Update Program.cs

Remove duplicate instances of:
Set("UseRiskInsights", true);
Set("UseOrganizationDomains", true);     Set("UseAdminSponsoredFamilies", true);

Signed-off-by: Joseph Gigantino <128943406+Jgigantino31@users.noreply.github.com>

.circleci/config.yml

@@ -1,21 +1,15 @@
-version: 2.1
+version: 2.1
-jobs:
+jobs:
-  build:
+  build:
-    machine: true
+    machine: true
-    steps:
+    steps:
-      - checkout
+      - checkout
-      - run:
+      - run:
-          name: Print the Current Time
+          name: Print the Current Time
-          command: date
+          command: date
-      - run:
+      - run:
-          name: Generate Keys
+          name: Generate Keys
-          command: ./generateKeys.sh
+          command: ./generateKeys.sh
-      - run:
+      - run:
-          name: Build script
+          name: Build script
-          command: ./build.sh update
+          command: ./build.sh y
-      - run:
-          name: Test generating user license
-          command: ./licenseGen.sh user TestName TestEmail@example.com 4a619d4a-522d-4c70-8596-affb5b607c23
-      - run:
-          name: Test generating organization license
-          command: ./licenseGen.sh org TestName TestEmail@example.com 4a619d4a-522d-4c70-8596-affb5b607c23

.editorconfig

@@ -1,19 +0,0 @@
-root=true
-
-############################### 
-# Core EditorConfig Options   # 
-############################### 
-# All files 
-[*]
-indent_style=tab
-indent_size=4
-trim_trailing_whitespace=true
-end_of_line=lf
-charset=utf-8
-
-[*.{cs}]
-insert_final_newline=false
-
-[*.{md,mkdn}]
-trim_trailing_whitespace = true
-indent_style = space

.gitattributes

@@ -1 +0,0 @@
-* text eol=lf

.gitignore

@@ -7,6 +7,5 @@ src/bitBetter/.vs/*
 *.pem
 .vscode/
 *.pfx
-*.cer
+*.cert
 *.vsidx
-.DS_Store

.servers/serverlist.txt

@@ -1,4 +1,4 @@
-# Uncomment a line below and fill in the missing values or add your own. Every line in this file will be called by build.[sh|ps1] once the patched image is built.
+# Uncomment a line below and fill in the missing values or add your own. Every line in this file will be called by build.[sh|ps1] once the patched image is built.
-# docker run -d --name bitwarden --restart=always -v <full-local-path>\logs:/var/log/bitwarden -v <full-local-path>\bwdata:/etc/bitwarden -p 80:8080 --env-file <full-local-path>\settings.env bitwarden-patched
+# docker run -d --name bitwarden -v <full-local-path>\logs:/var/log/bitwarden -v <full-local-path>\bwdata:/etc/bitwarden -p 80:8080 --env-file <full-local-path>\settings.env bitwarden-patch
-# <OR>
+# <OR>
-# docker-compose -f <full-local-path>/docker-compose.yml up -d
+# docker-compose -f <full-local-path>/docker-compose.yml up -d

README.md

@@ -1,14 +1,12 @@
-# BitBetter lite
+# BitBetter
 
 BitBetter is is a tool to modify Bitwarden's core dll to allow you to generate your own individual and organisation licenses.
 
 Please see the FAQ below for details on why this software was created.
 
-Be aware that this branch is **only** for the lite (formerly unified) version of bitwarden. It has been rewritten and works in different ways than the master branch.
+_Beware! BitBetter does some semi janky stuff to rewrite the bitwarden core dll and allow the installation of a self signed certificate. Use at your own risk!_
 
-_Beware! BitBetter is a solution that generates a personal certificate and uses that to generate custom licences. This requires (automated) modifying of libraries. Use at your own risk!_
+Credit to https://github.com/h44z/BitBetter and https://github.com/jakeswenson/BitBetter
-
-Credit to https://github.com/h44z/BitBetter and https://github.com/jakeswenson/BitBetter and https://github.com/GieltjE/BitBetter
 
 # Table of Contents
 - [BitBetter](#bitbetter)
@@ -32,14 +30,14 @@ The following instructions are for unix-based systems (Linux, BSD, macOS) and Wi
 ## Dependencies
 Aside from docker, which you also need for Bitwarden, BitBetter requires the following:
 
-* Bitwarden (tested with 2025.11.1 might work on lower versions), for safety always stay up to date
+* Bitwarden (tested with 1.47.1, might work on lower versions)
 * openssl (probably already installed on most Linux or WSL systems, any version should work, on Windows it will be auto installed using winget)
 
 ## Setting up BitBetter
 With your dependencies installed, begin the installation of BitBetter by downloading it through Github or using the git command:
 
 ```
-git clone https://github.com/jakeswenson/BitBetter.git -b lite
+git clone https://github.com/jakeswenson/BitBetter.git
 ```
 
 ### Optional: Manually generating Certificate & Key
@@ -48,8 +46,8 @@ If you wish to generate your self-signed cert & key manually, you can run the fo
 
 ```bash
 cd .keys
-openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.cer -days 36500 -outform DER -passout pass:test
+openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.cert -days 36500 -outform DER -passout pass:test
-openssl x509 -inform DER -in cert.cer -out cert.pem
+openssl x509 -inform DER -in cert.cert -out cert.pem
 openssl pkcs12 -export -out cert.pfx -inkey key.pem -in cert.pem -passin pass:test -passout pass:test
 ```
 
@@ -65,14 +63,14 @@ The scripts supports running and patching multi instances.
 Edit the .servers/serverlist.txt file and fill in the missing values, they can be replaced with existing installation values.
 This file may be empty, but there will be no containers will be spun up automatically.
 
