2019-12-04 14:40:59 +05:00
|
|
|
#!/usr/local/CyberCP/bin/python2
|
|
|
|
|
import os
|
|
|
|
|
import os.path
|
|
|
|
|
import sys
|
|
|
|
|
import django
|
|
|
|
|
|
|
|
|
|
sys.path.append('/usr/local/CyberCP')
|
|
|
|
|
os.environ.setdefault("DJANGO_SETTINGS_MODULE", "CyberCP.settings")
|
|
|
|
|
django.setup()
|
|
|
|
|
from plogical.CyberCPLogFileWriter import CyberCPLogFileWriter as logging
|
|
|
|
|
from websiteFunctions.models import Websites, ChildDomains
|
|
|
|
|
from os import path
|
|
|
|
|
from datetime import datetime
|
|
|
|
|
import OpenSSL
|
|
|
|
|
from plogical.virtualHostUtilities import virtualHostUtilities
|
|
|
|
|
|
|
|
|
|
class Renew:
|
|
|
|
|
def SSLObtainer(self):
|
|
|
|
|
try:
|
|
|
|
|
logging.writeToFile('Running SSL Renew Utility')
|
|
|
|
|
|
|
|
|
|
## For websites
|
|
|
|
|
|
|
|
|
|
for website in Websites.objects.all():
|
|
|
|
|
logging.writeToFile('Checking SSL for %s.' % (website.domain))
|
|
|
|
|
filePath = '/etc/letsencrypt/live/%s/fullchain.pem' % (website.domain)
|
|
|
|
|
|
|
|
|
|
if path.exists(filePath):
|
|
|
|
|
logging.writeToFile('SSL exists for %s. Checking if SSL will expire in 15 days..' % (website.domain))
|
|
|
|
|
x509 = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM,
|
|
|
|
|
open(filePath, 'r').read())
|
|
|
|
|
expireData = x509.get_notAfter().decode('ascii')
|
|
|
|
|
finalDate = datetime.strptime(expireData, '%Y%m%d%H%M%SZ')
|
|
|
|
|
now = datetime.now()
|
|
|
|
|
diff = finalDate - now
|
|
|
|
|
|
|
|
|
|
if int(diff.days) >= 15:
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s and is not ready to renew, skipping..' % (website.domain))
|
2019-12-04 19:42:38 +05:00
|
|
|
elif x509.get_issuer().get_components()[1][1] == 'Denial':
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s and ready to renew..' % (website.domain))
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'Renewing SSL for %s..' % (website.domain))
|
|
|
|
|
|
|
|
|
|
virtualHostUtilities.issueSSL(website.domain, '/home/%s/public_html' % (website.domain),
|
|
|
|
|
website.adminEmail)
|
2019-12-04 14:40:59 +05:00
|
|
|
else:
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s and ready to renew..' % (website.domain))
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'Renewing SSL for %s..' % (website.domain))
|
|
|
|
|
|
|
|
|
|
virtualHostUtilities.issueSSL(website.domain, '/home/%s/public_html' % (website.domain), website.adminEmail)
|
|
|
|
|
else:
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL does not exist for %s. Obtaining now..' % (website.domain))
|
|
|
|
|
virtualHostUtilities.issueSSL(website.domain, '/home/%s/public_html' % (website.domain),
|
|
|
|
|
website.adminEmail)
|
|
|
|
|
|
|
|
|
|
## For child-domains
|
|
|
|
|
|
|
|
|
|
for website in ChildDomains.objects.all():
|
|
|
|
|
logging.writeToFile('Checking SSL for %s.' % (website.domain))
|
|
|
|
|
filePath = '/etc/letsencrypt/live/%s/fullchain.pem' % (website.domain)
|
|
|
|
|
|
|
|
|
|
if path.exists(filePath):
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s. Checking if SSL will expire in 15 days..' % (website.domain))
|
|
|
|
|
x509 = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM,
|
|
|
|
|
open(filePath, 'r').read())
|
|
|
|
|
expireData = x509.get_notAfter().decode('ascii')
|
|
|
|
|
finalDate = datetime.strptime(expireData, '%Y%m%d%H%M%SZ')
|
|
|
|
|
now = datetime.now()
|
|
|
|
|
diff = finalDate - now
|
|
|
|
|
|
|
|
|
|
if int(diff.days) >= 15:
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s and is not ready to renew, skipping..' % (website.domain))
|
2019-12-04 19:42:38 +05:00
|
|
|
elif x509.get_issuer().get_components()[1][1] == 'Denial':
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s and ready to renew..' % (website.domain))
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'Renewing SSL for %s..' % (website.domain))
|
|
|
|
|
|
|
|
|
|
virtualHostUtilities.issueSSL(website.domain, website.path,
|
|
|
|
|
website.master.adminEmail)
|
2019-12-04 14:40:59 +05:00
|
|
|
else:
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL exists for %s and ready to renew..' % (website.domain))
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'Renewing SSL for %s..' % (website.domain))
|
|
|
|
|
|
|
|
|
|
virtualHostUtilities.issueSSL(website.domain, website.path,
|
|
|
|
|
website.master.adminEmail)
|
|
|
|
|
else:
|
|
|
|
|
logging.writeToFile(
|
|
|
|
|
'SSL does not exist for %s. Obtaining now..' % (website.domain))
|
|
|
|
|
virtualHostUtilities.issueSSL(website.domain, website.path,
|
|
|
|
|
website.master.adminEmail)
|
|
|
|
|
|
2019-12-10 15:09:10 +05:00
|
|
|
except BaseException as msg:
|
2019-12-04 14:40:59 +05:00
|
|
|
logging.writeToFile(str(msg) + '. Renew.SSLObtainer')
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
if __name__ == "__main__":
|
|
|
|
|
sslOB = Renew()
|
|
|
|
|
sslOB.SSLObtainer()
|