[people/pmueller/ipfire-2.x.git] / html / cgi-bin / remote.cgi

#!/usr/bin/perl
###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007  Michael Tremer & Christian Schmidt                      #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

use strict;

# enable only the following on debugging purpose
#use warnings;
#use CGI::Carp 'fatalsToBrowser';

require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";

my %remotesettings=();
my %checked=();
my $errormessage='';
my $counter = 0;

&Header::showhttpheaders();

$remotesettings{'ENABLE_SSH'} = 'off';
$remotesettings{'ENABLE_SSH_PROTOCOL1'} = 'off';
$remotesettings{'ENABLE_SSH_PORTFW'} = 'off';
$remotesettings{'ACTION'} = '';
&Header::getcgihash(\%remotesettings);

if ( (($remotesettings{'ACTION'} eq $Lang::tr{'save'}) || ($remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'}) || ($remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'})) && $remotesettings{'ACTION'} ne "" )
{
	# not existing here indicates the box is unticked
	$remotesettings{'ENABLE_SSH_PASSWORDS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
	$remotesettings{'ENABLE_SSH_KEYS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_KEYS'};


	&General::writehash("${General::swroot}/remote/settings", \%remotesettings);
	if ($remotesettings{'ENABLE_SSH'} eq 'on')
	{
		&General::log($Lang::tr{'ssh is enabled'});
		if  ($remotesettings{'ENABLE_SSH_PASSWORDS'} eq 'off'
		 and $remotesettings{'ENABLE_SSH_KEYS'}      eq 'off')
		{
			$errormessage = $Lang::tr{'ssh no auth'};
		}
		system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
	}
	else
	{
		&General::log($Lang::tr{'ssh is disabled'});
		unlink "${General::swroot}/remote/enablessh";
	}

	if ($remotesettings{'ENABLE_SSH_PROTOCOL1'} eq 'on')
	{
		&General::log($Lang::tr{'ssh1 enabled'});
	}
	else
	{
		&General::log($Lang::tr{'ssh1 disabled'});
	}
if ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'} || $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'} ){
	if ($remotesettings{'ENABLE_SSH'} eq 'off')
	{
			system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
			system('/usr/local/bin/sshctrl');
	}
  if ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'} ) { $counter = 900;}
  elsif ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'} ) { $counter = 1800;}
 
  system("/usr/local/bin/sshctrl tempstart $counter >/dev/null");
 }
else {
	system('/usr/local/bin/sshctrl') == 0
		or $errormessage = "$Lang::tr{'bad return code'} " . $?/256;
 }
}

&General::readhash("${General::swroot}/remote/settings", \%remotesettings);

# not existing here means they're undefined and the default value should be
# used
	$remotesettings{'ENABLE_SSH_PASSWORDS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
	$remotesettings{'ENABLE_SSH_KEYS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_KEYS'};

$checked{'ENABLE_SSH'}{'off'} = '';
$checked{'ENABLE_SSH'}{'on'} = '';
$checked{'ENABLE_SSH'}{$remotesettings{'ENABLE_SSH'}} = "checked='checked'";
$checked{'ENABLE_SSH_PROTOCOL1'}{'off'} = '';
$checked{'ENABLE_SSH_PROTOCOL1'}{'on'} = '';
$checked{'ENABLE_SSH_PROTOCOL1'}{$remotesettings{'ENABLE_SSH_PROTOCOL1'}} = "checked='checked'";
$checked{'ENABLE_SSH_PORTFW'}{'off'} = '';
$checked{'ENABLE_SSH_PORTFW'}{'on'} = '';
$checked{'ENABLE_SSH_PORTFW'}{$remotesettings{'ENABLE_SSH_PORTFW'}} = "checked='checked'";
$checked{'ENABLE_SSH_PASSWORDS'}{'off'} = '';
$checked{'ENABLE_SSH_PASSWORDS'}{'on'} = '';
$checked{'ENABLE_SSH_PASSWORDS'}{$remotesettings{'ENABLE_SSH_PASSWORDS'}} = "checked='checked'";
$checked{'ENABLE_SSH_KEYS'}{'off'} = '';
$checked{'ENABLE_SSH_KEYS'}{'on'} = '';
$checked{'ENABLE_SSH_KEYS'}{$remotesettings{'ENABLE_SSH_KEYS'}} = "checked='checked'";


&Header::openpage($Lang::tr{'remote access'}, 1, '');

