To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandosclient.c
- browse files at revision 38
- compare with another revision
- download diff
- download tarball
- view history from revision 38
- Committer: Teddy Hogeborn
- Date: 2008-08-03 01:09:36 UTC
- mfrom: (24.1.9 mandos)
- Revision ID: teddy@fukt.bsnet.se-20080803010936-ujme8tgxceszfbi1
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
Take an additional non-option argument and
parse it as a plus-separated and -prefixed
list of additional options.
* plugins.d/mandosclient.c (DH_BITS): Replaced with
"mandos_context.dh_bits". All
users changed.
(certdir): Renamed to "keydir". All users changed.
(certfile): Renamed to "pubkeyfile". All users changed.
(certkey): Renamed to "seckeyfile". All users changed.
(encrypted_session): Replaced with "mandos_context". All users
changed.
(initgnutls): Take additional "session" and "dh_params" arguments.
All callers changed.
(start_mandos_communication): Take additional "mc" argument. All
callers changed. Print target IPv6
address if different than supplied
string.
(simple_poll) Replaced with "mandos_context.simple_poll". All users
changed.
(server): Replaced with "mandos_context.server". All users changed.
(main): Default interface to "eth0". Rename "--certdir" to
"--keydir", "--certkey" to "--seckey", and "--certfile" to
"--pubkey". New options "--dh-bits" and "--priority". If
the interface is not up, bring it up.
Take an additional non-option argument and
parse it as a plus-separated and -prefixed
list of additional options.
* plugins.d/mandosclient.c (DH_BITS): Replaced with
"mandos_context.dh_bits". All
users changed.
(certdir): Renamed to "keydir". All users changed.
(certfile): Renamed to "pubkeyfile". All users changed.
(certkey): Renamed to "seckeyfile". All users changed.
(encrypted_session): Replaced with "mandos_context". All users
changed.
(initgnutls): Take additional "session" and "dh_params" arguments.
All callers changed.
(start_mandos_communication): Take additional "mc" argument. All
callers changed. Print target IPv6
address if different than supplied
string.
(simple_poll) Replaced with "mandos_context.simple_poll". All users
changed.
(server): Replaced with "mandos_context.server". All users changed.
(main): Default interface to "eth0". Rename "--certdir" to
"--keydir", "--certkey" to "--seckey", and "--certfile" to
"--pubkey". New options "--dh-bits" and "--priority". If
the interface is not up, bring it up.
- files added:
- ca.pem
- files removed:
- .bzrignore
- files renamed:
- plugin-runner.c => plugbasedclient.c
- plugins.d/password-request.c => plugins.d/mandosclient.c
- plugins.d/password-prompt.c => plugins.d/passprompt.c
- mandos.conf => server.conf
- mandos => server.py
- files modified:
- Makefile
added
removed
plugins.d/mandosclient.c
32
32
#define _LARGEFILE_SOURCE
33
33
#define _FILE_OFFSET_BITS 64
34
34
35
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
36
37
#include <stdio.h> /* fprintf(), stderr, fwrite(),
38
stdout, ferror() */
39
#include <stdint.h> /* uint16_t, uint32_t */
40
#include <stddef.h> /* NULL, size_t, ssize_t */
41
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
42
srand() */
43
#include <stdbool.h> /* bool, true */
44
#include <string.h> /* memset(), strcmp(), strlen(),
45
strerror(), asprintf(), strcpy() */
46
#include <sys/ioctl.h> /* ioctl */
47
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
48
sockaddr_in6, PF_INET6,
49
SOCK_STREAM, INET6_ADDRSTRLEN,
50
uid_t, gid_t */
51
#include <inttypes.h> /* PRIu16 */
52
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
53
struct in6_addr, inet_pton(),
54
connect() */
55
#include <assert.h> /* assert() */
56
#include <errno.h> /* perror(), errno */
57
#include <time.h> /* time() */
58
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
59
SIOCSIFFLAGS, if_indextoname(),
60
if_nametoindex(), IF_NAMESIZE */
61
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
62
getuid(), getgid(), setuid(),
63
setgid() */
64
#include <netinet/in.h>
65
#include <arpa/inet.h> /* inet_pton(), htons */
66
#include <iso646.h> /* not, and */
67
#include <argp.h> /* struct argp_option, error_t, struct
68
argp_state, struct argp,
69
argp_parse(), ARGP_KEY_ARG,
70
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
71
72
/* Avahi */
73
/* All Avahi types, constants and functions
74
Avahi*, avahi_*,
75
AVAHI_* */
35
#include <stdio.h>
36
#include <assert.h>
37
#include <stdlib.h>
38
#include <time.h>
39
#include <net/if.h> /* if_nametoindex */
40
#include <sys/ioctl.h> // ioctl, ifreq, SIOCGIFFLAGS, IFF_UP, SIOCSIFFLAGS
41
#include <net/if.h> // ioctl, ifreq, SIOCGIFFLAGS, IFF_UP, SIOCSIFFLAGS
42
76
43
#include <avahi-core/core.h>
77
44
#include <avahi-core/lookup.h>
78
45
#include <avahi-core/log.h>
80
47
#include <avahi-common/malloc.h>
81
48
#include <avahi-common/error.h>
82
49
83
/* GnuTLS */
84
#include <gnutls/gnutls.h> /* All GnuTLS types, constants and
85
functions:
86
gnutls_*
87
init_gnutls_session(),
88
GNUTLS_* */
89
#include <gnutls/openpgp.h> /* gnutls_certificate_set_openpgp_key_file(),
90
GNUTLS_OPENPGP_FMT_BASE64 */
91
92
/* GPGME */
93
#include <gpgme.h> /* All GPGME types, constants and
94
functions:
95
gpgme_*
96
GPGME_PROTOCOL_OpenPGP,
97
GPG_ERR_NO_* */
50
//mandos client part
51
#include <sys/types.h> /* socket(), inet_pton() */
52
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
53
struct in6_addr, inet_pton() */
54
#include <gnutls/gnutls.h> /* All GnuTLS stuff */
55
#include <gnutls/openpgp.h> /* GnuTLS with openpgp stuff */
56
57
#include <unistd.h> /* close() */
58
#include <netinet/in.h>
59
#include <stdbool.h> /* true */
60
#include <string.h> /* memset */
61
#include <arpa/inet.h> /* inet_pton() */
62
#include <iso646.h> /* not */
63
64
// gpgme
65
#include <errno.h> /* perror() */
66
#include <gpgme.h>
67
68
// getopt_long
69
#include <getopt.h>
98
70
99
71
#define BUFFER_SIZE 256
100
72
73
static const char *keydir = "/conf/conf.d/mandos";
74
static const char *pubkeyfile = "pubkey.txt";
75
static const char *seckeyfile = "seckey.txt";
76
101
77
bool debug = false;
102
static const char *keydir = "/conf/conf.d/mandos";
103
static const char mandos_protocol_version[] = "1";
104
const char *argp_program_version = "password-request 1.0";
105
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
106
78
107
/* Used for passing in values through the Avahi callback functions */
79
/* Used for passing in values through all the callback functions */
108
80
typedef struct {
109
81
AvahiSimplePoll *simple_poll;
110
82
AvahiServer *server;
111
83
gnutls_certificate_credentials_t cred;
112
84
unsigned int dh_bits;
113
gnutls_dh_params_t dh_params;
114
85
const char *priority;
115
86
} mandos_context;
116
87
117
/*
118
* Make room in "buffer" for at least BUFFER_SIZE additional bytes.
