Add files via upload

backend/internal/cert/cert.go

@@ -0,0 +1,206 @@
+package cert
+
+import (
+	"ALLinSSL/backend/public"
+	"fmt"
+	"strconv"
+	"strings"
+	"time"
+)
+
+func GetSqlite() (*public.Sqlite, error) {
+	s, err := public.NewSqlite("data/data.db", "")
+	if err != nil {
+		return nil, err
+	}
+	s.Connect()
+	s.TableName = "cert"
+	return s, nil
+}
+
+func GetList(search string, p, limit int64) ([]map[string]any, int, error) {
+	var data []map[string]any
+	var count int64
+	s, err := GetSqlite()
+	if err != nil {
+		return data, 0, err
+	}
+	defer s.Close()
+
+	var limits []int64
+	if p >= 0 && limit >= 0 {
+		limits = []int64{0, limit}
+		if p > 1 {
+			limits[0] = (p - 1) * limit
+			limits[1] = p * limit
+		}
+	}
+
+	if search != "" {
+		count, err = s.Where("domains like ?", []interface{}{"%" + search + "%"}).Count()
+		data, err = s.Where("domains like ?", []interface{}{"%" + search + "%"}).Limit(limits).Order("create_time", "desc").Select()
+	} else {
+		count, err = s.Count()
+		data, err = s.Order("create_time", "desc").Limit(limits).Select()
+	}
+	if err != nil {
+		return data, 0, err
+	}
+	for _, v := range data {
+		endtime, err := time.Parse("2006-01-02 15:04:05", v["end_time"].(string))
+		if err != nil {
+			continue
+		}
+		v["end_day"] = strconv.FormatInt(int64(endtime.Sub(time.Now())/(24*time.Hour)), 10)
+	}
+	return data, int(count), nil
+}
+
+func AddCert(source, key, cert, issuer, issuerCert, domains, sha256, historyId, startTime, endTime, endDay string) error {
+	s, err := GetSqlite()
+	if err != nil {
+		return err
+	}
+	defer s.Close()
+	workflowId := ""
+	if historyId != "" {
+		s, err := public.NewSqlite("data/data.db", "")
+		if err != nil {
+			return err
+		}
+		s.Connect()
+		s.TableName = "workflow_history"
+		defer s.Close()
+		// 查询 workflowId
+		wh, err := s.Where("id=?", []interface{}{historyId}).Select()
+		if err != nil {
+			return err
+		}
+		if len(wh) > 0 {
+			workflowId = wh[0]["workflow_id"].(string)
+		}
+	}
+
+	now := time.Now().Format("2006-01-02 15:04:05")
+	_, err = s.Insert(map[string]any{
+		"source":      source,
+		"key":         key,
+		"cert":        cert,
+		"issuer":      issuer,
+		"issuer_cert": issuerCert,
+		"domains":     domains,
+		"sha256":      sha256,
+		"history_id":  historyId,
+		"workflow_id": workflowId,
+		"create_time": now,
+		"update_time": now,
+		"start_time":  startTime,
+		"end_time":    endTime,
+		"end_day":     endDay,
+	})
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func SaveCert(source, key, cert, issuerCert, historyId string) error {
+	if err := public.ValidateSSLCertificate(cert, key); err != nil {
+		return err
+	}
+
+	certObj, err := public.ParseCertificate([]byte(cert))
+	if err != nil {
+		return fmt.Errorf("解析证书失败: %v", err)
+	}
+	// SHA256
+	sha256, err := public.GetSHA256(cert)
+	if err != nil {
+		return fmt.Errorf("获取 SHA256 失败: %v", err)
+	}
+	if d, _ := GetCert(sha256); d != nil {
+		return nil
+	}
+
+	domainSet := make(map[string]bool)
+
+	if certObj.Subject.CommonName != "" {
+		domainSet[certObj.Subject.CommonName] = true
+	}
+	for _, dns := range certObj.DNSNames {
+		domainSet[dns] = true
+	}
+
+	// 转成切片并拼接成逗号分隔的字符串
+	var domains []string
+	for domain := range domainSet {
+		domains = append(domains, domain)
+	}
+	domainList := strings.Join(domains, ",")
+
+	// 提取 CA 名称（Issuer 的组织名）
+	caName := "UNKNOWN"
+	if len(certObj.Issuer.Organization) > 0 {
+		caName = certObj.Issuer.Organization[0]
+	} else if certObj.Issuer.CommonName != "" {
+		caName = certObj.Issuer.CommonName
+	}
+	// 证书有效期
+	startTime := certObj.NotBefore.Format("2006-01-02 15:04:05")
+	endTime := certObj.NotAfter.Format("2006-01-02 15:04:05")
+	endDay := fmt.Sprintf("%d", int(certObj.NotAfter.Sub(time.Now()).Hours()/24))
+
+	err = AddCert(source, key, cert, caName, issuerCert, domainList, sha256, historyId, startTime, endTime, endDay)
+	if err != nil {
+		return fmt.Errorf("保存证书失败: %v", err)
+	}
+	return nil
+}
+
+func UploadCert(key, cert string) error {
+	err := SaveCert("upload", key, cert, "", "")
+	if err != nil {
+		return fmt.Errorf("保存证书失败: %v", err)
+	}
+	return nil
+}
+
+func DelCert(id string) error {
+	s, err := GetSqlite()
+	if err != nil {
+		return err
+	}
+	defer s.Close()
+
+	_, err = s.Where("id=?", []interface{}{id}).Delete()
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func GetCert(id string) (map[string]string, error) {
+	s, err := GetSqlite()
+	if err != nil {
+		return nil, err
+	}
+	defer s.Close()
+
+	res, err := s.Where("id=? or sha256=?", []interface{}{id, id}).Select()
+	if err != nil {
+		return nil, err
+	}
+	if len(res) == 0 {
+		return nil, fmt.Errorf("证书不存在")
+	}
+
+	data := map[string]string{
+		"domains": res[0]["domains"].(string),
+		"cert":    res[0]["cert"].(string),
+		"key":     res[0]["key"].(string),
+	}
+
+	return data, nil
+}
+
+// ========================================================