|
|
|
|
@ -28,27 +28,32 @@ namespace Bit.Setup
@@ -28,27 +28,32 @@ namespace Bit.Setup
|
|
|
|
|
|
|
|
|
|
if (!_context.Config.Ssl) |
|
|
|
|
{ |
|
|
|
|
_context.Config.Ssl = Helpers.ReadQuestion("Do you have a SSL certificate to use?"); |
|
|
|
|
if (_context.Config.Ssl) |
|
|
|
|
{ |
|
|
|
|
Directory.CreateDirectory($"/bitwarden/ssl/{_context.Install.Domain}/"); |
|
|
|
|
var message = "Make sure 'certificate.crt' and 'private.key' are provided in the \n" + |
|
|
|
|
"appropriate directory before running 'start' (see docs for info)."; |
|
|
|
|
Helpers.ShowBanner(_context, "NOTE", message); |
|
|
|
|
} |
|
|
|
|
else if (Helpers.ReadQuestion("Do you want to generate a self-signed SSL certificate?")) |
|
|
|
|
var skipSSL = _context.Parameters.ContainsKey("skip-ssl") && (_context.Parameters["skip-ssl"] == "true" || _context.Parameters["skip-ssl"] == "1"); |
|
|
|
|
|
|
|
|
|
if (!skipSSL) |
|
|
|
|
{ |
|
|
|
|
Directory.CreateDirectory($"/bitwarden/ssl/self/{_context.Install.Domain}/"); |
|
|
|
|
Helpers.WriteLine(_context, "Generating self signed SSL certificate."); |
|
|
|
|
_context.Config.Ssl = true; |
|
|
|
|
_context.Install.Trusted = false; |
|
|
|
|
_context.Install.SelfSignedCert = true; |
|
|
|
|
Helpers.Exec("openssl req -x509 -newkey rsa:4096 -sha256 -nodes -days 36500 " + |
|
|
|
|
$"-keyout /bitwarden/ssl/self/{_context.Install.Domain}/private.key " + |
|
|
|
|
$"-out /bitwarden/ssl/self/{_context.Install.Domain}/certificate.crt " + |
|
|
|
|
$"-reqexts SAN -extensions SAN " + |
|
|
|
|
$"-config <(cat /usr/lib/ssl/openssl.cnf <(printf '[SAN]\nsubjectAltName=DNS:{_context.Install.Domain}\nbasicConstraints=CA:true')) " + |
|
|
|
|
$"-subj \"/C=US/ST=California/L=Santa Barbara/O=Bitwarden Inc./OU=Bitwarden/CN={_context.Install.Domain}\""); |
|
|
|
|
_context.Config.Ssl = Helpers.ReadQuestion("Do you have a SSL certificate to use?"); |
|
|
|
|
if (_context.Config.Ssl) |
|
|
|
|
{ |
|
|
|
|
Directory.CreateDirectory($"/bitwarden/ssl/{_context.Install.Domain}/"); |
|
|
|
|
var message = "Make sure 'certificate.crt' and 'private.key' are provided in the \n" + |
|
|
|
|
"appropriate directory before running 'start' (see docs for info)."; |
|
|
|
|
Helpers.ShowBanner(_context, "NOTE", message); |
|
|
|
|
} |
|
|
|
|
else if (Helpers.ReadQuestion("Do you want to generate a self-signed SSL certificate?")) |
|
|
|
|
{ |
|
|
|
|
Directory.CreateDirectory($"/bitwarden/ssl/self/{_context.Install.Domain}/"); |
|
|
|
|
Helpers.WriteLine(_context, "Generating self signed SSL certificate."); |
|
|
|
|
_context.Config.Ssl = true; |
|
|
|
|
_context.Install.Trusted = false; |
|
|
|
|
_context.Install.SelfSignedCert = true; |
|
|
|
|
Helpers.Exec("openssl req -x509 -newkey rsa:4096 -sha256 -nodes -days 36500 " + |
|
|
|
|
$"-keyout /bitwarden/ssl/self/{_context.Install.Domain}/private.key " + |
|
|
|
|
$"-out /bitwarden/ssl/self/{_context.Install.Domain}/certificate.crt " + |
|
|
|
|
$"-reqexts SAN -extensions SAN " + |
|
|
|
|
$"-config <(cat /usr/lib/ssl/openssl.cnf <(printf '[SAN]\nsubjectAltName=DNS:{_context.Install.Domain}\nbasicConstraints=CA:true')) " + |
|
|
|
|
$"-subj \"/C=US/ST=California/L=Santa Barbara/O=Bitwarden Inc./OU=Bitwarden/CN={_context.Install.Domain}\""); |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|