Blame


1 0126d91d 2022-09-07 op /*
2 eac9287d 2023-06-24 op * Copyright (c) 2022, 2023 Omar Polo <op@omarpolo.com>
3 0126d91d 2022-09-07 op *
4 0126d91d 2022-09-07 op * Permission to use, copy, modify, and distribute this software for any
5 0126d91d 2022-09-07 op * purpose with or without fee is hereby granted, provided that the above
6 0126d91d 2022-09-07 op * copyright notice and this permission notice appear in all copies.
7 0126d91d 2022-09-07 op *
8 0126d91d 2022-09-07 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 0126d91d 2022-09-07 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 0126d91d 2022-09-07 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 0126d91d 2022-09-07 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 0126d91d 2022-09-07 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 0126d91d 2022-09-07 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 0126d91d 2022-09-07 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 0126d91d 2022-09-07 op */
16 0126d91d 2022-09-07 op
17 0126d91d 2022-09-07 op #include "gmid.h"
18 0126d91d 2022-09-07 op
19 0126d91d 2022-09-07 op #include <sys/stat.h>
20 0126d91d 2022-09-07 op #include <sys/wait.h>
21 0126d91d 2022-09-07 op
22 0126d91d 2022-09-07 op #include <errno.h>
23 0126d91d 2022-09-07 op #include <fcntl.h>
24 0126d91d 2022-09-07 op #include <getopt.h>
25 0046c1fe 2023-06-06 op #include <locale.h>
26 0126d91d 2022-09-07 op #include <libgen.h>
27 0126d91d 2022-09-07 op #include <signal.h>
28 0126d91d 2022-09-07 op #include <string.h>
29 eae52ad4 2023-06-06 op #include <syslog.h>
30 0126d91d 2022-09-07 op #include <unistd.h>
31 ddbcd3c1 2023-08-07 op #include <vis.h>
32 0126d91d 2022-09-07 op
33 eae52ad4 2023-06-06 op #include "log.h"
34 df5058c9 2023-06-05 op
35 797c4609 2023-06-08 op int privsep_process;
36 0126d91d 2022-09-07 op
37 0126d91d 2022-09-07 op static const struct option opts[] = {
38 0126d91d 2022-09-07 op {"help", no_argument, NULL, 'h'},
39 0126d91d 2022-09-07 op {"version", no_argument, NULL, 'V'},
40 0126d91d 2022-09-07 op {NULL, 0, NULL, 0},
41 0126d91d 2022-09-07 op };
42 797c4609 2023-06-08 op
43 797c4609 2023-06-08 op void
44 2c381068 2023-07-01 op log_request(struct client *c, int code, const char *meta)
45 797c4609 2023-06-08 op {
46 ed164e72 2023-06-26 op char b[GEMINI_URL_LEN];
47 ddbcd3c1 2023-08-07 op char cntmp[64], cn[64] = "-";
48 797c4609 2023-06-08 op const char *t;
49 857635a1 2023-07-25 op
50 797c4609 2023-06-08 op if (c->iri.schema != NULL) {
51 797c4609 2023-06-08 op /* serialize the IRI */
52 797c4609 2023-06-08 op strlcpy(b, c->iri.schema, sizeof(b));
53 797c4609 2023-06-08 op strlcat(b, "://", sizeof(b));
54 797c4609 2023-06-08 op
55 797c4609 2023-06-08 op /* log the decoded host name, but if it was invalid
56 797c4609 2023-06-08 op * use the raw one. */
57 797c4609 2023-06-08 op if (*c->domain != '\0')
58 797c4609 2023-06-08 op strlcat(b, c->domain, sizeof(b));
59 797c4609 2023-06-08 op else
60 797c4609 2023-06-08 op strlcat(b, c->iri.host, sizeof(b));
61 797c4609 2023-06-08 op
62 797c4609 2023-06-08 op if (*c->iri.path != '/')
63 797c4609 2023-06-08 op strlcat(b, "/", sizeof(b));
64 797c4609 2023-06-08 op strlcat(b, c->iri.path, sizeof(b)); /* TODO: sanitize UTF8 */
65 797c4609 2023-06-08 op if (*c->iri.query != '\0') { /* TODO: sanitize UTF8 */
66 797c4609 2023-06-08 op strlcat(b, "?", sizeof(b));
