Compare commits

..

2 Commits

Author SHA1 Message Date
h44z
26732b3050 Merge branch 'unified' into unified-patch 2025-07-29 19:52:48 +02:00
Joseph Gigantino
bee8d40064 Update Program.cs
Remove duplicate instances of:
Set("UseRiskInsights", true);
Set("UseOrganizationDomains", true);     Set("UseAdminSponsoredFamilies", true);

Signed-off-by: Joseph Gigantino <128943406+Jgigantino31@users.noreply.github.com>
2025-07-17 21:56:36 -04:00
19 changed files with 758 additions and 904 deletions

View File

@@ -1,21 +1,15 @@
version: 2.1 version: 2.1
jobs: jobs:
build: build:
machine: true machine: true
steps: steps:
- checkout - checkout
- run: - run:
name: Print the Current Time name: Print the Current Time
command: date command: date
- run: - run:
name: Generate Keys name: Generate Keys
command: ./generateKeys.sh command: ./generateKeys.sh
- run: - run:
name: Build script name: Build script
command: ./build.sh update command: ./build.sh y
- run:
name: Test generating user license
command: ./licenseGen.sh user TestName TestEmail@example.com 4a619d4a-522d-4c70-8596-affb5b607c23
- run:
name: Test generating organization license
command: ./licenseGen.sh org TestName TestEmail@example.com 4a619d4a-522d-4c70-8596-affb5b607c23

View File

@@ -1,19 +0,0 @@
root=true
###############################
# Core EditorConfig Options #
###############################
# All files
[*]
indent_style=tab
indent_size=4
trim_trailing_whitespace=true
end_of_line=lf
charset=utf-8
[*.{cs}]
insert_final_newline=false
[*.{md,mkdn}]
trim_trailing_whitespace = true
indent_style = space

1
.gitattributes vendored
View File

@@ -1 +0,0 @@
* text eol=lf

3
.gitignore vendored
View File

@@ -7,6 +7,5 @@ src/bitBetter/.vs/*
*.pem *.pem
.vscode/ .vscode/
*.pfx *.pfx
*.cer *.cert
*.vsidx *.vsidx
.DS_Store

View File

@@ -1,4 +1,4 @@
# Uncomment a line below and fill in the missing values or add your own. Every line in this file will be called by build.[sh|ps1] once the patched image is built. # Uncomment a line below and fill in the missing values or add your own. Every line in this file will be called by build.[sh|ps1] once the patched image is built.
# docker run -d --name bitwarden --restart=always -v <full-local-path>\logs:/var/log/bitwarden -v <full-local-path>\bwdata:/etc/bitwarden -p 80:8080 --env-file <full-local-path>\settings.env bitwarden-patched # docker run -d --name bitwarden -v <full-local-path>\logs:/var/log/bitwarden -v <full-local-path>\bwdata:/etc/bitwarden -p 80:8080 --env-file <full-local-path>\settings.env bitwarden-patch
# <OR> # <OR>
# docker-compose -f <full-local-path>/docker-compose.yml up -d # docker-compose -f <full-local-path>/docker-compose.yml up -d

View File

@@ -1,14 +1,12 @@
# BitBetter lite # BitBetter
BitBetter is is a tool to modify Bitwarden's core dll to allow you to generate your own individual and organisation licenses. BitBetter is is a tool to modify Bitwarden's core dll to allow you to generate your own individual and organisation licenses.
Please see the FAQ below for details on why this software was created. Please see the FAQ below for details on why this software was created.
Be aware that this branch is **only** for the lite (formerly unified) version of bitwarden. It has been rewritten and works in different ways than the master branch. _Beware! BitBetter does some semi janky stuff to rewrite the bitwarden core dll and allow the installation of a self signed certificate. Use at your own risk!_
_Beware! BitBetter is a solution that generates a personal certificate and uses that to generate custom licences. This requires (automated) modifying of libraries. Use at your own risk!_ Credit to https://github.com/h44z/BitBetter and https://github.com/jakeswenson/BitBetter
Credit to https://github.com/h44z/BitBetter and https://github.com/jakeswenson/BitBetter and https://github.com/GieltjE/BitBetter
# Table of Contents # Table of Contents
- [BitBetter](#bitbetter) - [BitBetter](#bitbetter)
@@ -32,7 +30,7 @@ The following instructions are for unix-based systems (Linux, BSD, macOS) and Wi
## Dependencies ## Dependencies
Aside from docker, which you also need for Bitwarden, BitBetter requires the following: Aside from docker, which you also need for Bitwarden, BitBetter requires the following:
* Bitwarden (tested with 2025.11.1 might work on lower versions), for safety always stay up to date * Bitwarden (tested with 1.47.1, might work on lower versions)
* openssl (probably already installed on most Linux or WSL systems, any version should work, on Windows it will be auto installed using winget) * openssl (probably already installed on most Linux or WSL systems, any version should work, on Windows it will be auto installed using winget)
## Setting up BitBetter ## Setting up BitBetter
@@ -48,8 +46,8 @@ If you wish to generate your self-signed cert & key manually, you can run the fo
```bash ```bash
cd .keys cd .keys
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.cer -days 36500 -outform DER -passout pass:test openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.cert -days 36500 -outform DER -passout pass:test
openssl x509 -inform DER -in cert.cer -out cert.pem openssl x509 -inform DER -in cert.cert -out cert.pem
openssl pkcs12 -export -out cert.pfx -inkey key.pem -in cert.pem -passin pass:test -passout pass:test openssl pkcs12 -export -out cert.pfx -inkey key.pem -in cert.pem -passin pass:test -passout pass:test
``` ```
@@ -65,14 +63,14 @@ The scripts supports running and patching multi instances.
Edit the .servers/serverlist.txt file and fill in the missing values, they can be replaced with existing installation values. Edit the .servers/serverlist.txt file and fill in the missing values, they can be replaced with existing installation values.
This file may be empty, but there will be no containers will be spun up automatically. This file may be empty, but there will be no containers will be spun up automatically.
Now it is time to **run the main build script** to generate a modified version of the `ghcr.io/bitwarden/lite` docker image and the license generator. Now it is time to **run the main build script** to generate a modified version of the `ghcr.io/bitwarden/self-host` docker image and the license generator.
From the BitBetter directory, simply run: From the BitBetter directory, simply run:
``` ```
./build.[sh|ps1] ./build.[sh|ps1]
``` ```
This will create a new self-signed certificate in the `.keys` directory if one does not already exist and then create a modified version of the official `ghcr.io/bitwarden/lite` image called `bitwarden-patched`. This will create a new self-signed certificate in the `.keys` directory if one does not already exist and then create a modified version of the official `ghcr.io/bitwarden/self-host` image called `bitwarden-patch`.
Afterwards it will automatically generate the license generator and start all previously specified containers which are **now ready to accept self-issued licenses.** Afterwards it will automatically generate the license generator and start all previously specified containers which are **now ready to accept self-issued licenses.**
@@ -100,36 +98,6 @@ If you ran the build script, you can **simply run the license gen in interactive
**The license generator will spit out a JSON-formatted license which can then be used within the Bitwarden web front-end to license your user or org!** **The license generator will spit out a JSON-formatted license which can then be used within the Bitwarden web front-end to license your user or org!**
## Migrating from mssql to a real database
Prepare a new database and bwdata directory, download and prepare the new settings.env (https://raw.githubusercontent.com/bitwarden/self-host/refs/heads/main/bitwarden-lite/settings.env)
Make sure you can get the data from either the backup file or by connecting directly to the mssql database (navicat has a trial).
If required (e.g. you cannot connect to your docker mssql server directly) download Microsoft SQL Server 2022 and SQL Server Management Studio (the latter can be used to import the .bak file)
After cloning this repo and modifying .servers/serverlist.txt to suit your new environment do the following:
```
docker exec -i bitwarden-mssql /backup-db.sh
./bitwarden.sh stop
```
Run build.sh and ensure your new instance serves a webpage AND has populated the new database with the tables (should be empty now)
Proceed to stop the new container for now.
Copy from the old to the new bwdata directory (do not copy/overwrite identity.pfx!):
- bwdata/core/licenses to bwdata-new/licenses
- bwdata/core/aspnet-dataprotection to bwdata-new/data-protection
- bwdata/core/attachments to bwdata-new/attachments
Export data only from the old sql server database, if needed import the .bak file to a local mssql instance.
Only export tables that have rows, makes it much quicker, .json is the easiest with navicat.
Import the rows to the real database, start the new docker container.
--- ---
# FAQ: Questions you might have. # FAQ: Questions you might have.
@@ -146,26 +114,6 @@ In the past we have done so but they were not focused on the type of customer th
UPDATE: Bitwarden now offers a cheap license called [Families Organization](https://bitwarden.com/pricing/) that provides premium features and the ability to self-host Bitwarden for six persons. UPDATE: Bitwarden now offers a cheap license called [Families Organization](https://bitwarden.com/pricing/) that provides premium features and the ability to self-host Bitwarden for six persons.
## 2fa doesn't work
Unfortunately the new BitWarden container doesn't set the timezone and ignores TZ= from the environment, can be fixed by:
```
docker exec bitwarden ln -s /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime
```
## Changes in settings.env
Require a recreation of the docker container, build.sh will suffice too.
## Migrating from the old unified branch
```
git branch -m unified lite
git fetch origin
git branch -u origin/lite lite
git remote set-head origin -a
```
# Footnotes # Footnotes