-Now it is time to **run the main build script** to generate a modified version of the `ghcr.io/bitwarden/lite` docker image and the license generator.
+Now it is time to **run the main build script** to generate a modified version of the `ghcr.io/bitwarden/self-host` docker image and the license generator.
 
 From the BitBetter directory, simply run:
 ```
 ./build.[sh|ps1]
 ```
 
-This will create a new self-signed certificate in the `.keys` directory if one does not already exist and then create a modified version of the official `ghcr.io/bitwarden/lite` image called `bitwarden-patched`.
+This will create a new self-signed certificate in the `.keys` directory if one does not already exist and then create a modified version of the official `ghcr.io/bitwarden/self-host` image called `bitwarden-patch`.
 
 Afterwards it will automatically generate the license generator and start all previously specified containers which are **now ready to accept self-issued licenses.**
 
@@ -100,36 +98,6 @@ If you ran the build script, you can **simply run the license gen in interactive
 **The license generator will spit out a JSON-formatted license which can then be used within the Bitwarden web front-end to license your user or org!**
 
 
-## Migrating from mssql to a real database
-
-Prepare a new database and bwdata directory, download and prepare the new settings.env (https://raw.githubusercontent.com/bitwarden/self-host/refs/heads/main/bitwarden-lite/settings.env)
-
-Make sure you can get the data from either the backup file or by connecting directly to the mssql database (navicat has a trial).
-
-If required (e.g. you cannot connect to your docker mssql server directly) download Microsoft SQL Server 2022 and SQL Server Management Studio (the latter can be used to import the .bak file)
-
-After cloning this repo and modifying .servers/serverlist.txt to suit your new environment do the following:
-
-```
-docker exec -i bitwarden-mssql /backup-db.sh
-./bitwarden.sh stop
-```
-
-Run build.sh and ensure your new instance serves a webpage AND has populated the new database with the tables (should be empty now)
-
-Proceed to stop the new container for now.
-
-Copy from the old to the new bwdata directory (do not copy/overwrite identity.pfx!):
- - bwdata/core/licenses to bwdata-new/licenses
- - bwdata/core/aspnet-dataprotection to bwdata-new/data-protection
- - bwdata/core/attachments to bwdata-new/attachments
-
-Export data only from the old sql server database, if needed import the .bak file to a local mssql instance.
-
-Only export tables that have rows, makes it much quicker, .json is the easiest with navicat.
-
-Import the rows to the real database, start the new docker container.
-
 ---
 
 # FAQ: Questions you might have.
@@ -146,26 +114,6 @@ In the past we have done so but they were not focused on the type of customer th
 
 UPDATE: Bitwarden now offers a cheap license called [Families Organization](https://bitwarden.com/pricing/) that provides premium features and the ability to self-host Bitwarden for six persons.
 
-## 2fa doesn't work
-
-Unfortunately the new BitWarden container doesn't set the timezone and ignores TZ= from the environment, can be fixed by:
-
-```
-docker exec bitwarden ln -s /usr/share/zoneinfo/Europe/Amsterdam /etc/localtime
-```
-
-## Changes in settings.env
-
-Require a recreation of the docker container, build.sh will suffice too.
-
-## Migrating from the old unified branch
-
-```
-git branch -m unified lite
-git fetch origin
-git branch -u origin/lite lite
-git remote set-head origin -a
-```
 
