@certd/plugin-cert 1.41.3 → 1.42.0

package/dist/plugin/cert-plugin/acme.d.ts

@@ -1,123 +0,0 @@
-import * as acme from "@certd/acme-client";
-import { ClientExternalAccountBindingOptions, UrlMapping } from "@certd/acme-client";
-import { Challenge } from "@certd/acme-client/types/rfc8555";
-import { IContext } from "@certd/pipeline";
-import { ILogger } from "@certd/basic";
-import { IDnsProvider, IDomainParser } from "../../dns-provider/index.js";
-import { IOssClient } from "@certd/plugin-lib";
-export type CnameVerifyPlan = {
-    type?: string;
-    domain: string;
-    fullRecord: string;
-    dnsProvider: IDnsProvider;
-};
-export type HttpVerifyPlan = {
-    type: string;
-    domain: string;
-    httpUploader: IOssClient;
-};
-export type DomainVerifyPlan = {
-    domain: string;
-    mainDomain: string;
-    type: "cname" | "dns" | "http";
-    dnsProvider?: IDnsProvider;
-    cnameVerifyPlan?: CnameVerifyPlan;
-    httpVerifyPlan?: HttpVerifyPlan;
-};
-export type DomainsVerifyPlan = {
-    [key: string]: DomainVerifyPlan;
-};
-export type Providers = {
-    dnsProvider?: IDnsProvider;
-    domainsVerifyPlan?: DomainsVerifyPlan;
-};
-export type CertInfo = {
-    crt: string;
-    key: string;
-    csr: string;
-    oc?: string;
-    ic?: string;
-    pfx?: string;
-    der?: string;
-    jks?: string;
-    one?: string;
-    p7b?: string;
-};
-export type SSLProvider = "letsencrypt" | "google" | "zerossl" | "sslcom" | "letsencrypt_staging";
-export type PrivateKeyType = "rsa_1024" | "rsa_2048" | "rsa_3072" | "rsa_4096" | "ec_256" | "ec_384" | "ec_521";
-type AcmeServiceOptions = {
-    userContext: IContext;
-    logger: ILogger;
-    sslProvider: SSLProvider;
-    eab?: ClientExternalAccountBindingOptions;
-    skipLocalVerify?: boolean;
-    useMappingProxy?: boolean;
-    reverseProxy?: string;
-    privateKeyType?: PrivateKeyType;
-    signal?: AbortSignal;
-    maxCheckRetryCount?: number;
-    userId: number;
-    domainParser: IDomainParser;
-    waitDnsDiffuseTime?: number;
-};
-export declare class AcmeService {
-    options: AcmeServiceOptions;
-    userContext: IContext;
-    logger: ILogger;
-    sslProvider: SSLProvider;
-    skipLocalVerify: boolean;
-    eab?: ClientExternalAccountBindingOptions;
-    constructor(options: AcmeServiceOptions);
-    getAccountConfig(email: string, urlMapping: UrlMapping): Promise<any>;
-    buildAccountKey(email: string): string;
-    saveAccountConfig(email: string, conf: any): Promise<void>;
-    getAcmeClient(email: string): Promise<acme.Client>;
-    createNewKey(): Promise<string>;
-    challengeCreateFn(authz: any, keyAuthorizationGetter: (challenge: Challenge) => Promise<string>, providers: Providers): Promise<{
-        challenge: any;
-        keyAuthorization: string;
-        httpUploader: IOssClient;
-    } | {
-        recordReq: {
-            domain: any;
-            fullRecord: string;
-            hostRecord: string;
-            type: string;
-            value: string;
-        };
-        recordRes: any;
-        dnsProvider: IDnsProvider<any>;
-        challenge: any;
-        keyAuthorization: string;
-    }>;
-    /**
-     * Function used to remove an ACME challenge response
-     *
-     * @param {object} authz Authorization object
-     * @param {object} challenge Selected challenge
-     * @param {string} keyAuthorization Authorization key
-     * @param recordReq
-     * @param recordRes
-     * @param dnsProvider dnsProvider
-     * @param httpUploader
-     * @returns {Promise}
-     */
-    challengeRemoveFn(authz: any, challenge: any, keyAuthorization: string, recordReq: any, recordRes: any, dnsProvider?: IDnsProvider, httpUploader?: IOssClient): Promise<void>;
-    order(options: {
-        email: string;
-        domains: string | string[];
-        dnsProvider?: any;
-        domainsVerifyPlan?: DomainsVerifyPlan;
-        httpUploader?: any;
-        csrInfo: any;
-        privateKeyType?: string;
-        profile?: string;
-        preferredChain?: string;
