mirror of
https://github.com/MAKS-IT-COM/maksit-certs-ui.git
synced 2025-12-31 04:00:03 +01:00
environment logic improvement
This commit is contained in:
root
parent
60965753f0
commit
9b4d28ec64
@ -32,167 +32,167 @@ namespace LetsEncrypt
|
|||||||
}
|
}
|
||||||
|
|
||||||
public void Run() {
|
public void Run() {
|
||||||
|
_appSettings.environments.Where(env => env.active).ToList().ForEach(env => {
|
||||||
try
|
try {
|
||||||
{
|
Console.WriteLine(string.Format("Let's Encrypt C# .Net Core Client, environment: {0}", env.name));
|
||||||
LetsEncrypt.Helpers.Environment env = _appSettings.environments.Where(x => x.name == _appSettings.active).FirstOrDefault();
|
|
||||||
|
|
||||||
Console.WriteLine(string.Format("Let's Encrypt C# .Net Core Client, environment: {0}", env.name));
|
|
||||||
|
|
||||||
//loop all customers
|
//loop all customers
|
||||||
foreach(Customer customer in _appSettings.customers) {
|
foreach(Customer customer in _appSettings.customers) {
|
||||||
try {
|
try {
|
||||||
Console.WriteLine(string.Format("Managing customer: {0} - {1} {2}", customer.id, customer.name, customer.lastname));
|
Console.WriteLine(string.Format("Managing customer: {0} - {1} {2}", customer.id, customer.name, customer.lastname));
|
||||||
|
|
||||||
//loop each customer website
|
//loop each customer website
|
||||||
foreach(Site site in customer.sites.Where(s => s.active)) {
|
foreach(Site site in customer.sites.Where(s => s.active)) {
|
||||||
Console.WriteLine(string.Format("Managing site: {0}", site.name));
|
Console.WriteLine(string.Format("Managing site: {0}", site.name));
|
||||||
|
|
||||||
try {
|
try {
|
||||||
//define cache folder
|
//define cache folder
|
||||||
string cache = Path.Combine(AppPath, env.cache, customer.id);
|
string cache = Path.Combine(AppPath, env.cache, customer.id);
|
||||||
if(!Directory.Exists(cache)) {
|
if(!Directory.Exists(cache)) {
|
||||||
Directory.CreateDirectory(cache);
|
Directory.CreateDirectory(cache);
|
||||||
}
|
|
||||||
|
|
||||||
//1. Client initialization
|
|
||||||
Console.WriteLine("1. Client Initialization...");
|
|
||||||
_letsEncryptService.Init(env.url, cache, site.name, customer.contacts).Wait();
|
|
||||||
|
|
||||||
|
|
||||||
Console.WriteLine(string.Format("Terms of service: {0}", _letsEncryptService.GetTermsOfServiceUri()));
|
|
||||||
|
|
||||||
//create folder for ssl
|
|
||||||
string ssl = Path.Combine(env.ssl, site.name);
|
|
||||||
if(!Directory.Exists(ssl)) {
|
|
||||||
Directory.CreateDirectory(ssl);
|
|
||||||
}
|
|
||||||
|
|
||||||
// get cached certificate and check if it's valid
|
|
||||||
// if valid check if cert and key exists otherwise recreate
|
|
||||||
// else continue with new certificate request
|
|
||||||
CachedCertificateResult certRes = new CachedCertificateResult();
|
|
||||||
if (_letsEncryptService.TryGetCachedCertificate(site.name, out certRes)) {
|
|
||||||
string cert = Path.Combine(ssl, site.name + ".crt");
|
|
||||||
//if(!File.Exists(cert))
|
|
||||||
File.WriteAllText(cert, certRes.Certificate);
|
|
||||||
|
|
||||||
string key = Path.Combine(ssl, site.name + ".key");
|
|
||||||
//if(!File.Exists(key)) {
|
|
||||||
using (StreamWriter writer = File.CreateText(key))
|
|
||||||
_keyService.ExportPrivateKey(certRes.PrivateKey, writer);
|
|
||||||
//}
|
|
||||||
|
|
||||||
Console.WriteLine("Certificate and Key exists and valid. Restored from cache.");