119
* "buffer_capacity" is how much is currently allocated,
120
* "buffer_length" is how much is already used.
121
*/
122
size_t adjustbuffer(char **buffer, size_t buffer_length,
123
size_t buffer_capacity){
124
if (buffer_length + BUFFER_SIZE > buffer_capacity){
125
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
126
if (buffer == NULL){
127
return 0;
128
}
129
buffer_capacity += BUFFER_SIZE;
130
}
131
return buffer_capacity;
132
}
133
134
/*
135
* Decrypt OpenPGP data using keyrings in HOMEDIR.
136
* Returns -1 on error
137
*/
138
static ssize_t pgp_packet_decrypt (const char *cryptotext,
139
size_t crypto_size,
140
char **plaintext,
88
static ssize_t pgp_packet_decrypt (char *packet, size_t packet_size,
89
char **new_packet,
141
90
const char *homedir){
142
91
gpgme_data_t dh_crypto, dh_plain;
143
92
gpgme_ctx_t ctx;
144
93
gpgme_error_t rc;
145
94
ssize_t ret;
146
size_t plaintext_capacity = 0;
147
ssize_t plaintext_length = 0;
95
ssize_t new_packet_capacity = 0;
96
ssize_t new_packet_length = 0;
148
97
gpgme_engine_info_t engine_info;
149
98
150
99
if (debug){
151
fprintf(stderr, "Trying to decrypt OpenPGP data\n");
100
fprintf(stderr, "Trying to decrypt OpenPGP packet\n");
152
101
}
153
102
154
103
/* Init GPGME */
160
109
return -1;
161
110
}
162
111
163
/* Set GPGME home directory for the OpenPGP engine only */
112
/* Set GPGME home directory */
164
113
rc = gpgme_get_engine_info (&engine_info);
165
114
if (rc != GPG_ERR_NO_ERROR){
166
115
fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
176
125
engine_info = engine_info->next;
177
126
}
178
127
if(engine_info == NULL){
179
fprintf(stderr, "Could not set GPGME home dir to %s\n", homedir);
128
fprintf(stderr, "Could not set home dir to %s\n", homedir);
180
129
return -1;
181
130
}
182
131
183
/* Create new GPGME data buffer from memory cryptotext */
184
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
185
0);
132
/* Create new GPGME data buffer from packet buffer */
133
rc = gpgme_data_new_from_mem(&dh_crypto, packet, packet_size, 0);
186
134
if (rc != GPG_ERR_NO_ERROR){
187
135
fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
188
136
gpgme_strsource(rc), gpgme_strerror(rc));
194
142
if (rc != GPG_ERR_NO_ERROR){
195
143
fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
196
144
gpgme_strsource(rc), gpgme_strerror(rc));
197
gpgme_data_release(dh_crypto);
198
145
return -1;
199
146
}
200
147
203
150
if (rc != GPG_ERR_NO_ERROR){
204
151
fprintf(stderr, "bad gpgme_new: %s: %s\n",
205
152
gpgme_strsource(rc), gpgme_strerror(rc));
206
plaintext_length = -1;
207
goto decrypt_end;
153
return -1;
208
154
}
209
155
210
/* Decrypt data from the cryptotext data buffer to the plaintext
211
data buffer */
156
/* Decrypt data from the FILE pointer to the plaintext data
157
buffer */
212
158
rc = gpgme_op_decrypt(ctx, dh_crypto, dh_plain);
213
159
if (rc != GPG_ERR_NO_ERROR){
214
160
fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
215
161
gpgme_strsource(rc), gpgme_strerror(rc));
216
plaintext_length = -1;
217
if (debug){
218
gpgme_decrypt_result_t result;
219
result = gpgme_op_decrypt_result(ctx);
220
if (result == NULL){
221
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
222
} else {
223
fprintf(stderr, "Unsupported algorithm: %s\n",
224
result->unsupported_algorithm);
225
fprintf(stderr, "Wrong key usage: %u\n",
226
result->wrong_key_usage);
227
if(result->file_name != NULL){
228
fprintf(stderr, "File name: %s\n", result->file_name);
229
}
230
gpgme_recipient_t recipient;
231
recipient = result->recipients;
232
if(recipient){
233
while(recipient != NULL){
234
fprintf(stderr, "Public key algorithm: %s\n",
235
gpgme_pubkey_algo_name(recipient->pubkey_algo));
236
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
237
fprintf(stderr, "Secret key available: %s\n",
238
recipient->status == GPG_ERR_NO_SECKEY
239
? "No" : "Yes");
240
recipient = recipient->next;
241
}
162
return -1;
163
}
164
165
if(debug){
166
fprintf(stderr, "Decryption of OpenPGP packet succeeded\n");
167
}
168
169
if (debug){
170
gpgme_decrypt_result_t result;
171
result = gpgme_op_decrypt_result(ctx);
172
if (result == NULL){
173
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
174
} else {
175
fprintf(stderr, "Unsupported algorithm: %s\n",