 # Footnotes
 

build.ps1

@@ -1,146 +1,107 @@
-$ErrorActionPreference = 'Stop'
+$ErrorActionPreference = 'Stop'
-$PSNativeCommandUseErrorActionPreference = $true
+$PSNativeCommandUseErrorActionPreference = $true
-
+
-# detect buildx, ErrorActionPreference will ensure the script stops execution if not found
+# define temporary directory
-docker buildx version
+$tempdirectory = "$pwd\temp"
-
+# define services to patch
-# Enable BuildKit for better build experience and to ensure platform args are populated
+$components = "Api","Identity"
-$env:DOCKER_BUILDKIT=1
+
-$env:COMPOSE_DOCKER_CLI_BUILD=1
+# delete old directories / files if applicable
-
+if (Test-Path "$tempdirectory") {
-# define temporary directory
+	Remove-Item "$tempdirectory" -Recurse -Force
-$tempdirectory = "$pwd\temp"
+}
-# define services to patch
+
-$components = "Api","Identity"
+if (Test-Path -Path "$pwd\src\licenseGen\Core.dll" -PathType Leaf) {
-
+	Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
-# delete old directories / files if applicable
+}
-if (Test-Path "$tempdirectory" -PathType Container) {
+
-	Remove-Item "$tempdirectory" -Recurse -Force
+if (Test-Path -Path "$pwd\src\licenseGen\cert.pfx" -PathType Leaf) {
-}
+	Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
-
+}
-if (Test-Path -Path "$pwd\src\licenseGen\Core.dll" -PathType Leaf) {
+
-	Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
+if (Test-Path -Path "$pwd\src\bitBetter\cert.cert" -PathType Leaf) {
-}
+	Remove-Item "$pwd\src\bitBetter\cert.cert" -Force
-
+}
-if (Test-Path -Path "$pwd\src\licenseGen\cert.pfx" -PathType Leaf) {
+
-	Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
+# generate keys if none are available
-}
+if (!(Test-Path "$pwd\.keys")) {
-
+	.\generateKeys.ps1
-if (Test-Path -Path "$pwd\src\bitBetter\cert.cer" -PathType Leaf) {
+}
-	Remove-Item "$pwd\src\bitBetter\cert.cer" -Force
+
-}
+# copy the key to bitBetter and licenseGen
-
+Copy-Item "$pwd\.keys\cert.cert" -Destination "$pwd\src\bitBetter"
-if (Test-Path "$pwd\.keys\cert.cert" -PathType Leaf) {
+Copy-Item "$pwd\.keys\cert.pfx" -Destination "$pwd\src\licenseGen"
-	Rename-Item -Path "$pwd\.keys\cert.cert" -NewName "$pwd\.keys\cert.cer"
+
-}
+# build bitBetter and clean the source directory after
-
+docker build --no-cache -t bitbetter/bitbetter "$pwd\src\bitBetter"
-# generate keys if none are available
+Remove-Item "$pwd\src\bitBetter\cert.cert" -Force
-if (!(Test-Path "$pwd\.keys" -PathType Container)) {
+
-	.\generateKeys.ps1
+# gather all running instances
-}
+$oldinstances = docker container ps --all -f Name=bitwarden --format '{{.ID}}'
-
+
-# copy the key to bitBetter
+# stop all running instances
-Copy-Item "$pwd\.keys\cert.cer" -Destination "$pwd\src\bitBetter"
+foreach ($instance in $oldinstances) {
-
+	docker stop $instance
-# build bitBetter and clean the source directory after
+	docker rm $instance
-docker build --no-cache -t bitbetter/bitbetter "$pwd\src\bitBetter"
+}
-Remove-Item "$pwd\src\bitBetter\cert.cer" -Force
+
-
+# update bitwarden itself
-# gather all running instances, cannot run a wildcard filter on Ancestor= :(, does find all where name = *bitwarden*
+if ($args[0] -eq 'y')
-$oldinstances = docker container ps --all -f Name=bitwarden --format '{{.ID}}'
+{
-
+	docker pull ghcr.io/bitwarden/self-host:beta
-# stop and remove all running instances
+}
-foreach ($instance in $oldinstances) {
+else
-	docker stop $instance
+{
-	docker rm $instance
+	$confirmation = Read-Host "Update (or get) bitwarden source container"
-}
+	if ($confirmation -eq 'y') {
-
+		docker pull ghcr.io/bitwarden/self-host:beta
-# update bitwarden itself
+	}
-if ($args[0] -eq 'update') {
+}
-	docker pull ghcr.io/bitwarden/lite:latest
+
-} else {
+# stop and remove previous existing patch(ed) container
-	$confirmation = Read-Host "Update (or get) bitwarden source container (y/n)"
+docker stop bitwarden-patch
-	if ($confirmation -eq 'y') {
+docker rm bitwarden-patch
-		docker pull ghcr.io/bitwarden/lite:latest
+docker image rm bitwarden-patch
-	}
+
-}
+# start a new bitwarden instance so we can patch it
-
+$patchinstance = docker run -d --name bitwarden-patch ghcr.io/bitwarden/self-host:beta
-# stop and remove previous existing patch(ed) container
+
-$oldinstances = docker container ps --all -f Ancestor=bitwarden-patched --format '{{.ID}}'
+# create our temporary directory
-foreach ($instance in $oldinstances) {
+New-item -ItemType Directory -Path $tempdirectory
-	docker stop $instance
+
-	docker rm $instance
+# extract the files that need to be patched from the services that need to be patched into our temporary directory
-}
+foreach ($component in $components) {
-$oldinstances = docker image ls bitwarden-patched --format '{{.ID}}'
+	New-item -itemtype Directory -path "$tempdirectory\$component"
-foreach ($instance in $oldinstances) {
+	docker cp $patchinstance`:/app/$component/Core.dll "$tempdirectory\$component\Core.dll"
-	docker image rm $instance
+}
-}
+
-
+# run bitBetter, this applies our patches to the required files
-# remove old extract containers
+docker run -v "$tempdirectory`:/app/mount" --rm bitbetter/bitbetter
-$oldinstances = docker container ps --all -f Name=bitwarden-extract --format '{{.ID}}'
+
-foreach ($instance in $oldinstances) {
+# create a new image with the patched files
-	docker stop $instance
+docker build . --tag bitwarden-patch --file "$pwd\src\bitBetter\Dockerfile-bitwarden-patch"
-	docker rm $instance
+
-}
+# stop and remove our temporary container
-
+docker stop bitwarden-patch
-# start a new bitwarden instance so we can patch it
+docker rm bitwarden-patch
-$patchinstance = docker run -d --name bitwarden-extract ghcr.io/bitwarden/lite:latest
+
-
+# copy our patched library to the licenseGen source directory
-# create our temporary directory
+Copy-Item "$tempdirectory\Identity\Core.dll" -Destination "$pwd\src\licenseGen"
-New-item -ItemType Directory -Path $tempdirectory
+
-
+# remove our temporary directory
-# extract the files that need to be patched from the services that need to be patched into our temporary directory
+Remove-Item "$tempdirectory" -Recurse -Force
-foreach ($component in $components) {
+
-	New-item -itemtype Directory -path "$tempdirectory\$component"
+# start all user requested instances
-	docker cp $patchinstance`:/app/$component/$component "$tempdirectory\$component\$component"
+foreach($line in Get-Content "$pwd\.servers\serverlist.txt") {
-	docker cp $patchinstance`:/etc/supervisor.d/$($component.ToLower()).ini "$tempdirectory\$($component.ToLower()).ini"
+	Invoke-Expression "& $line"
-}
+}
-
+
-# stop and remove our temporary container
+# remove our bitBetter image
-docker stop bitwarden-extract
+docker image rm bitbetter/bitbetter
-docker rm bitwarden-extract
+
-
+# build the licenseGen
-# run bitBetter, this applies our patches to the required files
+docker build -t bitbetter/licensegen "$pwd\src\licenseGen"
-docker run -v "$tempdirectory`:/app/mount" --rm bitbetter/bitbetter
+
-
+# clean the licenseGen source directory
-# create a new image with the patched files
+Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
-if (Test-Path -Path "$pwd\Dockerfile-bitwarden-patch" -PathType Leaf) {
+Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
-	Remove-Item "$pwd\Dockerfile-bitwarden-patch" -Force
-}
-$dockerFile = "FROM mcr.microsoft.com/dotnet/aspnet:10.0-alpine3.23"
-$dockerFile = -join($dockerFile, "FROM ghcr.io/bitwarden/lite:latest")
-$dockerFile = -join($dockerFile, "COPY --from=0 /usr/share/dotnet /usr/share/dotnet")
-foreach ($component in $components) {
-	$dockerFile = -join($dockerFile, "`n`nCOPY ./temp/$component/ /app/$component/")
-	$dockerFile = -join($dockerFile, "`nCOPY ./temp/$($component.ToLower()).ini /etc/supervisor.d/$($component.ToLower()).ini")
-	$dockerFile = -join($dockerFile, "`nRUN rm -f /app/$component/$component")
-}
-[System.IO.File]::WriteAllLines("$pwd\Dockerfile-bitwarden-patch", $dockerFile)
-docker build . --tag bitwarden-patched --file "$pwd\Dockerfile-bitwarden-patch"
-Remove-Item "$pwd\Dockerfile-bitwarden-patch" -Force
-
-# start all user requested instances
-if (Test-Path -Path "$pwd\.servers\serverlist.txt" -PathType Leaf) {
-	foreach($line in Get-Content "$pwd\.servers\serverlist.txt") {
-		if ((-not ($line.StartsWith("#"))) -and (-not [string]::IsNullOrWhiteSpace($line))) {
-			Invoke-Expression "& $line"
-		}
-	}
-}
-
-# remove our bitBetter image
-docker image rm bitbetter/bitbetter
-
-# copy our patched library to the licenseGen source directory
-Copy-Item "$tempdirectory\Identity\Core.dll" -Destination "$pwd\src\licenseGen"
-Copy-Item "$pwd\.keys\cert.pfx" -Destination "$pwd\src\licenseGen"
-
-# build the licenseGen
-docker build -t bitbetter/licensegen "$pwd\src\licenseGen"
-
-# clean the licenseGen source directory
-Remove-Item "$pwd\src\licenseGen\Core.dll" -Force
-Remove-Item "$pwd\src\licenseGen\cert.pfx" -Force
-
-# remove our temporary directory
-Remove-Item "$tempdirectory" -Recurse -Force

