1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
package config
import (
"flag"
"log"
"os"
"reflect"
)
const DefaultAuthenticationModule = "anonymous"
type Opts struct {
Notls bool
CaCrt string
CaKey string
TlsCrt string
TlsKey string
Port string
Auth string
}
func (o *Opts) fallbackToEnv(field string, envVar string, defaultVal string) {
r := reflect.ValueOf(o)
f := reflect.Indirect(r).FieldByName(field)
if f.String() == "" {
val, exists := os.LookupEnv(envVar)
if exists && val != "" {
f.SetString(val)
} else {
f.SetString(defaultVal)
}
}
}
func doCaFilesSanityCheck(caCrt string, caKey string) {
if _, err := os.Stat(caCrt); os.IsNotExist(err) {
log.Fatal("cannot find caCrt file")
}
if _, err := os.Stat(caKey); os.IsNotExist(err) {
log.Fatal("cannot find caKey file")
}
}
func doTlsFilesSanityCheck(tlsCrt string, tlsKey string) {
if _, err := os.Stat(tlsCrt); os.IsNotExist(err) {
log.Fatal("cannot find tlsCrt file")
}
if _, err := os.Stat(tlsKey); os.IsNotExist(err) {
log.Fatal("cannot find tlsKey file")
}
}
func InitializeFlags(opts *Opts) {
flag.BoolVar(&opts.Notls, "notls", false, "disable TLS on the service")
flag.StringVar(&opts.CaCrt, "caCrt", "", "path to the CA public key")
flag.StringVar(&opts.CaKey, "caKey", "", "path to the CA private key")
flag.StringVar(&opts.TlsCrt, "tls_crt", "", "path to the cert file for TLS")
flag.StringVar(&opts.TlsKey, "tls_key", "", "path to the key file for TLS")
flag.StringVar(&opts.Port, "port", "", "port where the server will listen (default: 8000)")
flag.StringVar(&opts.Auth, "auth", "", "authentication module (anonymous, sip)")
flag.Parse()
opts.fallbackToEnv("CaCrt", "VPNWEB_CACRT", "")
opts.fallbackToEnv("CaKey", "VPNWEB_CAKEY", "")
opts.fallbackToEnv("TlsCrt", "VPNWEB_TLSCRT", "")
opts.fallbackToEnv("TlsKey", "VPNWEB_TLSKEY", "")
opts.fallbackToEnv("Port", "VPNWEB_PORT", "8000")
opts.fallbackToEnv("Auth", "VPNWEB_AUTH", DefaultAuthenticationModule)
}
func CheckConfigurationOptions(opts *Opts) {
if opts.CaCrt == "" {
log.Fatal("missing caCrt parameter")
}
if opts.CaKey == "" {
log.Fatal("missing caKey parameter")
}
if opts.Notls == false {
if opts.TlsCrt == "" {
log.Fatal("missing tls_crt parameter. maybe use -notls?")
}
if opts.TlsKey == "" {
log.Fatal("missing tls_key parameter. maybe use -notls?")
}
}
doCaFilesSanityCheck(opts.CaCrt, opts.CaKey)
if opts.Notls == false {
doTlsFilesSanityCheck(opts.TlsCrt, opts.TlsKey)
}
log.Println("Authentication module:", opts.Auth)
// TODO -- check authentication module is valud, bail out otherwise
}
|
