From 8a215c492913d6d329a7b64229738d028c7489de Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Thu, 10 Oct 2024 15:20:34 +0200
Subject: [webinterface] Add simple API to remotely supply a certificate

---
 .../webinterface/templates/https.html              | 127 ++++++++++++++-------
 1 file changed, 85 insertions(+), 42 deletions(-)

(limited to 'modules-available/webinterface/templates/https.html')

diff --git a/modules-available/webinterface/templates/https.html b/modules-available/webinterface/templates/https.html
index 5198c299..dbffa9b7 100644
--- a/modules-available/webinterface/templates/https.html
+++ b/modules-available/webinterface/templates/https.html
@@ -1,57 +1,64 @@
-<form action="?do=WebInterface" method="post">
-	<input type="hidden" name="token" value="{{token}}">
-	<input type="hidden" name="action" value="https">
-	<div class="panel panel-default">
-		<div class="panel-heading">{{lang_httpsSettings}}</div>
-		<div class="panel-body">
-			<p>{{lang_httpsDescription}}</p>
-			{{^httpsUsed}}
+<div class="panel panel-default">
+	<div class="panel-heading">{{lang_httpsSettings}}</div>
+	<div class="panel-body">
+		<p>{{lang_httpsDescription}}</p>
+		{{^httpsUsed}}
 			<p>{{lang_youreNotUsingHttps}}</p>
-			{{/httpsUsed}}
-			{{#httpsUsed}}
+		{{/httpsUsed}}
+		{{#httpsUsed}}
 			<p>{{lang_youreUsingHttps}}</p>
-			{{/httpsUsed}}
-			<div class="text-info slx-bold">
-				{{#offSelected}}
+		{{/httpsUsed}}
+		<div class="text-info slx-bold">
+			{{#offSelected}}
 				<p>{{lang_offSelected}}</p>
-				{{/offSelected}}
-				{{#unknownSelected}}
+			{{/offSelected}}
+			{{#unknownSelected}}
 				<p>{{lang_unknownSelected}}</p>
-				{{/unknownSelected}}
-				{{#generatedSelected}}
+			{{/unknownSelected}}
+			{{#generatedSelected}}
 				<p>{{lang_generatedSelected}}</p>
-				{{/generatedSelected}}
-				{{#suppliedSelected}}
+			{{/generatedSelected}}
+			{{#suppliedSelected}}
 				<p>{{lang_suppliedSelected}}</p>
-				{{/suppliedSelected}}
-				{{#acmeSelected}}
-					<p>{{lang_acmeSelected}}</p>
-				{{/acmeSelected}}
-			</div>
-			<table class="slx-table">
+			{{/suppliedSelected}}
+			{{#acmeSelected}}
+				<p>{{lang_acmeSelected}}</p>
+			{{/acmeSelected}}
+		</div>
+		<table class="slx-table">
 			{{#certIssuer}}
-				<tr><td>{{lang_certIssuer}}:</td><td>{{.}}</td></tr>
+				<tr>
+					<td>{{lang_certIssuer}}:</td>
+					<td>{{.}}</td>
+				</tr>
 			{{/certIssuer}}
 			{{#certExpire}}
-				<tr><td>{{lang_certExpireTime}}:</td><td class="{{certExpireClass}}">{{.}}</td></tr>
+				<tr>
+					<td>{{lang_certExpireTime}}:</td>
+					<td class="{{certExpireClass}}">{{.}}</td>
+				</tr>
 			{{/certExpire}}
 			{{#certDomains.0}}
 				<tr>
 					<td style="vertical-align:top">{{lang_currentCertDomains}}:</td>
 					<td>
-					{{#certDomains}}
-						<div>{{.}}</div>
-					{{/certDomains}}
+						{{#certDomains}}
+							<div>{{.}}</div>
+						{{/certDomains}}
 					</td>
 				</tr>
 			{{/certDomains.0}}
-			</table>
+		</table>
 
