126 lines
18 KiB
JavaScript
126 lines
18 KiB
JavaScript
|
"use strict";
|
||
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
||
|
|
const tslib_1 = require("tslib");
|
||
|
|
const path_1 = tslib_1.__importDefault(require("path"));
|
||
|
|
const fs_1 = require("fs");
|
||
|
|
const debug_1 = tslib_1.__importDefault(require("debug"));
|
||
|
|
const command_exists_1 = require("command-exists");
|
||
|
|
const shared_1 = require("./shared");
|
||
|
|
const utils_1 = require("../utils");
|
||
|
|
const user_interface_1 = tslib_1.__importDefault(require("../user-interface"));
|
||
|
|
const debug = debug_1.default('devcert:platforms:linux');
|
||
|
|
class LinuxPlatform {
|
||
|
|
constructor() {
|
||
|
|
this.FIREFOX_NSS_DIR = path_1.default.join(process.env.HOME, '.mozilla/firefox/*');
|
||
|
|
this.CHROME_NSS_DIR = path_1.default.join(process.env.HOME, '.pki/nssdb');
|
||
|
|
this.FIREFOX_BIN_PATH = '/usr/bin/firefox';
|
||
|
|
this.CHROME_BIN_PATH = '/usr/bin/google-chrome';
|
||
|
|
this.HOST_FILE_PATH = '/etc/hosts';
|
||
|
|
}
|
||
|
|
/**
|
||
|
|
* Linux is surprisingly difficult. There seems to be multiple system-wide
|
||
|
|
* repositories for certs, so we copy ours to each. However, Firefox does it's
|
||
|
|
* usual separate trust store. Plus Chrome relies on the NSS tooling (like
|
||
|
|
* Firefox), but uses the user's NSS database, unlike Firefox (which uses a
|
||
|
|
* separate Mozilla one). And since Chrome doesn't prompt the user with a GUI
|
||
|
|
* flow when opening certs, if we can't use certutil to install our certificate
|
||
|
|
* into the user's NSS database, we're out of luck.
|
||
|
|
*/
|
||
|
|
addToTrustStores(certificatePath, options = {}) {
|
||
|
|
return tslib_1.__awaiter(this, void 0, void 0, function* () {
|
||
|
|
debug('Adding devcert root CA to Linux system-wide trust stores');
|
||
|
|
// run(`sudo cp ${ certificatePath } /etc/ssl/certs/devcert.crt`);
|
||
|
|
utils_1.run('sudo', ['cp', certificatePath, '/usr/local/share/ca-certificates/devcert.crt']);
|
||
|
|
// run(`sudo bash -c "cat ${ certificatePath } >> /etc/ssl/certs/ca-certificates.crt"`);
|
||
|
|
utils_1.run('sudo', ['update-ca-certificates']);
|
||
|
|
if (this.isFirefoxInstalled()) {
|
||
|
|
// Firefox
|
||
|
|
debug('Firefox install detected: adding devcert root CA to Firefox-specific trust stores ...');
|
||
|
|
if (!command_exists_1.sync('certutil')) {
|
||
|
|
if (options.skipCertutilInstall) {
|
||
|
|
debug('NSS tooling is not already installed, and `skipCertutil` is true, so falling back to manual certificate install for Firefox');
|
||
|
|
