32
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
#ifndef _LARGEFILE_SOURCE
33
34
#define _LARGEFILE_SOURCE
36
#ifndef _FILE_OFFSET_BITS
34
37
#define _FILE_OFFSET_BITS 64
36
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
38
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
39
stdout, ferror(), sscanf(),
43
stdout, ferror(), remove() */
41
44
#include <stdint.h> /* uint16_t, uint32_t */
42
45
#include <stddef.h> /* NULL, size_t, ssize_t */
43
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
45
#include <stdbool.h> /* bool, true */
48
#include <stdbool.h> /* bool, false, true */
46
49
#include <string.h> /* memset(), strcmp(), strlen(),
47
50
strerror(), asprintf(), strcpy() */
48
#include <sys/ioctl.h> /* ioctl */
51
#include <sys/ioctl.h> /* ioctl */
49
52
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
50
53
sockaddr_in6, PF_INET6,
51
SOCK_STREAM, INET6_ADDRSTRLEN,
52
uid_t, gid_t, open(), opendir(),
54
SOCK_STREAM, uid_t, gid_t, open(),
54
56
#include <sys/stat.h> /* open() */
55
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
56
struct in6_addr, inet_pton(),
58
inet_pton(), connect() */
58
59
#include <fcntl.h> /* open() */
59
60
#include <dirent.h> /* opendir(), struct dirent, readdir()
61
#include <inttypes.h> /* PRIu16, intmax_t, SCNdMAX */
62
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
62
64
#include <assert.h> /* assert() */
63
65
#include <errno.h> /* perror(), errno */
64
66
#include <time.h> /* nanosleep(), time() */
65
67
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
66
68
SIOCSIFFLAGS, if_indextoname(),
67
69
if_nametoindex(), IF_NAMESIZE */
68
#include <netinet/in.h>
70
#include <netinet/in.h> /* IN6_IS_ADDR_LINKLOCAL,
71
INET_ADDRSTRLEN, INET6_ADDRSTRLEN
69
73
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
70
74
getuid(), getgid(), setuid(),
72
76
#include <arpa/inet.h> /* inet_pton(), htons */
73
#include <iso646.h> /* not, and, or */
77
#include <iso646.h> /* not, or, and */
74
78
#include <argp.h> /* struct argp_option, error_t, struct
75
79
argp_state, struct argp,
76
80
argp_parse(), ARGP_KEY_ARG,
77
81
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
82
#include <signal.h> /* sigemptyset(), sigaddset(),
83
sigaction(), SIGTERM, sig_atomic_t,
79
87
#include <sys/klog.h> /* klogctl() */
88
#endif /* __linux__ */
83
91
/* All Avahi types, constants and functions
130
138
} mandos_context;
140
/* global context so signal handler can reach it*/
141
mandos_context mc = { .simple_poll = NULL, .server = NULL,
142
.dh_bits = 1024, .priority = "SECURE256"
143
":!CTYPE-X.509:+CTYPE-OPENPGP" };
133
* Make room in "buffer" for at least BUFFER_SIZE additional bytes.
134
* "buffer_capacity" is how much is currently allocated,
146
* Make additional room in "buffer" for at least BUFFER_SIZE more
147
* bytes. "buffer_capacity" is how much is currently allocated,
135
148
* "buffer_length" is how much is already used.
137
size_t adjustbuffer(char **buffer, size_t buffer_length,
150
size_t incbuffer(char **buffer, size_t buffer_length,
138
151
size_t buffer_capacity){
139
152
if(buffer_length + BUFFER_SIZE > buffer_capacity){
140
153
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
298
310
gpgme_recipient_t recipient;
299
311
recipient = result->recipients;
301
while(recipient != NULL){
302
fprintf(stderr, "Public key algorithm: %s\n",
303
gpgme_pubkey_algo_name(recipient->pubkey_algo));
304
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
305
fprintf(stderr, "Secret key available: %s\n",
306
recipient->status == GPG_ERR_NO_SECKEY
308
recipient = recipient->next;
312
while(recipient != NULL){
313
fprintf(stderr, "Public key algorithm: %s\n",
314
gpgme_pubkey_algo_name(recipient->pubkey_algo));
315
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
316
fprintf(stderr, "Secret key available: %s\n",
317
recipient->status == GPG_ERR_NO_SECKEY
319
recipient = recipient->next;
439
448
/* GnuTLS server initialization */
440
ret = gnutls_dh_params_init(&mc->dh_params);
449
ret = gnutls_dh_params_init(&mc.dh_params);
441
450
if(ret != GNUTLS_E_SUCCESS){
442
451
fprintf(stderr, "Error in GnuTLS DH parameter initialization:"
443
452
" %s\n", safer_gnutls_strerror(ret));
446