+		<form action="?do=WebInterface" method="post">
+			<input type="hidden" name="token" value="{{token}}">
+			<input type="hidden" name="action" value="https">
 			<label>{{lang_generalHttpsOptions}}</label>
 			<div class="input-group row-select">
 				<span class="input-group-addon">
 					<span class="checkbox">
-						<input id="httpsredirect" type="checkbox" name="httpsredirect" value="on" {{redirect_checked}} {{perms.edit.https.disabled}}>
+						<input id="httpsredirect" type="checkbox" name="httpsredirect"
+								 value="on" {{redirect_checked}} {{perms.edit.https.disabled}}>
 						<label></label>
 					</span>
 				</span>
@@ -62,7 +69,8 @@
 			<div class="input-group row-select">
 				<span class="input-group-addon">
 					<span class="checkbox">
-						<input id="usehsts" type="checkbox" name="usehsts" value="on" {{hsts_checked}} {{perms.edit.https.disabled}}>
+						<input id="usehsts" type="checkbox" name="usehsts"
+								 value="on" {{hsts_checked}} {{perms.edit.https.disabled}}>
 						<label></label>
 					</span>
 				</span>
@@ -73,7 +81,8 @@
 			<div class="input-group row-select">
 				<span class="input-group-addon">
 					<span class="checkbox">
-						<input id="redirdomain" type="checkbox" name="redirdomain" value="on" {{redirdomain_checked}} {{perms.edit.https.disabled}}>
+						<input id="redirdomain" type="checkbox" name="redirdomain"
+								 value="on" {{redirdomain_checked}} {{perms.edit.https.disabled}}>
 						<label></label>
 					</span>
 				</span>
@@ -89,7 +98,8 @@
 				<div class="input-group row-select">
 				<span class="input-group-addon">
 					<span class="radio">
-						<input id="https-do-nothing" type="radio" name="mode" value="noop" {{perms.edit.https.disabled}} checked>
+						<input id="https-do-nothing" type="radio" name="mode" value="noop" {{perms.edit.https.disabled}}
+								 checked>
 						<label></label>
 					</span>
 				</span>
@@ -99,17 +109,17 @@
 				</div>
 
 				{{#httpsEnabled}}
-				<div class="input-group row-select">
+					<div class="input-group row-select">
 					<span class="input-group-addon">
 						<span class="radio">
 							<input id="moff" type="radio" name="mode" value="off" {{perms.edit.https.disabled}}>
 							<label></label>
 						</span>
 					</span>
-					<span class="form-control">
-						{{lang_noHttps}}
-					</span>
-				</div>
+						<span class="form-control">
+							{{lang_noHttps}}
+						</span>
+					</div>
 				{{/httpsEnabled}}
 
 				<div class="input-group row-select">
@@ -218,6 +228,39 @@ MIIFfTCCA...
 					{{lang_save}}
 				</button>
 			</div>
-		</div>
+		</form>
+		<div class="clearfix"></div>
+		<hr>
+		<h5 class="slx-bold">{{lang_httpsApiKey}}</h5>
+		<p>{{lang_httpsApiKeyDescription}}</p>
+		<form action="?do=WebInterface" method="post">
+			<input type="hidden" name="token" value="{{token}}">
+			<div class="input-group">
+				<span class="input-group-addon"><label for="https-api-key">{{lang_httpsCurrentApiKey}}</label></span>
+				<input class="form-control" type="text" id="https-api-key" readonly value="{{httpsApiKey}}">
+				<div class="input-group-btn">
+					<button type="submit" name="action" value="https-api-key-generate" class="btn btn-success {{perms.edit.https.disabled}}"
+							  {{#httpsApiKey}}data-confirm="{{lang_httpsApiKeyRegenerateConfirm}}"{{/httpsApiKey}}>
+						<span class="glyphicon glyphicon-refresh"></span>
+						{{lang_regenerate}}
+					</button>
+				</div>
+				<div class="input-group-btn">
+					<button type="submit" name="action" value="https-api-key-delete" class="btn btn-danger {{perms.edit.https.disabled}}"
+								{{#httpsApiKey}}data-confirm="{{lang_httpsApiKeyDeleteConfirm}}"{{/httpsApiKey}}>
+						<span class="glyphicon glyphicon-trash"></span>
+						{{lang_delete}}
+					</button>
+				</div>
+			</div>
+			<br>
+			<br>
+			{{lang_httpsApiPostText}}
+			<div class="slx-bold">{{httpsApiKeyPostUrl}}</div>
+			<br>
+			{{lang_httpsApiPostExample}}:
+			<div class="monospace">curl -L --data-urlencode &quot;token=123456&quot; --data-urlencode &quot;privkey@/path/to/privkey.pem&quot; --data-urlencode &quot;cert@/path/to/cert.pem&quot; &quot;{{httpsApiKeyPostUrl}}&quot;</div>
+			{{lang_httpsApiPostMaybeInsecure}}
+		</form>
 	</div>
-</form>
+</div>
-- 
cgit v1.2.3-55-g7522