Working example

This commit is contained in:
2025-08-15 11:58:16 +02:00
parent 95b20dae76
commit fa985a69c5
8 changed files with 1229 additions and 144 deletions
Generated
+1139 -48
View File
File diff suppressed because it is too large Load Diff
+2 -1
View File
@@ -7,6 +7,7 @@ edition = "2024"
name = "ghostnet-rs"
[dependencies]
rcgen = "0.14.3"
reqwest = { version = "0.12.23", features = ["blocking"] }
rustls = "0.23.31"
rustls-native-certs = "0.8.1"
rustls-pki-types = "1.12.0"
+7 -1
View File
@@ -24,4 +24,10 @@ A router manages the clients and routes messages from one client to another to e
## Todo
- End-To-End Encryption
- Mask the communications like **HTTPS**
- Mask the communications like **HTTPS**
## Common install issues on linux
```bash
sudo apt install pkg-config -y
sudo apt install libssl-dev -y
```
-24
View File
@@ -1,24 +0,0 @@
-----BEGIN CERTIFICATE-----
MIIEETCCAvmgAwIBAgIUWwIPF1mmJWJhEqSg6mKOUPHnHIQwDQYJKoZIhvcNAQEL
BQAwgZcxCzAJBgNVBAYTAkFMMQ8wDQYDVQQIDAZUaXJhbmExDzANBgNVBAcMBlRp
cmFuYTENMAsGA1UECgwET3J1czERMA8GA1UECwwIZ2hvc3RuZXQxGzAZBgNVBAMM
Ekdob3N0TmV0IEdhdGV3YXkgMTEnMCUGCSqGSIb3DQEJARYYa2xlc3Quc2VsaW1h
eUBpY2xvdWQuY29tMB4XDTI1MDgxNDE5MDg0MVoXDTI2MDgxNDE5MDg0MVowgZcx
CzAJBgNVBAYTAkFMMQ8wDQYDVQQIDAZUaXJhbmExDzANBgNVBAcMBlRpcmFuYTEN
MAsGA1UECgwET3J1czERMA8GA1UECwwIZ2hvc3RuZXQxGzAZBgNVBAMMEkdob3N0
TmV0IEdhdGV3YXkgMTEnMCUGCSqGSIb3DQEJARYYa2xlc3Quc2VsaW1heUBpY2xv
dWQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq8OgFXwW9Jz
TRA9D/NKohcYh7RINljUamp9n95kNkCsq+SDJTw9PIO7wAD7feKQwXxeHV3bcE9F
TMt2fXY20pWDkypEVFJVq4SLU25uQ6ufbjJJ9f/YEkV2dwAOdLz9j9QSkS3tEzCr
b4XAT/5Wh2AU8vbwA6MR/zQxq6qoa9UMuyLvMgJxwpx2SI7Nupfb4J2QJzVV0wKh
aXwBDBmHrd2q4Yr78mdAx/ILQKehFGsrYG4w9op9jYGid3Gh8D3dpzBS+T3PKxGk
b5NPQN2TYMFY5wcLs8f01WWVKSE4G/GgF1XKlPyu93uKZS/coJKHCu8r6ZdriuST
UyyqrxtBYwIDAQABo1MwUTAdBgNVHQ4EFgQU/hD7pMQLE9fDB1zhRfoJ1b7NfcIw
HwYDVR0jBBgwFoAU/hD7pMQLE9fDB1zhRfoJ1b7NfcIwDwYDVR0TAQH/BAUwAwEB
/zANBgkqhkiG9w0BAQsFAAOCAQEAse9YdXfbGkD/jbegh6D+I1zymm7OMZJ8OXiQ
v0Aj8tvrHxK6vlxu/niTXaTRLNt0RAlft+fsF2dm1Nv629n/iPkoNTIA1TAXE5qY
jQTcJwWRxBB1ueqbltAuft2hcsULgXnNM7Dq9I+rq4ekT0DSIkjK6ku58F0QiL3a
wC8i4ISO4y2agKixPgtigKIBs7wpanSos8COvQPZYQXQgrJvGJmgqubEXcbO4Fiv
Dh/8xAW/MkiqltfvRj3IUtwZ3ZHLnFrkvxorikH1uSvo721bDobLTM+Cv5q+sSY1
4/FO+Twcs1zQeU+DOjZKfa9qf0Lc1kJ6lv7WFQ1KIslWQbNkbA==
-----END CERTIFICATE-----
-28
View File
@@ -1,28 +0,0 @@
-----BEGIN PRIVATE KEY-----
MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQC6rw6AVfBb0nNN
ED0P80qiFxiHtEg2WNRqan2f3mQ2QKyr5IMlPD08g7vAAPt94pDBfF4dXdtwT0VM
y3Z9djbSlYOTKkRUUlWrhItTbm5Dq59uMkn1/9gSRXZ3AA50vP2P1BKRLe0TMKtv
hcBP/laHYBTy9vADoxH/NDGrqqhr1Qy7Iu8yAnHCnHZIjs26l9vgnZAnNVXTAqFp
fAEMGYet3arhivvyZ0DH8gtAp6EUaytgbjD2in2NgaJ3caHwPd2nMFL5Pc8rEaRv
k09A3ZNgwVjnBwuzx/TVZZUpITgb8aAXVcqU/K73e4plL9ygkocK7yvpl2uK5JNT
