File: //usr/local/CyberCP/plogical/__pycache__/sslv2.cpython-310.pyc
o
��h�h � @ s� d dl Z d dlZd dlmZ d dlZd dlZd dlZd dlZd dl m
Z
d dl m Z z
d dl
mZmZ W n Y G dd� d�Zd
dd �ZdS ) � N)�CyberCPLogFileWriter)�
ACLManager)�ProcessUtilities)� ChildDomains�Websitesc @ sx e Zd ZdZdZedd� �Zedd� �Zedd� �Zed d
� �Z edd d
��Z
edd� �Z edd� �Z eddd��Z
dS )� sslUtilitiesz/usr/local/lswsz&/usr/local/lsws/conf/dvhost_redis.confc
C s� zOt d��� }d}|D ]A}|�d�dkr |�d�dkr d}q |dkr-|�d�dkr- W dS |�| �dkrL|dkrLdd � |�d
�D �}|d | krL W dS q W d S tyl } ztj�t|�d � W Y d }~dS d }~ww ) N�&/usr/local/lsws/conf/httpd_config.confr �listener����SSL� �}c S s g | ]}|r|�qS � r )�.0�_fr r �$/usr/local/CyberCP/plogical/sslv2.py�
<listcomp>' s z.sslUtilities.checkIfSSLMap.<locals>.<listcomp>� z1 [IO Error with main config file [checkIfSSLMap]]) �open� readlines�find�split�
BaseException�loggingr � writeToFile�str)�virtualHostName�data�sslCheck�items�msgr r r �
checkIfSSLMap s* �� ��zsslUtilities.checkIfSSLMapc
C �t zt d��� } | D ]
}|�d�dkr W dS q W dS ty9 } ztj�t|�d � t|�W Y d }~S d }~ww )Nr z listener SSLr
r z4 [IO Error with main config file [checkSSLListener]]r �r r r r r r r r �r r r r r r �checkSSLListener/ s �����z sslUtilities.checkSSLListenerc
C r" )Nr zlistener SSL IPv6r
r z8 [IO Error with main config file [checkSSLIPv6Listener]]r r# r$ r r r �checkSSLIPv6Listener< s ���
���z!sslUtilities.checkSSLIPv6Listenerc
C s^ zt �| �}t �d| �}d||gW S ty. } zddt|� d gW Y d }~S d }~ww )Nzwww.r r �347 � [issueSSLForDomain])�socket�
gethostbynamer r )r �
withoutWWW�withWWWr r r r �
getDNSRecordsJ s
��zsslUtilities.getDNSRecords�domain@cyberpanel.netc 1
C s� z t jj| d�}|j}W n ty( } ztj�dt|� � W Y d }~nd }~ww t �
� t j k�rjt j
d | }|d }�zd| d | d }t �� dkr�td d
�}d }d } d
}
d| d } d| d } d}
d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�|
� |�| � |�| � |�|
� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �� dk�rstd d
�}d}d } d
}
d| d } d| d } d}
d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�|
� |�| � |�| � |�|
� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �| �d k�r�td ��� }td d �}d }|D ]-}|�d �d k�r�|�d!�d k�r�d}|dk�r�|�|� |�|� d }�q�|�|� �q�|�� t|d"��� }d }|D ]
}|�d#�d k�r�d}�q�|d k�rIt|d
�}d$}d%| d } d&| d } d}
d}d}d}d}d}d}d}d'}|�d� |�|� |�| � |�| � |�|
� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t�yi } ztj�t|�d( � W Y d }~d S d }~ww tj�t j��s�t j
d | }|d }t|d"��� }|D ]}|�d)�d k�r� dS �q�z�ztjj| d�} | jj } d*| j d } W n) t�y� } z t jj| d�}|j } t � d | �} d*| � d�} W Y d }~nd }~ww t|d"��� }d+} |D ]}|�d,�d k�r�|�d-�d k�r�|} n�q�t|d
�}!d.}"d/}#d0| d }$d1| d }%d2| d }&d3| d | d }'d4| d5 | d6 }(|!�|#� |!�|$� |!�|%� |!�|&� |!�|'� |!�| � |!�|(� |!�|"� d7})d8}*d9| d }+d:| d },|!�|)� |!�|*� |!�|+� |!�|,� |!�| � d;}-|!�|-� |!�� W dS t�y� } ztj�t|�d< � W Y d }~d S d }~ww td=| d> �� � � d�}.td=| d? d"�� � � d�}/d@| |.|/f }0tj�dA� tj�|0� t �!|0� dS )BN)�domainz%s [installSSLForDomain:72]z