239
build.ps1
View File

@@ -1,132 +1,107 @@
$ErrorActionPreference = 'Stop' $ErrorActionPreference = 'Stop'
$PSNativeCommandUseErrorActionPreference = $true $PSNativeCommandUseErrorActionPreference = $true
# detect buildx, ErrorActionPreference will ensure the script stops execution if not found # define temporary directory
docker buildx version $tempdirectory = "$pwd\temp"
# define services to patch
# Enable BuildKit for better build experience and to ensure platform args are populated $components = "Api","Identity"
$env:DOCKER_BUILDKIT=1
$env:COMPOSE_DOCKER_CLI_BUILD=1 # delete old directories / files if applicable
if (Test-Path "$tempdirectory") {
# define temporary directory Remove-Item "$tempdirectory" -Recurse -Force
$tempdirectory = "$pwd\temp" }
# define services to patch
$components = "Api","Identity" if (Test-Path -Path "$pwd\src\licenseGen\Core.dll" -PathType Leaf) {
Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
# delete old directories / files if applicable }
if (Test-Path "$tempdirectory" -PathType Container) {
Remove-Item "$tempdirectory" -Recurse -Force if (Test-Path -Path "$pwd\src\licenseGen\cert.pfx" -PathType Leaf) {
} Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
}
if (Test-Path -Path "$pwd\src\licenseGen\Core.dll" -PathType Leaf) {
Remove-Item "$pwd\src\licenseGen\Core.dll" -Force if (Test-Path -Path "$pwd\src\bitBetter\cert.cert" -PathType Leaf) {
} Remove-Item "$pwd\src\bitBetter\cert.cert" -Force
}
if (Test-Path -Path "$pwd\src\licenseGen\cert.pfx" -PathType Leaf) {
Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force # generate keys if none are available
} if (!(Test-Path "$pwd\.keys")) {
.\generateKeys.ps1
if (Test-Path -Path "$pwd\src\bitBetter\cert.cer" -PathType Leaf) { }
Remove-Item "$pwd\src\bitBetter\cert.cer" -Force
} # copy the key to bitBetter and licenseGen
Copy-Item "$pwd\.keys\cert.cert" -Destination "$pwd\src\bitBetter"
if (Test-Path "$pwd\.keys\cert.cert" -PathType Leaf) { Copy-Item "$pwd\.keys\cert.pfx" -Destination "$pwd\src\licenseGen"
Rename-Item -Path "$pwd\.keys\cert.cert" -NewName "$pwd\.keys\cert.cer"
} # build bitBetter and clean the source directory after
docker build --no-cache -t bitbetter/bitbetter "$pwd\src\bitBetter"
# generate keys if none are available Remove-Item "$pwd\src\bitBetter\cert.cert" -Force
if (!(Test-Path "$pwd\.keys" -PathType Container)) {
.\generateKeys.ps1 # gather all running instances
} $oldinstances = docker container ps --all -f Name=bitwarden --format '{{.ID}}'
# copy the key to bitBetter # stop and remove all running instances
Copy-Item "$pwd\.keys\cert.cer" -Destination "$pwd\src\bitBetter" foreach ($instance in $oldinstances) {
docker stop $instance
# build bitBetter and clean the source directory after docker rm $instance
docker build --no-cache -t bitbetter/bitbetter "$pwd\src\bitBetter" }
Remove-Item "$pwd\src\bitBetter\cert.cer" -Force
# update bitwarden itself
# gather all running instances, cannot run a wildcard filter on Ancestor= :(, does find all where name = *bitwarden* if ($args[0] -eq 'y')
$oldinstances = docker container ps --all -f Name=bitwarden --format '{{.ID}}' {
docker pull ghcr.io/bitwarden/self-host:beta
# stop and remove all running instances }
foreach ($instance in $oldinstances) { else
docker stop $instance {
docker rm $instance $confirmation = Read-Host "Update (or get) bitwarden source container"
} if ($confirmation -eq 'y') {
docker pull ghcr.io/bitwarden/self-host:beta
# update bitwarden itself }
if ($args[0] -eq 'update') { }
docker pull ghcr.io/bitwarden/lite:latest
} else { # remove previous existing patch(ed) image
$confirmation = Read-Host "Update (or get) bitwarden source container (y/n)" if (docker image ls -q bitwarden-patch) {
if ($confirmation -eq 'y') { docker image rm bitwarden-patch
docker pull ghcr.io/bitwarden/lite:latest }
}
} # start a new bitwarden instance so we can patch it
$patchinstance = docker run -d --name bitwarden-patch ghcr.io/bitwarden/self-host:beta
# stop and remove previous existing patch(ed) container
$oldinstances = docker container ps --all -f Ancestor=bitwarden-patched --format '{{.ID}}' # create our temporary directory
foreach ($instance in $oldinstances) { New-item -ItemType Directory -Path $tempdirectory
docker stop $instance
docker rm $instance # extract the files that need to be patched from the services that need to be patched into our temporary directory
} foreach ($component in $components) {
$oldinstances = docker image ls bitwarden-patched --format '{{.ID}}' New-item -itemtype Directory -path "$tempdirectory\$component"
foreach ($instance in $oldinstances) { docker cp $patchinstance`:/app/$component/Core.dll "$tempdirectory\$component\Core.dll"
docker image rm $instance }
}
# run bitBetter, this applies our patches to the required files
# remove old extract containers docker run -v "$tempdirectory`:/app/mount" --rm bitbetter/bitbetter
$oldinstances = docker container ps --all -f Name=bitwarden-extract --format '{{.ID}}'
foreach ($instance in $oldinstances) { # create a new image with the patched files
docker stop $instance docker build . --tag bitwarden-patch --file "$pwd\src\bitBetter\Dockerfile-bitwarden-patch"
docker rm $instance
} # stop and remove our temporary container
docker stop bitwarden-patch
# start a new bitwarden instance so we can patch it docker rm bitwarden-patch
$patchinstance = docker run -d --name bitwarden-extract ghcr.io/bitwarden/lite:latest
# copy our patched library to the licenseGen source directory
# create our temporary directory Copy-Item "$tempdirectory\Identity\Core.dll" -Destination "$pwd\src\licenseGen"
New-item -ItemType Directory -Path $tempdirectory
# remove our temporary directory
# extract the files that need to be patched from the services that need to be patched into our temporary directory Remove-Item "$tempdirectory" -Recurse -Force
foreach ($component in $components) {
New-item -itemtype Directory -path "$tempdirectory\$component" # start all user requested instances
docker cp $patchinstance`:/app/$component/Core.dll "$tempdirectory\$component\Core.dll" foreach($line in Get-Content "$pwd\.servers\serverlist.txt") {
} Invoke-Expression "& $line"
}
# stop and remove our temporary container
docker stop bitwarden-extract # remove our bitBetter image
docker rm bitwarden-extract docker image rm bitbetter/bitbetter
# run bitBetter, this applies our patches to the required files # build the licenseGen
docker run -v "$tempdirectory`:/app/mount" --rm bitbetter/bitbetter docker build -t bitbetter/licensegen "$pwd\src\licenseGen"
# create a new image with the patched files # clean the licenseGen source directory
docker build . --tag bitwarden-patched --file "$pwd\src\bitBetter\Dockerfile-bitwarden-patch" Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
# start all user requested instances
if (Test-Path -Path "$pwd\.servers\serverlist.txt" -PathType Leaf) {
foreach($line in Get-Content "$pwd\.servers\serverlist.txt") {
if (!($line.StartsWith("#"))) {
Invoke-Expression "& $line"
}
}
}
# remove our bitBetter image
docker image rm bitbetter/bitbetter
# copy our patched library to the licenseGen source directory
Copy-Item "$tempdirectory\Identity\Core.dll" -Destination "$pwd\src\licenseGen"
Copy-Item "$pwd\.keys\cert.pfx" -Destination "$pwd\src\licenseGen"
# build the licenseGen
docker build -t bitbetter/licensegen "$pwd\src\licenseGen"
# clean the licenseGen source directory
Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
# remove our temporary directory
Remove-Item "$tempdirectory" -Recurse -Force

