9
9
* "browse_callback", and parts of "main".
11
11
* Everything else is
12
* Copyright © 2008,2009 Teddy Hogeborn
13
* Copyright © 2008,2009 Björn Påhlsson
12
* Copyright © 2008-2011 Teddy Hogeborn
13
* Copyright © 2008-2011 Björn Påhlsson
15
15
* This program is free software: you can redistribute it and/or
16
16
* modify it under the terms of the GNU General Public License as
43
43
stdout, ferror(), remove() */
44
44
#include <stdint.h> /* uint16_t, uint32_t */
45
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
48
48
#include <stdbool.h> /* bool, false, true */
49
49
#include <string.h> /* memset(), strcmp(), strlen(),
50
50
strerror(), asprintf(), strcpy() */
64
64
#include <assert.h> /* assert() */
65
65
#include <errno.h> /* perror(), errno */
66
#include <time.h> /* nanosleep(), time() */
66
#include <time.h> /* nanosleep(), time(), sleep() */
67
67
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
68
68
SIOCSIFFLAGS, if_indextoname(),
69
69
if_nametoindex(), IF_NAMESIZE */
71
71
INET_ADDRSTRLEN, INET6_ADDRSTRLEN
73
73
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
74
getuid(), getgid(), setuid(),
74
getuid(), getgid(), seteuid(),
76
76
#include <arpa/inet.h> /* inet_pton(), htons */
77
77
#include <iso646.h> /* not, or, and */
78
78
#include <argp.h> /* struct argp_option, error_t, struct
82
82
#include <signal.h> /* sigemptyset(), sigaddset(),
83
83
sigaction(), SIGTERM, sig_atomic_t,
85
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_UNAVAILABLE,
86
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
87
89
#include <sys/klog.h> /* klogctl() */
142
146
.dh_bits = 1024, .priority = "SECURE256"
143
147
":!CTYPE-X.509:+CTYPE-OPENPGP" };
149
sig_atomic_t quit_now = 0;
150
int signal_received = 0;
146
153
* Make additional room in "buffer" for at least BUFFER_SIZE more
147
154
* bytes. "buffer_capacity" is how much is currently allocated,
474
481
static int init_gnutls_session(gnutls_session_t *session){
476
483
/* GnuTLS session creation */
477
ret = gnutls_init(session, GNUTLS_SERVER);
485
ret = gnutls_init(session, GNUTLS_SERVER);
489
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
478
490
if(ret != GNUTLS_E_SUCCESS){
479
491
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
480
492
safer_gnutls_strerror(ret));
485
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
498
ret = gnutls_priority_set_direct(*session, mc.priority, &err);
500
gnutls_deinit(*session);
503
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
486
504
if(ret != GNUTLS_E_SUCCESS){
487
505
fprintf(stderr, "Syntax error at: %s\n", err);
488
506
fprintf(stderr, "GnuTLS error: %s\n",
495
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
514
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
517
gnutls_deinit(*session);
520
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
497
521
if(ret != GNUTLS_E_SUCCESS){
498
522
fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
499
523
safer_gnutls_strerror(ret));
514
537
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
515
538
__attribute__((unused)) const char *txt){}
517
sig_atomic_t quit_now = 0;
518
int signal_received = 0;
520
540
/* Called when a Mandos server is found */
521
541
static int start_mandos_communication(const char *ip, uint16_t port,
522
542
AvahiIfIndex if_index,
544
int ret, tcp_sd = -1;
527
547
struct sockaddr_in in;
528
548
struct sockaddr_in6 in6;
530
550
char *buffer = NULL;
531
char *decrypted_buffer;
551
char *decrypted_buffer = NULL;
532
552
size_t buffer_length = 0;
533
553
size_t buffer_capacity = 0;
534
ssize_t decrypted_buffer_size;
537
556
gnutls_session_t session;
538
557
int pf; /* Protocol family */
592
630
if(if_index == AVAHI_IF_UNSPEC){
593
631
fprintf(stderr, "An IPv6 link-local address is incomplete"
594
632
" without a network interface\n");
597
636
/* Set the network interface number as scope */
598
637
