添加SSL证书管理功能，包括安装、续期、列出、撤销和申请证书的命令，同时更新依赖项和修复磁盘使用情况计算逻辑。
This commit is contained in:
zeaslity
258
agent-wdd/cmd/CertManager.go
Normal file
258
agent-wdd/cmd/CertManager.go
Normal file
@@ -0,0 +1,258 @@
|
||||
package cmd
|
||||
|
||||
import (
|
||||
"agent-wdd/cert_manager_wdd"
|
||||
"agent-wdd/log"
|
||||
"fmt"
|
||||
"os"
|
||||
"strings"
|
||||
"text/tabwriter"
|
||||
|
||||
"github.com/spf13/cobra"
|
||||
)
|
||||
|
||||
var (
|
||||
// 证书管理命令选项
|
||||
cfAPIToken string
|
||||
certDir string
|
||||
emailAddr string
|
||||
caServer string
|
||||
daysRenewal int
|
||||
)
|
||||
|
||||
// 初始化证书管理配置
|
||||
func initCertManagerConfig() *cert_manager_wdd.CertManager {
|
||||
// 如果未指定API令牌，提示用户
|
||||
if cfAPIToken == "" {
|
||||
log.Error("未指定Cloudflare API令牌，请使用--token参数设置")
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
// 如果未指定邮箱地址，使用默认值
|
||||
if emailAddr == "" {
|
||||
emailAddr = "cert@example.com"
|
||||
log.Warning("未指定邮箱地址，使用默认值: %s", emailAddr)
|
||||
}
|
||||
|
||||
// 创建证书管理器
|
||||
certManager := cert_manager_wdd.NewCertManager(certDir, cfAPIToken, emailAddr)
|
||||
|
||||
// 设置证书更新阈值天数
|
||||
if daysRenewal > 0 {
|
||||
certManager.DaysBeforeRenewal = daysRenewal
|
||||
}
|
||||
|
||||
// 设置CA服务器
|
||||
if caServer != "" {
|
||||
switch strings.ToLower(caServer) {
|
||||
case "letsencrypt":
|
||||
certManager.SetCAServer(cert_manager_wdd.LetsEncryptCA)
|
||||
case "zerossl":
|
||||
certManager.SetCAServer(cert_manager_wdd.ZeroSSLCA)
|
||||
default:
|
||||
log.Warning("未知的CA服务器: %s，使用默认值", caServer)
|
||||
}
|
||||
}
|
||||
|
||||
return certManager
|
||||
}
|
||||
|
||||
// 添加证书管理命令
|
||||
func addCertManagerSubcommands(cmd *cobra.Command) {
|
||||
// 全局标志
|
||||
cmd.PersistentFlags().StringVar(&cfAPIToken, "token", "", "Cloudflare API令牌")
|
||||
cmd.PersistentFlags().StringVar(&certDir, "cert-dir", "", "证书保存目录")
|
||||
cmd.PersistentFlags().StringVar(&emailAddr, "email", "", "申请证书使用的邮箱")
|
||||
cmd.PersistentFlags().StringVar(&caServer, "ca", "letsencrypt", "CA服务器 (letsencrypt, zerossl)")
|
||||
cmd.PersistentFlags().IntVar(&daysRenewal, "days", 30, "证书更新阈值天数")
|
||||
|
||||
// 申请证书命令
|
||||
applyCmd := &cobra.Command{
|
||||
Use: "apply [域名]",
|
||||
Short: "申请SSL证书",
|
||||
Args: cobra.ExactArgs(1),
|
||||
Run: func(cmd *cobra.Command, args []string) {
|
||||
domain := args[0]
|
||||
log.Info("开始为域名 %s 申请证书", domain)
|
||||
|
||||
certManager := initCertManagerConfig()
|
||||
certInfo, err := certManager.ApplyCertificate(domain)
|
||||
if err != nil {
|
||||
log.Error("证书申请失败: %v", err)
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
printCertificateInfo(certInfo)
|
||||
log.Info("证书申请成功")
|
||||
},
|
||||
}
|
||||
|
||||
// 列出证书命令
|
||||
listCmd := &cobra.Command{
|
||||
Use: "list",
|
||||
Short: "列出所有证书",
|
||||
Run: func(cmd *cobra.Command, args []string) {
|
||||
log.Info("列出所有证书")
|
||||
|
||||
certManager := initCertManagerConfig()
|
||||
certs, err := certManager.GetAllCerts()
|
||||
if err != nil {
|
||||
log.Error("获取证书列表失败: %v", err)
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
if len(certs) == 0 {
|
||||
log.Info("未找到任何证书")
|
||||
return
|
||||
}
|
||||
|
||||
printCertificatesList(certs)
|
||||
},
|
||||
}
|
||||
|
||||
// 查看证书命令
|
||||
showCmd := &cobra.Command{
|
||||
Use: "show [域名]",
|
||||
Short: "查看指定证书的详细信息",
|
||||
Args: cobra.ExactArgs(1),
|
||||
Run: func(cmd *cobra.Command, args []string) {
|
||||
domain := args[0]
|
||||
log.Info("查看域名 %s 的证书信息", domain)
|
||||
|
||||
certManager := initCertManagerConfig()
|
||||
certs, err := certManager.GetAllCerts()
|
||||
if err != nil {
|
||||
log.Error("获取证书列表失败: %v", err)
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
var targetCert *cert_manager_wdd.CertInfo
|
||||
for _, cert := range certs {
|
||||
if cert.Domain == domain {
