|
|
@@ -1,311 +0,0 @@
|
|
|
-package protocol
|
|
|
-
|
|
|
-import (
|
|
|
- "io"
|
|
|
-
|
|
|
- "v2ray.com/core/common/buf"
|
|
|
- "v2ray.com/core/common/crypto"
|
|
|
- "v2ray.com/core/common/errors"
|
|
|
- "v2ray.com/core/common/log"
|
|
|
- v2net "v2ray.com/core/common/net"
|
|
|
- "v2ray.com/core/proxy"
|
|
|
-)
|
|
|
-
|
|
|
-const (
|
|
|
- socksVersion = byte(0x05)
|
|
|
- socks4Version = byte(0x04)
|
|
|
-
|
|
|
- AuthNotRequired = byte(0x00)
|
|
|
- AuthGssApi = byte(0x01)
|
|
|
- AuthUserPass = byte(0x02)
|
|
|
- AuthNoMatchingMethod = byte(0xFF)
|
|
|
-
|
|
|
- Socks4RequestGranted = byte(90)
|
|
|
- Socks4RequestRejected = byte(91)
|
|
|
-)
|
|
|
-
|
|
|
-// Authentication request header of Socks5 protocol
|
|
|
-type Socks5AuthenticationRequest struct {
|
|
|
- version byte
|
|
|
- nMethods byte
|
|
|
- authMethods [256]byte
|
|
|
-}
|
|
|
-
|
|
|
-func (request *Socks5AuthenticationRequest) HasAuthMethod(method byte) bool {
|
|
|
- for i := 0; i < int(request.nMethods); i++ {
|
|
|
- if request.authMethods[i] == method {
|
|
|
- return true
|
|
|
- }
|
|
|
- }
|
|
|
- return false
|
|
|
-}
|
|
|
-
|
|
|
-func ReadAuthentication(reader io.Reader) (auth Socks5AuthenticationRequest, auth4 Socks4AuthenticationRequest, err error) {
|
|
|
- buffer := make([]byte, 256)
|
|
|
-
|
|
|
- nBytes, err := reader.Read(buffer)
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- if nBytes < 2 {
|
|
|
- err = errors.New("Socks: Insufficient header.")
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- if buffer[0] == socks4Version {
|
|
|
- auth4.Version = buffer[0]
|
|
|
- auth4.Command = buffer[1]
|
|
|
- auth4.Port = v2net.PortFromBytes(buffer[2:4])
|
|
|
- copy(auth4.IP[:], buffer[4:8])
|
|
|
- err = Socks4Downgrade
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- auth.version = buffer[0]
|
|
|
- if auth.version != socksVersion {
|
|
|
- log.Warning("Socks: Unknown protocol version ", auth.version)
|
|
|
- err = proxy.ErrInvalidProtocolVersion
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- auth.nMethods = buffer[1]
|
|
|
- if auth.nMethods <= 0 {
|
|
|
- log.Warning("Socks: Zero length of authentication methods")
|
|
|
- err = crypto.ErrAuthenticationFailed
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- if nBytes-2 != int(auth.nMethods) {
|
|
|
- log.Warning("Socks: Unmatching number of auth methods, expecting ", auth.nMethods, ", but got ", nBytes)
|
|
|
- err = crypto.ErrAuthenticationFailed
|
|
|
- return
|
|
|
- }
|
|
|
- copy(auth.authMethods[:], buffer[2:nBytes])
|
|
|
- return
|
|
|
-}
|
|
|
-
|
|
|
-type Socks5AuthenticationResponse struct {
|
|
|
- version byte
|
|
|
- authMethod byte
|
|
|
-}
|
|
|
-
|
|
|
-func NewAuthenticationResponse(authMethod byte) *Socks5AuthenticationResponse {
|
|
|
- return &Socks5AuthenticationResponse{
|
|
|
- version: socksVersion,
|
|
|
- authMethod: authMethod,
|
|
|
- }
|
|
|
-}
|
|
|
-
|
|
|
-func WriteAuthentication(writer io.Writer, r *Socks5AuthenticationResponse) error {
|
|
|