-    }): Promise<CertInfo>;
-    buildCommonNameByDomains(domains: string | string[]): {
-        commonName?: string;
-        altNames: string[] | undefined;
-    };
-    private testDirectory;
-}
-export {};

package/dist/plugin/cert-plugin/acme.js

@@ -1,362 +0,0 @@
-// @ts-ignore
-import * as acme from "@certd/acme-client";
-import { utils } from "@certd/basic";
-import punycode from "punycode.js";
-export class AcmeService {
-    options;
-    userContext;
-    logger;
-    sslProvider;
-    skipLocalVerify = true;
-    eab;
-    constructor(options) {
-        this.options = options;
-        this.userContext = options.userContext;
-        this.logger = options.logger;
-        this.sslProvider = options.sslProvider || "letsencrypt";
-        this.eab = options.eab;
-        this.skipLocalVerify = options.skipLocalVerify ?? false;
-        // acme.setLogger((message: any, ...args: any[]) => {
-        //   this.logger.info(message, ...args);
-        // });
-    }
-    async getAccountConfig(email, urlMapping) {
-        const conf = (await this.userContext.getObj(this.buildAccountKey(email))) || {};
-        if (urlMapping && urlMapping.mappings) {
-            for (const key in urlMapping.mappings) {
-                if (Object.prototype.hasOwnProperty.call(urlMapping.mappings, key)) {
-                    const element = urlMapping.mappings[key];
-                    if (conf.accountUrl?.indexOf(element) > -1) {
-                        //如果用了代理url，要替换回去
-                        conf.accountUrl = conf.accountUrl.replace(element, key);
-                    }
-                }
-            }
-        }
-        return conf;
-    }
-    buildAccountKey(email) {
-        return `acme.config.${this.sslProvider}.${email}`;
-    }
-    async saveAccountConfig(email, conf) {
-        await this.userContext.setObj(this.buildAccountKey(email), conf);
-    }
-    async getAcmeClient(email) {
-        const mappings = {};
-        if (this.sslProvider === "letsencrypt") {
-            mappings["acme-v02.api.letsencrypt.org"] = this.options.reverseProxy || "le.px.certd.handfree.work";
-        }
-        else if (this.sslProvider === "google") {
-            mappings["dv.acme-v02.api.pki.goog"] = this.options.reverseProxy || "gg.px.certd.handfree.work";
-        }
-        const urlMapping = {
-            enabled: false,
-            mappings,
-        };
-        const conf = await this.getAccountConfig(email, urlMapping);
-        if (conf.key == null) {
-            conf.key = await this.createNewKey();
-            await this.saveAccountConfig(email, conf);
-            this.logger.info(`创建新的Accountkey:${email}`);
-        }
-        const directoryUrl = acme.getDirectoryUrl({ sslProvider: this.sslProvider, pkType: this.options.privateKeyType });
-        if (this.options.useMappingProxy) {
-            urlMapping.enabled = true;
-        }
-        else {
-            //测试directory是否可以访问
-            const isOk = await this.testDirectory(directoryUrl);
-            if (!isOk) {
-                this.logger.info("测试访问失败，自动使用代理");
-                urlMapping.enabled = true;
-            }
-        }
-        const client = new acme.Client({
-            sslProvider: this.sslProvider,
-            directoryUrl: directoryUrl,
-            accountKey: conf.key,
-            accountUrl: conf.accountUrl,
-            externalAccountBinding: this.eab,
-            backoffAttempts: this.options.maxCheckRetryCount || 20,
-            backoffMin: 5000,
-            backoffMax: 10000,
-            urlMapping,
-            signal: this.options.signal,
-            logger: this.logger,
-        });
-        if (conf.accountUrl == null) {
-            const accountPayload = {
-                termsOfServiceAgreed: true,
-                contact: [`mailto:${email}`],
-                externalAccountBinding: this.eab,
-            };
-            await client.createAccount(accountPayload);
-            conf.accountUrl = client.getAccountUrl();
