To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/mandos-client.c
- browse files at revision 705
- compare with another revision
- download diff
- download tarball
- view history from revision 705
- Committer: Teddy Hogeborn
- Date: 2014-06-14 23:43:07 UTC
- Revision ID: teddy@recompile.se-20140614234307-i0mh9r2n4orkqtki
plugin-runner: Release memory and close FD's correctly in all cases.
* plugins.d/mandos-client.c (main): Init "direntries" to NULL. Close
"dir_fd" at fallback label. Do
not free "direntries" if
scandirat() or scandir() failed.
Do free(direntries) at fallback
label.
* plugins.d/mandos-client.c (main): Init "direntries" to NULL. Close
"dir_fd" at fallback label. Do
not free "direntries" if
scandirat() or scandir() failed.
Do free(direntries) at fallback
label.
- files added:
- .bzr-builddeb
- debian
- debian/po
- debian/source
- debian/upstream
- network-hooks.d
- files removed:
- ca.pem
- files renamed:
- server.py => mandos
- server.conf => mandos.conf
- plugbasedclient.c => plugin-runner.c
- plugins.d/mandosclient.c => plugins.d/mandos-client.c
- plugins.d/passprompt.c => plugins.d/password-prompt.c
- files modified:
- Makefile
added
removed
plugins.d/mandos-client.c
1
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
* Mandos client - get and decrypt data from a Mandos server
3
* Mandos-client - get and decrypt data from a Mandos server
4
4
*
5
5
* This program is partly derived from an example program for an Avahi
6
6
* service browser, downloaded from
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
12
* Copyright © 2008-2014 Teddy Hogeborn
13
* Copyright © 2008-2014 Björn Påhlsson
13
14
*
14
15
* This program is free software: you can redistribute it and/or
15
16
* modify it under the terms of the GNU General Public License as
25
26
* along with this program. If not, see
26
27
* <http://www.gnu.org/licenses/>.
27
28
*
28
* Contact the authors at <mandos@fukt.bsnet.se>.
29
* Contact the authors at <mandos@recompile.se>.
29
30
*/
30
31
31
32
/* Needed by GPGME, specifically gpgme_data_seek() */
33
#ifndef _LARGEFILE_SOURCE
32
34
#define _LARGEFILE_SOURCE
35
#endif /* not _LARGEFILE_SOURCE */
36
#ifndef _FILE_OFFSET_BITS
33
37
#define _FILE_OFFSET_BITS 64
34
35
#include <stdio.h>
36
#include <assert.h>
37
#include <stdlib.h>
38
#include <time.h>
39
#include <net/if.h> /* if_nametoindex */
40
38
#endif /* not _FILE_OFFSET_BITS */
39
40
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
41
42
#include <stdio.h> /* fprintf(), stderr, fwrite(),
43
stdout, ferror() */
44
#include <stdint.h> /* uint16_t, uint32_t, intptr_t */
45
#include <stddef.h> /* NULL, size_t, ssize_t */
46
#include <stdlib.h> /* free(), EXIT_SUCCESS, srand(),
47
strtof(), abort() */
48
#include <stdbool.h> /* bool, false, true */
49
#include <string.h> /* memset(), strcmp(), strlen(),
50
strerror(), asprintf(), strcpy() */
51
#include <sys/ioctl.h> /* ioctl */
52
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
53
sockaddr_in6, PF_INET6,
54
SOCK_STREAM, uid_t, gid_t, open(),
55
opendir(), DIR */
56
#include <sys/stat.h> /* open(), S_ISREG */
57
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
58
inet_pton(), connect(),
59
getnameinfo() */
60
#include <fcntl.h> /* open(), unlinkat() */
61
#include <dirent.h> /* opendir(), struct dirent, readdir()
62
*/
63
#include <inttypes.h> /* PRIu16, PRIdMAX, intmax_t,
64
strtoimax() */
65
#include <errno.h> /* perror(), errno,
66
program_invocation_short_name */
67
#include <time.h> /* nanosleep(), time(), sleep() */
68
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
69
SIOCSIFFLAGS, if_indextoname(),
70
if_nametoindex(), IF_NAMESIZE */
71
#include <netinet/in.h> /* IN6_IS_ADDR_LINKLOCAL,
72
INET_ADDRSTRLEN, INET6_ADDRSTRLEN
73
*/
74
#include <unistd.h> /* close(), SEEK_SET, off_t, write(),
75
getuid(), getgid(), seteuid(),
76
setgid(), pause(), _exit(),
77
unlinkat() */
78
#include <arpa/inet.h> /* inet_pton(), htons() */
79
#include <iso646.h> /* not, or, and */
80
#include <argp.h> /* struct argp_option, error_t, struct
81
argp_state, struct argp,
82
argp_parse(), ARGP_KEY_ARG,
83
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
84
#include <signal.h> /* sigemptyset(), sigaddset(),
85
sigaction(), SIGTERM, sig_atomic_t,
86
raise() */
87
#include <sysexits.h> /* EX_OSERR, EX_USAGE, EX_UNAVAILABLE,
88
EX_NOHOST, EX_IOERR, EX_PROTOCOL */
89
#include <sys/wait.h> /* waitpid(), WIFEXITED(),
90
WEXITSTATUS(), WTERMSIG() */
91
#include <grp.h> /* setgroups() */
92
#include <argz.h> /* argz_add_sep(), argz_next(),
93
argz_delete(), argz_append(),
94
argz_stringify(), argz_add(),
95
argz_count() */
96
#include <netdb.h> /* getnameinfo(), NI_NUMERICHOST,
97
EAI_SYSTEM, gai_strerror() */
98
99
#ifdef __linux__
100
#include <sys/klog.h> /* klogctl() */
101
#endif /* __linux__ */
102
103
/* Avahi */
104
/* All Avahi types, constants and functions
105
Avahi*, avahi_*,
106
AVAHI_* */
41
107
#include <avahi-core/core.h>
42
108
#include <avahi-core/lookup.h>
43
109
#include <avahi-core/log.h>
45
111
#include <avahi-common/malloc.h>
46
112
#include <avahi-common/error.h>
47
113
48
//mandos client part
49
#include <sys/types.h> /* socket(), inet_pton() */
50
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
51
struct in6_addr, inet_pton() */
52
#include <gnutls/gnutls.h> /* All GnuTLS stuff */
53
#include <gnutls/openpgp.h> /* GnuTLS with openpgp stuff */
54
55
#include <unistd.h> /* close() */
56
#include <netinet/in.h>
57
#include <stdbool.h> /* true */
58
#include <string.h> /* memset */
59
#include <arpa/inet.h> /* inet_pton() */
60
#include <iso646.h> /* not */
61
62
// gpgme
63
#include <errno.h> /* perror() */
64
#include <gpgme.h>
65
66
// getopt long
67
#include <getopt.h>
114
/* GnuTLS */
115
#include <gnutls/gnutls.h> /* All GnuTLS types, constants and
116
functions:
117
gnutls_*
118
init_gnutls_session(),
119
GNUTLS_* */
120
#include <gnutls/openpgp.h>
121
/* gnutls_certificate_set_openpgp_key_file(),
122
GNUTLS_OPENPGP_FMT_BASE64 */
123
124
/* GPGME */
125
#include <gpgme.h> /* All GPGME types, constants and
126
functions:
127
gpgme_*
128
GPGME_PROTOCOL_OpenPGP,
129
GPG_ERR_NO_* */
68
130
69
131
#define BUFFER_SIZE 256
70
#define DH_BITS 1024
71
132
72
static const char *certdir = "/conf/conf.d/mandos";
73
static const char *certfile = "openpgp-client.txt";
74
static const char *certkey = "openpgp-client-key.txt";
133
#define PATHDIR "/conf/conf.d/mandos"
134
#define SECKEY "seckey.txt"
135
#define PUBKEY "pubkey.txt"
136
#define HOOKDIR "/lib/mandos/network-hooks.d"
75
137
76
138
bool debug = false;
77
139
static const char mandos_protocol_version[] = "1";
140
const char *argp_program_version = "mandos-client " VERSION;
141
const char *argp_program_bug_address = "<mandos@recompile.se>";
142
static const char sys_class_net[] = "/sys/class/net";
143
char *connect_to = NULL;
144
const char *hookdir = HOOKDIR;
145
int hookdir_fd = -1;
146
uid_t uid = 65534;
147
gid_t gid = 65534;
148
149
/* Doubly linked list that need to be circularly linked when used */
150
typedef struct server{
151
const char *ip;
152
in_port_t port;
153
AvahiIfIndex if_index;
154
int af;
155
struct timespec last_seen;
156
struct server *next;
157
struct server *prev;
158
} server;
159
160
/* Used for passing in values through the Avahi callback functions */
78
161
typedef struct {
79
gnutls_session_t session;
162
AvahiServer *server;
80
163
gnutls_certificate_credentials_t cred;
164
unsigned int dh_bits;
81
165
gnutls_dh_params_t dh_params;
82
} encrypted_session;
83
84
85
static ssize_t pgp_packet_decrypt (char *packet, size_t packet_size,
86
char **new_packet,
87
const char *homedir){
88
gpgme_data_t dh_crypto, dh_plain;
166
const char *priority;
89
167
gpgme_ctx_t ctx;
168
server *current_server;
169
char *interfaces;
170
size_t interfaces_size;
171
} mandos_context;
172
173
/* global so signal handler can reach it*/
174
AvahiSimplePoll *simple_poll;
175
176
sig_atomic_t quit_now = 0;
177
int signal_received = 0;
178
179
/* Function to use when printing errors */
180
void perror_plus(const char *print_text){
181
int e = errno;
182
fprintf(stderr, "Mandos plugin %s: ",
183
program_invocation_short_name);
184
errno = e;
185
perror(print_text);
186
}
187
188
__attribute__((format (gnu_printf, 2, 3), nonnull))
189
int fprintf_plus(FILE *stream, const char *format, ...){
190
va_list ap;
191
va_start (ap, format);
192
193
TEMP_FAILURE_RETRY(fprintf(stream, "Mandos plugin %s: ",
194
program_invocation_short_name));
195
return (int)TEMP_FAILURE_RETRY(vfprintf(stream, format, ap));
196
}
197
198
/*
199
* Make additional room in "buffer" for at least BUFFER_SIZE more
200
* bytes. "buffer_capacity" is how much is currently allocated,
201
* "buffer_length" is how much is already used.
202
*/
203
__attribute__((nonnull, warn_unused_result))
204
size_t incbuffer(char **buffer, size_t buffer_length,
205
size_t buffer_capacity){
206
if(buffer_length + BUFFER_SIZE > buffer_capacity){
207
char *new_buf = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
208
if(new_buf == NULL){
209
int old_errno = errno;
210
free(*buffer);
211
errno = old_errno;
212
*buffer = NULL;
213
return 0;
214
}
215
*buffer = new_buf;
216
buffer_capacity += BUFFER_SIZE;
217
}
218
return buffer_capacity;
219
}
220
221
/* Add server to set of servers to retry periodically */
222
__attribute__((nonnull, warn_unused_result))
223
bool add_server(const char *ip, in_port_t port, AvahiIfIndex if_index,
224
int af, server **current_server){
225
int ret;
226
server *new_server = malloc(sizeof(server));
227
if(new_server == NULL){
228
perror_plus("malloc");
229
return false;
230
}
231
*new_server = (server){ .ip = strdup(ip),
232
.port = port,
233
.if_index = if_index,
234
.af = af };
235
if(new_server->ip == NULL){
236
perror_plus("strdup");
237
return false;
238
}
239
ret = clock_gettime(CLOCK_MONOTONIC, &(new_server->last_seen));
240
if(ret == -1){
241
perror_plus("clock_gettime");
242
return false;
243
}
244
/* Special case of first server */
245
if(*current_server == NULL){
246
new_server->next = new_server;
247
new_server->prev = new_server;
248
*current_server = new_server;
249
} else {
250
/* Place the new server last in the list */
251
new_server->next = *current_server;
252
new_server->prev = (*current_server)->prev;
253
new_server->prev->next = new_server;
254
(*current_server)->prev = new_server;
255
}
256
return true;
257
}
258
259
/*
260
* Initialize GPGME.
261
*/
262
__attribute__((nonnull, warn_unused_result))
263
static bool init_gpgme(const char * const seckey,
264
const char * const pubkey,
265
const char * const tempdir,
266
mandos_context *mc){
90
267
gpgme_error_t rc;
91
ssize_t ret;
92
ssize_t new_packet_capacity = 0;
93
ssize_t new_packet_length = 0;
94
268
gpgme_engine_info_t engine_info;
95
96
if (debug){
97
fprintf(stderr, "Trying to decrypt OpenPGP packet\n");
269
270
/*
271
* Helper function to insert pub and seckey to the engine keyring.
