From a7a98ca15780af36d475f70087595862d9477716 Mon Sep 17 00:00:00 2001
From: Axolotle <nchesnais@mailoo.org>
Date: Thu, 6 Aug 2020 17:39:02 +0200
Subject: [PATCH] add DomainCert view

---
 app/src/locales/en.json             |   3 +
 app/src/routes.js                   |  15 ++-
 app/src/views/domain/DomainCert.vue | 185 ++++++++++++++++++++++++++++
 app/src/views/domain/DomainInfo.vue |   2 +-
 app/src/views/domain/index.js       |   1 +
 5 files changed, 204 insertions(+), 2 deletions(-)
 create mode 100644 app/src/views/domain/DomainCert.vue

diff --git a/app/src/locales/en.json b/app/src/locales/en.json
index 40450b80..eb1dcce1 100644
--- a/app/src/locales/en.json
+++ b/app/src/locales/en.json
@@ -231,6 +231,9 @@
         "groupname": "My group name",
         "domain": "my-domain.com"
     },
+    "pluralized": {
+        "day_validity": " Expired | 1 day | {count} days"
+    },
     "logs": "Logs",
     "logs_operation": "Operations made on system with YunoHost",
     "logs_history": "History of command run on system",
diff --git a/app/src/routes.js b/app/src/routes.js
index 964bb557..6bcc92db 100644
--- a/app/src/routes.js
+++ b/app/src/routes.js
@@ -2,7 +2,7 @@ import Home from './views/Home'
 import Login from './views/Login'
 import { UserList, UserCreate, UserInfo, UserEdit } from './views/user'
 import { GroupList, GroupCreate } from './views/group'
-import { DomainList, DomainAdd, DomainInfo, DomainDns } from './views/domain'
+import { DomainList, DomainAdd, DomainInfo, DomainDns, DomainCert } from './views/domain'
 
 const routes = [
   { name: 'home', path: '/', component: Home },
@@ -129,6 +129,19 @@ const routes = [
         { name: 'domain-dns', trad: 'dns' }
       ]
     }
+  },
+  {
+    name: 'domain-cert',
+    path: '/domains/:name/cert-management',
+    component: DomainCert,
+    props: true,
+    meta: {
+      breadcrumb: [
+        { name: 'domain-list', trad: 'domains' },
+        { name: 'domain-info', param: 'name' },
+        { name: 'domain-cert', trad: 'certificate' }
+      ]
+    }
   }
 ]
 
