+ head -c 4096 /dev/urandom | md5 | head -c 24 >authtoken.secret

+sleep 1

+

+if [ -d "/Library/Application Support/ZeroTier/One" ]; then

+ cd "/Library/Application Support/ZeroTier/One"

+ if [ -f "zerotier-one.pid" ]; then

+ ztpid=`cat zerotier-one.pid`

+ if [ "$ztpid" -gt "0" ]; then

+ kill `cat zerotier-one.pid`

+ fi

+ fi

+fi

+

+sleep 1

+

+cd "/Applications"

+

+exit 0

+ifeq ($(ZT_AUTO_UPDATE),1)

+ DEFS+=-DZT_AUTO_UPDATE

+endif

+

+ if (Utils::compareVersion(major,minor,rev,_newestVersionSeen[0],_newestVersionSeen[1],_newestVersionSeen[2]) > 0) {

+ * Compare Peer version tuples

+ *

+ * @return -1, 0, or 1 based on whether first tuple is less than, equal to, or greater than second

+ */

+ static inline int compareVersion(unsigned int maj1,unsigned int min1,unsigned int rev1,unsigned int maj2,unsigned int min2,unsigned int rev2)

+ throw()

+ {

+ if (maj1 > maj2)

+ return 1;

+ else if (maj1 < maj2)

+ return -1;

+ else {

+ if (min1 > min2)

+ return 1;

+ else if (min1 < min2)

+ return -1;

+ else {

+ if (rev1 > rev2)

+ return 1;

+ else if (rev1 < rev2)

+ return -1;

+ else return 0;

+ }

+ }

+ }

+

+ /**

+#include <stdint.h>

+#include "../node/Identity.hpp"

+#include "../osdep/Thread.hpp"

+#include "../osdep/Http.hpp"

+#endif // ZT_ENABLE_NETWORK_CONTROLLER

+#else

+#include <sys/types.h>

+#include <sys/wait.h>

+#include <unistd.h>

+#ifdef ZT_AUTO_UPDATE

+#define ZT_AUTO_UPDATE_MAX_HTTP_RESPONSE_SIZE (1024 * 1024 * 64)

+class BackgroundSoftwareUpdateChecker

+{

+public:

+ bool isValidSigningIdentity(const Identity &id)

+ {

+ return (

+ /* 0005 */ (id == Identity("ba57ea350e:0:9d4be6d7f86c5660d5ee1951a3d759aa6e12a84fc0c0b74639500f1dbc1a8c566622e7d1c531967ebceb1e9d1761342f88324a8ba520c93c35f92f35080fa23f"))

+ /* 0006 */ ||(id == Identity("5067b21b83:0:8af477730f5055c48135b84bed6720a35bca4c0e34be4060a4c636288b1ec22217eb22709d610c66ed464c643130c51411bbb0294eef12fbe8ecc1a1e2c63a7a"))

+ /* 0007 */ ||(id == Identity("4f5e97a8f1:0:57880d056d7baeb04bbc057d6f16e6cb41388570e87f01492fce882485f65a798648595610a3ad49885604e7fb1db2dd3c2c534b75e42c3c0b110ad07b4bb138"))

+ /* 0008 */ ||(id == Identity("580bbb8e15:0:ad5ef31155bebc6bc413991992387e083fed26d699997ef76e7c947781edd47d1997161fa56ba337b1a2b44b129fd7c7197ce5185382f06011bc88d1363b4ddd"))

+ );

+ }

+

+ void doUpdateCheck()

+ {

+ std::string url(OneService::autoUpdateUrl());

+ if ((url.length() <= 7)||(url.substr(0,7) != "http://"))

+ return;

+

+ std::string httpHost;

+ std::string httpPath;

+ {

+ std::size_t slashIdx = url.substr(7).find_first_of('/');

+ if (slashIdx == std::string::npos) {

+ httpHost = url.substr(7);

+ httpPath = "/";

+ } else {

+ httpHost = url.substr(7,slashIdx);

+ httpPath = url.substr(slashIdx + 7);

+ }

+ }

+ if (httpHost.length() == 0)

+ return;

+

+ std::vector<InetAddress> ips(OSUtils::resolve(httpHost.c_str()));

+ for(std::vector<InetAddress>::iterator ip(ips.begin());ip!=ips.end();++ip) {

+ if (!ip->port())

+ ip->setPort(80);

+ std::string nfoPath = httpPath + "LATEST.nfo";

+ std::map<std::string,std::string> requestHeaders,responseHeaders;

+ std::string body;

+ requestHeaders["Host"] = httpHost;

+ unsigned int scode = Http::GET(ZT_AUTO_UPDATE_MAX_HTTP_RESPONSE_SIZE,60000,reinterpret_cast<const struct sockaddr *>(&(*ip)),nfoPath.c_str(),requestHeaders,responseHeaders,body);

+ //fprintf(stderr,"UPDATE %s %s %u %lu\n",ip->toString().c_str(),nfoPath.c_str(),scode,body.length());

+ if ((scode == 200)&&(body.length() > 0)) {

+ /* NFO fields:

+ *

+ * file=<filename>

+ * signedBy=<signing identity>

+ * ed25519=<ed25519 ECC signature of archive>

+ * vMajor=<major version>

+ * vMinor=<minor version>

+ * vRevision=<revision> */

+ Dictionary nfo(body);

+

+ unsigned int vMajor = Utils::strToUInt(nfo.get("vMajor","0").c_str());

+ unsigned int vMinor = Utils::strToUInt(nfo.get("vMinor","0").c_str());

+ unsigned int vRevision = Utils::strToUInt(nfo.get("vRevision","0").c_str());

+ if (Utils::compareVersion(vMajor,vMinor,vRevision,ZEROTIER_ONE_VERSION_MAJOR,ZEROTIER_ONE_VERSION_MINOR,ZEROTIER_ONE_VERSION_REVISION) <= 0) {

+ //fprintf(stderr,"UPDATE %u.%u.%u is not newer than our version\n",vMajor,vMinor,vRevision);

+ return;

+ }

+

+ Identity signedBy;

+ if ((!signedBy.fromString(nfo.get("signedBy","")))||(!isValidSigningIdentity(signedBy))) {

+ //fprintf(stderr,"UPDATE invalid signedBy or not authorized signing identity.\n");

+ return;

+ }

+

+ std::string filePath(nfo.get("file",""));

+ if ((!filePath.length())||(filePath.find("..") != std::string::npos))

+ return;

+ filePath = httpPath + filePath;

+

+ std::string fileData;

+ if (Http::GET(ZT_AUTO_UPDATE_MAX_HTTP_RESPONSE_SIZE,60000,reinterpret_cast<const struct sockaddr *>(&(*ip)),filePath.c_str(),requestHeaders,responseHeaders,fileData) != 200) {

+ //fprintf(stderr,"UPDATE GET %s failed\n",filePath.c_str());

+ return;

+ }

+

+ std::string ed25519(nfo.get("ed25519",""));

+ if ((ed25519.length() == 0)||(!signedBy.verify(fileData.data(),(unsigned int)fileData.length(),ed25519.data(),(unsigned int)ed25519.length()))) {

+ //fprintf(stderr,"UPDATE %s failed signature check!\n",filePath.c_str());

+ return;

+ }

+

+ /* --------------------------------------------------------------- */

+ /* We made it! Begin OS-specific installation code. */

+

+#ifdef __APPLE__

+ /* OSX version is in the form of a MacOSX .pkg file, so we will

+ * launch installer (normally in /usr/sbin) to install it. It will

+ * then turn around and shut down the service, update files, and

+ * relaunch. */

+ {

+ char bashp[128],pkgp[128];

+ Utils::snprintf(bashp,sizeof(bashp),"/tmp/ZeroTierOne-update-%u.%u.%u.sh",vMajor,vMinor,vRevision);

+ Utils::snprintf(pkgp,sizeof(pkgp),"/tmp/ZeroTierOne-update-%u.%u.%u.pkg",vMajor,vMinor,vRevision);

+ FILE *pkg = fopen(pkgp,"w");

+ if ((!pkg)||(fwrite(fileData.data(),fileData.length(),1,pkg) != 1)) {

+ fclose(pkg);

+ unlink(bashp);

+ unlink(pkgp);

+ fprintf(stderr,"UPDATE error writing %s\n",pkgp);

+ return;

+ }

+ fclose(pkg);

+ FILE *bash = fopen(bashp,"w");

+ if (!bash) {

+ fclose(pkg);

+ unlink(bashp);

+ unlink(pkgp);

+ fprintf(stderr,"UPDATE error writing %s\n",bashp);

+ return;

+ }

+ fprintf(bash,

+ "#!/bin/bash\n"

+ "export PATH=/bin:/usr/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/sbin\n"

+ "sleep 2\n"

+ "installer -pkg \"%s\" -target /\n"

+ "sleep 1\n"

+ "rm -f \"%s\" \"%s\"\n"

+ "exit 0\n",

+ pkgp,

+ pkgp,

+ bashp);

+ fclose(bash);

+ long pid = (long)vfork();

+ if (pid == 0) {

+ execl("/bin/bash","/bin/bash",bashp,(char *)0);

+ exit(0);

+ }

+ }

+#endif // __APPLE__

+

+#ifdef __WINDOWS__

+ /* Windows version comes in the form of .MSI package that

+ * takes care of everything. */

+ {

+ }

+#endif // __WINDOWS__

+

+ /* --------------------------------------------------------------- */

+

+ return;

+ } // else try to fetch from next IP address

+ }

+ }

+

+ void threadMain()

+ throw()

+ {

+ try {

+ this->doUpdateCheck();

+ } catch ( ... ) {}

+ }

+};

+static BackgroundSoftwareUpdateChecker backgroundSoftwareUpdateChecker;

+#endif // ZT_AUTO_UPDATE

+

+

+#ifdef ZT_AUTO_UPDATE

+ Thread::start(&backgroundSoftwareUpdateChecker);

+#endif

+ return "http://download.zerotier.com/update/mac_intel/";

+ return "http://download.zerotier.com/update/win_intel/";