272
*/
273
bool import_key(const char * const filename){
274
int ret;
275
int fd;
276
gpgme_data_t pgp_data;
277
278
fd = (int)TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
279
if(fd == -1){
280
perror_plus("open");
281
return false;
282
}
283
284
rc = gpgme_data_new_from_fd(&pgp_data, fd);
285
if(rc != GPG_ERR_NO_ERROR){
286
fprintf_plus(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
287
gpgme_strsource(rc), gpgme_strerror(rc));
288
return false;
289
}
290
291
rc = gpgme_op_import(mc->ctx, pgp_data);
292
if(rc != GPG_ERR_NO_ERROR){
293
fprintf_plus(stderr, "bad gpgme_op_import: %s: %s\n",
294
gpgme_strsource(rc), gpgme_strerror(rc));
295
return false;
296
}
297
298
ret = (int)TEMP_FAILURE_RETRY(close(fd));
299
if(ret == -1){
300
perror_plus("close");
301
}
302
gpgme_data_release(pgp_data);
303
return true;
304
}
305
306
if(debug){
307
fprintf_plus(stderr, "Initializing GPGME\n");
98
308
}
99
309
100
310
/* Init GPGME */
101
311
gpgme_check_version(NULL);
102
312
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
103
if (rc != GPG_ERR_NO_ERROR){
104
fprintf(stderr, "bad gpgme_engine_check_version: %s: %s\n",
105
gpgme_strsource(rc), gpgme_strerror(rc));
106
return -1;
313
if(rc != GPG_ERR_NO_ERROR){
314
fprintf_plus(stderr, "bad gpgme_engine_check_version: %s: %s\n",
315
gpgme_strsource(rc), gpgme_strerror(rc));
316
return false;
107
317
}
108
318
109
/* Set GPGME home directory */
110
rc = gpgme_get_engine_info (&engine_info);
111
if (rc != GPG_ERR_NO_ERROR){
112
fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
113
gpgme_strsource(rc), gpgme_strerror(rc));
114
return -1;
319
/* Set GPGME home directory for the OpenPGP engine only */
320
rc = gpgme_get_engine_info(&engine_info);
321
if(rc != GPG_ERR_NO_ERROR){
322
fprintf_plus(stderr, "bad gpgme_get_engine_info: %s: %s\n",
323
gpgme_strsource(rc), gpgme_strerror(rc));
324
return false;
115
325
}
116
326
while(engine_info != NULL){
117
327
if(engine_info->protocol == GPGME_PROTOCOL_OpenPGP){
118
328
gpgme_set_engine_info(GPGME_PROTOCOL_OpenPGP,
119
engine_info->file_name, homedir);
329
engine_info->file_name, tempdir);
120
330
break;
121
331
}
122
332
engine_info = engine_info->next;
123
333
}
124
334
if(engine_info == NULL){
125
fprintf(stderr, "Could not set home dir to %s\n", homedir);
126
return -1;
127
}
128
129
/* Create new GPGME data buffer from packet buffer */
130
rc = gpgme_data_new_from_mem(&dh_crypto, packet, packet_size, 0);
131
if (rc != GPG_ERR_NO_ERROR){
132
fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
133
gpgme_strsource(rc), gpgme_strerror(rc));
335
fprintf_plus(stderr, "Could not set GPGME home dir to %s\n",
336
tempdir);
337
return false;
338
}
339
340
/* Create new GPGME "context" */
341
rc = gpgme_new(&(mc->ctx));
342
if(rc != GPG_ERR_NO_ERROR){
343
fprintf_plus(stderr, "Mandos plugin mandos-client: "
344
"bad gpgme_new: %s: %s\n", gpgme_strsource(rc),
345
gpgme_strerror(rc));
346
return false;
347
}
348
349
if(not import_key(pubkey) or not import_key(seckey)){
350
return false;
351
}
352
353
return true;
354
}
355
356
/*
357
* Decrypt OpenPGP data.
358
* Returns -1 on error
359
*/
360
__attribute__((nonnull, warn_unused_result))
361
static ssize_t pgp_packet_decrypt(const char *cryptotext,
362
size_t crypto_size,
363
char **plaintext,
364
mandos_context *mc){
365
gpgme_data_t dh_crypto, dh_plain;
366
gpgme_error_t rc;
367
ssize_t ret;
368
size_t plaintext_capacity = 0;
369
ssize_t plaintext_length = 0;
370
371
if(debug){
372
fprintf_plus(stderr, "Trying to decrypt OpenPGP data\n");
373
}
374
375
/* Create new GPGME data buffer from memory cryptotext */
376
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
377
0);
378
if(rc != GPG_ERR_NO_ERROR){
379
fprintf_plus(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
380
gpgme_strsource(rc), gpgme_strerror(rc));
134
381
return -1;
135
382
}
136
383
137
384
/* Create new empty GPGME data buffer for the plaintext */
138
385
rc = gpgme_data_new(&dh_plain);
139
if (rc != GPG_ERR_NO_ERROR){
140
fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
141
gpgme_strsource(rc), gpgme_strerror(rc));
142
return -1;
143
}
144
145
/* Create new GPGME "context" */
146
rc = gpgme_new(&ctx);
147
if (rc != GPG_ERR_NO_ERROR){
148
fprintf(stderr, "bad gpgme_new: %s: %s\n",
149
gpgme_strsource(rc), gpgme_strerror(rc));
150
return -1;
151
}
152
153
/* Decrypt data from the FILE pointer to the plaintext data
154
buffer */
155
rc = gpgme_op_decrypt(ctx, dh_crypto, dh_plain);
156
if (rc != GPG_ERR_NO_ERROR){
157
fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
158
gpgme_strsource(rc), gpgme_strerror(rc));
159
return -1;
160
}
161
162
if(debug){
163
fprintf(stderr, "Decryption of OpenPGP packet succeeded\n");
164
}
165
166
if (debug){
167
gpgme_decrypt_result_t result;
168
result = gpgme_op_decrypt_result(ctx);
169
if (result == NULL){
170
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
171
} else {
172
fprintf(stderr, "Unsupported algorithm: %s\n",
173
result->unsupported_algorithm);
174
fprintf(stderr, "Wrong key usage: %d\n",
175
result->wrong_key_usage);
176
if(result->file_name != NULL){
177
fprintf(stderr, "File name: %s\n", result->file_name);
178
}
179
gpgme_recipient_t recipient;
180
recipient = result->recipients;
181
if(recipient){
386
if(rc != GPG_ERR_NO_ERROR){
387
fprintf_plus(stderr, "Mandos plugin mandos-client: "
388
"bad gpgme_data_new: %s: %s\n",
389
gpgme_strsource(rc), gpgme_strerror(rc));
390
gpgme_data_release(dh_crypto);
391
return -1;
392
}
393
394
/* Decrypt data from the cryptotext data buffer to the plaintext
395
data buffer */
396
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
397
if(rc != GPG_ERR_NO_ERROR){
398
fprintf_plus(stderr, "bad gpgme_op_decrypt: %s: %s\n",
399
gpgme_strsource(rc), gpgme_strerror(rc));
400
plaintext_length = -1;
401
if(debug){
402
gpgme_decrypt_result_t result;
403
result = gpgme_op_decrypt_result(mc->ctx);
404
if(result == NULL){
405
fprintf_plus(stderr, "gpgme_op_decrypt_result failed\n");
406
} else {
407
fprintf_plus(stderr, "Unsupported algorithm: %s\n",
408
result->unsupported_algorithm);
409
fprintf_plus(stderr, "Wrong key usage: %u\n",
410
result->wrong_key_usage);
411
if(result->file_name != NULL){
412
fprintf_plus(stderr, "File name: %s\n", result->file_name);
413
}
414
gpgme_recipient_t recipient;
415
recipient = result->recipients;
182
416
while(recipient != NULL){
183
fprintf(stderr, "Public key algorithm: %s\n",
184
gpgme_pubkey_algo_name(recipient->pubkey_algo));
185
fprintf(stderr, "Key ID: %s\n", recipient->keyid);
186
fprintf(stderr, "Secret key available: %s\n",
187
recipient->status == GPG_ERR_NO_SECKEY
188
? "No" : "Yes");
417
fprintf_plus(stderr, "Public key algorithm: %s\n",
418
gpgme_pubkey_algo_name
419
(recipient->pubkey_algo));
420
fprintf_plus(stderr, "Key ID: %s\n", recipient->keyid);
421
fprintf_plus(stderr, "Secret key available: %s\n",
422
recipient->status == GPG_ERR_NO_SECKEY
423
? "No" : "Yes");
189
424
recipient = recipient->next;
190
425
}
191
426
}
192
427
}
428
goto decrypt_end;
193
429
}
194
430
195
/* Delete the GPGME FILE pointer cryptotext data buffer */
196
gpgme_data_release(dh_crypto);
431
if(debug){
432
fprintf_plus(stderr, "Decryption of OpenPGP data succeeded\n");
433
}
197
434
198
435
/* Seek back to the beginning of the GPGME plaintext data buffer */
199
if (gpgme_data_seek(dh_plain, (off_t) 0, SEEK_SET) == -1){
200
perror("pgpme_data_seek");
436
if(gpgme_data_seek(dh_plain, (off_t)0, SEEK_SET) == -1){
437
perror_plus("gpgme_data_seek");
438
plaintext_length = -1;
439
goto decrypt_end;
201
440
}
202
441
203
*new_packet = 0;
442
*plaintext = NULL;
204
443
while(true){
205
if (new_packet_length + BUFFER_SIZE > new_packet_capacity){
206
*new_packet = realloc(*new_packet,
207
(unsigned int)new_packet_capacity
208
+ BUFFER_SIZE);
209
if (*new_packet == NULL){
210
perror("realloc");
211
return -1;
212
}
213
new_packet_capacity += BUFFER_SIZE;
444
plaintext_capacity = incbuffer(plaintext,
445
(size_t)plaintext_length,
446
plaintext_capacity);
447
if(plaintext_capacity == 0){
448
perror_plus("incbuffer");
449
plaintext_length = -1;
450
goto decrypt_end;
214
451
}
215
452
216
ret = gpgme_data_read(dh_plain, *new_packet + new_packet_length,
453
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
217
454
BUFFER_SIZE);
218
455
/* Print the data, if any */
219
if (ret == 0){
456
if(ret == 0){
457
/* EOF */
220
458
break;
221
459
}
222
460
if(ret < 0){
223
perror("gpgme_data_read");
224
return -1;
225
}
226
new_packet_length += ret;
227
}
228
229
/* FIXME: check characters before printing to screen so to not print
230
terminal control characters */
231
/* if(debug){ */
232
/* fprintf(stderr, "decrypted password is: "); */
233
/* fwrite(*new_packet, 1, new_packet_length, stderr); */
234
/* fprintf(stderr, "\n"); */
235
/* } */
461
perror_plus("gpgme_data_read");
462
plaintext_length = -1;
463
goto decrypt_end;
464
}
465
plaintext_length += ret;
466
}
467
468
if(debug){
469
fprintf_plus(stderr, "Decrypted password is: ");
470
for(ssize_t i = 0; i < plaintext_length; i++){
471
fprintf(stderr, "%02hhX ", (*plaintext)[i]);
472
}
473
fprintf(stderr, "\n");
474
}
475
476
decrypt_end:
477
478
/* Delete the GPGME cryptotext data buffer */
479
gpgme_data_release(dh_crypto);
236
480
237
481
/* Delete the GPGME plaintext data buffer */
238
482
gpgme_data_release(dh_plain);
239
return new_packet_length;
483
return plaintext_length;
240
484
}
241
485
242
static const char * safer_gnutls_strerror (int value) {
243
const char *ret = gnutls_strerror (value);
244
if (ret == NULL)
486
__attribute__((warn_unused_result))
487
static const char *safer_gnutls_strerror(int value){
488
const char *ret = gnutls_strerror(value);
489
if(ret == NULL)
245
490
ret = "(unknown)";
246
491
return ret;
247
492
}
248
493
494
/* GnuTLS log function callback */
495
__attribute__((nonnull))
249
496
static void debuggnutls(__attribute__((unused)) int level,
250
497
const char* string){
251
fprintf(stderr, "%s", string);
498
fprintf_plus(stderr, "GnuTLS: %s", string);
252
499
}
253
500
254
static int initgnutls(encrypted_session *es){
255
const char *err;
501
__attribute__((nonnull, warn_unused_result))
502
static int init_gnutls_global(const char *pubkeyfilename,
503
const char *seckeyfilename,
504
mandos_context *mc){
256
505
int ret;
257
506
258
507
if(debug){
259
fprintf(stderr, "Initializing GnuTLS\n");
508
fprintf_plus(stderr, "Initializing GnuTLS\n");
260
509
}
261
262
if ((ret = gnutls_global_init ())
263
!= GNUTLS_E_SUCCESS) {
264
fprintf (stderr, "global_init: %s\n", safer_gnutls_strerror(ret));
510
511
ret = gnutls_global_init();
512
if(ret != GNUTLS_E_SUCCESS){
513
fprintf_plus(stderr, "GnuTLS global_init: %s\n",
514
safer_gnutls_strerror(ret));
265
515
return -1;
266
516
}
267
268
if (debug){
517
518
if(debug){
519
/* "Use a log level over 10 to enable all debugging options."