to.in6.sin6_scope_id = (uint32_t)if_index;
638
687
if(af == AF_INET6){
639
688
ret = connect(tcp_sd, &to.in6, sizeof(to));
641
690
ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
693
if ((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
648
706
const char *out = mandos_protocol_version;
673
737
fprintf(stderr, "Establishing TLS session with %s\n", ip);
676
745
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
679
753
ret = gnutls_handshake(session);
680
758
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
682
760
if(ret != GNUTLS_E_SUCCESS){
715
805
case GNUTLS_E_AGAIN:
717
807
case GNUTLS_E_REHANDSHAKE:
719
809
ret = gnutls_handshake(session);
720
815
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
722
817
fprintf(stderr, "*** GnuTLS Re-handshake failed ***\n");
723
818
gnutls_perror(ret);
729
824
fprintf(stderr, "Unknown error while reading data from"
730
825
" encrypted session with Mandos server\n");
732
826
gnutls_bye(session, GNUTLS_SHUT_RDWR);
741
836
fprintf(stderr, "Closing TLS session\n");
744
gnutls_bye(session, GNUTLS_SHUT_RDWR);
845
ret = gnutls_bye(session, GNUTLS_SHUT_RDWR);
850
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
746
852
if(buffer_length > 0){
853
ssize_t decrypted_buffer_size;
747
854
decrypted_buffer_size = pgp_packet_decrypt(buffer,
749
856
&decrypted_buffer);
750
857
if(decrypted_buffer_size >= 0){
752
860
while(written < (size_t) decrypted_buffer_size){
753
866
ret = (int)fwrite(decrypted_buffer + written, 1,
754
867
(size_t)decrypted_buffer_size - written,
756
869
if(ret == 0 and ferror(stdout)){
758
872
fprintf(stderr, "Error writing encrypted data: %s\n",
759
873
strerror(errno));
764
878
written += (size_t)ret;
766
free(decrypted_buffer);
774
884
/* Shutdown procedure */
778
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
889
free(decrypted_buffer);
892
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
900
gnutls_deinit(session);
782
gnutls_deinit(session);
896
1024
errno = old_errno;
1028
* This function determines if a directory entry in /sys/class/net
1029
* corresponds to an acceptable network device.
1030
* (This function is passed to scandir(3) as a filter function.)
1032
int good_interface(const struct dirent *if_entry){
1034
char *flagname = NULL;
1035
if(if_entry->d_name[0] == '.'){
1038
int ret = asprintf(&flagname, "%s/%s/flags", sys_class_net,
1044
int flags_fd = (int)TEMP_FAILURE_RETRY(open(flagname, O_RDONLY));
1051
typedef short ifreq_flags; /* ifreq.ifr_flags in netdevice(7) */
1052
/* read line from flags_fd */
1053
ssize_t to_read = (sizeof(ifreq_flags)*2)+3; /* "0x1003\n" */
1054
char *flagstring = malloc((size_t)to_read+1); /* +1 for final \0 */
1055
flagstring[(size_t)to_read] = '\0';
1056
if(flagstring == NULL){
1062
ssret = (ssize_t)TEMP_FAILURE_RETRY(read(flags_fd, flagstring,
1079
tmpmax = strtoimax(flagstring, &tmp, 0);
1080
if(errno != 0 or tmp == flagstring or (*tmp != '\0'
1081
and not (isspace(*tmp)))
1082
or tmpmax != (ifreq_flags)tmpmax){
1084
fprintf(stderr, "Invalid flags \"%s\" for interface \"%s\"\n",
1085
flagstring, if_entry->d_name);
1091
ifreq_flags flags = (ifreq_flags)tmpmax;
1092
/* Reject the loopback device */
1093
if(flags & IFF_LOOPBACK){
1095
fprintf(stderr, "Rejecting loopback interface \"%s\"\n",
1100
/* Accept point-to-point devices only if connect_to is specified */
1101
if(connect_to != NULL and (flags & IFF_POINTOPOINT)){
1103
fprintf(stderr, "Accepting point-to-point interface \"%s\"\n",
1108
/* Otherwise, reject non-broadcast-capable devices */
1109
if(not (flags & IFF_BROADCAST)){
1111
fprintf(stderr, "Rejecting non-broadcast interface \"%s\"\n",
1116
/* Reject non-ARP interfaces (including dummy interfaces) */
1117
if(flags & IFF_NOARP){
1119
fprintf(stderr, "Rejecting non-ARP interface \"%s\"\n",
1124
/* Accept this device */
1126
fprintf(stderr, "Interface \"%s\" is acceptable\n",
899
1132
