Inital commit of dds-hashcode fork

Author: kullarkert

LICENSE.txt

@@ -0,0 +1,21 @@
+This is the example web application that demonstrates how to handle hashcode containers together with hashcode
+PHP library and DigiDocService.
+
+Copyright (C) 2015 AS Sertifitseerimiskeskus
+
+LICENSE:
+
+This library is free software; you can redistribute it
+and/or modify it under the terms of the GNU Lesser General
+Public License as published by the Free Software Foundation;
+either version 2.1 of the License, or (at your option) any
+later version.
+
+This library is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+Lesser General Public License for more details.
+
+You should have received a copy of the GNU Lesser General Public
+License along with this library; if not, write to the Free Software
+Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA

README.md

@@ -0,0 +1,31 @@
+# DDS Hashcode Sample Web Application
+
+### Features
+
+* Signing existing DDOC and BDOC files with Mobile-ID and ID-card
+* Creating new DDOC and BDOC files and signing them with Mobile-ID or with ID-card
+* Removing signatures from containers
+* Adding data files to container
+* Removing data files from container
+
+In the example folder is the example application of the PHP hashcode library.
+It is created to demonstrate the ability of DigiDocService to add signature(with ID card and Mobile ID), remove signature, add data file, remove datafile and do verification of a document without actual datafiles.
+
+* Configuration parameters (for different environments) can be modified in commons/configuration.php file.
+* Give permission to write to directory that is set in commons/configuration.php in constant HASHCODE_APP_UPLOAD_DIRECTORY (default is upload/ in example webapp root) for wwwrun user (or any other user under which apache operates).
+* Register your ID-card signing certificate in www.openxades.org test-environment: http://www.openxades.org/upload_cert.php
+* This application should be run over https, since web signing plugins require https.
+
+* Application does some logging to PHP error log. Log format is '[requestId] [sessionId] message'.
+    - If the user would like to log all requests and responses to and from DigiDocService then the constant LOG_ALL_DDS_REQUESTS_RESPONSES in commons/configuration.php file should be changed to 'true'.
+    - If the user would like to turn off logging of the application completely then the constant HASHCODE_APP_LOGGING_ON in commons/configuration.php file should be changed to 'false'.
+
+The following extensions have to be enabled in PHP: php_openssl, php_soap.dll.
+
+The following commands can be used to start the built-in PHP server (since PHP version 5.5):
+
+cd examples
+php -S localhost:8000
+
+NOTE: By registering your real Mobile-ID certificates into Test-DigiDocService you can use your own phone number (id-code) to test applications with Mobile-ID support.
+Registration can be done on this page: https://www.openxades.org/MIDCertsReg/

VagrantFile

@@ -0,0 +1,49 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# Vagrantfile API/syntax version. Don't touch unless you know what you're doing!
+$fix_vmware_tools_script = <<SCRIPT
+sed -i.bak 's/answer AUTO_KMODS_ENABLED_ANSWER no/answer AUTO_KMODS_ENABLED_ANSWER yes/g' /etc/vmware-tools/locations
+sed -i 's/answer AUTO_KMODS_ENABLED no/answer AUTO_KMODS_ENABLED yes/g' /etc/vmware-tools/locations
+SCRIPT
+
+VAGRANTFILE_API_VERSION = '2'
+
+Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
+	config.vm.provision "shell", inline: $fix_vmware_tools_script
+
+	# Uncomment when using virtualbox provider
+	# config.vm.box = 'ubuntu/vivid64'
+	config.vm.network 'private_network', ip: '10.33.33.33'
+
+	# config.ssh.user = 'root'
+	# config.ssh.password = 'vagrant'
+	# config.ssh.insert_key = true
+
+	# Uncomment when using VMWare Fusion
+	config.vm.box = 'boxcutter/ubuntu1504'
+	config.vm.provider 'virtualbox' do |v|
+		v.name = 'skphp'
+	end
+
+	# Place SK Hashcode Sample application under /apps directory
+	config.vm.synced_folder '.', '/apps', create: true, disabled: false 
+
+	# Configuration files for Nginx and PHP Built-in Server Upstart script
+	config.vm.synced_folder './server-config', '/home/vagrant/config', create: true, disabled: false  
+
+	# Make sure Ansible is installed before start vagrant first time
+	# config.vm.provision 'ansible', run: 'always' do |ansible|
+	config.vm.provision 'ansible' do |ansible|
+		ansible.playbook = './ansible/setup.yml'
+		ansible.verbose = 'v'
+		ansible.limit = 'all'
+		ansible.sudo = true
+		ansible.host_key_checking = false
+		ansible.extra_vars = { 
+			ansible_ssh_user: 'vagrant', 
+			ansible_connection: 'ssh',
+			ansible_ssh_args: '-o ForwardAgent=yes'
+		}
+	end
+end

