mirror of
https://github.com/MAKS-IT-COM/maksit-certs-ui.git
synced 2026-05-16 04:48:12 +02:00
(feature): migrate from files to database, domain driven design, certs renew cooldown improvements
This commit is contained in:
Maksym Sadovnychyy
parent
1b22b8688d
commit
3c9b432bd1
@ -1,300 +0,0 @@
|
||||
using Microsoft.Extensions.Logging;
|
||||
using Microsoft.Extensions.Options;
|
||||
|
||||
using MaksIT.Core.Extensions;
|
||||
|
||||
using MaksIT.LetsEncrypt.Services;
|
||||
using MaksIT.LetsEncrypt.Entities;
|
||||
using MaksIT.LetsEncryptConsole.Services;
|
||||
|
||||
using MaksIT.SSHProvider;
|
||||
|
||||
namespace MaksIT.LetsEncryptConsole;
|
||||
|
||||
public interface IApp {
|
||||
|
||||
Task Run(string[] args);
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
public class App : IApp {
|
||||
|
||||
private readonly string _appPath = AppDomain.CurrentDomain.BaseDirectory;
|
||||
|
||||
private readonly ILogger<App> _logger;
|
||||
private readonly Configuration _appSettings;
|
||||
private readonly ILetsEncryptService _letsEncryptService;
|
||||
private readonly ITerminalService _terminalService;
|
||||
|
||||
private static readonly string _registerAccount = "--register-account";
|
||||
private static readonly string _server = "--server";
|
||||
private static readonly string _mail = "-m";
|
||||
|
||||
public App(
|
||||
ILogger<App> logger,
|
||||
IOptions<Configuration> appSettings,
|
||||
ILetsEncryptService letsEncryptService,
|
||||
ITerminalService terminalService
|
||||
) {
|
||||
_logger = logger;
|
||||
_appSettings = appSettings.Value;
|
||||
_letsEncryptService = letsEncryptService;
|
||||
_terminalService = terminalService;
|
||||
}
|
||||
|
||||
public async Task Run(string[] args) {
|
||||
|
||||
|
||||
|
||||
var parsedArgs = args.Select(x => x.Split(' ')).ToDictionary(x => x[0].Trim(), x => x[1].Trim());
|
||||
|
||||
if (parsedArgs.ContainsKey(_registerAccount)) {
|
||||
_logger.LogInformation("Registring accoount");
|
||||
|
||||
if(!parsedArgs.ContainsKey(_server))
|
||||
throw new ArgumentNullException("Server is required");
|
||||
|
||||
if(!parsedArgs.ContainsKey(_mail))
|
||||
throw new ArgumentNullException("Mail is required");
|
||||
|
||||
var mail = parsedArgs[_mail];
|
||||
|
||||
if (parsedArgs[_server] == "staging")
|
||||
await _letsEncryptService.ConfigureClient("https://acme-staging-v02.api.letsencrypt.org/");
|
||||
else if(parsedArgs[_server] == "production")
|
||||
await _letsEncryptService.ConfigureClient("https://acme-v02.api.letsencrypt.org/");
|
||||
else
|
||||
throw new ArgumentException("Invalid server");
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
|
||||
try {
|
||||
_logger.LogInformation("Let's Encrypt client. Started...");
|
||||
|
||||
foreach (var env in _appSettings.Environments?.Where(x => x.Active) ?? new List<LetsEncryptEnvironment>()) {
|
||||
|
||||
_logger.LogInformation($"Let's Encrypt C# .Net Core Client, environment: {env.Name}");
|
||||
|
||||
//loop all customers
|
||||
foreach (Customer customer in _appSettings.Customers?.Where(x => x.Active) ?? new List<Customer>()) {
|
||||
|
||||
_logger.LogInformation($"Managing customer: {customer.Id} - {customer.Name} {customer.LastName}");
|
||||
|
||||
//define cache folder
|
||||
string cachePath = Path.Combine(_appPath, customer.Id, env.Name, "cache");
|
||||
if (!Directory.Exists(cachePath)) {
|
||||
Directory.CreateDirectory(cachePath);
|
||||
}
|
||||
|
||||
//check acme directory
|
||||
