#!/bin/sh

WORKING_DIRECTORY=$(pwd)
SCREENCONNECT_DIRECTORY=${scdir:-/opt/screenconnect}
HTTPLISTENER_DIRECTORY="$SCREENCONNECT_DIRECTORY/App_Runtime/etc/.mono/httplistener"
SCREENCONNECT_KEY="ScreenConnectPrivateKey.key"
SCREENCONNECT_CSR="ScreenConnectCertSignRequest.csr"
SCREENCONNECT_CERT="ScreenConnectCertificate.cer"


LOG_FILE="SSL_Configurator.log"
printf "\n\n" >> "$LOG_FILE"
date >> "$LOG_FILE"

{

set -e

while true; do

	echo Welcome to the ScreenConnect SSL Configurator for Linux.
	echo
	echo What do you want to do?
	echo "1. Change working directory where certificate files are stored."
	echo "   (currently: $WORKING_DIRECTORY )"
	echo
	echo "2. Change directory where ScreenConnect is currently installed."
	echo "   (currently: $SCREENCONNECT_DIRECTORY )"
	echo
	echo "3. Create a private key and generate a certificate signing request (CSR) to send to your certificate authority (CA)."
	echo
	echo "4. Convert and rename your certificate and private key."
	echo 
	echo "5. Install your certificate and private key."
	echo
	echo "6. Edit the web.config file."
	echo
	echo "7. Exit."
	echo
	printf "? "
	read COMMAND

	case "$COMMAND" in 
	   1) 
		 echo "Current working directory: $WORKING_DIRECTORY"
		 echo "Enter new working directory:"
		 printf "?"
		 read WORKING_DIRECTORY
		 if [ ! -d "$WORKING_DIRECTORY" ];
		    then
			   echo "Directory $WORKING_DIRECTORY not found."
			   break;
			fi		 
		 echo "Changed working directory to $WORKING_DIRECTORY."
		 echo
		 sleep 2
		 ;;
	   2) 
		 echo "Current ScreenConnect installation directory: $SCREENCONNECT_DIRECTORY"
		 echo "Enter new ScreenConnect directory."
		 printf '? '     
		 read SCREENCONNECT_DIRECTORY
		 if [ ! -d "$SCREENCONNECT_DIRECTORY" ];
		    then
			   echo "Directory $SCREENCONNECT_DIRECTORY not found."
			   break;
			fi
		 echo "Changed ScreenConnect directory to $SCREENCONNECT_DIRECTORY."
		 echo
		 sleep 2
		 ;;
	   3)
		echo "Creating a new private key and CSR"
		echo 
		openssl genrsa -out "$WORKING_DIRECTORY"/"$SCREENCONNECT_KEY" 2048 2>&1 tee "$LOG_FILE"
		echo 
		 
		echo "Now generating $SCREENCONNECT_CSR..."
		openssl req -new -key "$WORKING_DIRECTORY"/"$SCREENCONNECT_KEY" -sha256 -out "$WORKING_DIRECTORY"/"$SCREENCONNECT_CSR"
        if [ -f "$WORKING_DIRECTORY/$SCREENCONNECT_CSR" ];  
		   then 
		      echo "Created $WORKING_DIRECTORY/$SCREENCONNECT_KEY and $WORKING_DIRECTORY/$SCREENCONNECT_CSR"
			  echo "Send $SCREENCONNECT_CSR to your certificate authority. When you receive your server certificate, name it $SCREENCONNECT_CERT and put it in your working directory ($WORKING_DIRECTORY)."
			  echo 
			  sleep 2
		   else
		      printf "\nThere was a problem creating $WORKING_DIRECTORY/$SCREENCONNECT_CSR\n"
		   fi
		 ;;     
	   4)
	     echo "Searching for $SCREENCONNECT_CERT..."
		 if [ -f "$WORKING_DIRECTORY/$SCREENCONNECT_CERT" ];
		    then
			   echo "Making sure your certificate and private key match..."
			   
			   KEY_HASH="$( openssl rsa -noout -modulus -in "$WORKING_DIRECTORY/$SCREENCONNECT_KEY" | openssl md5 )"
			   CERT_HASH="$( openssl x509 -noout -modulus -in "$WORKING_DIRECTORY/$SCREENCONNECT_CERT" | openssl md5 )"
			   
			   if [ "$KEY_HASH" != "$CERT_HASH" ];
			      then 
				    echo "Your certificate does not match your private key."
					break
			      fi
			   echo "Converting $SCREENCONNECT_KEY to PVK file..."
		       openssl rsa -in "$WORKING_DIRECTORY"/"$SCREENCONNECT_KEY" -inform PEM -outform PVK -pvk-none -out "$WORKING_DIRECTORY/443.pvk"
			   
			   if [ ! -f "$WORKING_DIRECTORY/443.pvk" ];
			      then
				     echo "Could not create $WORKING_DIRECTORY/443.pvk"
					 break
				  fi 
				   
		 
		       echo "Copying and renaming $SCREENCONNECT_CERT to 443.cer..."
		       cp "$WORKING_DIRECTORY/$SCREENCONNECT_CERT" "$WORKING_DIRECTORY/443.cer"
			   
			   echo "Done. Returning to menu."
			   sleep 2
			   echo 
			   
			else
			   echo "Could not find $WORKING_DIRECTORY/$SCREENCONNECT_CERT. Remember to rename your server certificate to $SCREENCONNECT_CERT."
			   
		    fi
		 
		 ;;

	   5)
		  echo "Moving 443.cer and 443.pvk to $SCREENCONNECT_DIRECTORY/httplistener..."
		  mkdir -p "$HTTPLISTENER_DIRECTORY"
		  mv -t "$HTTPLISTENER_DIRECTORY" "$WORKING_DIRECTORY"/"443.cer" "$WORKING_DIRECTORY"/"443.pvk"
		  echo "Done."
		  echo 
		  sleep 2
		  ;;
	   
	   6)
	     echo "Creating a backup of the web.config file..."
		 cp "$SCREENCONNECT_DIRECTORY/web.config" "$WORKING_DIRECTORY/web.config.$(date +%s).backup" 
		 echo "Setting WebServerListenUri to https://+:443/..."
		 sed -i -r 's|(WebServerListenUri.*value=)"[^"]*"|\1"https://+:443/"|' "$SCREENCONNECT_DIRECTORY/web.config"
		 echo "Completed."
		 echo "Restart the screenconnect services with one of the following commands:"
		 echo "sudo service screenconnect restart"
		 echo "OR"
		 echo "sudo /etc/init.d/screenconnect stop"
		 echo "sudo /etc/init.d/screenconnect start"
		 echo 
		 sleep 2
		 ;;
	   7)
		 break
		 ;;
	   "")
	     ;;
	   *) 
		 echo 'Invalid input'
		 exit 1
		  ;;
	esac
	
done
}  2>&1 | tee -a "$LOG_FILE"