├── pfSense-pkg-zerotier
    ├── files
    │   ├── pkg-deinstall.in
    │   ├── pkg-install.in
    │   ├── usr
    │   │   └── local
    │   │   │   ├── share
    │   │   │       └── pfSense-pkg-zerotier
    │   │   │       │   └── info.xml
    │   │   │   ├── www
    │   │   │       ├── zerotier_status.php
    │   │   │       └── zerotier_controller_auth_member.php
    │   │   │   └── pkg
    │   │   │       ├── zerotier.xml
    │   │   │       ├── zerotiercontroller.xml
    │   │   │       └── zerotier.inc
    │   └── etc
    │   │   └── inc
    │   │       └── priv
    │   │           └── zerotier.priv.inc
    ├── pkg-descr
    ├── pkg-plist
    └── Makefile
├── README.md
├── zerotier
    ├── distinfo
    ├── pkg-message
    ├── pkg-descr
    ├── files
    │   ├── zerotier.in
    │   ├── patch-make-freebsd.mk
    │   └── patch-node_Utils.hpp
    └── Makefile
└── LICENSE


/pfSense-pkg-zerotier/files/pkg-deinstall.in:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | 
3 | /usr/local/bin/php -f /etc/rc.packages %%PORTNAME%% ${2}
4 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # pfsense-ports
2 | This repository is for my personal development of packages to be contributed to the pfSense project.
3 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/pkg-descr:
--------------------------------------------------------------------------------
1 | ZeroTier is a software-based managed Ethernet switch for planet Eart
2 | WWW: https://www.zerotier.com
3 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/pkg-install.in:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | 
3 | if [ "${2}" != "POST-INSTALL" ]; then
4 | 	exit 0
5 | fi
6 | 
7 | /usr/local/bin/php -f /etc/rc.packages %%PORTNAME%% ${2}
8 | 


--------------------------------------------------------------------------------
/zerotier/distinfo:
--------------------------------------------------------------------------------
1 | SHA256 (zerotier-ZeroTierOne-1.1.4_GH0.tar.gz) = 6ac38829db38b853d712db324928703e4fdc6bec786235e0dd2ddf3a69035c81
2 | SIZE (zerotier-ZeroTierOne-1.1.4_GH0.tar.gz) = 11822535
3 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/pkg-plist:
--------------------------------------------------------------------------------
1 | pkg/zerotier.inc
2 | pkg/zerotier.xml
3 | pkg/zerotiercontroller.xml
4 | www/zerotier_controller_auth_member.php
5 | www/zerotier_status.php
6 | /etc/inc/priv/zerotier.priv.inc
7 | %%DATADIR%%/info.xml
8 | @dir /etc/inc/priv
9 | 


--------------------------------------------------------------------------------
/zerotier/pkg-message:
--------------------------------------------------------------------------------
 1 | #################################
 2 | 
 3 | First start the zerotier service:
 4 | 
 5 | service zerotier start
 6 | 
 7 | To connect to a zerotier network:
 8 | 
 9 | zerotier-cli join <network>
10 | 
11 | #################################
12 | 


--------------------------------------------------------------------------------
/zerotier/pkg-descr:
--------------------------------------------------------------------------------
1 | ZeroTier can be used for on-premise network virtualization, as a
2 | peer to peer VPN for mobile teams, for hybrid or multi-data-center
3 | cloud deployments, or just about anywhere else secure software
4 | defined virtual networking is useful.
5 | 
6 | WWW: https://www.zerotier.com/
7 | 


--------------------------------------------------------------------------------
/zerotier/files/zerotier.in:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | # $FreeBSD$
 4 | #
 5 | # PROVIDE: zerotier
 6 | # REQUIRE: LOGIN
 7 | # KEYWORD: shutdown
 8 | #
 9 | # Add these lines to /etc/rc.conf.local or /etc/rc.conf
10 | # to enable this service:
11 | #
12 | # zerotier_enable (bool):	Set to NO by default.
13 | #				Set it to YES to enable zerotier.