var acmePath = Path.Combine(_appPath, customer.Id, env.Name, "acme");
|
||||
if (!Directory.Exists(acmePath)) {
|
||||
Directory.CreateDirectory(acmePath);
|
||||
}
|
||||
|
||||
//loop each customer website
|
||||
foreach (Site site in customer.Sites?.Where(s => s.Active) ?? new List<Site>()) {
|
||||
_logger.LogInformation($"Managing site: {site.Name}");
|
||||
|
||||
|
||||
//create folder for ssl
|
||||
string sslPath = Path.Combine(_appPath, customer.Id, env.Name, "ssl", site.Name);
|
||||
if (!Directory.Exists(sslPath)) {
|
||||
Directory.CreateDirectory(sslPath);
|
||||
}
|
||||
|
||||
var cacheFile = Path.Combine(cachePath, $"{site.Name}.lets-encrypt.cache.json");
|
||||
|
||||
|
||||
|
||||
#region LetsEncrypt client configuration and local registration cache initialization
|
||||
_logger.LogInformation("1. Client Initialization...");
|
||||
|
||||
await _letsEncryptService.ConfigureClient(env.Url);
|
||||
|
||||
var registrationCache = (File.Exists(cacheFile)
|
||||
? File.ReadAllText(cacheFile)
|
||||
: null)
|
||||
.ToObject<RegistrationCache>();
|
||||
|
||||
var initResult = await _letsEncryptService.Init(customer.Contacts, registrationCache);
|
||||
if (!initResult.IsSuccess) {
|
||||
continue;
|
||||
}
|
||||
#endregion
|
||||
|
||||
#region LetsEncrypt terms of service
|
||||
_logger.LogInformation($"Terms of service: {_letsEncryptService.GetTermsOfServiceUri()}");
|
||||
#endregion
|
||||
|
||||
// get cached certificate and check if it's valid
|
||||
// if valid check if cert and key exists otherwise recreate
|
||||
// else continue with new certificate request
|
||||
var certRes = new CachedCertificateResult();
|
||||
if (registrationCache != null && registrationCache.TryGetCachedCertificate(site.Name, out certRes)) {
|
||||
|
||||
File.WriteAllText(Path.Combine(sslPath, $"{site.Name}.crt"), certRes.Certificate);
|
||||
|
||||
if (certRes.PrivateKey != null)
|
||||
File.WriteAllText(Path.Combine(sslPath, $"{site.Name}.key"), certRes.PrivateKey.ExportRSAPrivateKeyPem());
|
||||
|
||||
_logger.LogInformation("Certificate and Key exists and valid. Restored from cache.");
|
||||
}
|
||||
else {
|
||||
|
||||
|
||||
//create new orders
|
||||
#region LetsEncrypt new order
|
||||
_logger.LogInformation("2. Client New Order...");
|
||||
|
||||
var (orders, newOrderResult) = await _letsEncryptService.NewOrder(site.Hosts, site.Challenge);
|
||||
if (!newOrderResult.IsSuccess || orders == null) {
|
||||
continue;
|
||||
}
|
||||
#endregion
|
||||
|
||||
if (orders.Count > 0) {
|
||||
switch (site.Challenge) {
|
||||
case "http-01": {
|
||||
//ensure to enable static file discovery on server in .well-known/acme-challenge
|
||||
//and listen on 80 port
|
||||
|
||||
foreach (FileInfo file in new DirectoryInfo(acmePath).GetFiles())
|
||||
file.Delete();
|
||||
|
||||
foreach (var result in orders) {
|
||||
Console.WriteLine($"Key: {result.Key}, Value: {result.Value}");
|
||||
string[] splitToken = result.Value.Split('.');
|
||||
|
||||
File.WriteAllText(Path.Combine(acmePath, splitToken[0]), result.Value);
|
||||
}
|
||||
|
||||
foreach (FileInfo file in new DirectoryInfo(acmePath).GetFiles()) {
|
||||
if (env?.SSH?.Active ?? false) {
|
||||
UploadFiles(_logger, env.SSH, env.ACME.Linux.Path, file.Name, File.ReadAllBytes(file.FullName), env.ACME.Linux.Owner, env.ACME.Linux.ChangeMode);
|
||||
}
|
||||
else {
|
||||
throw new NotImplementedException();
|
||||
}
|
||||
}
|
||||
|
||||
break;
|
||||
}
|
||||
|
||||
