874
/* stop main loop after sigterm has been called */
875
static void handle_sigterm(__attribute__((unused)) int sig){
876
int old_errno = errno;
877
avahi_simple_poll_quit(mc.simple_poll);
881
822
int main(int argc, char *argv[]){
882
AvahiSServiceBrowser *sb = NULL;
887
int exitcode = EXIT_SUCCESS;
888
const char *interface = "eth0";
889
struct ifreq network;
893
char *connect_to = NULL;
894
char tempdir[] = "/tmp/mandosXXXXXX";
895
bool tempdir_created = false;
896
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
897
const char *seckey = PATHDIR "/" SECKEY;
898
const char *pubkey = PATHDIR "/" PUBKEY;
900
bool gnutls_initialized = false;
901
bool gpgme_initialized = false;
904
struct sigaction old_sigterm_action;
905
struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
908
struct argp_option options[] = {
909
{ .name = "debug", .key = 128,
910
.doc = "Debug mode", .group = 3 },
911
{ .name = "connect", .key = 'c',
912
.arg = "ADDRESS:PORT",
913
.doc = "Connect directly to a specific Mandos server",
915
{ .name = "interface", .key = 'i',
917
.doc = "Network interface that will be used to search for"
920
{ .name = "seckey", .key = 's',
922
.doc = "OpenPGP secret key file base name",
924
{ .name = "pubkey", .key = 'p',
926
.doc = "OpenPGP public key file base name",
928
{ .name = "dh-bits", .key = 129,
930
.doc = "Bit length of the prime number used in the"
931
" Diffie-Hellman key exchange",
933
{ .name = "priority", .key = 130,
935
.doc = "GnuTLS priority string for the TLS handshake",
937
{ .name = "delay", .key = 131,
939
.doc = "Maximum delay to wait for interface startup",
944
error_t parse_opt(int key, char *arg,
945
struct argp_state *state){
947
case 128: /* --debug */
950
case 'c': /* --connect */
953
case 'i': /* --interface */
956
case 's': /* --seckey */
959
case 'p': /* --pubkey */
962
case 129: /* --dh-bits */
963
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
964
if(ret < 1 or tmpmax != (typeof(mc.dh_bits))tmpmax
965
or arg[numchars] != '\0'){
966
fprintf(stderr, "Bad number of DH bits\n");
969
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
971
case 130: /* --priority */
974
case 131: /* --delay */
975
ret = sscanf(arg, "%lf%n", &delay, &numchars);
976
if(ret < 1 or arg[numchars] != '\0'){
977
fprintf(stderr, "Bad delay\n");
986
return ARGP_ERR_UNKNOWN;
991
struct argp argp = { .options = options, .parser = parse_opt,
993
.doc = "Mandos client -- Get and decrypt"
994
" passwords from a Mandos server" };
995
ret = argp_parse(&argp, argc, argv, 0, 0, NULL);
996
if(ret == ARGP_ERR_UNKNOWN){
997
fprintf(stderr, "Unknown error while parsing arguments\n");
998
exitcode = EXIT_FAILURE;
1004
avahi_set_log_function(empty_log);
1007
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1008
from the signal handler */
1009
/* Initialize the pseudo-RNG for Avahi */
1010
srand((unsigned int) time(NULL));
1011
mc.simple_poll = avahi_simple_poll_new();
1012
if(mc.simple_poll == NULL){
1013
fprintf(stderr, "Avahi: Failed to create simple poll object.\n");
1014
exitcode = EXIT_FAILURE;
1018
sigemptyset(&sigterm_action.sa_mask);
1019
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
1021
perror("sigaddset");
1022
exitcode = EXIT_FAILURE;
1025
ret = sigaction(SIGTERM, &sigterm_action, &old_sigterm_action);
1027
perror("sigaction");
1028
exitcode = EXIT_FAILURE;
1033
/* If the interface is down, bring it up */
1034
if(interface[0] != '\0'){
1036
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1037
messages to mess up the prompt */
1038
ret = klogctl(8, NULL, 5);
1039
bool restore_loglevel = true;
1041
restore_loglevel = false;
1046
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1049
exitcode = EXIT_FAILURE;
1051
if(restore_loglevel){
1052
ret = klogctl(7, NULL, 0);
1060
strcpy(network.ifr_name, interface);
1061
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1063
perror("ioctl SIOCGIFFLAGS");
