Function executeOpenVPN

src/helper/linux/process_command.cpp:95–137

}

std::string executeOpenVPN(const std::string &pars)
{
    std::string config, httpProxy, socksProxy;
    unsigned int port, httpPort, socksPort;
    CmdDnsManager dnsManager;
    deserializePars(pars, config, port, httpProxy, httpPort, socksProxy, socksPort, dnsManager);

    std::string script = Utils::getDnsScript(dnsManager);
    if (script.empty()) {
        spdlog::error("Could not find appropriate DNS manager script");
        return serializeResult(false);
    }

    // The proxy address must be an IP literal: the GUI restricts it to one (NetworkingValidation::
    // isIp) and no other path sets it. Validate here too rather than trust the client — an invalid
    // value is dropped so it can't reach the OpenVPN config the helper writes as root. The proxy
    // lines are appended after OvpnDirectiveWhitelist::filterConfig, so they aren't otherwise
    // filtered. isValidIpAddress also rejects whitespace, subsuming the previous whitespace guard.
    if (!httpProxy.empty() && !Validation::isValidIpAddress(httpProxy)) {
        spdlog::warn("executeOpenVPN: invalid httpProxy, ignoring");
        httpProxy = "";
    }
    if (!socksProxy.empty() && !Validation::isValidIpAddress(socksProxy)) {
        spdlog::warn("executeOpenVPN: invalid socksProxy, ignoring");
        socksProxy = "";
    }

    if (!OVPN::writeOVPNFile(script, port, config, httpProxy, httpPort, socksProxy, socksPort)) {
        spdlog::error("Could not write OpenVPN config");
        return serializeResult(false);
    }

    std::string ovpnPath;
    if (!Utils::resolveExePath(Utils::getExePath(), WS_PRODUCT_NAME_LOWER "openvpn", ovpnPath)) {
        return serializeResult(false);
    }

    Spawn::Options opts;
    opts.extraEnv = {{"OPENSSL_CONF", "/dev/null"}};
    opts.cwd = WS_LINUX_INSTALL_DIR;
    std::vector<std::string> args = {"--mark", "20310", "--config", WS_LINUX_RUN_DIR "/config.ovpn"};
    return serializeResult(Spawn::spawnDetached(ovpnPath, args, opts));
}

std::string setOpenVpnDcoMode(const std::string &pars)
{