122 lines
4.5 KiB
PHP
122 lines
4.5 KiB
PHP
<?php
|
|
|
|
require_once EVOADMIN_BASE . '../lib/letsencrypt.php';
|
|
|
|
use lib\LetsEncrypt as letsencryt;
|
|
|
|
// store domain and aliases in session
|
|
if (!isset($_SESSION['lestencrypt-domains']) || empty($_SESSION['letsencrypt-domains'])) {
|
|
$domain = $params[1];
|
|
$cmd = 'web-add.sh list-vhost ' . $domain;
|
|
|
|
sudoexec($cmd, $data_output, $exec_return);
|
|
|
|
$data_split = explode(':', $data_output[0]);
|
|
$aliases = explode(',', $data_split[3]);
|
|
|
|
$domains = array();
|
|
|
|
// store domain and aliases
|
|
array_push($domains, $data_split[2]);
|
|
foreach ($aliases as $alias) {
|
|
array_push($domains, $alias);
|
|
}
|
|
|
|
$_SESSION['letsencrypt-domains'] = array_filter($domains);
|
|
}
|
|
|
|
include_once EVOADMIN_BASE . '../tpl/header.tpl.php';
|
|
include_once EVOADMIN_BASE . '../tpl/menu.tpl.php';
|
|
|
|
if (isset($_POST['submit'])) {
|
|
$letsencrypt = new letsencryt();
|
|
$errorMessage = '';
|
|
$warningMessage = '';
|
|
|
|
while (true) {
|
|
// check domains list
|
|
if (empty($_SESSION['letsencrypt-domains'])) {
|
|
$errorMessage = "Erreur : la liste des domaines est vide.";
|
|
break;
|
|
}
|
|
|
|
// check if evoacme is installed
|
|
$binaries_installed = $letsencrypt->isEvoacmeInstalled();
|
|
if (!$binaries_installed) {
|
|
$errorMessage = "Erreur : les binaires Evoacme ne sont pas installés.
|
|
Veuillez contacter un administrateur.";
|
|
break;
|
|
}
|
|
|
|
// Check existing SSL certificate
|
|
$domainsIncluded = array();
|
|
foreach ($_SESSION['letsencrypt-domains'] as $domain) {
|
|
$existingSSLCertificate = $letsencrypt->getCertificate($domain);
|
|
if (is_bool($existingSSLCertificate)) {
|
|
continue;
|
|
}
|
|
$parsedCertificate = $letsencrypt->parseCertificate($existingSSLCertificate);
|
|
|
|
// check if LE is the certificate issuer
|
|
$isIssuerValid = $letsencrypt->isCertIssuedByLetsEncrypt($parsedCertificate["issuer"]);
|
|
if (!$isIssuerValid) {
|
|
$errorMessage = "Erreur : le certificat existant n'est pas géré par Let's Encrypt.";
|
|
break 2; // break the foreach and the while
|
|
}
|
|
|
|
// check if the domain is already in the certificate
|
|
$isDomainIncluded = $letsencrypt->isDomainIncludedInCert($domain, $parsedCertificate["includedDomains"]);
|
|
if ($isDomainIncluded) {
|
|
array_push($domainsIncluded, $domain);
|
|
continue; // break only the current foreach iteration
|
|
}
|
|
|
|
// check wether the certificate is valid or expired
|
|
$isCertValid = $letsencrypt->isCertValid($parsedCertificate["validUntil"]);
|
|
if (!$îsCertValid) {
|
|
$warningMessage = "Attention : le certificat existant n'est plus valide.
|
|
Souhaitez-vous le renouveller ?";
|
|
break 2;
|
|
}
|
|
}
|
|
|
|
// contains all the domains included in the existing certificate
|
|
if (!empty($domainsIncluded)) {
|
|
$domainsNotIncluded = array_diff($_SESSION['letsencrypt-domains'], $domainsIncluded);
|
|
|
|
if (empty($domainsNotIncluded)) {
|
|
$errorMessage = "Erreur : le certificat existant couvre déjà tous les domaines.";
|
|
break;
|
|
}
|
|
|
|
$warningMessage = "Attention : le certificat existant couvre déjà certains domaines.
|
|
Souhaitez-vous le renouveller ?";
|
|
|
|
break;
|
|
}
|
|
|
|
// check HTTP
|
|
$checked_domains = $letsencrypt->checkRemoteResourceAvailability($_SESSION['letsencrypt-domains']);
|
|
$failed_domains = array_diff($_SESSION['letsencrypt-domains'], $checked_domains);
|
|
if (!empty($failed_domains)) {
|
|
$errorMessage = "Erreur : Le challenge HTTP a échoué pour le(s) domaine(s) ci-dessous.
|
|
Merci de vérifier que le dossier <code>/.well-known/</code> est accessible.";
|
|
break;
|
|
}
|
|
|
|
// check DNS
|
|
$valid_domains = $letsencrypt->checkDNSValidity($checked_domains);
|
|
$failed_domains = array_diff($checked_domains, $valid_domains);
|
|
if (!empty($failed_domains)) {
|
|
$errorMessage = "Erreur : La vérification DNS a échoué pour les domaines ci-dessous.
|
|
Merci de vérifier les enregistrements de type A et AAAA.";
|
|
break;
|
|
}
|
|
|
|
break;
|
|
}
|
|
}
|
|
|
|
include_once EVOADMIN_BASE . '../tpl/webadmin-letsencrypt.tpl.php';
|
|
include_once EVOADMIN_BASE . '../tpl/footer.tpl.php';
|