int main(int argc, char *argv[]){
900
1133
AvahiSServiceBrowser *sb = NULL;
903
1136
intmax_t tmpmax;
905
1138
int exitcode = EXIT_SUCCESS;
906
const char *interface = "eth0";
1139
const char *interface = "";
907
1140
struct ifreq network;
909
1142
bool take_down_interface = false;
912
char *connect_to = NULL;
913
1145
char tempdir[] = "/tmp/mandosXXXXXX";
914
1146
bool tempdir_created = false;
915
1147
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
920
1152
bool gpgme_initialized = false;
921
1153
float delay = 2.5f;
923
struct sigaction old_sigterm_action;
1155
struct sigaction old_sigterm_action = { .sa_handler = SIG_DFL };
924
1156
struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
1161
/* Lower any group privileges we might have, just to be safe */
1168
/* Lower user privileges (temporarily) */
927
1180
struct argp_option options[] = {
928
1181
{ .name = "debug", .key = 128,
957
1210
.arg = "SECONDS",
958
1211
.doc = "Maximum delay to wait for interface startup",
1214
* These reproduce what we would get without ARGP_NO_HELP
1216
{ .name = "help", .key = '?',
1217
.doc = "Give this help list", .group = -1 },
1218
{ .name = "usage", .key = -3,
1219
.doc = "Give a short usage message", .group = -1 },
1220
{ .name = "version", .key = 'V',
1221
.doc = "Print program version", .group = -1 },
960
1222
{ .name = NULL }
963
1225
error_t parse_opt(int key, char *arg,
964
1226
struct argp_state *state){
966
1229
case 128: /* --debug */
983
1246
tmpmax = strtoimax(arg, &tmp, 10);
984
1247
if(errno != 0 or tmp == arg or *tmp != '\0'
985
1248
or tmpmax != (typeof(mc.dh_bits))tmpmax){
986
fprintf(stderr, "Bad number of DH bits\n");
1249
argp_error(state, "Bad number of DH bits");
989
1251
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
996
1258
delay = strtof(arg, &tmp);
997
1259
if(errno != 0 or tmp == arg or *tmp != '\0'){
998
fprintf(stderr, "Bad delay\n");
1260
argp_error(state, "Bad delay");
1264
* These reproduce what we would get without ARGP_NO_HELP
1266
case '?': /* --help */
1267
argp_state_help(state, state->out_stream,
1268
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
1269
& ~(unsigned int)ARGP_HELP_EXIT_OK);
1270
case -3: /* --usage */
1271
argp_state_help(state, state->out_stream,
1272
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
1273
case 'V': /* --version */
1274
fprintf(state->out_stream, "%s\n", argp_program_version);
1275
exit(argp_err_exit_status);
1007
1278
return ARGP_ERR_UNKNOWN;
1012
1283
struct argp argp = { .options = options, .parser = parse_opt,
1013
1284
.args_doc = "",
1014
1285
.doc = "Mandos client -- Get and decrypt"
1015
1286
" passwords from a Mandos server" };
1016
ret = argp_parse(&argp, argc, argv, 0, 0, NULL);
1017
if(ret == ARGP_ERR_UNKNOWN){
1018
fprintf(stderr, "Unknown error while parsing arguments\n");
1019
exitcode = EXIT_FAILURE;
1287
ret = argp_parse(&argp, argc, argv,
1288
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
1295
perror("argp_parse");
1296
exitcode = EX_OSERR;
1299
exitcode = EX_USAGE;
1025
1305
avahi_set_log_function(empty_log);
1308
if(interface[0] == '\0'){
1309
struct dirent **direntries;
1310
ret = scandir(sys_class_net, &direntries, good_interface,
1313
/* Pick the first good interface */
1314
interface = strdup(direntries[0]->d_name);
1316
fprintf(stderr, "Using interface \"%s\"\n", interface);
1318
if(interface == NULL){
1321
exitcode = EXIT_FAILURE;
1327
fprintf(stderr, "Could not find a network interface\n");
1328
exitcode = EXIT_FAILURE;
1028
1333
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
1029
1334
from the signal handler */
1040
1345
ret = sigaddset(&sigterm_action.sa_mask, SIGINT);
1042
1347
perror("sigaddset");
1043
exitcode = EXIT_FAILURE;
1348
exitcode = EX_OSERR;
1046
1351
ret = sigaddset(&sigterm_action.sa_mask, SIGHUP);
1048
1353
perror("sigaddset");
1049
exitcode = EXIT_FAILURE;
1354
exitcode = EX_OSERR;
