-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.go
90 lines (80 loc) · 1.83 KB
/
main.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
//
// main.go
//
// Copyright (c) 2018 Markku Rossi
//
// All rights reserved.
//
package main
import (
"crypto/rsa"
"crypto/tls"
"crypto/x509"
"flag"
"fmt"
"io/ioutil"
"log"
"github.com/markkurossi/datalog"
"github.com/markkurossi/lgrep/server"
)
func main() {
verbose := flag.Bool("v", false, "Verbose output.")
init := flag.String("init", "", "Init file.")
wef := flag.String("wef", "", "Start Windows Event Forwarding server.")
flag.Parse()
server := server.New(datalog.NewMemDB())
server.Verbose(*verbose)
if len(*init) > 0 {
err := server.Eval(*init)
if err != nil {
log.Fatalf("Failed to read init file: %s\n", err)
}
}
if len(*wef) > 0 {
key, err := loadKey("wef")
if err != nil {
log.Fatalf("Failed to load private key: %s\n", err)
}
cert, certBytes, err := loadCert("wef")
if err != nil {
log.Fatalf("Failed to load certificate: %s\n", err)
}
config := &tls.Config{
Certificates: []tls.Certificate{
{
Certificate: [][]byte{
certBytes,
},
PrivateKey: key,
Leaf: cert,
},
},
VerifyPeerCertificate: func(rawCerts [][]byte, chains [][]*x509.Certificate) error {
fmt.Printf("chains: %v\n", chains)
return nil
},
InsecureSkipVerify: true,
}
config.BuildNameToCertificate()
go server.WEF.ServeHTTPS(*wef, config)
}
server.Syslog.ServeUDP(":1514")
}
func loadKey(path string) (*rsa.PrivateKey, error) {
keyBytes, err := ioutil.ReadFile(fmt.Sprintf("%s.prv", path))
if err != nil {
return nil, err
}
return x509.ParsePKCS1PrivateKey(keyBytes)
}
func loadCert(path string) (*x509.Certificate, []byte, error) {
certBytes, err := ioutil.ReadFile(fmt.Sprintf("%s.crt", path))
if err != nil {
return nil, nil, err
}
cert, err := x509.ParseCertificate(certBytes)
if err != nil {
return nil, nil, err
}
return cert, certBytes, nil
}