2015-04-10 03:54:00 +00:00
/*
* ZeroTier One - Network Virtualization Everywhere
2016-01-12 22:04:55 +00:00
* Copyright ( C ) 2011 - 2016 ZeroTier , Inc . https : //www.zerotier.com/
2015-04-10 03:54:00 +00:00
*
* This program is free software : you can redistribute it and / or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation , either version 3 of the License , or
* ( at your option ) any later version .
*
* This program is distributed in the hope that it will be useful ,
* but WITHOUT ANY WARRANTY ; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
* GNU General Public License for more details .
*
* You should have received a copy of the GNU General Public License
* along with this program . If not , see < http : //www.gnu.org/licenses/>.
*/
# include <stdio.h>
# include <stdlib.h>
# include <string.h>
# include <stdint.h>
2015-04-16 00:00:26 +00:00
# include <time.h>
# include <errno.h>
2015-04-24 22:44:39 +00:00
# include "node/Constants.hpp"
2015-04-16 00:00:26 +00:00
# ifdef __WINDOWS__
# include <WinSock2.h>
# include <Windows.h>
# include <tchar.h>
# include <wchar.h>
# include <lmcons.h>
# include <newdev.h>
# include <atlbase.h>
2015-07-30 18:31:38 +00:00
# include "osdep/WindowsEthernetTap.hpp"
2015-04-16 00:00:26 +00:00
# include "windows/ZeroTierOne/ServiceInstaller.h"
# include "windows/ZeroTierOne/ServiceBase.h"
# include "windows/ZeroTierOne/ZeroTierOneService.h"
# else
# include <unistd.h>
# include <pwd.h>
# include <fcntl.h>
# include <sys/types.h>
# include <sys/stat.h>
# include <signal.h>
2016-10-16 11:35:29 +00:00
# ifdef __linux__
# include "osdep/LinuxDropPrivileges.hpp"
# endif
2015-04-16 00:00:26 +00:00
# endif
2015-04-10 03:54:00 +00:00
2015-04-15 21:44:30 +00:00
# include <string>
# include <stdexcept>
2016-08-24 20:37:57 +00:00
# include <iostream>
# include <sstream>
2015-04-15 21:44:30 +00:00
2015-04-16 00:00:26 +00:00
# include "version.h"
# include "include/ZeroTierOne.h"
2015-04-16 22:51:56 +00:00
2015-04-16 00:00:26 +00:00
# include "node/Identity.hpp"
# include "node/CertificateOfMembership.hpp"
# include "node/Utils.hpp"
2015-04-16 01:36:32 +00:00
# include "node/NetworkController.hpp"
2015-04-16 22:51:56 +00:00
2015-04-16 00:00:26 +00:00
# include "osdep/OSUtils.hpp"
2015-04-16 21:55:36 +00:00
# include "osdep/Http.hpp"
2015-04-16 22:51:56 +00:00
2015-04-15 21:44:30 +00:00
# include "service/OneService.hpp"
2015-04-16 22:51:56 +00:00
2016-08-24 20:37:57 +00:00
# include "ext/json/json.hpp"
2015-09-24 23:21:36 +00:00
# define ZT_PID_PATH "zerotier-one.pid"
2015-04-10 03:54:00 +00:00
using namespace ZeroTier ;
2015-04-16 01:32:25 +00:00
static OneService * volatile zt1Service = ( OneService * ) 0 ;
2015-04-16 00:00:26 +00:00
2016-03-04 05:42:30 +00:00
# define PROGRAM_NAME "ZeroTier One"
2016-03-04 05:44:23 +00:00
# define COPYRIGHT_NOTICE "Copyright © 2011– 2016 ZeroTier, Inc."
2016-03-04 05:37:36 +00:00
# define LICENSE_GRANT \
2016-03-04 05:45:15 +00:00
" This is free software: you may copy, modify, and/or distribute this " ZT_EOL_S \
" work under the terms of the GNU General Public License, version 3 or " ZT_EOL_S \
" later as published by the Free Software Foundation. " ZT_EOL_S \
" No warranty expressed or implied. " ZT_EOL_S
2016-03-04 05:37:36 +00:00
2015-04-16 21:13:44 +00:00
/****************************************************************************/
/* zerotier-cli personality */
/****************************************************************************/
2016-06-29 19:22:37 +00:00
// This is getting deprecated soon in favor of the stuff in cli/
2015-04-16 21:55:36 +00:00
static void cliPrintHelp ( const char * pn , FILE * out )
{
2016-03-04 05:42:30 +00:00
fprintf ( out ,
" %s version %d.%d.%d " ZT_EOL_S ,
PROGRAM_NAME ,
ZEROTIER_ONE_VERSION_MAJOR , ZEROTIER_ONE_VERSION_MINOR , ZEROTIER_ONE_VERSION_REVISION ) ;
2016-03-04 05:37:36 +00:00
fprintf ( out ,
2016-03-04 05:40:09 +00:00
COPYRIGHT_NOTICE ZT_EOL_S
2016-03-04 05:37:36 +00:00
LICENSE_GRANT ZT_EOL_S ) ;
2016-07-21 20:41:02 +00:00
fprintf ( out , " Usage: %s [-switches] <command/path> [<args>] " ZT_EOL_S " " ZT_EOL_S , pn ) ;
fprintf ( out , " Available switches: " ZT_EOL_S ) ;
fprintf ( out , " -h - Display this help " ZT_EOL_S ) ;
fprintf ( out , " -v - Show version " ZT_EOL_S ) ;
fprintf ( out , " -j - Display full raw JSON output " ZT_EOL_S ) ;
fprintf ( out , " -D<path> - ZeroTier home path for parameter auto-detect " ZT_EOL_S ) ;
fprintf ( out , " -p<port> - HTTP port (default: auto) " ZT_EOL_S ) ;
fprintf ( out , " -T<token> - Authentication token (default: auto) " ZT_EOL_S ) ;
fprintf ( out , ZT_EOL_S " Available commands: " ZT_EOL_S ) ;
fprintf ( out , " info - Display status info " ZT_EOL_S ) ;
fprintf ( out , " listpeers - List all peers " ZT_EOL_S ) ;
fprintf ( out , " listnetworks - List all networks " ZT_EOL_S ) ;
fprintf ( out , " join <network> - Join a network " ZT_EOL_S ) ;
fprintf ( out , " leave <network> - Leave a network " ZT_EOL_S ) ;
fprintf ( out , " set <network> <setting> - Set a network setting " ZT_EOL_S ) ;
2015-04-16 21:55:36 +00:00
}
static std : : string cliFixJsonCRs ( const std : : string & s )
{
std : : string r ;
for ( std : : string : : const_iterator c ( s . begin ( ) ) ; c ! = s . end ( ) ; + + c ) {
if ( * c = = ' \n ' )
r . append ( ZT_EOL_S ) ;
else r . push_back ( * c ) ;
}
return r ;
}
2015-04-16 21:13:44 +00:00
# ifdef __WINDOWS__
static int cli ( int argc , _TCHAR * argv [ ] )
# else
static int cli ( int argc , char * * argv )
# endif
{
2015-04-16 21:55:36 +00:00
unsigned int port = 0 ;
2016-06-29 19:22:37 +00:00
std : : string homeDir , command , arg1 , arg2 , authToken ;
