You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
78 lines
2.5 KiB
78 lines
2.5 KiB
use std::borrow::Cow;
|
|
use std::error::Error;
|
|
use std::fmt;
|
|
use std::fs::File as FsFile;
|
|
use std::io::Write;
|
|
use std::path::Path;
|
|
|
|
use command_runner::CommandRunner;
|
|
use symbols::{Action, OwnedSymbolAction, Symbol, SymbolAction, SymbolRunner};
|
|
use resources::Resource;
|
|
|
|
pub struct AcmeCertChain<'a> {
|
|
domain: Cow<'a, str>,
|
|
command_runner: &'a CommandRunner
|
|
}
|
|
|
|
impl<'a> AcmeCertChain<'a> {
|
|
pub fn new(domain: Cow<'a, str>, command_runner: &'a CommandRunner) -> AcmeCertChain<'a> {
|
|
AcmeCertChain {
|
|
domain: domain,
|
|
command_runner: command_runner
|
|
}
|
|
}
|
|
|
|
fn get_single_cert_path(&self) -> String {
|
|
format!("/etc/ssl/local_certs/{}.crt", self.domain)
|
|
}
|
|
|
|
fn get_cert_chain_path(&self) -> String {
|
|
format!("/etc/ssl/local_certs/{}.chained.crt", self.domain)
|
|
}
|
|
}
|
|
|
|
impl<'a> fmt::Display for AcmeCertChain<'a> {
|
|
fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
|
|
write!(f, "AcmeCertChain {}", self.domain)
|
|
}
|
|
}
|
|
|
|
const DAYS_IN_SECONDS: u32 = 24*60*60;
|
|
|
|
impl<'a> Symbol for AcmeCertChain<'a> {
|
|
fn target_reached(&self) -> Result<bool, Box<Error>> {
|
|
if !Path::new(&self.get_cert_chain_path()).exists() {
|
|
return Ok(false);
|
|
}
|
|
|
|
let stdout = try!(self.command_runner.get_output("openssl", &["x509", "-in", &self.get_cert_chain_path(), "-noout", "-subject", "-checkend", &(30*DAYS_IN_SECONDS).to_string()]));
|
|
if stdout != format!("subject=CN = {}\nCertificate will not expire\n", self.domain).as_bytes() {
|
|
return Ok(false);
|
|
}
|
|
// FIXME: From my understanding, the -untrusted *.pem parameter shouldn't be necessary, but is necessary with openssl 1.1.0f-3
|
|
Ok(self.command_runner.run_successfully("openssl", &["verify", "-untrusted", "/home/acme/lets_encrypt_x3_cross_signed.pem", &self.get_cert_chain_path()]).is_ok())
|
|
}
|
|
|
|
fn execute(&self) -> Result<(), Box<Error>> {
|
|
let output = try!(self.command_runner.get_output("cat", &[&self.get_single_cert_path(), "/home/acme/lets_encrypt_x3_cross_signed.pem"]));
|
|
let mut file = try!(FsFile::create(self.get_cert_chain_path()));
|
|
try!(file.write_all(&output));
|
|
Ok(())
|
|
}
|
|
|
|
fn get_prerequisites(&self) -> Vec<Resource> {
|
|
vec![ Resource::new("file", self.get_single_cert_path()) ]
|
|
}
|
|
|
|
fn as_action<'b>(&'b self, runner: &'b SymbolRunner) -> Box<Action + 'b> {
|
|
Box::new(SymbolAction::new(runner, self))
|
|
}
|
|
|
|
fn into_action<'b>(self: Box<Self>, runner: &'b SymbolRunner) -> Box<Action + 'b> where Self: 'b {
|
|
Box::new(OwnedSymbolAction::new(runner, *self))
|
|
}
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod test {
|
|
}
|