From 552c32c5e9378b85e52c420c4dd2d7ccc827556f Mon Sep 17 00:00:00 2001 From: Jakob Unterwurzacher Date: Mon, 5 Oct 2015 20:32:10 +0200 Subject: Move main binary to gocryptfs_main That way the wrapper shell script can be named just "gocryptfs" --- gocryptfs_main/main.go | 222 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 222 insertions(+) create mode 100644 gocryptfs_main/main.go (limited to 'gocryptfs_main/main.go') diff --git a/gocryptfs_main/main.go b/gocryptfs_main/main.go new file mode 100644 index 0000000..ae3974e --- /dev/null +++ b/gocryptfs_main/main.go @@ -0,0 +1,222 @@ +package main + +import ( + "encoding/hex" + "flag" + "fmt" + "io/ioutil" + "os" + "path/filepath" + "runtime" + "runtime/pprof" + "time" + + "github.com/rfjakob/gocryptfs/cryptfs" + "github.com/rfjakob/gocryptfs/pathfs_frontend" + + "golang.org/x/crypto/ssh/terminal" + + "github.com/hanwen/go-fuse/fuse" + "github.com/hanwen/go-fuse/fuse/nodefs" + "github.com/hanwen/go-fuse/fuse/pathfs" +) + +const ( + USE_CLUEFS = false // Use cluefs or pathfs FUSE frontend + USE_OPENSSL = true // 3x speed increase compared to Go's built-in GCM + PATHFS_DEBUG = false + + PROGRAM_NAME = "gocryptfs" + + // Exit codes + ERREXIT_USAGE = 1 + ERREXIT_NEWFS = 2 + ERREXIT_MOUNT = 3 + ERREXIT_SERVE = 4 + ERREXIT_MOUNT2 = 5 + ERREXIT_CIPHERDIR = 6 + ERREXIT_INIT = 7 + ERREXIT_LOADCONF = 8 + ERREXIT_PASSWORD = 9 +) + +func initDir(dirArg string) { + dir, _ := filepath.Abs(dirArg) + + if dirEmpty(dir) == false { + fmt.Printf("Error: Directory \"%s\" is not empty\n", dirArg) + os.Exit(ERREXIT_INIT) + } + + confName := filepath.Join(dir, cryptfs.ConfDefaultName) + fmt.Printf("Choose a password for protecting your files.\n") + password := readPasswordTwice() + err := cryptfs.CreateConfFile(confName, password) + if err != nil { + fmt.Println(err) + os.Exit(ERREXIT_INIT) + } + fmt.Printf("The filesystem is now ready for mounting.\n") + os.Exit(0) +} + +func main() { + runtime.GOMAXPROCS(4) + + // Parse command line arguments + var debug, init, zerokey, fusedebug bool + + flag.BoolVar(&debug, "debug", false, "Enable debug output") + flag.BoolVar(&fusedebug, "fusedebug", false, "Enable fuse library debug output") + flag.BoolVar(&init, "init", false, "Initialize encrypted directory") + flag.BoolVar(&zerokey, "zerokey", false, "Use all-zero dummy master key") + var cpuprofile = flag.String("cpuprofile", "", "write cpu profile to file") + + flag.Parse() + if *cpuprofile != "" { + f, err := os.Create(*cpuprofile) + if err != nil { + fmt.Println(err) + os.Exit(ERREXIT_INIT) + } + fmt.Printf("Writing CPU profile to %s\n", *cpuprofile) + pprof.StartCPUProfile(f) + defer pprof.StopCPUProfile() + } + if debug { + cryptfs.Debug.Enable() + cryptfs.Debug.Printf("Debug output enabled\n") + } + if init { + if flag.NArg() != 1 { + fmt.Printf("usage: %s --init CIPHERDIR\n", PROGRAM_NAME) + os.Exit(ERREXIT_USAGE) + } + initDir(flag.Arg(0)) + } + if flag.NArg() < 2 { + fmt.Printf("usage: %s [OPTIONS] CIPHERDIR MOUNTPOINT\n", PROGRAM_NAME) + os.Exit(ERREXIT_USAGE) + } + cipherdir, _ := filepath.Abs(flag.Arg(0)) + mountpoint, _ := filepath.Abs(flag.Arg(1)) + cryptfs.Debug.Printf("cipherdir=%s\nmountpoint=%s\n", cipherdir, mountpoint) + + _, err := os.Stat(cipherdir) + if err != nil { + fmt.Printf("Cipherdir: %s\n", err.Error()) + os.Exit(ERREXIT_CIPHERDIR) + } + + key := make([]byte, cryptfs.KEY_LEN) + if zerokey { + fmt.Printf("Zerokey mode active: using all-zero dummy master key.