From e28e46db320c233699aea56c4061a29c0baff9c3 Mon Sep 17 00:00:00 2001
From: 0xJacky <me@jackyu.cn>
Date: Fri, 12 Aug 2022 00:23:42 +0800
Subject: [PATCH] Get certificate info from local file

---
 frontend/src/api/domain.ts                  |   4 +-
 frontend/src/version.json                   |   2 +-
 frontend/src/views/domain/cert/Cert.vue     |   7 +-
 frontend/src/views/domain/cert/CertInfo.vue |   4 +-
 frontend/version.json                       |   2 +-
 server/api/cert.go                          | 270 +++++++++++---------
 server/api/domain.go                        |   1 +
 server/model/cert.go                        |   9 +-
 server/pkg/cert/auto_cert.go                |  18 +-
 server/pkg/cert/cert_info.go                |  44 ++--
 server/router/routers.go                    |   2 +-
 11 files changed, 197 insertions(+), 166 deletions(-)

diff --git a/frontend/src/api/domain.ts b/frontend/src/api/domain.ts
index b295c3e6..e72a4dbe 100644
--- a/frontend/src/api/domain.ts
+++ b/frontend/src/api/domain.ts
@@ -14,8 +14,8 @@ class Domain extends Curd {
         return http.get('template')
     }
 
-    cert_info(domain: string) {
-        return http.get('cert/' + domain + '/info')
+    cert_info(path: string) {
+        return http.get('cert_info?ssl_certificate_path=' + path)
     }
 
     add_auto_cert(domain: string) {
diff --git a/frontend/src/version.json b/frontend/src/version.json
index b70ec6a5..2a2dafe3 100644
--- a/frontend/src/version.json
+++ b/frontend/src/version.json
@@ -1 +1 @@
-{"version":"1.5.0","build_id":40,"total_build":110}
\ No newline at end of file
+{"version":"1.5.0","build_id":41,"total_build":111}
\ No newline at end of file
diff --git a/frontend/src/views/domain/cert/Cert.vue b/frontend/src/views/domain/cert/Cert.vue
index ba246a0e..90366542 100644
--- a/frontend/src/views/domain/cert/Cert.vue
+++ b/frontend/src/views/domain/cert/Cert.vue
@@ -23,6 +23,11 @@ const name = computed(() => {
     return props.directivesMap['server_name'][0].params.trim()
 })
 
+const ssl_certificate_path = computed(() => {
+    return props.directivesMap['ssl_certificate']?.[0].params.trim() ?? null
+})
+
+
 const enabled = computed({
     get() {
         return props.enabled
@@ -36,7 +41,7 @@ const enabled = computed({
 
 <template>
     <div>
-        <cert-info ref="info" :domain="name" v-if="name"/>
+        <cert-info ref="info" :ssl_certificate_path="ssl_certificate_path" v-if="ssl_certificate_path"/>
         <issue-cert
             :current_server_directives="props.current_server_directives"
             :directives-map="props.directivesMap"
diff --git a/frontend/src/views/domain/cert/CertInfo.vue b/frontend/src/views/domain/cert/CertInfo.vue
index 1ddcdfc7..4b8ebd63 100644
--- a/frontend/src/views/domain/cert/CertInfo.vue
+++ b/frontend/src/views/domain/cert/CertInfo.vue
@@ -4,7 +4,7 @@ import dayjs from 'dayjs'
 import {reactive, ref} from 'vue'
 import domain from '@/api/domain'
 
-const props = defineProps(['domain'])
+const props = defineProps(['ssl_certificate_path'])
 
 const ok = ref(false)
 const cert = reactive({issuer_name: '', subject_name: '', not_after: '', not_before: ''})
@@ -12,7 +12,7 @@ const cert = reactive({issuer_name: '', subject_name: '', not_after: '', not_bef
 get()
 
 function get() {
-    domain.cert_info(props.domain).then((r: any) => {
+    domain.cert_info(props.ssl_certificate_path).then((r: any) => {
         Object.assign(cert, r)
         ok.value = true
     }).catch(() => {
diff --git a/frontend/version.json b/frontend/version.json
index b70ec6a5..2a2dafe3 100644
--- a/frontend/version.json
+++ b/frontend/version.json
@@ -1 +1 @@
-{"version":"1.5.0","build_id":40,"total_build":110}
\ No newline at end of file
+{"version":"1.5.0","build_id":41,"total_build":111}
\ No newline at end of file
diff --git a/server/api/cert.go b/server/api/cert.go
index 5b78b059..260ce1a0 100644
--- a/server/api/cert.go
+++ b/server/api/cert.go
@@ -1,135 +1,155 @@
 package api
 