176
result->unsupported_algorithm);
177
fprintf(stderr, "Wrong key usage: %d\n",
178
result->wrong_key_usage);
179
if(result->file_name != NULL){
180
fprintf(stderr, "File name: %s\n", result->file_name);
181
}
182
gpgme_recipient_t recipient;
183
recipient = result->recipients;
184
if(recipient){
185
while(recipient != NULL){
186
fprintf(stderr, "Public key algorithm: %s\n",
187
gpgme_pubkey_algo_name(recipient->pubkey_algo));
188
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
189
fprintf(stderr, "Secret key available: %s\n",
190
recipient->status == GPG_ERR_NO_SECKEY
191
? "No" : "Yes");
192
recipient = recipient->next;
242
193
}
243
194
}
244
195
}
245
goto decrypt_end;
246
196
}
247
197
248
if(debug){
249
fprintf(stderr, "Decryption of OpenPGP data succeeded\n");
250
}
198
/* Delete the GPGME FILE pointer cryptotext data buffer */
199
gpgme_data_release(dh_crypto);
251
200
252
201
/* Seek back to the beginning of the GPGME plaintext data buffer */
253
202
if (gpgme_data_seek(dh_plain, (off_t) 0, SEEK_SET) == -1){
254
203
perror("pgpme_data_seek");
255
plaintext_length = -1;
256
goto decrypt_end;
257
204
}
258
205
259
*plaintext = NULL;
206
*new_packet = 0;
260
207
while(true){
261
plaintext_capacity = adjustbuffer(plaintext,
262
(size_t)plaintext_length,
263
plaintext_capacity);
264
if (plaintext_capacity == 0){
265
perror("adjustbuffer");
266
plaintext_length = -1;
267
goto decrypt_end;
208
if (new_packet_length + BUFFER_SIZE > new_packet_capacity){
209
*new_packet = realloc(*new_packet,
210
(unsigned int)new_packet_capacity
211
+ BUFFER_SIZE);
212
if (*new_packet == NULL){
213
perror("realloc");
214
return -1;
215
}
216
new_packet_capacity += BUFFER_SIZE;
268
217
}
269
218
270
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
219
ret = gpgme_data_read(dh_plain, *new_packet + new_packet_length,
271
220
BUFFER_SIZE);
272
221
/* Print the data, if any */
273
222
if (ret == 0){
274
/* EOF */
275
223
break;
276
224
}
277
225
if(ret < 0){
278
226
perror("gpgme_data_read");
279
plaintext_length = -1;
280
goto decrypt_end;
281
}
282
plaintext_length += ret;
283
}
284
285
if(debug){
286
fprintf(stderr, "Decrypted password is: ");
287
for(ssize_t i = 0; i < plaintext_length; i++){
288
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
289
}
290
fprintf(stderr, "\n");
291
}
292
293
decrypt_end:
294
295
/* Delete the GPGME cryptotext data buffer */
296
gpgme_data_release(dh_crypto);
227
return -1;
228
}
229
new_packet_length += ret;
230
}
231
232
/* FIXME: check characters before printing to screen so to not print
233
terminal control characters */
234
/* if(debug){ */
235
/* fprintf(stderr, "decrypted password is: "); */
236
/* fwrite(*new_packet, 1, new_packet_length, stderr); */
237
/* fprintf(stderr, "\n"); */
238
/* } */
297
239
298
240
/* Delete the GPGME plaintext data buffer */
299
241
gpgme_data_release(dh_plain);
300
return plaintext_length;
242
return new_packet_length;
301
243
}
302
244
303
245
static const char * safer_gnutls_strerror (int value) {
304
const char *ret = gnutls_strerror (value); /* Spurious warning */
246
const char *ret = gnutls_strerror (value);
305
247
if (ret == NULL)
306
248
ret = "(unknown)";
307
249
return ret;
308
250
}
309
251
310
/* GnuTLS log function callback */
311
252
static void debuggnutls(__attribute__((unused)) int level,
312
253
const char* string){
313
fprintf(stderr, "GnuTLS: %s", string);
254
fprintf(stderr, "%s", string);
314
255
}
315
256
316
static int init_gnutls_global(mandos_context *mc,
317
const char *pubkeyfilename,
318
const char *seckeyfilename){
257
static int initgnutls(mandos_context *mc, gnutls_session_t *session,
258
gnutls_dh_params_t *dh_params){
259
const char *err;
319
260
int ret;
320
261
321
262
if(debug){
322
263
fprintf(stderr, "Initializing GnuTLS\n");
323
264
}
324
325
ret = gnutls_global_init();
326
if (ret != GNUTLS_E_SUCCESS) {
327
fprintf (stderr, "GnuTLS global_init: %s\n",
328
safer_gnutls_strerror(ret));
265
266
if ((ret = gnutls_global_init ())
267
!= GNUTLS_E_SUCCESS) {
268
fprintf (stderr, "global_init: %s\n", safer_gnutls_strerror(ret));
329
269
return -1;
330
270
}
331
271
332
272
if (debug){
333
/* "Use a log level over 10 to enable all debugging options."