67 797c4609 2023-06-08 op strlcat(b, c->iri.query, sizeof(b));
68 797c4609 2023-06-08 op }
69 797c4609 2023-06-08 op } else {
70 797c4609 2023-06-08 op if ((t = c->req) == NULL)
71 797c4609 2023-06-08 op t = "";
72 797c4609 2023-06-08 op strlcpy(b, t, sizeof(b));
73 797c4609 2023-06-08 op }
74 0126d91d 2022-09-07 op
75 ddbcd3c1 2023-08-07 op if (tls_peer_cert_provided(c->ctx)) {
76 ddbcd3c1 2023-08-07 op const char *subj;
77 ddbcd3c1 2023-08-07 op char *n;
78 ddbcd3c1 2023-08-07 op
79 ddbcd3c1 2023-08-07 op subj = tls_peer_cert_subject(c->ctx);
80 ddbcd3c1 2023-08-07 op if ((n = strstr(subj, "/CN=")) != NULL) {
81 ddbcd3c1 2023-08-07 op strlcpy(cntmp, subj + 4, sizeof(cntmp));
82 ddbcd3c1 2023-08-07 op if ((n = strchr(cntmp, '/')) != NULL)
83 ddbcd3c1 2023-08-07 op *n = '\0';
84 ddbcd3c1 2023-08-07 op strnvis(cn, cntmp, sizeof(cn), VIS_WHITE|VIS_DQ);
85 ddbcd3c1 2023-08-07 op }
86 ddbcd3c1 2023-08-07 op }
87 ddbcd3c1 2023-08-07 op
88 96515efd 2023-08-29 op fprintf(stderr, "%s %s %s %s %d %s\n", c->rhost, cn,
89 ddbcd3c1 2023-08-07 op *c->domain == '\0' ? c->iri.host : c->domain, b, code, meta);
90 797c4609 2023-06-08 op }
91 797c4609 2023-06-08 op
92 0126d91d 2022-09-07 op void
93 0126d91d 2022-09-07 op load_local_cert(struct vhost *h, const char *hostname, const char *dir)
94 0126d91d 2022-09-07 op {
95 0126d91d 2022-09-07 op char *cert, *key;
96 0126d91d 2022-09-07 op
97 f31289a8 2023-08-29 op if (asprintf(&cert, "%s/%s.pem", dir, hostname) == -1)
98 2dd5994a 2023-06-06 op fatal("asprintf");
99 f31289a8 2023-08-29 op if (asprintf(&key, "%s/%s.key", dir, hostname) == -1)
100 2dd5994a 2023-06-06 op fatal("asprintf");
101 0126d91d 2022-09-07 op
102 0126d91d 2022-09-07 op if (access(cert, R_OK) == -1 || access(key, R_OK) == -1)
103 0126d91d 2022-09-07 op gen_certificate(hostname, cert, key);
104 0126d91d 2022-09-07 op
105 797c4609 2023-06-08 op h->cert = tls_load_file(cert, &h->certlen, NULL);
106 797c4609 2023-06-08 op if (h->cert == NULL)
107 797c4609 2023-06-08 op fatal("can't load %s", cert);
108 797c4609 2023-06-08 op
109 797c4609 2023-06-08 op h->key = tls_load_file(key, &h->keylen, NULL);
110 797c4609 2023-06-08 op if (h->key == NULL)
111 797c4609 2023-06-08 op fatal("can't load %s", key);
112 797c4609 2023-06-08 op
113 534afd0d 2022-10-05 op strlcpy(h->domain, hostname, sizeof(h->domain));
114 0126d91d 2022-09-07 op }
115 0126d91d 2022-09-07 op
116 0126d91d 2022-09-07 op /* wrapper around dirname(3). dn must be PATH_MAX+1 at least. */
117 0126d91d 2022-09-07 op static void
118 0126d91d 2022-09-07 op pdirname(const char *path, char *dn)
119 0126d91d 2022-09-07 op {
120 0126d91d 2022-09-07 op char p[PATH_MAX+1];
121 0126d91d 2022-09-07 op char *t;
122 0126d91d 2022-09-07 op
123 0126d91d 2022-09-07 op strlcpy(p, path, sizeof(p));
124 0126d91d 2022-09-07 op t = dirname(p);
125 0126d91d 2022-09-07 op memmove(dn, t, strlen(t)+1);
126 0126d91d 2022-09-07 op }
127 0126d91d 2022-09-07 op
128 0126d91d 2022-09-07 op static void
129 0126d91d 2022-09-07 op mkdirs(const char *path, mode_t mode)
130 0126d91d 2022-09-07 op {
131 0126d91d 2022-09-07 op char dname[PATH_MAX+1];
132 0126d91d 2022-09-07 op
133 0126d91d 2022-09-07 op pdirname(path, dname);
134 0126d91d 2022-09-07 op if (!strcmp(dname, "/"))
135 0126d91d 2022-09-07 op return;
136 0126d91d 2022-09-07 op mkdirs(dname, mode);