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
455
ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
447
456
if(ret != GNUTLS_E_SUCCESS){
448
457
fprintf(stderr, "Error in GnuTLS prime generation: %s\n",
449
458
safer_gnutls_strerror(ret));
453
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
462
gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
459
gnutls_certificate_free_credentials(mc->cred);
468
gnutls_certificate_free_credentials(mc.cred);
460
469
gnutls_global_deinit();
461
gnutls_dh_params_deinit(mc->dh_params);
470
gnutls_dh_params_deinit(mc.dh_params);
465
static int init_gnutls_session(mandos_context *mc,
466
gnutls_session_t *session){
474
static int init_gnutls_session(gnutls_session_t *session){
468
476
/* GnuTLS session creation */
469
477
ret = gnutls_init(session, GNUTLS_SERVER);
520
534
ssize_t decrypted_buffer_size;
523
char interface[IF_NAMESIZE];
524
537
gnutls_session_t session;
526
ret = init_gnutls_session(mc, &session);
538
int pf; /* Protocol family */
548
fprintf(stderr, "Bad address family: %d\n", af);
552
ret = init_gnutls_session(&session);
532
fprintf(stderr, "Setting up a tcp connection to %s, port %" PRIu16
558
fprintf(stderr, "Setting up a TCP connection to %s, port %" PRIu16
536
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
562
tcp_sd = socket(pf, SOCK_STREAM, 0);
538
564
perror("socket");
543
if(if_indextoname((unsigned int)if_index, interface) == NULL){
544
perror("if_indextoname");
547
fprintf(stderr, "Binding to interface %s\n", interface);
550
568
memset(&to, 0, sizeof(to));
551
to.in6.sin6_family = AF_INET6;
552
/* It would be nice to have a way to detect if we were passed an
553
IPv4 address here. Now we assume an IPv6 address. */
554
ret = inet_pton(AF_INET6, ip, &to.in6.sin6_addr);
570
to.in6.sin6_family = (sa_family_t)af;
571
ret = inet_pton(af, ip, &to.in6.sin6_addr);
573
to.in.sin_family = (sa_family_t)af;
574
ret = inet_pton(af, ip, &to.in.sin_addr);
556
577
perror("inet_pton");
560
581
fprintf(stderr, "Bad address: %s\n", ip);
563
to.in6.sin6_port = htons(port); /* Spurious warnings from
585
to.in6.sin6_port = htons(port); /* Spurious warnings from
587
-Wunreachable-code */
589
if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
590
(&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
592
if(if_index == AVAHI_IF_UNSPEC){
593
fprintf(stderr, "An IPv6 link-local address is incomplete"
594
" without a network interface\n");
597
/* Set the network interface number as scope */
598
to.in6.sin6_scope_id = (uint32_t)if_index;
601
to.in.sin_port = htons(port); /* Spurious warnings from
565
603
-Wunreachable-code */
567
to.in6.sin6_scope_id = (uint32_t)if_index;
570
fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
572
char addrstr[INET6_ADDRSTRLEN] = "";
573
if(inet_ntop(to.in6.sin6_family, &(to.in6.sin6_addr), addrstr,
574
sizeof(addrstr)) == NULL){
607
if(af == AF_INET6 and if_index != AVAHI_IF_UNSPEC){
608
char interface[IF_NAMESIZE];
609
if(if_indextoname((unsigned int)if_index, interface) == NULL){
610
perror("if_indextoname");
612
fprintf(stderr, "Connection to: %s%%%s, port %" PRIu16 "\n",
613
ip, interface, port);
616
fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
619
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
620
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
623
pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
626
pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
575
630
perror("inet_ntop");
577
632
if(strcmp(addrstr, ip) != 0){
737
796
AVAHI_GCC_UNUSED AvahiStringList *txt,
738
797
AVAHI_GCC_UNUSED AvahiLookupResultFlags
741
mandos_context *mc = userdata;
799
AVAHI_GCC_UNUSED void* userdata){
744
802
/* Called whenever a service has been resolved successfully or
749
811
case AVAHI_RESOLVER_FAILURE:
750
812
fprintf(stderr, "(Avahi Resolver) Failed to resolve service '%s'"
751
813
" of type '%s' in domain '%s': %s\n", name, type, domain,
752
avahi_strerror(avahi_server_errno(mc->server)));
814
avahi_strerror(avahi_server_errno(mc.server)));
755
817
case AVAHI_RESOLVER_FOUND:
801
863
the callback function is called the Avahi server will free the
802
864
resolver for us. */
804
if(!(avahi_s_service_resolver_new(mc->server, interface,
805
protocol, name, type, domain,
