vpn

#!/bin/bash
source helpers
source vpn.conf

startup() {
	# get permission to sudo stuff
	echo "Please enter your user password (Machine User)"
	sudo echo "Thank you"
	sudo chmod u+x "$BASEDIR/vpnc-split-traffic"

	start_vpn
	if [ $? -ne 0 ]; then
		echo "Could not start VPN tunnel"
		return $?
	fi
	sleep 5
	setup_routes
	if [ $? -ne 0 ]; then
		echo "Could not setup routes"
		return $?
	fi
	start_proxy
	setup_mac_env
	setup_env
}

shutdown() {
	echo "Please enter your user password (Mac)"
	sudo echo "Thank you"

	reset_env
	reset_mac_env
	stop_proxy
	remove_routes
	stop_vpn

	if [ ! -z "$POST_VPN_DOWN" ]; then
		echo "Executing POST shutdown hook"
		for ((i=0; i<${#POST_VPN_DOWN[@]}; ++i)); do
			eval "sudo ${POST_VPN_DOWN[$i]}"
		done
	fi
}

setup_routes() {
	# add route for remote proxy
	sudo route add -host "$REMOTE_PROXY_HOST" -interface "$TUN_IF"

	return $?
}

remove_routes() {
	sudo route delete -host "$REMOTE_PROXY_HOST" -interface "$TUN_IF" >/dev/null 2>&1

	return $?
}

start_vpn() {
	echo "Digging VPN tunnel"
	sudo openconnect "$VPN_HOST" \
		--useragent='Cisco AnyConnect VPN Agent for Windows 3.1.04072' \
		--local-hostname=FooBars-PC \
		--os=win \
		--user="$VPN_USER" \
		--authgroup="$VPN_AUTH_GROUP"∏\
		--script="$BASEDIR/vpnc-split-traffic" \
		--pid-file="$OPENCONNECT_PIDFILE" \
		--printcookie \
		-b \
		$VPN_EXTRA

	return $?
}

stop_vpn() {
	echo "Collapsing VPN tunnel"
	sudo pkill -F "$OPENCONNECT_PIDFILE"
	# echo Waiting for openconnect to terminate
	# anywait $(cat $OPENCONNECT_PIDFILE)
}

start_proxy() {
	echo "Generating Proxy Configuration"
	URL_USR=$(urlencode "$REMOTE_PROXY_USERNAME")
	URL_PWD=$(urlencode "$REMOTE_PROXY_PASSWORD")
	SEDFILE=$(mktemp -t 'sed.XXXXXXXXXX')
	{
		echo "s~\${PROXY_PORT}~$PROXY_PORT~g"
		echo "s~\${PROXY_PIDFILE}~$PROXY_PIDFILE~g"
		echo "s~\${REMOTE_PROXY_DOMAINS}~$REMOTE_PROXY_DOMAINS~g"
		echo "s~\${REMOTE_PROXY_EXCLUDE}~$REMOTE_PROXY_EXCLUDE~g"
		echo "s~\${REMOTE_PROXY_HOST}~$REMOTE_PROXY_HOST~g"
		echo "s~\${REMOTE_PROXY_HOST}~$REMOTE_PROXY_HOST~g"
		echo "s~\${REMOTE_PROXY_PORT}~$REMOTE_PROXY_PORT~g"
		echo "s~\${REMOTE_PROXY_USERNAME}~$URL_USR~g"
		echo "s~\${REMOTE_PROXY_PASSWORD}~$URL_PWD~g"
		echo "s~\${BASEDIR}~$BASEDIR~g"
	} >> "$SEDFILE"
	sed -f "$SEDFILE" "$BASEDIR/squid.template.conf" > "$BASEDIR/squid.conf"
	rm "$SEDFILE"

	echo "Creating folders for squid logs & cache"
	mkdir -p "$BASEDIR/squid/logs"
	mkdir -p "$BASEDIR/squid/cache"

	echo "Starting Proxy"
	/usr/local/sbin/squid -f "$BASEDIR/squid.conf"
}

stop_proxy() {
	echo "Stopping Proxy"
	/usr/local/sbin/squid -f "$BASEDIR/squid.conf" -k shutdown 2> /dev/null
	echo Waiting for proxy to terminate
	anywait "$(cat "$PROXY_PIDFILE")"
}

setup_env() {
	PROXY="$PROXY_HOST:$PROXY_PORT"

	printf "######################################################\n"
	printf "# Copy these lines into the terminal you wish to use #\n"
	printf "######################################################\n"
	echo export https_proxy="http://$PROXY"
	echo export http_proxy="http://$PROXY"
	echo export HTTPS_PROXY="http://$PROXY"
	echo export HTTP_PROXY="http://$PROXY"
	printf "######################################################\n"
}

reset_env() {
	printf "######################################################\n"
	printf "# Copy these lines into the terminal you wish to use #\n"
	printf "######################################################\n"
  echo unset https_proxy
	echo unset http_proxy
	echo unset HTTPS_PROXY
	echo unset HTTP_PROXY
	printf "######################################################\n"
}

setup_mac_env() {
	echo "Configuring Mac OS network settings"
	SERVICE="$(mac_find_active_service)"
	sudo networksetup -setwebproxy "$SERVICE" "$PROXY_HOST" "$PROXY_PORT"
	sudo networksetup -setwebproxystate "$SERVICE" on
	sudo networksetup -setsecurewebproxy "$SERVICE" "$PROXY_HOST" "$PROXY_PORT"
	sudo networksetup -setsecurewebproxystate "$SERVICE" on
}

reset_mac_env() {
	echo "Restoring Mac OS network settings"
	SERVICE="$(mac_find_active_service)"
	echo "Disableing Proxy for $SERVICE"
	sudo networksetup -setwebproxystate "$SERVICE" off
	echo "Disableing Secure Proxy for $SERVICE"
	sudo networksetup -setsecurewebproxystate "$SERVICE" off
}

if [ -n "$1" ]; then
	case "$1" in
		start)
			startup
			;;
		stop)
			shutdown
			;;
		re)
			remove_routes
			stop_vpn
			start_vpn
			setup_routes
			;;
		encode)
			urlencode "$2"
			;;
		*)
			echo "usage: $0 <start|stop>"
			;;
	esac
fi