diff options
Diffstat (limited to 'internal/ipc/ipc.go')
| -rw-r--r-- | internal/ipc/ipc.go | 75 |
1 files changed, 68 insertions, 7 deletions
diff --git a/internal/ipc/ipc.go b/internal/ipc/ipc.go index d581313..68217c2 100644 --- a/internal/ipc/ipc.go +++ b/internal/ipc/ipc.go @@ -12,6 +12,7 @@ import ( "sync" "time" + "mitmux/internal/clientcert" "mitmux/internal/proxy" "mitmux/internal/rules" "mitmux/internal/scope" @@ -69,6 +70,13 @@ type Request struct { ScopeRule *scope.Rule `json:"scope_rule,omitempty"` ScopeRuleID int64 `json:"scope_rule_id,omitempty"` + // For "clientcert_add": the new certificate (always an add, same + // reasoning as scope rules above). For "clientcert_delete"/ + // "clientcert_toggle": ClientCertID (and RuleEnabled for toggle) + // identify the target. + ClientCert *clientcert.Cert `json:"client_cert,omitempty"` + ClientCertID int64 `json:"client_cert_id,omitempty"` + // For "set_flagged" and "delete_entry": ID identifies the history // entry. "clear_history" needs no fields at all. Flagged bool `json:"flagged,omitempty"` @@ -99,13 +107,14 @@ type ImportEntry struct { // Response is sent by the daemon to a client. type Response struct { - Type string `json:"type"` // "list", "get", "new", "repeat", "rules", "scope_rules", "intrude_result", "intrude_done", "import_done", "status", "flagged", "deleted", "cleared", or "error" - Entries []store.Summary `json:"entries,omitempty"` // for "list" - Detail *EntryDetail `json:"detail,omitempty"` // for "get" and "repeat" - New *store.Summary `json:"new,omitempty"` // for "new" (subscribe push) - Rules []rules.Rule `json:"rules,omitempty"` // for "rules" - ScopeRules []scope.Rule `json:"scope_rules,omitempty"` // for "scope_rules" - Status *StatusMsg `json:"status,omitempty"` // for "status" + Type string `json:"type"` // "list", "get", "new", "repeat", "rules", "scope_rules", "intrude_result", "intrude_done", "import_done", "status", "flagged", "deleted", "cleared", or "error" + Entries []store.Summary `json:"entries,omitempty"` // for "list" + Detail *EntryDetail `json:"detail,omitempty"` // for "get" and "repeat" + New *store.Summary `json:"new,omitempty"` // for "new" (subscribe push) + Rules []rules.Rule `json:"rules,omitempty"` // for "rules" + ScopeRules []scope.Rule `json:"scope_rules,omitempty"` // for "scope_rules" + ClientCerts []clientcert.Cert `json:"client_certs,omitempty"` // for "client_certs" + Status *StatusMsg `json:"status,omitempty"` // for "status" // For "import_done": how many entries were actually inserted (a // per-entry insert failure is skipped, not fatal to the batch). @@ -444,6 +453,58 @@ func (c *Client) scopeRoundTrip(req Request) ([]scope.Rule, error) { return resp.ScopeRules, nil } +// ListClientCerts returns every client certificate, enabled or not. +func (c *Client) ListClientCerts() ([]clientcert.Cert, error) { + c.mu.Lock() + defer c.mu.Unlock() + return c.clientCertRoundTrip(Request{Type: "clientcert_list"}) +} + +// AddClientCert adds cert and returns its assigned ID. +func (c *Client) AddClientCert(cert clientcert.Cert) (int64, error) { + c.mu.Lock() + defer c.mu.Unlock() + saved, err := c.clientCertRoundTrip(Request{Type: "clientcert_add", ClientCert: &cert}) + if err != nil { + return 0, err + } + if len(saved) == 0 { + return 0, errors.New("clientcert_add: daemon returned no certificate") + } + return saved[0].ID, nil +} + +// DeleteClientCert removes a client certificate. +func (c *Client) DeleteClientCert(id int64) error { + c.mu.Lock() + defer c.mu.Unlock() + _, err := c.clientCertRoundTrip(Request{Type: "clientcert_delete", ClientCertID: id}) + return err +} + +// SetClientCertEnabled toggles a client cert without touching its +// content. +func (c *Client) SetClientCertEnabled(id int64, enabled bool) error { + c.mu.Lock() + defer c.mu.Unlock() + _, err := c.clientCertRoundTrip(Request{Type: "clientcert_toggle", ClientCertID: id, RuleEnabled: enabled}) + return err +} + +func (c *Client) clientCertRoundTrip(req Request) ([]clientcert.Cert, error) { + if err := c.enc.Encode(req); err != nil { + return nil, err + } + var resp Response + if err := c.dec.Decode(&resp); err != nil { + return nil, err + } + if resp.Type == "error" { + return nil, errors.New(resp.Error) + } + return resp.ClientCerts, nil +} + // Subscribe opens a dedicated connection that streams newly captured // history entries as they happen. The returned channel is closed when // the connection ends; call the returned close func to stop early. |