|
25
|
1 #include "connwrap.h" |
|
|
2 |
|
|
3 #include <netdb.h> |
|
|
4 #include <string.h> |
|
|
5 #include <netinet/in.h> |
|
|
6 #include <errno.h> |
|
|
7 #include <arpa/inet.h> |
|
|
8 #include <fcntl.h> |
|
|
9 #include <sys/time.h> |
|
112
|
10 #include <unistd.h> |
|
25
|
11 |
|
|
12 #define PROXY_TIMEOUT 10 |
|
|
13 // HTTP proxy timeout in seconds (for the CONNECT method) |
|
|
14 |
|
|
15 #ifdef HAVE_OPENSSL |
|
|
16 |
|
|
17 #define OPENSSL_NO_KRB5 1 |
|
|
18 #include <openssl/ssl.h> |
|
|
19 #include <openssl/err.h> |
|
|
20 |
|
|
21 #elif HAVE_GNUTLS |
|
|
22 |
|
|
23 #include <gnutls/openssl.h> |
|
|
24 #define HAVE_OPENSSL |
|
|
25 |
|
|
26 #endif |
|
|
27 |
|
|
28 static int in_http_connect = 0; |
|
|
29 |
|
|
30 #ifdef HAVE_OPENSSL |
|
|
31 |
|
|
32 static SSL_CTX *ctx = 0; |
|
|
33 |
|
|
34 typedef struct { int fd; SSL *ssl; } sslsock; |
|
|
35 |
|
|
36 static sslsock *socks = 0; |
|
|
37 static int sockcount = 0; |
|
|
38 |
|
|
39 static sslsock *getsock(int fd) { |
|
|
40 int i; |
|
|
41 |
|
|
42 for(i = 0; i < sockcount; i++) |
|
|
43 if(socks[i].fd == fd) |
|
|
44 return &socks[i]; |
|
|
45 |
|
|
46 return 0; |
|
|
47 } |
|
|
48 |
|
|
49 static sslsock *addsock(int fd) { |
|
|
50 sslsock *p; |
|
|
51 socks = (sslsock *) realloc(socks, sizeof(sslsock)*++sockcount); |
|
|
52 |
|
|
53 p = &socks[sockcount-1]; |
|
|
54 |
|
|
55 if(!ctx) { |
|
|
56 SSL_library_init(); |
|
|
57 SSL_load_error_strings(); |
|
|
58 |
|
|
59 #ifdef HAVE_SSLEAY |
|
|
60 SSLeay_add_all_algorithms(); |
|
|
61 #else |
|
|
62 OpenSSL_add_all_algorithms(); |
|
|
63 #endif |
|
|
64 |
|
|
65 ctx = SSL_CTX_new(SSLv23_method()); |
|
|
66 } |
|
|
67 |
|
|
68 p->ssl = SSL_new(ctx); |
|
|
69 SSL_set_fd(p->ssl, p->fd = fd); |
|
|
70 |
|
|
71 return p; |
|
|
72 } |
|
|
73 |
|
|
74 static void delsock(int fd) { |
|
|
75 int i, nsockcount; |
|
|
76 sslsock *nsocks; |
|
|
77 |
|
|
78 nsockcount = 0; |
|
|
79 nsocks = (sslsock *) malloc(sizeof(sslsock)*(sockcount-1)); |
|
|
80 |
|
|
81 for(i = 0; i < sockcount; i++) { |
|
|
82 if(socks[i].fd != fd) { |
|
|
83 nsocks[nsockcount++] = socks[i]; |
|
|
84 } else { |
|
|
85 SSL_free(socks[i].ssl); |
|
|
86 } |
|
|
87 } |
|
|
88 |
|
|
89 free(socks); |
|
|
90 |
|
|
91 socks = nsocks; |
|
|
92 sockcount = nsockcount; |
|
|
93 } |
|
|
94 |
|
|
95 #endif |
|
|
96 |
|
|
97 static char *bindaddr = 0, *proxyhost = 0, *proxyuser = 0, *proxypass = 0; |
|
|
98 static int proxyport = 3128; |