334
* - GnuTLS manual
335
*/
336
273
gnutls_global_set_log_level(11);
337
274
gnutls_global_set_log_function(debuggnutls);
338
275
}
339
276
340
/* OpenPGP credentials */
341
gnutls_certificate_allocate_credentials(&mc->cred);
342
if (ret != GNUTLS_E_SUCCESS){
343
fprintf (stderr, "GnuTLS memory error: %s\n", /* Spurious
344
warning */
277
/* openpgp credentials */
278
if ((ret = gnutls_certificate_allocate_credentials (&mc->cred))
279
!= GNUTLS_E_SUCCESS) {
280
fprintf (stderr, "memory error: %s\n",
345
281
safer_gnutls_strerror(ret));
346
gnutls_global_deinit ();
347
282
return -1;
348
283
}
349
284
350
285
if(debug){
351
286
fprintf(stderr, "Attempting to use OpenPGP certificate %s"
352
" and keyfile %s as GnuTLS credentials\n", pubkeyfilename,
353
seckeyfilename);
287
" and keyfile %s as GnuTLS credentials\n", pubkeyfile,
288
seckeyfile);
354
289
}
355
290
356
291
ret = gnutls_certificate_set_openpgp_key_file
357
(mc->cred, pubkeyfilename, seckeyfilename,
358
GNUTLS_OPENPGP_FMT_BASE64);
292
(mc->cred, pubkeyfile, seckeyfile, GNUTLS_OPENPGP_FMT_BASE64);
359
293
if (ret != GNUTLS_E_SUCCESS) {
360
fprintf(stderr,
361
"Error[%d] while reading the OpenPGP key pair ('%s',"
362
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
363
fprintf(stdout, "The GnuTLS error is: %s\n",
294
fprintf
295
(stderr, "Error[%d] while reading the OpenPGP key pair ('%s',"
296
" '%s')\n",
297
ret, pubkeyfile, seckeyfile);
298
fprintf(stdout, "The Error is: %s\n",
364
299
safer_gnutls_strerror(ret));
365
goto globalfail;
366
}
367
368
/* GnuTLS server initialization */
369
ret = gnutls_dh_params_init(&mc->dh_params);
370
if (ret != GNUTLS_E_SUCCESS) {
371
fprintf (stderr, "Error in GnuTLS DH parameter initialization:"
372
" %s\n", safer_gnutls_strerror(ret));
373
goto globalfail;
374
}
375
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
376
if (ret != GNUTLS_E_SUCCESS) {
377
fprintf (stderr, "Error in GnuTLS prime generation: %s\n",
378
safer_gnutls_strerror(ret));
379
goto globalfail;
380
}
381
382
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
383
384
return 0;
385
386
globalfail:
387
388
gnutls_certificate_free_credentials(mc->cred);
389
gnutls_global_deinit();
390
return -1;
391
}
392
393
static int init_gnutls_session(mandos_context *mc,
394
gnutls_session_t *session){
395
int ret;
396
/* GnuTLS session creation */
397
ret = gnutls_init(session, GNUTLS_SERVER);
398
if (ret != GNUTLS_E_SUCCESS){
300
return -1;
301
}
302
303
//GnuTLS server initialization
304
if ((ret = gnutls_dh_params_init(dh_params))
305
!= GNUTLS_E_SUCCESS) {
306
fprintf (stderr, "Error in dh parameter initialization: %s\n",
307
safer_gnutls_strerror(ret));
308
return -1;
309
}
310
311
if ((ret = gnutls_dh_params_generate2(*dh_params, mc->dh_bits))
312
!= GNUTLS_E_SUCCESS) {
313
fprintf (stderr, "Error in prime generation: %s\n",
314
safer_gnutls_strerror(ret));
315
return -1;
316
}
317
318
gnutls_certificate_set_dh_params(mc->cred, *dh_params);
319
320
// GnuTLS session creation
321
if ((ret = gnutls_init(session, GNUTLS_SERVER))
322
!= GNUTLS_E_SUCCESS){
399
323
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
400
324
safer_gnutls_strerror(ret));
401
325
}
402
326
403
{
404
const char *err;
405
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
406
if (ret != GNUTLS_E_SUCCESS) {
407
fprintf(stderr, "Syntax error at: %s\n", err);
408
fprintf(stderr, "GnuTLS error: %s\n",
409
safer_gnutls_strerror(ret));
410
gnutls_deinit (*session);
411
return -1;
412
}
327
if ((ret = gnutls_priority_set_direct(*session, mc->priority, &err))
328
!= GNUTLS_E_SUCCESS) {
329
fprintf(stderr, "Syntax error at: %s\n", err);
330
fprintf(stderr, "GnuTLS error: %s\n",
331
safer_gnutls_strerror(ret));
332
return -1;
413
333
}
414
334
415
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
416
mc->cred);
417
if (ret != GNUTLS_E_SUCCESS) {
418
fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
335
if ((ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
336
mc->cred))
337
!= GNUTLS_E_SUCCESS) {
338
fprintf(stderr, "Error setting a credentials set: %s\n",
419
339
safer_gnutls_strerror(ret));
420
gnutls_deinit (*session);
421
340
return -1;
422
341
}
423
342
430
349
return 0;
431
350
}
432
351
433
/* Avahi log function callback */
434
352
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
435
353
__attribute__((unused)) const char *txt){}
436
354
437
/* Called when a Mandos server is found */
438
355
static int start_mandos_communication(const char *ip, uint16_t port,
439
356
AvahiIfIndex if_index,
440
357
mandos_context *mc){
441
358
int ret, tcp_sd;
442
union { struct sockaddr in; struct sockaddr_in6 in6; } to;
359
struct sockaddr_in6 to;
443
360
char *buffer = NULL;
444
361
char *decrypted_buffer;
445
362
size_t buffer_length = 0;
446
363
size_t buffer_capacity = 0;
447
364
ssize_t decrypted_buffer_size;
448
size_t written;
365
size_t written = 0;
449
366
int retval = 0;
450
367
char interface[IF_NAMESIZE];
451
368
gnutls_session_t session;
452
453
ret = init_gnutls_session (mc, &session);
454
if (ret != 0){
455
return -1;
456
}
369
gnutls_dh_params_t dh_params;
457
370
458
371
if(debug){
459
fprintf(stderr, "Setting up a tcp connection to %s, port %" PRIu16
460
"\n", ip, port);
372
fprintf(stderr, "Setting up a tcp connection to %s, port %d\n",
373
ip, port);
461
374
}
462
375
463
376
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
465
378