\n") + fmt.Printf("ZEROKEY MODE PROVIDES NO SECURITY AT ALL AND SHOULD ONLY BE USED FOR TESTING.\n") + } else { + cfname := filepath.Join(cipherdir, cryptfs.ConfDefaultName) + _, err = os.Stat(cfname) + if err != nil { + fmt.Printf("Error: %s not found in CIPHERDIR\n", cryptfs.ConfDefaultName) + fmt.Printf("Please run \"%s --init %s\" first\n", PROGRAM_NAME, flag.Arg(0)) + os.Exit(ERREXIT_LOADCONF) + } + fmt.Printf("Password: ") + password := readPassword() + fmt.Printf("\nDecrypting master key... ") + key, err = cryptfs.LoadConfFile(cfname, password) + if err != nil { + fmt.Println(err) + os.Exit(ERREXIT_LOADCONF) + } + fmt.Printf("Success\n") + printMasterKey(key) + } + + pathfsFrontend(key, cipherdir, mountpoint, fusedebug) +} + +// printMasterKey - remind the user that he should store the master key in +// a safe place +func printMasterKey(key []byte) { + h := hex.EncodeToString(key) + // Make it less scary by splitting it up in chunks + h = h[0:8] + "-" + h[8:16] + "-" + h[16:24] + "-" + h[24:32] + + fmt.Printf(` +WARNING: + If the gocryptfs config file becomes corrupted or you ever + forget your password, there is only one hope for recovery: + The master key. Print it to a piece of paper and store it in a drawer. + + Master key: %s + +`, h) +} + +func readPasswordTwice() string { + fmt.Printf("Password: ") + p1 := readPassword() + fmt.Printf("\nRepeat: ") + p2 := readPassword() + fmt.Printf("\n") + if p1 != p2 { + fmt.Printf("Passwords do not match\n") + os.Exit(ERREXIT_PASSWORD) + } + return p1 +} + +// Get password from terminal +func readPassword() string { + fd := int(os.Stdin.Fd()) + p, err := terminal.ReadPassword(fd) + if err != nil { + fmt.Printf("Error: Could not read password: %s\n") + os.Exit(ERREXIT_PASSWORD) + } + return string(p) +} + +func dirEmpty(dir string) bool { + entries, err := ioutil.ReadDir(dir) + if err != nil { + fmt.Println(err) + os.Exit(ERREXIT_CIPHERDIR) + } + if len(entries) == 0 { + return true + } + return false +} + +func pathfsFrontend(key []byte, cipherdir string, mountpoint string, debug bool) { + + finalFs := pathfs_frontend.NewFS(key, cipherdir, USE_OPENSSL) + pathFsOpts := &pathfs.PathNodeFsOptions{ClientInodes: true} + pathFs := pathfs.NewPathNodeFs(finalFs, pathFsOpts) + fuseOpts := &nodefs.Options{ + // These options are to be compatible with libfuse defaults, + // making benchmarking easier. + NegativeTimeout: time.Second, + AttrTimeout: time.Second, + EntryTimeout: time.Second, + } + conn := nodefs.NewFileSystemConnector(pathFs.Root(), fuseOpts) + var mOpts fuse.MountOptions + mOpts.AllowOther = false + // Set values shown in "df -T" and friends + // First column, "Filesystem" + mOpts.Options = append(mOpts.Options, "fsname="+cipherdir) + // Second column, "Type", will be shown as "fuse." + Name + mOpts.Name = "gocryptfs" + + state, err := fuse.NewServer(conn.RawFS(), mountpoint, &mOpts) + if err != nil { + fmt.Printf("Mount fail: %v\n", err) + os.Exit(1) + } + state.SetDebug(debug) + + fmt.Println("Mounted.") + state.Serve() +} -- cgit v1.2.3