Bogdan-Ștefan Neacşu
63 lines
2.1 KiB
Rust
63 lines
2.1 KiB
Rust
use std::net::IpAddr;
|
|
|
|
use base64::{engine::general_purpose, Engine as _};
|
|
use boringtun::x25519;
|
|
use log::info;
|
|
|
|
// The wireguard UDP listener
|
|
pub const WG_ADDRESS: &str = "0.0.0.0";
|
|
|
|
// The interface used to route traffic
|
|
pub const TUN_BASE_NAME: &str = "nymtun";
|
|
pub const TUN_DEVICE_ADDRESS: &str = "10.0.0.1";
|
|
pub const TUN_DEVICE_NETMASK: &str = "255.255.255.0";
|
|
|
|
// The private key of the listener
|
|
// Corresponding public key: "WM8s8bYegwMa0TJ+xIwhk+dImk2IpDUKslDBCZPizlE="
|
|
const PRIVATE_KEY: &str = "AEqXrLFT4qjYq3wmX0456iv94uM6nDj5ugp6Jedcflg=";
|
|
|
|
// The public keys of the registered peer (clients)
|
|
// Corresponding private key: "ILeN6gEh6vJ3Ju8RJ3HVswz+sPgkcKtAYTqzQRhTtlo="
|
|
const PEER: &str = "NCIhkgiqxFx1ckKl3Zuh595DzIFl8mxju1Vg995EZhI=";
|
|
|
|
// The AllowedIPs for the connected peer, which is one a single IP and the same as the IP that the
|
|
// peer has configured on their side.
|
|
const ALLOWED_IPS: &str = "10.0.0.2";
|
|
|
|
fn decode_base64_key(base64_key: &str) -> [u8; 32] {
|
|
general_purpose::STANDARD
|
|
.decode(base64_key)
|
|
.unwrap()
|
|
.try_into()
|
|
.unwrap()
|
|
}
|
|
|
|
pub fn server_static_private_key() -> x25519::StaticSecret {
|
|
// TODO: this is a temporary solution for development
|
|
let static_private_bytes: [u8; 32] = decode_base64_key(PRIVATE_KEY);
|
|
let static_private = x25519::StaticSecret::try_from(static_private_bytes).unwrap();
|
|
let static_public = x25519::PublicKey::from(&static_private);
|
|
info!(
|
|
"wg public key: {}",
|
|
general_purpose::STANDARD.encode(static_public)
|
|
);
|
|
static_private
|
|
}
|
|
|
|
pub fn peer_static_public_key() -> x25519::PublicKey {
|
|
// A single static public key is used during development
|
|
let peer_static_public_bytes: [u8; 32] = decode_base64_key(PEER);
|
|
let peer_static_public = x25519::PublicKey::try_from(peer_static_public_bytes).unwrap();
|
|
info!(
|
|
"Adding wg peer public key: {}",
|
|
general_purpose::STANDARD.encode(peer_static_public)
|
|
);
|
|
peer_static_public
|
|
}
|
|
|
|
pub fn peer_allowed_ips() -> ip_network::IpNetwork {
|
|
let key: IpAddr = ALLOWED_IPS.parse().unwrap();
|
|
let cidr = 0u8;
|
|
ip_network::IpNetwork::new_truncate(key, cidr).unwrap()
|
|
}
|