|
|
@@ -1,246 +1,352 @@
|
|
|
package api
|
|
|
|
|
|
import (
|
|
|
- "github.com/0xJacky/Nginx-UI/server/model"
|
|
|
- "github.com/0xJacky/Nginx-UI/server/pkg/cert"
|
|
|
- "github.com/0xJacky/Nginx-UI/server/pkg/nginx"
|
|
|
- "github.com/gin-gonic/gin"
|
|
|
- "github.com/gorilla/websocket"
|
|
|
- "github.com/spf13/cast"
|
|
|
- "log"
|
|
|
- "net/http"
|
|
|
- "strings"
|
|
|
+ "github.com/0xJacky/Nginx-UI/server/model"
|
|
|
+ "github.com/0xJacky/Nginx-UI/server/pkg/cert"
|
|
|
+ "github.com/0xJacky/Nginx-UI/server/pkg/nginx"
|
|
|
+ "github.com/gin-gonic/gin"
|
|
|
+ "github.com/gorilla/websocket"
|
|
|
+ "github.com/spf13/cast"
|
|
|
+ "log"
|
|
|
+ "net/http"
|
|
|
+ "os"
|
|
|
+ "path/filepath"
|
|
|
+ "strings"
|
|
|
)
|
|
|
|
|
|
const (
|
|
|
- Success = "success"
|
|
|
- Info = "info"
|
|
|
- Error = "error"
|
|
|
+ Success = "success"
|
|
|
+ Info = "info"
|
|
|
+ Error = "error"
|
|
|
)
|
|
|
|
|
|
type IssueCertResponse struct {
|
|
|
- Status string `json:"status"`
|
|
|
- Message string `json:"message"`
|
|
|
- SSLCertificate string `json:"ssl_certificate,omitempty"`
|
|
|
- SSLCertificateKey string `json:"ssl_certificate_key,omitempty"`
|
|
|
+ Status string `json:"status"`
|
|
|
+ Message string `json:"message"`
|
|
|
+ SSLCertificate string `json:"ssl_certificate,omitempty"`
|
|
|
+ SSLCertificateKey string `json:"ssl_certificate_key,omitempty"`
|
|
|
}
|
|
|
|
|
|
func handleIssueCertLogChan(conn *websocket.Conn, logChan chan string) {
|
|
|
- defer func() {
|
|
|
- if err := recover(); err != nil {
|
|
|
- log.Println("api.handleIssueCertLogChan recover", err)
|
|
|
- }
|
|
|
- }()
|
|
|
+ defer func() {
|
|
|
+ if err := recover(); err != nil {
|
|
|
+ log.Println("api.handleIssueCertLogChan recover", err)
|
|
|
+ }
|
|
|
+ }()
|
|
|
|
|
|
- for logString := range logChan {
|
|
|
+ for logString := range logChan {
|
|
|
|
|
|
- err := conn.WriteJSON(IssueCertResponse{
|
|
|
- Status: Info,
|
|
|
- Message: logString,
|
|
|
- })
|
|
|
+ err := conn.WriteJSON(IssueCertResponse{
|
|
|
+ Status: Info,
|
|
|
+ Message: logString,
|
|
|
+ })
|
|
|
|
|
|
- if err != nil {
|
|
|
- log.Println("Error handleIssueCertLogChan", err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ log.Println("Error handleIssueCertLogChan", err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- }
|
|
|
+ }
|
|
|
}
|
|
|
|
|
|
func IssueCert(c *gin.Context) {
|
|
|
- var upGrader = websocket.Upgrader{
|
|
|
- CheckOrigin: func(r *http.Request) bool {
|
|
|
- return true
|
|
|
- },
|
|
|
- }
|
|
|
+ var upGrader = websocket.Upgrader{
|
|
|
+ CheckOrigin: func(r *http.Request) bool {
|
|
|
+ return true
|
|
|
+ },
|
|
|
+ }
|
|
|
|
|
|
- // upgrade http to websocket
|
|
|
- ws, err := upGrader.Upgrade(c.Writer, c.Request, nil)
|
|
|
- if err != nil {
|
|
|
- log.Println(err)
|
|
|
- return
|
|
|
- }
|
|
|
+ // upgrade http to websocket
|
|
|
+ ws, err := upGrader.Upgrade(c.Writer, c.Request, nil)
|
|
|
+ if err != nil {
|
|
|
+ log.Println(err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- defer func(ws *websocket.Conn) {
|
|
|
- err := ws.Close()
|
|
|
- if err != nil {
|
|
|
- log.Println("defer websocket close err", err)
|
|
|
- }
|
|
|
- }(ws)
|
|
|
+ defer func(ws *websocket.Conn) {
|
|
|
+ err := ws.Close()
|
|
|
+ if err != nil {
|
|
|
+ log.Println("defer websocket close err", err)
|
|
|
+ }
|
|
|
+ }(ws)
|
|
|
|
|
|
- // read
|
|
|
- var buffer struct {
|
|
|
- ServerName []string `json:"server_name"`
|
|
|
- }
|
|
|
+ // read
|
|
|
+ var buffer struct {
|
|
|
+ ServerName []string `json:"server_name"`
