wcp/bin/v_add_web_domain_ssl at 4134cc38bceda0e4574f993170b60686bf1bfc06 · ghzhost/wcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
#!/bin/bash
# info: adding ssl for domain
# options: user domain ssl_dir [ssl_home]
#
# The function turns on SSL support for a domain. Parameter ssl_dir is a path
# to directory where 2 or 3 ssl files can be found. Certificate file
# domain.tld.crt and its key domain.tld.key  are mandatory. Certificate
# authority domain.tld.ca file is optional. If home directory  parameter
# (ssl_home) is not set, https domain uses public_shtml as separate
# documentroot directory.


#----------------------------------------------------------#
#                    Variable&Function                     #
#----------------------------------------------------------#

# Argument defenition
user=$1
domain=$(idn -t --quiet -u "$2" )
domain_idn=$(idn -t --quiet -a "$domain")
ssl_dir=$3
ssl_home=${4-single}

# Importing variables
source $VESTA/conf/vars.conf
source $V_CONF/vesta.conf
source $V_FUNC/shared.func
source $V_FUNC/domain.func
source $V_FUNC/ip.func


#----------------------------------------------------------#
#                    Verifications                         #
#----------------------------------------------------------#

# Checking arg number
check_args '3' "$#" 'user domain ssl_dir [ssl_home]'

# Checking argument format
format_validation 'user' 'domain' 'ssl_dir'

# Checking web system is enabled
is_system_enabled 'WEB_SYSTEM'

# Checking user
is_user_valid

# Checking user is active
is_user_suspended

# Checking domain exist
is_domain_valid 'web'

# Checking domain is not suspened
is_domain_suspended 'web'

# Check ssl is not added
is_domain_key_empty 'web' '$SSL'

# Checking ssl certificate
is_web_domain_cert_valid


#----------------------------------------------------------#
#                       Action                             #
#----------------------------------------------------------#

# Adding certificate to user data directory
cp -f $ssl_dir/$domain.crt $V_USERS/$user/ssl/$domain.crt
cp -f $ssl_dir/$domain.key $V_USERS/$user/ssl/$domain.key
cp -f $ssl_dir/$domain.crt $V_USERS/$user/ssl/$domain.pem
if [ -e "$ssl_dir/$domain.ca" ]; then
    cp -f $ssl_dir/$domain.ca $V_USERS/$user/ssl/$domain.ca
    cat $V_USERS/$user/ssl/$domain.ca >> $V_USERS/$user/ssl/$domain.pem
fi
chmod 660 $V_USERS/$user/ssl/$domain.*

# Parsing domain values
get_domain_values 'web'
conf="$V_HOME/$user/conf/web/shttpd.conf"
tpl_file="$V_WEBTPL/apache_$TPL.stpl"
SSL_HOME="$ssl_home"

# Checking ip ownership
is_sys_ip_owner

# Preparing domain values for the template substitution
upd_web_domain_values

# Adding domain to the shttpd.conf
add_web_config

chown root:apache $conf
chmod 640 $conf

# Adding certificate to user dir
cp -f $V_USERS/$user/ssl/$domain.crt $V_HOME/$user/conf/web/ssl.$domain.crt
cp -f $V_USERS/$user/ssl/$domain.key $V_HOME/$user/conf/web/ssl.$domain.key
cp -f $V_USERS/$user/ssl/$domain.pem $V_HOME/$user/conf/web/ssl.$domain.pem
if [ -e "$V_USERS/$user/ssl/$domain.ca" ]; then
    cp -f $V_USERS/$user/ssl/$domain.ca $V_HOME/$user/conf/web/ssl.$domain.ca
fi

# Running template trigger
if [ -x $V_WEBTPL/apache_$template.sh ]; then
    $V_WEBTPL/apache_$template.sh $user $domain $ip $V_HOME $docroot
fi

# Checking main vesta httpd config
main_conf='/etc/httpd/conf.d/vesta.conf'
main_conf_check=$(grep "$conf" $main_conf )
if [ -z "$main_conf_check" ]; then
    echo "Include $conf" >> $main_conf
fi

# Checking  nginx
if [ ! -z "$NGINX" ]; then
    # Adding domain to the snginx.conf
    conf="$V_HOME/$user/conf/web/snginx.conf"
    tpl_file="$V_WEBTPL/ngingx_vhost_$NGINX.stpl"
    add_web_config

    chown root:nginx $conf
    chmod 640 $conf

    # Checking vesta nginx config
    main_conf='/etc/nginx/conf.d/vesta_users.conf'
    main_conf_check=$(grep "$conf" $main_conf )
    if [ -z "$main_conf_check" ]; then
        echo "include $conf;" >>$main_conf
    fi
fi


#----------------------------------------------------------#
#                       Vesta                              #
#----------------------------------------------------------#

# Increasing domain value
increase_user_value "$user" '$U_WEB_SSL'

# Adding ssl values
update_domain_value 'web' '$SSL_HOME' "$SSL_HOME"
update_domain_value 'web' '$SSL' 'yes'

# Logging
log_history "$V_EVENT" "v_delete_web_domain_ssl $user $domain"
log_event 'system' "$V_EVENT"

exit