14 | 
15 | . /etc/rc.subr
16 | 
17 | name=zerotier
18 | rcvar=zerotier_enable
19 | 
20 | load_rc_config $name
21 | 
22 | : ${zerotier_enable:="NO"}
23 | 
24 | command=%%PREFIX%%/sbin/${name}-one
25 | 
26 | command_args="-d"
27 | 
28 | run_rc_command "$1"
29 | 


--------------------------------------------------------------------------------
/zerotier/files/patch-make-freebsd.mk:
--------------------------------------------------------------------------------
 1 | --- make-freebsd.mk.orig	2016-09-03 14:18:11.671935000 +0000
 2 | +++ make-freebsd.mk	2016-09-03 14:18:27.316065000 +0000
 3 | @@ -18,6 +18,14 @@
 4 |  	DEFS+=-DZT_ENABLE_CLUSTER
 5 |  endif
 6 | +# Build with ZT_ENABLE_NETWORK_CONTROLLER=1 to build with the Sqlite network controller
 7 | +ifeq ($(ZT_ENABLE_NETWORK_CONTROLLER),1)
 8 | +        DEFS+=-DZT_ENABLE_NETWORK_CONTROLLER
 9 | +        INCLUDES+=-I/usr/local/include
10 | +        LDFLAGS+=-L/usr/local/lib -lsqlite3
11 | +        OBJS+=controller/SqliteNetworkController.o
12 | +endif
13 | + 
14 |  # "make debug" is a shortcut for this
15 |  ifeq ($(ZT_DEBUG),1)
16 |  	DEFS+=-DZT_TRACE
17 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/usr/local/share/pfSense-pkg-zerotier/info.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0"?>
 2 | <pfsensepkgs>
 3 | 	<package>
 4 | 		<name>zerotier</name>
 5 | 		<internal_name>zerotier</internal_name>
 6 | 		<pkginfolink>https://forum.pfsense.org/index.php?topic=102404</pkginfolink>
 7 | 		<descr>ZeroTier is a software-based managed Ethernet switch for planet Earth.</descr>
 8 | 		<website>https://www.zerotier.com/</website>
 9 | 		<category>Services</category>
10 | 		<configurationfile>zerotier.xml</configurationfile>
11 | 		<version>%%PKGVERSION%%</version>
12 | 		<status>Beta</status>
13 | 		<required_version>2.3</required_version>
14 | 		<maintainer>josh@zevlag.com</maintainer>
15 | 		<only_for_archs>i386 amd64</only_for_archs>
16 | 	</package>
17 | </pfsensepkgs>
18 | 
19 | 
20 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/etc/inc/priv/zerotier.priv.inc:
--------------------------------------------------------------------------------
 1 | <?php
 2 | global $priv_list;
 3 | 
 4 | $priv_list['page-vpn-zerotier-client'] = array();
 5 | $priv_list['page-vpn-zerotier-client']['name'] = "WebCfg - vpn: ZeroTier client";
 6 | $priv_list['page-vpn-zerotier-client']['descr'] = "Allow access to ZeroTier client GUI";
 7 | $priv_list['page-vpn-zerotier-client']['match'] = array();
 8 | $priv_list['page-vpn-zerotier-client']['match'][] = "pkg_edit.php?xml=zerotier.xml*";
 9 | $priv_list['page-vpn-zerotier-client']['match'][] = "zerotier_status.php*";
10 | 
11 | $priv_list['page-vpn-zerotier-controlle:'] = array();
12 | $priv_list['page-vpn-zerotier-controller']['name'] = "WebCfg - vpn: ZeroTier controller";
13 | $priv_list['page-vpn-zerotier-controller']['descr'] = "Allow access to ZeroTier controller GUI";
14 | $priv_list['page-vpn-zerotier-controller']['match'] = array();
15 | $priv_list['page-vpn-zerotier-controller']['match'][] = "pkg_edit.php?xml=zerotiercontroller.xml*";
16 | $priv_list['page-vpn-zerotier-controller']['match'][] = "zerotier_controller_auth_member.php*";
17 | 


--------------------------------------------------------------------------------
/zerotier/Makefile:
--------------------------------------------------------------------------------
 1 | # Created by: Corey Smith <corsmith@gmail.com>
 2 | # $FreeBSD: head/net/zerotier/Makefile 407383 2016-01-27 20:27:31Z amdmi3 $
 3 | 
 4 | PORTNAME=	zerotier
 5 | PORTVERSION=	1.1.4
 6 | CATEGORIES=	net
 7 | 
 8 | MAINTAINER=	corsmith@gmail.com
 9 | COMMENT=	Network virtualization everywhere
10 | 
11 | LICENSE=	GPLv3
12 | LICENSE_FILE=	${WRKSRC}/LICENSE.txt
13 | 
14 | USES=		gmake
15 | USE_RC_SUBR=	zerotier
16 | 
17 | USE_GITHUB=	yes
18 | GH_ACCOUNT=	zerotier
19 | GH_PROJECT=	ZeroTierOne
20 | CFLAGS+=	-flax-vector-conversions
21 | 
22 | OPTIONS_DEFINE=	CONTROLLER
23 | CONTROLLER_DESC= Enable controller microservice to create and manage networks
24 | CONTROLLER_MAKE_ARGS= ZT_ENABLE_NETWORK_CONTROLLER=1
25 | CONTROLLER_BUILD_DEPENDS= sqlite3:databases/sqlite3
26 | 
27 | PLIST_FILES=	bin/zerotier-cli bin/zerotier-idtool sbin/zerotier-one
28 | 
29 | do-install:
30 | 	${INSTALL_PROGRAM} ${WRKSRC}/zerotier-one ${STAGEDIR}${PREFIX}/sbin/
31 | .for l in zerotier-cli zerotier-idtool
32 | 	${LN} -sf ../sbin/zerotier-one ${STAGEDIR}${PREFIX}/bin/${l}
33 | .endfor
34 | 
35 | .include <bsd.port.mk>
36 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | Copyright (C) 2017 zevlag
 2 | 
 3 | Permission is hereby granted, free of charge, to any person obtaining
 4 | a copy of this software and associated documentation files (the
 5 | "Software"), to deal in the Software without restriction, including
 6 | without limitation the rights to use, copy, modify, merge, publish,
 7 | distribute, sublicense, and/or sell copies of the Software, and to
 8 | permit persons to whom the Software is furnished to do so, subject to
 9 | the following conditions:
10 | 
11 | The above copyright notice and this permission notice shall be
12 | included in all copies or substantial portions of the Software.
