acme.html 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892
  1. <!DOCTYPE html>
  2. <html>
  3. <head>
  4. <!-- Notes: This should be open in its original path-->
  5. <meta charset="utf-8">
  6. <link rel="stylesheet" href="../script/semantic/semantic.min.css">
  7. <script src="../script/jquery-3.6.0.min.js"></script>
  8. <script src="../script/semantic/semantic.min.js"></script>
  9. <style>
  10. .disabled.table{
  11. opacity: 0.5;
  12. pointer-events: none;
  13. }
  14. .expiredDomain{
  15. color: rgb(238, 31, 31);
  16. }
  17. .validDomain{
  18. color: rgb(49, 192, 113);
  19. }
  20. </style>
  21. </head>
  22. <body>
  23. <br>
  24. <div class="ui container">
  25. <div class="ui header">
  26. <div class="content">
  27. Certificates Auto Renew Settings
  28. <div class="sub header">Fetch and renew your certificates with Automated Certificate Management Environment (ACME) protocol</div>
  29. </div>
  30. </div>
  31. <div class="ui basic segment">
  32. <p style="float: right; color: #21ba45; display:none;" id="enableToggleSucc"><i class="green checkmark icon"></i> Setting Updated</p>
  33. <div class="ui toggle checkbox">
  34. <input type="checkbox" id="enableCertAutoRenew">
  35. <label>Enable Certificate Auto Renew</label>
  36. </div>
  37. <br>
  38. <h3>ACME Email</h3>
  39. <p>Email is required by many CAs for renewing via ACME protocol</p>
  40. <div class="ui fluid action input">
  41. <input id="caRegisterEmail" type="text" placeholder="[email protected]">
  42. <button class="ui icon basic button" onclick="saveEmailToConfig(this);">
  43. <i class="blue save icon"></i>
  44. </button>
  45. </div>
  46. <small>If you don't want to share your private email address, you can also fill in an email address that point to a mailbox not exists on your domain.</small>
  47. </div>
  48. <div class="ui basic segment" style="background-color: #f7f7f7; border-radius: 1em;">
  49. <div class="ui accordion advanceSettings">
  50. <div class="title">
  51. <i class="dropdown icon"></i>
  52. Advance Renew Policy
  53. </div>
  54. <div class="content">
  55. <p>Renew all certificates with ACME supported CAs</p>
  56. <div class="ui toggle checkbox">
  57. <input type="checkbox" id="renewAllSupported" onchange="setAutoRenewIfCASupportMode(this.checked);">
  58. <label>Renew All Certs</label>
  59. </div><br>
  60. <button id="renewNowBtn" onclick="renewNow();" class="ui basic right floated button" style="margin-top: -2em;"><i class="yellow refresh icon"></i> Renew Now</button>
  61. <div class="ui horizontal divider"> OR </div>
  62. <p>Select the certificates to automatic renew in the list below</p>
  63. <table id="domainCertFileTable" class="ui very compact unstackable basic disabled table">
  64. <thead>
  65. <tr>
  66. <th>Domain Name</th>
  67. <th>Match Rule</th>
  68. <th>Auto-Renew</th>
  69. </tr>
  70. </thead>
  71. <tbody id="domainTableBody"></tbody>
  72. </table>
  73. <small><i class="ui red info circle icon"></i> Domain in red are expired</small><br>
  74. <div class="ui yellow message">
  75. Certificate Renew only works on the certification authority (CA) supported by Zoraxy. Check Zoraxy wiki for more information on supported list of CAs.
