Ajout : shell.heureux-cyclage.org .
authorjulm <julm@ateliers.heureux-cyclage.org>
Fri, 9 Aug 2013 12:39:47 +0000 (14:39 +0200)
committerJulien Moutinho <julm+git@heureux-cyclage.org>
Fri, 9 Aug 2013 14:10:54 +0000 (16:10 +0200)
24 files changed:
.gitignore [new file with mode: 0644]
etc/nginx/site.d/shell/http.conf [new file with mode: 0644]
etc/nginx/site.d/shell/local.conf [new file with mode: 0644]
etc/nginx/site.d/shell/local.sh [new file with mode: 0644]
etc/nginx/site.d/shell/remote.sh [new file with mode: 0644]
etc/nginx/site.d/shell/site.conf [new file with mode: 0644]
etc/nginx/site.d/shell/x509_host [new file with mode: 0644]
etc/openssl/shell.heureux-cyclage.org/host.cfg [new file with mode: 0644]
etc/openssl/shell.heureux-cyclage.org/host.sh [new file with mode: 0644]
etc/openssl/shell.heureux-cyclage.org/user.cfg [new file with mode: 0644]
etc/shellinabox/00+Font.css [new file with mode: 0644]
etc/shellinabox/fix-firefox-keyboard.diff [new file with mode: 0644]
etc/sv/shellinabox/local.sh [new file with mode: 0644]
etc/sv/shellinabox/run [new file with mode: 0755]
lib/tool/sh [new submodule]
var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.num [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.num.old [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.pem [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/crt+crl.self-signed.pem [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem.asc [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/idx.self-signed.txt [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/idx.txt [new file with mode: 0644]
var/pub/x509/shell.heureux-cyclage.org/req.pem [new file with mode: 0644]

diff --git a/.gitignore b/.gitignore
new file mode 100644 (file)
index 0000000..1377554
--- /dev/null
@@ -0,0 +1 @@
+*.swp
diff --git a/etc/nginx/site.d/shell/http.conf b/etc/nginx/site.d/shell/http.conf
new file mode 100644 (file)
index 0000000..ade4125
--- /dev/null
@@ -0,0 +1,12 @@
+server {
+       listen 80;
+       server_name
+        shell.heureux-cyclage.org;
+       
+       return 301 https://$host$request_uri;
+ }
+upstream shell {
+       server 127.0.0.1:4200
+        fail_timeout=300s
+        weight=1;
+ }
diff --git a/etc/nginx/site.d/shell/local.conf b/etc/nginx/site.d/shell/local.conf
new file mode 100644 (file)
index 0000000..95a008b
--- /dev/null
@@ -0,0 +1,6 @@
+listen 443;
+include /etc/nginx/conf.d/ssl.conf;
+ssl_certificate        /etc/nginx/x509.d/shell/crt.pem;
+ssl_certificate_key    /etc/nginx/x509.d/shell/key.pem;
+ssl_client_certificate /etc/nginx/x509.d/shell/user-crt.pem;
+ssl_session_timeout 5m;
diff --git a/etc/nginx/site.d/shell/local.sh b/etc/nginx/site.d/shell/local.sh
new file mode 100644 (file)
index 0000000..a9cac4c
--- /dev/null
@@ -0,0 +1,13 @@
+hint="run before: remote/runit-configure nginx -- $site"
+assert "sudo test -f /etc/nginx/x509.d/\"$site\"/key.pem" hint
+
+sudo install -m 664 -o www -g www \
+ "$tool"/var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem \
+ /etc/nginx/x509.d/"$site"/crt.pem
+sudo install -m 664 -o www -g www \
+ "$tool"/var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem \
+ /etc/nginx/x509.d/"$site"/user-crt.pem
+
+find "$tool"/etc/shellinabox/ -type f -name '*.css' \
+ -exec sudo install -m 644 -o root -g root \
+ -t /etc/shellinabox/options-available/ {} +
diff --git a/etc/nginx/site.d/shell/remote.sh b/etc/nginx/site.d/shell/remote.sh
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/etc/nginx/site.d/shell/site.conf b/etc/nginx/site.d/shell/site.conf
new file mode 100644 (file)
index 0000000..854ddc6
--- /dev/null
@@ -0,0 +1,30 @@
+server_name
+ shell.heureux-cyclage.org;
+
+client_body_buffer_size 1024k;
+client_max_body_size 10m;
+
+proxy_buffers 16 64k;
+proxy_buffer_size 128k;
+
+location ~ /\. {
+       access_log off;
+       deny all;
+       log_not_found off;
+ }
+location / {
+       auth_basic "ni dieu, ni maitre, ni moteur";
+       auth_basic_user_file /etc/shellinabox/htpasswd;
+       proxy_next_upstream error timeout
+        invalid_header
+        http_500
+        http_502
+        http_503;
+               # NOTE: force timeouts if the backend dies.
