wangxy
10 months ago
parent
13bd3968f3
commit
5cc10fb32f
Binary file not shown.
@ -0,0 +1,37 @@
|
||||
package com.ruoyi.framework.config;
|
||||
|
||||
import com.ruoyi.license.interceptor.LicenseCheckInterceptor;
|
||||
import org.springframework.context.annotation.Configuration;
|
||||
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
|
||||
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
|
||||
|
||||
import javax.annotation.Resource;
|
||||
|
||||
/**
|
||||
* packageName com.ruoyi.framework.config
|
||||
*
|
||||
* @author wangxy
|
||||
* @version JDK 8
|
||||
* @className InterceptorConfig
|
||||
* @date 2024/6/13
|
||||
* @description 拦截器配置
|
||||
*/
|
||||
|
||||
@Configuration
|
||||
public class InterceptorConfig implements WebMvcConfigurer {
|
||||
|
||||
@Resource
|
||||
private LicenseCheckInterceptor licenseCheckInterceptor;
|
||||
|
||||
@Override
|
||||
public void addInterceptors(InterceptorRegistry registry) {
|
||||
|
||||
//添加要拦截的url
|
||||
registry.addInterceptor(licenseCheckInterceptor)
|
||||
// 拦截的路径
|
||||
.addPathPatterns("/login");
|
||||
// 放行的路径
|
||||
// .excludePathPatterns("/admin/login");
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,44 @@
|
||||
package com.ruoyi.license.domain;
|
||||
|
||||
import lombok.Data;
|
||||
|
||||
import java.io.Serializable;
|
||||
import java.util.List;
|
||||
|
||||
/**
|
||||
* License校验实体类
|
||||
* @author 13560
|
||||
*/
|
||||
@Data
|
||||
public class LicenseCheckModel implements Serializable {
|
||||
private static final long serialVersionUID = 1L;
|
||||
/**
|
||||
* 可被允许的IP地址
|
||||
*/
|
||||
private List<String> ipAddress;
|
||||
|
||||
/**
|
||||
* 可被允许的MAC地址
|
||||
*/
|
||||
private List<String> macAddress;
|
||||
|
||||
/**
|
||||
* 可被允许的CPU序列号
|
||||
*/
|
||||
private String cpuSerial;
|
||||
|
||||
/**
|
||||
* 可被允许的主板序列号
|
||||
*/
|
||||
private String mainBoardSerial;
|
||||
|
||||
@Override
|
||||
public String toString() {
|
||||
return "LicenseCheckModel{" +
|
||||
"ipAddress=" + ipAddress +
|
||||
", macAddress=" + macAddress +
|
||||
", cpuSerial='" + cpuSerial + '\'' +
|
||||
", mainBoardSerial='" + mainBoardSerial + '\'' +
|
||||
'}';
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,59 @@
|
||||
package com.ruoyi.license.domain;
|
||||
|
||||
import lombok.Data;
|
||||
|
||||
/**
|
||||
* License校验类需要的参数
|
||||
*/
|
||||
@Data
|
||||
public class LicenseVerifyParam {
|
||||
private static final long serialVersionUID = 1L;
|
||||
|
||||
/**
|
||||
* 证书subject
|
||||
*/
|
||||
private String subject;
|
||||
|
||||
/**
|
||||
* 公钥别称
|
||||
*/
|
||||
private String publicAlias;
|
||||
|
||||
/**
|
||||
* 访问公钥库的密码
|
||||
*/
|
||||
private String storePass;
|
||||
|
||||
/**
|
||||
* 证书生成路径
|
||||
*/
|
||||
private String licensePath;
|
||||
|
||||
/**
|
||||
* 密钥库存储路径
|
||||
*/
|
||||
private String publicKeysStorePath;
|
||||
|
||||
public LicenseVerifyParam() {
|
||||
|
||||
}
|
||||
|
||||
public LicenseVerifyParam(String subject, String publicAlias, String storePass, String licensePath, String publicKeysStorePath) {
|
||||
this.subject = subject;
|
||||
this.publicAlias = publicAlias;
|
||||
this.storePass = storePass;
|
||||
this.licensePath = licensePath;
|
||||
this.publicKeysStorePath = publicKeysStorePath;
|
||||
}
|
||||
|
||||
@Override
|
||||
public String toString() {
|
||||
return "LicenseVerifyParam{" +
|
||||
"subject='" + subject + '\'' +
|
||||
", publicAlias='" + publicAlias + '\'' +
|
||||
", storePass='" + storePass + '\'' +
|
||||
", licensePath='" + licensePath + '\'' +
|
||||
", publicKeysStorePath='" + publicKeysStorePath + '\'' +
|
||||
'}';
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,32 @@
|
||||
package com.ruoyi.license.interceptor;
|
||||
|
||||
import com.alibaba.fastjson.JSONObject;
|
||||
