AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-23 16:05:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Bulk and Single Refresh certificate Actions

Browse Source
This commit is contained in:
johnnyq
2026-07-20 19:14:38 -04:00
parent e134c89c3a
commit d173357b51
2 changed files with 110 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
agent/certificates.php
View File

@@ -168,6 +168,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
<i class="fas fa-fw fa-layer-group mr-2"></i>Bulk Action (<span id="selectedCount">0</span>) <i class="fas fa-fw fa-layer-group mr-2"></i>Bulk Action (<span id="selectedCount">0</span>)
</button> </button>
<div class="dropdown-menu"> <div class="dropdown-menu">
<button class="dropdown-item"
type="submit" form="bulkActions" name="bulk_refresh_certificates">
<i class="fas fa-fw fa-sync-alt mr-2"></i>Refresh Certificates
</button>
<div class="dropdown-divider"></div>
<button class="dropdown-item text-danger text-bold" <button class="dropdown-item text-danger text-bold"
type="submit" form="bulkActions" name="bulk_delete_certificates"> type="submit" form="bulkActions" name="bulk_delete_certificates">
<i class="fas fa-fw fa-trash mr-2"></i>Delete <i class="fas fa-fw fa-trash mr-2"></i>Delete
@@ -300,6 +305,10 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
data-modal-url="modals/certificate/certificate_edit.php?<?= $client_url ?>&id=<?= $certificate_id ?>"> data-modal-url="modals/certificate/certificate_edit.php?<?= $client_url ?>&id=<?= $certificate_id ?>">
<i class="fas fa-fw fa-edit mr-2"></i>Edit <i class="fas fa-fw fa-edit mr-2"></i>Edit
</a> </a>
<div class="dropdown-divider"></div>
<a class="dropdown-item" href="post.php?refresh_certificate=<?php echo $certificate_id; ?>&csrf_token=<?= $_SESSION['csrf_token'] ?>">
<i class="fas fa-fw fa-sync-alt mr-2"></i>Refresh Certificate
</a>
<?php if ($session_user_role == 3) { ?> <?php if ($session_user_role == 3) { ?>
<?php if ($certificate_archived_at) { ?> <?php if ($certificate_archived_at) { ?>
<div class="dropdown-divider"></div> <div class="dropdown-divider"></div>

101
agent/post/certificate.php
View File

@@ -119,6 +119,46 @@ if (isset($_POST['edit_certificate'])) {
} }
if (isset($_GET['refresh_certificate'])) {
validateCSRFToken($_GET['csrf_token']);
enforceUserPermission('module_support', 2);
$certificate_id = intval($_GET['refresh_certificate']);
// Get Name, Domain and Client ID for lookup, logging and alert message
$sql = mysqli_query($mysqli,"SELECT certificate_name, certificate_domain, certificate_client_id FROM certificates WHERE certificate_id = $certificate_id");
$row = mysqli_fetch_assoc($sql);
$certificate_name = escapeSql($row['certificate_name']);
$certificate_domain = escapeSql($row['certificate_domain']);
$client_id = intval($row['certificate_client_id']);
enforceClientAccess();
// Get fresh certificate from the live host
$certificate = getSslCertificate($certificate_domain);
if ($certificate_domain && $certificate['success']) {
$expire = escapeSql($certificate['expire']);
$issued_by = escapeSql($certificate['issued_by']);
$public_key = escapeSql($certificate['public_key']);
mysqli_query($mysqli,"UPDATE certificates SET certificate_issued_by = '$issued_by', certificate_expire = '$expire', certificate_public_key = '$public_key' WHERE certificate_id = $certificate_id");
logAudit("Certificate", "Refresh", "$session_name refreshed certificate $certificate_name", $client_id, $certificate_id);
flashAlert("Refreshed certificate <strong>$certificate_name</strong>");
} else {
flashAlert("Could not retrieve a certificate for <strong>$certificate_name</strong>", 'error');
}
redirect();
}
if (isset($_GET['archive_certificate'])) { if (isset($_GET['archive_certificate'])) {
validateCSRFToken($_GET['csrf_token']); validateCSRFToken($_GET['csrf_token']);
@@ -197,6 +237,67 @@ if (isset($_GET['delete_certificate'])) {
} }
if (isset($_POST['bulk_refresh_certificates'])) {
validateCSRFToken($_POST['csrf_token']);
enforceUserPermission('module_support', 2);
if (isset($_POST['certificate_ids'])) {
// TLS lookups on dead hosts wait out a 5 sec timeout each - don't time out mid-batch
set_time_limit(0);
// Get Selected Count
$count = count($_POST['certificate_ids']);
$refreshed_count = 0;
// Cycle through array and refresh each record
foreach ($_POST['certificate_ids'] as $certificate_id) {
$certificate_id = intval($certificate_id);
// Get Name, Domain and Client ID for lookup, logging and alert message
$sql = mysqli_query($mysqli,"SELECT certificate_name, certificate_domain, certificate_client_id FROM certificates WHERE certificate_id = $certificate_id");
$row = mysqli_fetch_assoc($sql);
$certificate_name = escapeSql($row['certificate_name']);
$certificate_domain = escapeSql($row['certificate_domain']);
$client_id = intval($row['certificate_client_id']);
enforceClientAccess();
// Skip certificates without a domain to query (eg manually pasted keys)
if (!$certificate_domain) {
continue;
}
// Get fresh certificate from the live host
$certificate = getSslCertificate($certificate_domain);
if ($certificate['success']) {
$expire = escapeSql($certificate['expire']);
$issued_by = escapeSql($certificate['issued_by']);
$public_key = escapeSql($certificate['public_key']);
mysqli_query($mysqli,"UPDATE certificates SET certificate_issued_by = '$issued_by', certificate_expire = '$expire', certificate_public_key = '$public_key' WHERE certificate_id = $certificate_id");
logAudit("Certificate", "Refresh", "$session_name refreshed certificate $certificate_name", $client_id, $certificate_id);
$refreshed_count++;
}
}
logAudit("Certificate", "Bulk Refresh", "$session_name refreshed $refreshed_count certificate(s)", $client_id);
flashAlert("Refreshed <strong>$refreshed_count</strong> of <strong>$count</strong> certificate(s)");
}
redirect();
}
if (isset($_POST['bulk_delete_certificates'])) { if (isset($_POST['bulk_delete_certificates'])) {
validateCSRFToken($_POST['csrf_token']); validateCSRFToken($_POST['csrf_token']);