+       proxy_pass http://shell;
+       proxy_redirect off;
+               # NOTE: by default, do not forward anything
+       proxy_read_timeout 500;
+ }
+
+# vim: ft=sh
diff --git a/etc/nginx/site.d/shell/x509_host b/etc/nginx/site.d/shell/x509_host
new file mode 100644 (file)
index 0000000..9b03225
--- /dev/null
@@ -0,0 +1 @@
+shell.heureux-cyclage.org
diff --git a/etc/openssl/shell.heureux-cyclage.org/host.cfg b/etc/openssl/shell.heureux-cyclage.org/host.cfg
new file mode 100644 (file)
index 0000000..b08acbc
--- /dev/null
@@ -0,0 +1,70 @@
+       SERVICE     = shell
+       RANDFILE    = var/sec/x509/openssl.rand
+       oid_section = extra_oids
+[ extra_oids ]
+       # NOTE: pour une éventuelle validation étendue (Extended Validation (EV))
+       jurisdictionOfIncorporationLocalityName        = 1.3.6.1.4.1.311.60.2.1.1
+       jurisdictionOfIncorporationStateOrProvinceName = 1.3.6.1.4.1.311.60.2.1.2
+       jurisdictionOfIncorporationCountryName         = 1.3.6.1.4.1.311.60.2.1.3
+[ req ]
+       prompt             = no
+       distinguished_name = distinguished_name
+       string_mask        = pkix
+       #x509_extensions    = root_extensions
+       #req_extensions     = extension
+       #attributes         = req_attributes
+[ distinguished_name ]
+       countryName            = $ENV::x509_country
+       stateOrProvinceName    = $ENV::x509_state_or_province
+       localityName           = $ENV::x509_state_or_province
+       0.organizationName     = $ENV::x509_organization
+       organizationalUnitName = Service Shell
+       commonName             = $SERVICE.$ENV::x509_host
+       businessCategory                               = $ENV::x509_business_category
+       jurisdictionOfIncorporationLocalityName        = $ENV::x509_state_or_province
+       jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
+       jurisdictionOfIncorporationCountryName         = $ENV::x509_country
+[ extensions ]
+       basicConstraints       = critical,CA:TRUE,pathlen:0
+       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
+       subjectKeyIdentifier   = hash
+       issuerAltName          = issuer:copy
+       authorityKeyIdentifier = keyid:always,issuer:always
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem
+       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+       certificatePolicies    = @certificate_policies
+[ self_signed_extensions ]
+       basicConstraints       = critical,CA:TRUE,pathlen:0
+       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
+       subjectKeyIdentifier   = hash
+       issuerAltName          = issuer:copy
+       authorityKeyIdentifier = keyid:always,issuer:always
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+       crlDistributionPoints  = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem
+[ user_extensions ]
+       basicConstraints       = critical,CA:FALSE,pathlen:0
+       keyUsage               = digitalSignature,keyEncipherment
+       subjectAltName         = email:$ENV::user@$ENV::x509_host
+       subjectKeyIdentifier   = hash
+       issuerAltName          = issuer:copy
+       authorityKeyIdentifier = keyid:always,issuer:always
+       authorityInfoAccess    = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem
+[ certificate_policies ]
+       policyIdentifier = 1.2.250.1.42
+       CPS.1            = https://www.$ENV::x509_host/x509/cps
+[ ca ]
+       private_key      = var/sec/x509/$ENV::x509/key.pem
