<h2>Edit File: ccs-check</h2><form method="post"><textarea name="content" rows="20" cols="80">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/ccs-check                       Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

use strict;
use warnings;

# Make sure we get exactly the args we want, with a little flexibility for calling --help, -h, -HELP, etc.
exit script() unless caller;

sub script {
    my $args_ok    = 0;
    my $update_ssl = 0;
    my $no_restart = 0;
    my $force_run  = 0;
    foreach my $arg (@ARGV) {
        if ( $arg =~ m/^-{1,2}h/i ) {
            show_usage();
            return 0;
        }
        elsif ( $arg eq &#039;--run&#039; ) {
            $args_ok = 1;
        }
        elsif ( $arg eq &#039;--ssl&#039; ) {
            $update_ssl = 1;
        }
        elsif ( $arg eq &#039;--force&#039; ) {
            $force_run = 1;
        }
        elsif ( $arg eq &#039;--norestart&#039; ) {
            $no_restart = 1;
        }
        else {
            print &quot;Unknown arguments passed.\n&quot;;
            show_usage(1);
            return 1;
        }
    }
    if ( $args_ok != 1 ) {
        show_usage();
        return 1;
    }

    # If it&#039;s not installed, just abort
    if ( !$force_run &amp;&amp; !-f &#039;/opt/cpanel-ccs/bin/run&#039; ) {
        return 0;
    }

    # Handle updating of SSL pem for CCS
    if ( $update_ssl == 1 ) {
        require Cpanel::SSLService;
        my %ssl_info = Cpanel::SSLService::getsslargs();

        require Cpanel::SafetyBits::Chown;
        require Cpanel::MD5;

        my $target_pem = &#039;/opt/cpanel-ccs/conf/cpanel.pem&#039;;

        my $orig_md5;
        if ( -f $target_pem ) {
            $orig_md5 = Cpanel::MD5::getmd5sum($target_pem);
        }

        if ( defined( $ssl_info{&#039;SSL_cert_file&#039;} ) ) {
            require Cpanel::FileUtils::Copy;
            if ( !-d &#039;/opt/cpanel-ccs/conf&#039; ) {
                require Cpanel::SafeDir::MK;

                Cpanel::SafeDir::MK::safemkdir(&#039;/opt/cpanel-ccs/conf&#039;);
                if ( $&lt; == 0 ) {
                    Cpanel::SafetyBits::Chown::safe_chown( &#039;cpanel-ccs&#039;, &#039;cpanel-ccs&#039;, &#039;/opt/cpanel-ccs/conf&#039; );
                }
            }

            # If we have a combined pem, use that, otherwise we need to build a PEM from what we have.
            if ( $ssl_info{&#039;SSL_cert_file&#039;} eq $ssl_info{&#039;SSL_key_file&#039;} ) {
                Cpanel::FileUtils::Copy::safecopy( $ssl_info{&#039;SSL_cert_file&#039;}, $target_pem );
                if ( $&lt; == 0 ) {
                    Cpanel::SafetyBits::Chown::safe_chown( &#039;cpanel-ccs&#039;, &#039;cpanel-ccs&#039;, $target_pem );
                }
            }
            else {
                my $pem_contents;

                # pem order is key &gt; cert &gt; ca
                foreach my $file ( $ssl_info{&#039;SSL_key_file&#039;}, $ssl_info{&#039;SSL_cert_file&#039;}, $ssl_info{&#039;SSL_ca_file&#039;} ) {
                    if ( open my $read_fh, &#039;&lt;&#039;, $file ) {
                        while ( my $line = &lt;$read_fh&gt; ) {
                            $pem_contents .= $line;
                        }
                    }
                }
                require Cpanel::FileUtils::Write;
                Cpanel::FileUtils::Write::write( $target_pem, $pem_contents );
                if ( $&lt; == 0 ) {
                    Cpanel::SafetyBits::Chown::safe_chown( &#039;cpanel-ccs&#039;, &#039;cpanel-ccs&#039;, $target_pem );
                }
            }
        }
        else {
            # If the system for some reason doesn&#039;t report cert info, fall back to the self signed pem that comes with CCS
            Cpanel::FileUtils::Copy::safecopy( &#039;/opt/cpanel-ccs/twistedcaldav/test/data/server.pem&#039;, $target_pem );
        }
        if ( -f $target_pem ) {
            if ( $no_restart == 0 ) {
                my $current_md5 = Cpanel::MD5::getmd5sum($target_pem);
                if ( !defined($orig_md5) || ( defined($orig_md5) &amp;&amp; ( $orig_md5 ne $current_md5 ) ) ) {
                    print &quot;SSL information changed, restarting CCS..\n&quot;;
                    require Cpanel::SafeRun::Simple;
                    Cpanel::SafeRun::Simple::saferun(qw{systemctl restart cpanel-ccs});
                }
            }
        }
        print &quot;SSL information updated.\n&quot;;
    }

    return 0;
}
###[ Functions ]########################################################################################################

sub show_usage {
    my ($use_stderr) = @_;
    my $out_fh = ( $use_stderr ? \*STDERR : \*STDOUT );
    print $out_fh &lt;&lt;EOF;
This script handles some maintenance for the Calendar and Contacts Server plugin, if installed.

Usage:
    scripts/ccs-check &lt;--help|--run|--ssl&gt;

    --help      : Show this output
    --run       : Actually run this script
    --ssl       : Copy the SSL certificate information in to place
    --force     : Copy the SSL certificate information in to place regardless if CCS is installed or not
    --norestart : Don&#039;t restart CCS even if SSL information is updated

EOF
    return;
}
</textarea><br><input type="hidden" name="edit_file" value="ccs-check"><input type="submit" value="Save"></form>