111 lines
3.7 KiB
Python
111 lines
3.7 KiB
Python
import io, socket, subprocess, shelve, time
|
|
from requests import post, get
|
|
from flask import request, Flask
|
|
#hostapd system
|
|
|
|
#http://192.168.43.155:5000/setup?ssid=cimaphone&password=cimakodu30&id=1
|
|
|
|
mac = io.open("/sys/class/net/wlan0/address").read()
|
|
|
|
app = Flask(__name__)
|
|
|
|
def writeconfig(ssid, password):
|
|
rtline = "\n"
|
|
with io.open("/etc/wpa_supplicant/wpa_supplicant.conf", "w", encoding="utf8") as note:
|
|
conf = str()
|
|
for i in ["ctrl_interface=/var/run/wpa_supplicant\nupdate_config=1\ncountry=FR\nnetwork={\nssid=\"", ssid, "\"\nscan_ssid=1\npsk=\"", password, "\"\n}"]:
|
|
conf += i
|
|
note.write(conf)
|
|
subprocess.check_call(["sudo", "wpa_cli", "-i", "wlan0", "reconfigure"])
|
|
|
|
def testinternet():
|
|
result = True
|
|
try:
|
|
socket.gethostbyname("www.google.com")
|
|
except:
|
|
result = False
|
|
return result
|
|
|
|
@app.route("/setup")
|
|
def web_setup():
|
|
if not (request.args.get("ssid") and request.args.get("password") and request.args.get("id")):
|
|
return "Error"
|
|
else:
|
|
writeconfig(request.args.get("ssid"), request.args.get("password"))
|
|
time.sleep(10)
|
|
if testinternet():
|
|
id = request.args.get("id")
|
|
with shelve.open("Settings.conf") as settings:
|
|
settings["token"] = id
|
|
r = get(f"http://vps.flifloo.fr:5000/locksetup?mac={mac}&id={id}")
|
|
else:
|
|
return "Cant connect"
|
|
return "Done"
|
|
|
|
@app.route("/addyubi")
|
|
def add_yubi():
|
|
if str(subprocess.check_output(["sudo ykpersonalize; exit 0"], stderr=subprocess.STDOUT, shell=True)) == "b'Yubikey core error: no yubikey present\\n'":
|
|
return "No yubikey"
|
|
out = str(subprocess.check_output(["sudo", "yhsm-decrypt-aead", "--aes-key", "000102030405060708090a0b0c0d0e0f", "--key-handle", "1", "--format", "yubikey-csv", "/var/cache/yubikey-ksm/aeads/"]))
|
|
out = out[2:][:-1].split("\\n")
|
|
del out[-1]
|
|
dico = dict()
|
|
for i in out:
|
|
id = i.find(",")
|
|
publicid = i.find(",", id+1)
|
|
privateid = i.find(",", publicid+1)
|
|
secretkey = i.find(",", privateid+1)
|
|
dico[int(i[:id])] = {"publicid": i[id+1:publicid], "privateid": i[publicid+1:privateid], "secretkey": i[privateid+1:secretkey]}
|
|
|
|
out = str(subprocess.check_output(["sudo", "ykval-export-clients"]))
|
|
out = out[2:][:-1].split("\\n")
|
|
del out[-1]
|
|
reg = dict()
|
|
for i in out:
|
|
id = i.find(",")
|
|
storage = i.find(",", id)
|
|
wriedid = i.find(",", storage)
|
|
secret = i.find(",", wriedid)
|
|
reg[int(i[:id])] = i[wriedid+1:secret]
|
|
|
|
with shelve.open("Settings.conf", writeback = True) as settings:
|
|
id = None
|
|
for i in range(1, 10):
|
|
if i not in settings["register"]:
|
|
id = i
|
|
break
|
|
if id == None:
|
|
return "Too many yubikeys"
|
|
|
|
settings["register"].append(id)
|
|
|
|
settings["keys"][id] = reg[id]
|
|
|
|
|
|
if id > list(dico.keys())[-1]:
|
|
return "Error, too many yubikeys"
|
|
|
|
subprocess.check_call(["ykpersonalize", "-1", f"-ofixed={dico[id]['publicid']}", f"-ouid={dico[id]['privateid']}", f"-a{dico[id]['secretkey']}", "-y"])
|
|
get(f"http://vps.flifloo.fr:5001/logs?mac={mac}&id={str(id)}")
|
|
return "Ok"
|
|
|
|
@app.route("/delyubi")
|
|
def del_yubi():
|
|
if not request.args.get("id"):
|
|
return "Error"
|
|
|
|
try:
|
|
id = int(request.args.get("id"))
|
|
except:
|
|
return "Error"
|
|
|
|
with shelve.open("Settings.conf", writeback = True) as settings:
|
|
if id not in settings["register"]:
|
|
return "Error"
|
|
else:
|
|
del settings["register"][settings["register"].index(id)]
|
|
return "Ok"
|
|
|
|
if __name__ == "__main__":
|
|
app.run(debug=True, port=6000, host="0.0.0.0")
|