build.sh

@@ -1,13 +1,6 @@
 #!/bin/bash
 set -e
 
-# detect buildx, set -e will ensure the script stops execution if not found
-docker buildx version
-
-# Enable BuildKit for better build experience and to ensure platform args are populated
-export DOCKER_BUILDKIT=1
-export COMPOSE_DOCKER_CLI_BUILD=1
-
 # define temporary directory
 TEMPDIRECTORY="$PWD/temp"
 
@@ -20,19 +13,15 @@ if [ -d "$TEMPDIRECTORY" ]; then
 fi
 
 if [ -f "$PWD/src/licenseGen/Core.dll" ]; then
-	rm -f "$PWD/src/licenseGen/Core.dll"
+    rm -f "$PWD/src/licenseGen/Core.dll"
 fi
 
 if [ -f "$PWD/src/licenseGen/cert.pfx" ]; then
-	rm -f "$PWD/src/licenseGen/cert.pfx"
+    rm -f "$PWD/src/licenseGen/cert.pfx"
 fi
 
-if [ -f "$PWD/src/bitBetter/cert.cer" ]; then
+if [ -f "$PWD/src/bitBetter/cert.cert" ]; then
-	rm -f "$PWD/src/bitBetter/cert.cer"
+    rm -f "$PWD/src/bitBetter/cert.cert"
-fi
-
-if [ -f "$PWD/.keys/cert.cert" ]; then
-	mv "$PWD/.keys/cert.cert" "$PWD/.keys/cert.cer"
 fi
 
 # generate keys if none are available
@@ -40,52 +29,42 @@ if [ ! -d "$PWD/.keys" ]; then
 	./generateKeys.sh
 fi
 
-# copy the key to bitBetter
+# copy the key to bitBetter and licenseGen
-cp -f "$PWD/.keys/cert.cer" "$PWD/src/bitBetter"
+cp -f "$PWD/.keys/cert.cert" "$PWD/src/bitBetter"
+cp -f "$PWD/.keys/cert.pfx" "$PWD/src/licenseGen"
 
 # build bitBetter and clean the source directory after
 docker build --no-cache -t bitbetter/bitbetter "$PWD/src/bitBetter"
-rm -f "$PWD/src/bitBetter/cert.cer"
+rm -f "$PWD/src/bitBetter/cert.cert"
 
-# gather all running instances, cannot run a wildcard filter on Ancestor= :(, does find all where name = *bitwarden*
+# gather all running instances
 OLDINSTANCES=$(docker container ps --all -f Name=bitwarden --format '{{.ID}}')
 
-# stop and remove all running instances
+# stop all running instances
 for INSTANCE in ${OLDINSTANCES[@]}; do
 	docker stop $INSTANCE
 	docker rm $INSTANCE
 done
 
 # update bitwarden itself
-if [ "$1" = "update" ]; then
+if [ "$1" = "y" ]; then
-	docker pull ghcr.io/bitwarden/lite:latest
+	docker pull ghcr.io/bitwarden/self-host:beta
 else
-	read -p "Update (or get) bitwarden source container (y/n): "
+	read -p "Update (or get) bitwarden source container: " -n 1 -r
-	if [[ $REPLY =~ ^[Yy]$ ]]; then
+	echo
-		docker pull ghcr.io/bitwarden/lite:latest
+	if [[ $REPLY =~ ^[Yy]$ ]]
+	then
+		docker pull ghcr.io/bitwarden/self-host:beta
 	fi
 fi
 