  76. </div>
  77. <button class="ui basic right floated button" onclick="saveAutoRenewPolicy();"><i class="blue save icon"></i> Save Changes</button>
  78. <button id="renewSelectedButton" onclick="renewNow();" class="ui basic right floated disabled button"><i class="yellow refresh icon"></i> Renew Selected</button>
  79. <br><br>
  80. </div>
  81. </div>
  82. </div>
  83. <div class="ui divider"></div>
  84. <h3>Generate New Certificate</h3>
  85. <p>Enter a new / existing domain(s) to request new certificate(s)</p>
  86. <div class="ui form">
  87. <div class="field">
  88. <label>Domain(s)</label>
  89. <input id="domainsInput" type="text" placeholder="example.com" onkeyup="checkIfInputDomainIsMultiple();">
  90. <small>If you have more than one domain in a single certificate, enter the domains separated by commas (e.g. s1.dev.example.com,s2.dev.example.com)</small>
  91. </div>
  92. <div class="field multiDomainOnly" style="display:none;">
  93. <label>Matching Rule</label>
  94. <input id="filenameInput" type="text" placeholder="Enter filename (no file extension)">
  95. <small>Matching rule to let Zoraxy pick which certificate to use (Also be used as filename). Usually is the longest common suffix of the entered addresses. (e.g. dev.example.com)</small>
  96. </div>
  97. <div class="field multiDomainOnly" style="display:none;">
  98. <button class="ui basic fluid button" onclick="autoDetectMatchingRules();">Auto Detect Matching Rule</button>
  99. </div>
  100. <div class="field">
  101. <label>Certificate Authority (CA)</label>
  102. <div class="ui selection dropdown" id="ca">
  103. <input type="hidden" name="ca">
  104. <i class="dropdown icon"></i>
  105. <div class="default text">Let's Encrypt</div>
  106. <div class="menu">
  107. <div class="item" data-value="Let's Encrypt">Let's Encrypt</div>
  108. <div class="item" data-value="Buypass">Buypass</div>
  109. <div class="item" data-value="ZeroSSL">ZeroSSL</div>
  110. <div class="item" data-value="Custom ACME Server">Custom ACME Server</div>
  111. <!-- <div class="item" data-value="Google">Google</div> -->
  112. </div>
  113. </div>
  114. </div>
  115. <div class="field" id="dnsChallenge">
  116. <div class="ui checkbox">
  117. <input type="checkbox" id="useDnsChallenge" onchange="toggleDnsChallenge()">
  118. <label>Use a DNS Challenge<br>
  119. </div>
  120. </div>
  121. <div class="field dnsChallengeOnly" style="display:none;">
  122. <label>DNS Provider</label>
  123. <div class="ui search selection dropdown" id="dnsProvider">
  124. <input type="hidden" name="dnsProvider" value="">
  125. <i class="dropdown icon"></i>
  126. <div class="default text">Pick a DNS Provider</div>
  127. <div class="menu" id="dnsProviderList">
  128. <!-- Auto populate moved to acmedns module and initDNSProviderList() -->
  129. </div>
  130. </div>
  131. </div>
  132. <div class="field dnsChallengeOnly" style="display:none;">
  133. <div class="ui divider"></div>
  134. <p>DNS Credentials (Leave all fields empty to use previous settings)<br>
  135. <small><i class="yellow exclamation triangle icon"></i> Note that domain DNS credentials are stored separately. For each new subdomain, you will need to enter a new DNS credentials.</small></p>
  136. <div id="dnsProviderAPIFields">
  137. </div>
  138. <!--
  139. <label>Credentials File Content</label>
  140. <textarea id="dnsCredentials" placeholder=""></textarea>
  141. <small>For more information on the supported DNS Providers and their attirbutes look <a href="https://go-acme.github.io/lego/dns/" target="_blank">here</a>! </small>