import com.ruoyi.common.core.domain.AjaxResult;
|
||||
import com.ruoyi.common.utils.ServletUtils;
|
||||
import com.ruoyi.license.utils.LicenseVerify;
|
||||
import org.springframework.stereotype.Component;
|
||||
import org.springframework.web.servlet.HandlerInterceptor;
|
||||
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
|
||||
/**
|
||||
* LicenseCheckInterceptor
|
||||
*/
|
||||
@Component
|
||||
public class LicenseCheckInterceptor implements HandlerInterceptor {
|
||||
|
||||
@Override
|
||||
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
|
||||
LicenseVerify licenseVerify = new LicenseVerify();
|
||||
boolean verifyResult = licenseVerify.verify();
|
||||
|
||||
if (verifyResult) {
|
||||
return true;
|
||||
} else {
|
||||
AjaxResult ajaxResult = AjaxResult.error("您的证书无效，请核查服务器是否取得授权或重新申请证书！");
|
||||
ServletUtils.renderString(response, JSONObject.toJSONString(ajaxResult));
|
||||
return false;
|
||||
}
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,71 @@
|
||||
package com.ruoyi.license.listener;
|
||||
|
||||
import com.ruoyi.common.utils.StringUtils;
|
||||
import com.ruoyi.license.domain.LicenseVerifyParam;
|
||||
import com.ruoyi.license.utils.LicenseVerify;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
import org.springframework.beans.factory.annotation.Value;
|
||||
import org.springframework.context.ApplicationListener;
|
||||
import org.springframework.context.event.ContextRefreshedEvent;
|
||||
import org.springframework.stereotype.Component;
|
||||
|
||||
/**
|
||||
* 在项目启动时安装证书
|
||||
*/
|
||||
|
||||
@Component
|
||||
public class LicenseCheckListener implements ApplicationListener<ContextRefreshedEvent> {
|
||||
private static final Logger logger = LoggerFactory.getLogger("LicenseCheckListener");
|
||||
/**
|
||||
* 证书subject
|
||||
*/
|
||||
@Value("${license.subject}")
|
||||
private String subject;
|
||||
|
||||
/**
|
||||
* 公钥别称
|
||||
*/
|
||||
@Value("${license.publicAlias}")
|
||||
private String publicAlias;
|
||||
|
||||
/**
|
||||
* 访问公钥库的密码
|
||||
*/
|
||||
@Value("${license.storePass}")
|
||||
private String storePass;
|
||||
|
||||
/**
|
||||
* 证书生成路径
|
||||
*/
|
||||
@Value("${license.licensePath}")
|
||||
private String licensePath;
|
||||
|
||||
/**
|
||||
* 密钥库存储路径
|
||||
*/
|
||||
@Value("${license.publicKeysStorePath}")
|
||||
private String publicKeysStorePath;
|
||||
|
||||
@Value("${license.node_env}")
|
||||
private String nodeEnv;
|
||||
|
||||
@Override
|
||||
public void onApplicationEvent(ContextRefreshedEvent event) {
|
||||
String envDevLab = "dev";
|
||||
if(!StringUtils.equalsIgnoreCase(envDevLab,nodeEnv)){
|
||||
logger.info("++++++++ 开始安装证书 ++++++++");
|
||||
LicenseVerifyParam param = new LicenseVerifyParam();
|
||||
param.setSubject(subject);
|
||||
param.setPublicAlias(publicAlias);
|
||||
param.setStorePass(storePass);
|
||||
param.setLicensePath(licensePath);
|
||||
param.setPublicKeysStorePath(publicKeysStorePath);
|
||||
LicenseVerify licenseVerify = new LicenseVerify();
|
||||
licenseVerify.install(param);
|
||||
logger.info("++++++++ 证书安装结束 ++++++++");
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,86 @@
|
||||
package com.ruoyi.license.service.impl;
|
||||
|
||||
import com.ruoyi.license.service.AbstractServerInfos;
|
||||
import org.apache.commons.lang3.StringUtils;
|
||||
|
||||
import java.io.BufferedReader;
|
||||
import java.io.InputStreamReader;
|
||||
import java.net.InetAddress;
|
||||
import java.util.List;
|
||||
import java.util.stream.Collectors;
|
||||
|
||||
/**
|
||||
* 用于获取客户Linux服务器的基本信息
|
||||
*/
|
||||
public class LinuxServerInfos extends AbstractServerInfos {
|
||||
@Override
|
||||
protected List<String> getIpAddress() throws Exception {
|
||||
List<String> result = null;
|
||||
|
||||
//获取所有网络接口
|
||||
