/// <summary>
/// Verifies that the given remote endpoint is reachable by connecting to it and sending a short message.
/// </summary>
/// <remarks>
/// This function is used to ensure that the remote endpoing has listed the correct IP and port information for their `PresenceList` entry.
/// </remarks>
/// <param name="endpoint">Target endpoint to verify for connectivity.</param>
/// <returns>True, if the endpoing is connectable.</returns>
public static bool checkNodeConnectivity(RemoteEndpoint endpoint)
{
// TODO TODO TODO TODO we should put this in a separate thread
string hostname = endpoint.getFullAddress(true);
if (CoreNetworkUtils.PingAddressReachable(hostname) == false)
{
Logging.warn("Node {0} was not reachable on the advertised address.", hostname);
CoreProtocolMessage.sendBye(endpoint, ProtocolByeCode.notConnectable, "External " + hostname + " not reachable!", "");
return(false);
}
return(true);
}
/// <summary>
/// Prepares and sends an Ixian protocol 'Hello' message to the specified remote endpoint.
/// </summary>
/// <remarks>
/// A valid Ixian 'Hello' message includes certain Node data, verified by a public-key signature, which this function prepares using
/// the primary wallet's keypair. If this message is a reply to the other endpoint's hello message, then
/// </remarks>
/// <param name="endpoint">Remote endpoint to send the message to.</param>
/// <param name="sendHelloData">True if the message is the first hello sent to the remote node, false if it is a reply to the challenge.</param>
/// <param name="challenge_response">Response byte-field to the other node's hello challenge</param>
public static void sendHelloMessage(RemoteEndpoint endpoint, bool sendHelloData, byte[] challenge_response)
{
using (MemoryStream m = new MemoryStream(1856))
{
using (BinaryWriter writer = new BinaryWriter(m))
{
string publicHostname = IxianHandler.getFullPublicAddress();
// Send the node version
writer.Write(CoreConfig.protocolVersion);
// Send the public node address
byte[] address = IxianHandler.getWalletStorage().getPrimaryAddress();
writer.Write(address.Length);
writer.Write(address);
// Send the testnet designator
writer.Write(CoreConfig.isTestNet);
char node_type = PresenceList.myPresenceType;
writer.Write(node_type);
// Send the version
writer.Write(CoreConfig.productVersion);
// Send the node device id
writer.Write(CoreConfig.device_id);
// Send the wallet public key
writer.Write(IxianHandler.getWalletStorage().getPrimaryPublicKey().Length);
writer.Write(IxianHandler.getWalletStorage().getPrimaryPublicKey());
// Send listening port
writer.Write(IxianHandler.publicPort);
// Send timestamp
long timestamp = Clock.getTimestamp() + endpoint.calculateTimeDifference();
writer.Write(timestamp);
// send signature
byte[] signature = CryptoManager.lib.getSignature(Encoding.UTF8.GetBytes(ConsensusConfig.ixianChecksumLockString + "-" + CoreConfig.device_id + "-" + timestamp + "-" + publicHostname), IxianHandler.getWalletStorage().getPrimaryPrivateKey());
writer.Write(signature.Length);
writer.Write(signature);
if (sendHelloData)
{
Block block = IxianHandler.getLastBlock();
if (block == null)
{
Logging.warn("Clients are connecting, but we have no blocks yet to send them!");
CoreProtocolMessage.sendBye(endpoint, ProtocolByeCode.notReady, string.Format("The node isn't ready yet, please try again later."), "", true);
return;
}
ulong lastBlock = block.blockNum;
writer.Write(lastBlock);
writer.Write(block.blockChecksum.Length);
writer.Write(block.blockChecksum);
writer.Write(block.walletStateChecksum.Length);
writer.Write(block.walletStateChecksum);
writer.Write((int)0); // deprecated, can be replaced with something else of type int32
writer.Write(block.version);
// Write the legacy level
writer.Write((ulong)0); // deprecated, can be replaced with something else of type UInt64
writer.Write(challenge_response.Length);
writer.Write(challenge_response);
#if TRACE_MEMSTREAM_SIZES
Logging.info(String.Format("CoreProtocolMessage::sendHelloMessage: {0}", m.Length));
#endif
endpoint.sendData(ProtocolMessageCode.helloData, m.ToArray());
}
else
{
List <byte> challenge = new List <byte>();
challenge.AddRange(IxianHandler.getWalletStorage().getPrimaryAddress());
Random rnd = new Random();
challenge.AddRange(BitConverter.GetBytes(rnd.Next(20000)));
byte[] challenge_bytes = challenge.ToArray();
endpoint.challenge = challenge_bytes;
writer.Write(challenge_bytes.Length);
writer.Write(challenge_bytes);
#if TRACE_MEMSTREAM_SIZES
Logging.info(String.Format("CoreProtocolMessage::sendHelloMessage: {0}", m.Length));
#endif
endpoint.sendData(ProtocolMessageCode.hello, m.ToArray());
}
}
}
}
/// <summary>
/// Processes a Hello Ixian protocol message and updates the `PresenceList` as appropriate.
