PAL.C.T MINI SHELL
#!/usr/bin/perl
# Copy this domain's cert to Dovecot
require './virtual-server-lib.pl';
&ReadParse();
$d = &get_domain($in{'dom'});
&can_edit_domain($d) && &can_edit_ssl() && &can_webmin_cert() ||
&error($text{'copycert_ecannot'});
$d->{'ssl_pass'} && &error($text{'copycert_epass'});
&ui_print_header(&domain_in($d), $text{'copycert_title'}, "");
# Get the Dovecot config and cert files
&foreign_require("dovecot");
$cfile = &dovecot::get_config_file();
&lock_file($cfile);
$dovedir = $cfile;
$dovedir =~ s/\/([^\/]+)$//;
$conf = &dovecot::get_config();
$cfile = &dovecot::find_value("ssl_cert_file", $conf) ||
&dovecot::find_value("ssl_cert", $conf, 0, "");
$kfile = &dovecot::find_value("ssl_key_file", $conf) ||
&dovecot::find_value("ssl_key", $conf, 0, "");
$cafile = &dovecot::find_value("ssl_ca_file", $conf) ||
&dovecot::find_value("ssl_ca", $conf, 0, "");
$cfile =~ s/^<//;
$kfile =~ s/^<//;
$cafile =~ s/^<//;
if ($cfile =~ /snakeoil/) {
# Hack to not use shared cert file on Ubuntu / Debian
$cfile = $kfile = $cafile = undef;
}
$cfile ||= "$dovedir/dovecot.cert.pem";
$kfile ||= "$dovedir/dovecot.key.pem";
$cafile ||= "$dovedir/dovecot.ca.pem";
# Copy cert into those files
&$first_print($text{'copycert_dsaving'});
$cdata = &cert_pem_data($d);
$kdata = &key_pem_data($d);
$casrcfile = &get_website_ssl_file($d, "ca");
$cadata = $casrcfile ? &read_file_contents($casrcfile) : undef;
$cdata || &error($text{'copycert_ecert'});
$kdata || &error($text{'copycert_ekey'});
&open_lock_tempfile(CERT, ">$cfile");
&print_tempfile(CERT, $cdata,"\n");
&close_tempfile(CERT);
&set_ownership_permissions(undef, undef, 0750, $cfile);
&open_lock_tempfile(KEY, ">$kfile");
&print_tempfile(KEY, $kdata,"\n");
&close_tempfile(KEY);
&set_ownership_permissions(undef, undef, 0750, $kfile);
if ($cadata) {
&open_lock_tempfile(CA, ">$cafile");
&print_tempfile(CA, $cadata,"\n");
&close_tempfile(CA);
&set_ownership_permissions(undef, undef, 0750, $cafile);
}
# Update config with correct files
if (&dovecot::find_value("ssl_cert", $conf, 2)) {
# 2.0 and later format
&dovecot::save_directive($conf, "ssl_cert", "<".$cfile);
&dovecot::save_directive($conf, "ssl_key", "<".$kfile);
if ($cadata) {
&dovecot::save_directive($conf, "ssl_ca", "<".$cafile);
}
else {
&dovecot::save_directive($conf, "ssl_ca", undef);
}
}
else {
# Pre-2.0 format
&dovecot::save_directive($conf, "ssl_cert_file", $cfile);
&dovecot::save_directive($conf, "ssl_key_file", $kfile);
if ($cadata) {
&dovecot::save_directive($conf, "ssl_ca_file", $cafile);
}
else {
&dovecot::save_directive($conf, "ssl_ca_file", undef);
}
}
&$second_print(&text($cadata ? 'copycert_dsaved2' : 'copycert_dsaved',
"<tt>$cfile</tt>", "<tt>$kfile</tt>", "<tt>$cafile</tt>"));
# Make sure SSL is enabled
&$first_print($text{'copycert_denabling'});
if (&dovecot::find("ssl_disable", $conf, 2)) {
&dovecot::save_directive($conf, "ssl_disable", "no");
}
else {
&dovecot::save_directive($conf, "ssl", "yes");
}
if (&dovecot::get_dovecot_version() < 2) {
# Add imaps and pop3s protocols ..
$protos = &dovecot::find_value("protocols", $conf);
@protos = split(/\s+/, $protos);
%protos = map { $_, 1 } @protos;
push(@protos, "imaps") if (!$protos{'imaps'} && $protos{'imap'});
push(@protos, "pop3s") if (!$protos{'pop3s'} && $protos{'pop3'});
&dovecot::save_directive($conf, "protocols", join(" ", @protos));
}
# Enable PCI-compliant ciphers
&foreign_require("webmin");
if (!&dovecot::find_value("ssl_cipher_list", $conf)) {
&dovecot::save_directive($conf, "ssl_cipher_list",
$webmin::strong_ssl_ciphers ||
"HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3");
}
&flush_file_lines();
&unlock_file($cfile);
&$second_print($text{'setup_done'});
# Apply Dovecot config
&dovecot::apply_configuration();
&run_post_actions();
&webmin_log("copycert", "dovecot");
&ui_print_footer(&domain_footer_link($d),
"", $text{'index_return'});
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`