#!/bin/bash

SCRIPT_VER="1.1"

APP="Fixes for CuteFTP Users"
APP_CATEGORY="__Fixes"
APP_SCOPE="system"
APP_ENABLED="yes"
SUPPORTED_ON="Ubuntu16.04,Ubuntu18.04,Ubuntu20.04,Ubuntu22.04"
LIBRARY="functions4.sh"

if [ "${SUPPORT-}" = '' ]; then
    SUPPORT="https://installers.rapidseedbox.com/scripts/whmcs_client_installers/support"
fi

LOGFILE="/var/log/whmcs_client_installers/${0}.log"
[ ! -d "/var/log/whmcs_client_installers" ] && mkdir -p "/var/log/whmcs_client_installers"

wget -4 -nc -q --no-check-certificate --timeout=20 --tries=5 ${SUPPORT}/${LIBRARY} >> "${LOGFILE}" 2>&1
if [ ! -f "./${LIBRARY}" ] ; then
    echo "55"
    echo "Error downloading \"${SUPPORT}/${LIBRARY}\"" >> "${LOGFILE}"
    exit 55
fi

# shellcheck source=support/functions4.sh
. "./${LIBRARY}"
SCRIPTENTRY

while : ; do

    main_rc=1

    CHECK_APP ; _rc=$?
    if [ ${_rc} -ne 0 ] ; then
        main_rc=${_rc}
        break
    fi


    # set Ciphers (sshd)
    sshd_restart="no"
    case "${LSB_CODENAME}" in
      "xenial"|"yakkety")
          RUN_LOG "grep -e '^Ciphers ' '/etc/ssh/sshd_config'"
          if [ $? -eq 0 ] ; then
              RUN_LOG "grep -e '^Ciphers +aes256-cbc' '/etc/ssh/sshd_config'"
              if [ $? -ne 0 ] ; then
                  RUN_LOG "grep -e '^Ciphers.*aes256-cbc' '/etc/ssh/sshd_config'"
                  if [ $? -ne 0 ] ; then
                      RUN_LOG "sed -i -e 's|^\(Ciphers.*\)$|\1,aes256-cbc|g' '/etc/ssh/sshd_config'"
                      [ $? -eq 0 ] && sshd_restart="yes"
                  fi
              fi
          else
              RUN_LOG "echo 'Ciphers +aes256-cbc' >> '/etc/ssh/sshd_config'"
              [ $? -eq 0 ] && sshd_restart="yes"
          fi
          [ "${sshd_restart}" = "yes" ] && SVC_RESTART "ssh"
          ;;
    esac

    # Fixes for SSL3 (pure-ftpd)
    pureftpd_restart="no"
    if [ -d "/etc/pure-ftpd/conf" ] ; then
        if [ -f "/etc/pure-ftpd/conf/TLS" ] ; then
            if [ -f "/etc/pure-ftpd/conf/TLSCipherSuite" ] ; then
                RUN_LOG "grep -e '^ALL:!aNULL$' '/etc/pure-ftpd/conf/TLSCipherSuite'"
                if [ $? -ne 0 ] ; then
                    RUN_LOG "echo 'ALL:!aNULL' > '/etc/pure-ftpd/conf/TLSCipherSuite'"
                    [ $? -eq 0 ] && pureftpd_restart="yes"
                fi
            else
                RUN_LOG "echo 'ALL:!aNULL' > '/etc/pure-ftpd/conf/TLSCipherSuite'"
                [ $? -eq 0 ] && pureftpd_restart="yes"
            fi
        else
            INFO "'pure-ftpd': TLS configuration is not enabled."
        fi
    else
        INFO "'pure-ftpd': config directory not found."
    fi
    [ "${pureftpd_restart}" = "yes" ] && SVC_RESTART "pure-ftpd"



    main_rc=0
    break

done

SCRIPTEXIT