mirror of
https://github.com/netcccyun/dnsmgr.git
synced 2026-06-23 00:13:58 +08:00
net909
268 lines
11 KiB
PHP
268 lines
11 KiB
PHP
<?php
|
|
|
|
namespace app\lib\deploy;
|
|
|
|
use app\lib\DeployInterface;
|
|
use app\lib\client\Volcengine;
|
|
use Exception;
|
|
|
|
class huoshan implements DeployInterface
|
|
{
|
|
private $logger;
|
|
private $AccessKeyId;
|
|
private $SecretAccessKey;
|
|
private $proxy;
|
|
|
|
public function __construct($config)
|
|
{
|
|
$this->AccessKeyId = $config['AccessKeyId'];
|
|
$this->SecretAccessKey = $config['SecretAccessKey'];
|
|
$this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
|
|
}
|
|
|
|
public function check()
|
|
{
|
|
if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'cdn', '2021-03-01', 'cn-north-1', $this->proxy);
|
|
$client->request('POST', 'ListCertInfo', ['Source' => 'volc_cert_center']);
|
|
return true;
|
|
}
|
|
|
|
public function deploy($fullchain, $privatekey, $config, &$info)
|
|
{
|
|
if ($config['product'] == 'live') {
|
|
$this->deploy_live($fullchain, $privatekey, $config);
|
|
} else {
|
|
$cert_id = $this->get_cert_id($fullchain, $privatekey);
|
|
if (!$cert_id) throw new Exception('获取证书ID失败');
|
|
$info['cert_id'] = $cert_id;
|
|
if (!isset($config['product']) || $config['product'] == 'cdn') {
|
|
$this->deploy_cdn($cert_id, $config);
|
|
} elseif ($config['product'] == 'dcdn') {
|
|
$this->deploy_dcdn($cert_id, $config);
|
|
} elseif ($config['product'] == 'tos') {
|
|
$this->deploy_tos($cert_id, $config);
|
|
} elseif ($config['product'] == 'imagex') {
|
|
$this->deploy_imagex($cert_id, $config);
|
|
} elseif ($config['product'] == 'clb') {
|
|
$this->deploy_clb($cert_id, $config);
|
|
} elseif ($config['product'] == 'alb') {
|
|
$this->deploy_alb($cert_id, $config);
|
|
} elseif ($config['product'] == 'vod') {
|
|
$this->deploy_vod($cert_id, $config);
|
|
}
|
|
}
|
|
}
|
|
|
|
private function deploy_cdn($cert_id, $config)
|
|
{
|
|
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'cdn.volcengineapi.com', 'cdn', '2021-03-01', 'cn-north-1', $this->proxy);
|
|
$param = [
|
|
'CertId' => $cert_id,
|
|
'Domain' => $config['domain'],
|
|
];
|
|
$data = $client->request('POST', 'BatchDeployCert', $param);
|
|
if (empty($data['DeployResult'])) throw new Exception('部署证书失败：DeployResult为空');
|
|
foreach ($data['DeployResult'] as $row) {
|
|
if ($row['Status'] == 'success') {
|
|
$this->log('CDN域名 ' . $row['Domain'] . ' 部署证书成功！');
|
|
} else {
|
|
$this->log('CDN域名 ' . $row['Domain'] . ' 部署证书失败：' . (isset($row['ErrorMsg']) ? $row['ErrorMsg'] : ''));
|
|
}
|
|
}
|
|
}
|
|
|
|
private function deploy_dcdn($cert_id, $config)
|
|
{
|
|
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'dcdn', '2021-04-01', 'cn-north-1', $this->proxy);
|
|
$param = [
|
|
'CertId' => $cert_id,
|
|
'DomainNames' => explode(',', $config['domain']),
|
|
];
|
|
$client->request('POST', 'CreateCertBind', $param);
|
|
$this->log('DCDN域名 ' . $config['domain'] . ' 部署证书成功！');
|
|
}
|
|
|
|
private function deploy_tos($cert_id, $config)
|
|
{
|
|
if (empty($config['bucket_domain'])) throw new Exception('Bucket域名不能为空');
|
|
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, $config['bucket_domain'], 'tos', '2021-04-01', 'cn-beijing', $this->proxy);
|
|
foreach (explode(',', $config['domain']) as $domain) {
|
|
if (empty($domain)) continue;
|
|
$param = [
|
|
'CustomDomainRule' => [
|
|
'Domain' => $domain,
|
|
'CertId' => $cert_id,
|
|
]
|
|
];
|
|
$query = ['customdomain' => ''];
|
|
$client->tos_request('PUT', $param, $query);
|
|
$this->log('对象存储域名 ' . $config['domain'] . ' 部署证书成功！');
|
|
}
|
|
}
|
|
|
|
private function deploy_live($fullchain, $privatekey, $config)
|
|
{
|
|
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
|
|
|
$certInfo = openssl_x509_parse($fullchain, true);
|
|
if (!$certInfo) throw new Exception('证书解析失败');
|
|
$cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
|
|
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'live.volcengineapi.com', 'live', '2023-01-01', 'cn-north-1', $this->proxy);
|
|
$param = [
|
|
'CertName' => $cert_name,
|
|
'Rsa' => [
|
|
'Pubkey' => $fullchain,
|
|
'Prikey' => $privatekey,
|
|
],
|
|
'UseWay' => 'https',
|
|
];
|
|
$result = $client->request('POST', 'CreateCert', $param);
|
|
$this->log('上传证书成功 ChainID=' . $result['ChainID']);
|
|
|
|
foreach (explode(',', $config['domain']) as $domain) {
|
|
if (empty($domain)) continue;
|
|