diff --git a/app/src/views/domain/DomainCert.vue b/app/src/views/domain/DomainCert.vue
new file mode 100644
index 00000000..8bb152de
--- /dev/null
+++ b/app/src/views/domain/DomainCert.vue
@@ -0,0 +1,185 @@
+<template>
+  <div class="domain-cert" v-if="cert">
+    <b-card class="mb-3">
+      <template v-slot:header>
+        <h2><icon iname="lock" /> {{ $t('certificate_status') }}</h2>
+      </template>
+
+      <p :class="'alert alert-' + cert.alert.type">
+        <icon :iname="cert.alert.icon" /> {{ $t('certificate_alert_' + cert.alert.trad) }}
+      </p>
+
+      <dl class="dl-horizontal">
+        <dt v-t="'certificate_authority'" />
+        <dd>{{ cert.type }} ({{ name }})</dd>
+        <hr>
+        <dt v-t="'validity'" />
+        <dd>{{ $tc('pluralized.day_validity', cert.validity) }}</dd>
+      </dl>
+    </b-card>
+
+    <b-card>
+      <template v-slot:header>
+        <h2><icon iname="wrench" /> {{ $t('operations') }}</h2>
+      </template>
+
+      <!-- CERT INSTALL LETSENCRYPT -->
+      <template v-if="actionsEnabled.installLetsencrypt">
+        <p>
+          <icon :iname="cert.acmeEligible ? 'check' : 'meh-o'" /> <span v-html="$t(`domain_${cert.acmeEligible ? 'is' : 'not'}_eligible_for_ACME`)" />
+        </p>
+        <b-button
+          variant="success" :disabled="!cert.acmeEligible"
+          @click="action = 'install_LE'" v-b-modal.action-confirm-modal
+        >
+          <icon iname="star" /> {{ $t('install_letsencrypt_cert') }}
+        </b-button>
+        <hr>
+      </template>
+
+      <!-- CERT RENEW LETS-ENCRYPT -->
+      <template v-if="actionsEnabled.manualRenewLetsencrypt">
+        <p v-t="'manually_renew_letsencrypt_message'" />
+        <b-button variant="warning" @click="action = 'manual_renew_LE'" v-b-modal.action-confirm-modal>
+          <icon iname="refresh" /> {{ $t('manually_renew_letsencrypt') }}
+        </b-button>
+        <hr>
+      </template>
+
+      <!-- CERT REGEN SELF-SIGNED -->
+      <template v-if="actionsEnabled.regenSelfsigned">
+        <p v-t="'regenerate_selfsigned_cert_message'" />
+        <b-button variant="warning" @click="action = 'regen_selfsigned'" v-b-modal.action-confirm-modal>
+          <icon iname="refresh" /> {{ $t('regenerate_selfsigned_cert') }}
+        </b-button>
+        <hr>
+      </template>
+
+      <!-- CERT REPLACE WITH SELF-SIGNED -->
+      <template v-if="actionsEnabled.replaceWithSelfsigned">
+        <p v-t="'revert_to_selfsigned_cert_message'" />
+        <b-button variant="danger" @click="action = 'revert_to_selfsigned'" v-b-modal.action-confirm-modal>
+          <icon iname="exclamation-triangle" /> {{ $t('revert_to_selfsigned_cert') }}
+        </b-button>
+        <hr>
+      </template>
+    </b-card>
+
+    <!-- ACTIONS CONFIRMATION MODAL -->
+    <b-modal
+      v-if="action"
+      id="action-confirm-modal" centered
+      body-bg-variant="danger" body-text-variant="light"
+      @ok="callAction" hide-header
+    >
+      {{ $t(`confirm_cert_${action}`) }}
+    </b-modal>
+  </div>
+</template>
+
+<script>
+import api from '@/helpers/api'
+
+export default {
+  name: 'DomainCert',
+  props: {
+    name: {
+      type: String,
+      required: true
+    }
+  },
+
+  data () {
+    return {
+      cert: undefined,
+      actionsEnabled: undefined,
+      action: undefined
+    }
+  },
+
+  methods: {
+    fetchData () {
+      // simply use the api helper since we will not store the request's result.
+      api.get(`domains/cert-status/${this.name}?full`).then((data) => {
+        const certData = data.certificates[this.name]
+
+        const cert = {
+          type: certData.CA_type.verbose,
+          name: certData.CA_name,
+          validity: certData.validity,
+          acmeEligible: certData.ACME_eligible
+        }
+
+        switch (certData.summary.code) {
+          case 'critical':
+            cert.alert = { type: 'danger', trad: 'not_valid', icon: 'exclamation-circle' }
+            break
+          case 'warning':
+            cert.alert = { type: 'warning', trad: 'selfsigned', icon: 'exclamation-triangle' }
+            break
+          case 'attention':
+            if (cert.type === 'lets-encrypt') {
+              cert.alert = { type: 'warning', trad: 'letsencrypt_about_to_expire', icon: 'clock-o' }
+            } else {
+              cert.alert = { type: 'danger', trad: 'about_to_expire', icon: 'clock-o' }
+            }
+            break
+          case 'good':
+            cert.alert = { type: 'success', trad: 'good', icon: 'check-circle' }
+            break
+          case 'great':
+            cert.alert = { type: 'success', trad: 'great', icon: 'thumbs-up' }
+            break
+          default:
+            cert.alert = { type: 'warning', trad: 'unknown', icon: 'question' }
+        }
+
+        const actionsEnabled = {
+          installLetsencrypt: false,
+          manualRenewLetsencrypt: false,
+          regenSelfsigned: false,
+          replaceWithSelfsigned: false
+        }
+
+        switch (certData.CA_type.code) {
+          case 'self-signed':
+            actionsEnabled.installLetsencrypt = true
+            actionsEnabled.regenSelfsigned = true
+            break
+          case 'lets-encrypt':
+            actionsEnabled.manualRenewLetsencrypt = true
+            actionsEnabled.replaceWithSelfsigned = true
+            break
+          default:
+            actionsEnabled.replaceWithSelfsigned = true
+        }
+
+        this.action = undefined
+        this.cert = cert
+        this.actionsEnabled = actionsEnabled
+      })
+    },
+
+    callAction () {
+      const action = this.action
+      let uri = 'domains/cert-install/' + this.name
+      if (action === 'regen_selfsigned') uri += '?self_signed'
+      else if (action === 'manual_renew_LE') uri += '?force'
+      else if (action === 'revert_to_selfsigned') uri += '?self_signed&force'
+
+      api.post(uri, {}).then(response => {
+        this.fetchData()
+      }).catch(() => {
+        // FIXME api POST calls seems to always return null, error or not
+      })
+    }
+  },
+
+  created () {
+    this.fetchData()
+  }
+}
+</script>
+
+<style lang="scss" scoped>
+</style>
diff --git a/app/src/views/domain/DomainInfo.vue b/app/src/views/domain/DomainInfo.vue
index 3ed09b94..e83dec45 100644
--- a/app/src/views/domain/DomainInfo.vue
+++ b/app/src/views/domain/DomainInfo.vue
@@ -34,7 +34,7 @@
 
       <!-- SSL CERTIFICATE -->
       <p>{{ $t('certificate_manage') }}</p>
-      <b-button :to="{ name: 'domain-certificate', param: { name } }">
+      <b-button :to="{ name: 'domain-cert', param: { name } }">
         <icon iname="lock" /> {{ $t('ssl_certificate') }}
       </b-button>
       <hr>
diff --git a/app/src/views/domain/index.js b/app/src/views/domain/index.js
index 16de9143..f9ef28ec 100644
--- a/app/src/views/domain/index.js
+++ b/app/src/views/domain/index.js
@@ -2,3 +2,4 @@ export { default as DomainList } from './DomainList'
 export { default as DomainAdd } from './DomainAdd'
 export { default as DomainInfo } from './DomainInfo'
 export { default as DomainDns } from './DomainDns'
+export { default as DomainCert } from './DomainCert'