101
build.sh
View File

@@ -1,13 +1,6 @@
#!/bin/bash #!/bin/bash
set -e set -e
# detect buildx, set -e will ensure the script stops execution if not found
docker buildx version
# Enable BuildKit for better build experience and to ensure platform args are populated
export DOCKER_BUILDKIT=1
export COMPOSE_DOCKER_CLI_BUILD=1
# define temporary directory # define temporary directory
TEMPDIRECTORY="$PWD/temp" TEMPDIRECTORY="$PWD/temp"
@@ -20,19 +13,15 @@ if [ -d "$TEMPDIRECTORY" ]; then
fi fi
if [ -f "$PWD/src/licenseGen/Core.dll" ]; then if [ -f "$PWD/src/licenseGen/Core.dll" ]; then
rm -f "$PWD/src/licenseGen/Core.dll" rm -f "$PWD/src/licenseGen/Core.dll"
fi fi
if [ -f "$PWD/src/licenseGen/cert.pfx" ]; then if [ -f "$PWD/src/licenseGen/cert.pfx" ]; then
rm -f "$PWD/src/licenseGen/cert.pfx" rm -f "$PWD/src/licenseGen/cert.pfx"
fi fi
if [ -f "$PWD/src/bitBetter/cert.cer" ]; then if [ -f "$PWD/src/bitBetter/cert.cert" ]; then
rm -f "$PWD/src/bitBetter/cert.cer" rm -f "$PWD/src/bitBetter/cert.cert"
fi
if [ -f "$PWD/.keys/cert.cert" ]; then
mv "$PWD/.keys/cert.cert" "$PWD/.keys/cert.cer"
fi fi
# generate keys if none are available # generate keys if none are available
@@ -40,14 +29,15 @@ if [ ! -d "$PWD/.keys" ]; then
./generateKeys.sh ./generateKeys.sh
fi fi
# copy the key to bitBetter # copy the key to bitBetter and licenseGen
cp -f "$PWD/.keys/cert.cer" "$PWD/src/bitBetter" cp -f "$PWD/.keys/cert.cert" "$PWD/src/bitBetter"
cp -f "$PWD/.keys/cert.pfx" "$PWD/src/licenseGen"
# build bitBetter and clean the source directory after # build bitBetter and clean the source directory after
docker build --no-cache -t bitbetter/bitbetter "$PWD/src/bitBetter" docker build --no-cache -t bitbetter/bitbetter "$PWD/src/bitBetter"
rm -f "$PWD/src/bitBetter/cert.cer" rm -f "$PWD/src/bitBetter/cert.cert"
# gather all running instances, cannot run a wildcard filter on Ancestor= :(, does find all where name = *bitwarden* # gather all running instances
OLDINSTANCES=$(docker container ps --all -f Name=bitwarden --format '{{.ID}}') OLDINSTANCES=$(docker container ps --all -f Name=bitwarden --format '{{.ID}}')
# stop and remove all running instances # stop and remove all running instances
@@ -57,35 +47,24 @@ for INSTANCE in ${OLDINSTANCES[@]}; do
done done
# update bitwarden itself # update bitwarden itself
if [ "$1" = "update" ]; then if [ "$1" = "y" ]; then
docker pull ghcr.io/bitwarden/lite:latest docker pull ghcr.io/bitwarden/self-host:beta
else else
read -p "Update (or get) bitwarden source container (y/n): " read -p "Update (or get) bitwarden source container: " -n 1 -r
if [[ $REPLY =~ ^[Yy]$ ]]; then echo
docker pull ghcr.io/bitwarden/lite:latest if [[ $REPLY =~ ^[Yy]$ ]]
then
docker pull ghcr.io/bitwarden/self-host:beta
fi fi
fi fi
# stop and remove previous existing patch(ed) container # remove previous existing patch(ed) image
OLDINSTANCES=$(docker container ps --all -f Ancestor=bitwarden-patched --format '{{.ID}}') if [ "$(docker image ls -q bitwarden-patch)" ]; then
for INSTANCE in ${OLDINSTANCES[@]}; do docker image rm bitwarden-patch
docker stop $INSTANCE fi
docker rm $INSTANCE
done
OLDINSTANCES=$(docker image ls bitwarden-patched --format '{{.ID}}')
for INSTANCE in ${OLDINSTANCES[@]}; do
docker image rm $INSTANCE
done
# remove old extract containers
OLDINSTANCES=$(docker container ps --all -f Name=bitwarden-extract --format '{{.ID}}')
for INSTANCE in ${OLDINSTANCES[@]}; do
docker stop $INSTANCE
docker rm $INSTANCE
done
# start a new bitwarden instance so we can patch it # start a new bitwarden instance so we can patch it
PATCHINSTANCE=$(docker run -d --name bitwarden-extract ghcr.io/bitwarden/lite:latest) PATCHINSTANCE=$(docker run -d --name bitwarden-patch ghcr.io/bitwarden/self-host:beta)
# create our temporary directory # create our temporary directory
mkdir $TEMPDIRECTORY mkdir $TEMPDIRECTORY
@@ -96,33 +75,30 @@ for COMPONENT in ${COMPONENTS[@]}; do
docker cp $PATCHINSTANCE:/app/$COMPONENT/Core.dll "$TEMPDIRECTORY/$COMPONENT/Core.dll" docker cp $PATCHINSTANCE:/app/$COMPONENT/Core.dll "$TEMPDIRECTORY/$COMPONENT/Core.dll"
done done
# stop and remove our temporary container
docker stop bitwarden-extract
docker rm bitwarden-extract
# run bitBetter, this applies our patches to the required files # run bitBetter, this applies our patches to the required files
docker run -v "$TEMPDIRECTORY:/app/mount" --rm bitbetter/bitbetter docker run -v "$TEMPDIRECTORY:/app/mount" --rm bitbetter/bitbetter
# create a new image with the patched files # create a new image with the patched files
docker build . --tag bitwarden-patched --file "$PWD/src/bitBetter/Dockerfile-bitwarden-patch" docker build . --tag bitwarden-patch --file "$PWD/src/bitBetter/Dockerfile-bitwarden-patch"
# start all user requested instances # stop and remove our temporary container
if [ -f "$PWD/.servers/serverlist.txt" ]; then docker stop bitwarden-patch
# convert line endings to unix docker rm bitwarden-patch
sed -i 's/\r$//' "$PWD/.servers/serverlist.txt"
cat "$PWD/.servers/serverlist.txt" | while read -r LINE; do
if [[ $LINE != "#"* ]]; then
bash -c "$LINE"
fi
done
fi
# remove our bitBetter image
docker image rm bitbetter/bitbetter
# copy our patched library to the licenseGen source directory # copy our patched library to the licenseGen source directory
cp -f "$TEMPDIRECTORY/Identity/Core.dll" "$PWD/src/licenseGen" cp -f "$TEMPDIRECTORY/Identity/Core.dll" "$PWD/src/licenseGen"
cp -f "$PWD/.keys/cert.pfx" "$PWD/src/licenseGen"
# remove our temporary directory
rm -rf "$TEMPDIRECTORY"
# start all user requested instances
sed -i 's/\r$//' "$PWD/.servers/serverlist.txt"
cat "$PWD/.servers/serverlist.txt" | while read -r LINE; do
bash -c "$LINE"
done
# remove our bitBetter image
docker image rm bitbetter/bitbetter
# build the licenseGen # build the licenseGen
docker build -t bitbetter/licensegen "$PWD/src/licenseGen" docker build -t bitbetter/licensegen "$PWD/src/licenseGen"
@@ -130,6 +106,3 @@ docker build -t bitbetter/licensegen "$PWD/src/licenseGen"
# clean the licenseGen source directory # clean the licenseGen source directory
rm -f "$PWD/src/licenseGen/Core.dll" rm -f "$PWD/src/licenseGen/Core.dll"
rm -f "$PWD/src/licenseGen/cert.pfx" rm -f "$PWD/src/licenseGen/cert.pfx"
# remove our temporary directory
rm -rf "$TEMPDIRECTORY"

