⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.220
Server IP:
104.21.64.1
Server:
Linux vmi2315822.contaboserver.net 5.15.0-134-generic #145-Ubuntu SMP Wed Feb 12 20:08:39 UTC 2025 x86_64
Server Software:
LiteSpeed
PHP Version:
8.3.21
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
local
/
CyberCP
/
plogical
/
__pycache__
/
View File Name :
sslv2.cpython-310.pyc
o )36hsf � @ s� d dl Z d dlZd dlmZ d dlZd dlZd dlZd dlZd dl m Z d dl m Z z d dl mZmZ W n Y G dd� d�Zd dd �ZdS ) � N)�CyberCPLogFileWriter)� ACLManager)�ProcessUtilities)� ChildDomains�Websitesc @ sx e Zd ZdZdZedd� �Zedd� �Zedd� �Zed d � �Z edd d ��Z edd� �Z edd� �Z eddd��Z dS )� sslUtilitiesz/usr/local/lswsz&/usr/local/lsws/conf/dvhost_redis.confc C s� zOt d��� }d}|D ]A}|�d�dkr |�d�dkr d}q |dkr-|�d�dkr- W dS |�| �dkrL|dkrLdd � |�d �D �}|d | krL W dS q W d S tyl } ztj�t|�d � W Y d }~dS d }~ww ) N�&/usr/local/lsws/conf/httpd_config.confr �listener����SSL� �}c S s g | ]}|r|�qS � r )�.0�_fr r �$/usr/local/CyberCP/plogical/sslv2.py� <listcomp>' s z.sslUtilities.checkIfSSLMap.<locals>.<listcomp>� z1 [IO Error with main config file [checkIfSSLMap]]) �open� readlines�find�split� BaseException�loggingr � writeToFile�str)�virtualHostName�data�sslCheck�items�msgr r r � checkIfSSLMap s* �� ��zsslUtilities.checkIfSSLMapc C �t zt d��� } | D ] }|�d�dkr W dS q W dS ty9 } ztj�t|�d � t|�W Y d }~S d }~ww )Nr z listener SSLr r z4 [IO Error with main config file [checkSSLListener]]r �r r r r r r r r �r r r r r r �checkSSLListener/ � �����z sslUtilities.checkSSLListenerc C r" )Nr zlistener SSL IPv6r r z8 [IO Error with main config file [checkSSLIPv6Listener]]r r# r$ r r r �checkSSLIPv6Listener= r& z!sslUtilities.checkSSLIPv6Listenerc C s^ zt �| �}t �d| �}d||gW S ty. } zddt|� d gW Y d }~S d }~ww )Nzwww.r r �347 � [issueSSLForDomain])�socket� gethostbynamer r )r � withoutWWW�withWWWr r r r � getDNSRecordsJ s ��zsslUtilities.getDNSRecords�example@example.orgc 1 C s� z t jj| d�}|j}W n ty( } ztj�dt|� � W Y d }~nd }~ww t � � t j k�rjt j d | }|d }�zd| d | d }t �� dkr�td d �}d }d } d } d| d } d| d } d} d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�| � |�| � |�| � |�| � |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �� dk�rstd d �}d}d } d } d| d } d| d } d} d}d}d}d}d}d}d}d| d | d }d}|�d� |�|� |�| � |�| � |�| � |�| � |�| � |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t �| �d k�r�td ��� }td d �}d }|D ]-}|�d �d k�r�|�d!�d k�r�d}|dk�r�|�|� |�|� d }�q�|�|� �q�|�� t|d"��� }d }|D ] }|�d#�d k�r�d}�q�|d k�rIt|d �}d$}d%| d } d&| d } d} d}d}d}d}d}d}d}d'}|�d� |�|� |�| � |�| � |�| � |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�|� |�d� |�� W dS t�yi } ztj�t|�d( � W Y d }~d S d }~ww tj�t j��s�t j d | }|d }t|d"��� }|D ]}|�d)�d k�r� dS �q�z�ztjj| d�} | jj } d*| j d } W n) t�y� } z t jj| d�}|j } t � d | �} d*| � d�} W Y d }~nd }~ww t|d"��� }d+} |D ]}|�d,�d k�r�|�d-�d k�r�|} n�q�t|d �}!d.}"d/}#d0| d }$d1| d }%d2| d }&d3| d | d }'d4| d5 | d6 }(|!