13 | 
14 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
15 | EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
16 | MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
17 | NONINFRINGEMENT. IN NO EVENT SHALL ZEVLAG BE LIABLE FOR ANY
18 | CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
19 | TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
20 | SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
21 | 


--------------------------------------------------------------------------------
/zerotier/files/patch-node_Utils.hpp:
--------------------------------------------------------------------------------
 1 | --- node/Utils.hpp.orig	2015-08-25 16:55:14 UTC
 2 | +++ node/Utils.hpp
 3 | @@ -39,6 +39,10 @@
 4 |  #include <vector>
 5 |  #include <map>
 6 |  
 7 | +#if defined(__FreeBSD__)
 8 | +#include <sys/endian.h>
 9 | +#endif
10 | +
11 |  #include "Constants.hpp"
12 |  
13 |  namespace ZeroTier {
14 | @@ -321,8 +325,12 @@ public:
15 |  		throw()
16 |  	{
17 |  #if __BYTE_ORDER == __LITTLE_ENDIAN
18 | -#if defined(__GNUC__) && (!defined(__OpenBSD__))
19 | +#if defined(__GNUC__)
20 | +#if defined(__FreeBSD__)
21 | +		return bswap64(n);
22 | +#elif (!defined(__OpenBSD__))
23 |  		return __builtin_bswap64(n);
24 | +#endif
25 |  #else
26 |  		return (
27 |  			((n & 0x00000000000000FFULL) << 56) | 
28 | @@ -351,8 +359,12 @@ public:
29 |  		throw()
30 |  	{
31 |  #if __BYTE_ORDER == __LITTLE_ENDIAN
32 | -#if defined(__GNUC__) && !defined(__OpenBSD__)
33 | +#if defined(__GNUC__)
34 | +#if defined(__FreeBSD__)
35 | +		return bswap64(n);
36 | +#elif (!defined(__OpenBSD__))
37 |  		return __builtin_bswap64(n);
38 | +#endif
39 |  #else
40 |  		return (
41 |  			((n & 0x00000000000000FFULL) << 56) | 
42 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/Makefile:
--------------------------------------------------------------------------------
 1 | # $FreeBSD$
 2 | 
 3 | PORTNAME=	pfSense-pkg-zerotier
 4 | PORTVERSION=	1.0.0
 5 | PORTREVISION=	1
 6 | CATEGORIES=	net
 7 | MASTER_SITES=	# empty
 8 | DISTFILES=	# empty
 9 | EXTRACT_ONLY=	# empty
10 | 
11 | MAINTAINER=	josh@zevlag.com
12 | COMMENT=	pfSense package zerotier
13 | 
14 | RUN_DEPENDS=	${LOCALBASE}/sbin/zerotier-one:net/zerotier
15 | 
16 | NO_BUILD=	yes
17 | NO_MTREE=	yes
18 | 
19 | SUB_FILES=	pkg-install pkg-deinstall
20 | SUB_LIST=	PORTNAME=${PORTNAME}
21 | 
22 | do-extract:
23 | 	${MKDIR} ${WRKSRC}
24 | 
25 | do-install:
26 | 	${MKDIR} ${STAGEDIR}${PREFIX}/pkg
27 | 	${MKDIR} ${STAGEDIR}${PREFIX}/www
28 | 	${MKDIR} ${STAGEDIR}/etc/inc/priv
29 | 	${MKDIR} ${STAGEDIR}${DATADIR}
30 | 	${INSTALL_DATA} -m 0644 ${FILESDIR}${PREFIX}/pkg/zerotier.xml \
31 | 		${STAGEDIR}${PREFIX}/pkg
32 | 	${INSTALL_DATA} ${FILESDIR}${PREFIX}/pkg/zerotiercontroller.xml \
33 | 		${STAGEDIR}${PREFIX}/pkg
34 | 	${INSTALL_DATA} ${FILESDIR}${PREFIX}/pkg/zerotier.inc \
35 | 		${STAGEDIR}${PREFIX}/pkg
36 | 	${INSTALL_DATA} ${FILESDIR}${PREFIX}/www/zerotier_status.php \
37 | 		${STAGEDIR}${PREFIX}/www
38 | 	${INSTALL_DATA} ${FILESDIR}${PREFIX}/www/zerotier_controller_auth_member.php \
39 | 		${STAGEDIR}${PREFIX}/www
40 | 	${INSTALL_DATA} ${FILESDIR}/etc/inc/priv/zerotier.priv.inc \
41 | 		${STAGEDIR}/etc/inc/priv
42 | 	${INSTALL_DATA} ${FILESDIR}${DATADIR}/info.xml \
43 | 		${STAGEDIR}${DATADIR}
44 | 	@${REINPLACE_CMD} -i '' -e "s|%%PKGVERSION%%|${PKGVERSION}|" \
45 | 		${STAGEDIR}${DATADIR}/info.xml
46 | 
47 | .include <bsd.port.mk>
48 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/usr/local/www/zerotier_status.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | require_once("guiconfig.inc");
 3 | require_once("zerotier.inc");
 4 | 
 5 | # XXX: Add check if service is running.
