luci-app-softethervpn: add package

package/lean/luci-app-softethervpn/Makefile

@@ -0,0 +1,18 @@
+# Copyright (C) 2018-2019 Lienol
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=LuCI support for SoftEtherVPN
+LUCI_DEPENDS:=+zlib +libpthread +librt +libreadline +libncurses +libiconv-full +kmod-tun +libopenssl +softethervpn-bridge +softethervpn-client +softethervpn-server
+LUCI_PKGARCH:=all
+PKG_VERSION:=1.0
+PKG_RELEASE:=2
+
+include $(TOPDIR)/feeds/luci/luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
+
+

package/lean/luci-app-softethervpn/luasrc/controller/softethervpn.lua

@@ -0,0 +1,18 @@
+module("luci.controller.softethervpn",package.seeall)
+
+function index()
+	if not nixio.fs.access("/etc/config/softethervpn")then
+		return
+	end
+	
+	entry({"admin","vpn"}, firstchild(), "VPN", 45).dependent = false
+	entry({"admin","vpn","softethervpn"},cbi("softethervpn"),_("SoftEther VPN"),50).dependent=true
+	entry({"admin","vpn","softethervpn","status"},call("status")).leaf=true
+end
+
+function status()
+	local e={}
+	e.status=luci.sys.call("pidof %s >/dev/null"%"vpnserver")==0
+	luci.http.prepare_content("application/json")
+	luci.http.write_json(e)
+end

package/lean/luci-app-softethervpn/luasrc/model/cbi/softethervpn.lua

@@ -0,0 +1,14 @@
+local s=require"luci.sys"
+local m,s,o
+m=Map("softethervpn",translate("SoftEther VPN"))
+m.description = translate("SoftEther VPN is an open source, cross-platform, multi-protocol virtual private network solution developed by university of tsukuba graduate student Daiyuu Nobori for master's thesis. <br>can easily set up OpenVPN, IPsec, L2TP, ms-sstp, L2TPv3 and EtherIP servers on the router using the console.")
+m.template="softethervpn/index"
+s=m:section(TypedSection,"softether")
+s.anonymous=true
+o=s:option(DummyValue,"softethervpn_status",translate("Current Condition"))
+o.template="softethervpn/status"
+o.value=translate("Collecting data...")
+o=s:option(Flag,"enable",translate("Enabled"))
+o.rmempty=false
+o=s:option(DummyValue,"moreinfo",translate("<strong>控制台下载：<a onclick=\"window.open('http://www.softether-download.com/files/softether/v4.22-9634-beta-2016.11.27-tree/Windows/SoftEther_VPN_Server_and_VPN_Bridge/softether-vpnserver_vpnbridge-v4.22-9634-beta-2016.11.27-windows-x86_x64-intel.exe')\"><br/>Windows-x86_x64-intel.exe</a><a  onclick=\"window.open('http://www.softether-download.com/files/softether/v4.21-9613-beta-2016.04.24-tree/Mac_OS_X/Admin_Tools/VPN_Server_Manager_Package/softether-vpnserver_manager-v4.21-9613-beta-2016.04.24-macos-x86-32bit.pkg')\"><br/>macos-x86-32bit.pkg</a></strong>"))
+return m

package/lean/luci-app-softethervpn/luasrc/view/softethervpn/index.htm

@@ -0,0 +1,18 @@
+<%#
+ Copyright (C) 2018-2019 Lienol
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<% include("cbi/map") %>
+<script type="text/javascript">//<![CDATA[
+	XHR.poll(2, '<%=luci.dispatcher.build_url("admin", "vpn", "softethervpn", "status")%>', null,
+		function(x, result)
+		{
+			var status = document.getElementsByClassName('softethervpn_status')[0];
+			status.setAttribute("style","font-weight:bold;");
+			status.setAttribute("color",result.status ? "green":"red");
+			status.innerHTML = result.status?'<%=translate("RUNNING")%>':'<%=translate("NOT RUNNING")%>';
+		}
+	)
+//]]>
+</script>

package/lean/luci-app-softethervpn/luasrc/view/softethervpn/status.htm

@@ -0,0 +1,3 @@
+<%+cbi/valueheader%>
+<font class="softethervpn_status"><%=pcdata(self:cfgvalue(section) or self.default or "")%></font>
+<%+cbi/valuefooter%>

