Method Import

app/application/http/controller/site-cert.go:247–328

(http *gin.Context)

}

func (self SiteCert) Import(http *gin.Context) {
	type ParamsValidate struct {
		SslKeyContent string `json:"sslKeyContent" binding:"required"`
		SslCrtContent string `json:"sslCrtContent" binding:"required"`
	}
	params := ParamsValidate{}
	if !self.Validate(http, &params) {
		return
	}
	var errInvalidCertFile = errors.New("invalid cert file")

	// 遍历 PEM 数据块
	var block *pem.Block
	block, _ = pem.Decode([]byte(params.SslCrtContent))
	if block == nil || block.Type != "CERTIFICATE" {
		self.JsonResponseWithError(http, errInvalidCertFile, 500)
		return
	}
	cert, err := x509.ParseCertificate(block.Bytes)
	if err != nil {
		self.JsonResponseWithError(http, err, 500)
		return
	}
	keyAlgorithm := "unknown"
	switch cert.PublicKey.(type) {
	case *rsa.PublicKey:
		keyAlgorithm = "rsa-2048"
		break
	case *ecdsa.PublicKey:
		keyAlgorithm = "ec-256"
		break
	}
	if len(cert.DNSNames) <= 0 {
		self.JsonResponseWithError(http, function.ErrorMessage(define.ErrorMessageSiteDomainCertHasNotDNSName), 500)
		return
	}
	mainDomain := cert.DNSNames[0]
	sanDomain := "no"
	if len(cert.DNSNames) > 1 {
		sanDomain = strings.Join(function.PluckArrayWalk(cert.DNSNames, func(i string) (string, bool) {
			if i == mainDomain {
				return "", false
			}
			return i, true
		}), ",")
	}
	// 创建单个证书的配置 map
	certConfig := []string{
		fmt.Sprintf("Le_Domain='%s'", mainDomain),
		fmt.Sprintf("Le_Alt='%s'", sanDomain),
		fmt.Sprintf("Le_API='import'"),
		fmt.Sprintf("Le_Keylength='%s'", keyAlgorithm),
		fmt.Sprintf("Le_CertCreateTime='%d'", cert.NotBefore.Unix()),
		fmt.Sprintf("Le_CertCreateTimeStr='%s'", cert.NotBefore.Format(time.RFC3339)),
		fmt.Sprintf("Le_NextRenewTime='%d'", cert.NotAfter.Unix()),
		fmt.Sprintf("Le_NextRenewTimeStr='%s'", cert.NotAfter.Format(time.RFC3339)),
		fmt.Sprintf("Le_SerialNumber='%s'", cert.SerialNumber.String()),
	}