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
//new nonce
|
|
||||||
_letsEncryptService.NewNonce().Wait();
|
|
||||||
|
|
||||||
//try to make new order
|
|
||||||
try {
|
|
||||||
//create new orders
|
|
||||||
Console.WriteLine("2. Client New Order...");
|
|
||||||
Task<Dictionary<string, string>> orders = _letsEncryptService.NewOrder(site.hosts, site.challenge);
|
|
||||||
orders.Wait();
|
|
||||||
|
|
||||||
switch(site.challenge) {
|
|
||||||
case "http-01": {
|
|
||||||
//ensure to enable static file discovery on server in .well-known/acme-challenge
|
|
||||||
//and listen on 80 port
|
|
||||||
|
|
||||||
//check acme directory
|
|
||||||
string acme = Path.Combine(env.www, env.acme);
|
|
||||||
if(!Directory.Exists(acme)) {
|
|
||||||
throw new DirectoryNotFoundException(string.Format("Directory {0} wasn't created", acme));
|
|
||||||
}
|
|
||||||
|
|
||||||
foreach (FileInfo file in new DirectoryInfo(acme).GetFiles()) {
|
|
||||||
if(file.LastWriteTimeUtc < DateTime.UtcNow.AddMonths(-3))
|
|
||||||
file.Delete();
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
foreach (var result in orders.Result)
|
|
||||||
{
|
|
||||||
Console.WriteLine("Key: " + result.Key + System.Environment.NewLine + "Value: " + result.Value);
|
|
||||||
string[] splitToken = result.Value.Split('~');
|
|
||||||
|
|
||||||
string token = Path.Combine(acme, splitToken[0]);
|
|
||||||
File.WriteAllText(token, splitToken[1]);
|
|
||||||
}
|
|
||||||
|
|
||||||
_terminalService.Exec("chgrp -R nginx /var/www");
|
|
||||||
_terminalService.Exec("chmod -R g+rwx /var/www");
|
|
||||||
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
|
|
||||||
case "dns-01": {
|
|
||||||
//Manage DNS server MX record, depends from provider
|
|
||||||
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
|
|
||||||
default: {
|
|
||||||
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
//complete challanges
|
|
||||||
Console.WriteLine("3. Client Complete Challange...");
|
|
||||||
_letsEncryptService.CompleteChallenges().Wait();
|
|
||||||
Console.WriteLine("Challanges comleted.");
|
|
||||||
}
|
|
||||||
catch (Exception ex) {
|
|
||||||
Console.WriteLine(ex.Message.ToString());
|
|
||||||
_letsEncryptService.GetOrder(site.hosts).Wait();
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
//1. Client initialization
|
||||||
|
Console.WriteLine("1. Client Initialization...");
|
||||||
|
_letsEncryptService.Init(env.url, cache, site.name, customer.contacts).Wait();
|
||||||
|
|
||||||
// Download new certificate
|
|
||||||
Console.WriteLine("4. Download certificate...");
|
|
||||||
_letsEncryptService.GetCertificate(site.name).Wait();
|
|
||||||
|
|
||||||
// Write to filesystem
|
Console.WriteLine(string.Format("Terms of service: {0}", _letsEncryptService.GetTermsOfServiceUri()));
|
||||||
certRes = new CachedCertificateResult();
|
|
||||||
|
//create folder for ssl
|
||||||
|
string ssl = Path.Combine(env.ssl, site.name);
|
||||||
|
if(!Directory.Exists(ssl)) {
|
||||||
|
Directory.CreateDirectory(ssl);
|
||||||
|
}
|
||||||
|
|
||||||
|
// get cached certificate and check if it's valid
|
||||||
|
// if valid check if cert and key exists otherwise recreate
|
||||||
|
// else continue with new certificate request
|
||||||
|
CachedCertificateResult certRes = new CachedCertificateResult();
|
||||||