case "dns-01": {
|
||||
//Manage DNS server MX record, depends from provider
|
||||
throw new NotImplementedException();
|
||||
}
|
||||
|
||||
default: {
|
||||
throw new NotImplementedException();
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
#region LetsEncrypt complete challenges
|
||||
_logger.LogInformation("3. Client Complete Challange...");
|
||||
var completeChallengesResult = await _letsEncryptService.CompleteChallenges();
|
||||
if (!completeChallengesResult.IsSuccess) {
|
||||
continue;
|
||||
}
|
||||
_logger.LogInformation("Challanges comleted.");
|
||||
#endregion
|
||||
|
||||
await Task.Delay(1000);
|
||||
|
||||
#region Download new certificate
|
||||
_logger.LogInformation("4. Download certificate...");
|
||||
var (certData, getCertResult) = await _letsEncryptService.GetCertificate(site.Name);
|
||||
if (!getCertResult.IsSuccess || certData == null) {
|
||||
continue;
|
||||
}
|
||||
|
||||
// not used in this scenario
|
||||
// var (cert, key) = certData.Value;
|
||||
#endregion
|
||||
|
||||
#region Persist cache
|
||||
registrationCache = _letsEncryptService.GetRegistrationCache();
|
||||
File.WriteAllText(cacheFile, registrationCache.ToJson());
|
||||
#endregion
|
||||
}
|
||||
|
||||
#region Save cert and key to filesystem
|
||||
certRes = new CachedCertificateResult();
|
||||
if (registrationCache.TryGetCachedCertificate(site.Name, out certRes)) {
|
||||
|
||||
File.WriteAllText(Path.Combine(sslPath, $"{site.Name}.crt"), certRes.Certificate);
|
||||
|
||||
if (certRes.PrivateKey != null)
|
||||
File.WriteAllText(Path.Combine(sslPath, $"{site.Name}.key"), certRes.PrivateKey.ExportRSAPrivateKeyPem());
|
||||
|
||||
_logger.LogInformation("Certificate saved.");
|
||||
|
||||
foreach (FileInfo file in new DirectoryInfo(sslPath).GetFiles()) {
|
||||
|
||||
if (env?.SSH?.Active ?? false) {
|
||||
UploadFiles(_logger, env.SSH, $"{env.SSL.Linux.Path}/{site.Name}", file.Name, File.ReadAllBytes(file.FullName), env.SSL.Linux.Owner, env.SSL.Linux.ChangeMode);
|
||||
}
|
||||
else {
|
||||
throw new NotImplementedException();
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
else {
|
||||
_logger.LogError("Unable to get new cached certificate.");
|
||||
}
|
||||
#endregion
|
||||
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
_logger.LogInformation($"Let's Encrypt client. Execution complete.");
|
||||
}
|
||||
catch (Exception ex) {
|
||||
_logger.LogError(ex, $"Let's Encrypt client. Unhandled exception.");
|
||||
}
|
||||
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
private void UploadFiles(
|
||||
ILogger logger,
|
||||
SSHClientSettings sshSettings,
|
||||
string workDir,
|
||||
string fileName,
|
||||
byte[] bytes,
|
||||
string owner,
|
||||
string changeMode
|
||||
) {
|
||||
using var sshService = new SSHService(logger, sshSettings.Host, sshSettings.Port, sshSettings.Username, sshSettings.Password);
|
||||
sshService.Connect();
|
||||
|
||||
sshService.RunSudoCommand(sshSettings.Password, $"mkdir {workDir}");
|
||||
|
||||
sshService.RunSudoCommand(sshSettings.Password, $"chown {owner} {workDir} -R");
|
||||
sshService.RunSudoCommand(sshSettings.Password, $"chmod 777 {workDir} -R");
|
||||
|
||||
sshService.Upload($"{workDir}", fileName, bytes);
|
||||
|
||||
sshService.RunSudoCommand(sshSettings.Password, $"chown {owner} {workDir} -R");
|
||||
sshService.RunSudoCommand(sshSettings.Password, $"chmod {changeMode} {workDir} -R");
|
||||
|
||||