|
|
99 static int proxy_ssl = 0; |
|
|
100 |
|
|
101 #define SOCKOUT(s) write(sockfd, s, strlen(s)) |
|
|
102 |
|
|
103 int cw_http_connect(int sockfd, const struct sockaddr *serv_addr, int addrlen) { |
|
|
104 int err, pos, fl; |
|
|
105 struct hostent *server; |
|
|
106 struct sockaddr_in paddr; |
|
|
107 char buf[512]; |
|
|
108 fd_set rfds; |
|
|
109 |
|
|
110 err = 0; |
|
|
111 in_http_connect = 1; |
|
|
112 |
|
|
113 if(!(server = gethostbyname(proxyhost))) { |
|
|
114 errno = h_errno; |
|
|
115 err = -1; |
|
|
116 } |
|
|
117 |
|
|
118 if(!err) { |
|
|
119 memset(&paddr, 0, sizeof(paddr)); |
|
|
120 paddr.sin_family = AF_INET; |
|
|
121 memcpy(&paddr.sin_addr.s_addr, *server->h_addr_list, server->h_length); |
|
|
122 paddr.sin_port = htons(proxyport); |
|
|
123 |
|
|
124 fl = fcntl(sockfd, F_GETFL); |
|
|
125 fcntl(sockfd, F_SETFL, fl & ~O_NONBLOCK); |
|
|
126 |
|
|
127 buf[0] = 0; |
|
|
128 |
|
|
129 err = cw_connect(sockfd, (struct sockaddr *) &paddr, sizeof(paddr), proxy_ssl); |
|
|
130 } |
|
|
131 |
|
|
132 errno = ECONNREFUSED; |
|
|
133 |
|
|
134 if(!err) { |
|
|
135 struct sockaddr_in *sin = (struct sockaddr_in *) serv_addr; |
|
|
136 char *ip = inet_ntoa(sin->sin_addr), c; |
|
|
137 struct timeval tv; |
|
|
138 |
|
|
139 sprintf(buf, "%d", ntohs(sin->sin_port)); |
|
|
140 SOCKOUT("CONNECT "); |
|
|
141 SOCKOUT(ip); |
|
|
142 SOCKOUT(":"); |
|
|
143 SOCKOUT(buf); |
|
|
144 SOCKOUT(" HTTP/1.0\r\n"); |
|
|
145 |
|
|
146 if(proxyuser) { |
|
|
147 char *b; |
|
|
148 SOCKOUT("Proxy-Authorization: Basic "); |
|
|
149 |
|
|
150 sprintf(buf, "%s:%s", proxyuser, proxypass); |
|
|
151 b = cw_base64_encode(buf); |
|
|
152 SOCKOUT(b); |
|
|
153 free(b); |
|
|
154 |
|
|
155 SOCKOUT("\r\n"); |
|
|
156 } |
|
|
157 |
|
|
158 SOCKOUT("\r\n"); |
|
|
159 |
|
|
160 buf[0] = 0; |
|
|
161 |
|
|
162 while(err != -1) { |
|
|
163 FD_ZERO(&rfds); |
|
|
164 FD_SET(sockfd, &rfds); |
|
|
165 |
|
|
166 tv.tv_sec = PROXY_TIMEOUT; |
|
|
167 tv.tv_usec = 0; |
|
|
168 |
|
|
169 err = select(sockfd+1, &rfds, 0, 0, &tv); |
|
|
170 |
|
|
171 if(err < 1) err = -1; |
|
|
172 |
|
|
173 if(err != -1 && FD_ISSET(sockfd, &rfds)) { |
|
|
174 err = read(sockfd, &c, 1); |
|
|
175 if(!err) err = -1; |
|
|
176 |
|
|
177 if(err != -1) { |
|
|
178 pos = strlen(buf); |
|
|
179 buf[pos] = c; |
|
|
180 buf[pos+1] = 0; |
|
|
181 |
|
|
182 if(strlen(buf) > 4) |
|
|
183 if(!strcmp(buf+strlen(buf)-4, "\r\n\r\n")) |
|
|