perror("socket");
466
379
return -1;
467
380
}
468
381
469
382
if(debug){
470
383
if(if_indextoname((unsigned int)if_index, interface) == NULL){
471
384
perror("if_indextoname");
474
387
fprintf(stderr, "Binding to interface %s\n", interface);
475
388
}
476
389
477
memset(&to, 0, sizeof(to));
478
to.in6.sin6_family = AF_INET6;
479
/* It would be nice to have a way to detect if we were passed an
480
IPv4 address here. Now we assume an IPv6 address. */
481
ret = inet_pton(AF_INET6, ip, &to.in6.sin6_addr);
390
memset(&to,0,sizeof(to)); /* Spurious warning */
391
to.sin6_family = AF_INET6;
392
ret = inet_pton(AF_INET6, ip, &to.sin6_addr);
482
393
if (ret < 0 ){
483
394
perror("inet_pton");
484
395
return -1;
487
398
fprintf(stderr, "Bad address: %s\n", ip);
488
399
return -1;
489
400
}
490
to.in6.sin6_port = htons(port); /* Spurious warning */
401
to.sin6_port = htons(port); /* Spurious warning */
491
402
492
to.in6.sin6_scope_id = (uint32_t)if_index;
403
to.sin6_scope_id = (uint32_t)if_index;
493
404
494
405
if(debug){
495
fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
496
port);
406
fprintf(stderr, "Connection to: %s, port %d\n", ip, port);
497
407
char addrstr[INET6_ADDRSTRLEN] = "";
498
if(inet_ntop(to.in6.sin6_family, &(to.in6.sin6_addr), addrstr,
408
if(inet_ntop(to.sin6_family, &(to.sin6_addr), addrstr,
499
409
sizeof(addrstr)) == NULL){
500
410
perror("inet_ntop");
501
411
} else {
505
415
}
506
416
}
507
417
508
ret = connect(tcp_sd, &to.in, sizeof(to));
418
ret = connect(tcp_sd, (struct sockaddr *) &to, sizeof(to));
509
419
if (ret < 0){
510
420
perror("connect");
511
421
return -1;
512
422
}
513
423
514
const char *out = mandos_protocol_version;
515
written = 0;
516
while (true){
517
size_t out_size = strlen(out);
518
ret = TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
519
out_size - written));
520
if (ret == -1){
521
perror("write");
522
retval = -1;
523
goto mandos_end;
524
}
525
written += (size_t)ret;
526
if(written < out_size){
527
continue;
528
} else {
529
if (out == mandos_protocol_version){
530
written = 0;
531
out = "\r\n";
532
} else {
533
break;
534
}
535
}
424
ret = initgnutls (mc, &session, &dh_params);
425
if (ret != 0){
426
retval = -1;
427
return -1;
536
428
}
537
429
430
gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) tcp_sd);
431
538
432
if(debug){
539
433
fprintf(stderr, "Establishing TLS session with %s\n", ip);
540
434
}
541
435
542
gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) tcp_sd);
543
544
do{
545
ret = gnutls_handshake (session);
546
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
436
ret = gnutls_handshake (session);
547
437
548
438
if (ret != GNUTLS_E_SUCCESS){
549
439
if(debug){
550
fprintf(stderr, "*** GnuTLS Handshake failed ***\n");
440
fprintf(stderr, "\n*** Handshake failed ***\n");
551
441
gnutls_perror (ret);
552
442
}
553
443
retval = -1;
554
goto mandos_end;
444
goto exit;
555
445
}
556
446
557
/* Read OpenPGP packet that contains the wanted password */
447
//Retrieve OpenPGP packet that contains the wanted password
558
448
559
449
if(debug){
560
450
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
561
451
ip);
562
452
}
563
453
564
454
while(true){
565
buffer_capacity = adjustbuffer(&buffer, buffer_length,
566
buffer_capacity);
567
if (buffer_capacity == 0){
568
perror("adjustbuffer");
569
retval = -1;
570
goto mandos_end;
455
if (buffer_length + BUFFER_SIZE > buffer_capacity){
456
buffer = realloc(buffer, buffer_capacity + BUFFER_SIZE);
457
if (buffer == NULL){
458
perror("realloc");
459
goto exit;
460
}
461
buffer_capacity += BUFFER_SIZE;
571
462
}
572
463
573
464
ret = gnutls_record_recv(session, buffer+buffer_length,
581
472
case GNUTLS_E_AGAIN:
582
473
break;
583
474
case GNUTLS_E_REHANDSHAKE:
584
do{
585
ret = gnutls_handshake (session);
586
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
475
ret = gnutls_handshake (session);
587
476
if (ret < 0){
588
fprintf(stderr, "*** GnuTLS Re-handshake failed ***\n");
477
fprintf(stderr, "\n*** Handshake failed ***\n");
589
478
gnutls_perror (ret);
590
479
retval = -1;
591
goto mandos_end;
480
goto exit;
592
481
}
593
482
break;
594
483
default:
595
484
fprintf(stderr, "Unknown error while reading data from"
596
" encrypted session with Mandos server\n");
485
" encrypted session with mandos server\n");
597
486
retval = -1;
598
487
gnutls_bye (session, GNUTLS_SHUT_RDWR);
599
goto mandos_end;
488
goto exit;
600
489
}
601
490
} else {
602
491
buffer_length += (size_t) ret;
603
492
}
604
493
}
605
494
606
if(debug){
607
fprintf(stderr, "Closing TLS session\n");
608
}
609
610
gnutls_bye (session, GNUTLS_SHUT_RDWR);
611
612
495
if (buffer_length > 0){
613
496
decrypted_buffer_size = pgp_packet_decrypt(buffer,
614
497
buffer_length,
615
498
&decrypted_buffer,
616
499
keydir);
617
500
if (decrypted_buffer_size >= 0){
618
written = 0;
619
501
while(written < (size_t) decrypted_buffer_size){
620
502
ret = (int)fwrite (decrypted_buffer + written, 1,
621
503
(size_t)decrypted_buffer_size - written,
634
516
} else {
635
517
retval = -1;
636
518
}
637
} else {
638
retval = -1;
639
}
640
641
/* Shutdown procedure */
642
643
mandos_end:
519
}
520
521
//shutdown procedure
522
523
if(debug){
524
fprintf(stderr, "Closing TLS session\n");
525
}
526
644
527
free(buffer);
528
gnutls_bye (session, GNUTLS_SHUT_RDWR);
529
exit:
645
530
close(tcp_sd);
646
531
gnutls_deinit (session);
