOrProvinceName=optional";

$conf[]="localityName=optional";

$conf[]="organizationName=optional";

$conf[]="organizationalUnitName=optional";

$conf[]="commonName=optional";

$conf[]="emailAddress=optional";

$conf[]="";

$conf[]="[v3_ca]";

$conf[]="subjectKeyIdentifier=hash";

$conf[]="authorityKeyIdentifier=keyid:always,issuer:always";

$conf[]="basicConstraints=critical,CA:false";

@mkdir("/etc/squid3/ssl",0666,true);

file_put_contents("/etc/squid3/ssl/openssl.conf",@implode("\n",$conf));

$ssl_path="/etc/squid3/ssl";

if(is_certificate()){

echo "Starting......: Squid SSL certificate OK\n";

return;

}

@unlink("$ssl_path/privkey.cp.pem");

@unlink("$ssl_path/cacert.pem");

@unlink("$ssl_path/privkey.pem");

echo "Starting......: Squid building SSL certificate\n";

certificate_conf();

$ldap=new clladp();

$sock=new sockets();

$unix=new unix();

$CertificateMaxDays=$sock->GET_INFO('CertificateMaxDays');

if($CertificateMaxDays==null){$CertificateMaxDays='730';}

echo "Starting......: Squid Max Days are $CertificateMaxDays\n";

$password=$unix->shellEscapeChars($ldap->ldap_password);

$openssl=$unix->find_program("openssl");

$config="/etc/squid3/ssl/openssl.conf";

system("$openssl genrsa -des3 -passout pass:$password -out $ssl_path/privkey.pem 2048 1024");

system("$openssl req -new -x509 -nodes -passin pass:$password -key $ssl_path/privkey.pem -batch -config $config -out $ssl_path/cacert.pem -days $CertificateMaxDays");

system("/bin/cp $ssl_path/privkey.pem $ssl_path/privkey.cp.pem");

system("$openssl rsa -passin pass:$password -in $ssl_path/privkey.cp.pem -out $ssl_path/privkey.pem");

$ssl_path="/etc/squid3/ssl";;

if(!is_file("$ssl_path/cacert.pem")){return false;}

if(!is_file("$ssl_path/privkey.pem")){return false;}

if(!is_file("$ssl_path/privkey.cp.pem")){return false;}

return true;