- _, err := writer.Write([]byte{r.version, r.authMethod})
|
|
|
- return err
|
|
|
-}
|
|
|
-
|
|
|
-type Socks5UserPassRequest struct {
|
|
|
- version byte
|
|
|
- username string
|
|
|
- password string
|
|
|
-}
|
|
|
-
|
|
|
-func (request Socks5UserPassRequest) Username() string {
|
|
|
- return request.username
|
|
|
-}
|
|
|
-
|
|
|
-func (request Socks5UserPassRequest) Password() string {
|
|
|
- return request.password
|
|
|
-}
|
|
|
-
|
|
|
-func (request Socks5UserPassRequest) AuthDetail() string {
|
|
|
- return request.username + ":" + request.password
|
|
|
-}
|
|
|
-
|
|
|
-func ReadUserPassRequest(reader io.Reader) (request Socks5UserPassRequest, err error) {
|
|
|
- buffer := buf.NewLocal(512)
|
|
|
- defer buffer.Release()
|
|
|
-
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 2))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- request.version = buffer.Byte(0)
|
|
|
- nUsername := int(buffer.Byte(1))
|
|
|
-
|
|
|
- buffer.Clear()
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, nUsername))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- request.username = buffer.String()
|
|
|
-
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 1))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- nPassword := int(buffer.Byte(0))
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, nPassword))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- request.password = buffer.String()
|
|
|
- return
|
|
|
-}
|
|
|
-
|
|
|
-type Socks5UserPassResponse struct {
|
|
|
- version byte
|
|
|
- status byte
|
|
|
-}
|
|
|
-
|
|
|
-func NewSocks5UserPassResponse(status byte) Socks5UserPassResponse {
|
|
|
- return Socks5UserPassResponse{
|
|
|
- version: socksVersion,
|
|
|
- status: status,
|
|
|
- }
|
|
|
-}
|
|
|
-
|
|
|
-func WriteUserPassResponse(writer io.Writer, response Socks5UserPassResponse) error {
|
|
|
- _, err := writer.Write([]byte{response.version, response.status})
|
|
|
- return err
|
|
|
-}
|
|
|
-
|
|
|
-const (
|
|
|
- AddrTypeIPv4 = byte(0x01)
|
|
|
- AddrTypeIPv6 = byte(0x04)
|
|
|
- AddrTypeDomain = byte(0x03)
|
|
|
-
|
|
|
- CmdConnect = byte(0x01)
|
|
|
- CmdBind = byte(0x02)
|
|
|
- CmdUdpAssociate = byte(0x03)
|
|
|
-)
|
|
|
-
|
|
|
-type Socks5Request struct {
|
|
|
- Version byte
|
|
|
- Command byte
|
|
|
- AddrType byte
|
|
|
- IPv4 [4]byte
|
|
|
- Domain string
|
|
|
- IPv6 [16]byte
|
|
|
- Port v2net.Port
|
|
|
-}
|
|
|
-
|
|
|
-func ReadRequest(reader io.Reader) (request *Socks5Request, err error) {
|
|
|
- buffer := buf.NewLocal(512)
|
|
|
- defer buffer.Release()
|
|
|
-
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 4))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- request = &Socks5Request{
|
|
|
- Version: buffer.Byte(0),
|
|
|
- Command: buffer.Byte(1),
|
|
|
- // buffer[2] is a reserved field
|
|
|
- AddrType: buffer.Byte(3),
|
|
|
- }
|
|
|
- switch request.AddrType {
|
|
|
- case AddrTypeIPv4:
|
|
|
- _, err = io.ReadFull(reader, request.IPv4[:])
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- case AddrTypeDomain:
|
|
|
- buffer.Clear()
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 1))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- domainLength := int(buffer.Byte(0))
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, domainLength))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- request.Domain = string(buffer.BytesFrom(-domainLength))
|
|
|
- case AddrTypeIPv6:
|
|
|
- _, err = io.ReadFull(reader, request.IPv6[:])
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
- default:
|
|
|
- err = errors.Format("Socks: Unexpected address type %d", request.AddrType)
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- err = buffer.AppendSupplier(buf.ReadFullFrom(reader, 2))
|
|
|
- if err != nil {
|
|
|
- return
|
|
|
- }
|
|
|
-
|
|
|
- request.Port = v2net.PortFromBytes(buffer.BytesFrom(-2))
|
|
|
- return
|
|
|
-}
|
|
|
-
|
|
|
-func (request *Socks5Request) Destination() v2net.Destination {
|
|
|
- switch request.AddrType {
|
|
|
- case AddrTypeIPv4:
|
|
|
- return v2net.TCPDestination(v2net.IPAddress(request.IPv4[:]), request.Port)
|
|
|
- case AddrTypeIPv6:
|
|
|
- return v2net.TCPDestination(v2net.IPAddress(request.IPv6[:]), request.Port)
|
|
|
- case AddrTypeDomain:
|
|
|
- return v2net.TCPDestination(v2net.ParseAddress(request.Domain), request.Port)
|
|
|
- default:
|
|
|
- panic("Unknown address type")
|
|
|
- }
|
|
|
-}
|
|
|
-
|
|
|
-const (
|
|
|
- ErrorSuccess = byte(0x00)
|
|
|
- ErrorGeneralFailure = byte(0x01)
|
|
|
- ErrorConnectionNotAllowed = byte(0x02)
|
|
|
- ErrorNetworkUnreachable = byte(0x03)
|
|
|
- ErrorHostUnUnreachable = byte(0x04)
|
|
|
- ErrorConnectionRefused = byte(0x05)
|
|
|
- ErrorTTLExpired = byte(0x06)
|
|
|
- ErrorCommandNotSupported = byte(0x07)
|
|
|
- ErrorAddressTypeNotSupported = byte(0x08)
|
|
|
-)
|
|
|
-
|
|
|
-type Socks5Response struct {
|
|
|
- Version byte
|
|
|
- Error byte
|
|
|
- AddrType byte
|
|
|
- IPv4 [4]byte
|
|
|
- Domain string
|
|
|
- IPv6 [16]byte
|
|
|
- Port v2net.Port
|
|
|
-}
|
|
|
-
|
|
|
-func NewSocks5Response() *Socks5Response {
|
|
|
- return &Socks5Response{
|
|
|
- Version: socksVersion,
|
|
|
- }
|
|
|
-}
|
|
|
-
|
|
|
-func (r *Socks5Response) SetIPv4(ipv4 []byte) {
|
|
|
- r.AddrType = AddrTypeIPv4
|
|
|
- copy(r.IPv4[:], ipv4)
|
|
|
-}
|
|
|
-
|
|
|
-func (r *Socks5Response) SetIPv6(ipv6 []byte) {
|
|
|
- r.AddrType = AddrTypeIPv6
|
|
|
- copy(r.IPv6[:], ipv6)
|
|
|
-}
|
|
|
-
|
|
|
-func (r *Socks5Response) SetDomain(domain string) {
|
|
|
- r.AddrType = AddrTypeDomain
|
|
|
- r.Domain = domain
|
|
|
-}
|
|
|
-
|
|
|
-func (r *Socks5Response) Write(writer io.Writer) {
|
|
|
- writer.Write([]byte{r.Version, r.Error, 0x00 /* reserved */, r.AddrType})
|
|
|
- switch r.AddrType {
|
|
|
- case 0x01:
|
|
|
- writer.Write(r.IPv4[:])
|
|
|
- case 0x03:
|
|
|
- writer.Write([]byte{byte(len(r.Domain))})
|
|
|
- writer.Write([]byte(r.Domain))
|
|
|
- case 0x04:
|
|
|
- writer.Write(r.IPv6[:])
|
|
|
- }
|
|
|
- writer.Write(r.Port.Bytes(nil))
|
|
|
-}
|