To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 238
- compare with another revision
- download diff
- download tarball
- view history from revision 238
- Committer: Teddy Hogeborn
- Date: 2008-12-10 01:26:02 UTC
- mfrom: (237.1.2 mandos)
- Revision ID: teddy@fukt.bsnet.se-20081210012602-vhz3h75xkj24t340
First version of a somewhat complete D-Bus server interface. Also
change user/group name to "_mandos".
* debian/mandos.postinst: Rename old "mandos" user and group to
"_mandos"; create "_mandos" user and group
if none exist.
* debian/mandos-client.postinst: - '' -
* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
group name.
* mandos (_datetime_to_dbus_struct): New; was previously local.
(Client.started): Renamed to "last_started". All users changed.
(Client.started): New; boolean.
(Client.dbus_object_path): New.
(Client.check_command): Renamed to "checker_command". All users
changed.
(Client.__init__): Set and use "self.dbus_object_path". Set
"self.started".
(Client.start): Update "self.started". Emit "self.PropertyChanged"
signals for both "started" and "last_started".
(Client.stop): Update "self.started". Emit "self.PropertyChanged"
signal for "started".
(Client.checker_callback): Take additional "command" argument. All
callers changed. Emit
"self.PropertyChanged" signal.
(Client.bump_timeout): Emit "self.PropertyChanged" signal for
"last_checked_ok".
(Client.start_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.stop_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.still_valid): Bug fix: use "getattr(self, started, False)"
instead of "self.started" in case this client
object is so new that the "started" attribute
has not been created yet.
(Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
Client.GetCreated, Client.GetFingerprint, Client.GetHost,
Client.GetInterval, Client.GetName, Client.GetStarted,
Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
Removed; all callers changed.
(Client.CheckerCompleted): Add "condition" and "command" arguments.
All callers changed.
(Client.GetAllProperties, Client.PropertyChanged): New.
(Client.StillValid): Renamed to "IsStillValid".
(Client.StartChecker): Changed to its own function to avoid the
return value from "Client.start_checker()".
(Client.Stop): Changed to its own function to avoid the return value
from "Client.stop()".
(main): Try "_mandos" before "mandos" as user and group name.
Removed inner function "remove_from_clients". New inner
class "MandosServer".
change user/group name to "_mandos".
* debian/mandos.postinst: Rename old "mandos" user and group to
"_mandos"; create "_mandos" user and group
if none exist.
* debian/mandos-client.postinst: - '' -
* initramfs-tools-hook: Try "_mandos" before "mandos" as user and
group name.
* mandos (_datetime_to_dbus_struct): New; was previously local.
(Client.started): Renamed to "last_started". All users changed.
(Client.started): New; boolean.
(Client.dbus_object_path): New.
(Client.check_command): Renamed to "checker_command". All users
changed.
(Client.__init__): Set and use "self.dbus_object_path". Set
"self.started".
(Client.start): Update "self.started". Emit "self.PropertyChanged"
signals for both "started" and "last_started".
(Client.stop): Update "self.started". Emit "self.PropertyChanged"
signal for "started".
(Client.checker_callback): Take additional "command" argument. All
callers changed. Emit
"self.PropertyChanged" signal.
(Client.bump_timeout): Emit "self.PropertyChanged" signal for
"last_checked_ok".
(Client.start_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.stop_checker): Emit "self.PropertyChanged" signal for
"checker_running".
(Client.still_valid): Bug fix: use "getattr(self, started, False)"
instead of "self.started" in case this client
object is so new that the "started" attribute
has not been created yet.
(Client.IntervalChanged, Client.CheckerIsRunning, Client.GetChecker,
Client.GetCreated, Client.GetFingerprint, Client.GetHost,
Client.GetInterval, Client.GetName, Client.GetStarted,
Client.GetTimeout, Client.StateChanged, Client.TimeoutChanged):
Removed; all callers changed.
(Client.CheckerCompleted): Add "condition" and "command" arguments.
All callers changed.
(Client.GetAllProperties, Client.PropertyChanged): New.
(Client.StillValid): Renamed to "IsStillValid".
(Client.StartChecker): Changed to its own function to avoid the
return value from "Client.start_checker()".
(Client.Stop): Changed to its own function to avoid the return value
from "Client.stop()".
(main): Try "_mandos" before "mandos" as user and group name.
Removed inner function "remove_from_clients". New inner
class "MandosServer".
- files added:
- debian/mandos-client.config
- files removed:
- DBUS-API
- debian/source
- files modified:
- .bzrignore
added
removed
plugins.d/mandos-client.c
1
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
* Mandos-client - get and decrypt data from a Mandos server
3
* Mandos client - get and decrypt data from a Mandos server
4
4
*
5
5
* This program is partly derived from an example program for an Avahi
6
6
* service browser, downloaded from
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008-2011 Teddy Hogeborn
13
* Copyright © 2008-2011 Björn Påhlsson
12
* Copyright © 2008 Teddy Hogeborn
13
* Copyright © 2008 Björn Påhlsson
14
14
*
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
30
30
*/
31
31
32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
#ifndef _LARGEFILE_SOURCE
34
33
#define _LARGEFILE_SOURCE
35
#endif
36
#ifndef _FILE_OFFSET_BITS
37
34
#define _FILE_OFFSET_BITS 64
38
#endif
39
35
40
36
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
37
42
38
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror(), remove() */
39
stdout, ferror() */
44
40
#include <stdint.h> /* uint16_t, uint32_t */
45
41
#include <stddef.h> /* NULL, size_t, ssize_t */
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
strtof(), abort() */
48
#include <stdbool.h> /* bool, false, true */
42
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
43
srand() */
44
#include <stdbool.h> /* bool, true */
49
45
#include <string.h> /* memset(), strcmp(), strlen(),
50
46
strerror(), asprintf(), strcpy() */
51
#include <sys/ioctl.h> /* ioctl */
47
#include <sys/ioctl.h> /* ioctl */
52
48
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
53
49
sockaddr_in6, PF_INET6,
54
SOCK_STREAM, uid_t, gid_t, open(),
55
opendir(), DIR */
50
SOCK_STREAM, INET6_ADDRSTRLEN,
51
uid_t, gid_t, open(), opendir(), DIR */
56
52
#include <sys/stat.h> /* open() */
57
53
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect() */
54
struct in6_addr, inet_pton(),
55
connect() */
59
56
#include <fcntl.h> /* open() */
60
#include <dirent.h> /* opendir(), struct dirent, readdir()
61
*/
62
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
63
strtoimax() */
57
#include <dirent.h> /* opendir(), struct dirent, readdir() */
58
#include <inttypes.h> /* PRIu16 */
64
59
#include <assert.h> /* assert() */
65
#include <errno.h> /* perror(), errno,
66
program_invocation_short_name */
67
#include <time.h> /* nanosleep(), time(), sleep() */
60
#include <errno.h> /* perror(), errno */
61
#include <time.h> /* time() */
68
62
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
69
63
SIOCSIFFLAGS, if_indextoname(),
70
64
if_nametoindex(), IF_NAMESIZE */
71
#include <netinet/in.h> /* IN6_IS_ADDR_LINKLOCAL,
72
INET_ADDRSTRLEN, INET6_ADDRSTRLEN
73
*/
65
#include <netinet/in.h>
74
66
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
getuid(), getgid(), seteuid(),
76
setgid(), pause() */
77
#include <arpa/inet.h> /* inet_pton(), htons, inet_ntop() */
78
#include <iso646.h> /* not, or, and */
67
getuid(), getgid(), setuid(),
68
setgid() */
69
#include <arpa/inet.h> /* inet_pton(), htons */
70
#include <iso646.h> /* not, and */
79
71
#include <argp.h> /* struct argp_option, error_t, struct
80
72
argp_state, struct argp,
81
73
argp_parse(), ARGP_KEY_ARG,
82
74
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
83
#include <signal.h> /* sigemptyset(), sigaddset(),
84
sigaction(), SIGTERM, sig_atomic_t,
85
raise() */
86
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_UNAVAILABLE,
87
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
88
89
#ifdef __linux__
90
#include <sys/klog.h> /* klogctl() */
91
#endif /* __linux__ */
92
75
93
76
/* Avahi */
94
77
/* All Avahi types, constants and functions
107
90
gnutls_*
108
91
init_gnutls_session(),
109
92
GNUTLS_* */
110
#include <gnutls/openpgp.h>
111
/* gnutls_certificate_set_openpgp_key_file(),
93
#include <gnutls/openpgp.h> /* gnutls_certificate_set_openpgp_key_file(),
112
94
GNUTLS_OPENPGP_FMT_BASE64 */
113
95
114
96
/* GPGME */
128
110
static const char mandos_protocol_version[] = "1";
129
111
const char *argp_program_version = "mandos-client " VERSION;
130
112
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
131
static const char sys_class_net[] = "/sys/class/net";
132
char *connect_to = NULL;
133
134
/* Doubly linked list that need to be circularly linked when used */
135
typedef struct server{
136
const char *ip;
137
uint16_t port;
138
AvahiIfIndex if_index;
139
int af;
140
struct timespec last_seen;
141
struct server *next;
142
struct server *prev;
143
} server;
144
113
145
114
/* Used for passing in values through the Avahi callback functions */
146
115
typedef struct {
151
120
gnutls_dh_params_t dh_params;
152
121
const char *priority;
153
122
gpgme_ctx_t ctx;
154
server *current_server;
155
123
} mandos_context;
156
124
157
/* global context so signal handler can reach it*/
158
mandos_context mc = { .simple_poll = NULL, .server = NULL,
159
.dh_bits = 1024, .priority = "SECURE256"
160
":!CTYPE-X.509:+CTYPE-OPENPGP",
161
.current_server = NULL };
162
163
sig_atomic_t quit_now = 0;
164
int signal_received = 0;
165
166
/* Function to use when printing errors */
167
void perror_plus(const char *print_text){
168
fprintf(stderr, "Mandos plugin %s: ",
169
program_invocation_short_name);
170
perror(print_text);
171
}
172
173
125
/*
174
* Make additional room in "buffer" for at least BUFFER_SIZE more
175
* bytes. "buffer_capacity" is how much is currently allocated,
126
* Make room in "buffer" for at least BUFFER_SIZE additional bytes.
127
* "buffer_capacity" is how much is currently allocated,
176
128
* "buffer_length" is how much is already used.