 6 | 
 7 | $pgtitle = array(gettext("Package"), gettext("ZeroTier"), gettext("Client Status"));
 8 | require("head.inc");
 9 | 
10 | $tab_array = array();
11 | $tab_array[] = array(gettext("Client"), false, "pkg.php?xml=zerotier.xml");
12 | $tab_array[] = array(gettext("Client Status"), true, "zerotier_status.php");
13 | $tab_array[] = array(gettext("Controller"), false, "pkg.php?xml=zerotiercontroller.xml");
14 | $tab_array[] = array(gettext("Network Members"), false, "zerotier_controller_auth_member.php");
15 | 
16 | display_top_tabs($tab_array);
17 | ?>
18 | <div class="panel panel-default">
19 | 	<div class="panel-heading"><h2 class="panel-title">ZeroTier Status</h2></div>
20 | 	<div class="panel-body">
21 | 	<div class="table-responsive">
22 | 	<table class="table table-striped table-hover table-condensed">
23 | 		<thead>
24 | 			<tr>
25 | 				<th>Network ID</th>
26 | 				<th>Name</th>
27 | 				<th>MAC<h>
28 | 				<th>Status</th>
29 | 				<th>Type</th>
30 | 				<th>Device</th>
31 | 				<th>Assigned IP</th>
32 | 			</tr>
33 | 		</thead>
34 | 		<tbody>	<?php
35 | 			$list = zerotier_list_joined_networks();
36 | 			array_shift($list);
37 | 			foreach ($list as $nets):
38 | 			?>
39 | 			<tr>
40 | 				<?php
41 | 				$nets = str_replace('200 listnetworks ', '', $nets);
42 | 				foreach (explode(' ', $nets) as $net):
43 | 				?>
44 | 					<td><?= htmlspecialchars($net) ?></td>
45 | 				<? endforeach ?>
46 | 			</tr>
47 | 			<? endforeach ?></tbody>
48 | 	</table>
49 | 	</div>
50 | </div>
51 | <?php include("foot.inc"); ?>


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/usr/local/pkg/zerotier.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0"?>
  2 | <!DOCTYPE packagegui SYSTEM "../schema/packages.dtd">
  3 | <?xml-stylesheet type="text/xsl" href="../xsl/package.xsl"?>
  4 | <packagegui>
  5 | 	<copyright>
  6 | 	<![CDATA[
  7 | /* $Id$ */
  8 | /* ====================================================================================== */
  9 | /*
 10 | 	arping.xml
 11 | 	part of pfSense (https://www.pfSense.org/)
 12 | 	Copyright (C) 2009-2015 ESF, LLC
 13 | 	All rights reserved.
 14 | */
 15 | /* ====================================================================================== */
 16 | /*
 17 | 	Redistribution and use in source and binary forms, with or without
 18 | 	modification, are permitted provided that the following conditions are met:
 19 | 
 20 | 
 21 | 	1. Redistributions of source code must retain the above copyright notice,
 22 | 	   this list of conditions and the following disclaimer.
 23 | 
 24 | 	2. Redistributions in binary form must reproduce the above copyright
 25 | 	   notice, this list of conditions and the following disclaimer in the
 26 | 	   documentation and/or other materials provided with the distribution.
 27 | 
 28 | 
 29 | 	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
 30 | 	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
 31 | 	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
 32 | 	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
 33 | 	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 34 | 	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 35 | 	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 36 | 	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 37 | 	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 38 | 	POSSIBILITY OF SUCH DAMAGE.
 39 | */
 40 | /* ====================================================================================== */
 41 | 	]]>
 42 | 	</copyright>
 43 | 	<name>zerotierclient</name>
 44 | 	<title>ZeroTier</title>
 45 | 	<include_file>/usr/local/pkg/zerotier.inc</include_file>
 46 | 	<menu>
 47 | 		<name>ZeroTier</name>
 48 | 		<section>VPN</section>
 49 | 		<configfile>zerotier.xml</configfile>
 50 | 	</menu>
 51 | 	<service>
 52 | 		<name>zerotier</name>
 53 | 		<rcfile>zerotier-one.sh</rcfile>
 54 | 		<executable>zerotier-one</executable>
 55 | 		<description>ZeroTier Client and Controller</description>
 56 | 	</service>
 57 | 	<tabs>
 58 | 		<tab>
 59 | 			<text>Client</text>
 60 | 			<url>/pkg.php?xml=zerotier.xml</url>
 61 | 			<active/>
 62 | 		</tab>
 63 | 		<tab>
 64 | 			<text>Client Status</text>
 65 | 			<url>/zerotier_status.php</url>
 66 | 		</tab>
 67 | 		<tab>
 68 | 			<text>Controller</text>
 69 | 			<url>/pkg.php?xml=zerotiercontroller.xml</url>
 70 | 		</tab>
 71 | 		<tab>
 72 | 			<text>Network Members</text>
 73 | 			<url>/zerotier_controller_auth_member.php</url>
 74 | 		</tab>
 75 | 	</tabs>
 76 | 	<adddeleteeditpagefields>
 77 | 	   <columnitem>
 78 | 		 <fielddescr>Network ID</fielddescr>
 79 | 		 <fieldname>joinnetwork</fieldname>
 80 | 	   </columnitem>	
 81 | 	</adddeleteeditpagefields>
 82 | 	<fields>
 83 | 		<field>
 84 | 			<fielddescr>Network ID</fielddescr>
 85 | 			<fieldname>joinnetwork</fieldname>
 86 | 			<type>input</type>
 87 | 			<size>16</size>
 88 | 		</field>
 89 |     </fields>
 90 | 	<custom_php_install_command>
 91 | 		zerotier_install();
 92 | 	</custom_php_install_command>
 93 | 	<custom_delete_php_command>
 94 | 		zerotier_leave_network();
 95 | 	</custom_delete_php_command>
 96 | 	<custom_add_php_command_late>
 97 | 		zerotier_leave_network();
 98 | 		zerotier_join_network();
 99 | 	</custom_add_php_command_late>
100 | 	<custom_php_validation_command>
101 | 		validate_form_zerotier($_POST, $input_errors);
102 | 	</custom_php_validation_command>
103 | </packagegui>
104 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/usr/local/www/zerotier_controller_auth_member.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | require_once("guiconfig.inc");
  3 | require_once("zerotier.inc");
  4 | 
  5 | # XXX: Add check if service is running.