  142. <div class="ui negative message">
  143. <i class="icon exclamation triangle"></i>
  144. These credentials will be stored as plaintext in the database and in environment variables!
  145. </div>
  146. -->
  147. </div>
  148. <div class="field" id="caInput" style="display:none;">
  149. <label>ACME Server URL</label>
  150. <input id="caURL" type="text" placeholder="https://example.com/acme/dictionary">
  151. </div>
  152. <div class="field" id="kidInput" style="display:none;">
  153. <label>EAB Credentials (KID) for current provider</label>
  154. <input id="eab_kid" type="text" placeholder="Leave this field blank to keep the current configuration">
  155. </div>
  156. <div class="field" id="hmacInput" style="display:none;">
  157. <label>EAB HMAC Key for current provider</label>
  158. <input id="eab_hmac" type="text" placeholder="Leave this field blank to keep the current configuration">
  159. </div>
  160. <div class="field" id="skipTLS" style="display:none;">
  161. <div class="ui checkbox">
  162. <input type="checkbox" id="skipTLSCheckbox">
  163. <label>Ignore TLS/SSL Verification Error<br><small>E.g. self-signed, expired certificate (Not Recommended)</small></label>
  164. </div>
  165. </div>
  166. <button id="obtainButton" class="ui basic button" type="submit"><i class="yellow refresh icon"></i> Get Certificate</button>
  167. </div>
  168. <div class="ui divider"></div>
  169. <small>First time setting up HTTPS?<br>Try out our <a href="../tools/https.html" target="_blank">wizard</a></small>
  170. <button class="ui basic button" style="float: right;" onclick="parent.hideSideWrapper();"><i class="remove icon"></i> Cancel</button>
  171. <br><br><br><br>
  172. </div>
  173. <script>
  174. let expiredDomains = [];
  175. let enableTrigerOnChangeEvent = true;
  176. $(".accordion").accordion();
  177. $(".dropdown").dropdown();
  178. $(".checkbox").checkbox();
  179. function setAutoRenewIfCASupportMode(useAutoMode = true){
  180. if (useAutoMode){
  181. $("#domainCertFileTable").addClass("disabled");
  182. $("#renewNowBtn").removeClass("disabled");
  183. $("#renewSelectedButton").addClass("disabled");
  184. }else{
  185. $("#domainCertFileTable").removeClass("disabled");
  186. $("#renewNowBtn").addClass("disabled");
  187. $("#renewSelectedButton").removeClass("disabled");
  188. }
  189. }
  190. function initRenewerConfigFromFile(){
  191. //Set the renew switch state
  192. $.get("/api/acme/autoRenew/enable", function(data){
  193. if (data == true){
  194. $("#enableCertAutoRenew").parent().checkbox("set checked");
  195. }
  196. $("#enableCertAutoRenew").on("change", function(){
  197. if (!enableTrigerOnChangeEvent){
  198. return;
  199. }
  200. toggleAutoRenew();
  201. })
  202. });
  203. //Load the email from server side
  204. $.get("/api/acme/autoRenew/email", function(data){
  205. if (data != "" && data != undefined && data != null){
  206. $("#caRegisterEmail").val(data);
  207. }
  208. });
  209. //Load the domain selection options
  210. $.get("/api/acme/autoRenew/renewPolicy", function(data){
  211. if (data == true){
  212. $("#renewAllSupported").parent().checkbox("set checked");
  213. }else{
  214. $("#renewAllSupported").parent().checkbox("set unchecked");
  215. }
  216. });
  217. }
  218. initRenewerConfigFromFile();
  219. function saveEmailToConfig(btn){
  220. $.ajax({
  221. url: "/api/acme/autoRenew/email",
  222. data: {set: $("#caRegisterEmail").val()},
  223. success: function(data){
  224. if (data.error != undefined){
  225. parent.msgbox(data.error, false, 5000);
  226. }else{
  227. parent.msgbox("Email updated");
  228. $(btn).html(`<i class="green check icon"></i>`);
  229. $(btn).addClass("disabled");
  230. setTimeout(function(){
  231. $(btn).html(`<i class="blue save icon"></i>`);
  232. $(btn).removeClass("disabled");
  233. }, 3000);
  234. }
  235. }
  236. });
  237. }
  238. function toggleAutoRenew(){
  239. var enabled = $("#enableCertAutoRenew").parent().checkbox("is checked");