shared_1.openCertificateInFirefox(this.FIREFOX_BIN_PATH, certificatePath);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
debug('NSS tooling is not already installed. Trying to install NSS tooling now with `apt install`');
|
||
|
|
utils_1.run('sudo', ['apt', 'install', 'libnss3-tools']);
|
||
|
|
debug('Installing certificate into Firefox trust stores using NSS tooling');
|
||
|
|
yield shared_1.closeFirefox();
|
||
|
|
yield shared_1.addCertificateToNSSCertDB(this.FIREFOX_NSS_DIR, certificatePath, 'certutil');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
debug('Firefox does not appear to be installed, skipping Firefox-specific steps...');
|
||
|
|
}
|
||
|
|
if (this.isChromeInstalled()) {
|
||
|
|
debug('Chrome install detected: adding devcert root CA to Chrome trust store ...');
|
||
|
|
if (!command_exists_1.sync('certutil')) {
|
||
|
|
user_interface_1.default.warnChromeOnLinuxWithoutCertutil();
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
yield shared_1.closeFirefox();
|
||
|
|
yield shared_1.addCertificateToNSSCertDB(this.CHROME_NSS_DIR, certificatePath, 'certutil');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
debug('Chrome does not appear to be installed, skipping Chrome-specific steps...');
|
||
|
|
}
|
||
|
|
});
|
||
|
|
}
|
||
|
|
removeFromTrustStores(certificatePath) {
|
||
|
|
try {
|
||
|
|
utils_1.run('sudo', ['rm', '/usr/local/share/ca-certificates/devcert.crt']);
|
||
|
|
utils_1.run('sudo', ['update-ca-certificates']);
|
||
|
|
}
|
||
|
|
catch (e) {
|
||
|
|
debug(`failed to remove ${certificatePath} from /usr/local/share/ca-certificates, continuing. ${e.toString()}`);
|
||
|
|
}
|
||
|
|
if (command_exists_1.sync('certutil')) {
|
||
|
|
if (this.isFirefoxInstalled()) {
|
||
|
|
shared_1.removeCertificateFromNSSCertDB(this.FIREFOX_NSS_DIR, certificatePath, 'certutil');
|
||
|
|
}
|
||
|
|
if (this.isChromeInstalled()) {
|
||
|
|
shared_1.removeCertificateFromNSSCertDB(this.CHROME_NSS_DIR, certificatePath, 'certutil');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
addDomainToHostFileIfMissing(domain) {
|
||
|
|
return tslib_1.__awaiter(this, void 0, void 0, function* () {
|
||
|
|
const trimDomain = domain.trim().replace(/[\s;]/g, '');
|
||
|
|
let hostsFileContents = fs_1.readFileSync(this.HOST_FILE_PATH, 'utf8');
|
||
|
|
if (!hostsFileContents.includes(trimDomain)) {
|
||
|
|
utils_1.sudoAppend(this.HOST_FILE_PATH, `127.0.0.1 ${trimDomain}\n`);
|
||
|
|
}
|
||
|
|
});
|
||
|
|
}
|
||
|
|
deleteProtectedFiles(filepath) {
|
||
|
|
shared_1.assertNotTouchingFiles(filepath, 'delete');
|
||
|
|
utils_1.run('sudo', ['rm', '-rf', filepath]);
|
||
|