View File

@@ -1,25 +1,25 @@
$ErrorActionPreference = 'Stop' $ErrorActionPreference = 'Stop'
$PSNativeCommandUseErrorActionPreference = $true $PSNativeCommandUseErrorActionPreference = $true
# get the basic openssl binary path # get the basic openssl binary path
$opensslbinary = "$Env:Programfiles\OpenSSL-Win64\bin\openssl.exe" $opensslbinary = "$Env:Programfiles\OpenSSL-Win64\bin\openssl.exe"
# if openssl is not installed attempt to install it # if openssl is not installed attempt to install it
if (!(Get-Command $opensslbinary -errorAction SilentlyContinue)) if (!(Get-Command $opensslbinary -errorAction SilentlyContinue))
{ {
winget install openssl winget install openssl
} }
# if previous keys exist, remove them # if previous keys exist, remove them
if (Test-Path "$pwd\.keys") if (Test-Path "$pwd\.keys")
{ {
Remove-Item "$pwd\.keys" -Recurse -Force Remove-Item "$pwd\.keys" -Recurse -Force
} }
# create new directory # create new directory
New-item -ItemType Directory -Path "$pwd\.keys" New-item -ItemType Directory -Path "$pwd\.keys"
# generate actual keys # generate actual keys
Invoke-Expression "& '$opensslbinary' req -x509 -newkey rsa:4096 -keyout `"$pwd\.keys\key.pem`" -out `"$pwd\.keys\cert.cer`" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US' -outform DER -passout pass:test" Invoke-Expression "& '$opensslbinary' req -x509 -newkey rsa:4096 -keyout `"$pwd\.keys\key.pem`" -out `"$pwd\.keys\cert.cert`" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US' -outform DER -passout pass:test"
Invoke-Expression "& '$opensslbinary' x509 -inform DER -in `"$pwd\.keys\cert.cer`" -out `"$pwd\.keys\cert.pem`"" Invoke-Expression "& '$opensslbinary' x509 -inform DER -in `"$pwd\.keys\cert.cert`" -out `"$pwd\.keys\cert.pem`""
Invoke-Expression "& '$opensslbinary' pkcs12 -export -out `"$pwd\.keys\cert.pfx`" -inkey `"$pwd\.keys\key.pem`" -in `"$pwd\.keys\cert.pem`" -passin pass:test -passout pass:test" Invoke-Expression "& '$opensslbinary' pkcs12 -export -out `"$pwd\.keys\cert.pfx`" -inkey `"$pwd\.keys\key.pem`" -in `"$pwd\.keys\cert.pem`" -passin pass:test -passout pass:test"

View File

@@ -15,6 +15,6 @@ fi
mkdir "$DIR" mkdir "$DIR"
# Generate new keys # Generate new keys
openssl req -x509 -newkey rsa:4096 -keyout "$DIR/key.pem" -out "$DIR/cert.cer" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US' -outform DER -passout pass:test openssl req -x509 -newkey rsa:4096 -keyout "$DIR/key.pem" -out "$DIR/cert.cert" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US' -outform DER -passout pass:test
openssl x509 -inform DER -in "$DIR/cert.cer" -out "$DIR/cert.pem" openssl x509 -inform DER -in "$DIR/cert.cert" -out "$DIR/cert.pem"
openssl pkcs12 -export -out "$DIR/cert.pfx" -inkey "$DIR/key.pem" -in "$DIR/cert.pem" -passin pass:test -passout pass:test openssl pkcs12 -export -out "$DIR/cert.pfx" -inkey "$DIR/key.pem" -in "$DIR/cert.pem" -passin pass:test -passout pass:test

View File

@@ -2,16 +2,16 @@ $ErrorActionPreference = 'Stop'
$PSNativeCommandUseErrorActionPreference = $true $PSNativeCommandUseErrorActionPreference = $true
if ($($args.Count) -lt 1) { if ($($args.Count) -lt 1) {
echo "USAGE: <License Gen action> [License Gen args...]" echo "USAGE: <License Gen action> [License Gen args...]"
echo "ACTIONS:" echo "ACTIONS:"
echo " interactive" echo " interactive"
echo " user" echo " user"
echo " org" echo " org"
Exit 1 Exit 1
} }
if ($args[0] -eq "interactive") { if ($args[0] = "interactive") {
docker run -it --rm bitbetter/licensegen interactive docker run -it --rm bitbetter/licensegen interactive
} else { } else {
docker run bitbetter/licensegen $args docker run bitbetter/licensegen $args
} }

View File

@@ -2,12 +2,12 @@
set -e set -e
if [ $# -lt 1 ]; then if [ $# -lt 1 ]; then
echo "USAGE: <License Gen action> [License Gen args...]" echo "USAGE: <License Gen action> [License Gen args...]"
echo "ACTIONS:" echo "ACTIONS:"
echo " interactive" echo " interactive"
echo " user" echo " user"
echo " org" echo " org"
exit 1 exit 1
fi fi
if [ "$1" = "interactive" ]; then if [ "$1" = "interactive" ]; then

View File

@@ -2,7 +2,7 @@ FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
WORKDIR /bitBetter WORKDIR /bitBetter
COPY . /bitBetter COPY . /bitBetter
COPY cert.cer /app/ COPY cert.cert /app/
RUN dotnet restore RUN dotnet restore
RUN dotnet publish -c Release -o /app --no-restore RUN dotnet publish -c Release -o /app --no-restore
@@ -11,4 +11,4 @@ FROM mcr.microsoft.com/dotnet/sdk:8.0
WORKDIR /app WORKDIR /app
COPY --from=build /app . COPY --from=build /app .
ENTRYPOINT ["dotnet", "/app/bitBetter.dll"] ENTRYPOINT [ "/app/bitBetter" ]

View File

@@ -1,3 +1,4 @@
FROM ghcr.io/bitwarden/lite:latest FROM ghcr.io/bitwarden/self-host:beta
COPY ./temp/ /app/ COPY ./temp/Api/Core.dll /app/Api/Core.dll
COPY ./temp/Identity/Core.dll /app/Identity/Core.dll

View File

@@ -1,67 +1,75 @@
using System; using System;
using System.Collections.Generic; using System.Collections.Generic;
using System.IO; using System.IO;
using System.Linq; using System.Linq;
using System.Security.Cryptography.X509Certificates; using System.Security.Cryptography.X509Certificates;
using dnlib.DotNet; using dnlib.DotNet;
using dnlib.DotNet.Emit; using dnlib.DotNet.Emit;
using dnlib.DotNet.Writer; using dnlib.DotNet.Writer;
using dnlib.IO; using dnlib.IO;
namespace bitBetter; namespace bitBetter;
internal class Program internal class Program
{ {
private static Int32 Main() private static Int32 Main()
{ {
const String certFile = "/app/cert.cer"; const String certFile = "/app/cert.cert";
String[] files = Directory.GetFiles("/app/mount", "Core.dll", SearchOption.AllDirectories); String[] files = Directory.GetFiles("/app/mount", "Core.dll", SearchOption.AllDirectories);
foreach (String file in files) foreach (String file in files)
{ {
Console.WriteLine(file); Console.WriteLine(file);
ModuleDefMD moduleDefMd = ModuleDefMD.Load(file); ModuleDefMD moduleDefMd = ModuleDefMD.Load(file);
Byte[] cert = File.ReadAllBytes(certFile); Byte[] cert = File.ReadAllBytes(certFile);
EmbeddedResource embeddedResourceToRemove = moduleDefMd.Resources.OfType<EmbeddedResource>().First(r => r.Name.Equals("Bit.Core.licensing.cer")); EmbeddedResource embeddedResourceToRemove = moduleDefMd.Resources
EmbeddedResource embeddedResourceToAdd = new("Bit.Core.licensing.cer", cert) { Attributes = embeddedResourceToRemove.Attributes }; .OfType<EmbeddedResource>()
moduleDefMd.Resources.Add(embeddedResourceToAdd); .First(r => r.Name.Equals("Bit.Core.licensing.cer"));
moduleDefMd.Resources.Remove(embeddedResourceToRemove);
Console.WriteLine(embeddedResourceToRemove.Name);
DataReader reader = embeddedResourceToRemove.CreateReader();
X509Certificate2 existingCert = new(reader.ReadRemainingBytes()); EmbeddedResource embeddedResourceToAdd = new("Bit.Core.licensing.cer", cert) { Attributes = embeddedResourceToRemove.Attributes };
moduleDefMd.Resources.Add(embeddedResourceToAdd);
Console.WriteLine($"Existing Cert Thumbprint: {existingCert.Thumbprint}"); moduleDefMd.Resources.Remove(embeddedResourceToRemove);
X509Certificate2 certificate = new(cert);
DataReader reader = embeddedResourceToRemove.CreateReader();
Console.WriteLine($"New Cert Thumbprint: {certificate.Thumbprint}"); X509Certificate2 existingCert = new(reader.ReadRemainingBytes());
IEnumerable<TypeDef> services = moduleDefMd.Types.Where(t => t.Namespace == "Bit.Core.Billing.Services"); Console.WriteLine($"Existing Cert Thumbprint: {existingCert.Thumbprint}");
TypeDef type = services.First(t => t.Name == "LicensingService"); X509Certificate2 certificate = new(cert);
MethodDef constructor = type.FindConstructors().First();
Console.WriteLine($"New Cert Thumbprint: {certificate.Thumbprint}");
Instruction instructionToPatch = constructor.Body.Instructions.FirstOrDefault(i => i.OpCode == OpCodes.Ldstr && String.Equals((String)i.Operand, existingCert.Thumbprint, StringComparison.InvariantCultureIgnoreCase));
IEnumerable<TypeDef> services = moduleDefMd.Types.Where(t => t.Namespace == "Bit.Core.Billing.Services");
if (instructionToPatch != null) TypeDef type = services.First(t => t.Name == "LicensingService");
{ MethodDef constructor = type.FindConstructors().First();
instructionToPatch.Operand = certificate.Thumbprint;
} Instruction instructionToPatch =
else constructor.Body.Instructions
{ .FirstOrDefault(i => i.OpCode == OpCodes.Ldstr
Console.WriteLine("Can't find constructor to patch"); && String.Equals((String)i.Operand, existingCert.Thumbprint, StringComparison.InvariantCultureIgnoreCase));
}
if (instructionToPatch != null)
ModuleWriterOptions moduleWriterOptions = new(moduleDefMd); {
moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.KeepOldMaxStack; instructionToPatch.Operand = certificate.Thumbprint;
moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveAll; }
moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveRids; else
{
moduleDefMd.Write(file + ".new"); Console.WriteLine("Can't find constructor to patch");
moduleDefMd.Dispose(); }
File.Delete(file);
File.Move(file + ".new", file); ModuleWriterOptions moduleWriterOptions = new(moduleDefMd);
} moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.KeepOldMaxStack;
moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveAll;
return 0; moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveRids;
}
moduleDefMd.Write(file + ".new");
moduleDefMd.Dispose();
File.Delete(file);
File.Move(file + ".new", file);
}
return 0;
}
} }