  240. $.post("/api/acme/autoRenew/enable?enable=" + enabled, function(data){
  241. if (data.error){
  242. parent.msgbox(data.error, false, 5000);
  243. if (enabled){
  244. enableTrigerOnChangeEvent = false;
  245. $("#enableCertAutoRenew").parent().checkbox("set unchecked");
  246. enableTrigerOnChangeEvent = true;
  247. }
  248. if (parent && parent.setACMEEnableStates){
  249. parent.setACMEEnableStates(!enabled);
  250. }
  251. }else{
  252. $("#enableToggleSucc").stop().finish().fadeIn("fast").delay(3000).fadeOut("fast");
  253. if (parent && parent.setACMEEnableStates){
  254. parent.setACMEEnableStates(enabled);
  255. }
  256. }
  257. });
  258. }
  259. //Render the domains table that exists in this zoraxy host
  260. function renderDomainTable(domainFileList) {
  261. // Get the table body element
  262. var tableBody = $('#domainTableBody');
  263. // Clear the table body
  264. tableBody.empty();
  265. // Iterate over the domain names
  266. var counter = 0;
  267. for (const [srcfile, domains] of Object.entries(domainFileList)) {
  268. // Create a table row
  269. var row = $('<tr>');
  270. // Create the domain name cell
  271. var domainClass = "validDomain";
  272. for (var i = 0; i < domains.length; i++){
  273. let thisDomain = domains[i];
  274. if (expiredDomains.includes(thisDomain)){
  275. domainClass = "expiredDomain";
  276. }
  277. }
  278. var domainCell = $('<td class="' + domainClass +'">').html(domains.join("<br>"));
  279. row.append(domainCell);
  280. var srcFileCell = $('<td>').text(srcfile);
  281. row.append(srcFileCell);
  282. // Create the auto-renew checkbox cell
  283. let domainsEncoded = encodeURIComponent(JSON.stringify(domains));
  284. var checkboxCell = $(`<td domain="${domainsEncoded}" srcfile="${srcfile}">`);
  285. var checkbox = $(`<input name="${srcfile}">`).attr('type', 'checkbox');
  286. checkboxCell.append(checkbox);
  287. row.append(checkboxCell);
  288. // Add the row to the table body
  289. tableBody.append(row);
  290. counter++;
  291. }
  292. if (Object.keys(domainFileList).length == 0){
  293. //No certificate in this system
  294. tableBody.append(`<tr>
  295. <td colspan="3"><i class="ui green circle check icon"></i> No certificate in use</td>
  296. </tr>`);
  297. }
  298. }
  299. //Initiate domain table. If you needs to update the expired domain as well
  300. //call from initDomainFileList() instead
  301. function initDomainTable(){
  302. $.get("/api/cert/listdomains?compact=true", function(data){
  303. if (data.error != undefined){
  304. parent.msgbox(data.error, false);
  305. }else{
  306. renderDomainTable(data);
  307. }
  308. initAutoRenewPolicy();
  309. })
  310. }
  311. function initDomainFileList() {
  312. $.ajax({
  313. url: "/api/acme/listExpiredDomains",
  314. method: "GET",
  315. success: function(response) {
  316. // Render domain table
  317. expiredDomains = response.domain;
  318. initDomainTable();
  319. //renderDomainTable(response.domain);
  320. },
  321. error: function(error) {
  322. console.log("Failed to fetch expired domains:", error);
  323. }
  324. });
  325. }
  326. initDomainFileList();
  327. // Button click event handler for obtaining certificate
  328. $("#obtainButton").click(function() {
  329. $("#obtainButton").addClass("loading").addClass("disabled");
  330. updateCertificateEAB(function(succ){
  331. if (succ){
  332. //Continue to next step
  333. updateCertificateDNS(function(succ){
  334. if (succ){
  335. obtainCertificate(function(succ){
  336. $("#obtainButton").removeClass("loading").removeClass("disabled");
  337. });
  338. }else{
  339. $("#obtainButton").removeClass("loading").removeClass("disabled");
  340. console.log("update Certificate DNS process halted");
  341. }
  342. });
  343. }else{
  344. console.log("Update Certificate EAB process halted");
  345. $("#obtainButton").removeClass("loading").removeClass("disabled");
  346. }
  347. });