  6 | 
  7 | if ($_POST && 
  8 | 	ctype_xdigit($_POST['memid']) && strlen($_POST['memid']) == 10 &&
  9 | 	ctype_xdigit($_POST['net']) && strlen($_POST['net']) == 16) {
 10 | 
 11 | 	$member = json_decode(sendPost("GET", "/controller/network/${_POST['net']}/member/${_POST['memid']}", null));
 12 | 
 13 | 	if ($_POST['mode'] == 'auth'){
 14 | 		if ($member->authorized)
 15 | 			$res = json_decode(sendPost("POST", "/controller/network/${_POST['net']}/member/${_POST['memid']}", json_encode(['authorized'=>false])));
 16 | 		if (!$member->authorized)
 17 | 			$res = json_decode(sendPost("POST", "/controller/network/${_POST['net']}/member/${_POST['memid']}", json_encode(['authorized'=>true])));
 18 | 		echo $res->authorized == true ? 'yes' : 'no';
 19 | 
 20 | 	} else if ($_POST['mode'] == 'bridge'){
 21 | 		if ($member->activeBridge)
 22 | 			$res = json_decode(sendPost("POST", "/controller/network/${_POST['net']}/member/${_POST['memid']}", json_encode(['activeBridge'=>false])));
 23 | 		if (!$member->activeBridge)
 24 | 			$res = json_decode(sendPost("POST", "/controller/network/${_POST['net']}/member/${_POST['memid']}", json_encode(['activeBridge'=>true])));
 25 | 		echo $res->activeBridge == true ? 'yes' : 'no';	
 26 | 	}
 27 | 	exit;
 28 | }
 29 | 
 30 | $pgtitle = array(gettext("Package"), gettext("ZeroTier"), gettext("Network Members"));
 31 | require("head.inc");
 32 | 
 33 | $tab_array = array();
 34 | $tab_array[] = array(gettext("Client"), false, "pkg.php?xml=zerotier.xml");
 35 | $tab_array[] = array(gettext("Client Status"), false, "zerotier_status.php");
 36 | $tab_array[] = array(gettext("Controller"), false, "pkg.php?xml=zerotiercontroller.xml");
 37 | $tab_array[] = array(gettext("Network Members"), true, "zerotier_controller_auth_member.php");
 38 | display_top_tabs($tab_array);
 39 | ?>
 40 | <script>
 41 | function flip(m, i, n) {
 42 |     var http = new XMLHttpRequest();
 43 |     http.open("POST", "", true);
 44 |     http.setRequestHeader("Content-type","application/x-www-form-urlencoded");
 45 |     http.send("mode="+m+"&memid="+i+"&net="+n);
 46 |     http.onload = function() {
 47 |         if(http.responseText == 'yes'){
 48 |         	document.getElementById(n+'-'+m+'-'+i).innerHTML = 'yes';
 49 |         } else if(http.responseText == 'no'){
 50 |         	document.getElementById(n+'-'+m+'-'+i).innerHTML = 'no';
 51 |         }
 52 |     }
 53 | }
 54 | </script>
 55 | <div class="panel panel-default">
 56 | 	<div class="panel-heading"><h2 class="panel-title">ZeroTier Network Members</h2></div>
 57 | 	<div class="panel-body">
 58 | 	<div class="table-responsive">
 59 | 	<table class="table table-striped table-hover table-condensed">
 60 | 		<colgroup>
 61 | 		   <col span="1" style="width: 10%;">
 62 | 		   <col span="1" style="width: 10%;">
 63 | 		   <col span="1" style="width: 10%;">
 64 | 		   <col span="1" style="width: 10%;">
 65 | 		   <col span="1" style="width: 10%;">
 66 | 		</colgroup>
 67 | 		<thead>
 68 | 			<tr>
 69 | 				<th>Network ID</th>
 70 | 				<th>Authorized?</th>
 71 | 				<th>Address</th>
 72 | 				<th>Assigned IP</th>
 73 | 				<th>Bridge?</th>
 74 | 			</tr>
 75 | 		</thead>
 76 | 		<tbody>	<?php
 77 | 			
 78 | 			// Get list of networks from controller
 79 | 			$listn = json_decode(sendPost("GET", "/controller/network", null));
 80 | 			foreach ($listn as $nets):
 81 | 			?>
 82 | 				<tr>
 83 | 					<th>Net ID: <?= $nets?></th>
 84 | 					<th /><th /><th /><th />
 85 | 				</tr>
 86 | 				<?php
 87 | 				// Get list of members on net from controller
 88 | 				$listm = json_decode(sendPost("GET", "/controller/network/${nets}/member", null));
 89 | 				foreach (array_keys(get_object_vars($listm)) as $member):
 90 | 
 91 | 					// Get member details from controller
 92 | 					$m = json_decode(sendPost("GET", "/controller/network/${nets}/member/${member}", null));
 93 | 				?>
 94 | 				<tr>
 95 | 					<td />
 96 | 					<td><a id='<?= $nets?>-auth-<?= $m->address?>' onclick="flip('auth','<?= $m->address?>','<?= $nets?>')"><?= $m->authorized ? 'yes' : 'no' ?></a></td>
 97 | 					<td><?= $m->address?></td>
 98 | 					<td><?= implode(',',$m->ipAssignments)?></td>
 99 | 					<td><a id='<?= $nets?>-bridge-<?= $m->address?>' onclick="flip('bridge','<?= $m->address?>','<?= $nets?>')"><?= $m->activeBridge ? 'yes' : 'no' ?></a></td>
100 | 				</tr>
101 | 				<? endforeach ?>
102 | 			<? endforeach ?></tbody>
103 | 	</table>
104 | 	</div>
105 | </div>
106 | <?php include("foot.inc"); ?>