ansible/setup.yml

@@ -0,0 +1,129 @@
+---
+- hosts: all 
+  user: root
+  sudo: yes
+  vars:
+    upload_directory: /tmp/dds/upload
+    nginx_default: /etc/nginx/sites-enabled/default
+    xdebug_config: /etc/php5/fpm/conf.d/20-xdebug.ini
+
+  tasks:         
+    - name: Add NodeJS PPA repository 
+      shell: curl -sL https://deb.nodesource.com/setup | sudo bash -
+    
+    - name: update apt cache 
+      apt: update_cache=yes cache_valid_time=3600 
+
+    - name: upgrade distro
+      apt: upgrade=yes
+
+    - name: Install packages
+      apt: pkg={{ item }} state=latest
+      with_items: 
+        - build-essential
+        - nodejs        
+        - git
+        - vim 
+        - php5
+        - php5-fpm
+        - php5-xdebug
+        - nginx-full
+        - python-pip
+        - curl
+        - rsync
+        - zsh
+        - zsh-doc
+
+    - name: Add Oracle Java Repository        
+      apt_repository: repo="ppa:webupd8team/java"
+
+    - name: Accept Oracle license
+      shell: echo debconf shared/accepted-oracle-license-v1-1 select true | sudo debconf-set-selections
+
+    - name: Install Oracle Java        
+      apt: pkg=oracle-java8-installer state=latest update_cache=yes cache_valid_time=3600 
+
+    - name: Install global npm Packages 
+      npm: name={{ item }} global=yes 
+      with_items: 
+        - bower
+        - nodemon
+        - jade
+        - browserify
+        - gulp
+        - yo
+
+    - name: Install Docker into servers
+      shell: wget -qO- https://get.docker.com/ | sh
+
+    # Zsh related stuff 
+    - name: Clone oh-my-zsh  
+      git: repo=git://github.com/robbyrussell/oh-my-zsh.git 
+           dest=/home/vagrant/.oh-my-zsh
+           accept_hostkey=yes
+
+    - name: Copy oh-my-zsh for root also
+      command: cp -fr /home/vagrant/.oh-my-zsh /root/.oh-my-zsh
+
+    - name: Create new zsh config from template
+      command: cp /home/vagrant/.oh-my-zsh/templates/zshrc.zsh-template /home/vagrant/.zshrc
+
+    - name: Create new zsh config for root
+      command: cp /root/.oh-my-zsh/templates/zshrc.zsh-template /root/.zshrc
+
+    - name: Set zsh as default shell
+      user: name={{ item }} shell=/usr/bin/zsh
+      with_items:
+        - vagrant
+        - root
+
+    # App setup
+    - name: Test that system upload path is set
+      lineinfile: dest=/etc/php5/fpm/pool.d/www.conf
+                  regexp='env\[DDS_SYSTEM_UPLOAD_PATH\]'
+                  line='env[DDS_SYSTEM_UPLOAD_PATH] = '{{ upload_directory }}
+
+    - name: Make sure upload directory exists
+      file: dest={{ upload_directory }} owner=www-data group=www-data state=directory recurse=yes
+
+    - name: Set max upload limit in PHP
+      replace: dest=/etc/php5/fpm/php.ini
+               regexp='^upload_max_filesize\s=\s[0-9]+M'
+               replace='upload_max_filesize = 21M'
+               backup=yes
+
+    # Setup Nginx service
+    - name: Stop Apache2 service if running
+      service: name=apache2 state=stopped
+
+    - name: Add redirect to SSL configuration to Nginx
+      file: src=/home/vagrant/config/nginx/redirect_config dest=/etc/nginx/sites-enabled/redirect state=link
+
+    - name: Check if Nginx default exists
+      stat: path={{ nginx_default }}
+      register: default_stat
+
+    - name: Remove Nginx default website
+      file: path={{ nginx_default }} state=absent
+      when: default_stat.stat.exists
+
+    - name: Install PHP app configuration into Nginx
+      file: src=/home/vagrant/config/nginx/sk_fpm_config dest={{ nginx_default }} state=link
+
+    # PHP Configuration
+    - name: Check if default XDebug configuration exists
+      stat: path={{ xdebug_config }}
+      register: xdebug_stat
+
+    - name: Remove default XDebug configuration
+      file: path={{ xdebug_config }} state=absent
+      when: xdebug_stat.stat.exists
+
+    - name: Set new XDebug configuration
+      file: src=/home/vagrant/config/xdebug/20-xdebug.ini dest={{ xdebug_config }} state=link
+
+    - name: Start PHP-FPM service if not running
+      service: name=php5-fpm state=restarted
+
+    - name: Start Nginx service if not running
+      service: name=nginx state=restarted enabled=yes