1065
if(restore_loglevel){
1066
ret = klogctl(7, NULL, 0);
1072
exitcode = EXIT_FAILURE;
1075
if((network.ifr_flags & IFF_UP) == 0){
1076
network.ifr_flags |= IFF_UP;
1077
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1079
perror("ioctl SIOCSIFFLAGS");
1080
exitcode = EXIT_FAILURE;
1082
if(restore_loglevel){
823
AvahiSServiceBrowser *sb = NULL;
828
int exitcode = EXIT_SUCCESS;
829
const char *interface = "eth0";
830
struct ifreq network;
834
char *connect_to = NULL;
835
char tempdir[] = "/tmp/mandosXXXXXX";
836
bool tempdir_created = false;
837
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
838
const char *seckey = PATHDIR "/" SECKEY;
839
const char *pubkey = PATHDIR "/" PUBKEY;
841
mandos_context mc = { .simple_poll = NULL, .server = NULL,
842
.dh_bits = 1024, .priority = "SECURE256"
843
":!CTYPE-X.509:+CTYPE-OPENPGP" };
844
bool gnutls_initialized = false;
845
bool gpgme_initialized = false;
849
struct argp_option options[] = {
850
{ .name = "debug", .key = 128,
851
.doc = "Debug mode", .group = 3 },
852
{ .name = "connect", .key = 'c',
853
.arg = "ADDRESS:PORT",
854
.doc = "Connect directly to a specific Mandos server",
856
{ .name = "interface", .key = 'i',
858
.doc = "Interface that will be used to search for Mandos"
861
{ .name = "seckey", .key = 's',
863
.doc = "OpenPGP secret key file base name",
865
{ .name = "pubkey", .key = 'p',
867
.doc = "OpenPGP public key file base name",
869
{ .name = "dh-bits", .key = 129,
871
.doc = "Bit length of the prime number used in the"
872
" Diffie-Hellman key exchange",
874
{ .name = "priority", .key = 130,
876
.doc = "GnuTLS priority string for the TLS handshake",
878
{ .name = "delay", .key = 131,
880
.doc = "Maximum delay to wait for interface startup",
885
error_t parse_opt(int key, char *arg,
886
struct argp_state *state) {
888
case 128: /* --debug */
891
case 'c': /* --connect */
894
case 'i': /* --interface */
897
case 's': /* --seckey */
900
case 'p': /* --pubkey */
903
case 129: /* --dh-bits */
904
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
905
if(ret < 1 or tmpmax != (typeof(mc.dh_bits))tmpmax
906
or arg[numchars] != '\0'){
907
fprintf(stderr, "Bad number of DH bits\n");
910
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
912
case 130: /* --priority */
915
case 131: /* --delay */
916
ret = sscanf(arg, "%lf%n", &delay, &numchars);
917
if(ret < 1 or arg[numchars] != '\0'){
918
fprintf(stderr, "Bad delay\n");
927
return ARGP_ERR_UNKNOWN;
932
struct argp argp = { .options = options, .parser = parse_opt,
934
.doc = "Mandos client -- Get and decrypt"
935
" passwords from a Mandos server" };
936
ret = argp_parse(&argp, argc, argv, 0, 0, NULL);
937
if(ret == ARGP_ERR_UNKNOWN){
938
fprintf(stderr, "Unknown error while parsing arguments\n");
939
exitcode = EXIT_FAILURE;
944
/* If the interface is down, bring it up */
946
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
947
messages to mess up the prompt */
948
ret = klogctl(8, NULL, 5);
953
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
956
exitcode = EXIT_FAILURE;
957
ret = klogctl(7, NULL, 0);
963
strcpy(network.ifr_name, interface);
964
ret = ioctl(sd, SIOCGIFFLAGS, &network);
966
perror("ioctl SIOCGIFFLAGS");
967
ret = klogctl(7, NULL, 0);
971
exitcode = EXIT_FAILURE;
974
if((network.ifr_flags & IFF_UP) == 0){
975
network.ifr_flags |= IFF_UP;
976
ret = ioctl(sd, SIOCSIFFLAGS, &network);
978
perror("ioctl SIOCSIFFLAGS");
979
exitcode = EXIT_FAILURE;
1083
980
ret = klogctl(7, NULL, 0);
1085
982
perror("klogctl");
1092
/* sleep checking until interface is running */
1093
for(int i=0; i < delay * 4; i++){
1094
ret = ioctl(sd, SIOCGIFFLAGS, &network);
987
/* sleep checking until interface is running */
988
for(int i=0; i < delay * 4; i++){
989
ret = ioctl(sd, SIOCGIFFLAGS, &network);
991
perror("ioctl SIOCGIFFLAGS");
992
} else if(network.ifr_flags & IFF_RUNNING){
995