 # stop and remove previous existing patch(ed) container
-OLDINSTANCES=$(docker container ps --all -f Ancestor=bitwarden-patched --format '{{.ID}}')
+docker stop bitwarden-patch
-for INSTANCE in ${OLDINSTANCES[@]}; do
+docker rm bitwarden-patch
-	docker stop $INSTANCE
+docker image rm bitwarden-patch
-	docker rm $INSTANCE
-done
-OLDINSTANCES=$(docker image ls bitwarden-patched --format '{{.ID}}')
-for INSTANCE in ${OLDINSTANCES[@]}; do
-	docker image rm $INSTANCE
-done
-
-# remove old extract containers
-OLDINSTANCES=$(docker container ps --all -f Name=bitwarden-extract --format '{{.ID}}')
-for INSTANCE in ${OLDINSTANCES[@]}; do
-	docker stop $INSTANCE
-	docker rm $INSTANCE
-done
 
 # start a new bitwarden instance so we can patch it
-PATCHINSTANCE=$(docker run -d --name bitwarden-extract ghcr.io/bitwarden/lite:latest)
+PATCHINSTANCE=$(docker run -d --name bitwarden-patch ghcr.io/bitwarden/self-host:beta)
 
 # create our temporary directory
 mkdir $TEMPDIRECTORY
@@ -93,50 +72,33 @@ mkdir $TEMPDIRECTORY
 # extract the files that need to be patched from the services that need to be patched into our temporary directory
 for COMPONENT in ${COMPONENTS[@]}; do
 	mkdir "$TEMPDIRECTORY/$COMPONENT"
-	docker cp $PATCHINSTANCE:/app/$COMPONENT/$COMPONENT "$TEMPDIRECTORY/$COMPONENT/$COMPONENT"
+	docker cp $PATCHINSTANCE:/app/$COMPONENT/Core.dll "$TEMPDIRECTORY/$COMPONENT/Core.dll"
-	docker cp $PATCHINSTANCE:/etc/supervisor.d/${COMPONENT,,}.ini "$TEMPDIRECTORY/${COMPONENT,,}.ini"
 done
 
-# stop and remove our temporary container
-docker stop bitwarden-extract
-docker rm bitwarden-extract
-
 # run bitBetter, this applies our patches to the required files
 docker run -v "$TEMPDIRECTORY:/app/mount" --rm bitbetter/bitbetter
 
 # create a new image with the patched files
-if [ -f "$PWD/Dockerfile-bitwarden-patch" ]; then
+docker build . --tag bitwarden-patch --file "$PWD/src/bitBetter/Dockerfile-bitwarden-patch"
-	rm -f "$PWD/Dockerfile-bitwarden-patch"
-fi
-echo "FROM mcr.microsoft.com/dotnet/aspnet:10.0-alpine3.23" >> "$PWD/Dockerfile-bitwarden-patch"
-echo "FROM ghcr.io/bitwarden/lite:latest" >> "$PWD/Dockerfile-bitwarden-patch"
-echo "COPY --from=0 /usr/share/dotnet /usr/share/dotnet" >> "$PWD/Dockerfile-bitwarden-patch"
-for COMPONENT in ${COMPONENTS[@]}; do
-	echo "" >> "$PWD/Dockerfile-bitwarden-patch"
-	echo "RUN rm -f /app/$COMPONENT/$COMPONENT" >> "$PWD/Dockerfile-bitwarden-patch"
-	echo "COPY ./temp/${COMPONENT,,}.ini /etc/supervisor.d/${COMPONENT,,}.ini" >> "$PWD/Dockerfile-bitwarden-patch"
-	echo "COPY ./temp/$COMPONENT/ /app/$COMPONENT/" >> "$PWD/Dockerfile-bitwarden-patch"
-done
-docker build . --tag bitwarden-patched --file "$PWD/Dockerfile-bitwarden-patch"
-rm -f "$PWD/Dockerfile-bitwarden-patch"
 
-# start all user requested instances
+# stop and remove our temporary container
-if [ -f "$PWD/.servers/serverlist.txt" ]; then
+docker stop bitwarden-patch
-	# convert line endings to unix
+docker rm bitwarden-patch
-	sed -i 's/\r$//' "$PWD/.servers/serverlist.txt"
-	cat "$PWD/.servers/serverlist.txt" | while read -r LINE; do
-		if [[ $LINE != "#"* && -n $LINE ]]; then
-			bash -c "$LINE"
-		fi
-	done
-fi
-
-# remove our bitBetter image
-docker image rm bitbetter/bitbetter
 
 # copy our patched library to the licenseGen source directory
 cp -f "$TEMPDIRECTORY/Identity/Core.dll" "$PWD/src/licenseGen"
-cp -f "$PWD/.keys/cert.pfx" "$PWD/src/licenseGen"
+
+# remove our temporary directory
+rm -rf "$TEMPDIRECTORY"
+
+# start all user requested instances
+sed -i 's/\r$//' "$PWD/.servers/serverlist.txt"
+cat "$PWD/.servers/serverlist.txt" | while read -r LINE; do
+	bash -c "$LINE"
+done
+
+# remove our bitBetter image
+docker image rm bitbetter/bitbetter
 