184 break; |
|
|
185 } |
|
|
186 } |
|
|
187 } |
|
|
188 } |
|
|
189 |
|
|
190 if(err != -1 && strlen(buf)) { |
|
|
191 char *p = strstr(buf, " "); |
|
|
192 |
|
|
193 err = -1; |
|
|
194 |
|
|
195 if(p) |
|
|
196 if(atoi(++p) == 200) |
|
|
197 err = 0; |
|
|
198 |
|
|
199 fcntl(sockfd, F_SETFL, fl); |
|
|
200 if(fl & O_NONBLOCK) { |
|
|
201 errno = EINPROGRESS; |
|
|
202 err = -1; |
|
|
203 } |
|
|
204 } |
|
|
205 |
|
|
206 in_http_connect = 0; |
|
|
207 |
|
|
208 return err; |
|
|
209 } |
|
|
210 |
|
|
211 int cw_connect(int sockfd, const struct sockaddr *serv_addr, int addrlen, int ssl) { |
|
|
212 int rc; |
|
|
213 struct sockaddr_in ba; |
|
|
214 |
|
|
215 if(bindaddr) |
|
|
216 if(strlen(bindaddr)) { |
|
|
217 #ifdef HAVE_INET_ATON |
|
|
218 struct in_addr addr; |
|
|
219 rc = inet_aton(bindaddr, &addr); |
|
|
220 ba.sin_addr.s_addr = addr.s_addr; |
|
|
221 #else |
|
|
222 rc = inet_pton(AF_INET, bindaddr, &ba); |
|
|
223 #endif |
|
|
224 |
|
|
225 if(rc) { |
|
|
226 ba.sin_port = 0; |
|
|
227 rc = bind(sockfd, (struct sockaddr *) &ba, sizeof(ba)); |
|
|
228 } else { |
|
|
229 rc = -1; |
|
|
230 } |
|
|
231 |
|
|
232 if(rc) return rc; |
|
|
233 } |
|
|
234 |
|
|
235 if(proxyhost && !in_http_connect) rc = cw_http_connect(sockfd, serv_addr, addrlen); |
|
|
236 else rc = connect(sockfd, serv_addr, addrlen); |
|
|
237 |
|
|
238 #ifdef HAVE_OPENSSL |
|
|
239 if(ssl && !rc) { |
|
|
240 sslsock *p = addsock(sockfd); |
|
|
241 if(SSL_connect(p->ssl) != 1) |
|
|
242 return -1; |
|
|
243 } |
|
|
244 #endif |
|
|
245 |
|
|
246 return rc; |
|
|
247 } |
|
|
248 |
|
|
249 int cw_nb_connect(int sockfd, const struct sockaddr *serv_addr, int addrlen, int ssl, int *state) { |
|
|
250 int rc = 0; |
|
|
251 struct sockaddr_in ba; |
|
|
252 |
|
|
253 if(bindaddr) |
|
|
254 if(strlen(bindaddr)) { |
|
|
255 #ifdef HAVE_INET_ATON |
|
|
256 struct in_addr addr; |
|
|
257 rc = inet_aton(bindaddr, &addr); |
|
|
258 ba.sin_addr.s_addr = addr.s_addr; |
|
|
259 #else |
|
|
260 rc = inet_pton(AF_INET, bindaddr, &ba); |
|
|
261 #endif |
|
|
262 |
|
|
263 if(rc) { |
|
|
264 ba.sin_port = 0; |
|
|
265 rc = bind(sockfd, (struct sockaddr *) &ba, sizeof(ba)); |
|
|
266 } else { |
|
|
267 rc = -1; |
|
|
268 } |
|
|
269 |
|
|
270 if(rc) return rc; |
|
|
271 } |
|
|
272 |
|
|
273 #ifdef HAVE_OPENSSL |
|
|
274 if(ssl) { |
|
|
275 if ( !(*state & CW_CONNECT_WANT_SOMETHING)) |
|
|
276 rc = cw_connect(sockfd, serv_addr, addrlen, 0); |
|