|
|
|
+ }
|
|
|
|
|
|
- err = ws.ReadJSON(&buffer)
|
|
|
+ err = ws.ReadJSON(&buffer)
|
|
|
|
|
|
- if err != nil {
|
|
|
- log.Println(err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ log.Println(err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- logChan := make(chan string, 1)
|
|
|
- errChan := make(chan error, 1)
|
|
|
+ logChan := make(chan string, 1)
|
|
|
+ errChan := make(chan error, 1)
|
|
|
|
|
|
- go cert.IssueCert(buffer.ServerName, logChan, errChan)
|
|
|
+ go cert.IssueCert(buffer.ServerName, logChan, errChan)
|
|
|
|
|
|
- domain := strings.Join(buffer.ServerName, "_")
|
|
|
+ domain := strings.Join(buffer.ServerName, "_")
|
|
|
|
|
|
- go handleIssueCertLogChan(ws, logChan)
|
|
|
+ go handleIssueCertLogChan(ws, logChan)
|
|
|
|
|
|
- // block, unless errChan closed
|
|
|
- for err = range errChan {
|
|
|
- log.Println("Error cert.IssueCert", err)
|
|
|
+ // block, unless errChan closed
|
|
|
+ for err = range errChan {
|
|
|
+ log.Println("Error cert.IssueCert", err)
|
|
|
|
|
|
- err = ws.WriteJSON(IssueCertResponse{
|
|
|
- Status: Error,
|
|
|
- Message: err.Error(),
|
|
|
- })
|
|
|
+ err = ws.WriteJSON(IssueCertResponse{
|
|
|
+ Status: Error,
|
|
|
+ Message: err.Error(),
|
|
|
+ })
|
|
|
|
|
|
- if err != nil {
|
|
|
- log.Println("Error WriteJSON", err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ log.Println("Error WriteJSON", err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- return
|
|
|
- }
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- close(logChan)
|
|
|
+ close(logChan)
|
|
|
|
|
|
- sslCertificatePath := nginx.GetNginxConfPath("ssl/" + domain + "/fullchain.cer")
|
|
|
- sslCertificateKeyPath := nginx.GetNginxConfPath("ssl/" + domain + "/private.key")
|
|
|
+ sslCertificatePath := nginx.GetNginxConfPath("ssl/" + domain + "/fullchain.cer")
|
|
|
+ sslCertificateKeyPath := nginx.GetNginxConfPath("ssl/" + domain + "/private.key")
|
|
|
|
|
|
- certModel, err := model.FirstOrCreateCert(domain)
|
|
|
+ certModel, err := model.FirstOrCreateCert(domain)
|
|
|
|
|
|
- if err != nil {
|
|
|
- log.Println(err)
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ log.Println(err)
|
|
|
+ }
|
|
|
|
|
|
- err = certModel.Updates(&model.Cert{
|
|
|
- SSLCertificatePath: sslCertificatePath,
|
|
|
- SSLCertificateKeyPath: sslCertificateKeyPath,
|
|
|
- })
|
|
|
+ err = certModel.Updates(&model.Cert{
|
|
|
+ SSLCertificatePath: sslCertificatePath,
|
|
|
+ SSLCertificateKeyPath: sslCertificateKeyPath,
|
|
|
+ })
|
|
|
|
|
|
- if err != nil {
|
|
|
- log.Println(err)
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ log.Println(err)
|
|
|
+ }
|
|
|
|
|
|
- err = ws.WriteJSON(IssueCertResponse{
|
|
|
- Status: Success,
|
|
|
- Message: "Issued certificate successfully",
|
|
|
- SSLCertificate: sslCertificatePath,
|
|
|
- SSLCertificateKey: sslCertificateKeyPath,
|
|
|
- })
|
|
|
+ err = ws.WriteJSON(IssueCertResponse{
|
|
|
+ Status: Success,
|
|
|
+ Message: "Issued certificate successfully",
|
|
|
+ SSLCertificate: sslCertificatePath,
|
|
|
+ SSLCertificateKey: sslCertificateKeyPath,
|
|
|
+ })
|
|
|
|
|
|
- if err != nil {
|
|
|
- log.Println(err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ log.Println(err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
}
|
|
|
|
|
|
func GetCertList(c *gin.Context) {
|
|
|
- certList := model.GetCertList(c.Query("name"), c.Query("domain"))
|
|
|
+ certList := model.GetCertList(c.Query("name"), c.Query("domain"))
|
|
|
|
|
|
- c.JSON(http.StatusOK, gin.H{
|
|
|
- "data": certList,
|
|
|
- })
|
|
|
+ c.JSON(http.StatusOK, gin.H{
