mirror of
https://github.com/Ylianst/MeshCommander
synced 2025-12-06 06:03:20 +00:00
Added OCR web server.
This commit is contained in:
Ylian Saint-Hilaire
149
webserver-0.0.1.js
Normal file
149
webserver-0.0.1.js
Normal file
@@ -0,0 +1,149 @@
|
||||
/**
|
||||
* @description One Client Recovery (OCR) web server
|
||||
* @author Ylian Saint-Hilaire
|
||||
* @version v0.0.1
|
||||
*/
|
||||
|
||||
// Construct tiny web server
|
||||
var CreateWebServer = function () {
|
||||
const fs = require('fs');
|
||||
const net = require('net');
|
||||
const tls = require('tls');
|
||||
const path = require("path");
|
||||
var obj = {};
|
||||
var server = null;
|
||||
obj.port = random(1, 65535); // Port used to listen for incoming requests.
|
||||
obj.state = 0; // State of the web server, 0 = Disabled, 2 = Listening.
|
||||
obj.cert = null; // TLS certificate in PEM format.
|
||||
obj.key = null; // TLS certificate private key in PEM format.
|
||||
obj.certHashRaw = null; // SHA384 hash of TLS certificate.
|
||||
obj.certHashHex = null; // SHA384 hash of TLS certificate in HEX.
|
||||
obj.responses = {}; // Table responses to different url paths.
|
||||
obj.transfers = []; // List of currently active file transfers.
|
||||
obj.transfersTimer = null; // When file transfers are active, this is a half second timer.
|
||||
obj.onTransfers = null; // Callback for transfers status.
|
||||
|
||||
// Return a random number between min and max
|
||||
function random(min, max) { return Math.floor(min + Math.random() * (max - min)); }
|
||||
|
||||
// Start the web server
|
||||
obj.start = function (func) {
|
||||
if (server != null) return;
|
||||
obj.state = 1;
|
||||
if ((obj.cert != null) && (obj.key != null)) { server = tls.createServer({ cert: obj.cert, key: obj.key, minVersion: 'TLSv1' }, onConnection); } else { server = net.createServer(onConnection); }
|
||||
server.on('error', function (err) { if (err.code == 'EADDRINUSE') { obj.port = random(1, 65535); server = null; obj.start(func); } else { console.log('WebServer Listen Error', err.code); } });
|
||||
server.listen({ port: obj.port }, function (x) { obj.state = 2; console.log('WebServer listening on ' + obj.port); if (func != null) { func(); } });
|
||||
}
|
||||
|
||||
// Called when a new incoming connection is made
|
||||
function onConnection(socket) {
|
||||
if (socket.remoteAddress.startsWith('::ffff:')) { socket.xremoteAddress = socket.remoteAddress.substring(7); } else { socket.xremoteAddress = socket.remoteAddress; }
|
||||
console.log('WebServer, socket connection from ' + socket.xremoteAddress + ':' + socket.remotePort);
|
||||
socket.xdata = ''; // Accumulator
|
||||
socket.on('data', function (data) {
|
||||
this.xdata += data.toString('utf8');
|
||||
console.log('WebServer, socket received data', this.xdata);
|
||||
var headersize = this.xdata.indexOf('\r\n\r\n');
|
||||
if (headersize < 0) { if (this.xdata.length > 4096) { this.close(); } return; }
|
||||
var headers = this.xdata.substring(0, headersize).split('\r\n');
|
||||
if (headers.length < 1) { this.close(); return; }
|
||||
var directives = headers[0].split(' ');
|
||||
if ((directives.length != 3) || (directives[0] != 'GET')) { this.end(); return; }
|
||||
console.log('WebServer, request', directives[0], directives[1]);
|
||||
var responseCode = 404, responseType = 'text/html', responseData = 'Invalid request', r = obj.responses[directives[1]];
|
||||
if (r != null) {
|
||||
if (typeof r == 'string') {
|
||||
responseCode = 200; responseData = obj.responses[directives[1]];
|
||||
} else if (typeof r == 'object') {
|
||||
responseCode = 200;
|
||||
if (r.type) { responseType = r.type; }
|
||||
if (r.data) { responseData = r.data; }
|
||||
if (r.shortfile) { try { responseData = fs.readFileSync(r.shortfile); } catch (ex) { responseCode = 404; responseType = 'text/html'; responseData = 'File not found'; } }
|
||||
if (r.file) {
|
||||
// Send the file header and pipe the rest of the file
|
||||
socket.xfilepath = r.file;
|
||||
socket.xfilename = path.basename(r.file);
|
||||
socket.xsize = fs.statSync(r.file).size;
|
||||
socket.write('HTTP/1.1 200 OK\r\nContent-Type: application/octet-stream\r\nContent-Length: ' + socket.xsize + '\r\nConnection: close\r\n\r\n');
|
||||
var writable = require('stream').Writable;
