25
25
* along with this program. If not, see
26
26
* <http://www.gnu.org/licenses/>.
28
* Contact the authors at <mandos@fukt.bsnet.se>.
28
* Contact the authors at <https://www.fukt.bsnet.se/~belorn/> and
29
* <https://www.fukt.bsnet.se/~teddy/>.
31
/* Needed by GPGME, specifically gpgme_data_seek() */
32
#define _FORTIFY_SOURCE 2
32
34
#define _LARGEFILE_SOURCE
33
35
#define _FILE_OFFSET_BITS 64
35
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY() */
37
#include <stdio.h> /* fprintf(), stderr, fwrite(), stdout,
39
#include <stdint.h> /* uint16_t, uint32_t */
40
#include <stddef.h> /* NULL, size_t, ssize_t */
41
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
43
#include <stdbool.h> /* bool, true */
44
#include <string.h> /* memset(), strcmp(), strlen(),
45
strerror(), memcpy(), strcpy() */
46
#include <sys/ioctl.h> /* ioctl */
47
#include <net/if.h> /* ifreq, SIOCGIFFLAGS, SIOCSIFFLAGS,
49
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
50
sockaddr_in6, PF_INET6,
51
SOCK_STREAM, INET6_ADDRSTRLEN,
53
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
54
struct in6_addr, inet_pton(),
56
#include <assert.h> /* assert() */
57
#include <errno.h> /* perror(), errno */
58
#include <time.h> /* time() */
59
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
60
SIOCSIFFLAGS, if_indextoname(),
61
if_nametoindex(), IF_NAMESIZE */
62
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
63
getuid(), getgid(), setuid(),
65
#include <netinet/in.h>
66
#include <arpa/inet.h> /* inet_pton(), htons */
67
#include <iso646.h> /* not, and */
68
#include <argp.h> /* struct argp_option, error_t, struct
69
argp_state, struct argp,
70
argp_parse(), ARGP_KEY_ARG,
71
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
74
/* All Avahi types, constants and functions
41
#include <net/if.h> /* if_nametoindex */
77
43
#include <avahi-core/core.h>
78
44
#include <avahi-core/lookup.h>
79
45
#include <avahi-core/log.h>
81
47
#include <avahi-common/malloc.h>
82
48
#include <avahi-common/error.h>
85
#include <gnutls/gnutls.h> /* All GnuTLS types, constants and functions
87
init_gnutls_session(),
89
#include <gnutls/openpgp.h> /* gnutls_certificate_set_openpgp_key_file(),
90
GNUTLS_OPENPGP_FMT_BASE64 */
93
#include <gpgme.h> /* All GPGME types, constants and functions
95
GPGME_PROTOCOL_OpenPGP,
51
#include <sys/types.h> /* socket(), inet_pton() */
52
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
53
struct in6_addr, inet_pton() */
54
#include <gnutls/gnutls.h> /* All GnuTLS stuff */
55
#include <gnutls/openpgp.h> /* GnuTLS with openpgp stuff */
57
#include <unistd.h> /* close() */
58
#include <netinet/in.h>
59
#include <stdbool.h> /* true */
60
#include <string.h> /* memset */
61
#include <arpa/inet.h> /* inet_pton() */
62
#include <iso646.h> /* not */
65
#include <errno.h> /* perror() */
98
71
#define BUFFER_SIZE 256
74
const char *certdir = "/conf/conf.d/cryptkeyreq/";
75
const char *certfile = "openpgp-client.txt";
76
const char *certkey = "openpgp-client-key.txt";
100
78
bool debug = false;
101
static const char *keydir = "/conf/conf.d/mandos";
102
static const char mandos_protocol_version[] = "1";
103
const char *argp_program_version = "mandosclient 1.0";
104
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
106
/* Used for passing in values through the Avahi callback functions */
108
AvahiSimplePoll *simple_poll;
81
gnutls_session_t session;
110
82
gnutls_certificate_credentials_t cred;
111
unsigned int dh_bits;
112
83
gnutls_dh_params_t dh_params;
113
const char *priority;
117
* Make room in "buffer" for at least BUFFER_SIZE additional bytes.
