2 GoVPN -- simple secure free software virtual private network daemon
3 Copyright (C) 2014-2018 Sergey Matveev <stargrave@stargrave.org>
5 This program is free software: you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published by
7 the Free Software Foundation, either version 3 of the License, or
8 (at your option) any later version.
10 This program is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 GNU General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with this program. If not, see <http://www.gnu.org/licenses/>.
19 // Simple secure, DPI/censorship-resistant free software VPN daemon client.
30 "cypherpunks.ru/govpn"
31 "cypherpunks.ru/govpn/client"
36 remoteAddr = flag.String("remote", "", "Remote server address")
37 proto = flag.String("proto", "udp", "Protocol to use: udp or tcp")
38 ifaceName = flag.String("iface", "tap0", "TUN/TAP network interface")
39 verifierRaw = flag.String("verifier", "", "Verifier")
40 keyPath = flag.String("key", "", "Path to passphrase file")
41 upPath = flag.String("up", "", "Path to up-script")
42 downPath = flag.String("down", "", "Path to down-script")
43 stats = flag.String("stats", "", "Enable stats retrieving on host:port")
44 proxyAddr = flag.String("proxy", "", "Use HTTP proxy on host:port")
45 proxyAuth = flag.String("proxy-auth", "", "user:password Basic proxy auth")
46 mtu = flag.Int("mtu", govpn.MTUDefault, "MTU of TUN/TAP interface")
47 timeoutP = flag.Int("timeout", 60, "Timeout seconds")
48 timeSync = flag.Int("timesync", 0, "Time synchronization requirement")
49 noreconnect = flag.Bool("noreconnect", false, "Disable reconnection after timeout")
50 noisy = flag.Bool("noise", false, "Enable noise appending")
51 encless = flag.Bool("encless", false, "Encryptionless mode")
52 cpr = flag.Int("cpr", 0, "Enable constant KiB/sec out traffic rate")
53 egdPath = flag.String("egd", "", "Optional path to EGD socket")
54 syslog = flag.Bool("syslog", false, "Enable logging to syslog")
55 version = flag.Bool("version", false, "Print version information")
56 warranty = flag.Bool("warranty", false, "Print warranty information")
57 protocol client.Protocol
63 fmt.Println(govpn.Warranty)
67 fmt.Println(govpn.VersionGet())
70 log.SetFlags(log.Ldate | log.Lmicroseconds | log.Lshortfile)
73 log.Println("Using", *egdPath, "EGD")
74 govpn.EGDInit(*egdPath)
79 protocol = client.ProtocolUDP
81 protocol = client.ProtocolTCP
83 log.Fatalln("Unknown protocol specified")
86 if *proxyAddr != "" && protocol == client.ProtocolUDP {
87 log.Fatalln("HTTP proxy is supported only in TCP mode")
90 if *verifierRaw == "" {
91 log.Fatalln("-verifier is required")
93 verifier, err := govpn.VerifierFromString(*verifierRaw)
95 log.Fatalln("Invalid -verifier:", err)
97 key, err := govpn.KeyRead(*keyPath)
99 log.Fatalln("Invalid -key:", err)
101 priv := verifier.PasswordApply(key)
103 if protocol != client.ProtocolTCP {
104 log.Fatalln("Currently encryptionless mode works only with TCP")
108 conf := client.Configuration{
110 Peer: &govpn.PeerConf{
114 Timeout: time.Second * time.Duration(*timeoutP),
123 InterfaceName: *ifaceName,
124 ProxyAddress: *proxyAddr,
125 ProxyAuthentication: *proxyAuth,
126 RemoteAddress: *remoteAddr,
129 StatsAddress: *stats,
130 NoReconnect: *noreconnect,
133 if err = conf.Validate(); err != nil {
134 log.Fatalln("Invalid settings:", err)
137 log.Println(govpn.VersionGet())
143 termSignal := make(chan os.Signal, 1)
144 signal.Notify(termSignal, os.Interrupt, os.Kill)
145 c := client.NewClient(conf, verifier, termSignal)
147 if err = <-c.Error; err != nil {