  348. });
  349. //On CA change in dropdown
  350. $("input[name=ca]").on('change', function() {
  351. if(this.value == "Custom ACME Server") {
  352. $("#caInput").show();
  353. $("#kidInput").show();
  354. $("#hmacInput").show();
  355. $("#skipTLS").show();
  356. $("#dnsChallenge").hide();
  357. $(".dnsChallengeOnly").hide();
  358. } else if (this.value == "ZeroSSL") {
  359. $("#kidInput").show();
  360. $("#hmacInput").show();
  361. $("#dnsChallenge").hide();
  362. $(".dnsChallengeOnly").hide();
  363. $("#skipTLS").hide();
  364. } else if (this.value == "Buypass") {
  365. $("#kidInput").show();
  366. $("#hmacInput").show();
  367. $("#dnsChallenge").hide();
  368. $(".dnsChallengeOnly").hide();
  369. $("#skipTLS").hide();
  370. }else {
  371. $("#caInput").hide();
  372. $("#skipTLS").hide();
  373. $("#kidInput").hide();
  374. $("#hmacInput").hide();
  375. $("#dnsChallenge").show();
  376. if ($("#useDnsChallenge")[0].checked){
  377. $(".dnsChallengeOnly").show();
  378. }
  379. }
  380. })
  381. //On DNS provider dropdown change
  382. $("input[name=dnsProvider]").on('change', function() {
  383. let newProviderName = $("#dnsProvider").find("input").val();
  384. $.get("/api/acme/dns/providers?name=" + newProviderName, function(data){
  385. console.log("Loaded required config", data);
  386. $("#dnsProviderAPIFields").html("");
  387. //Generate a form for this config
  388. let booleanFieldsHTML = "";
  389. for (const [key, datatype] of Object.entries(data)) {
  390. if (datatype == "int"){
  391. $("#dnsProviderAPIFields").append(`<div class="ui fluid labeled dnsConfigField input" key="${key}" style="margin-top: 0.2em;">
  392. <div class="ui basic blue label" style="font-weight: 300;">
  393. ${key}
  394. </div>
  395. <input type="number" value="300">
  396. </div>`);
  397. }else if (datatype == "bool"){
  398. booleanFieldsHTML += (`<div class="ui checkbox dnsConfigField" key="${key}" style="margin-top: 1em !important; padding-left: 0.4em;">
  399. <input type="checkbox">
  400. <label>${key}</label>
  401. </div>`);
  402. }else{
  403. //Default to string
  404. $("#dnsProviderAPIFields").append(`<div class="ui fluid labeled input dnsConfigField" key="${key}" style="margin-top: 0.2em;">
  405. <div class="ui basic label" style="font-weight: 300;">
  406. ${key}
  407. </div>
  408. <input type="text">
  409. </div>`);
  410. }
  411. }
  412. //Append the boolean fields at the bottom, if exists
  413. $("#dnsProviderAPIFields").append(booleanFieldsHTML);
  414. if (booleanFieldsHTML != ""){
  415. $(".dnsConfigField.checkbox").checkbox();
  416. }
  417. });
  418. });
  419. // Get filename form domains and input
  420. function getFilename() {
  421. var domains = $("#domainsInput").val();
  422. var filename = $("#filenameInput").val();
  423. if (filename.trim() == "" && !domains.includes(",")){
  424. //Zoraxy filename are the matching name for domains.
  425. //Use the same as domains
  426. filename = domains;
  427. }else if (filename != "" && !domains.includes(",")){
  428. //Invalid settings. Force the filename to be same as domain
  429. //if there are only 1 domain
  430. filename = domains;
  431. }else if (filename == "" && domains.includes(",")){
  432. parent.msgbox("Filename cannot be empty for certs containing multiple domains.", false, 5000);
  433. $("#obtainButton").removeClass("loading").removeClass("disabled");
  434. return;
  435. }
  436. //Filename cannot contain wildcards, and wildcards are possible with DNS challenges
  437. filename = filename.replace("*", "_");
  438. return filename;
  439. }
  440. // Update EAB values for autorenewal
  441. function updateCertificateEAB(callback=undefined) {
  442. var ca = $("#ca").dropdown("get value");
  443. var caURL = "";
  444. if (ca == "Custom ACME Server") {
  445. ca = "custom";
  446. caURL = $("#caURL").val();
  447. }else if(ca == "Buypass") {
  448. caURL = "https://api.buypass.com/acme/directory";