/// </summary>
/// <remarks>
/// This function should normally be called from `NetworkProtocol.parseProtocolMessage()`
/// </remarks>
/// <param name="endpoint">Remote endpoint from which the message was received.</param>
/// <param name="reader">Reader object placed at the beginning of the hello message data.</param>
/// <returns>True if the message was formatted properly and accepted.</returns>
public static bool processHelloMessage(RemoteEndpoint endpoint, BinaryReader reader)
{
// Node already has a presence
if (endpoint.presence != null)
{
// Ignore the hello message in this case
return(false);
}
// Another layer to catch any incompatible node exceptions for the hello message
try
{
int protocol_version = reader.ReadInt32();
Logging.info(string.Format("Received Hello: Node version {0}", protocol_version));
// Check for incompatible nodes
if (protocol_version < CoreConfig.protocolVersion)
{
Logging.warn(String.Format("Hello: Connected node version ({0}) is too old! Upgrade the node.", protocol_version));
sendBye(endpoint, ProtocolByeCode.deprecated, string.Format("Your node version is too old. Should be at least {0} is {1}", CoreConfig.protocolVersion, protocol_version), CoreConfig.protocolVersion.ToString(), true);
return(false);
}
int addrLen = reader.ReadInt32();
byte[] addr = reader.ReadBytes(addrLen);
bool test_net = reader.ReadBoolean();
char node_type = reader.ReadChar();
string node_version = reader.ReadString();
string device_id = reader.ReadString();
int pkLen = reader.ReadInt32();
byte[] pubkey = null;
if (pkLen > 0)
{
pubkey = reader.ReadBytes(pkLen);
}
endpoint.serverPubKey = pubkey;
int port = reader.ReadInt32();
long timestamp = reader.ReadInt64();
int sigLen = reader.ReadInt32();
byte[] signature = reader.ReadBytes(sigLen);
// Check the testnet designator and disconnect on mismatch
if (test_net != CoreConfig.isTestNet)
{
Logging.warn(string.Format("Rejected node {0} due to incorrect testnet designator: {1}", endpoint.fullAddress, test_net));
sendBye(endpoint, ProtocolByeCode.incorrectNetworkType, string.Format("Incorrect testnet designator: {0}. Should be {1}", test_net, CoreConfig.isTestNet), test_net.ToString(), true);
return(false);
}
// Check the address and pubkey and disconnect on mismatch
if (!addr.SequenceEqual((new Address(pubkey)).address))
{
Logging.warn(string.Format("Pubkey and address do not match."));
sendBye(endpoint, ProtocolByeCode.authFailed, "Pubkey and address do not match.", "", true);
return(false);
}
endpoint.incomingPort = port;
// Verify the signature
if (node_type == 'C')
{
// TODO: verify if the client is connectable, then if connectable, check if signature verifies
/*if (CryptoManager.lib.verifySignature(Encoding.UTF8.GetBytes(ConsensusConfig.ixianChecksumLockString + "-" + device_id + "-" + timestamp + "-" + endpoint.getFullAddress(true)), pubkey, signature) == false)
* {
* CoreProtocolMessage.sendBye(endpoint, ProtocolByeCode.incorrectIp, "Verify signature failed in hello message, likely an incorrect IP was specified. Detected IP:", endpoint.address);
* Logging.warn(string.Format("Connected node used an incorrect signature in hello message, likely an incorrect IP was specified. Detected IP: {0}", endpoint.address));
* return false;
* }*/
// TODO store the full address if connectable
// Store the presence address for this remote endpoint
endpoint.presenceAddress = new PresenceAddress(device_id, "", node_type, node_version, Clock.getNetworkTimestamp() - CoreConfig.clientKeepAliveInterval, null);
}
else
{