118
* "buffer_capacity" is how much is currently allocated,
119
* "buffer_length" is how much is already used.
121
size_t adjustbuffer(char **buffer, size_t buffer_length,
122
size_t buffer_capacity){
123
if (buffer_length + BUFFER_SIZE > buffer_capacity){
124
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
128
buffer_capacity += BUFFER_SIZE;
130
return buffer_capacity;
134
* Decrypt OpenPGP data using keyrings in HOMEDIR.
135
* Returns -1 on error
137
static ssize_t pgp_packet_decrypt (const char *cryptotext,
140
const char *homedir){
87
ssize_t pgp_packet_decrypt (char *packet, size_t packet_size,
88
char **new_packet, const char *homedir){
141
89
gpgme_data_t dh_crypto, dh_plain;
145
size_t plaintext_capacity = 0;
146
ssize_t plaintext_length = 0;
93
ssize_t new_packet_capacity = 0;
94
ssize_t new_packet_length = 0;
147
95
gpgme_engine_info_t engine_info;
150
fprintf(stderr, "Trying to decrypt OpenPGP data\n");
98
fprintf(stderr, "Trying to decrypt OpenPGP packet\n");
310
/* GnuTLS log function callback */
311
static void debuggnutls(__attribute__((unused)) int level,
313
fprintf(stderr, "GnuTLS: %s", string);
250
void debuggnutls(__attribute__((unused)) int level,
252
fprintf(stderr, "%s", string);
316
static int init_gnutls_global(mandos_context *mc,
317
const char *pubkeyfile,
318
const char *seckeyfile){
255
int initgnutls(encrypted_session *es){
322
260
fprintf(stderr, "Initializing GnuTLS\n");
325
ret = gnutls_global_init();
326
if (ret != GNUTLS_E_SUCCESS) {
327
fprintf (stderr, "GnuTLS global_init: %s\n",
328
safer_gnutls_strerror(ret));
263
if ((ret = gnutls_global_init ())
264
!= GNUTLS_E_SUCCESS) {
265
fprintf (stderr, "global_init: %s\n", safer_gnutls_strerror(ret));
333
/* "Use a log level over 10 to enable all debugging options."
336
270
gnutls_global_set_log_level(11);
337
271
gnutls_global_set_log_function(debuggnutls);
340
/* OpenPGP credentials */
341
gnutls_certificate_allocate_credentials(&mc->cred);
342
if (ret != GNUTLS_E_SUCCESS){
343
fprintf (stderr, "GnuTLS memory error: %s\n",
274
/* openpgp credentials */
275
if ((ret = gnutls_certificate_allocate_credentials (&es->cred))
276
!= GNUTLS_E_SUCCESS) {
277
fprintf (stderr, "memory error: %s\n",
344
278
safer_gnutls_strerror(ret));
345
gnutls_global_deinit ();
350
283
fprintf(stderr, "Attempting to use OpenPGP certificate %s"
351
" and keyfile %s as GnuTLS credentials\n", pubkeyfile,
284
" and keyfile %s as GnuTLS credentials\n", certfile,
355
288
ret = gnutls_certificate_set_openpgp_key_file
356
(mc->cred, pubkeyfile, seckeyfile, GNUTLS_OPENPGP_FMT_BASE64);
289
(es->cred, certfile, certkey, GNUTLS_OPENPGP_FMT_BASE64);
357
290
if (ret != GNUTLS_E_SUCCESS) {
359
"Error[%d] while reading the OpenPGP key pair ('%s',"
360
" '%s')\n", ret, pubkeyfile, seckeyfile);
361
fprintf(stdout, "The GnuTLS error is: %s\n",
292
(stderr, "Error[%d] while reading the OpenPGP key pair ('%s',"
294
ret, certfile, certkey);
295
fprintf(stdout, "The Error is: %s\n",
362
296
safer_gnutls_strerror(ret));
366
/* GnuTLS server initialization */
367
ret = gnutls_dh_params_init(&mc->dh_params);
368
if (ret != GNUTLS_E_SUCCESS) {
369
fprintf (stderr, "Error in GnuTLS DH parameter initialization:"