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/usr/local/pkg/zerotiercontroller.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="utf-8" ?>
  2 | <!DOCTYPE packagegui SYSTEM "../schema/packages.dtd">
  3 | <?xml-stylesheet type="text/xsl" href="../xsl/package.xsl"?>
  4 | <packagegui>
  5 | 	<name>zerotiercontroller</name>
  6 | 	<title>ZeroTier</title>
  7 | 	<include_file>/usr/local/pkg/zerotier.inc</include_file>
  8 | 	<tabs>
  9 | 		<tab>
 10 | 			<text>Client</text>
 11 | 			<url>/pkg.php?xml=zerotier.xml</url>
 12 | 		</tab>
 13 | 		<tab>
 14 | 			<text>Client Status</text>
 15 | 			<url>/zerotier_status.php</url>
 16 | 		</tab>
 17 | 		<tab>
 18 | 			<text>Controller</text>
 19 | 			<url>/pkg.php?xml=zerotiercontroller.xml</url>
 20 | 			<active/>
 21 | 		</tab>
 22 | 		<tab>
 23 | 			<text>Network Members</text>
 24 | 			<url>/zerotier_controller_auth_member.php</url>
 25 | 		</tab>
 26 | 	</tabs>
 27 | 	<adddeleteeditpagefields>
 28 | 	   <columnitem>
 29 | 		 <fielddescr>Network ID</fielddescr>
 30 | 		 <fieldname>network</fieldname>
 31 | 	   </columnitem>
 32 | 	   <columnitem>
 33 | 		 <fielddescr>Network Name</fielddescr>
 34 | 		 <fieldname>name</fieldname>
 35 | 	   </columnitem>	
 36 | 	   <columnitem>
 37 | 		 <fielddescr>Private</fielddescr>
 38 | 		 <fieldname>private</fieldname>
 39 | 	   </columnitem>		   
 40 | 	</adddeleteeditpagefields>
 41 | 	<fields>
 42 | 		<field>
 43 | 			<fielddescr>Network ID</fielddescr>
 44 | 			<fieldname>network</fieldname>
 45 | 			<description>A 6 digit ID that is appended to the sever address. Leave blank to use a random ID. NOTE: Changing the Network ID after a network has been created will cause the original network to be deleted from the controller.</description>
 46 | 			<type>input</type>
 47 | 			<size>6</size>
 48 | 		</field>
 49 | 		
 50 | 		<field>
 51 | 			<fielddescr>Network Name</fielddescr>
 52 | 			<fieldname>name</fieldname>
 53 | 			<description>A short name for this network</description>
 54 | 			<type>input</type>
 55 | 			<size>16</size>
 56 | 		</field>
 57 | 		
 58 | 		<field>
 59 | 			<fielddescr>Private</fielddescr>
 60 | 			<fieldname>private</fieldname>
 61 | 			<description>Is access control enabled?</description>
 62 | 			<type>checkbox</type>
 63 | 		</field>
 64 | 		
 65 | 		<field>
 66 | 			<fielddescr>Broadcast</fielddescr>
 67 | 			<fieldname>enablebroadcast</fieldname>
 68 | 			<description>Ethernet ff:ff:ff:ff:ff:ff allowed?</description>
 69 | 			<type>checkbox</type>
 70 | 		</field>
 71 | 		
 72 | 		<field>
 73 | 			<fielddescr>Passive Bridging</fielddescr>
 74 | 			<fieldname>allowpassivebridging</fieldname>
 75 | 			<description>Allow any member to bridge (very experimental)</description>
 76 | 			<type>checkbox</type>
 77 | 		</field>
 78 | 
 79 | 		<field>
 80 | 			<fielddescr>Auto Assign IPv4</fielddescr>
 81 | 			<fieldname>v4assignmode</fieldname>
 82 | 			<description>Auto-assign IPv4 from pool(s)</description>
 83 | 			<type>checkbox</type>
 84 | 		</field>
 85 | 
 86 | 		<field>
 87 | 			<fielddescr>Auto Assign IPv6</fielddescr>
 88 | 			<fieldname>v6assignmode</fieldname>
 89 | 			<description>Select method(s) to use when assigning IPv6 addresses.</description>
 90 | 			<type>select</type>
 91 | 			<multiple/>
 92 | 			<options>
 93 | 				<option><name>RFC4193</name><value>rfc4193</value></option>
 94 | 				<option><name>6PLANE</name><value>6plane</value></option>
 95 | 				<option><name>IPv6 Pool{s}</name><value>zt</value></option>
 96 | 			</options>
 97 | 		</field>
 98 | 
 99 | 		<field>
100 | 			<fielddescr>Multicast Limit</fielddescr>
101 | 			<fieldname>multicastlimit</fieldname>
102 | 			<description>Maximum recipients for a multicast packet</description>
103 | 			<type>input</type>
104 | 			<size>9</size>
105 | 		</field>
106 | 
107 | 		<field>
108 | 			<fielddescr>Routes</fielddescr>
109 | 			<fieldname>routes</fieldname>
110 | 			<description>Comma separated prefix list</description>
111 | 			<type>input</type>
112 | 			<size>15</size>
113 | 		</field>
114 | 		
115 | 		<field>
116 | 			<fielddescr>IPv4 Assignment Pool Range Start IP</fielddescr>
117 | 			<fieldname>ipv4rangestart</fieldname>
118 | 			<description>Note: IP assignments are only used if they fall within a managed route.</description>
119 | 			<type>input</type>
120 | 			<size>15</size>
121 | 		</field>
122 | 		<field>
123 | 			<fielddescr>IPv4 Assignment Pool Range End IP</fielddescr>
124 | 			<fieldname>ipv4rangeend</fieldname>
125 | 			<type>input</type>
126 | 			<size>15</size>
127 | 		</field>
128 | 
129 | 		<field>
