예제 #1
0
        public static int Main(string[] args)
        {
            DhtNodeParameters parameters = new DhtNodeParameters();

            if (parameters.Parse(args) != 0)
            {
                Console.WriteLine(parameters.ErrorMessage);
                parameters.ShowHelp();
                return(-1);
            }
            else if (parameters.Help)
            {
                parameters.ShowHelp();
                return(0);
            }

            DHCPConfig dhcp_config = parameters.DhcpConfig;
            IpopConfig ipop_config = parameters.IpopConfig;
            NodeConfig node_config = parameters.NodeConfig;

            NodeConfig.SecurityPolicy security = parameters.Security;


            if (node_config.NodeAddress == null)
            {
                node_config.NodeAddress = (Utils.GenerateAHAddress()).ToString();
                node_config.WriteConfig();
            }

            if (parameters.GroupVPN)
            {
                // check to see if we have a valid private key
                RSACryptoServiceProvider public_key = new RSACryptoServiceProvider();
                bool create = true;
                // If this succeeds, the key is good, if it fails, we need to create a new one...
                if (File.Exists(security.KeyPath))
                {
                    try {
                        using (FileStream fs = File.Open(security.KeyPath, FileMode.Open)) {
                            byte[] blob = new byte[fs.Length];
                            fs.Read(blob, 0, blob.Length);
                            public_key.ImportCspBlob(blob);
                            public_key.ImportCspBlob(public_key.ExportCspBlob(false));
                        }
                        create = false;
                    } catch { }
                }

                // we don't, let's create one
                if (create)
                {
                    using (FileStream fs = File.Open(security.KeyPath, FileMode.Create)) {
                        RSACryptoServiceProvider private_key = new RSACryptoServiceProvider(2048);
                        byte[] blob = private_key.ExportCspBlob(true);
                        fs.Write(blob, 0, blob.Length);
                        public_key.ImportCspBlob(private_key.ExportCspBlob(false));
                    }
                }

                // verify we have a cacert
                string cacert_path = Path.Combine(security.CertificatePath, "cacert");
                if (!File.Exists(cacert_path))
                {
                    Console.WriteLine("Missing CACert: " + cacert_path);
                    parameters.ShowHelp();
                    return(-1);
                }

                // do we already have a certificate that matches our node id?
                string cert_path = Path.Combine(security.CertificatePath,
                                                "lc." + node_config.NodeAddress.Substring(12));
                // no, let's create one
                if (create || !File.Exists(cert_path))
                {
                    // prepare access to the groupvpn site
                    string webcert_path = Path.Combine(security.CertificatePath, "webcert");
                    if (!File.Exists(webcert_path))
                    {
                        Console.WriteLine("Missing Servers signed cert: " + webcert_path);
                        parameters.ShowHelp();
                        return(-1);
                    }

                    X509Certificate webcert = X509Certificate.CreateFromCertFile(webcert_path);
                    CertificatePolicy.Register(webcert);

                    // get certificate and store it to file
                    GroupVPNClient gvc = new GroupVPNClient(ipop_config.GroupVPN.UserName,
                                                            ipop_config.GroupVPN.Group, ipop_config.GroupVPN.Secret,
                                                            ipop_config.GroupVPN.ServerURI, node_config.NodeAddress,
                                                            public_key);
                    gvc.Start();
                    if (gvc.State != GroupVPNClient.States.Finished)
                    {
                        Console.WriteLine("Failure attempting to use GroupVPN");
                        parameters.ShowHelp();
                        return(-1);
                    }

                    using (FileStream fs = File.Open(cert_path, FileMode.Create)) {
                        byte[] blob = gvc.Certificate.X509.RawData;
                        fs.Write(blob, 0, blob.Length);
                    }
                }
            }

            if (dhcp_config != null)
            {
                _current_node = new DhtIpopNode(node_config, ipop_config, dhcp_config);
            }
            else
            {
                _current_node = new DhtIpopNode(node_config, ipop_config);
            }

            if (parameters.GroupVPN)
            {
                // hack until I can come up with a cleaner solution to add features
                // that don't break config files on previous IPOP
                string cacert_path    = Path.Combine(security.CertificatePath, "cacert");
                string revocation_url = ipop_config.GroupVPN.ServerURI.Replace("mono/GroupVPN.rem",
                                                                               "data/" + ipop_config.GroupVPN.Group + "/revocation_list");
                revocation_url = revocation_url.Replace("https", "http");
                var icv = new GroupCertificateVerification(revocation_url, cacert_path);
                _current_node.AppNode.SecurityOverlord.CertificateHandler.AddCertificateVerification(icv);
                icv.RevocationUpdate += _current_node.AppNode.SecurityOverlord.VerifySAs;
            }