2015-04-16 21:55:36 +00:00
std : : string ip ( " 127.0.0.1 " ) ;
bool json = false ;
for ( int i = 1 ; i < argc ; + + i ) {
if ( argv [ i ] [ 0 ] = = ' - ' ) {
switch ( argv [ i ] [ 1 ] ) {
case ' q ' : // ignore -q used to invoke this personality
if ( argv [ i ] [ 2 ] ) {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
break ;
case ' j ' :
if ( argv [ i ] [ 2 ] ) {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
json = true ;
break ;
2015-05-18 02:13:22 +00:00
case ' p ' :
2015-04-16 21:55:36 +00:00
port = Utils : : strToUInt ( argv [ i ] + 2 ) ;
if ( ( port > 0xffff ) | | ( port = = 0 ) ) {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
break ;
2015-05-18 02:13:22 +00:00
case ' D ' :
2015-04-16 21:55:36 +00:00
if ( argv [ i ] [ 2 ] ) {
homeDir = argv [ i ] + 2 ;
} else {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
break ;
2015-05-18 02:13:22 +00:00
case ' H ' :
2015-04-16 21:55:36 +00:00
if ( argv [ i ] [ 2 ] ) {
ip = argv [ i ] + 2 ;
} else {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
break ;
2015-05-18 02:13:22 +00:00
case ' T ' :
2015-04-16 21:55:36 +00:00
if ( argv [ i ] [ 2 ] ) {
authToken = argv [ i ] + 2 ;
} else {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
break ;
2015-05-18 02:13:22 +00:00
case ' v ' :
2015-04-16 21:55:36 +00:00
if ( argv [ i ] [ 2 ] ) {
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
2016-07-21 20:41:02 +00:00
printf ( " %d.%d.%d " ZT_EOL_S , ZEROTIER_ONE_VERSION_MAJOR , ZEROTIER_ONE_VERSION_MINOR , ZEROTIER_ONE_VERSION_REVISION ) ;
2015-04-16 21:55:36 +00:00
return 0 ;
case ' h ' :
case ' ? ' :
default :
cliPrintHelp ( argv [ 0 ] , stdout ) ;
return 0 ;
}
} else {
2016-06-29 19:22:37 +00:00
if ( arg1 . length ( ) )
arg2 = argv [ i ] ;
else if ( command . length ( ) )
2015-04-16 21:55:36 +00:00
arg1 = argv [ i ] ;
else command = argv [ i ] ;
}
}
if ( ! homeDir . length ( ) )
homeDir = OneService : : platformDefaultHomePath ( ) ;
if ( ( ! port ) | | ( ! authToken . length ( ) ) ) {
if ( ! homeDir . length ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: missing port or authentication token and no home directory specified to auto-detect " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 21:55:36 +00:00
return 2 ;
}
if ( ! port ) {
std : : string portStr ;
OSUtils : : readFile ( ( homeDir + ZT_PATH_SEPARATOR_S + " zerotier-one.port " ) . c_str ( ) , portStr ) ;
port = Utils : : strToUInt ( portStr . c_str ( ) ) ;
if ( ( port = = 0 ) | | ( port > 0xffff ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: missing port and zerotier-one.port not found in %s " ZT_EOL_S , argv [ 0 ] , homeDir . c_str ( ) ) ;
2015-04-16 21:55:36 +00:00
return 2 ;
}
}
if ( ! authToken . length ( ) ) {
OSUtils : : readFile ( ( homeDir + ZT_PATH_SEPARATOR_S + " authtoken.secret " ) . c_str ( ) , authToken ) ;
2015-05-18 02:13:22 +00:00
# ifdef __UNIX_LIKE__
if ( ! authToken . length ( ) ) {
const char * hd = getenv ( " HOME " ) ;
if ( hd ) {
char p [ 4096 ] ;
# ifdef __APPLE__
Utils : : snprintf ( p , sizeof ( p ) , " %s/Library/Application Support/ZeroTier/One/authtoken.secret " , hd ) ;
# else
Utils : : snprintf ( p , sizeof ( p ) , " %s/.zeroTierOneAuthToken " , hd ) ;
# endif
OSUtils : : readFile ( p , authToken ) ;
}
}
# endif
2015-04-16 21:55:36 +00:00
if ( ! authToken . length ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: missing authentication token and authtoken.secret not found (or readable) in %s " ZT_EOL_S , argv [ 0 ] , homeDir . c_str ( ) ) ;
2015-04-16 21:55:36 +00:00
return 2 ;
}
}
}
InetAddress addr ;
{
char addrtmp [ 256 ] ;
Utils : : snprintf ( addrtmp , sizeof ( addrtmp ) , " %s/%u " , ip . c_str ( ) , port ) ;
addr = InetAddress ( addrtmp ) ;
}
std : : map < std : : string , std : : string > requestHeaders ;
std : : map < std : : string , std : : string > responseHeaders ;
std : : string responseBody ;
requestHeaders [ " X-ZT1-Auth " ] = authToken ;
2015-07-29 00:10:56 +00:00
if ( ( command . length ( ) > 0 ) & & ( command [ 0 ] = = ' / ' ) ) {
unsigned int scode = Http : : GET (
1024 * 1024 * 16 ,
60000 ,
( const struct sockaddr * ) & addr ,
command . c_str ( ) ,
requestHeaders ,
responseHeaders ,
responseBody ) ;
if ( scode = = 200 ) {
printf ( " %s " , cliFixJsonCRs ( responseBody ) . c_str ( ) ) ;
return 0 ;
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2015-07-29 00:10:56 +00:00
return 1 ;
}
} else if ( ( command = = " info " ) | | ( command = = " status " ) ) {
2016-08-24 20:37:57 +00:00
const unsigned int scode = Http : : GET ( 1024 * 1024 * 16 , 60000 , ( const struct sockaddr * ) & addr , " /status " , requestHeaders , responseHeaders , responseBody ) ;
nlohmann : : json j ;
try {
j = nlohmann : : json : : parse ( responseBody ) ;
} catch ( std : : exception & exc ) {
printf ( " %u %s invalid JSON response (%s) " ZT_EOL_S , scode , command . c_str ( ) , exc . what ( ) ) ;
return 1 ;
} catch ( . . . ) {
printf ( " %u %s invalid JSON response (unknown exception) " ZT_EOL_S , scode , command . c_str ( ) ) ;
return 1 ;
}
2015-04-16 21:55:36 +00:00
if ( scode = = 200 ) {
2016-08-24 20:37:57 +00:00
std : : ostringstream out ;
2015-04-16 21:55:36 +00:00
if ( json ) {
2016-08-24 20:37:57 +00:00
out < < j . dump ( 2 ) < < ZT_EOL_S ;
2015-04-16 21:55:36 +00:00
} else {
2016-08-24 20:37:57 +00:00
if ( j . is_object ( ) )
out < < " 200 info " < < j [ " address " ] . get < std : : string > ( ) < < " " < < j [ " version " ] . get < std : : string > ( ) < < " " < < ( ( j [ " tcpFallbackActive " ] ) ? " TUNNELED " : ( ( j [ " online " ] ) ? " ONLINE " : " OFFLINE " ) ) < < ZT_EOL_S ;
2015-04-16 21:55:36 +00:00