|
277 else{ /* check if the socket is connected correctly */ |
|
|
278 int optlen = sizeof(int), optval; |
|
|
279 if (getsockopt(sockfd, SOL_SOCKET, SO_ERROR, &optval, &optlen) || optval) |
|
|
280 return -1; |
|
|
281 } |
|
|
282 |
|
|
283 if(!rc) { |
|
|
284 sslsock *p; |
|
|
285 if (*state & CW_CONNECT_SSL) |
|
|
286 p = getsock(sockfd); |
|
|
287 else |
|
|
288 p = addsock(sockfd); |
|
|
289 |
|
|
290 rc = SSL_connect(p->ssl); |
|
|
291 switch(rc){ |
|
|
292 case 1: |
|
|
293 *state = 0; |
|
|
294 return 0; |
|
|
295 case 0: |
|
|
296 return -1; |
|
|
297 default: |
|
|
298 switch (SSL_get_error(p->ssl, rc)){ |
|
|
299 case SSL_ERROR_WANT_READ: |
|
|
300 *state = CW_CONNECT_SSL | CW_CONNECT_WANT_READ; |
|
|
301 return 0; |
|
|
302 case SSL_ERROR_WANT_WRITE: |
|
|
303 *state = CW_CONNECT_SSL | CW_CONNECT_WANT_WRITE; |
|
|
304 return 0; |
|
|
305 default: |
|
|
306 return -1; |
|
|
307 } |
|
|
308 } |
|
|
309 } |
|
|
310 else{ /* catch EINPROGRESS error from the connect call */ |
|
|
311 if (errno == EINPROGRESS){ |
|
|
312 *state = CW_CONNECT_STARTED | CW_CONNECT_WANT_WRITE; |
|
|
313 return 0; |
|
|
314 } |
|
|
315 } |
|
|
316 |
|
|
317 return rc; |
|
|
318 } |
|
|
319 #endif |
|
|
320 if ( !(*state & CW_CONNECT_WANT_SOMETHING)) |
|
|
321 rc = connect(sockfd, serv_addr, addrlen); |
|
|
322 else{ /* check if the socket is connected correctly */ |
|
|
323 int optlen = sizeof(int), optval; |
|
|
324 if (getsockopt(sockfd, SOL_SOCKET, SO_ERROR, &optval, &optlen) || optval) |
|
|
325 return -1; |
|
|
326 *state = 0; |
|
|
327 return 0; |
|
|
328 } |
|
|
329 if (rc) |
|
|
330 if (errno == EINPROGRESS){ |
|
|
331 *state = CW_CONNECT_STARTED | CW_CONNECT_WANT_WRITE; |
|
|
332 return 0; |
|
|
333 } |
|
|
334 return rc; |
|
|
335 } |
|
|
336 |
|
|
337 int cw_accept(int s, struct sockaddr *addr, int *addrlen, int ssl) { |
|
|
338 #ifdef HAVE_OPENSSL |
|
|
339 int rc; |
|
|
340 |
|
|
341 if(ssl) { |
|
|
342 rc = accept(s, addr, addrlen); |
|
|
343 |
|
|
344 if(!rc) { |
|
|
345 sslsock *p = addsock(s); |
|
|
346 if(SSL_accept(p->ssl) != 1) |
|
|
347 return -1; |
|
|
348 |
|
|
349 } |
|
|
350 |
|
|
351 return rc; |
|
|
352 } |
|
|
353 #endif |
|
|
354 return accept(s, addr, addrlen); |
|
|
355 } |
|
|
356 |
|
|
357 int cw_write(int fd, const void *buf, int count, int ssl) { |
|
|
358 #ifdef HAVE_OPENSSL |
|
|
359 sslsock *p; |
|
|
360 |
|
|
361 if(ssl) |
|
|
362 if(p = getsock(fd)) |
|
|