  449. }else if(ca == "ZeroSSL") {
  450. caURL = "https://acme.zerossl.com/v2/DV90";
  451. }
  452. if(caURL == "") {
  453. //Skip update
  454. if (callback != undefined){
  455. callback(true);
  456. }
  457. return;
  458. }
  459. var kid = $("#eab_kid").val();
  460. var hmac = $("#eab_hmac").val();
  461. if(kid == "" || hmac == "") {
  462. //Skip update
  463. if (callback != undefined){
  464. callback(true);
  465. }
  466. return;
  467. }
  468. console.log(caURL + " " + kid + " " + hmac);
  469. $.ajax({
  470. url: "/api/acme/autoRenew/setEAB",
  471. method: "GET",
  472. data: {
  473. acmeDirectoryURL: caURL,
  474. kid: kid,
  475. hmacEncoded: hmac,
  476. },
  477. success: function(response) {
  478. //$("#obtainButton").removeClass("loading").removeClass("disabled");
  479. if (response.error) {
  480. console.log("Error:", response.error);
  481. // Show error message
  482. parent.msgbox(response.error, false, 12000);
  483. if (callback != undefined){
  484. callback(false);
  485. }
  486. } else {
  487. console.log("Certificate EAB updated successfully");
  488. // Show success message
  489. parent.msgbox("Certificate EAB updated successfully");
  490. // Renew the parent certificate list
  491. parent.initManagedDomainCertificateList();
  492. if (callback != undefined){
  493. callback(true);
  494. }
  495. }
  496. },
  497. error: function(error) {
  498. //$("#obtainButton").removeClass("loading").removeClass("disabled");
  499. console.log("Failed to update EAB configuration:", error);
  500. parent.msgbox("Failed to update EAB configuration");
  501. if (callback != undefined){
  502. callback(false);
  503. }
  504. }
  505. });
  506. }
  507. //Read DNS credential from form and generate a key value structure that looks like
  508. // the old DNSCredential TextArea input
  509. function readDnsCredentials(){
  510. let dnsCredentials = {};
  511. $(".dnsConfigField").each(function(){
  512. let thisKey = $(this).attr("key");
  513. let value = "";
  514. if ($(this).hasClass("checkbox")){
  515. //Boolean option
  516. let checked = $(this).find("input")[0].checked;
  517. dnsCredentials[thisKey] = checked;
  518. }else{
  519. //String or int options
  520. let value = $(this).find("input").val().trim();
  521. dnsCredentials[thisKey] = value;
  522. }
  523. });
  524. return dnsCredentials;
  525. }
  526. // Update DNS values for autorenewal
  527. function updateCertificateDNS(callback=undefined) {
  528. var dns = $("#useDnsChallenge")[0].checked;
  529. var dnsProvider = "";
  530. var dnsCredentials = "";
  531. if (!dns) {
  532. if (callback != undefined){
  533. callback(true);
  534. }
  535. return;
  536. }
  537. //Check if all fields is empty. If yes, do not update the config
  538. let allFieldsEmpty = true;
  539. $(".dnsConfigField").each(function(){
  540. if ($(this).find("input").val().trim() != ""){
  541. allFieldsEmpty = false;
  542. }
  543. });
  544. if (allFieldsEmpty){
  545. //Do not update config on server side
  546. if (callback != undefined){
  547. callback(true);
  548. }
  549. return;
  550. }
  551. dnsProvider = $("#dnsProvider").dropdown("get value");
  552. //dnsCredentials = $("#dnsCredentials").val();
  553. dnsCredentials = readDnsCredentials();
  554. if(dnsProvider == "") {
  555. parent.msgbox("DNS Provider cannot be empty", false, 5000);
  556. $("#obtainButton").removeClass("loading").removeClass("disabled");
  557. if (callback != undefined){
  558. callback(false);
  559. }
  560. return;
  561. }
  562. var filename = getFilename();
  563. if (filename == '') {
  564. parent.msgbox("Domain to renew cannot be empty", false, 5000);
  565. if (callback != undefined){
  566. callback(false);
  567. }
  568. return;
  569. }
  570. $.ajax({
  571. url: "/api/acme/autoRenew/setDNS",
  572. method: "POST",
  573. data: {
  574. filename: filename,
  575. dnsProvider: dnsProvider,
  576. dnsCredentials: JSON.stringify(dnsCredentials),
  577. },