/conf/vhosts/z /vhost.confz map r �
r r �azlistener SSL {
z address *:443
z secure 1
z1 keyFile /etc/letsencrypt/live/z
/privkey.pem
z1 certFile /etc/letsencrypt/live/z/fullchain.pem
z certChain 1
z sslProtocol 24
z enableECDHE 1
z renegProtection 1
z sslSessionCache 1
z enableSpdy 15
z enableStapling 1
z! ocspRespMaxAge 86400
z}
zlistener SSL IPv6 {
z$ address [ANY]:443
r �wr r
r �r�vhsslz vhssl {
z0 keyFile /etc/letsencrypt/live/z0 certFile /etc/letsencrypt/live/r
z [installSSLForDomain]]z*:443z DocumentRoot � �
AddHandler�phpzj <IfModule LiteSpeed>
CacheRoot lscache
CacheLookup on
</IfModule>
z
<VirtualHost *:443>
z ServerName z ServerAlias www.z ServerAdmin z SuexecUserGroup z CustomLog /home/z/logs/z.access_log combined
z SSLEngine on
z SSLVerifyClient none
z- SSLCertificateFile /etc/letsencrypt/live/z0 SSLCertificateKeyFile /etc/letsencrypt/live/z</VirtualHost>
z [installSSLForDomain]�/etc/letsencrypt/live/�/fullchain.pem� /privkey.pemz*redis-cli hmset "ssl:%s" crt "%s" key "%s"zhello world aaa)"r �objects�get�
adminEmailr r r r r r � decideServer�OLSr � Server_rootr% r �
writelines�closer& r! r r �os�path�exists� redisConfr �master� externalAppr �FindDocRootOfSite�read�rstrip� executioner)1r r= �websiter �confPath�completePathToConfigFile�map�writeDataToFiler �address�secure�keyFile�certFile� certChain� sslProtocol� enableECDHE�renegProtection�sslSessionCache�
enableSpdy�enableStapling�ocspRespMaxAge�finalr r r �
vhsslPresense�writeSSLConfigr4 �
chilDomainrH � DocumentRoot�docRoot�
phpHandler�confFile� cacheRoot� VirtualHost�
ServerName� ServerAlias� ServerAdmin�SeexecUserGroup�CustomLogCombined� SSLEngine�SSLVerifyClient�SSLCertificateFile�SSLCertificateKeyFile�VirtualHostEnd�cert�key�commandr r r �installSSLForDomainV s�
��
l�
E�
�
��� �� �
��
z sslUtilities.installSSLForDomainc
C sV z�dd l }t�� \}}}|jd d�}|r�|| �}|jd |j }tj�d|� �� dd l }|dd�} |j ||d�}
z |
j
j | d�} W n t y[ } z
dt
| �fW Y d } ~ W S d } ~ ww t| d d
� d �D ](}
tj�d |
d
� �� |
d
|kr�|
d dkr� W dS tj�d|
d
� �� qdW dS W dS t y� } z dt
| �fW Y d } ~ S d } ~ ww )Nr �� cache_dir�.ztop level domain in cf: �2 )�name�per_page)�email�token)�paramsc S s | d S )Nrz r )�vr r r �<lambda>f s z7sslUtilities.FindIfDomainInCloudflare.<locals>.<lambda>)rs zzone: rz �status�active�r Nzzone is not active in cf: )r z Zone not found in Cloudflare)r zError in finding keys.)�
tldextractr � FetchCloudFlareAPIKeyFromAcme�
TLDExtractr/ �suffixr r r �
CloudFlare�zonesr< r r �sorted)r r� � RetStatus� SAVED_CF_Key�SAVED_CF_Email�no_cache_extract�
extractDomain�topLevelDomainr� r~ �cfr� r �zoner r r �FindIfDomainInCloudflareO s<
�� ���z%sslUtilities.FindIfDomainInCloudflarec
C s� zfdd l }ddlm} ddlm} |jd d�}|| �}|jd |j }|jj |d�}|�
|d|� �dt � � dd � t
�d
� t�d|� �d tj�d }tj�d t|�� d�� |d d t � � krdW d
S W dS ty~ } z dt| �fW Y d } ~ S d } ~ ww )Nr )�DNS)�Domainsrv rx )rz zcptest.�Ai � z