//sshService.RunSudoCommand(sshSettings.Password, $"systemctl restart nginx");
|
||||
}
|
||||
}
|
||||
@ -1,71 +0,0 @@
|
||||
|
||||
namespace MaksIT.LetsEncryptConsole;
|
||||
|
||||
public class Configuration {
|
||||
public LetsEncryptEnvironment[]? Environments { get; set; }
|
||||
public Customer[]? Customers { get; set; }
|
||||
}
|
||||
|
||||
public class OsWindows {
|
||||
public string? Path { get; set; }
|
||||
}
|
||||
|
||||
public class OsLinux {
|
||||
public string? Path { get; set; }
|
||||
|
||||
public string? Owner { get; set; }
|
||||
|
||||
public string? ChangeMode { get; set; }
|
||||
|
||||
}
|
||||
|
||||
public class OsDependant {
|
||||
public OsWindows? Windows { get; set; }
|
||||
public OsLinux? Linux { get; set; }
|
||||
}
|
||||
|
||||
public class SSHClientSettings {
|
||||
public bool Active { get; set; }
|
||||
|
||||
public string? Host { get; set; }
|
||||
|
||||
public int Port { get; set; }
|
||||
|
||||
public string? Username { get; set; }
|
||||
|
||||
public string? Password { get; set; }
|
||||
}
|
||||
|
||||
|
||||
|
||||
public class LetsEncryptEnvironment {
|
||||
public bool Active { get; set; }
|
||||
public string? Name { get; set; }
|
||||
public string? Url { get; set; }
|
||||
|
||||
public OsDependant? ACME { get; set; }
|
||||
public OsDependant? SSL { get; set; }
|
||||
|
||||
public SSHClientSettings? SSH { get; set; }
|
||||
}
|
||||
|
||||
public class Customer {
|
||||
private string? _id;
|
||||
public string Id {
|
||||
get => _id ?? string.Empty;
|
||||
set => _id = value;
|
||||
}
|
||||
|
||||
public bool Active { get; set; }
|
||||
public string[]? Contacts { get; set; }
|
||||
public string? Name { get; set; }
|
||||
public string? LastName { get; set; }
|
||||
public Site[]? Sites { get; set; }
|
||||
}
|
||||
|
||||
public class Site {
|
||||
public bool Active { get; set; }
|
||||
public string? Name { get; set; }
|
||||
public string[]? Hosts { get; set; }
|
||||
public string? Challenge { get; set; }
|
||||
}
|
||||
@ -1,44 +0,0 @@
|
||||
<Project Sdk="Microsoft.NET.Sdk">
|
||||
|
||||
<PropertyGroup>
|
||||
<OutputType>Exe</OutputType>
|
||||
<TargetFramework>net7.0</TargetFramework>
|
||||
<ImplicitUsings>enable</ImplicitUsings>
|
||||
<Nullable>enable</Nullable>
|
||||
<RootNamespace>MaksIT.$(MSBuildProjectName.Replace(" ", "_"))</RootNamespace>
|
||||
</PropertyGroup>
|
||||
|
||||
<ItemGroup>
|
||||
<PackageReference Include="Microsoft.Extensions.Configuration.Abstractions" Version="7.0.0" />
|
||||
<PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="7.0.0" />
|
||||
<PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="7.0.0" />
|
||||
<PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="7.0.0" />
|
||||
<PackageReference Include="Microsoft.Extensions.Logging" Version="7.0.0" />
|
||||
<PackageReference Include="Microsoft.Extensions.Hosting" Version="7.0.1" />
|
||||
<PackageReference Include="Microsoft.Extensions.Http" Version="7.0.0" />
|
||||
<PackageReference Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="7.0.0" />
|
||||
|
||||
|
||||
<PackageReference Include="Serilog.Enrichers.Span" Version="3.1.0" />
|
||||
<PackageReference Include="Serilog.Expressions" Version="3.4.1" />
|
||||
<PackageReference Include="Serilog.Extensions.Hosting" Version="7.0.0" />
|
||||
<PackageReference Include="Serilog.Extensions.Logging" Version="7.0.0" />
|
||||
<PackageReference Include="Serilog.Formatting.Compact" Version="1.1.0" />
|
||||