struct timespec sleeptime = { .tv_nsec = 250000000 };
996
nanosleep(&sleeptime, NULL);
998
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1096
perror("ioctl SIOCGIFFLAGS");
1097
} else if(network.ifr_flags & IFF_RUNNING){
1100
struct timespec sleeptime = { .tv_nsec = 250000000 };
1101
ret = nanosleep(&sleeptime, NULL);
1102
if(ret == -1 and errno != EINTR){
1103
perror("nanosleep");
1106
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1111
if(restore_loglevel){
1112
1002
/* Restores kernel loglevel to default */
1113
1003
ret = klogctl(7, NULL, 0);
1115
1005
perror("klogctl");
1135
ret = init_gnutls_global(pubkey, seckey);
1137
fprintf(stderr, "init_gnutls_global failed\n");
1138
exitcode = EXIT_FAILURE;
1141
gnutls_initialized = true;
1144
if(mkdtemp(tempdir) == NULL){
1148
tempdir_created = true;
1150
if(not init_gpgme(pubkey, seckey, tempdir)){
1151
fprintf(stderr, "init_gpgme failed\n");
1152
exitcode = EXIT_FAILURE;
1155
gpgme_initialized = true;
1158
if(interface[0] != '\0'){
1022
ret = init_gnutls_global(&mc, pubkey, seckey);
1024
fprintf(stderr, "init_gnutls_global failed\n");
1025
exitcode = EXIT_FAILURE;
1028
gnutls_initialized = true;
1031
if(mkdtemp(tempdir) == NULL){
1035
tempdir_created = true;
1037
if(not init_gpgme(&mc, pubkey, seckey, tempdir)){
1038
fprintf(stderr, "init_gpgme failed\n");
1039
exitcode = EXIT_FAILURE;
1042
gpgme_initialized = true;
1159
1045
if_index = (AvahiIfIndex) if_nametoindex(interface);
1160
1046
if(if_index == 0){
1161
1047
fprintf(stderr, "No such interface: \"%s\"\n", interface);
1162
1048
exitcode = EXIT_FAILURE;
1167
if(connect_to != NULL){
1168
/* Connect directly, do not use Zeroconf */
1169
/* (Mainly meant for debugging) */
1170
char *address = strrchr(connect_to, ':');
1171
if(address == NULL){
1172
fprintf(stderr, "No colon in address\n");
1173
exitcode = EXIT_FAILURE;
1177
ret = sscanf(address+1, "%" SCNdMAX "%n", &tmpmax, &numchars);
1178
if(ret < 1 or tmpmax != (uint16_t)tmpmax
1179
or address[numchars+1] != '\0'){
1180
fprintf(stderr, "Bad port number\n");
1181
exitcode = EXIT_FAILURE;
1184
port = (uint16_t)tmpmax;
1186
address = connect_to;
1187
/* Colon in address indicates IPv6 */
1189
if(strchr(address, ':') != NULL){
1194
ret = start_mandos_communication(address, port, if_index,
1197
exitcode = EXIT_FAILURE;
1199
exitcode = EXIT_SUCCESS;
1205
AvahiServerConfig config;
1206
/* Do not publish any local Zeroconf records */
1207
avahi_server_config_init(&config);
1208
config.publish_hinfo = 0;
1209
config.publish_addresses = 0;
1210
config.publish_workstation = 0;
1211
config.publish_domain = 0;
1213
/* Allocate a new server */
1214
mc.server = avahi_server_new(avahi_simple_poll_get
1215
(mc.simple_poll), &config, NULL,
1218
/* Free the Avahi configuration data */
1219
avahi_server_config_free(&config);
1222
/* Check if creating the Avahi server object succeeded */
1223
if(mc.server == NULL){
1224
fprintf(stderr, "Failed to create Avahi server: %s\n",
1225
avahi_strerror(error));
1226
exitcode = EXIT_FAILURE;
1230
/* Create the Avahi service browser */
1231
sb = avahi_s_service_browser_new(mc.server, if_index,
1232
AVAHI_PROTO_INET6, "_mandos._tcp",
1233
NULL, 0, browse_callback, NULL);
1235
fprintf(stderr, "Failed to create service browser: %s\n",
1236
avahi_strerror(avahi_server_errno(mc.server)));
1237
exitcode = EXIT_FAILURE;
1241
/* Run the main loop */
1244
fprintf(stderr, "Starting Avahi loop search\n");
1247
avahi_simple_poll_loop(mc.simple_poll);
1052
if(connect_to != NULL){
1053
/* Connect directly, do not use Zeroconf */
1054
/* (Mainly meant for debugging) */
1055
char *address = strrchr(connect_to, ':');
1056
if(address == NULL){
1057
fprintf(stderr, "No colon in address\n");
1058
exitcode = EXIT_FAILURE;
1062
ret = sscanf(address+1, "%" SCNdMAX "%n", &tmpmax, &numchars);
1063
if(ret < 1 or tmpmax != (uint16_t)tmpmax
1064
or address[numchars+1] != '\0'){