-            await this.saveAccountConfig(email, conf);
-        }
-        return client;
-    }
-    async createNewKey() {
-        const key = await acme.crypto.createPrivateKey(2048);
-        return key.toString();
-    }
-    async challengeCreateFn(authz, keyAuthorizationGetter, providers) {
-        this.logger.info("Triggered challengeCreateFn()");
-        const fullDomain = authz.identifier.value;
-        let domain = await this.options.domainParser.parse(fullDomain);
-        this.logger.info("主域名为：" + domain);
-        const getChallenge = (type) => {
-            return authz.challenges.find((c) => c.type === type);
-        };
-        const doHttpVerify = async (challenge, httpUploader) => {
-            const keyAuthorization = await keyAuthorizationGetter(challenge);
-            this.logger.info("http校验");
-            const filePath = `.well-known/acme-challenge/${challenge.token}`;
-            const fileContents = keyAuthorization;
-            this.logger.info(`校验 ${fullDomain} ，准备上传文件：${filePath}`);
-            await httpUploader.upload(filePath, Buffer.from(fileContents));
-            this.logger.info(`上传文件【${filePath}】成功`);
-            return {
-                challenge,
-                keyAuthorization,
-                httpUploader,
-            };
-        };
-        const doDnsVerify = async (challenge, fullRecord, dnsProvider) => {
-            this.logger.info("dns校验");
-            const keyAuthorization = await keyAuthorizationGetter(challenge);
-            const mainDomain = dnsProvider.usePunyCode() ? domain : punycode.toUnicode(domain);
-            fullRecord = dnsProvider.usePunyCode() ? fullRecord : punycode.toUnicode(fullRecord);
-            const recordValue = keyAuthorization;
-            let hostRecord = fullRecord.replace(`${mainDomain}`, "");
-            if (hostRecord.endsWith(".")) {
-                hostRecord = hostRecord.substring(0, hostRecord.length - 1);
-            }
-            const recordReq = {
-                domain: mainDomain,
-                fullRecord,
-                hostRecord,
-                type: "TXT",
-                value: recordValue,
-            };
-            this.logger.info("添加 TXT 解析记录", JSON.stringify(recordReq));
-            const recordRes = await dnsProvider.createRecord(recordReq);
-            this.logger.info("添加 TXT 解析记录成功", JSON.stringify(recordRes));
-            return {
-                recordReq,
-                recordRes,
-                dnsProvider,
-                challenge,
-                keyAuthorization,
-            };
-        };
-        let dnsProvider = providers.dnsProvider;
-        let fullRecord = `_acme-challenge.${fullDomain}`;
-        // const origDomain = punycode.toUnicode(domain);
-        const origFullDomain = punycode.toUnicode(fullDomain);
-        const isIp = utils.domain.isIp(origFullDomain);
-        function checkIpChallenge(type) {
-            if (isIp) {
-                throw new Error(`IP证书不支持${type}校验方式，请选择HTTP方式校验`);
-            }
-        }
-        if (providers.domainsVerifyPlan) {
-            //按照计划执行
-            const domainVerifyPlan = providers.domainsVerifyPlan[origFullDomain];
-            if (domainVerifyPlan) {
-                if (domainVerifyPlan.type === "dns") {
-                    checkIpChallenge("dns");
-                    dnsProvider = domainVerifyPlan.dnsProvider;
-                }
-                else if (domainVerifyPlan.type === "cname") {
-                    checkIpChallenge("cname");
-                    const cname = domainVerifyPlan.cnameVerifyPlan;
-                    if (cname) {
-                        dnsProvider = cname.dnsProvider;
-                        domain = await this.options.domainParser.parse(cname.domain);
-                        fullRecord = cname.fullRecord;
-                    }
-                    else {
-                        this.logger.error(`未找到域名${fullDomain}的CNAME校验计划，请修改证书申请配置`);
-                    }