363 return SSL_write(p->ssl, buf, count); |
|
|
364 #endif |
|
|
365 return write(fd, buf, count); |
|
|
366 } |
|
|
367 |
|
|
368 int cw_read(int fd, void *buf, int count, int ssl) { |
|
|
369 #ifdef HAVE_OPENSSL |
|
|
370 sslsock *p; |
|
|
371 |
|
|
372 if(ssl) |
|
|
373 if(p = getsock(fd)) |
|
|
374 return SSL_read(p->ssl, buf, count); |
|
|
375 #endif |
|
|
376 return read(fd, buf, count); |
|
|
377 } |
|
|
378 |
|
|
379 int cw_close(int fd) { |
|
|
380 #ifdef HAVE_OPENSSL |
|
|
381 delsock(fd); |
|
|
382 #endif |
|
|
383 close(fd); |
|
|
384 } |
|
|
385 |
|
|
386 #define FREEVAR(v) if(v) free(v), v = 0; |
|
|
387 |
|
|
388 void cw_setbind(const char *abindaddr) { |
|
|
389 FREEVAR(bindaddr); |
|
|
390 bindaddr = strdup(abindaddr); |
|
|
391 } |
|
|
392 |
|
|
393 void cw_setproxy(const char *aproxyhost, int aproxyport, const char *aproxyuser, const char *aproxypass) { |
|
|
394 FREEVAR(proxyhost); |
|
|
395 FREEVAR(proxyuser); |
|
|
396 FREEVAR(proxypass); |
|
|
397 |
|
|
398 if(aproxyhost && strlen(aproxyhost)) proxyhost = strdup(aproxyhost); |
|
|
399 if(aproxyuser && strlen(aproxyuser)) proxyuser = strdup(aproxyuser); |
|
|
400 if(aproxypass && strlen(aproxypass)) proxypass = strdup(aproxypass); |
|
|
401 proxyport = aproxyport; |
|
|
402 } |
|
|
403 |
|
|
404 char *cw_base64_encode(const char *in) { |
|
|
405 static char base64digits[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789._"; |
|
|
406 |
|
|
407 int j = 0; |
|
|
408 int inlen = strlen(in); |
|
|
409 char *out = (char *) malloc(inlen*4+1), c; |
|
|
410 |
|
|
411 for(out[0] = 0; inlen >= 3; inlen -= 3) { |
|
|
412 strncat(out, &base64digits[ in[j] >> 2 ], 1); |
|
|
413 strncat(out, &base64digits[ ((in[j] << 4) & 0x30) | (in[j+1] >> 4) ], 1); |
|
|
414 strncat(out, &base64digits[ ((in[j+1] << 2) & 0x3c) | (in[j+2] >> 6) ], 1); |
|
|
415 strncat(out, &base64digits[ in[j+2] & 0x3f ], 1); |
|
|
416 j += 3; |
|
|
417 } |
|
|
418 |
|
|
419 if(inlen > 0) { |
|
|
420 unsigned char fragment; |
|
|
421 |
|
|
422 strncat(out, &base64digits[in[j] >> 2], 1); |
|
|
423 fragment = (in[j] << 4) & 0x30; |
|
|
424 |
|
|
425 if(inlen > 1) |
|
|
426 fragment |= in[j+1] >> 4; |
|
|
427 |
|
|
428 strncat(out, &base64digits[fragment], 1); |
|
|
429 |
|
|
430 c = (inlen < 2) ? '-' : base64digits[ (in[j+1] << 2) & 0x3c ]; |
|
|
431 strncat(out, &c, 1); |
|
|
432 c = '-'; |
|
|
433 strncat(out, &c, 1); |
|
|
434 } |
|
|
435 |
|
|
436 return out; |
|
|
437 } |