|
|
|
+ "data": certList,
|
|
|
+ })
|
|
|
+}
|
|
|
+
|
|
|
+func getCert(c *gin.Context, certModel model.Cert) {
|
|
|
+ type resp struct {
|
|
|
+ model.Cert
|
|
|
+ SSLCertification string `json:"ssl_certification"`
|
|
|
+ SSLCertificationKey string `json:"ssl_certification_key"`
|
|
|
+ CertificateInfo *CertificateInfo `json:"certificate_info,omitempty"`
|
|
|
+ }
|
|
|
+
|
|
|
+ var sslCertificationBytes, sslCertificationKeyBytes []byte
|
|
|
+ var certificateInfo *CertificateInfo
|
|
|
+ if certModel.SSLCertificatePath != "" {
|
|
|
+ if _, err := os.Stat(certModel.SSLCertificatePath); err == nil {
|
|
|
+ sslCertificationBytes, _ = os.ReadFile(certModel.SSLCertificatePath)
|
|
|
+ }
|
|
|
+
|
|
|
+ pubKey, err := cert.GetCertInfo(certModel.SSLCertificatePath)
|
|
|
+
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ certificateInfo = &CertificateInfo{
|
|
|
+ SubjectName: pubKey.Subject.CommonName,
|
|
|
+ IssuerName: pubKey.Issuer.CommonName,
|
|
|
+ NotAfter: pubKey.NotAfter,
|
|
|
+ NotBefore: pubKey.NotBefore,
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if certModel.SSLCertificateKeyPath != "" {
|
|
|
+ if _, err := os.Stat(certModel.SSLCertificateKeyPath); err == nil {
|
|
|
+ sslCertificationKeyBytes, _ = os.ReadFile(certModel.SSLCertificateKeyPath)
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ c.JSON(http.StatusOK, resp{
|
|
|
+ certModel,
|
|
|
+ string(sslCertificationBytes),
|
|
|
+ string(sslCertificationKeyBytes),
|
|
|
+ certificateInfo,
|
|
|
+ })
|
|
|
}
|
|
|
|
|
|
func GetCert(c *gin.Context) {
|
|
|
- certModel, err := model.FirstCertByID(cast.ToInt(c.Param("id")))
|
|
|
+ certModel, err := model.FirstCertByID(cast.ToInt(c.Param("id")))
|
|
|
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- c.JSON(http.StatusOK, certModel)
|
|
|
+ getCert(c, certModel)
|
|
|
}
|
|
|
|
|
|
func AddCert(c *gin.Context) {
|
|
|
- var json struct {
|
|
|
- Name string `json:"name" binding:"required"`
|
|
|
- Domain string `json:"domain" binding:"required"`
|
|
|
- SSLCertificatePath string `json:"ssl_certificate_path" binding:"required"`
|
|
|
- SSLCertificateKeyPath string `json:"ssl_certificate_key_path" binding:"required"`
|
|
|
- }
|
|
|
- if !BindAndValid(c, &json) {
|
|
|
- return
|
|
|
- }
|
|
|
- certModel, err := model.FirstOrCreateCert(json.Domain)
|
|
|
-
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- err = certModel.Updates(&model.Cert{
|
|
|
- Name: json.Name,
|
|
|
- Domain: json.Domain,
|
|
|
- SSLCertificatePath: json.SSLCertificatePath,
|
|
|
- SSLCertificateKeyPath: json.SSLCertificateKeyPath,
|
|
|
- })
|
|
|
-
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- c.JSON(http.StatusOK, nil)
|
|
|
+ var json struct {
|
|
|
+ Name string `json:"name"`
|
|
|
+ Domain string `json:"domain" binding:"required"`
|
|
|
+ SSLCertificatePath string `json:"ssl_certificate_path" binding:"required"`
|
|
|
+ SSLCertificateKeyPath string `json:"ssl_certificate_key_path" binding:"required"`
|
|
|
+ SSLCertification string `json:"ssl_certification"`
|
|
|
+ SSLCertificationKey string `json:"ssl_certification_key"`
|
|
|
+ }
|
|
|
+ if !BindAndValid(c, &json) {
|
|
|
+ return
|
|
|
+ }
|
|
|
+ certModel, err := model.FirstOrCreateCert(json.Domain)
|
|
|
+
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ err = certModel.Updates(&model.Cert{
|
|
|
+ Name: json.Name,
|
|
|
+ Domain: json.Domain,
|
|
|
+ SSLCertificatePath: json.SSLCertificatePath,
|
|
|
+ SSLCertificateKeyPath: json.SSLCertificateKeyPath,
|
|
|
+ })
|
|
|
+
