wait for cookie over side-channel

This commit is contained in:
Hackintosh Five 2023-08-07 13:41:07 +01:00
parent 0860e77625
commit 4dd812541f
2 changed files with 19 additions and 2 deletions

View File

@ -7,11 +7,12 @@ COPY src /app/src/src/
RUN mkdir -p /app/build && cd /app/build && cmake /app/src && make && mv tcpproxy ..
FROM debian:bookworm-slim
RUN apt-get update && apt-get install -y --no-install-recommends openconnect libevent-core-2.1-7 && rm -rf /var/cache/apt/archives /var/lib/apt/lists/*
RUN apt-get update && apt-get install -y --no-install-recommends openconnect libevent-core-2.1-7 netcat-traditional && rm -rf /var/cache/apt/archives /var/lib/apt/lists/*
COPY --from=builder /app/tcpproxy /app/
COPY --from=builder /app/src/NOTICE /app/
COPY --from=builder /app/src/lwip/COPYING /app/
COPY docker-entrypoint.sh /app/
EXPOSE 1234
EXPOSE 1235
USER nobody
ENTRYPOINT ["/app/docker-entrypoint.sh"]

View File

@ -1,2 +1,18 @@
#!/bin/bash
exec openconnect --script-tun --script "/app/tcpproxy -g -L 1234:$HOST" "$@"
action="$1"
shift
case "$action" in
"connect")
echo "Waiting for cookie on tcp:1235..."
cookie="$(netcat -l -p 1235)"
echo "Got cookie! Connecting..."
exec openconnect --script-tun --script "/app/tcpproxy -g -L 1234:$HOST" --non-inter --cookie="$cookie" --disable-ipv6 "$@"
;;
"authenticate")
exec openconnect --cookieonly "$@"
;;
*)
echo "Unknown action $action"
exit 1
;;
esac