View File

@@ -1,9 +1,12 @@
<Project Sdk="Microsoft.NET.Sdk"> <Project Sdk="Microsoft.NET.Sdk">
<PropertyGroup> <PropertyGroup>
<OutputType>Exe</OutputType> <OutputType>Exe</OutputType>
<TargetFramework>net8.0</TargetFramework> <TargetFramework>net8.0</TargetFramework>
</PropertyGroup> </PropertyGroup>
<ItemGroup>
<PackageReference Include="dnlib" Version="4.5.0" /> <ItemGroup>
<PackageReference Include="dnlib" Version="4.4.0" />
</ItemGroup> </ItemGroup>
</Project>
</Project>

View File

@@ -12,4 +12,4 @@ FROM mcr.microsoft.com/dotnet/sdk:8.0
WORKDIR /app WORKDIR /app
COPY --from=build /app . COPY --from=build /app .
ENTRYPOINT ["dotnet", "/app/licenseGen.dll", "--cert=/app/cert.pfx", "--core=/app/Core.dll"] ENTRYPOINT [ "dotnet", "/app/licenseGen.dll", "--core", "/app/Core.dll", "--cert", "/app/cert.pfx" ]

View File

@@ -1,485 +1,454 @@
using System; using System;
using System.IO; using System.IO;
using System.Text.Json; using System.Reflection;
using System.Reflection; using System.Runtime.Loader;
using System.Runtime.Loader; using System.Security.Cryptography.X509Certificates;
using System.Security.Cryptography.X509Certificates; using McMaster.Extensions.CommandLineUtils;
using McMaster.Extensions.CommandLineUtils; using Newtonsoft.Json;
namespace licenseGen; namespace licenseGen;
internal class Program internal class Program
{ {
private static readonly CommandLineApplication App = new(); private static Int32 Main(String[] args)
private static readonly CommandOption Cert = App.Option("--cert", "Certificate file", CommandOptionType.SingleValue); {
private static readonly CommandOption CoreDll = App.Option("--core", "Path to Core.dll", CommandOptionType.SingleValue); CommandLineApplication app = new();
CommandOption cert = app.Option("--cert", "cert file", CommandOptionType.SingleValue);
private static Int32 Main(String[] args) CommandOption coreDll = app.Option("--core", "path to core dll", CommandOptionType.SingleValue);
{
App.Command("interactive", config => Boolean CertExists()
{ {
String buff, licenseType = "", name = "", email = "", businessName=""; return File.Exists(cert.Value());
Int16 storage = 0; }
Boolean validGuid = false, validInstallid = false;
Guid guid = Guid.Empty, installid = Guid.Empty; Boolean CoreExists()
{
config.OnExecute(() => return File.Exists(coreDll.Value());
{ }
Check();
Console.WriteLine("Interactive license mode..."); Boolean VerifyTopOptions()
{
while (licenseType == "") return !String.IsNullOrWhiteSpace(cert.Value()) &&
{ !String.IsNullOrWhiteSpace(coreDll.Value()) &&
Console.WriteLine("What would you like to generate, a [u]ser license or an [o]rg license: "); CertExists() && CoreExists();
buff = Console.ReadLine(); }
switch (buff) app.Command("interactive", config =>
{ {
case "u": String buff, licenseType = "", name = "", email = "", businessName="";
{ Int16 storage = 0;
licenseType = "user";
Console.WriteLine("Okay, we will generate a user license."); Boolean validGuid = false, validInstallid = false;
Guid guid = new(), installid = new();
while (!validGuid)
{ config.OnExecute(() =>
Console.WriteLine("Please provide the user's guid — refer to the Readme for details on how to retrieve this. [GUID]: "); {
buff = Console.ReadLine(); if (!VerifyTopOptions())
{
if (Guid.TryParse(buff, out guid))validGuid = true; if (!CoreExists()) config.Error.WriteLine($"Can't find core dll at: {coreDll.Value()}");
else Console.WriteLine("The user-guid provided does not appear to be valid!"); if (!CertExists()) config.Error.WriteLine($"Can't find certificate at: {cert.Value()}");
}
break; config.ShowHelp();
} return 1;
case "o": }
{
licenseType = "org"; Console.WriteLine("Interactive license mode...");
Console.WriteLine("Okay, we will generate an organization license.");
while (licenseType == "")
while (!validInstallid) {
{ Console.WriteLine("What would you like to generate, a [u]ser license or an [o]rg license: ");
Console.WriteLine("Please provide your Bitwarden Install-ID — refer to the Readme for details on how to retrieve this. [Install-ID]: "); buff = Console.ReadLine();
buff = Console.ReadLine();
if(buff == "u")
if (Guid.TryParse(buff, out installid)) validInstallid = true; {
else Console.WriteLine("The install-id provided does not appear to be valid."); licenseType = "user";
} Console.WriteLine("Okay, we will generate a user license.");
while (businessName == "") while (validGuid == false)
{ {
Console.WriteLine("Please enter a business name, default is BitBetter. [Business Name]: "); Console.WriteLine("Please provide the user's guid — refer to the Readme for details on how to retrieve this. [GUID]: ");
buff = Console.ReadLine(); buff = Console.ReadLine();
if (buff == "")
{ if (Guid.TryParse(buff, out guid))validGuid = true;
businessName = "BitBetter"; else Console.WriteLine("The user-guid provided does not appear to be valid!");
} }
else if (CheckBusinessName(buff)) }
{ else if (buff == "o")
businessName = buff; {
} licenseType = "org";
} Console.WriteLine("Okay, we will generate an organization license.");
break;
} while (validInstallid == false)
default: {
Console.WriteLine("Unrecognized option \'" + buff + "\'."); Console.WriteLine("Please provide your Bitwarden Install-ID — refer to the Readme for details on how to retrieve this. [Install-ID]: ");
break; buff = Console.ReadLine();
}
} if (Guid.TryParse(buff, out installid)) validInstallid = true;
else Console.WriteLine("The install-id provided does not appear to be valid.");
while (name == "") }
{
Console.WriteLine("Please provide the username this license will be registered to. [username]: "); while (businessName == "")
buff = Console.ReadLine(); {
if (CheckUsername(buff)) name = buff; Console.WriteLine("Please enter a business name, default is BitBetter. [Business Name]: ");
} buff = Console.ReadLine();
if (buff == "")
while (email == "") {
{ businessName = "BitBetter";
Console.WriteLine("Please provide the email address for the user " + name + ". [email]: "); }
buff = Console.ReadLine(); else if (CheckBusinessName(buff))
if (CheckEmail(buff)) {
{ businessName = buff;
email = buff; }
} }
} }
else
while (storage == 0) {
{ Console.WriteLine("Unrecognized option \'" + buff + "\'.");
Console.WriteLine("Extra storage space for the user " + name + ". (max.: " + Int16.MaxValue + "). Defaults to maximum value. [storage]"); }
buff = Console.ReadLine(); }
if (String.IsNullOrWhiteSpace(buff))
{ while (name == "")
storage = Int16.MaxValue; {
} Console.WriteLine("Please provide the username this license will be registered to. [username]: ");
else buff = Console.ReadLine();
{ if ( CheckUsername(buff) ) name = buff;
if (CheckStorage(buff)) }
{
storage = Int16.Parse(buff); while (email == "")
} {
} Console.WriteLine("Please provide the email address for the user " + name + ". [email]: ");
} buff = Console.ReadLine();
if (CheckEmail(buff))
switch (licenseType) {
{ email = buff;
case "user": }
{ }
Console.WriteLine("Confirm creation of \"user\" license for username: \"" + name + "\", email: \"" + email + "\", Storage: \"" + storage + " GB\", User-GUID: \"" + guid + "\"? Y/n");
buff = Console.ReadLine(); while (storage == 0)
if (buff is "" or "y" or "Y") {
{ Console.WriteLine("Extra storage space for the user " + name + ". (max.: " + Int16.MaxValue + "). Defaults to maximum value. [storage]");
GenerateUserLicense(new X509Certificate2(Cert.Value(), "test"), CoreDll.Value(), name, email, storage, guid, null); buff = Console.ReadLine();