370
" %s\n", safer_gnutls_strerror(ret));
373
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
374
if (ret != GNUTLS_E_SUCCESS) {
375
fprintf (stderr, "Error in GnuTLS prime generation: %s\n",
376
safer_gnutls_strerror(ret));
380
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
386
gnutls_certificate_free_credentials(mc->cred);
387
gnutls_global_deinit();
392
static int init_gnutls_session(mandos_context *mc,
393
gnutls_session_t *session){
395
/* GnuTLS session creation */
396
ret = gnutls_init(session, GNUTLS_SERVER);
397
if (ret != GNUTLS_E_SUCCESS){
300
//GnuTLS server initialization
301
if ((ret = gnutls_dh_params_init (&es->dh_params))
302
!= GNUTLS_E_SUCCESS) {
303
fprintf (stderr, "Error in dh parameter initialization: %s\n",
304
safer_gnutls_strerror(ret));
308
if ((ret = gnutls_dh_params_generate2 (es->dh_params, DH_BITS))
309
!= GNUTLS_E_SUCCESS) {
310
fprintf (stderr, "Error in prime generation: %s\n",
311
safer_gnutls_strerror(ret));
315
gnutls_certificate_set_dh_params (es->cred, es->dh_params);
317
// GnuTLS session creation
318
if ((ret = gnutls_init (&es->session, GNUTLS_SERVER))
319
!= GNUTLS_E_SUCCESS){
398
320
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
399
321
safer_gnutls_strerror(ret));
404
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
405
if (ret != GNUTLS_E_SUCCESS) {
406
fprintf(stderr, "Syntax error at: %s\n", err);
407
fprintf(stderr, "GnuTLS error: %s\n",
408
safer_gnutls_strerror(ret));
409
gnutls_deinit (*session);
324
if ((ret = gnutls_priority_set_direct (es->session, "NORMAL", &err))
325
!= GNUTLS_E_SUCCESS) {
326
fprintf(stderr, "Syntax error at: %s\n", err);
327
fprintf(stderr, "GnuTLS error: %s\n",
328
safer_gnutls_strerror(ret));
414
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
416
if (ret != GNUTLS_E_SUCCESS) {
417
fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
332
if ((ret = gnutls_credentials_set
333
(es->session, GNUTLS_CRD_CERTIFICATE, es->cred))
334
!= GNUTLS_E_SUCCESS) {
335
fprintf(stderr, "Error setting a credentials set: %s\n",
418
336
safer_gnutls_strerror(ret));
419
gnutls_deinit (*session);
423
340
/* ignore client certificate if any. */
424
gnutls_certificate_server_set_request (*session,
341
gnutls_certificate_server_set_request (es->session,
425
342
GNUTLS_CERT_IGNORE);
427
gnutls_dh_set_prime_bits (*session, mc->dh_bits);
344
gnutls_dh_set_prime_bits (es->session, DH_BITS);
432
/* Avahi log function callback */
433
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
434
__attribute__((unused)) const char *txt){}
349
void empty_log(__attribute__((unused)) AvahiLogLevel level,
350
__attribute__((unused)) const char *txt){}
436
/* Called when a Mandos server is found */
437
static int start_mandos_communication(const char *ip, uint16_t port,
438
AvahiIfIndex if_index,
352
int start_mandos_communication(const char *ip, uint16_t port,
353
unsigned int if_index){
441
union { struct sockaddr in; struct sockaddr_in6 in6; } to;
355
struct sockaddr_in6 to;
356
encrypted_session es;
442
357
char *buffer = NULL;
443
358
char *decrypted_buffer;
444
359
size_t buffer_length = 0;
445
360
size_t buffer_capacity = 0;
446
361
ssize_t decrypted_buffer_size;
449
364
