add tls support to packetgen

arriven · Mar 31, 2022 · 66a6203 · 66a6203
1 parent 0d22de2
commit 66a6203
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 5 deletions.
diff --git a/examples/config/advanced/packetgen-tcp.yaml b/examples/config/advanced/packetgen-tcp.yaml
@@ -5,7 +5,9 @@ jobs:
         type: net
         args:
           protocol: "tcp"
-          address: "localhost:1234"
+          address: "google.com:443"
+          tls_config:
+            InsecureSkipVerify: true # this is not snake case because I decode it straight into tls config
       packet:
         application:
           type: raw

diff --git a/src/core/packetgen/connection.go b/src/core/packetgen/connection.go
@@ -23,6 +23,7 @@
 package packetgen
 
 import (
+	"crypto/tls"
 	"fmt"
 	"net"
 	"time"
@@ -93,10 +94,11 @@ func (conn rawConn) Write(packet Packet) (n int, err error) {
 }
 
 type netConnConfig struct {
-	Protocol  string
-	Address   string
-	ProxyURLs string `mapstructure:"proxy_urls"`
-	Timeout   time.Duration
+	Protocol        string
+	Address         string
+	Timeout         time.Duration
+	ProxyURLs       string      `mapstructure:"proxy_urls"`
+	TLSClientConfig *tls.Config `mapstructure:"tls_config"`
 }
 
 type netConn struct {
@@ -106,6 +108,17 @@ type netConn struct {
 func openNetConn(c netConnConfig) (*netConn, error) {
 	conn, err := utils.GetProxyFunc(c.ProxyURLs, c.Timeout)(c.Protocol, c.Address)
 
+	if c.TLSClientConfig != nil {
+		tlsConn := tls.Client(conn, c.TLSClientConfig)
+		if err := tlsConn.Handshake(); err != nil {
+			tlsConn.Close()
+
+			return nil, err
+		}
+
+		return &netConn{Conn: tlsConn}, err
+	}
+
 	return &netConn{Conn: conn}, err
 }