}
2016-08-24 20:37:57 +00:00
printf ( " %s " , out . str ( ) . c_str ( ) ) ;
return 0 ;
2015-04-16 21:55:36 +00:00
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2015-04-16 21:55:36 +00:00
return 1 ;
}
} else if ( command = = " listpeers " ) {
2016-08-24 20:37:57 +00:00
const unsigned int scode = Http : : GET ( 1024 * 1024 * 16 , 60000 , ( const struct sockaddr * ) & addr , " /peer " , requestHeaders , responseHeaders , responseBody ) ;
nlohmann : : json j ;
try {
j = nlohmann : : json : : parse ( responseBody ) ;
} catch ( std : : exception & exc ) {
printf ( " %u %s invalid JSON response (%s) " ZT_EOL_S , scode , command . c_str ( ) , exc . what ( ) ) ;
return 1 ;
} catch ( . . . ) {
printf ( " %u %s invalid JSON response (unknown exception) " ZT_EOL_S , scode , command . c_str ( ) ) ;
return 1 ;
}
2015-04-16 21:55:36 +00:00
if ( scode = = 200 ) {
2016-08-24 20:37:57 +00:00
std : : ostringstream out ;
2015-04-16 21:55:36 +00:00
if ( json ) {
2016-08-24 20:37:57 +00:00
out < < j . dump ( 2 ) < < ZT_EOL_S ;
2015-04-16 21:55:36 +00:00
} else {
2016-08-24 20:37:57 +00:00
out < < " 200 listpeers <ztaddr> <path> <latency> <version> <role> " < < ZT_EOL_S ;
if ( j . is_array ( ) ) {
for ( unsigned long k = 0 ; k < j . size ( ) ; + + k ) {
2016-09-03 22:39:05 +00:00
auto & p = j [ k ] ;
2016-08-24 20:37:57 +00:00
std : : string bestPath ;
auto paths = p [ " paths " ] ;
if ( paths . is_array ( ) ) {
for ( unsigned long i = 0 ; i < paths . size ( ) ; + + i ) {
2016-09-03 22:39:05 +00:00
auto & path = paths [ i ] ;
2016-08-24 20:37:57 +00:00
if ( path [ " preferred " ] ) {
char tmp [ 256 ] ;
std : : string addr = path [ " address " ] ;
const uint64_t now = OSUtils : : now ( ) ;
Utils : : snprintf ( tmp , sizeof ( tmp ) , " %s;%llu;%llu " , addr . c_str ( ) , now - ( uint64_t ) path [ " lastSend " ] , now - ( uint64_t ) path [ " lastReceive " ] ) ;
bestPath = tmp ;
break ;
2015-04-16 22:51:56 +00:00
}
}
}
2016-08-24 20:37:57 +00:00
if ( bestPath . length ( ) = = 0 ) bestPath = " - " ;
char ver [ 128 ] ;
int64_t vmaj = p [ " versionMajor " ] ;
int64_t vmin = p [ " versionMinor " ] ;
int64_t vrev = p [ " versionRev " ] ;
if ( vmaj > = 0 ) {
Utils : : snprintf ( ver , sizeof ( ver ) , " %lld.%lld.%lld " , vmaj , vmin , vrev ) ;
} else {
ver [ 0 ] = ' - ' ;
ver [ 1 ] = ( char ) 0 ;
}
out < < " 200 listpeers " < < p [ " address " ] . get < std : : string > ( ) < < " " < < bestPath < < " " < < p [ " latency " ] < < " " < < ver < < " " < < p [ " role " ] . get < std : : string > ( ) < < ZT_EOL_S ;
2015-04-16 22:51:56 +00:00
}
}
2015-04-16 21:55:36 +00:00
}
2016-08-24 20:37:57 +00:00
printf ( " %s " , out . str ( ) . c_str ( ) ) ;
return 0 ;
2015-04-16 21:55:36 +00:00
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2015-04-16 21:55:36 +00:00
return 1 ;
}
} else if ( command = = " listnetworks " ) {
2016-08-24 20:37:57 +00:00
const unsigned int scode = Http : : GET ( 1024 * 1024 * 16 , 60000 , ( const struct sockaddr * ) & addr , " /network " , requestHeaders , responseHeaders , responseBody ) ;
nlohmann : : json j ;
try {
j = nlohmann : : json : : parse ( responseBody ) ;
} catch ( std : : exception & exc ) {
printf ( " %u %s invalid JSON response (%s) " ZT_EOL_S , scode , command . c_str ( ) , exc . what ( ) ) ;
return 1 ;
} catch ( . . . ) {
printf ( " %u %s invalid JSON response (unknown exception) " ZT_EOL_S , scode , command . c_str ( ) ) ;
return 1 ;
}
2015-04-16 21:55:36 +00:00
if ( scode = = 200 ) {
2016-08-24 20:37:57 +00:00
std : : ostringstream out ;
2015-04-16 21:55:36 +00:00
if ( json ) {
2016-08-24 20:37:57 +00:00
out < < j . dump ( 2 ) < < ZT_EOL_S ;
2015-04-16 21:55:36 +00:00
} else {
2016-08-24 20:37:57 +00:00
out < < " 200 listnetworks <nwid> <name> <mac> <status> <type> <dev> <ZT assigned ips> " < < ZT_EOL_S ;
if ( j . is_array ( ) ) {
for ( unsigned long i = 0 ; i < j . size ( ) ; + + i ) {
2016-09-03 22:39:05 +00:00
auto & n = j [ i ] ;
2016-08-24 20:37:57 +00:00
if ( n . is_object ( ) ) {
std : : string aa ;
2016-09-03 22:39:05 +00:00
auto & assignedAddresses = n [ " assignedAddresses " ] ;
2016-08-24 20:37:57 +00:00
if ( assignedAddresses . is_array ( ) ) {
for ( unsigned long j = 0 ; j < assignedAddresses . size ( ) ; + + j ) {
2016-09-03 22:39:05 +00:00
auto & addr = assignedAddresses [ j ] ;
2016-08-24 20:37:57 +00:00
if ( addr . is_string ( ) ) {
if ( aa . length ( ) > 0 ) aa . push_back ( ' , ' ) ;
2016-11-03 19:10:50 +00:00
aa . append ( addr . get < std : : string > ( ) ) ;
2015-04-16 23:12:10 +00:00
}
}
}
2016-08-24 20:37:57 +00:00
if ( aa . length ( ) = = 0 ) aa = " - " ;
2016-08-24 22:26:18 +00:00
std : : string name = n [ " name " ] ;
if ( name . length ( ) = = 0 ) name = " - " ;
out < < " 200 listnetworks " < < n [ " nwid " ] . get < std : : string > ( ) < < " " < < name < < " " < < n [ " mac " ] . get < std : : string > ( ) < < " " < < n [ " status " ] . get < std : : string > ( ) < < " " < < n [ " type " ] . get < std : : string > ( ) < < " " < < n [ " portDeviceName " ] . get < std : : string > ( ) < < " " < < aa < < ZT_EOL_S ;
2015-04-16 23:12:10 +00:00
}
}
}
2015-04-16 21:55:36 +00:00
}
2016-08-24 20:37:57 +00:00
printf ( " %s " , out . str ( ) . c_str ( ) ) ;
return 0 ;
2015-04-16 21:55:36 +00:00
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2015-04-16 21:55:36 +00:00
return 1 ;
}
} else if ( command = = " join " ) {
2015-04-16 22:07:58 +00:00
if ( arg1 . length ( ) ! = 16 ) {
cliPrintHelp ( argv [ 0 ] , stderr ) ;
return 2 ;
}
2015-04-16 23:12:10 +00:00
requestHeaders [ " Content-Type " ] = " application/json " ;
requestHeaders [ " Content-Length " ] = " 2 " ;
2015-04-16 22:07:58 +00:00