LKqvG0FjAgMBAAECggEAVpowFXwImWgrIfRnB1e7Zy9kq0uIdmHGBKnrJjdScNKW
59UFu8fStph8CCnMgU0SDxhFRsVML7Euel4m1TP6Yb2HgMVKVn2tjXha8/TWRSFA
QCwnIG40C+Haf4Dws9oanNbqWBwgj1b0KLO5D8Ly3DFH9qB0npNPHX9WjYcJQ6AS
Y1t41W2DBXNZLk173aO1G98UzqjNvwG05x/UeJxJ8cMVPE9O8hcVcT0QBwd8RK6A
vtf3BrIeS21fOGKYTqCKi0mQatUWHaeyvj09RBt9H7lsPWDzHL2blhpBZQpOn2g1
VOrVsCem7IpZLBLv8ItR6FXfPGTBXEv9CP/7RIVXAQKBgQDoo+HCNEvp/nM2wBmW
b+FSs2t4ScBPHf+yQhSkzF5Cnd4LSd7cRhYGB24JFk8AtX9I84MCPhbvHudgxIfF
nqdfDh6MsDC1FavDNkuP6j9z3VXp4y0pbAux1xg0Nb9yKT20qMZM28QhKqh2wBNo
tqIOUV8rARaiYI1u2RmdMnAbAQKBgQDNbdi3IdM00DqFfPVfWLHFpHoV9tkJHezi
4OKvI7TU+ojosu2+4tn9Drpm2M2mbYY1kK/FAGTLqh3Du3qEPnu8xWbW6pu/WAAY
ZyRTvokP1CH0JIIEfH/uZ6WBmA2ReYsuELoRWW+7W1l1rf5jRWlnuzO+yhBEP+Ou
AbayJ9DQYwKBgEepk/Wa3neqJhuLeVZaCHLNSiG3tkGo4ActS+an/bFPqAKaMshv
3oDk8QRjltqFDjyOpqCeN7pZLrUkVR6PDMe/NbHo5Fgj4NE1fHlMk1dBqyFtFZBY
9BFITPBoTh0Ajz2Db/JlEDmXRmWuLUxoVetLLaG1qB9E1sx6m+VMkDQBAoGAB0QR
XDjYDZAn4bzPuPWcJA9zOf+nIYlrbYLiwasTpEzQNtrNSekgKLEyqpyUeYR6ML7T
WLZw2jtEHj4tUSwcmEqrHoLhy1zDdBmB0Wx10JeCM+5uotX8eGQ2GGVWZYTVBWYW
DrMJHqlWerESxFQaLE8Uv3TKKn/P/8GTwq1h110CgYB/u9aKYtsR85hITdqWRq2f
fCON+9WrOfAbt/H50qEBk2xVKKSPVDrTekqMPAuTagdA5+Y/pRA9zyy6wmfDfnC6
IyxVnhWRlLnByiHcs58N7vytTWmiKHQDrXAiWyxUy0ao/2Jyb/gLkj1avIfok0r/
5DMLZeOcLmweCkEEwXAG5w==
-----END PRIVATE KEY-----
+1 -1
View File
@@ -2,6 +2,6 @@ fn main() {
ghostnet_rs::server::run().unwrap();
// println!(
// "Result: {}",
// ghostnet_rs::request("localhost", "github.com")
// ghostnet_rs::request("0.0.0.0:3000", "github.com")
// );
}
+80 -40
View File
@@ -1,38 +1,23 @@
use std::error::Error as StdError;
use std::io::{Read, Write};
use std::net::TcpListener;
use std::sync::Arc;
use std::str::FromStr;
use rustls::Stream;
use rustls::pki_types::pem::PemObject;
use rustls::pki_types::{CertificateDer, PrivateKeyDer};
use reqwest::Version;
use reqwest::blocking::Client;
use reqwest::header::{HeaderMap, HeaderName, HeaderValue};
pub fn run() -> Result<(), Box<dyn StdError>> {
let cert_file = "cert.pem";
let private_key_file = "key.pem";
let certs = CertificateDer::pem_file_iter(cert_file)
.unwrap()
.map(|cert| cert.unwrap())
.collect();
let private_key = PrivateKeyDer::from_pem_file(private_key_file).unwrap();
let config = Arc::new(
rustls::ServerConfig::builder()
.with_no_client_auth()
.with_single_cert(certs, private_key)?,
);
let listener = TcpListener::bind(format!("0.0.0.0:{}", 443)).unwrap();
pub fn run() -> reqwest::Result<()> {
let listener = TcpListener::bind(format!(
"0.0.0.0:{}",
std::env::var("PORT").unwrap_or_else(|_| "3000".into())
))
.unwrap();
loop {
let (mut tcp_stream, _) = listener.accept()?;
let mut conn = rustls::ServerConnection::new(config.clone())?;
let mut tls_stream = rustls::Stream::new(&mut conn, &mut tcp_stream);