520
* - GnuTLS manual
521
*/
269
522
gnutls_global_set_log_level(11);
270
523
gnutls_global_set_log_function(debuggnutls);
271
524
}
272
525
273
/* openpgp credentials */
274
if ((ret = gnutls_certificate_allocate_credentials (&es->cred))
275
!= GNUTLS_E_SUCCESS) {
276
fprintf (stderr, "memory error: %s\n",
277
safer_gnutls_strerror(ret));
526
/* OpenPGP credentials */
527
ret = gnutls_certificate_allocate_credentials(&mc->cred);
528
if(ret != GNUTLS_E_SUCCESS){
529
fprintf_plus(stderr, "GnuTLS memory error: %s\n",
530
safer_gnutls_strerror(ret));
531
gnutls_global_deinit();
278
532
return -1;
279
533
}
280
534
281
535
if(debug){
282
fprintf(stderr, "Attempting to use OpenPGP certificate %s"
283
" and keyfile %s as GnuTLS credentials\n", certfile,
284
certkey);
536
fprintf_plus(stderr, "Attempting to use OpenPGP public key %s and"
537
" secret key %s as GnuTLS credentials\n",
538
pubkeyfilename,
539
seckeyfilename);
285
540
}
286
541
287
542
ret = gnutls_certificate_set_openpgp_key_file
288
(es->cred, certfile, certkey, GNUTLS_OPENPGP_FMT_BASE64);
289
if (ret != GNUTLS_E_SUCCESS) {
290
fprintf
291
(stderr, "Error[%d] while reading the OpenPGP key pair ('%s',"
292
" '%s')\n",
293
ret, certfile, certkey);
294
fprintf(stdout, "The Error is: %s\n",
295
safer_gnutls_strerror(ret));
296
return -1;
297
}
298
299
//GnuTLS server initialization
300
if ((ret = gnutls_dh_params_init (&es->dh_params))
301
!= GNUTLS_E_SUCCESS) {
302
fprintf (stderr, "Error in dh parameter initialization: %s\n",
303
safer_gnutls_strerror(ret));
304
return -1;
305
}
306
307
if ((ret = gnutls_dh_params_generate2 (es->dh_params, DH_BITS))
308
!= GNUTLS_E_SUCCESS) {
309
fprintf (stderr, "Error in prime generation: %s\n",
310
safer_gnutls_strerror(ret));
311
return -1;
312
}
313
314
gnutls_certificate_set_dh_params (es->cred, es->dh_params);
315
316
// GnuTLS session creation
317
if ((ret = gnutls_init (&es->session, GNUTLS_SERVER))
318
!= GNUTLS_E_SUCCESS){
319
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
320
safer_gnutls_strerror(ret));
321
}
322
323
if ((ret = gnutls_priority_set_direct (es->session, "NORMAL", &err))
324
!= GNUTLS_E_SUCCESS) {
325
fprintf(stderr, "Syntax error at: %s\n", err);
326
fprintf(stderr, "GnuTLS error: %s\n",
327
safer_gnutls_strerror(ret));
328
return -1;
329
}
330
331
if ((ret = gnutls_credentials_set
332
(es->session, GNUTLS_CRD_CERTIFICATE, es->cred))
333
!= GNUTLS_E_SUCCESS) {
334
fprintf(stderr, "Error setting a credentials set: %s\n",
335
safer_gnutls_strerror(ret));
543
(mc->cred, pubkeyfilename, seckeyfilename,
544
GNUTLS_OPENPGP_FMT_BASE64);
545
if(ret != GNUTLS_E_SUCCESS){
546
fprintf_plus(stderr,
547
"Error[%d] while reading the OpenPGP key pair ('%s',"
548
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
549
fprintf_plus(stderr, "The GnuTLS error is: %s\n",
550
safer_gnutls_strerror(ret));
551
goto globalfail;
552
}
553
554
/* GnuTLS server initialization */
555
ret = gnutls_dh_params_init(&mc->dh_params);
556
if(ret != GNUTLS_E_SUCCESS){
557
fprintf_plus(stderr, "Error in GnuTLS DH parameter"
558
" initialization: %s\n",
559
safer_gnutls_strerror(ret));
560
goto globalfail;
561
}
562
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
563
if(ret != GNUTLS_E_SUCCESS){
564
fprintf_plus(stderr, "Error in GnuTLS prime generation: %s\n",
565
safer_gnutls_strerror(ret));
566
goto globalfail;
567
}
568
569
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
570
571
return 0;
572
573
globalfail:
574
575
gnutls_certificate_free_credentials(mc->cred);
576
gnutls_global_deinit();
577
gnutls_dh_params_deinit(mc->dh_params);
578
return -1;
579
}
580
581
__attribute__((nonnull, warn_unused_result))
582
static int init_gnutls_session(gnutls_session_t *session,
583
mandos_context *mc){
584
int ret;
585
/* GnuTLS session creation */
586
do {
587
ret = gnutls_init(session, GNUTLS_SERVER);
588
if(quit_now){
589
return -1;
590
}
591
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
592
if(ret != GNUTLS_E_SUCCESS){
593
fprintf_plus(stderr,
594
"Error in GnuTLS session initialization: %s\n",
595
safer_gnutls_strerror(ret));
596
}
597
598
{
599
const char *err;
600
do {
601
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
602
if(quit_now){
603
gnutls_deinit(*session);
604
return -1;
605
}
606
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
607
if(ret != GNUTLS_E_SUCCESS){
608
fprintf_plus(stderr, "Syntax error at: %s\n", err);
609
fprintf_plus(stderr, "GnuTLS error: %s\n",
610
safer_gnutls_strerror(ret));
611
gnutls_deinit(*session);
612
return -1;
613
}
614
}
615
616
do {
617
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
618
mc->cred);
619
if(quit_now){
620
gnutls_deinit(*session);
621
return -1;
622
}
623
} while(ret == GNUTLS_E_INTERRUPTED or ret == GNUTLS_E_AGAIN);
624
if(ret != GNUTLS_E_SUCCESS){
625
fprintf_plus(stderr, "Error setting GnuTLS credentials: %s\n",
626
safer_gnutls_strerror(ret));
627
gnutls_deinit(*session);
336
628
return -1;
337
629
}
338
630
339
631
/* ignore client certificate if any. */
340
gnutls_certificate_server_set_request (es->session,
341
GNUTLS_CERT_IGNORE);
632
gnutls_certificate_server_set_request(*session, GNUTLS_CERT_IGNORE);
342
633
343
gnutls_dh_set_prime_bits (es->session, DH_BITS);
634
gnutls_dh_set_prime_bits(*session, mc->dh_bits);
344
635
345
636
return 0;
346
637
}
347
638
639
/* Avahi log function callback */
348
640
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
349
641
__attribute__((unused)) const char *txt){}
350
642
351
static int start_mandos_communication(const char *ip, uint16_t port,
352
AvahiIfIndex if_index){
353
int ret, tcp_sd;
354
struct sockaddr_in6 to;
355
encrypted_session es;
643
/* Called when a Mandos server is found */
644
__attribute__((nonnull, warn_unused_result))
645
static int start_mandos_communication(const char *ip, in_port_t port,
646
AvahiIfIndex if_index,
647
int af, mandos_context *mc){
648
int ret, tcp_sd = -1;
649
ssize_t sret;
650
struct sockaddr_storage to;
356
651
char *buffer = NULL;
357
char *decrypted_buffer;
652
char *decrypted_buffer = NULL;
358
653
size_t buffer_length = 0;
359
654
size_t buffer_capacity = 0;
360
ssize_t decrypted_buffer_size;
361
size_t written = 0;
362
int retval = 0;
363
char interface[IF_NAMESIZE];
364
365
if(debug){
366
fprintf(stderr, "Setting up a tcp connection to %s, port %d\n",
367
ip, port);
368
}
369
370
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
371
if(tcp_sd < 0) {
372
perror("socket");
373
return -1;
374
}
375
376
if(if_indextoname((unsigned int)if_index, interface) == NULL){
377
if(debug){
378
perror("if_indextoname");
379
}
380
return -1;
381
}
382
383
if(debug){
384
fprintf(stderr, "Binding to interface %s\n", interface);
385
}
386
387
memset(&to,0,sizeof(to)); /* Spurious warning */
388
to.sin6_family = AF_INET6;
389
ret = inet_pton(AF_INET6, ip, &to.sin6_addr);
390
if (ret < 0 ){
391
perror("inet_pton");
392
return -1;
393
}
655
size_t written;
656
int retval = -1;
657
gnutls_session_t session;
658
int pf; /* Protocol family */
659
660
errno = 0;
661
662
if(quit_now){
663
errno = EINTR;
664
return -1;
665
}
666
667
switch(af){
668
case AF_INET6:
669
pf = PF_INET6;
670
break;
671
case AF_INET:
672
pf = PF_INET;
673
break;
674
default:
675
fprintf_plus(stderr, "Bad address family: %d\n", af);
676
errno = EINVAL;
677
return -1;
678
}
679
680
/* If the interface is specified and we have a list of interfaces */
681
if(if_index != AVAHI_IF_UNSPEC and mc->interfaces != NULL){
682
/* Check if the interface is one of the interfaces we are using */
683
bool match = false;
684
{
685
char *interface = NULL;
686
while((interface=argz_next(mc->interfaces, mc->interfaces_size,
687
interface))){
688
if(if_nametoindex(interface) == (unsigned int)if_index){
689
match = true;
690
break;
691
}
692
}
693
}
694
if(not match){
695
/* This interface does not match any in the list, so we don't
696
connect to the server */
697
if(debug){
698
char interface[IF_NAMESIZE];
699
if(if_indextoname((unsigned int)if_index, interface) == NULL){
700
perror_plus("if_indextoname");
701
} else {
702
fprintf_plus(stderr, "Skipping server on non-used interface"
703
" \"%s\"\n",
704
if_indextoname((unsigned int)if_index,
705
interface));
706
}
707
}
708
return -1;
709
}
710
}
711
712
ret = init_gnutls_session(&session, mc);
713
if(ret != 0){
714
return -1;
715
}
716
717
if(debug){
718
fprintf_plus(stderr, "Setting up a TCP connection to %s, port %"
719
PRIuMAX "\n", ip, (uintmax_t)port);
720
}
721
722
tcp_sd = socket(pf, SOCK_STREAM, 0);
723
if(tcp_sd < 0){
724
int e = errno;
725
perror_plus("socket");
726
errno = e;
727
goto mandos_end;
728
}
729
730
if(quit_now){
731
errno = EINTR;
732
goto mandos_end;
733
}
734
735
memset(&to, 0, sizeof(to));
736
if(af == AF_INET6){
737
((struct sockaddr_in6 *)&to)->sin6_family = (sa_family_t)af;
738
ret = inet_pton(af, ip, &((struct sockaddr_in6 *)&to)->sin6_addr);
739
} else { /* IPv4 */
740
((struct sockaddr_in *)&to)->sin_family = (sa_family_t)af;
741
ret = inet_pton(af, ip, &((struct sockaddr_in *)&to)->sin_addr);
742
}
743
if(ret < 0 ){
744
int e = errno;
745
perror_plus("inet_pton");
746
errno = e;
747
goto mandos_end;
748
}
394
749
if(ret == 0){
395
fprintf(stderr, "Bad address: %s\n", ip);
396
return -1;
397
}
398
to.sin6_port = htons(port); /* Spurious warning */
399
400
to.sin6_scope_id = (uint32_t)if_index;
401
402
if(debug){
403
fprintf(stderr, "Connection to: %s, port %d\n", ip, port);
404
/* char addrstr[INET6_ADDRSTRLEN]; */
405
/* if(inet_ntop(to.sin6_family, &(to.sin6_addr), addrstr, */
406
/* sizeof(addrstr)) == NULL){ */
407
/* perror("inet_ntop"); */
408
/* } else { */
409
/* fprintf(stderr, "Really connecting to: %s, port %d\n", */
410
/* addrstr, ntohs(to.sin6_port)); */
411
/* } */
412
}
413
414
ret = connect(tcp_sd, (struct sockaddr *) &to, sizeof(to));
415
if (ret < 0){
416
perror("connect");
417
return -1;
418
}
419
420
ret = initgnutls (&es);
421
if (ret != 0){
422
retval = -1;
423
return -1;
424
}
425
426
gnutls_transport_set_ptr (es.session,
427
(gnutls_transport_ptr_t) tcp_sd);
428
429
if(debug){
430
fprintf(stderr, "Establishing TLS session with %s\n", ip);
431
}
432
433
ret = gnutls_handshake (es.session);
434
435
if (ret != GNUTLS_E_SUCCESS){
750
int e = errno;
751
fprintf_plus(stderr, "Bad address: %s\n", ip);
752
errno = e;
753
goto mandos_end;
754
}
755
if(af == AF_INET6){
756
((struct sockaddr_in6 *)&to)->sin6_port = htons(port);
757
if(IN6_IS_ADDR_LINKLOCAL
758
(&((struct sockaddr_in6 *)&to)->sin6_addr)){
759
if(if_index == AVAHI_IF_UNSPEC){
760
fprintf_plus(stderr, "An IPv6 link-local address is"
761
" incomplete without a network interface\n");
762
errno = EINVAL;
763
goto mandos_end;
764
}
765
/* Set the network interface number as scope */
766
((struct sockaddr_in6 *)&to)->sin6_scope_id = (uint32_t)if_index;
767
}
768
} else {
769
((struct sockaddr_in *)&to)->sin_port = htons(port);
770
}
771
772
if(quit_now){
773
errno = EINTR;
774
goto mandos_end;
775
}
776
777
if(debug){
778
if(af == AF_INET6 and if_index != AVAHI_IF_UNSPEC){
779
char interface[IF_NAMESIZE];
780
if(if_indextoname((unsigned int)if_index, interface) == NULL){
781
perror_plus("if_indextoname");
782
} else {
783
fprintf_plus(stderr, "Connection to: %s%%%s, port %" PRIuMAX
784
"\n", ip, interface, (uintmax_t)port);
785
}
786
} else {
787
fprintf_plus(stderr, "Connection to: %s, port %" PRIuMAX "\n",
788
ip, (uintmax_t)port);
789
}
790
char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
791
INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
792
if(af == AF_INET6){
793
ret = getnameinfo((struct sockaddr *)&to,
794
sizeof(struct sockaddr_in6),
795
addrstr, sizeof(addrstr), NULL, 0,
796
NI_NUMERICHOST);
797
} else {
798
ret = getnameinfo((struct sockaddr *)&to,
799
sizeof(struct sockaddr_in),
800
addrstr, sizeof(addrstr), NULL, 0,
801
NI_NUMERICHOST);
802
}
803
if(ret == EAI_SYSTEM){
804
perror_plus("getnameinfo");
805
} else if(ret != 0) {
806
fprintf_plus(stderr, "getnameinfo: %s", gai_strerror(ret));
807
} else if(strcmp(addrstr, ip) != 0){
808
fprintf_plus(stderr, "Canonical address form: %s\n", addrstr);
809
}
810
}
811
812
if(quit_now){
813
errno = EINTR;
814
goto mandos_end;
815
}
816
817
if(af == AF_INET6){
818
ret = connect(tcp_sd, (struct sockaddr *)&to,
819
sizeof(struct sockaddr_in6));
820
} else {
821
ret = connect(tcp_sd, (struct sockaddr *)&to, /* IPv4 */
822
sizeof(struct sockaddr_in));
823
}
824
if(ret < 0){
825
if((errno != ECONNREFUSED and errno != ENETUNREACH) or debug){
826
int e = errno;
827
perror_plus("connect");
828
errno = e;
829
}
830
goto mandos_end;
831
}
832
833
if(quit_now){
834
errno = EINTR;
835
goto mandos_end;
836
}
837
838
const char *out = mandos_protocol_version;
839
written = 0;
840
while(true){
841
size_t out_size = strlen(out);
842
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
843
out_size - written));
844
if(ret == -1){
845
int e = errno;
846
perror_plus("write");
847
errno = e;
848
goto mandos_end;
849
}
850
written += (size_t)ret;
851
if(written < out_size){
852
continue;
853
} else {
854
if(out == mandos_protocol_version){
855
written = 0;