 # build the licenseGen
 docker build -t bitbetter/licensegen "$PWD/src/licenseGen"
@@ -144,6 +106,3 @@ docker build -t bitbetter/licensegen "$PWD/src/licenseGen"
 # clean the licenseGen source directory
 rm -f "$PWD/src/licenseGen/Core.dll"
 rm -f "$PWD/src/licenseGen/cert.pfx"
-
-# remove our temporary directory
-rm -rf "$TEMPDIRECTORY"

generateKeys.ps1

@@ -1,25 +1,25 @@
-$ErrorActionPreference = 'Stop'
+$ErrorActionPreference = 'Stop'
-$PSNativeCommandUseErrorActionPreference = $true
+$PSNativeCommandUseErrorActionPreference = $true
-
+
-# get the basic openssl binary path
+# get the basic openssl binary path
-$opensslbinary = "$Env:Programfiles\OpenSSL-Win64\bin\openssl.exe"
+$opensslbinary = "$Env:Programfiles\OpenSSL-Win64\bin\openssl.exe"
-
+
-# if openssl is not installed attempt to install it
+# if openssl is not installed attempt to install it
-if (!(Get-Command $opensslbinary -errorAction SilentlyContinue))
+if (!(Get-Command $opensslbinary -errorAction SilentlyContinue))
-{
+{
-	winget install openssl
+    winget install openssl
-}
+}
-
+
-# if previous keys exist, remove them
+# if previous keys exist, remove them
-if (Test-Path "$pwd\.keys")
+if (Test-Path "$pwd\.keys")
-{
+{
-	Remove-Item "$pwd\.keys" -Recurse -Force
+	Remove-Item "$pwd\.keys" -Recurse -Force
-}
+}
-
+
-# create new directory 
+# create new directory 
-New-item -ItemType Directory -Path "$pwd\.keys"
+New-item -ItemType Directory -Path "$pwd\.keys"
-
+
-# generate actual keys
+# generate actual keys
-Invoke-Expression "& '$opensslbinary' req -x509 -newkey rsa:4096 -keyout `"$pwd\.keys\key.pem`" -out `"$pwd\.keys\cert.cer`" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US' -outform DER -passout pass:test"
+Invoke-Expression "& '$opensslbinary' req -x509 -newkey rsa:4096 -keyout `"$pwd\.keys\key.pem`" -out `"$pwd\.keys\cert.cert`" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US' -outform DER -passout pass:test"
-Invoke-Expression "& '$opensslbinary' x509 -inform DER -in `"$pwd\.keys\cert.cer`" -out `"$pwd\.keys\cert.pem`""
+Invoke-Expression "& '$opensslbinary' x509 -inform DER -in `"$pwd\.keys\cert.cert`" -out `"$pwd\.keys\cert.pem`""
-Invoke-Expression "& '$opensslbinary' pkcs12 -export -out `"$pwd\.keys\cert.pfx`" -inkey `"$pwd\.keys\key.pem`" -in `"$pwd\.keys\cert.pem`" -passin pass:test -passout pass:test -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256"
+Invoke-Expression "& '$opensslbinary' pkcs12 -export -out `"$pwd\.keys\cert.pfx`" -inkey `"$pwd\.keys\key.pem`" -in `"$pwd\.keys\cert.pem`" -passin pass:test -passout pass:test"

generateKeys.sh

@@ -15,6 +15,6 @@ fi
 mkdir "$DIR"
 
 # Generate new keys
-openssl	req -x509 -newkey rsa:4096 -keyout "$DIR/key.pem" -out "$DIR/cert.cer" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US'  -outform DER -passout pass:test
+openssl	req -x509 -newkey rsa:4096 -keyout "$DIR/key.pem" -out "$DIR/cert.cert" -days 36500 -subj '/CN=www.mydom.com/O=My Company Name LTD./C=US'  -outform DER -passout pass:test
-openssl x509 -inform DER -in "$DIR/cert.cer" -out "$DIR/cert.pem"
+openssl x509 -inform DER -in "$DIR/cert.cert" -out "$DIR/cert.pem"
-openssl pkcs12 -export -out "$DIR/cert.pfx" -inkey "$DIR/key.pem" -in "$DIR/cert.pem" -passin pass:test -passout pass:test -certpbe AES-256-CBC -keypbe AES-256-CBC -macalg SHA256
+openssl pkcs12 -export -out "$DIR/cert.pfx" -inkey "$DIR/key.pem" -in "$DIR/cert.pem" -passin pass:test -passout pass:test

licenseGen.ps1

@@ -2,16 +2,16 @@ $ErrorActionPreference = 'Stop'
 $PSNativeCommandUseErrorActionPreference = $true
 
 if ($($args.Count) -lt 1) {
-	echo "USAGE: <License Gen action> [License Gen args...]"
+    echo "USAGE: <License Gen action> [License Gen args...]"
-	echo "ACTIONS:"
+    echo "ACTIONS:"
-	echo " interactive"
+    echo " interactive"
-	echo " user"
+    echo " user"
-	echo " org"
+    echo " org"
 	Exit 1
 }
 
-if ($args[0] -eq "interactive") {
+if ($args[0] = "interactive") {
-	docker run -it --rm bitbetter/licensegen interactive
+    docker run -it --rm bitbetter/licensegen interactive
 } else {
-	docker run bitbetter/licensegen $args
+    docker run bitbetter/licensegen $args
 }

licenseGen.sh

@@ -2,12 +2,12 @@
 set -e
 
 if [ $# -lt 1 ]; then
-	echo "USAGE: <License Gen action> [License Gen args...]"
+    echo "USAGE: <License Gen action> [License Gen args...]"
-	echo "ACTIONS:"
+    echo "ACTIONS:"
-	echo " interactive"
+    echo " interactive"
-	echo " user"
+    echo " user"
-	echo " org"
+    echo " org"
-	exit 1
+    exit 1
 fi
 
 if [ "$1" = "interactive" ]; then

src/bitBetter/Dockerfile

@@ -1,14 +1,14 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 WORKDIR /bitBetter
 
 COPY . /bitBetter
-COPY cert.cer /app/
+COPY cert.cert /app/
 
 RUN dotnet restore
 RUN dotnet publish -c Release -o /app --no-restore
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0
+FROM mcr.microsoft.com/dotnet/sdk:8.0
 WORKDIR /app
 COPY --from=build /app .
 