if (_letsEncryptService.TryGetCachedCertificate(site.name, out certRes)) {
|
if (_letsEncryptService.TryGetCachedCertificate(site.name, out certRes)) {
|
||||||
string cert = Path.Combine(ssl, site.name + ".crt");
|
string cert = Path.Combine(ssl, site.name + ".crt");
|
||||||
File.WriteAllText(cert, certRes.Certificate);
|
//if(!File.Exists(cert))
|
||||||
|
File.WriteAllText(cert, certRes.Certificate);
|
||||||
|
|
||||||
string key = Path.Combine(ssl, site.name + ".key");
|
string key = Path.Combine(ssl, site.name + ".key");
|
||||||
using (StreamWriter writer = File.CreateText(key))
|
//if(!File.Exists(key)) {
|
||||||
_keyService.ExportPrivateKey(certRes.PrivateKey, writer);
|
using (StreamWriter writer = File.CreateText(key))
|
||||||
|
_keyService.ExportPrivateKey(certRes.PrivateKey, writer);
|
||||||
|
//}
|
||||||
|
|
||||||
Console.WriteLine("Certificate saved.");
|
Console.WriteLine("Certificate and Key exists and valid. Restored from cache.");
|
||||||
}
|
}
|
||||||
else {
|
else {
|
||||||
Console.WriteLine("Unable to get new cached certificate.");
|
//new nonce
|
||||||
|
_letsEncryptService.NewNonce().Wait();
|
||||||
|
|
||||||
|
//try to make new order
|
||||||
|
try {
|
||||||
|
//create new orders
|
||||||
|
Console.WriteLine("2. Client New Order...");
|
||||||
|
Task<Dictionary<string, string>> orders = _letsEncryptService.NewOrder(site.hosts, site.challenge);
|
||||||
|
orders.Wait();
|
||||||
|
|
||||||
|
switch(site.challenge) {
|
||||||
|
case "http-01": {
|
||||||
|
//ensure to enable static file discovery on server in .well-known/acme-challenge
|
||||||
|
//and listen on 80 port
|
||||||
|
|
||||||
|
//check acme directory
|
||||||
|
string acme = Path.Combine(env.www, env.acme);
|
||||||
|
if(!Directory.Exists(acme)) {
|
||||||
|
throw new DirectoryNotFoundException(string.Format("Directory {0} wasn't created", acme));
|
||||||
|
}
|
||||||
|
|
||||||
|
foreach (FileInfo file in new DirectoryInfo(acme).GetFiles()) {
|
||||||
|
if(file.LastWriteTimeUtc < DateTime.UtcNow.AddMonths(-3))
|
||||||
|
file.Delete();
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
foreach (var result in orders.Result)
|
||||||
|
{
|
||||||
|
Console.WriteLine("Key: " + result.Key + System.Environment.NewLine + "Value: " + result.Value);
|
||||||
|
string[] splitToken = result.Value.Split('~');
|
||||||
|
|
||||||
|
string token = Path.Combine(acme, splitToken[0]);
|
||||||
|
File.WriteAllText(token, splitToken[1]);
|
||||||
|
}
|
||||||
|
|
||||||
|
_terminalService.Exec("chgrp -R nginx /var/www");
|
||||||
|
_terminalService.Exec("chmod -R g+rwx /var/www");
|
||||||
|
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
|
case "dns-01": {
|
||||||
|
//Manage DNS server MX record, depends from provider
|
||||||
|
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
|
default: {
|
||||||
|
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
//complete challanges
|
||||||
|
Console.WriteLine("3. Client Complete Challange...");
|
||||||
|
_letsEncryptService.CompleteChallenges().Wait();
|
||||||
|
Console.WriteLine("Challanges comleted.");
|
||||||
|
}
|
||||||
|
catch (Exception ex) {
|
||||||
|
Console.WriteLine(ex.Message.ToString());
|
||||||
|
_letsEncryptService.GetOrder(site.hosts).Wait();
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Download new certificate
|
||||||
|
Console.WriteLine("4. Download certificate...");
|