unsigned int scode = Http : : POST (
1024 * 1024 * 16 ,
60000 ,
( const struct sockaddr * ) & addr ,
( std : : string ( " /network/ " ) + arg1 ) . c_str ( ) ,
requestHeaders ,
2015-04-16 23:12:10 +00:00
" {} " ,
2 ,
2015-04-16 22:07:58 +00:00
responseHeaders ,
responseBody ) ;
if ( scode = = 200 ) {
if ( json ) {
printf ( " %s " , cliFixJsonCRs ( responseBody ) . c_str ( ) ) ;
} else {
2016-07-21 20:41:02 +00:00
printf ( " 200 join OK " ZT_EOL_S ) ;
2015-04-16 22:07:58 +00:00
}
return 0 ;
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2015-04-16 22:07:58 +00:00
return 1 ;
}
2015-04-16 21:55:36 +00:00
} else if ( command = = " leave " ) {
2015-04-16 22:07:58 +00:00
if ( arg1 . length ( ) ! = 16 ) {
cliPrintHelp ( argv [ 0 ] , stderr ) ;
return 2 ;
}
2015-04-24 22:44:39 +00:00
unsigned int scode = Http : : DEL (
2015-04-16 22:07:58 +00:00
1024 * 1024 * 16 ,
60000 ,
( const struct sockaddr * ) & addr ,
( std : : string ( " /network/ " ) + arg1 ) . c_str ( ) ,
requestHeaders ,
responseHeaders ,
responseBody ) ;
if ( scode = = 200 ) {
if ( json ) {
printf ( " %s " , cliFixJsonCRs ( responseBody ) . c_str ( ) ) ;
} else {
2016-07-21 20:41:02 +00:00
printf ( " 200 leave OK " ZT_EOL_S ) ;
2015-04-16 22:07:58 +00:00
}
return 0 ;
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2015-04-16 22:07:58 +00:00
return 1 ;
}
2016-06-29 19:22:37 +00:00
} else if ( command = = " set " ) {
if ( arg1 . length ( ) ! = 16 ) {
cliPrintHelp ( argv [ 0 ] , stderr ) ;
return 2 ;
}
std : : size_t eqidx = arg2 . find ( ' = ' ) ;
if ( eqidx ! = std : : string : : npos ) {
if ( ( arg2 . substr ( 0 , eqidx ) = = " allowManaged " ) | | ( arg2 . substr ( 0 , eqidx ) = = " allowGlobal " ) | | ( arg2 . substr ( 0 , eqidx ) = = " allowDefault " ) ) {
char jsons [ 1024 ] ;
Utils : : snprintf ( jsons , sizeof ( jsons ) , " { \" %s \" :%s} " ,
arg2 . substr ( 0 , eqidx ) . c_str ( ) ,
( ( ( arg2 . substr ( eqidx , 2 ) = = " =t " ) | | ( arg2 . substr ( eqidx , 2 ) = = " =1 " ) ) ? " true " : " false " ) ) ;
char cl [ 128 ] ;
Utils : : snprintf ( cl , sizeof ( cl ) , " %u " , ( unsigned int ) strlen ( jsons ) ) ;
requestHeaders [ " Content-Type " ] = " application/json " ;
requestHeaders [ " Content-Length " ] = cl ;
unsigned int scode = Http : : POST (
1024 * 1024 * 16 ,
60000 ,
( const struct sockaddr * ) & addr ,
( std : : string ( " /network/ " ) + arg1 ) . c_str ( ) ,
requestHeaders ,
jsons ,
strlen ( jsons ) ,
responseHeaders ,
responseBody ) ;
if ( scode = = 200 ) {
printf ( " %s " , cliFixJsonCRs ( responseBody ) . c_str ( ) ) ;
return 0 ;
} else {
2016-07-21 20:41:02 +00:00
printf ( " %u %s %s " ZT_EOL_S , scode , command . c_str ( ) , responseBody . c_str ( ) ) ;
2016-06-29 19:22:37 +00:00
return 1 ;
}
}
} else {
cliPrintHelp ( argv [ 0 ] , stderr ) ;
return 2 ;
}
2015-04-16 21:55:36 +00:00
} else {
cliPrintHelp ( argv [ 0 ] , stderr ) ;
return 0 ;
}
2015-04-16 23:43:35 +00:00
return 0 ;
2015-04-16 21:13:44 +00:00
}
2015-04-16 00:00:26 +00:00
/****************************************************************************/
/* zerotier-idtool personality */
/****************************************************************************/
static void idtoolPrintHelp ( FILE * out , const char * pn )
{
2016-03-04 05:42:30 +00:00
fprintf ( out ,
" %s version %d.%d.%d " ZT_EOL_S ,
PROGRAM_NAME ,
ZEROTIER_ONE_VERSION_MAJOR , ZEROTIER_ONE_VERSION_MINOR , ZEROTIER_ONE_VERSION_REVISION ) ;
2016-03-04 05:37:36 +00:00
fprintf ( out ,
2016-03-04 05:40:09 +00:00
COPYRIGHT_NOTICE ZT_EOL_S
2016-03-04 05:37:36 +00:00
LICENSE_GRANT ZT_EOL_S ) ;
2016-07-21 20:41:02 +00:00
fprintf ( out , " Usage: %s <command> [<args>] " ZT_EOL_S " " ZT_EOL_S " Commands: " ZT_EOL_S , pn ) ;
fprintf ( out , " generate [<identity.secret>] [<identity.public>] [<vanity>] " ZT_EOL_S ) ;
fprintf ( out , " validate <identity.secret/public> " ZT_EOL_S ) ;
fprintf ( out , " getpublic <identity.secret> " ZT_EOL_S ) ;
fprintf ( out , " sign <identity.secret> <file> " ZT_EOL_S ) ;
fprintf ( out , " verify <identity.secret/public> <file> <signature> " ZT_EOL_S ) ;
fprintf ( out , " mkcom <identity.secret> [<id,value,maxDelta> ...] (hexadecimal integers) " ZT_EOL_S ) ;
2015-04-16 00:00:26 +00:00
}
static Identity getIdFromArg ( char * arg )
2015-04-10 03:54:00 +00:00
{
2015-04-16 00:00:26 +00:00
Identity id ;
if ( ( strlen ( arg ) > 32 ) & & ( arg [ 10 ] = = ' : ' ) ) { // identity is a literal on the command line
if ( id . fromString ( arg ) )
return id ;
} else { // identity is to be read from a file
std : : string idser ;
2015-04-16 01:36:32 +00:00
if ( OSUtils : : readFile ( arg , idser ) ) {
2015-04-16 00:00:26 +00:00
if ( id . fromString ( idser ) )
return id ;
}
}
return Identity ( ) ;
}
# ifdef __WINDOWS__
2015-04-16 21:13:44 +00:00
static int idtool ( int argc , _TCHAR * argv [ ] )
2015-04-16 00:00:26 +00:00
# else
2015-04-16 21:13:44 +00:00
static int idtool ( int argc , char * * argv )
2015-04-16 00:00:26 +00:00
# endif
{
if ( argc < 2 ) {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
if ( ! strcmp ( argv [ 1 ] , " generate " ) ) {
2016-05-26 16:21:54 +00:00
uint64_t vanity = 0 ;
int vanityBits = 0 ;
if ( argc > = 5 ) {
vanity = Utils : : hexStrToU64 ( argv [ 4 ] ) & 0xffffffffffULL ;
vanityBits = 4 * strlen ( argv [ 4 ] ) ;
if ( vanityBits > 40 )
vanityBits = 40 ;
}
2015-04-16 00:00:26 +00:00
Identity id ;
2016-05-26 16:21:54 +00:00
for ( ; ; ) {
id . generate ( ) ;
if ( ( id . address ( ) . toInt ( ) > > ( 40 - vanityBits ) ) = = vanity ) {
if ( vanityBits > 0 ) {
fprintf ( stderr , " vanity address: found %.10llx ! \n " , ( unsigned long long ) id . address ( ) . toInt ( ) ) ;