1052
1357
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
1054
1359
perror("sigaddset");
1055
exitcode = EXIT_FAILURE;
1058
ret = sigaction(SIGINT, &sigterm_action, &old_sigterm_action);
1060
perror("sigaction");
1061
exitcode = EXIT_FAILURE;
1064
ret = sigaction(SIGHUP, &sigterm_action, NULL);
1066
perror("sigaction");
1067
exitcode = EXIT_FAILURE;
1070
ret = sigaction(SIGTERM, &sigterm_action, NULL);
1072
perror("sigaction");
1073
exitcode = EXIT_FAILURE;
1360
exitcode = EX_OSERR;
1363
/* Need to check if the handler is SIG_IGN before handling:
1364
| [[info:libc:Initial Signal Actions]] |
1365
| [[info:libc:Basic Signal Handling]] |
1367
ret = sigaction(SIGINT, NULL, &old_sigterm_action);
1369
perror("sigaction");
1372
if(old_sigterm_action.sa_handler != SIG_IGN){
1373
ret = sigaction(SIGINT, &sigterm_action, NULL);
1375
perror("sigaction");
1376
exitcode = EX_OSERR;
1380
ret = sigaction(SIGHUP, NULL, &old_sigterm_action);
1382
perror("sigaction");
1385
if(old_sigterm_action.sa_handler != SIG_IGN){
1386
ret = sigaction(SIGHUP, &sigterm_action, NULL);
1388
perror("sigaction");
1389
exitcode = EX_OSERR;
1393
ret = sigaction(SIGTERM, NULL, &old_sigterm_action);
1395
perror("sigaction");
1398
if(old_sigterm_action.sa_handler != SIG_IGN){
1399
ret = sigaction(SIGTERM, &sigterm_action, NULL);
1401
perror("sigaction");
1402
exitcode = EX_OSERR;
1077
1407
/* If the interface is down, bring it up */
1078
if(interface[0] != '\0'){
1408
if(strcmp(interface, "none") != 0){
1079
1409
if_index = (AvahiIfIndex) if_nametoindex(interface);
1080
1410
if(if_index == 0){
1081
1411
fprintf(stderr, "No such interface: \"%s\"\n", interface);
1082
exitcode = EXIT_FAILURE;
1412
exitcode = EX_UNAVAILABLE;
1420
/* Re-raise priviliges */
1090
1427
#ifdef __linux__
1091
1428
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1092
messages to mess up the prompt */
1429
messages about the network interface to mess up the prompt */
1093
1430
ret = klogctl(8, NULL, 5);
1094
1431
bool restore_loglevel = true;
1133
1482
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1135
1484
take_down_interface = false;
1136
perror("ioctl SIOCSIFFLAGS");
1137
exitcode = EXIT_FAILURE;
1485
perror("ioctl SIOCSIFFLAGS +IFF_UP");
1486
exitcode = EX_OSERR;
1138
1487
#ifdef __linux__
1139
1488
if(restore_loglevel){
1140
1489
ret = klogctl(7, NULL, 0);
1282
ret = start_mandos_communication(address, port, if_index, af);
1284
exitcode = EXIT_FAILURE;
1634
while(not quit_now){
1635
ret = start_mandos_communication(address, port, if_index, af);
1636
if(quit_now or ret == 0){
1286
1643
exitcode = EXIT_SUCCESS;
1374
1732
/* Take down the network interface */
1375
1733
if(take_down_interface){
1376
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1734
/* Re-raise priviliges */
1378
perror("ioctl SIOCGIFFLAGS");
1379
} else if(network.ifr_flags & IFF_UP) {
1380
network.ifr_flags &= ~IFF_UP; /* clear flag */
1381
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1383
perror("ioctl SIOCSIFFLAGS");
1386
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1741
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1743
perror("ioctl SIOCGIFFLAGS");
1744
} else if(network.ifr_flags & IFF_UP) {
1745
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
1746
ret = ioctl(sd, SIOCSIFFLAGS, &network);
1748
perror("ioctl SIOCSIFFLAGS -IFF_UP");
1751
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1755
/* Lower privileges permanently */
1437
ret = sigaction(signal_received, &old_sigterm_action, NULL);
1809
sigemptyset(&old_sigterm_action.sa_mask);
1810
old_sigterm_action.sa_handler = SIG_DFL;
1811
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
1812
&old_sigterm_action,
1439
1815
perror("sigaction");
1441
raise(signal_received);
1818
ret = raise(signal_received);
1819
} while(ret != 0 and errno == EINTR);
1824
TEMP_FAILURE_RETRY(pause());
1444
1827
return exitcode;