+       dir              = var/pub/x509/$ENV::x509
+       crl_dir          = $dir
+       crlnumber        = $dir/crl.num
+       crl              = $dir/crl.pem
+       database         = $dir/idx.txt
+[ self_signed_ca ]
+       private_key      = var/sec/x509/$ENV::x509/key.pem
+       dir              = var/pub/x509/$ENV::x509
+       crl_dir          = $dir
+       crlnumber        = $dir/crl.self-signed.num
+       crl              = $dir/crl.self-signed.pem
+       database         = $dir/idx.self-signed.txt
diff --git a/etc/openssl/shell.heureux-cyclage.org/host.sh b/etc/openssl/shell.heureux-cyclage.org/host.sh
new file mode 100644 (file)
index 0000000..d4e3518
--- /dev/null
@@ -0,0 +1,14 @@
+#!/bin/sh
+
+export x509_host="heureux-cyclage.org"
+export x509_country="FR"
+export x509_organization="L'Heureux Cyclage"
+export x509_organization_unit_name="Le réseau des ateliers vélo participatifs et solidaires"
+export x509_initials="LHC"
+export x509_state_or_province="Rhône-Alpes"
+export x509_locality="Lyon"
+export x509_street_address="10 rue Saint Polycarpe"
+export x509_postal_code="69001"
+export x509_telephone_number="néant"
+export x509_business_category="V1.0, ni dieu ni maître ni moteur"
+export x509_days="3653"
diff --git a/etc/openssl/shell.heureux-cyclage.org/user.cfg b/etc/openssl/shell.heureux-cyclage.org/user.cfg
new file mode 100644 (file)
index 0000000..ec3be96
--- /dev/null
@@ -0,0 +1,14 @@
+       SERVICE  = shell
+       HOME     = .
+       RANDFILE = var/sec/x509/openssl.rand
+[ req ]
+       prompt             = no
+       distinguished_name = user_distinguished_name
+       string_mask        = pkix
+[ user_distinguished_name ]
+       countryName            = $ENV::x509_country
+       stateOrProvinceName    = $ENV::x509_state_or_province
+       #localityName           =
+       0.organizationName     = $ENV::x509_organization
+       organizationalUnitName = Certificat utilisateurice du service Shell
+       commonName             = $ENV::user
diff --git a/etc/shellinabox/00+Font.css b/etc/shellinabox/00+Font.css
new file mode 100644 (file)
index 0000000..cd23e71
--- /dev/null
@@ -0,0 +1,10 @@
+#vt100 #alt_console,
+#vt100 #console,
+#vt100 #cursor,
+#vt100 #lineheight,
+#vt100 .hidden pre {
+       font-size: 10px;
+ }
+#vt100 #linheight {
+       height: 16px;
+ }
diff --git a/etc/shellinabox/fix-firefox-keyboard.diff b/etc/shellinabox/fix-firefox-keyboard.diff
new file mode 100644 (file)
index 0000000..d29ac97
--- /dev/null
@@ -0,0 +1,28 @@
+--- shellinabox-2.14.orig/shellinabox/vt100.jspp
++++ shellinabox-2.14/shellinabox/vt100.jspp
+@@ -2894,10 +2894,10 @@ VT100.prototype.keyDown = function(event
+     event.keyCode == 226;
+   var normalKey                 =
+     alphNumKey                                   ||
+-    event.keyCode ==  59 || event.keyCode ==  61 ||
++    event.keyCode >=  58 && event.keyCode <=  64 ||
+     event.keyCode == 106 || event.keyCode == 107 ||
+     event.keyCode >= 109 && event.keyCode <= 111 ||
+-    event.keyCode >= 186 && event.keyCode <= 192 ||
++    event.keyCode >= 160 && event.keyCode <= 192 ||
+     event.keyCode >= 219 && event.keyCode <= 223 ||
+     event.keyCode == 252;
+   try {
+@@ -3033,10 +3033,10 @@ VT100.prototype.keyUp = function(event)
+         event.keyCode >=  96 && event.keyCode <= 105;
+       var normalKey               =
+         alphNumKey                                   ||
+-        event.keyCode ==  59 || event.keyCode ==  61 ||
