Linux cyberpanel 5.15.0-156-generic #166-Ubuntu SMP Sat Aug 9 00:02:46 UTC 2025 x86_64
LiteSpeed
: 160.191.175.3 | : 216.73.216.114
Cant Read [ /etc/named.conf ]
8.2.29
aodai6801
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
usr /
local /
CyberCP /
plogical /
__pycache__ /
[ HOME SHELL ]
Name
Size
Permission
Action
CyberCPLogFileWriter.cpython-3...
3.75
KB
-rw-r--r--
DockerSites.cpython-310.pyc
35.05
KB
-rw-r--r--
__init__.cpython-310.pyc
132
B
-rw-r--r--
acl.cpython-310.pyc
32.58
KB
-rw-r--r--
alias.cpython-310.pyc
1022
B
-rw-r--r--
applicationInstaller.cpython-3...
72.25
KB
-rw-r--r--
backupSchedule.cpython-310.pyc
10.72
KB
-rw-r--r--
backupUtilities.cpython-310.py...
47.59
KB
-rw-r--r--
childDomain.cpython-310.pyc
1.3
KB
-rw-r--r--
cronUtil.cpython-310.pyc
4.01
KB
-rw-r--r--
customACME.cpython-310.pyc
26.61
KB
-rw-r--r--
dnsUtilities.cpython-310.pyc
12.72
KB
-rw-r--r--
getSystemInformation.cpython-3...
4.3
KB
-rw-r--r--
hashPassword.cpython-310.pyc
853
B
-rw-r--r--
httpProc.cpython-310.pyc
3.27
KB
-rw-r--r--
installUtilities.cpython-310.p...
11.58
KB
-rw-r--r--
mailUtilities.cpython-310.pyc
59.57
KB
-rw-r--r--
mysqlUtilities.cpython-310.pyc
24.48
KB
-rw-r--r--
processUtilities.cpython-310.p...
14.36
KB
-rw-r--r--
randomPassword.cpython-310.pyc
565
B
-rw-r--r--
serverLogs.cpython-310.pyc
1.1
KB
-rw-r--r--
sslUtilities.cpython-310.pyc
24.18
KB
-rw-r--r--
sslv2.cpython-310.pyc
12.52
KB
-rw-r--r--
tuning.cpython-310.pyc
8.71
KB
-rw-r--r--
vhost.cpython-310.pyc
22.97
KB
-rw-r--r--
vhostConfs.cpython-310.pyc
14.2
KB
-rw-r--r--
virtualHostUtilities.cpython-3...
42.32
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : sslUtilities.cpython-310.pyc
o ���h� � @ s� d dl Z d dlmZ d dlZd dlZd dlZd dlZd dlm Z z d dl m Z m Z W n Y d dl mZ G dd� d�Zd d d �ZdS ) � N)�CyberCPLogFileWriter)�ProcessUtilities)� ChildDomains�Websites�� ACLManagerc @ s� e Zd ZdZdZedd� �Zedd� �ZdZdZ d Z ed d � �Z ed d � �Z edd� �Z edd� �Zedd� �Zedd� �Zedd� �Zed dd��Zed d d ��ZdS )!� sslUtilitiesz/usr/local/lswsz&/usr/local/lsws/conf/dvhost_redis.confc C s� | sdS t | �} i dd�dd�dd�dd �d d �d d �dd�dd�dd�dd�dd�dd�dd�d d �d d �d d!�d"d#�d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3��}d4d5l}|�� D ]1\}}|�|| |j�r�| �d6�}|D ]}d7|v r�|d8|�d7�d9 �� � �7 } | S qj| S qWd:| v r�d;| v r�d4d5l}|�d<| �}|r�|d= }t|�d>kr�d?|� �S | �d6�}|D ]}|�� � d@�s�dA|� � v r�|�� S q�t| �dBkr�dC| dDd5� � �S d?| � �S )Ez<Parse ACME error output to extract meaningful error messageszUnknown error occurred� rateLimitedz_Rate limit exceeded. Too many certificates issued for this domain. Please wait before retrying.z&urn:ietf:params:acme:error:rateLimitedz1Rate limit exceeded. Please wait before retrying.ztoo many certificatesz2Rate limit: Too many certificates issued recently.zDNS problem: NXDOMAINz7DNS Error: Domain does not exist or DNS not propagated.z DNS problemz;DNS validation failed. Ensure domain points to this server.zConnection refusedz?Cannot connect to ACME server. Check firewall/network settings.zConnection timeoutz@Connection to ACME server timed out. Check network connectivity.zTimeout during connectz7Connection timeout. The ACME server may be unreachable.