char interface[IF_NAMESIZE];
450
gnutls_session_t session;
452
ret = init_gnutls_session (mc, &session);
458
fprintf(stderr, "Setting up a tcp connection to %s, port %d\n",
367
fprintf(stderr, "Setting up a tcp connection to %s\n", ip);
462
370
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
464
372
perror("socket");
469
if(if_indextoname((unsigned int)if_index, interface) == NULL){
376
if(if_indextoname(if_index, interface) == NULL){
470
378
perror("if_indextoname");
473
384
fprintf(stderr, "Binding to interface %s\n", interface);
476
387
memset(&to,0,sizeof(to)); /* Spurious warning */
477
to.in6.sin6_family = AF_INET6;
478
/* It would be nice to have a way to detect if we were passed an
479
IPv4 address here. Now we assume an IPv6 address. */
480
ret = inet_pton(AF_INET6, ip, &to.in6.sin6_addr);
388
to.sin6_family = AF_INET6;
389
ret = inet_pton(AF_INET6, ip, &to.sin6_addr);
482
391
perror("inet_pton");
486
395
fprintf(stderr, "Bad address: %s\n", ip);
489
to.in6.sin6_port = htons(port); /* Spurious warning */
398
to.sin6_port = htons(port); /* Spurious warning */
491
to.in6.sin6_scope_id = (uint32_t)if_index;
400
to.sin6_scope_id = (uint32_t)if_index;
494
fprintf(stderr, "Connection to: %s, port %d\n", ip, port);
495
char addrstr[INET6_ADDRSTRLEN] = "";
496
if(inet_ntop(to.in6.sin6_family, &(to.in6.sin6_addr), addrstr,
497
sizeof(addrstr)) == NULL){
500
if(strcmp(addrstr, ip) != 0){
501
fprintf(stderr, "Canonical address form: %s\n", addrstr);
403
fprintf(stderr, "Connection to: %s\n", ip);
506
ret = connect(tcp_sd, &to.in, sizeof(to));
406
ret = connect(tcp_sd, (struct sockaddr *) &to, sizeof(to));
508
408
perror("connect");
512
const char *out = mandos_protocol_version;
515
size_t out_size = strlen(out);
516
ret = TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
517
out_size - written));
523
written += (size_t)ret;
524
if(written < out_size){
527
if (out == mandos_protocol_version){
412
ret = initgnutls (&es);
418
gnutls_transport_set_ptr (es.session,
419
(gnutls_transport_ptr_t) tcp_sd);
537
422
fprintf(stderr, "Establishing TLS session with %s\n", ip);
540
gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) tcp_sd);
543
ret = gnutls_handshake (session);
544
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
425
ret = gnutls_handshake (es.session);
546
427
if (ret != GNUTLS_E_SUCCESS){
548
fprintf(stderr, "*** GnuTLS Handshake failed ***\n");
429
fprintf(stderr, "\n*** Handshake failed ***\n");
549
430
gnutls_perror (ret);
555
/* Read OpenPGP packet that contains the wanted password */
436
//Retrieve OpenPGP packet that contains the wanted password
558
439
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
688
572
avahi_s_service_resolver_free(r);
691
static void browse_callback( AvahiSServiceBrowser *b,
692
AvahiIfIndex interface,
693
AvahiProtocol protocol,
694
AvahiBrowserEvent event,
698
AVAHI_GCC_UNUSED AvahiLookupResultFlags
701
mandos_context *mc = userdata;
702
assert(b); /* Spurious warning */
704
/* Called whenever a new services becomes available on the LAN or
705
is removed from the LAN */
709
case AVAHI_BROWSER_FAILURE:
711
fprintf(stderr, "(Avahi browser) %s\n",
712
avahi_strerror(avahi_server_errno(mc->server)));