            Console.WriteLine("Starting IPOP: " + DateTime.UtcNow);
            _current_node.Run();
            return(0);
        }
예제 #2
0
파일: Main.cs 프로젝트: reith2004/ipop
        public static int Main(string[] args)
        {
            DhtNodeParameters parameters= new DhtNodeParameters();
              if(parameters.Parse(args) != 0) {
            Console.WriteLine(parameters.ErrorMessage);
            parameters.ShowHelp();
            return -1;
              } else if(parameters.Help) {
            parameters.ShowHelp();
            return 0;
              }

              DHCPConfig dhcp_config = parameters.DhcpConfig;
              IpopConfig ipop_config = parameters.IpopConfig;
              NodeConfig node_config = parameters.NodeConfig;

              if(node_config.NodeAddress == null) {
            node_config.NodeAddress = (Utils.GenerateAHAddress()).ToString();
            node_config.WriteConfig();
              }

              if(parameters.GroupVPN) {
            // check to see if we have a valid private key
            RSACryptoServiceProvider public_key = new RSACryptoServiceProvider();
            bool create = true;
            // If this succeeds, the key is good, if it fails, we need to create a new one...
            if(File.Exists(node_config.Security.KeyPath)) {
              try {
            using(FileStream fs = File.Open(node_config.Security.KeyPath, FileMode.Open)) {
              byte[] blob = new byte[fs.Length];
              fs.Read(blob, 0, blob.Length);
              public_key.ImportCspBlob(blob);
              public_key.ImportCspBlob(public_key.ExportCspBlob(false));
            }
            create = false;
              } catch { }
            }

            // we don't, let's create one
            if(create) {
              using(FileStream fs = File.Open(node_config.Security.KeyPath, FileMode.Create)) {
            RSACryptoServiceProvider private_key = new RSACryptoServiceProvider(2048);
            byte[] blob = private_key.ExportCspBlob(true);
            fs.Write(blob, 0, blob.Length);
            public_key.ImportCspBlob(private_key.ExportCspBlob(false));
              }
            }

            // verify we have a cacert
            string cacert_path = Path.Combine(node_config.Security.CertificatePath, "cacert");
            if(!File.Exists(cacert_path)) {
              Console.WriteLine("Missing CACert: " + cacert_path);
              parameters.ShowHelp();
              return -1;
            }

            // do we already have a certificate that matches our node id?
            string cert_path = Path.Combine(node_config.Security.CertificatePath,
            "lc." + node_config.NodeAddress.Substring(12));
            // no, let's create one
            if(create || !File.Exists(cert_path)) {
              // prepare access to the groupvpn site
              string webcert_path = Path.Combine(node_config.Security.CertificatePath, "webcert");
              if(!File.Exists(webcert_path)) {
            Console.WriteLine("Missing Servers signed cert: " + webcert_path);
            parameters.ShowHelp();
            return -1;
              }

              X509Certificate webcert = X509Certificate.CreateFromCertFile(webcert_path);
              CertificatePolicy.Register(webcert);

