openlan/pkg/config/openvpn.go

package config

import (
	"fmt"
	"github.com/luscis/openlan/pkg/libol"
	"strconv"
	"strings"
)

type OpenVPN struct {
	Network   string           `json:"network"`
	Directory string           `json:"directory"`
	Listen    string           `json:"listen"`
	Protocol  string           `json:"protocol"`
	Subnet    string           `json:"subnet"`
	Device    string           `json:"device"`
	Version   int              `json:"version"`
	Auth      string           `json:"auth"` // xauth or cert.
	DhPem     string           `json:"dhPem" yaml:"dhPem"`
	RootCa    string           `json:"rootCa"`
	ServerCrt string           `json:"cert" yaml:"cert"`
	ServerKey string           `json:"key" yaml:"key"`
	TlsAuth   string           `json:"tlsAuth" yaml:"tlsAuth"`
	Cipher    string           `json:"cipher"`
	Routes    []string         `json:"-" yaml:"-"`
	Renego    int              `json:"renego,omitempty" yaml:"renego,omitempty"`
	Script    string           `json:"-" yaml:"-"`
	Push      []string         `json:"push,omitempty" yaml:"push,omitempty"`
	Clients   []*OpenVPNClient `json:"clients,omitempty" yaml:"clients,omitempty"`
}

type OpenVPNClient struct {
	Name    string `json:"name" yaml:"name"`
	Address string `json:"address" yaml:"address"`
	Netmask string `json:"netmask" yaml:"netmask"`
}

func DefaultOpenVPN() *OpenVPN {
	return &OpenVPN{
		Protocol:  "tcp",
		Auth:      "xauth",
		Device:    "tun0",
		RootCa:    VarDir("cert/ca.crt"),
		ServerCrt: VarDir("cert/crt"),
		ServerKey: VarDir("cert/key"),
		DhPem:     VarDir("openvpn/dh.pem"),
		TlsAuth:   VarDir("openvpn/ta.key"),
		Cipher:    "AES-256-CBC",
		Script:    "/usr/bin/openlan",
	}
}

func (o *OpenVPN) Correct(obj *OpenVPN) {
	if obj != nil {
		if o.Network == "" {
			o.Network = obj.Network
		}
		if o.Auth == "" {
			o.Auth = obj.Auth
		}
		if o.Protocol == "" {
			o.Protocol = obj.Protocol
		}
		if o.DhPem == "" {
			o.DhPem = obj.DhPem
		}
		if o.RootCa == "" {
			o.RootCa = obj.RootCa
		}
		if o.ServerCrt == "" {
			o.ServerCrt = obj.ServerCrt
		}
		if o.ServerKey == "" {
			o.ServerKey = obj.ServerKey
		}
		if o.TlsAuth == "" {
			o.TlsAuth = obj.TlsAuth
		}
		if o.Cipher == "" {
			o.Cipher = obj.Cipher
		}
		if o.Routes == nil || len(o.Routes) == 0 {
			o.Routes = append(o.Routes, obj.Routes...)
		}
		if o.Push == nil || len(o.Push) == 0 {
			o.Push = append(o.Push, obj.Push...)
		}
		if o.Script == "" {
			bin := obj.Script + " user check --network " + o.Network
			o.Script = bin
		}
		if o.Clients == nil || len(o.Clients) == 0 {
			o.Clients = append(o.Clients, obj.Clients...)
		}
	}
	if o.Directory == "" {
		o.Directory = VarDir("openvpn", o.Network)
	}
	if o.Device == "" {
		if !strings.Contains(o.Listen, ":") {
			o.Listen += ":1194"
		}
		o.Device = GenName("tun")
	}
	pool := Manager.Switch.AddrPool
	if o.Subnet == "" {
		_, port := libol.GetHostPort(o.Listen)
		value, _ := strconv.Atoi(port)
		o.Subnet = fmt.Sprintf("%s.%d.0/24", pool, value&0xff)
	}
}