|
||||
targetCert = &cert
|
||||
break
|
||||
}
|
||||
}
|
||||
|
||||
if targetCert == nil {
|
||||
log.Error("未找到域名 %s 的证书", domain)
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
printCertificateDetailInfo(targetCert)
|
||||
},
|
||||
}
|
||||
|
||||
// 更新证书命令
|
||||
renewCmd := &cobra.Command{
|
||||
Use: "renew [域名]",
|
||||
Short: "更新指定证书",
|
||||
Args: cobra.ExactArgs(1),
|
||||
Run: func(cmd *cobra.Command, args []string) {
|
||||
domain := args[0]
|
||||
log.Info("更新域名 %s 的证书", domain)
|
||||
|
||||
certManager := initCertManagerConfig()
|
||||
certInfo, err := certManager.RenewCertificate(domain)
|
||||
if err != nil {
|
||||
log.Error("证书更新失败: %v", err)
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
printCertificateInfo(certInfo)
|
||||
log.Info("证书更新成功")
|
||||
},
|
||||
}
|
||||
|
||||
// 更新所有需要更新的证书
|
||||
renewAllCmd := &cobra.Command{
|
||||
Use: "renew-all",
|
||||
Short: "更新所有需要更新的证书",
|
||||
Run: func(cmd *cobra.Command, args []string) {
|
||||
log.Info("更新所有需要更新的证书")
|
||||
|
||||
certManager := initCertManagerConfig()
|
||||
certs, err := certManager.GetAllCerts()
|
||||
if err != nil {
|
||||
log.Error("获取证书列表失败: %v", err)
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
needRenewalCount := 0
|
||||
for _, cert := range certs {
|
||||
if cert.NeedsRenewal {
|
||||
needRenewalCount++
|
||||
log.Info("证书 %s 需要更新 (剩余 %d 天)", cert.Domain, cert.DaysRemaining)
|
||||
certInfo, err := certManager.RenewCertificate(cert.Domain)
|
||||
if err != nil {
|
||||
log.Error("更新证书 %s 失败: %v", cert.Domain, err)
|
||||
continue
|
||||
}
|
||||
log.Info("证书 %s 更新成功", certInfo.Domain)
|
||||
}
|
||||
}
|
||||
|
||||
if needRenewalCount == 0 {
|
||||
log.Info("没有需要更新的证书")
|
||||
} else {
|
||||
log.Info("共更新 %d 个证书", needRenewalCount)
|
||||
}
|
||||
},
|
||||
}
|
||||
|
||||
// 将所有子命令添加到主命令
|
||||
cmd.AddCommand(applyCmd, listCmd, showCmd, renewCmd, renewAllCmd)
|
||||
}
|
||||
|
||||
// 打印证书信息
|
||||
func printCertificateInfo(certInfo *cert_manager_wdd.CertInfo) {
|
||||
fmt.Printf("域名: %s\n", certInfo.Domain)
|
||||
fmt.Printf("注册时间: %s\n", certInfo.RegisteredAt.Format("2006-01-02 15:04:05"))
|
||||
fmt.Printf("到期时间: %s\n", certInfo.ExpiresAt.Format("2006-01-02 15:04:05"))
|
||||
fmt.Printf("剩余天数: %d\n", certInfo.DaysRemaining)
|
||||
fmt.Printf("证书路径: %s\n", certInfo.CertPath)
|
||||
fmt.Printf("密钥路径: %s\n", certInfo.KeyPath)
|
||||
fmt.Printf("CA服务器: %s\n", certInfo.CAName)
|
||||
fmt.Printf("是否需要更新: %v\n", certInfo.NeedsRenewal)
|
||||
fmt.Printf("是否为通配符证书: %v\n", certInfo.WildcardCert)
|
||||
}
|
||||
|
||||
// 打印证书详细信息
|
||||
func printCertificateDetailInfo(certInfo *cert_manager_wdd.CertInfo) {
|
||||
fmt.Printf("=============== 证书详情 ===============\n")
|
||||
printCertificateInfo(certInfo)
|
||||
fmt.Printf("=======================================\n")
|
||||
|
||||
// 打印证书内容（可选）
|
||||
fmt.Printf("\n证书内容:\n")
|
||||
certContent, err := os.ReadFile(certInfo.CertPath)
|
||||
if err == nil {
|
||||
fmt.Println(string(certContent))
|
||||
} else {
|
||||
fmt.Printf("无法读取证书内容: %v\n", err)
|
||||
}
|
||||
}
|
||||
|
||||
// 打印证书列表
|
||||
func printCertificatesList(certs []cert_manager_wdd.CertInfo) {
|
||||
w := tabwriter.NewWriter(os.Stdout, 0, 0, 3, ' ', 0)
|
||||
fmt.Fprintln(w, "域名\t到期时间\t剩余天数\t需要更新\tCA服务器")
|
||||
fmt.Fprintln(w, "------\t--------\t--------\t--------\t--------")
|
||||
|
||||
for _, cert := range certs {
|
||||
needsRenewal := "否"
|
||||
if cert.NeedsRenewal {
|
||||
needsRenewal = "是"
|
||||
}
|
||||
|
||||
expiresAt := cert.ExpiresAt.Format("2006-01-02")
|
||||
fmt.Fprintf(w, "%s\t%s\t%d\t%s\t%s\n",
|
||||
cert.Domain,
|
||||
expiresAt,
|
||||
cert.DaysRemaining,
|
||||
needsRenewal,
|
||||
cert.CAName)
|
||||
}
|
||||
|
||||
w.Flush()
|
||||
}
|
||||
Reference in New Issue
Block a user