108 lines
2.8 KiB
Go
108 lines
2.8 KiB
Go
package configuration
|
|
|
|
import (
|
|
"encoding/pem"
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/qdm12/gluetun/internal/constants"
|
|
"github.com/qdm12/golibs/params"
|
|
)
|
|
|
|
func (settings *Provider) cyberghostLines() (lines []string) {
|
|
lines = append(lines, lastIndent+"Server group: "+settings.ServerSelection.Group)
|
|
|
|
if len(settings.ServerSelection.Regions) > 0 {
|
|
lines = append(lines, lastIndent+"Regions: "+commaJoin(settings.ServerSelection.Regions))
|
|
}
|
|
|
|
if settings.ExtraConfigOptions.ClientKey != "" {
|
|
lines = append(lines, lastIndent+"Client key is set")
|
|
}
|
|
|
|
if settings.ExtraConfigOptions.ClientCertificate != "" {
|
|
lines = append(lines, lastIndent+"Client certificate is set")
|
|
}
|
|
|
|
return lines
|
|
}
|
|
|
|
func (settings *Provider) readCyberghost(r reader) (err error) {
|
|
settings.Name = constants.Cyberghost
|
|
|
|
settings.ServerSelection.Protocol, err = readProtocol(r.env)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
settings.ServerSelection.TargetIP, err = readTargetIP(r.env)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
settings.ExtraConfigOptions.ClientKey, err = readCyberghostClientKey(r)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
settings.ExtraConfigOptions.ClientCertificate, err = readCyberghostClientCertificate(r)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
settings.ServerSelection.Group, err = r.env.Inside("CYBERGHOST_GROUP",
|
|
constants.CyberghostGroupChoices(), params.Default("Premium UDP Europe"))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
settings.ServerSelection.Regions, err = r.env.CSVInside("REGION", constants.CyberghostRegionChoices())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func readCyberghostClientKey(r reader) (clientKey string, err error) {
|
|
b, err := r.getFromFileOrSecretFile("OPENVPN_CLIENTKEY", string(constants.ClientKey))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return extractClientKey(b)
|
|
}
|
|
|
|
func extractClientKey(b []byte) (key string, err error) {
|
|
pemBlock, _ := pem.Decode(b)
|
|
if pemBlock == nil {
|
|
return "", fmt.Errorf("cannot decode PEM block from client key")
|
|
}
|
|
parsedBytes := pem.EncodeToMemory(pemBlock)
|
|
s := string(parsedBytes)
|
|
s = strings.ReplaceAll(s, "\n", "")
|
|
s = strings.TrimPrefix(s, "-----BEGIN PRIVATE KEY-----")
|
|
s = strings.TrimSuffix(s, "-----END PRIVATE KEY-----")
|
|
return s, nil
|
|
}
|
|
|
|
func readCyberghostClientCertificate(r reader) (clientCertificate string, err error) {
|
|
b, err := r.getFromFileOrSecretFile("OPENVPN_CLIENTCRT", string(constants.ClientCertificate))
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
return extractClientCertificate(b)
|
|
}
|
|
|
|
func extractClientCertificate(b []byte) (certificate string, err error) {
|
|
pemBlock, _ := pem.Decode(b)
|
|
if pemBlock == nil {
|
|
return "", fmt.Errorf("cannot decode PEM block from client certificate")
|
|
}
|
|
parsedBytes := pem.EncodeToMemory(pemBlock)
|
|
s := string(parsedBytes)
|
|
s = strings.ReplaceAll(s, "\n", "")
|
|
s = strings.TrimPrefix(s, "-----BEGIN CERTIFICATE-----")
|
|
s = strings.TrimSuffix(s, "-----END CERTIFICATE-----")
|
|
return s, nil
|
|
}
|