| | |
| | | // Handle the creation of SSL certificates |
| | | function ssl($event_name,$data) { |
| | | global $app, $conf; |
| | | |
| | | // load the server configuration options |
| | | $app->uses('getconf'); |
| | | $web_config = $app->getconf->get_server_config($conf['server_id'], 'web'); |
| | | if ($web_config['CA_path']!='' && !file_exists($web_config['CA_path'].'/openssl.cnf')) |
| | | $app->log("CA path error, file does not exist:".$web_config['CA_path'].'/openssl.conf',LOGLEVEL_ERROR); |
| | | |
| | | //* Only vhosts can have a ssl cert |
| | | if($data["new"]["type"] != "vhost") return; |
| | |
| | | $crt_file = escapeshellcmd($crt_file); |
| | | |
| | | if(is_file($ssl_cnf_file)) { |
| | | |
| | | |
| | | exec("openssl genrsa -des3 -rand $rand_file -passout pass:$ssl_password -out $key_file 2048"); |
| | | exec("openssl req -new -passin pass:$ssl_password -passout pass:$ssl_password -key $key_file -out $csr_file -days $ssl_days -config $config_file"); |
| | | if(isset($conf['CA-path']) && isset($conf['CA-pass']) ) |
| | | exec("openssl rsa -passin pass:$ssl_password -in $key_file -out $key_file2"); |
| | | |
| | | if(file_exists($web_config['CA_path'].'/openssl.cnf')) |
| | | { |
| | | exec("openssl ca -batch -out $crt_file -config ".$conf['CA-path']."/openssl.cnf -passin pass:".$conf['CA-pass']." -in $csr_file"); |
| | | exec("openssl ca -batch -out $crt_file -config ".$web_config['CA_path']."/openssl.cnf -passin pass:".$web_config['CA_pass']." -in $csr_file"); |
| | | $app->log("Creating CA-signed SSL Cert for: $domain",LOGLEVEL_DEBUG); |
| | | } else{ |
| | | if (filesize($crt_file)==0 || !file_exists($crt_file)) $app->log("CA-Certificate signing failed. openssl ca -out $crt_file -config ".$web_config['CA_path']."/openssl.cnf -passin pass:".$web_config['CA_pass']." -in $csr_file",LOGLEVEL_ERROR); |
| | | }; |
| | | if (filesize($crt_file)==0 || !file_exists($crt_file)){ |
| | | exec("openssl req -x509 -passin pass:$ssl_password -passout pass:$ssl_password -key $key_file -in $csr_file -out $crt_file -days $ssl_days -config $config_file "); |
| | | $app->log("Creating self-signed SSL Cert for: $domain",LOGLEVEL_DEBUG); |
| | | }; |
| | | exec("openssl rsa -passin pass:$ssl_password -in $key_file -out $key_file2"); |
| | | |
| | | } |
| | | |
| | | exec('chmod 400 '.$key_file2); |
| | |
| | | $csr_file = $ssl_dir.'/'.$domain.'.csr'; |
| | | $crt_file = $ssl_dir.'/'.$domain.'.crt'; |
| | | $bundle_file = $ssl_dir.'/'.$domain.'.bundle'; |
| | | if(isset($conf['CA-path']) && isset($conf['CA-pass']) ) |
| | | if(file_exists($web_config['CA_path'].'/openssl.cnf')) |
| | | { |
| | | exec("openssl ca -batch -config ".$conf['CA-path']."/openssl.cnf -passin pass:".$conf['CA-pass']." -revoke $crt_file"); |
| | | exec("openssl ca -batch -config ".$web_config['CA_path']."/openssl.cnf -passin pass:".$web_config['CA_pass']." -revoke $crt_file"); |
| | | $app->log("Revoking CA-signed SSL Cert for: $domain",LOGLEVEL_DEBUG); |
| | | }; |
| | | unlink($csr_file); |
| | |
| | | } |
| | | |
| | | |
| | | |
| | | // Install the Standard or Custom Error, Index and other related files |
| | | // /usr/local/ispconfig/server/conf is for the standard files |
| | | // /usr/local/ispconfig/server/conf-custom is for the custom files |
| | | // setting a local var here |
| | | |
| | | // normally $conf['templates'] = "/usr/local/ispconfig/server/conf"; |
| | | |
| | | if($this->action == 'insert' && $data['new']['type'] == 'vhost') { |
| | | // Copy the error pages |
