1
0
mirror of https://github.com/Ylianst/MeshAgent synced 2025-12-12 14:23:40 +00:00
Files
MeshAgent/modules/proxy-helper.js
Bryan Roe 557840e642 1. Fixed edge case bug with installPath on Windows Service Manager
2. Updated Agent installer to copy .proxy file if present at install time
3. Updated proxy check on Linux/Gnome to only call gsettings if home folder is present for given user
2020-06-25 16:59:30 -07:00

486 lines
20 KiB
JavaScript

/*
Copyright 2019 Intel Corporation
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
function linux_getProxy()
{
// Check Environment Variabels
if(require('fs').existsSync('/etc/environment'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stdin.write('cat /etc/environment | grep = | ' + "tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' host=""; port=""; username=""; password=""; ')
child.stdin.write(' for(i=1;i<NF;++i)');
child.stdin.write(' {');
child.stdin.write(' if($i~/^#/) { continue; }');
child.stdin.write(' split($i,tokens,"=");');
child.stdin.write(' if(tokens[1]=="HTTP_PROXY")');
child.stdin.write(' { ');
child.stdin.write(' proxy=substr($i,2+length(tokens[1]));');
child.stdin.write(' printf "http://%s", proxy;');
child.stdin.write(' break;');
child.stdin.write(' } ');
child.stdin.write(' }');
child.stdin.write("}'\nexit\n");
child.waitExit();
if (child.stdout.str.trim() != '') { return (child.stdout.str.trim()); }
}
// Check profile.d
if(require('fs').existsSync('/etc/profile.d/proxy_setup'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stdin.write("cat /etc/profile.d/proxy_setup | awk '" + '{ split($2, tok, "="); if(tok[1]=="http_proxy") { print tok[2]; }}\'\nexit\n');
child.waitExit();
return (child.stdout.str.trim().split('\n')[0]);
}
// Check gsettings
if (require('fs').existsSync('/usr/bin/gsettings'))
{
var setting;
var ids = require('user-sessions').loginUids();
for (var i in ids)
{
if (!require('fs').existsSync(require('user-sessions').getHomeFolder(ids[i]))) { continue; }
setting = require('linux-gnome-helpers').getProxySettings(ids[i]);
if (setting.mode == 'manual')
{
if (setting.authEnabled)
{
return ('http://' + setting.username + ':' + setting.password + '@' + setting.host + ':' + setting.port);
}
else
{
return ('http://' + setting.host + ':' + setting.port);
}
}
}
}
// check apt proxy setting fro /etc/apt/apt.conf.d/proxy.conf
if (require('fs').existsSync('/etc/apt/apt.conf.d/proxy.conf'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stderr.on('data', function (c) { console.log(c.toString()); });
child.stdin.write("cat /etc/apt/apt.conf.d/proxy.conf | tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' for(n=1;n<NF;++n) ');
child.stdin.write(' {');
child.stdin.write(' if($n~/^#/) { continue; }')
child.stdin.write(' if($n~/^Acquire::http::proxy /)');
child.stdin.write(' {');
child.stdin.write(' split($n, dummy, "Acquire::http::proxy ");');
child.stdin.write(' print substr(dummy[2],2,length(dummy[2])-3);');
child.stdin.write(' break;');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write("}'\nexit\n");
child.waitExit();
if (child.stdout.str.trim() != "") { return (child.stdout.str.trim()); }
}
// check apt proxy setting fro /etc/apt/apt/apt.conf
if (require('fs').existsSync('/etc/apt/apt.conf'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stderr.on('data', function (c) { console.log(c.toString()); });
child.stdin.write("cat /etc/apt/apt.conf | tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' for(n=1;n<NF;++n) ');
child.stdin.write(' {');
child.stdin.write(' if($n~/^#/) { continue; }')
child.stdin.write(' if($n~/^Acquire::http::proxy /)');
child.stdin.write(' {');
child.stdin.write(' split($n, dummy, "Acquire::http::proxy ");');
child.stdin.write(' print substr(dummy[2],2,length(dummy[2])-3);');