}
break ;
} else {
fprintf ( stderr , " vanity address: tried %.10llx looking for first %d bits of %.10llx \n " , ( unsigned long long ) id . address ( ) . toInt ( ) , vanityBits , ( unsigned long long ) ( vanity < < ( 40 - vanityBits ) ) ) ;
}
}
2015-04-16 00:00:26 +00:00
std : : string idser = id . toString ( true ) ;
if ( argc > = 3 ) {
2015-04-16 01:36:32 +00:00
if ( ! OSUtils : : writeFile ( argv [ 2 ] , idser ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Error writing to %s " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
2016-07-21 20:41:02 +00:00
} else printf ( " %s written " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
if ( argc > = 4 ) {
idser = id . toString ( false ) ;
2015-04-16 01:36:32 +00:00
if ( ! OSUtils : : writeFile ( argv [ 3 ] , idser ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Error writing to %s " ZT_EOL_S , argv [ 3 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
2016-07-21 20:41:02 +00:00
} else printf ( " %s written " ZT_EOL_S , argv [ 3 ] ) ;
2015-04-16 00:00:26 +00:00
}
} else printf ( " %s " , idser . c_str ( ) ) ;
} else if ( ! strcmp ( argv [ 1 ] , " validate " ) ) {
if ( argc < 3 ) {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
Identity id = getIdFromArg ( argv [ 2 ] ) ;
if ( ! id ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Identity argument invalid or file unreadable: %s " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
if ( ! id . locallyValidate ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s FAILED validation. " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
2016-07-21 20:41:02 +00:00
} else printf ( " %s is a valid identity " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
} else if ( ! strcmp ( argv [ 1 ] , " getpublic " ) ) {
if ( argc < 3 ) {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
Identity id = getIdFromArg ( argv [ 2 ] ) ;
if ( ! id ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Identity argument invalid or file unreadable: %s " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
printf ( " %s " , id . toString ( false ) . c_str ( ) ) ;
} else if ( ! strcmp ( argv [ 1 ] , " sign " ) ) {
if ( argc < 4 ) {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
Identity id = getIdFromArg ( argv [ 2 ] ) ;
if ( ! id ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Identity argument invalid or file unreadable: %s " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
if ( ! id . hasPrivate ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s does not contain a private key (must use private to sign) " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
std : : string inf ;
2015-04-16 01:36:32 +00:00
if ( ! OSUtils : : readFile ( argv [ 3 ] , inf ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s is not readable " ZT_EOL_S , argv [ 3 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
C25519 : : Signature signature = id . sign ( inf . data ( ) , ( unsigned int ) inf . length ( ) ) ;
printf ( " %s " , Utils : : hex ( signature . data , ( unsigned int ) signature . size ( ) ) . c_str ( ) ) ;
} else if ( ! strcmp ( argv [ 1 ] , " verify " ) ) {
if ( argc < 4 ) {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
Identity id = getIdFromArg ( argv [ 2 ] ) ;
if ( ! id ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Identity argument invalid or file unreadable: %s " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
std : : string inf ;
2015-04-16 01:36:32 +00:00
if ( ! OSUtils : : readFile ( argv [ 3 ] , inf ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s is not readable " ZT_EOL_S , argv [ 3 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
std : : string signature ( Utils : : unhex ( argv [ 4 ] ) ) ;
if ( ( signature . length ( ) > ZT_ADDRESS_LENGTH ) & & ( id . verify ( inf . data ( ) , ( unsigned int ) inf . length ( ) , signature . data ( ) , ( unsigned int ) signature . length ( ) ) ) ) {
2016-07-21 20:41:02 +00:00
printf ( " %s signature valid " ZT_EOL_S , argv [ 3 ] ) ;
2015-04-16 00:00:26 +00:00
} else {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s signature check FAILED " ZT_EOL_S , argv [ 3 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
} else if ( ! strcmp ( argv [ 1 ] , " mkcom " ) ) {
if ( argc < 3 ) {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
Identity id = getIdFromArg ( argv [ 2 ] ) ;
if ( ( ! id ) | | ( ! id . hasPrivate ( ) ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Identity argument invalid, does not include private key, or file unreadable: %s " ZT_EOL_S , argv [ 2 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
CertificateOfMembership com ;
for ( int a = 3 ; a < argc ; + + a ) {
std : : vector < std : : string > params ( Utils : : split ( argv [ a ] , " , " , " " , " " ) ) ;
if ( params . size ( ) = = 3 ) {
uint64_t qId = Utils : : hexStrToU64 ( params [ 0 ] . c_str ( ) ) ;
uint64_t qValue = Utils : : hexStrToU64 ( params [ 1 ] . c_str ( ) ) ;
uint64_t qMaxDelta = Utils : : hexStrToU64 ( params [ 2 ] . c_str ( ) ) ;
com . setQualifier ( qId , qValue , qMaxDelta ) ;
}
}
if ( ! com . sign ( id ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " Signature of certificate of membership failed. " ZT_EOL_S ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
printf ( " %s " , com . toString ( ) . c_str ( ) ) ;
} else {
idtoolPrintHelp ( stdout , argv [ 0 ] ) ;
return 1 ;
}
2015-04-10 03:54:00 +00:00
return 0 ;
}
2015-04-16 00:00:26 +00:00
/****************************************************************************/
/* Unix helper functions and signal handlers */