$param = [
|
|
'ChainID' => $result['ChainID'],
|
|
'Domain' => $domain,
|
|
'HTTPS' => true,
|
|
'HTTP2' => true,
|
|
];
|
|
$client->request('POST', 'BindCert', $param);
|
|
$this->log('视频直播域名 ' . $domain . ' 部署证书成功！');
|
|
}
|
|
}
|
|
|
|
private function deploy_vod($cert_id, $config)
|
|
{
|
|
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
|
if (empty($config['vod_space_name'])) throw new Exception('点播空间名称不能为空');
|
|
if (empty($config['vod_domain_type'])) throw new Exception('点播域名类型不能为空');
|
|
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'vod.volcengineapi.com', 'vod', '2023-07-01', 'cn-north-1', $this->proxy);
|
|
foreach (explode(',', $config['domain']) as $domain) {
|
|
if (empty($domain)) continue;
|
|
$param = [
|
|
'SpaceName' => $config['vod_space_name'],
|
|
'DomainType' => $config['vod_domain_type'],
|
|
'Domain' => $domain,
|
|
'Config' => [
|
|
'HTTPS' => [
|
|
'Switch' => true,
|
|
'CertInfo' => [
|
|
'CertId' => $cert_id,
|
|
],
|
|
],
|
|
],
|
|
];
|
|
$client->request('POST', 'UpdateDomainConfig', $param);
|
|
$this->log('视频点播域名 ' . $domain . ' 部署证书成功！');
|
|
}
|
|
}
|
|
|
|
private function deploy_imagex($cert_id, $config)
|
|
{
|
|
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'imagex.volcengineapi.com', 'imagex', '2018-08-01', 'cn-north-1', $this->proxy);
|
|
foreach (explode(',', $config['domain']) as $domain) {
|
|
if (empty($domain)) continue;
|
|
$param = [
|
|
[
|
|
'domain' => $domain,
|
|
'cert_id' => $cert_id,
|
|
]
|
|
];
|
|
$result = $client->request('POST', 'UpdateImageBatchDomainCert', $param);
|
|
if (isset($result['SuccessDomains']) && count($result['SuccessDomains']) > 0) {
|
|
$this->log('veImageX域名 ' . $domain . ' 部署证书成功！');
|
|
} elseif (isset($result['FailedDomains']) && count($result['FailedDomains']) > 0) {
|
|
$errmsg = $result['FailedDomains'][0]['ErrMsg'];
|
|
$this->log('veImageX域名 ' . $domain . ' 部署证书失败：' . $errmsg);
|
|
} else {
|
|
$this->log('veImageX域名 ' . $domain . ' 部署证书失败');
|
|
}
|
|
}
|
|
}
|
|
|
|
private function deploy_clb($cert_id, $config)
|
|
{
|
|
if (empty($config['listener_id'])) throw new Exception('监听器ID不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'clb', '2020-04-01', 'cn-beijing', $this->proxy);
|
|
$param = [
|
|
'ListenerId' => $config['listener_id'],
|
|
'CertificateSource' => 'cert_center',
|
|
'CertCenterCertificateId' => $cert_id,
|
|
];
|
|
$client->request('GET', 'ModifyListenerAttributes', $param);
|
|
$this->log('CLB监听器 ' . $config['listener_id'] . ' 部署证书成功！');
|
|
}
|
|
|
|
private function deploy_alb($cert_id, $config)
|
|
{
|
|
if (empty($config['listener_id'])) throw new Exception('监听器ID不能为空');
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'alb', '2020-04-01', 'cn-beijing', $this->proxy);
|
|
$param = [
|
|
'ListenerId' => $config['listener_id'],
|
|
'CertificateSource' => 'cert_center',
|
|
'CertCenterCertificateId' => $cert_id,
|
|
];
|
|
$client->request('GET', 'ModifyListenerAttributes', $param);
|
|
$this->log('ALB监听器 ' . $config['listener_id'] . ' 部署证书成功！');
|
|
}
|
|
|
|
private function get_cert_id($fullchain, $privatekey)
|
|
{
|
|
$certInfo = openssl_x509_parse($fullchain, true);
|
|
if (!$certInfo) throw new Exception('证书解析失败');
|
|
$cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
|
|
|
|
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'certificate-service.volcengineapi.com', 'certificate_service', '2024-10-01', 'cn-beijing', $this->proxy);
|
|
$param = [
|
|
'Tag' => $cert_name,
|
|
'Repeatable' => false,
|
|
'CertificateInfo' => [
|
|
'CertificateChain' => $fullchain,
|
|
'PrivateKey' => $privatekey,
|
|
],
|
|
];
|
|
try {
|
|
$data = $client->request('POST', 'ImportCertificate', $param);
|
|
} catch (Exception $e) {
|
|
throw new Exception('上传证书失败：' . $e->getMessage());
|
|
}
|
|
if (!empty($data['InstanceId'])) {
|
|
$cert_id = $data['InstanceId'];
|
|
$this->log('上传证书成功 CertId=' . $cert_id);
|
|
|
|
$param = [
|
|
'InstanceId' => $cert_id,
|
|
'Options' => [
|
|
'ExpiredNotice' => 'Disabled',
|
|
],
|
|
];
|
|
$client->request('POST', 'CertificateUpdateInstance', $param);
|
|
|
|
} else {
|
|
$cert_id = $data['RepeatId'];
|
|
$this->log('找到已上传的证书 CertId=' . $cert_id);
|
|
}
|
|
return $cert_id;
|
|
}
|
|
|
|
public function setLogger($func)
|
|
{
|
|
$this->logger = $func;
|
|
}
|
|
|
|
private function log($txt)
|
|
{
|
|
if ($this->logger) {
|
|
call_user_func($this->logger, $txt);
|
|
}
|
|
}
|
|
}
|