child.stdin.write(' break;');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write("}'\nexit\n");
child.waitExit();
if (child.stdout.str.trim() != "") { return (child.stdout.str.trim()); }
}
// check yum proxy setting
if (require('fs').existsSync('/etc/yum.conf'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stderr.on('data', function (c) { console.log(c.toString()); });
child.stdin.write('cat /etc/yum.conf | grep "proxy" | ' + "tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' host=""; port=""; username=""; password="";');
child.stdin.write(' for(n=1;n<NF;++n)');
child.stdin.write(' {');
child.stdin.write(' if($n~/^#/) { continue; }');
child.stdin.write(' split($n,tokens,"=");');
child.stdin.write(' if(tokens[1]=="proxy")');
child.stdin.write(' {');
child.stdin.write(' split(tokens[2],dummy,"://");');
child.stdin.write(' split(dummy[2],url,":");');
child.stdin.write(' host = url[1];');
child.stdin.write(' port = url[2]; if(port=="") { port = "8080"; }');
child.stdin.write(' }');
child.stdin.write(' if(tokens[1]=="proxy_username") { username = tokens[2]; }');
child.stdin.write(' if(tokens[1]=="proxy_password") { password = tokens[2]; }');
child.stdin.write(' }');
child.stdin.write(' if(host!="" && port!="")');
child.stdin.write(' {');
child.stdin.write(' if(username!="" && password!="")');
child.stdin.write(' {');
child.stdin.write(' printf "http://%s:%s@%s:%s", username, password, host, port; ');
child.stdin.write(' }');
child.stdin.write(' else');
child.stdin.write(' {');
child.stdin.write(' printf "http://%s:%s", host, port; ');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write("}'\nexit\n");
child.waitExit();
if (child.stdout.str.trim() != "") { return (child.stdout.str.trim()); }
}
// openSUSE proxy setting
if (require('fs').existsSync('/etc/sysconfig/proxy'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stderr.on('data', function (c) { });
child.stdin.write('cat /etc/sysconfig/proxy /root/.curlrc | grep = | ' + "tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' proxy=""; enabled=""; username=""; password=""; ')
child.stdin.write(' for(i=1;i<NF;++i)');
child.stdin.write(' {');
child.stdin.write(' if($i~/^#/) { continue; }');
child.stdin.write(' split($i,tokens,"=");');
child.stdin.write(' if(tokens[1]=="PROXY_ENABLED")');
child.stdin.write(' {');
child.stdin.write(' split(tokens[2],dummy,"\\"");');
child.stdin.write(' enabled = dummy[2];');
child.stdin.write(' }');
child.stdin.write(' if(tokens[1]=="HTTP_PROXY")');
child.stdin.write(' { ');
child.stdin.write(' split(tokens[2],dummy,"\\"");');
child.stdin.write(' proxy = dummy[2];');
child.stdin.write(' } ');
child.stdin.write(' if(tokens[1]~/^proxy-user/)');
child.stdin.write(' {');
child.stdin.write(' cred = substr($i,1+index($i,"="));');
child.stdin.write(' cred = substr(cred, index(cred, "\\""));');
child.stdin.write(' if(cred~/^"/) { cred = substr(cred,2,length(cred)-2); }');
child.stdin.write(' username=substr(cred,0,index(cred,":")-1);');
child.stdin.write(' password=substr(cred,1+index(cred,":"));');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write(' if(enabled=="yes" && proxy!="") ');
child.stdin.write(' {');
child.stdin.write(' if(username=="" || password=="") ');
child.stdin.write(' {');
child.stdin.write(' print proxy;');
child.stdin.write(' }');
child.stdin.write(' else ');
child.stdin.write(' {');
child.stdin.write(' split(proxy,dummy, "://");');
child.stdin.write(' printf "%s://%s:%s@%s", dummy[1], username, password, dummy[2];');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write("}'\nexit\n");
child.waitExit();
if (child.stdout.str.trim() != '') { return (child.stdout.str.trim()); }
}
if(require('fs').existsSync('/etc/login.conf'))
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stdin.write("cat /etc/login.conf | tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' printf "{";');