137 0126d91d 2022-09-07 op if (mkdir(path, mode) != 0 && errno != EEXIST)
138 df5058c9 2023-06-05 op fatal("can't mkdir %s", path);
139 0126d91d 2022-09-07 op }
140 0126d91d 2022-09-07 op
141 a6d07f09 2023-08-29 op /* $XDG_DATA_HOME/gemexp */
142 0126d91d 2022-09-07 op char *
143 0126d91d 2022-09-07 op data_dir(void)
144 0126d91d 2022-09-07 op {
145 0126d91d 2022-09-07 op const char *home, *xdg;
146 0126d91d 2022-09-07 op char *t;
147 0126d91d 2022-09-07 op
148 0126d91d 2022-09-07 op if ((xdg = getenv("XDG_DATA_HOME")) == NULL) {
149 0126d91d 2022-09-07 op if ((home = getenv("HOME")) == NULL)
150 2dd5994a 2023-06-06 op fatalx("XDG_DATA_HOME and HOME both empty");
151 a6d07f09 2023-08-29 op if (asprintf(&t, "%s/.local/share/gemexp", home) == -1)
152 2dd5994a 2023-06-06 op fatalx("asprintf");
153 0126d91d 2022-09-07 op } else {
154 a6d07f09 2023-08-29 op if (asprintf(&t, "%s/gemexp", xdg) == -1)
155 2dd5994a 2023-06-06 op fatal("asprintf");
156 0126d91d 2022-09-07 op }
157 0126d91d 2022-09-07 op
158 0126d91d 2022-09-07 op mkdirs(t, 0755);
159 0126d91d 2022-09-07 op return t;
160 0126d91d 2022-09-07 op }
161 0126d91d 2022-09-07 op
162 0126d91d 2022-09-07 op static int
163 af1dab18 2023-06-09 op serve(struct conf *conf, const char *host, int port, const char *dir)
164 0126d91d 2022-09-07 op {
165 0126d91d 2022-09-07 op struct addrinfo hints, *res, *res0;
166 509d0509 2023-06-23 op struct vhost *vh = TAILQ_FIRST(&conf->hosts);
167 509d0509 2023-06-23 op struct address *addr, *acp;
168 4267093e 2023-06-06 op int r, error, saved_errno, sock = -1;
169 0126d91d 2022-09-07 op const char *cause = NULL;
170 0126d91d 2022-09-07 op char service[32];
171 509d0509 2023-06-23 op int any = 0;
172 0126d91d 2022-09-07 op
173 509d0509 2023-06-23 op event_init();
174 509d0509 2023-06-23 op
175 4267093e 2023-06-06 op r = snprintf(service, sizeof(service), "%d", port);
176 4267093e 2023-06-06 op if (r < 0 || (size_t)r >= sizeof(service))
177 0126d91d 2022-09-07 op fatal("snprintf");
178 0126d91d 2022-09-07 op
179 0126d91d 2022-09-07 op memset(&hints, 0, sizeof(hints));
180 0126d91d 2022-09-07 op hints.ai_family = AF_UNSPEC;
181 0126d91d 2022-09-07 op hints.ai_socktype = SOCK_STREAM;
182 0126d91d 2022-09-07 op hints.ai_flags = AI_PASSIVE;
183 0126d91d 2022-09-07 op error = getaddrinfo(host, service, &hints, &res0);
184 0126d91d 2022-09-07 op if (error)
185 df5058c9 2023-06-05 op fatalx("%s", gai_strerror(error));
186 0126d91d 2022-09-07 op for (res = res0; res; res = res->ai_next) {
187 0126d91d 2022-09-07 op sock = socket(res->ai_family, res->ai_socktype,
188 0126d91d 2022-09-07 op res->ai_protocol);
189 0126d91d 2022-09-07 op if (sock == -1) {
190 0126d91d 2022-09-07 op cause = "socket";
191 0126d91d 2022-09-07 op continue;
192 0126d91d 2022-09-07 op }
193 0126d91d 2022-09-07 op
194 0126d91d 2022-09-07 op if (bind(sock, res->ai_addr, res->ai_addrlen) == -1) {
195 0126d91d 2022-09-07 op cause = "bind";
196 0126d91d 2022-09-07 op saved_errno = errno;
197 0126d91d 2022-09-07 op close(sock);
198 0126d91d 2022-09-07 op errno = saved_errno;
199 0126d91d 2022-09-07 op continue;
200 0126d91d 2022-09-07 op }
201 0126d91d 2022-09-07 op
202 0126d91d 2022-09-07 op if (listen(sock, 5) == -1)
203 0126d91d 2022-09-07 op fatal("listen");
204 0126d91d 2022-09-07 op
205 509d0509 2023-06-23 op any = 1;
206 509d0509 2023-06-23 op
207 509d0509 2023-06-23 op addr = xcalloc(1, sizeof(*addr));