&Header::openbigbox('100%', 'left', '', $errormessage);

if ($errormessage) {
	&Header::openbox('100%', 'left', $Lang::tr{'error messages'});
	print "<FONT CLASS='base'>$errormessage&nbsp;</FONT>\n";
	&Header::closebox();
}

print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";

&Header::openbox('100%', 'left', 'SSH:');
print <<END
<table width='100%'>
<tr>
	<td><input type='checkbox' name='ENABLE_SSH' $checked{'ENABLE_SSH'}{'on'} /></td>
	<td class='base' colspan='2'>$Lang::tr{'ssh access'}</td>
</tr>
<tr>
	<td>&nbsp;</td>
	<td><input type='checkbox' name='ENABLE_SSH_PROTOCOL1' $checked{'ENABLE_SSH_PROTOCOL1'}{'on'} /></td>
	<td width='100%' class='base'>$Lang::tr{'ssh1 support'}</td>
</tr>
<tr>
	<td>&nbsp;</td>
	<td><input type='checkbox' name='ENABLE_SSH_PORTFW' $checked{'ENABLE_SSH_PORTFW'}{'on'} /></td>
	<td width='100%' class='base'>$Lang::tr{'ssh portfw'}</td>
</tr>
<tr>
	<td>&nbsp;</td>
	<td><input type='checkbox' name='ENABLE_SSH_PASSWORDS' $checked{'ENABLE_SSH_PASSWORDS'}{'on'} /></td>
	<td width='100%' class='base'>$Lang::tr{'ssh passwords'}</td>
</tr>
<tr>
	<td>&nbsp;</td>
	<td><input type='checkbox' name='ENABLE_SSH_KEYS' $checked{'ENABLE_SSH_KEYS'}{'on'} /></td>
	<td width='100%' class='base'>$Lang::tr{'ssh keys'}</td>
</tr>
<tr>
	<td align='center' colspan='3'><hr />
	<input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart15'}' />
	<input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart30'}' />
	<input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
</tr>
</table>
END
;
&Header::closebox();

print "</form>\n";

&Header::openbox('100%', 'left', $Lang::tr{'ssh host keys'});

print "<table>\n";

print <<END
<tr><td class='boldbase'><b>$Lang::tr{'ssh key'}</b></td>
    <td class='boldbase'><b>$Lang::tr{'ssh fingerprint'}</b></td>
    <td class='boldbase'><b>$Lang::tr{'ssh key size'}</b></td></tr>
END
;

&viewkey("/etc/ssh/ssh_host_key.pub","RSA1");
&viewkey("/etc/ssh/ssh_host_rsa_key.pub","RSA2");
&viewkey("/etc/ssh/ssh_host_dsa_key.pub","DSA");

print "</table>\n";

&Header::closebox();

&Header::closebigbox();

&Header::closepage();


sub viewkey
{
  my $key = $_[0];
  my $name = $_[1];