� unauthorizedz5Authorization failed. Domain validation unsuccessful.z'urn:ietf:params:acme:error:unauthorizedz5Domain authorization failed. Verify domain ownership.zInvalid response fromz/Invalid response from domain during validation.�404z9Challenge file not found. Check web server configuration.�403z=Access forbidden. Check file permissions and .htaccess rules.z CAA recordzACAA record prevents certificate issuance. Update DNS CAA records.z urn:ietf:params:acme:error:caaz4CAA record forbids issuance. Check DNS CAA settings.zChallenge failedz4ACME challenge failed. Ensure port 80 is accessible.zNo valid IP addressesz'No valid IP addresses found for domain.z(Cannot connect to domain for validation.zGA conflicting request exists. Previous request may still be processing.z'Malformed request. Check domain format.z,ACME server internal error. Try again later.z.Order not ready. Domain validation incomplete.z9Bad nonce error. This is usually temporary, please retry.z(Invalid nonce. Please retry the request.z1Account registration failed. Check email address.z1Cannot create ACME account. Check email validity.z Certificate verification failed.z/HTTP validation failed. Ensure port 80 is open.z HTTPS validation issue detected.z0Invalid email address provided for registration.z3Domain is blacklisted by the certificate authority.z>Certificate authority policy forbids issuance for this domain.)zCould not connect to�conflictingRequestz$urn:ietf:params:acme:error:malformedz)urn:ietf:params:acme:error:serverInternalz(urn:ietf:params:acme:error:orderNotReady�badNoncez$JWS has an invalid anti-replay noncezAccount registration errorzError creating new accountz Verify errorzFetching http://zFetching https://zInvalid email address� blacklisted� PolicyForbidsr N� zDetail:z Detail: � �[�]z \[([^\]]+)\]���� zSSL issuance failed: zError:zerror:�� zSSL issuance failed: ...i8���) �str�re�items�search� IGNORECASE�split�strip�findall�len� startswith�lower) � error_output�error_patternsr �pattern�message�lines�line�bracket_content�potential_error� r+ �+/usr/local/CyberCP/plogical/sslUtilities.py�parseACMEError s� �������� � � � � ������$ �� � zsslUtilities.parseACMEErrorc C s� zad| � d�}z t j|dddd�}W n ty' t j|dt jt jdd�}Y nw |j�� r0W dS d| � d�}z t j|dddd�}W n tyV t j|dt jt jdd�}Y nw |j�� r_W dS W dS z t�| � W Y dS Y Y dS )z>Check if domain has valid DNS records using external DNS queryz dig +short z A @8.8.8.8T)�shell�capture_output�text)r. �stdout�stderr�universal_newlinesz AAAA @8.8.8.8F)� subprocess�run� TypeError�PIPEr1 