  578. success: function(response) {
  579. //$("#obtainButton").removeClass("loading").removeClass("disabled");
  580. if (response.error) {
  581. console.log("Error:", response.error);
  582. // Show error message
  583. parent.msgbox(response.error, false, 12000);
  584. if (callback != undefined){
  585. callback(false);
  586. }
  587. } else {
  588. console.log("Certificate DNS Credentials updated successfully");
  589. // Show success message
  590. parent.msgbox("Certificate DNS Credentials updated successfully");
  591. if (callback != undefined){
  592. callback(true);
  593. }
  594. }
  595. },
  596. error: function(error) {
  597. //$("#obtainButton").removeClass("loading").removeClass("disabled");
  598. console.log("Failed to update DNS configuration:", error);
  599. parent.msgbox("Failed to update DNS configuration");
  600. if (callback != undefined){
  601. callback(false);
  602. }
  603. }
  604. });
  605. }
  606. // Obtain certificate from API
  607. function obtainCertificate(callback=undefined) {
  608. var domains = $("#domainsInput").val();
  609. var filename = getFilename();
  610. if (filename == '') {
  611. if (callback != undefined){
  612. parent.msgbox("Domain to obtain certificate cannot be empty", false)
  613. callback(false);
  614. }
  615. return;
  616. }
  617. var email = $("#caRegisterEmail").val();
  618. if (email == ""){
  619. parent.msgbox("ACME renew email is not set", false)
  620. if (callback != undefined){callback(false);}
  621. return;
  622. }
  623. var ca = $("#ca").dropdown("get value");
  624. var caURL = "";
  625. if (ca == "Custom ACME Server") {
  626. ca = "custom";
  627. caURL = $("#caURL").val();
  628. }
  629. var dns = $("#useDnsChallenge")[0].checked;
  630. var skipTLSValue = $("#skipTLSCheckbox")[0].checked;
  631. $.ajax({
  632. url: "/api/acme/obtainCert",
  633. method: "GET",
  634. data: {
  635. domains: domains,
  636. filename: filename,
  637. email: email,
  638. ca: ca,
  639. caURL: caURL,
  640. skipTLS: skipTLSValue,
  641. dns: dns,
  642. },
  643. success: function(response) {
  644. $("#obtainButton").removeClass("loading").removeClass("disabled");
  645. if (response.error) {
  646. console.log("Error:", response.error);
  647. // Show error message
  648. parent.msgbox(response.error, false, 12000);
  649. if (callback != undefined){callback(false);}
  650. } else {
  651. console.log("Certificate renewed successfully");
  652. // Show success message
  653. parent.msgbox("Certificate renewed successfully");
  654. // Renew the parent certificate list
  655. parent.initManagedDomainCertificateList();
  656. if (callback != undefined){callback(true);}
  657. }
  658. },
  659. error: function(error) {
  660. $("#obtainButton").removeClass("loading").removeClass("disabled");
  661. console.log("Failed to renewed certificate:", error);
  662. if (callback != undefined){callback(false);}
  663. }
  664. });
  665. }
  666. function checkIfInputDomainIsMultiple(){
  667. var inputDomains = $("#domainsInput").val();
  668. if (inputDomains.includes(",")){
  669. $(".multiDomainOnly").show();
  670. }else{
  671. $(".multiDomainOnly").hide();
  672. }
  673. }
  674. function toggleDnsChallenge(){
  675. if ( $("#useDnsChallenge")[0].checked){
  676. $(".dnsChallengeOnly").show();
  677. }else{
  678. $(".dnsChallengeOnly").hide();
  679. }
  680. }
  681. //Grab the longest common suffix of all domains
  682. //not that smart technically
  683. function autoDetectMatchingRules(){
  684. var domainsString = $("#domainsInput").val();
  685. if (!domainsString.includes(",")){
  686. return domainsString;
  687. }
  688. let domains = domainsString.split(",");
  689. //Clean out any spacing between commas
  690. for (var i = 0; i < domains.length; i++){
  691. domains[i] = domains[i].trim();
  692. }
  693. function getLongestCommonSuffix(strings) {
  694. if (strings.length === 0) {
  695. return ''; // Return an empty string if the array is empty