  if ( -e $key )
  {
    my @temp = split(/ /,`/usr/bin/ssh-keygen -l -f $key`);
    my $keysize = &Header::cleanhtml($temp[0],"y");
    my $fingerprint = &Header::cleanhtml($temp[1],"y");
    print "<tr><td>$key ($name)</td><td><code>$fingerprint</code></td><td align='center'>$keysize</td></tr>\n";
  }
}
Commit	Line	Data
ac1cfefa	1	#!/usr/bin/perl
70df8302 MT	2	###############################################################################
	3	# #
	4	# IPFire.org - A linux based firewall #
	5	# Copyright (C) 2007 Michael Tremer & Christian Schmidt #
	6	# #
	7	# This program is free software: you can redistribute it and/or modify #
	8	# it under the terms of the GNU General Public License as published by #
	9	# the Free Software Foundation, either version 3 of the License, or #
	10	# (at your option) any later version. #
	11	# #
	12	# This program is distributed in the hope that it will be useful, #
	13	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	14	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	15	# GNU General Public License for more details. #
	16	# #
	17	# You should have received a copy of the GNU General Public License #
	18	# along with this program. If not, see <http://www.gnu.org/licenses/>. #
	19	# #
	20	###############################################################################
ac1cfefa MT	21
	22	use strict;
	23
	24	# enable only the following on debugging purpose
	25	#use warnings;
	26	#use CGI::Carp 'fatalsToBrowser';
	27
986e08d9	28	require '/var/ipfire/general-functions.pl';
ac1cfefa MT	29	require "${General::swroot}/lang.pl";
	30	require "${General::swroot}/header.pl";
	31
	32	my %remotesettings=();
	33	my %checked=();
	34	my $errormessage='';
113cd628	35	my $counter = 0;
ac1cfefa MT	36
	37	&Header::showhttpheaders();
	38
	39	$remotesettings{'ENABLE_SSH'} = 'off';
	40	$remotesettings{'ENABLE_SSH_PROTOCOL1'} = 'off';
	41	$remotesettings{'ENABLE_SSH_PORTFW'} = 'off';
	42	$remotesettings{'ACTION'} = '';
	43	&Header::getcgihash(\%remotesettings);
	44
05c71989	45	if ( (($remotesettings{'ACTION'} eq $Lang::tr{'save'}) \|\| ($remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'}) \|\| ($remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'})) && $remotesettings{'ACTION'} ne "" )
ac1cfefa MT	46	{
	47	# not existing here indicates the box is unticked
	48	$remotesettings{'ENABLE_SSH_PASSWORDS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
	49	$remotesettings{'ENABLE_SSH_KEYS'} = 'off' unless exists $remotesettings{'ENABLE_SSH_KEYS'};
	50
	51
	52	&General::writehash("${General::swroot}/remote/settings", \%remotesettings);
	53	if ($remotesettings{'ENABLE_SSH'} eq 'on')
	54	{
	55	&General::log($Lang::tr{'ssh is enabled'});
	56	if ($remotesettings{'ENABLE_SSH_PASSWORDS'} eq 'off'
	57	and $remotesettings{'ENABLE_SSH_KEYS'} eq 'off')
	58	{
	59	$errormessage = $Lang::tr{'ssh no auth'};
	60	}
9833e7d8	61	system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
ac1cfefa MT	62	}
	63	else
	64	{
	65	&General::log($Lang::tr{'ssh is disabled'});
	66	unlink "${General::swroot}/remote/enablessh";
	67	}
	68
	69	if ($remotesettings{'ENABLE_SSH_PROTOCOL1'} eq 'on')
	70	{
	71	&General::log($Lang::tr{'ssh1 enabled'});
	72	}
	73	else
	74	{
	75	&General::log($Lang::tr{'ssh1 disabled'});
	76	}
113cd628 CS	77	if ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'} \|\| $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'} ){
	78	if ($remotesettings{'ENABLE_SSH'} eq 'off')
	79	{
	80	system ('/usr/bin/touch', "${General::swroot}/remote/enablessh");
	81	system('/usr/local/bin/sshctrl');
	82	}
	83	if ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart15'} ) { $counter = 900;}
	84	elsif ( $remotesettings{'ACTION'} eq $Lang::tr{'ssh tempstart30'} ) { $counter = 1800;}
	85
	86	system("/usr/local/bin/sshctrl tempstart $counter >/dev/null");
70db8683 CS	87	}
70db8683 CS	88	else {
900832fa	89	system('/usr/local/bin/sshctrl') == 0
ac1cfefa	90	or $errormessage = "$Lang::tr{'bad return code'} " . $?/256;
70db8683	91	}
ac1cfefa MT	92	}
	93
	94	&General::readhash("${General::swroot}/remote/settings", \%remotesettings);
	95
