kopia lustrzana https://codeberg.org/Codeberg/pages-server
65 wiersze
1.9 KiB
Go
65 wiersze
1.9 KiB
Go
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
|
|
"github.com/rs/zerolog/log"
|
|
"github.com/urfave/cli/v2"
|
|
|
|
"codeberg.org/codeberg/pages/server/cache"
|
|
"codeberg.org/codeberg/pages/server/certificates"
|
|
"codeberg.org/codeberg/pages/server/database"
|
|
)
|
|
|
|
var ErrAcmeMissConfig = errors.New("ACME client has wrong config")
|
|
|
|
func openCertDB(ctx *cli.Context) (certDB database.CertDB, closeFn func(), err error) {
|
|
certDB, err = database.NewXormDB(ctx.String("db-type"), ctx.String("db-conn"))
|
|
if err != nil {
|
|
return nil, nil, fmt.Errorf("could not connect to database: %w", err)
|
|
}
|
|
|
|
closeFn = func() {
|
|
if err := certDB.Close(); err != nil {
|
|
log.Error().Err(err)
|
|
}
|
|
}
|
|
|
|
return certDB, closeFn, nil
|
|
}
|
|
|
|
func createAcmeClient(ctx *cli.Context, enableHTTPServer bool, challengeCache cache.SetGetKey) (*certificates.AcmeClient, error) {
|
|
acmeAPI := ctx.String("acme-api-endpoint")
|
|
acmeMail := ctx.String("acme-email")
|
|
acmeEabHmac := ctx.String("acme-eab-hmac")
|
|
acmeEabKID := ctx.String("acme-eab-kid")
|
|
acmeAcceptTerms := ctx.Bool("acme-accept-terms")
|
|
dnsProvider := ctx.String("dns-provider")
|
|
acmeUseRateLimits := ctx.Bool("acme-use-rate-limits")
|
|
acmeAccountConf := ctx.String("acme-account-config")
|
|
|
|
// check config
|
|
if (!acmeAcceptTerms || dnsProvider == "") && acmeAPI != "https://acme.mock.directory" {
|
|
return nil, fmt.Errorf("%w: you must set $ACME_ACCEPT_TERMS and $DNS_PROVIDER, unless $ACME_API is set to https://acme.mock.directory", ErrAcmeMissConfig)
|
|
}
|
|
if acmeEabHmac != "" && acmeEabKID == "" {
|
|
return nil, fmt.Errorf("%w: ACME_EAB_HMAC also needs ACME_EAB_KID to be set", ErrAcmeMissConfig)
|
|
} else if acmeEabHmac == "" && acmeEabKID != "" {
|
|
return nil, fmt.Errorf("%w: ACME_EAB_KID also needs ACME_EAB_HMAC to be set", ErrAcmeMissConfig)
|
|
}
|
|
|
|
return certificates.NewAcmeClient(
|
|
acmeAccountConf,
|
|
acmeAPI,
|
|
acmeMail,
|
|
acmeEabHmac,
|
|
acmeEabKID,
|
|
dnsProvider,
|
|
acmeAcceptTerms,
|
|
enableHTTPServer,
|
|
acmeUseRateLimits,
|
|
challengeCache,
|
|
)
|
|
}
|