| | | if($data['new']['errordocs']) { |
| | | $error_page_path = escapeshellcmd($data['new']['document_root']).'/web/error/'; |
| | | if (file_exists('/usr/local/ispconfig/server/conf-custom/error/'.substr(escapeshellcmd($conf['language']),0,2))) { |
| | | exec('cp /usr/local/ispconfig/server/conf-custom/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | if (file_exists($conf['templates'] . '-custom/error/'.substr(escapeshellcmd($conf['language']),0,2))) { |
| | | exec('cp ' . $conf['templates'] . '-custom/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | } |
| | | else { |
| | | if (file_exists('/usr/local/ispconfig/server/conf-custom/error/400.html')) { |
| | | exec('cp /usr/local/ispconfig/server/conf-custom/error/*.html '.$error_page_path); |
| | | if (file_exists($conf['templates'] . '-custom/error/400.html')) { |
| | | exec('cp '. $conf['templates'] .'-custom/error/*.html '.$error_page_path); |
| | | } |
| | | else { |
| | | exec('cp /usr/local/ispconfig/server/conf/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | exec('cp ' . $conf['templates'] . '/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | } |
| | | } |
| | | exec('chmod -R a+r '.$error_page_path); |
| | | } |
| | | |
| | | // copy the standard index page |
| | | if (file_exists('/usr/local/ispconfig/server/conf-custom/index/standard_index.html_'.substr(escapeshellcmd($conf['language']),0,2))) { |
| | | exec('cp /usr/local/ispconfig/server/conf-custom/index/standard_index.html_'.substr(escapeshellcmd($conf['language']),0,2).' '.escapeshellcmd($data['new']['document_root']).'/web/index.html'); |
| | | } |
| | | if (file_exists($conf['templates'] . '-custom/index/standard_index.html_'.substr(escapeshellcmd($conf['language']),0,2))) { |
| | | exec('cp ' . $conf['templates'] . '-custom/index/standard_index.html_'.substr(escapeshellcmd($conf['language']),0,2).' '.escapeshellcmd($data['new']['document_root']).'/web/index.html'); |
| | | |
| | | if(is_file($conf['templates'] . '-custom/index/favicon.ico')) { |
| | | exec('cp ' . $conf['templates'] . '-custom/index/favicon.ico '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | } |
| | | if(is_file($conf['templates'] . '-custom/index/robots.txt')) { |
| | | exec('cp ' . $conf['templates'] . '-custom/index/robots.txt '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | } |
| | | if(is_file($conf['templates'] . '-custom/index/.htaccess')) { |
| | | exec('cp ' . $conf['templates'] . '-custom/index/.htaccess '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | } |
| | | } |
| | | else { |
| | | if (file_exists('/usr/local/ispconfig/server/conf-custom/index/standard_index.html')) { |
| | | exec('cp /usr/local/ispconfig/server/conf-custom/index/standard_index.html '.escapeshellcmd($data['new']['document_root']).'/web/index.html'); |
| | | if (file_exists($conf['templates'] . '-custom/index/standard_index.html')) { |
| | | exec('cp ' . $conf['templates'] . '-custom/index/standard_index.html '.escapeshellcmd($data['new']['document_root']).'/web/index.html'); |
| | | } |
| | | else { |
| | | exec('cp /usr/local/ispconfig/server/conf/index/standard_index.html_'.substr(escapeshellcmd($conf['language']),0,2).' '.escapeshellcmd($data['new']['document_root']).'/web/index.html'); |