<PackageReference Include="Serilog.Settings.Configuration" Version="7.0.0" />
|
||||
<PackageReference Include="Serilog.Sinks.Console" Version="4.1.0" />
|
||||
|
||||
<PackageReference Include="Mono.Posix.NETStandard" Version="1.0.0" />
|
||||
</ItemGroup>
|
||||
|
||||
<ItemGroup>
|
||||
<ProjectReference Include="..\Core\Core.csproj" />
|
||||
<ProjectReference Include="..\LetsEncrypt\LetsEncrypt.csproj" />
|
||||
<ProjectReference Include="..\SSHProvider\SSHProvider.csproj" />
|
||||
</ItemGroup>
|
||||
|
||||
<ItemGroup>
|
||||
<None Update="appsettings.json">
|
||||
<CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
|
||||
</None>
|
||||
</ItemGroup>
|
||||
</Project>
|
||||
@ -1,69 +0,0 @@
|
||||
using Microsoft.Extensions.Configuration;
|
||||
using Microsoft.Extensions.DependencyInjection;
|
||||
|
||||
using Serilog;
|
||||
|
||||
using MaksIT.LetsEncryptConsole.Services;
|
||||
using MaksIT.LetsEncrypt.Extensions;
|
||||
|
||||
namespace MaksIT.LetsEncryptConsole;
|
||||
|
||||
class Program {
|
||||
private static readonly IConfiguration _configuration = InitConfig();
|
||||
|
||||
static void Main(string[] args) {
|
||||
// create service collection
|
||||
var services = new ServiceCollection();
|
||||
ConfigureServices(services);
|
||||
|
||||
// create service provider
|
||||
var serviceProvider = services.BuildServiceProvider();
|
||||
|
||||
// entry to run app
|
||||
#pragma warning disable CS8602 // Dereference of a possibly null reference.
|
||||
var app = serviceProvider.GetService<App>();
|
||||
app.Run(args).Wait();
|
||||
#pragma warning restore CS8602 // Dereference of a possibly null reference.
|
||||
}
|
||||
|
||||
public static void ConfigureServices(IServiceCollection services) {
|
||||
|
||||
var configurationSection = _configuration.GetSection("Configuration");
|
||||
services.Configure<Configuration>(configurationSection);
|
||||
var appSettings = configurationSection.Get<Configuration>();
|
||||
|
||||
#region Configure logging
|
||||
services.AddLogging(configure => {
|
||||
configure.AddSerilog(new LoggerConfiguration()
|
||||
.ReadFrom.Configuration(_configuration)
|
||||
.CreateLogger());
|
||||
});
|
||||
#endregion
|
||||
|
||||
#region Services
|
||||
services.RegisterLetsEncrypt();
|
||||
services.AddSingleton<ITerminalService, TerminalService>();
|
||||
#endregion
|
||||
|
||||
// add app
|
||||
services.AddSingleton<App>();
|
||||
}
|
||||
|
||||
private static IConfiguration InitConfig() {
|
||||
var aspNetCoreEnvironment = Environment.GetEnvironmentVariable("ASPNETCORE_ENVIRONMENT");
|
||||
|
||||
var configuration = new ConfigurationBuilder()
|
||||
.SetBasePath(Directory.GetCurrentDirectory())
|
||||
.AddEnvironmentVariables();
|
||||
|
||||
if (!string.IsNullOrWhiteSpace(aspNetCoreEnvironment)
|
||||
&& new FileInfo(Path.Combine(Directory.GetCurrentDirectory(), $"appsettings.{aspNetCoreEnvironment}.json")).Exists
|
||||
)
|
||||
configuration.AddJsonFile($"appsettings.{aspNetCoreEnvironment}.json", true);
|
||||
else
|
||||
configuration.AddJsonFile($"appsettings.json", true, true);
|
||||
|
||||
return configuration.Build();
|
||||
}
|
||||
}
|
||||
|
||||
@ -1,140 +0,0 @@
|
||||
#ACMEv2 Client library
|
||||
|
||||
https://tools.ietf.org/html/draft-ietf-acme-acme-18
|
||||
|
||||
The following diagram illustrates the relations between resources on
|
||||
an ACME server. For the most part, these relations are expressed by
|
||||
URLs provided as strings in the resources' JSON representations.
