You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
246 lines
6.3 KiB
246 lines
6.3 KiB
#!/bin/sh
|
|
|
|
PRINT_PASSED=2
|
|
|
|
NGINX_UTIL="/usr/bin/nginx-util"
|
|
|
|
__esc_newlines() {
|
|
echo "${1}" | sed -E 's/$/\\n/' | tr -d '\n' | sed -E 's/\\n$/\n/'
|
|
}
|
|
|
|
__esc_sed_rhs() {
|
|
__esc_newlines "${1}" | sed -E 's/[&/\]/\\&/g'
|
|
}
|
|
|
|
_sed_rhs() {
|
|
__esc_sed_rhs "$(echo "${1}" | sed -E "s/[$]/$(__esc_sed_rhs "${2}")/g")"
|
|
}
|
|
|
|
__esc_regex() {
|
|
__esc_newlines "${1}" | sed -E 's/[^^_a-zA-Z0-9-]/[&]/g; s/\^/\\^/g'
|
|
}
|
|
|
|
_regex() {
|
|
__esc_regex "${1}" | sed -E -e 's/^(\[\s])*/^\\s*/' \
|
|
-e 's/(\[\s])+\[[*]]/(\\s.*)?/g' \
|
|
-e 's/(\[\s])+/\\s+/g' \
|
|
-e 's/(\[\s])*\[[;]]/\\s*;/g' \
|
|
-e "s/\[['\"]]/['\"]?/g" \
|
|
-e "s/\[[$]]/$(__esc_sed_rhs "$(__esc_regex "${2}")")/g"
|
|
}
|
|
|
|
_echo_sed() {
|
|
echo "" | sed -E "c${1}"
|
|
}
|
|
|
|
setpoint_add_ssl() {
|
|
local indent="\n$1"
|
|
local name="$2"
|
|
local default=""
|
|
[ "${name}" = "${LAN_NAME}" ] && default=".default"
|
|
local prefix="${CONF_DIR}${name}"
|
|
|
|
local CONF="$(grep -vE "$(_regex "${NGX_INCLUDE}" \
|
|
"${LAN_LISTEN}${default}")" "${prefix}.sans" 2>/dev/null)"
|
|
local ADDS=""
|
|
echo "${CONF}" \
|
|
| grep -qE "$(_regex "${NGX_INCLUDE}" "${LAN_SSL_LISTEN}${default}")" \
|
|
|| ADDS="${ADDS}${indent}$(_sed_rhs "${NGX_INCLUDE}" \
|
|
"${LAN_SSL_LISTEN}${default}")"
|
|
echo "${CONF}" | grep -qE "$(_regex "${NGX_SSL_CRT}" "${prefix}")" \
|
|
|| ADDS="${ADDS}${indent}$(_sed_rhs "${NGX_SSL_CRT}" "${prefix}")"
|
|
echo "${CONF}" | grep -qE "$(_regex "${NGX_SSL_KEY}" "${prefix}")" \
|
|
|| ADDS="${ADDS}${indent}$(_sed_rhs "${NGX_SSL_KEY}" "${prefix}")"
|
|
echo "${CONF}" | grep -qE "^\s*ssl_session_cache\s" \
|
|
|| ADDS="${ADDS}${indent}$(_sed_rhs "${NGX_SSL_SESSION_CACHE}" "${name}")"
|
|
echo "${CONF}" | grep -qE "^\s*ssl_session_timeout\s" \
|
|
|| ADDS="${ADDS}${indent}$(_sed_rhs "${NGX_SSL_SESSION_TIMEOUT}" "")"
|
|
|
|
if [ -n "${ADDS}" ]
|
|
then
|
|
ADDS="$(echo "${ADDS}" | sed -E 's/^\\n//')"
|
|
echo "${CONF}" | grep -qE "$(_regex "${NGX_SERVER_NAME}" "${name}")" \
|
|
&& echo "${CONF}" \
|
|
| sed -E "/$(_regex "${NGX_SERVER_NAME}" "${name}")/a\\${ADDS}" \
|
|
> "${prefix}.with" \
|
|
&& _echo_sed "Added directives to ${prefix}.with:\n${ADDS}" \
|
|
&& return 0 \
|
|
|| _echo_sed "Cannot add directives to ${prefix}.sans, missing:\
|
|
\n$(_sed_rhs "${NGX_SERVER_NAME}" "${name}")\n${ADDS}"
|
|
return 1
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
# ----------------------------------------------------------------------------
|
|
|
|
test_setpoint() {
|
|
[ "$(cat "$1")" = "$2" ] && return
|
|
echo "$1:"; cat "$1"
|
|
echo "differs from setpoint:"; echo "$2"
|
|
[ "${PRINT_PASSED}" -gt 1 ] && pst_exit 1
|
|
}
|
|
|
|
|
|
test() {
|
|
eval "$1 2>/dev/null >/dev/null"
|
|
if [ "$?" -eq "$2" ]
|
|
then
|
|
[ "${PRINT_PASSED}" -gt 0 ] \
|
|
&& printf "%-72s%-1s\n" "$1" "2>/dev/null >/dev/null (-> $2?) passed."
|
|
else
|
|
printf "%-72s%-1s\n" "$1" "2>/dev/null >/dev/null (-> $2?) failed!!!"