let (mut stream, _) = listener.accept().unwrap();
let mut buf = [0; 1024];
if let Ok(len) = tls_stream.read(&mut buf) {
if let Ok(len) = stream.read(&mut buf) {
let buf_str = String::from_utf8_lossy(&buf[..len]).to_string();
if buf_str.starts_with("ROUTE") {
let addr = buf_str
@@ -43,25 +28,80 @@ pub fn run() -> Result<(), Box<dyn StdError>> {
.unwrap()
.1;
let http = buf_str.split_once("\n").unwrap().1;
tls_stream
.write_all(&send_request(addr, http.as_bytes()))
stream
.write_all(send_request(addr, http)?.as_bytes())
.unwrap();
tls_stream.flush()?;
stream.flush().unwrap();
} else {
tls_stream
.write_all(&send_request("github.com", buf_str.as_bytes()))
stream
.write_all(send_request("https://wikipedia.org", "GET / HTTP/1.1")?.as_bytes())
.unwrap();
tls_stream.flush()?;
stream.flush().unwrap();
}
}
}
}
fn send_request(addr: &str, buf: &[u8]) -> Vec<u8> {
let (mut conn, mut tcp) = crate::tls::mask_tls(addr).unwrap();
let mut tls = Stream::new(&mut conn, &mut tcp);
tls.write_all(buf).unwrap();
let mut resp = Vec::new();
tls.read_to_end(&mut resp).unwrap();
resp
fn send_request(url: &str, request: &str) -> reqwest::Result<String> {
let client = Client::new();
let mut lines = request.lines();
let request_line = lines.next().unwrap();
let mut parts = request_line.split_whitespace();
let method = parts.next().unwrap_or("GET");
// Ignore version for now
let mut headers = Vec::new();
for line in lines.clone() {
if line.is_empty() {
break; // end of headers
}
if let Some((key, value)) = line.split_once(':') {
headers.push((
HeaderName::from_str(key.trim()).unwrap(),
HeaderValue::from_str(value.trim()).unwrap(),
));
// headers.insert(, );
}
}
let body: String = lines.collect::<Vec<_>>().join("\n");
let builder = match method {
"GET" => client.get(url),
"POST" => client.post(url).body(body.clone()),
"PUT" => client.put(url).body(body.clone()),
"DELETE" => client.delete(url),
_ => client.get(url),
}
.headers(HeaderMap::from_iter(headers.into_iter()));
let resp = builder.send()?;
let mut http_string = String::new();
http_string.push_str(&format!(
"HTTP/{} {} {}\r\n",
match resp.version() {
Version::HTTP_09 => "0.9",
Version::HTTP_10 => "1.0",
Version::HTTP_11 => "1.1",
Version::HTTP_2 => "2.0",
Version::HTTP_3 => "3.0",
_ => "2.0",
},
resp.status().as_u16(),
resp.status().canonical_reason().unwrap_or("")
));
for (key, value) in resp.headers().iter() {
http_string.push_str(&format!("{}: {}\r\n", key, value.to_str().unwrap()));
}
http_string.push_str("\r\n");
let body = resp.text()?;
http_string.push_str(&body);
Ok(http_string)
}
-1
View File
@@ -1,6 +1,5 @@
use rustls::ClientConfig;
use rustls::client::ClientConnection;
use rustls_native_certs;
use std::{net::TcpStream, sync::Arc};
pub fn mask_tls<'a>(