| | | if(is_file('/usr/local/ispconfig/server/conf/index/favicon.ico')) exec('cp /usr/local/ispconfig/server/conf/index/favicon.ico '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | if(is_file('/usr/local/ispconfig/server/conf/index/robots.txt')) exec('cp /usr/local/ispconfig/server/conf/index/robots.txt '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | if(is_file('/usr/local/ispconfig/server/conf/index/.htaccess')) exec('cp /usr/local/ispconfig/server/conf/index/.htaccess '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | exec('cp ' . $conf['templates'] . '/index/standard_index.html_'.substr(escapeshellcmd($conf['language']),0,2).' '.escapeshellcmd($data['new']['document_root']).'/web/index.html'); |
| | | if(is_file($conf['templates'] . '/index/favicon.ico')) exec('cp ' . $conf['templates'] . '/index/favicon.ico '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | if(is_file($conf['templates'] . '/index/robots.txt')) exec('cp ' . $conf['templates'] . '/index/robots.txt '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | if(is_file($conf['templates'] . '/index/.htaccess')) exec('cp ' . $conf['templates'] . '/index/.htaccess '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | | } |
| | | } |
| | | exec('chmod -R a+r '.escapeshellcmd($data['new']['document_root']).'/web/'); |
| | |
| | | } elseif ($this->action == 'update' && $data['new']['type'] == 'vhost' && $data['old']['errordocs'] == 0 && $data['new']['errordocs'] == 1) { |
| | | |
| | | $error_page_path = escapeshellcmd($data['new']['document_root']).'/web/error/'; |
| | | if (file_exists('/usr/local/ispconfig/server/conf-custom/error/'.substr(escapeshellcmd($conf['language']),0,2))) { |
| | | exec('cp /usr/local/ispconfig/server/conf-custom/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | if (file_exists($conf['templates'] . '-custom/error/'.substr(escapeshellcmd($conf['language']),0,2))) { |
| | | exec('cp ' . $conf['templates'] . '-custom/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | } |
| | | else { |
| | | if (file_exists('/usr/local/ispconfig/server/conf-custom/error/400.html')) { |
| | | exec('cp /usr/local/ispconfig/server/conf-custom/error/*.html '.$error_page_path); |
| | | if (file_exists($conf['templates'] . '-custom/error/400.html')) { |
| | | exec('cp ' . $conf['templates'] . '-custom/error/*.html '.$error_page_path); |
| | | } |
| | | else { |
| | | exec('cp /usr/local/ispconfig/server/conf/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | exec('cp ' . $conf['templates'] . '/error/'.substr(escapeshellcmd($conf['language']),0,2).'/* '.$error_page_path); |
| | | } |
| | | } |
| | | exec('chmod -R a+r '.$error_page_path); |
| | | exec('chown -R '.$data['new']['system_user'].':'.$data['new']['system_group'].' '.$error_page_path); |
| | | } // end copy error docs |
| | | |
| | | // Create group and user, if not exist |
| | |
| | | $crt_file = $ssl_dir.'/'.$domain.'.crt'; |
| | | $bundle_file = $ssl_dir.'/'.$domain.'.bundle'; |
| | | |
| | | if($data['new']['ssl'] == 'y' && @is_file($crt_file) && @is_file($key_file) && (@filesize($crt_file)>0) && (@filesize($key_file)>0)) { |
| | | if($domain!='' && $data['new']['ssl'] == 'y' && @is_file($crt_file) && @is_file($key_file) && (@filesize($crt_file)>0) && (@filesize($key_file)>0)) { |
| | | $vhost_data['ssl_enabled'] = 1; |
| | | $app->log('Enable SSL for: '.$domain,LOGLEVEL_DEBUG); |
| | | } else { |
| | | $vhost_data['ssl_enabled'] = 0; |
| | | $app->log('Disable SSL for: '.$domain,LOGLEVEL_DEBUG); |
| | | $app->log('SSL Disabled. '.$domain,LOGLEVEL_DEBUG); |
| | | } |
| | | |
| | | if(@is_file($bundle_file)) $vhost_data['has_bundle_cert'] = 1; |
| | |
| | | $tpl->setVar('fastcgi_alias',$fastcgi_config['fastcgi_alias']); |
| | | $tpl->setVar('fastcgi_starter_path',$fastcgi_starter_path); |
