szakatsa/Automatic-Parking
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Certificate Manager?

Browse Source
This commit is contained in:
Szakáts Alpár
2025-08-17 16:13:39 +02:00
parent 947a1313c8
commit dee65c9ee4
9 changed files with 137 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Source/Automatic Parking.sln
View File

@@ -7,6 +7,8 @@ Project("{2150E333-8FDC-42A3-9474-1A3956D46DE8}") = "Solution Items", "Solution
compose.yaml = compose.yaml
EndProjectSection
EndProject
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "CertificateManager", "CertificateManager\CertificateManager.csproj", "{8118AB3F-CF86-4B17-9C0B-E27C37FCE638}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
@@ -17,5 +19,9 @@ Global
{93F01B86-2434-42E2-AE67-774BA61CFF7B}.Debug|Any CPU.Build.0 = Debug|Any CPU
{93F01B86-2434-42E2-AE67-774BA61CFF7B}.Release|Any CPU.ActiveCfg = Release|Any CPU
{93F01B86-2434-42E2-AE67-774BA61CFF7B}.Release|Any CPU.Build.0 = Release|Any CPU
{8118AB3F-CF86-4B17-9C0B-E27C37FCE638}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{8118AB3F-CF86-4B17-9C0B-E27C37FCE638}.Debug|Any CPU.Build.0 = Debug|Any CPU
{8118AB3F-CF86-4B17-9C0B-E27C37FCE638}.Release|Any CPU.ActiveCfg = Release|Any CPU
{8118AB3F-CF86-4B17-9C0B-E27C37FCE638}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
EndGlobal

24
Source/CertificateManager/CertificateManager.csproj Normal file
View File

@@ -0,0 +1,24 @@
<Project Sdk="Microsoft.NET.Sdk.Worker">
<PropertyGroup>
<TargetFramework>net10.0</TargetFramework>
<Nullable>enable</Nullable>
<ImplicitUsings>enable</ImplicitUsings>
<InvariantGlobalization>true</InvariantGlobalization>
<PublishAot>true</PublishAot>
<UserSecretsId>dotnet-CertificateManager-9dd1279b-a435-420b-b714-c1f017b1b0df</UserSecretsId>
<DockerDefaultTargetOS>Linux</DockerDefaultTargetOS>
</PropertyGroup>
<ItemGroup>
<PackageReference Include="Certes" Version="3.0.4" />
<PackageReference Include="Microsoft.Bcl.TimeProvider" Version="9.0.8" />
<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.0-preview.7.25380.108"/>
</ItemGroup>
<ItemGroup>
<Content Include="..\.dockerignore">
<Link>.dockerignore</Link>
</Content>
</ItemGroup>
</Project>

21
Source/CertificateManager/Dockerfile Normal file
View File

@@ -0,0 +1,21 @@
FROM mcr.microsoft.com/dotnet/runtime:10.0 AS base
USER $APP_UID
WORKDIR /app
FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
ARG BUILD_CONFIGURATION=Release
WORKDIR /src
COPY ["CertificateManager/CertificateManager.csproj", "CertificateManager/"]
RUN dotnet restore "CertificateManager/CertificateManager.csproj"
COPY . .
WORKDIR "/src/CertificateManager"
RUN dotnet build "./CertificateManager.csproj" -c $BUILD_CONFIGURATION -o /app/build
FROM build AS publish
ARG BUILD_CONFIGURATION=Release
RUN dotnet publish "./CertificateManager.csproj" -c $BUILD_CONFIGURATION -o /app/publish /p:UseAppHost=false
FROM base AS final
WORKDIR /app
COPY --from=publish /app/publish .
ENTRYPOINT ["dotnet", "CertificateManager.dll"]

3
Source/CertificateManager/Models/NameComCredentials.cs Normal file
View File

@@ -0,0 +1,3 @@
namespace CertificateManager.Models;
public record NameComCredentials(String Username, String APIToken, string Server = "https://api.name.com/v4");

10
Source/CertificateManager/Program.cs Normal file
View File

@@ -0,0 +1,10 @@
using CertificateManager;
var builder = Host.CreateApplicationBuilder(args);
builder.Services.AddHostedService<Worker>();
builder.Logging.ClearProviders();
builder.Logging.AddConsole();
var host = builder.Build();
host.Run();

12
Source/CertificateManager/Properties/launchSettings.json Normal file
View File

@@ -0,0 +1,12 @@
{
"$schema": "https://json.schemastore.org/launchsettings.json",
"profiles": {
"CertificateManager": {
"commandName": "Project",
"dotnetRunMessages": true,
"environmentVariables": {
"DOTNET_ENVIRONMENT": "Development"
}
}
}
}

45
Source/CertificateManager/Worker.cs Normal file
View File

@@ -0,0 +1,45 @@
using System.Diagnostics.CodeAnalysis;
using Certes;
using Certes.Acme;
using CertificateManager.Models;
namespace CertificateManager;
public class Worker(ILogger<Worker> logger, TimeProvider timeProvider, IConfiguration configuration) : BackgroundService
{
[UnconditionalSuppressMessage("Trimming", "IL2026:Members annotated with 'RequiresUnreferencedCodeAttribute' require dynamic access otherwise can break functionality when trimming application code", Justification = "<Pending>")]
protected override async Task ExecuteAsync(CancellationToken stoppingToken)
{
logger.LogTrace("Certificate manager started");
// Local keys and CA
string localDomain = configuration.GetValue("localDomain", "local");
string keysPath = configuration.GetValue("keys_path", "/Certificates/Keys");
string caPath = configuration.GetValue("ca_path", "/Certificates/CA");
string localPath = configuration.GetValue("local_wildcard_path", "/Certificates/Local");
// Real CA, real domain
string domain = configuration.GetValue("domain", "automatic-parking.app");
string wildcardPath = configuration.GetValue("wildcard_path", "/Certificates/Wildcard");
string acmeEmail = configuration.GetValue("acmeEmail", "");
logger.LogTrace("Acme email provided: {acmeEmail}", acmeEmail);
string nameComUsername = configuration.GetValue("nameComUsername", "");
string nameComToken = configuration.GetValue("nameComAPIToken", "");
string nameComServer = configuration.GetValue("nameComServer", "https://api.name.com/v4");
NameComCredentials nameComCredentials = new NameComCredentials(nameComUsername, nameComToken, nameComServer);
logger.LogTrace("Name.com credentials provided: {nameComUsername} (with token of {nameComTokenLength} characters)", nameComUsername, nameComToken.Length);
// Generate keys, CA and certificates
var keys = GenerateKeys(keysPath, "private.pem", "public.pem", "chain.pem");
var ca = CreateRootCA(keys, caPath, "private.pem", "public.pem");
var local = CreateWildcardCertificate(ca, localDomain, localPath, "private.pem", "public.pem", "chain.pem");
var external = AcquireWildcardCertificate(domain, nameComCredentials, wildcardPath, "private.pem", "public.pem", "chain.pem");
DateTimeOffset expiry = external.Expires;
logger.LogTrace("Wildcard certificate will expire on {expiry}", expiry);
await Task.CompletedTask;
}
}

8
Source/CertificateManager/appsettings.Development.json Normal file
View File

@@ -0,0 +1,8 @@
{
"Logging": {
"LogLevel": {
"Default": "Information",
"Microsoft.Hosting.Lifetime": "Information"
}
}
}

8
Source/CertificateManager/appsettings.json Normal file
View File

@@ -0,0 +1,8 @@
{
"Logging": {
"LogLevel": {
"Default": "Information",
"Microsoft.Hosting.Lifetime": "Information"
}
}
}