1065
fprintf(stderr, "Bad port number\n");
1066
exitcode = EXIT_FAILURE;
1069
port = (uint16_t)tmpmax;
1071
address = connect_to;
1072
ret = start_mandos_communication(address, port, if_index, &mc);
1074
exitcode = EXIT_FAILURE;
1076
exitcode = EXIT_SUCCESS;
1082
avahi_set_log_function(empty_log);
1085
/* Initialize the pseudo-RNG for Avahi */
1086
srand((unsigned int) time(NULL));
1088
/* Allocate main Avahi loop object */
1089
mc.simple_poll = avahi_simple_poll_new();
1090
if(mc.simple_poll == NULL) {
1091
fprintf(stderr, "Avahi: Failed to create simple poll"
1093
exitcode = EXIT_FAILURE;
1098
AvahiServerConfig config;
1099
/* Do not publish any local Zeroconf records */
1100
avahi_server_config_init(&config);
1101
config.publish_hinfo = 0;
1102
config.publish_addresses = 0;
1103
config.publish_workstation = 0;
1104
config.publish_domain = 0;
1106
/* Allocate a new server */
1107
mc.server = avahi_server_new(avahi_simple_poll_get
1108
(mc.simple_poll), &config, NULL,
1111
/* Free the Avahi configuration data */
1112
avahi_server_config_free(&config);
1115
/* Check if creating the Avahi server object succeeded */
1116
if(mc.server == NULL) {
1117
fprintf(stderr, "Failed to create Avahi server: %s\n",
1118
avahi_strerror(error));
1119
exitcode = EXIT_FAILURE;
1123
/* Create the Avahi service browser */
1124
sb = avahi_s_service_browser_new(mc.server, if_index,
1126
"_mandos._tcp", NULL, 0,
1127
browse_callback, &mc);
1129
fprintf(stderr, "Failed to create service browser: %s\n",
1130
avahi_strerror(avahi_server_errno(mc.server)));
1131
exitcode = EXIT_FAILURE;
1135
/* Run the main loop */
1138
fprintf(stderr, "Starting Avahi loop search\n");
1141
avahi_simple_poll_loop(mc.simple_poll);
1252
fprintf(stderr, "%s exiting\n", argv[0]);
1255
/* Cleanup things */
1257
avahi_s_service_browser_free(sb);
1259
if(mc.server != NULL)
1260
avahi_server_free(mc.server);
1262
if(mc.simple_poll != NULL)
1263
avahi_simple_poll_free(mc.simple_poll);
1265
if(gnutls_initialized){
1266
gnutls_certificate_free_credentials(mc.cred);
1267
gnutls_global_deinit();
1268
gnutls_dh_params_deinit(mc.dh_params);
1271
if(gpgme_initialized){
1272
gpgme_release(mc.ctx);
1275
/* Removes the temp directory used by GPGME */
1276
if(tempdir_created){
1278
struct dirent *direntry;
1279
d = opendir(tempdir);
1281
if(errno != ENOENT){
1286
direntry = readdir(d);
1287
if(direntry == NULL){
1290
/* Skip "." and ".." */
1291
if(direntry->d_name[0] == '.'
1292
and (direntry->d_name[1] == '\0'
1293
or (direntry->d_name[1] == '.'
1294
and direntry->d_name[2] == '\0'))){
1297
char *fullname = NULL;
1298
ret = asprintf(&fullname, "%s/%s", tempdir,
1304
ret = remove(fullname);
1306
fprintf(stderr, "remove(\"%s\"): %s\n", fullname,
1313
ret = rmdir(tempdir);
1314
if(ret == -1 and errno != ENOENT){
1146
fprintf(stderr, "%s exiting\n", argv[0]);
1149
/* Cleanup things */
1151
avahi_s_service_browser_free(sb);
1153
if(mc.server != NULL)
1154
avahi_server_free(mc.server);
1156
if(mc.simple_poll != NULL)
1157
avahi_simple_poll_free(mc.simple_poll);
1159
if(gnutls_initialized){
1160
gnutls_certificate_free_credentials(mc.cred);
1161
gnutls_global_deinit();
1162
gnutls_dh_params_deinit(mc.dh_params);
1165
if(gpgme_initialized){
1166
gpgme_release(mc.ctx);
1169
/* Removes the temp directory used by GPGME */
1170
if(tempdir_created){
1172
struct dirent *direntry;
1173
d = opendir(tempdir);
1175
if(errno != ENOENT){
1180
direntry = readdir(d);
1181
if(direntry == NULL){
1184
/* Skip "." and ".." */
1185
if(direntry->d_name[0] == '.'
1186
and (direntry->d_name[1] == '\0'
1187
or (direntry->d_name[1] == '.'
1188
and direntry->d_name[2] == '\0'))){
1191
char *fullname = NULL;
1192
ret = asprintf(&fullname, "%s/%s", tempdir,
1198
ret = remove(fullname);
1200
fprintf(stderr, "remove(\"%s\"): %s\n", fullname,
1207
ret = rmdir(tempdir);
1208
if(ret == -1 and errno != ENOENT){