|
||||
Lines with labels in quotes indicate HTTP link relations.
|
||||
|
||||
directory
|
||||
|
|
||||
+--> new-nonce
|
||||
|
|
||||
+----------+----------+-----+-----+------------+
|
||||
| | | | |
|
||||
| | | | |
|
||||
V V V V V
|
||||
newAccount newAuthz newOrder revokeCert keyChange
|
||||
| | |
|
||||
| | |
|
||||
V | V
|
||||
account | order -----> cert
|
||||
| |
|
||||
| |
|
||||
| V
|
||||
+------> authz
|
||||
| ^
|
||||
| | "up"
|
||||
V |
|
||||
challenge
|
||||
|
||||
|
||||
|
||||
+-------------------+--------------------------------+--------------+
|
||||
| Action | Request | Response |
|
||||
+-------------------+--------------------------------+--------------+
|
||||
| Get directory | GET directory | 200 |
|
||||
| | | |
|
||||
| Get nonce | HEAD newNonce | 200 |
|
||||
| | | |
|
||||
| Create account | POST newAccount | 201 -> |
|
||||
| | | account |
|
||||
| | | |
|
||||
| Submit order | POST newOrder | 201 -> order |
|
||||
| | | |
|
||||
| Fetch challenges | POST-as-GET order's | 200 |
|
||||
| | authorization urls | |
|
||||
| | | |
|
||||
| Respond to | POST authorization challenge | 200 |
|
||||
| challenges | urls | |
|
||||
| | | |
|
||||
| Poll for status | POST-as-GET order | 200 |
|
||||
| | | |
|
||||
| Finalize order | POST order's finalize url | 200 |
|
||||
| | | |
|
||||
| Poll for status | POST-as-GET order | 200 |
|
||||
| | | |
|
||||
| Download | POST-as-GET order's | 200 |
|
||||
| certificate | certificate url | |
|
||||
+-------------------+--------------------------------+--------------+
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
pending
|
||||
|
|
||||
| Receive
|
||||
| response
|
||||
V
|
||||
processing <-+
|
||||
| | | Server retry or
|
||||
| | | client retry request
|
||||
| +----+
|
||||
|
|
||||
|
|
||||
Successful | Failed
|
||||
validation | validation
|
||||
+---------+---------+
|
||||
| |
|
||||
V V
|
||||
valid invalid
|
||||
|
||||
|
||||
|
||||
|
||||
https://community.letsencrypt.org/t/acme-client-finalized-order-stuck-on-ready-state/165196
|
||||
|
||||
The following table illustrates a typical sequence of requests
|
||||
required to establish a new account with the server, prove control of
|
||||
an identifier, issue a certificate, and fetch an updated certificate
|
||||
some time after issuance. The "->" is a mnemonic for a Location
|
||||
header field pointing to a created resource.