-                    if (dnsProvider == null) {
-                        throw new Error(`未找到域名${fullDomain}CNAME校验计划的DnsProvider，请修改证书申请配置`);
-                    }
-                }
-                else if (domainVerifyPlan.type === "http") {
-                    const plan = domainVerifyPlan.httpVerifyPlan;
-                    if (plan) {
-                        const httpChallenge = getChallenge("http-01");
-                        if (httpChallenge == null) {
-                            throw new Error("该域名不支持http-01方式校验");
-                        }
-                        return await doHttpVerify(httpChallenge, plan.httpUploader);
-                    }
-                    else {
-                        throw new Error("未找到域名【" + fullDomain + "】的http校验配置");
-                    }
-                }
-                else {
-                    throw new Error("不支持的校验类型", domainVerifyPlan.type);
-                }
-            }
-            else {
-                this.logger.warn(`未找到域名${fullDomain}的校验计划，使用默认的dnsProvider`);
-            }
-        }
-        if (!dnsProvider) {
-            throw new Error(`域名${fullDomain}没有匹配到任何校验方式，证书申请失败`);
-        }
-        const dnsChallenge = getChallenge("dns-01");
-        checkIpChallenge("dns");
-        return await doDnsVerify(dnsChallenge, fullRecord, dnsProvider);
-    }
-    /**
-     * Function used to remove an ACME challenge response
-     *
-     * @param {object} authz Authorization object
-     * @param {object} challenge Selected challenge
-     * @param {string} keyAuthorization Authorization key
-     * @param recordReq
-     * @param recordRes
-     * @param dnsProvider dnsProvider
-     * @param httpUploader
-     * @returns {Promise}
-     */
-    async challengeRemoveFn(authz, challenge, keyAuthorization, recordReq, recordRes, dnsProvider, httpUploader) {
-        this.logger.info("执行清理");
-        /* http-01 */
-        const fullDomain = authz.identifier.value;
-        if (challenge.type === "http-01") {
-            const filePath = `.well-known/acme-challenge/${challenge.token}`;
-            this.logger.info(`Removing challenge response for ${fullDomain} at file: ${filePath}`);
-            await httpUploader.remove(filePath);
-            this.logger.info(`删除文件【${filePath}】成功`);
-        }
-        else if (challenge.type === "dns-01") {
-            this.logger.info(`删除 TXT 解析记录:${JSON.stringify(recordReq)} ,recordRes = ${JSON.stringify(recordRes)}`);
-            try {
-                await dnsProvider.removeRecord({
-                    recordReq,
-                    recordRes,
-                });
-                this.logger.info("删除解析记录成功");
-            }
-            catch (e) {
-                this.logger.error("删除解析记录出错：", e);
-                throw e;
-            }
-        }
-    }
-    async order(options) {
-        const { email, csrInfo, dnsProvider, domainsVerifyPlan, profile, preferredChain } = options;
-        const client = await this.getAcmeClient(email);
-        let domains = options.domains;
-        const encodingDomains = [];
-        for (const domain of domains) {
-            encodingDomains.push(punycode.toASCII(domain));
-        }
-        domains = encodingDomains;
-        /* Create CSR */
-        const { altNames } = this.buildCommonNameByDomains(domains);
-        let privateKey = null;
-        const privateKeyType = options.privateKeyType || "rsa_2048";
-        const privateKeyArr = privateKeyType.split("_");
-        const type = privateKeyArr[0];
-        let size = 2048;
-        if (privateKeyArr.length > 1) {
-            size = parseInt(privateKeyArr[1]);
-        }
-        let encodingType = "pkcs8";
-        if (privateKeyArr.length > 2) {
-            encodingType = privateKeyArr[2];
-        }
-        if (type == "ec") {
-            const name = "P-" + size;
-            privateKey = await acme.crypto.createPrivateEcdsaKey(name, encodingType);
-        }
-        else {
