util.go 2.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100
  1. package mq
  2. import (
  3. "errors"
  4. "fmt"
  5. "strings"
  6. "time"
  7. "github.com/gravitl/netmaker/logic"
  8. "github.com/gravitl/netmaker/models"
  9. "github.com/gravitl/netmaker/netclient/ncutils"
  10. )
  11. func decryptMsg(node *models.Node, msg []byte) ([]byte, error) {
  12. if len(msg) <= 24 { // make sure message is of appropriate length
  13. return nil, fmt.Errorf("recieved invalid message from broker %v", msg)
  14. }
  15. host, err := logic.GetHost(node.HostID.String())
  16. if err != nil {
  17. return nil, err
  18. }
  19. trafficKey, trafficErr := logic.RetrievePrivateTrafficKey() // get server private key
  20. if trafficErr != nil {
  21. return nil, trafficErr
  22. }
  23. serverPrivTKey, err := ncutils.ConvertBytesToKey(trafficKey)
  24. if err != nil {
  25. return nil, err
  26. }
  27. nodePubTKey, err := ncutils.ConvertBytesToKey(host.TrafficKeyPublic)
  28. if err != nil {
  29. return nil, err
  30. }
  31. if strings.Contains(host.Version, "0.10.0") {
  32. return ncutils.BoxDecrypt(msg, nodePubTKey, serverPrivTKey)
  33. }
  34. return ncutils.DeChunk(msg, nodePubTKey, serverPrivTKey)
  35. }
  36. func encryptMsg(node *models.Node, msg []byte) ([]byte, error) {
  37. // fetch server public key to be certain hasn't changed in transit
  38. trafficKey, trafficErr := logic.RetrievePrivateTrafficKey()
  39. if trafficErr != nil {
  40. return nil, trafficErr
  41. }
  42. serverPrivKey, err := ncutils.ConvertBytesToKey(trafficKey)
  43. if err != nil {
  44. return nil, err
  45. }
  46. host, err := logic.GetHost(node.HostID.String())
  47. if err != nil {
  48. return nil, err
  49. }
  50. nodePubKey, err := ncutils.ConvertBytesToKey(host.TrafficKeyPublic)
  51. if err != nil {
  52. return nil, err
  53. }
  54. if strings.Contains(host.Version, "0.10.0") {
  55. return ncutils.BoxEncrypt(msg, nodePubKey, serverPrivKey)
  56. }
  57. return ncutils.Chunk(msg, nodePubKey, serverPrivKey)
  58. }
  59. func publish(node *models.Node, dest string, msg []byte) error {
  60. encrypted, encryptErr := encryptMsg(node, msg)
  61. if encryptErr != nil {
  62. return encryptErr
  63. }
  64. if mqclient == nil {
  65. return errors.New("cannot publish ... mqclient not connected")
  66. }
  67. if token := mqclient.Publish(dest, 0, true, encrypted); !token.WaitTimeout(MQ_TIMEOUT*time.Second) || token.Error() != nil {
  68. var err error
  69. if token.Error() == nil {
  70. err = errors.New("connection timeout")
  71. } else {
  72. err = token.Error()
  73. }
  74. return err
  75. }
  76. return nil
  77. }
  78. // decodes a message queue topic and returns the embedded node.ID
  79. func getID(topic string) (string, error) {
  80. parts := strings.Split(topic, "/")
  81. count := len(parts)
  82. if count == 1 {
  83. return "", fmt.Errorf("invalid topic")
  84. }
  85. //the last part of the topic will be the node.ID
  86. return parts[count-1], nil
  87. }