 import (
-	"github.com/0xJacky/Nginx-UI/server/pkg/cert"
-	"github.com/0xJacky/Nginx-UI/server/pkg/nginx"
-	"github.com/gin-gonic/gin"
-	"github.com/gorilla/websocket"
-	"log"
-	"net/http"
-	"os"
+    "github.com/0xJacky/Nginx-UI/server/model"
+    "github.com/0xJacky/Nginx-UI/server/pkg/cert"
+    "github.com/0xJacky/Nginx-UI/server/pkg/nginx"
+    "github.com/gin-gonic/gin"
+    "github.com/gorilla/websocket"
+    "log"
+    "net/http"
+    "os"
 )
 
 func CertInfo(c *gin.Context) {
-	domain := c.Param("domain")
-
-	key, err := cert.GetCertInfo(domain)
-
-	if err != nil {
-		c.JSON(http.StatusOK, gin.H{
-			"message": "Failed to get cert information",
-			"error":   err,
-		})
-		return
-	}
-
-	c.JSON(http.StatusOK, gin.H{
-		"subject_name": key.Subject.CommonName,
-		"issuer_name":  key.Issuer.CommonName,
-		"not_after":    key.NotAfter,
-		"not_before":   key.NotBefore,
-	})
+    path := c.Query("ssl_certificate_path")
+
+    log.Println(path)
+
+    key, err := cert.GetCertInfo(path)
+
+    if err != nil {
+        c.JSON(http.StatusInternalServerError, gin.H{
+            "message": "Failed to get certificate information",
+            "error":   err.Error(),
+        })
+        return
+    }
+
+    c.JSON(http.StatusOK, gin.H{
+        "subject_name": key.Subject.CommonName,
+        "issuer_name":  key.Issuer.CommonName,
+        "not_after":    key.NotAfter,
+        "not_before":   key.NotBefore,
+    })
 }
 
 func IssueCert(c *gin.Context) {
-	domain := c.Param("domain")
-	var upGrader = websocket.Upgrader{
-		CheckOrigin: func(r *http.Request) bool {
-			return true
-		},
-	}
-
-	// upgrade http to websocket
-	ws, err := upGrader.Upgrade(c.Writer, c.Request, nil)
-	if err != nil {
-		log.Println(err)
-		return
-	}
-
-	defer func(ws *websocket.Conn) {
-		err := ws.Close()
-		if err != nil {
-			log.Println("defer websocket close err", err)
-		}
-	}(ws)
-
-	// read
-	mt, message, err := ws.ReadMessage()
-	if err != nil {
-		log.Println(err)
-		return
-	}
-
-	if mt == websocket.TextMessage && string(message) == "go" {
-
-		err = cert.IssueCert(domain)
-
-		if err != nil {
-
-			log.Println(err)
-
-			err = ws.WriteJSON(gin.H{
-				"status":  "error",
-				"message": err.Error(),
-			})
-
-			if err != nil {
-				log.Println(err)
-				return
-			}
-
-			return
-		}
-
-		sslCertificatePath := nginx.GetNginxConfPath("ssl/" + domain + "/fullchain.cer")
-		_, err = os.Stat(sslCertificatePath)
-
-		if err != nil {
-			log.Println(err)
-			return
-		}
-
-		log.Println("[found]", "fullchain.cer")
-
-		err = ws.WriteJSON(gin.H{
-			"status":  "success",
-			"message": "[found] fullchain.cer",
-		})
-
-		if err != nil {
-			log.Println(err)
-			return
-		}
-
-		sslCertificateKeyPath := nginx.GetNginxConfPath("ssl/" + domain + "/" + domain + ".key")
-		_, err = os.Stat(sslCertificateKeyPath)
-
-		if err != nil {
-			log.Println(err)
-			return
-		}
-
-		log.Println("[found]", "cert key")
-		err = ws.WriteJSON(gin.H{
-			"status":  "success",
-			"message": "[found] Certificate Key",
-		})
-
-		if err != nil {
-			log.Println(err)
-			return
-		}
-
-		err = ws.WriteJSON(gin.H{
-			"status":              "success",
-			"message":             "Issued certificate successfully",
-			"ssl_certificate":     sslCertificatePath,
-			"ssl_certificate_key": sslCertificateKeyPath,
-		})
-
-		if err != nil {
-			log.Println(err)
-			return
-		}
-	}
+    domain := c.Param("domain")
+
+    var upGrader = websocket.Upgrader{
+        CheckOrigin: func(r *http.Request) bool {
+            return true
+        },
+    }
+
+    // upgrade http to websocket
+    ws, err := upGrader.Upgrade(c.Writer, c.Request, nil)
+    if err != nil {
+        log.Println(err)
+        return
+    }
+
+    defer func(ws *websocket.Conn) {
+        err := ws.Close()
+        if err != nil {
+            log.Println("defer websocket close err", err)
+        }
+    }(ws)
+
+    // read
+    mt, message, err := ws.ReadMessage()
+    if err != nil {
+        log.Println(err)
+        return
+    }
+
+    if mt == websocket.TextMessage && string(message) == "go" {
+
+        err = cert.IssueCert(domain)
+
+        if err != nil {
+
+            log.Println(err)
+
+            err = ws.WriteJSON(gin.H{
+                "status":  "error",
+                "message": err.Error(),
+            })
+
+            if err != nil {
+                log.Println(err)
+                return
+            }
+
+            return
+        }
+
+        sslCertificatePath := nginx.GetNginxConfPath("ssl/" + domain + "/fullchain.cer")
+        _, err = os.Stat(sslCertificatePath)
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+
+        log.Println("[found]", "fullchain.cer")
+
+        err = ws.WriteJSON(gin.H{
+            "status":  "success",
+            "message": "[found] fullchain.cer",
+        })
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+
+        sslCertificateKeyPath := nginx.GetNginxConfPath("ssl/" + domain + "/" + domain + ".key")
+        _, err = os.Stat(sslCertificateKeyPath)
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+
+        log.Println("[found]", "cert key")
+        err = ws.WriteJSON(gin.H{
+            "status":  "success",
+            "message": "[found] Certificate Key",
+        })
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+
+        certModel, err := model.FirstCert(domain)
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+
+        err = certModel.Updates(&model.Cert{
+            SSLCertificatePath: sslCertificatePath,
+        })
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+
+        err = ws.WriteJSON(gin.H{
+            "status":              "success",
+            "message":             "Issued certificate successfully",
+            "ssl_certificate":     sslCertificatePath,
+            "ssl_certificate_key": sslCertificateKeyPath,
+        })
+
+        if err != nil {
+            log.Println(err)
+            return
+        }
+    }
 }
diff --git a/server/api/domain.go b/server/api/domain.go
index d74d2bde..9bbc6d0a 100644
--- a/server/api/domain.go
+++ b/server/api/domain.go
@@ -248,6 +248,7 @@ func DeleteDomain(c *gin.Context) {
 
 func AddDomainToAutoCert(c *gin.Context) {
 	domain := c.Param("domain")
+
 	cert, err := model.FirstOrCreateCert(domain)
 	if err != nil {
 		ErrHandler(c, err)
diff --git a/server/model/cert.go b/server/model/cert.go
index ecd8578a..efabea4f 100644
--- a/server/model/cert.go
+++ b/server/model/cert.go
@@ -8,7 +8,8 @@ import (
 
 type Cert struct {
 	Model
-	Domain string `json:"domain"`
+	Domain             string `json:"domain"`
+	SSLCertificatePath string `json:"ssl_certificate_path"`
 }
 
 func FirstCert(domain string) (c Cert, err error) {
@@ -27,8 +28,8 @@ func FirstOrCreateCert(domain string) (c Cert, err error) {
 func GetAutoCertList() (c []Cert) {
 	var t []Cert
 	db.Find(&t)
-	// check if this domain is enabled
 
+	// check if this domain is enabled
 	enabledConfig, err := os.ReadDir(filepath.Join(nginx.GetNginxConfPath("sites-enabled")))
 
 	if err != nil {
@@ -49,6 +50,10 @@ func GetAutoCertList() (c []Cert) {
 	return
 }
 
+func (c *Cert) Updates(n *Cert) error {
+	return db.Model(c).Updates(n).Error
+}
+
 func (c *Cert) Remove() error {
 	return db.Where("domain", c.Domain).Delete(c).Error
 }
diff --git a/server/pkg/cert/auto_cert.go b/server/pkg/cert/auto_cert.go
index c1ecbc8d..fa3d6936 100644
--- a/server/pkg/cert/auto_cert.go
+++ b/server/pkg/cert/auto_cert.go
@@ -16,14 +16,28 @@ func AutoCert() {
 	autoCertList := model.GetAutoCertList()
 	for i := range autoCertList {
 		domain := autoCertList[i].Domain
-		key, err := GetCertInfo(domain)
+
+		certModel, err := model.FirstCert(domain)
+
+		if err != nil {
+			log.Println("[AutoCert] Error get certificate from database", err)
+			continue
+		}
+
+		if certModel.SSLCertificatePath != "" {
+			log.Println("[AutoCert] Error ssl_certificate_path is empty, " +
+				"try to reopen auto-cert for this domain:" + domain)
+			continue
+		}
+
+		cert, err := GetCertInfo(certModel.SSLCertificatePath)
 		if err != nil {
 			log.Println("GetCertInfo Err", err)
 			// Get certificate info error, ignore this domain
 			continue
 		}
 		// before 1 mo
-		if time.Now().Before(key.NotBefore.AddDate(0, 1, 0)) {
+		if time.Now().Before(cert.NotBefore.AddDate(0, 1, 0)) {
 			continue
 		}
 		// after 1 mo, reissue certificate
diff --git a/server/pkg/cert/cert_info.go b/server/pkg/cert/cert_info.go
index 28e9af97..afc26708 100644
--- a/server/pkg/cert/cert_info.go
+++ b/server/pkg/cert/cert_info.go
@@ -1,47 +1,33 @@
 package cert
 
 import (
-	"crypto/tls"
 	"crypto/x509"
+	"encoding/pem"
 	"github.com/pkg/errors"
-	"io"
-	"log"
-	"net"
-	"net/http"
-	"time"
+	"os"
 )
 
-func GetCertInfo(domain string) (key *x509.Certificate, err error) {
+func GetCertInfo(sslCertificatePath string) (cert *x509.Certificate, err error) {
+	certData, err := os.ReadFile(sslCertificatePath)
 
-	var response *http.Response
-
-	client := &http.Client{
-		Transport: &http.Transport{
-			DialContext: (&net.Dialer{
-				Timeout: 5 * time.Second,
-			}).DialContext,
-			DisableKeepAlives: true,
-			TLSClientConfig:   &tls.Config{InsecureSkipVerify: true},
-		},
-		Timeout: 5 * time.Second,
+	if err != nil {
+		err = errors.Wrap(err, "error read certificate")
+		return
 	}
 
-	response, err = client.Get("https://" + domain)
+	block, _ := pem.Decode(certData)
 
-	if err != nil {
-		err = errors.Wrap(err, "get cert info error")
+	if block == nil || block.Type != "CERTIFICATE" {
+		err = errors.New("certificate decoding error")
 		return
 	}
 
-	defer func(Body io.ReadCloser) {
-		err = Body.Close()
-		if err != nil {
-			log.Println(err)
-			return
-		}
-	}(response.Body)
+	cert, err = x509.ParseCertificate(block.Bytes)
 
-	key = response.TLS.PeerCertificates[0]
+	if err != nil {
+		err = errors.Wrap(err, "certificate parsing error")
+		return
+	}
 
 	return
 }
diff --git a/server/router/routers.go b/server/router/routers.go
index feeebcfc..8ecf5ab2 100644
--- a/server/router/routers.go
+++ b/server/router/routers.go
@@ -84,7 +84,7 @@ func InitRouter() *gin.Engine {
 			g.GET("template", api.GetTemplate)
 
 			g.GET("cert/issue/:domain", api.IssueCert)
-			g.GET("cert/:domain/info", api.CertInfo)
+			g.GET("cert_info", api.CertInfo)
 
 			// Add domain to auto-renew cert list
 			g.POST("cert/:domain", api.AddDomainToAutoCert)