WEBLIB.RE/vpnclient_ynh
1
0
Fork 0
Code Issues Pull Requests Releases 1 Wiki Activity

Fix #24

Browse Source
This commit is contained in:
Julien Vaubourg
2015-09-29 00:17:23 +02:00
parent 5b0cc0cc2f
commit 8bcce7defe
4 changed files with 322 additions and 193 deletions
Download Patch File Download Diff File Expand all files Collapse all files

185
sources/controller.php
View File

@@ -64,6 +64,33 @@ function ipv6_compressed($ip) {
return $output[0];
}
function readAutoConf($file) {
$json = file_get_contents($file);
$config = json_decode($json, true);
if(!empty($config['crt_server_ca'])) {
$config['crt_server_ca'] = str_replace('|', "\n", $config['crt_server_ca']);
}
if(!empty($config['crt_client'])) {
$config['crt_client'] = str_replace('|', "\n", $config['crt_client']);
}
if(!empty($config['crt_client_key'])) {
$config['crt_client_key'] = str_replace('|', "\n", $config['crt_client_key']);
}
if(!empty($config['crt_client_ta'])) {
$config['crt_client_ta'] = str_replace('|', "\n", $config['crt_client_ta']);
}
if(!empty($config['openvpn_add'])) {
$config['openvpn_add'] = str_replace('|', "\n", $config['openvpn_add']);
}
return $config;
}
dispatch('/', function() {
$ip6_net = ynh_setting_get('ip6_net');
$ip6_net = ($ip6_net == 'none') ? '' : $ip6_net;
@@ -89,47 +116,56 @@ dispatch('/', function() {
});
dispatch_put('/settings', function() {
$crt_client_exists = file_exists('/etc/openvpn/keys/user.crt');
$crt_client_key_exists = file_exists('/etc/openvpn/keys/user.key');
$crt_server_ca_exists = file_exists('/etc/openvpn/keys/ca-server.crt');
$service_enabled = isset($_POST['service_enabled']) ? 1 : 0;
$ip6_net = empty($_POST['ip6_net']) ? 'none' : $_POST['ip6_net'];
$ip6_addr = 'none';
if($service_enabled == 1) {
$crt_client_exists = file_exists('/etc/openvpn/keys/user.crt');
$crt_client_key_exists = file_exists('/etc/openvpn/keys/user.key');
$crt_server_ca_exists = file_exists('/etc/openvpn/keys/ca-server.crt');
$config = $_POST;
$autoconf = false;
if($_FILES['cubefile']['error'] == UPLOAD_ERR_OK) {
$config = readAutoConf($_FILES['cubefile']['tmp_name']);
$autoconf = true;
}
$ip6_net = empty($config['ip6_net']) ? 'none' : $config['ip6_net'];
$ip6_addr = 'none';
try {
if(empty($_POST['server_name']) || empty($_POST['server_port']) || empty($_POST['server_proto'])) {
if(empty($config['server_name']) || empty($config['server_port']) || empty($config['server_proto'])) {
throw new Exception(_('The Server Address, the Server Port and the Protocol cannot be empty'));
}
if(!preg_match('/^\d+$/', $_POST['server_port'])) {
if(!preg_match('/^\d+$/', $config['server_port'])) {
throw new Exception(_('The Server Port must be only composed of digits'));
}
if($_POST['server_proto'] != 'udp' && $_POST['server_proto'] != 'tcp') {
if($config['server_proto'] != 'udp' && $config['server_proto'] != 'tcp') {
throw new Exception(_('The Protocol must be "udp" or "tcp"'));
}
if(empty($_POST['dns0']) || empty($_POST['dns1'])) {
if(empty($config['dns0']) || empty($config['dns1'])) {
throw new Exception(_('You need to define two DNS resolver addresses'));
}
if(($_FILES['crt_client']['error'] == UPLOAD_ERR_OK && $_FILES['crt_client_key']['error'] != UPLOAD_ERR_OK && (!$crt_client_key_exists || $_POST['crt_client_key_delete'] == 1))
|| ($_FILES['crt_client_key']['error'] == UPLOAD_ERR_OK && $_FILES['crt_client']['error'] != UPLOAD_ERR_OK && (!$crt_client_exists || $_POST['crt_client_delete'] == 1))) {
throw new Exception(_('A Client Certificate is needed when you suggest a Key, or vice versa'));
}
if(empty($_POST['login_user']) xor empty($_POST['login_passphrase'])) {
if(empty($config['login_user']) xor empty($config['login_passphrase'])) {
throw new Exception(_('A Password is needed when you suggest a Username, or vice versa'));
}
if($_FILES['crt_server_ca']['error'] != UPLOAD_ERR_OK && !$crt_server_ca_exists) {
if((!$autoconf && (($_FILES['crt_client']['error'] == UPLOAD_ERR_OK && $_FILES['crt_client_key']['error'] != UPLOAD_ERR_OK && (!$crt_client_key_exists || $_POST['crt_client_key_delete'] == 1))
|| ($_FILES['crt_client_key']['error'] == UPLOAD_ERR_OK && $_FILES['crt_client']['error'] != UPLOAD_ERR_OK && (!$crt_client_exists || $_POST['crt_client_delete'] == 1))))
|| ($autoconf && (empty($config['crt_client']) xor empty($config['crt_client_key'])))) {
throw new Exception(_('A Client Certificate is needed when you suggest a Key, or vice versa'));
}
if((!$autoconf && $_FILES['crt_server_ca']['error'] != UPLOAD_ERR_OK && !$crt_server_ca_exists) || ($autoconf && empty($config['crt_server_ca']))) {
throw new Exception(_('You need a Server CA.'));
}
if(($_FILES['crt_client_key']['error'] != UPLOAD_ERR_OK && (!$crt_client_key_exists || $_POST['crt_client_key_delete'] == 1)) && empty($_POST['login_user'])) {