bower.json

@@ -0,0 +1,23 @@
+{
+  "name": "dds-hashcode",
+  "version": "1.1.2",
+  "authors": [
+    "Mihkel Selgal <[email protected]>"
+  ],
+  "description": "\"dds-hashcode sample application client side libs'",
+  "license": "LGPL",
+  "ignore": [
+    "**/.*",
+    "node_modules",
+    "bower_components",
+    "test",
+    "tests"
+  ],
+  "dependencies": {
+    "jquery": "~2.1.3",
+    "bootstrap": "~3.3.4",
+    "lodash": "~3.5.0",
+    "hwcrypto": "~0.0.10",
+    "native-promise-only": "~0.7.6-a"
+  }
+}

composer.json

@@ -0,0 +1,24 @@
+{
+  "name": "sk-hashcode",
+  "description": "hashcode-sample app",
+  "minimum-stability": "stable",
+  "license": "proprietary",
+  "authors": [
+    {
+      "name": "SK",
+      "email": "[email protected]"
+    }
+  ],
+  "autoload": {
+    "classmap": ["hashcode-lib/tests", "hashcode-lib/tests/testFiles", "example/app"],
+    "psr-0": {
+      "SK\\Digidoc\\": "hashcode-lib/src"
+    }
+  },
+  "require-dev": {
+    "katzgrau/klogger": "dev-master",
+    "phpunit/phpunit": "@stable",
+    "phpdocumentor/phpdocumentor": "dev-master",
+    "phpmd/phpmd": "@stable"
+  }
+}

example/_README.txt

@@ -0,0 +1,22 @@
+In the example folder is the example application of the PHP hashcode library.
+It is created to demonstrate the ability of DigiDocService to add signature(with ID card and Mobile ID), remove signature, add data file, remove datafile and do verification of a document without actual datafiles.
+
+* Configuration parameters (for different environments) can be modified in commons/configuration.php file.
+* Give permission to write to directory that is set in commons/configuration.php in constant HASHCODE_APP_UPLOAD_DIRECTORY (default is upload/ in example webapp root) for wwwrun user (or any other user under which apache operates).
+* Register your ID-card signing certificate in www.openxades.org test-environment: http://www.openxades.org/upload_cert.php
+* This application should be run over https, since web signing plugins require https.
+
+* Application does some logging to PHP error log. Log format is '[requestId] [sessionId] message'.
+    - If the user would like to log all requests and responses to and from DigiDocService then the constant LOG_ALL_DDS_REQUESTS_RESPONSES in commons/configuration.php file should be changed to 'true'.
+    - If the user would like to turn off logging of the application completely then the constant HASHCODE_APP_LOGGING_ON in commons/configuration.php file should be changed to 'false'.
+
+The following extensions have to be enabled in PHP: php_openssl, php_soap.dll.
+
+The following commands can be used to start the built-in PHP server (since PHP version 5.5):
+
+cd examples
+php -S localhost:8000
+
+NOTE: By registering your real Mobile-ID certificates into Test-DigiDocService you can use your own phone number (id-code) to test applications with Mobile-ID support.
+Registration can be done on this page: https://www.openxades.org/MIDCertsReg/
+