806
AVAHI_PROTO_INET6, 0,
807
resolve_callback, mc)))
866
if(avahi_s_service_resolver_new(mc.server, interface, protocol,
867
name, type, domain, protocol, 0,
868
resolve_callback, NULL) == NULL)
808
869
fprintf(stderr, "Avahi: Failed to resolve service '%s': %s\n",
809
name, avahi_strerror(avahi_server_errno(mc->server)));
870
name, avahi_strerror(avahi_server_errno(mc.server)));
812
873
case AVAHI_BROWSER_REMOVE:
1025
avahi_set_log_function(empty_log);
1028
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1029
from the signal handler */
1030
/* Initialize the pseudo-RNG for Avahi */
1031
srand((unsigned int) time(NULL));
1032
mc.simple_poll = avahi_simple_poll_new();
1033
if(mc.simple_poll == NULL){
1034
fprintf(stderr, "Avahi: Failed to create simple poll object.\n");
1035
exitcode = EXIT_FAILURE;
1039
sigemptyset(&sigterm_action.sa_mask);
1040
ret = sigaddset(&sigterm_action.sa_mask, SIGINT);
1042
perror("sigaddset");
1043
exitcode = EXIT_FAILURE;
1046
ret = sigaddset(&sigterm_action.sa_mask, SIGHUP);
1048
perror("sigaddset");
1049
exitcode = EXIT_FAILURE;
1052
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
1054
perror("sigaddset");
1055
exitcode = EXIT_FAILURE;
1058
ret = sigaction(SIGINT, &sigterm_action, &old_sigterm_action);
1060
perror("sigaction");
1061
exitcode = EXIT_FAILURE;
1064
ret = sigaction(SIGHUP, &sigterm_action, NULL);
1066
perror("sigaction");
1067
exitcode = EXIT_FAILURE;
1070
ret = sigaction(SIGTERM, &sigterm_action, NULL);
1072
perror("sigaction");
1073
exitcode = EXIT_FAILURE;
946
1077
/* If the interface is down, bring it up */
1078
if(interface[0] != '\0'){
1079
if_index = (AvahiIfIndex) if_nametoindex(interface);
1081
fprintf(stderr, "No such interface: \"%s\"\n", interface);
1082
exitcode = EXIT_FAILURE;
948
1090
#ifdef __linux__
949
1091
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
950
1092
messages to mess up the prompt */
951
1093
ret = klogctl(8, NULL, 5);
1094
bool restore_loglevel = true;
1096
restore_loglevel = false;
953
1097
perror("klogctl");
1099
#endif /* __linux__ */
957
1101
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
959
1103
perror("socket");
960
1104
exitcode = EXIT_FAILURE;
961
1105
#ifdef __linux__
962
ret = klogctl(7, NULL, 0);
1106
if(restore_loglevel){
1107
ret = klogctl(7, NULL, 0);
1112
#endif /* __linux__ */
969
1115
strcpy(network.ifr_name, interface);
972
1118
perror("ioctl SIOCGIFFLAGS");
973
1119
#ifdef __linux__
974
ret = klogctl(7, NULL, 0);
1120
if(restore_loglevel){
1121
ret = klogctl(7, NULL, 0);
1126
#endif /* __linux__ */
979
1127
exitcode = EXIT_FAILURE;
982
1130
if((network.ifr_flags & IFF_UP) == 0){
983
1131
network.ifr_flags |= IFF_UP;
1132
take_down_interface = true;
984
1133
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1135
take_down_interface = false;
986
1136
perror("ioctl SIOCSIFFLAGS");
987
1137
exitcode = EXIT_FAILURE;
988
1138
#ifdef __linux__
989
ret = klogctl(7, NULL, 0);
1139
if(restore_loglevel){
1140
ret = klogctl(7, NULL, 0);
1145
#endif /* __linux__ */
1073
1245
exitcode = EXIT_FAILURE;
1077
ret = sscanf(address+1, "%" SCNdMAX "%n", &tmpmax, &numchars);
1078
if(ret < 1 or tmpmax != (uint16_t)tmpmax
1079
or address[numchars+1] != '\0'){
1255
tmpmax = strtoimax(address+1, &tmp, 10);
1256
if(errno != 0 or tmp == address+1 or *tmp != '\0'
1257
or tmpmax != (uint16_t)tmpmax){
1080
1258
fprintf(stderr, "Bad port number\n");
1081
1259
exitcode = EXIT_FAILURE;
1084
1267
port = (uint16_t)tmpmax;
1085
1268
*address = '\0';
1086
1269
address = connect_to;
1087
ret = start_mandos_communication(address, port, if_index, &mc);
1270
/* Colon in address indicates IPv6 */
1272
if(strchr(address, ':') != NULL){
1282
ret = start_mandos_communication(address, port, if_index, af);
1089
1284
exitcode = EXIT_FAILURE;
1137
1325
/* Create the Avahi service browser */
1138
1326
sb = avahi_s_service_browser_new(mc.server, if_index,
1139
AVAHI_PROTO_INET6, "_mandos._tcp",
1140
NULL, 0, browse_callback, &mc);
1327
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
1328
NULL, 0, browse_callback, NULL);
1141
1329
if(sb == NULL){
1142
1330
fprintf(stderr, "Failed to create service browser: %s\n",
1143
1331
avahi_strerror(avahi_server_errno(mc.server)));