PDNS Result: � r� )r zIP Does not match)r� �plogical.dnsUtilitiesr� �
dns.modelsr� r� r/ r� r; r< �createDNSRecordr � GetServerIP�time�sleepr) � getaddrinfo�AF_INETr r r r r )
r r� r� r� r� r� r� r� �resultr r r r �FindIfDomainInPowerDNSu s&
��z#sslUtilities.FindIfDomainInPowerDNSNc
C s� |r#d|v s
d|v r#dd l }|�dd| �}|� d�}tj�d|� �� dt�� }d}d}d} d | }
tj� |
�r^dd l
} | j � | j j
t|
d
��� �} | �� �� d d �d �}
|
d
kr^dS t�| �\}}d}|rld}nt�| �\} }| rxd}ndS �z�d}d||f }t�t�|�� |d u �r�d| }tj� |�s�d| }t�t�|�� zO|d| � d| � � d | d d | d d | d d |� d � }tj�|d� t�t�|���d �}tj�d | d! | d� tj�|||d"| � W �nJ tj�y� tj�d#| d! | d� d#| d! | }z`|d | d | d d | d d | d d |� d � }d$|| f }d$|| f }tj�d%| d� tj�|� t�t�|���d �}tj�d | d� d&|| f }tj�|||d"| � W n( tj�y� tj�d'| d� tj�||d'| d"| � d|f Y Y W S w Y n�w d| }tj� |��s�d| }t� t�|�� zctj�d%| d( | d) | d* | d+ � |d | d, | d- | d, | d | d d | d d | d d |� d � }t�t�|���d �}tj�d | d( | d) | d. | d+ � W n& tj�y@ tj�d#| d( | d) | d. | d+ � d|f Y W S w |� d/�d0k�rNd |fW S d|fW S t �yu } ztj�t |�d1 � dt |�fW Y d }~S d }~ww )2Nz example.orgz example.comr z [^a-zA-Z0-9]r5 z@cyberpanel.netz Replacing invalid email with zroot@%sz&/etc/letsencrypt/live/%s/fullchain.pemr3 r zutf-8�Denial)r z%This domain already have a valid SSL.�dns_cf�dns_cyberpanel)r z;Domain is not active in any of the configured DNS provider.z/root/.acme.sh/acme.shz%s --register-account -m %sr8 z mkdir -p z --issue -d z -d *.z
--cert-file z /cert.pemz --key-file r: z --fullchain-file r9 z --dns z5 -k ec-256 --force --server letsencrypt --dnssleep 20z Successfully obtained SSL for: z
and: www.zSSL Notification for %s.zFailed to obtain SSL for: z %s
Trying to obtain SSL for: %szTrying to obtain SSL for: z%%s
Successfully obtained SSL for: %s.z3Failed to obtain SSL, issuing self-signed SSL for: z, www.z, z and www.�,z -d www.z -d zand www.z Cert successr
z. [Failed to obtain SSL. [obtainSSLForADomain]]) �re�subr r r r) � gethostnamerC rD rE �OpenSSL�crypto�load_certificate� FILETYPE_PEMr rJ �
get_issuer�get_components�decoder r� r� �
subprocess� check_output�shlexr � SendEmail�CalledProcessError�callr r r )r r= �sslpath� aliasDomainr� � clean_domain� sender_email�CF_Check�Namecheck_Check�CyberPanel_Check�filePathr� �x509� SSLProvider�message�
DNS_TO_USE�acmePathrt �existingCertPath�output� finalText�CurrentMessager r r r �obtainSSLForADomain� sJ
���������
��
���������
� � ��
����!"��������������
�"�"��
��z sslUtilities.obtainSSLForADomain)r. �N)�__name__�
__module__� __qualname__r@ rF � staticmethodr! r% r& r- ru r� r� r� r r r r r s(
y
%
r c
C s� z%t �| |||�\}}|dkr!t �| |�dkr d|gW S d|gW S d|gW S tyA } zddt|� d gW Y d }~S d }~ww )Nr r r' r( )r r� ru r r )r/ r= r� r� � retStatusr� r r r r �issueSSLForDomain! s
��r� r� )r� �requests�plogicalr r rC r� r� r) � plogical.aclr �plogical.processUtilitiesr �websiteFunctions.modelsr r r r� r r r r �<module> s&