++        event.keyCode >=  58 && event.keyCode <=  64 ||
+         event.keyCode == 106 || event.keyCode == 107 ||
+         event.keyCode >= 109 && event.keyCode <= 111 ||
+-        event.keyCode >= 186 && event.keyCode <= 192 ||
++        event.keyCode >= 160 && event.keyCode <= 192 ||
+         event.keyCode >= 219 && event.keyCode <= 223 ||
+         event.keyCode == 252;
+       var fake                    = [ ];
diff --git a/etc/sv/shellinabox/local.sh b/etc/sv/shellinabox/local.sh
new file mode 100644 (file)
index 0000000..f48f640
--- /dev/null
@@ -0,0 +1,2 @@
+"$tool"/local/apt-get-install shellinabox
+"$tool"/local/insserv-remove  shellinabox
diff --git a/etc/sv/shellinabox/run b/etc/sv/shellinabox/run
new file mode 100755 (executable)
index 0000000..f4edada
--- /dev/null
@@ -0,0 +1,14 @@
+#!/bin/sh -eux
+exec 2>&1
+sv=${PWD#/etc/sv/}
+
+exec /usr/bin/shellinaboxd \
+ --css "/etc/shellinabox/options-available/00+Font.css" \
+ --disable-ssl \
+ --localhost-only \
+ --no-beep \
+ --numeric \
+ --port 4200 \
+ --service /:LOGIN \
+ --user-css Normal:+"/etc/shellinabox/options-available/00_White On Black.css",Reverse:-"/etc/shellinabox/options-available/00+Black on White.css" \
+ "$@"
diff --git a/lib/tool/sh b/lib/tool/sh
new file mode 160000 (submodule)
index 0000000..08a9187
--- /dev/null
@@ -0,0 +1 @@
+Subproject commit 08a91875445c68ece50807be0eae28d1b7dd67a9
diff --git a/var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.num b/var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.num
new file mode 100644 (file)
index 0000000..8a0f05e
--- /dev/null
@@ -0,0 +1 @@
+01
diff --git a/var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.num.old b/var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.num.old
new file mode 100644 (file)
index 0000000..4daddb7
--- /dev/null
@@ -0,0 +1 @@
+00
diff --git a/var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.pem b/var/pub/x509/shell.heureux-cyclage.org/crl.self-signed.pem
new file mode 100644 (file)
index 0000000..43ce34f
--- /dev/null
@@ -0,0 +1,22 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/var/pub/x509/shell.heureux-cyclage.org/crt+crl.self-signed.pem b/var/pub/x509/shell.heureux-cyclage.org/crt+crl.self-signed.pem
new file mode 100644 (file)
index 0000000..8a357df
--- /dev/null
@@ -0,0 +1,79 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----
diff --git a/var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem b/var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem
new file mode 100644 (file)
index 0000000..e4f3464
--- /dev/null
@@ -0,0 +1,57 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem.asc b/var/pub/x509/shell.heureux-cyclage.org/crt.self-signed.pem.asc
new file mode 100644 (file)
index 0000000..e299347
--- /dev/null
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+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+=wjQv
+-----END PGP SIGNATURE-----
diff --git a/var/pub/x509/shell.heureux-cyclage.org/idx.self-signed.txt b/var/pub/x509/shell.heureux-cyclage.org/idx.self-signed.txt
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/var/pub/x509/shell.heureux-cyclage.org/idx.txt b/var/pub/x509/shell.heureux-cyclage.org/idx.txt
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/var/pub/x509/shell.heureux-cyclage.org/req.pem b/var/pub/x509/shell.heureux-cyclage.org/req.pem
new file mode 100644 (file)
index 0000000..c29d702
--- /dev/null
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----