Skip to content

Commit 84a35dd

Browse files
author
Marius Burkard
committed
Merge branch 'pre-release-3.2.6' into 'develop'
Pre-Release 3.2.6 See merge request ispconfig/ispconfig3!1523
2 parents c14d6c0 + be46cb1 commit 84a35dd

File tree

4 files changed

+86
-20
lines changed

4 files changed

+86
-20
lines changed

helper_scripts/cert_check.sh

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
#!/bin/bash
2+
3+
chkdata() {
4+
F=$1
5+
CRT=$2
6+
KEY=$3
7+
if [[ "$CRT" != "" && "$KEY" != "" ]] ; then
8+
if [[ ! -f "$CRT" ]] ; then
9+
echo "[WARN] CERTIFICATE FILE ${CRT} MISSING FOR ${F}" ;
10+
else
11+
echo -n "Checking ${CRT}" ;
12+
CHK=$(openssl x509 -in "${CRT}" -text -noout >/dev/null 2>&1 ; echo $?);
13+
if [[ $CHK -ne 0 ]] ; then
14+
echo " FAILED!" ;
15+
else
16+
echo " OK" ;
17+
fi
18+
fi
19+
if [[ ! -f "$KEY" ]] ; then
20+
echo "[WARN] KEY FILE ${KEY} MISSING FOR ${F}" ;
21+
else
22+
echo -n "Checking ${KEY}" ;
23+
CHK=$(openssl rsa -in "${KEY}" -check -noout >/dev/null 2>&1 ; echo $?);
24+
if [[ $CHK -ne 0 ]] ; then
25+
echo " FAILED!" ;
26+
else
27+
echo " OK" ;
28+
fi
29+
fi
30+
31+
if [[ -f "$CRT" && -f "$KEY" ]] ; then
32+
echo -n "Checking that key and certificate match";
33+
MDCRT=$(openssl x509 -noout -modulus -in "${CRT}" | openssl md5) ;
34+
MDKEY=$(openssl rsa -noout -modulus -in "${KEY}" | openssl md5) ;
35+
if [[ "$MDCRT" != "$MDKEY" ]] ; then
36+
echo " FAILED!" ;
37+
else
38+
echo " OK" ;
39+
fi
40+
fi
41+
echo "---" ;
42+
elif [[ "$CRT" != "" || "$KEY" != "" ]] ; then
43+
echo "[WARN] Check SSL config of ${F}";
44+
echo "---" ;
45+
fi
46+
}
47+
48+
if [[ -d /etc/apache2/sites-enabled ]] ; then
49+
echo "Checking enabled apache vhosts" ;
50+
for FIL in /etc/apache2/sites-enabled/* ; do
51+
CRT=$(grep 'SSLCertificateFile' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ;
52+
KEY=$(grep 'SSLCertificateKeyFile' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ;
53+
chkdata "$FIL" "$CRT" "$KEY" ;
54+
done
55+
fi
56+
57+
if [[ -d /etc/nginx/sites-enabled ]] ; then
58+
echo "Checking enabled nginx vhosts" ;
59+
for FIL in /etc/nginx/sites-enabled/* ; do
60+
CRT=$(grep 'ssl_certificate' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ;
61+
CRT=${CRT%;}
62+
KEY=$(grep 'ssl_certificate_key' "${FIL}" | grep -E -v '^[[:space:]]*#' | awk '{print $2}' | head -n 1) ;
63+
KEY=${KEY%;}
64+
chkdata "$FIL" "$CRT" "$KEY" ;
65+
done
66+
fi
Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
-- Add column for email backup limit (#5732)
2+
ALTER TABLE `client_template` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`;
3+
ALTER TABLE `client` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`;
4+
5+
-- default spamfilter_users.policy_id to 0
6+
ALTER TABLE `spamfilter_users` ALTER `policy_id` SET DEFAULT 0;
7+
8+
-- mail_forwarding.source must be unique
9+
ALTER TABLE `mail_forwarding` DROP KEY `server_id`;
10+
ALTER TABLE `mail_forwarding` ADD KEY `server_id` (`server_id`, `source`);
11+
12+
-- Purge apps & addons installer (#5795) - second time due to syntax error in 0093
13+
DROP TABLE IF EXISTS `software_package`;
14+
DROP TABLE IF EXISTS `software_repo`;
15+
DROP TABLE IF EXISTS `software_update`;
16+
DROP TABLE IF EXISTS `software_update_inst`;
17+
18+
-- mail_transport.domain must be unique
19+
ALTER TABLE `mail_transport` DROP KEY `server_id_2`;
20+
ALTER TABLE `mail_transport` ADD UNIQUE KEY `server_id_2` (`server_id`, `domain`);
Lines changed: 0 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +0,0 @@
1-
-- Add column for email backup limit (#5732)
2-
ALTER TABLE `client_template` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`;
3-
ALTER TABLE `client` ADD `limit_mail_backup` ENUM( 'n', 'y' ) NOT NULL DEFAULT 'y' AFTER `limit_spamfilter_policy`;
4-
5-
-- default spamfilter_users.policy_id to 0
6-
ALTER TABLE `spamfilter_users` ALTER `policy_id` SET DEFAULT 0;
7-
8-
-- mail_forwarding.source must be unique
9-
ALTER TABLE `mail_forwarding` DROP KEY `server_id`;
10-
ALTER TABLE `mail_forwarding` ADD KEY `server_id` (`server_id`, `source`);
11-
12-
-- Purge apps & addons installer (#5795) - second time due to syntax error in 0093
13-
DROP TABLE IF EXISTS `software_package`;
14-
DROP TABLE IF EXISTS `software_repo`;
15-
DROP TABLE IF EXISTS `software_update`;
16-
DROP TABLE IF EXISTS `software_update_inst`;
17-
18-
-- mail_transport.domain must be unique
19-
ALTER TABLE `mail_transport` DROP KEY `server_id_2`;
20-
ALTER TABLE `mail_transport` ADD UNIQUE KEY `server_id_2` (`server_id`, `domain`);

0 commit comments

Comments
 (0)