Airat Arifullin
4cb9488a4a
Some checks failed
ci/woodpecker/pr/pre-commit Pipeline was successful
Build / Build Components (1.19) (pull_request) Successful in 2m45s
Build / Build Components (1.20) (pull_request) Successful in 8m1s
Tests and linters / Tests (1.19) (pull_request) Failing after 3m0s
Tests and linters / Tests (1.20) (pull_request) Failing after 3m20s
Tests and linters / Lint (pull_request) Failing after 9m45s
Tests and linters / Tests with -race (pull_request) Failing after 4m38s
Tests and linters / Staticcheck (pull_request) Failing after 9m4s
Signed-off-by: Airat Arifullin a.arifullin@yadro.com
59 lines
2.1 KiB
Go
59 lines
2.1 KiB
Go
package control
|
|
|
|
import (
|
|
"crypto/ecdsa"
|
|
"errors"
|
|
|
|
refsapi "git.frostfs.info/TrueCloudLab/frostfs-api-go/v2/refs/grpc"
|
|
internalclient "git.frostfs.info/TrueCloudLab/frostfs-node/cmd/frostfs-cli/internal/client"
|
|
"git.frostfs.info/TrueCloudLab/frostfs-node/cmd/frostfs-cli/internal/commonflags"
|
|
commonCmd "git.frostfs.info/TrueCloudLab/frostfs-node/cmd/internal/common"
|
|
controlSvc "git.frostfs.info/TrueCloudLab/frostfs-node/pkg/services/control/server"
|
|
"git.frostfs.info/TrueCloudLab/frostfs-sdk-go/client"
|
|
frostfscrypto "git.frostfs.info/TrueCloudLab/frostfs-sdk-go/crypto"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
func initControlFlags(cmd *cobra.Command) {
|
|
ff := cmd.Flags()
|
|
ff.StringP(commonflags.WalletPath, commonflags.WalletPathShorthand, commonflags.WalletPathDefault, commonflags.WalletPathUsage)
|
|
ff.StringP(commonflags.Account, commonflags.AccountShorthand, commonflags.AccountDefault, commonflags.AccountUsage)
|
|
ff.String(controlRPC, controlRPCDefault, controlRPCUsage)
|
|
ff.DurationP(commonflags.Timeout, commonflags.TimeoutShorthand, commonflags.TimeoutDefault, commonflags.TimeoutUsage)
|
|
}
|
|
|
|
func signRequest(cmd *cobra.Command, pk *ecdsa.PrivateKey, req controlSvc.SignedMessage) {
|
|
err := controlSvc.SignMessage(pk, req)
|
|
commonCmd.ExitOnErr(cmd, "could not sign request: %w", err)
|
|
}
|
|
|
|
func verifyResponse(cmd *cobra.Command,
|
|
sigControl interface {
|
|
GetKey() []byte
|
|
GetSign() []byte
|
|
},
|
|
body interface {
|
|
StableMarshal([]byte) []byte
|
|
},
|
|
) {
|
|
if sigControl == nil {
|
|
commonCmd.ExitOnErr(cmd, "", errors.New("missing response signature"))
|
|
}
|
|
|
|
// TODO(@cthulhu-rider): #1387 use Signature message from NeoFS API to avoid conversion
|
|
var sigV2 refsapi.Signature
|
|
sigV2.SetScheme(refsapi.SignatureScheme_ECDSA_SHA512)
|
|
sigV2.SetKey(sigControl.GetKey())
|
|
sigV2.SetSign(sigControl.GetSign())
|
|
|
|
sig := frostfscrypto.NewSignature()
|
|
commonCmd.ExitOnErr(cmd, "can't read signature: %w", sig.ReadFromV2(&sigV2))
|
|
|
|
if !sig.Verify(body.StableMarshal(nil)) {
|
|
commonCmd.ExitOnErr(cmd, "", errors.New("invalid response signature"))
|
|
}
|
|
}
|
|
|
|
func getClient(cmd *cobra.Command, pk *ecdsa.PrivateKey) *client.Client {
|
|
return internalclient.GetSDKClientByFlag(cmd, pk, controlRPC)
|
|
}
|