if(((!$autoconf && $_FILES['crt_client_key']['error'] != UPLOAD_ERR_OK && (!$crt_client_key_exists || $_POST['crt_client_key_delete'] == 1)) || ($autoconf && empty($config['crt_client_key']))) && empty($config['login_user'])) {
throw new Exception(_('You need either a Client Certificate, either a Username, or both'));
}
@@ -158,42 +194,87 @@ dispatch_put('/settings', function() {
ynh_setting_set('service_enabled', $service_enabled);
if($service_enabled == 1) {
ynh_setting_set('server_name', $_POST['server_name']);
ynh_setting_set('server_port', $_POST['server_port']);
ynh_setting_set('server_proto', $_POST['server_proto']);
ynh_setting_set('dns0', $_POST['dns0']);
ynh_setting_set('dns1', $_POST['dns1']);
ynh_setting_set('login_user', $_POST['login_user']);
ynh_setting_set('login_passphrase', $_POST['login_passphrase']);
ynh_setting_set('server_name', $config['server_name']);
ynh_setting_set('server_port', $config['server_port']);
ynh_setting_set('server_proto', $config['server_proto']);
ynh_setting_set('dns0', $config['dns0']);
ynh_setting_set('dns1', $config['dns1']);
ynh_setting_set('login_user', $config['login_user']);
ynh_setting_set('login_passphrase', $config['login_passphrase']);
ynh_setting_set('ip6_net', $ip6_net);
ynh_setting_set('ip6_addr', $ip6_addr);
file_put_contents('/etc/openvpn/client.conf.tpl', $_POST['raw_openvpn']);
if($_FILES['crt_client']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_client']['tmp_name'], '/etc/openvpn/keys/user.crt');
} elseif($_POST['crt_client_delete'] == 1) {
unlink('/etc/openvpn/keys/user.crt');
}
if($_FILES['crt_client_key']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_client_key']['tmp_name'], '/etc/openvpn/keys/user.key');
} elseif($_POST['crt_client_key_delete'] == 1) {
unlink('/etc/openvpn/keys/user.key');
}
if($autoconf) {
if(!empty($config['openvpn_add'])) {
copy('/etc/openvpn/client.conf.tpl.restore', '/etc/openvpn/client.conf.tpl');
if($_FILES['crt_client_ta']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_client_ta']['tmp_name'], '/etc/openvpn/keys/user_ta.key');
} elseif($_POST['crt_client_ta_delete'] == 1) {
unlink('/etc/openvpn/keys/user_ta.key');
$raw_openvpn = file_get_contents('/etc/openvpn/client.conf.tpl');
$raw_openvpn .= "\n# Custom\n".$config['openvpn_add'];
file_put_contents('/etc/openvpn/client.conf.tpl', $raw_openvpn);
}
if(empty($config['crt_client'])) {
if(file_exists('/etc/openvpn/keys/user.crt')) {
unlink('/etc/openvpn/keys/user.crt');
}
} else {
file_put_contents('/etc/openvpn/keys/user.crt', $config['crt_client']);
}
if(empty($config['crt_client_key'])) {
if(file_exists('/etc/openvpn/keys/user.key')) {
unlink('/etc/openvpn/keys/user.key');
}
} else {
file_put_contents('/etc/openvpn/keys/user.key', $config['crt_client_key']);
}
if(empty($config['crt_client_ta'])) {
if(file_exists('/etc/openvpn/keys/user_ta.key')) {
unlink('/etc/openvpn/keys/user_ta.key');
}
} else {
file_put_contents('/etc/openvpn/keys/user_ta.key', $config['crt_client_ta']);
}
if(empty($config['crt_server_ca'])) {
if(file_exists('/etc/openvpn/keys/ca-server.crt')) {
unlink('/etc/openvpn/keys/ca-server.crt');
}
} else {
file_put_contents('/etc/openvpn/keys/ca-server.crt', $config['crt_server_ca']);
}
} else {
file_put_contents('/etc/openvpn/client.conf.tpl', $_POST['raw_openvpn']);
if($_FILES['crt_client']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_client']['tmp_name'], '/etc/openvpn/keys/user.crt');
} elseif($_POST['crt_client_delete'] == 1) {
unlink('/etc/openvpn/keys/user.crt');
}
if($_FILES['crt_client_key']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_client_key']['tmp_name'], '/etc/openvpn/keys/user.key');
} elseif($_POST['crt_client_key_delete'] == 1) {
unlink('/etc/openvpn/keys/user.key');
}
if($_FILES['crt_client_ta']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_client_ta']['tmp_name'], '/etc/openvpn/keys/user_ta.key');
} elseif($_POST['crt_client_ta_delete'] == 1) {
unlink('/etc/openvpn/keys/user_ta.key');
}
if($_FILES['crt_server_ca']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_server_ca']['tmp_name'], '/etc/openvpn/keys/ca-server.crt');
}
}
if($_FILES['crt_server_ca']['error'] == UPLOAD_ERR_OK) {
move_uploaded_file($_FILES['crt_server_ca']['tmp_name'], '/etc/openvpn/keys/ca-server.crt');
}
if(!empty($_POST['login_user'])) {
file_put_contents('/etc/openvpn/keys/credentials', "${_POST['login_user']}\n${_POST['login_passphrase']}");
if(!empty($config['login_user'])) {
file_put_contents('/etc/openvpn/keys/credentials', "${config['login_user']}\n${config['login_passphrase']}");
} else {
file_put_contents('/etc/openvpn/keys/credentials', '');
}