  696. }
  697. var sortedStrings = strings.slice().sort(); // Create a sorted copy of the array
  698. var firstString = sortedStrings[0];
  699. var lastString = sortedStrings[sortedStrings.length - 1];
  700. var suffix = '';
  701. var minLength = Math.min(firstString.length, lastString.length);
  702. for (var i = 0; i < minLength; i++) {
  703. if (firstString[firstString.length - 1 - i] !== lastString[lastString.length - 1 - i]) {
  704. break; // Stop iterating if characters don't match
  705. }
  706. suffix = firstString[firstString.length - 1 - i] + suffix;
  707. }
  708. return suffix;
  709. }
  710. let longestSuffix = getLongestCommonSuffix(domains);
  711. //Check if the suffix is a valid domain
  712. if (longestSuffix.substr(0,1) == "."){
  713. //Trim off the first dot
  714. longestSuffix = longestSuffix.substr(1);
  715. }
  716. if (!longestSuffix.includes(".")){
  717. parent.msgbox("Auto Detect failed: Multiple Domains", false, 5000);
  718. return;
  719. }
  720. $("#filenameInput").val(longestSuffix);
  721. }
  722. //Handle the renew now btn click
  723. function renewNow(){
  724. $.get("/api/acme/autoRenew/renewNow", function(data){
  725. if (data.error != undefined){
  726. parent.msgbox(data.error, false, 6000);
  727. }else{
  728. parent.msgbox(data)
  729. }
  730. })
  731. }
  732. function initAutoRenewPolicy(){
  733. $.get("/api/acme/autoRenew/listDomains", function(data){
  734. if (data.error != undefined){
  735. parent.msgbox(data.error, false)
  736. }else{
  737. if (data[0] == "*"){
  738. //Auto select and renew is enabled
  739. $("#renewAllSupported").parent().checkbox("set checked");
  740. }else{
  741. //This is a list of domain files
  742. data.forEach(function(name) {
  743. $('#domainTableBody input[type="checkbox"][name="' + name + '"]').prop('checked', true);
  744. });
  745. $("#domainCertFileTable").removeClass("disabled");
  746. $("#renewNowBtn").addClass("disabled");
  747. $("#renewSelectedButton").removeClass("disabled");
  748. }
  749. }
  750. })
  751. }
  752. function saveAutoRenewPolicy(){
  753. let autoRenewAll = $("#renewAllSupported").parent().checkbox("is checked");
  754. if (autoRenewAll == true){
  755. $.ajax({
  756. url: "/api/acme/autoRenew/setDomains",
  757. data: {opr: "setAuto"},
  758. success: function(data){
  759. parent.msgbox("Renew policy rule updated")
  760. }
  761. });
  762. }else{
  763. let checkedNames = [];
  764. $('#domainTableBody input[type="checkbox"]:checked').each(function() {
  765. checkedNames.push($(this).attr('name'));
  766. });
  767. $.ajax({
  768. url: "/api/acme/autoRenew/setDomains",
  769. data: {opr: "setSelected", domains: JSON.stringify(checkedNames)},
  770. success: function(data){
  771. parent.msgbox("Renew policy rule updated")
  772. }
  773. });
  774. }
  775. }
  776. //Load the json map and create the dropdown for DNS provider names
  777. let dnsProviderNameMap = {};
  778. function initDNSProviderList(){
  779. $.get("dnsnames.json", function(namemap){
  780. dnsProviderNameMap = namemap;
  781. //Load a list of supported DNS provider from backend
  782. $("#dnsProviderList").html("");
  783. $.get("/api/acme/dns/providers", function(providerList){
  784. providerList.sort();
  785. providerList.forEach(providerid => {
  786. let providerName = providerid;
  787. if (dnsProviderNameMap[providerid] != undefined){
  788. providerName = dnsProviderNameMap[providerid];
  789. }
  790. $("#dnsProviderList").append(`<div class="item" data-value="${providerid}">${providerName}</div>`);
  791. });
  792. $("#dnsProvider").dropdown();
  793. setTimeout(function(){
  794. //The dropdown is large, it takes some time to load
  795. $("#dnsProvider").dropdown("set selected", "cloudflare");
  796. }, 300)
  797. });
  798. });
  799. }
  800. initDNSProviderList();
  801. //Clear up the input field when page load
  802. $("#filenameInput").val("");
  803. </script>
  804. </body>
  805. </html>