From c390c6332325f41fcc31a12f40fc7d84028e0489 Mon Sep 17 00:00:00 2001 From: wzj <244142824@qq.com> Date: Sat, 14 Jun 2025 11:10:16 +0800 Subject: [PATCH] =?UTF-8?q?=E6=94=AF=E6=8C=81=E5=88=A0=E9=99=A4CA=E5=92=8C?= =?UTF-8?q?=E8=AF=81=E4=B9=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- app.py | 121 ++++++++++++++++++++++ templates/ca_detail.html | 6 ++ templates/certificate_detail.html | 1 + templates/confirm_delete_ca.html | 40 +++++++ templates/confirm_delete_certificate.html | 48 +++++++++ 5 files changed, 216 insertions(+) create mode 100644 templates/confirm_delete_ca.html create mode 100644 templates/confirm_delete_certificate.html diff --git a/app.py b/app.py index 87346b5..8b2fe76 100644 --- a/app.py +++ b/app.py @@ -1049,6 +1049,127 @@ def export_certificate_view(cert_id): return render_template('export_certificate.html', cert=cert) +# 在app.py中添加以下路由 + +@app.route('/cas//delete', methods=['GET', 'POST']) +@login_required +def delete_ca(ca_id): + ca = get_ca_by_id(ca_id) + if not ca: + flash('CA不存在', 'danger') + return redirect(url_for('ca_list')) + + # 检查权限 + if not current_user.is_admin and ca['created_by'] != current_user.id: + flash('无权删除此CA', 'danger') + return redirect(url_for('ca_list')) + + # 检查是否有关联的证书 + conn = get_db_connection() + if conn: + try: + cursor = conn.cursor(dictionary=True) + cursor.execute("SELECT COUNT(*) as count FROM certificates WHERE ca_id = %s", (ca_id,)) + result = cursor.fetchone() + if result['count'] > 0: + flash('无法删除CA，因为存在关联的证书', 'danger') + return redirect(url_for('ca_detail', ca_id=ca_id)) + except Error as e: + print(f"Database error: {e}") + flash('检查关联证书失败', 'danger') + return redirect(url_for('ca_detail', ca_id=ca_id)) + finally: + if conn.is_connected(): + cursor.close() + conn.close() + + if request.method == 'POST': + # 删除文件 + try: + if os.path.exists(ca['cert_path']): + os.remove(ca['cert_path']) + if os.path.exists(ca['key_path']): + os.remove(ca['key_path']) + # 删除CA目录 + ca_dir = os.path.dirname(ca['cert_path']) + if os.path.exists(ca_dir): + os.rmdir(ca_dir) + except OSError as e: + print(f"文件删除错误: {e}") + flash('删除文件时出错', 'danger') + return redirect(url_for('ca_detail', ca_id=ca_id)) + + # 删除数据库记录 + conn = get_db_connection() + if conn: + try: + cursor = conn.cursor() + cursor.execute("DELETE FROM certificate_authorities WHERE id = %s", (ca_id,)) + conn.commit() + flash('CA删除成功', 'success') + return redirect(url_for('ca_list')) + except Error as e: + print(f"Database error: {e}") + flash('删除CA记录失败', 'danger') + return redirect(url_for('ca_detail', ca_id=ca_id)) + finally: + if conn.is_connected(): + cursor.close() + conn.close() + + return render_template('confirm_delete_ca.html', ca=ca) + + +@app.route('/certificates//delete', methods=['GET', 'POST']) +@login_required +def delete_certificate(cert_id): + cert = get_certificate_by_id(cert_id) + if not cert: + flash('证书不存在', 'danger') + return redirect(url_for('certificate_list')) + + # 检查权限 + if not current_user.is_admin and cert['created_by'] != current_user.id: + flash('无权删除此证书', 'danger') + return redirect(url_for('certificate_list')) + + if request.method == 'POST': + # 删除文件 + try: + if os.path.exists(cert['cert_path']): + os.remove(cert['cert_path']) + if os.path.exists(cert['key_path']): + os.remove(cert['key_path']) + if os.path.exists(cert['csr_path']): + os.remove(cert['csr_path']) + # 删除证书目录 + cert_dir = os.path.dirname(cert['cert_path']) + if os.path.exists(cert_dir): + os.rmdir(cert_dir) + except OSError as e: + print(f"文件删除错误: {e}") + flash('删除文件时出错', 'danger') + return redirect(url_for('certificate_detail', cert_id=cert_id)) + + # 删除数据库记录 + conn = get_db_connection() + if conn: + try: + cursor = conn.cursor() + cursor.execute("DELETE FROM certificates WHERE id = %s", (cert_id,)) + conn.commit() + flash('证书删除成功', 'success') + return redirect(url_for('certificate_list')) + except Error as e: + print(f"Database error: {e}") + flash('删除证书记录失败', 'danger') + return redirect(url_for('certificate_detail', cert_id=cert_id)) + finally: + if conn.is_connected(): + cursor.close() + conn.close() + + return render_template('confirm_delete_certificate.html', cert=cert) def generate_separate_files_zip(cert, cert_ext, zip_suffix): """生成包含分开文件的ZIP包通用函数""" diff --git a/templates/ca_detail.html b/templates/ca_detail.html index 9e3b9fc..82729e6 100644 --- a/templates/ca_detail.html +++ b/templates/ca_detail.html @@ -28,6 +28,12 @@ 下载CRL {% endif %} + + 删除CA + diff --git a/templates/certificate_detail.html b/templates/certificate_detail.html index 6be3227..4415e06 100644 --- a/templates/certificate_detail.html +++ b/templates/certificate_detail.html @@ -11,6 +11,7 @@ {% endif %} 续期 导出 + 删除 diff --git a/templates/confirm_delete_ca.html b/templates/confirm_delete_ca.html new file mode 100644 index 0000000..23ff320 --- /dev/null +++ b/templates/confirm_delete_ca.html @@ -0,0 +1,40 @@ +{% extends "base.html" %} + +{% block title %}删除CA - {{ ca.name }}{% endblock %} + +{% block content %} +
+
+
+