child.stdin.write(' group=""; first=1; firstprop=0;')
child.stdin.write(' for(i=1;i<NF;++i) ');
child.stdin.write(' {');
child.stdin.write(' a=split($i,tok,":"); ');
child.stdin.write(' if(split(tok[1],dummy,"#")==1 && split(tok[1],dummy2," ")==1)');
child.stdin.write(' { ');
child.stdin.write(' if(group != "") { printf "}"; }');
child.stdin.write(' group = tok[1]; firstprop=1;');
child.stdin.write(' printf "%s\\"%s\\": {", (first==0?",":""), tok[1];');
child.stdin.write(' first=0;');
child.stdin.write(' }');
child.stdin.write(' else ');
child.stdin.write(' {');
child.stdin.write(' if(group != "" && split($i,dummy3,"\\\\")>1 && split($i, dummy4, "#")==1)');
child.stdin.write(' {');
child.stdin.write(' if(split($i,key1,"=")==1)');
child.stdin.write(' {');
child.stdin.write(' split($i,key2,":");');
child.stdin.write(' if(key2[2]!="\\\\")');
child.stdin.write(' {');
child.stdin.write(' printf "%s\\"%s\\": null",(firstprop==0?",":""),key2[2];');
child.stdin.write(' firstprop=0;')
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write(' else');
child.stdin.write(' {');
child.stdin.write(' tmp = substr($i,2+length(key1[1]));');
child.stdin.write(' split(tmp,dummy,"\\\\");');
child.stdin.write(' tmp=substr(tmp,0,length(tmp)-2);');
child.stdin.write(' split(key1[1],keyname,":");');
child.stdin.write(' printf "%s\\"%s\\": \\"%s\\"", (firstprop==0?",":""), keyname[2], tmp;');
child.stdin.write(' firstprop=0;');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write(' }');
child.stdin.write(' if(group!="") { printf "}"; }')
child.stdin.write(' printf "}";');
child.stdin.write("}'");
child.stdin.write('\nexit\n');
child.waitExit();
if (child.stdout.str.trim() != '')
{
var config = null;
try
{
config = JSON.parse(child.stdout.str);
}
catch (e)
{
}
if(config)
{
// check root
if(config.root && config.root.setenv)
{
var i, tokens;
var items = config.root.setenv.split(',');
for(i=0;i<items.length;++i)
{
tokens = items[i].split('=');
if(tokens[0] == 'https_proxy' || tokens[0] == 'http_proxy')
{
return (tokens[1].trim());
}
}
}
// check default
if (config.default && config.default.setenv)
{
var i, tokens;
var items = config.default.setenv.split(',');
for (i = 0; i < items.length; ++i)
{
tokens = items[i].split('=');
if (tokens[0] == 'https_proxy' || tokens[0] == 'http_proxy')
{
return (tokens[1].trim());
}
}
}
}
}
}
throw ('No proxies');
}
function posix_proxyCheck(uid, checkAddr)
{
var g;
var x = process.env['no_proxy'] ? process.env['no_proxy'].split(',') : [];
var t;
if (require('linux-gnome-helpers').available && (g = require('linux-gnome-helpers').getProxySettings(uid)).mode != 'none')
{
x = g.exceptions;
}
for(var i in x)
{
if (x[i] == checkAddr) { return (true); } // Direct Match
if (checkAddr.endsWith('.' + x[i])) { return (true); } // Subdomain Match
if ((v = x[i].split('/')).length == 2)
{
try
{
if(require('ip-address').Address4.fromString(v[0]).mask(parseInt(v[1])) == require('ip-address').Address4.fromString(checkAddr).mask(parseInt(v[1])))
{
return(true);
}
}
catch (ex)
{
}
}
}
return (false);
}
function windows_getUserRegistryKey()
{
var i;
if ((i = require('user-sessions').getProcessOwnerName(process.pid)).tsid == 0)
{
// We are a service, so we should check the user that installed the Mesh Agent
try
{
key = require('win-registry').QueryKey(require('win-registry').HKEY.LocalMachine, 'SYSTEM\\CurrentControlSet\\Services\\Mesh Agent', '_InstalledBy');
}
catch (xx)
{
// This info isn't available, so let's try to use the currently logged in user
try
{
key = require('win-registry').usernameToUserKey(require('user-sessions').getUsername(require('user-sessions').consoleUid()));
}
catch (xxx)
{
// No users are logged in, so as a last resort, let's try the last logged in user.
