浏览代码

Move tls function to be accessible to upgrade

Bob Mottram 7 年前
父节点
当前提交
8a88f5ff35
共有 2 个文件被更改,包括 39 次插入39 次删除
  1. 0
    39
      src/freedombone-base-email
  2. 39
    0
      src/freedombone-utils-web

+ 0
- 39
src/freedombone-base-email 查看文件

@@ -119,45 +119,6 @@ function email_create_template {
119 119
     fi
120 120
 }
121 121
 
122
-function email_install_tls {
123
-    tls_config_file=/etc/exim4/conf.d/main/03_exim4-config_tlsoptions
124
-    tls_auth_config_file=/etc/exim4/conf.d/auth/30_exim4-config_examples
125
-
126
-    if [ ! -f $tls_config_file ]; then
127
-        tls_config_file=/etc/exim4/exim4.conf.template
128
-        tls_auth_config_file=$tls_config_file
129
-    fi
130
-    if [ ! -f /etc/ssl/certs/exim.dhparam ]; then
131
-        ${PROJECT_NAME}-addcert -h exim --dhkey $DH_KEYLENGTH
132
-        check_certificates exim
133
-        cp /etc/ssl/certs/exim.dhparam /etc/exim4
134
-        chown root:Debian-exim /etc/exim4/exim.dhparam
135
-        chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
136
-    fi
137
-    if ! grep -q 'MAIN_TLS_ENABLE = true' $tls_config_file; then
138
-        sed -i "/.ifdef MAIN_HARDCODE_PRIMARY_HOSTNAME/i\MAIN_HARDCODE_PRIMARY_HOSTNAME =\nMAIN_TLS_ENABLE = true" $tls_config_file
139
-    fi
140
-    if ! grep -q "tls_on_connect_ports=465" $tls_config_file; then
141
-        sed -i '/SSL configuration for exim/i\tls_on_connect_ports=465' $tls_config_file
142
-    fi
143
-    if grep -q '# login_saslauthd_server' $tls_auth_config_file; then
144
-        sed -i '/login_saslauthd_server/,/.endif/ s/# *//' $tls_auth_config_file
145
-    fi
146
-    if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
147
-        if ! grep -q "MAIN_TLS_CERTKEY = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem" $tls_config_file; then
148
-            sed -i "/.ifdef MAIN_TLS_CERTKEY/i\MAIN_TLS_CERTKEY = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem" $tls_config_file
149
-        fi
150
-    fi
151
-    if [ -f /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key ]; then
152
-        if ! grep -q "MAIN_TLS_PRIVATEKEY = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key" $tls_config_file; then
153
-            sed -i "/.ifdef MAIN_TLS_PRIVATEKEY/i\MAIN_TLS_PRIVATEKEY = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key" $tls_config_file
154
-        fi
155
-    fi
156
-    if ! grep -q "SMTPLISTENEROPTIONS='-oX 465:25:587" /etc/default/exim4; then
157
-        sed -i "s|SMTPLISTENEROPTIONS=.*|SMTPLISTENEROPTIONS='-oX 465:25:587 -oP /var/run/exim4/exim.pid'|g" /etc/default/exim4
158
-    fi
159
-}
160
-
161 122
 function configure_email_onion {
162 123
     if [[ $(is_completed $FUNCNAME) == "1" ]]; then
163 124
         return

+ 39
- 0
src/freedombone-utils-web 查看文件

@@ -968,4 +968,43 @@ function install_composer {
968 968
     fi
969 969
 }
970 970
 
971
+function email_install_tls {
972
+    tls_config_file=/etc/exim4/conf.d/main/03_exim4-config_tlsoptions
973
+    tls_auth_config_file=/etc/exim4/conf.d/auth/30_exim4-config_examples
974
+
975
+    if [ ! -f $tls_config_file ]; then
976
+        tls_config_file=/etc/exim4/exim4.conf.template
977
+        tls_auth_config_file=$tls_config_file
978
+    fi
979
+    if [ ! -f /etc/ssl/certs/exim.dhparam ]; then
980
+        ${PROJECT_NAME}-addcert -h exim --dhkey $DH_KEYLENGTH
981
+        check_certificates exim
982
+        cp /etc/ssl/certs/exim.dhparam /etc/exim4
983
+        chown root:Debian-exim /etc/exim4/exim.dhparam
984
+        chmod 640 /etc/exim4/exim.key /etc/exim4/exim.crt /etc/exim4/exim.dhparam
985
+    fi
986
+    if ! grep -q 'MAIN_TLS_ENABLE = true' $tls_config_file; then
987
+        sed -i "/.ifdef MAIN_HARDCODE_PRIMARY_HOSTNAME/i\MAIN_HARDCODE_PRIMARY_HOSTNAME =\nMAIN_TLS_ENABLE = true" $tls_config_file
988
+    fi
989
+    if ! grep -q "tls_on_connect_ports=465" $tls_config_file; then
990
+        sed -i '/SSL configuration for exim/i\tls_on_connect_ports=465' $tls_config_file
991
+    fi
992
+    if grep -q '# login_saslauthd_server' $tls_auth_config_file; then
993
+        sed -i '/login_saslauthd_server/,/.endif/ s/# *//' $tls_auth_config_file
994
+    fi
995
+    if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
996
+        if ! grep -q "MAIN_TLS_CERTKEY = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem" $tls_config_file; then
997
+            sed -i "/.ifdef MAIN_TLS_CERTKEY/i\MAIN_TLS_CERTKEY = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem" $tls_config_file
998
+        fi
999
+    fi
1000
+    if [ -f /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key ]; then
1001
+        if ! grep -q "MAIN_TLS_PRIVATEKEY = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key" $tls_config_file; then
1002
+            sed -i "/.ifdef MAIN_TLS_PRIVATEKEY/i\MAIN_TLS_PRIVATEKEY = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key" $tls_config_file
1003
+        fi
1004
+    fi
1005
+    if ! grep -q "SMTPLISTENEROPTIONS='-oX 465:25:587" /etc/default/exim4; then
1006
+        sed -i "s|SMTPLISTENEROPTIONS=.*|SMTPLISTENEROPTIONS='-oX 465:25:587 -oP /var/run/exim4/exim.pid'|g" /etc/default/exim4
1007
+    fi
1008
+}
1009
+
971 1010
 # NOTE: deliberately no exit 0