-ENTRYPOINT ["dotnet", "/app/bitBetter.dll"]
+ENTRYPOINT [ "/app/bitBetter" ]

src/bitBetter/Dockerfile-bitwarden-patch

@@ -0,0 +1,4 @@
+FROM ghcr.io/bitwarden/self-host:beta
+
+COPY ./temp/Api/Core.dll /app/Api/Core.dll
+COPY ./temp/Identity/Core.dll /app/Identity/Core.dll

src/bitBetter/Program.cs

@@ -1,142 +1,75 @@
-using System;
+using System;
-using System.IO;
+using System.Collections.Generic;
-using System.Linq;
+using System.IO;
-using System.Security.Cryptography.X509Certificates;
+using System.Linq;
-using System.Text;
+using System.Security.Cryptography.X509Certificates;
-using dnlib.DotNet;
+using dnlib.DotNet;
-using dnlib.DotNet.Emit;
+using dnlib.DotNet.Emit;
-using dnlib.DotNet.Writer;
+using dnlib.DotNet.Writer;
-using dnlib.IO;
+using dnlib.IO;
-using SingleFileExtractor.Core;
+
-
+namespace bitBetter;
-namespace bitBetter;
+
-
+internal class Program
-internal class Program
+{
-{
+    private static Int32 Main()
-	private static Int32 Main()
+    {
-	{
+        const String certFile = "/app/cert.cert";
-		const String certFile = "/app/cert.cer";
+        String[] files = Directory.GetFiles("/app/mount", "Core.dll", SearchOption.AllDirectories);
-
+
-		foreach (String iniFile in Directory.GetFiles("/app/mount/", "*.ini", SearchOption.TopDirectoryOnly))
+        foreach (String file in files)
-		{
+        {
-			Console.WriteLine("Patching: " + iniFile);
+            Console.WriteLine(file);
-
+            ModuleDefMD moduleDefMd = ModuleDefMD.Load(file);
-			String[] lines = File.ReadAllLines(iniFile);
+            Byte[] cert = File.ReadAllBytes(certFile);
-			for (Int32 i = 0; i < lines.Length; i++)
+
-			{
+            EmbeddedResource embeddedResourceToRemove = moduleDefMd.Resources
-				String line = lines[i];
+                .OfType<EmbeddedResource>()
-				if (!line.StartsWith("command=", StringComparison.Ordinal)) continue;
+                .First(r => r.Name.Equals("Bit.Core.licensing.cer"));
-
+
-				String appNameAndPath = line[(line.LastIndexOf('=') + 1)..];
+            Console.WriteLine(embeddedResourceToRemove.Name);
-				lines[i] = "command=/usr/bin/dotnet \"" + appNameAndPath + ".dll\" --runtimeconfig \"" + appNameAndPath + ".runtimeconfig.json\"";
+
-				break;
+            EmbeddedResource embeddedResourceToAdd = new("Bit.Core.licensing.cer", cert) { Attributes = embeddedResourceToRemove.Attributes };
-			}
+            moduleDefMd.Resources.Add(embeddedResourceToAdd);
-			File.WriteAllText(iniFile, String.Join("\n", lines), new UTF8Encoding(false));
+            moduleDefMd.Resources.Remove(embeddedResourceToRemove);
-		}
+
-
+            DataReader reader = embeddedResourceToRemove.CreateReader();
-		foreach (String singleFile in Directory.GetFiles("/app/mount/", "*", SearchOption.AllDirectories))
+            X509Certificate2 existingCert = new(reader.ReadRemainingBytes());
-		{
+            
-			if (Path.HasExtension(singleFile)) continue;
+            Console.WriteLine($"Existing Cert Thumbprint: {existingCert.Thumbprint}");
-
+            X509Certificate2 certificate = new(cert);
-			Console.WriteLine("Extracting: " + singleFile);
+
-
+            Console.WriteLine($"New Cert Thumbprint: {certificate.Thumbprint}");
-			ExecutableReader reader1 = new(singleFile);
+
-			String currentDirectory = Path.GetDirectoryName(singleFile);
+            IEnumerable<TypeDef> services = moduleDefMd.Types.Where(t => t.Namespace == "Bit.Core.Services");
-			String newCoreDll = Path.Combine(currentDirectory, "Core.dll");
+            TypeDef type = services.First(t => t.Name == "LicensingService");
-			reader1.ExtractToDirectory(currentDirectory);
+            MethodDef constructor = type.FindConstructors().First();
-			reader1.Dispose();
+            
-
+            Instruction instructionToPatch =
-			File.Delete(singleFile);
+                constructor.Body.Instructions
-
+                    .FirstOrDefault(i => i.OpCode == OpCodes.Ldstr
-			if (!File.Exists(newCoreDll))
+                                         && String.Equals((String)i.Operand, existingCert.Thumbprint, StringComparison.InvariantCultureIgnoreCase));
-			{
+            
-				Console.WriteLine("Could not extract Core.dll for " + singleFile);
+            if (instructionToPatch != null)
-				Environment.Exit(-1);
+            {
-			}
+                instructionToPatch.Operand = certificate.Thumbprint;
-
+            }
-			Console.WriteLine("Extracted: " + newCoreDll);
+            else
-			ModuleDefMD moduleDefMd = ModuleDefMD.Load(newCoreDll);
+            {
-			Byte[] cert = File.ReadAllBytes(certFile);
+                Console.WriteLine("Can't find constructor to patch");
-
+            }
-			EmbeddedResource embeddedResourceToRemove = moduleDefMd.Resources.OfType<EmbeddedResource>().First(r => r.Name.Equals("Bit.Core.licensing.cer"));
+
-			EmbeddedResource embeddedResourceToAdd = new("Bit.Core.licensing.cer", cert) { Attributes = embeddedResourceToRemove.Attributes };
+            ModuleWriterOptions moduleWriterOptions = new(moduleDefMd);
-			moduleDefMd.Resources.Add(embeddedResourceToAdd);
+            moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.KeepOldMaxStack;
-			moduleDefMd.Resources.Remove(embeddedResourceToRemove);
+            moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveAll;
-
+            moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveRids;
-			DataReader reader = embeddedResourceToRemove.CreateReader();
+
-			
+            moduleDefMd.Write(file + ".new");
-			X509Certificate2 existingCert = X509CertificateLoader.LoadCertificate(reader.ReadRemainingBytes());
+            moduleDefMd.Dispose();
-			X509Certificate2 certificate = X509CertificateLoader.LoadCertificate(cert);
+            File.Delete(file);
-			Console.WriteLine($"Existing certificate Thumbprint: {existingCert.Thumbprint}");
+            File.Move(file + ".new", file);
-			Console.WriteLine($"New certificate Thumbprint: {certificate.Thumbprint}");
+        }
-
+
-			// Find LicensingService by class name (namespace-agnostic to handle renames)
+        return 0;
-			TypeDef type = moduleDefMd.Types.FirstOrDefault(t => String.Equals(t.Name, "LicensingService", StringComparison.OrdinalIgnoreCase));
+    }
-			if (type == null)
+}
-			{
-				Console.Error.WriteLine("ERROR: LicensingService class not found");
-				return -1;
-			}
-			Console.WriteLine($"Found: {type.FullName}");
-
-			MethodDef constructor = type.FindConstructors().First();
-
-			if (constructor == null)
-			{
-				Console.Error.WriteLine("ERROR: Cannot find constructor");
-				return -1;
-			}
-
-			Instruction[] instructionToPatch = constructor.Body.Instructions
-				.Where(i => i.OpCode == OpCodes.Ldstr)
-				.Where(i => ((String)i.Operand)
-					.Contains(existingCert.Thumbprint, StringComparison.OrdinalIgnoreCase))
-				.ToArray();
-
-			if (instructionToPatch.Length > 0)
-			{
-				Console.WriteLine($"Found {instructionToPatch.Length} thumbprint Ldstr instruction(s) to replace");
-				foreach (Instruction inst in instructionToPatch)
-				{
-					Console.WriteLine($"  Replacing: '{inst.Operand}'");
-					inst.Operand = certificate.Thumbprint;
-				}
-			}
-			else
-			{
-				Console.WriteLine("ERROR: Can't find instruction to patch");
-				return -1;
-			}
-
-			Console.WriteLine("Writing: " + newCoreDll);
-
-			ModuleWriterOptions moduleWriterOptions = new(moduleDefMd);
-			moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.KeepOldMaxStack;
-			moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveAll;
-			moduleWriterOptions.MetadataOptions.Flags |= MetadataFlags.PreserveRids;
-
-			moduleDefMd.Write(newCoreDll + ".new");
-			moduleDefMd.Dispose();
-			File.Delete(newCoreDll);
-			File.Move(newCoreDll + ".new", newCoreDll);
-		}
-
-		foreach (String runtimeConfigFile in Directory.GetFiles("/app/mount/", "*.runtimeconfig.json", SearchOption.AllDirectories))
-		{
-			Console.WriteLine("Patching: " + runtimeConfigFile);
-
-			String[] lines = File.ReadAllLines(runtimeConfigFile);
-			for (Int32 i = 0; i < lines.Length; i++)
-			{
-				String line = lines[i];
-				if (!line.Contains("includedFrameworks", StringComparison.Ordinal)) continue;
-
-				lines[i] = lines[i].Replace("includedFrameworks", "frameworks", StringComparison.Ordinal);
-				break;
-			}
-			File.WriteAllText(runtimeConfigFile, String.Join("\n", lines), new UTF8Encoding(false));
-		}
-
-		return 0;
-	}
-}