} if (String.IsNullOrWhiteSpace(buff))
else {
{ storage = Int16.MaxValue;
Console.WriteLine("Exiting..."); }
return 0; else
} {
if (CheckStorage(buff))
break; {
} storage = Int16.Parse(buff);
case "org": }
{ }
Console.WriteLine("Confirm creation of \"organization\" license for business name: \"" + businessName + "\", username: \"" + name + "\", email: \"" + email + "\", Storage: \"" + storage + " GB\", Install-ID: \"" + installid + "\"? Y/n"); }
buff = Console.ReadLine();
if (buff is "" or "y" or "Y") if (licenseType == "user")
{ {
GenerateOrgLicense(new X509Certificate2(Cert.Value(), "test"), CoreDll.Value(), name, email, storage, installid, businessName, null); Console.WriteLine("Confirm creation of \"user\" license for username: \"" + name + "\", email: \"" + email + "\", Storage: \"" + storage + " GB\", User-GUID: \"" + guid + "\"? Y/n");
} buff = Console.ReadLine();
else if ( buff is "" or "y" or "Y" )
{ {
Console.WriteLine("Exiting..."); GenerateUserLicense(new X509Certificate2(cert.Value(), "test"), coreDll.Value(), name, email, storage, guid, null);
return 0; }
} else
{
break; Console.WriteLine("Exiting...");
} return 0;
} }
}
return 0; else if (licenseType == "org")
}); {
}); Console.WriteLine("Confirm creation of \"organization\" license for business name: \"" + businessName + "\", username: \"" + name + "\", email: \"" + email + "\", Storage: \"" + storage + " GB\", Install-ID: \"" + installid + "\"? Y/n");
App.Command("user", config => buff = Console.ReadLine();
{ if ( buff is "" or "y" or "Y" )
CommandArgument name = config.Argument("Name", "your name"); {
CommandArgument email = config.Argument("Email", "your email"); GenerateOrgLicense(new X509Certificate2(cert.Value(), "test"), coreDll.Value(), name, email, storage, installid, businessName, null);
CommandArgument userIdArg = config.Argument("User ID", "your user id"); }
CommandArgument storage = config.Argument("Storage", "extra storage space in GB. Maximum is " + Int16.MaxValue + " (optional, default = max)"); else
CommandArgument key = config.Argument("Key", "your key id (optional)"); {
Console.WriteLine("Exiting...");
config.OnExecute(() => return 0;
{ }
Check(); }
if (String.IsNullOrWhiteSpace(name.Value) || String.IsNullOrWhiteSpace(email.Value)) return 0;
{ });
config.Error.WriteLine($"Some arguments are missing: Name='{name.Value}' Email='{email.Value}'"); });
config.ShowHelp(true); app.Command("user", config =>
return 1; {
} CommandArgument name = config.Argument("Name", "your name");
CommandArgument email = config.Argument("Email", "your email");
if (String.IsNullOrWhiteSpace(userIdArg.Value) || !Guid.TryParse(userIdArg.Value, out Guid userId)) CommandArgument userIdArg = config.Argument("User ID", "your user id");
{ CommandArgument storage = config.Argument("Storage", "extra storage space in GB. Maximum is " + Int16.MaxValue + " (optional, default = max)");
config.Error.WriteLine("User ID not provided"); CommandArgument key = config.Argument("Key", "your key id (optional)");
config.ShowHelp(true);
return 1; config.OnExecute(() =>
} {
if (!VerifyTopOptions())
Int16 storageShort = 0; {
if (!String.IsNullOrWhiteSpace(storage.Value)) if (!CoreExists())
{ {
Double parsedStorage = Double.Parse(storage.Value); config.Error.WriteLine($"Can't find core dll at: {coreDll.Value()}");
if (parsedStorage is > Int16.MaxValue or < 0) }
{ if (!CertExists())
config.Error.WriteLine("The storage value provided is outside the accepted range of [0-" + Int16.MaxValue + "]"); {
config.ShowHelp(true); config.Error.WriteLine($"Can't find certificate at: {cert.Value()}");
return 1; }
}
storageShort = (Int16) parsedStorage; config.ShowHelp();
} return 1;
}
GenerateUserLicense(new X509Certificate2(Cert.Value()!, "test"), CoreDll.Value(), name.Value, email.Value, storageShort, userId, key.Value);
if (String.IsNullOrWhiteSpace(name.Value) || String.IsNullOrWhiteSpace(email.Value))
return 0; {
}); config.Error.WriteLine($"Some arguments are missing: Name='{name.Value}' Email='{email.Value}'");
}); config.ShowHelp(true);
App.Command("org", config => return 1;
{ }
CommandArgument name = config.Argument("Name", "your name");
CommandArgument email = config.Argument("Email", "your email"); if (String.IsNullOrWhiteSpace(userIdArg.Value) || !Guid.TryParse(userIdArg.Value, out Guid userId))
CommandArgument installId = config.Argument("InstallId", "your installation id (GUID)"); {
CommandArgument storage = config.Argument("Storage", "extra storage space in GB. Maximum is " + Int16.MaxValue + " (optional, default = max)"); config.Error.WriteLine("User ID not provided");
CommandArgument businessName = config.Argument("BusinessName", "name for the organization (optional)"); config.ShowHelp(true);
CommandArgument key = config.Argument("Key", "your key id (optional)"); return 1;
}
config.OnExecute(() =>
{ Int16 storageShort = 0;
Check(); if (!String.IsNullOrWhiteSpace(storage.Value))
{
if (String.IsNullOrWhiteSpace(name.Value) || String.IsNullOrWhiteSpace(email.Value) || String.IsNullOrWhiteSpace(installId.Value)) Double parsedStorage = Double.Parse(storage.Value);
{ if (parsedStorage is > Int16.MaxValue or < 0)
config.Error.WriteLine($"Some arguments are missing: Name='{name.Value}' Email='{email.Value}' InstallId='{installId.Value}'"); {
config.ShowHelp(true); config.Error.WriteLine("The storage value provided is outside the accepted range of [0-" + Int16.MaxValue + "]");
return 1; config.ShowHelp(true);
} return 1;
}
if (!Guid.TryParse(installId.Value, out Guid installationId)) storageShort = (Int16) parsedStorage;
{ }
config.Error.WriteLine("Unable to parse your installation id as a GUID");
config.Error.WriteLine($"Here's a new guid: {Guid.NewGuid()}"); GenerateUserLicense(new X509Certificate2(cert.Value(), "test"), coreDll.Value(), name.Value, email.Value, storageShort, userId, key.Value);
config.ShowHelp(true);
return 1; return 0;
} });
});
Int16 storageShort = 0; app.Command("org", config =>
if (!String.IsNullOrWhiteSpace(storage.Value)) {
{ CommandArgument name = config.Argument("Name", "your name");
Double parsedStorage = Double.Parse(storage.Value); CommandArgument email = config.Argument("Email", "your email");
if (parsedStorage is > Int16.MaxValue or < 0) CommandArgument installId = config.Argument("InstallId", "your installation id (GUID)");
{ CommandArgument storage = config.Argument("Storage", "extra storage space in GB. Maximum is " + Int16.MaxValue + " (optional, default = max)");
config.Error.WriteLine("The storage value provided is outside the accepted range of [0-" + Int16.MaxValue + "]"); CommandArgument businessName = config.Argument("BusinessName", "name for the organization (optional)");
config.ShowHelp(true); CommandArgument key = config.Argument("Key", "your key id (optional)");
return 1;
} config.OnExecute(() =>
storageShort = (Int16)parsedStorage; {
} if (!VerifyTopOptions())
{
GenerateOrgLicense(new X509Certificate2(Cert.Value()!, "test"), CoreDll.Value(), name.Value, email.Value, storageShort, installationId, businessName.Value, key.Value); if (!CoreExists())
{
return 0; config.Error.WriteLine($"Can't find core dll at: {coreDll.Value()}");
}); }
}); if (!CertExists())
{
App.OnExecute(() => config.Error.WriteLine($"Can't find certificate at: {cert.Value()}");
{ }
App.ShowHelp();
return 10; config.ShowHelp();
