File: //usr/local/CyberCP/manageSSL/__pycache__/views.cpython-310.pyc
o
��hdE � @ s� d dl mZ d dlmZmZ d dlmZ d dlmZ d dl m
Z
d dl Z d dl m
Z
d dlmZ d d
� Zd d � Zd
d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � ZdS ) � )�httpProc)�Websites� ChildDomains)�
Administrator)�virtualHostUtilities)� HttpResponseN)�
ACLManager)�ProcessUtilitiesc C s* | j d }t�|�}t| d|d�}|�� S )N�userIDzmanageSSL/index.html�admin)�sessionr � loadedACLr �render)�requestr
�
currentACL�proc� r �%/usr/local/CyberCP/manageSSL/views.py� loadSSLHome s
�r c C s: | j d }t�|�}t�||�}t| dd|id�}|�� S )Nr
zmanageSSL/manageSSL.html� websiteList� manageSSL�r r r
� findAllSitesr r �r r
r � websitesNamer r r r r s
�r c
C s� | j d }t�|�}t�||�}i }t�d�r d|d< nd|d< | jdkrA| j�d�}| j�d�}dd lm } |�
||� d|d
< t� � \}}}dd lm } |� � ||d< ||d< ||d < t
| d |d
�} | �� S )Nr
�all� �PremStatr �POST� SAVED_CF_Key�SAVED_CF_Email)�DNS� SaveSuccessr zmanageSSL/v2ManageSSL.htmlr )r r r
r �CheckForPremFeature�methodr �get�plogical.dnsUtilitiesr! �ConfigureCloudflareInAcme� FetchCloudFlareAPIKeyFromAcme�ConfigurePowerDNSInAcmer r )
r r
r r �datar r r! � RetStatusr r r r � v2ManageSSL s.
�r, c
C s� �za| j d }tjj|d�}�z.t�d��r6| jdk�r:t�|�}|d dkr(n|d dkr/nt�dd �W W S t �
| j �}|d
}t� |||�dkrKnt�� W W S zt
jj|d �}|jj}|j}W n tjj|d �}|j}d | d
}Y dtj d } | d | d | d | } t�| �}
|
�d�dkr�d|_|�� d|
v r�|
�dd�d n|
} ddd| |
d�} t �| �}
t|
�W W S |
}d}d|
v s�d|
v r�d}nTd|
v s�d |
v r�d }nId |
v s�d |
v r�d }n>d!|
v s�d"|
v r�d#}n3d$|
v r�d%}n,d&|
v s�d'|
v �rd(}n d)|
v �r
d*}nd+|
v �r"|
�d+d�}t |�dk�r"|d � � }d d ||
|
|d,�} t �| �}
t|
�W W S W W d S W W d S t �yb } zd d t |�d-�} t �| �}
t|
�W Y d }~W S d }~ww t �y} d d t |�d-�} t �| �}
t|
� Y S w ).Nr
��pkr r r r r �SSLr � virtualHost��domain�/home/� /public_html� /usr/local/CyberCP/bin/python �!/plogical/virtualHostUtilities.pyz issueSSLv2 --virtualHostName � --administratorEmail � --path z1,����None)�statusr/ �
error_message�sslLogs�
fullOutputzSSL issuance failedz
Rate limitz
rate limitz?Let's Encrypt rate limit exceeded. Please wait before retrying.z DNS problem�NXDOMAINzGDNS validation failed. Please ensure your domain points to this server.zConnection refusedzConnection timeoutz?Could not connect to ACME server. Check your firewall settings.� Unauthorized�
authorizationzFDomain authorization failed. Verify domain ownership and DNS settings.z
CAA recordz9CAA record prevents issuance. Check your DNS CAA records.zChallenge failedzchallenge failedzXACME challenge failed. Ensure port 80 is accessible and .well-known path is not blocked.zInvalid responsezJInvalid response from ACME challenge. Check your web server configuration.z0,)r; r/ r< r= r> �technicalDetails�r; r/ r< )!r r �objectsr% r r# r$ r
�
loadErrorJson�json�loads�body�checkOwnershipr �master�
adminEmail�pathr r �
cyberPanelr �outputExecutioner�find�ssl�save�split�dumpsr �len�strip�
BaseException�str�KeyError)r r
r r r* r0 �websiterK rL �execPath�output�logs�data_ret� json_datar< �detailed_error� error_parts�msgr r r �
v2IssueSSL> s�
�
�
�P�
���
�rb c
