feat(node,server): implement certpath validate

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

htdocs/luci-static/resources/homeproxy.js

@@ -267,6 +267,14 @@ return baseclass.extend({
 		return true;
 	},
 
+	validateCertificatePath: function(section_id, value) {
+		if (section_id && value)
+			if (!value.match(/^(\/etc\/homeproxy\/certs\/|\/etc\/acme\/|\/etc\/ssl\/).+$/))
+				return _('Expecting: %s').format(_('/etc/homeproxy/certs/..., /etc/acme/..., /etc/ssl/...'));
+
+		return true;
+	},
+
 	validateUniqueValue: function(uciconfig, ucisection, ucioption, section_id, value) {
 		if (section_id) {
 			if (!value)

htdocs/luci-static/resources/view/homeproxy/node.js

@@ -1021,6 +1021,7 @@ function renderNodeSettings(section, data, features, main_node, routing_mode) {
 		_('The path to the server certificate, in PEM format.'));
 	o.value('/etc/homeproxy/certs/client_ca.pem');
 	o.depends('tls_self_sign', '1');
+	o.validate = L.bind(hp.validateCertificatePath, this);
 	o.rmempty = false;
 	o.modalonly = true;
 

htdocs/luci-static/resources/view/homeproxy/server.js

@@ -745,6 +745,7 @@ return view.extend({
 		o.depends({'tls': '1', 'tls_acme': '0', 'tls_reality': '0'});
 		o.depends({'tls': '1', 'tls_acme': null, 'tls_reality': '0'});
 		o.depends({'tls': '1', 'tls_acme': null, 'tls_reality': null});
+		o.validate = L.bind(hp.validateCertificatePath, this);
 		o.rmempty = false;
 		o.modalonly = true;
 
@@ -763,6 +764,7 @@ return view.extend({
 		o.depends({'tls': '1', 'tls_acme': '0', 'tls_reality': null});
 		o.depends({'tls': '1', 'tls_acme': null, 'tls_reality': '0'});
 		o.depends({'tls': '1', 'tls_acme': null, 'tls_reality': null});
+		o.validate = L.bind(hp.validateCertificatePath, this);
 		o.rmempty = false;
 		o.modalonly = true;