@@ -67,7 +67,6 @@ setenv ovpn_data ${OVPN_DATA:-/data}
6767setenv auth_api ${AUTH_API:- http:// 127.0.0.1/ login}
6868setenv ovpn_auth_api ${OVPN_AUTH_API:- http:// 127.0.0.1/ ovpn/ login}
6969setenv ovpn_history_api ${OVPN_HISTORY_API:- http:// 127.0.0.1: 8833/ ovpn/ history}
70- setenv auth_token $( echo " $ADMIN_USERNAME :$ADMIN_PASSWORD " | openssl enc -e -aes-256-cbc -a -pbkdf2 -k $SECRET_KEY )
7170EOF
7271}
7372
@@ -104,7 +103,6 @@ update_config(){
104103 auth_api=$( grep ' ^setenv auth_api' $config | cut -d' ' -f3)
105104 ovpn_auth_api=$( grep ' ^setenv ovpn_auth_api' $config | cut -d' ' -f3)
106105 ovpn_history_api=$( grep ' ^setenv ovpn_history_api' $config | cut -d' ' -f3)
107- auth_token=$( grep ' ^setenv auth_token' $config | cut -d' ' -f3)
108106 ovpn_data=$( grep ' ^setenv ovpn_data' $config | cut -d' ' -f3)
109107 ovpn_subnet=$( grep ' ^server' $config | cut -d' ' -f2,3)
110108 ovpn_subnet6=$( grep ' ^server-ipv6' $config | cut -d' ' -f2,3)
@@ -137,16 +135,6 @@ update_config(){
137135 fi
138136 fi
139137
140- decrypt_auth_token=$( echo " $auth_token " | openssl enc -d -aes-256-cbc -a -pbkdf2 -k $SECRET_KEY 2> /dev/null || true)
141- if [ " $decrypt_auth_token " != " $ADMIN_USERNAME :$ADMIN_PASSWORD " ]; then
142- AUTH_TOKEN=$( echo " $ADMIN_USERNAME :$ADMIN_PASSWORD " | openssl enc -e -aes-256-cbc -a -pbkdf2 -k $SECRET_KEY )
143- if [ -z " $auth_token " ]; then
144- echo " setenv auth_token $AUTH_TOKEN " >> $config
145- else
146- sed -i " s|^setenv auth_token .*|setenv auth_token $AUTH_TOKEN |" $config
147- fi
148- fi
149-
150138 if [ " $ovpn_data " != " $OVPN_DATA " ]; then
151139 if [ -z " $ovpn_data " ]; then
152140 echo " setenv ovpn_data $OVPN_DATA " >> $config
319307
320308add_history (){
321309 # https://build.openvpn.net/man/openvpn-2.6/openvpn.8.html#environmental-variables
322- auth=$( source $ovpn_data /.vars && echo $auth_token | openssl enc -d -aes-256-cbc -a -pbkdf2 -k $SECRET_KEY )
323- IFS=' :' read -r user pass <<< $auth
324- response=$( curl --connect-timeout 5 -s -D - -o /dev/null -d " username=$user &password=$pass " $auth_api )
325- cookie=$( echo $response | awk -F ' Set-Cookie: ' ' {print $2}' | awk ' {print $1}' )
326310 data=" vip=$ifconfig_pool_remote_ip &rip=$trusted_ip &common_name=$common_name &username=$username &bytes_received=$bytes_received &bytes_sent=$bytes_sent &time_unix=$time_unix &time_duration=$time_duration "
327-
328- status=$( curl -w " %{http_code}" --connect-timeout 5 -s -X POST -o /dev/null -b $cookie -d $data $ovpn_history_api )
311+ status=$( curl -w " %{http_code}" --connect-timeout 5 -s -X POST -o /dev/null -d $data $ovpn_history_api )
329312
330313 [ $status -ne 200 ] && echo " [CLIENT-DISCONNECT] $0 :$LINENO 保存历史记录出错,请检查!" || true
331314}
0 commit comments