||||||
|
_letsEncryptService.GetCertificate(site.name).Wait();
|
||||||
|
|
||||||
|
// Write to filesystem
|
||||||
|
certRes = new CachedCertificateResult();
|
||||||
|
if (_letsEncryptService.TryGetCachedCertificate(site.name, out certRes)) {
|
||||||
|
string cert = Path.Combine(ssl, site.name + ".crt");
|
||||||
|
File.WriteAllText(cert, certRes.Certificate);
|
||||||
|
|
||||||
|
string key = Path.Combine(ssl, site.name + ".key");
|
||||||
|
using (StreamWriter writer = File.CreateText(key))
|
||||||
|
_keyService.ExportPrivateKey(certRes.PrivateKey, writer);
|
||||||
|
|
||||||
|
Console.WriteLine("Certificate saved.");
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
Console.WriteLine("Unable to get new cached certificate.");
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
}
|
}
|
||||||
|
catch (Exception ex) {
|
||||||
|
Console.WriteLine(ex.Message.ToString());
|
||||||
}
|
}
|
||||||
catch (Exception ex) {
|
|
||||||
Console.WriteLine(ex.Message.ToString());
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
catch (Exception ex) {
|
||||||
|
Console.WriteLine(ex.Message.ToString());
|
||||||
|
}
|
||||||
}
|
}
|
||||||
catch (Exception ex) {
|
|
||||||
Console.WriteLine(ex.Message.ToString());
|
if(env.name == "ProductionV2") {
|
||||||
}
|
_terminalService.Exec("systemctl restart nginx");
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
catch (Exception ex) {
|
||||||
|
Console.WriteLine(ex.Message.ToString());
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
_terminalService.Exec("systemctl restart nginx");
|
|
||||||
|
|
||||||
}
|
|
||||||
catch (Exception ex) {
|
|
||||||
Console.WriteLine(ex.Message.ToString());
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@ -1,12 +1,12 @@
|
|||||||
namespace LetsEncrypt.Helpers
|
namespace LetsEncrypt.Helpers
|
||||||
{
|
{
|
||||||
public class AppSettings {
|
public class AppSettings {
|
||||||
public string active { get; set; }
|
|
||||||
public Environment [] environments { get; set; }
|
public Environment [] environments { get; set; }
|
||||||
public Customer [] customers { get; set;}
|
public Customer [] customers { get; set;}
|
||||||
}
|
}
|
||||||
|
|
||||||
public class Environment {
|
public class Environment {
|
||||||
|
public bool active { get; set; }
|
||||||
public string name { get; set; }
|
public string name { get; set; }
|
||||||
public string url { get; set; }
|
public string url { get; set; }
|
||||||
public string cache { get; set; }
|
public string cache { get; set; }
|
||||||
|
|||||||
@ -1,10 +1,8 @@
|
|||||||
{
|
{
|
||||||
"AppSettings": {
|
"AppSettings": {
|
||||||
|
|
||||||
"active": "StagingV2",
|
|
||||||
|
|
||||||
"environments": [
|
"environments": [
|
||||||
{
|
{
|
||||||
|
"active": true,
|
||||||
"name": "StagingV2",
|
"name": "StagingV2",
|
||||||
"url": "https://acme-staging-v02.api.letsencrypt.org/directory",
|
"url": "https://acme-staging-v02.api.letsencrypt.org/directory",
|
||||||
|
|
||||||
@ -14,6 +12,7 @@
|
|||||||
"ssl": "/home/maksym/source/temp"
|
"ssl": "/home/maksym/source/temp"
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
"active": false,
|
||||||
"name": "ProductionV2",
|
"name": "ProductionV2",
|
||||||
"url": "https://acme-v02.api.letsencrypt.org/directory",
|
"url": "https://acme-v02.api.letsencrypt.org/directory",
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user