mirror of
https://github.com/safing/portmaster
synced 2025-04-23 20:39:10 +00:00
80664d1a27
* Move portbase into monorepo * Add new simple module mgr * [WIP] Switch to new simple module mgr * Add StateMgr and more worker variants * [WIP] Switch more modules * [WIP] Switch more modules * [WIP] swtich more modules * [WIP] switch all SPN modules * [WIP] switch all service modules * [WIP] Convert all workers to the new module system * [WIP] add new task system to module manager * [WIP] Add second take for scheduling workers * [WIP] Add FIXME for bugs in new scheduler * [WIP] Add minor improvements to scheduler * [WIP] Add new worker scheduler * [WIP] Fix more bug related to new module system * [WIP] Fix start handing of the new module system * [WIP] Improve startup process * [WIP] Fix minor issues * [WIP] Fix missing subsystem in settings * [WIP] Initialize managers in constructor * [WIP] Move module event initialization to constrictors * [WIP] Fix setting for enabling and disabling the SPN module * [WIP] Move API registeration into module construction * [WIP] Update states mgr for all modules * [WIP] Add CmdLine operation support * Add state helper methods to module group and instance * Add notification and module status handling to status package * Fix starting issues * Remove pilot widget and update security lock to new status data * Remove debug logs * Improve http server shutdown * Add workaround for cleanly shutting down firewall+netquery * Improve logging * Add syncing states with notifications for new module system * Improve starting, stopping, shutdown; resolve FIXMEs/TODOs * [WIP] Fix most unit tests * Review new module system and fix minor issues * Push shutdown and restart events again via API * Set sleep mode via interface * Update example/template module * [WIP] Fix spn/cabin unit test * Remove deprecated UI elements * Make log output more similar for the logging transition phase * Switch spn hub and observer cmds to new module system * Fix log sources * Make worker mgr less error prone * Fix tests and minor issues * Fix observation hub * Improve shutdown and restart handling * Split up big connection.go source file * Move varint and dsd packages to structures repo * Improve expansion test * Fix linter warnings * Fix interception module on windows * Fix linter errors --------- Co-authored-by: Vladimir Stoilov <vladimir@safing.io>
85 lines
2.4 KiB
Go
85 lines
2.4 KiB
Go
package docks
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/safing/portmaster/spn/cabin"
|
|
"github.com/safing/portmaster/spn/terminal"
|
|
"github.com/safing/structures/container"
|
|
"github.com/safing/structures/varint"
|
|
)
|
|
|
|
const (
|
|
hubVerificationPurpose = "hub identify verification"
|
|
)
|
|
|
|
// VerifyConnectedHub verifies the connected Hub.
|
|
func (crane *Crane) VerifyConnectedHub(callerCtx context.Context) error {
|
|
if !crane.ship.IsMine() || crane.nextTerminalID != 0 || crane.Public() {
|
|
return errors.New("hub verification can only be executed in init phase by the client")
|
|
}
|
|
|
|
// Create verification request.
|
|
v, request, err := cabin.CreateVerificationRequest(hubVerificationPurpose, "", "")
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create verification request: %w", err)
|
|
}
|
|
|
|
// Send it.
|
|
msg := container.New(
|
|
varint.Pack8(CraneMsgTypeVerify),
|
|
request,
|
|
)
|
|
msg.PrependLength()
|
|
err = crane.ship.Load(msg.CompileData())
|
|
if err != nil {
|
|
return terminal.ErrShipSunk.With("failed to send verification request: %w", err)
|
|
}
|
|
|
|
// Wait for reply.
|
|
var reply *container.Container
|
|
select {
|
|
case reply = <-crane.unloading:
|
|
case <-time.After(2 * time.Minute):
|
|
// Use a big timeout here, as this might keep servers from joining the
|
|
// network at all, as every servers needs to verify every server, no
|
|
// matter how far away.
|
|
return terminal.ErrTimeout.With("waiting for verification reply")
|
|
case <-crane.ctx.Done():
|
|
return terminal.ErrShipSunk.With("waiting for verification reply")
|
|
case <-callerCtx.Done():
|
|
return terminal.ErrShipSunk.With("waiting for verification reply")
|
|
}
|
|
|
|
// Verify reply.
|
|
return v.Verify(reply.CompileData(), crane.ConnectedHub)
|
|
}
|
|
|
|
func (crane *Crane) handleCraneVerification(request *container.Container) *terminal.Error {
|
|
// Check if we have an identity.
|
|
if crane.identity == nil {
|
|
return terminal.ErrIncorrectUsage.With("cannot handle verification request without designated identity")
|
|
}
|
|
|
|
response, err := crane.identity.SignVerificationRequest(
|
|
request.CompileData(),
|
|
hubVerificationPurpose,
|
|
"", "",
|
|
)
|
|
if err != nil {
|
|
return terminal.ErrInternalError.With("failed to sign verification request: %w", err)
|
|
}
|
|
msg := container.New(response)
|
|
|
|
// Manually send reply.
|
|
msg.PrependLength()
|
|
err = crane.ship.Load(msg.CompileData())
|
|
if err != nil {
|
|
return terminal.ErrShipSunk.With("failed to send verification reply: %w", err)
|
|
}
|
|
|
|
return nil
|
|
}
|