�|#� |!�|$� |!�|%� |!�|&� |!�|'� |!�| � |!�|(� |!�|"� d7})d8}*d9| d }+d:| d },|!�|)� |!�|*� |!�|+� |!�|,� |!�| � d;}-|!�|-� |!�� W dS t�y� } ztj�t|�d< � W Y d }~d S d }~ww td=| d> �� � � d�}.td=| d? d"�� � � d�}/d@| |.|/f }0tj�dA� tj�|0� t �!|0� dS )BN)�domainz%s [installSSLForDomain:72]z /conf/vhosts/z /vhost.confz map r � r r �azlistener SSL { z address *:443 z secure 1 z1 keyFile /etc/letsencrypt/live/z /privkey.pem z1 certFile /etc/letsencrypt/live/z/fullchain.pem z certChain 1 z sslProtocol 24 z enableECDHE 1 z renegProtection 1 z sslSessionCache 1 z enableSpdy 15 z enableStapling 1 z! ocspRespMaxAge 86400 z} zlistener SSL IPv6 { z$ address [ANY]:443 r �wr r r �r�vhsslz vhssl { z0 keyFile /etc/letsencrypt/live/z0 certFile /etc/letsencrypt/live/r z [installSSLForDomain]]z*:443z DocumentRoot � � AddHandler�phpzj <IfModule LiteSpeed> CacheRoot lscache CacheLookup on </IfModule> z <VirtualHost *:443> z ServerName z ServerAlias www.z ServerAdmin z SuexecUserGroup z CustomLog /home/z/logs/z.access_log combined z SSLEngine on z SSLVerifyClient none z- SSLCertificateFile /etc/letsencrypt/live/z0 SSLCertificateKeyFile /etc/letsencrypt/live/z</VirtualHost> z [installSSLForDomain]�/etc/letsencrypt/live/�/fullchain.pem� /privkey.pemz*redis-cli hmset "ssl:%s" crt "%s" key "%s"zhello world aaa)"r �objects�get� adminEmailr r r r r r � decideServer�OLSr � Server_rootr% r � writelines�closer' r! r r �os�path�exists� redisConfr �master� externalAppr �FindDocRootOfSite�read�rstrip� executioner)1r r> �websiter �confPath�completePathToConfigFile�map�writeDataToFiler �address�secure�keyFile�certFile� certChain� sslProtocol� enableECDHE�renegProtection�sslSessionCache� enableSpdy�enableStapling�ocspRespMaxAge�finalr r r � vhsslPresense�writeSSLConfigr5 � chilDomainrI � DocumentRoot�docRoot� phpHandler�confFile� cacheRoot� VirtualHost� ServerName� ServerAlias� ServerAdmin�SeexecUserGroup�CustomLogCombined� SSLEngine�SSLVerifyClient�SSLCertificateFile�SSLCertificateKeyFile�VirtualHostEnd�cert�key�commandr r r �installSSLForDomainV s� �� l� E� � ��� �� � �� z sslUtilities.installSSLForDomainc C sV z�dd l }t�� \}}}|jd d�}|r�|| �}|jd |j }tj�d|� �� dd l }|dd�} |j ||d�} z | j j | d�} W n t y[ } z dt | �fW Y d } ~ W S d } ~ ww t| d d � d �D ](} tj�d | d � �� | d |kr�| d dkr� W dS tj�d| d � �� qdW dS W dS t y� } z dt | �fW Y d } ~ S d } ~ ww )Nr �� cache_dir�.ztop level domain in cf: �2 )�name�per_page)�email�token)�paramsc S s | d S )Nr{ r )�vr r r �<lambda>g s z7sslUtilities.FindIfDomainInCloudflare.<locals>.<lambda>)rt zzone: r{ �status�active�r Nzzone is not active in cf: )r z Zone not found in Cloudflare)r zError in finding keys.)� tldextractr � FetchCloudFlareAPIKeyFromAcme� TLDExtractr0 �suffixr r r � CloudFlare�zonesr= r r �sorted)r r� � RetStatus� SAVED_CF_Key�SAVED_CF_Email�no_cache_extract� extractDomain�topLevelDomainr� r �cfr� r �zoner r r �FindIfDomainInCloudflareP s< �� ���z%sslUtilities.FindIfDomainInCloudflarec C s� zfdd l }ddlm} ddlm} |jd d�}|| �}|jd |j }|jj |d�}|� |d|� �dt � � dd � t �d � t�d|� �d tj�d }tj�d t|�� d�� |d d t � � krdW d S W dS ty~ } z dt| �fW Y d } ~ S d } ~ ww )Nr )�DNS)�Domainsrw ry )r{ zcptest.