532
gnutls_certificate_free_credentials (mc->cred);
533
gnutls_global_deinit ();
647
534
return retval;
648
535
}
649
536
650
static void resolve_callback(AvahiSServiceResolver *r,
651
AvahiIfIndex interface,
652
AVAHI_GCC_UNUSED AvahiProtocol protocol,
653
AvahiResolverEvent event,
654
const char *name,
655
const char *type,
656
const char *domain,
657
const char *host_name,
658
const AvahiAddress *address,
659
uint16_t port,
660
AVAHI_GCC_UNUSED AvahiStringList *txt,
661
AVAHI_GCC_UNUSED AvahiLookupResultFlags
662
flags,
663
void* userdata) {
537
static void resolve_callback( AvahiSServiceResolver *r,
538
AvahiIfIndex interface,
539
AVAHI_GCC_UNUSED AvahiProtocol protocol,
540
AvahiResolverEvent event,
541
const char *name,
542
const char *type,
543
const char *domain,
544
const char *host_name,
545
const AvahiAddress *address,
546
uint16_t port,
547
AVAHI_GCC_UNUSED AvahiStringList *txt,
548
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
549
void* userdata) {
664
550
mandos_context *mc = userdata;
665
assert(r);
551
assert(r); /* Spurious warning */
666
552
667
553
/* Called whenever a service has been resolved successfully or
668
554
timed out */
670
556
switch (event) {
671
557
default:
672
558
case AVAHI_RESOLVER_FAILURE:
673
fprintf(stderr, "(Avahi Resolver) Failed to resolve service '%s'"
674
" of type '%s' in domain '%s': %s\n", name, type, domain,
559
fprintf(stderr, "(Resolver) Failed to resolve service '%s' of"
560
" type '%s' in domain '%s': %s\n", name, type, domain,
675
561
avahi_strerror(avahi_server_errno(mc->server)));
676
562
break;
677
563
680
566
char ip[AVAHI_ADDRESS_STR_MAX];
681
567
avahi_address_snprint(ip, sizeof(ip), address);
682
568
if(debug){
683
fprintf(stderr, "Mandos server \"%s\" found on %s (%s, %"
684
PRIu16 ") on port %d\n", name, host_name, ip,
685
interface, port);
569
fprintf(stderr, "Mandos server \"%s\" found on %s (%s) on"
570
" port %d\n", name, host_name, ip, port);
686
571
}
687
572
int ret = start_mandos_communication(ip, port, interface, mc);
688
573
if (ret == 0){
689
avahi_simple_poll_quit(mc->simple_poll);
574
exit(EXIT_SUCCESS);
690
575
}
691
576
}
692
577
}
700
585
const char *name,
701
586
const char *type,
702
587
const char *domain,
703
AVAHI_GCC_UNUSED AvahiLookupResultFlags
704
flags,
588
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
705
589
void* userdata) {
706
590
mandos_context *mc = userdata;
707
assert(b);
591
assert(b); /* Spurious warning */
708
592
709
593
/* Called whenever a new services becomes available on the LAN or
710
594
is removed from the LAN */
713
597
default:
714
598
case AVAHI_BROWSER_FAILURE:
715
599
716
fprintf(stderr, "(Avahi browser) %s\n",
600
fprintf(stderr, "(Browser) %s\n",
717
601
avahi_strerror(avahi_server_errno(mc->server)));
718
602
avahi_simple_poll_quit(mc->simple_poll);
719
603
return;
720
604
721
605
case AVAHI_BROWSER_NEW:
722
/* We ignore the returned Avahi resolver object. In the callback
723
function we free it. If the Avahi server is terminated before
724
the callback function is called the Avahi server will free the
725
resolver for us. */
606
/* We ignore the returned resolver object. In the callback
607
function we free it. If the server is terminated before
608
the callback function is called the server will free
609
the resolver for us. */
726
610
727
if (!(avahi_s_service_resolver_new(mc->server, interface,
728
protocol, name, type, domain,
611
if (!(avahi_s_service_resolver_new(mc->server, interface, protocol, name,
612
type, domain,
729
613
AVAHI_PROTO_INET6, 0,
730
614
resolve_callback, mc)))
731
fprintf(stderr, "Avahi: Failed to resolve service '%s': %s\n",
732
name, avahi_strerror(avahi_server_errno(mc->server)));
615
fprintf(stderr, "Failed to resolve service '%s': %s\n", name,
616
avahi_strerror(avahi_server_errno(mc->server)));
733
617
break;
734
618
735
619
case AVAHI_BROWSER_REMOVE:
737
621
738
622
case AVAHI_BROWSER_ALL_FOR_NOW:
739
623
case AVAHI_BROWSER_CACHE_EXHAUSTED:
740
if(debug){
741
fprintf(stderr, "No Mandos server found, still searching...\n");
742
}
743
624
break;
744
625
}
745
626
}
746
627
747
628
/* Combines file name and path and returns the malloced new
748
629
string. some sane checks could/should be added */
749
static char *combinepath(const char *first, const char *second){
750
char *tmp;
751
int ret = asprintf(&tmp, "%s/%s", first, second);
752
if(ret < 0){
630
static const char *combinepath(const char *first, const char *second){
631
size_t f_len = strlen(first);
632
size_t s_len = strlen(second);
633
char *tmp = malloc(f_len + s_len + 2);
634
if (tmp == NULL){
753
635
return NULL;
754
636
}
637
if(f_len > 0){
638
memcpy(tmp, first, f_len); /* Spurious warning */
639
}
640
tmp[f_len] = '/';
641
if(s_len > 0){
642
memcpy(tmp + f_len + 1, second, s_len); /* Spurious warning */
643
}
644
tmp[f_len + 1 + s_len] = '\0';
755
645
return tmp;
756
646
}
757
647
758
648
759
int main(int argc, char *argv[]){
649
int main(AVAHI_GCC_UNUSED int argc, AVAHI_GCC_UNUSED char*argv[]) {
650
AvahiServerConfig config;
760
651
AvahiSServiceBrowser *sb = NULL;
761
652
int error;
762
653
int ret;
763
int exitcode = EXIT_SUCCESS;
654
int debug_int;
655
int returncode = EXIT_SUCCESS;
764
656
const char *interface = "eth0";
765
657
struct ifreq network;
766
658
int sd;
767
uid_t uid;
768
gid_t gid;
769
659
char *connect_to = NULL;
770
660
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