130 | 			<fielddescr>IPv6 Assignment Pool Range Start IP</fielddescr>
131 | 			<fieldname>ipv6rangestart</fieldname>
132 | 			<description>Note: IP assignments are only used if they fall within a managed route.</description>
133 | 			<type>input</type>
134 | 			<size>15</size>
135 | 		</field>
136 | 		<field>
137 | 			<fielddescr>IPv6 Assignment Pool Range End IP</fielddescr>
138 | 			<fieldname>ipv6rangeend</fieldname>
139 | 			<type>input</type>
140 | 			<size>15</size>
141 | 		</field>
142 | 
143 |  		<field>
144 | 			<fielddescr>Allow Any Protocol</fielddescr>
145 | 			<fieldname>allowallprotocols</fieldname>
146 | 			<description>This option overrides the other protocol selections</description>
147 | 			<type>checkbox</type>
148 | 		</field>	
149 | 		<field>
150 | 			<fielddescr>Allow IPv4</fielddescr>
151 | 			<fieldname>allowipv4</fieldname>
152 | 			<description>Allow IPv4 and ARP frame types</description>
153 | 			<type>checkbox</type>
154 | 		</field>
155 | 		<field>
156 | 			<fielddescr>Allow IPv6</fielddescr>
157 | 			<fieldname>allowipv6</fieldname>
158 | 			<description>Allow IPv6 frame types</description>
159 | 			<type>checkbox</type>
160 | 		</field>
161 |     </fields>
162 | 	<custom_add_php_command_late>
163 | 		zerotier_controller_sync();
164 | 	</custom_add_php_command_late>
165 | 	<custom_delete_php_command>
166 | 		zerotier_controller_sync_delete();
167 | 	</custom_delete_php_command>
168 | 	<custom_php_validation_command>
169 | 		validate_form_zerotier_controller($_POST, $input_errors);
170 | 	</custom_php_validation_command>
171 | </packagegui>
172 | 


--------------------------------------------------------------------------------
/pfSense-pkg-zerotier/files/usr/local/pkg/zerotier.inc:
--------------------------------------------------------------------------------
  1 | <?php
  2 | require_once('config.inc');
  3 | require_once('service-utils.inc');
  4 | require_once('util.inc');
  5 | 
  6 | function zerotier_install() {
  7 |  	global $config;
  8 | 	$rc['file'] = 'zerotier-one.sh';
  9 | 	$rc['start'] .= "/usr/local/sbin/zerotier-one -d";
 10 | 	$rc['stop'] .= "/usr/bin/killall zerotier-one";
 11 | 	write_rcfile($rc);
 12 |  	write_config("[zerotier] Package installed.");
 13 |  }
 14 | 
 15 | # Used by Status Page
 16 | function zerotier_list_joined_networks() {
 17 |     exec("/usr/local/bin/zerotier-cli -j listnetworks", $netj);
 18 |     $nets = json_decode(implode('',$netj));
 19 |     return $nets;
 20 | }
 21 | 
 22 | function zerotier_join_network(){
 23 | 	# When joining I know the network ID
 24 |     system("/usr/local/bin/zerotier-cli join {$_POST['joinnetwork']}");
 25 | }
 26 | 
 27 | function zerotier_leave_network(){
 28 | 	global $config;
 29 | 	
 30 |     # Get list of Network IDs in JSON
 31 |     exec("/usr/local/bin/zerotier-cli -j listnetworks", $netj);
 32 |     $nets = json_decode(implode('',$netj));
 33 |     foreach ($nets as $net){
 34 |         # Check if a joined network is in config
 35 |         if (!in_array($net->nwid, array_column($config['installedpackages']['zerotierclient']['config'], 'joinnetwork'))){
 36 |             # If it's not in config then leave
 37 |             exec("/usr/local/bin/zerotier-cli leave {$net->nwid}"); 
 38 |         }
 39 |     }
 40 | }
 41 | 
 42 | function validate_form_zerotier($post, &$input_errors) {
 43 |     if ($post['joinnetwork'] == '' || ($post['joinnetwork'] && (!ctype_xdigit($post['joinnetwork']) || (strlen($post['joinnetwork']) <> 16)))) {
 44 |         $input_errors[] = '"Network ID" must be 16 characters long and contain only A-F, 0-9';
 45 |     }
 46 | }
 47 | 
 48 | function validate_form_zerotier_controller($post, &$input_errors) {
 49 |     if ($post['network'] && (!ctype_xdigit($post['network']) || (strlen($post['network']) <> 16)) ) {
 50 |         $input_errors[] = '"Network ID" can be blank or 16 characters long and contain only A-F, 0-9';
 51 |     }
 52 | 	if (!$post['allowallprotocols'] && !$post['allowipv4'] && !$post['allowipv6'] ) {
 53 |         $input_errors[] = 'You have not Allowed any protocols.';
 54 |     }
 55 | }
 56 | 
 57 | function zerotier_controller_sync(){
 58 | 	zerotier_controller_sync_delete();
 59 | 	zerotier_controller_sync_create();
 60 | }
 61 | 
 62 | function zerotier_controller_sync_create(){
 63 | //     global $config;
 64 | 
 65 | // 	foreach ($config['installedpackages']['zerotiercontroller']['config'] as $net){
 66 | // // 		echo var_dump($net);
 67 | // 	}
 68 | 	zerotier_create_network($_POST);	
 69 | }
 70 | 
