diff options
| author | Ruben Pollan <meskio@sindominio.net> | 2018-06-13 20:48:27 +0200 |
|---|---|---|
| committer | Ruben Pollan <meskio@sindominio.net> | 2018-06-20 12:18:17 +0200 |
| commit | 37413f5eb2b8d4719c959db03874cc9bcc362ddc (patch) | |
| tree | bd14bf1489da7b0da030015d2d9ff112c1b2b833 /bitmask_go/vpn.go | |
| parent | d4f013fee611299aea7f8cfff0377ba8646ba17d (diff) | |
[feat] get openvpn args/gateways from the eip-service.json
Diffstat (limited to 'bitmask_go/vpn.go')
| -rw-r--r-- | bitmask_go/vpn.go | 22 |
1 files changed, 12 insertions, 10 deletions
diff --git a/bitmask_go/vpn.go b/bitmask_go/vpn.go index 2e69368..041a8e4 100644 --- a/bitmask_go/vpn.go +++ b/bitmask_go/vpn.go @@ -24,26 +24,28 @@ const ( openvpnManagementPort = "6061" ) -var gateways = []string{ - "5.79.86.180", - "199.58.81.145", - "198.252.153.28", -} - // StartVPN for provider func (b *Bitmask) StartVPN(provider string) error { - // TODO: openvpn args are hardcoded - err := b.launch.firewallStart(gateways) + gateways, err := b.bonafide.getGateways() + if err != nil { + return err + } + err = b.launch.firewallStart(gateways) if err != nil { return err } arg := []string{"--nobind", "--verb", "1"} + bonafideArgs, err := b.bonafide.getOpenvpnArgs() + if err != nil { + return err + } + arg = append(arg, bonafideArgs...) for _, gw := range gateways { - arg = append(arg, "--remote", gw, "443", "tcp4") + arg = append(arg, "--remote", gw.IPAddress, "443", "tcp4") } certPemPath := b.getCertPemPath() - arg = append(arg, "--client", "--tls-client", "--remote-cert-tls", "server", "--tls-cipher", "DHE-RSA-AES128-SHA", "--cipher", "AES-128-CBC", "--tun-ipv6", "--auth", "SHA1", "--keepalive", "10 30", "--management-client", "--management", openvpnManagementAddr+" "+openvpnManagementPort, "--ca", b.getCaCertPath(), "--cert", certPemPath, "--key", certPemPath) + arg = append(arg, "--client", "--tls-client", "--remote-cert-tls", "server", "--management-client", "--management", openvpnManagementAddr+" "+openvpnManagementPort, "--ca", b.getCaCertPath(), "--cert", certPemPath, "--key", certPemPath) return b.launch.openvpnStart(arg...) } |