regenerate.php

<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.

/**
 * Regenerate the Private Key and Certificate files
 *
 * @package    auth_saml2
 * @copyright  Matt Porritt <mattp@catalyst-au.net>
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
 */

require_once(__DIR__ . '/../../config.php');
require('setup.php');

require_login();
require_capability('moodle/site:config', context_system::instance());
$PAGE->set_url("$CFG->wwwroot/auth/saml2/regenerate.php");
$PAGE->set_course($SITE);

$mform = new \auth_saml2\form\regenerate();

if ($mform->is_cancelled()) {
    redirect("$CFG->wwwroot/admin/settings.php?section=authsettingsaml2");
}

$path = $saml2auth->certcrt;
$error = '';

if ($fromform = $mform->get_data()) {
    $dn = array(
        'commonName' => substr($fromform->commonname, 0, 64),
        'countryName' => $fromform->countryname,
        'emailAddress' => $fromform->email,
        'localityName' => $fromform->localityname,
        'organizationName' => $fromform->organizationname,
        'stateOrProvinceName' => $fromform->stateorprovincename,
        'organizationalUnitName' => $fromform->organizationalunitname,
    );
    $numberofdays = $fromform->expirydays;

    $saml2auth = new auth_plugin_saml2();
    $error = create_certificates($saml2auth, $dn, $numberofdays);

    // Also refresh the SP metadata as well.
    $file = $saml2auth->get_file_sp_metadata_file();
    @unlink($file);

    if (empty($error)) {
        redirect("$CFG->wwwroot/admin/settings.php?section=authsettingsaml2");
    }

} else {

    // Load data from the current certificate.
    $data = openssl_x509_parse(file_get_contents($path));

    // Calculate date expirey interval.
    $date1 = date("Y-m-d\TH:i:s\Z", str_replace ('Z', '', $data['validFrom_time_t']));
    $date2 = date("Y-m-d\TH:i:s\Z", str_replace ('Z', '', $data['validTo_time_t']));
    $datetime1 = new DateTime($date1);
    $datetime2 = new DateTime($date2);
    $interval = $datetime1->diff($datetime2);
    $expirydays = $interval->format('%a');

    $toform = array (
        "email" => $data['subject']['emailAddress'],
        "expirydays" => $expirydays,
        "commonname" => substr($data['subject']['CN'], 0, 64),
        "countryname" => $data['subject']['C'],
        "localityname" => $data['subject']['L'],
        "organizationname" => $data['subject']['O'],
        "stateorprovincename" => $data['subject']['ST'],
        "organizationalunitname" => $data['subject']['OU'],
    );
    $mform->set_data($toform); // Load current data into form.

}

echo $OUTPUT->header();
echo "<h1>Regenerate Private Key and Certificate</h1>";
echo "<p>Path: $path</p>";
echo "<h3>Warning: Generating a new certificate will overwrite the current one and you may need to update your IDP.</h3>";

if ($error) {
    echo $OUTPUT->notification($OUTPUT->error_text($error), 'notifyproblem');
}

$mform->display(); // Displays the form.

echo $OUTPUT->footer();