856
out = "\r\n";
857
} else {
858
break;
859
}
860
}
861
862
if(quit_now){
863
errno = EINTR;
864
goto mandos_end;
865
}
866
}
867
868
if(debug){
869
fprintf_plus(stderr, "Establishing TLS session with %s\n", ip);
870
}
871
872
if(quit_now){
873
errno = EINTR;
874
goto mandos_end;
875
}
876
877
/* This casting via intptr_t is to eliminate warning about casting
878
an int to a pointer type. This is exactly how the GnuTLS Guile
879
function "set-session-transport-fd!" does it. */
880
gnutls_transport_set_ptr(session,
881
(gnutls_transport_ptr_t)(intptr_t)tcp_sd);
882
883
if(quit_now){
884
errno = EINTR;
885
goto mandos_end;
886
}
887
888
do {
889
ret = gnutls_handshake(session);
890
if(quit_now){
891
errno = EINTR;
892
goto mandos_end;
893
}
894
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
895
896
if(ret != GNUTLS_E_SUCCESS){
436
897
if(debug){
437
fprintf(stderr, "\n*** Handshake failed ***\n");
438
gnutls_perror (ret);
898
fprintf_plus(stderr, "*** GnuTLS Handshake failed ***\n");
899
gnutls_perror(ret);
439
900
}
440
retval = -1;
441
goto exit;
901
errno = EPROTO;
902
goto mandos_end;
442
903
}
443
904
444
//Retrieve OpenPGP packet that contains the wanted password
905
/* Read OpenPGP packet that contains the wanted password */
445
906
446
907
if(debug){
447
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
448
ip);
908
fprintf_plus(stderr, "Retrieving OpenPGP encrypted password from"
909
" %s\n", ip);
449
910
}
450
911
451
912
while(true){
452
if (buffer_length + BUFFER_SIZE > buffer_capacity){
453
buffer = realloc(buffer, buffer_capacity + BUFFER_SIZE);
454
if (buffer == NULL){
455
perror("realloc");
456
goto exit;
457
}
458
buffer_capacity += BUFFER_SIZE;
459
}
460
461
ret = gnutls_record_recv
462
(es.session, buffer+buffer_length, BUFFER_SIZE);
463
if (ret == 0){
913
914
if(quit_now){
915
errno = EINTR;
916
goto mandos_end;
917
}
918
919
buffer_capacity = incbuffer(&buffer, buffer_length,
920
buffer_capacity);
921
if(buffer_capacity == 0){
922
int e = errno;
923
perror_plus("incbuffer");
924
errno = e;
925
goto mandos_end;
926
}
927
928
if(quit_now){
929
errno = EINTR;
930
goto mandos_end;
931
}
932
933
sret = gnutls_record_recv(session, buffer+buffer_length,
934
BUFFER_SIZE);
935
if(sret == 0){
464
936
break;
465
937
}
466
if (ret < 0){
467
switch(ret){
938
if(sret < 0){
939
switch(sret){
468
940
case GNUTLS_E_INTERRUPTED:
469
941
case GNUTLS_E_AGAIN:
470
942
break;
471
943
case GNUTLS_E_REHANDSHAKE:
472
ret = gnutls_handshake (es.session);
473
if (ret < 0){
474
fprintf(stderr, "\n*** Handshake failed ***\n");
475
gnutls_perror (ret);
476
retval = -1;
477
goto exit;
944
do {
945
ret = gnutls_handshake(session);
946
947
if(quit_now){
948
errno = EINTR;
949
goto mandos_end;
950
}
951
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
952
if(ret < 0){
953
fprintf_plus(stderr, "*** GnuTLS Re-handshake failed "
954
"***\n");
955
gnutls_perror(ret);
956
errno = EPROTO;
957
goto mandos_end;
478
958
}
479
959
break;
480
960
default:
481
fprintf(stderr, "Unknown error while reading data from"
482
" encrypted session with mandos server\n");
483
retval = -1;
484
gnutls_bye (es.session, GNUTLS_SHUT_RDWR);
485
goto exit;
961
fprintf_plus(stderr, "Unknown error while reading data from"
962
" encrypted session with Mandos server\n");
963
gnutls_bye(session, GNUTLS_SHUT_RDWR);
964
errno = EIO;
965
goto mandos_end;
486
966
}
487
967
} else {
488
buffer_length += (size_t) ret;
489
}
490
}
491
492
if (buffer_length > 0){
493
decrypted_buffer_size = pgp_packet_decrypt(buffer,
494
buffer_length,
495
&decrypted_buffer,
496
certdir);
497
if (decrypted_buffer_size >= 0){
968
buffer_length += (size_t) sret;
969
}
970
}
971
972
if(debug){
973
fprintf_plus(stderr, "Closing TLS session\n");
974
}
975
976
if(quit_now){
977
errno = EINTR;
978
goto mandos_end;
979
}
980
981
do {
982
ret = gnutls_bye(session, GNUTLS_SHUT_RDWR);
983
if(quit_now){
984
errno = EINTR;
985
goto mandos_end;
986
}
987
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
988
989
if(buffer_length > 0){
990
ssize_t decrypted_buffer_size;
991
decrypted_buffer_size = pgp_packet_decrypt(buffer, buffer_length,
992
&decrypted_buffer, mc);
993
if(decrypted_buffer_size >= 0){
994
995
written = 0;
498
996
while(written < (size_t) decrypted_buffer_size){
499
ret = (int)fwrite (decrypted_buffer + written, 1,
500
(size_t)decrypted_buffer_size - written,
501
stdout);
997
if(quit_now){
998
errno = EINTR;
999
goto mandos_end;
1000
}
1001
1002
ret = (int)fwrite(decrypted_buffer + written, 1,
1003
(size_t)decrypted_buffer_size - written,
1004
stdout);
502
1005
if(ret == 0 and ferror(stdout)){
1006
int e = errno;
503
1007
if(debug){
504
fprintf(stderr, "Error writing encrypted data: %s\n",
505
strerror(errno));
1008
fprintf_plus(stderr, "Error writing encrypted data: %s\n",
1009
strerror(errno));
506
1010
}
507
retval = -1;
508
break;
1011
errno = e;
1012
goto mandos_end;
509
1013
}
510
1014
written += (size_t)ret;
511
1015
}
512
free(decrypted_buffer);
513
} else {
1016
retval = 0;
1017
}
1018
}
1019
1020
/* Shutdown procedure */
1021
1022
mandos_end:
1023
{
1024
int e = errno;
1025
free(decrypted_buffer);
1026
free(buffer);
1027
if(tcp_sd >= 0){
1028
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
1029
}
1030
if(ret == -1){
1031
if(e == 0){
1032
e = errno;
1033
}
1034
perror_plus("close");
1035
}
1036
gnutls_deinit(session);
1037
errno = e;
1038
if(quit_now){
1039
errno = EINTR;
514
1040
retval = -1;
515
1041
}
516
1042
}
517
518
//shutdown procedure
519
520
if(debug){
521
fprintf(stderr, "Closing TLS session\n");
522
}
523
524
free(buffer);
525
gnutls_bye (es.session, GNUTLS_SHUT_RDWR);
526
exit:
527
close(tcp_sd);
528
gnutls_deinit (es.session);
529
gnutls_certificate_free_credentials (es.cred);
530
gnutls_global_deinit ();
531
1043
return retval;
532
1044
}
533
1045
534
static AvahiSimplePoll *simple_poll = NULL;
535
static AvahiServer *server = NULL;
536
537
static void resolve_callback(
538
AvahiSServiceResolver *r,
539
AvahiIfIndex interface,
540
AVAHI_GCC_UNUSED AvahiProtocol protocol,
541
AvahiResolverEvent event,
542
const char *name,
543
const char *type,
544
const char *domain,
545
const char *host_name,
546
const AvahiAddress *address,
547
uint16_t port,
548
AVAHI_GCC_UNUSED AvahiStringList *txt,
549
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
550
AVAHI_GCC_UNUSED void* userdata) {
551
552
assert(r); /* Spurious warning */
1046
__attribute__((nonnull))
1047
static void resolve_callback(AvahiSServiceResolver *r,
1048
AvahiIfIndex interface,
1049
AvahiProtocol proto,
1050
AvahiResolverEvent event,
1051
const char *name,
1052
const char *type,
1053
const char *domain,
1054
const char *host_name,
1055
const AvahiAddress *address,
1056
uint16_t port,
1057
AVAHI_GCC_UNUSED AvahiStringList *txt,
1058
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1059
flags,
1060
void *mc){
1061
if(r == NULL){
1062
return;
1063
}
553
1064
554
1065
/* Called whenever a service has been resolved successfully or
555
1066
timed out */
556
1067
557
switch (event) {
1068
if(quit_now){
1069
return;
1070
}
1071
1072
switch(event){
558
1073
default:
559
1074
case AVAHI_RESOLVER_FAILURE:
560
fprintf(stderr, "(Resolver) Failed to resolve service '%s' of"
561
" type '%s' in domain '%s': %s\n", name, type, domain,
562
avahi_strerror(avahi_server_errno(server)));
1075
fprintf_plus(stderr, "(Avahi Resolver) Failed to resolve service "
1076
"'%s' of type '%s' in domain '%s': %s\n", name, type,
1077
domain,
1078
avahi_strerror(avahi_server_errno
1079
(((mandos_context*)mc)->server)));
563
1080
break;
564
1081
565
1082
case AVAHI_RESOLVER_FOUND:
567
1084
char ip[AVAHI_ADDRESS_STR_MAX];
568
1085
avahi_address_snprint(ip, sizeof(ip), address);
569
1086
if(debug){
570
fprintf(stderr, "Mandos server \"%s\" found on %s (%s) on"
571
" port %d\n", name, host_name, ip, port);
1087
fprintf_plus(stderr, "Mandos server \"%s\" found on %s (%s, %"
1088
PRIdMAX ") on port %" PRIu16 "\n", name,
1089
host_name, ip, (intmax_t)interface, port);
572
1090
}
573
int ret = start_mandos_communication(ip, port, interface);
574
if (ret == 0){
575
exit(EXIT_SUCCESS);
1091
int ret = start_mandos_communication(ip, (in_port_t)port,
1092
interface,
1093
avahi_proto_to_af(proto),
1094
mc);
1095
if(ret == 0){
1096
avahi_simple_poll_quit(simple_poll);
1097
} else {
1098
if(not add_server(ip, (in_port_t)port, interface,
1099
avahi_proto_to_af(proto),
1100
&((mandos_context*)mc)->current_server)){
1101
fprintf_plus(stderr, "Failed to add server \"%s\" to server"
1102
" list\n", name);
1103
}
576
1104
}
577
1105
}
578
1106
}
579
1107
avahi_s_service_resolver_free(r);
580
1108
}
581
1109
582
static void browse_callback(
583
AvahiSServiceBrowser *b,
584
AvahiIfIndex interface,
585
AvahiProtocol protocol,
586
AvahiBrowserEvent event,
587
const char *name,
588
const char *type,
589
const char *domain,
590
AVAHI_GCC_UNUSED AvahiLookupResultFlags flags,
591
void* userdata) {
592
593
AvahiServer *s = userdata;
594
assert(b); /* Spurious warning */
595
596
/* Called whenever a new services becomes available on the LAN or
597
is removed from the LAN */
598
599
switch (event) {
1110
static void browse_callback(AvahiSServiceBrowser *b,
1111
AvahiIfIndex interface,
1112
AvahiProtocol protocol,
1113
AvahiBrowserEvent event,
1114
const char *name,
1115
const char *type,
1116
const char *domain,
1117
AVAHI_GCC_UNUSED AvahiLookupResultFlags
1118
flags,
1119
void *mc){
1120
if(b == NULL){
1121
return;
1122
}
1123
1124
/* Called whenever a new services becomes available on the LAN or
1125
is removed from the LAN */
1126
1127
if(quit_now){
1128
return;
1129
}
1130
1131
switch(event){
1132
default:
1133
case AVAHI_BROWSER_FAILURE:
1134
1135
fprintf_plus(stderr, "(Avahi browser) %s\n",
1136
avahi_strerror(avahi_server_errno
1137
(((mandos_context*)mc)->server)));
1138
avahi_simple_poll_quit(simple_poll);
1139
return;
1140
1141
case AVAHI_BROWSER_NEW:
1142
/* We ignore the returned Avahi resolver object. In the callback
1143
function we free it. If the Avahi server is terminated before
1144
the callback function is called the Avahi server will free the
1145
resolver for us. */
1146
1147
if(avahi_s_service_resolver_new(((mandos_context*)mc)->server,
1148
interface, protocol, name, type,
1149
domain, protocol, 0,
1150
resolve_callback, mc) == NULL)
1151
fprintf_plus(stderr, "Avahi: Failed to resolve service '%s':"
1152
" %s\n", name,
1153
avahi_strerror(avahi_server_errno
1154
(((mandos_context*)mc)->server)));
1155
break;
1156
1157
case AVAHI_BROWSER_REMOVE:
1158
break;
1159
1160
case AVAHI_BROWSER_ALL_FOR_NOW:
1161
case AVAHI_BROWSER_CACHE_EXHAUSTED:
1162
if(debug){
1163
fprintf_plus(stderr, "No Mandos server found, still"
1164
" searching...\n");
1165
}
1166
break;
1167
}
1168
}
1169
1170
/* Signal handler that stops main loop after SIGTERM */
1171
static void handle_sigterm(int sig){
1172
if(quit_now){
1173
return;
1174
}
1175
quit_now = 1;
1176
signal_received = sig;
1177
int old_errno = errno;
1178
/* set main loop to exit */
1179
if(simple_poll != NULL){
1180
avahi_simple_poll_quit(simple_poll);
1181
}
1182
errno = old_errno;
1183
}
1184
1185
__attribute__((nonnull, warn_unused_result))
1186
bool get_flags(const char *ifname, struct ifreq *ifr){
1187
int ret;
1188
error_t ret_errno;
1189
1190
int s = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1191
if(s < 0){
1192
ret_errno = errno;
1193
perror_plus("socket");
1194
errno = ret_errno;
1195
return false;
1196
}
1197
strcpy(ifr->ifr_name, ifname);
1198
ret = ioctl(s, SIOCGIFFLAGS, ifr);
1199
if(ret == -1){
1200
if(debug){
1201
ret_errno = errno;
1202
perror_plus("ioctl SIOCGIFFLAGS");
1203
errno = ret_errno;
1204
}
1205
return false;
1206
}
1207
return true;
1208
}
1209
1210
__attribute__((nonnull, warn_unused_result))
1211
bool good_flags(const char *ifname, const struct ifreq *ifr){
1212
1213
/* Reject the loopback device */
1214
if(ifr->ifr_flags & IFF_LOOPBACK){
1215
if(debug){
1216
fprintf_plus(stderr, "Rejecting loopback interface \"%s\"\n",
1217
ifname);
1218
}
1219
return false;
1220
}
1221
/* Accept point-to-point devices only if connect_to is specified */
1222
if(connect_to != NULL and (ifr->ifr_flags & IFF_POINTOPOINT)){
1223
if(debug){
1224
fprintf_plus(stderr, "Accepting point-to-point interface"
1225
" \"%s\"\n", ifname);
1226
}
1227
return true;
1228
}
1229
/* Otherwise, reject non-broadcast-capable devices */
1230
if(not (ifr->ifr_flags & IFF_BROADCAST)){
1231
if(debug){
1232
fprintf_plus(stderr, "Rejecting non-broadcast interface"
1233
" \"%s\"\n", ifname);
1234
}
1235
return false;
1236
}
1237
/* Reject non-ARP interfaces (including dummy interfaces) */
1238
if(ifr->ifr_flags & IFF_NOARP){
1239
if(debug){
1240
fprintf_plus(stderr, "Rejecting non-ARP interface \"%s\"\n",
1241
ifname);
1242
}
1243
return false;
1244
}
1245
1246
/* Accept this device */
1247
if(debug){
1248
fprintf_plus(stderr, "Interface \"%s\" is good\n", ifname);
1249
}
1250
return true;
1251
}
1252
1253
/*
1254
* This function determines if a directory entry in /sys/class/net
1255
* corresponds to an acceptable network device.