	96	# not existing here means they're undefined and the default value should be
	97	# used
	98	$remotesettings{'ENABLE_SSH_PASSWORDS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_PASSWORDS'};
	99	$remotesettings{'ENABLE_SSH_KEYS'} = 'on' unless exists $remotesettings{'ENABLE_SSH_KEYS'};
	100
	101	$checked{'ENABLE_SSH'}{'off'} = '';
	102	$checked{'ENABLE_SSH'}{'on'} = '';
	103	$checked{'ENABLE_SSH'}{$remotesettings{'ENABLE_SSH'}} = "checked='checked'";
	104	$checked{'ENABLE_SSH_PROTOCOL1'}{'off'} = '';
	105	$checked{'ENABLE_SSH_PROTOCOL1'}{'on'} = '';
	106	$checked{'ENABLE_SSH_PROTOCOL1'}{$remotesettings{'ENABLE_SSH_PROTOCOL1'}} = "checked='checked'";
	107	$checked{'ENABLE_SSH_PORTFW'}{'off'} = '';
	108	$checked{'ENABLE_SSH_PORTFW'}{'on'} = '';
	109	$checked{'ENABLE_SSH_PORTFW'}{$remotesettings{'ENABLE_SSH_PORTFW'}} = "checked='checked'";
	110	$checked{'ENABLE_SSH_PASSWORDS'}{'off'} = '';
	111	$checked{'ENABLE_SSH_PASSWORDS'}{'on'} = '';
	112	$checked{'ENABLE_SSH_PASSWORDS'}{$remotesettings{'ENABLE_SSH_PASSWORDS'}} = "checked='checked'";
	113	$checked{'ENABLE_SSH_KEYS'}{'off'} = '';
	114	$checked{'ENABLE_SSH_KEYS'}{'on'} = '';
	115	$checked{'ENABLE_SSH_KEYS'}{$remotesettings{'ENABLE_SSH_KEYS'}} = "checked='checked'";
	116
	117
	118	&Header::openpage($Lang::tr{'remote access'}, 1, '');
	119
	120	&Header::openbigbox('100%', 'left', '', $errormessage);
	121
	122	if ($errormessage) {
	123	&Header::openbox('100%', 'left', $Lang::tr{'error messages'});
	124	print "<FONT CLASS='base'>$errormessage </FONT>\n";
	125	&Header::closebox();
	126	}
	127
	128	print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>\n";
	129
	130	&Header::openbox('100%', 'left', 'SSH:');
	131	print <<END
	132	<table width='100%'>
	133	<tr>
	134	<td><input type='checkbox' name='ENABLE_SSH' $checked{'ENABLE_SSH'}{'on'} /></td>
	135	<td class='base' colspan='2'>$Lang::tr{'ssh access'}</td>
	136	</tr>
	137	<tr>
	138	<td> </td>
	139	<td><input type='checkbox' name='ENABLE_SSH_PROTOCOL1' $checked{'ENABLE_SSH_PROTOCOL1'}{'on'} /></td>
	140	<td width='100%' class='base'>$Lang::tr{'ssh1 support'}</td>
	141	</tr>
	142	<tr>
	143	<td> </td>
	144	<td><input type='checkbox' name='ENABLE_SSH_PORTFW' $checked{'ENABLE_SSH_PORTFW'}{'on'} /></td>
	145	<td width='100%' class='base'>$Lang::tr{'ssh portfw'}</td>
	146	</tr>
	147	<tr>
	148	<td> </td>
	149	<td><input type='checkbox' name='ENABLE_SSH_PASSWORDS' $checked{'ENABLE_SSH_PASSWORDS'}{'on'} /></td>
	150	<td width='100%' class='base'>$Lang::tr{'ssh passwords'}</td>
	151	</tr>
	152	<tr>
	153	<td> </td>
	154	<td><input type='checkbox' name='ENABLE_SSH_KEYS' $checked{'ENABLE_SSH_KEYS'}{'on'} /></td>
	155	<td width='100%' class='base'>$Lang::tr{'ssh keys'}</td>
156	</tr>
157	<tr>
bba7212c MT	158	<td align='center' colspan='3'><hr />
	159	<input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart15'}' />
	160	<input type='submit' name='ACTION' value='$Lang::tr{'ssh tempstart30'}' />
	161	<input type='submit' name='ACTION' value='$Lang::tr{'save'}' /></td>
ac1cfefa MT	162	</tr>
	163	</table>
	164	END
	165	;
	166	&Header::closebox();
	167
	168	print "</form>\n";
	169
	170	&Header::openbox('100%', 'left', $Lang::tr{'ssh host keys'});
	171
	172	print "<table>\n";
	173
	174	print <<END
	175	<tr><td class='boldbase'><b>$Lang::tr{'ssh key'}</b></td>
	176	<td class='boldbase'><b>$Lang::tr{'ssh fingerprint'}</b></td>
	177	<td class='boldbase'><b>$Lang::tr{'ssh key size'}</b></td></tr>
	178	END
	179	;
	180
	181	&viewkey("/etc/ssh/ssh_host_key.pub","RSA1");
	182	&viewkey("/etc/ssh/ssh_host_rsa_key.pub","RSA2");
	183	&viewkey("/etc/ssh/ssh_host_dsa_key.pub","DSA");
	184
	185	print "</table>\n";
	186
	187	&Header::closebox();
	188
	189	&Header::closebigbox();
	190
	191	&Header::closepage();
	192
	193
	194	sub viewkey
	195	{
	196	my $key = $_[0];
	197	my $name = $_[1];
	198
	199	if ( -e $key )
	200	{
	201	my @temp = split(/ /,`/usr/bin/ssh-keygen -l -f $key`);
	202	my $keysize = &Header::cleanhtml($temp[0],"y");
	203	my $fingerprint = &Header::cleanhtml($temp[1],"y");
	204	print "<tr><td>$key ($name)</td><td><code>$fingerprint</code></td><td align='center'>$keysize</td></tr>\n";
	205	}
	206	}