}); return 1;
}
try
{ if (String.IsNullOrWhiteSpace(name.Value) ||
App.HelpOption("-? | -h | --help"); String.IsNullOrWhiteSpace(email.Value) ||
return App.Execute(args); String.IsNullOrWhiteSpace(installId.Value))
} {
catch (Exception exception) config.Error.WriteLine($"Some arguments are missing: Name='{name.Value}' Email='{email.Value}' InstallId='{installId.Value}'");
{ config.ShowHelp(true);
Console.Error.WriteLine("Oops: {0}", exception); return 1;
return 100; }
}
} if (!Guid.TryParse(installId.Value, out Guid installationId))
{
private static void Check() config.Error.WriteLine("Unable to parse your installation id as a GUID");
{ config.Error.WriteLine($"Here's a new guid: {Guid.NewGuid()}");
if (Cert == null || String.IsNullOrWhiteSpace(Cert.Value())) config.ShowHelp(true);
{ return 1;
App.Error.WriteLine("No certificate specified"); }
App.ShowHelp();
Environment.Exit(1); Int16 storageShort = 0;
} if (!String.IsNullOrWhiteSpace(storage.Value))
else if (CoreDll == null || String.IsNullOrWhiteSpace(CoreDll.Value())) {
{ Double parsedStorage = Double.Parse(storage.Value);
App.Error.WriteLine("No core dll specified"); if (parsedStorage is > Int16.MaxValue or < 0)
App.ShowHelp(); {
Environment.Exit(1); config.Error.WriteLine("The storage value provided is outside the accepted range of [0-" + Int16.MaxValue + "]");
} config.ShowHelp(true);
else if (!File.Exists(Cert.Value())) return 1;
{ }
App.Error.WriteLine($"Can't find certificate at: {Cert.Value()}"); storageShort = (Int16) parsedStorage;
App.ShowHelp(); }
Environment.Exit(1);
} GenerateOrgLicense(new X509Certificate2(cert.Value(), "test"), coreDll.Value(), name.Value, email.Value, storageShort, installationId, businessName.Value, key.Value);
else if (!File.Exists(CoreDll.Value()))
{ return 0;
App.Error.WriteLine($"Can't find core dll at: {CoreDll.Value()}"); });
App.ShowHelp(); });
Environment.Exit(1);
} app.OnExecute(() =>
} {
app.ShowHelp();
// checkUsername Checks that the username is a valid username return 10;
private static Boolean CheckUsername(String s) });
{
// TODO: Actually validate app.HelpOption("-? | -h | --help");
if (!String.IsNullOrWhiteSpace(s)) return true;
try
Console.WriteLine("The username provided doesn't appear to be valid!"); {
return false; return app.Execute(args);
} }
catch (Exception e)
// checkBusinessName Checks that the Business Name is a valid username {
private static Boolean CheckBusinessName(String s) Console.Error.WriteLine("Oops: {0}", e);
{ return 100;
// TODO: Actually validate }
if (!String.IsNullOrWhiteSpace(s)) return true; }
Console.WriteLine("The Business Name provided doesn't appear to be valid!"); // checkUsername Checks that the username is a valid username
return false; private static Boolean CheckUsername(String s)
} {
// TODO: Actually validate
// checkEmail Checks that the email address is a valid email address if (!String.IsNullOrWhiteSpace(s)) return true;
private static Boolean CheckEmail(String s)
{ Console.WriteLine("The username provided doesn't appear to be valid!");
// TODO: Actually validate return false;
if (!String.IsNullOrWhiteSpace(s)) return true; }
Console.WriteLine("The email provided doesn't appear to be valid!"); // checkBusinessName Checks that the Business Name is a valid username
return false; private static Boolean CheckBusinessName(String s)
} {
// TODO: Actually validate
// checkStorage Checks that the storage is in a valid range if (!String.IsNullOrWhiteSpace(s)) return true;
private static Boolean CheckStorage(String s)
{ Console.WriteLine("The Business Name provided doesn't appear to be valid!");
if (String.IsNullOrWhiteSpace(s)) return false;
{ }
Console.WriteLine("The storage provided doesn't appear to be valid!");
return false; // checkEmail Checks that the email address is a valid email address
} private static Boolean CheckEmail(String s)
{
if (!(Double.Parse(s) > Int16.MaxValue) && !(Double.Parse(s) < 0)) return true; // TODO: Actually validate
if (!String.IsNullOrWhiteSpace(s)) return true;
Console.WriteLine("The storage value provided is outside the accepted range of [0-" + Int16.MaxValue + "]!");
return false; Console.WriteLine("The email provided doesn't appear to be valid!");
} return false;
}
private static readonly JsonSerializerOptions JsonOptions = new() { WriteIndented = true };
private static void GenerateUserLicense(X509Certificate2 cert, String corePath, String userName, String email, Int16 storage, Guid userId, String key) // checkStorage Checks that the storage is in a valid range
{ private static Boolean CheckStorage(String s)
Assembly core = AssemblyLoadContext.Default.LoadFromAssemblyPath(Path.GetFullPath(corePath)); {
if (String.IsNullOrWhiteSpace(s))
Type type = core.GetType("Bit.Core.Billing.Models.Business.UserLicense"); {
Type licenseTypeEnum = core.GetType("Bit.Core.Enums.LicenseType"); Console.WriteLine("The storage provided doesn't appear to be valid!");
return false;
if (type == null) }
{
Console.WriteLine("Could not find type!"); if (!(Double.Parse(s) > Int16.MaxValue) && !(Double.Parse(s) < 0)) return true;
return;
} Console.WriteLine("The storage value provided is outside the accepted range of [0-" + Int16.MaxValue + "]!");
if (licenseTypeEnum == null) return false;
{ }
Console.WriteLine("Could not find license licenseTypeEnum!");
return; private static void GenerateUserLicense(X509Certificate2 cert, String corePath, String userName, String email, Int16 storage, Guid userId, String key)
} {
Assembly core = AssemblyLoadContext.Default.LoadFromAssemblyPath(corePath);
Object license = Activator.CreateInstance(type);
Type type = core.GetType("Bit.Core.Billing.Models.Business.UserLicense");
MethodInfo computeHash = type.GetMethod("ComputeHash"); Type licenseTypeEnum = core.GetType("Bit.Core.Enums.LicenseType");
if (computeHash == null)
{ Object license = Activator.CreateInstance(type);
Console.WriteLine("Could not find ComputeHash!");
return; Set("LicenseKey", String.IsNullOrWhiteSpace(key) ? Guid.NewGuid().ToString("n") : key);
} Set("Id", userId);
Set("Name", userName);
MethodInfo sign = type.GetMethod("Sign"); Set("Email", email);
if (sign == null) Set("Premium", true);
{ Set("MaxStorageGb", storage == 0 ? Int16.MaxValue : storage);
Console.WriteLine("Could not find sign!"); Set("Version", 1);
return; Set("Issued", DateTime.UtcNow);
} Set("Refresh", DateTime.UtcNow.AddYears(100).AddMonths(-1));
Set("Expires", DateTime.UtcNow.AddYears(100));
Set(type, license, "LicenseKey", String.IsNullOrWhiteSpace(key) ? Guid.NewGuid().ToString("n") : key); Set("Trial", false);
Set(type, license, "Id", userId); Set("LicenseType", Enum.Parse(licenseTypeEnum, "User"));
Set(type, license, "Name", userName); Set("Hash", Convert.ToBase64String((Byte[])type.GetMethod("ComputeHash").Invoke(license, [])));
Set(type, license, "Email", email); Set("Signature", Convert.ToBase64String((Byte[])type.GetMethod("Sign").Invoke(license, [cert])));
Set(type, license, "Premium", true);
Set(type, license, "MaxStorageGb", storage == 0 ? Int16.MaxValue : storage); Console.WriteLine(JsonConvert.SerializeObject(license, Formatting.Indented));
Set(type, license, "Version", 1); return;
Set(type, license, "Issued", DateTime.UtcNow);
Set(type, license, "Refresh", DateTime.UtcNow.AddYears(100).AddMonths(-1)); void Set(String name, Object value)
Set(type, license, "Expires", DateTime.UtcNow.AddYears(100)); {