1256
* (This function is passed to scandir(3) as a filter function.)
1257
*/
1258
__attribute__((nonnull, warn_unused_result))
1259
int good_interface(const struct dirent *if_entry){
1260
if(if_entry->d_name[0] == '.'){
1261
return 0;
1262
}
1263
1264
struct ifreq ifr;
1265
if(not get_flags(if_entry->d_name, &ifr)){
1266
if(debug){
1267
fprintf_plus(stderr, "Failed to get flags for interface "
1268
"\"%s\"\n", if_entry->d_name);
1269
}
1270
return 0;
1271
}
1272
1273
if(not good_flags(if_entry->d_name, &ifr)){
1274
return 0;
1275
}
1276
return 1;
1277
}
1278
1279
/*
1280
* This function determines if a network interface is up.
1281
*/
1282
__attribute__((nonnull, warn_unused_result))
1283
bool interface_is_up(const char *interface){
1284
struct ifreq ifr;
1285
if(not get_flags(interface, &ifr)){
1286
if(debug){
1287
fprintf_plus(stderr, "Failed to get flags for interface "
1288
"\"%s\"\n", interface);
1289
}
1290
return false;
1291
}
1292
1293
return (bool)(ifr.ifr_flags & IFF_UP);
1294
}
1295
1296
/*
1297
* This function determines if a network interface is running
1298
*/
1299
__attribute__((nonnull, warn_unused_result))
1300
bool interface_is_running(const char *interface){
1301
struct ifreq ifr;
1302
if(not get_flags(interface, &ifr)){
1303
if(debug){
1304
fprintf_plus(stderr, "Failed to get flags for interface "
1305
"\"%s\"\n", interface);
1306
}
1307
return false;
1308
}
1309
1310
return (bool)(ifr.ifr_flags & IFF_RUNNING);
1311
}
1312
1313
__attribute__((nonnull, pure, warn_unused_result))
1314
int notdotentries(const struct dirent *direntry){
1315
/* Skip "." and ".." */
1316
if(direntry->d_name[0] == '.'
1317
and (direntry->d_name[1] == '\0'
1318
or (direntry->d_name[1] == '.'
1319
and direntry->d_name[2] == '\0'))){
1320
return 0;
1321
}
1322
return 1;
1323
}
1324
1325
/* Is this directory entry a runnable program? */
1326
__attribute__((nonnull, warn_unused_result))
1327
int runnable_hook(const struct dirent *direntry){
1328
int ret;
1329
size_t sret;
1330
struct stat st;
1331
1332
if((direntry->d_name)[0] == '\0'){
1333
/* Empty name? */
1334
return 0;
1335
}
1336
1337
sret = strspn(direntry->d_name, "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
1338
"abcdefghijklmnopqrstuvwxyz"
1339
"0123456789"
1340
"_.-");
1341
if((direntry->d_name)[sret] != '\0'){
1342
/* Contains non-allowed characters */
1343
if(debug){
1344
fprintf_plus(stderr, "Ignoring hook \"%s\" with bad name\n",
1345
direntry->d_name);
1346
}
1347
return 0;
1348
}
1349
1350
ret = fstatat(hookdir_fd, direntry->d_name, &st, 0);
1351
if(ret == -1){
1352
if(debug){
1353
perror_plus("Could not stat hook");
1354
}
1355
return 0;
1356
}
1357
if(not (S_ISREG(st.st_mode))){
1358
/* Not a regular file */
1359
if(debug){
1360
fprintf_plus(stderr, "Ignoring hook \"%s\" - not a file\n",
1361
direntry->d_name);
1362
}
1363
return 0;
1364
}
1365
if(not (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH))){
1366
/* Not executable */
1367
if(debug){
1368
fprintf_plus(stderr, "Ignoring hook \"%s\" - not executable\n",
1369
direntry->d_name);
1370
}
1371
return 0;
1372
}
1373
if(debug){
1374
fprintf_plus(stderr, "Hook \"%s\" is acceptable\n",
1375
direntry->d_name);
1376
}
1377
return 1;
1378
}
1379
1380
__attribute__((nonnull, warn_unused_result))
1381
int avahi_loop_with_timeout(AvahiSimplePoll *s, int retry_interval,
1382
mandos_context *mc){
1383
int ret;
1384
struct timespec now;
1385
struct timespec waited_time;
1386
intmax_t block_time;
1387
1388
while(true){
1389
if(mc->current_server == NULL){
1390
if(debug){
1391
fprintf_plus(stderr, "Wait until first server is found."
1392
" No timeout!\n");
1393
}
1394
ret = avahi_simple_poll_iterate(s, -1);
1395
} else {
1396
if(debug){
1397
fprintf_plus(stderr, "Check current_server if we should run"
1398
" it, or wait\n");
1399
}
1400
/* the current time */
1401
ret = clock_gettime(CLOCK_MONOTONIC, &now);
1402
if(ret == -1){
1403
perror_plus("clock_gettime");
1404
return -1;
1405
}
1406
/* Calculating in ms how long time between now and server
1407
who we visted longest time ago. Now - last seen. */
1408
waited_time.tv_sec = (now.tv_sec
1409
- mc->current_server->last_seen.tv_sec);
1410
waited_time.tv_nsec = (now.tv_nsec
1411
- mc->current_server->last_seen.tv_nsec);
1412
/* total time is 10s/10,000ms.
1413
Converting to s from ms by dividing by 1,000,
1414
and ns to ms by dividing by 1,000,000. */
1415
block_time = ((retry_interval
1416
- ((intmax_t)waited_time.tv_sec * 1000))
1417
- ((intmax_t)waited_time.tv_nsec / 1000000));
1418
1419
if(debug){
1420
fprintf_plus(stderr, "Blocking for %" PRIdMAX " ms\n",
1421
block_time);
1422
}
1423
1424
if(block_time <= 0){
1425
ret = start_mandos_communication(mc->current_server->ip,
1426
mc->current_server->port,
1427
mc->current_server->if_index,
1428
mc->current_server->af, mc);
1429
if(ret == 0){
1430
avahi_simple_poll_quit(s);
1431
return 0;
1432
}
1433
ret = clock_gettime(CLOCK_MONOTONIC,
1434
&mc->current_server->last_seen);
1435
if(ret == -1){
1436
perror_plus("clock_gettime");
1437
return -1;
1438
}
1439
mc->current_server = mc->current_server->next;
1440
block_time = 0; /* Call avahi to find new Mandos
1441
servers, but don't block */
1442
}
1443
1444
ret = avahi_simple_poll_iterate(s, (int)block_time);
1445
}
1446
if(ret != 0){
1447
if(ret > 0 or errno != EINTR){
1448
return (ret != 1) ? ret : 0;
1449
}
1450
}
1451
}
1452
}
1453
1454
/* Set effective uid to 0, return errno */
1455
__attribute__((warn_unused_result))
1456
error_t raise_privileges(void){
1457
error_t old_errno = errno;
1458
error_t ret_errno = 0;
1459
if(seteuid(0) == -1){
1460
ret_errno = errno;
1461
perror_plus("seteuid");
1462
}
1463
errno = old_errno;
1464
return ret_errno;
1465
}
1466
1467
/* Set effective and real user ID to 0. Return errno. */
1468
__attribute__((warn_unused_result))
1469
error_t raise_privileges_permanently(void){
1470
error_t old_errno = errno;
1471
error_t ret_errno = raise_privileges();
1472
if(ret_errno != 0){
1473
errno = old_errno;
1474
return ret_errno;
1475
}
1476
if(setuid(0) == -1){
1477
ret_errno = errno;
1478
perror_plus("seteuid");
1479
}
1480
errno = old_errno;
1481
return ret_errno;
1482
}
1483
1484
/* Set effective user ID to unprivileged saved user ID */
1485
__attribute__((warn_unused_result))
1486
error_t lower_privileges(void){
1487
error_t old_errno = errno;
1488
error_t ret_errno = 0;
1489
if(seteuid(uid) == -1){
1490
ret_errno = errno;
1491
perror_plus("seteuid");
1492
}
1493
errno = old_errno;
1494
return ret_errno;
1495
}
1496
1497
/* Lower privileges permanently */
1498
__attribute__((warn_unused_result))
1499
error_t lower_privileges_permanently(void){
1500
error_t old_errno = errno;
1501
error_t ret_errno = 0;
1502
if(setuid(uid) == -1){
1503
ret_errno = errno;
1504
perror_plus("setuid");
1505
}
1506
errno = old_errno;
1507
return ret_errno;
1508
}
1509
1510
__attribute__((nonnull))
1511
void run_network_hooks(const char *mode, const char *interface,
1512
const float delay){
1513
struct dirent **direntries = NULL;
1514
if(hookdir_fd == -1){
1515
hookdir_fd = open(hookdir, O_RDONLY);
1516
if(hookdir_fd == -1){
1517
if(errno == ENOENT){
1518
if(debug){
1519
fprintf_plus(stderr, "Network hook directory \"%s\" not"
1520
" found\n", hookdir);
1521
}
1522
} else {
1523
perror_plus("open");
1524
}
1525
return;
1526
}
1527
}
1528
#ifdef __GLIBC__
1529
#if __GLIBC_PREREQ(2, 15)
1530
int numhooks = scandirat(hookdir_fd, ".", &direntries,
1531
runnable_hook, alphasort);
1532
#else /* not __GLIBC_PREREQ(2, 15) */
1533
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1534
alphasort);
1535
#endif /* not __GLIBC_PREREQ(2, 15) */
1536
#else /* not __GLIBC__ */
1537
int numhooks = scandir(hookdir, &direntries, runnable_hook,
1538
alphasort);
1539
#endif /* not __GLIBC__ */
1540
if(numhooks == -1){
1541
perror_plus("scandir");
1542
return;
1543
}
1544
struct dirent *direntry;
1545
int ret;
1546
int devnull = open("/dev/null", O_RDONLY);
1547
for(int i = 0; i < numhooks; i++){
1548
direntry = direntries[i];
1549
if(debug){
1550
fprintf_plus(stderr, "Running network hook \"%s\"\n",
1551
direntry->d_name);
1552
}
1553
pid_t hook_pid = fork();
1554
if(hook_pid == 0){
1555
/* Child */
1556
/* Raise privileges */
1557
if(raise_privileges_permanently() != 0){
1558
perror_plus("Failed to raise privileges");
1559
_exit(EX_NOPERM);
1560
}
1561
/* Set group */
1562
errno = 0;
1563
ret = setgid(0);
1564
if(ret == -1){
1565
perror_plus("setgid");
1566
_exit(EX_NOPERM);
1567
}
1568
/* Reset supplementary groups */
1569
errno = 0;
1570
ret = setgroups(0, NULL);
1571
if(ret == -1){
1572
perror_plus("setgroups");
1573
_exit(EX_NOPERM);
1574
}
1575
ret = dup2(devnull, STDIN_FILENO);
1576
if(ret == -1){
1577
perror_plus("dup2(devnull, STDIN_FILENO)");
1578
_exit(EX_OSERR);
1579
}
1580
ret = close(devnull);
1581
if(ret == -1){
1582
perror_plus("close");
1583
_exit(EX_OSERR);
1584
}
1585
ret = dup2(STDERR_FILENO, STDOUT_FILENO);
1586
if(ret == -1){
1587
perror_plus("dup2(STDERR_FILENO, STDOUT_FILENO)");
1588
_exit(EX_OSERR);
1589
}
1590
ret = setenv("MANDOSNETHOOKDIR", hookdir, 1);
1591
if(ret == -1){
1592
perror_plus("setenv");
1593
_exit(EX_OSERR);
1594
}
1595
ret = setenv("DEVICE", interface, 1);
1596
if(ret == -1){
1597
perror_plus("setenv");
1598
_exit(EX_OSERR);
1599
}
1600
ret = setenv("VERBOSITY", debug ? "1" : "0", 1);
1601
if(ret == -1){
1602
perror_plus("setenv");
1603
_exit(EX_OSERR);
1604
}
1605
ret = setenv("MODE", mode, 1);
1606
if(ret == -1){
1607
perror_plus("setenv");
1608
_exit(EX_OSERR);
1609
}
1610
char *delaystring;
1611
ret = asprintf(&delaystring, "%f", (double)delay);
1612
if(ret == -1){
1613
perror_plus("asprintf");
1614
_exit(EX_OSERR);
1615
}
1616
ret = setenv("DELAY", delaystring, 1);
1617
if(ret == -1){
1618
free(delaystring);
1619
perror_plus("setenv");
1620
_exit(EX_OSERR);
1621
}
1622
free(delaystring);
1623
if(connect_to != NULL){
1624
ret = setenv("CONNECT", connect_to, 1);
1625
if(ret == -1){
1626