src/bitBetter/bitBetter.csproj

@@ -1,10 +1,12 @@
 <Project Sdk="Microsoft.NET.Sdk">
+
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFramework>net10.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
   </PropertyGroup>
-  <ItemGroup>
+
-    <PackageReference Include="dnlib" Version="4.5.0" />
+  <ItemGroup>
-    <PackageReference Include="SingleFileExtractor.Core" Version="2.3.0" />
+    <PackageReference Include="dnlib" Version="4.4.0" />
   </ItemGroup>
+
 </Project>

src/licenseGen/Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 WORKDIR /licenseGen
 
 COPY . /licenseGen
@@ -8,8 +8,8 @@ COPY cert.pfx /app/
 RUN dotnet restore
 RUN dotnet publish -c Release -o /app --no-restore
 
-FROM mcr.microsoft.com/dotnet/sdk:10.0
+FROM mcr.microsoft.com/dotnet/sdk:8.0
 WORKDIR /app
 COPY --from=build /app .
 
-ENTRYPOINT ["dotnet", "/app/licenseGen.dll", "--cert=/app/cert.pfx", "--core=/app/Core.dll"]
+ENTRYPOINT [ "dotnet", "/app/licenseGen.dll", "--core", "/app/Core.dll", "--executable", "/app/Api", "--cert", "/app/cert.pfx" ]

src/licenseGen/licenseGen.csproj

@@ -1,11 +1,14 @@
 <Project Sdk="Microsoft.NET.Sdk">
+
   <PropertyGroup>
     <OutputType>Exe</OutputType>
-    <TargetFramework>net10.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
   </PropertyGroup>
+
   <ItemGroup>
-    <PackageReference Include="McMaster.Extensions.CommandLineUtils" Version="5.1.0" />
+    <PackageReference Include="McMaster.Extensions.CommandLineUtils" Version="4.1.1" />
+    <PackageReference Include="Newtonsoft.Json" Version="13.0.3" />
     <PackageReference Include="System.Runtime.Loader" Version="4.3.0" />
-	<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.17.0" />
   </ItemGroup>
+
 </Project>