package cmd import ( "net" "strings" "time" "github.com/urfave/cli" "github.com/xenolf/lego/challenge" "github.com/xenolf/lego/challenge/dns01" "github.com/xenolf/lego/challenge/http01" "github.com/xenolf/lego/challenge/tlsalpn01" "github.com/xenolf/lego/lego" "github.com/xenolf/lego/log" "github.com/xenolf/lego/providers/dns" "github.com/xenolf/lego/providers/http/memcached" "github.com/xenolf/lego/providers/http/webroot" ) func setupChallenges(ctx *cli.Context, client *lego.Client) { if !ctx.GlobalBool("http") && !ctx.GlobalBool("tls") && !ctx.GlobalIsSet("dns") { log.Fatal("No challenge selected. You must specify at least one challenge: `--http`, `--tls`, `--dns`.") } if ctx.GlobalBool("http") { err := client.Challenge.SetHTTP01Provider(setupHTTPProvider(ctx)) if err != nil { log.Fatal(err) } } if ctx.GlobalBool("tls") { err := client.Challenge.SetTLSALPN01Provider(setupTLSProvider(ctx)) if err != nil { log.Fatal(err) } } if ctx.GlobalIsSet("dns") { setupDNS(ctx, client) } } func setupHTTPProvider(ctx *cli.Context) challenge.Provider { switch { case ctx.GlobalIsSet("http.webroot"): ps, err := webroot.NewHTTPProvider(ctx.GlobalString("http.webroot")) if err != nil { log.Fatal(err) } return ps case ctx.GlobalIsSet("http.memcached-host"): ps, err := memcached.NewMemcachedProvider(ctx.GlobalStringSlice("http.memcached-host")) if err != nil { log.Fatal(err) } return ps case ctx.GlobalIsSet("http.port"): iface := ctx.GlobalString("http.port") if !strings.Contains(iface, ":") { log.Fatalf("The --http switch only accepts interface:port or :port for its argument.") } host, port, err := net.SplitHostPort(iface) if err != nil { log.Fatal(err) } return http01.NewProviderServer(host, port) case ctx.GlobalBool("http"): return http01.NewProviderServer("", "") default: log.Fatal("Invalid HTTP challenge options.") return nil } } func setupTLSProvider(ctx *cli.Context) challenge.Provider { switch { case ctx.GlobalIsSet("tls.port"): iface := ctx.GlobalString("tls.port") if !strings.Contains(iface, ":") { log.Fatalf("The --tls switch only accepts interface:port or :port for its argument.") } host, port, err := net.SplitHostPort(iface) if err != nil { log.Fatal(err) } return tlsalpn01.NewProviderServer(host, port) case ctx.GlobalBool("tls"): return tlsalpn01.NewProviderServer("", "") default: log.Fatal("Invalid HTTP challenge options.") return nil } } func setupDNS(ctx *cli.Context, client *lego.Client) { provider, err := dns.NewDNSChallengeProviderByName(ctx.GlobalString("dns")) if err != nil { log.Fatal(err) } servers := ctx.GlobalStringSlice("dns.resolvers") err = client.Challenge.SetDNS01Provider(provider, dns01.CondOption(len(servers) > 0, dns01.AddRecursiveNameservers(dns01.ParseNameservers(ctx.GlobalStringSlice("dns.resolvers")))), dns01.CondOption(ctx.GlobalIsSet("dns.disable-cp"), dns01.DisableCompletePropagationRequirement()), dns01.CondOption(ctx.GlobalIsSet("dns-timeout"), dns01.AddDNSTimeout(time.Duration(ctx.GlobalInt("dns-timeout"))*time.Second)), ) if err != nil { log.Fatal(err) } }