771
char *pubkeyfilename = NULL;
772
char *seckeyfilename = NULL;
773
const char *pubkeyname = "pubkey.txt";
774
const char *seckeyname = "seckey.txt";
775
661
mandos_context mc = { .simple_poll = NULL, .server = NULL,
776
.dh_bits = 1024, .priority = "SECURE256"
777
":!CTYPE-X.509:+CTYPE-OPENPGP" };
778
bool gnutls_initalized = false;
779
780
{
781
struct argp_option options[] = {
782
{ .name = "debug", .key = 128,
783
.doc = "Debug mode", .group = 3 },
784
{ .name = "connect", .key = 'c',
785
.arg = "ADDRESS:PORT",
786
.doc = "Connect directly to a specific Mandos server",
787
.group = 1 },
788
{ .name = "interface", .key = 'i',
789
.arg = "NAME",
790
.doc = "Interface that will be used to search for Mandos"
791
" servers",
792
.group = 1 },
793
{ .name = "keydir", .key = 'd',
794
.arg = "DIRECTORY",
795
.doc = "Directory to read the OpenPGP key files from",
796
.group = 1 },
797
{ .name = "seckey", .key = 's',
798
.arg = "FILE",
799
.doc = "OpenPGP secret key file base name",
800
.group = 1 },
801
{ .name = "pubkey", .key = 'p',
802
.arg = "FILE",
803
.doc = "OpenPGP public key file base name",
804
.group = 2 },
805
{ .name = "dh-bits", .key = 129,
806
.arg = "BITS",
807
.doc = "Bit length of the prime number used in the"
808
" Diffie-Hellman key exchange",
809
.group = 2 },
810
{ .name = "priority", .key = 130,
811
.arg = "STRING",
812
.doc = "GnuTLS priority string for the TLS handshake",
813
.group = 1 },
814
{ .name = NULL }
815
};
816
817
error_t parse_opt (int key, char *arg,
818
struct argp_state *state) {
819
/* Get the INPUT argument from `argp_parse', which we know is
820
a pointer to our plugin list pointer. */
821
switch (key) {
822
case 128: /* --debug */
823
debug = true;
824
break;
825
case 'c': /* --connect */
826
connect_to = arg;
827
break;
828
case 'i': /* --interface */
829
interface = arg;
830
break;
831
case 'd': /* --keydir */
832
keydir = arg;
833
break;
834
case 's': /* --seckey */
835
seckeyname = arg;
836
break;
837
case 'p': /* --pubkey */
838
pubkeyname = arg;
839
break;
840
case 129: /* --dh-bits */
841
errno = 0;
842
mc.dh_bits = (unsigned int) strtol(arg, NULL, 10);
843
if (errno){
844
perror("strtol");
845
exit(EXIT_FAILURE);
846
}
847
break;
848
case 130: /* --priority */
849
mc.priority = arg;
850
break;
851
case ARGP_KEY_ARG:
852
argp_usage (state);
853
case ARGP_KEY_END:
854
break;
855
default:
856
return ARGP_ERR_UNKNOWN;
857
}
858
return 0;
859
}
860
861
struct argp argp = { .options = options, .parser = parse_opt,
862
.args_doc = "",
863
.doc = "Mandos client -- Get and decrypt"
864
" passwords from a Mandos server" };
865
ret = argp_parse (&argp, argc, argv, 0, 0, NULL);
866
if (ret == ARGP_ERR_UNKNOWN){
867
fprintf(stderr, "Unknown error while parsing arguments\n");
868
exitcode = EXIT_FAILURE;
869
goto end;
870
}
871
}
872
873
pubkeyfilename = combinepath(keydir, pubkeyname);
874
if (pubkeyfilename == NULL){
875
perror("combinepath");
876
exitcode = EXIT_FAILURE;
877
goto end;
878
}
879
880
seckeyfilename = combinepath(keydir, seckeyname);
881
if (seckeyfilename == NULL){
882
perror("combinepath");
883
exitcode = EXIT_FAILURE;
884
goto end;
885
}
886
887
ret = init_gnutls_global(&mc, pubkeyfilename, seckeyfilename);
888
if (ret == -1){
889
fprintf(stderr, "init_gnutls_global failed\n");
890
exitcode = EXIT_FAILURE;
891
goto end;
892
} else {
893
gnutls_initalized = true;
894
}
895
896
/* If the interface is down, bring it up */
897
{
898
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
899
if(sd < 0) {
900
perror("socket");
901
exitcode = EXIT_FAILURE;
902
goto end;
903
}
904
strcpy(network.ifr_name, interface);
905
ret = ioctl(sd, SIOCGIFFLAGS, &network);
906
if(ret == -1){
907
perror("ioctl SIOCGIFFLAGS");
908
exitcode = EXIT_FAILURE;
909
goto end;
910
}
911
if((network.ifr_flags & IFF_UP) == 0){
912
network.ifr_flags |= IFF_UP;
913
ret = ioctl(sd, SIOCSIFFLAGS, &network);
914
if(ret == -1){
915
perror("ioctl SIOCSIFFLAGS");
916
exitcode = EXIT_FAILURE;
917
goto end;
918
}
919
}
920
close(sd);
921
}
922
923
uid = getuid();
924
gid = getgid();
925
926
ret = setuid(uid);
927
if (ret == -1){
928
perror("setuid");
929
}
930
931
setgid(gid);
932
if (ret == -1){
933
perror("setgid");
662
.dh_bits = 1024, .priority = "SECURE256"};
663
664
debug_int = debug ? 1 : 0;
665
while (true){
666
struct option long_options[] = {
667
{"debug", no_argument, &debug_int, 1},
668
{"connect", required_argument, NULL, 'c'},
669
{"interface", required_argument, NULL, 'i'},
670
{"keydir", required_argument, NULL, 'd'},
671
{"seckey", required_argument, NULL, 's'},
672
{"pubkey", required_argument, NULL, 'p'},
673
{"dh-bits", required_argument, NULL, 'D'},
674
{"priority", required_argument, NULL, 'P'},
675
{0, 0, 0, 0} };
676
677
int option_index = 0;
678
ret = getopt_long (argc, argv, "i:", long_options,
679
&option_index);
680
681
if (ret == -1){
682
break;
683
}
684
685
switch(ret){
686
case 0:
687
break;
688
case 'i':
689
interface = optarg;
690
break;
691
case 'c':
692
connect_to = optarg;
693
break;
694
case 'd':
695
keydir = optarg;
696
break;
697
case 'p':
698
pubkeyfile = optarg;
699
break;
700
case 's':
701
seckeyfile = optarg;
702
break;
703
case 'D':
704
errno = 0;
705
mc.dh_bits = (unsigned int) strtol(optarg, NULL, 10);
706
if (errno){
707
perror("strtol");
708
exit(EXIT_FAILURE);
709
}
710
break;
711
case 'P':
712
mc.priority = optarg;
713
break;
