feat: 加密AES包和ssh连接包

src/framework/utils/crypto/aes.go

@@ -0,0 +1,88 @@
+package crypto
+
+import (
+	"bytes"
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"io"
+)
+
+// aesKey 字符串AES加解密密钥
+const aesKey = "AGT66VfY4SMaiT97"
+
+// StringEncryptByAES 字符串AES加密
+func StringEncryptByAES(text string) (string, error) {
+	if len(text) == 0 {
+		return "", nil
+	}
+	pass := []byte(text)
+	xpass, err := aesEncryptWithSalt([]byte(aesKey), pass)
+	if err == nil {
+		pass64 := base64.StdEncoding.EncodeToString(xpass)
+		return pass64, err
+	}
+	return "", err
+}
+
+// StringDecryptByAES 字符串AES解密
+func StringDecryptByAES(text string) (string, error) {
+	if len(text) == 0 {
+		return "", nil
+	}
+	bytesPass, err := base64.StdEncoding.DecodeString(text)
+	if err != nil {
+		return "", err
+	}
+	var tpass []byte
+	tpass, err = aesDecryptWithSalt([]byte(aesKey), bytesPass)
+	if err == nil {
+		result := string(tpass[:])
+		return result, err
+	}
+	return "", err
+}
+
+// aesEncryptWithSalt AES加密
+func aesEncryptWithSalt(key, plaintext []byte) ([]byte, error) {
+	blockSize := aes.BlockSize
+	padding := blockSize - len(plaintext)%blockSize
+	padtext := bytes.Repeat([]byte{byte(padding)}, padding)
+	plaintext = append(plaintext, padtext...)
+
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	ciphertext := make([]byte, blockSize+len(plaintext))
+	iv := ciphertext[0:blockSize]
+	if _, err := io.ReadFull(rand.Reader, iv); err != nil {
+		return nil, err
+	}
+	cbc := cipher.NewCBCEncrypter(block, iv)
+	cbc.CryptBlocks(ciphertext[blockSize:], plaintext)
+	return ciphertext, nil
+}
+
+// aesDecryptWithSalt AES解密
+func aesDecryptWithSalt(key, ciphertext []byte) ([]byte, error) {
+	blockSize := aes.BlockSize
+	var block cipher.Block
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+	if len(ciphertext) < blockSize {
+		return nil, fmt.Errorf("iciphertext too short")
+	}
+	iv := ciphertext[:blockSize]
+	ciphertext = ciphertext[blockSize:]
+	cbc := cipher.NewCBCDecrypter(block, iv)
+	cbc.CryptBlocks(ciphertext, ciphertext)
+	length := len(ciphertext)
+	unpadding := int(ciphertext[len(ciphertext)-1])
+	ciphertext = ciphertext[:(length - unpadding)]
+	return ciphertext, nil
+}