713
avahi_simple_poll_quit(mc->simple_poll);
716
case AVAHI_BROWSER_NEW:
717
/* We ignore the returned Avahi resolver object. In the callback
718
function we free it. If the Avahi server is terminated before
719
the callback function is called the Avahi server will free the
722
if (!(avahi_s_service_resolver_new(mc->server, interface,
723
protocol, name, type, domain,
724
AVAHI_PROTO_INET6, 0,
725
resolve_callback, mc)))
726
fprintf(stderr, "Avahi: Failed to resolve service '%s': %s\n",
727
name, avahi_strerror(avahi_server_errno(mc->server)));
730
case AVAHI_BROWSER_REMOVE:
733
case AVAHI_BROWSER_ALL_FOR_NOW:
734
case AVAHI_BROWSER_CACHE_EXHAUSTED:
736
fprintf(stderr, "No Mandos server found, still searching...\n");
575
static void browse_callback(
576
AvahiSServiceBrowser *b,
577
AvahiIfIndex interface,
578
AvahiProtocol protocol,
579
AvahiBrowserEvent event,
583
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
586
AvahiServer *s = userdata;
587
assert(b); /* Spurious warning */
589
/* Called whenever a new services becomes available on the LAN or
590
is removed from the LAN */
594
case AVAHI_BROWSER_FAILURE:
596
fprintf(stderr, "(Browser) %s\n",
597
avahi_strerror(avahi_server_errno(server)));
598
avahi_simple_poll_quit(simple_poll);
601
case AVAHI_BROWSER_NEW:
602
/* We ignore the returned resolver object. In the callback
603
function we free it. If the server is terminated before
604
the callback function is called the server will free
605
the resolver for us. */
607
if (!(avahi_s_service_resolver_new(s, interface, protocol, name,
609
AVAHI_PROTO_INET6, 0,
610
resolve_callback, s)))
611
fprintf(stderr, "Failed to resolve service '%s': %s\n", name,
612
avahi_strerror(avahi_server_errno(s)));
615
case AVAHI_BROWSER_REMOVE:
618
case AVAHI_BROWSER_ALL_FOR_NOW:
619
case AVAHI_BROWSER_CACHE_EXHAUSTED:
742
/* Combines file name and path and returns the malloced new
743
string. some sane checks could/should be added */
744
static const char *combinepath(const char *first, const char *second){
745
size_t f_len = strlen(first);
746
size_t s_len = strlen(second);
747
char *tmp = malloc(f_len + s_len + 2);
624
/* combinds file name and path and returns the malloced new string. som sane checks could/should be added */
625
const char *combinepath(const char *first, const char *second){
627
tmp = malloc(strlen(first) + strlen(second) + 2);
748
628
if (tmp == NULL){
752
memcpy(tmp, first, f_len); /* Spurious warning */
756
memcpy(tmp + f_len + 1, second, s_len); /* Spurious warning */
758
tmp[f_len + 1 + s_len] = '\0';
633
if (first[0] != '\0' and first[strlen(first) - 1] != '/'){
763
int main(int argc, char *argv[]){
641
int main(AVAHI_GCC_UNUSED int argc, AVAHI_GCC_UNUSED char*argv[]) {
642
AvahiServerConfig config;
764
643
AvahiSServiceBrowser *sb = NULL;
767
int exitcode = EXIT_SUCCESS;
646
int returncode = EXIT_SUCCESS;
768
647
const char *interface = "eth0";
769
struct ifreq network;
773
char *connect_to = NULL;
774
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
775
const char *pubkeyfile = "pubkey.txt";
776
const char *seckeyfile = "seckey.txt";
777
mandos_context mc = { .simple_poll = NULL, .server = NULL,
778
