|
Server : LiteSpeed System : Linux host 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64 User : idnco5810 ( 1093) PHP Version : 8.2.29 Disable Function : NONE Directory : /usr/local/CyberCP/plogical/__pycache__/ |
Upload File : |
o
��gsf � @ s� d dl Z d dlZd dlmZ d dlZd dlZd dlZd dlZd dl m
Z
d dl m Z z
d dl
mZmZ W n Y G dd� d�Zd
dd �ZdS ) � N)�CyberCPLogFileWriter)�
ACLManager)�ProcessUtilities)� ChildDomains�Websitesc @ sx e Zd ZdZdZedd� �Zedd� �Zedd� �Zed d
� �Z edd d
��Z
edd� �Z edd� �Z eddd��Z
dS )� sslUtilitiesz/usr/local/lswsz&/usr/local/lsws/conf/dvhost_redis.confc
C s� zOt d��� }d}|D ]A}|�d�dkr |�d�dkr d}q |dkr-|�d�dkr- W dS |�| �dkrL|dkrLdd � |�d
�D �}|d | krL W dS q W d S tyl } ztj�t|�d � W Y d }~dS d }~ww ) N�&/usr/local/lsws/conf/httpd_config.confr �listener����SSL� �}c S s g | ]}|r|�qS � r )�.0�_fr r �$/usr/local/CyberCP/plogical/sslv2.py�
<listcomp>' s z.sslUtilities.checkIfSSLMap.<locals>.<listcomp>� z1 [IO Error with main config file [checkIfSSLMap]]) �open� readlines�find�split�
BaseException�loggingr � writeToFile�str)�virtualHostName�data�sslCheck�items�msgr r r �
checkIfSSLMap s* �� ��zsslUtilities.checkIfSSLMapc
C �t zt d��� } | D ]
}|�d�dkr W dS q W dS ty9 } ztj�t|�d � t|�W Y d }~S d }~ww )Nr z listener SSLr
r z4 [IO Error with main config file [checkSSLListener]]r �r r r r r r r r �r r r r r r �checkSSLListener/ � �����z sslUtilities.checkSSLListenerc
C r" )Nr zlistener SSL IPv6r
r z8 [IO Error with main config file [checkSSLIPv6Listener]]r r# r$ r r r �checkSSLIPv6Listener= r& z!sslUtilities.checkSSLIPv6Listenerc
C s^ zt �| �}t �d| �}d||gW S ty. } zddt|� d gW Y d }~S d }~ww )Nzwww.r r �347 � [issueSSLForDomain])�socket�
gethostbynamer r )r �
withoutWWW�withWWWr r r r �
getDNSRecordsJ s
��zsslUtilities.getDNSRecords�example@example.orgc 1
C s� z t jj| d�}|j}W n ty( } ztj�dt|� � W Y d }~nd }~ww t �
� t j k�rjt j
d | }|d }�zd| d | d }t �� dkr�td d
�}d }d } d
}
d| d } d| d } d}
d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�|
� |�| � |�| � |�|
� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �� dk�rstd d
�}d}d } d
}
d| d } d| d } d}
d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�|
� |�| � |�| � |�|
� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �| �d k�r�td ��� }td d �}d }|D ]-}|�d �d k�r�|�d!�d k�r�d}|dk�r�|�|� |�|� d }�q�|�|� �q�|�� t|d"��� }d }|D ]
}|�d#�d k�r�d}�q�|d k�rIt|d
�}d$}d%| d } d&| d } d}
d}d}d}d}d}d}d}d'}|�d� |�|� |�| � |�| � |�|
� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t�yi } ztj�t|�d( � W Y d }~d S d }~ww tj�t j��s�t j
d | }|d }t|d"��� }|D ]}|�d)�d k�r� dS �q�z�ztjj| d�} | jj } d*| j d } W n) t�y� } z t jj| d�}|j } t � d | �} d*| � d�} W Y d }~nd }~ww t|d"��� }d+} |D ]}|�d,�d k�r�|�d-�d k�r�|} n�q�t|d
