1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
#! /usr/bin/env perl
# Copyright 2012, Matthias Andreas Benkard <code@mail.matthias.benkard.de>.
package Net::MulkyID::Setup;
use common::sense;
use Modern::Perl;
use JSON;
use Crypt::OpenSSL::RSA;
use File::Slurp qw(write_file read_file);
use File::Path qw(make_path);
use File::Copy;
use LWP::Simple qw(getstore);
use Data::Dumper;
use base 'Exporter';
our @EXPORT = qw(setup);
sub prompt($$) {
my ($question, $default) = @_;
$|++;
print "${question} \[${default}\] ";
$_ = <>;
chomp;
if ($_) {
return $_;
} else {
return $default;
}
}
sub makespec($) {
my ($key) = @_;
my ($n, $e, @stuff) = $key->get_key_parameters;
return
encode_json({"public-key" => {e => $e->to_decimal, n => $n->to_decimal, algorithm => "RS"},
"authentication" => "/browserid/authenticate.html",
"provisioning" => "/browserid/provision.html"});
};
sub setup() {
my $conffile = "www/config.pl";
# Generate configuration file.
$::MULKONF = { };
if (stat($conffile)) {
say "Found existing configuration ($conffile).";
do $conffile;
}
my $configpath = $::MULKONF->{configpath} // "/etc/mulkyid";
$configpath = prompt("Where shall I put configuration files?", $configpath);
my $pemfile = $::MULKONF->{pemfile} // "$configpath/rsa2048.pem";
$pemfile = prompt("Where shall I put the private key?", $pemfile);
my $aliases_file = $::MULKONF->{aliases_file} // "/etc/aliases";
$aliases_file = prompt("Where is the aliases file? Type a single dot for none.", $aliases_file);
my $imap_server = $::MULKONF->{imap_server} // "localhost";
$imap_server = prompt("What is the IMAP server's address?", $imap_server);
my $imap_port = $::MULKONF->{imap_port} // 143;
$imap_port = int(prompt("What is the IMAP server's port?", $imap_port));
say "OK.";
# Download jQuery.
make_path("www/jquery");
if (stat("www/jquery/jquery.js")) {
say "Using existing copy of jQuery (www/jquery/jquery.js).";
} else {
say "Fetching jQuery...";
getstore("http://code.jquery.com/jquery-1.7.2.min.js", "www/jquery/jquery.js")
or die "Could not fetch jQuery";
say "jQuery saved to: www/jquery/jquery.js";
}
# Generate the private key.
my $key;
if (stat($pemfile)) {
say "Using existing private key ($pemfile).";
$key = Crypt::OpenSSL::RSA->new_private_key(scalar read_file($pemfile));
} else {
say "Generating private key...";
$key = Crypt::OpenSSL::RSA->generate_key(2048);
make_path($configpath);
write_file($pemfile, $key->get_private_key_string())
or die "Could not write private key to $pemfile: $!";
say "Private key saved to: $pemfile";
chmod 0440, $pemfile;
}
# Generate spec file.
write_file("browserid.json", makespec $key)
or die "Could not write spec to browserid.json: $!";
say "Persona spec file saved to: browserid.json";
# Generate configuration file.
$::MULKONF = {
configpath => $configpath,
pemfile => $pemfile,
aliases_file => $aliases_file,
imap_server => $imap_server,
imap_port => $imap_port
};
write_file($conffile, <<EOF
#! /usr/bin/env perl
# NB. Do not edit this file directly. It is overwritten with each run of setup.pl.
@{[Data::Dumper->Dump([$::MULKONF], ["::MULKONF"])]}
1;
EOF
) or die "Could not write configuration to $conffile: $!";
say "Configuration saved to: $conffile";
say "";
say "******************************************************************";
say "* FINISHED. *";
say "* *";
say "* Please put browserid.json where it will be served as *";
say "* https://<whatever>/.well-known/browserid *";
say "* with a content type of: *";
say "* application/json *";
say "* *";
say "* In addition, please ensure that the private key file can be *";
say "* read by the web server by assigning the file to the *";
say "* appropriate owner. *";
say "******************************************************************";
}
1;
|