.dh_bits = 1024, .priority = "SECURE256"};
779
bool gnutls_initalized = false;
782
struct argp_option options[] = {
783
{ .name = "debug", .key = 128,
784
.doc = "Debug mode", .group = 3 },
785
{ .name = "connect", .key = 'c',
787
.doc = "Connect directly to a sepcified mandos server",
789
{ .name = "interface", .key = 'i',
791
.doc = "Interface that Avahi will conntect through",
793
{ .name = "keydir", .key = 'd',
795
.doc = "Directory where the openpgp keyring is",
797
{ .name = "seckey", .key = 's',
799
.doc = "Secret openpgp key for gnutls authentication",
801
{ .name = "pubkey", .key = 'p',
803
.doc = "Public openpgp key for gnutls authentication",
805
{ .name = "dh-bits", .key = 129,
807
.doc = "dh-bits to use in gnutls communication",
809
{ .name = "priority", .key = 130,
811
.doc = "GNUTLS priority", .group = 1 },
816
error_t parse_opt (int key, char *arg,
817
struct argp_state *state) {
818
/* Get the INPUT argument from `argp_parse', which we know is
819
a pointer to our plugin list pointer. */
841
mc.dh_bits = (unsigned int) strtol(arg, NULL, 10);
856
return ARGP_ERR_UNKNOWN;
861
struct argp argp = { .options = options, .parser = parse_opt,
863
.doc = "Mandos client -- Get and decrypt"
864
" passwords from mandos server" };
865
ret = argp_parse (&argp, argc, argv, 0, 0, NULL);
866
if (ret == ARGP_ERR_UNKNOWN){
867
fprintf(stderr, "Unkown error while parsing arguments\n");
868
exitcode = EXIT_FAILURE;
873
pubkeyfile = combinepath(keydir, pubkeyfile);
874
if (pubkeyfile == NULL){
875
perror("combinepath");
876
exitcode = EXIT_FAILURE;
880
seckeyfile = combinepath(keydir, seckeyfile);
881
if (seckeyfile == NULL){
882
perror("combinepath");
886
ret = init_gnutls_global(&mc, pubkeyfile, seckeyfile);
888
fprintf(stderr, "init_gnutls_global\n");
891
gnutls_initalized = true;
907
if_index = (AvahiIfIndex) if_nametoindex(interface);
909
fprintf(stderr, "No such interface: \"%s\"\n", interface);
913
if(connect_to != NULL){
914
/* Connect directly, do not use Zeroconf */
915
/* (Mainly meant for debugging) */
916
char *address = strrchr(connect_to, ':');
918
fprintf(stderr, "No colon in address\n");
919
exitcode = EXIT_FAILURE;
923
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
925
perror("Bad port number");
926
exitcode = EXIT_FAILURE;
930
address = connect_to;
931
ret = start_mandos_communication(address, port, if_index, &mc);
933
exitcode = EXIT_FAILURE;
935
exitcode = EXIT_SUCCESS;
940
/* If the interface is down, bring it up */
942
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
945
exitcode = EXIT_FAILURE;
948
strcpy(network.ifr_name, interface); /* Spurious warning */
949
ret = ioctl(sd, SIOCGIFFLAGS, &network);
951
perror("ioctl SIOCGIFFLAGS");
952
exitcode = EXIT_FAILURE;
955
if((network.ifr_flags & IFF_UP) == 0){
956
network.ifr_flags |= IFF_UP;
957
ret = ioctl(sd, SIOCSIFFLAGS, &network);
959
perror("ioctl SIOCSIFFLAGS");
960
exitcode = EXIT_FAILURE;
650
static struct option long_options[] = {
651
{"debug", no_argument, (int *)&debug, 1},
652
{"interface", required_argument, 0, 'i'},
653
{"certdir", required_argument, 0, 'd'},
654
{"certkey", required_argument, 0, 'c'},
655
{"certfile", required_argument, 0, 'k'},
658
int option_index = 0;
