mirror of
https://github.com/internetee/registry.git
synced 2025-06-07 13:15:40 +02:00
240bcf7911
This functionality is manually tested. because of heavy reliance on server configuration and bash commands. Ruby OpenSSL library lacks a good way to manage revocation list programatically, which would be the best option to work with. We might still use command line tools in the end.
87 lines
2.3 KiB
Ruby
87 lines
2.3 KiB
Ruby
module Admin
|
|
class CertificatesController < BaseController
|
|
load_and_authorize_resource
|
|
before_action :set_certificate, :set_api_user, only: [:sign, :show, :download_csr, :download_crt, :revoke, :destroy]
|
|
|
|
def show;
|
|
end
|
|
|
|
def new
|
|
@api_user = ApiUser.find(params[:api_user_id])
|
|
@certificate = Certificate.new(api_user: @api_user)
|
|
end
|
|
|
|
def create
|
|
@api_user = ApiUser.find(params[:api_user_id])
|
|
|
|
crt = certificate_params[:crt].open.read if certificate_params[:crt]
|
|
csr = certificate_params[:csr].open.read if certificate_params[:csr]
|
|
|
|
@certificate = @api_user.certificates.build(csr: csr, crt: crt)
|
|
if @api_user.save
|
|
flash[:notice] = I18n.t('record_created')
|
|
redirect_to [:admin, @api_user, @certificate]
|
|
else
|
|
flash.now[:alert] = I18n.t('failed_to_create_record')
|
|
render 'new'
|
|
end
|
|
end
|
|
|
|
def destroy
|
|
if @certificate.revoke! && @certificate.destroy
|
|
flash[:notice] = I18n.t('record_deleted')
|
|
redirect_to admin_api_user_path(@api_user)
|
|
else
|
|
flash.now[:alert] = I18n.t('failed_to_delete_record')
|
|
render 'show'
|
|
end
|
|
end
|
|
|
|
def sign
|
|
if @certificate.sign!
|
|
flash[:notice] = I18n.t('record_updated')
|
|
redirect_to [:admin, @api_user, @certificate]
|
|
else
|
|
flash.now[:alert] = I18n.t('failed_to_update_record')
|
|
render 'show'
|
|
end
|
|
end
|
|
|
|
def revoke
|
|
if @certificate.revoke!
|
|
flash[:notice] = I18n.t('record_updated')
|
|
else
|
|
flash[:alert] = I18n.t('failed_to_update_record')
|
|
end
|
|
redirect_to [:admin, @api_user, @certificate]
|
|
end
|
|
|
|
def download_csr
|
|
send_data @certificate.csr, filename: "#{@api_user.username}.csr.pem"
|
|
end
|
|
|
|
def download_crt
|
|
send_data @certificate.crt, filename: "#{@api_user.username}.crt.pem"
|
|
end
|
|
|
|
private
|
|
|
|
def set_certificate
|
|
@certificate = Certificate.find(params[:id])
|
|
@csr = OpenSSL::X509::Request.new(@certificate.csr) if @certificate.csr
|
|
@crt = OpenSSL::X509::Certificate.new(@certificate.crt) if @certificate.crt
|
|
end
|
|
|
|
def set_api_user
|
|
@api_user = ApiUser.find(params[:api_user_id])
|
|
end
|
|
|
|
def certificate_params
|
|
if params[:certificate]
|
|
params.require(:certificate).permit(:crt, :csr)
|
|
else
|
|
{}
|
|
end
|
|
end
|
|
end
|
|
end
|