/****************************************************************************/
# ifdef __UNIX_LIKE__
static void _sighandlerHup ( int sig )
{
}
static void _sighandlerQuit ( int sig )
{
2015-04-16 01:36:32 +00:00
OneService * s = zt1Service ;
if ( s )
s - > terminate ( ) ;
2015-04-16 00:00:26 +00:00
else exit ( 0 ) ;
}
# endif
/****************************************************************************/
/* Windows helper functions and signal handlers */
/****************************************************************************/
# ifdef __WINDOWS__
// Console signal handler routine to allow CTRL+C to work, mostly for testing
static BOOL WINAPI _winConsoleCtrlHandler ( DWORD dwCtrlType )
{
switch ( dwCtrlType ) {
case CTRL_C_EVENT :
case CTRL_BREAK_EVENT :
case CTRL_CLOSE_EVENT :
case CTRL_SHUTDOWN_EVENT :
2015-04-24 22:44:39 +00:00
OneService * s = zt1Service ;
if ( s )
s - > terminate ( ) ;
2015-04-16 00:00:26 +00:00
return TRUE ;
}
return FALSE ;
}
static void _winPokeAHole ( )
{
char myPath [ MAX_PATH ] ;
DWORD ps = GetModuleFileNameA ( NULL , myPath , sizeof ( myPath ) ) ;
if ( ( ps > 0 ) & & ( ps < ( DWORD ) sizeof ( myPath ) ) ) {
STARTUPINFOA startupInfo ;
PROCESS_INFORMATION processInfo ;
startupInfo . cb = sizeof ( startupInfo ) ;
memset ( & startupInfo , 0 , sizeof ( STARTUPINFOA ) ) ;
memset ( & processInfo , 0 , sizeof ( PROCESS_INFORMATION ) ) ;
2015-07-31 00:52:35 +00:00
if ( CreateProcessA ( NULL , ( LPSTR ) ( std : : string ( " C: \\ Windows \\ System32 \\ netsh.exe advfirewall firewall delete rule name= \" ZeroTier One \" program= \" " ) + myPath + " \" " ) . c_str ( ) , NULL , NULL , FALSE , CREATE_NO_WINDOW , NULL , NULL , & startupInfo , & processInfo ) ) {
2015-04-16 00:00:26 +00:00
WaitForSingleObject ( processInfo . hProcess , INFINITE ) ;
CloseHandle ( processInfo . hProcess ) ;
CloseHandle ( processInfo . hThread ) ;
}
startupInfo . cb = sizeof ( startupInfo ) ;
memset ( & startupInfo , 0 , sizeof ( STARTUPINFOA ) ) ;
memset ( & processInfo , 0 , sizeof ( PROCESS_INFORMATION ) ) ;
2015-07-31 00:52:35 +00:00
if ( CreateProcessA ( NULL , ( LPSTR ) ( std : : string ( " C: \\ Windows \\ System32 \\ netsh.exe advfirewall firewall add rule name= \" ZeroTier One \" dir=in action=allow program= \" " ) + myPath + " \" enable=yes " ) . c_str ( ) , NULL , NULL , FALSE , CREATE_NO_WINDOW , NULL , NULL , & startupInfo , & processInfo ) ) {
2015-04-16 00:00:26 +00:00
WaitForSingleObject ( processInfo . hProcess , INFINITE ) ;
CloseHandle ( processInfo . hProcess ) ;
CloseHandle ( processInfo . hThread ) ;
}
startupInfo . cb = sizeof ( startupInfo ) ;
memset ( & startupInfo , 0 , sizeof ( STARTUPINFOA ) ) ;
memset ( & processInfo , 0 , sizeof ( PROCESS_INFORMATION ) ) ;
2015-07-31 00:52:35 +00:00
if ( CreateProcessA ( NULL , ( LPSTR ) ( std : : string ( " C: \\ Windows \\ System32 \\ netsh.exe advfirewall firewall add rule name= \" ZeroTier One \" dir=out action=allow program= \" " ) + myPath + " \" enable=yes " ) . c_str ( ) , NULL , NULL , FALSE , CREATE_NO_WINDOW , NULL , NULL , & startupInfo , & processInfo ) ) {
2015-04-16 00:00:26 +00:00
WaitForSingleObject ( processInfo . hProcess , INFINITE ) ;
CloseHandle ( processInfo . hProcess ) ;
CloseHandle ( processInfo . hThread ) ;
}
}
}
// Returns true if this is running as the local administrator
static BOOL IsCurrentUserLocalAdministrator ( void )
{
BOOL fReturn = FALSE ;
DWORD dwStatus ;
DWORD dwAccessMask ;
DWORD dwAccessDesired ;
DWORD dwACLSize ;
DWORD dwStructureSize = sizeof ( PRIVILEGE_SET ) ;
PACL pACL = NULL ;
PSID psidAdmin = NULL ;
HANDLE hToken = NULL ;
HANDLE hImpersonationToken = NULL ;
PRIVILEGE_SET ps ;
GENERIC_MAPPING GenericMapping ;
PSECURITY_DESCRIPTOR psdAdmin = NULL ;
SID_IDENTIFIER_AUTHORITY SystemSidAuthority = SECURITY_NT_AUTHORITY ;
const DWORD ACCESS_READ = 1 ;
const DWORD ACCESS_WRITE = 2 ;
__try
{
if ( ! OpenThreadToken ( GetCurrentThread ( ) , TOKEN_DUPLICATE | TOKEN_QUERY , TRUE , & hToken ) )
{
if ( GetLastError ( ) ! = ERROR_NO_TOKEN )
__leave ;
if ( ! OpenProcessToken ( GetCurrentProcess ( ) , TOKEN_DUPLICATE | TOKEN_QUERY , & hToken ) )
__leave ;
}
if ( ! DuplicateToken ( hToken , SecurityImpersonation , & hImpersonationToken ) )
__leave ;
if ( ! AllocateAndInitializeSid ( & SystemSidAuthority , 2 ,
SECURITY_BUILTIN_DOMAIN_RID ,
DOMAIN_ALIAS_RID_ADMINS ,
0 , 0 , 0 , 0 , 0 , 0 , & psidAdmin ) )
__leave ;
psdAdmin = LocalAlloc ( LPTR , SECURITY_DESCRIPTOR_MIN_LENGTH ) ;
if ( psdAdmin = = NULL )
__leave ;
if ( ! InitializeSecurityDescriptor ( psdAdmin , SECURITY_DESCRIPTOR_REVISION ) )
__leave ;
dwACLSize = sizeof ( ACL ) + sizeof ( ACCESS_ALLOWED_ACE ) + GetLengthSid ( psidAdmin ) - sizeof ( DWORD ) ;
pACL = ( PACL ) LocalAlloc ( LPTR , dwACLSize ) ;
if ( pACL = = NULL )
__leave ;
if ( ! InitializeAcl ( pACL , dwACLSize , ACL_REVISION2 ) )
__leave ;
dwAccessMask = ACCESS_READ | ACCESS_WRITE ;
if ( ! AddAccessAllowedAce ( pACL , ACL_REVISION2 , dwAccessMask , psidAdmin ) )
__leave ;
if ( ! SetSecurityDescriptorDacl ( psdAdmin , TRUE , pACL , FALSE ) )
__leave ;
SetSecurityDescriptorGroup ( psdAdmin , psidAdmin , FALSE ) ;
SetSecurityDescriptorOwner ( psdAdmin , psidAdmin , FALSE ) ;
if ( ! IsValidSecurityDescriptor ( psdAdmin ) )
__leave ;
dwAccessDesired = ACCESS_READ ;
GenericMapping . GenericRead = ACCESS_READ ;
GenericMapping . GenericWrite = ACCESS_WRITE ;
GenericMapping . GenericExecute = 0 ;
GenericMapping . GenericAll = ACCESS_READ | ACCESS_WRITE ;
if ( ! AccessCheck ( psdAdmin , hImpersonationToken , dwAccessDesired ,
& GenericMapping , & ps , & dwStructureSize , & dwStatus ,
& fReturn ) )
{
fReturn = FALSE ;
__leave ;
}
}
__finally
{
// Clean up.
