--- loncom/Lond.pm	2021/02/10 15:08:14	1.8.2.2
+++ loncom/Lond.pm	2016/07/25 19:49:45	1.9
@@ -1,6 +1,6 @@
 # The LearningOnline Network
 #
-# $Id: Lond.pm,v 1.8.2.2 2021/02/10 15:08:14 raeburn Exp $
+# $Id: Lond.pm,v 1.9 2016/07/25 19:49:45 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -37,6 +37,7 @@ use lib '/home/httpd/lib/perl/';
 use LONCAPA;
 use Apache::lonnet;
 use GDBM_File;
+use Crypt::OpenSSL::X509;
 
 
 sub dump_with_regexp {
@@ -782,52 +783,84 @@ sub dump_profile_database {
     return $qresult;
 }
 
-sub is_course {
-    my ($cdom,$cnum) = @_;
-
-    return unless (($cdom =~ /^$LONCAPA::match_domain$/) &&
-                   ($cnum =~ /^$LONCAPA::match_courseid$/));
-    my $hashid = $cdom.':'.$cnum;
-    my ($iscourse,$cached) =
-        &Apache::lonnet::is_cached_new('iscourse',$hashid);
-    unless (defined($cached)) {
-        my $hashref =
-            &tie_domain_hash($cdom, "nohist_courseids", &GDBM_WRCREAT());
-        if (ref($hashref) eq 'HASH') {
-            my $esc_key = &escape($cdom.'_'.$cnum);
-            if (exists($hashref->{$esc_key})) {
-                $iscourse = 1;
-            } else {
-                $iscourse = 0;
-            }
-            &Apache::lonnet::do_cache_new('iscourse',$hashid,$iscourse,3600);
-            unless (&untie_domain_hash($hashref)) {
-                &logthis("Failed to untie tied hash for nohist_courseids.db for $cdom");
+sub server_certs {
+    my ($perlvar) = @_;
+    my %pemfiles = (
+                     key      => 'lonnetPrivateKey',
+                     host     => 'lonnetCertificate',
+                     hostname => 'lonnetHostnameCertificate',
+                     ca       => 'lonnetCertificateAuthority',
+                   );
+    my (%md5hash,%info);
+    if (ref($perlvar) eq 'HASH') {
+        my $certsdir = $perlvar->{'lonCertificateDirectory'};
+        if (-d $certsdir) {
+            foreach my $key (keys(%pemfiles)) {
+                if ($perlvar->{$pemfiles{$key}}) {
+                    my $file = $certsdir.'/'.$perlvar->{$pemfiles{$key}};
+                    if (-e $file) {
+                        if ($key eq 'key') {
+                            if (open(PIPE,"openssl rsa -noout -in $file -check |")) {
+                                my $check = <PIPE>;
+                                close(PIPE);
+                                chomp($check);
+                                $info{$key}{'status'} = $check;
+                            }
+                            if (open(PIPE,"openssl rsa -noout -modulus -in $file | openssl md5 |")) {
+                                $md5hash{$key} = <PIPE>;
+                                close(PIPE);
+                            }
+                        } else {
+                            if ($key eq 'ca') {
+                                if (open(PIPE,"openssl verify -CAfile $file $file |")) {
+                                    my $check = <PIPE>;
+                                    close(PIPE);
+                                    chomp($check);
+                                    if ($check eq "$file: OK") {
+                                        $info{$key}{'status'} = 'ok';
+                                    } else {
+                                        $check =~ s/^\Q$file\E\:?\s*//;
+                                        $info{$key}{'status'} = $check;
+                                    }
+                                }
+                            } else {
+                                if (open(PIPE,"openssl x509 -noout -modulus -in $file | openssl md5 |")) {
+                                    $md5hash{$key} = <PIPE>;
+                                    close(PIPE);
+                                }
+                            }
+                            my $x509 = Crypt::OpenSSL::X509->new_from_file($file);
+                            my @items = split(/,\s+/,$x509->subject());
+                            foreach my $item (@items) {
+                                my ($name,$value) = split(/=/,$item);
+                                if ($name eq 'CN') {
+                                    $info{$key}{'cn'} = $value;
+                                }
+                            }
+                            $info{$key}{'start'} = $x509->notBefore();
+                            $info{$key}{'end'} = $x509->notAfter();
+                            $info{$key}{'alg'} = $x509->sig_alg_name();
+                            $info{$key}{'size'} = $x509->bit_length();
+                            $info{$key}{'email'} = $x509->email();
+                        }
+                    }
+                }
             }
-        } else {
-            &logthis("Failed to tie hash for nohist_courseids.db for $cdom");
         }
     }
-    return $iscourse;
-}
-
-sub get_dom {
-    my ($userinput) = @_;
-    my ($cmd,$udom,$namespace,$what) =split(/:/,$userinput,4);
-    my $hashref = &tie_domain_hash($udom,$namespace,&GDBM_READER()) or
-        return "error: ".($!+0)." tie(GDBM) Failed while attempting $cmd";
-    my $qresult='';
-    if (ref($hashref)) {
-        chomp($what);
-        my @queries=split(/\&/,$what);
-        for (my $i=0;$i<=$#queries;$i++) {
-            $qresult.="$hashref->{$queries[$i]}&";
+    foreach my $key ('host','hostname') {
+        if ($md5hash{$key}) {
+            if ($md5hash{$key} eq $md5hash{'key'}) {
+                $info{$key}{'status'} = 'ok';
+            }
         }
-        $qresult=~s/\&$//;
     }
-    &untie_user_hash($hashref) or
-        return "error: ".($!+0)." untie(GDBM) Failed while attempting $cmd";
-    return $qresult;
+    my $result;
+    foreach my $key (keys(%info)) {
+        $result .= &escape($key).'='.&Apache::lonnet::freeze_escape($info{$key}).'&';
+    }
+    $result =~ s/\&$//;
+    return $result;
 }
 
 1;
@@ -952,18 +985,7 @@ courseID -- for the course for which the
 The contents of the inner hash, for that single item in the outer hash
 are returned (and cached in memcache for 10 minutes).
 
-=item get_dom ( $userinput )
 
-get_dom() will retrieve domain configuration information from a GDBM file
-in /home/httpd/lonUsers/$dom on the primary library server in a domain.
-The single argument passed is the string: $cmd:$udom:$namespace:$what
-where $cmd is the command historically passed to lond - i.e., getdom
-or egetdom, $udom is the domain, $namespace is the name of the GDBM file
-(encconfig or configuration), and $what is a string containing names of
-items to retrieve from the db file (each item name is escaped and separated
-from the next item name with an ampersand). The return value is either:
-error: followed by an error message, or a string containing the value (escaped)
-for each item, again separated from the next item with an ampersand.
 
 =back