|
||||
socket.progress = new writable({ write: function (chunk, encoding, flush) { this.count += chunk.length; flush(); } });
|
||||
socket.progress.count = 0;
|
||||
var ws = fs.createReadStream(r.file, { flags: 'r' });
|
||||
ws.pipe(socket.progress); ws.pipe(socket);
|
||||
obj.transfers.push(socket);
|
||||
|
||||
// Start the progress bar timer
|
||||
if (obj.onTransfers != null) { obj.onTransfers(obj, obj.transfers); if (obj.transfersTimer == null) { obj.transfersTimer = setInterval(function () { obj.onTransfers(obj, obj.transfers); }, 500); } }
|
||||
return;
|
||||
}
|
||||
}
|
||||
}
|
||||
socket.write('HTTP/1.1 ' + responseCode + ' OK\r\nContent-Type: ' + responseType + '\r\nContent-Length: ' + responseData.length + '\r\nConnection: close\r\n\r\n');
|
||||
socket.write(responseData);
|
||||
});
|
||||
socket.on('end', function () { cleanupSocket(this); console.log('WebServer, socket closed'); });
|
||||
socket.on('error', function (err) { cleanupSocket(this); console.log('WebServer, socket error', err); });
|
||||
}
|
||||
|
||||
// Remove the socket from the transfer list and clear the timer if needed
|
||||
function cleanupSocket(socket) {
|
||||
var i = obj.transfers.indexOf(socket);
|
||||
if (i >= 0) {
|
||||
obj.transfers.splice(i, 1);
|
||||
obj.onTransfers(obj, obj.transfers);
|
||||
if (obj.transfers.length == 0) { clearInterval(obj.transfersTimer); obj.transfersTimer = null; }
|
||||
}
|
||||
}
|
||||
|
||||
// Stop the web server
|
||||
obj.stop = function () { if (server == null) return; server.close(); server = null; }
|
||||
|
||||
// Generate a TLS certificate (this is really a root cert)
|
||||
obj.generateCertificate = function() {
|
||||
// Generate a keypair and create an X.509v3 certificate
|
||||
var keys = forge.pki.rsa.generateKeyPair(1024);
|
||||
var cert = forge.pki.createCertificate();
|
||||
cert.publicKey = keys.publicKey;
|
||||
cert.serialNumber = '' + Math.floor((Math.random() * 100000) + 1);
|
||||
cert.validity.notBefore = new Date(2018, 0, 1);
|
||||
cert.validity.notAfter = new Date(2049, 11, 31);
|
||||
var attrs = [ { name: 'commonName', value: 'MeshCommander' }, { name: 'countryName', value: 'Unknown' }, { shortName: 'ST', value: 'Unknown' }, { name: 'organizationName', value: 'Unknown' } ];
|
||||
cert.setSubject(attrs);
|
||||
cert.setIssuer(attrs);
|
||||
cert.setExtensions([{ name: 'basicConstraints', cA: true }, { name: 'nsCertType', sslCA: true, emailCA: true, objCA: true }, { name: 'subjectKeyIdentifier' }]); // Root extensions
|
||||
cert.sign(keys.privateKey, forge.md.sha256.create());
|
||||
obj.cert = forge.pki.certificateToPem(cert);
|
||||
obj.key = forge.pki.privateKeyToPem(keys.privateKey);
|
||||
|
||||
// Compute the SHA384 hash of the certificate
|
||||
var md = forge.md.sha384.create();
|
||||
md.start(); md.update(forge.asn1.toDer(forge.pki.certificateToAsn1(cert)).getBytes());
|
||||
var digest = md.digest();
|
||||
obj.certHashRaw = digest.data;
|
||||
obj.certHashHex = digest.toHex();
|
||||
}
|
||||
|
||||
// Returns a UEFI boot parameter in binary
|
||||
function makeUefiBootParam(type, data, len) {
|
||||
if (typeof data == 'number') { if (len == 1) { data = String.fromCharCode(data & 0xFF); } if (len == 2) { data = ShortToStrX(data); } if (len == 4) { data = IntToStrX(data); } }
|
||||
return ShortToStrX(0x8086) + ShortToStrX(type) + IntToStrX(data.length) + data;
|
||||
}
|
||||
|
||||
// Setup UEFI boot image
|
||||
obj.setupBootImage = function(filePath, ip) {
|
||||
if (fs.existsSync(filePath) == false) return null;
|
||||
var name = ('' + Math.random()).substring(2);
|
||||
obj.responses['/' + name] = { type: 'application/octet-stream', file: filePath };
|
||||
console.log('https://' + ip + ':' + obj.port + '/' + name);
|
||||
return {
|
||||
args: btoa(
|
||||
makeUefiBootParam(1, 'http' + ((obj.cert != null)?'s':'') + '://' + ip + ':' + obj.port + '/' + name) + // OCR_EFI_NETWORK_DEVICE_PATH
|
||||
makeUefiBootParam(20, 0, 1) + // OCR_HTTPS_CERT_SYNC_ROOT_CA
|
||||
makeUefiBootParam(23, obj.certHashRaw) + // OCR_HTTPS_SERVER_CERT_HASH_SHA384
|
||||
makeUefiBootParam(30, 60, 2)), // OCR_HTTPS_REQUEST_TIMEOUT (60 seconds)
|
||||
argscount: 4
|
||||
};
|
||||
}
|
||||
|
||||
return obj;
|
||||
}
|
||||
Reference in New Issue
Block a user