if ( pACL ) LocalFree ( pACL ) ;
if ( psdAdmin ) LocalFree ( psdAdmin ) ;
if ( psidAdmin ) FreeSid ( psidAdmin ) ;
if ( hImpersonationToken ) CloseHandle ( hImpersonationToken ) ;
if ( hToken ) CloseHandle ( hToken ) ;
}
return fReturn ;
}
# endif // __WINDOWS__
/****************************************************************************/
/* main() and friends */
/****************************************************************************/
static void printHelp ( const char * cn , FILE * out )
{
2016-03-04 05:42:30 +00:00
fprintf ( out ,
" %s version %d.%d.%d " ZT_EOL_S ,
PROGRAM_NAME ,
ZEROTIER_ONE_VERSION_MAJOR , ZEROTIER_ONE_VERSION_MINOR , ZEROTIER_ONE_VERSION_REVISION ) ;
2016-03-04 05:37:36 +00:00
fprintf ( out ,
2016-03-04 05:40:09 +00:00
COPYRIGHT_NOTICE ZT_EOL_S
2016-03-04 05:37:36 +00:00
LICENSE_GRANT ZT_EOL_S ) ;
2015-05-20 23:35:33 +00:00
std : : string updateUrl ( OneService : : autoUpdateUrl ( ) ) ;
if ( updateUrl . length ( ) )
2016-07-21 20:41:02 +00:00
fprintf ( out , " Automatic updates enabled: " ZT_EOL_S " %s " ZT_EOL_S " (all updates are securely authenticated by 256-bit ECDSA signature) " ZT_EOL_S " " ZT_EOL_S , updateUrl . c_str ( ) ) ;
fprintf ( out , " Usage: %s [-switches] [home directory] " ZT_EOL_S " " ZT_EOL_S , cn ) ;
fprintf ( out , " Available switches: " ZT_EOL_S ) ;
fprintf ( out , " -h - Display this help " ZT_EOL_S ) ;
fprintf ( out , " -v - Show version " ZT_EOL_S ) ;
2016-10-16 11:35:29 +00:00
fprintf ( out , " -U - Skip privilege check and do not attempt to drop privileges " ZT_EOL_S ) ;
2016-07-21 20:41:02 +00:00
fprintf ( out , " -p<port> - Port for UDP and TCP/HTTP (default: 9993, 0 for random) " ZT_EOL_S ) ;
2015-07-30 18:31:38 +00:00
2015-04-16 00:00:26 +00:00
# ifdef __UNIX_LIKE__
2016-07-21 20:41:02 +00:00
fprintf ( out , " -d - Fork and run as daemon (Unix-ish OSes) " ZT_EOL_S ) ;
2015-04-16 00:00:26 +00:00
# endif // __UNIX_LIKE__
2015-07-30 18:31:38 +00:00
2015-04-16 00:00:26 +00:00
# ifdef __WINDOWS__
2016-07-21 20:41:02 +00:00
fprintf ( out , " -C - Run from command line instead of as service (Windows) " ZT_EOL_S ) ;
fprintf ( out , " -I - Install Windows service (Windows) " ZT_EOL_S ) ;
fprintf ( out , " -R - Uninstall Windows service (Windows) " ZT_EOL_S ) ;
fprintf ( out , " -D - Remove all instances of Windows tap device (Windows) " ZT_EOL_S ) ;
2015-04-16 00:00:26 +00:00
# endif // __WINDOWS__
2015-07-30 18:31:38 +00:00
2016-07-21 20:41:02 +00:00
fprintf ( out , " -i - Generate and manage identities (zerotier-idtool) " ZT_EOL_S ) ;
fprintf ( out , " -q - Query API (zerotier-cli) " ZT_EOL_S ) ;
2015-04-16 00:00:26 +00:00
}
# ifdef __WINDOWS__
int _tmain ( int argc , _TCHAR * argv [ ] )
# else
int main ( int argc , char * * argv )
# endif
{
# ifdef __UNIX_LIKE__
signal ( SIGHUP , & _sighandlerHup ) ;
signal ( SIGPIPE , SIG_IGN ) ;
signal ( SIGUSR1 , SIG_IGN ) ;
signal ( SIGUSR2 , SIG_IGN ) ;
signal ( SIGALRM , SIG_IGN ) ;
signal ( SIGINT , & _sighandlerQuit ) ;
signal ( SIGTERM , & _sighandlerQuit ) ;
signal ( SIGQUIT , & _sighandlerQuit ) ;
/* Ensure that there are no inherited file descriptors open from a previous
* incarnation . This is a hack to ensure that GitHub issue # 61 or variants
* of it do not return , and should not do anything otherwise bad . */
{
int mfd = STDIN_FILENO ;
if ( STDOUT_FILENO > mfd ) mfd = STDOUT_FILENO ;
if ( STDERR_FILENO > mfd ) mfd = STDERR_FILENO ;
for ( int f = mfd + 1 ; f < 1024 ; + + f )
: : close ( f ) ;
}
bool runAsDaemon = false ;
# endif // __UNIX_LIKE__
# ifdef __WINDOWS__
2015-11-13 20:14:28 +00:00
{
WSADATA wsaData ;
WSAStartup ( MAKEWORD ( 2 , 2 ) , & wsaData ) ;
}
2015-04-16 00:00:26 +00:00
# ifdef ZT_WIN_RUN_IN_CONSOLE
bool winRunFromCommandLine = true ;
# else
2015-11-17 17:56:19 +00:00
bool winRunFromCommandLine = false ;
2015-04-16 00:00:26 +00:00
# endif
# endif // __WINDOWS__
if ( ( strstr ( argv [ 0 ] , " zerotier-idtool " ) ) | | ( strstr ( argv [ 0 ] , " ZEROTIER-IDTOOL " ) ) )
return idtool ( argc , argv ) ;
2015-04-16 21:55:36 +00:00
if ( ( strstr ( argv [ 0 ] , " zerotier-cli " ) ) | | ( strstr ( argv [ 0 ] , " ZEROTIER-CLI " ) ) )
return cli ( argc , argv ) ;
2015-04-16 00:00:26 +00:00
std : : string homeDir ;
2015-09-24 23:21:36 +00:00
unsigned int port = ZT_DEFAULT_PORT ;
2015-05-16 21:52:09 +00:00
bool skipRootCheck = false ;
2015-04-16 00:00:26 +00:00
for ( int i = 1 ; i < argc ; + + i ) {
if ( argv [ i ] [ 0 ] = = ' - ' ) {
switch ( argv [ i ] [ 1 ] ) {
case ' p ' : // port -- for both UDP and TCP, packets and control plane
port = Utils : : strToUInt ( argv [ i ] + 2 ) ;
2015-09-23 21:38:16 +00:00
if ( port > 0xffff ) {
2015-04-16 00:00:26 +00:00
printHelp ( argv [ 0 ] , stdout ) ;
return 1 ;
}
break ;
# ifdef __UNIX_LIKE__
case ' d ' : // Run in background as daemon
runAsDaemon = true ;
break ;
# endif // __UNIX_LIKE__
2015-05-16 21:52:09 +00:00
case ' U ' :
skipRootCheck = true ;
break ;
2015-04-16 00:00:26 +00:00
case ' v ' : // Display version
2016-07-21 20:41:02 +00:00
printf ( " %d.%d.%d " ZT_EOL_S , ZEROTIER_ONE_VERSION_MAJOR , ZEROTIER_ONE_VERSION_MINOR , ZEROTIER_ONE_VERSION_REVISION ) ;
2015-04-16 00:00:26 +00:00
return 0 ;
case ' i ' : // Invoke idtool personality
if ( argv [ i ] [ 2 ] ) {
printHelp ( argv [ 0 ] , stdout ) ;
return 0 ;
} else return idtool ( argc , argv ) ;
2015-04-16 21:55:36 +00:00
case ' q ' : // Invoke cli personality
if ( argv [ i ] [ 2 ] ) {
printHelp ( argv [ 0 ] , stdout ) ;
return 0 ;
} else return cli ( argc , argv ) ;
2015-04-16 00:00:26 +00:00
# ifdef __WINDOWS__
case ' C ' : // Run from command line instead of as Windows service
winRunFromCommandLine = true ;
break ;
case ' I ' : { // Install this binary as a Windows service
if ( IsCurrentUserLocalAdministrator ( ) ! = TRUE ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: must be run as a local administrator. " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
std : : string ret ( InstallService ( ZT_SERVICE_NAME , ZT_SERVICE_DISPLAY_NAME , ZT_SERVICE_START_TYPE , ZT_SERVICE_DEPENDENCIES , ZT_SERVICE_ACCOUNT , ZT_SERVICE_PASSWORD ) ) ;
if ( ret . length ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: unable to install service: %s " ZT_EOL_S , argv [ 0 ] , ret . c_str ( ) ) ;
2015-04-16 00:00:26 +00:00
return 3 ;
}
return 0 ;
} break ;
case ' R ' : { // Uninstall this binary as Windows service