|
||||
|
||||
+-------------------+--------------------------------+--------------+
|
||||
| Action | Request | Response |
|
||||
+-------------------+--------------------------------+--------------+
|
||||
| Get directory | GET directory | 200 |
|
||||
| | | |
|
||||
| Get nonce | HEAD newNonce | 200 |
|
||||
| | | |
|
||||
| Create account | POST newAccount | 201 -> |
|
||||
| | | account |
|
||||
| | | |
|
||||
| Submit order | POST newOrder | 201 -> order |
|
||||
| | | |
|
||||
| Fetch challenges | POST-as-GET order's | 200 |
|
||||
| | authorization urls | |
|
||||
| | | |
|
||||
| Respond to | POST authorization challenge | 200 |
|
||||
| challenges | urls | |
|
||||
| | | |
|
||||
| Poll for status | POST-as-GET order | 200 |
|
||||
| | | |
|
||||
| Finalize order | POST order's finalize url | 200 |
|
||||
| | | |
|
||||
| Poll for status | POST-as-GET order | 200 |
|
||||
| | | |
|
||||
| Download | POST-as-GET order's | 200 |
|
||||
| certificate | certificate url | |
|
||||
+-------------------+--------------------------------+--------------+
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|Level|Usage|
|
||||
|-----|-----|
|
||||
|Verbose|Verbose is the noisiest level, rarely (if ever) enabled for a production app.|
|
||||
|Debug|Debug is used for internal system events that are not necessarily observable from the outside, but useful when determining how something happened.|
|
||||
|Information|Information events describe things happening in the system that correspond to its responsibilities and functions. Generally these are the observable actions the system can perform.|
|
||||
|Warning|When service is degraded, endangered, or may be behaving outside of its expected parameters, Warning level events are used.|
|
||||
|Error|When functionality is unavailable or expectations broken, an Error event is used.|
|
||||
|Fatal|The most critical level, Fatal events demand immediate attention.|
|
||||
@ -1,28 +0,0 @@
|
||||
using System.Diagnostics;
|
||||
|
||||
namespace MaksIT.LetsEncryptConsole.Services;
|
||||
|
||||
public interface ITerminalService {
|
||||
void Exec(string cmd);
|
||||
}
|
||||
|
||||
public class TerminalService : ITerminalService {
|
||||
|
||||
public void Exec(string cmd) {
|
||||
var escapedArgs = cmd.Replace("\"", "\\\"");
|
||||
|
||||
var pc = new Process {
|
||||
StartInfo = new ProcessStartInfo {
|
||||
RedirectStandardOutput = true,
|
||||
UseShellExecute = false,
|
||||
CreateNoWindow = true,
|
||||
WindowStyle = ProcessWindowStyle.Hidden,
|
||||
FileName = "/bin/bash",
|
||||
Arguments = $"-c \"{escapedArgs}\""
|
||||
}
|
||||
};
|
||||
|
||||
pc.Start();
|
||||
pc.WaitForExit();
|
||||
}
|
||||
}
|
||||
@ -1,150 +0,0 @@
|
||||
{
|
||||
"Serilog": {
|
||||
"Using": [ "Serilog.Settings.Configuration", "Serilog.Expressions", "Serilog.Sinks.Console" ],
|
||||
"MinimumLevel": "Information",
|
||||
"Enrich": [ "FromLogContext", "WithMachineName", "WithProcessId", "WithThreadId" ],
|
||||
"WriteTo": [
|
||||
{
|
||||
"Name": "Console",
|
||||
"Args": {
|
||||
"restrictedToMinimumLevel": "Information",
|
||||
//"formatter": "Serilog.Formatting.Compact.RenderedCompactJsonFormatter, Serilog.Formatting.Compact"
