mirror of
https://github.com/go-acme/lego.git
synced 2025-07-05 14:59:04 +02:00
91 lines
2.1 KiB
Go
91 lines
2.1 KiB
Go
package http01
|
|
|
|
import (
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/go-acme/lego/v4/acme"
|
|
"github.com/go-acme/lego/v4/acme/api"
|
|
"github.com/go-acme/lego/v4/challenge"
|
|
"github.com/go-acme/lego/v4/log"
|
|
)
|
|
|
|
type ValidateFunc func(core *api.Core, domain string, chlng acme.Challenge) error
|
|
|
|
type ChallengeOption func(*Challenge) error
|
|
|
|
// SetDelay sets a delay between the start of the HTTP server and the challenge validation.
|
|
func SetDelay(delay time.Duration) ChallengeOption {
|
|
return func(chlg *Challenge) error {
|
|
chlg.delay = delay
|
|
return nil
|
|
}
|
|
}
|
|
|
|
// ChallengePath returns the URL path for the `http-01` challenge.
|
|
func ChallengePath(token string) string {
|
|
return "/.well-known/acme-challenge/" + token
|
|
}
|
|
|
|
type Challenge struct {
|
|
core *api.Core
|
|
validate ValidateFunc
|
|
provider challenge.Provider
|
|
delay time.Duration
|
|
}
|
|
|
|
func NewChallenge(core *api.Core, validate ValidateFunc, provider challenge.Provider, opts ...ChallengeOption) *Challenge {
|
|
chlg := &Challenge{
|
|
core: core,
|
|
validate: validate,
|
|
provider: provider,
|
|
}
|
|
|
|
for _, opt := range opts {
|
|
err := opt(chlg)
|
|
if err != nil {
|
|
log.Infof("challenge option error: %v", err)
|
|
}
|
|
}
|
|
|
|
return chlg
|
|
}
|
|
|
|
func (c *Challenge) SetProvider(provider challenge.Provider) {
|
|
c.provider = provider
|
|
}
|
|
|
|
func (c *Challenge) Solve(authz acme.Authorization) error {
|
|
domain := challenge.GetTargetedDomain(authz)
|
|
log.Infof("[%s] acme: Trying to solve HTTP-01", domain)
|
|
|
|
chlng, err := challenge.FindChallenge(challenge.HTTP01, authz)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Generate the Key Authorization for the challenge
|
|
keyAuth, err := c.core.GetKeyAuthorization(chlng.Token)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = c.provider.Present(authz.Identifier.Value, chlng.Token, keyAuth)
|
|
if err != nil {
|
|
return fmt.Errorf("[%s] acme: error presenting token: %w", domain, err)
|
|
}
|
|
defer func() {
|
|
err := c.provider.CleanUp(authz.Identifier.Value, chlng.Token, keyAuth)
|
|
if err != nil {
|
|
log.Warnf("[%s] acme: cleaning up failed: %v", domain, err)
|
|
}
|
|
}()
|
|
|
|
if c.delay > 0 {
|
|
time.Sleep(c.delay)
|
|
}
|
|
|
|
chlng.KeyAuthorization = keyAuth
|
|
return c.validate(c.core, domain, chlng)
|
|
}
|