Kenneth Skovhede
07cd39af34
This PR adds support for generating a self-signed CA and then using that CA to generate TLS certificates. A new tool `duplicati-configure` / `Duplicati.CommandLine.ConfigureTool.exe` is added to manage the certificates. The tool saves the configuration in the database and is meant to run with elevated privileges for the initial CA installation. The option `--configure-https` can be added to server/trayicon, and if the process has permissions, this will automatically install the CA certificate. If a CA is configured, the server will automatically issue, renew and use a TLS certificate. With this setup, the TLS is opt-in, but once the flow is well tested, we can switch it to opt-out.
79 lines
3.1 KiB
C#
79 lines
3.1 KiB
C#
// Copyright (C) 2025, The Duplicati Team
|
|
// https://duplicati.com, hello@duplicati.com
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a
|
|
// copy of this software and associated documentation files (the "Software"),
|
|
// to deal in the Software without restriction, including without limitation
|
|
// the rights to use, copy, modify, merge, publish, distribute, sublicense,
|
|
// and/or sell copies of the Software, and to permit persons to whom the
|
|
// Software is furnished to do so, subject to the following conditions:
|
|
//
|
|
// The above copyright notice and this permission notice shall be included in
|
|
// all copies or substantial portions of the Software.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
|
|
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
|
|
// DEALINGS IN THE SOFTWARE.
|
|
|
|
using System.CommandLine;
|
|
using System.CommandLine.Builder;
|
|
using System.CommandLine.NamingConventionBinder;
|
|
using System.CommandLine.Parsing;
|
|
using Duplicati.CommandLine.ConfigureTool.Commands;
|
|
using Duplicati.Library.Interface;
|
|
|
|
namespace Duplicati.CommandLine.ConfigureTool;
|
|
|
|
/// <summary>
|
|
/// The main entry point for the ConfigureTool application.
|
|
/// </summary>
|
|
public static class Program
|
|
{
|
|
/// <summary>
|
|
/// The main entry point for the application.
|
|
/// </summary>
|
|
public static Task<int> Main(string[] args)
|
|
{
|
|
Library.AutoUpdater.PreloadSettingsLoader.ConfigurePreloadSettings(ref args, Library.AutoUpdater.PackageHelper.NamedExecutable.ConfigureTool);
|
|
|
|
var httpsCmd = new Command("https", "Manage HTTPS certificates for the Duplicati server")
|
|
{
|
|
HttpsCommand.CreateGenerateCommand(),
|
|
HttpsCommand.CreateRenewCommand(),
|
|
HttpsCommand.CreateRegenerateCaCommand(),
|
|
HttpsCommand.CreateRemoveCommand(),
|
|
HttpsCommand.CreateShowCommand(),
|
|
HttpsCommand.CreateExportCommand(),
|
|
HttpsCommand.CreateExportCaCommand()
|
|
};
|
|
|
|
var rootCmd = new RootCommand("Duplicati Configure Tool")
|
|
{
|
|
httpsCmd
|
|
};
|
|
|
|
return new CommandLineBuilder(rootCmd)
|
|
.UseDefaults()
|
|
.UseExceptionHandler((ex, context) =>
|
|
{
|
|
if (ex is UserInformationException userInformationException)
|
|
{
|
|
Console.WriteLine("ErrorID: {0}", userInformationException.HelpID);
|
|
Console.WriteLine("Message: {0}", userInformationException.Message);
|
|
context.ExitCode = 2;
|
|
}
|
|
else
|
|
{
|
|
Console.WriteLine("Exception: " + ex);
|
|
context.ExitCode = 1;
|
|
}
|
|
})
|
|
.Build()
|
|
.InvokeAsync(args);
|
|
}
|
|
}
|