List<InetAddress> inetAddresses = getLocalAllInetAddress();
|
||||
|
||||
if(inetAddresses != null && inetAddresses.size() > 0){
|
||||
result = inetAddresses.stream().map(InetAddress::getHostAddress).distinct().map(String::toLowerCase).collect(Collectors.toList());
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected List<String> getMacAddress() throws Exception {
|
||||
List<String> result = null;
|
||||
|
||||
//1. 获取所有网络接口
|
||||
List<InetAddress> inetAddresses = getLocalAllInetAddress();
|
||||
|
||||
if(inetAddresses != null && inetAddresses.size() > 0){
|
||||
//2. 获取所有网络接口的Mac地址
|
||||
result = inetAddresses.stream().map(this::getMacByInetAddress).distinct().collect(Collectors.toList());
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected String getCPUSerial() throws Exception {
|
||||
//序列号
|
||||
String serialNumber = "";
|
||||
|
||||
//使用dmidecode命令获取CPU序列号
|
||||
String[] shell = {"/bin/bash","-c","dmidecode -t processor | grep 'ID' | awk -F ':' '{print $2}' | head -n 1"};
|
||||
Process process = Runtime.getRuntime().exec(shell);
|
||||
process.getOutputStream().close();
|
||||
|
||||
BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream()));
|
||||
|
||||
String line = reader.readLine().trim();
|
||||
if(StringUtils.isNotBlank(line)){
|
||||
serialNumber = line;
|
||||
}
|
||||
|
||||
reader.close();
|
||||
return serialNumber;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected String getMainBoardSerial() throws Exception {
|
||||
//序列号
|
||||
String serialNumber = "";
|
||||
|
||||
//使用dmidecode命令获取主板序列号
|
||||
String[] shell = {"/bin/bash","-c","dmidecode | grep 'Serial Number' | awk -F ':' '{print $2}' | head -n 1"};
|
||||
Process process = Runtime.getRuntime().exec(shell);
|
||||
process.getOutputStream().close();
|
||||
|
||||
BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream()));
|
||||
|
||||
String line = reader.readLine().trim();
|
||||
if(StringUtils.isNotBlank(line)){
|
||||
serialNumber = line;
|
||||
}
|
||||
|
||||
reader.close();
|
||||
return serialNumber;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,86 @@
|
||||
package com.ruoyi.license.service.impl;
|
||||
|
||||
import com.ruoyi.license.service.AbstractServerInfos;
|
||||
|
||||
import java.net.InetAddress;
|
||||
import java.util.List;
|
||||
import java.util.Scanner;
|
||||
import java.util.stream.Collectors;
|
||||
|
||||
/**
|
||||
* 用于获取客户Windows服务器的基本信息
|
||||
*/
|
||||
public class WindowsServerInfos extends AbstractServerInfos {
|
||||
@Override
|
||||
protected List<String> getIpAddress() throws Exception {
|
||||
List<String> result = null;
|
||||
|
||||
//获取所有网络接口
|
||||
List<InetAddress> inetAddresses = getLocalAllInetAddress();
|
||||
|
||||
if(inetAddresses != null && inetAddresses.size() > 0){
|
||||
result = inetAddresses.stream().map(InetAddress::getHostAddress).distinct().map(String::toLowerCase).collect(Collectors.toList());
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected List<String> getMacAddress() throws Exception {
|
||||
List<String> result = null;
|
||||
|
||||
//1. 获取所有网络接口
|
||||
List<InetAddress> inetAddresses = getLocalAllInetAddress();
|
||||
|
||||
if(inetAddresses != null && inetAddresses.size() > 0){
|
||||
//2. 获取所有网络接口的Mac地址
|
||||
result = inetAddresses.stream().map(this::getMacByInetAddress).distinct().collect(Collectors.toList());
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected String getCPUSerial() throws Exception {
|
||||
//序列号
|
||||
String serialNumber = "";
|
||||
|
||||
//使用WMIC获取CPU序列号
|
||||
Process process = Runtime.getRuntime().exec("wmic cpu get processorid");
|
||||
process.getOutputStream().close();
|
||||
Scanner scanner = new Scanner(process.getInputStream());
|
||||
|
||||
if(scanner.hasNext()){
|
||||
scanner.next();
|
||||
}
|
||||
|
||||
if(scanner.hasNext()){
|
||||
serialNumber = scanner.next().trim();
|
||||
}
|
||||
|
||||
scanner.close();
|
||||
return serialNumber;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected String getMainBoardSerial() throws Exception {
|
||||
//序列号
|
||||
String serialNumber = "";
|
||||
|
||||
//使用WMIC获取主板序列号
|
||||
Process process = Runtime.getRuntime().exec("wmic baseboard get serialnumber");
|
||||
process.getOutputStream().close();
|
||||
Scanner scanner = new Scanner(process.getInputStream());
|
||||
|
||||
if(scanner.hasNext()){
|
||||
scanner.next();
|
||||
}
|
||||
|
||||
if(scanner.hasNext()){
|
||||
serialNumber = scanner.next().trim();
|
||||
}
|
||||
|
||||
scanner.close();
|
||||
return serialNumber;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,92 @@
|
||||
package com.ruoyi.license.utils;
|
||||
|
||||
import com.ruoyi.license.domain.CustomKeyStoreParam;
|
||||
import com.ruoyi.license.domain.LicenseCreatorParam;
|
||||
import de.schlichtherle.license.*;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
|
||||
import javax.security.auth.x500.X500Principal;
|
||||
import java.io.File;
|
||||
import java.text.MessageFormat;
|
||||
import java.util.prefs.Preferences;
|
||||
|
||||
/**
|
||||
* License生成类
|
||||
*/
|
||||
|
||||
public class LicenseCreator {
|
||||
private static final Logger logger = LoggerFactory.getLogger("LicenseCreator");
|
||||
private final static X500Principal DEFAULT_HOLDER_AND_ISSUER = new X500Principal("CN=localhost, OU=localhost, O=localhost, L=SH, ST=SH, C=CN");
|
||||
private LicenseCreatorParam param;
|
||||
|
||||
public LicenseCreator(LicenseCreatorParam param) {
|
||||
this.param = param;
|
||||
}
|
||||
|
||||
/**
|
||||
* 生成License证书
|
||||
*/
|
||||
public boolean generateLicense(){
|
||||
try {
|
||||
LicenseManager licenseManager = new CustomLicenseManager(initLicenseParam());
|
||||
LicenseContent licenseContent = initLicenseContent();
|
||||
|
||||
licenseManager.store(licenseContent,new File(param.getLicensePath()));
|
||||
|
||||
return true;
|
||||
}catch (Exception e){
|
||||
logger.error(MessageFormat.format("证书生成失败：{0}", param) ,e);
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 初始化证书生成参数
|
||||
*/
|
||||
private LicenseParam initLicenseParam(){
|
||||
Preferences preferences = Preferences.userNodeForPackage(LicenseCreator.class);
|
||||
|
||||
//设置对证书内容加密的秘钥
|
||||
CipherParam cipherParam = new DefaultCipherParam(param.getStorePass());
|
||||
|
||||
KeyStoreParam privateStoreParam = new CustomKeyStoreParam(LicenseCreator.class
|
||||
,param.getPrivateKeysStorePath()
|
||||
,param.getPrivateAlias()
|
||||
,param.getStorePass()
|
||||
,param.getKeyPass());
|
||||
|
||||
LicenseParam licenseParam = new DefaultLicenseParam(param.getSubject()
|
||||
,preferences
|
||||
,privateStoreParam
|
||||
,cipherParam);
|
||||
|
||||
return licenseParam;
|
||||
}
|
||||
|
||||
/**
|
||||
* 设置证书生成正文信息
|
||||
*/
|
||||
private LicenseContent initLicenseContent(){
|
||||
LicenseContent licenseContent = new LicenseContent();
|
||||
licenseContent.setHolder(DEFAULT_HOLDER_AND_ISSUER);
|
||||
licenseContent.setIssuer(DEFAULT_HOLDER_AND_ISSUER);
|
||||
|
||||
licenseContent.setSubject(param.getSubject());
|
||||
licenseContent.setIssued(param.getIssuedTime());
|
||||
licenseContent.setNotBefore(param.getIssuedTime());
|
||||
licenseContent.setNotAfter(param.getExpiryTime());
|
||||
licenseContent.setConsumerType(param.getConsumerType());
|
||||
licenseContent.setConsumerAmount(param.getConsumerAmount());
|
||||
licenseContent.setInfo(param.getDescription());
|
||||
|
||||
//扩展校验服务器硬件信息
|
||||
licenseContent.setExtra(param.getLicenseCheckModel());
|
||||
|
||||
return licenseContent;
|
||||
}
|
||||
|
||||
public static void main(String[] args) {
|
||||