确认删除CA

+
+
+
您确定要删除以下CA吗？
+
+ 警告：此操作不可逆！所有与此CA相关的文件将被永久删除。 +
+ +
+
CA信息：
+
    +
  • 名称: {{ ca.name }}
    • +
  • 通用名: {{ ca.common_name }}
    • +
  • 组织: {{ ca.organization }}
    • +
  • 创建时间: {{ ca.created_at.strftime('%Y-%m-%d %H:%M') }}
    • +
+
+ +
+
+ + 取消 + + +
+
+
+
+
+{% endblock %} \ No newline at end of file diff --git a/templates/confirm_delete_certificate.html b/templates/confirm_delete_certificate.html new file mode 100644 index 0000000..c032319 --- /dev/null +++ b/templates/confirm_delete_certificate.html @@ -0,0 +1,48 @@ +{% extends "base.html" %} + +{% block title %}删除证书 - {{ cert.common_name }}{% endblock %} + +{% block content %} +
+
+
+

确认删除证书

+
+
+
您确定要删除以下证书吗？
+
+ 警告：此操作不可逆！所有与此证书相关的文件将被永久删除。 +
+ +
+
证书信息：
+
    +
  • 通用名: {{ cert.common_name }}
    • +
  • 颁发CA: {{ cert.ca_name }}
    • +
  • 状态: + {% if cert.status == 'active' %} + 有效 + {% elif cert.status == 'revoked' %} + 已吊销 + {% else %} + 已过期 + {% endif %} +
    • +
  • 创建时间: {{ cert.created_at.strftime('%Y-%m-%d %H:%M') }}
    • +
+
+ +
+
+ + 取消 + + +
+
+
+
+
+{% endblock %} \ No newline at end of file