#!/bin/bash

SCRIPT_VER="1.1"

APP="Fixes for CuteFTP Users"
APP_CATEGORY="__Fixes"
APP_SCOPE="system"
APP_ENABLED="yes"
SUPPORTED_ON="Ubuntu20.04,Ubuntu22.04,Ubuntu24.04"
LIBRARY="functions4.sh"

if [ "${SUPPORT-}" = '' ]; then
    SUPPORT="https://installers.rapidseedbox.com/scripts/whmcs_client_installers/support"
fi

LOGFILE="/var/log/whmcs_client_installers/${0}.log"
[ ! -d "/var/log/whmcs_client_installers" ] && mkdir -p "/var/log/whmcs_client_installers"

wget -4 -nc -q --no-check-certificate --timeout=20 --tries=5 ${SUPPORT}/${LIBRARY} >> "${LOGFILE}" 2>&1
if [ ! -f "./${LIBRARY}" ] ; then
    echo "55"
    echo "Error downloading \"${SUPPORT}/${LIBRARY}\"" >> "${LOGFILE}"
    exit 55
fi

# shellcheck source=support/functions4.sh
. "./${LIBRARY}"
SCRIPTENTRY

while : ; do

    main_rc=1

    CHECK_APP ; _rc=$?
    if [ ${_rc} -ne 0 ] ; then
        main_rc=${_rc}
        break
    fi


    # set Ciphers (sshd)
    sshd_restart="no"

    # Fixes for SSL3 (pure-ftpd)
    pureftpd_restart="no"
    if [ -d "/etc/pure-ftpd/conf" ] ; then
        if [ -f "/etc/pure-ftpd/conf/TLS" ] ; then
            if [ -f "/etc/pure-ftpd/conf/TLSCipherSuite" ] ; then
                RUN_LOG "grep -e '^ALL:!aNULL$' '/etc/pure-ftpd/conf/TLSCipherSuite'"
                if [ $? -ne 0 ] ; then
                    RUN_LOG "echo 'ALL:!aNULL' > '/etc/pure-ftpd/conf/TLSCipherSuite'"
                    [ $? -eq 0 ] && pureftpd_restart="yes"
                fi
            else
                RUN_LOG "echo 'ALL:!aNULL' > '/etc/pure-ftpd/conf/TLSCipherSuite'"
                [ $? -eq 0 ] && pureftpd_restart="yes"
            fi
        else
            INFO "'pure-ftpd': TLS configuration is not enabled."
        fi
    else
        INFO "'pure-ftpd': config directory not found."
    fi
    [ "${pureftpd_restart}" = "yes" ] && SVC_RESTART "pure-ftpd"



    main_rc=0
    break

done

SCRIPTEXIT