perror_plus("setenv");
1627
_exit(EX_OSERR);
1628
}
1629
}
1630
int hook_fd = openat(hookdir_fd, direntry->d_name, O_RDONLY);
1631
if(hook_fd == -1){
1632
perror_plus("openat");
1633
_exit(EXIT_FAILURE);
1634
}
1635
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1636
perror_plus("close");
1637
_exit(EXIT_FAILURE);
1638
}
1639
if(fexecve(hook_fd, (char *const []){ direntry->d_name, NULL },
1640
environ) == -1){
1641
perror_plus("fexecve");
1642
_exit(EXIT_FAILURE);
1643
}
1644
} else {
1645
int status;
1646
if(TEMP_FAILURE_RETRY(waitpid(hook_pid, &status, 0)) == -1){
1647
perror_plus("waitpid");
1648
continue;
1649
}
1650
if(WIFEXITED(status)){
1651
if(WEXITSTATUS(status) != 0){
1652
fprintf_plus(stderr, "Warning: network hook \"%s\" exited"
1653
" with status %d\n", direntry->d_name,
1654
WEXITSTATUS(status));
1655
continue;
1656
}
1657
} else if(WIFSIGNALED(status)){
1658
fprintf_plus(stderr, "Warning: network hook \"%s\" died by"
1659
" signal %d\n", direntry->d_name,
1660
WTERMSIG(status));
1661
continue;
1662
} else {
1663
fprintf_plus(stderr, "Warning: network hook \"%s\""
1664
" crashed\n", direntry->d_name);
1665
continue;
1666
}
1667
}
1668
if(debug){
1669
fprintf_plus(stderr, "Network hook \"%s\" ran successfully\n",
1670
direntry->d_name);
1671
}
1672
}
1673
free(direntries);
1674
if((int)TEMP_FAILURE_RETRY(close(hookdir_fd)) == -1){
1675
perror_plus("close");
1676
} else {
1677
hookdir_fd = -1;
1678
}
1679
close(devnull);
1680
}
1681
1682
__attribute__((nonnull, warn_unused_result))
1683
error_t bring_up_interface(const char *const interface,
1684
const float delay){
1685
error_t old_errno = errno;
1686
int ret;
1687
struct ifreq network;
1688
unsigned int if_index = if_nametoindex(interface);
1689
if(if_index == 0){
1690
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1691
errno = old_errno;
1692
return ENXIO;
1693
}
1694
1695
if(quit_now){
1696
errno = old_errno;
1697
return EINTR;
1698
}
1699
1700
if(not interface_is_up(interface)){
1701
error_t ret_errno = 0, ioctl_errno = 0;
1702
if(not get_flags(interface, &network)){
1703
ret_errno = errno;
1704
fprintf_plus(stderr, "Failed to get flags for interface "
1705
"\"%s\"\n", interface);
1706
errno = old_errno;
1707
return ret_errno;
1708
}
1709
network.ifr_flags |= IFF_UP; /* set flag */
1710
1711
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1712
if(sd == -1){
1713
ret_errno = errno;
1714
perror_plus("socket");
1715
errno = old_errno;
1716
return ret_errno;
1717
}
1718
1719
if(quit_now){
1720
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1721
if(ret == -1){
1722
perror_plus("close");
1723
}
1724
errno = old_errno;
1725
return EINTR;
1726
}
1727
1728
if(debug){
1729
fprintf_plus(stderr, "Bringing up interface \"%s\"\n",
1730
interface);
1731
}
1732
1733
/* Raise privileges */
1734
ret_errno = raise_privileges();
1735
if(ret_errno != 0){
1736
perror_plus("Failed to raise privileges");
1737
}
1738
1739
#ifdef __linux__
1740
int ret_linux;
1741
bool restore_loglevel = false;
1742
if(ret_errno == 0){
1743
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1744
messages about the network interface to mess up the prompt */
1745
ret_linux = klogctl(8, NULL, 5);
1746
if(ret_linux == -1){
1747
perror_plus("klogctl");
1748
} else {
1749
restore_loglevel = true;
1750
}
1751
}
1752
#endif /* __linux__ */
1753
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1754
ioctl_errno = errno;
1755
#ifdef __linux__
1756
if(restore_loglevel){
1757
ret_linux = klogctl(7, NULL, 0);
1758
if(ret_linux == -1){
1759
perror_plus("klogctl");
1760
}
1761
}
1762
#endif /* __linux__ */
1763
1764
/* If raise_privileges() succeeded above */
1765
if(ret_errno == 0){
1766
/* Lower privileges */
1767
ret_errno = lower_privileges();
1768
if(ret_errno != 0){
1769
errno = ret_errno;
1770
perror_plus("Failed to lower privileges");
1771
}
1772
}
1773
1774
/* Close the socket */
1775
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1776
if(ret == -1){
1777
perror_plus("close");
1778
}
1779
1780
if(ret_setflags == -1){
1781
errno = ioctl_errno;
1782
perror_plus("ioctl SIOCSIFFLAGS +IFF_UP");
1783
errno = old_errno;
1784
return ioctl_errno;
1785
}
1786
} else if(debug){
1787
fprintf_plus(stderr, "Interface \"%s\" is already up; good\n",
1788
interface);
1789
}
1790
1791
/* Sleep checking until interface is running.
1792
Check every 0.25s, up to total time of delay */
1793
for(int i=0; i < delay * 4; i++){
1794
if(interface_is_running(interface)){
1795
break;
1796
}
1797
struct timespec sleeptime = { .tv_nsec = 250000000 };
1798
ret = nanosleep(&sleeptime, NULL);
1799
if(ret == -1 and errno != EINTR){
1800
perror_plus("nanosleep");
1801
}
1802
}
1803
1804
errno = old_errno;
1805
return 0;
1806
}
1807
1808
__attribute__((nonnull, warn_unused_result))
1809
error_t take_down_interface(const char *const interface){
1810
error_t old_errno = errno;
1811
struct ifreq network;
1812
unsigned int if_index = if_nametoindex(interface);
1813
if(if_index == 0){
1814
fprintf_plus(stderr, "No such interface: \"%s\"\n", interface);
1815
errno = old_errno;
1816
return ENXIO;
1817
}
1818
if(interface_is_up(interface)){
1819
error_t ret_errno = 0, ioctl_errno = 0;
1820
if(not get_flags(interface, &network) and debug){
1821
ret_errno = errno;
1822
fprintf_plus(stderr, "Failed to get flags for interface "
1823
"\"%s\"\n", interface);
1824
errno = old_errno;
1825
return ret_errno;
1826
}
1827
network.ifr_flags &= ~(short)IFF_UP; /* clear flag */
1828
1829
int sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1830
if(sd == -1){
1831
ret_errno = errno;
1832
perror_plus("socket");
1833
errno = old_errno;
1834
return ret_errno;
1835
}
1836
1837
if(debug){
1838
fprintf_plus(stderr, "Taking down interface \"%s\"\n",
1839
interface);
1840
}
1841
1842
/* Raise privileges */
1843
ret_errno = raise_privileges();
1844
if(ret_errno != 0){
1845
perror_plus("Failed to raise privileges");
1846
}
1847
1848
int ret_setflags = ioctl(sd, SIOCSIFFLAGS, &network);
1849
ioctl_errno = errno;
1850
1851
/* If raise_privileges() succeeded above */
1852
if(ret_errno == 0){
1853
/* Lower privileges */
1854
ret_errno = lower_privileges();
1855
if(ret_errno != 0){
1856
errno = ret_errno;
1857
perror_plus("Failed to lower privileges");
1858
}
1859
}
1860
1861
/* Close the socket */
1862
int ret = (int)TEMP_FAILURE_RETRY(close(sd));
1863
if(ret == -1){
1864
perror_plus("close");
1865
}
1866
1867
if(ret_setflags == -1){
1868
errno = ioctl_errno;
1869
perror_plus("ioctl SIOCSIFFLAGS -IFF_UP");
1870
errno = old_errno;
1871
return ioctl_errno;
1872
}
1873
} else if(debug){
1874
fprintf_plus(stderr, "Interface \"%s\" is already down; odd\n",
1875
interface);
1876
}
1877
1878
errno = old_errno;
1879
return 0;
1880
}
1881
1882
int main(int argc, char *argv[]){
1883
mandos_context mc = { .server = NULL, .dh_bits = 1024,
1884
.priority = "SECURE256:!CTYPE-X.509:"
1885
"+CTYPE-OPENPGP", .current_server = NULL,
1886
.interfaces = NULL, .interfaces_size = 0 };
1887
AvahiSServiceBrowser *sb = NULL;
1888
error_t ret_errno;
1889
int ret;
1890
intmax_t tmpmax;
1891
char *tmp;
1892
int exitcode = EXIT_SUCCESS;
1893
char *interfaces_to_take_down = NULL;
1894
size_t interfaces_to_take_down_size = 0;
1895
char run_tempdir[] = "/run/tmp/mandosXXXXXX";
1896
char old_tempdir[] = "/tmp/mandosXXXXXX";
1897
char *tempdir = NULL;
1898
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
1899
const char *seckey = PATHDIR "/" SECKEY;
1900
const char *pubkey = PATHDIR "/" PUBKEY;
1901
char *interfaces_hooks = NULL;
1902
1903
bool gnutls_initialized = false;
1904
bool gpgme_initialized = false;
1905
float delay = 2.5f;
1906
double retry_interval = 10; /* 10s between trying a server and
1907
retrying the same server again */
1908
1909
struct sigaction old_sigterm_action = { .sa_handler = SIG_DFL };
1910
struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
1911
1912
uid = getuid();
1913
gid = getgid();
1914
1915
/* Lower any group privileges we might have, just to be safe */
1916
errno = 0;
1917
ret = setgid(gid);
1918
if(ret == -1){
1919
perror_plus("setgid");
1920
}
1921
1922
/* Lower user privileges (temporarily) */
1923
errno = 0;
1924
ret = seteuid(uid);
1925
if(ret == -1){
1926
perror_plus("seteuid");
1927
}
1928
1929
if(quit_now){
1930
goto end;
1931
}
1932
1933
{
1934
struct argp_option options[] = {
1935
{ .name = "debug", .key = 128,
1936
.doc = "Debug mode", .group = 3 },
1937
{ .name = "connect", .key = 'c',
1938
.arg = "ADDRESS:PORT",
1939
.doc = "Connect directly to a specific Mandos server",
1940
.group = 1 },
1941
{ .name = "interface", .key = 'i',
1942
.arg = "NAME",
1943
.doc = "Network interface that will be used to search for"
1944
" Mandos servers",
1945
.group = 1 },
1946
{ .name = "seckey", .key = 's',
1947
.arg = "FILE",
1948
.doc = "OpenPGP secret key file base name",
1949
.group = 1 },
1950
{ .name = "pubkey", .key = 'p',
1951
.arg = "FILE",
1952
.doc = "OpenPGP public key file base name",
1953
.group = 2 },
1954
{ .name = "dh-bits", .key = 129,
1955
.arg = "BITS",
1956
.doc = "Bit length of the prime number used in the"
1957
" Diffie-Hellman key exchange",
1958
.group = 2 },
1959
{ .name = "priority", .key = 130,
1960
.arg = "STRING",
1961
.doc = "GnuTLS priority string for the TLS handshake",
1962
.group = 1 },
1963
{ .name = "delay", .key = 131,
1964
.arg = "SECONDS",
1965
.doc = "Maximum delay to wait for interface startup",
1966
.group = 2 },
1967
{ .name = "retry", .key = 132,
1968
.arg = "SECONDS",
1969
.doc = "Retry interval used when denied by the Mandos server",
1970
.group = 2 },
1971
{ .name = "network-hook-dir", .key = 133,
1972
.arg = "DIR",
1973
.doc = "Directory where network hooks are located",
1974
.group = 2 },
1975
/*
1976
* These reproduce what we would get without ARGP_NO_HELP
1977
*/
1978
{ .name = "help", .key = '?',
1979
.doc = "Give this help list", .group = -1 },
1980
{ .name = "usage", .key = -3,
1981
.doc = "Give a short usage message", .group = -1 },
1982