r �socket� gethostbyname)�domain�command�resultr+ r+ r, �checkDNSRecordse s8 �� �� z sslUtilities.checkDNSRecordsr r � c C s� z`ddl m} ddlm} t| d��D}|�� }|�||� �}|j�|j �}|rL|j � |j �}z t j�dt|�� �� W n Y d|fW d � W S W d � W dS 1 sYw Y W d S tyx } z dt|�fW Y d }~S d }~ww )Nr )�x509)�default_backend�rbzCovered domains: r )r N)� cryptographyr? � cryptography.hazmat.backendsr@ �open�read�load_pem_x509_certificate� extensions�get_extension_for_class�SubjectAlternativeName�value�get_values_for_type�DNSName�loggingr � writeToFiler � BaseException) � cert_pathr? r@ � cert_file� cert_data�cert� san_extension� san_domains�msgr+ r+ r, �getDomainsCovered� s* �(���z sslUtilities.getDomainsCoveredc C s� d| }t j�|�r�dd l}|j�|jjt|d��� �}|� � � � d d � d�}t j�t j �r=tj�d| � d|� d�� |d krDtjS |d krdt�|�\}}|rdt|�dkratj�d | d� ntjS |�� � d �}dd lm} |�|d�} |�� } | | } t| j�dkr�|dkr�tj�d| d� tjS |dkr�tj�d| � �d� tjS |d kr�tj�d| � �d� tjS tj�d| � �d� tjS tj�d| � �d� tjS )N�&/etc/letsencrypt/live/%s/fullchain.pemr �rr �utf-8zSSL provider for z is �.z(STAGING) Let's Encryptz Let's Encryptz�[CheckIfSSLNeedsToBeIssued] SSL exists for %s and both versions are covered, just need to ensure if SSL is valid for less then 15 days.�ascii��datetime� %Y%m%d%H%M%SZ� �Denialz\[CheckIfSSLNeedsToBeIssued] SSL exists for %s and is not ready to fetch new SSL., skipping..zJ[CheckIfSSLNeedsToBeIssued] Self-signed SSL found, lets issue new SSL for z1[CheckIfSSLNeedsToBeIssued] Custom SSL found for z2[CheckIfSSLNeedsToBeIssued] We will issue SSL for ) �os�path�exists�OpenSSL�crypto�load_certificate� FILETYPE_PEMrD rE � get_issuer�get_components�decoder � debugPathrM r rN r � ISSUE_SSLrW r � get_notAfterr^ �strptime�now�int�days� DONT_ISSUE) �virtualHostName�filePathre r? � SSLProvider�status�domains� expireDatar^ � finalDaterp �diffr+ r+ r, �CheckIfSSLNeedsToBeIssued� sh �� �� � � � �z&sslUtilities.CheckIfSSLNeedsToBeIssuedc C s� zOt d��� }d}|D ]A}|�d�dkr |�d�dkr d}q |dkr-|�d�dkr- W dS |�| �dkrL|dkrLdd � |�d �D �}|d | krL W dS q W d S tyl } ztj�t|�d � W Y d }~dS d }~ww ) N�&/usr/local/lsws/conf/httpd_config.confr �listenerr �SSLr �}c S s g | ]}|r|�qS r+ r+ )�.0�_fr+ r+ r, � <listcomp>� s z.sslUtilities.checkIfSSLMap.<locals>.<listcomp>� z1 [IO Error with main config file [checkIfSSLMap]]) rD � readlines�findr rO rM r rN r )rt �data�sslCheckr rV r+ r+ r, � checkIfSSLMap� s* �� ��zsslUtilities.checkIfSSLMapc C �t zt d��� } | D ] }|�d�dkr W dS q W dS ty9 } ztj�t|�d � t|�W Y d }~S d }~ww )Nr} z listener SSLr r z4 [IO Error with main config file [checkSSLListener]]r �rD r� r� rO rM r rN r �r� r rV r+ r+ r, �checkSSLListener� s �����z sslUtilities.checkSSLListenerc C r� )Nr} zlistener SSL IPv6r r z8 [IO Error with main config file [checkSSLIPv6Listener]]r r� r� r+ r+ r, �checkSSLIPv6Listener s ��� ���z!sslUtilities.checkSSLIPv6Listenerc C s^ zt �| �}t �d| �}d||gW S ty. } zddt|� d gW Y d }~S d }~ww )N�www.r r �347 � [issueSSLForDomain])r8 r9 rO r )rt � withoutWWW�withWWWrV r+ r+ r, � getDNSRecords s ��zsslUtilities.getDNSRecordsc C s� �z+t j�tjdd| �}t j�|d�}t j�|�s*tj�d|� �� dd|� �fW S zt |d�� }|� � }W d � n1 s?w Y W n' t yl } ztj�dt |�� �� ddt |�� �fW Y d}~W S d}~ww g }|� d �d kr�tj�d | � �� W d S |� d �d kr�|� d�d kr�|�d� |� d�d kr�|�d� |� d�d kr�|�d� |� d�d kr�|�d� |� d�d kr�|� d�d kr�|�d� |r�dd�|� }tj�d| � d |� �� d|fW S d }zt j|d d � t �|d � W n( t�y } ztj�d!t |�� �� dd!t |�� �fW Y d}~W S d}~ww t�� tjk�rpz t |d"��}d#} |�| � W d � n 1 �sAw Y W n� t �yo } ztj�d$t |�� �� dd$t |�� �fW Y d}~W S d}~ww zSt |d�� }|�� } W d � n 1 �s�w Y t |d%��)}d} | D ] } |�| � | � d&�d k�r�| dk�r�|�d'� d(} �q�W d � n 1 �s�w Y W n( t �y� } ztj�d)t |�� �� dd)t |�� �fW Y d}~W S d}~ww zdd*lm} | j�� tj�d+| � �� W W d,S t�y, } ztj�d-t |�� �� dd-t |�� �fW Y d}~W S d}~ww t�yS } ztj�d.t |�� �� dd/t |�� �fW Y d}~S d}~ww )0a� Patch the virtual host configuration to add ACME challenge support This function adds the necessary configuration to handle ACME challenges for both OpenLiteSpeed (OLS) and Apache configurations. It also checks for potential configuration conflicts before making changes. Args: virtualHostName (str): The domain name to configure Returns: tuple: (status, message) where status is 1 for success, 0 for failure �conf�vhostsz vhost.confz Configuration file not found: r rY Nz"Error reading configuration file: z/.well-known/acme-challenger z&ACME challenge already configured for )r z!ACME challenge already configured�rewritezenable 1zDActive rewrite rules found that might interfere with ACME challengeszlocation /.well-knownz.Existing location block for /.well-known foundzAlias /.well-knownz%Existing alias for /.well-known foundzcontext /.well-knownz-Existing context block for /.well-known foundz deny from all�locationz8Global deny rules found that might block ACME challengesz Configuration conflicts found: z; z Configuration conflicts for �: �7/usr/local/lsws/Example/html/.well-known/acme-challengeT)�exist_oki� z$Error creating challenge directory: �az� context /.well-known/acme-challenge { location /usr/local/lsws/Example/html/.well-known/acme-challenge allowBrowse 1 rewrite { enable 0 } addDefaultCharset off phpIniOverride { } } z!Error writing OLS configuration: �wzDocumentRoot /home/z^ Alias /.well-known/acme-challenge /usr/local/lsws/Example/html/.well-known/acme-challenge r z$Error writing Apache configuration: )�installUtilitiesz+Successfully configured ACME challenge for )r z&Successfully configured ACME challengez Error restarting LiteSpeed: z$Unexpected error in PatchVhostConf: zUnexpected error: )rb rc �joinr � Server_rootrd rM r rN rD rE �IOErrorr r� �append�makedirs�chmod�OSErrorr � decideServer�OLS�writer� �plogicalr� �reStartLiteSpeed� Exception)rt �confPath�completePathToConfigFile�f� DataVhost�e� conflicts�conflict_message� challenge_dir�contentr' �checkr( r� r+ r+ r, �PatchVhostConf# s� �� �� � �� �� �� � ��� �� �� � �� ��zsslUtilities.PatchVhostConf�domain@cyberpanel.netc 1 C s� z t jj| d�}|j}W n ty( } ztj�dt|� � W Y d }~nd }~ww t � � t j k�rjt j d | }|d }�zd| d | d }t �� dkr�td d �}d }d } d } d| d } d| d } d} d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�| � |�| � |�| � |�| � |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �� dk�rstd d �}d}d } d } d| d } d| d } d} d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�| � |�| � |�| � |�| � |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �| �d k�r�td ��� }td d �}d }|D ]-}|�d �d k�r�|�d!�d k�r�d}|dk�r�|�|� |�|� d }�q�|�|� �q�|�� t|d"��� }d }|D ] }|�d#�d k�r�d}�q�|d k�rIt|d �}d$}d%| d } d&| d } d} d}d}d}d}d}d}d}d'}|�d� |�|� |�| � |�| � |�| � |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t�yi } ztj�t|�d( � W Y d }~d S d }~ww tj�t j��s�t j d | }|d }t|d"��� }|D ]}|�d)�d k�r� dS �q�z�ztjj| d�} | jj } d*| j d } W n) t�y� } z t jj| d�}|j } t � d | �} d*| � d�} W Y d }~nd }~ww t|d"��� }d+} |D ]}|�d,�d k�r�|�d-�d k�r�|} n�q�t|d �}!d.}"d/}#d0| d }$d1| d }%d2| d }&d3| d | d }'d4| d5 | d6 }(|!�|#� |!�|$� |!�|%� |!�|&� |!�|'� |!�| � |!�|(� |!�|"� d7})d8}*d9| d }+d:| d },|!�|)� |!�|*� |!�|+� |!�|,� |!�| � d;}-|!�|-� |!�� W dS t�y� } ztj�t|�d< � W Y d }~d S d }~ww td=| d> �� � � d�}.td=| d? d"�� � � d�}/d@| |.|/f }0tj�dA� tj�|0� t �!|0� dS )BN�r: z%s [installSSLForDomain:72]z /conf/vhosts/z /vhost.confz map r� r r r} r� zlistener SSL { z address *:443 z secure 1 z1 keyFile /etc/letsencrypt/live/z /privkey.pem z1 certFile /etc/letsencrypt/live/z/fullchain.pem z certChain 1 z sslProtocol 24 z enableECDHE 1 z renegProtection 1 z sslSessionCache 1 z enableSpdy 15 z enableStapling 1 z! ocspRespMaxAge 86400 z} zlistener SSL IPv6 { z$ address [ANY]:443 r r� r~ r r rY �vhsslz vhssl { z0 keyFile /etc/letsencrypt/live/z0 certFile /etc/letsencrypt/live/r� z [installSSLForDomain]]z*:443z DocumentRoot � � AddHandler�phpzj <IfModule LiteSpeed> CacheRoot lscache CacheLookup on </IfModule> z <VirtualHost *:443> z ServerName z ServerAlias www.z ServerAdmin z SuexecUserGroup z CustomLog /home/z/logs/z.access_log combined z SSLEngine on z SSLVerifyClient none z- SSLCertificateFile /etc/letsencrypt/live/z0 SSLCertificateKeyFile /etc/letsencrypt/live/z</VirtualHost> z [installSSLForDomain]�/etc/letsencrypt/live/�/fullchain.pem� /privkey.pemz*redis-cli hmset "ssl:%s" crt "%s" key "%s"zhello world aaa)"r �objects�get� adminEmailrO rM r rN r r r� r� r r� r� rD � writelines�closer� r� r� r� rb rc rd � redisConfr �master� externalAppr �FindDocRootOfSiterE �rstrip� executioner)1rt r� �websiterV r� r� �map�writeDataToFiler~ �address�secure�keyFile�certFile� certChain� sslProtocol� enableECDHE�renegProtection�sslSessionCache� enableSpdy�enableStapling�ocspRespMaxAge�finalr� r� r � vhsslPresense�writeSSLConfigr� � chilDomainr� � DocumentRoot�docRoot� phpHandler�confFile� cacheRoot� VirtualHost� ServerName� ServerAlias� ServerAdmin�SeexecUserGroup�CustomLogCombined� SSLEngine�SSLVerifyClient�SSLCertificateFile�SSLCertificateKeyFile�VirtualHostEndrS �keyr; r+ r+ r, �installSSLForDomain� s� �� l� E� � ��� �� � �� z sslUtilities.installSSLForDomainNFc C s| ddl m} ddlm} ddlm} dd l}dd l} |r=d|v s$d|v r=dd l} | � dd| �} | � d �}t j � d |� �� d } t� | �tjkrHnd S d | �� } t�| � tj�d �sbd}t�|� d}t�|� z�| g}|s�t�d| � ��r�|�d| � �� t j � d| � d�� n |s�t j � d| � d�� |r�|�|� t�d|� ��r�|�d|� �� t j � d|� d�� n t j � d|� d�� d}ztjj| d�}|j dkr�d}W n Y || |ddd�}|j ||d�r�t j � d| � �� W d S W n; t �y0 } z.t |�}t |d��rt |j!�}n|}t j � d | � d |� �� t j � d |� d �� W Y d }~nd }~ww z{| g}|�sTt�d| � ���rT|�d| � �� t j � d| � d�� n |�sat j � d| � d�� |�r�|�|� t�d|� ���r�|�d|� �� t j � d|� d�� n t j � d|� d�� || |dd d�}|j ||d��r�t j � d!| � �� W d S W n t �y� } zt j � d"t |�� d#�� W Y d }~nd }~ww �z�d$}d%||f }t"�#t$�%|�� d&| }t"�#t$�%|�� |d u �r�d'| }tj�|��sd(| }t"�#t$�%|�� z�d)| }|�s(t�d| � ���r(|d*| 7 }t j � d| � d+�� n |�s5t j � d| � d,�� |d- | d. | d/ d0 | d1 d2 | d3 d4 d5 }z t"j&|dddd6�}W n t'�yr t"j&|t"j(t"j(ddd7�}Y nw |j)dk�r�|d- | d. | d/ d0 | d1 d2 | d3 d8 d5 }z t"j&|dddd6�}W n t'�y� t"j&|t"j(t"j(ddd7�}Y nw |j)dk�r�t j � d9| d: | d� t j �*| ||j+d;| � W W d S W W dS t �y� } zt j � t |�� W Y d }~W dS d }~ww d'| }tj�|��sd(| }t"�#t$�%|�� zrd)| }t�d| � ���r&|d*| 7 }|d)| 7 }t�d|� ���r;|d*| 7 }|d- | d. | d/ d0 | d1 d2 | d3 d8 }z t"j&|dddd6�}W n t'�yv t"j&|t"j(t"j(ddd7�}Y nw |j)dk�r�W W d S W W dS t �y� } zt j � t |�� W Y d }~W dS d }~ww t �y� } zt j � t |�� W Y d }~dS d }~ww )<Nr r )r )� CustomACMEz example.orgz example.comz [^a-zA-Z0-9]r� z@cyberpanel.netz Replacing invalid email with r zroot@%sr� z@mkdir -p /usr/local/lsws/Example/html/.well-known/acme-challengez)chmod -R 755 /usr/local/lsws/Example/htmlr� z* has DNS records, including in SSL requestz/ has no DNS records, excluding from SSL requestFr� � cloudflareT� letsencrypt)�staging�provider)�use_dnsz3Successfully obtained SSL using Let's Encrypt for: �__dict__zLet's Encrypt failed for r� zDetailed error: z. Trying ZeroSSL...�zerosslz-Successfully obtained SSL using ZeroSSL for: zZeroSSL failed: z. Falling back to acme.sh�/root/.acme.sh/acme.shz%s --register-account -m %sz(%s --set-default-ca --server letsencryptr� z mkdir -p z -d � -d www.z2 has DNS records, including in acme.sh SSL requestz7 has no DNS records, excluding from acme.sh SSL requestz --issuez --cert-file z /cert.pemz --key-file r� z --fullchain-file r� z< -w /usr/local/lsws/Example/html -k ec-256 --force --stagingz, --webroot-path /usr/local/lsws/Example/html)r/ r3 r. �r1 r2 r3 r. zG -w /usr/local/lsws/Example/html -k ec-256 --force --server letsencryptz Successfully obtained SSL for: z and: www.zSSL Notification for %s.),� plogical.aclr �plogical.sslv2r �plogical.customACMEr� �jsonr8 r �subrM r rN r| rm � gethostnamer� rb rc rd r �normalExecutionerr� r= r� r r� r� r� �issue_certificater� r �hasattrr� r4 �call�shlexr r5 r6 r7 � returncode� SendEmailr1 )rt r� �sslpath� aliasDomain� isHostnamer �sslv2r� r� r8 r � clean_domain�Status� sender_emailr; rx r� r� �acmer� � error_msg� error_details�acmePath�existingCertPath� domain_listr< r+ r+ r, �obtainSSLForADomain� s� � � � � ��� � ��� � � � ������ � � ����������� �� ����������� �� ���� ���������� �� ����z sslUtilities.obtainSSLForADomain)r� �NF)�__name__� __module__� __qualname__r� r� � staticmethodr- r= rs �ISSUE_SELFSIGNEDrm rW r| r� r� r� r� r� r� r r+ r+ r+ r, r s< O % ; yr Fc C s� �z�d| d }t j�|��r?d}zTdd l}ddlm} t|d��} |j�|jj| � � �} W d � n1 s7w Y | � � � d�} |� | d�} |� � } | | }|jdk }tj�d | � d |j� d �� W n ty� } ztj�d t|�� �� W Y d }~nd }~ww tj�d | � d�� d}t j�|��r?|� d|� �}tj|dd� d| � �}|s�t�d| � ��r�|d| � �7 }|r�tj�d| � �� |� d|� d�}n|� d|� d�}z tj|dddd�}W n ty� tj|tjtjddd�}Y nw |jdk�rtj�d | � �� t� | |�d k�rd d gW S n*t |d ��r"|j �r"|j n|j }t� |�}tj�d | � d!|� �� tj�d"|� �� t�!| ||||�d k�r^t� | |�d k�rYd d#gW S dd$gW S d%| }d&| }t j�|��r�dd l}|j�|jjt|d�� � �} | �"� �#� d d � d'�}|d(k�r�t� | �d k�r�tj�d)| d* � d d)| d* d+ gW S d,| d- | d. | }t$�%|�}t�|� t� | �d k�r�tj�d/| d0 � d d1gW S dd$gW S t&�y� } zdd2t|� d+ gW Y d }~S d }~ww )3Nr� r� Fr r] rY r\ r_ zCertificate for z expires in z daysz$Could not check certificate expiry: zCertificate exists for z, attempting renewal...r� z! --update-account --accountemail T)r. z-d r� r� z2Certificate is expired, using --issue --force for z --issue z/ --webroot /usr/local/lsws/Example/html --forcez --renew )r/ r0 r. r� z Successfully renewed SSL for r zSSL successfully renewedr2 zRenewal failed for z . Error: zFull error output: �Nonez9210 Failed to install SSL for domain. [issueSSLForDomain]z$/etc/letsencrypt/live/%s/privkey.pemrX rZ ra z#We are not able to get new SSL for zU. But there is an existing SSL, it might only be for the main domain (excluding www).r� zhopenssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -subj "/C=US/ST=Denial/L=Springfield/O=Dis/CN=z " -keyout z -out zSelf signed SSL issued for r[ z7Self signed certificate was issued. [issueSSLForDomain]r� )'rb rc rd re r^ rD rf rg rh rE rn rk ro rp rr rM r rN r� r r4 r r r= r5 r6 r7 r r� r r2 r1 r- r ri rj r r rO )r: r� r r r r � is_expiredre r^ rQ r? � expire_data� final_daterp r{ r� r r; �renewal_domainsr< r# r �pathToStoreSSLPrivKey�pathToStoreSSLFullChainrv �cmdrV r+ r+ r, �issueSSLForDomain� s� � "�� � �� � � �� ��r$ r )�requestsr� r rM rb r r4 r8 �plogical.processUtilitiesr �websiteFunctions.modelsr r r� r r r$ r+ r+ r+ r, �<module> s( z
Close