|
||||
|
||||
"theme": "Serilog.Sinks.SystemConsole.Themes.AnsiConsoleTheme::Code, Serilog.Sinks.Console",
|
||||
"outputTemplate": "[{Timestamp:HH:mm:ss} {Level:u3}] {Message:lj} <s:{SourceContext}>{NewLine}{Exception}"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"Configuration": {
|
||||
"Environments": [
|
||||
{
|
||||
"Active": false,
|
||||
"Name": "StagingV2",
|
||||
"Url": "https://acme-staging-v02.api.letsencrypt.org/directory",
|
||||
|
||||
"Cache": "staging_cache",
|
||||
"ACME": {
|
||||
"Linux": {
|
||||
"Path": "/var/www/html/acme-challenge",
|
||||
"Ower": "nginx:nginx",
|
||||
"ChangeMode": "775"
|
||||
},
|
||||
"Windows": {
|
||||
"Path": "C:\\inetpub\\www\\acme-challenge"
|
||||
}
|
||||
},
|
||||
"SSL": {
|
||||
"Linux": {
|
||||
"Path": "/var/www/ssl/staging",
|
||||
"Owner": "nginx:nginx",
|
||||
"ChangeMode": "775"
|
||||
},
|
||||
"Windows": {
|
||||
"Path": "C:\\inetpub\\www\\ssl\\staging"
|
||||
}
|
||||
},
|
||||
"SSH": {
|
||||
"Active": true,
|
||||
"Host": "192.168.2.10",
|
||||
"Port": 22,
|
||||
"Username": "",
|
||||
"Password": ""
|
||||
}
|
||||
},
|
||||
{
|
||||
"Active": true,
|
||||
"Name": "ProductionV2",
|
||||
"Url": "https://acme-v02.api.letsencrypt.org/directory",
|
||||
|
||||
"Cache": "production_cache",
|
||||
"ACME": {
|
||||
"Linux": {
|
||||
"Path": "/var/www/html/acme-challenge",
|
||||
"Owner": "nginx:nginx",
|
||||
"ChangeMode": "775"
|
||||
},
|
||||
"Windows": {
|
||||
"Path": "C:\\inetpub\\www\\acme-challenge"
|
||||
}
|
||||
},
|
||||
"SSL": {
|
||||
"Linux": {
|
||||
"Path": "/var/www/ssl",
|
||||
"Owner": "nginx:nginx",
|
||||
"ChangeMode": "775"
|
||||
},
|
||||
"Windows": {
|
||||
"Path": "C:\\inetpub\\www\\ssl"
|
||||
}
|
||||
},
|
||||
"SSH": {
|
||||
"Active": true,
|
||||
"Host": "192.168.2.10",
|
||||
"Port": 22,
|
||||
"Username": "",
|
||||
"Password": ""
|
||||
}
|
||||
}
|
||||
],
|
||||
|
||||
"Customers": [
|
||||
{
|
||||
"Id": "9b4c8584-dc83-4388-b45f-2942e34dca9d",
|
||||
"Active": true,
|
||||
"Contacts": [ "maksym.sadovnychyy@gmail.com" ],
|
||||
"Name": "Maksym",
|
||||
"LastName": "Sadovnychyy",
|
||||
|
||||
"Sites": [
|
||||
{
|
||||
"Active": true,
|
||||
"Name": "maks-it.com",
|
||||
"Hosts": [
|
||||
"maks-it.com",
|
||||
"www.maks-it.com",
|
||||
|
||||
"git.maks-it.com",
|
||||
"www.git.maks-it.com",
|
||||
|
||||
"hcr.maks-it.com",
|
||||
"www.hcr.maks-it.com",
|
||||
|
||||
"vlt.maks-it.com",
|
||||
"www.vlt.maks-it.com",
|
||||
|
||||
"obj.maks-it.com",
|
||||
"www.obj.maks-it.com",
|
||||
|
||||
"s3.maks-it.com",
|
||||
"www.s3.maks-it.com"
|
||||
],
|
||||
"Challenge": "http-01"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"Id": "46337ef5-d69b-4332-b6ef-67959dfb3c2c",
|
||||
"Active": false,
|
||||
"Contacts": [
|
||||
"maksym.sadovnychyy@gmail.com",
|
||||
"anastasiia.pavlovskaia@gmail.com"
|
||||
],
|
||||
"Name": "Anastasiia",
|
||||
"LastName": "Pavlovskaia",
|
||||
|
||||
"Sites": [
|
||||
{
|
||||
"Active": true,
|
||||
"Name": "nastyarey.com",
|
||||
"Hosts": [
|
||||
"nastyarey.com",
|
||||
"www.nastyarey.com"
|
||||
],
|
||||
"Challenge": "http-01"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue
Block a user