Set(type, license, "Trial", false); type.GetProperty(name)?.SetValue(license, value);
Set(type, license, "LicenseType", Enum.Parse(licenseTypeEnum, "User")); }
Set(type, license, "Hash", Convert.ToBase64String(((Byte[])computeHash.Invoke(license, []))!)); }
Set(type, license, "Signature", Convert.ToBase64String((Byte[])sign.Invoke(license, [cert])!));
private static void GenerateOrgLicense(X509Certificate2 cert, String corePath, String userName, String email, Int16 storage, Guid instalId, String businessName, String key)
Console.WriteLine(JsonSerializer.Serialize(license, JsonOptions)); {
} Assembly core = AssemblyLoadContext.Default.LoadFromAssemblyPath(corePath);
private static void GenerateOrgLicense(X509Certificate2 cert, String corePath, String userName, String email, Int16 storage, Guid instalId, String businessName, String key)
{ Type type = core.GetType("Bit.Core.Billing.Models.Business.OrganizationLicense");
Assembly core = AssemblyLoadContext.Default.LoadFromAssemblyPath(Path.GetFullPath(corePath)); Type licenseTypeEnum = core.GetType("Bit.Core.Enums.LicenseType");
Type type = core.GetType("Bit.Core.Billing.Organizations.Models.OrganizationLicense"); Type planTypeEnum = core.GetType("Bit.Core.Billing.Enums.PlanType");
Type licenseTypeEnum = core.GetType("Bit.Core.Enums.LicenseType");
Type planTypeEnum = core.GetType("Bit.Core.Billing.Enums.PlanType"); Object license = Activator.CreateInstance(type);
if (type == null) Set("LicenseKey", String.IsNullOrWhiteSpace(key) ? Guid.NewGuid().ToString("n") : key);
{ Set("InstallationId", instalId);
Console.WriteLine("Could not find type!"); Set("Id", Guid.NewGuid());
return; Set("Name", userName);
} Set("BillingEmail", email);
if (licenseTypeEnum == null) Set("BusinessName", String.IsNullOrWhiteSpace(businessName) ? "BitBetter" : businessName);
{ Set("Enabled", true);
Console.WriteLine("Could not find licenseTypeEnum!"); Set("Plan", "Enterprise (Annually)");
return; Set("PlanType", Enum.Parse(planTypeEnum, "EnterpriseAnnually"));
} Set("Seats", Int32.MaxValue);
if (planTypeEnum == null) Set("MaxCollections", Int16.MaxValue);
{ Set("UsePolicies", true);
Console.WriteLine("Could not find planTypeEnum!"); Set("UseSso", true);
return; Set("UseKeyConnector", true);
} Set("UseScim", true);
Set("UseGroups", true);
Object license = Activator.CreateInstance(type); Set("UseEvents", true);
Set("UseDirectory", true);
MethodInfo computeHash = type.GetMethod("ComputeHash"); Set("UseTotp", true);
if (computeHash == null) Set("Use2fa", true);
{ Set("UseApi", true);
Console.WriteLine("Could not find ComputeHash!"); Set("UseResetPassword", true);
return; Set("UseCustomPermissions", true);
} Set("MaxStorageGb", storage == 0 ? Int16.MaxValue : storage);
Set("SelfHost", true);
MethodInfo sign = type.GetMethod("Sign"); Set("UsersGetPremium", true);
if (sign == null) Set("UsePasswordManager", true);
{ Set("UseSecretsManager", true);
Console.WriteLine("Could not find sign!"); Set("SmSeats", Int32.MaxValue);
return; Set("SmServiceAccounts", Int32.MaxValue);
} Set("Version", 15); //This is set to 15 to use AllowAdminAccessToAllCollectionItems can be changed to 13 to just use Secrets Manager
Set("Issued", DateTime.UtcNow);
Set(type, license, "LicenseKey", String.IsNullOrWhiteSpace(key) ? Guid.NewGuid().ToString("n") : key); Set("Refresh", DateTime.UtcNow.AddYears(100).AddMonths(-1));
Set(type, license, "InstallationId", instalId); Set("Expires", DateTime.UtcNow.AddYears(100));
Set(type, license, "Id", Guid.NewGuid()); Set("Trial", false);
Set(type, license, "Name", userName); Set("LicenseType", Enum.Parse(licenseTypeEnum, "Organization"));
Set(type, license, "BillingEmail", email); Set("LimitCollectionCreationDeletion", true); //This will be used in the new version of BitWarden but can be applied now
Set(type, license, "BusinessName", String.IsNullOrWhiteSpace(businessName) ? "BitBetter" : businessName); Set("AllowAdminAccessToAllCollectionItems", true);
Set(type, license, "Enabled", true); Set("UseRiskInsights", true);
Set(type, license, "Plan", "Enterprise (Annually)"); Set("UseOrganizationDomains", true);
Set(type, license, "PlanType", Enum.Parse(planTypeEnum, "EnterpriseAnnually")); Set("UseAdminSponsoredFamilies", true);
Set(type, license, "Seats", Int32.MaxValue); Set("Hash", Convert.ToBase64String((Byte[])type.GetMethod("ComputeHash").Invoke(license, [])));
Set(type, license, "MaxCollections", Int16.MaxValue); Set("Signature", Convert.ToBase64String((Byte[])type.GetMethod("Sign").Invoke(license, [cert])));
Set(type, license, "UsePolicies", true);
Set(type, license, "UseSso", true); Console.WriteLine(JsonConvert.SerializeObject(license, Formatting.Indented));
Set(type, license, "UseKeyConnector", true); return;
Set(type, license, "UseScim", true);
Set(type, license, "UseGroups", true); void Set(String name, Object value)
Set(type, license, "UseEvents", true); {
Set(type, license, "UseDirectory", true); type.GetProperty(name)?.SetValue(license, value);
Set(type, license, "UseTotp", true); }
Set(type, license, "Use2fa", true); }
Set(type, license, "UseApi", true); }
Set(type, license, "UseResetPassword", true);
Set(type, license, "MaxStorageGb", storage == 0 ? Int16.MaxValue : storage);
Set(type, license, "SelfHost", true);
Set(type, license, "UsersGetPremium", true);
Set(type, license, "UseCustomPermissions", true);
Set(type, license, "Version", 16);
Set(type, license, "Issued", DateTime.UtcNow);
Set(type, license, "Refresh", DateTime.UtcNow.AddYears(100).AddMonths(-1));
Set(type, license, "Expires", DateTime.UtcNow.AddYears(100));
Set(type, license, "ExpirationWithoutGracePeriod", DateTime.UtcNow.AddYears(100));
Set(type, license, "UsePasswordManager", true);
Set(type, license, "UseSecretsManager", true);
Set(type, license, "SmSeats", Int32.MaxValue);
Set(type, license, "SmServiceAccounts", Int32.MaxValue);
Set(type, license, "UseRiskInsights", true);
Set(type, license, "LimitCollectionCreationDeletion", true);
Set(type, license, "AllowAdminAccessToAllCollectionItems", true);
Set(type, license, "Trial", false);
Set(type, license, "LicenseType", Enum.Parse(licenseTypeEnum, "Organization"));
Set(type, license, "UseOrganizationDomains", true);
Set(type, license, "UseAdminSponsoredFamilies", true);
Set(type, license, "Hash", Convert.ToBase64String((Byte[])computeHash.Invoke(license, [])!));
Set(type, license, "Signature", Convert.ToBase64String((Byte[])sign.Invoke(license, [cert])!));
Console.WriteLine(JsonSerializer.Serialize(license, JsonOptions));
}
private static void Set(Type type, Object license, String name, Object value)
{
type.GetProperty(name)?.SetValue(license, value);
}
}

View File

@@ -1,10 +1,14 @@
<Project Sdk="Microsoft.NET.Sdk"> <Project Sdk="Microsoft.NET.Sdk">
<PropertyGroup> <PropertyGroup>
<OutputType>Exe</OutputType> <OutputType>Exe</OutputType>
<TargetFramework>net8.0</TargetFramework> <TargetFramework>net8.0</TargetFramework>
</PropertyGroup> </PropertyGroup>
<ItemGroup> <ItemGroup>
<PackageReference Include="McMaster.Extensions.CommandLineUtils" Version="4.1.1" /> <PackageReference Include="McMaster.Extensions.CommandLineUtils" Version="4.1.1" />
<PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
<PackageReference Include="System.Runtime.Loader" Version="4.3.0" /> <PackageReference Include="System.Runtime.Loader" Version="4.3.0" />
</ItemGroup> </ItemGroup>
</Project>
</Project>