src/framework/utils/ssh/ssh.go

@@ -0,0 +1,229 @@
+package ssh
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"io"
+	"strings"
+	"sync"
+	"time"
+
+	"ems.agt/src/framework/logger"
+	gossh "golang.org/x/crypto/ssh"
+)
+
+// CopyHost 复制网元主机信息josn同key名
+func CopyHost(to, from interface{}) error {
+	b, err := json.Marshal(from)
+	if err != nil {
+		logger.Errorf("CopyHost Marshal from data err %s", err.Error())
+		return err
+	}
+	if err = json.Unmarshal(b, to); err != nil {
+		logger.Errorf("CopyHost Unmarshal to data err %s", err.Error())
+		return err
+	}
+	return nil
+}
+
+// ConnSSH 连接SSH对象
+type ConnSSH struct {
+	User       string `json:"user"`       // 主机用户名
+	Addr       string `json:"addr"`       // 主机地址
+	Port       int    `json:"port"`       // SSH端口
+	AuthMode   string `json:"authMode"`   // 认证模式（0密码 1主机私钥）
+	Password   string `json:"password"`   // 认证密码
+	PrivateKey []byte `json:"privateKey"` // 认证私钥
+	PassPhrase []byte `json:"passPhrase"` // 认证私钥密码
+
+	DialTimeOut time.Duration `json:"dialTimeOut"` // 连接超时断开
+
+	Client     *gossh.Client `json:"client"`
+	LastResult string        `json:"lastResult"` // 记最后一次执行命令的结果
+}
+
+// NewClient 创建SSH客户端
+func (c *ConnSSH) NewClient() (*ConnSSH, error) {
+	// IPV6地址协议
+	proto := "tcp"
+	if strings.Contains(c.Addr, ":") {
+		proto = "tcp6"
+		c.Addr = fmt.Sprintf("[%s]", c.Addr)
+	}
+	addr := fmt.Sprintf("%s:%d", c.Addr, c.Port)
+
+	// ssh客户端配置
+	config := &gossh.ClientConfig{}
+	config.SetDefaults()
+	config.HostKeyCallback = gossh.InsecureIgnoreHostKey()
+	config.User = c.User
+
+	// 默认等待5s
+	if c.DialTimeOut == 0 {
+		c.DialTimeOut = 5 * time.Second
+	}
+	config.Timeout = c.DialTimeOut
+
+	// 认证模式-0密码 1私钥
+	if c.AuthMode == "1" {
+		var signer gossh.Signer
+		var err error
+		if len(c.PassPhrase) != 0 {
+			signer, err = gossh.ParsePrivateKeyWithPassphrase(c.PrivateKey, c.PassPhrase)
+		} else {
+			signer, err = gossh.ParsePrivateKey(c.PrivateKey)
+		}
+		if err != nil {
+			return nil, err
+		}
+		config.Auth = []gossh.AuthMethod{gossh.PublicKeys(signer)}
+	} else {
+		config.Auth = []gossh.AuthMethod{gossh.Password(c.Password)}
+	}
+
+	client, err := gossh.Dial(proto, addr, config)
+	if nil != err {
+		return c, err
+	}
+	c.Client = client
+	return c, nil
+}
+
+// Close 关闭当前SSH客户端
+func (c *ConnSSH) Close() {
+	if c.Client != nil {
+		c.Client.Close()
+	}
+}
+
+// RunCMD 执行单次命令
+func (c *ConnSSH) RunCMD(cmd string) (string, error) {
+	if c.Client == nil {
+		if _, err := c.NewClient(); err != nil {
+			return "", err
+		}
+	}
+	session, err := c.Client.NewSession()
+	if err != nil {
+		return "", err
+	}
+	defer session.Close()
+	buf, err := session.CombinedOutput(cmd)
+
+	c.LastResult = string(buf)
+	return c.LastResult, err
+}
+
+// NewClient 创建SSH客户端会话对象
+func (c *ConnSSH) NewClientSession(cols, rows int) (*SSHClientSession, error) {
+	sshSession, err := c.Client.NewSession()
+	if err != nil {
+		return nil, err
+	}
+
+	stdin, err := sshSession.StdinPipe()
+	if err != nil {
+		return nil, err
+	}
+
+	comboWriter := new(singleWriter)
+	sshSession.Stdout = comboWriter
+	sshSession.Stderr = comboWriter
+
+	modes := gossh.TerminalModes{
+		gossh.ECHO:          1,
+		gossh.TTY_OP_ISPEED: 14400,
+		gossh.TTY_OP_OSPEED: 14400,
+	}
+
+	if err := sshSession.RequestPty("xterm", rows, cols, modes); err != nil {
+		return nil, err
+	}
+
+	if err := sshSession.Shell(); err != nil {
+		return nil, err
+	}
+
+	return &SSHClientSession{
+		Stdin:   stdin,
+		Stdout:  comboWriter,
+		Session: sshSession,
+	}, nil
+}
+
+// SSHClientSession SSH客户端会话对象
+type SSHClientSession struct {
+	Stdin   io.WriteCloser
+	Stdout  *singleWriter
+	Session *gossh.Session
+}
+
+// Close 关闭会话
+func (s *SSHClientSession) Close() {
+	if s.Stdin != nil {
+		s.Stdin.Close()
+	}
+	if s.Stdout != nil {
+		s.Stdout = nil
+	}
+	if s.Session != nil {
+		s.Session.Close()
+	}
+}
+
+// Write 写入命令
+func (s *SSHClientSession) Write(cmd string) (int, error) {
+	if s.Stdin == nil {
+		return 0, fmt.Errorf("stdin is nil to content write failed")
+	}
+	if strings.LastIndexByte(cmd, '\n') == -1 {
+		cmd = fmt.Sprintln(cmd)
+	}
+	return s.Stdin.Write([]byte(cmd))
+}
+
+// Read 读取结果
+func (s *SSHClientSession) Read() []byte {
+	if s.Stdout == nil {
+		return []byte{}
+	}
+	time.Sleep(300 * time.Millisecond)
+	bs := s.Stdout.Bytes()
+	if len(bs) > 0 {
+		s.Stdout.Reset()
+		return bs
+	}
+	return []byte{}
+}
+
+// CombinedOutput 发送命令带结果返回
+func (s *SSHClientSession) CombinedOutput(cmd string) (string, error) {
+	n, err := s.Write(cmd)
+	if n == 0 || err != nil {
+		return "", err
+	}
+	return string(s.Read()), nil
+}
+
+// singleWriter SSH客户端会话消息
+type singleWriter struct {
+	b  bytes.Buffer
+	mu sync.Mutex
+}
+
+func (w *singleWriter) Write(p []byte) (int, error) {
+	w.mu.Lock()
+	defer w.mu.Unlock()
+	return w.b.Write(p)
+}
+func (w *singleWriter) Bytes() []byte {
+	w.mu.Lock()
+	defer w.mu.Unlock()
+	return w.b.Bytes()
+}
+func (w *singleWriter) Reset() {
+	w.mu.Lock()
+	defer w.mu.Unlock()
+	w.b.Reset()
+}