C s� z�| j d }tjj|d�}z�| jdkr�t�|�}|d dkr n|d dkr&nt�dd�W W S t� | j
�}|d }t� |||�dkrBnt�� W W S zt jj|d
�}|j
j}|j}W n tjj|d
�}|j}d | d }Y d
tj d } | d | d | d | } t�| �}
|
�d�dkr�ndd|
d�} t�| �} t| �W W S d|_|�� dddd�} t�| �} t| �W W S W W d S ty� }
zddt|
�d�} t�| �} t| �W Y d }
~
W S d }
~
ww t y� ddt|
�d�} t�| �} t| � Y S w )Nr
r- r r r r r/ r r0 r1 r3 r4 r5 r6 z issueSSL --virtualHostName r7 r8 �1,Noner9 rC r: ) r r rD r% r$ r r
rE rF rG rH rI r rJ rK rL r r rM r rN rO rS r rP rQ rV rW rX )r r
r r r* r0 rY rK rL rZ r[ r] r^ ra r r r �issueSSL� sr
�
�
�3�
�� �
�rd c C s< | j d }t�|�}t�||d�}t| dd|id�}|�� S )Nr
r z manageSSL/sslForHostName.htmlr � hostnameSSLr r r r r �sslForHostName� s
�rf c
C s� z�| j d }z�| jdkr�t�|�}|d dkrn|d dkr nt�dd�W W S t�| j�}|d }ztj j
|d �}d
| d }W n t j j
|d �}|j }Y t
j j
|d �}t�|||�dkr`nt�� W W S d
tj d }|d | d | }t�|�} | �d�dkr�dddd�}
t�|
�} t| �W W S dd| d�}
t�|
�} t| �W W S W W d S ty� } zddt| �d�}
t�|
�} t| �W Y d } ~ W S d } ~ ww ty� ddt| �d�}
t�|
�} t| � Y S w )Nr
r r r re r/ r r0 r1 r3 r4 r- r5 r6 z' issueSSLForHostName --virtualHostName r8 rc r9 r: rC )r r$ r r
rE rF rG rH r rD r% r rL r rI r rM r rN rO rS r rV rW rX )
r r
r r* r0 rY rL r rZ r[ r] r^ ra r r r �obtainHostNameSSL� sh
�
�
�/�
�� �
�rg c C sH | j d }t�|�}t�||�}|t�|� }t| dd|id�}|�� S )Nr
z manageSSL/sslForMailServer.htmlr �
mailServerSSL)r r r
r �findChildDomainsr r r r r r �sslForMailServer, s
�rj c
C s� z�| j d }z�| jdkr�t�|�}|d dkrn|d dkr nt�dd�W W S t�| j�}|d }tj j
|d �}t� |||�dkrBnt�� W W S d
| d }d t j
d
}|d | d | }t�|�}|�d�dkr|dddd�} t�| �}
t|
�W W S dd|d�} t�| �}
t|
�W W S W W d S ty� } zddt| �d�} t�| �}
t|
�W Y d } ~ W S d } ~ ww ty� } zddt| �d�} t�| �}
t|
�W Y d } ~ S d } ~ ww )Nr
r r r rh r/ r r0 r- r3 r4 r5 r6 z) issueSSLForMailServer --virtualHostName r8 rc r9 r: rC )r r$ r r
rE rF rG rH r rD r% rI r rM r rN rO rS r rV rW rX ) r r
r r* r0 r rL rZ r[ r] r^ ra r r r �obtainMailServerSSL8 s`
�
�
�*�
���
��rk c
C s0 z�| j d }tjj|d�}z�| jdkr�t�|�}|d dkr n|d dkr&nt�dd�W W S t� | j
�}|d }t� |||�dkrBnt�� W W S z t jj|d
�}W n t
jj|d
�}Y zVdd l}dd lm} d | } |j�|jjt| d
��� �}
|
�� �d�} |�| d�} |�� }
| |
}ddt|j�|
�� � � d d �d�| � d�d�}|d dkr�d|d< W n t y� } zddt|�d�}W Y d }~nd }~ww t� |�}t |�W W S W W d S t y� } zdt|�d�}t� |�}t |�W Y d }~W S d }~ww t!�y ddd�}t� |�}t |� Y S w )Nr
r- r r r r r/ r r0 r1 )�datetimez&/etc/letsencrypt/live/%s/fullchain.pem�r�asciiz
%Y%m%d%H%M%SZTzutf-8z%Y-%m-%d %H:%M:%S)r; �hasSSL�days� authority�
expiryDaterq �DenialzSELF-SIGNED SSLF)r; ro r< )r; r< z
Not logged in)"r r rD r% r$ r r
rE rF rG rH rI r r �OpenSSLrl �crypto�load_certificate� FILETYPE_PEM�open�read� get_notAfter�decode�strptime�nowrW rp �
get_issuer�get_components�strftimerV rS r rX )r r
r r r* r0 rY rt rl �filePath�x509�
expireData� finalDater} �diffr] ra r^ r r r �
getSSLDetailsq sz
� � ����
�8
��
�r� )�plogical.httpProcr �websiteFunctions.modelsr r �loginSystem.modelsr � plogical.virtualHostUtilitiesr � django.httpr rF � plogical.aclr �plogical.processUtilitiesr r r r, rb rd rf rg rj rk r� r r r r �<module> s$ bD ? 9