| | | $tpl->setVar('fastcgi_starter_script',$fastcgi_config['fastcgi_starter_script']); |
| | | $tpl->setVar('fastcgi_config_syntax',$fastcgi_config['fastcgi_config_syntax']); |
| | | |
| | | } |
| | | |
| | |
| | | |
| | | $vhost_file = escapeshellcmd($web_config['vhost_conf_dir'].'/'.$data['new']['domain'].'.vhost'); |
| | | //* Make a backup copy of vhost file |
| | | copy($vhost_file,$vhost_file.'~'); |
| | | if(file_exists($vhost_file)) copy($vhost_file,$vhost_file.'~'); |
| | | |
| | | //* Write vhost file |
| | | file_put_contents($vhost_file,$tpl->grab()); |
| | |
| | | */ |
| | | $this->_patchVhostWebdav($vhost_file, $data['new']['document_root'] . '/webdav'); |
| | | |
| | | // Set the symlink to enable the vhost |
| | | //* Set the symlink to enable the vhost |
| | | //* First we check if there is a old type of symlink and remove it |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/'.$data['new']['domain'].'.vhost'); |
| | | if(is_link($vhost_symlink)) unlink($vhost_symlink); |
| | | |
| | | //* Remove old or changed symlinks |
| | | if($data['new']['subdomain'] != $data['old']['subdomain'] or $data['new']['active'] == 'n') { |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/900-'.$data['new']['domain'].'.vhost'); |
| | | if(is_link($vhost_symlink)) { |
| | | unlink($vhost_symlink); |
| | | $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | } |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/100-'.$data['new']['domain'].'.vhost'); |
| | | if(is_link($vhost_symlink)) { |
| | | unlink($vhost_symlink); |
| | | $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | } |
| | | } |
| | | |
| | | //* New symlink |
| | | if($data['new']['subdomain'] == '*') { |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/900-'.$data['new']['domain'].'.vhost'); |
| | | } else { |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/100-'.$data['new']['domain'].'.vhost'); |
| | | } |
| | | if($data['new']['active'] == 'y' && !is_link($vhost_symlink)) { |
| | | symlink($vhost_file,$vhost_symlink); |
| | | $app->log('Creating symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | } |
| | | |
| | | // Remove the symlink, if site is inactive |
| | | if($data['new']['active'] == 'n' && is_link($vhost_symlink)) { |
| | | unlink($vhost_symlink); |
| | | $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | } |
| | | |
| | | // remove old symlink and vhost file, if domain name of the site has changed |
| | | if($this->action == 'update' && $data['old']['domain'] != '' && $data['new']['domain'] != $data['old']['domain']) { |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/'.$data['old']['domain'].'.vhost'); |
| | | unlink($vhost_symlink); |
| | | $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/900-'.$data['old']['domain'].'.vhost'); |
| | | if(is_link($vhost_symlink)) { |
| | | unlink($vhost_symlink); |
| | | $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | } |
| | | $vhost_symlink = escapeshellcmd($web_config['vhost_conf_enabled_dir'].'/100-'.$data['old']['domain'].'.vhost'); |
| | | if(is_link($vhost_symlink)) { |
| | | unlink($vhost_symlink); |
| | | $app->log('Removing symlink: '.$vhost_symlink.'->'.$vhost_file,LOGLEVEL_DEBUG); |
| | | } |
| | | $vhost_file = escapeshellcmd($web_config['vhost_conf_dir'].'/'.$data['old']['domain'].'.vhost'); |
| | | unlink($vhost_file); |
| | | $app->log('Removing file: '.$vhost_file,LOGLEVEL_DEBUG); |
| | |
| | | |
| | | } // end class |
| | | |
| | | ?> |
| | | ?> |