//
// THE WORK IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
// HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
// WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
// OUT OF OR IN CONNECTION WITH THE WORK OR THE USE OR OTHER DEALINGS
// IN THE WORK.
//----------------------------------------------------------------------
require_once 'sr_constants.php';
require_once 'sr_client.php';
require_once 'signer.php';
require_once 'db_utils.php';
require_once 'file_utils.php';
$sr_url = get_sr_url();
$ma_url = get_first_service_of_type(SR_SERVICE_TYPE::MEMBER_AUTHORITY);
// error_log("MA = " . print_r($ma_url, true));
// FIXME: Parameterize these paths
$km_certfile = "/usr/share/geni-ch/km/km-cert.pem";
$km_keyfile = "/usr/share/geni-ch/km/km-key.pem";
$km_signer = new Signer($km_certfile, $km_keyfile);
// $mycert = file_get_contents($mycertfile);
// $mykey = file_get_contents($mykeyfile);
// error_log("CERT = $mycert");
// error_log("KEY = $mykey");
/**
* Return a dictionary of attribute->value pairs
* that were pre-asserted about the given eppn.
*/
function get_asserted_attributes($eppn)
function get_trust_roots()
{
$client = XMLRPCClient::get_client(get_sr_url());
$certs = $client->_get_trust_roots();
// _ prefix means raw return value
return $certs;
}
