229 lines
9.5 KiB
PHP
229 lines
9.5 KiB
PHP
<?php
|
||
|
||
namespace app\lib\deploy;
|
||
|
||
use app\lib\DeployInterface;
|
||
use app\lib\client\Volcengine;
|
||
use Exception;
|
||
|
||
class huoshan implements DeployInterface
|
||
{
|
||
private $logger;
|
||
private $AccessKeyId;
|
||
private $SecretAccessKey;
|
||
private $proxy;
|
||
|
||
public function __construct($config)
|
||
{
|
||
$this->AccessKeyId = $config['AccessKeyId'];
|
||
$this->SecretAccessKey = $config['SecretAccessKey'];
|
||
$this->proxy = isset($config['proxy']) ? $config['proxy'] == 1 : false;
|
||
}
|
||
|
||
public function check()
|
||
{
|
||
if (empty($this->AccessKeyId) || empty($this->SecretAccessKey)) throw new Exception('必填参数不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'cdn', '2021-03-01', 'cn-north-1', $this->proxy);
|
||
$client->request('POST', 'ListCertInfo', ['Source' => 'volc_cert_center']);
|
||
return true;
|
||
}
|
||
|
||
public function deploy($fullchain, $privatekey, $config, &$info)
|
||
{
|
||
if ($config['product'] == 'live') {
|
||
$this->deploy_live($fullchain, $privatekey, $config);
|
||
} else {
|
||
$cert_id = $this->get_cert_id($fullchain, $privatekey);
|
||
if (!$cert_id) throw new Exception('获取证书ID失败');
|
||
$info['cert_id'] = $cert_id;
|
||
if (!isset($config['product']) || $config['product'] == 'cdn') {
|
||
$this->deploy_cdn($cert_id, $config);
|
||
} elseif ($config['product'] == 'dcdn') {
|
||
$this->deploy_dcdn($cert_id, $config);
|
||
} elseif ($config['product'] == 'tos') {
|
||
$this->deploy_tos($cert_id, $config);
|
||
} elseif ($config['product'] == 'imagex') {
|
||
$this->deploy_imagex($cert_id, $config);
|
||
} elseif ($config['product'] == 'clb') {
|
||
$this->deploy_clb($cert_id, $config);
|
||
} elseif ($config['product'] == 'alb') {
|
||
$this->deploy_alb($cert_id, $config);
|
||
}
|
||
}
|
||
}
|
||
|
||
private function deploy_cdn($cert_id, $config)
|
||
{
|
||
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'cdn.volcengineapi.com', 'cdn', '2021-03-01', 'cn-north-1', $this->proxy);
|
||
$param = [
|
||
'CertId' => $cert_id,
|
||
'Domain' => $config['domain'],
|
||
];
|
||
$data = $client->request('POST', 'BatchDeployCert', $param);
|
||
if (empty($data['DeployResult'])) throw new Exception('部署证书失败：DeployResult为空');
|
||
foreach ($data['DeployResult'] as $row) {
|
||
if ($row['Status'] == 'success') {
|
||
$this->log('CDN域名 ' . $row['Domain'] . ' 部署证书成功！');
|
||
} else {
|
||
$this->log('CDN域名 ' . $row['Domain'] . ' 部署证书失败：' . (isset($row['ErrorMsg']) ? $row['ErrorMsg'] : ''));
|
||
}
|
||
}
|
||
}
|
||
|
||
private function deploy_dcdn($cert_id, $config)
|
||
{
|
||
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'dcdn', '2021-04-01', 'cn-north-1', $this->proxy);
|
||
$param = [
|
||
'CertId' => $cert_id,
|
||
'DomainNames' => explode(',', $config['domain']),
|
||
];
|
||
$client->request('POST', 'CreateCertBind', $param);
|
||
$this->log('DCDN域名 ' . $config['domain'] . ' 部署证书成功！');
|
||
}
|
||
|
||
private function deploy_tos($cert_id, $config)
|
||
{
|
||
if (empty($config['bucket_domain'])) throw new Exception('Bucket域名不能为空');
|
||
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, $config['bucket_domain'], 'tos', '2021-04-01', 'cn-beijing', $this->proxy);
|
||
foreach (explode(',', $config['domain']) as $domain) {
|
||
if (empty($domain)) continue;
|
||
$param = [
|
||
'CustomDomainRule' => [
|
||
'Domain' => $domain,
|
||
'CertId' => $cert_id,
|
||
]
|
||
];
|
||
$query = ['customdomain' => ''];
|
||
$client->tos_request('PUT', $param, $query);
|
||
$this->log('对象存储域名 ' . $config['domain'] . ' 部署证书成功！');
|
||
}
|
||
}
|
||
|
||
private function deploy_live($fullchain, $privatekey, $config)
|
||
{
|
||
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
||
|
||
$certInfo = openssl_x509_parse($fullchain, true);
|
||
if (!$certInfo) throw new Exception('证书解析失败');
|
||
$cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
|
||