var entries = require('win-registry').QueryKey(require('win-registry').HKEY.Users);
for (i in entries.subkeys)
{
if (entries.subkeys[i].split('-').length > 5 && !entries.subkeys[i].endsWith('_Classes'))
{
key = entries.subkeys[i];
break;
}
}
}
}
}
else
{
// We are a logged in user
key = require('win-registry').usernameToUserKey(i.name);
}
if (!key) { throw ('Could not determine which user proxy setting to query'); }
return (key);
}
function windows_proxyCheck(key, checkAddr)
{
if (!key) { key = windows_getUserRegistryKey(); }
var proxyOverride = require('win-registry').QueryKey(require('win-registry').HKEY.Users, key + '\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings', 'ProxyOverride').split(';');
for(var i in proxyOverride)
{
proxyOverride[i] = proxyOverride[i].trim();
if ((checkAddr == '127.0.0.1' || checkAddr == '::1') && proxyOverride[i] == '<local>') { return (true); }
if (checkAddr == proxyOverride[i]) { return (true); } // Exact Match
if (proxyOverride[i].startsWith('*.') && checkAddr.endsWith(proxyOverride[i].substring(1))) { return (true); }
if (proxyOverride[i].endsWith('.*') && checkAddr.startsWith(proxyOverride[i].substring(0, proxyOverride[i].length - 1))) { return (true); }
}
return (false);
}
function macos_getProxy()
{
var child = require('child_process').execFile('/bin/sh', ['sh']);
child.stdout.str = ''; child.stdout.on('data', function (c) { this.str += c.toString(); });
child.stderr.str = ''; child.stderr.on('data', function (c) { this.str += c.toString(); });
child.stdin.write("scutil --proxy | tr '\\n' '`' | awk -F'`' '");
child.stdin.write('{');
child.stdin.write(' pstart=0;')
child.stdin.write(' for(i=1;i<NF;++i)');
child.stdin.write(" {");
child.stdin.write(' if(split($i,dummy,"ExceptionsList ")>1)');
child.stdin.write(" {");
child.stdin.write(' printf "{ \\"exceptions\\": [";');
child.stdin.write(' ++i;');
child.stdin.write(' fstart=1; pstart=1;');
child.stdin.write(' for(;i<NF;++i)');
child.stdin.write(' {');
child.stdin.write(' if(split($i,dummy,"}")>1) { break; } ');
child.stdin.write(' split($i, val, " : ");');
child.stdin.write(' printf "%s\\"%s\\"", (fstart==0?",":""), val[2];');
child.stdin.write(' fstart=0;');
child.stdin.write(' }');
child.stdin.write(' printf "]";');
child.stdin.write(' continue;');
child.stdin.write(" }");
child.stdin.write(' else');
child.stdin.write(' {');
child.stdin.write(' if(pstart==1 && split($i,dummy,"}")==1)');
child.stdin.write(' {');
child.stdin.write(' split($i,tok," : ");');
child.stdin.write(' split(tok[1],key," ");');
child.stdin.write(' printf ",\\"%s\\": \\"%s\\"", key[1], tok[2];');
child.stdin.write(' }');
child.stdin.write(' }')
child.stdin.write(" }");
child.stdin.write(' printf "}";');
child.stdin.write("}'\nexit\n");
child.waitExit();
if(child.stdout.str != '')
{
try
{
var p = JSON.parse(child.stdout.str);
if(p.HTTPEnable == "1")
{
return('http://' + p.HTTPProxy + ':' + p.HTTPPort);
}
}
catch(e)
{
console.log(e);
}
}
throw ('No Proxies');
}
function windows_getProxy()
{
var isroot = false;
var key, value;
key = windows_getUserRegistryKey();
try
{
if (require('win-registry').QueryKey(require('win-registry').HKEY.Users, key + '\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings', 'ProxyEnable') == 1)
{
// Proxy is enabled
return (require('win-registry').QueryKey(require('win-registry').HKEY.Users, key + '\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings', 'ProxyServer'));
}
}
catch(e)
{
throw ('No proxies');
}
}
switch (process.platform)
{
case 'linux':
case 'freebsd':
module.exports = { ignoreProxy: posix_proxyCheck, getProxy: linux_getProxy };
break;
case 'win32':
module.exports = { ignoreProxy: windows_proxyCheck, getProxy: windows_getProxy };
break;
case 'darwin':
module.exports = { getProxy: macos_getProxy };
break;
}