91 lines
2.0 KiB
Go
91 lines
2.0 KiB
Go
package secure
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"github.com/anytypeio/go-anytype-infrastructure-experiments/app"
|
|
"github.com/anytypeio/go-anytype-infrastructure-experiments/app/logger"
|
|
"github.com/anytypeio/go-anytype-infrastructure-experiments/config"
|
|
"github.com/anytypeio/go-anytype-infrastructure-experiments/util/keys/asymmetric/signingkey"
|
|
"github.com/libp2p/go-libp2p-core/crypto"
|
|
"github.com/libp2p/go-libp2p-core/peer"
|
|
"github.com/libp2p/go-libp2p-core/sec"
|
|
libp2ptls "github.com/libp2p/go-libp2p/p2p/security/tls"
|
|
"go.uber.org/zap"
|
|
"net"
|
|
)
|
|
|
|
type HandshakeError error
|
|
|
|
const CName = "net/secure"
|
|
|
|
var log = logger.NewNamed(CName)
|
|
|
|
func New() Service {
|
|
return &service{}
|
|
}
|
|
|
|
type Service interface {
|
|
TLSListener(lis net.Listener) ContextListener
|
|
TLSConn(ctx context.Context, conn net.Conn) (sec.SecureConn, error)
|
|
app.Component
|
|
}
|
|
|
|
type service struct {
|
|
key crypto.PrivKey
|
|
}
|
|
|
|
func (s *service) Init(ctx context.Context, a *app.App) (err error) {
|
|
account := a.MustComponent(config.CName).(*config.Config).Account
|
|
decoder := signingkey.NewEDPrivKeyDecoder()
|
|
pkb, err := decoder.DecodeFromStringIntoBytes(account.SigningKey)
|
|
if err != nil {
|
|
return
|
|
}
|
|
if s.key, err = crypto.UnmarshalEd25519PrivateKey(pkb); err != nil {
|
|
return
|
|
}
|
|
|
|
pid, err := peer.Decode(account.PeerId)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
var testData = []byte("test data")
|
|
sign, err := s.key.Sign(testData)
|
|
if err != nil {
|
|
return
|
|
}
|
|
pubKey, err := pid.ExtractPublicKey()
|
|
if err != nil {
|
|
return
|
|
}
|
|
ok, err := pubKey.Verify(testData, sign)
|
|
if err != nil {
|
|
return
|
|
}
|
|
if !ok {
|
|
return fmt.Errorf("peerId and privateKey mismatched")
|
|
}
|
|
|
|
log.Info("secure service init", zap.String("peerId", account.PeerId))
|
|
|
|
return nil
|
|
}
|
|
|
|
func (s *service) Name() (name string) {
|
|
return CName
|
|
}
|
|
|
|
func (s *service) TLSListener(lis net.Listener) ContextListener {
|
|
return newTLSListener(s.key, lis)
|
|
}
|
|
|
|
func (s *service) TLSConn(ctx context.Context, conn net.Conn) (sec.SecureConn, error) {
|
|
tr, err := libp2ptls.New(s.key)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return tr.SecureOutbound(ctx, conn, "")
|
|
}
|