if ( IsCurrentUserLocalAdministrator ( ) ! = TRUE ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: must be run as a local administrator. " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
std : : string ret ( UninstallService ( ZT_SERVICE_NAME ) ) ;
if ( ret . length ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: unable to uninstall service: %s " ZT_EOL_S , argv [ 0 ] , ret . c_str ( ) ) ;
2015-04-16 00:00:26 +00:00
return 3 ;
}
return 0 ;
} break ;
2015-07-30 18:31:38 +00:00
case ' D ' : {
std : : string err = WindowsEthernetTap : : destroyAllPersistentTapDevices ( ) ;
if ( err . length ( ) > 0 ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: unable to uninstall one or more persistent tap devices: %s " ZT_EOL_S , argv [ 0 ] , err . c_str ( ) ) ;
2015-04-16 00:00:26 +00:00
return 3 ;
}
2015-07-30 18:31:38 +00:00
return 0 ;
2015-04-16 00:00:26 +00:00
} break ;
# endif // __WINDOWS__
case ' h ' :
case ' ? ' :
default :
printHelp ( argv [ 0 ] , stdout ) ;
return 0 ;
}
} else {
if ( homeDir . length ( ) ) {
printHelp ( argv [ 0 ] , stdout ) ;
return 0 ;
} else {
homeDir = argv [ i ] ;
}
}
}
if ( ! homeDir . length ( ) )
homeDir = OneService : : platformDefaultHomePath ( ) ;
2015-04-16 01:32:25 +00:00
if ( ! homeDir . length ( ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: no home path specified and no platform default available " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 01:32:25 +00:00
return 1 ;
} else {
std : : vector < std : : string > hpsp ( Utils : : split ( homeDir . c_str ( ) , ZT_PATH_SEPARATOR_S , " " , " " ) ) ;
std : : string ptmp ;
if ( homeDir [ 0 ] = = ZT_PATH_SEPARATOR )
ptmp . push_back ( ZT_PATH_SEPARATOR ) ;
for ( std : : vector < std : : string > : : iterator pi ( hpsp . begin ( ) ) ; pi ! = hpsp . end ( ) ; + + pi ) {
if ( ptmp . length ( ) > 0 )
ptmp . push_back ( ZT_PATH_SEPARATOR ) ;
ptmp . append ( * pi ) ;
if ( ( * pi ! = " . " ) & & ( * pi ! = " .. " ) ) {
if ( ! OSUtils : : mkdir ( ptmp ) )
throw std : : runtime_error ( " home path does not exist, and could not create " ) ;
}
}
}
2015-04-16 00:00:26 +00:00
2016-08-26 17:38:43 +00:00
// This can be removed once the new controller code has been around for many versions
if ( OSUtils : : fileExists ( ( homeDir + ZT_PATH_SEPARATOR_S + " controller.db " ) . c_str ( ) , true ) ) {
fprintf ( stderr , " %s: FATAL: an old controller.db exists in %s -- see instructions in controller/README.md for how to migrate! " ZT_EOL_S , argv [ 0 ] , homeDir . c_str ( ) ) ;
return 1 ;
}
2015-04-16 00:00:26 +00:00
# ifdef __UNIX_LIKE__
2015-12-22 00:15:39 +00:00
# ifndef ZT_ONE_NO_ROOT_CHECK
2015-05-16 21:52:09 +00:00
if ( ( ! skipRootCheck ) & & ( getuid ( ) ! = 0 ) ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: must be run as root (uid 0) " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
2015-12-22 00:15:39 +00:00
# endif // !ZT_ONE_NO_ROOT_CHECK
2015-04-16 00:00:26 +00:00
if ( runAsDaemon ) {
long p = ( long ) fork ( ) ;
if ( p < 0 ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: could not fork " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
} else if ( p > 0 )
return 0 ; // forked
// else p == 0, so we are daemonized
}
# endif // __UNIX_LIKE__
# ifdef __WINDOWS__
2015-07-30 18:31:38 +00:00
// Uninstall legacy tap devices. New devices will automatically be installed and configured
// when tap instances are created.
WindowsEthernetTap : : destroyAllLegacyPersistentTapDevices ( ) ;
2015-04-16 00:00:26 +00:00
if ( winRunFromCommandLine ) {
// Running in "interactive" mode (mostly for debugging)
if ( IsCurrentUserLocalAdministrator ( ) ! = TRUE ) {
2015-05-16 21:52:09 +00:00
if ( ! skipRootCheck ) {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: must be run as a local administrator. " ZT_EOL_S , argv [ 0 ] ) ;
2015-05-16 21:52:09 +00:00
return 1 ;
}
} else {
2015-07-31 00:52:35 +00:00
_winPokeAHole ( ) ;
2015-04-16 00:00:26 +00:00
}
SetConsoleCtrlHandler ( & _winConsoleCtrlHandler , TRUE ) ;
// continues on to ordinary command line execution code below...
} else {
// Running from service manager
2015-07-31 00:52:35 +00:00
_winPokeAHole ( ) ;
2015-04-16 00:00:26 +00:00
ZeroTierOneService zt1Service ;
if ( CServiceBase : : Run ( zt1Service ) = = TRUE ) {
return 0 ;
} else {
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: unable to start service (try -h for help) " ZT_EOL_S , argv [ 0 ] ) ;
2015-04-16 00:00:26 +00:00
return 1 ;
}
}
# endif // __WINDOWS__
2015-04-16 02:00:26 +00:00
# ifdef __UNIX_LIKE__
2016-10-16 11:35:29 +00:00
# ifndef ZT_ONE_RUN_AS_ROOT
# ifdef __linux__
if ( ! skipRootCheck )
dropPrivileges ( homeDir ) ;
# endif
# endif
2015-09-24 23:21:36 +00:00
std : : string pidPath ( homeDir + ZT_PATH_SEPARATOR_S + ZT_PID_PATH ) ;
2015-04-16 02:00:26 +00:00
{
// Write .pid file to home folder
FILE * pf = fopen ( pidPath . c_str ( ) , " w " ) ;
if ( pf ) {
fprintf ( pf , " %ld " , ( long ) getpid ( ) ) ;
fclose ( pf ) ;
}
}
# endif // __UNIX_LIKE__
2015-04-16 01:32:25 +00:00
unsigned int returnValue = 0 ;
2015-11-13 20:14:28 +00:00
for ( ; ; ) {
zt1Service = OneService : : newInstance ( homeDir . c_str ( ) , port ) ;
switch ( zt1Service - > run ( ) ) {
case OneService : : ONE_STILL_RUNNING : // shouldn't happen, run() won't return until done
case OneService : : ONE_NORMAL_TERMINATION :
break ;
case OneService : : ONE_UNRECOVERABLE_ERROR :
2016-07-21 20:41:02 +00:00
fprintf ( stderr , " %s: fatal error: %s " ZT_EOL_S , argv [ 0 ] , zt1Service - > fatalErrorMessage ( ) . c_str ( ) ) ;
2015-11-13 20:14:28 +00:00
returnValue = 1 ;
break ;
case OneService : : ONE_IDENTITY_COLLISION : {
delete zt1Service ;
zt1Service = ( OneService * ) 0 ;
std : : string oldid ;
OSUtils : : readFile ( ( homeDir + ZT_PATH_SEPARATOR_S + " identity.secret " ) . c_str ( ) , oldid ) ;
if ( oldid . length ( ) ) {
OSUtils : : writeFile ( ( homeDir + ZT_PATH_SEPARATOR_S + " identity.secret.saved_after_collision " ) . c_str ( ) , oldid ) ;
OSUtils : : rm ( ( homeDir + ZT_PATH_SEPARATOR_S + " identity.secret " ) . c_str ( ) ) ;
OSUtils : : rm ( ( homeDir + ZT_PATH_SEPARATOR_S + " identity.public " ) . c_str ( ) ) ;
}
} continue ; // restart!
2015-04-16 01:32:25 +00:00
}
2015-11-13 20:14:28 +00:00
break ; // terminate loop -- normally we don't keep restarting
2015-04-16 01:32:25 +00:00
}
delete zt1Service ;
zt1Service = ( OneService * ) 0 ;
return returnValue ;
2015-04-16 00:00:26 +00:00
}