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ err = os.MkdirAll(filepath.Dir(json.SSLCertificatePath), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ err = os.MkdirAll(filepath.Dir(json.SSLCertificateKeyPath), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ if json.SSLCertification != "" {
|
|
|
+ err = os.WriteFile(json.SSLCertificatePath, []byte(json.SSLCertification), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if json.SSLCertificationKey != "" {
|
|
|
+ err = os.WriteFile(json.SSLCertificateKeyPath, []byte(json.SSLCertificationKey), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ getCert(c, certModel)
|
|
|
}
|
|
|
|
|
|
func ModifyCert(c *gin.Context) {
|
|
|
- id := cast.ToInt(c.Param("id"))
|
|
|
- certModel, err := model.FirstCertByID(id)
|
|
|
-
|
|
|
- var json struct {
|
|
|
- Name string `json:"name" binding:"required"`
|
|
|
- Domain string `json:"domain" binding:"required"`
|
|
|
- SSLCertificatePath string `json:"ssl_certificate_path" binding:"required"`
|
|
|
- SSLCertificateKeyPath string `json:"ssl_certificate_key_path" binding:"required"`
|
|
|
- }
|
|
|
-
|
|
|
- if !BindAndValid(c, &json) {
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- err = certModel.Updates(&model.Cert{
|
|
|
- Name: json.Name,
|
|
|
- Domain: json.Domain,
|
|
|
- SSLCertificatePath: json.SSLCertificatePath,
|
|
|
- SSLCertificateKeyPath: json.SSLCertificateKeyPath,
|
|
|
- })
|
|
|
-
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- c.JSON(http.StatusOK, certModel)
|
|
|
+ id := cast.ToInt(c.Param("id"))
|
|
|
+ certModel, err := model.FirstCertByID(id)
|
|
|
+
|
|
|
+ var json struct {
|
|
|
+ Name string `json:"name"`
|
|
|
+ Domain string `json:"domain" binding:"required"`
|
|
|
+ SSLCertificatePath string `json:"ssl_certificate_path" binding:"required"`
|
|
|
+ SSLCertificateKeyPath string `json:"ssl_certificate_key_path" binding:"required"`
|
|
|
+ SSLCertification string `json:"ssl_certification"`
|
|
|
+ SSLCertificationKey string `json:"ssl_certification_key"`
|
|
|
+ }
|
|
|
+
|
|
|
+ if !BindAndValid(c, &json) {
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ err = certModel.Updates(&model.Cert{
|
|
|
+ Name: json.Name,
|
|
|
+ Domain: json.Domain,
|
|
|
+ SSLCertificatePath: json.SSLCertificatePath,
|
|
|
+ SSLCertificateKeyPath: json.SSLCertificateKeyPath,
|
|
|
+ })
|
|
|
+
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ err = os.MkdirAll(filepath.Dir(json.SSLCertificatePath), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ err = os.MkdirAll(filepath.Dir(json.SSLCertificateKeyPath), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ if json.SSLCertification != "" {
|
|
|
+ err = os.WriteFile(json.SSLCertificatePath, []byte(json.SSLCertification), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if json.SSLCertificationKey != "" {
|
|
|
+ err = os.WriteFile(json.SSLCertificateKeyPath, []byte(json.SSLCertificationKey), 0644)
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ GetCert(c)
|
|
|
}
|
|
|
|
|
|
func RemoveCert(c *gin.Context) {
|
|
|
- id := cast.ToInt(c.Param("id"))
|
|
|
- certModel, err := model.FirstCertByID(id)
|
|
|
+ id := cast.ToInt(c.Param("id"))
|
|
|
+ certModel, err := model.FirstCertByID(id)
|
|
|
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- err = certModel.Remove()
|
|
|
+ err = certModel.Remove()
|
|
|
|
|
|
- if err != nil {
|
|
|
- ErrHandler(c, err)
|
|
|
- return
|
|
|
- }
|
|
|
+ if err != nil {
|
|
|
+ ErrHandler(c, err)
|
|
|
+ return
|
|
|
+ }
|
|
|
|
|
|
- c.JSON(http.StatusOK, nil)
|
|
|
+ c.JSON(http.StatusNoContent, nil)
|
|
|
}
|
0xJacky