177
129
*/
178
size_t incbuffer(char **buffer, size_t buffer_length,
130
size_t adjustbuffer(char **buffer, size_t buffer_length,
179
131
size_t buffer_capacity){
180
if(buffer_length + BUFFER_SIZE > buffer_capacity){
132
if (buffer_length + BUFFER_SIZE > buffer_capacity){
181
133
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
182
if(buffer == NULL){
134
if (buffer == NULL){
183
135
return 0;
184
136
}
185
137
buffer_capacity += BUFFER_SIZE;
187
139
return buffer_capacity;
188
140
}
189
141
190
int add_server(const char *ip, uint16_t port,
191
AvahiIfIndex if_index,
192
int af){
193
int ret;
194
server *new_server = malloc(sizeof(server));
195
if(new_server == NULL){
196
perror_plus("malloc");
197
return -1;
198
}
199
*new_server = (server){ .ip = strdup(ip),
200
.port = port,
201
.if_index = if_index,
202
.af = af };
203
if(new_server->ip == NULL){
204
perror_plus("strdup");
205
return -1;
206
}
207
/* unique case of first server */
208
if (mc.current_server == NULL){
209
new_server->next = new_server;
210
new_server->prev = new_server;
211
mc.current_server = new_server;
212
/* Placing the new server last in the list */
213
} else {
214
new_server->next = mc.current_server;
215
new_server->prev = mc.current_server->prev;
216
new_server->prev->next = new_server;
217
mc.current_server->prev = new_server;
218
}
219
ret = clock_gettime(CLOCK_MONOTONIC, &mc.current_server->last_seen);
220
if(ret == -1){
221
perror_plus("clock_gettime");
222
return -1;
223
}
224
return 0;
225
}
226
227
142
/*
228
143
* Initialize GPGME.
229
144
*/
230
static bool init_gpgme(const char *seckey,
145
static bool init_gpgme(mandos_context *mc, const char *seckey,
231
146
const char *pubkey, const char *tempdir){
147
int ret;
232
148
gpgme_error_t rc;
233
149
gpgme_engine_info_t engine_info;
234
150
235
151
236
152
/*
237
* Helper function to insert pub and seckey to the engine keyring.
153
* Helper function to insert pub and seckey to the enigne keyring.
238
154
*/
239
155
bool import_key(const char *filename){
240
int ret;
241
156
int fd;
242
157
gpgme_data_t pgp_data;
243
158
244
fd = (int)TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
159
fd = TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
245
160
if(fd == -1){
246
perror_plus("open");
161
perror("open");
247
162
return false;
248
163
}
249
164
250
165
rc = gpgme_data_new_from_fd(&pgp_data, fd);
251
if(rc != GPG_ERR_NO_ERROR){
166
if (rc != GPG_ERR_NO_ERROR){
252
167
fprintf(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
253
168
gpgme_strsource(rc), gpgme_strerror(rc));
254
169
return false;
255
170
}
256
171
257
rc = gpgme_op_import(mc.ctx, pgp_data);
258
if(rc != GPG_ERR_NO_ERROR){
172
rc = gpgme_op_import(mc->ctx, pgp_data);
173
if (rc != GPG_ERR_NO_ERROR){
259
174
fprintf(stderr, "bad gpgme_op_import: %s: %s\n",
260
175
gpgme_strsource(rc), gpgme_strerror(rc));
261
176
return false;
262
177
}
263
178
264
ret = (int)TEMP_FAILURE_RETRY(close(fd));
179
ret = TEMP_FAILURE_RETRY(close(fd));
265
180
if(ret == -1){
266
perror_plus("close");
181
perror("close");
267
182
}
268
183
gpgme_data_release(pgp_data);
269
184
return true;
270
185
}
271
186
272
if(debug){
273
fprintf(stderr, "Initializing GPGME\n");
187
if (debug){
188
fprintf(stderr, "Initialize gpgme\n");
274
189
}
275
190
276
191
/* Init GPGME */
277
192
gpgme_check_version(NULL);
278
193
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
279
if(rc != GPG_ERR_NO_ERROR){
194
if (rc != GPG_ERR_NO_ERROR){
280
195
fprintf(stderr, "bad gpgme_engine_check_version: %s: %s\n",
281
196
gpgme_strsource(rc), gpgme_strerror(rc));
282
197
return false;
283
198
}
284
199
285
200
/* Set GPGME home directory for the OpenPGP engine only */
286
rc = gpgme_get_engine_info(&engine_info);
287
if(rc != GPG_ERR_NO_ERROR){
201
rc = gpgme_get_engine_info (&engine_info);
202
if (rc != GPG_ERR_NO_ERROR){
288
203
fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
289
204
gpgme_strsource(rc), gpgme_strerror(rc));
290
205
return false;
303
218
}
304
219
305
220
/* Create new GPGME "context" */
306
rc = gpgme_new(&(mc.ctx));
307
if(rc != GPG_ERR_NO_ERROR){
221
rc = gpgme_new(&(mc->ctx));
222
if (rc != GPG_ERR_NO_ERROR){
308
223
fprintf(stderr, "bad gpgme_new: %s: %s\n",
309
224
gpgme_strsource(rc), gpgme_strerror(rc));
310
225
return false;
311
226
}
312
227
313
if(not import_key(pubkey) or not import_key(seckey)){
228
if (not import_key(pubkey) or not import_key(seckey)){
314
229
return false;
315
230
}
316
231
317
return true;
232
return true;
318
233
}
319
234
320
235
/*
321
236
* Decrypt OpenPGP data.
322
237
* Returns -1 on error
323
238
*/
324
static ssize_t pgp_packet_decrypt(const char *cryptotext,
325
size_t crypto_size,
326
char **plaintext){
239
static ssize_t pgp_packet_decrypt (const mandos_context *mc,
240
const char *cryptotext,
241
size_t crypto_size,
242
char **plaintext){
327
243
gpgme_data_t dh_crypto, dh_plain;
328
244
gpgme_error_t rc;
329
245
ssize_t ret;
330
246
size_t plaintext_capacity = 0;
331
247
ssize_t plaintext_length = 0;
332
248
333
if(debug){
249
if (debug){
334
250
fprintf(stderr, "Trying to decrypt OpenPGP data\n");
335
251
}
336
252
337
253
/* Create new GPGME data buffer from memory cryptotext */
338
254
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
339
255
0);
340
if(rc != GPG_ERR_NO_ERROR){
256
if (rc != GPG_ERR_NO_ERROR){
341
257
fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
342
258
gpgme_strsource(rc), gpgme_strerror(rc));
343
259
return -1;
345
261
346
262
/* Create new empty GPGME data buffer for the plaintext */
347
263
rc = gpgme_data_new(&dh_plain);
348
if(rc != GPG_ERR_NO_ERROR){
264
if (rc != GPG_ERR_NO_ERROR){
349
265
fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
350
266
gpgme_strsource(rc), gpgme_strerror(rc));
351
267
gpgme_data_release(dh_crypto);
354
270
355
271
/* Decrypt data from the cryptotext data buffer to the plaintext
356
272
data buffer */
357
rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
358
if(rc != GPG_ERR_NO_ERROR){
273
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
274
if (rc != GPG_ERR_NO_ERROR){
359
275
fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
360
276
gpgme_strsource(rc), gpgme_strerror(rc));
361
277
plaintext_length = -1;
362
if(debug){
278
if (debug){
363
279
gpgme_decrypt_result_t result;
364
result = gpgme_op_decrypt_result(mc.ctx);
365
if(result == NULL){
280
result = gpgme_op_decrypt_result(mc->ctx);
281
if (result == NULL){
366
282
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
367
283
} else {
368
284
fprintf(stderr, "Unsupported algorithm: %s\n",
374
290
}
375
291
gpgme_recipient_t recipient;
376
292
recipient = result->recipients;
377
while(recipient != NULL){
378
fprintf(stderr, "Public key algorithm: %s\n",
379
gpgme_pubkey_algo_name(recipient->pubkey_algo));
380
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
381
fprintf(stderr, "Secret key available: %s\n",
382
recipient->status == GPG_ERR_NO_SECKEY
383
? "No" : "Yes");
384
recipient = recipient->next;
293
if(recipient){
294
while(recipient != NULL){
295
fprintf(stderr, "Public key algorithm: %s\n",
296
gpgme_pubkey_algo_name(recipient->pubkey_algo));
297
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
298
fprintf(stderr, "Secret key available: %s\n",
299
recipient->status == GPG_ERR_NO_SECKEY
300
? "No" : "Yes");
301
recipient = recipient->next;
302
}
385
303
}
386
304
}
387
305
}
393
311
}
394
312
395
313
/* Seek back to the beginning of the GPGME plaintext data buffer */
396
if(gpgme_data_seek(dh_plain, (off_t)0, SEEK_SET) == -1){
397
perror_plus("gpgme_data_seek");
314
if (gpgme_data_seek(dh_plain, (off_t) 0, SEEK_SET) == -1){
315
perror("gpgme_data_seek");
398
316
plaintext_length = -1;
399
317
goto decrypt_end;
400
318
}
401
319
402
320
*plaintext = NULL;
403
321
while(true){
404
plaintext_capacity = incbuffer(plaintext,
322
plaintext_capacity = adjustbuffer(plaintext,
405
323
(size_t)plaintext_length,
406
324
plaintext_capacity);
407
if(plaintext_capacity == 0){
408
perror_plus("incbuffer");
325
if (plaintext_capacity == 0){
326
perror("adjustbuffer");
409
327
plaintext_length = -1;
410
328
goto decrypt_end;
411
329
}
413
331
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
414
332
BUFFER_SIZE);
415
333
/* Print the data, if any */
416
if(ret == 0){
334
if (ret == 0){
417
335
/* EOF */
418
336
break;
419
337
}
420
338
if(ret < 0){
421
perror_plus("gpgme_data_read");
339
perror("gpgme_data_read");
422
340
plaintext_length = -1;
423
341
goto decrypt_end;
424
342
}
443
361
return plaintext_length;
444
362
}
445
363
446
static const char * safer_gnutls_strerror(int value){
447
const char *ret = gnutls_strerror(value); /* Spurious warning from
448
-Wunreachable-code */
449
if(ret == NULL)
364
static const char * safer_gnutls_strerror (int value) {
365
const char *ret = gnutls_strerror (value); /* Spurious warning */
366
if (ret == NULL)
450
367
ret = "(unknown)";
451
368
return ret;
452
369
}
457
374
fprintf(stderr, "GnuTLS: %s", string);
458
375
}
459
376
460
static int init_gnutls_global(const char *pubkeyfilename,
377
static int init_gnutls_global(mandos_context *mc,
378
const char *pubkeyfilename,
461
379
const char *seckeyfilename){
462
380
int ret;
463
381
466
384
}
467
385
468
386
ret = gnutls_global_init();
469
if(ret != GNUTLS_E_SUCCESS){
470
fprintf(stderr, "GnuTLS global_init: %s\n",
471
safer_gnutls_strerror(ret));
387
if (ret != GNUTLS_E_SUCCESS) {
388
fprintf (stderr, "GnuTLS global_init: %s\n",
389
safer_gnutls_strerror(ret));
472
390
return -1;
473
391
}
474
392
475
if(debug){
393
if (debug){
476
394
/* "Use a log level over 10 to enable all debugging options."
477
395
* - GnuTLS manual
478
396
*/
481
399
}
482
400
483
401
/* OpenPGP credentials */
484
ret = gnutls_certificate_allocate_credentials(&mc.cred);
485
if(ret != GNUTLS_E_SUCCESS){
486
fprintf(stderr, "GnuTLS memory error: %s\n",
487
safer_gnutls_strerror(ret));
488
gnutls_global_deinit();
402
gnutls_certificate_allocate_credentials(&mc->cred);
403
if (ret != GNUTLS_E_SUCCESS){
404
fprintf (stderr, "GnuTLS memory error: %s\n", /* Spurious
405
warning */
406
safer_gnutls_strerror(ret));
407
gnutls_global_deinit ();
489
408
return -1;
490
409
}
491
410
496
415
}
497
416
498
417
ret = gnutls_certificate_set_openpgp_key_file
499
(mc.cred, pubkeyfilename, seckeyfilename,
418
(mc->cred, pubkeyfilename, seckeyfilename,
500
419
GNUTLS_OPENPGP_FMT_BASE64);
501
if(ret != GNUTLS_E_SUCCESS){
420
if (ret != GNUTLS_E_SUCCESS) {
502
421
fprintf(stderr,
503
422
"Error[%d] while reading the OpenPGP key pair ('%s',"
504
423
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
508
427
}
509
428
510
429
/* GnuTLS server initialization */
511
ret = gnutls_dh_params_init(&mc.dh_params);
512
if(ret != GNUTLS_E_SUCCESS){
513
fprintf(stderr, "Error in GnuTLS DH parameter initialization:"
514
" %s\n", safer_gnutls_strerror(ret));
430
ret = gnutls_dh_params_init(&mc->dh_params);
431
if (ret != GNUTLS_E_SUCCESS) {
432
fprintf (stderr, "Error in GnuTLS DH parameter initialization:"
433
" %s\n", safer_gnutls_strerror(ret));
515
434
goto globalfail;
516
435
}
517
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
518
if(ret != GNUTLS_E_SUCCESS){
519
fprintf(stderr, "Error in GnuTLS prime generation: %s\n",
520
safer_gnutls_strerror(ret));
436
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
437
if (ret != GNUTLS_E_SUCCESS) {
438
fprintf (stderr, "Error in GnuTLS prime generation: %s\n",
439
safer_gnutls_strerror(ret));
521
440
goto globalfail;
522
441
}
523
442
524
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
443
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
525
444
526
445
return 0;
527
446
528
447
globalfail:
529
448
530
gnutls_certificate_free_credentials(mc.cred);
449
gnutls_certificate_free_credentials(mc->cred);
531
450
gnutls_global_deinit();
532
gnutls_dh_params_deinit(mc.dh_params);
451
gnutls_dh_params_deinit(mc->dh_params);
533
452
return -1;
534
453
}
535
454
536
static int init_gnutls_session(gnutls_session_t *session){
455
static int init_gnutls_session(mandos_context *mc,
456
gnutls_session_t *session){
537
457
int ret;
538
458
/* GnuTLS session creation */
539
do {
540
ret = gnutls_init(session, GNUTLS_SERVER);
541
if(quit_now){
542
return -1;
543
}
544
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
545
if(ret != GNUTLS_E_SUCCESS){
459
ret = gnutls_init(session, GNUTLS_SERVER);
460
if (ret != GNUTLS_E_SUCCESS){
546
461
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
547
462
safer_gnutls_strerror(ret));
548
463
}
549
464
550
465
{
551
466
const char *err;
552
do {
553
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
554
if(quit_now){
555
gnutls_deinit(*session);
556
return -1;
557
}
558
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
559
if(ret != GNUTLS_E_SUCCESS){
467
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
468
if (ret != GNUTLS_E_SUCCESS) {
560
469
fprintf(stderr, "Syntax error at: %s\n", err);
561
470
fprintf(stderr, "GnuTLS error: %s\n",
562
471
safer_gnutls_strerror(ret));
563
gnutls_deinit(*session);
472
gnutls_deinit (*session);
564
473
return -1;
565
474
}
566
475
}
567
476
568
do {
569
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
570
mc.cred);
571
if(quit_now){
572
gnutls_deinit(*session);
573
return -1;
574
}
575
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
576
if(ret != GNUTLS_E_SUCCESS){
477
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
478
mc->cred);
479
if (ret != GNUTLS_E_SUCCESS) {
577
480
fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
578
481
safer_gnutls_strerror(ret));
579
gnutls_deinit(*session);
482
gnutls_deinit (*session);
580
483
return -1;
581
484
}
582
485
583
486
/* ignore client certificate if any. */
584
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
487
gnutls_certificate_server_set_request (*session,
488
GNUTLS_CERT_IGNORE);
585
489
586
gnutls_dh_set_prime_bits(*session, mc.dh_bits);
490
gnutls_dh_set_prime_bits (*session, mc->dh_bits);
587
491
588
492
return 0;
589
493
}
595
499
/* Called when a Mandos server is found */
596
500
static int start_mandos_communication(const char *ip, uint16_t port,
597
501
AvahiIfIndex if_index,
598
int af){
599
int ret, tcp_sd = -1;
600
ssize_t sret;
601
union {
602
struct sockaddr_in in;
603
struct sockaddr_in6 in6;
604
} to;
502
mandos_context *mc){
503
int ret, tcp_sd;
504
union { struct sockaddr in; struct sockaddr_in6 in6; } to;
605
505
char *buffer = NULL;
606
char *decrypted_buffer = NULL;
506
char *decrypted_buffer;
607
507
size_t buffer_length = 0;
608
508
size_t buffer_capacity = 0;
509
ssize_t decrypted_buffer_size;
609
510
size_t written;
610
int retval = -1;
511
int retval = 0;
512
char interface[IF_NAMESIZE];
611
513
gnutls_session_t session;
612
int pf; /* Protocol family */
613
614
errno = 0;
615
616
if(quit_now){
617
errno = EINTR;
618
return -1;
619
}
620
621
switch(af){
622
case AF_INET6:
623
pf = PF_INET6;
624
break;
625
case AF_INET:
626
pf = PF_INET;
627
break;
628
default:
629
fprintf(stderr, "Bad address family: %d\n", af);
630
errno = EINVAL;
631
return -1;
632
}
633
634
ret = init_gnutls_session(&session);
635
if(ret != 0){
514
515
ret = init_gnutls_session (mc, &session);
516
if (ret != 0){
636
517
return -1;
637
518
}
638
519
639
520
if(debug){
640
fprintf(stderr, "Setting up a TCP connection to %s, port %" PRIu16
521
fprintf(stderr, "Setting up a tcp connection to %s, port %" PRIu16
641
522
"\n", ip, port);
642
523
}
643
524
644
tcp_sd = socket(pf, SOCK_STREAM, 0);
645
if(tcp_sd < 0){
646
int e = errno;
647
perror_plus("socket");
648
errno = e;
649
goto mandos_end;
525
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
526
if(tcp_sd < 0) {
527
perror("socket");
528
return -1;
650
529
}
651
530
652
if(quit_now){
653
errno = EINTR;
654
goto mandos_end;
531
if(debug){
532
if(if_indextoname((unsigned int)if_index, interface) == NULL){
533
perror("if_indextoname");
534
return -1;
535
}
536
fprintf(stderr, "Binding to interface %s\n", interface);
655
537
}
656
538
657
539
memset(&to, 0, sizeof(to));
658
if(af == AF_INET6){
659
to.in6.sin6_family = (sa_family_t)af;
660
ret = inet_pton(af, ip, &to.in6.sin6_addr);
661
} else { /* IPv4 */
662
to.in.sin_family = (sa_family_t)af;
663
ret = inet_pton(af, ip, &to.in.sin_addr);
664
}
665
if(ret < 0 ){
666
int e = errno;
667
perror_plus("inet_pton");
668
errno = e;
669
goto mandos_end;
540
to.in6.sin6_family = AF_INET6;
541
/* It would be nice to have a way to detect if we were passed an
542
IPv4 address here. Now we assume an IPv6 address. */
543
ret = inet_pton(AF_INET6, ip, &to.in6.sin6_addr);
544
if (ret < 0 ){
545
perror("inet_pton");
546
return -1;
670
547
}
671
548
if(ret == 0){
672
int e = errno;
673
549
fprintf(stderr, "Bad address: %s\n", ip);
674
errno = e;
675
goto mandos_end;
676
}
677
if(af == AF_INET6){
678
to.in6.sin6_port = htons(port); /* Spurious warnings from
679
-Wconversion and
680
-Wunreachable-code */
681
682
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
683
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
684
-Wunreachable-code*/
685
if(if_index == AVAHI_IF_UNSPEC){
686
fprintf(stderr, "An IPv6 link-local address is incomplete"
687
" without a network interface\n");
688
errno = EINVAL;
689
goto mandos_end;
690
}
691
/* Set the network interface number as scope */
692
to.in6.sin6_scope_id = (uint32_t)if_index;
693
}
694
} else {
695
to.in.sin_port = htons(port); /* Spurious warnings from
696
-Wconversion and
697
-Wunreachable-code */
698
}
550
return -1;
551
}
552
to.in6.sin6_port = htons(port); /* Spurious warning */
699
553
700
if(quit_now){
701
errno = EINTR;
702
goto mandos_end;
703
}
554
to.in6.sin6_scope_id = (uint32_t)if_index;
704
555
705
556
if(debug){
706
if(af == AF_INET6 and if_index != AVAHI_IF_UNSPEC){
707
char interface[IF_NAMESIZE];
708
if(if_indextoname((unsigned int)if_index, interface) == NULL){
709
perror_plus("if_indextoname");
710
} else {
711
fprintf(stderr, "Connection to: %s%%%s, port %" PRIu16 "\n",
712
ip, interface, port);
713
}
714
} else {
715
fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
716
port);
717
}
718
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
719
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
720
const char *pcret;
721
if(af == AF_INET6){
722
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
723
sizeof(addrstr));
724
} else {
725
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
726
sizeof(addrstr));
727
}
728
if(pcret == NULL){
729
perror_plus("inet_ntop");
557
fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
558
port);
559
char addrstr[INET6_ADDRSTRLEN] = "";
560
if(inet_ntop(to.in6.sin6_family, &(to.in6.sin6_addr), addrstr,
561
sizeof(addrstr)) == NULL){
562
perror("inet_ntop");
730
563
} else {
731
564
if(strcmp(addrstr, ip) != 0){
732
565
fprintf(stderr, "Canonical address form: %s\n", addrstr);
734
567
}
735
568
}
736
569
737
if(quit_now){
738
errno = EINTR;
739
goto mandos_end;
740
}
741
742
if(af == AF_INET6){
743
ret = connect(tcp_sd, &to.in6, sizeof(to));
744
} else {
745
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
746
}
747
if(ret < 0){
748
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
749
int e = errno;
750
perror_plus("connect");
751
errno = e;
752
}
753
goto mandos_end;
754
}
755
756
if(quit_now){
757
errno = EINTR;
758
goto mandos_end;
570
ret = connect(tcp_sd, &to.in, sizeof(to));
571
if (ret < 0){
572
perror("connect");
573
return -1;
759
574
}
760
575
761
576
const char *out = mandos_protocol_version;
762
577
written = 0;
763
while(true){
578
while (true){
764
579
size_t out_size = strlen(out);
765
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
580
ret = TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
766
581
out_size - written));
767
if(ret == -1){
768
int e = errno;
769
perror_plus("write");
770
errno = e;
582
if (ret == -1){
583
perror("write");
584
retval = -1;
771
585
goto mandos_end;
772
586
}
773
587
written += (size_t)ret;
774
588
if(written < out_size){
775
589
continue;
776
590
} else {
777
if(out == mandos_protocol_version){
591
if (out == mandos_protocol_version){
778
592
written = 0;
779
593
out = "\r\n";
780
594
} else {
781
595
break;
782
596
}
783
597
}
784
785
if(quit_now){
786
errno = EINTR;
787
goto mandos_end;
788
}
789
598
}
790
599
791
600
if(debug){
792
601
fprintf(stderr, "Establishing TLS session with %s\n", ip);
793
602
}
794
603
795
if(quit_now){
796
errno = EINTR;
797
goto mandos_end;
798
}
799
800
/* Spurious warning from -Wint-to-pointer-cast */
801
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
802
803
if(quit_now){
804
errno = EINTR;
805
goto mandos_end;
806
}
807
808
do {
809
ret = gnutls_handshake(session);
810
if(quit_now){
811
errno = EINTR;
812
goto mandos_end;
813
}
604
gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) tcp_sd);
605
606
do{
607
ret = gnutls_handshake (session);
814
608
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
815
609
816
if(ret != GNUTLS_E_SUCCESS){
610
if (ret != GNUTLS_E_SUCCESS){
817
611
if(debug){
818
612
fprintf(stderr, "*** GnuTLS Handshake failed ***\n");
819
gnutls_perror(ret);
613
gnutls_perror (ret);
820
614
}
821
errno = EPROTO;
615
retval = -1;
822
616
goto mandos_end;
823
617
}
824
618
825
619
/* Read OpenPGP packet that contains the wanted password */
826
620
827
621
if(debug){
828
fprintf(stderr, "Retrieving OpenPGP encrypted password from %s\n",
622
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
829
623
ip);
830
624
}
831
625
832
626
while(true){
833
834
if(quit_now){
835
errno = EINTR;
836
goto mandos_end;
837
}
838
839
buffer_capacity = incbuffer(&buffer, buffer_length,
627
buffer_capacity = adjustbuffer(&buffer, buffer_length,
840
628
buffer_capacity);
841
if(buffer_capacity == 0){
842
int e = errno;
843
perror_plus("incbuffer");
844
errno = e;
845
goto mandos_end;
846
}
847
848
if(quit_now){
849
errno = EINTR;
850
goto mandos_end;
851
}
852
853
sret = gnutls_record_recv(session, buffer+buffer_length,
854
BUFFER_SIZE);
855
if(sret == 0){
629
if (buffer_capacity == 0){
630
perror("adjustbuffer");
631
retval = -1;
632
goto mandos_end;
633
}
634
635
ret = gnutls_record_recv(session, buffer+buffer_length,
636
BUFFER_SIZE);
637
if (ret == 0){
856
638
break;
857
639
}
858
if(sret < 0){
859
switch(sret){
640
if (ret < 0){
641
switch(ret){
860
642
case GNUTLS_E_INTERRUPTED:
861
643
case GNUTLS_E_AGAIN:
862
644
break;
863
645
case GNUTLS_E_REHANDSHAKE:
864
do {
865
ret = gnutls_handshake(session);
866
867
if(quit_now){
868
errno = EINTR;
869
goto mandos_end;
870
}
646
do{
647
ret = gnutls_handshake (session);
871
648
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
872
if(ret < 0){
649
if (ret < 0){
873
650
fprintf(stderr, "*** GnuTLS Re-handshake failed ***\n");
874
gnutls_perror(ret);
875
errno = EPROTO;
651
gnutls_perror (ret);
652
retval = -1;
876
653
goto mandos_end;
877
654
}
878
655
break;
879
656
default:
880
657
fprintf(stderr, "Unknown error while reading data from"
881
658
" encrypted session with Mandos server\n");
882
gnutls_bye(session, GNUTLS_SHUT_RDWR);
883
errno = EIO;
659
retval = -1;
660
gnutls_bye (session, GNUTLS_SHUT_RDWR);
884
661
goto mandos_end;
885
662
}
886
663
} else {
887
buffer_length += (size_t) sret;
664
buffer_length += (size_t) ret;
888
665
}
889
666
}
890
667
892
669
fprintf(stderr, "Closing TLS session\n");
893
670
}
894
671
895
if(quit_now){
896
errno = EINTR;
897
goto mandos_end;
898
}
899
900
do {
901
ret = gnutls_bye(session, GNUTLS_SHUT_RDWR);
902
if(quit_now){
903
errno = EINTR;
904
goto mandos_end;
905
}
906
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
907
908
if(buffer_length > 0){
909
ssize_t decrypted_buffer_size;
910
decrypted_buffer_size = pgp_packet_decrypt(buffer,
672
gnutls_bye (session, GNUTLS_SHUT_RDWR);
673
674
if (buffer_length > 0){
675
decrypted_buffer_size = pgp_packet_decrypt(mc, buffer,
911
676
buffer_length,
912
677
&decrypted_buffer);
913
if(decrypted_buffer_size >= 0){
914
678
if (decrypted_buffer_size >= 0){
915
679
written = 0;
916
680
while(written < (size_t) decrypted_buffer_size){
917
if(quit_now){
918
errno = EINTR;
919
goto mandos_end;
920
}
921
922
ret = (int)fwrite(decrypted_buffer + written, 1,
923
(size_t)decrypted_buffer_size - written,
924
stdout);
681
ret = (int)fwrite (decrypted_buffer + written, 1,
682
(size_t)decrypted_buffer_size - written,
683
stdout);
925
684
if(ret == 0 and ferror(stdout)){
926
int e = errno;
927
685
if(debug){
928
686
fprintf(stderr, "Error writing encrypted data: %s\n",
929
687
strerror(errno));
930
688
}
931
errno = e;
932
goto mandos_end;
689
retval = -1;
690
break;
933
691
}
934
692
written += (size_t)ret;
935
693
}
936
retval = 0;
694
free(decrypted_buffer);
695
} else {
696
retval = -1;
937
697
}
698
} else {
699
retval = -1;
938
700
}
939
701
940
702
/* Shutdown procedure */
941
703
942
704
mandos_end:
943
{
944
int e = errno;
945
free(decrypted_buffer);
946
free(buffer);
947
if(tcp_sd >= 0){
948
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
949
}
950
if(ret == -1){
951
if(e == 0){
952
e = errno;
953
}
954
perror_plus("close");
955
}
956
gnutls_deinit(session);
957
errno = e;
958
if(quit_now){
959
errno = EINTR;
960
retval = -1;
961
}
705
free(buffer);
706
ret = TEMP_FAILURE_RETRY(close(tcp_sd));
707
if(ret == -1){
708
perror("close");
962
709
}
710
gnutls_deinit (session);
963
711
return retval;
964
712
}
965
713
966
714
static void resolve_callback(AvahiSServiceResolver *r,
967
715
AvahiIfIndex interface,
968
AvahiProtocol proto,
716
AVAHI_GCC_UNUSED AvahiProtocol protocol,
969
717
AvahiResolverEvent event,
970
718
const char *name,
971
719
const char *type,
976
724
AVAHI_GCC_UNUSED AvahiStringList *txt,
977
725
AVAHI_GCC_UNUSED AvahiLookupResultFlags
978
726
flags,
979
AVAHI_GCC_UNUSED void* userdata){
727
void* userdata) {
728
mandos_context *mc = userdata;
980
729
assert(r);
981
730
982
731
/* Called whenever a service has been resolved successfully or
983
732
timed out */
984
733
985
if(quit_now){
986
return;
987
}
988
989
switch(event){
734
switch (event) {
990
735
default:
991
736
case AVAHI_RESOLVER_FAILURE:
992
737
fprintf(stderr, "(Avahi Resolver) Failed to resolve service '%s'"
993
738
" of type '%s' in domain '%s': %s\n", name, type, domain,
994
avahi_strerror(avahi_server_errno(mc.server)));
739
avahi_strerror(avahi_server_errno(mc->server)));
995
740
break;
996
741
997
742
case AVAHI_RESOLVER_FOUND:
1000
745
avahi_address_snprint(ip, sizeof(ip), address);
1001
746
if(debug){
1002
747
fprintf(stderr, "Mandos server \"%s\" found on %s (%s, %"
1003
PRIdMAX ") on port %" PRIu16 "\n", name, host_name,
1004
ip, (intmax_t)interface, port);
748
PRIu16 ") on port %d\n", name, host_name, ip,
749
interface, port);
1005
750
}
1006
int ret = start_mandos_communication(ip, port, interface,
1007
avahi_proto_to_af(proto));
1008
if(ret == 0){
1009
avahi_simple_poll_quit(mc.simple_poll);
1010
} else {
1011
ret = add_server(ip, port, interface,
1012
avahi_proto_to_af(proto));
751
int ret = start_mandos_communication(ip, port, interface, mc);
752
if (ret == 0){
753
avahi_simple_poll_quit(mc->simple_poll);
1013
754
}
1014
755
}
1015
756
}
1016
757
avahi_s_service_resolver_free(r);
1017
758
}
1018
759
1019
static void browse_callback(AvahiSServiceBrowser *b,
1020
AvahiIfIndex interface,
1021
AvahiProtocol protocol,
1022
AvahiBrowserEvent event,
1023
const char *name,
1024
const char *type,
1025
const char *domain,
1026
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1027
flags,
1028
AVAHI_GCC_UNUSED void* userdata){
760
static void browse_callback( AvahiSServiceBrowser *b,
761
AvahiIfIndex interface,
762
AvahiProtocol protocol,
763
AvahiBrowserEvent event,
764
const char *name,
765
const char *type,
766
const char *domain,
767
AVAHI_GCC_UNUSED AvahiLookupResultFlags
768
flags,
769
void* userdata) {
770
mandos_context *mc = userdata;
1029
771
assert(b);
1030
772
1031
773
/* Called whenever a new services becomes available on the LAN or
1032
774
is removed from the LAN */
1033
775
1034
if(quit_now){
1035
return;
1036
}
1037
1038
switch(event){
776
switch (event) {
1039
777
default:
1040
778
case AVAHI_BROWSER_FAILURE:
1041
779
1042
780
fprintf(stderr, "(Avahi browser) %s\n",
1043
avahi_strerror(avahi_server_errno(mc.server)));
1044
avahi_simple_poll_quit(mc.simple_poll);
781
avahi_strerror(avahi_server_errno(mc->server)));
782
avahi_simple_poll_quit(mc->simple_poll);
1045
783
return;
1046
784
1047
785
case AVAHI_BROWSER_NEW:
1050
788
the callback function is called the Avahi server will free the
1051
789
resolver for us. */
1052
790
1053
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
1054
name, type, domain, protocol, 0,
1055
resolve_callback, NULL) == NULL)
791
if (!(avahi_s_service_resolver_new(mc->server, interface,
792
protocol, name, type, domain,
793
AVAHI_PROTO_INET6, 0,
794
resolve_callback, mc)))
1056
795
fprintf(stderr, "Avahi: Failed to resolve service '%s': %s\n",
1057
name, avahi_strerror(avahi_server_errno(mc.server)));
796
name, avahi_strerror(avahi_server_errno(mc->server)));
1058
797
break;
1059
798
1060
799
case AVAHI_BROWSER_REMOVE:
1069
808
}
1070
809
}
1071
810
1072
/* Signal handler that stops main loop after SIGTERM */
1073
static void handle_sigterm(int sig){
1074
if(quit_now){
1075
return;
1076
}
1077
quit_now = 1;
1078
signal_received = sig;
1079
int old_errno = errno;
1080
/* set main loop to exit */
1081
if(mc.simple_poll != NULL){
1082
avahi_simple_poll_quit(mc.simple_poll);
1083
}
1084
errno = old_errno;
1085
}
1086
1087
/*
1088
* This function determines if a directory entry in /sys/class/net
1089
* corresponds to an acceptable network device.
1090
* (This function is passed to scandir(3) as a filter function.)
1091
*/
1092
int good_interface(const struct dirent *if_entry){
1093
ssize_t ssret;
1094
char *flagname = NULL;
1095
if(if_entry->d_name[0] == '.'){
1096
return 0;
1097
}
1098
int ret = asprintf(&flagname, "%s/%s/flags", sys_class_net,
1099
if_entry->d_name);
1100
if(ret < 0){
1101
perror_plus("asprintf");
1102
return 0;
1103
}
1104
int flags_fd = (int)TEMP_FAILURE_RETRY(open(flagname, O_RDONLY));
1105
if(flags_fd == -1){
1106
perror_plus("open");
1107
free(flagname);
1108
return 0;
1109
}
1110
free(flagname);
1111
typedef short ifreq_flags; /* ifreq.ifr_flags in netdevice(7) */
1112
/* read line from flags_fd */
1113
ssize_t to_read = 2+(sizeof(ifreq_flags)*2)+1; /* "0x1003\n" */
1114
char *flagstring = malloc((size_t)to_read+1); /* +1 for final \0 */
1115
flagstring[(size_t)to_read] = '\0';
1116
if(flagstring == NULL){
1117
perror_plus("malloc");
1118
close(flags_fd);
1119
return 0;
1120
}
1121
while(to_read > 0){
1122
ssret = (ssize_t)TEMP_FAILURE_RETRY(read(flags_fd, flagstring,
1123
(size_t)to_read));
1124
if(ssret == -1){
1125
perror_plus("read");
1126
free(flagstring);
1127
close(flags_fd);
1128
return 0;
1129
}
1130
to_read -= ssret;
1131
if(ssret == 0){
1132
break;
1133
}
1134
}
1135
close(flags_fd);
1136
intmax_t tmpmax;
1137
char *tmp;
1138
errno = 0;
1139
tmpmax = strtoimax(flagstring, &tmp, 0);
1140
if(errno != 0 or tmp == flagstring or (*tmp != '\0'
1141
and not (isspace(*tmp)))
1142
or tmpmax != (ifreq_flags)tmpmax){
1143
if(debug){
1144
fprintf(stderr, "Invalid flags \"%s\" for interface \"%s\"\n",
1145
flagstring, if_entry->d_name);
1146
}
1147
free(flagstring);
1148
return 0;
1149
}
1150
free(flagstring);
1151
ifreq_flags flags = (ifreq_flags)tmpmax;
1152
/* Reject the loopback device */
1153
if(flags & IFF_LOOPBACK){
1154
if(debug){
1155
fprintf(stderr, "Rejecting loopback interface \"%s\"\n",
1156
if_entry->d_name);
1157
}
1158
return 0;
1159
}
1160
/* Accept point-to-point devices only if connect_to is specified */
1161
if(connect_to != NULL and (flags & IFF_POINTOPOINT)){
1162
if(debug){
1163
fprintf(stderr, "Accepting point-to-point interface \"%s\"\n",
1164
if_entry->d_name);
1165
}
1166
return 1;
1167
}
1168
/* Otherwise, reject non-broadcast-capable devices */
1169
if(not (flags & IFF_BROADCAST)){
1170
if(debug){
1171
fprintf(stderr, "Rejecting non-broadcast interface \"%s\"\n",
1172
if_entry->d_name);
1173
}
1174
return 0;
1175
}
1176
/* Reject non-ARP interfaces (including dummy interfaces) */
1177
if(flags & IFF_NOARP){
1178
if(debug){
1179
fprintf(stderr, "Rejecting non-ARP interface \"%s\"\n",
1180
if_entry->d_name);
1181
}
1182
return 0;
1183
}
1184
/* Accept this device */
1185
if(debug){
1186
fprintf(stderr, "Interface \"%s\" is acceptable\n",
1187
if_entry->d_name);
1188
}
1189
return 1;
1190
}
1191
1192
int notdotentries(const struct dirent *direntry){
1193
/* Skip "." and ".." */
1194
if(direntry->d_name[0] == '.'
1195
and (direntry->d_name[1] == '\0'
1196
or (direntry->d_name[1] == '.'
1197
and direntry->d_name[2] == '\0'))){
1198
return 0;
1199
}
1200
return 1;
1201
}
1202
1203
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval){
1204
int ret;
1205
struct timespec now;
1206
struct timespec waited_time;
1207
intmax_t block_time;
1208
1209
while(true){
1210
if(mc.current_server == NULL){
1211
if (debug){
1212
fprintf(stderr,
1213
"Wait until first server is found. No timeout!\n");
1214
}
1215
ret = avahi_simple_poll_iterate(s, -1);
1216
} else {
1217
if (debug){
1218
fprintf(stderr, "Check current_server if we should run it,"
1219
" or wait\n");
1220
}
1221
/* the current time */
1222
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1223
if(ret == -1){
1224
perror_plus("clock_gettime");
1225
return -1;
1226
}
1227
/* Calculating in ms how long time between now and server
1228
who we visted longest time ago. Now - last seen. */
1229
waited_time.tv_sec = (now.tv_sec
1230
- mc.current_server->last_seen.tv_sec);
1231
waited_time.tv_nsec = (now.tv_nsec
1232
- mc.current_server->last_seen.tv_nsec);
1233
/* total time is 10s/10,000ms.
1234
Converting to s from ms by dividing by 1,000,
1235
and ns to ms by dividing by 1,000,000. */
1236
block_time = ((retry_interval
1237
- ((intmax_t)waited_time.tv_sec * 1000))
1238
- ((intmax_t)waited_time.tv_nsec / 1000000));
1239
1240
if (debug){
1241
fprintf(stderr, "Blocking for %ld ms\n", block_time);
1242
}
1243
1244
if(block_time <= 0){
1245
ret = start_mandos_communication(mc.current_server->ip,
1246
mc.current_server->port,
1247
mc.current_server->if_index,
1248
mc.current_server->af);
1249
if(ret == 0){
1250
avahi_simple_poll_quit(mc.simple_poll);
1251
return 0;
1252
}
1253
ret = clock_gettime(CLOCK_MONOTONIC,
1254
&mc.current_server->last_seen);
1255
if(ret == -1){
1256
perror_plus("clock_gettime");
1257
return -1;
1258
}
1259
mc.current_server = mc.current_server->next;
1260
block_time = 0; /* Call avahi to find new Mandos
1261
servers, but don't block */
1262
}
1263
1264
ret = avahi_simple_poll_iterate(s, (int)block_time);
1265
}
1266
if(ret != 0){
1267
if (ret > 0 or errno != EINTR) {
1268
return (ret != 1) ? ret : 0;
1269
}
1270
}
1271
}
1272
}
1273
1274
811
int main(int argc, char *argv[]){
1275
AvahiSServiceBrowser *sb = NULL;
1276
int error;
1277
int ret;
1278
intmax_t tmpmax;
1279
char *tmp;
1280
int exitcode = EXIT_SUCCESS;
1281
const char *interface = "";
1282
struct ifreq network;
1283
int sd = -1;
1284
bool take_down_interface = false;
1285
uid_t uid;
1286
gid_t gid;
1287
char tempdir[] = "/tmp/mandosXXXXXX";
1288
bool tempdir_created = false;
1289
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1290
const char *seckey = PATHDIR "/" SECKEY;
1291
const char *pubkey = PATHDIR "/" PUBKEY;
1292
1293
bool gnutls_initialized = false;
1294
bool gpgme_initialized = false;
1295
float delay = 2.5f;
1296
double retry_interval = 10; /* 10s between trying a server and
1297
retrying the same server again */
1298
1299
struct sigaction old_sigterm_action = { .sa_handler = SIG_DFL };
1300
struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
1301
1302
uid = getuid();
1303
gid = getgid();
1304
1305
/* Lower any group privileges we might have, just to be safe */
1306
errno = 0;
1307
ret = setgid(gid);
1308
if(ret == -1){
1309
perror_plus("setgid");
1310
}
1311
1312
/* Lower user privileges (temporarily) */
1313
errno = 0;
1314
ret = seteuid(uid);
1315
if(ret == -1){
1316
perror_plus("seteuid");
1317
}
1318
1319
if(quit_now){
1320
goto end;
1321
}
1322
1323
{
1324
struct argp_option options[] = {
1325
{ .name = "debug", .key = 128,
1326
.doc = "Debug mode", .group = 3 },
1327
{ .name = "connect", .key = 'c',
1328
.arg = "ADDRESS:PORT",
1329
.doc = "Connect directly to a specific Mandos server",
1330
.group = 1 },
1331
{ .name = "interface", .key = 'i',
1332
.arg = "NAME",
1333
.doc = "Network interface that will be used to search for"
1334
" Mandos servers",
1335
.group = 1 },
1336
{ .name = "seckey", .key = 's',
1337
.arg = "FILE",
1338
.doc = "OpenPGP secret key file base name",
1339
.group = 1 },
1340
{ .name = "pubkey", .key = 'p',
1341
.arg = "FILE",
1342
.doc = "OpenPGP public key file base name",
1343
.group = 2 },
1344
{ .name = "dh-bits", .key = 129,
1345
.arg = "BITS",
1346
.doc = "Bit length of the prime number used in the"
1347
" Diffie-Hellman key exchange",
1348
.group = 2 },
1349
{ .name = "priority", .key = 130,
1350
.arg = "STRING",
1351
.doc = "GnuTLS priority string for the TLS handshake",
1352
.group = 1 },
1353
{ .name = "delay", .key = 131,
1354
.arg = "SECONDS",
1355
.doc = "Maximum delay to wait for interface startup",
1356
.group = 2 },
1357
{ .name = "retry", .key = 132,
1358
.arg = "SECONDS",
1359
.doc = "Retry interval used when denied by the mandos server",
1360
.group = 2 },
1361
/*
1362
* These reproduce what we would get without ARGP_NO_HELP
1363
*/
1364
{ .name = "help", .key = '?',
1365
.doc = "Give this help list", .group = -1 },
1366
{ .name = "usage", .key = -3,
1367
.doc = "Give a short usage message", .group = -1 },
1368
{ .name = "version", .key = 'V',
1369
.doc = "Print program version", .group = -1 },
1370
{ .name = NULL }
1371
};
1372
1373
error_t parse_opt(int key, char *arg,
1374
struct argp_state *state){
1375
errno = 0;
1376
switch(key){
1377
case 128: /* --debug */
1378
debug = true;
1379
break;
1380
case 'c': /* --connect */
1381
connect_to = arg;
1382
break;
1383
case 'i': /* --interface */
1384
interface = arg;
1385
break;
1386
case 's': /* --seckey */
1387
seckey = arg;
1388
break;
1389
case 'p': /* --pubkey */
1390
pubkey = arg;
1391
break;
1392
case 129: /* --dh-bits */
1393
errno = 0;
1394
tmpmax = strtoimax(arg, &tmp, 10);
1395
if(errno != 0 or tmp == arg or *tmp != '\0'
1396
or tmpmax != (typeof(mc.dh_bits))tmpmax){
1397
argp_error(state, "Bad number of DH bits");
1398
}
1399
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
1400
break;
1401
case 130: /* --priority */
1402
mc.priority = arg;
1403
break;
1404
case 131: /* --delay */
1405
errno = 0;
1406
delay = strtof(arg, &tmp);
1407
if(errno != 0 or tmp == arg or *tmp != '\0'){
1408
argp_error(state, "Bad delay");
1409
}
1410
case 132: /* --retry */
1411
errno = 0;
1412
retry_interval = strtod(arg, &tmp);
1413
if(errno != 0 or tmp == arg or *tmp != '\0'
1414
or (retry_interval * 1000) > INT_MAX){
1415
argp_error(state, "Bad retry interval");
1416
}
1417
break;
1418
/*
1419
* These reproduce what we would get without ARGP_NO_HELP
1420
*/
1421
case '?': /* --help */
1422
argp_state_help(state, state->out_stream,
1423
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
1424
& ~(unsigned int)ARGP_HELP_EXIT_OK);
1425
case -3: /* --usage */
1426
argp_state_help(state, state->out_stream,
1427
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
1428
case 'V': /* --version */
1429
fprintf(state->out_stream, "%s\n", argp_program_version);
1430
exit(argp_err_exit_status);
1431
break;
1432
default:
1433
return ARGP_ERR_UNKNOWN;
1434
}
1435
return errno;
1436
}
1437
1438
struct argp argp = { .options = options, .parser = parse_opt,
1439
.args_doc = "",
1440
.doc = "Mandos client -- Get and decrypt"
1441
" passwords from a Mandos server" };
1442
ret = argp_parse(&argp, argc, argv,
1443
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
1444
switch(ret){
1445
case 0:
1446
break;
1447
case ENOMEM:
1448
default:
1449
errno = ret;
1450
perror_plus("argp_parse");
1451
exitcode = EX_OSERR;
1452
goto end;
1453
case EINVAL:
1454
exitcode = EX_USAGE;
1455
goto end;
1456
}
1457
}
1458
1459
if(not debug){
1460
avahi_set_log_function(empty_log);
1461
}
1462
1463
if(interface[0] == '\0'){
1464
struct dirent **direntries;
1465
ret = scandir(sys_class_net, &direntries, good_interface,
1466
alphasort);
1467
if(ret >= 1){
1468
/* Pick the first good interface */
1469
interface = strdup(direntries[0]->d_name);
1470
if(debug){
1471
fprintf(stderr, "Using interface \"%s\"\n", interface);
1472
}
1473
if(interface == NULL){
1474
perror_plus("malloc");
1475
free(direntries);
1476
exitcode = EXIT_FAILURE;
1477
goto end;
1478
}
1479
free(direntries);
1480
} else {
1481
free(direntries);
1482
fprintf(stderr, "Could not find a network interface\n");
1483
exitcode = EXIT_FAILURE;
1484
goto end;
1485
}
1486
}
1487
1488
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1489
from the signal handler */
1490
/* Initialize the pseudo-RNG for Avahi */
1491
srand((unsigned int) time(NULL));
1492
mc.simple_poll = avahi_simple_poll_new();
1493
if(mc.simple_poll == NULL){
1494
fprintf(stderr, "Avahi: Failed to create simple poll object.\n");
1495
exitcode = EX_UNAVAILABLE;
1496
goto end;
1497
}
1498
1499
sigemptyset(&sigterm_action.sa_mask);
1500
ret = sigaddset(&sigterm_action.sa_mask, SIGINT);
1501
if(ret == -1){
1502
perror_plus("sigaddset");
1503
exitcode = EX_OSERR;
1504
goto end;
1505
}
1506
ret = sigaddset(&sigterm_action.sa_mask, SIGHUP);
1507
if(ret == -1){
1508
perror_plus("sigaddset");
1509
exitcode = EX_OSERR;
1510
goto end;
1511
}
1512
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
1513
if(ret == -1){
1514
perror_plus("sigaddset");
1515
exitcode = EX_OSERR;
1516
goto end;
1517
}
1518
/* Need to check if the handler is SIG_IGN before handling:
1519
| [[info:libc:Initial Signal Actions]] |
1520
| [[info:libc:Basic Signal Handling]] |
1521
*/
1522
ret = sigaction(SIGINT, NULL, &old_sigterm_action);
1523
if(ret == -1){
1524
perror_plus("sigaction");
1525
return EX_OSERR;
1526
}
1527
if(old_sigterm_action.sa_handler != SIG_IGN){
1528
ret = sigaction(SIGINT, &sigterm_action, NULL);
1529
if(ret == -1){
1530
perror_plus("sigaction");
1531
exitcode = EX_OSERR;
1532
goto end;
1533
}
1534
}
1535
ret = sigaction(SIGHUP, NULL, &old_sigterm_action);
1536
if(ret == -1){
1537
perror_plus("sigaction");
1538
return EX_OSERR;
1539
}
1540
if(old_sigterm_action.sa_handler != SIG_IGN){
1541
ret = sigaction(SIGHUP, &sigterm_action, NULL);
1542
if(ret == -1){
1543
perror_plus("sigaction");
1544
exitcode = EX_OSERR;
1545
goto end;
1546
}
1547
}
1548
ret = sigaction(SIGTERM, NULL, &old_sigterm_action);
1549
if(ret == -1){
1550
perror_plus("sigaction");
1551
return EX_OSERR;
1552
}
1553
if(old_sigterm_action.sa_handler != SIG_IGN){
1554
ret = sigaction(SIGTERM, &sigterm_action, NULL);
1555
if(ret == -1){
1556
perror_plus("sigaction");
1557
exitcode = EX_OSERR;
1558
goto end;
1559
}
1560
}
1561
1562
/* If the interface is down, bring it up */
1563
if(strcmp(interface, "none") != 0){
812
AvahiSServiceBrowser *sb = NULL;
813
int error;
814
int ret;
815
int exitcode = EXIT_SUCCESS;
816
const char *interface = "eth0";
817
struct ifreq network;
818
int sd;
819
uid_t uid;
820
gid_t gid;
821
char *connect_to = NULL;
822
char tempdir[] = "/tmp/mandosXXXXXX";
823
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
824
const char *seckey = PATHDIR "/" SECKEY;
825
const char *pubkey = PATHDIR "/" PUBKEY;
826
827
mandos_context mc = { .simple_poll = NULL, .server = NULL,
828
.dh_bits = 1024, .priority = "SECURE256"
829
":!CTYPE-X.509:+CTYPE-OPENPGP" };
830
bool gnutls_initalized = false;
831
bool gpgme_initalized = false;
832
833
{
834
struct argp_option options[] = {
835
{ .name = "debug", .key = 128,
836
.doc = "Debug mode", .group = 3 },
837
{ .name = "connect", .key = 'c',
838
.arg = "ADDRESS:PORT",
839
.doc = "Connect directly to a specific Mandos server",
840
.group = 1 },
841
{ .name = "interface", .key = 'i',
842
.arg = "NAME",
843
.doc = "Interface that will be used to search for Mandos"
844
" servers",
845
.group = 1 },
846
{ .name = "seckey", .key = 's',
847
.arg = "FILE",
848
.doc = "OpenPGP secret key file base name",
849
.group = 1 },
850
{ .name = "pubkey", .key = 'p',
851
.arg = "FILE",
852
.doc = "OpenPGP public key file base name",
853
.group = 2 },
854
{ .name = "dh-bits", .key = 129,
855
.arg = "BITS",
856
.doc = "Bit length of the prime number used in the"
857
" Diffie-Hellman key exchange",
858
.group = 2 },
859
{ .name = "priority", .key = 130,
860
.arg = "STRING",
861
.doc = "GnuTLS priority string for the TLS handshake",
862
.group = 1 },
863
{ .name = NULL }
864
};
865
866
error_t parse_opt (int key, char *arg,
867
struct argp_state *state) {
868
/* Get the INPUT argument from `argp_parse', which we know is
869
a pointer to our plugin list pointer. */
870
switch (key) {
871
case 128: /* --debug */
872
debug = true;
873
break;
874
case 'c': /* --connect */
875
connect_to = arg;
876
break;
877
case 'i': /* --interface */
878
interface = arg;
879
break;
880
case 's': /* --seckey */
881
seckey = arg;
882
break;
883
case 'p': /* --pubkey */
884
pubkey = arg;
885
break;
886
case 129: /* --dh-bits */
887
errno = 0;
888
mc.dh_bits = (unsigned int) strtol(arg, NULL, 10);
889
if (errno){
890
perror("strtol");
891
exit(EXIT_FAILURE);
892
}
893
break;
894
case 130: /* --priority */
895
mc.priority = arg;
896
break;
897
case ARGP_KEY_ARG:
898
argp_usage (state);
899
case ARGP_KEY_END:
900
break;
901
default:
902
return ARGP_ERR_UNKNOWN;
903
}
904
return 0;
905
}
906
907
struct argp argp = { .options = options, .parser = parse_opt,
908
.args_doc = "",
909
.doc = "Mandos client -- Get and decrypt"
910
" passwords from a Mandos server" };
911
ret = argp_parse (&argp, argc, argv, 0, 0, NULL);
912
if (ret == ARGP_ERR_UNKNOWN){
913
fprintf(stderr, "Unknown error while parsing arguments\n");
914
exitcode = EXIT_FAILURE;
915
goto end;
916
}
917
}
918
919
/* If the interface is down, bring it up */
920
{
921
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
922
if(sd < 0) {
923
perror("socket");
924
exitcode = EXIT_FAILURE;
925
goto end;
926
}
927
strcpy(network.ifr_name, interface);
928
ret = ioctl(sd, SIOCGIFFLAGS, &network);
929
if(ret == -1){
930
perror("ioctl SIOCGIFFLAGS");
931
exitcode = EXIT_FAILURE;
932
goto end;
933
}
934
if((network.ifr_flags & IFF_UP) == 0){
935
network.ifr_flags |= IFF_UP;
936
ret = ioctl(sd, SIOCSIFFLAGS, &network);
937
if(ret == -1){
938
perror("ioctl SIOCSIFFLAGS");
939
exitcode = EXIT_FAILURE;
940
goto end;
941
}
942
}
943
ret = TEMP_FAILURE_RETRY(close(sd));
944
if(ret == -1){
945
perror("close");
946
}
947
}
948
949
uid = getuid();
950
gid = getgid();
951
952
ret = setuid(uid);
953
if (ret == -1){
954
perror("setuid");
955
}
956
957
setgid(gid);
958
if (ret == -1){
959
perror("setgid");
960
}
961
962
ret = init_gnutls_global(&mc, pubkey, seckey);
963
if (ret == -1){
964
fprintf(stderr, "init_gnutls_global failed\n");
965
exitcode = EXIT_FAILURE;
966
goto end;
967
} else {
968
gnutls_initalized = true;
969
}
970
971
if(mkdtemp(tempdir) == NULL){
972
perror("mkdtemp");
973
tempdir[0] = '\0';
974
goto end;
975
}
976
977
if(not init_gpgme(&mc, pubkey, seckey, tempdir)){
978
fprintf(stderr, "gpgme_initalized failed\n");
979
exitcode = EXIT_FAILURE;
980
goto end;
981
} else {
982
gpgme_initalized = true;
983
}
984
1564
985
if_index = (AvahiIfIndex) if_nametoindex(interface);
1565
986
if(if_index == 0){
1566
987
fprintf(stderr, "No such interface: \"%s\"\n", interface);
1567
exitcode = EX_UNAVAILABLE;
1568
goto end;
1569
}
1570
1571
if(quit_now){
1572
goto end;
1573
}
1574
1575
/* Re-raise priviliges */
1576
errno = 0;
1577
ret = seteuid(0);
1578
if(ret == -1){
1579
perror_plus("seteuid");
1580
}
1581
1582
#ifdef __linux__
1583
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1584
messages about the network interface to mess up the prompt */
1585
ret = klogctl(8, NULL, 5);
1586
bool restore_loglevel = true;
1587
if(ret == -1){
1588
restore_loglevel = false;
1589
perror_plus("klogctl");
1590
}
1591
#endif /* __linux__ */
1592
1593
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1594
if(sd < 0){
1595
perror_plus("socket");
1596
exitcode = EX_OSERR;
1597
#ifdef __linux__
1598
if(restore_loglevel){
1599
ret = klogctl(7, NULL, 0);
1600
if(ret == -1){
1601
perror_plus("klogctl");
1602
}
1603
}
1604
#endif /* __linux__ */
1605
/* Lower privileges */
1606
errno = 0;
1607
ret = seteuid(uid);
1608
if(ret == -1){
1609
perror_plus("seteuid");
1610
}
1611
goto end;
1612
}
1613
strcpy(network.ifr_name, interface);
1614
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1615
if(ret == -1){
1616
perror_plus("ioctl SIOCGIFFLAGS");
1617
#ifdef __linux__
1618
if(restore_loglevel){
1619
ret = klogctl(7, NULL, 0);
1620
if(ret == -1){
1621
perror_plus("klogctl");
1622
}
1623
}
1624
#endif /* __linux__ */
1625
exitcode = EX_OSERR;
1626
/* Lower privileges */
1627
errno = 0;
1628
ret = seteuid(uid);
1629
if(ret == -1){
1630
perror_plus("seteuid");
1631
}
1632
goto end;
1633
}
1634
if((network.ifr_flags & IFF_UP) == 0){
1635
network.ifr_flags |= IFF_UP;
1636
take_down_interface = true;
1637
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1638
if(ret == -1){
1639
take_down_interface = false;
1640
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1641
exitcode = EX_OSERR;
1642
#ifdef __linux__
1643
if(restore_loglevel){
1644
ret = klogctl(7, NULL, 0);
1645
if(ret == -1){
1646
perror_plus("klogctl");
1647
}
1648
}
1649
#endif /* __linux__ */
1650
/* Lower privileges */
1651
errno = 0;
1652
ret = seteuid(uid);
1653
if(ret == -1){
1654
perror_plus("seteuid");
1655
}
1656
goto end;
1657
}
1658
}
1659
/* Sleep checking until interface is running.
1660
Check every 0.25s, up to total time of delay */
1661
for(int i=0; i < delay * 4; i++){
1662
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1663
if(ret == -1){
1664
perror_plus("ioctl SIOCGIFFLAGS");
1665
} else if(network.ifr_flags & IFF_RUNNING){
1666
break;
1667
}
1668
struct timespec sleeptime = { .tv_nsec = 250000000 };
1669
ret = nanosleep(&sleeptime, NULL);
1670
if(ret == -1 and errno != EINTR){
1671
perror_plus("nanosleep");
1672
}
1673
}
1674
if(not take_down_interface){
1675
/* We won't need the socket anymore */
1676
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1677
if(ret == -1){
1678
perror_plus("close");
1679
}
1680
}
1681
#ifdef __linux__
1682
if(restore_loglevel){
1683
/* Restores kernel loglevel to default */
1684
ret = klogctl(7, NULL, 0);
1685
if(ret == -1){
1686
perror_plus("klogctl");
1687
}
1688
}
1689
#endif /* __linux__ */
1690
/* Lower privileges */
1691
errno = 0;
1692
if(take_down_interface){
1693
/* Lower privileges */
1694
ret = seteuid(uid);
1695
if(ret == -1){
1696
perror_plus("seteuid");
1697
}
1698
} else {
1699
/* Lower privileges permanently */
1700
ret = setuid(uid);
1701
if(ret == -1){
1702
perror_plus("setuid");
1703
}
1704
}
1705
}
1706
1707
if(quit_now){
1708
goto end;
1709
}
1710
1711
ret = init_gnutls_global(pubkey, seckey);
1712
if(ret == -1){
1713
fprintf(stderr, "init_gnutls_global failed\n");
1714
exitcode = EX_UNAVAILABLE;
1715
goto end;
1716
} else {
1717
gnutls_initialized = true;
1718
}
1719
1720
if(quit_now){
1721
goto end;
1722
}
1723
1724
if(mkdtemp(tempdir) == NULL){
1725
perror_plus("mkdtemp");
1726
goto end;
1727
}
1728
tempdir_created = true;
1729
1730
if(quit_now){
1731
goto end;
1732
}
1733
1734
if(not init_gpgme(pubkey, seckey, tempdir)){
1735
fprintf(stderr, "init_gpgme failed\n");
1736
exitcode = EX_UNAVAILABLE;
1737
goto end;
1738
} else {
1739
gpgme_initialized = true;
1740
}
1741
1742
if(quit_now){
1743
goto end;
1744
}
1745
1746
if(connect_to != NULL){
1747
/* Connect directly, do not use Zeroconf */
1748
/* (Mainly meant for debugging) */
1749
char *address = strrchr(connect_to, ':');
1750
if(address == NULL){
1751
fprintf(stderr, "No colon in address\n");
1752
exitcode = EX_USAGE;
1753
goto end;
1754
}
1755
1756
if(quit_now){
1757
goto end;
1758
}
1759
1760
uint16_t port;
1761
errno = 0;
1762
tmpmax = strtoimax(address+1, &tmp, 10);
1763
if(errno != 0 or tmp == address+1 or *tmp != '\0'
1764
or tmpmax != (uint16_t)tmpmax){
1765
fprintf(stderr, "Bad port number\n");
1766
exitcode = EX_USAGE;
1767
goto end;
1768
}
1769
1770
if(quit_now){
1771
goto end;
1772
}
1773
1774
port = (uint16_t)tmpmax;
1775
*address = '\0';
1776
address = connect_to;
1777
/* Colon in address indicates IPv6 */
1778
int af;
1779
if(strchr(address, ':') != NULL){
1780
af = AF_INET6;
1781
} else {
1782
af = AF_INET;
1783
}
1784
1785
if(quit_now){
1786
goto end;
1787
}
1788
1789
while(not quit_now){
1790
ret = start_mandos_communication(address, port, if_index, af);
1791
if(quit_now or ret == 0){
1792
break;
1793
}
1794
sleep((int)retry_interval or 1);
1795
};
1796
1797
if (not quit_now){
1798
exitcode = EXIT_SUCCESS;
1799
}
1800
1801
goto end;
1802
}
1803
1804
if(quit_now){
1805
goto end;
1806
}
1807
1808
{
1809
AvahiServerConfig config;
1810
/* Do not publish any local Zeroconf records */
1811
avahi_server_config_init(&config);
1812
config.publish_hinfo = 0;
1813
config.publish_addresses = 0;
1814
config.publish_workstation = 0;
1815
config.publish_domain = 0;
1816
1817
/* Allocate a new server */
1818
mc.server = avahi_server_new(avahi_simple_poll_get
1819
(mc.simple_poll), &config, NULL,
1820
NULL, &error);
1821
1822
/* Free the Avahi configuration data */
1823
avahi_server_config_free(&config);
1824
}
1825
1826
/* Check if creating the Avahi server object succeeded */
1827
if(mc.server == NULL){
1828
fprintf(stderr, "Failed to create Avahi server: %s\n",
1829
avahi_strerror(error));
1830
exitcode = EX_UNAVAILABLE;
1831
goto end;
1832
}
1833
1834
if(quit_now){
1835
goto end;
1836
}
1837
1838
/* Create the Avahi service browser */
1839
sb = avahi_s_service_browser_new(mc.server, if_index,
1840
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
1841
NULL, 0, browse_callback, NULL);
1842
if(sb == NULL){
1843
fprintf(stderr, "Failed to create service browser: %s\n",
1844
avahi_strerror(avahi_server_errno(mc.server)));
1845
exitcode = EX_UNAVAILABLE;
1846
goto end;
1847
}
1848
1849
if(quit_now){
1850
goto end;
1851
}
1852
1853
/* Run the main loop */
1854
1855
if(debug){
1856
fprintf(stderr, "Starting Avahi loop search\n");
1857
}
1858
1859
ret = avahi_loop_with_timeout(mc.simple_poll,
1860
(int)(retry_interval * 1000));
1861
if(debug){
1862
fprintf(stderr, "avahi_loop_with_timeout exited %s\n",
1863
(ret == 0) ? "successfully" : "with error");
1864
}
1865
988
exit(EXIT_FAILURE);
989
}
990
991
if(connect_to != NULL){
992
/* Connect directly, do not use Zeroconf */
993
/* (Mainly meant for debugging) */
994
char *address = strrchr(connect_to, ':');
995
if(address == NULL){
996
fprintf(stderr, "No colon in address\n");
997
exitcode = EXIT_FAILURE;
998
goto end;
999
}
1000
errno = 0;
1001
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
1002
if(errno){
1003
perror("Bad port number");
1004
exitcode = EXIT_FAILURE;
1005
goto end;
1006
}
1007
*address = '\0';
1008
address = connect_to;
1009
ret = start_mandos_communication(address, port, if_index, &mc);
1010
if(ret < 0){
1011
exitcode = EXIT_FAILURE;
1012
} else {
1013
exitcode = EXIT_SUCCESS;
1014
}
1015
goto end;
1016
}
1017
1018
if (not debug){
1019
avahi_set_log_function(empty_log);
1020
}
1021
1022
/* Initialize the pseudo-RNG for Avahi */
1023
srand((unsigned int) time(NULL));
1024
1025
/* Allocate main Avahi loop object */
1026
mc.simple_poll = avahi_simple_poll_new();
1027
if (mc.simple_poll == NULL) {
1028
fprintf(stderr, "Avahi: Failed to create simple poll"
1029
" object.\n");
1030
exitcode = EXIT_FAILURE;
1031
goto end;
1032
}
1033
1034
{
1035
AvahiServerConfig config;
1036
/* Do not publish any local Zeroconf records */
1037
avahi_server_config_init(&config);
1038
config.publish_hinfo = 0;
1039
config.publish_addresses = 0;
1040
config.publish_workstation = 0;
1041
config.publish_domain = 0;
1042
1043
/* Allocate a new server */
1044
mc.server = avahi_server_new(avahi_simple_poll_get
1045
(mc.simple_poll), &config, NULL,
1046
NULL, &error);
1047
1048
/* Free the Avahi configuration data */
1049
avahi_server_config_free(&config);
1050
}
1051
1052
/* Check if creating the Avahi server object succeeded */
1053
if (mc.server == NULL) {
1054
fprintf(stderr, "Failed to create Avahi server: %s\n",
1055
avahi_strerror(error));
1056
exitcode = EXIT_FAILURE;
1057
goto end;
1058
}
1059
1060
/* Create the Avahi service browser */
1061
sb = avahi_s_service_browser_new(mc.server, if_index,
1062
AVAHI_PROTO_INET6,
1063
"_mandos._tcp", NULL, 0,
1064
browse_callback, &mc);
1065
if (sb == NULL) {
1066
fprintf(stderr, "Failed to create service browser: %s\n",
1067
avahi_strerror(avahi_server_errno(mc.server)));
1068
exitcode = EXIT_FAILURE;
1069
goto end;
1070
}
1071
1072
/* Run the main loop */
1073
1074
if (debug){
1075
fprintf(stderr, "Starting Avahi loop search\n");
1076
}
1077
1078
avahi_simple_poll_loop(mc.simple_poll);
1079
1866
1080
end:
1867
1868
if(debug){
1869
fprintf(stderr, "%s exiting\n", argv[0]);
1870
}
1871
1872
/* Cleanup things */
1873
if(sb != NULL)
1874
avahi_s_service_browser_free(sb);
1875
1876
if(mc.server != NULL)
1877
avahi_server_free(mc.server);
1878
1879
if(mc.simple_poll != NULL)
1880
avahi_simple_poll_free(mc.simple_poll);
1881
1882
if(gnutls_initialized){
1883
gnutls_certificate_free_credentials(mc.cred);
1884
gnutls_global_deinit();
1885
gnutls_dh_params_deinit(mc.dh_params);
1886
}
1887
1888
if(gpgme_initialized){
1889
gpgme_release(mc.ctx);
1890
}
1891
1892
/* Cleans up the circular linked list of Mandos servers the client
1893
has seen */
1894
if(mc.current_server != NULL){
1895
mc.current_server->prev->next = NULL;
1896
while(mc.current_server != NULL){
1897
server *next = mc.current_server->next;
1898
free(mc.current_server);
1899
mc.current_server = next;
1900
}
1901
}
1902
1903
/* Take down the network interface */
1904
if(take_down_interface){
1905
/* Re-raise priviliges */
1906
errno = 0;
1907
ret = seteuid(0);
1908
if(ret == -1){
1909
perror_plus("seteuid");
1910
}
1911
if(geteuid() == 0){
1912
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1913
if(ret == -1){
1914
perror_plus("ioctl SIOCGIFFLAGS");
1915
} else if(network.ifr_flags & IFF_UP) {
1916
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
1917
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1918
if(ret == -1){
1919
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
1920
}
1921
}
1922
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1923
if(ret == -1){
1924
perror_plus("close");
1925
}
1926
/* Lower privileges permanently */
1927
errno = 0;
1928
ret = setuid(uid);
1929
if(ret == -1){
1930
perror_plus("setuid");
1931
}
1932
}
1933
}
1934
1935
/* Removes the GPGME temp directory and all files inside */
1936
if(tempdir_created){
1937
struct dirent **direntries = NULL;
1938
struct dirent *direntry = NULL;
1939
ret = scandir(tempdir, &direntries, notdotentries, alphasort);
1940
if (ret > 0){
1941
for(int i = 0; i < ret; i++){
1942
direntry = direntries[i];
1943
char *fullname = NULL;
1944
ret = asprintf(&fullname, "%s/%s", tempdir,
1945
direntry->d_name);
1946
if(ret < 0){
1947
perror_plus("asprintf");
1948
continue;
1949
}
1950
ret = remove(fullname);
1951
if(ret == -1){
1952
fprintf(stderr, "remove(\"%s\"): %s\n", fullname,
1953
strerror(errno));
1954
}
1955
free(fullname);
1956
}
1957
}
1958
1959
/* need to be cleaned even if ret == 0 because man page doesn't
1960
specify */
1961
free(direntries);
1962
if (ret == -1){
1963
perror_plus("scandir");
1964
}
1965
ret = rmdir(tempdir);
1966
if(ret == -1 and errno != ENOENT){
1967
perror_plus("rmdir");
1968
}
1969
}
1970
1971
if(quit_now){
1972
sigemptyset(&old_sigterm_action.sa_mask);
1973
old_sigterm_action.sa_handler = SIG_DFL;
1974
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
1975
&old_sigterm_action,
1976
NULL));
1977
if(ret == -1){
1978
perror_plus("sigaction");
1979
}
1980
do {
1981
ret = raise(signal_received);
1982
} while(ret != 0 and errno == EINTR);
1983
if(ret != 0){
1984
perror_plus("raise");
1985
abort();
1986
}
1987
TEMP_FAILURE_RETRY(pause());
1988
}
1989
1990
return exitcode;
1081
1082
if (debug){
1083
fprintf(stderr, "%s exiting\n", argv[0]);
1084
}
1085
1086
/* Cleanup things */
1087
if (sb != NULL)
1088
avahi_s_service_browser_free(sb);
1089
1090
if (mc.server != NULL)
1091
avahi_server_free(mc.server);
1092
1093
if (mc.simple_poll != NULL)
1094
avahi_simple_poll_free(mc.simple_poll);
1095
1096
if (gnutls_initalized){
1097
gnutls_certificate_free_credentials(mc.cred);
1098
gnutls_global_deinit ();
1099
gnutls_dh_params_deinit(mc.dh_params);
1100
}
1101
1102
if(gpgme_initalized){
1103
gpgme_release(mc.ctx);
1104
}
1105
1106
/* Removes the temp directory used by GPGME */
1107
if(tempdir[0] != '\0'){
1108
DIR *d;
1109
struct dirent *direntry;
1110
d = opendir(tempdir);
1111
if(d == NULL){
1112
perror("opendir");
1113
} else {
1114
while(true){
1115
direntry = readdir(d);
1116
if(direntry == NULL){
1117
break;
1118
}
1119
if (direntry->d_type == DT_REG){
1120
char *fullname = NULL;
1121
ret = asprintf(&fullname, "%s/%s", tempdir,
1122
direntry->d_name);
1123
if(ret < 0){
1124
perror("asprintf");
1125
continue;
1126
}
1127
ret = unlink(fullname);
1128
if(ret == -1){
1129
fprintf(stderr, "unlink(\"%s\"): %s",
1130
fullname, strerror(errno));
1131
}
1132
free(fullname);
1133
}
1134
}
1135
closedir(d);
1136
}
1137
ret = rmdir(tempdir);
1138
if(ret == -1){
1139
perror("rmdir");
1140
}
1141
}
1142
1143
return exitcode;
1991
1144
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0