certificate auth

1 files changed, 16 insertions, 2 deletions

diff --git a/application/modules/fbgui/controllers/AuthController.php b/application/modules/fbgui/controllers/AuthController.php
index 5757b51..c9f750a 100644
--- a/application/modules/fbgui/controllers/AuthController.php
+++ b/application/modules/fbgui/controllers/AuthController.php
@@ -27,7 +27,21 @@ class Fbgui_AuthController extends Zend_Controller_Action {
       $this->_redirect('/fbgui/');
     } 
     elseif($_SERVER['SSL_CLIENT_VERIFY'] === 'SUCCESS'){
-    	print_a($_SERVER);
+    	$serial = $_SERVER['SSL_CLIENT_M_SERIAL'];
+    	$issuerdn = $_SERVER['SSL_CLIENT_I_DN'];
+    	$certificatemapper = new Application_Model_CertificateMapper();
+    	$certificate = $certificatemapper->findBy(array('serial' => $serial, 'issuerdn' => $issuerdn));
+    	if(isset($certificate)){
+	    	if (!$certificate->getRevoked() && !$certificate->getGuestcert() && ($certificate->getExpiredate() - time()) > 0){
+	            $person = $this->personmapper->find($certificate->getPersonID());
+	            $date = new DateTime();
+	            $person->setLogindate($date->getTimestamp());
+	            $this->personmapper->save($person);
+	            $this->_helper->redirector('selectmembership', 'person');
+	            return;
+	    	}
+    	}
+    	$this->_redirect('/fbgui/');
     	
     } 
     else {
@@ -66,7 +80,7 @@ class Fbgui_AuthController extends Zend_Controller_Action {
           }
         }
       }
-//       $this->view->loginForm = $loginForm;
+       $this->view->loginForm = $loginForm;
     }
   }