-            privateKey = await acme.crypto.createPrivateRsaKey(size, encodingType);
-        }
-        let createCsr = acme.crypto.createCsr;
-        if (encodingType === "pkcs1") {
-            //兼容老版本
-            createCsr = acme.forge.createCsr;
-        }
-        const csrData = {
-            // commonName,
-            ...csrInfo,
-            altNames,
-            // emailAddress: email,
-        };
-        const [key, csr] = await createCsr(csrData, privateKey);
-        if (dnsProvider == null && domainsVerifyPlan == null) {
-            throw new Error("dnsProvider 、 domainsVerifyPlan不能都为空");
-        }
-        const providers = {
-            dnsProvider,
-            domainsVerifyPlan,
-        };
-        /* 自动申请证书 */
-        const crt = await client.auto({
-            csr,
-            email: email,
-            termsOfServiceAgreed: true,
-            skipChallengeVerification: this.skipLocalVerify,
-            challengePriority: ["dns-01", "http-01"],
-            challengeCreateFn: async (authz, keyAuthorizationGetter) => {
-                return await this.challengeCreateFn(authz, keyAuthorizationGetter, providers);
-            },
-            challengeRemoveFn: async (authz, challenge, keyAuthorization, recordReq, recordRes, dnsProvider, httpUploader) => {
-                return await this.challengeRemoveFn(authz, challenge, keyAuthorization, recordReq, recordRes, dnsProvider, httpUploader);
-            },
-            signal: this.options.signal,
-            profile,
-            preferredChain,
-        });
-        const crtString = crt.toString();
-        const cert = {
-            crt: crtString,
-            key: key.toString(),
-            csr: csr.toString(),
-        };
-        /* Done */
-        this.logger.debug(`CSR:\n${cert.csr}`);
-        this.logger.debug(`Certificate:\n${cert.crt}`);
-        this.logger.info("证书申请成功");
-        return cert;
-    }
-    buildCommonNameByDomains(domains) {
-        if (typeof domains === "string") {
-            domains = domains.split(",");
-        }
-        if (domains.length === 0) {
-            throw new Error("domain can not be empty");
-        }
-        // const commonName = domains[0];
-        // let altNames: undefined | string[] = undefined;
-        // if (domains.length > 1) {
-        //   altNames = _.slice(domains, 1);
-        // }
-        return {
-            // commonName,
-            altNames: domains,
-        };
-    }
-    async testDirectory(directoryUrl) {
-        try {
-            await utils.http.request({
-                url: directoryUrl,
-                method: "GET",
-                timeout: 10000,
-            });
-        }
-        catch (e) {
-            this.logger.error(`${directoryUrl}，测试访问失败`, e.message);
-            return false;
-        }
-        this.logger.info(`${directoryUrl}，测试访问成功`);
-        return true;
-    }
-}
-//# sourceMappingURL=data:application/json;base64,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

package/dist/plugin/cert-plugin/base-convert.d.ts

@@ -1,25 +0,0 @@
-import { AbstractTaskPlugin, FileItem, IContext, Step } from "@certd/pipeline";
-import type { CertInfo } from "./acme.js";
-import { CertReader } from "./cert-reader.js";
-export declare const EVENT_CERT_APPLY_SUCCESS = "CertApply.success";
-export declare abstract class CertApplyBaseConvertPlugin extends AbstractTaskPlugin {
-    domains: string[];
-    pfxPassword: string;
-    pfxArgs: string;
-    userContext: IContext;
-    lastStatus: Step;
-    cert?: CertInfo;
-    certZip?: FileItem;
-    onInstance(): Promise<void>;
-    abstract onInit(): Promise<void>;
-    emitCertApplySuccess(): Promise<void>;
-    output(certReader: CertReader, isNew: boolean): Promise<void>;
-    zipCert(cert: CertInfo, filename: string): Promise<void>;
-    formatCert(pem: string): string;
-    formatCerts(cert: {
-        crt: string;
-        key: string;
-        csr: string;
-    }): CertInfo;
-    readLastCert(): Promise<CertReader | undefined>;
-}