 71 | function zerotier_controller_sync_delete(){
 72 |     global $config;
 73 | 
 74 | 	// Get list of networks from controller
 75 | 	$networks = sendPost("GET", "/controller/network", null);
 76 | 
 77 |     $nets = json_decode($networks);
 78 |     foreach ($nets as $net){
 79 |         # Check if a created network is in config
 80 |         if (!in_array($net, array_column($config['installedpackages']['zerotiercontroller']['config'], 'network'))){
 81 |             # If it's not in config then delete it
 82 | 			$res = sendPost("DELETE", "/controller/network/${net}", null);
 83 | 		}
 84 |     }
 85 | }
 86 | 
 87 | function zerotier_create_network($post){
 88 |     global $config;
 89 |     global $id;
 90 | 	
 91 |     // Use a random network id if one is not provided
 92 | 	if ($post['network'] !== '' ){
 93 | 		$network = $post['network'];
 94 | 	} else {
 95 | 		// 	Get controller address
 96 | 		$address = json_decode(sendPost("GET", "/status", null));
 97 | 		$address = $address->address;
 98 | 		$network = "${address}______";
 99 | 	}
100 | 	
101 | 	// Use it to append to networkid to create network
102 | 	$created = json_decode(sendPost("POST", "/controller/network/${network}", json_encode(zerotier_convert_post_to_object($post))));   
103 | 	
104 | 	// if network was blank, record new network ID
105 | 	if (isset($id) && $config['installedpackages']['zerotiercontroller']['config'][$id]['network'] == '') {
106 | 		$config['installedpackages']['zerotiercontroller']['config'][$id]['network'] = $created->nwid;
107 | 		write_config();
108 | 	}
109 | }
110 | 
111 | function zerotier_convert_post_to_object($p){
112 |     //  String
113 |     $o['name']          = $p['name'];
114 |     $o['v4AssignMode']  = $p['v4assignmode'] == 'on' ? 'zt' : '';
115 |     $o['v6AssignMode']  = $p['v6assignmode']; // group_concat
116 | 
117 |     //  Boolean
118 |     $o['private']               = $p['private'] == 'on' ? true : false;
119 |     $o['enableBroadcast']       = $p['enablebroadcast'] == 'on' ? true : false;
120 |     $o['allowPassiveBridging']  = $p['allowpassivebridging'] == 'on' ? true : false;
121 |     
122 |     //  Integer
123 |     $o['multicastLimit']    = (integer) $p['multicastlimit'];
124 | 
125 | 	$parsedRelays = [];
126 | 	$parsedRoutes = [];
127 | 	$parsedRules = [];
128 | 	$parsedPools = [];
129 | 
130 | 	// Routes
131 | 	if (isset($p['routes'])){
132 | 		$parsedRoutes = explode(',',$p['routes']);	
133 | 	}
134 | 
135 | 	// Rules
136 | 	if (isset($p['allowallprotocols'])){
137 | 		$parsedRules[] = ['ruleNo' => 1, 'action' => 'accept'];
138 | 	} else {
139 | 		if (isset($p['allowipv4'])){
140 | 			$parsedRules[] = ['ruleNo' => 1, 'etherType' => 2048, 'action' => 'accept'];
141 | 			$parsedRules[] = ['ruleNo' => 2, 'etherType' => 2054, 'action' => 'accept'];
142 | 		}
143 | 		if (isset($p['allowipv6'])){
144 | 			$parsedRules[] = ['ruleNo' => 3, 'etherType' => 34525, 'action' => 'accept'];
145 | 		}
146 | 	}
147 | 
148 | 	// IP Assignment Poools v4 and v6
149 | 	if ($p['v4assignmode'] == 'on' && isset($p['ipv4rangestart']) && isset($p['ipv4rangeend'])){
150 | 		$parsedPools[] = ['ipRangeStart' => $p['ipv4rangestart'],
151 | 						  'ipRangeEnd' => $p['ipv4rangeend']];
152 | 	}
153 | 	if (in_array('zt', $p['v6assignmode']) && isset($p['ipv6rangestart']) && isset($p['ipv6rangeend'])){
154 | 		$parsedPools[] = ['ipRangeStart' => $p['ipv6rangestart'],
155 | 						  'ipRangeEnd' => $p['ipv6rangeend']];
156 | 	}
157 | 
158 | 	// Arrays				  
159 |     $o['relays']            = $parsedRelays;
160 | //     $o['routes']            = $parsedRoutes;   # This line can be used when zerotier is upgraded
161 |     $o['ipLocalRoutes']     = $parsedRoutes;
162 |     $o['rules']             = $parsedRules;
163 |     $o['ipAssignmentPools'] = $parsedPools;
164 |     
165 |     return $o;
166 | }
167 | 
168 | function sendPost($req, $url, $post){
169 |   $API_KEY = file_get_contents('/var/db/zerotier-one/authtoken.secret');
170 |   $url = 'http://localhost:9993' . $url;
171 |   
172 |   $c = curl_init($url);
173 |   curl_setopt($c, CURLOPT_CUSTOMREQUEST, $req);  
174 |   curl_setopt($c, CURLOPT_RETURNTRANSFER, true);
175 |   curl_setopt($c, CURLOPT_POSTFIELDS, $post);
176 |   curl_setopt($c, CURLOPT_FOLLOWLOCATION, 1);
177 |   curl_setopt($c, CURLOPT_HTTPHEADER, array(
178 |         "X-ZT1-Auth: $API_KEY"
179 |         ));
180 |  
181 |   $result = curl_exec($c);
182 |   curl_close($c);
183 |   return $result;
184 | }
185 | 


--------------------------------------------------------------------------------