2020-12-03 18:19:28 +08:00
|
|
|
package nodes
|
|
|
|
|
|
|
|
|
|
import (
|
2024-07-27 15:42:50 +08:00
|
|
|
"path/filepath"
|
|
|
|
|
|
2020-12-03 18:19:28 +08:00
|
|
|
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
|
2020-12-17 17:36:10 +08:00
|
|
|
"github.com/TeaOSLab/EdgeNode/internal/remotelogs"
|
2020-12-03 18:19:28 +08:00
|
|
|
"github.com/TeaOSLab/EdgeNode/internal/rpc"
|
|
|
|
|
)
|
|
|
|
|
|
2022-06-02 15:34:14 +08:00
|
|
|
func (this *HTTPRequest) doACME() (shouldStop bool) {
|
2020-12-03 18:19:28 +08:00
|
|
|
// TODO 对请求进行校验,防止恶意攻击
|
|
|
|
|
|
2022-06-02 15:34:14 +08:00
|
|
|
var token = filepath.Base(this.RawReq.URL.Path)
|
2021-08-25 17:32:53 +08:00
|
|
|
if token == "acme-challenge" || len(token) <= 32 {
|
2022-06-02 15:34:14 +08:00
|
|
|
return false
|
2021-08-25 17:32:53 +08:00
|
|
|
}
|
2020-12-03 18:19:28 +08:00
|
|
|
|
|
|
|
|
rpcClient, err := rpc.SharedRPC()
|
|
|
|
|
if err != nil {
|
2020-12-17 17:36:10 +08:00
|
|
|
remotelogs.Error("RPC", "[ACME]rpc failed: "+err.Error())
|
2022-06-02 15:34:14 +08:00
|
|
|
return false
|
2020-12-03 18:19:28 +08:00
|
|
|
}
|
|
|
|
|
|
2022-08-24 20:04:46 +08:00
|
|
|
keyResp, err := rpcClient.ACMEAuthenticationRPC.FindACMEAuthenticationKeyWithToken(rpcClient.Context(), &pb.FindACMEAuthenticationKeyWithTokenRequest{Token: token})
|
2020-12-03 18:19:28 +08:00
|
|
|
if err != nil {
|
2020-12-17 17:36:10 +08:00
|
|
|
remotelogs.Error("RPC", "[ACME]read key for token failed: "+err.Error())
|
2022-06-02 15:34:14 +08:00
|
|
|
return false
|
2020-12-03 18:19:28 +08:00
|
|
|
}
|
|
|
|
|
if len(keyResp.Key) == 0 {
|
2022-06-02 15:34:14 +08:00
|
|
|
return false
|
2020-12-03 18:19:28 +08:00
|
|
|
}
|
2022-06-02 15:34:14 +08:00
|
|
|
|
|
|
|
|
this.tags = append(this.tags, "ACME")
|
|
|
|
|
|
|
|
|
|
this.writer.Header().Set("Content-Type", "text/plain")
|
|
|
|
|
_, _ = this.writer.WriteString(keyResp.Key)
|
|
|
|
|
|
|
|
|
|
return true
|
2020-12-03 18:19:28 +08:00
|
|
|
}
|