uhttpd: support using OpenSSL for certificate generation
[openwrt/openwrt.git] / package / network / services / uhttpd / files / uhttpd.init
1 #!/bin/sh /etc/rc.common
2 # Copyright (C) 2010 Jo-Philipp Wich
3
4 START=50
5
6 USE_PROCD=1
7
8 UHTTPD_BIN="/usr/sbin/uhttpd"
9 PX5G_BIN="/usr/sbin/px5g"
10 OPENSSL_BIN="/usr/bin/openssl"
11
12 append_arg() {
13 local cfg="$1"
14 local var="$2"
15 local opt="$3"
16 local def="$4"
17 local val
18
19 config_get val "$cfg" "$var"
20 [ -n "$val" -o -n "$def" ] && procd_append_param command "$opt" "${val:-$def}"
21 }
22
23 append_bool() {
24 local cfg="$1"
25 local var="$2"
26 local opt="$3"
27 local def="$4"
28 local val
29
30 config_get_bool val "$cfg" "$var" "$def"
31 [ "$val" = 1 ] && procd_append_param command "$opt"
32 }
33
34 generate_keys() {
35 local cfg="$1"
36 local key="$2"
37 local crt="$3"
38 local days bits country state location commonname
39
40 config_get days "$cfg" days
41 config_get bits "$cfg" bits
42 config_get country "$cfg" country
43 config_get state "$cfg" state
44 config_get location "$cfg" location
45 config_get commonname "$cfg" commonname
46
47 # Prefer OpenSSL for certificate generation (existence evaluated last)
48 local GENKEY_CMD=""
49 [ -x "$PX5G_BIN" ] && GENKEY_CMD="$PX5G_BIN selfsigned -der"
50 [ -x "$OPENSSL_BIN" ] && GENKEY_CMD="$OPENSSL_BIN req -x509 -outform der -nodes"
51 [ -n "$GENKEY_CMD" ] && {
52 $GENKEY_CMD \
53 -days ${days:-730} -newkey rsa:${bits:-2048} -keyout "${UHTTPD_KEY}.new" -out "${UHTTPD_CERT}.new" \
54 -subj /C="${country:-DE}"/ST="${state:-Saxony}"/L="${location:-Leipzig}"/CN="${commonname:-Lede}"
55 sync
56 mv "${UHTTPD_KEY}.new" "${UHTTPD_KEY}"
57 mv "${UHTTPD_CERT}.new" "${UHTTPD_CERT}"
58 }
59 }
60
61 start_instance()
62 {
63 UHTTPD_CERT=""
64 UHTTPD_KEY=""
65
66 local cfg="$1"
67 local realm="$(uci_get system.@system[0].hostname)"
68 local listen http https interpreter indexes path handler
69
70 procd_open_instance
71 procd_set_param respawn
72 procd_set_param stderr 1
73 procd_set_param command "$UHTTPD_BIN" -f
74
75 append_arg "$cfg" home "-h"
76 append_arg "$cfg" realm "-r" "${realm:-OpenWrt}"
77 append_arg "$cfg" config "-c"
78 append_arg "$cfg" cgi_prefix "-x"
79 [ -f /usr/lib/uhttpd_lua.so ] && {
80 config_get handler "$cfg" lua_handler
81 [ -f "$handler" ] && append_arg "$cfg" lua_prefix "-l" && {
82 procd_append_param command "-L" "$handler"
83 }
84 }
85 [ -f /usr/lib/uhttpd_ubus.so ] && {
86 append_arg "$cfg" ubus_prefix "-u"
87 append_arg "$cfg" ubus_socket "-U"
88 append_bool "$cfg" ubus_cors "-X" 0
89 }
90 append_arg "$cfg" script_timeout "-t"
91 append_arg "$cfg" network_timeout "-T"
92 append_arg "$cfg" http_keepalive "-k"
93 append_arg "$cfg" tcp_keepalive "-A"
94 append_arg "$cfg" error_page "-E"
95 append_arg "$cfg" max_requests "-n" 3
96 append_arg "$cfg" max_connections "-N"
97
98 append_bool "$cfg" no_ubusauth "-a" 0
99 append_bool "$cfg" no_symlinks "-S" 0
100 append_bool "$cfg" no_dirlists "-D" 0
101 append_bool "$cfg" rfc1918_filter "-R" 0
102
103 config_get alias_list "$cfg" alias
104 for alias in $alias_list; do
105 procd_append_param command -y "$alias"
106 done
107
108 config_get http "$cfg" listen_http
109 for listen in $http; do
110 procd_append_param command -p "$listen"
111 done
112
113 config_get interpreter "$cfg" interpreter
114 for path in $interpreter; do
115 procd_append_param command -i "$path"
116 done
117
118 config_get indexes "$cfg" index_page
119 for path in $indexes; do
120 procd_append_param command -I "$path"
121 done
122
123 config_get https "$cfg" listen_https
124 config_get UHTTPD_KEY "$cfg" key /etc/uhttpd.key
125 config_get UHTTPD_CERT "$cfg" cert /etc/uhttpd.crt
126
127 [ -f /lib/libustream-ssl.so ] && [ -n "$https" ] && {
128 [ -s "$UHTTPD_CERT" -a -s "$UHTTPD_KEY" ] || {
129 config_foreach generate_keys cert
130 }
131
132 [ -f "$UHTTPD_CERT" -a -f "$UHTTPD_KEY" ] && {
133 append_arg "$cfg" cert "-C"
134 append_arg "$cfg" key "-K"
135
136 for listen in $https; do
137 procd_append_param command -s "$listen"
138 done
139 }
140
141 append_bool "$cfg" redirect_https "-q" 0
142 }
143
144 for file in /etc/uhttpd/*.json; do
145 [ -s "$file" ] && procd_append_param command -H "$file"
146 done
147
148 procd_close_instance
149 }
150
151 service_triggers()
152 {
153 procd_add_reload_trigger "uhttpd"
154 }
155
156 start_service() {
157 config_load uhttpd
158 config_foreach start_instance uhttpd
159 }