�Ai � z PDNS Result: � r� )r zIP Does not match)r� �plogical.dnsUtilitiesr� � dns.modelsr� r� r0 r� r< r= �createDNSRecordr � GetServerIP�time�sleepr* � getaddrinfo�AF_INETr r r r r ) r r� r� r� r� r� r� r� �resultr r r r �FindIfDomainInPowerDNSv s& ��z#sslUtilities.FindIfDomainInPowerDNSNc C s� dt �� }d}d}d}d| }tj�|�r;dd l} | j�| jjt |d�� � �} | � � � � d d � d�} | dkr;dS t�| �\}} d } |rId } nt�| �\}} |rUd } nd S �z�d }d||f }t�t�|�� |d u �r}d| }tj�|�s�d| }t�t�|�� zO|d| � d| � � d | d d | d d | d d| � d� }tj�|d� t�t�|��� d�}tj�d| d | d� tj�|||d | � W �nJ tj�y| tj�d | d | d� d | d | }z`|d | d | d d | d d | d d| � d� }d || f }d || f }tj�d | d� tj�|� t�t�|��� d�}tj�d| d� d!|| f }tj�|||d | � W n( tj�yy tj�d"| d� tj�||d"| d | � d|f Y Y W S w Y n�w d| }tj�|��s�d| }t�t�|�� zctj�d | d# | d$ | d% | d& � |d | d' | d( | d' | d | d d | d d | d d| � d� }t�t�|��� d�}tj�d| d# | d$ | d) | d& � W n& tj�y tj�d | d# | d$ | d) | d& � d|f Y W S w |�d*�d+k�r+d|fW S d|fW S t �yR } ztj�t |�d, � dt |�fW Y d }~S d }~ww )-Nzroot@%sr z&/etc/letsencrypt/live/%s/fullchain.pemr4 r zutf-8�Denial)r z%This domain already have a valid SSL.r6 �dns_cf�dns_cyberpanel)r z;Domain is not active in any of the configured DNS provider.z/root/.acme.sh/acme.shz%s --register-account -m %sr9 z mkdir -p z --issue -d z -d *.z --cert-file z /cert.pemz --key-file r; z --fullchain-file r: z --dns z5 -k ec-256 --force --server letsencrypt --dnssleep 20z Successfully obtained SSL for: z and: www.zSSL Notification for %s.zFailed to obtain SSL for: z %s Trying to obtain SSL for: %szTrying to obtain SSL for: z%%s Successfully obtained SSL for: %s.z3Failed to obtain SSL, issuing self-signed SSL for: z, www.z, z and www.�,z -d www.z -d zand www.z Cert successr z. [Failed to obtain SSL. [obtainSSLForADomain]]) r* � gethostnamerD rE rF �OpenSSL�crypto�load_certificate� FILETYPE_PEMr rK � get_issuer�get_components�decoder r� r� � subprocess� check_output�shlexr r r r � SendEmail�CalledProcessError�callr r r )r r> �sslpath� aliasDomain� sender_email�CF_Check�Namecheck_Check�CyberPanel_Check�filePathr� �x509� SSLProvider�message� DNS_TO_USE�acmePathru �existingCertPath�output� finalText�CurrentMessager r r r �obtainSSLForADomain� s: ��������� �� ��������� � � ����� "�������������� �"�"�� ��z sslUtilities.obtainSSLForADomain)r/ �N)�__name__� __module__� __qualname__rA rG � staticmethodr! r% r' r. rv r� r� r� r r r r r s( z % r c C s� z%t �| |||�\}}|dkr!t �| |�dkr d|gW S d|gW S d|gW S tyA } zddt|� d gW Y d }~S d }~ww )Nr r r( r) )r r� rv r r )r0 r> r� r� � retStatusr� r r r r �issueSSLForDomain s ��r� r� )r� �requests�plogicalr r rD r� r� r* � plogical.aclr �plogical.processUtilitiesr �websiteFunctions.modelsr r r r� r r r r �<module> s&