|
|
[ "${PRINT_PASSED}" -gt 1 ] && exit 1
|
|
fi
|
|
}
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting %s get_env ...\n" "${NGINX_UTIL}"
|
|
|
|
eval $("${NGINX_UTIL}" get_env)
|
|
test '[ -n "${NGINX_CONF}" ]' 0
|
|
test '[ -n "${CONF_DIR}" ]' 0
|
|
test '[ -n "${LAN_NAME}" ]' 0
|
|
test '[ -n "${LAN_LISTEN}" ]' 0
|
|
test '[ -n "${LAN_SSL_LISTEN}" ]' 0
|
|
test '[ -n "${SSL_SESSION_CACHE_ARG}" ]' 0
|
|
test '[ -n "${SSL_SESSION_TIMEOUT_ARG}" ]' 0
|
|
test '[ -n "${ADD_SSL_FCT}" ]' 0
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nPrepare files in %s ...\n" "${CONF_DIR}"
|
|
|
|
mkdir -p "${CONF_DIR}"
|
|
|
|
cd "${CONF_DIR}" || exit 2
|
|
|
|
NGX_INCLUDE="include '\$';"
|
|
NGX_SERVER_NAME="server_name * '\$' *;"
|
|
NGX_SSL_CRT="ssl_certificate '\$.crt';"
|
|
NGX_SSL_KEY="ssl_certificate_key '\$.key';"
|
|
NGX_SSL_SESSION_CACHE="ssl_session_cache '$(echo "${SSL_SESSION_CACHE_ARG}" \
|
|
| sed -E "s/$(__esc_regex "${LAN_NAME}")/\$/")';"
|
|
NGX_SSL_SESSION_TIMEOUT="ssl_session_timeout '${SSL_SESSION_TIMEOUT_ARG}';"
|
|
|
|
cat > "${LAN_NAME}.sans" <<EOF
|
|
# default_server for the LAN addresses getting the IPs by:
|
|
# ifstatus lan | jsonfilter -e '@["ipv4-address","ipv6-address"].*.address'
|
|
server {
|
|
include '${LAN_LISTEN}.default';
|
|
server_name ${LAN_NAME};
|
|
include conf.d/*.locations;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} ${LAN_NAME}:0"
|
|
|
|
cat > minimal.sans <<EOF
|
|
server {
|
|
server_name minimal;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} minimal:0"
|
|
|
|
cat > normal.sans <<EOF
|
|
server {
|
|
include '${LAN_LISTEN}';
|
|
server_name normal;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} normal:0"
|
|
|
|
cat > more_server.sans <<EOF
|
|
server {
|
|
# include '${LAN_LISTEN}';
|
|
server_name normal;
|
|
}
|
|
server {
|
|
include '${LAN_LISTEN}';
|
|
server_name more_server;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} more_server:0"
|
|
|
|
cat > more_names.sans <<EOF
|
|
server {
|
|
include '${LAN_LISTEN}';
|
|
server_name example.com more_names example.org;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} more_names:0"
|
|
|
|
cat > different_name.sans <<EOF
|
|
server {
|
|
include '${LAN_LISTEN}';
|
|
server_name minimal;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} different_name:1"
|
|
|
|
cat > comments.sans <<EOF
|
|
server { # comment1
|
|
# comment2
|
|
include '${LAN_LISTEN}';
|
|
server_name comments;
|
|
# comment3
|
|
} # comment4
|
|
EOF
|
|
CONFS="${CONFS} comments:0"
|
|
|
|
cat > name_comment.sans <<EOF
|
|
server {
|
|
include '${LAN_LISTEN}';
|
|
server_name name_comment; # comment
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} name_comment:0"
|
|
|
|
cat > tab.sans <<EOF
|
|
server {
|
|
include '${LAN_LISTEN}';
|
|
server_name tab;
|
|
}
|
|
EOF
|
|
CONFS="${CONFS} tab:0"
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting %s init_lan ...\n" "${NGINX_UTIL}"
|
|
|
|
mkdir -p "$(dirname "${LAN_LISTEN}")"
|
|
|
|
cp "${LAN_NAME}.sans" "${LAN_NAME}.conf"
|
|
|
|
test '"${NGINX_UTIL}" init_lan' 0
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nSetup files in %s ...\n" "${CONF_DIR}"
|
|
|
|
for conf in ${CONFS}
|
|
do test 'setpoint_add_ssl " " '"${conf%:*}" "${conf#*:}"
|
|
done
|
|
|
|
test 'setpoint_add_ssl "\t" tab' 0 # fixes wrong indentation.
|
|
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting %s add_ssl ...\n" "${NGINX_UTIL}"
|
|
|
|
cp different_name.sans different_name.with
|
|
|
|
test '[ "${ADD_SSL_FCT}" = "add_ssl" ] ' 0
|
|
|
|
for conf in ${CONFS}; do
|
|
name="${conf%:*}"
|
|
cp "${name}.sans" "${name}.conf"
|
|
test '"${NGINX_UTIL}" add_ssl '"${name}" "${conf#*:}"
|
|
test_setpoint "${name}.conf" "$(cat "${name}.with")"
|
|
done
|
|
|
|
[ "$PRINT_PASSED" -gt 0 ] && printf "\nTesting %s del_ssl ...\n" "${NGINX_UTIL}"
|
|
|
|
sed -i "/server {/a\\ include '${LAN_LISTEN}';" minimal.sans
|
|
|
|
for conf in ${CONFS}; do
|
|
name="${conf%:*}"
|
|
cp "${name}.with" "${name}.conf"
|
|
test '"${NGINX_UTIL}" del_ssl '"${name}" "${conf#*:}"
|
|
test_setpoint "${name}.conf" "$(cat "${name}.sans")"
|
|
done
|