usr/local/cpanel/scripts/gencrt000075500000014412147207254710012623 0ustar00#!/usr/local/cpanel/3rdparty/bin/perl # cpanel - scripts/gencrt Copyright 2022 cPanel, L.L.C. # All rights reserved. # copyright@cpanel.net http://cpanel.net # This code is subject to the cPanel license. Unauthorized copying is prohibited use strict; ## no critic qw(RequireUseWarnings) # TODO: Make this use warnings use Sys::Hostname (); use Cpanel::Config::Contact (); use Cpanel::OpenSSL (); use Cpanel::SSLStorage::User (); use Cpanel::TempFile (); use Cpanel::SSL::Create (); use Cpanel::Validate::EmailRFC (); alarm(1200); my $hostname = Sys::Hostname::hostname(); my $now = time(); my $gendate = localtime($now); my $xemail = $ARGV[0]; my $host = $ARGV[1]; my $country = $ARGV[2]; my $state = $ARGV[3]; my $city = $ARGV[4]; my $co = $ARGV[5]; my $cod = $ARGV[6]; my $email = $ARGV[7]; my $pass = $ARGV[8]; if ( !-t STDIN && ( !$xemail || !$host || !$country || !$state || !$city || !$co || !$cod || !$email || !$pass ) ) { die "Can't get vars ... did you forget one of them ?"; } my $contactemail = Cpanel::Config::Contact::get_public_contact(); my $send_key_yn; #GenCRT script by cPanel, L.L.C. if ( -t STDIN ) { print "[==========Generating an SSL Key, Certificate, and CSR=================]\n"; print "Before we begin please tell me where to email the CSR to: "; $xemail = ; $xemail =~ s/\n//g; die "Invalid Email address: $email, please re-enter" unless Cpanel::Validate::EmailRFC::is_valid($xemail); print "Enter the domain to make a certificate for: "; $host = ; $host =~ s/\n//g; print "=*=*=Certificate Information=*=*=\n"; print "Enter the Country Code (2 letters, e.g., US): "; $country = ; $country =~ s/\n//g; print "Enter the State: "; $state = ; $state =~ s/\n//g; print "Enter the City: "; $city = ; $city =~ s/\n//g; print "Enter the Company Name: "; $co = ; $co =~ s/\n//g; print "Enter the Company Division: "; $cod = ; $cod =~ s/\n//g; print "Enter the Contact Email Address: "; $email = ; $email =~ s/\n//g; die "Invalid Email address: $email, please re-enter" unless Cpanel::Validate::EmailRFC::is_valid($email); $pass = ' '; while ( length $pass < 4 ) { print "Enter a challenge password for the CSR (at least 4 characters): "; $pass = ; $pass =~ s/\n//g; } print "\nWould you like the key emailed to you as well as the CSR?\nThis is only useful to install SSL onto a server other than this one;\nit is otherwise a security risk.\nIf you are unsure, indicate “no” by pressing ENTER.\n? "; $send_key_yn = ; $send_key_yn = ( $send_key_yn =~ m{y}i ) ? 1 : 0; } #------------------------------------------- $host = lc($host); my $openssl = Cpanel::OpenSSL->new(); my $genkey = $openssl->generate_key(); if ( !$genkey || !$genkey->{'status'} || !$genkey->{'stdout'} ) { die "Key generation failed: $genkey->{'stderr'}\n"; } my $key = $genkey->{'stdout'}; if ( !-t STDIN ) { print "
KEY (RSA Key)
";
    print qq{};
    print "
"; } if ($send_key_yn) { open( SENDMAIL, "|/usr/sbin/sendmail -t" ); print SENDMAIL "To: $contactemail\n"; print SENDMAIL "To: $xemail\n"; print SENDMAIL "From: ssl\@$hostname\n"; print SENDMAIL "Subject: SSL RSA PRIVATE KEY for $host ($gendate)\n\n"; print SENDMAIL $key; close(SENDMAIL); } #--------------------------- my $csr; eval { $csr = Cpanel::SSL::Create::csr( key => $key, subject_names => [ [ dNSName => $host ], ], subject => [ [ countryName => $country ], [ emailAddress => $email ], [ localityName => $city ], [ organizationName => $co, ], [ organizationalUnitName => $cod ], [ stateOrProvinceName => $state ], ], ); } or die "Failed to generate the CSR: $@"; if ( !-t STDIN ) { print "
CSR (Certificate Signing Request)
";
    print qq{};
    print "
"; } open( SENDMAIL, "|/usr/sbin/sendmail -t" ); print SENDMAIL "To: $contactemail\n"; print SENDMAIL "To: $xemail\n"; print SENDMAIL "From: ssl\@$hostname\n"; print SENDMAIL "Subject: SSL CERTIFICATE SIGNING REQUEST for $host ($gendate)\n\n"; print SENDMAIL<new(); my ( $keyfile, $key_fh ) = $tf->file(); print {$key_fh} $key; close $key_fh; my $gen = $openssl->generate_cert( { 'keyfile' => $keyfile, 'country' => $country, 'state' => $state, 'city' => $city, 'company' => $co, 'division' => $cod, 'hostname' => $host, 'email' => $email, } ); die "$gen->{'stderr'}\n" if !$gen->{'status'}; $cert = $gen->{'stdout'}; } if ( !-t STDIN ) { print "
CRT (Self Signed Certificate)
";
    print qq{};
    print "
"; } my ( $ok, $sslstorage ) = Cpanel::SSLStorage::User->new(); die "$sslstorage\n" if !$ok; my $err; ( $ok, $err ) = $sslstorage->add_key( 'text' => $key ); die "$err\n" if !$ok; ( $ok, $err ) = $sslstorage->add_certificate( 'text' => $cert ); die "$err\n" if !$ok; ( $ok, $err ) = $sslstorage->add_csr( 'text' => $csr ); die "$err\n" if !$ok;