if (!CryptoManager.lib.verifySignature(Encoding.UTF8.GetBytes(ConsensusConfig.ixianChecksumLockString + "-" + device_id + "-" + timestamp + "-" + endpoint.getFullAddress(true)), pubkey, signature))
{
CoreProtocolMessage.sendBye(endpoint, ProtocolByeCode.incorrectIp, "Verify signature failed in hello message, likely an incorrect IP was specified. Detected IP:", endpoint.address);
Logging.warn(string.Format("Connected node used an incorrect signature in hello message, likely an incorrect IP was specified. Detected IP: {0}", endpoint.address));
return(false);
}
// Store the presence address for this remote endpoint
endpoint.presenceAddress = new PresenceAddress(device_id, endpoint.getFullAddress(true), node_type, node_version, Clock.getNetworkTimestamp() - CoreConfig.serverKeepAliveInterval, null);
}
// if we're a client update the network time difference
if (endpoint.GetType() == typeof(NetworkClient))
{
long timeDiff = endpoint.calculateTimeDifference();
// amortize +- 2 seconds
if (timeDiff >= -2 && timeDiff <= 2)
{
timeDiff = 0;
}
((NetworkClient)endpoint).timeDifference = timeDiff;
// Check the address and local address and disconnect on mismatch
if (endpoint.serverWalletAddress != null && !addr.SequenceEqual(endpoint.serverWalletAddress))
{
Logging.warn(string.Format("Local address mismatch, possible Man-in-the-middle attack."));
sendBye(endpoint, ProtocolByeCode.addressMismatch, "Local address mismatch.", "", true);
return(false);
}
}
// Create a temporary presence with the client's address and device id
Presence presence = new Presence(addr, pubkey, null, endpoint.presenceAddress);
if (endpoint.GetType() != typeof(NetworkClient))
{
// we're the server
if (node_type == 'M' || node_type == 'H' || node_type == 'R')
{
if (node_type != 'R')
{
// Check the wallet balance for the minimum amount of coins
IxiNumber balance = IxianHandler.getWalletBalance(addr);
if (balance < ConsensusConfig.minimumMasterNodeFunds)
{
Logging.warn(string.Format("Rejected master node {0} due to insufficient funds: {1}", endpoint.getFullAddress(), balance.ToString()));
sendBye(endpoint, ProtocolByeCode.insufficientFunds, string.Format("Insufficient funds. Minimum is {0}", ConsensusConfig.minimumMasterNodeFunds), balance.ToString(), true);
return(false);
}
}
// Limit to one IP per masternode
// TODO TODO TODO - think about this and do it properly
/*string[] hostname_split = hostname.Split(':');
* if (PresenceList.containsIP(hostname_split[0], 'M'))
* {
* using (MemoryStream m2 = new MemoryStream())
* {
* using (BinaryWriter writer = new BinaryWriter(m2))
* {
* writer.Write(string.Format("This IP address ( {0} ) already has a masternode connected.", hostname_split[0]));
* Logging.info(string.Format("Rejected master node {0} due to duplicate IP address", hostname));
* socket.Send(prepareProtocolMessage(ProtocolMessageCode.bye, m2.ToArray()), SocketFlags.None);
* socket.Disconnect(true);
* return;
* }
* }
* }*/
if (!checkNodeConnectivity(endpoint))
{
return(false);
}
}
}
// Retrieve the final presence entry from the list (or create a fresh one)
endpoint.presence = PresenceList.updateEntry(presence);
}
catch (Exception e)
{
// Disconnect the node in case of any reading errors
Logging.warn(string.Format("Exception occured in Hello Message {0}", e.ToString()));
sendBye(endpoint, ProtocolByeCode.deprecated, "Something went wrong during hello, make sure you're running the latest version of Ixian DLT.", "");
return(false);
}
if (NetworkClientManager.getConnectedClients().Count() == 1)
{
PresenceList.forceSendKeepAlive = true;
}
return(true);
}