659
ret = getopt_long (argc, argv, "i:", long_options,
686
certfile = combinepath(certdir, certfile);
687
if (certfile == NULL){
691
certkey = combinepath(certdir, certkey);
692
if (certkey == NULL){
968
697
avahi_set_log_function(empty_log);
971
/* Initialize the pseudo-RNG for Avahi */
700
/* Initialize the psuedo-RNG */
972
701
srand((unsigned int) time(NULL));
974
/* Allocate main Avahi loop object */
975
mc.simple_poll = avahi_simple_poll_new();
976
if (mc.simple_poll == NULL) {
977
fprintf(stderr, "Avahi: Failed to create simple poll"
979
exitcode = EXIT_FAILURE;
984
AvahiServerConfig config;
985
/* Do not publish any local Zeroconf records */
986
avahi_server_config_init(&config);
987
config.publish_hinfo = 0;
988
config.publish_addresses = 0;
989
config.publish_workstation = 0;
990
config.publish_domain = 0;
992
/* Allocate a new server */
993
mc.server = avahi_server_new(avahi_simple_poll_get
994
(mc.simple_poll), &config, NULL,
997
/* Free the Avahi configuration data */
998
avahi_server_config_free(&config);
1001
/* Check if creating the Avahi server object succeeded */
1002
if (mc.server == NULL) {
1003
fprintf(stderr, "Failed to create Avahi server: %s\n",
703
/* Allocate main loop object */
704
if (!(simple_poll = avahi_simple_poll_new())) {
705
fprintf(stderr, "Failed to create simple poll object.\n");
710
/* Do not publish any local records */
711
avahi_server_config_init(&config);
712
config.publish_hinfo = 0;
713
config.publish_addresses = 0;
714
config.publish_workstation = 0;
715
config.publish_domain = 0;
717
/* Allocate a new server */
718
server = avahi_server_new(avahi_simple_poll_get(simple_poll),
719
&config, NULL, NULL, &error);
721
/* Free the configuration data */
722
avahi_server_config_free(&config);
724
/* Check if creating the server object succeeded */
726
fprintf(stderr, "Failed to create server: %s\n",
1004
727
avahi_strerror(error));
1005
exitcode = EXIT_FAILURE;
728
returncode = EXIT_FAILURE;
1009
/* Create the Avahi service browser */
1010
sb = avahi_s_service_browser_new(mc.server, if_index,
732
/* Create the service browser */
733
sb = avahi_s_service_browser_new(server,
735
if_nametoindex(interface),
1011
736
AVAHI_PROTO_INET6,
1012
737
"_mandos._tcp", NULL, 0,
1013
browse_callback, &mc);
738
browse_callback, server);
1015
740
fprintf(stderr, "Failed to create service browser: %s\n",
1016
avahi_strerror(avahi_server_errno(mc.server)));
1017
exitcode = EXIT_FAILURE;
741
avahi_strerror(avahi_server_errno(server)));
742
returncode = EXIT_FAILURE;
1021
746
/* Run the main loop */
1024
fprintf(stderr, "Starting Avahi loop search\n");
749
fprintf(stderr, "Starting avahi loop search\n");
1027
avahi_simple_poll_loop(mc.simple_poll);
752
avahi_simple_poll_loop(simple_poll);
1032
757
fprintf(stderr, "%s exiting\n", argv[0]);
1035
760
/* Cleanup things */
1037
762
avahi_s_service_browser_free(sb);
1039
if (mc.server != NULL)
1040
avahi_server_free(mc.server);
1042
if (mc.simple_poll != NULL)
1043
avahi_simple_poll_free(mc.simple_poll);
1047
if (gnutls_initalized){
1048
gnutls_certificate_free_credentials(mc.cred);
1049
gnutls_global_deinit ();
765
avahi_server_free(server);
768
avahi_simple_poll_free(simple_poll);