�}!d.}"d/}#d0| d }$d1| d }%d2| d }&d3| d | d }'d4| d5 | d6 }(|!�|#� |!�|$� |!�|%� |!�|&� |!�|'� |!�| � |!�|(� |!�|"� d7})d8}*d9| d }+d:| d },|!�|)� |!�|*� |!�|+� |!�|,� |!�| � d;}-|!�|-� |!�� W dS t�y� } ztj�t|�d< � W Y d }~d S d }~ww td=| d> �� � � d�}.td=| d? d"�� � � d�}/d@| |.|/f }0tj�dA� tj�|0� t �!|0� dS )BN)�domainz%s [installSSLForDomain:72]z
/conf/vhosts/z /vhost.confz map r �
r r �azlistener SSL {
z address *:443
z secure 1
z1 keyFile /etc/letsencrypt/live/z
/privkey.pem
z1 certFile /etc/letsencrypt/live/z/fullchain.pem
z certChain 1
z sslProtocol 24
z enableECDHE 1
z renegProtection 1
z sslSessionCache 1
z enableSpdy 15
z enableStapling 1
z! ocspRespMaxAge 86400
z}
zlistener SSL IPv6 {
z$ address [ANY]:443
r �wr r
r �r�vhsslz vhssl {
z0 keyFile /etc/letsencrypt/live/z0 certFile /etc/letsencrypt/live/r
z [installSSLForDomain]]z*:443z DocumentRoot � �
AddHandler�phpzj <IfModule LiteSpeed>
CacheRoot lscache
CacheLookup on
</IfModule>
z
<VirtualHost *:443>
z ServerName z ServerAlias www.z ServerAdmin z SuexecUserGroup z CustomLog /home/z/logs/z.access_log combined
z SSLEngine on
z SSLVerifyClient none
z- SSLCertificateFile /etc/letsencrypt/live/z0 SSLCertificateKeyFile /etc/letsencrypt/live/z</VirtualHost>
z [installSSLForDomain]�/etc/letsencrypt/live/�/fullchain.pem� /privkey.pemz*redis-cli hmset "ssl:%s" crt "%s" key "%s"zhello world aaa)"r �objects�get�
adminEmailr r r r r r � decideServer�OLSr � Server_rootr% r �
writelines�closer' r! r r �os�path�exists� redisConfr �master� externalAppr �FindDocRootOfSite�read�rstrip� executioner)1r r> �websiter �confPath�completePathToConfigFile�map�writeDataToFiler �address�secure�keyFile�certFile� certChain� sslProtocol� enableECDHE�renegProtection�sslSessionCache�
enableSpdy�enableStapling�ocspRespMaxAge�finalr r r �
vhsslPresense�writeSSLConfigr5 �
chilDomainrI � DocumentRoot�docRoot�
phpHandler�confFile� cacheRoot� VirtualHost�
ServerName� ServerAlias� ServerAdmin�SeexecUserGroup�CustomLogCombined� SSLEngine�SSLVerifyClient�SSLCertificateFile�SSLCertificateKeyFile�VirtualHostEnd�cert�key�commandr r r �installSSLForDomainV s�
��
l�
E�
�
��� �� �
��
z sslUtilities.installSSLForDomainc
C sV z�dd l }t�� \}}}|jd d�}|r�|| �}|jd |j }tj�d|� �� dd l }|dd�} |j ||d�}
z |
j
j | d�} W n t y[ } z
dt
| �fW Y d } ~ W S d } ~ ww t| d d
� d �D ](}
tj�d |
d
� �� |
d
|kr�|
d dkr� W dS tj�d|
d
� �� qdW dS W dS t y� } z dt
| �fW Y d } ~ S d } ~ ww )Nr �� cache_dir�.ztop level domain in cf: �2 )�name�per_page)�email�token)�paramsc S s | d S )Nr{ r )�vr r r �<lambda>g s z7sslUtilities.FindIfDomainInCloudflare.<locals>.<lambda>)rt zzone: r{ �status�active�r Nzzone is not active in cf: )r z Zone not found in Cloudflare)r zError in finding keys.)�
tldextractr � FetchCloudFlareAPIKeyFromAcme�
TLDExtractr0 �suffixr r r �
CloudFlare�zonesr= r r �sorted)r r� � RetStatus� SAVED_CF_Key�SAVED_CF_Email�no_cache_extract�
extractDomain�topLevelDomainr� r �cfr� r �zoner r r �FindIfDomainInCloudflareP s<
�� ���z%sslUtilities.FindIfDomainInCloudflarec
C s� zfdd l }ddlm} ddlm} |jd d�}|| �}|jd |j }|jj |d�}|�
|d|� �dt � � dd � t
�d
� t�d|� �d tj�d }tj�d t|�� d�� |d d t � � krdW d
S W dS ty~ } z dt| �fW Y d } ~ S d } ~ ww )Nr )�DNS)�Domainsrw ry )r{ zcptest.�Ai � z
PDNS Result: � r� )r zIP Does not match)r� �plogical.dnsUtilitiesr� �
dns.modelsr� r� r0 r� r< r= �createDNSRecordr � GetServerIP�time�sleepr* � getaddrinfo�AF_INETr r r r r )
r r� r� r� r� r� r� r� �resultr r r r �FindIfDomainInPowerDNSv s&
��z#sslUtilities.FindIfDomainInPowerDNSNc
C s� dt �� }d}d}d}d| }tj�|�r;dd l} | j�| jjt |d��
� �}
|
� � � � d d �
d�} | dkr;dS t�| �\}} d }
|rId
}
nt�| �\}} |rUd }
nd S �z�d
}d||f }t�t�|�� |d u �r}d| }tj�|�s�d| }t�t�|�� zO|d| � d| � � d | d d | d d | d d|
� d� }tj�|d� t�t�|���
d�}tj�d| d | d� tj�|||d | � W �nJ tj�y| tj�d | d | d� d | d | }z`|d | d | d d | d d | d d|
� d� }d || f }d || f }tj�d | d� tj�|� t�t�|���
d�}tj�d| d� d!|| f }tj�|||d | � W n( tj�yy tj�d"| d� tj�||d"| d | � d|f Y Y W S w Y n�w d| }tj�|��s�d| }t�t�|�� zctj�d | d# | d$ | d% | d& � |d | d' | d( | d' | d | d d | d d | d d|
� d� }t�t�|���
d�}tj�d| d# | d$ | d) | d& � W n& tj�y tj�d | d# | d$ | d) | d& � d|f Y W S w |�d*�d+k�r+d|fW S d|fW S t �yR } ztj�t |�d, � dt |�fW Y d }~S d }~ww )-Nzroot@%sr z&/etc/letsencrypt/live/%s/fullchain.pemr4 r zutf-8�Denial)r z%This domain already have a valid SSL.r6 �dns_cf�dns_cyberpanel)r z;Domain is not active in any of the configured DNS provider.z/root/.acme.sh/acme.shz%s --register-account -m %sr9 z mkdir -p z --issue -d z -d *.z
--cert-file z /cert.pemz --key-file r; z --fullchain-file r: z --dns z5 -k ec-256 --force --server letsencrypt --dnssleep 20z Successfully obtained SSL for: z
and: www.zSSL Notification for %s.zFailed to obtain SSL for: z %s
Trying to obtain SSL for: %szTrying to obtain SSL for: z%%s
Successfully obtained SSL for: %s.z3Failed to obtain SSL, issuing self-signed SSL for: z, www.z, z and www.�,z -d www.z -d zand www.z Cert successr
z. [Failed to obtain SSL. [obtainSSLForADomain]]) r* � gethostnamerD rE rF �OpenSSL�crypto�load_certificate� FILETYPE_PEMr rK �
get_issuer�get_components�decoder r� r� �
subprocess� check_output�shlexr r r r � SendEmail�CalledProcessError�callr r r )r r> �sslpath� aliasDomain� sender_email�CF_Check�Namecheck_Check�CyberPanel_Check�filePathr� �x509� SSLProvider�message�
DNS_TO_USE�acmePathru �existingCertPath�output� finalText�CurrentMessager r r r �obtainSSLForADomain� s:
���������
��
���������
� � ����� "��������������
�"�"��
��z sslUtilities.obtainSSLForADomain)r/ �N)�__name__�
__module__� __qualname__rA rG � staticmethodr! r% r' r. rv r� r� r� r r r r r s(
z
%
r c
C s� z%t �| |||�\}}|dkr!t �| |�dkr d|gW S d|gW S d|gW S tyA } zddt|� d gW Y d }~S d }~ww )Nr r r( r) )r r� rv r r )r0 r> r� r� � retStatusr� r r r r �issueSSLForDomain s
��r� r� )r� �requests�plogicalr r rD r� r� r* � plogical.aclr �plogical.processUtilitiesr �websiteFunctions.modelsr r r r� r r r r �<module> s&