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,24 @@
|
||||
package com.ruoyi.license.utils;
|
||||
|
||||
import de.schlichtherle.license.LicenseManager;
|
||||
import de.schlichtherle.license.LicenseParam;
|
||||
|
||||
/**
|
||||
* de.schlichtherle.license.LicenseManager的单例
|
||||
*/
|
||||
|
||||
public class LicenseManagerHolder {
|
||||
private static volatile LicenseManager LICENSE_MANAGER;
|
||||
|
||||
public static LicenseManager getInstance(LicenseParam param){
|
||||
if(LICENSE_MANAGER == null){
|
||||
synchronized (LicenseManagerHolder.class){
|
||||
if(LICENSE_MANAGER == null){
|
||||
LICENSE_MANAGER = new CustomLicenseManager(param);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return LICENSE_MANAGER;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,84 @@
|
||||
package com.ruoyi.license.utils;
|
||||
|
||||
import cn.hutool.core.io.FileUtil;
|
||||
import cn.hutool.core.io.resource.ClassPathResource;
|
||||
import com.ruoyi.common.config.RuoYiConfig;
|
||||
import com.ruoyi.license.domain.CustomKeyStoreParam;
|
||||
import com.ruoyi.license.domain.LicenseVerifyParam;
|
||||
import de.schlichtherle.license.*;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
|
||||
import java.io.File;
|
||||
import java.io.InputStream;
|
||||
import java.text.DateFormat;
|
||||
import java.text.MessageFormat;
|
||||
import java.text.SimpleDateFormat;
|
||||
import java.util.prefs.Preferences;
|
||||
|
||||
/**
|
||||
* License校验类
|
||||
*/
|
||||
public class LicenseVerify {
|
||||
private static final Logger logger = LoggerFactory.getLogger("LicenseVerify");
|
||||
|
||||
/**
|
||||
* 安装License证书
|
||||
*/
|
||||
public synchronized LicenseContent install(LicenseVerifyParam param){
|
||||
LicenseContent result = null;
|
||||
DateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
|
||||
try{
|
||||
LicenseManager licenseManager = LicenseManagerHolder.getInstance(initLicenseParam(param));
|
||||
licenseManager.uninstall();
|
||||
InputStream stream = new ClassPathResource(param.getLicensePath()).getStream();
|
||||
String tempFilePath = RuoYiConfig.getProfile() + "/license_temp.lic";
|
||||
File tempFile = new File(tempFilePath);
|
||||
File file = FileUtil.writeFromStream(stream, tempFile);
|
||||
result = licenseManager.install(file);
|
||||
logger.info(MessageFormat.format("证书安装成功，证书有效期：{0} - {1}",format.format(result.getNotBefore()),format.format(result.getNotAfter())));
|
||||
}catch (Exception e){
|
||||
logger.error("证书安装失败！", e);
|
||||
}
|
||||
|
||||
return result;
|
||||
}
|
||||
|
||||
/**
|
||||
* 校验License证书
|
||||
*/
|
||||
public boolean verify(){
|
||||
LicenseManager licenseManager = LicenseManagerHolder.getInstance(null);
|
||||
DateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
|
||||
|
||||
//2. 校验证书
|
||||
try {
|
||||
LicenseContent licenseContent = licenseManager.verify();
|
||||
logger.info(MessageFormat.format("证书校验通过，证书有效期：{0} - {1}",format.format(licenseContent.getNotBefore()),format.format(licenseContent.getNotAfter())));
|
||||
return true;
|
||||
}catch (Exception e){
|
||||
logger.error("证书校验失败！", e);
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 初始化证书生成参数
|
||||
*/
|
||||
private LicenseParam initLicenseParam(LicenseVerifyParam param){
|
||||
Preferences preferences = Preferences.userNodeForPackage(LicenseVerify.class);
|
||||
|
||||
CipherParam cipherParam = new DefaultCipherParam(param.getStorePass());
|
||||
|
||||
KeyStoreParam publicStoreParam = new CustomKeyStoreParam(LicenseVerify.class
|
||||
,param.getPublicKeysStorePath()
|
||||
,param.getPublicAlias()
|
||||
,param.getStorePass()
|
||||
,null);
|
||||
|
||||
return new DefaultLicenseParam(param.getSubject()
|
||||
,preferences
|
||||
,publicStoreParam
|
||||
,cipherParam);
|
||||
}
|
||||
}
|
||||
Loading…
Reference in new issue