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'live.volcengineapi.com', 'live', '2023-01-01', 'cn-north-1', $this->proxy);
|
||
$param = [
|
||
'CertName' => $cert_name,
|
||
'Rsa' => [
|
||
'Pubkey' => $fullchain,
|
||
'Prikey' => $privatekey,
|
||
],
|
||
'UseWay' => 'https',
|
||
];
|
||
$result = $client->request('POST', 'CreateCert', $param);
|
||
$this->log('上传证书成功 ChainID=' . $result['ChainID']);
|
||
|
||
foreach (explode(',', $config['domain']) as $domain) {
|
||
if (empty($domain)) continue;
|
||
$param = [
|
||
'ChainID' => $result['ChainID'],
|
||
'Domain' => $domain,
|
||
'HTTPS' => true,
|
||
'HTTP2' => true,
|
||
];
|
||
$client->request('POST', 'BindCert', $param);
|
||
$this->log('视频直播域名 ' . $domain . ' 部署证书成功！');
|
||
}
|
||
}
|
||
|
||
private function deploy_imagex($cert_id, $config)
|
||
{
|
||
if (empty($config['domain'])) throw new Exception('绑定的域名不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'imagex.volcengineapi.com', 'imagex', '2018-08-01', 'cn-north-1', $this->proxy);
|
||
foreach (explode(',', $config['domain']) as $domain) {
|
||
if (empty($domain)) continue;
|
||
$param = [
|
||
[
|
||
'domain' => $domain,
|
||
'cert_id' => $cert_id,
|
||
]
|
||
];
|
||
$result = $client->request('POST', 'UpdateImageBatchDomainCert', $param);
|
||
if (isset($result['SuccessDomains']) && count($result['SuccessDomains']) > 0) {
|
||
$this->log('veImageX域名 ' . $domain . ' 部署证书成功！');
|
||
} elseif (isset($result['FailedDomains']) && count($result['FailedDomains']) > 0) {
|
||
$errmsg = $result['FailedDomains'][0]['ErrMsg'];
|
||
$this->log('veImageX域名 ' . $domain . ' 部署证书失败：' . $errmsg);
|
||
} else {
|
||
$this->log('veImageX域名 ' . $domain . ' 部署证书失败');
|
||
}
|
||
}
|
||
}
|
||
|
||
private function deploy_clb($cert_id, $config)
|
||
{
|
||
if (empty($config['listener_id'])) throw new Exception('监听器ID不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'clb', '2020-04-01', 'cn-beijing', $this->proxy);
|
||
$param = [
|
||
'ListenerId' => $config['listener_id'],
|
||
'CertificateSource' => 'cert_center',
|
||
'CertCenterCertificateId' => $cert_id,
|
||
];
|
||
$client->request('GET', 'ModifyListenerAttributes', $param);
|
||
$this->log('CLB监听器 ' . $config['listener_id'] . ' 部署证书成功！');
|
||
}
|
||
|
||
private function deploy_alb($cert_id, $config)
|
||
{
|
||
if (empty($config['listener_id'])) throw new Exception('监听器ID不能为空');
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'alb', '2020-04-01', 'cn-beijing', $this->proxy);
|
||
$param = [
|
||
'ListenerId' => $config['listener_id'],
|
||
'CertificateSource' => 'cert_center',
|
||
'CertCenterCertificateId' => $cert_id,
|
||
];
|
||
$client->request('GET', 'ModifyListenerAttributes', $param);
|
||
$this->log('ALB监听器 ' . $config['listener_id'] . ' 部署证书成功！');
|
||
}
|
||
|
||
private function get_cert_id($fullchain, $privatekey)
|
||
{
|
||
$certInfo = openssl_x509_parse($fullchain, true);
|
||
if (!$certInfo) throw new Exception('证书解析失败');
|
||
$cert_name = str_replace('*.', '', $certInfo['subject']['CN']) . '-' . $certInfo['validFrom_time_t'];
|
||
|
||
$client = new Volcengine($this->AccessKeyId, $this->SecretAccessKey, 'open.volcengineapi.com', 'certificate_service', '2024-10-01', 'cn-beijing', $this->proxy);
|
||
$param = [
|
||
'Tag' => $cert_name,
|
||
'Repeatable' => false,
|
||
'CertificateInfo' => [
|
||
'CertificateChain' => $fullchain,
|
||
'PrivateKey' => $privatekey,
|
||
],
|
||
];
|
||
try {
|
||
$data = $client->request('POST', 'ImportCertificate', $param);
|
||
} catch (Exception $e) {
|
||
throw new Exception('上传证书失败：' . $e->getMessage());
|
||
}
|
||
if (!empty($data['InstanceId'])) {
|
||
$cert_id = $data['InstanceId'];
|
||
} else {
|
||
$cert_id = $data['RepeatId'];
|
||
}
|
||
$this->log('上传证书成功 CertId=' . $cert_id);
|
||
return $cert_id;
|
||
}
|
||
|
||
public function setLogger($func)
|
||
{
|
||
$this->logger = $func;
|
||
}
|
||
|
||
private function log($txt)
|
||
{
|
||
if ($this->logger) {
|
||
call_user_func($this->logger, $txt);
|
||
}
|
||
}
|
||
}
|