              // get certificate and store it to file
              GroupVPNClient gvc = new GroupVPNClient(ipop_config.GroupVPN.UserName,
              ipop_config.GroupVPN.Group, ipop_config.GroupVPN.Secret,
              ipop_config.GroupVPN.ServerURI, node_config.NodeAddress,
              public_key);
              gvc.Start();
              if(gvc.State != GroupVPNClient.States.Finished) {
            Console.WriteLine("Failure attempting to use GroupVPN");
            parameters.ShowHelp();
            return -1;
              }

              using(FileStream fs = File.Open(cert_path, FileMode.Create)) {
            byte[] blob = gvc.Certificate.X509.RawData;
            fs.Write(blob, 0, blob.Length);
              }
            }
              }

              if(dhcp_config != null) {
            _current_node = new DhtIpopNode(node_config, ipop_config, dhcp_config);
              } else {
            _current_node = new DhtIpopNode(node_config, ipop_config);
              }

              if(parameters.GroupVPN) {
            // hack until I can come up with a cleaner solution to add features
            // that don't break config files on previous IPOP
            string cacert_path = Path.Combine(node_config.Security.CertificatePath, "cacert");
            string revocation_url = ipop_config.GroupVPN.ServerURI.Replace("mono/GroupVPN.rem",
            "data/" + ipop_config.GroupVPN.Group + "/revocation_list");
            revocation_url = revocation_url.Replace("https", "http");
            var icv = new GroupCertificateVerification(revocation_url, cacert_path);
            _current_node.AppNode.SecurityOverlord.CertificateHandler.AddCertificateVerification(icv);
            icv.RevocationUpdate += _current_node.AppNode.SecurityOverlord.VerifySAs;
              }

              Console.WriteLine("Starting IPOP: " + DateTime.UtcNow);
              _current_node.Run();
              return 0;
        }
예제 #3
0
파일: Main.cs 프로젝트: arjunprakash84/ipop
        public static int Main(String[] args)
        {
            string node_config_path = string.Empty;
              string ipop_config_path = string.Empty;
              string dhcp_config_path = string.Empty;
              bool show_help = false;

              OptionSet opts = new OptionSet() {
            { "n|NodeConfig=", "Path to a NodeConfig file.",
              v => node_config_path = v },
            { "i|IpopConfig=", "Path to an IpopConfig file.",
              v => ipop_config_path = v },
            { "d|DhcpConfig=", "Path to a DHCPConfig file.",
              v => dhcp_config_path = v },
            { "h|help", "Display this help and exit.",
              v => show_help = v != null },
              };

              try {
            opts.Parse(args);
              } catch (OptionException e) {
            PrintError(e.Message);
            return -1;
              }

              if(show_help) {
            ShowHelp(opts);
            return -1;
              }

              if(node_config_path == string.Empty || !File.Exists(node_config_path)) {
            PrintError("Missing NodeConfig");
            return -1;
              }

              if(ipop_config_path == string.Empty || !File.Exists(ipop_config_path)) {
            PrintError("Missing IpopConfig");
            return -1;
              }

              ConfigurationValidator cv = new ConfigurationValidator();
              NodeConfig node_config = null;
              try {
            cv.Validate(node_config_path, "Node.xsd");
            node_config = Utils.ReadConfig<NodeConfig>(node_config_path);
            node_config.Path = node_config_path;
              } catch (Exception e) {
            Console.WriteLine("Invalid NodeConfig file:");
            Console.WriteLine("\t" + e.Message);
            return -1;
              }

              if(node_config.NodeAddress == null) {
            node_config.NodeAddress = (Utils.GenerateAHAddress()).ToString();
            node_config.WriteConfig();
              }

              IpopConfig ipop_config = null;
              try {
            cv.Validate(ipop_config_path, "Ipop.xsd");
            ipop_config = Utils.ReadConfig<IpopConfig>(ipop_config_path);
            ipop_config.Path = ipop_config_path;
              } catch (Exception e) {
            Console.WriteLine("Invalid IpopConfig file:");
            Console.WriteLine("\t" + e.Message);
            return -1;
              }

              DHCPConfig dhcp_config = null;
              if(dhcp_config_path != string.Empty) {
            if(!File.Exists(dhcp_config_path)) {
              PrintError("No such DhtIpop file");
              return -1;
            }
            try {
              cv.Validate(dhcp_config_path, "Dhcp.xsd");
              dhcp_config = Utils.ReadConfig<DHCPConfig>(dhcp_config_path);
            } catch(Exception e) {
              Console.WriteLine("Invalid DhcpConfig file:");
              Console.WriteLine("\t" + e.Message);
              return -1;
            }

            if(!dhcp_config.Namespace.Equals(ipop_config.IpopNamespace)) {
              PrintError("IpopConfig.Namespace isn't the same as DHCPConfig.Namespace");
              return -1;
            }
              }

              bool groupvpn = node_config.Security.Enabled &&
            ipop_config.GroupVPN.Enabled &&
            ipop_config.EndToEndSecurity;