|
}
|
||
|
|
readProtectedFile(filepath) {
|
||
|
|
return tslib_1.__awaiter(this, void 0, void 0, function* () {
|
||
|
|
shared_1.assertNotTouchingFiles(filepath, 'read');
|
||
|
|
return (yield utils_1.run('sudo', ['cat', filepath])).toString().trim();
|
||
|
|
});
|
||
|
|
}
|
||
|
|
writeProtectedFile(filepath, contents) {
|
||
|
|
return tslib_1.__awaiter(this, void 0, void 0, function* () {
|
||
|
|
shared_1.assertNotTouchingFiles(filepath, 'write');
|
||
|
|
if (fs_1.existsSync(filepath)) {
|
||
|
|
yield utils_1.run('sudo', ['rm', filepath]);
|
||
|
|
}
|
||
|
|
fs_1.writeFileSync(filepath, contents);
|
||
|
|
yield utils_1.run('sudo', ['chown', '0', filepath]);
|
||
|
|
yield utils_1.run('sudo', ['chmod', '600', filepath]);
|
||
|
|
});
|
||
|
|
}
|
||
|
|
isFirefoxInstalled() {
|
||
|
|
return fs_1.existsSync(this.FIREFOX_BIN_PATH);
|
||
|
|
}
|
||
|
|
isChromeInstalled() {
|
||
|
|
return fs_1.existsSync(this.CHROME_BIN_PATH);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
exports.default = LinuxPlatform;
|
||
|
|
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibGludXguanMiLCJzb3VyY2VSb290IjoiLi8iLCJzb3VyY2VzIjpbInBsYXRmb3Jtcy9saW51eC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSx3REFBd0I7QUFDeEIsMkJBQTRGO0FBQzVGLDBEQUFnQztBQUNoQyxtREFBdUQ7QUFDdkQscUNBQXFKO0FBQ3JKLG9DQUEyQztBQUUzQywrRUFBbUM7QUFHbkMsTUFBTSxLQUFLLEdBQUcsZUFBVyxDQUFDLHlCQUF5QixDQUFDLENBQUM7QUFFckQsTUFBcUIsYUFBYTtJQUFsQztRQUVVLG9CQUFlLEdBQUcsY0FBSSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksRUFBRSxvQkFBb0IsQ0FBQyxDQUFDO1FBQ3BFLG1CQUFjLEdBQUcsY0FBSSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLElBQUksRUFBRSxZQUFZLENBQUMsQ0FBQztRQUMzRCxxQkFBZ0IsR0FBRyxrQkFBa0IsQ0FBQztRQUN0QyxvQkFBZSxHQUFHLHdCQUF3QixDQUFDO1FBRTNDLG1CQUFjLEdBQUcsWUFBWSxDQUFDO0lBd0d4QyxDQUFDO0lBdEdDOzs7Ozs7OztPQVFHO0lBQ0csZ0JBQWdCLENBQUMsZUFBdUIsRUFBRSxVQUFtQixFQUFFOztZQUVuRSxLQUFLLENBQUMsMERBQTBELENBQUMsQ0FBQztZQUNsRSxrRUFBa0U7WUFDbEUsV0FBRyxDQUFDLE1BQU0sRUFBRSxDQUFDLElBQUksRUFBRSxlQUFlLEVBQUUsOENBQThDLENBQUMsQ0FBQyxDQUFDO1lBQ3JGLHdGQUF3RjtZQUN4RixXQUFHLENBQUMsTUFBTSxFQUFFLENBQUMsd0JBQXdCLENBQUMsQ0FBQyxDQUFDO1lBRXhDLElBQUksSUFBSSxDQUFDLGtCQUFrQixFQUFFLEVBQUU7Z0JBQzdCLFVBQVU7Z0JBQ1YsS0FBSyxDQUFDLHVGQUF1RixDQUFDLENBQUM7Z0JBQy9GLElBQUksQ0FBQyxxQkFBYSxDQUFDLFVBQVUsQ0FBQyxFQUFFO29CQUM5QixJQUFJLE9BQU8sQ0FBQyxtQkFBbUIsRUFBRTt3QkFDL0IsS0FBSyxDQUFDLDZIQUE2SCxDQUFDLENBQUM7d0JBQ3JJLGlDQUF3QixDQUFDLElBQUksQ0FBQyxnQkFBZ0IsRUFBRSxlQUFlLENBQUMsQ0FBQztxQkFDbEU7eUJBQU07d0JBQ0wsS0FBSyxDQUFDLDRGQUE0RixDQUFDLENBQUM7d0JBQ3BHLFdBQUcsQ0FBQyxNQUFNLEVBQUcsQ0FBQyxLQUFLLEVBQUUsU0FBUyxFQUFFLGVBQWUsQ0FBQyxDQUFDLENBQUM7d0JBQ2xELEtBQUssQ0FBQyxvRUFBb0UsQ0FBQyxDQUFDO3dCQUM1RSxNQUFNLHFCQUFZLEVBQUUsQ0FBQzt3QkFDckIsTUFBTSxrQ0FBeUIsQ0FBQyxJQUFJLENBQUMsZUFBZSxFQUFFLGVBQWUsRUFBRSxVQUFVLENBQUMsQ0FBQztxQkFDcEY7aUJBQ0Y7YUFDRjtpQkFBTTtnQkFDTCxLQUFLLENBQUMsNkVBQTZFLENBQUMsQ0FBQzthQUN0RjtZQUVELElBQUksSUFBSSxDQUFDLGlCQUFpQixFQUFFLEVBQUU7Z0JBQzVCLEtBQUssQ0FBQywyRUFBMkUsQ0FBQyxDQUFDO2dCQUNuRixJQUFJLENBQUMscUJBQWEsQ0FBQyxVQUFVLENBQUMsRUFBRTtvQkFDOUIsd0JBQUUsQ0FBQyxnQ0FBZ0MsRUFBRSxDQUFDO2lCQUN2QztxQkFBTTtvQkFDTCxNQUFNLHFCQUFZLEVBQUUsQ0FBQztvQkFDckIsTUFBTSxrQ0FBeUIsQ0FBQyxJQUFJLENBQUMsY0FBYyxFQUFFLGVBQWUsRUFBRSxVQUFVLENBQUMsQ0FBQztpQkFDbkY7YUFDRjtpQkFBTTtnQkFDTCxLQUFLLENBQUMsMkVBQTJFLENBQUMsQ0FBQzthQUNwRjtRQUNILENBQUM7S0FBQTtJQUVELHFCQUFxQixDQUFDLGVBQXVCO1FBQzNDLElBQUk7WUFDRixXQUFHLENBQUMsTUFBTSxFQUFFLENBQUMsSUFBSSxFQUFFLDhDQUE4QyxDQUFDLENBQUMsQ0FBQztZQUNwRSxXQUFHLENBQUMsTUFBTSxFQUFFLENBQUMsd0JBQXdCLENBQUMsQ0FBQyxDQUFDO1NBQ3pDO1FBQUMsT0FBTyxDQUFDLEVBQUU7WUFDVixLQUFLLENBQUMsb0JBQXFCLGVBQWdCLHVEQUF3RCxDQUFDLENBQUMsUUFBUSxFQUFHLEVBQUUsQ0FBQyxDQUFDO1NBQ3JIO1FBQ0QsSUFBSSxxQkFBYSxDQUFDLFVBQVUsQ0FBQyxFQUFFO1lBQzdCLElBQUksSUFBSSxDQUFDLGtCQUFrQixFQUFFLEVBQUU7Z0JBQzdCLHVDQUE4QixDQUFDLElBQUksQ0FBQyxlQUFlLEVBQUUsZUFBZSxFQUFFLFVBQVUsQ0FBQyxDQUFDO2FBQ25GO1lBQ0QsSUFBSSxJQUFJLENBQUMsaUJBQWlCLEVBQUUsRUFBRTtnQkFDNUIsdUNBQThCLENBQUMsSUFBSSxDQUFDLGNBQWMsRUFBRSxlQUFlLEVBQUUsVUFBVSxDQUFDLENBQUM7YUFDbEY7U0FDRjtJQUNILENBQUM7SUFFSyw0QkFBNEIsQ0FBQyxNQUFjOztZQUMvQyxNQUFNLFVBQVUsR0FBRyxNQUFNLENBQUMsSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLFFBQVEsRUFBQyxFQUFFLENBQUMsQ0FBQTtZQUNyRCxJQUFJLGlCQUFpQixHQUFHLGlCQUFJLENBQUMsSUFBSSxDQUFDLGNBQWMsRUFBRSxNQUFNLENBQUMsQ0FBQztZQUMxRCxJQUFJLENBQUMsaUJBQWlCLENBQUMsUUFBUSxDQUFDLFVBQVUsQ0FBQyxFQUFFO2dCQUMzQyxrQkFBVSxDQUFDLElBQUksQ0FBQyxjQUFjLEVBQUUsYUFBYSxVQUFVLElBQUksQ0FBQyxDQUFDO2FBQzlEO1FBQ0gsQ0FBQztLQUFBO0lBRUQsb0JBQW9CLENBQUMsUUFBZ0I7UUFDbkMsK0JBQXNCLENBQUMsUUFBUSxFQUFFLFFBQVEsQ0FBQyxDQUFDO1FBQzNDLFdBQUcsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxJQUFJLEVBQUUsS0FBSyxFQUFFLFFBQVEsQ0FBQyxDQUFDLENBQUM7SUFDdkMsQ0FBQztJQUVLLGlCQUFpQixDQUFDLFFBQWdCOztZQUN0QywrQkFBc0IsQ0FBQyxRQUFRLEVBQUUsTUFBTSxDQUFDLENBQUM7WUFDekMsT0FBTyxDQUFDLE1BQU0sV0FBRyxDQUFDLE1BQU0sRUFBRSxDQUFDLEtBQUssRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDLENBQUMsUUFBUSxFQUFFLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDbEUsQ0FBQztLQUFBO0lBRUssa0JBQWtCLENBQUMsUUFBZ0IsRUFBRSxRQUFnQjs7WUFDekQsK0JBQXNCLENBQUMsUUFBUSxFQUFFLE9BQU8sQ0FBQyxDQUFDO1lBQzFDLElBQUksZUFBTSxDQUFDLFFBQVEsQ0FBQyxFQUFFO2dCQUNwQixNQUFNLFdBQUcsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxJQUFJLEVBQUUsUUFBUSxDQUFDLENBQUMsQ0FBQzthQUNyQztZQUNELGtCQUFTL
|