ACME申请证书时如果找不到Token,则直接跳过执行后面请求

This commit is contained in:
刘祥超
2022-06-02 15:34:14 +08:00
parent e6c7bbec06
commit 20d7e0b1bf
2 changed files with 17 additions and 14 deletions

View File

@@ -170,9 +170,10 @@ func (this *HTTPRequest) Do() {
// ACME // ACME
// TODO 需要配置是否启用ACME检测 // TODO 需要配置是否启用ACME检测
if strings.HasPrefix(this.rawURI, "/.well-known/acme-challenge/") { if strings.HasPrefix(this.rawURI, "/.well-known/acme-challenge/") {
this.doACME() if this.doACME() {
this.doEnd() this.doEnd()
return return
}
} }
} }

View File

@@ -4,34 +4,36 @@ import (
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb" "github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
"github.com/TeaOSLab/EdgeNode/internal/remotelogs" "github.com/TeaOSLab/EdgeNode/internal/remotelogs"
"github.com/TeaOSLab/EdgeNode/internal/rpc" "github.com/TeaOSLab/EdgeNode/internal/rpc"
"net/http"
"path/filepath" "path/filepath"
) )
func (this *HTTPRequest) doACME() { func (this *HTTPRequest) doACME() (shouldStop bool) {
// TODO 对请求进行校验,防止恶意攻击 // TODO 对请求进行校验,防止恶意攻击
token := filepath.Base(this.RawReq.URL.Path) var token = filepath.Base(this.RawReq.URL.Path)
if token == "acme-challenge" || len(token) <= 32 { if token == "acme-challenge" || len(token) <= 32 {
this.writer.WriteHeader(http.StatusNotFound) return false
return
} }
rpcClient, err := rpc.SharedRPC() rpcClient, err := rpc.SharedRPC()
if err != nil { if err != nil {
remotelogs.Error("RPC", "[ACME]rpc failed: "+err.Error()) remotelogs.Error("RPC", "[ACME]rpc failed: "+err.Error())
return return false
} }
keyResp, err := rpcClient.ACMEAuthenticationRPC().FindACMEAuthenticationKeyWithToken(rpcClient.Context(), &pb.FindACMEAuthenticationKeyWithTokenRequest{Token: token}) keyResp, err := rpcClient.ACMEAuthenticationRPC().FindACMEAuthenticationKeyWithToken(rpcClient.Context(), &pb.FindACMEAuthenticationKeyWithTokenRequest{Token: token})
if err != nil { if err != nil {
remotelogs.Error("RPC", "[ACME]read key for token failed: "+err.Error()) remotelogs.Error("RPC", "[ACME]read key for token failed: "+err.Error())
return return false
} }
if len(keyResp.Key) == 0 { if len(keyResp.Key) == 0 {
this.writer.WriteHeader(http.StatusNotFound) return false
} else {
this.writer.Header().Set("Content-Type", "text/plain")
_, _ = this.writer.WriteString(keyResp.Key)
} }
this.tags = append(this.tags, "ACME")
this.writer.Header().Set("Content-Type", "text/plain")
_, _ = this.writer.WriteString(keyResp.Key)
return true
} }