714
case '?':
715
default:
716
exit(EXIT_FAILURE);
717
}
718
}
719
debug = debug_int ? true : false;
720
721
pubkeyfile = combinepath(keydir, pubkeyfile);
722
if (pubkeyfile == NULL){
723
perror("combinepath");
724
returncode = EXIT_FAILURE;
725
goto exit;
726
}
727
728
seckeyfile = combinepath(keydir, seckeyfile);
729
if (seckeyfile == NULL){
730
perror("combinepath");
731
goto exit;
934
732
}
935
733
936
734
if_index = (AvahiIfIndex) if_nametoindex(interface);
945
743
char *address = strrchr(connect_to, ':');
946
744
if(address == NULL){
947
745
fprintf(stderr, "No colon in address\n");
948
exitcode = EXIT_FAILURE;
949
goto end;
746
exit(EXIT_FAILURE);
950
747
}
951
748
errno = 0;
952
749
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
953
750
if(errno){
954
751
perror("Bad port number");
955
exitcode = EXIT_FAILURE;
956
goto end;
752
exit(EXIT_FAILURE);
957
753
}
958
754
*address = '\0';
959
755
address = connect_to;
960
756
ret = start_mandos_communication(address, port, if_index, &mc);
961
757
if(ret < 0){
962
exitcode = EXIT_FAILURE;
758
exit(EXIT_FAILURE);
963
759
} else {
964
exitcode = EXIT_SUCCESS;
965
}
966
goto end;
967
}
760
exit(EXIT_SUCCESS);
761
}
762
}
763
764
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
765
if(sd < 0) {
766
perror("socket");
767
returncode = EXIT_FAILURE;
768
goto exit;
769
}
770
strcpy(network.ifr_name, interface); /* Spurious warning */
771
ret = ioctl(sd, SIOCGIFFLAGS, &network);
772
if(ret == -1){
773
774
perror("ioctl SIOCGIFFLAGS");
775
returncode = EXIT_FAILURE;
776
goto exit;
777
}
778
if((network.ifr_flags & IFF_UP) == 0){
779
network.ifr_flags |= IFF_UP;
780
ret = ioctl(sd, SIOCSIFFLAGS, &network);
781
if(ret == -1){
782
perror("ioctl SIOCSIFFLAGS");
783
returncode = EXIT_FAILURE;
784
goto exit;
785
}
786
}
787
close(sd);
968
788
969
789
if (not debug){
970
790
avahi_set_log_function(empty_log);
971
791
}
972
792
973
/* Initialize the pseudo-RNG for Avahi */
793
/* Initialize the psuedo-RNG */
974
794
srand((unsigned int) time(NULL));
975
976
/* Allocate main Avahi loop object */
977
mc.simple_poll = avahi_simple_poll_new();
978
if (mc.simple_poll == NULL) {
979
fprintf(stderr, "Avahi: Failed to create simple poll"
980
" object.\n");
981
exitcode = EXIT_FAILURE;
982
goto end;
983
}
984
985
{
986
AvahiServerConfig config;
987
/* Do not publish any local Zeroconf records */
988
avahi_server_config_init(&config);
989
config.publish_hinfo = 0;
990
config.publish_addresses = 0;
991
config.publish_workstation = 0;
992
config.publish_domain = 0;
993
994
/* Allocate a new server */
995
mc.server = avahi_server_new(avahi_simple_poll_get
996
(mc.simple_poll), &config, NULL,
997
NULL, &error);
998
999
/* Free the Avahi configuration data */
1000
avahi_server_config_free(&config);
1001
}
1002
1003
/* Check if creating the Avahi server object succeeded */
1004
if (mc.server == NULL) {
1005
fprintf(stderr, "Failed to create Avahi server: %s\n",
795
796
/* Allocate main loop object */
797
if (!(mc.simple_poll = avahi_simple_poll_new())) {
798
fprintf(stderr, "Failed to create simple poll object.\n");
799
returncode = EXIT_FAILURE;
800
goto exit;
801
}
802
803
/* Do not publish any local records */
804
avahi_server_config_init(&config);
805
config.publish_hinfo = 0;
806
config.publish_addresses = 0;
807
config.publish_workstation = 0;
808
config.publish_domain = 0;
809
810
/* Allocate a new server */
811
mc.server=avahi_server_new(avahi_simple_poll_get(mc.simple_poll),
812
&config, NULL, NULL, &error);
813
814
/* Free the configuration data */
815
avahi_server_config_free(&config);
816
817
/* Check if creating the server object succeeded */
818
if (!mc.server) {
819
fprintf(stderr, "Failed to create server: %s\n",
1006
820
avahi_strerror(error));
1007
exitcode = EXIT_FAILURE;
1008
goto end;
821
returncode = EXIT_FAILURE;
822
goto exit;
1009
823
}
1010
824
1011
/* Create the Avahi service browser */
825
/* Create the service browser */
1012
826
sb = avahi_s_service_browser_new(mc.server, if_index,
1013
827
AVAHI_PROTO_INET6,
1014
828
"_mandos._tcp", NULL, 0,
1015
829
browse_callback, &mc);
1016
if (sb == NULL) {
830
if (!sb) {
1017
831
fprintf(stderr, "Failed to create service browser: %s\n",
1018
832
avahi_strerror(avahi_server_errno(mc.server)));
1019
exitcode = EXIT_FAILURE;
1020
goto end;
833
returncode = EXIT_FAILURE;
834
goto exit;
1021
835
}
1022
836
1023
837
/* Run the main loop */
1024
838
1025
839
if (debug){
1026
fprintf(stderr, "Starting Avahi loop search\n");
840
fprintf(stderr, "Starting avahi loop search\n");
1027
841
}
1028
842
1029
843
avahi_simple_poll_loop(mc.simple_poll);
1030
844
1031
end:
1032
845
exit:
846
1033
847
if (debug){
1034
848
fprintf(stderr, "%s exiting\n", argv[0]);
1035
849
}
1036
850
1037
851
/* Cleanup things */
1038
if (sb != NULL)
852
if (sb)
1039
853
avahi_s_service_browser_free(sb);
1040
854
1041
if (mc.server != NULL)
855
if (mc.server)
1042
856
avahi_server_free(mc.server);
1043
1044
if (mc.simple_poll != NULL)
857
858
if (mc.simple_poll)
1045
859
avahi_simple_poll_free(mc.simple_poll);
1046
free(pubkeyfilename);
1047
free(seckeyfilename);
1048
1049
if (gnutls_initalized){
1050
gnutls_certificate_free_credentials(mc.cred);
1051
gnutls_global_deinit ();
1052
}
1053
1054
return exitcode;
860
free(pubkeyfile);
861
free(seckeyfile);
862
863
return returncode;
1055
864
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0