One Hat Cyber Team

Your IP: 216.73.216.5
Server IP: 148.72.208.212
Server: Linux 212.208.72.148.host.secureserver.net 3.10.0-1160.119.1.el7.tuxcare.els20.x86_64 #1 SMP Tue May 13 05:10:55 UTC 2025 x86_64
Server Software: Apache
PHP Version: 8.1.32
Buat File | Buat Folder

View File Name : gencrt

#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/gencrt                          Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

use strict;
## no critic qw(RequireUseWarnings) # TODO: Make this use warnings

use Sys::Hostname              ();
use Cpanel::Config::Contact    ();
use Cpanel::OpenSSL            ();
use Cpanel::SSLStorage::User   ();
use Cpanel::TempFile           ();
use Cpanel::SSL::Create        ();
use Cpanel::Validate::EmailRFC ();

alarm(1200);

my $hostname = Sys::Hostname::hostname();

my $now     = time();
my $gendate = localtime($now);
my $xemail  = $ARGV[0];
my $host    = $ARGV[1];
my $country = $ARGV[2];
my $state   = $ARGV[3];
my $city    = $ARGV[4];
my $co      = $ARGV[5];
my $cod     = $ARGV[6];
my $email   = $ARGV[7];
my $pass    = $ARGV[8];

if ( !-t STDIN && ( !$xemail || !$host || !$country || !$state || !$city || !$co || !$cod || !$email || !$pass ) ) {
    die "Can't get vars ... did you forget one of them ?";
}

my $contactemail = Cpanel::Config::Contact::get_public_contact();

my $send_key_yn;

#GenCRT script by cPanel, L.L.C.

if ( -t STDIN ) {
    print "[==========Generating an SSL Key, Certificate, and CSR=================]\n";
    print "Before we begin please tell me where to email the CSR to: ";
    $xemail = <STDIN>;
    $xemail =~ s/\n//g;
    die "Invalid Email address: $email, please re-enter" unless Cpanel::Validate::EmailRFC::is_valid($xemail);
    print "Enter the domain to make a certificate for: ";
    $host = <STDIN>;
    $host =~ s/\n//g;
    print "=*=*=Certificate Information=*=*=\n";
    print "Enter the Country Code (2 letters, e.g., US): ";
    $country = <STDIN>;
    $country =~ s/\n//g;
    print "Enter the State: ";
    $state = <STDIN>;
    $state =~ s/\n//g;
    print "Enter the City: ";
    $city = <STDIN>;
    $city =~ s/\n//g;
    print "Enter the Company Name: ";
    $co = <STDIN>;
    $co =~ s/\n//g;
    print "Enter the Company Division: ";
    $cod = <STDIN>;
    $cod =~ s/\n//g;
    print "Enter the Contact Email Address: ";
    $email = <STDIN>;
    $email =~ s/\n//g;
    die "Invalid Email address: $email, please re-enter" unless Cpanel::Validate::EmailRFC::is_valid($email);

    $pass = ' ';
    while ( length $pass < 4 ) {
        print "Enter a challenge password for the CSR (at least 4 characters): ";
        $pass = <STDIN>;
        $pass =~ s/\n//g;
    }

    print "\nWould you like the key emailed to you as well as the CSR?\nThis is only useful to install SSL onto a server other than this one;\nit is otherwise a security risk.\nIf you are unsure, indicate “no” by pressing ENTER.\n? ";
    $send_key_yn = <STDIN>;
    $send_key_yn = ( $send_key_yn =~ m{y}i ) ? 1 : 0;
}

#-------------------------------------------

$host = lc($host);

my $openssl = Cpanel::OpenSSL->new();
my $genkey  = $openssl->generate_key();

if ( !$genkey || !$genkey->{'status'} || !$genkey->{'stdout'} ) {
    die "Key generation failed: $genkey->{'stderr'}\n";
}
my $key = $genkey->{'stdout'};

if ( !-t STDIN ) {
    print "<table border=1><tr><td><b>KEY (RSA Key)</b><pre>";
    print qq{<textarea name=key cols=66 rows=23>};
}
print "$key\n";
if ( !-t STDIN ) {
    print qq{

}; print ""; } if ($send_key_yn) { open( SENDMAIL, "|/usr/sbin/sendmail -t" ); print SENDMAIL "To: $contactemail\n"; print SENDMAIL "To: $xemail\n"; print SENDMAIL "From: ssl\@$hostname\n"; print SENDMAIL "Subject: SSL RSA PRIVATE KEY for $host ($gendate)\n\n"; print SENDMAIL $key; close(SENDMAIL); } #--------------------------- my $csr; eval { $csr = Cpanel::SSL::Create::csr( key => $key, subject_names => [ [ dNSName => $host ], ], subject => [ [ countryName => $country ], [ emailAddress => $email ], [ localityName => $city ], [ organizationName => $co, ], [ organizationalUnitName => $cod ], [ stateOrProvinceName => $state ], ], ); } or die "Failed to generate the CSR: $@"; if ( !-t STDIN ) { print "

CSR (Certificate Signing Request)

";
    print qq{};
}
print "$csr\n\n";
if ( !-t STDIN ) {
    print qq{};
    print "

"; } open( SENDMAIL, "|/usr/sbin/sendmail -t" ); print SENDMAIL "To: $contactemail\n"; print SENDMAIL "To: $xemail\n"; print SENDMAIL "From: ssl\@$hostname\n"; print SENDMAIL "Subject: SSL CERTIFICATE SIGNING REQUEST for $host ($gendate)\n\n"; print SENDMAIL<new(); my ( $keyfile, $key_fh ) = $tf->file(); print {$key_fh} $key; close $key_fh; my $gen = $openssl->generate_cert( { 'keyfile' => $keyfile, 'country' => $country, 'state' => $state, 'city' => $city, 'company' => $co, 'division' => $cod, 'hostname' => $host, 'email' => $email, } ); die "$gen->{'stderr'}\n" if !$gen->{'status'}; $cert = $gen->{'stdout'}; } if ( !-t STDIN ) { print "

CRT (Self Signed Certificate)

";
    print qq{};
}
print $cert;
if ( !-t STDIN ) {
    print qq{};
    print "

"; } my ( $ok, $sslstorage ) = Cpanel::SSLStorage::User->new(); die "$sslstorage\n" if !$ok; my $err; ( $ok, $err ) = $sslstorage->add_key( 'text' => $key ); die "$err\n" if !$ok; ( $ok, $err ) = $sslstorage->add_certificate( 'text' => $cert ); die "$err\n" if !$ok; ( $ok, $err ) = $sslstorage->add_csr( 'text' => $csr ); die "$err\n" if !$ok;