sparoid 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6069344b10804fda4024554fc6bfb9490c52ef0ef197dfcb598724cb760f587d
-  data.tar.gz: 35cc6eec43bb0b03fd2938166628618936c9659768b5454d880d96b942da04d1
+  metadata.gz: f9949f3421911f8f9d588b87ba8955407b68ac62bae5ad7f53ef5b707077ef60
+  data.tar.gz: 06b115e1db22eb0222dd9f7a439024e18d8579255324aaff1bb1c935e35c10f4
 SHA512:
-  metadata.gz: c361191ea89d2c980dc89a639c11cdf77575006526560f00ae4a200e79b9ba5a66b282d1f2b9b750af5135652316cbffc87476100af6799dc904e8aa8b5f2ffb
-  data.tar.gz: 3b6df9484af0ee540bedff510f9643642151da0558767d9a20de4dfb7d8217df5ff25623802ccba00c5855ba3e002c22743eac0bbfff9322480b86d2ce4e2c3d
+  metadata.gz: d6ef1abb4e1c01d435f771ffbf779aeced9a04a2384a309c623fef0546d8cf8adae7ab76a86ba60b485c49ddbd386e545ecc9ce7c62efdcec465732c23cd1f59
+  data.tar.gz: f616bb367217c07aa36865be2c1eaeeecce685c260911aaf6a97f1e8cb80f8652d906944edca1954d1f161a123bcf333945947992c40ea289be0911e40be7c29

data/CHANGELOG.md

@@ -1,4 +1,11 @@
-## [Unreleased]
+## [1.0.2] - 2021-03-15
+
+- `sparoid send` renamed to `sparoid auth`
+- `sparoid connect [host] [port]` added for automatic fd passing
+
+## [1.0.1] - 2021-03-12
+
+- --fdpass option to send
 
 ## [1.0.0] - 2021-03-11
 

data/lib/sparoid.rb

@@ -7,20 +7,41 @@ require "resolv"
 
 # Single Packet Authorisation client
 module Sparoid
-  def self.send(key, hmac_key, host, port)
+  extend self
+
+  # Send an authorization packet
+  def auth(key, hmac_key, host, port)
     msg = message(public_ip)
     data = prefix_hmac(hmac_key, encrypt(key, msg))
-    udp_send(host, port, data)
+    sendmsg(host, port, data)
   end
 
-  def self.udp_send(host, port, data)
-    socket = UDPSocket.new
-    socket.connect host, port
-    socket.send data, 0
-    socket.close
+  # Generate new aes and hmac keys, print to stdout
+  def keygen
+    cipher = OpenSSL::Cipher.new("aes-256-cbc")
+    key = cipher.random_key.unpack1("H*")
+    hmac_key = OpenSSL::Random.random_bytes(32).unpack1("H*")
+    puts "key = #{key}"
+    puts "hmac-key = #{hmac_key}"
+  end
+
+  # Connect to a TCP server and pass the FD to the parent
+  def fdpass(host, port, connect_timeout: 20)
+    tcp = Socket.tcp host, port, connect_timeout: connect_timeout
+    parent = Socket.for_fd(1)
+    parent.sendmsg "\0", 0, nil, Socket::AncillaryData.unix_rights(tcp)
+  end
+
+  private
+
+  def sendmsg(host, port, data)
+    UDPSocket.open do |socket|
+      socket.connect host, port
+      socket.sendmsg data, 0
+    end
   end
 
-  def self.encrypt(key, data)
+  def encrypt(key, data)
     key = [key].pack("H*") # hexstring to bytes
     raise ArgumentError, "Key must be 32 bytes hex encoded" if key.bytesize != 32
 
@@ -34,7 +55,7 @@ module Sparoid
     output << cipher.final
   end
 
-  def self.prefix_hmac(hmac_key, data)
+  def prefix_hmac(hmac_key, data)
     hmac_key = [hmac_key].pack("H*") # hexstring to bytes
     raise ArgumentError, "HMAC key must be 32 bytes hex encoded" if hmac_key.bytesize != 32
 
@@ -42,37 +63,29 @@ module Sparoid
     hmac + data
   end
 
-  def self.message(ip)
+  def message(ip)
     version = 1
     ts = (Time.now.utc.to_f * 1000).floor
     nounce = OpenSSL::Random.random_bytes(16)
     [version, ts, nounce, ip.address].pack("Nq>a16a4")
   end
 
-  def self.public_ip
+  def public_ip
     Resolv::DNS.open(nameserver: ["resolver1.opendns.com"]) do |dns|
-      dns.each_address("myip.opendns.com") do |resolv|
-        case resolv
-        when Resolv::IPv4 then return resolv
-        end
-      end
-      raise Error, "No public IPv4 address found"
+      dns.getresource("myip.opendns.com", Resolv::DNS::Resource::IN::A).address
     end
   end
 
-  def self.keygen
-    cipher = OpenSSL::Cipher.new("aes-256-cbc")
-    key = cipher.random_key.unpack1("H*")
-    hmac_key = OpenSSL::Random.random_bytes(32).unpack1("H*")
-    puts "key = #{key}"
-    puts "hmac-key = #{hmac_key}"
-  end
+  class Error < StandardError; end
 
-  def self.fdpass(host, port)
-    ssh = Socket.tcp host, port
-    parent = Socket.for_fd(1)
-    parent.sendmsg "\0", 0, nil, Socket::AncillaryData.unix_rights(ssh)
-  end
+  # Instance of SPAroid that only resolved public_ip once
+  class Instance
+    include Sparoid
 
-  class Error < StandardError; end
+    private
+
+    def public_ip
+      @public_ip ||= super
+    end
+  end
 end

data/lib/sparoid/cli.rb

@@ -6,21 +6,27 @@ require_relative "../sparoid"
 module Sparoid
   # CLI
   class CLI < Thor
-    desc "send HOST [PORT]", "Send a packet"
+    desc "auth HOST [PORT]", "Send a authorization packet"
     method_option :config, desc: "Path to a config file, INI format, with key and hmac-key"
     method_option :fdpass,
                   type: :numeric,
                   desc: "After sending, open a TCP connection and pass the FD back to the calling process. \
                          For use with OpenSSH ProxyCommand and ProxyUseFdpass"
-    def send(host, port = 8484)
+    def auth(host, port = 8484)
       config = File.expand_path(options[:config] || "~/.sparoid.ini")
       abort "Config '#{config}' not found" unless File.exist? config
 
       key, hmac_key = get_keys(parse_ini(config))
-      Sparoid.send(key, hmac_key, host, port.to_i)
+      Sparoid.auth(key, hmac_key, host, port.to_i)
       Sparoid.fdpass(host, options[:fdpass]) if options[:fdpass]
     end
 
+    desc "connect", "Send a SPA, TCP connect, and then pass the FD back to the parent"
+    def connect(host, port, spa_port = 8484)
+      auth(host, spa_port)
+      Sparoid.fdpass(host, port)
+    end
+
     desc "keygen", "Generate an encryption key and a HMAC key"
     def keygen
       Sparoid.keygen

data/lib/sparoid/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Sparoid
-  VERSION = "1.0.1"
+  VERSION = "1.0.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sparoid
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - Carl Hörberg
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2021-03-12 00:00:00.000000000 Z
+date: 2021-03-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor