117
46
#include <avahi-common/malloc.h>
118
47
#include <avahi-common/error.h>
121
#include <gnutls/gnutls.h> /* All GnuTLS types, constants and
124
init_gnutls_session(),
126
#include <gnutls/openpgp.h>
127
/* gnutls_certificate_set_openpgp_key_file(),
128
GNUTLS_OPENPGP_FMT_BASE64 */
131
#include <gpgme.h> /* All GPGME types, constants and
134
GPGME_PROTOCOL_OpenPGP,
50
#include <sys/types.h> /* socket(), inet_pton() */
51
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
52
struct in6_addr, inet_pton() */
53
#include <gnutls/gnutls.h> /* All GnuTLS stuff */
54
#include <gnutls/openpgp.h> /* GnuTLS with openpgp stuff */
56
#include <unistd.h> /* close() */
57
#include <netinet/in.h>
58
#include <stdbool.h> /* true */
59
#include <string.h> /* memset */
60
#include <arpa/inet.h> /* inet_pton() */
61
#include <iso646.h> /* not */
64
#include <errno.h> /* perror() */
137
70
#define BUFFER_SIZE 256
139
#define PATHDIR "/conf/conf.d/mandos"
140
#define SECKEY "seckey.txt"
141
#define PUBKEY "pubkey.txt"
142
#define HOOKDIR "/lib/mandos/network-hooks.d"
73
const char *certdir = "/conf/conf.d/cryptkeyreq/";
74
const char *certfile = "openpgp-client.txt";
75
const char *certkey = "openpgp-client-key.txt";
144
77
bool debug = false;
145
static const char mandos_protocol_version[] = "1";
146
const char *argp_program_version = "mandos-client " VERSION;
147
const char *argp_program_bug_address = "<mandos@recompile.se>";
148
static const char sys_class_net[] = "/sys/class/net";
149
char *connect_to = NULL;
150
const char *hookdir = HOOKDIR;
155
/* Doubly linked list that need to be circularly linked when used */
156
typedef struct server{
159
AvahiIfIndex if_index;
161
struct timespec last_seen;
166
/* Used for passing in values through the Avahi callback functions */
80
gnutls_session_t session;
169
81
gnutls_certificate_credentials_t cred;
170
unsigned int dh_bits;
171
82
gnutls_dh_params_t dh_params;
172
const char *priority;
86
ssize_t pgp_packet_decrypt (char *packet, size_t packet_size,
87
char **new_packet, const char *homedir){
88
gpgme_data_t dh_crypto, dh_plain;
174
server *current_server;
176
size_t interfaces_size;
179
/* global so signal handler can reach it*/
180
AvahiSimplePoll *simple_poll;
182
sig_atomic_t quit_now = 0;
183
int signal_received = 0;
185
/* Function to use when printing errors */
186
void perror_plus(const char *print_text){
188
fprintf(stderr, "Mandos plugin %s: ",
189
program_invocation_short_name);
194
__attribute__((format (gnu_printf, 2, 3), nonnull))
195
int fprintf_plus(FILE *stream, const char *format, ...){
197
va_start (ap, format);
199
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
200
program_invocation_short_name));
201
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
205
* Make additional room in "buffer" for at least BUFFER_SIZE more
206
* bytes. "buffer_capacity" is how much is currently allocated,
207
* "buffer_length" is how much is already used.
209
__attribute__((nonnull, warn_unused_result))
210
size_t incbuffer(char **buffer, size_t buffer_length,
211
size_t buffer_capacity){
212
if(buffer_length + BUFFER_SIZE > buffer_capacity){
213
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
215
int old_errno = errno;
222
buffer_capacity += BUFFER_SIZE;
224
return buffer_capacity;
227
/* Add server to set of servers to retry periodically */
228
__attribute__((nonnull, warn_unused_result))
229
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
230
int af, server **current_server){
232
server *new_server = malloc(sizeof(server));
233
if(new_server == NULL){
234
perror_plus("malloc");
237
*new_server = (server){ .ip = strdup(ip),
239
.if_index = if_index,
241
if(new_server->ip == NULL){
242
perror_plus("strdup");
246
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
248
perror_plus("clock_gettime");
250
#pragma GCC diagnostic push
251
#pragma GCC diagnostic ignored "-Wcast-qual"
253
free((char *)(new_server->ip));
255
#pragma GCC diagnostic pop
260
/* Special case of first server */
261
if(*current_server == NULL){
262
new_server->next = new_server;
263
new_server->prev = new_server;
264
*current_server = new_server;
266
/* Place the new server last in the list */
267
new_server->next = *current_server;
268
new_server->prev = (*current_server)->prev;
269
new_server->prev->next = new_server;
270
(*current_server)->prev = new_server;
278
__attribute__((nonnull, warn_unused_result))
279
static bool init_gpgme(const char * const seckey,
280
const char * const pubkey,
281
const char * const tempdir,
92
ssize_t new_packet_capacity = 0;
93
ssize_t new_packet_length = 0;
284
94
gpgme_engine_info_t engine_info;
287
* Helper function to insert pub and seckey to the engine keyring.
289
bool import_key(const char * const filename){
292
gpgme_data_t pgp_data;
294
fd = (int)TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
300
rc = gpgme_data_new_from_fd(&pgp_data, fd);
301
if(rc != GPG_ERR_NO_ERROR){
302
fprintf_plus(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
303
gpgme_strsource(rc), gpgme_strerror(rc));
307
rc = gpgme_op_import(mc->ctx, pgp_data);
308
if(rc != GPG_ERR_NO_ERROR){
309
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
310
gpgme_strsource(rc), gpgme_strerror(rc));
316
perror_plus("close");
318
gpgme_data_release(pgp_data);
323
fprintf_plus(stderr, "Initializing GPGME\n");
97
fprintf(stderr, "Trying to decrypt OpenPGP packet\n");
327
101
gpgme_check_version(NULL);
328
102
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
329
if(rc != GPG_ERR_NO_ERROR){
330
fprintf_plus(stderr, "bad gpgme_engine_check_version: %s: %s\n",
331
gpgme_strsource(rc), gpgme_strerror(rc));
103
if (rc != GPG_ERR_NO_ERROR){
104
fprintf(stderr, "bad gpgme_engine_check_version: %s: %s\n",
105
gpgme_strsource(rc), gpgme_strerror(rc));
335
/* Set GPGME home directory for the OpenPGP engine only */
336
rc = gpgme_get_engine_info(&engine_info);
337
if(rc != GPG_ERR_NO_ERROR){
338
fprintf_plus(stderr, "bad gpgme_get_engine_info: %s: %s\n",
339
gpgme_strsource(rc), gpgme_strerror(rc));
109
/* Set GPGME home directory */
110
rc = gpgme_get_engine_info (&engine_info);
111
if (rc != GPG_ERR_NO_ERROR){
112
fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
113
gpgme_strsource(rc), gpgme_strerror(rc));
342
116
while(engine_info != NULL){
343
117
if(engine_info->protocol == GPGME_PROTOCOL_OpenPGP){
344
118
gpgme_set_engine_info(GPGME_PROTOCOL_OpenPGP,
345
engine_info->file_name, tempdir);
119
engine_info->file_name, homedir);
348
122
engine_info = engine_info->next;
350
124
if(engine_info == NULL){
351
fprintf_plus(stderr, "Could not set GPGME home dir to %s\n",
356
/* Create new GPGME "context" */
357
rc = gpgme_new(&(mc->ctx));
358
if(rc != GPG_ERR_NO_ERROR){
359
fprintf_plus(stderr, "Mandos plugin mandos-client: "
360
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
365
if(not import_key(pubkey) or not import_key(seckey)){
373
* Decrypt OpenPGP data.
374
* Returns -1 on error
376
__attribute__((nonnull, warn_unused_result))
377
static ssize_t pgp_packet_decrypt(const char *cryptotext,
381
gpgme_data_t dh_crypto, dh_plain;
384
size_t plaintext_capacity = 0;
385
ssize_t plaintext_length = 0;
388
fprintf_plus(stderr, "Trying to decrypt OpenPGP data\n");
391
/* Create new GPGME data buffer from memory cryptotext */
392
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
394
if(rc != GPG_ERR_NO_ERROR){
395
fprintf_plus(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
396
gpgme_strsource(rc), gpgme_strerror(rc));
125
fprintf(stderr, "Could not set home dir to %s\n", homedir);
129
/* Create new GPGME data buffer from packet buffer */
130
rc = gpgme_data_new_from_mem(&dh_crypto, packet, packet_size, 0);
131
if (rc != GPG_ERR_NO_ERROR){
132
fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
133
gpgme_strsource(rc), gpgme_strerror(rc));
400
137
/* Create new empty GPGME data buffer for the plaintext */
401
138
rc = gpgme_data_new(&dh_plain);
402
if(rc != GPG_ERR_NO_ERROR){
403
fprintf_plus(stderr, "Mandos plugin mandos-client: "
404
"bad gpgme_data_new: %s: %s\n",
405
gpgme_strsource(rc), gpgme_strerror(rc));
406
gpgme_data_release(dh_crypto);
410
/* Decrypt data from the cryptotext data buffer to the plaintext
412
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
413
if(rc != GPG_ERR_NO_ERROR){
414
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
415
gpgme_strsource(rc), gpgme_strerror(rc));
416
plaintext_length = -1;
418
gpgme_decrypt_result_t result;
419
result = gpgme_op_decrypt_result(mc->ctx);
421
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
423
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
424
result->unsupported_algorithm);
425
fprintf_plus(stderr, "Wrong key usage: %u\n",
426
result->wrong_key_usage);
427
if(result->file_name != NULL){
428
fprintf_plus(stderr, "File name: %s\n", result->file_name);
430
gpgme_recipient_t recipient;
431
recipient = result->recipients;
139
if (rc != GPG_ERR_NO_ERROR){
140
fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
141
gpgme_strsource(rc), gpgme_strerror(rc));
145
/* Create new GPGME "context" */
146
rc = gpgme_new(&ctx);
147
if (rc != GPG_ERR_NO_ERROR){
148
fprintf(stderr, "bad gpgme_new: %s: %s\n",
149
gpgme_strsource(rc), gpgme_strerror(rc));
153
/* Decrypt data from the FILE pointer to the plaintext data
155
rc = gpgme_op_decrypt(ctx, dh_crypto, dh_plain);
156
if (rc != GPG_ERR_NO_ERROR){
157
fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
158
gpgme_strsource(rc), gpgme_strerror(rc));
163
fprintf(stderr, "Decryption of OpenPGP packet succeeded\n");
167
gpgme_decrypt_result_t result;
168
result = gpgme_op_decrypt_result(ctx);
170
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
172
fprintf(stderr, "Unsupported algorithm: %s\n",
173
result->unsupported_algorithm);
174
fprintf(stderr, "Wrong key usage: %d\n",
175
result->wrong_key_usage);
176
if(result->file_name != NULL){
177
fprintf(stderr, "File name: %s\n", result->file_name);
179
gpgme_recipient_t recipient;
180
recipient = result->recipients;
432
182
while(recipient != NULL){
433
fprintf_plus(stderr, "Public key algorithm: %s\n",
434
gpgme_pubkey_algo_name
435
(recipient->pubkey_algo));
436
fprintf_plus(stderr, "Key ID: %s\n", recipient->keyid);
437
fprintf_plus(stderr, "Secret key available: %s\n",
438
recipient->status == GPG_ERR_NO_SECKEY
183
fprintf(stderr, "Public key algorithm: %s\n",
184
gpgme_pubkey_algo_name(recipient->pubkey_algo));
185
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
186
fprintf(stderr, "Secret key available: %s\n",
187
recipient->status == GPG_ERR_NO_SECKEY
440
189
recipient = recipient->next;
448
fprintf_plus(stderr, "Decryption of OpenPGP data succeeded\n");
195
/* Delete the GPGME FILE pointer cryptotext data buffer */
196
gpgme_data_release(dh_crypto);
451
198
/* Seek back to the beginning of the GPGME plaintext data buffer */
452
if(gpgme_data_seek(dh_plain, (off_t)0, SEEK_SET) == -1){
453
perror_plus("gpgme_data_seek");
454
plaintext_length = -1;
199
if (gpgme_data_seek(dh_plain, (off_t) 0, SEEK_SET) == -1){
200
perror("pgpme_data_seek");
460
plaintext_capacity = incbuffer(plaintext,
461
(size_t)plaintext_length,
463
if(plaintext_capacity == 0){
464
perror_plus("incbuffer");
465
plaintext_length = -1;
205
if (new_packet_length + BUFFER_SIZE > new_packet_capacity){
206
*new_packet = realloc(*new_packet,
207
(unsigned int)new_packet_capacity
209
if (*new_packet == NULL){
213
new_packet_capacity += BUFFER_SIZE;
469
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
216
ret = gpgme_data_read(dh_plain, *new_packet + new_packet_length,
471
218
/* Print the data, if any */
477
perror_plus("gpgme_data_read");
478
plaintext_length = -1;
481
plaintext_length += ret;
485
fprintf_plus(stderr, "Decrypted password is: ");
486
for(ssize_t i = 0; i < plaintext_length; i++){
487
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
489
fprintf(stderr, "\n");
494
/* Delete the GPGME cryptotext data buffer */
495
gpgme_data_release(dh_crypto);
223
perror("gpgme_data_read");
226
new_packet_length += ret;
229
/* FIXME: check characters before printing to screen so to not print
230
terminal control characters */
232
/* fprintf(stderr, "decrypted password is: "); */
233
/* fwrite(*new_packet, 1, new_packet_length, stderr); */
234
/* fprintf(stderr, "\n"); */
497
237
/* Delete the GPGME plaintext data buffer */
498
238
gpgme_data_release(dh_plain);
499
return plaintext_length;
502
__attribute__((warn_unused_result, const))
503
static const char *safe_string(const char *str){
509
__attribute__((warn_unused_result))
510
static const char *safer_gnutls_strerror(int value){
511
const char *ret = gnutls_strerror(value);
512
return safe_string(ret);
515
/* GnuTLS log function callback */
516
__attribute__((nonnull))
517
static void debuggnutls(__attribute__((unused)) int level,
519
fprintf_plus(stderr, "GnuTLS: %s", string);
522
__attribute__((nonnull(1, 2, 4), warn_unused_result))
523
static int init_gnutls_global(const char *pubkeyfilename,
524
const char *seckeyfilename,
525
const char *dhparamsfilename,
239
return new_packet_length;
242
static const char * safer_gnutls_strerror (int value) {
243
const char *ret = gnutls_strerror (value);
249
void debuggnutls(__attribute__((unused)) int level,
251
fprintf(stderr, "%s", string);
254
int initgnutls(encrypted_session *es){
531
fprintf_plus(stderr, "Initializing GnuTLS\n");
535
/* "Use a log level over 10 to enable all debugging options."
259
fprintf(stderr, "Initializing GnuTLS\n");
262
if ((ret = gnutls_global_init ())
263
!= GNUTLS_E_SUCCESS) {
264
fprintf (stderr, "global_init: %s\n", safer_gnutls_strerror(ret));
538
269
gnutls_global_set_log_level(11);
539
270
gnutls_global_set_log_function(debuggnutls);
542
/* OpenPGP credentials */
543
ret = gnutls_certificate_allocate_credentials(&mc->cred);
544
if(ret != GNUTLS_E_SUCCESS){
545
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
546
safer_gnutls_strerror(ret));
273
/* openpgp credentials */
274
if ((ret = gnutls_certificate_allocate_credentials (&es->cred))
275
!= GNUTLS_E_SUCCESS) {
276
fprintf (stderr, "memory error: %s\n",
277
safer_gnutls_strerror(ret));
551
fprintf_plus(stderr, "Attempting to use OpenPGP public key %s and"
552
" secret key %s as GnuTLS credentials\n",
282
fprintf(stderr, "Attempting to use OpenPGP certificate %s"
283
" and keyfile %s as GnuTLS credentials\n", certfile,
557
287
ret = gnutls_certificate_set_openpgp_key_file
558
(mc->cred, pubkeyfilename, seckeyfilename,
559
GNUTLS_OPENPGP_FMT_BASE64);
560
if(ret != GNUTLS_E_SUCCESS){
562
"Error[%d] while reading the OpenPGP key pair ('%s',"
563
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
564
fprintf_plus(stderr, "The GnuTLS error is: %s\n",
565
safer_gnutls_strerror(ret));
569
/* GnuTLS server initialization */
570
ret = gnutls_dh_params_init(&mc->dh_params);
571
if(ret != GNUTLS_E_SUCCESS){
572
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
573
" initialization: %s\n",
574
safer_gnutls_strerror(ret));
577
/* If a Diffie-Hellman parameters file was given, try to use it */
578
if(dhparamsfilename != NULL){
579
gnutls_datum_t params = { .data = NULL, .size = 0 };
581
int dhpfile = open(dhparamsfilename, O_RDONLY);
584
dhparamsfilename = NULL;
587
size_t params_capacity = 0;
589
params_capacity = incbuffer((char **)¶ms.data,
591
(size_t)params_capacity);
592
if(params_capacity == 0){
593
perror_plus("incbuffer");
596
dhparamsfilename = NULL;
599
ssize_t bytes_read = read(dhpfile,
600
params.data + params.size,
606
/* check bytes_read for failure */
611
dhparamsfilename = NULL;
614
params.size += (unsigned int)bytes_read;
616
if(params.data == NULL){
617
dhparamsfilename = NULL;
619
if(dhparamsfilename == NULL){
622
ret = gnutls_dh_params_import_pkcs3(mc->dh_params, ¶ms,
623
GNUTLS_X509_FMT_PEM);
624
if(ret != GNUTLS_E_SUCCESS){
625
fprintf_plus(stderr, "Failed to parse DH parameters in file"
626
" \"%s\": %s\n", dhparamsfilename,
627
safer_gnutls_strerror(ret));
628
dhparamsfilename = NULL;
633
if(dhparamsfilename == NULL){
634
if(mc->dh_bits == 0){
635
/* Find out the optimal number of DH bits */
636
/* Try to read the private key file */
637
gnutls_datum_t buffer = { .data = NULL, .size = 0 };
639
int secfile = open(seckeyfilename, O_RDONLY);
644
size_t buffer_capacity = 0;
646
buffer_capacity = incbuffer((char **)&buffer.data,
648
(size_t)buffer_capacity);
649
if(buffer_capacity == 0){
650
perror_plus("incbuffer");
655
ssize_t bytes_read = read(secfile,
656
buffer.data + buffer.size,
662
/* check bytes_read for failure */
669
buffer.size += (unsigned int)bytes_read;
673
/* If successful, use buffer to parse private key */
674
gnutls_sec_param_t sec_param = GNUTLS_SEC_PARAM_ULTRA;
675
if(buffer.data != NULL){
677
gnutls_openpgp_privkey_t privkey = NULL;
678
ret = gnutls_openpgp_privkey_init(&privkey);
679
if(ret != GNUTLS_E_SUCCESS){
680
fprintf_plus(stderr, "Error initializing OpenPGP key"
682
safer_gnutls_strerror(ret));
686
ret = gnutls_openpgp_privkey_import
687
(privkey, &buffer, GNUTLS_OPENPGP_FMT_BASE64, "", 0);
688
if(ret != GNUTLS_E_SUCCESS){
689
fprintf_plus(stderr, "Error importing OpenPGP key : %s",
690
safer_gnutls_strerror(ret));
696
/* Use private key to suggest an appropriate
698
sec_param = gnutls_openpgp_privkey_sec_param(privkey);
699
gnutls_openpgp_privkey_deinit(privkey);
701
fprintf_plus(stderr, "This OpenPGP key implies using"
702
" a GnuTLS security parameter \"%s\".\n",
703
safe_string(gnutls_sec_param_get_name
709
if(sec_param == GNUTLS_SEC_PARAM_UNKNOWN){
710
/* Err on the side of caution */
711
sec_param = GNUTLS_SEC_PARAM_ULTRA;
713
fprintf_plus(stderr, "Falling back to security parameter"
715
safe_string(gnutls_sec_param_get_name
720
uret = gnutls_sec_param_to_pk_bits(GNUTLS_PK_DH, sec_param);
724
fprintf_plus(stderr, "A \"%s\" GnuTLS security parameter"
725
" implies %u DH bits; using that.\n",
726
safe_string(gnutls_sec_param_get_name
731
fprintf_plus(stderr, "Failed to get implied number of DH"
732
" bits for security parameter \"%s\"): %s\n",
733
safe_string(gnutls_sec_param_get_name
735
safer_gnutls_strerror(ret));
739
fprintf_plus(stderr, "DH bits explicitly set to %u\n",
742
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
743
if(ret != GNUTLS_E_SUCCESS){
744
fprintf_plus(stderr, "Error in GnuTLS prime generation (%u"
745
" bits): %s\n", mc->dh_bits,
746
safer_gnutls_strerror(ret));
750
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
756
gnutls_certificate_free_credentials(mc->cred);
757
gnutls_dh_params_deinit(mc->dh_params);
761
__attribute__((nonnull, warn_unused_result))
762
static int init_gnutls_session(gnutls_session_t *session,
765
/* GnuTLS session creation */
767
ret = gnutls_init(session, GNUTLS_SERVER);
771
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
772
if(ret != GNUTLS_E_SUCCESS){
774
"Error in GnuTLS session initialization: %s\n",
775
safer_gnutls_strerror(ret));
781
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
783
gnutls_deinit(*session);
786
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
787
if(ret != GNUTLS_E_SUCCESS){
788
fprintf_plus(stderr, "Syntax error at: %s\n", err);
789
fprintf_plus(stderr, "GnuTLS error: %s\n",
790
safer_gnutls_strerror(ret));
791
gnutls_deinit(*session);
797
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
800
gnutls_deinit(*session);
803
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
804
if(ret != GNUTLS_E_SUCCESS){
805
fprintf_plus(stderr, "Error setting GnuTLS credentials: %s\n",
806
safer_gnutls_strerror(ret));
807
gnutls_deinit(*session);
288
(es->cred, certfile, certkey, GNUTLS_OPENPGP_FMT_BASE64);
289
if (ret != GNUTLS_E_SUCCESS) {
291
(stderr, "Error[%d] while reading the OpenPGP key pair ('%s',"
293
ret, certfile, certkey);
294
fprintf(stdout, "The Error is: %s\n",
295
safer_gnutls_strerror(ret));
299
//GnuTLS server initialization
300
if ((ret = gnutls_dh_params_init (&es->dh_params))
301
!= GNUTLS_E_SUCCESS) {
302
fprintf (stderr, "Error in dh parameter initialization: %s\n",
303
safer_gnutls_strerror(ret));
307
if ((ret = gnutls_dh_params_generate2 (es->dh_params, DH_BITS))
308
!= GNUTLS_E_SUCCESS) {
309
fprintf (stderr, "Error in prime generation: %s\n",
310
safer_gnutls_strerror(ret));
314
gnutls_certificate_set_dh_params (es->cred, es->dh_params);
316
// GnuTLS session creation
317
if ((ret = gnutls_init (&es->session, GNUTLS_SERVER))
318
!= GNUTLS_E_SUCCESS){
319
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
320
safer_gnutls_strerror(ret));
323
if ((ret = gnutls_priority_set_direct (es->session, "NORMAL", &err))
324
!= GNUTLS_E_SUCCESS) {
325
fprintf(stderr, "Syntax error at: %s\n", err);
326
fprintf(stderr, "GnuTLS error: %s\n",
327
safer_gnutls_strerror(ret));
331
if ((ret = gnutls_credentials_set
332
(es->session, GNUTLS_CRD_CERTIFICATE, es->cred))
333
!= GNUTLS_E_SUCCESS) {
334
fprintf(stderr, "Error setting a credentials set: %s\n",
335
safer_gnutls_strerror(ret));
811
339
/* ignore client certificate if any. */
812
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
340
gnutls_certificate_server_set_request (es->session,
343
gnutls_dh_set_prime_bits (es->session, DH_BITS);
817
/* Avahi log function callback */
818
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
819
__attribute__((unused)) const char *txt){}
821
/* Set effective uid to 0, return errno */
822
__attribute__((warn_unused_result))
823
int raise_privileges(void){
824
int old_errno = errno;
826
if(seteuid(0) == -1){
833
/* Set effective and real user ID to 0. Return errno. */
834
__attribute__((warn_unused_result))
835
int raise_privileges_permanently(void){
836
int old_errno = errno;
837
int ret = raise_privileges();
849
/* Set effective user ID to unprivileged saved user ID */
850
__attribute__((warn_unused_result))
851
int lower_privileges(void){
852
int old_errno = errno;
854
if(seteuid(uid) == -1){
861
/* Lower privileges permanently */
862
__attribute__((warn_unused_result))
863
int lower_privileges_permanently(void){
864
int old_errno = errno;
866
if(setuid(uid) == -1){
873
/* Helper function to add_local_route() and delete_local_route() */
874
__attribute__((nonnull, warn_unused_result))
875
static bool add_delete_local_route(const bool add,
877
AvahiIfIndex if_index){
879
char helper[] = "mandos-client-iprouteadddel";
880
char add_arg[] = "add";
881
char delete_arg[] = "delete";
882
char debug_flag[] = "--debug";
883
char *pluginhelperdir = getenv("MANDOSPLUGINHELPERDIR");
884
if(pluginhelperdir == NULL){
886
fprintf_plus(stderr, "MANDOSPLUGINHELPERDIR environment"
887
" variable not set; cannot run helper\n");
892
char interface[IF_NAMESIZE];
893
if(if_indextoname((unsigned int)if_index, interface) == NULL){
894
perror_plus("if_indextoname");
898
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
900
perror_plus("open(\"/dev/null\", O_RDONLY)");
906
/* Raise privileges */
907
errno = raise_privileges_permanently();
909
perror_plus("Failed to raise privileges");
910
/* _exit(EX_NOPERM); */
916
perror_plus("setgid");
919
/* Reset supplementary groups */
921
ret = setgroups(0, NULL);
923
perror_plus("setgroups");
927
ret = dup2(devnull, STDIN_FILENO);
929
perror_plus("dup2(devnull, STDIN_FILENO)");
932
ret = close(devnull);
934
perror_plus("close");
937
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
939
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
942
int helperdir_fd = (int)TEMP_FAILURE_RETRY(open(pluginhelperdir,
947
if(helperdir_fd == -1){
949
_exit(EX_UNAVAILABLE);
951
int helper_fd = (int)TEMP_FAILURE_RETRY(openat(helperdir_fd,
954
perror_plus("openat");
956
_exit(EX_UNAVAILABLE);
960
#pragma GCC diagnostic push
961
#pragma GCC diagnostic ignored "-Wcast-qual"
963
if(fexecve(helper_fd, (char *const [])
964
{ helper, add ? add_arg : delete_arg, (char *)address,
965
interface, debug ? debug_flag : NULL, NULL },
968
#pragma GCC diagnostic pop
970
perror_plus("fexecve");
982
pret = waitpid(pid, &status, 0);
983
if(pret == -1 and errno == EINTR and quit_now){
984
int errno_raising = 0;
985
if((errno = raise_privileges()) != 0){
986
errno_raising = errno;
987
perror_plus("Failed to raise privileges in order to"
988
" kill helper program");
990
if(kill(pid, SIGTERM) == -1){
993
if((errno_raising == 0) and (errno = lower_privileges()) != 0){
994
perror_plus("Failed to lower privileges after killing"
999
} while(pret == -1 and errno == EINTR);
1001
perror_plus("waitpid");
1004
if(WIFEXITED(status)){
1005
if(WEXITSTATUS(status) != 0){
1006
fprintf_plus(stderr, "Error: iprouteadddel exited"
1007
" with status %d\n", WEXITSTATUS(status));
1012
if(WIFSIGNALED(status)){
1013
fprintf_plus(stderr, "Error: iprouteadddel died by"
1014
" signal %d\n", WTERMSIG(status));
1017
fprintf_plus(stderr, "Error: iprouteadddel crashed\n");
1021
__attribute__((nonnull, warn_unused_result))
1022
static bool add_local_route(const char *address,
1023
AvahiIfIndex if_index){
1025
fprintf_plus(stderr, "Adding route to %s\n", address);
1027
return add_delete_local_route(true, address, if_index);
1030
__attribute__((nonnull, warn_unused_result))
1031
static bool delete_local_route(const char *address,
348
void empty_log(__attribute__((unused)) AvahiLogLevel level,
349
__attribute__((unused)) const char *txt){}
351
int start_mandos_communication(const char *ip, uint16_t port,
1032
352
AvahiIfIndex if_index){
1034
fprintf_plus(stderr, "Removing route to %s\n", address);
1036
return add_delete_local_route(false, address, if_index);
1039
/* Called when a Mandos server is found */
1040
__attribute__((nonnull, warn_unused_result))
1041
static int start_mandos_communication(const char *ip, in_port_t port,
1042
AvahiIfIndex if_index,
1043
int af, mandos_context *mc){
1044
int ret, tcp_sd = -1;
1046
struct sockaddr_storage to;
354
struct sockaddr_in6 to;
355
encrypted_session es;
1047
356
char *buffer = NULL;
1048
char *decrypted_buffer = NULL;
357
char *decrypted_buffer;
1049
358
size_t buffer_length = 0;
1050
359
size_t buffer_capacity = 0;
1053
gnutls_session_t session;
1054
int pf; /* Protocol family */
1055
bool route_added = false;
1072
fprintf_plus(stderr, "Bad address family: %d\n", af);
1077
/* If the interface is specified and we have a list of interfaces */
1078
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
1079
/* Check if the interface is one of the interfaces we are using */
1082
char *interface = NULL;
1083
while((interface = argz_next(mc->interfaces,
1084
mc->interfaces_size,
1086
if(if_nametoindex(interface) == (unsigned int)if_index){
1093
/* This interface does not match any in the list, so we don't
1094
connect to the server */
1096
char interface[IF_NAMESIZE];
1097
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1098
perror_plus("if_indextoname");
1100
fprintf_plus(stderr, "Skipping server on non-used interface"
1102
if_indextoname((unsigned int)if_index,
1110
ret = init_gnutls_session(&session, mc);
1116
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
1117
PRIuMAX "\n", ip, (uintmax_t)port);
1120
tcp_sd = socket(pf, SOCK_STREAM | SOCK_CLOEXEC, 0);
1123
perror_plus("socket");
1134
struct sockaddr_in6 *to6 = (struct sockaddr_in6 *)&to;
1135
*to6 = (struct sockaddr_in6){ .sin6_family = (sa_family_t)af };
1136
ret = inet_pton(af, ip, &to6->sin6_addr);
1138
struct sockaddr_in *to4 = (struct sockaddr_in *)&to;
1139
*to4 = (struct sockaddr_in){ .sin_family = (sa_family_t)af };
1140
ret = inet_pton(af, ip, &to4->sin_addr);
1144
perror_plus("inet_pton");
360
ssize_t decrypted_buffer_size;
363
char interface[IF_NAMESIZE];
366
fprintf(stderr, "Setting up a tcp connection to %s, port %d\n",
370
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
376
if(if_indextoname((unsigned int)if_index, interface) == NULL){
378
perror("if_indextoname");
384
fprintf(stderr, "Binding to interface %s\n", interface);
387
memset(&to,0,sizeof(to)); /* Spurious warning */
388
to.sin6_family = AF_INET6;
389
ret = inet_pton(AF_INET6, ip, &to.sin6_addr);
1150
fprintf_plus(stderr, "Bad address: %s\n", ip);
1155
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
1156
if(IN6_IS_ADDR_LINKLOCAL
1157
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
1158
if(if_index == AVAHI_IF_UNSPEC){
1159
fprintf_plus(stderr, "An IPv6 link-local address is"
1160
" incomplete without a network interface\n");
1164
/* Set the network interface number as scope */
1165
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
1168
((struct sockaddr_in *)&to)->sin_port = htons(port);
1177
if(af == AF_INET6 and if_index != AVAHI_IF_UNSPEC){
1178
char interface[IF_NAMESIZE];
1179
if(if_indextoname((unsigned int)if_index, interface) == NULL){
1180
perror_plus("if_indextoname");
1182
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
1183
"\n", ip, interface, (uintmax_t)port);
1186
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
1187
ip, (uintmax_t)port);
1189
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
1190
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
1192
ret = getnameinfo((struct sockaddr *)&to,
1193
sizeof(struct sockaddr_in6),
1194
addrstr, sizeof(addrstr), NULL, 0,
1197
ret = getnameinfo((struct sockaddr *)&to,
1198
sizeof(struct sockaddr_in),
1199
addrstr, sizeof(addrstr), NULL, 0,
1202
if(ret == EAI_SYSTEM){
1203
perror_plus("getnameinfo");
1204
} else if(ret != 0) {
1205
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
1206
} else if(strcmp(addrstr, ip) != 0){
1207
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
1218
ret = connect(tcp_sd, (struct sockaddr *)&to,
1219
sizeof(struct sockaddr_in6));
1221
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
1222
sizeof(struct sockaddr_in));
1225
if(((errno == ENETUNREACH) or (errno == EHOSTUNREACH))
1226
and if_index != AVAHI_IF_UNSPEC
1227
and connect_to == NULL
1228
and not route_added and
1229
((af == AF_INET6 and not
1230
IN6_IS_ADDR_LINKLOCAL(&(((struct sockaddr_in6 *)
1232
or (af == AF_INET and
1233
/* Not a a IPv4LL address */
1234
(ntohl(((struct sockaddr_in *)&to)->sin_addr.s_addr)
1235
& 0xFFFF0000L) != 0xA9FE0000L))){
1236
/* Work around Avahi bug - Avahi does not announce link-local
1237
addresses if it has a global address, so local hosts with
1238
*only* a link-local address (e.g. Mandos clients) cannot
1239
connect to a Mandos server announced by Avahi on a server
1240
host with a global address. Work around this by retrying
1241
with an explicit route added with the server's address.
1243
Avahi bug reference:
1244
https://lists.freedesktop.org/archives/avahi/2010-February/001833.html
1245
https://bugs.debian.org/587961
1248
fprintf_plus(stderr, "Mandos server unreachable, trying"
1252
route_added = add_local_route(ip, if_index);
1258
if(errno != ECONNREFUSED or debug){
1260
perror_plus("connect");
1273
const char *out = mandos_protocol_version;
1276
size_t out_size = strlen(out);
1277
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
1278
out_size - written));
1281
perror_plus("write");
1285
written += (size_t)ret;
1286
if(written < out_size){
1289
if(out == mandos_protocol_version){
1304
fprintf_plus(stderr, "Establishing TLS session with %s\n", ip);
1312
/* This casting via intptr_t is to eliminate warning about casting
1313
an int to a pointer type. This is exactly how the GnuTLS Guile
1314
function "set-session-transport-fd!" does it. */
1315
gnutls_transport_set_ptr(session,
1316
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
1324
ret = gnutls_handshake(session);
1329
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
1331
if(ret != GNUTLS_E_SUCCESS){
395
fprintf(stderr, "Bad address: %s\n", ip);
398
to.sin6_port = htons(port); /* Spurious warning */
400
to.sin6_scope_id = (uint32_t)if_index;
403
fprintf(stderr, "Connection to: %s, port %d\n", ip, port);
404
/* char addrstr[INET6_ADDRSTRLEN]; */
405
/* if(inet_ntop(to.sin6_family, &(to.sin6_addr), addrstr, */
406
/* sizeof(addrstr)) == NULL){ */
407
/* perror("inet_ntop"); */
409
/* fprintf(stderr, "Really connecting to: %s, port %d\n", */
410
/* addrstr, ntohs(to.sin6_port)); */
414
ret = connect(tcp_sd, (struct sockaddr *) &to, sizeof(to));
420
ret = initgnutls (&es);
426
gnutls_transport_set_ptr (es.session,
427
(gnutls_transport_ptr_t) tcp_sd);
430
fprintf(stderr, "Establishing TLS session with %s\n", ip);
433
ret = gnutls_handshake (es.session);
435
if (ret != GNUTLS_E_SUCCESS){
1333
fprintf_plus(stderr, "*** GnuTLS Handshake failed ***\n");
437
fprintf(stderr, "\n*** Handshake failed ***\n");
1340
/* Read OpenPGP packet that contains the wanted password */
444
//Retrieve OpenPGP packet that contains the wanted password
1343
fprintf_plus(stderr, "Retrieving OpenPGP encrypted password from"
447
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
1354
buffer_capacity = incbuffer(&buffer, buffer_length,
1356
if(buffer_capacity == 0){
1358
perror_plus("incbuffer");
1368
sret = gnutls_record_recv(session, buffer+buffer_length,
452
if (buffer_length + BUFFER_SIZE > buffer_capacity){
453
buffer = realloc(buffer, buffer_capacity + BUFFER_SIZE);
458
buffer_capacity += BUFFER_SIZE;
461
ret = gnutls_record_recv
462
(es.session, buffer+buffer_length, BUFFER_SIZE);
1375
468
case GNUTLS_E_INTERRUPTED:
1376
469
case GNUTLS_E_AGAIN:
1378
471
case GNUTLS_E_REHANDSHAKE:
1380
ret = gnutls_handshake(session);
1386
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
1388
fprintf_plus(stderr, "*** GnuTLS Re-handshake failed "
472
ret = gnutls_handshake (es.session);
474
fprintf(stderr, "\n*** Handshake failed ***\n");
1396
fprintf_plus(stderr, "Unknown error while reading data from"
1397
" encrypted session with Mandos server\n");
1398
gnutls_bye(session, GNUTLS_SHUT_RDWR);
481
fprintf(stderr, "Unknown error while reading data from"
482
" encrypted session with mandos server\n");
484
gnutls_bye (es.session, GNUTLS_SHUT_RDWR);
1403
buffer_length += (size_t) sret;
1408
fprintf_plus(stderr, "Closing TLS session\n");
1417
ret = gnutls_bye(session, GNUTLS_SHUT_RDWR);
1422
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
1424
if(buffer_length > 0){
1425
ssize_t decrypted_buffer_size;
1426
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
1427
&decrypted_buffer, mc);
1428
if(decrypted_buffer_size >= 0){
488
buffer_length += (size_t) ret;
492
if (buffer_length > 0){
493
decrypted_buffer_size = pgp_packet_decrypt(buffer,
497
if (decrypted_buffer_size >= 0){
1432
498
while(written < (size_t) decrypted_buffer_size){
1438
ret = (int)fwrite(decrypted_buffer + written, 1,
1439
(size_t)decrypted_buffer_size - written,
499
ret = (int)fwrite (decrypted_buffer + written, 1,
500
(size_t)decrypted_buffer_size - written,
1441
502
if(ret == 0 and ferror(stdout)){
1444
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
504
fprintf(stderr, "Error writing encrypted data: %s\n",
1450
510
written += (size_t)ret;
1452
ret = fflush(stdout);
1456
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1466
/* Shutdown procedure */
1471
if(not delete_local_route(ip, if_index)){
1472
fprintf_plus(stderr, "Failed to delete local route to %s on"
1473
" interface %d", ip, if_index);
1477
free(decrypted_buffer);
1480
ret = close(tcp_sd);
1486
perror_plus("close");
1488
gnutls_deinit(session);
512
free(decrypted_buffer);
521
fprintf(stderr, "Closing TLS session\n");
525
gnutls_bye (es.session, GNUTLS_SHUT_RDWR);
528
gnutls_deinit (es.session);
529
gnutls_certificate_free_credentials (es.cred);
530
gnutls_global_deinit ();
1498
static void resolve_callback(AvahiSServiceResolver *r,
1499
AvahiIfIndex interface,
1500
AvahiProtocol proto,
1501
AvahiResolverEvent event,
1505
const char *host_name,
1506
const AvahiAddress *address,
1508
AVAHI_GCC_UNUSED AvahiStringList *txt,
1509
AVAHI_GCC_UNUSED AvahiLookupResultFlags
534
static AvahiSimplePoll *simple_poll = NULL;
535
static AvahiServer *server = NULL;
537
static void resolve_callback(
538
AvahiSServiceResolver *r,
539
AvahiIfIndex interface,
540
AVAHI_GCC_UNUSED AvahiProtocol protocol,
541
AvahiResolverEvent event,
545
const char *host_name,
546
const AvahiAddress *address,
548
AVAHI_GCC_UNUSED AvahiStringList *txt,
549
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
550
AVAHI_GCC_UNUSED void* userdata) {
552
assert(r); /* Spurious warning */
1516
554
/* Called whenever a service has been resolved successfully or
1520
avahi_s_service_resolver_free(r);
1526
559
case AVAHI_RESOLVER_FAILURE:
1527
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1528
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1530
avahi_strerror(avahi_server_errno
1531
(((mandos_context*)mc)->server)));
560
fprintf(stderr, "(Resolver) Failed to resolve service '%s' of"
561
" type '%s' in domain '%s': %s\n", name, type, domain,
562
avahi_strerror(avahi_server_errno(server)));
1534
565
case AVAHI_RESOLVER_FOUND:
1536
567
char ip[AVAHI_ADDRESS_STR_MAX];
1537
568
avahi_address_snprint(ip, sizeof(ip), address);
1539
fprintf_plus(stderr, "Mandos server \"%s\" found on %s (%s, %"
1540
PRIdMAX ") on port %" PRIu16 "\n", name,
1541
host_name, ip, (intmax_t)interface, port);
570
fprintf(stderr, "Mandos server \"%s\" found on %s (%s) on"
571
" port %d\n", name, host_name, ip, port);
1543
int ret = start_mandos_communication(ip, (in_port_t)port,
1545
avahi_proto_to_af(proto),
1548
avahi_simple_poll_quit(simple_poll);
1550
if(not add_server(ip, (in_port_t)port, interface,
1551
avahi_proto_to_af(proto),
1552
&((mandos_context*)mc)->current_server)){
1553
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
573
int ret = start_mandos_communication(ip, port, interface);
1559
579
avahi_s_service_resolver_free(r);
1562
static void browse_callback(AvahiSServiceBrowser *b,
1563
AvahiIfIndex interface,
1564
AvahiProtocol protocol,
1565
AvahiBrowserEvent event,
1569
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1576
/* Called whenever a new services becomes available on the LAN or
1577
is removed from the LAN */
1585
case AVAHI_BROWSER_FAILURE:
1587
fprintf_plus(stderr, "(Avahi browser) %s\n",
1588
avahi_strerror(avahi_server_errno
1589
(((mandos_context*)mc)->server)));
1590
avahi_simple_poll_quit(simple_poll);
1593
case AVAHI_BROWSER_NEW:
1594
/* We ignore the returned Avahi resolver object. In the callback
1595
function we free it. If the Avahi server is terminated before
1596
the callback function is called the Avahi server will free the
1599
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1600
interface, protocol, name, type,
1601
domain, protocol, 0,
1602
resolve_callback, mc) == NULL)
1603
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1605
avahi_strerror(avahi_server_errno
1606
(((mandos_context*)mc)->server)));
1609
case AVAHI_BROWSER_REMOVE:
1612
case AVAHI_BROWSER_ALL_FOR_NOW:
1613
case AVAHI_BROWSER_CACHE_EXHAUSTED:
1615
fprintf_plus(stderr, "No Mandos server found, still"
1622
/* Signal handler that stops main loop after SIGTERM */
1623
static void handle_sigterm(int sig){
1628
signal_received = sig;
1629
int old_errno = errno;
1630
/* set main loop to exit */
1631
if(simple_poll != NULL){
1632
avahi_simple_poll_quit(simple_poll);
1637
__attribute__((nonnull, warn_unused_result))
1638
bool get_flags(const char *ifname, struct ifreq *ifr){
1642
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1645
perror_plus("socket");
1649
strncpy(ifr->ifr_name, ifname, IF_NAMESIZE);
1650
ifr->ifr_name[IF_NAMESIZE-1] = '\0'; /* NUL terminate */
1651
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1655
perror_plus("ioctl SIOCGIFFLAGS");
1663
__attribute__((nonnull, warn_unused_result))
1664
bool good_flags(const char *ifname, const struct ifreq *ifr){
1666
/* Reject the loopback device */
1667
if(ifr->ifr_flags & IFF_LOOPBACK){
1669
fprintf_plus(stderr, "Rejecting loopback interface \"%s\"\n",
1674
/* Accept point-to-point devices only if connect_to is specified */
1675
if(connect_to != NULL and (ifr->ifr_flags & IFF_POINTOPOINT)){
1677
fprintf_plus(stderr, "Accepting point-to-point interface"
1678
" \"%s\"\n", ifname);
1682
/* Otherwise, reject non-broadcast-capable devices */
1683
if(not (ifr->ifr_flags & IFF_BROADCAST)){
1685
fprintf_plus(stderr, "Rejecting non-broadcast interface"
1686
" \"%s\"\n", ifname);
1690
/* Reject non-ARP interfaces (including dummy interfaces) */
1691
if(ifr->ifr_flags & IFF_NOARP){
1693
fprintf_plus(stderr, "Rejecting non-ARP interface \"%s\"\n",
1699
/* Accept this device */
1701
fprintf_plus(stderr, "Interface \"%s\" is good\n", ifname);
1707
* This function determines if a directory entry in /sys/class/net
1708
* corresponds to an acceptable network device.
1709
* (This function is passed to scandir(3) as a filter function.)
1711
__attribute__((nonnull, warn_unused_result))
1712
int good_interface(const struct dirent *if_entry){
1713
if(if_entry->d_name[0] == '.'){
1718
if(not get_flags(if_entry->d_name, &ifr)){
1720
fprintf_plus(stderr, "Failed to get flags for interface "
1721
"\"%s\"\n", if_entry->d_name);
1726
if(not good_flags(if_entry->d_name, &ifr)){
1733
* This function determines if a network interface is up.
1735
__attribute__((nonnull, warn_unused_result))
1736
bool interface_is_up(const char *interface){
1738
if(not get_flags(interface, &ifr)){
1740
fprintf_plus(stderr, "Failed to get flags for interface "
1741
"\"%s\"\n", interface);
1746
return (bool)(ifr.ifr_flags & IFF_UP);
1750
* This function determines if a network interface is running
1752
__attribute__((nonnull, warn_unused_result))
1753
bool interface_is_running(const char *interface){
1755
if(not get_flags(interface, &ifr)){
1757
fprintf_plus(stderr, "Failed to get flags for interface "
1758
"\"%s\"\n", interface);
1763
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1766
__attribute__((nonnull, pure, warn_unused_result))
1767
int notdotentries(const struct dirent *direntry){
1768
/* Skip "." and ".." */
1769
if(direntry->d_name[0] == '.'
1770
and (direntry->d_name[1] == '\0'
1771
or (direntry->d_name[1] == '.'
1772
and direntry->d_name[2] == '\0'))){
1778
/* Is this directory entry a runnable program? */
1779
__attribute__((nonnull, warn_unused_result))
1780
int runnable_hook(const struct dirent *direntry){
1785
if((direntry->d_name)[0] == '\0'){
1790
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1791
"abcdefghijklmnopqrstuvwxyz"
1794
if((direntry->d_name)[sret] != '\0'){
1795
/* Contains non-allowed characters */
1797
fprintf_plus(stderr, "Ignoring hook \"%s\" with bad name\n",
1803
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1806
perror_plus("Could not stat hook");
1810
if(not (S_ISREG(st.st_mode))){
1811
/* Not a regular file */
1813
fprintf_plus(stderr, "Ignoring hook \"%s\" - not a file\n",
1818
if(not (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))){
1819
/* Not executable */
1821
fprintf_plus(stderr, "Ignoring hook \"%s\" - not executable\n",
1827
fprintf_plus(stderr, "Hook \"%s\" is acceptable\n",
1833
__attribute__((nonnull, warn_unused_result))
1834
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
1835
mandos_context *mc){
1837
struct timespec now;
1838
struct timespec waited_time;
1839
intmax_t block_time;
1842
if(mc->current_server == NULL){
1844
fprintf_plus(stderr, "Wait until first server is found."
1847
ret = avahi_simple_poll_iterate(s, -1);
1850
fprintf_plus(stderr, "Check current_server if we should run"
1853
/* the current time */
1854
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1856
perror_plus("clock_gettime");
1859
/* Calculating in ms how long time between now and server
1860
who we visted longest time ago. Now - last seen. */
1861
waited_time.tv_sec = (now.tv_sec
1862
- mc->current_server->last_seen.tv_sec);
1863
waited_time.tv_nsec = (now.tv_nsec
1864
- mc->current_server->last_seen.tv_nsec);
1865
/* total time is 10s/10,000ms.
1866
Converting to s from ms by dividing by 1,000,
1867
and ns to ms by dividing by 1,000,000. */
1868
block_time = ((retry_interval
1869
- ((intmax_t)waited_time.tv_sec * 1000))
1870
- ((intmax_t)waited_time.tv_nsec / 1000000));
1873
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
1877
if(block_time <= 0){
1878
ret = start_mandos_communication(mc->current_server->ip,
1879
mc->current_server->port,
1880
mc->current_server->if_index,
1881
mc->current_server->af, mc);
1883
avahi_simple_poll_quit(s);
1886
ret = clock_gettime(CLOCK_MONOTONIC,
1887
&mc->current_server->last_seen);
1889
perror_plus("clock_gettime");
1892
mc->current_server = mc->current_server->next;
1893
block_time = 0; /* Call avahi to find new Mandos
1894
servers, but don't block */
1897
ret = avahi_simple_poll_iterate(s, (int)block_time);
1900
if(ret > 0 or errno != EINTR){
1901
return (ret != 1) ? ret : 0;
1907
__attribute__((nonnull))
1908
void run_network_hooks(const char *mode, const char *interface,
1910
struct dirent **direntries = NULL;
1911
if(hookdir_fd == -1){
1912
hookdir_fd = open(hookdir, O_RDONLY | O_DIRECTORY | O_PATH
1914
if(hookdir_fd == -1){
1915
if(errno == ENOENT){
1917
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1918
" found\n", hookdir);
1921
perror_plus("open");
582
static void browse_callback(
583
AvahiSServiceBrowser *b,
584
AvahiIfIndex interface,
585
AvahiProtocol protocol,
586
AvahiBrowserEvent event,
590
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
593
AvahiServer *s = userdata;
594
assert(b); /* Spurious warning */
596
/* Called whenever a new services becomes available on the LAN or
597
is removed from the LAN */
601
case AVAHI_BROWSER_FAILURE:
603
fprintf(stderr, "(Browser) %s\n",
604
avahi_strerror(avahi_server_errno(server)));
605
avahi_simple_poll_quit(simple_poll);
1926
int devnull = (int)TEMP_FAILURE_RETRY(open("/dev/null", O_RDONLY));
1928
perror_plus("open(\"/dev/null\", O_RDONLY)");
1931
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1932
runnable_hook, alphasort);
1934
perror_plus("scandir");
1938
struct dirent *direntry;
1940
for(int i = 0; i < numhooks; i++){
1941
direntry = direntries[i];
1943
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1946
pid_t hook_pid = fork();
1949
/* Raise privileges */
1950
errno = raise_privileges_permanently();
1952
perror_plus("Failed to raise privileges");
1959
perror_plus("setgid");
1962
/* Reset supplementary groups */
1964
ret = setgroups(0, NULL);
1966
perror_plus("setgroups");
1969
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1971
perror_plus("setenv");
1974
ret = setenv("DEVICE", interface, 1);
1976
perror_plus("setenv");
1979
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1981
perror_plus("setenv");
1984
ret = setenv("MODE", mode, 1);
1986
perror_plus("setenv");
1990
ret = asprintf(&delaystring, "%f", (double)delay);
1992
perror_plus("asprintf");
1995
ret = setenv("DELAY", delaystring, 1);
1998
perror_plus("setenv");
2002
if(connect_to != NULL){
2003
ret = setenv("CONNECT", connect_to, 1);
2005
perror_plus("setenv");
2009
int hook_fd = (int)TEMP_FAILURE_RETRY(openat(hookdir_fd,
2013
perror_plus("openat");
2014
_exit(EXIT_FAILURE);
2016
if(close(hookdir_fd) == -1){
2017
perror_plus("close");
2018
_exit(EXIT_FAILURE);
2020
ret = dup2(devnull, STDIN_FILENO);
2022
perror_plus("dup2(devnull, STDIN_FILENO)");
2025
ret = close(devnull);
2027
perror_plus("close");
2030
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
2032
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
2035
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
2037
perror_plus("fexecve");
2038
_exit(EXIT_FAILURE);
2042
perror_plus("fork");
2047
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
2048
perror_plus("waitpid");
2052
if(WIFEXITED(status)){
2053
if(WEXITSTATUS(status) != 0){
2054
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
2055
" with status %d\n", direntry->d_name,
2056
WEXITSTATUS(status));
2060
} else if(WIFSIGNALED(status)){
2061
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
2062
" signal %d\n", direntry->d_name,
2067
fprintf_plus(stderr, "Warning: network hook \"%s\""
2068
" crashed\n", direntry->d_name);
2074
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
2080
if(close(hookdir_fd) == -1){
2081
perror_plus("close");
2088
__attribute__((nonnull, warn_unused_result))
2089
int bring_up_interface(const char *const interface,
2091
int old_errno = errno;
2093
struct ifreq network;
2094
unsigned int if_index = if_nametoindex(interface);
2096
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2106
if(not interface_is_up(interface)){
2108
int ioctl_errno = 0;
2109
if(not get_flags(interface, &network)){
2111
fprintf_plus(stderr, "Failed to get flags for interface "
2112
"\"%s\"\n", interface);
2116
network.ifr_flags |= IFF_UP; /* set flag */
2118
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2121
perror_plus("socket");
2129
perror_plus("close");
2136
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
2140
/* Raise privileges */
2141
ret_errno = raise_privileges();
2144
perror_plus("Failed to raise privileges");
2149
bool restore_loglevel = false;
2151
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
2152
messages about the network interface to mess up the prompt */
2153
ret_linux = klogctl(8, NULL, 5);
2154
if(ret_linux == -1){
2155
perror_plus("klogctl");
2157
restore_loglevel = true;
2160
#endif /* __linux__ */
2161
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2162
ioctl_errno = errno;
2164
if(restore_loglevel){
2165
ret_linux = klogctl(7, NULL, 0);
2166
if(ret_linux == -1){
2167
perror_plus("klogctl");
2170
#endif /* __linux__ */
2172
/* If raise_privileges() succeeded above */
2174
/* Lower privileges */
2175
ret_errno = lower_privileges();
2178
perror_plus("Failed to lower privileges");
2182
/* Close the socket */
2185
perror_plus("close");
2188
if(ret_setflags == -1){
2189
errno = ioctl_errno;
2190
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
2195
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
2199
/* Sleep checking until interface is running.
2200
Check every 0.25s, up to total time of delay */
2201
for(int i = 0; i < delay * 4; i++){
2202
if(interface_is_running(interface)){
2205
struct timespec sleeptime = { .tv_nsec = 250000000 };
2206
ret = nanosleep(&sleeptime, NULL);
2207
if(ret == -1 and errno != EINTR){
2208
perror_plus("nanosleep");
2216
__attribute__((nonnull, warn_unused_result))
2217
int take_down_interface(const char *const interface){
2218
int old_errno = errno;
2219
struct ifreq network;
2220
unsigned int if_index = if_nametoindex(interface);
2222
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
2226
if(interface_is_up(interface)){
2228
int ioctl_errno = 0;
2229
if(not get_flags(interface, &network) and debug){
2231
fprintf_plus(stderr, "Failed to get flags for interface "
2232
"\"%s\"\n", interface);
2236
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
2238
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
2241
perror_plus("socket");
2247
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
2251
/* Raise privileges */
2252
ret_errno = raise_privileges();
2255
perror_plus("Failed to raise privileges");
2258
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
2259
ioctl_errno = errno;
2261
/* If raise_privileges() succeeded above */
2263
/* Lower privileges */
2264
ret_errno = lower_privileges();
2267
perror_plus("Failed to lower privileges");
2271
/* Close the socket */
2272
int ret = close(sd);
2274
perror_plus("close");
2277
if(ret_setflags == -1){
2278
errno = ioctl_errno;
2279
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
2284
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
2292
int main(int argc, char *argv[]){
2293
mandos_context mc = { .server = NULL, .dh_bits = 0,
2294
.priority = "SECURE256:!CTYPE-X.509"
2295
":+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256",
2296
.current_server = NULL, .interfaces = NULL,
2297
.interfaces_size = 0 };
2298
AvahiSServiceBrowser *sb = NULL;
608
case AVAHI_BROWSER_NEW:
609
/* We ignore the returned resolver object. In the callback
610
function we free it. If the server is terminated before
611
the callback function is called the server will free
612
the resolver for us. */
614
if (!(avahi_s_service_resolver_new(s, interface, protocol, name,
616
AVAHI_PROTO_INET6, 0,
617
resolve_callback, s)))
618
fprintf(stderr, "Failed to resolve service '%s': %s\n", name,
619
avahi_strerror(avahi_server_errno(s)));
622
case AVAHI_BROWSER_REMOVE:
625
case AVAHI_BROWSER_ALL_FOR_NOW:
626
case AVAHI_BROWSER_CACHE_EXHAUSTED:
631
/* combinds file name and path and returns the malloced new string. som sane checks could/should be added */
632
const char *combinepath(const char *first, const char *second){
2303
int exitcode = EXIT_SUCCESS;
2304
char *interfaces_to_take_down = NULL;
2305
size_t interfaces_to_take_down_size = 0;
2306
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
2307
char old_tempdir[] = "/tmp/mandosXXXXXX";
2308
char *tempdir = NULL;
2309
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
2310
const char *seckey = PATHDIR "/" SECKEY;
2311
const char *pubkey = PATHDIR "/" PUBKEY;
2312
const char *dh_params_file = NULL;
2313
char *interfaces_hooks = NULL;
2315
bool gnutls_initialized = false;
2316
bool gpgme_initialized = false;
2318
double retry_interval = 10; /* 10s between trying a server and
2319
retrying the same server again */
2321
struct sigaction old_sigterm_action = { .sa_handler = SIG_DFL };
2322
struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
2327
/* Lower any group privileges we might have, just to be safe */
2331
perror_plus("setgid");
2334
/* Lower user privileges (temporarily) */
2338
perror_plus("seteuid");
2346
struct argp_option options[] = {
2347
{ .name = "debug", .key = 128,
2348
.doc = "Debug mode", .group = 3 },
2349
{ .name = "connect", .key = 'c',
2350
.arg = "ADDRESS:PORT",
2351
.doc = "Connect directly to a specific Mandos server",
2353
{ .name = "interface", .key = 'i',
2355
.doc = "Network interface that will be used to search for"
2358
{ .name = "seckey", .key = 's',
2360
.doc = "OpenPGP secret key file base name",
2362
{ .name = "pubkey", .key = 'p',
2364
.doc = "OpenPGP public key file base name",
2366
{ .name = "dh-bits", .key = 129,
2368
.doc = "Bit length of the prime number used in the"
2369
" Diffie-Hellman key exchange",
2371
{ .name = "dh-params", .key = 134,
2373
.doc = "PEM-encoded PKCS#3 file with pre-generated parameters"
2374
" for the Diffie-Hellman key exchange",
2376
{ .name = "priority", .key = 130,
2378
.doc = "GnuTLS priority string for the TLS handshake",
2380
{ .name = "delay", .key = 131,
2382
.doc = "Maximum delay to wait for interface startup",
2384
{ .name = "retry", .key = 132,
2386
.doc = "Retry interval used when denied by the Mandos server",
2388
{ .name = "network-hook-dir", .key = 133,
2390
.doc = "Directory where network hooks are located",
2393
* These reproduce what we would get without ARGP_NO_HELP
2395
{ .name = "help", .key = '?',
2396
.doc = "Give this help list", .group = -1 },
2397
{ .name = "usage", .key = -3,
2398
.doc = "Give a short usage message", .group = -1 },
2399
{ .name = "version", .key = 'V',
2400
.doc = "Print program version", .group = -1 },
2404
error_t parse_opt(int key, char *arg,
2405
struct argp_state *state){
2408
case 128: /* --debug */
2411
case 'c': /* --connect */
2414
case 'i': /* --interface */
2415
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
2418
argp_error(state, "%s", strerror(ret_errno));
2421
case 's': /* --seckey */
2424
case 'p': /* --pubkey */
2427
case 129: /* --dh-bits */
2429
tmpmax = strtoimax(arg, &tmp, 10);
2430
if(errno != 0 or tmp == arg or *tmp != '\0'
2431
or tmpmax != (typeof(mc.dh_bits))tmpmax){
2432
argp_error(state, "Bad number of DH bits");
2434
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
2436
case 134: /* --dh-params */
2437
dh_params_file = arg;
2439
case 130: /* --priority */
2442
case 131: /* --delay */
2444
delay = strtof(arg, &tmp);
2445
if(errno != 0 or tmp == arg or *tmp != '\0'){
2446
argp_error(state, "Bad delay");
2448
case 132: /* --retry */
2450
retry_interval = strtod(arg, &tmp);
2451
if(errno != 0 or tmp == arg or *tmp != '\0'
2452
or (retry_interval * 1000) > INT_MAX
2453
or retry_interval < 0){
2454
argp_error(state, "Bad retry interval");
2457
case 133: /* --network-hook-dir */
2461
* These reproduce what we would get without ARGP_NO_HELP
2463
case '?': /* --help */
2464
argp_state_help(state, state->out_stream,
2465
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
2466
& ~(unsigned int)ARGP_HELP_EXIT_OK);
2467
case -3: /* --usage */
2468
argp_state_help(state, state->out_stream,
2469
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
2470
case 'V': /* --version */
2471
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
2472
exit(argp_err_exit_status);
2475
return ARGP_ERR_UNKNOWN;
2480
struct argp argp = { .options = options, .parser = parse_opt,
2482
.doc = "Mandos client -- Get and decrypt"
2483
" passwords from a Mandos server" };
2484
ret_errno = argp_parse(&argp, argc, argv,
2485
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2492
perror_plus("argp_parse");
2493
exitcode = EX_OSERR;
2496
exitcode = EX_USAGE;
2502
/* Work around Debian bug #633582:
2503
<https://bugs.debian.org/633582> */
2505
/* Re-raise privileges */
2506
ret = raise_privileges();
2509
perror_plus("Failed to raise privileges");
2513
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
2514
int seckey_fd = open(seckey, O_RDONLY);
2515
if(seckey_fd == -1){
2516
perror_plus("open");
2518
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
2520
perror_plus("fstat");
2522
if(S_ISREG(st.st_mode)
2523
and st.st_uid == 0 and st.st_gid == 0){
2524
ret = fchown(seckey_fd, uid, gid);
2526
perror_plus("fchown");
2534
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2535
int pubkey_fd = open(pubkey, O_RDONLY);
2536
if(pubkey_fd == -1){
2537
perror_plus("open");
2539
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
2541
perror_plus("fstat");
2543
if(S_ISREG(st.st_mode)
2544
and st.st_uid == 0 and st.st_gid == 0){
2545
ret = fchown(pubkey_fd, uid, gid);
2547
perror_plus("fchown");
2555
if(dh_params_file != NULL
2556
and strcmp(dh_params_file, PATHDIR "/dhparams.pem" ) == 0){
2557
int dhparams_fd = open(dh_params_file, O_RDONLY);
2558
if(dhparams_fd == -1){
2559
perror_plus("open");
2561
ret = (int)TEMP_FAILURE_RETRY(fstat(dhparams_fd, &st));
2563
perror_plus("fstat");
2565
if(S_ISREG(st.st_mode)
2566
and st.st_uid == 0 and st.st_gid == 0){
2567
ret = fchown(dhparams_fd, uid, gid);
2569
perror_plus("fchown");
2577
/* Lower privileges */
2578
ret = lower_privileges();
2581
perror_plus("Failed to lower privileges");
2586
/* Remove invalid interface names (except "none") */
2588
char *interface = NULL;
2589
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2591
if(strcmp(interface, "none") != 0
2592
and if_nametoindex(interface) == 0){
2593
if(interface[0] != '\0'){
2594
fprintf_plus(stderr, "Not using nonexisting interface"
2595
" \"%s\"\n", interface);
2597
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2603
/* Run network hooks */
2605
if(mc.interfaces != NULL){
2606
interfaces_hooks = malloc(mc.interfaces_size);
2607
if(interfaces_hooks == NULL){
2608
perror_plus("malloc");
2611
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2612
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2614
run_network_hooks("start", interfaces_hooks != NULL ?
2615
interfaces_hooks : "", delay);
2619
avahi_set_log_function(empty_log);
2622
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
2623
from the signal handler */
2624
/* Initialize the pseudo-RNG for Avahi */
2625
srand((unsigned int) time(NULL));
2626
simple_poll = avahi_simple_poll_new();
2627
if(simple_poll == NULL){
2628
fprintf_plus(stderr,
2629
"Avahi: Failed to create simple poll object.\n");
2630
exitcode = EX_UNAVAILABLE;
2634
sigemptyset(&sigterm_action.sa_mask);
2635
ret = sigaddset(&sigterm_action.sa_mask, SIGINT);
2637
perror_plus("sigaddset");
2638
exitcode = EX_OSERR;
2641
ret = sigaddset(&sigterm_action.sa_mask, SIGHUP);
2643
perror_plus("sigaddset");
2644
exitcode = EX_OSERR;
2647
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
2649
perror_plus("sigaddset");
2650
exitcode = EX_OSERR;
2653
/* Need to check if the handler is SIG_IGN before handling:
2654
| [[info:libc:Initial Signal Actions]] |
2655
| [[info:libc:Basic Signal Handling]] |
2657
ret = sigaction(SIGINT, NULL, &old_sigterm_action);
2659
perror_plus("sigaction");
2662
if(old_sigterm_action.sa_handler != SIG_IGN){
2663
ret = sigaction(SIGINT, &sigterm_action, NULL);
2665
perror_plus("sigaction");
2666
exitcode = EX_OSERR;
2670
ret = sigaction(SIGHUP, NULL, &old_sigterm_action);
2672
perror_plus("sigaction");
2675
if(old_sigterm_action.sa_handler != SIG_IGN){
2676
ret = sigaction(SIGHUP, &sigterm_action, NULL);
2678
perror_plus("sigaction");
2679
exitcode = EX_OSERR;
2683
ret = sigaction(SIGTERM, NULL, &old_sigterm_action);
2685
perror_plus("sigaction");
2688
if(old_sigterm_action.sa_handler != SIG_IGN){
2689
ret = sigaction(SIGTERM, &sigterm_action, NULL);
2691
perror_plus("sigaction");
2692
exitcode = EX_OSERR;
2697
/* If no interfaces were specified, make a list */
2698
if(mc.interfaces == NULL){
2699
struct dirent **direntries = NULL;
2700
/* Look for any good interfaces */
2701
ret = scandir(sys_class_net, &direntries, good_interface,
2704
/* Add all found interfaces to interfaces list */
2705
for(int i = 0; i < ret; ++i){
2706
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2707
direntries[i]->d_name);
2710
perror_plus("argz_add");
2711
free(direntries[i]);
2715
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2716
direntries[i]->d_name);
2718
free(direntries[i]);
2725
fprintf_plus(stderr, "Could not find a network interface\n");
2726
exitcode = EXIT_FAILURE;
2731
/* Bring up interfaces which are down, and remove any "none"s */
2733
char *interface = NULL;
2734
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2736
/* If interface name is "none", stop bringing up interfaces.
2737
Also remove all instances of "none" from the list */
2738
if(strcmp(interface, "none") == 0){
2739
argz_delete(&mc.interfaces, &mc.interfaces_size,
2742
while((interface = argz_next(mc.interfaces,
2743
mc.interfaces_size, interface))){
2744
if(strcmp(interface, "none") == 0){
2745
argz_delete(&mc.interfaces, &mc.interfaces_size,
2752
bool interface_was_up = interface_is_up(interface);
2753
errno = bring_up_interface(interface, delay);
2754
if(not interface_was_up){
2756
fprintf_plus(stderr, "Failed to bring up interface \"%s\":"
2757
" %s\n", interface, strerror(errno));
2759
errno = argz_add(&interfaces_to_take_down,
2760
&interfaces_to_take_down_size,
2763
perror_plus("argz_add");
2768
if(debug and (interfaces_to_take_down == NULL)){
2769
fprintf_plus(stderr, "No interfaces were brought up\n");
2773
/* If we only got one interface, explicitly use only that one */
2774
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2776
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2779
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2786
ret = init_gnutls_global(pubkey, seckey, dh_params_file, &mc);
2788
fprintf_plus(stderr, "init_gnutls_global failed\n");
2789
exitcode = EX_UNAVAILABLE;
2792
gnutls_initialized = true;
2799
/* Try /run/tmp before /tmp */
2800
tempdir = mkdtemp(run_tempdir);
2801
if(tempdir == NULL and errno == ENOENT){
2803
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2804
run_tempdir, old_tempdir);
2806
tempdir = mkdtemp(old_tempdir);
2808
if(tempdir == NULL){
2809
perror_plus("mkdtemp");
2817
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
2818
fprintf_plus(stderr, "init_gpgme failed\n");
2819
exitcode = EX_UNAVAILABLE;
2822
gpgme_initialized = true;
2829
if(connect_to != NULL){
2830
/* Connect directly, do not use Zeroconf */
2831
/* (Mainly meant for debugging) */
2832
char *address = strrchr(connect_to, ':');
2834
if(address == NULL){
2835
fprintf_plus(stderr, "No colon in address\n");
2836
exitcode = EX_USAGE;
2846
tmpmax = strtoimax(address+1, &tmp, 10);
2847
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2848
or tmpmax != (in_port_t)tmpmax){
2849
fprintf_plus(stderr, "Bad port number\n");
2850
exitcode = EX_USAGE;
2858
port = (in_port_t)tmpmax;
2860
/* Colon in address indicates IPv6 */
2862
if(strchr(connect_to, ':') != NULL){
2864
/* Accept [] around IPv6 address - see RFC 5952 */
2865
if(connect_to[0] == '[' and address[-1] == ']')
2873
address = connect_to;
2879
while(not quit_now){
2880
ret = start_mandos_communication(address, port, if_index, af,
2882
if(quit_now or ret == 0){
2886
fprintf_plus(stderr, "Retrying in %d seconds\n",
2887
(int)retry_interval);
2889
sleep((unsigned int)retry_interval);
2893
exitcode = EXIT_SUCCESS;
634
tmp = malloc(strlen(first) + strlen(second) + 2);
640
if (first[0] != '\0' and first[strlen(first) - 1] != '/'){
648
int main(AVAHI_GCC_UNUSED int argc, AVAHI_GCC_UNUSED char*argv[]) {
2904
649
AvahiServerConfig config;
2905
/* Do not publish any local Zeroconf records */
650
AvahiSServiceBrowser *sb = NULL;
653
int returncode = EXIT_SUCCESS;
654
const char *interface = NULL;
655
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
656
char *connect_to = NULL;
659
static struct option long_options[] = {
660
{"debug", no_argument, (int *)&debug, 1},
661
{"connect", required_argument, 0, 'C'},
662
{"interface", required_argument, 0, 'i'},
663
{"certdir", required_argument, 0, 'd'},
664
{"certkey", required_argument, 0, 'c'},
665
{"certfile", required_argument, 0, 'k'},
668
int option_index = 0;
669
ret = getopt_long (argc, argv, "i:", long_options,
699
certfile = combinepath(certdir, certfile);
700
if (certfile == NULL){
704
if(interface != NULL){
705
if_index = (AvahiIfIndex) if_nametoindex(interface);
707
fprintf(stderr, "No such interface: \"%s\"\n", interface);
712
if(connect_to != NULL){
713
/* Connect directly, do not use Zeroconf */
714
/* (Mainly meant for debugging) */
715
char *address = strrchr(connect_to, ':');
717
fprintf(stderr, "No colon in address\n");
721
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
723
perror("Bad port number");
727
address = connect_to;
728
ret = start_mandos_communication(address, port, if_index);
736
certkey = combinepath(certdir, certkey);
737
if (certkey == NULL){
742
avahi_set_log_function(empty_log);
745
/* Initialize the psuedo-RNG */
746
srand((unsigned int) time(NULL));
748
/* Allocate main loop object */
749
if (!(simple_poll = avahi_simple_poll_new())) {
750
fprintf(stderr, "Failed to create simple poll object.\n");
755
/* Do not publish any local records */
2906
756
avahi_server_config_init(&config);
2907
757
config.publish_hinfo = 0;
2908
758
config.publish_addresses = 0;
2909
759
config.publish_workstation = 0;
2910
760
config.publish_domain = 0;
2912
762
/* Allocate a new server */
2913
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2914
&config, NULL, NULL, &ret);
2916
/* Free the Avahi configuration data */
763
server = avahi_server_new(avahi_simple_poll_get(simple_poll),
764
&config, NULL, NULL, &error);
766
/* Free the configuration data */
2917
767
avahi_server_config_free(&config);
2920
/* Check if creating the Avahi server object succeeded */
2921
if(mc.server == NULL){
2922
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
2923
avahi_strerror(ret));
2924
exitcode = EX_UNAVAILABLE;
2932
/* Create the Avahi service browser */
2933
sb = avahi_s_service_browser_new(mc.server, if_index,
2934
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2935
NULL, 0, browse_callback,
2938
fprintf_plus(stderr, "Failed to create service browser: %s\n",
2939
avahi_strerror(avahi_server_errno(mc.server)));
2940
exitcode = EX_UNAVAILABLE;
2948
/* Run the main loop */
2951
fprintf_plus(stderr, "Starting Avahi loop search\n");
2954
ret = avahi_loop_with_timeout(simple_poll,
2955
(int)(retry_interval * 1000), &mc);
2957
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
2958
(ret == 0) ? "successfully" : "with error");
2964
if(signal_received){
2965
fprintf_plus(stderr, "%s exiting due to signal %d: %s\n",
2966
argv[0], signal_received,
2967
strsignal(signal_received));
2969
fprintf_plus(stderr, "%s exiting\n", argv[0]);
2973
/* Cleanup things */
2974
free(mc.interfaces);
2977
avahi_s_service_browser_free(sb);
2979
if(mc.server != NULL)
2980
avahi_server_free(mc.server);
2982
if(simple_poll != NULL)
2983
avahi_simple_poll_free(simple_poll);
2985
if(gnutls_initialized){
2986
gnutls_certificate_free_credentials(mc.cred);
2987
gnutls_dh_params_deinit(mc.dh_params);
2990
if(gpgme_initialized){
2991
gpgme_release(mc.ctx);
2994
/* Cleans up the circular linked list of Mandos servers the client
2996
if(mc.current_server != NULL){
2997
mc.current_server->prev->next = NULL;
2998
while(mc.current_server != NULL){
2999
server *next = mc.current_server->next;
3001
#pragma GCC diagnostic push
3002
#pragma GCC diagnostic ignored "-Wcast-qual"
3004
free((char *)(mc.current_server->ip));
3006
#pragma GCC diagnostic pop
3008
free(mc.current_server);
3009
mc.current_server = next;
3013
/* Re-raise privileges */
3015
ret = raise_privileges();
3018
perror_plus("Failed to raise privileges");
3021
/* Run network hooks */
3022
run_network_hooks("stop", interfaces_hooks != NULL ?
3023
interfaces_hooks : "", delay);
3025
/* Take down the network interfaces which were brought up */
3027
char *interface = NULL;
3028
while((interface = argz_next(interfaces_to_take_down,
3029
interfaces_to_take_down_size,
3031
ret = take_down_interface(interface);
3034
perror_plus("Failed to take down interface");
3037
if(debug and (interfaces_to_take_down == NULL)){
3038
fprintf_plus(stderr, "No interfaces needed to be taken"
3044
ret = lower_privileges_permanently();
3047
perror_plus("Failed to lower privileges permanently");
3051
free(interfaces_to_take_down);
3052
free(interfaces_hooks);
3054
void clean_dir_at(int base, const char * const dirname,
3056
struct dirent **direntries = NULL;
3058
int dir_fd = (int)TEMP_FAILURE_RETRY(openat(base, dirname,
3064
perror_plus("open");
3067
int numentries = scandirat(dir_fd, ".", &direntries,
3068
notdotentries, alphasort);
3069
if(numentries >= 0){
3070
for(int i = 0; i < numentries; i++){
3072
fprintf_plus(stderr, "Unlinking \"%s/%s\"\n",
3073
dirname, direntries[i]->d_name);
3075
dret = unlinkat(dir_fd, direntries[i]->d_name, 0);
3077
if(errno == EISDIR){
3078
dret = unlinkat(dir_fd, direntries[i]->d_name,
3081
if((dret == -1) and (errno == ENOTEMPTY)
3082
and (strcmp(direntries[i]->d_name, "private-keys-v1.d")
3083
== 0) and (level == 0)){
3084
/* Recurse only in this special case */
3085
clean_dir_at(dir_fd, direntries[i]->d_name, level+1);
3088
if((dret == -1) and (errno != ENOENT)){
3089
fprintf_plus(stderr, "unlink(\"%s/%s\"): %s\n", dirname,
3090
direntries[i]->d_name, strerror(errno));
3093
free(direntries[i]);
3096
/* need to clean even if 0 because man page doesn't specify */
3098
dret = unlinkat(base, dirname, AT_REMOVEDIR);
3099
if(dret == -1 and errno != ENOENT){
3100
perror_plus("rmdir");
3103
perror_plus("scandirat");
3108
/* Removes the GPGME temp directory and all files inside */
3109
if(tempdir != NULL){
3110
clean_dir_at(-1, tempdir, 0);
3114
sigemptyset(&old_sigterm_action.sa_mask);
3115
old_sigterm_action.sa_handler = SIG_DFL;
3116
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
3117
&old_sigterm_action,
3120
perror_plus("sigaction");
3123
ret = raise(signal_received);
3124
} while(ret != 0 and errno == EINTR);
3126
perror_plus("raise");
3129
TEMP_FAILURE_RETRY(pause());
769
/* Check if creating the server object succeeded */
771
fprintf(stderr, "Failed to create server: %s\n",
772
avahi_strerror(error));
773
returncode = EXIT_FAILURE;
777
/* Create the service browser */
778
sb = avahi_s_service_browser_new(server, if_index,
780
"_mandos._tcp", NULL, 0,
781
browse_callback, server);
783
fprintf(stderr, "Failed to create service browser: %s\n",
784
avahi_strerror(avahi_server_errno(server)));
785
returncode = EXIT_FAILURE;
789
/* Run the main loop */
792
fprintf(stderr, "Starting avahi loop search\n");
795
avahi_simple_poll_loop(simple_poll);
800
fprintf(stderr, "%s exiting\n", argv[0]);
805
avahi_s_service_browser_free(sb);
808
avahi_server_free(server);
811
avahi_simple_poll_free(simple_poll);