1
0
mirror of https://github.com/kepler155c/opus synced 2025-11-07 02:53:01 +00:00

protected network services

This commit is contained in:
kepler155c@gmail.com
2019-04-20 13:48:13 -04:00
parent 62a3bc1360
commit 7749e14cad
6 changed files with 83 additions and 54 deletions

View File

@@ -4,6 +4,27 @@ local Security = require('security')
local Socket = require('socket')
local Util = require('util')
local function trustConnection(socket)
local data = socket:read(2)
if data then
local password = Security.getPassword()
if not password then
socket:write({ msg = 'No password has been set' })
else
data = Crypto.decrypt(data, password)
if data and data.pk and data.dh == socket.dhost then
local trustList = Util.readTable('usr/.known_hosts') or { }
trustList[data.dh] = data.pk
Util.writeTable('usr/.known_hosts', trustList)
socket:write({ success = true, msg = 'Trust accepted' })
else
socket:write({ msg = 'Invalid password' })
end
end
end
end
Event.addRoutine(function()
print('trust: listening on port 19')
@@ -12,24 +33,11 @@ Event.addRoutine(function()
print('trust: connection from ' .. socket.dhost)
local data = socket:read(2)
if data then
local password = Security.getPassword()
if not password then
socket:write({ msg = 'No password has been set' })
else
data = Crypto.decrypt(data, password)
if data and data.pk and data.dh == socket.dhost then
local trustList = Util.readTable('usr/.known_hosts') or { }
trustList[data.dh] = data.pk
Util.writeTable('usr/.known_hosts', trustList)
socket:write({ success = true, msg = 'Trust accepted' })
else
socket:write({ msg = 'Invalid password' })
end
end
end
local s, m = pcall(trustConnection, socket)
socket:close()
if not s and m then
print('Trust error')
_G.printError(m)
end
end
end)