package/lean/luci-app-softethervpn/po/zh-cn/softethervpn.po

@@ -0,0 +1,23 @@
+msgid "SoftEther VPN"
+msgstr "SoftEther VPN 服务器"
+
+msgid "SoftEther VPN is an open source, cross-platform, multi-protocol virtual private network solution developed by university of tsukuba graduate student Daiyuu Nobori for master's thesis. <br>can easily set up OpenVPN, IPsec, L2TP, ms-sstp, L2TPv3 and EtherIP servers on the router using the console."
+msgstr "SoftEther VPN是由筑波大学研究生Daiyuu Nobori因硕士论文开发的开源，跨平台，多重协定的虚拟私人网路方案。<br/>使用控制台可以轻松在路由器上搭建OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 和 EtherIP服务器。"
+
+msgid "PPTP VPN Server status"
+msgstr "PPTP VPN 服务器运行状态"
+
+msgid "Current Condition"
+msgstr "当前状态"
+
+msgid "Enabled"
+msgstr "启用"
+
+msgid "Open L2TP/IPSec firewall"
+msgstr "开启L2TP/IPSec防火墙"
+
+msgid "Open the MS-SSTP firewall"
+msgstr "开启MS-SSTP防火墙"
+
+msgid "Open the OpenVPN firewall"
+msgstr "开启OpenVPN防火墙"

package/lean/luci-app-softethervpn/root/etc/config/softethervpn

@@ -0,0 +1,4 @@
+
+config softether
+	option enable '0'
+

package/lean/luci-app-softethervpn/root/etc/init.d/softethervpn

@@ -0,0 +1,45 @@
+#!/bin/sh /etc/rc.common
+#
+# Copyright (C) 2015 OpenWrt-dist
+# Copyright (C) 2016 Chen RuiWei <crwbak@gmail.com>
+# Copyright (C) 2018-2019 Lienol
+#
+# This is free software, licensed under the GNU General Public License v3.
+# See /LICENSE for more information.
+#
+
+START=99
+STOP=10
+
+CONFIG=softethervpn
+
+get_config()
+{
+	config_get_bool enable $1 enable 0
+}
+
+uci_get_by_type() {
+	local index=0
+	if [ -n $4 ]; then
+		index=$4
+	fi
+	local ret=$(uci get $CONFIG.@$1[$index].$2 2>/dev/null)
+	echo ${ret:=$3}
+}
+
+start()
+{
+	config_load softethervpn
+	config_foreach get_config softether
+	[ $enable -ne 1 ] && exit 0
+	logger -t 'softethervpn' "Starting softether vpnserver service."
+	/usr/bin/env LANG=en_US.UTF-8 /usr/libexec/softethervpn/vpnserver start > /dev/null 2>&1
+	fw3 reload
+}
+
+stop()
+{
+	logger -t 'softethervpn' "Stopping softether vpnserver service."
+	/usr/bin/env LANG=en_US.UTF-8 /usr/libexec/softethervpn/vpnserver stop > /dev/null 2>&1
+	fw3 reload
+}

package/lean/luci-app-softethervpn/root/etc/uci-defaults/luci-app-softethervpn

@@ -0,0 +1,25 @@
+#!/bin/sh
+
+uci -q batch <<-EOF >/dev/null
+	delete firewall.softethervpn
+	set firewall.softethervpn=include
+	set firewall.softethervpn.type=script
+	set firewall.softethervpn.path=/usr/share/softethervpn/firewall.include
+	set firewall.softethervpn.reload=1
+EOF
+
+uci -q batch <<-EOF >/dev/null
+	delete ucitrack.@softethervpn[-1]
+	add ucitrack softethervpn
+	set ucitrack.@softethervpn[-1].init=softethervpn
+	commit ucitrack
+EOF
+
+/etc/init.d/softethervpnbridge disable && /etc/init.d/softethervpnbridge stop
+/etc/init.d/softethervpnclient disable && /etc/init.d/softethervpnclient stop
+/etc/init.d/softethervpnserver disable && /etc/init.d/softethervpnserver stop
+
+chmod a+x /usr/share/softethervpn/* >/dev/null 2>&1
+
+rm -f /tmp/luci-indexcache
+exit 0

package/lean/luci-app-softethervpn/root/usr/share/softethervpn/firewall.include

@@ -0,0 +1,22 @@
+#!/bin/sh
+
+openvpnport=$(cat /usr/libexec/softethervpn/vpn_server.config 2>/dev/null|grep OpenVPN_UdpPortList | awk -F " " '{print $3}')
+[ -z "$openvpnport" ] && openvpnport=1194
+iptables -D INPUT -p udp -m multiport --dports 500,1701,4500 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+[ -n "$openvpnport" ] && iptables -D INPUT -p udp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+[ -n "$openvpnport" ] && iptables -D INPUT -p tcp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 443 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 5555 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 8888 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+iptables -D INPUT -p tcp --dport 992 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+
+enable=$(uci get softethervpn.@softether[0].enable)
+if [ $enable -eq 1 ]; then
+	iptables -I INPUT -p udp -m multiport --dports 500,1701,4500 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT 2>/dev/null
+	iptables -I INPUT -p udp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport $openvpnport -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 443 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 5555 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 8888 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+	iptables -I INPUT -p tcp --dport 992 -m comment --comment "Rule For SoftEther VPN Server" -j ACCEPT
+fi