0c575ed8c9
- The client will now display all ssl errors that occur during the handshake process properly. - New versions of MRCI host will longer support multiple certs so the the common name designator was removed from the client header. It is now just 272bytes of padding reserved for future expansion. - Fixed the defined server header len from 35 to 37. - The client will now respond to only reply 1 or 2 on the host header. - HOST_CERT was removed as a data type and the host will longer use it.
116 lines
5.7 KiB
Markdown
116 lines
5.7 KiB
Markdown
# Cmdr #
|
|
|
|
Cmdr is a command line terminal emulator client for MRCI host using text input/output. This help administer MRCI host via local or remote TCP connections encrypted with TLS/SSL using the MRCI protocol. It also supports file transfers to/from the client using the GEN_FILE sub-protocol that MRCI understands.
|
|
|
|
### Usage ###
|
|
|
|
Cmdr have it's own terminal display so there is no command line switches to pass on start up. Instead, all commands are parsed and processed within it's own terminal interface. Any commands not seen as an internal command for the client itself is passed through to the MRCI host if connected. The client will add a numeric identifer to the end of all host command names that clash with the client commands so there is no chance a client and host command can conflict with each other.
|
|
|
|
### Versioning System ###
|
|
|
|
This application uses a 2 number versioning system: [major].[minor]
|
|
|
|
* Major - this indicates any changes that cause old configuration or library files to be incompatible.
|
|
* Minor - this indicates changes to the code that still maintains compatibility with existing config files or libraries.
|
|
|
|
Any increments to major resets minor to 0.
|
|
|
|
### The Protocol ###
|
|
|
|
This application being a MRCI client uses the MRCI protocol to transport data to and from the host using TCP in a binary data format called MRCI frames. In general, local connections with the host are not encrypted but all connections outside of the host must be encrypted using TLS/SSL (including the local network).
|
|
|
|
Before any MRCI frames can be transported, both the host and client need basic information about each other. This is done by having the client send a fixed length client header when it successfully connects to the host and the host will reply with it's own fixed length host header, described below.
|
|
|
|
### MRCI Frame Format ###
|
|
|
|
```
|
|
[type_id][cmd_id][branch_id][data_len][payload]
|
|
|
|
type_id - 1byte - 8bit little endian integer type id of the payload.
|
|
cmd_id - 2bytes - 16bit little endian integer command id.
|
|
branch_id - 2bytes - 16bit little endian integer branch id.
|
|
data_len - 3bytes - 24bit little endian integer size of the payload.
|
|
payload - variable - the actual data to be processed.
|
|
```
|
|
|
|
notes:
|
|
|
|
* A full description of the type id's can be found in the [Type_IDs.md](type_ids.md) document.
|
|
|
|
* This client call commands by name but the host will assign unique command ids for it's command names and will require the client to use the command id on calling. To track this command id to command name relationship for the host commands, this client will rely on the [ASYNC_ADD_CMD](async.md) and [ASYNC_RM_CMD](async.md) async commands.
|
|
|
|
* The branch id is an id that can be used to run muliple instances of the same command on the host. Commands sent by a certain branch id will result in data sent back with that same branch id. For now, this client does not do branching; instead all commands sent to the host using branch id 0 only.
|
|
|
|
### Client Header (This Application) ###
|
|
|
|
```
|
|
[tag][appName][padding]
|
|
|
|
tag - 4bytes - 0x4D, 0x52, 0x43, 0x49 (MRCI)
|
|
appName - 134bytes - UTF16LE string (padded with 0x00)
|
|
padding - 272bytes - padding of 0x00 bytes reserved for future expansion
|
|
```
|
|
|
|
notes:
|
|
|
|
* The **tag** is just a fixed ascii string "MRCI" that indicates to the host that the client is indeed attempting to use the MRCI protocol.
|
|
|
|
* The **appName** is the name of the client application that is connected to the host. It can also contain the client's app version if needed because it doesn't follow any particular standard. This string is accessable to all modules so the commands themselves can be made aware of what app the user is currently using.
|
|
|
|
### Host Header ###
|
|
|
|
```
|
|
Format:
|
|
|
|
[reply][major][minor][tcp_rev][mod_rev][sesId]
|
|
|
|
reply - 1byte - 8bit little endian unsigned int
|
|
major - 2bytes - 16bit little endian unsigned int
|
|
minor - 2bytes - 16bit little endian unsigned int
|
|
tcp_rev - 2bytes - 16bit little endian unsigned int
|
|
mod_rev - 2bytes - 16bit little endian unsigned int
|
|
sesId - 28bytes - 224bit sha3 hash
|
|
```
|
|
|
|
notes:
|
|
|
|
* **reply** is a numeric value that the host returns in it's header to communicate to the client if SSL need to initated or not.
|
|
|
|
* reply = 1, means SSL is not required so the client doesn't need to take any further action.
|
|
* reply = 2, means SSL is required to continue so the client needs to send a STARTLS signal.
|
|
|
|
* **sesId** is the session id. It is a unique 224bit sha3 hash generated against the current date and time of session creation (down to the msec) and the machine id of the host. This can be used by the host or client to uniquely identify the current session or past sessions.
|
|
|
|
### Async Commands ###
|
|
|
|
Async commands are 'virtual commands' that this application can encounter at any time while connected to the host. More information about this can be found in the [Async.md](Async.md) document. This application does act on some of the data carried by the async commands but not all of them.
|
|
|
|
### Development Setup ###
|
|
|
|
Linux Required Packages:
|
|
```
|
|
qtbase5-dev
|
|
libssl-dev
|
|
gcc
|
|
make
|
|
makeself
|
|
```
|
|
|
|
### Build From Source (Linux) ###
|
|
|
|
Linux_build.sh is a custom script designed to build this project from the source code using qmake, make and makeself. You can pass 2 optional arguments:
|
|
|
|
1. The path to the QT bin folder in case you want to compile with a QT install not defined in PATH.
|
|
2. Path of the output makeself file (usually has a .run extension). If not given, the outfile will be named cmdr-x.x.run in the source code folder.
|
|
|
|
Build:
|
|
```
|
|
cd /path/to/source/code
|
|
sh ./linux_build.sh
|
|
```
|
|
Install:
|
|
```
|
|
chmod +x ./cmdr-x.x.run
|
|
./cmdr-x.x.run
|
|
```
|