{ .name = "version", .key = 'V',
1983
.doc = "Print program version", .group = -1 },
1984
{ .name = NULL }
1985
};
1986
1987
error_t parse_opt(int key, char *arg,
1988
struct argp_state *state){
1989
errno = 0;
1990
switch(key){
1991
case 128: /* --debug */
1992
debug = true;
1993
break;
1994
case 'c': /* --connect */
1995
connect_to = arg;
1996
break;
1997
case 'i': /* --interface */
1998
ret_errno = argz_add_sep(&mc.interfaces, &mc.interfaces_size,
1999
arg, (int)',');
2000
if(ret_errno != 0){
2001
argp_error(state, "%s", strerror(ret_errno));
2002
}
2003
break;
2004
case 's': /* --seckey */
2005
seckey = arg;
2006
break;
2007
case 'p': /* --pubkey */
2008
pubkey = arg;
2009
break;
2010
case 129: /* --dh-bits */
2011
errno = 0;
2012
tmpmax = strtoimax(arg, &tmp, 10);
2013
if(errno != 0 or tmp == arg or *tmp != '\0'
2014
or tmpmax != (typeof(mc.dh_bits))tmpmax){
2015
argp_error(state, "Bad number of DH bits");
2016
}
2017
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
2018
break;
2019
case 130: /* --priority */
2020
mc.priority = arg;
2021
break;
2022
case 131: /* --delay */
2023
errno = 0;
2024
delay = strtof(arg, &tmp);
2025
if(errno != 0 or tmp == arg or *tmp != '\0'){
2026
argp_error(state, "Bad delay");
2027
}
2028
case 132: /* --retry */
2029
errno = 0;
2030
retry_interval = strtod(arg, &tmp);
2031
if(errno != 0 or tmp == arg or *tmp != '\0'
2032
or (retry_interval * 1000) > INT_MAX
2033
or retry_interval < 0){
2034
argp_error(state, "Bad retry interval");
2035
}
2036
break;
2037
case 133: /* --network-hook-dir */
2038
hookdir = arg;
2039
break;
2040
/*
2041
* These reproduce what we would get without ARGP_NO_HELP
2042
*/
2043
case '?': /* --help */
2044
argp_state_help(state, state->out_stream,
2045
(ARGP_HELP_STD_HELP | ARGP_HELP_EXIT_ERR)
2046
& ~(unsigned int)ARGP_HELP_EXIT_OK);
2047
case -3: /* --usage */
2048
argp_state_help(state, state->out_stream,
2049
ARGP_HELP_USAGE | ARGP_HELP_EXIT_ERR);
2050
case 'V': /* --version */
2051
fprintf_plus(state->out_stream, "%s\n", argp_program_version);
2052
exit(argp_err_exit_status);
2053
break;
2054
default:
2055
return ARGP_ERR_UNKNOWN;
2056
}
2057
return errno;
2058
}
2059
2060
struct argp argp = { .options = options, .parser = parse_opt,
2061
.args_doc = "",
2062
.doc = "Mandos client -- Get and decrypt"
2063
" passwords from a Mandos server" };
2064
ret = argp_parse(&argp, argc, argv,
2065
ARGP_IN_ORDER | ARGP_NO_HELP, 0, NULL);
2066
switch(ret){
2067
case 0:
2068
break;
2069
case ENOMEM:
600
2070
default:
601
case AVAHI_BROWSER_FAILURE:
602
603
fprintf(stderr, "(Browser) %s\n",
604
avahi_strerror(avahi_server_errno(server)));
605
avahi_simple_poll_quit(simple_poll);
606
return;
607
608
case AVAHI_BROWSER_NEW:
609
/* We ignore the returned resolver object. In the callback
610
function we free it. If the server is terminated before
611
the callback function is called the server will free
612
the resolver for us. */
613
614
if (!(avahi_s_service_resolver_new(s, interface, protocol, name,
615
type, domain,
616
AVAHI_PROTO_INET6, 0,
617
resolve_callback, s)))
618
fprintf(stderr, "Failed to resolve service '%s': %s\n", name,
619
avahi_strerror(avahi_server_errno(s)));
620
break;
621
622
case AVAHI_BROWSER_REMOVE:
623
break;
624
625
case AVAHI_BROWSER_ALL_FOR_NOW:
626
case AVAHI_BROWSER_CACHE_EXHAUSTED:
627
break;
628
}
629
}
630
631
/* Combines file name and path and returns the malloced new
632
string. some sane checks could/should be added */
633
static const char *combinepath(const char *first, const char *second){
634
size_t f_len = strlen(first);
635
size_t s_len = strlen(second);
636
char *tmp = malloc(f_len + s_len + 2);
637
if (tmp == NULL){
638
return NULL;
639
}
640
if(f_len > 0){
641
memcpy(tmp, first, f_len);
642
}
643
tmp[f_len] = '/';
644
if(s_len > 0){
645
memcpy(tmp + f_len + 1, second, s_len);
646
}
647
tmp[f_len + 1 + s_len] = '\0';
648
return tmp;
649
}
650
651
652
int main(AVAHI_GCC_UNUSED int argc, AVAHI_GCC_UNUSED char*argv[]) {
2071
errno = ret;
2072
perror_plus("argp_parse");
2073
exitcode = EX_OSERR;
2074
goto end;
2075
case EINVAL:
2076
exitcode = EX_USAGE;
2077
goto end;
2078
}
2079
}
2080
2081
{
2082
/* Work around Debian bug #633582:
2083
<http://bugs.debian.org/633582> */
2084
2085
/* Re-raise privileges */
2086
ret_errno = raise_privileges();
2087
if(ret_errno != 0){
2088
errno = ret_errno;
2089
perror_plus("Failed to raise privileges");
2090
} else {
2091
struct stat st;
2092
2093
if(strcmp(seckey, PATHDIR "/" SECKEY) == 0){
2094
int seckey_fd = open(seckey, O_RDONLY);
2095
if(seckey_fd == -1){
2096
perror_plus("open");
2097
} else {
2098
ret = (int)TEMP_FAILURE_RETRY(fstat(seckey_fd, &st));
2099
if(ret == -1){
2100
perror_plus("fstat");
2101
} else {
2102
if(S_ISREG(st.st_mode)
2103
and st.st_uid == 0 and st.st_gid == 0){
2104
ret = fchown(seckey_fd, uid, gid);
2105
if(ret == -1){
2106
perror_plus("fchown");
2107
}
2108
}
2109
}
2110
TEMP_FAILURE_RETRY(close(seckey_fd));
2111
}
2112
}
2113
2114
if(strcmp(pubkey, PATHDIR "/" PUBKEY) == 0){
2115
int pubkey_fd = open(pubkey, O_RDONLY);
2116
if(pubkey_fd == -1){
2117
perror_plus("open");
2118
} else {
2119
ret = (int)TEMP_FAILURE_RETRY(fstat(pubkey_fd, &st));
2120
if(ret == -1){
2121
perror_plus("fstat");
2122
} else {
2123
if(S_ISREG(st.st_mode)
2124
and st.st_uid == 0 and st.st_gid == 0){
2125
ret = fchown(pubkey_fd, uid, gid);
2126
if(ret == -1){
2127
perror_plus("fchown");
2128
}
2129
}
2130
}
2131
TEMP_FAILURE_RETRY(close(pubkey_fd));
2132
}
2133
}
2134
2135
/* Lower privileges */
2136
ret_errno = lower_privileges();
2137
if(ret_errno != 0){
2138
errno = ret_errno;
2139
perror_plus("Failed to lower privileges");
2140
}
2141
}
2142
}
2143
2144
/* Remove invalid interface names (except "none") */
2145
{
2146
char *interface = NULL;
2147
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2148
interface))){
2149
if(strcmp(interface, "none") != 0
2150
and if_nametoindex(interface) == 0){
2151
if(interface[0] != '\0'){
2152
fprintf_plus(stderr, "Not using nonexisting interface"
2153
" \"%s\"\n", interface);
2154
}
2155
argz_delete(&mc.interfaces, &mc.interfaces_size, interface);
2156
interface = NULL;
2157
}
2158
}
2159
}
2160
2161
/* Run network hooks */
2162
{
2163
if(mc.interfaces != NULL){
2164
interfaces_hooks = malloc(mc.interfaces_size);
2165
if(interfaces_hooks == NULL){
2166
perror_plus("malloc");
2167
goto end;
2168
}
2169
memcpy(interfaces_hooks, mc.interfaces, mc.interfaces_size);
2170
argz_stringify(interfaces_hooks, mc.interfaces_size, (int)',');
2171
}
2172
run_network_hooks("start", interfaces_hooks != NULL ?
2173
interfaces_hooks : "", delay);
2174
}
2175
2176
if(not debug){
2177
avahi_set_log_function(empty_log);
2178
}
2179
2180
/* Initialize Avahi early so avahi_simple_poll_quit() can be called
2181
from the signal handler */
2182
/* Initialize the pseudo-RNG for Avahi */
2183
srand((unsigned int) time(NULL));
2184
simple_poll = avahi_simple_poll_new();
2185
if(simple_poll == NULL){
2186
fprintf_plus(stderr,
2187
"Avahi: Failed to create simple poll object.\n");
2188
exitcode = EX_UNAVAILABLE;
2189
goto end;
2190
}
2191
2192
sigemptyset(&sigterm_action.sa_mask);
2193
ret = sigaddset(&sigterm_action.sa_mask, SIGINT);
2194
if(ret == -1){
2195
perror_plus("sigaddset");
2196
exitcode = EX_OSERR;
2197
goto end;
2198
}
2199
ret = sigaddset(&sigterm_action.sa_mask, SIGHUP);
2200
if(ret == -1){
2201
perror_plus("sigaddset");
2202
exitcode = EX_OSERR;
2203
goto end;
2204
}
2205
ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
2206
if(ret == -1){
2207
perror_plus("sigaddset");
2208
exitcode = EX_OSERR;
2209
goto end;
2210
}
2211
/* Need to check if the handler is SIG_IGN before handling:
2212
| [[info:libc:Initial Signal Actions]] |
2213
| [[info:libc:Basic Signal Handling]] |
2214
*/
2215
ret = sigaction(SIGINT, NULL, &old_sigterm_action);
2216
if(ret == -1){
2217
perror_plus("sigaction");
2218
return EX_OSERR;
2219
}
2220
if(old_sigterm_action.sa_handler != SIG_IGN){
2221
ret = sigaction(SIGINT, &sigterm_action, NULL);
2222
if(ret == -1){
2223
perror_plus("sigaction");
2224
exitcode = EX_OSERR;
2225
goto end;
2226
}
2227
}
2228
ret = sigaction(SIGHUP, NULL, &old_sigterm_action);
2229
if(ret == -1){
2230
perror_plus("sigaction");
2231
return EX_OSERR;
2232
}
2233
if(old_sigterm_action.sa_handler != SIG_IGN){
2234
ret = sigaction(SIGHUP, &sigterm_action, NULL);
2235
if(ret == -1){
2236
perror_plus("sigaction");
2237
exitcode = EX_OSERR;
2238
goto end;
2239
}
2240
}
2241
ret = sigaction(SIGTERM, NULL, &old_sigterm_action);
2242
if(ret == -1){
2243
perror_plus("sigaction");
2244
return EX_OSERR;
2245
}
2246
if(old_sigterm_action.sa_handler != SIG_IGN){
2247
ret = sigaction(SIGTERM, &sigterm_action, NULL);
2248
if(ret == -1){
2249
perror_plus("sigaction");
2250
exitcode = EX_OSERR;
2251
goto end;
2252
}
2253
}
2254
2255
/* If no interfaces were specified, make a list */
2256
if(mc.interfaces == NULL){
2257
struct dirent **direntries = NULL;
2258
/* Look for any good interfaces */
2259
ret = scandir(sys_class_net, &direntries, good_interface,
2260
alphasort);
2261
if(ret >= 1){
2262
/* Add all found interfaces to interfaces list */
2263
for(int i = 0; i < ret; ++i){
2264
ret_errno = argz_add(&mc.interfaces, &mc.interfaces_size,
2265
direntries[i]->d_name);
2266
if(ret_errno != 0){
2267
errno = ret_errno;
2268
perror_plus("argz_add");
2269
continue;
2270
}
2271
if(debug){
2272
fprintf_plus(stderr, "Will use interface \"%s\"\n",
2273
direntries[i]->d_name);
2274
}
2275
}
2276
free(direntries);
2277
} else {
2278
if(ret == 0){
2279
free(direntries);
2280
}
2281
fprintf_plus(stderr, "Could not find a network interface\n");
2282
exitcode = EXIT_FAILURE;
2283
goto end;
2284
}
2285
}
2286
2287
/* Bring up interfaces which are down, and remove any "none"s */
2288
{
2289
char *interface = NULL;
2290
while((interface = argz_next(mc.interfaces, mc.interfaces_size,
2291
interface))){
2292
/* If interface name is "none", stop bringing up interfaces.