              // enable GroupVPN!
              if(groupvpn) {
            // check to see if we have a valid private key
            RSACryptoServiceProvider public_key = new RSACryptoServiceProvider();
            bool create = true;
            if(File.Exists(node_config.Security.KeyPath)) {
              try {
            using(FileStream fs = File.Open(node_config.Security.KeyPath, FileMode.Open)) {
              byte[] blob = new byte[fs.Length];
              fs.Read(blob, 0, blob.Length);
              public_key.ImportCspBlob(blob);
              public_key.ImportCspBlob(public_key.ExportCspBlob(false));
            }
            create = false;
              } catch { }
            }

            // we don't, let's create one
            if(create) {
              using(FileStream fs = File.Open(node_config.Security.KeyPath, FileMode.Create)) {
            RSACryptoServiceProvider private_key = new RSACryptoServiceProvider(2048);
            byte[] blob = private_key.ExportCspBlob(true);
            fs.Write(blob, 0, blob.Length);
            public_key.ImportCspBlob(private_key.ExportCspBlob(false));
              }
            }

            // verify we have a cacert
            string cacert_path = Path.Combine(node_config.Security.CertificatePath, "cacert");
            if(!File.Exists(cacert_path)) {
              Console.WriteLine("DhtIpop: ");
              Console.WriteLine("\tMissing CACert: " + cacert_path);
            }

            // do we already have a certificate that matches our node id?
            string cert_path = Path.Combine(node_config.Security.CertificatePath,
            "lc." + node_config.NodeAddress.Substring(12));
            // no, let's create one
            if(create || !File.Exists(cert_path)) {
              // prepare access to the groupvpn site
              string webcert_path = Path.Combine(node_config.Security.CertificatePath, "webcert");
              if(!File.Exists(webcert_path)) {
            Console.WriteLine("DhtIpop: ");
            Console.WriteLine("\tMissing Servers signed cert: " + webcert_path);
              }

              X509Certificate webcert = X509Certificate.CreateFromCertFile(webcert_path);
              CertificatePolicy.Register(webcert);

              // get certificate and store it to file
              GroupVPNClient gvc = new GroupVPNClient(ipop_config.GroupVPN.UserName,
              ipop_config.GroupVPN.Group, ipop_config.GroupVPN.Secret,
              ipop_config.GroupVPN.ServerURI, node_config.NodeAddress,
              public_key);
              gvc.Start();
              if(gvc.State != GroupVPNClient.States.Finished) {
            Console.WriteLine("DhtIpop: ");
            Console.WriteLine("\tFailure attempting to use GroupVPN");
            return -1;
              }

              using(FileStream fs = File.Open(cert_path, FileMode.Create)) {
            byte[] blob = gvc.Certificate.X509.RawData;
            fs.Write(blob, 0, blob.Length);
              }
            }
              }

              if(dhcp_config != null) {
            _current_node = new DhtIpopNode(node_config, ipop_config, dhcp_config);
              } else {
            _current_node = new DhtIpopNode(node_config, ipop_config);
              }

              if(groupvpn) {
            // hack until I can come up with a cleaner solution to add features
            // that don't break config files on previous IPOP
            string cacert_path = Path.Combine(node_config.Security.CertificatePath, "cacert");
            string revocation_url = ipop_config.GroupVPN.ServerURI.Replace("mono/GroupVPN.rem",
            "data/" + ipop_config.GroupVPN.Group + "/revocation_list");
            revocation_url = revocation_url.Replace("https", "http");
            var icv = new GroupCertificateVerification(revocation_url, cacert_path);
            _current_node.Bso.CertificateHandler.AddCertificateVerification(icv);
            icv.RevocationUpdate += _current_node.Bso.CheckSAs;
              }

              Console.WriteLine("Starting IPOP: " + DateTime.UtcNow);
              _current_node.Run();
              return 0;
        }