geändert: README.md

neue Datei: client/client.py neue Datei: client/sec/client.crt.pem neue Datei: client/sec/client.csr.pem neue Datei: client/sec/client.key.pem neue Datei: container/Dockerfile neue Datei: container/requirements.txt neue Datei: lib/__pycache__/crypto_utils.cpython-313.pyc neue Datei: lib/__pycache__/jebp_utils.cpython-313.pyc neue Datei: lib/__pycache__/terminal_table.cpython-313.pyc neue Datei: lib/crypto_utils.py neue Datei: lib/jebp_utils.py neue Datei: lib/terminal_table.py neue Datei: server/clients_management/chclient.py neue Datei: server/clients_management/lsclients.py neue Datei: server/clients_management/mkclient.py neue Datei: server/clients_management/rmclient.py neue Datei: server/config/clients/fingerprints neue Datei: server/main.py neue Datei: server/sec/ca/certs/ca.cert.pem neue Datei: server/sec/ca/private/ca.key.pem neue Datei: server/sec/server.crt.pem neue Datei: server/sec/server.csr.pem neue Datei: server/sec/server.key.pem gelöscht: main.py gelöscht: sec/cert.pem gelöscht: sec/key.pem
2025-12-30 01:43:23 +01:00
parent f9e7d51015
commit 1ac4aefdc8
24 changed files with 676 additions and 1 deletions
@@ -0,0 +1,93 @@
+import sys
+import os
+sys.path.append(os.getcwd())
+import asyncio
+from lib.crypto_utils import (
+    generate_keypair,
+    serialize_public_key,
+    deserialize_public_key,
+    derive_aes_key,
+)
+from lib.jebp_utils import sendmsg, readmsg, MessageFormatError, InvalidCertificateError, validate_cert
+from cryptography.hazmat.primitives.ciphers.aead import AESGCM
+from cryptography.hazmat.backends import default_backend
+from cryptography import x509
+import base64
+import dbm
+
+HOST = "127.0.0.1"
+PORT = 8888
+KNOWN_PROTOCOLS = (b'jebp 1.0',)
+SERVER_CERT_FILE = 'server/sec/server.crt.pem'
+CLIENT_CERT_FILE = 'client/sec/client.crt.pem'
+REQUIRED_CERT_COMMON_NAME = 'jeb'
+REQUIRED_ISSUER_CERT_COMMON_NAME = 'jCloudCA-Root-CA'
+
+async def main():
+    reader, writer = await asyncio.open_connection(HOST, PORT)
+
+    try:
+        try:
+            assert await readmsg(reader) in KNOWN_PROTOCOLS
+        except AssertionError:
+            print('Unknown protocol')
+            writer.close()
+            await writer.wait_closed()
+            return
+        
+        # BEGIN ENCRYPTION HANDSHAKE
+
+        # 1. Client ECC keys
+        client_priv, client_pub = generate_keypair()
+
+        # 2. Send client public key
+        await sendmsg(serialize_public_key(client_pub), writer)
+
+        # 3. Receive server public key
+        server_pub_bytes = await readmsg(reader)
+        server_pub = deserialize_public_key(server_pub_bytes)
+
+        # 4. Derive shared AES key
+        aes_key = derive_aes_key(client_priv, server_pub)
+        aesgcm = AESGCM(aes_key)
+
+        client_nonce = os.urandom(12)
+        await sendmsg(client_nonce, writer)
+    
+        server_nonce = await readmsg(reader)
+
+        test_bytes = os.urandom(32)
+        await sendmsg(test_bytes, writer, aesgcm, client_nonce)
+        rec = await readmsg(reader)
+        if rec != test_bytes:
+            raise Exception('encryption handshake failed')
+        await sendmsg(b'', writer)
+
+
+        # BEGIN SERVER AUTHENTICATION HANDSHAKE
+
+        cert_data = await readmsg(reader, aesgcm, server_nonce)
+        cert = x509.load_der_x509_certificate(cert_data, default_backend())
+        if not validate_cert(cert, REQUIRED_CERT_COMMON_NAME, REQUIRED_ISSUER_CERT_COMMON_NAME):
+            raise InvalidCertificateError('certificate not trusted')
+        
+
+        # BEGIN CLIENT AUTHENTICATION HANDSHAKE
+
+        with open(CLIENT_CERT_FILE, 'rb') as certfile:
+            cert_data = certfile.read()
+            certfile.close()
+        await sendmsg(base64.b64decode(cert_data.replace(b'-----BEGIN CERTIFICATE-----', b'').replace(b'-----END CERTIFICATE-----', b'').strip()), writer, aesgcm, client_nonce)
+        
+
+    except MessageFormatError:
+        print('invalid message format')
+    except Exception as e:
+        print(f'{str(type(e))[8:-2]}: {e}')
+    finally:
+        writer.close()
+        await writer.wait_closed()
+        return
+
+
+asyncio.run(main())