2293
Also remove all instances of "none" from the list */
2294
if(strcmp(interface, "none") == 0){
2295
argz_delete(&mc.interfaces, &mc.interfaces_size,
2296
interface);
2297
interface = NULL;
2298
while((interface = argz_next(mc.interfaces,
2299
mc.interfaces_size, interface))){
2300
if(strcmp(interface, "none") == 0){
2301
argz_delete(&mc.interfaces, &mc.interfaces_size,
2302
interface);
2303
interface = NULL;
2304
}
2305
}
2306
break;
2307
}
2308
bool interface_was_up = interface_is_up(interface);
2309
errno = bring_up_interface(interface, delay);
2310
if(not interface_was_up){
2311
if(errno != 0){
2312
perror_plus("Failed to bring up interface");
2313
} else {
2314
errno = argz_add(&interfaces_to_take_down,
2315
&interfaces_to_take_down_size,
2316
interface);
2317
if(errno != 0){
2318
perror_plus("argz_add");
2319
}
2320
}
2321
}
2322
}
2323
if(debug and (interfaces_to_take_down == NULL)){
2324
fprintf_plus(stderr, "No interfaces were brought up\n");
2325
}
2326
}
2327
2328
/* If we only got one interface, explicitly use only that one */
2329
if(argz_count(mc.interfaces, mc.interfaces_size) == 1){
2330
if(debug){
2331
fprintf_plus(stderr, "Using only interface \"%s\"\n",
2332
mc.interfaces);
2333
}
2334
if_index = (AvahiIfIndex)if_nametoindex(mc.interfaces);
2335
}
2336
2337
if(quit_now){
2338
goto end;
2339
}
2340
2341
ret = init_gnutls_global(pubkey, seckey, &mc);
2342
if(ret == -1){
2343
fprintf_plus(stderr, "init_gnutls_global failed\n");
2344
exitcode = EX_UNAVAILABLE;
2345
goto end;
2346
} else {
2347
gnutls_initialized = true;
2348
}
2349
2350
if(quit_now){
2351
goto end;
2352
}
2353
2354
/* Try /run/tmp before /tmp */
2355
tempdir = mkdtemp(run_tempdir);
2356
if(tempdir == NULL and errno == ENOENT){
2357
if(debug){
2358
fprintf_plus(stderr, "Tempdir %s did not work, trying %s\n",
2359
run_tempdir, old_tempdir);
2360
}
2361
tempdir = mkdtemp(old_tempdir);
2362
}
2363
if(tempdir == NULL){
2364
perror_plus("mkdtemp");
2365
goto end;
2366
}
2367
2368
if(quit_now){
2369
goto end;
2370
}
2371
2372
if(not init_gpgme(pubkey, seckey, tempdir, &mc)){
2373
fprintf_plus(stderr, "init_gpgme failed\n");
2374
exitcode = EX_UNAVAILABLE;
2375
goto end;
2376
} else {
2377
gpgme_initialized = true;
2378
}
2379
2380
if(quit_now){
2381
goto end;
2382
}
2383
2384
if(connect_to != NULL){
2385
/* Connect directly, do not use Zeroconf */
2386
/* (Mainly meant for debugging) */
2387
char *address = strrchr(connect_to, ':');
2388
2389
if(address == NULL){
2390
fprintf_plus(stderr, "No colon in address\n");
2391
exitcode = EX_USAGE;
2392
goto end;
2393
}
2394
2395
if(quit_now){
2396
goto end;
2397
}
2398
2399
in_port_t port;
2400
errno = 0;
2401
tmpmax = strtoimax(address+1, &tmp, 10);
2402
if(errno != 0 or tmp == address+1 or *tmp != '\0'
2403
or tmpmax != (in_port_t)tmpmax){
2404
fprintf_plus(stderr, "Bad port number\n");
2405
exitcode = EX_USAGE;
2406
goto end;
2407
}
2408
2409
if(quit_now){
2410
goto end;
2411
}
2412
2413
port = (in_port_t)tmpmax;
2414
*address = '\0';
2415
/* Colon in address indicates IPv6 */
2416
int af;
2417
if(strchr(connect_to, ':') != NULL){
2418
af = AF_INET6;
2419
/* Accept [] around IPv6 address - see RFC 5952 */
2420
if(connect_to[0] == '[' and address[-1] == ']')
2421
{
2422
connect_to++;
2423
address[-1] = '\0';
2424
}
2425
} else {
2426
af = AF_INET;
2427
}
2428
address = connect_to;
2429
2430
if(quit_now){
2431
goto end;
2432
}
2433
2434
while(not quit_now){
2435
ret = start_mandos_communication(address, port, if_index, af,
2436
&mc);
2437
if(quit_now or ret == 0){
2438
break;
2439
}
2440
if(debug){
2441
fprintf_plus(stderr, "Retrying in %d seconds\n",
2442
(int)retry_interval);
2443
}
2444
sleep((unsigned int)retry_interval);
2445
}
2446
2447
if(not quit_now){
2448
exitcode = EXIT_SUCCESS;
2449
}
2450
2451
goto end;
2452
}
2453
2454
if(quit_now){
2455
goto end;
2456
}
2457
2458
{
653
2459
AvahiServerConfig config;
654
AvahiSServiceBrowser *sb = NULL;
655
int error;
656
int ret;
657
int returncode = EXIT_SUCCESS;
658
const char *interface = NULL;
659
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
660
char *connect_to = NULL;
661
662
while (true){
663
static struct option long_options[] = {
664
{"debug", no_argument, (int *)&debug, 1},
665
{"connect", required_argument, 0, 'C'},
666
{"interface", required_argument, 0, 'i'},
667
{"certdir", required_argument, 0, 'd'},
668
{"certkey", required_argument, 0, 'c'},
669
{"certfile", required_argument, 0, 'k'},
670
{0, 0, 0, 0} };
671
672
int option_index = 0;
673
ret = getopt_long (argc, argv, "i:", long_options,
674
&option_index);
675
676
if (ret == -1){
677
break;
678
}
679
680
switch(ret){
681
case 0:
682
break;
683
case 'i':
684
interface = optarg;
685
break;
686
case 'C':
687
connect_to = optarg;
688
break;
689
case 'd':
690
certdir = optarg;
691
break;
692
case 'c':
693
certfile = optarg;
694
break;
695
case 'k':
696
certkey = optarg;
697
break;
698
default:
699
exit(EXIT_FAILURE);
700
}
701
}
702
703
certfile = combinepath(certdir, certfile);
704
if (certfile == NULL){
705
perror("combinepath");
706
goto exit;
707
}
708
709
if(interface != NULL){
710
if_index = (AvahiIfIndex) if_nametoindex(interface);
711
if(if_index == 0){
712
fprintf(stderr, "No such interface: \"%s\"\n", interface);
713
exit(EXIT_FAILURE);
714
}
715
}
716
717
if(connect_to != NULL){
718
/* Connect directly, do not use Zeroconf */
719
/* (Mainly meant for debugging) */
720
char *address = strrchr(connect_to, ':');
721
if(address == NULL){
722
fprintf(stderr, "No colon in address\n");
723
exit(EXIT_FAILURE);
724
}
725
errno = 0;
726
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
727
if(errno){
728
perror("Bad port number");
729
exit(EXIT_FAILURE);
730
}
731
*address = '\0';
732
address = connect_to;
733
ret = start_mandos_communication(address, port, if_index);
734
if(ret < 0){
735
exit(EXIT_FAILURE);
736
} else {
737
exit(EXIT_SUCCESS);
738
}
739
}
740
741
certkey = combinepath(certdir, certkey);
742
if (certkey == NULL){
743
perror("combinepath");
744
goto exit;
745
}
746
747
if (not debug){
748
avahi_set_log_function(empty_log);
749
}
750
751
/* Initialize the psuedo-RNG */
752
srand((unsigned int) time(NULL));
753
754
/* Allocate main loop object */
755
if (!(simple_poll = avahi_simple_poll_new())) {
756
fprintf(stderr, "Failed to create simple poll object.\n");
757
758
goto exit;
759
}
760
761
/* Do not publish any local records */
2460
/* Do not publish any local Zeroconf records */
762
2461
avahi_server_config_init(&config);
763
2462
config.publish_hinfo = 0;
764
2463
config.publish_addresses = 0;
765
2464
config.publish_workstation = 0;
766
2465
config.publish_domain = 0;
767
2466
768
2467
/* Allocate a new server */
769
server = avahi_server_new(avahi_simple_poll_get(simple_poll),
770
&config, NULL, NULL, &error);
771
772
/* Free the configuration data */
2468
mc.server = avahi_server_new(avahi_simple_poll_get(simple_poll),
2469
&config, NULL, NULL, &ret_errno);
2470
2471
/* Free the Avahi configuration data */
773
2472
avahi_server_config_free(&config);
774
775
/* Check if creating the server object succeeded */
776
if (!server) {
777
fprintf(stderr, "Failed to create server: %s\n",
778
avahi_strerror(error));
779
returncode = EXIT_FAILURE;
780
goto exit;
781
}
782
783
/* Create the service browser */
784
sb = avahi_s_service_browser_new(server, if_index,
785
AVAHI_PROTO_INET6,
786
"_mandos._tcp", NULL, 0,
787
browse_callback, server);
788
if (!sb) {
789
fprintf(stderr, "Failed to create service browser: %s\n",
790
avahi_strerror(avahi_server_errno(server)));
791
returncode = EXIT_FAILURE;
792
goto exit;
793
}
794
795
/* Run the main loop */
796
797
if (debug){
798
fprintf(stderr, "Starting avahi loop search\n");
799
}
800
801
avahi_simple_poll_loop(simple_poll);
802
803
exit:
804
805
if (debug){
806
fprintf(stderr, "%s exiting\n", argv[0]);
807
}
808
809
/* Cleanup things */
810
if (sb)
811
avahi_s_service_browser_free(sb);
812
813
if (server)
814
avahi_server_free(server);
815
816
if (simple_poll)
817
avahi_simple_poll_free(simple_poll);
818
free(certfile);
819
free(certkey);
820
821
return returncode;
2473
}
2474
2475
/* Check if creating the Avahi server object succeeded */
2476
if(mc.server == NULL){
2477
fprintf_plus(stderr, "Failed to create Avahi server: %s\n",
2478
avahi_strerror(ret_errno));
2479
exitcode = EX_UNAVAILABLE;
2480
goto end;
2481
}
2482
2483
if(quit_now){
2484
goto end;
2485
}
2486
2487
/* Create the Avahi service browser */
2488
sb = avahi_s_service_browser_new(mc.server, if_index,
2489
AVAHI_PROTO_UNSPEC, "_mandos._tcp",
2490
NULL, 0, browse_callback,
2491
(void *)&mc);
2492
if(sb == NULL){
2493
fprintf_plus(stderr, "Failed to create service browser: %s\n",
2494
avahi_strerror(avahi_server_errno(mc.server)));
2495
exitcode = EX_UNAVAILABLE;
2496
goto end;
2497
}
2498
2499
if(quit_now){
2500
goto end;
2501
}
2502
2503
/* Run the main loop */
2504
2505
if(debug){
2506
fprintf_plus(stderr, "Starting Avahi loop search\n");
2507
}
2508
2509
ret = avahi_loop_with_timeout(simple_poll,
2510
(int)(retry_interval * 1000), &mc);
2511
if(debug){
2512
fprintf_plus(stderr, "avahi_loop_with_timeout exited %s\n",
2513
(ret == 0) ? "successfully" : "with error");
2514
}
2515
2516
end:
2517
2518
if(debug){
2519
fprintf_plus(stderr, "%s exiting\n", argv[0]);
2520
}
2521
2522
/* Cleanup things */
2523
free(mc.interfaces);
2524
2525
if(sb != NULL)
2526
avahi_s_service_browser_free(sb);
2527
2528
if(mc.server != NULL)
2529
avahi_server_free(mc.server);
2530
2531
if(simple_poll != NULL)
2532
avahi_simple_poll_free(simple_poll);
2533
2534
if(gnutls_initialized){
2535
gnutls_certificate_free_credentials(mc.cred);
2536
gnutls_global_deinit();
2537
gnutls_dh_params_deinit(mc.dh_params);
2538
}
2539
2540
if(gpgme_initialized){
2541
gpgme_release(mc.ctx);
2542
}
2543
2544
/* Cleans up the circular linked list of Mandos servers the client
2545
has seen */
2546
if(mc.current_server != NULL){
2547
mc.current_server->prev->next = NULL;
2548
while(mc.current_server != NULL){
2549
server *next = mc.current_server->next;
2550
free(mc.current_server);
2551
mc.current_server = next;
2552
}
2553
}
2554
2555
/* Re-raise privileges */
2556
{
2557
ret_errno = raise_privileges();
2558
if(ret_errno != 0){
2559
perror_plus("Failed to raise privileges");
2560
} else {
2561
2562
/* Run network hooks */
2563
run_network_hooks("stop", interfaces_hooks != NULL ?
2564
interfaces_hooks : "", delay);
2565
2566
/* Take down the network interfaces which were brought up */
2567
{
2568
char *interface = NULL;
2569
while((interface=argz_next(interfaces_to_take_down,
2570
interfaces_to_take_down_size,
2571
interface))){
2572
ret_errno = take_down_interface(interface);
2573
if(ret_errno != 0){
2574
errno = ret_errno;
2575
perror_plus("Failed to take down interface");
2576
}
2577
}
2578
if(debug and (interfaces_to_take_down == NULL)){
2579
fprintf_plus(stderr, "No interfaces needed to be taken"
2580
" down\n");
2581
}
2582
}
2583
}
2584
2585
ret_errno = lower_privileges_permanently();
2586
if(ret_errno != 0){
2587
perror_plus("Failed to lower privileges permanently");
2588
}
2589
}
2590
2591
free(interfaces_to_take_down);
2592
free(interfaces_hooks);
2593
2594
/* Removes the GPGME temp directory and all files inside */
2595
if(tempdir != NULL){
2596
struct dirent **direntries = NULL;
2597
int tempdir_fd = (int)TEMP_FAILURE_RETRY(open(tempdir, O_RDONLY |
2598
O_NOFOLLOW));
2599
if(tempdir_fd == -1){
2600
perror_plus("open");
2601
} else {
2602
#ifdef __GLIBC__
2603
#if __GLIBC_PREREQ(2, 15)
2604
int numentries = scandirat(tempdir_fd, ".", &direntries,
2605
notdotentries, alphasort);
2606
#else /* not __GLIBC_PREREQ(2, 15) */
2607
int numentries = scandir(tempdir, &direntries, notdotentries,
2608
alphasort);
2609
#endif /* not __GLIBC_PREREQ(2, 15) */
2610
#else /* not __GLIBC__ */
2611
int numentries = scandir(tempdir, &direntries, notdotentries,
2612
alphasort);
2613
#endif /* not __GLIBC__ */
2614
if(numentries >= 0){
2615
for(int i = 0; i < numentries; i++){
2616
ret = unlinkat(tempdir_fd, direntries[i]->d_name, 0);
2617
if(ret == -1){
2618
fprintf_plus(stderr, "unlinkat(open(\"%s\", O_RDONLY),"
2619
" \"%s\", 0): %s\n", tempdir,
2620
direntries[i]->d_name, strerror(errno));
2621
}
2622
}
2623
2624
/* need to clean even if 0 because man page doesn't specify */
2625
free(direntries);
2626
if(numentries == -1){
2627
perror_plus("scandir");
2628
}
2629
ret = rmdir(tempdir);
2630
if(ret == -1 and errno != ENOENT){
2631
perror_plus("rmdir");
2632
}
2633
}
2634
TEMP_FAILURE_RETRY(close(tempdir_fd));
2635
}
2636
}
2637
2638
if(quit_now){
2639
sigemptyset(&old_sigterm_action.sa_mask);
2640
old_sigterm_action.sa_handler = SIG_DFL;
2641
ret = (int)TEMP_FAILURE_RETRY(sigaction(signal_received,
2642
&old_sigterm_action,
2643
NULL));
2644
if(ret == -1){
2645
perror_plus("sigaction");
2646
}
2647
do {
2648
ret = raise(signal_received);
2649
} while(ret != 0 and errno == EINTR);
2650
if(ret != 0){
2651
perror_plus("raise");
2652
abort();
2653
}
2654
TEMP_FAILURE_RETRY(pause());
2655
}
2656
2657
return exitcode;
822
2658
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0