208 509d0509 2023-06-23 op addr->ai_flags = res->ai_flags;
209 509d0509 2023-06-23 op addr->ai_family = res->ai_family;
210 509d0509 2023-06-23 op addr->ai_socktype = res->ai_socktype;
211 509d0509 2023-06-23 op addr->ai_protocol = res->ai_protocol;
212 509d0509 2023-06-23 op addr->slen = res->ai_addrlen;
213 509d0509 2023-06-23 op memcpy(&addr->ss, res->ai_addr, res->ai_addrlen);
214 509d0509 2023-06-23 op
215 509d0509 2023-06-23 op addr->conf = conf;
216 509d0509 2023-06-23 op addr->sock = sock;
217 509d0509 2023-06-23 op event_set(&addr->evsock, addr->sock, EV_READ|EV_PERSIST,
218 71b02f63 2023-07-01 op server_accept, addr);
219 509d0509 2023-06-23 op
220 e50f85ad 2023-06-24 op if ((addr->ctx = tls_server()) == NULL)
221 e50f85ad 2023-06-24 op fatal("tls_server failure");
222 e50f85ad 2023-06-24 op
223 509d0509 2023-06-23 op TAILQ_INSERT_HEAD(&conf->addrs, addr, addrs);
224 509d0509 2023-06-23 op
225 509d0509 2023-06-23 op acp = xcalloc(1, sizeof(*acp));
226 509d0509 2023-06-23 op memcpy(acp, addr, sizeof(*acp));
227 509d0509 2023-06-23 op acp->sock = -1;
228 509d0509 2023-06-23 op memset(&acp->evsock, 0, sizeof(acp->evsock));
229 509d0509 2023-06-23 op TAILQ_INSERT_HEAD(&vh->addrs, addr, addrs);
230 0126d91d 2022-09-07 op }
231 0126d91d 2022-09-07 op
232 509d0509 2023-06-23 op if (!any)
233 0126d91d 2022-09-07 op fatal("%s", cause);
234 0126d91d 2022-09-07 op freeaddrinfo(res0);
235 0126d91d 2022-09-07 op
236 797c4609 2023-06-08 op server_init(NULL, NULL, NULL);
237 af1dab18 2023-06-09 op if (server_configure_done(conf) == -1)
238 797c4609 2023-06-08 op fatalx("server configuration failed");
239 797c4609 2023-06-08 op
240 eae52ad4 2023-06-06 op log_info("serving %s on port %d", dir, port);
241 797c4609 2023-06-08 op event_dispatch();
242 797c4609 2023-06-08 op log_info("quitting");
243 797c4609 2023-06-08 op return 0;
244 0126d91d 2022-09-07 op }
245 0126d91d 2022-09-07 op
246 0126d91d 2022-09-07 op static __dead void
247 0126d91d 2022-09-07 op usage(void)
248 0126d91d 2022-09-07 op {
249 0126d91d 2022-09-07 op fprintf(stderr,
250 c5b4db93 2022-09-10 op "Version: " GE_STRING "\n"
251 0126d91d 2022-09-07 op "Usage: %s [-hVv] [-d certs-dir] [-H hostname] [-p port] [dir]\n",
252 0126d91d 2022-09-07 op getprogname());
253 0126d91d 2022-09-07 op exit(1);
254 0126d91d 2022-09-07 op }
255 0126d91d 2022-09-07 op
256 0126d91d 2022-09-07 op int
257 0126d91d 2022-09-07 op main(int argc, char **argv)
258 0126d91d 2022-09-07 op {
259 af1dab18 2023-06-09 op struct conf *conf;
260 0126d91d 2022-09-07 op struct vhost *host;
261 0126d91d 2022-09-07 op struct location *loc;
262 0126d91d 2022-09-07 op const char *errstr, *certs_dir = NULL, *hostname = "localhost";
263 0126d91d 2022-09-07 op char path[PATH_MAX];
264 509d0509 2023-06-23 op int ch, port = 1965;
265 0126d91d 2022-09-07 op
266 0046c1fe 2023-06-06 op setlocale(LC_CTYPE, "");
267 0046c1fe 2023-06-06 op
268 eae52ad4 2023-06-06 op log_init(1, LOG_DAEMON);
269 eae52ad4 2023-06-06 op log_setverbose(0);
270 af1dab18 2023-06-09 op conf = config_new();
271 0126d91d 2022-09-07 op
272 ba290ef3 2023-06-11 op /* ge doesn't do privsep so no privsep crypto engine. */
273 ba290ef3 2023-06-11 op conf->use_privsep_crypto = 0;
274 ba290ef3 2023-06-11 op
275 0126d91d 2022-09-07 op while ((ch = getopt_long(argc, argv, "d:H:hp:Vv", opts, NULL)) != -1) {
276 0126d91d 2022-09-07 op switch (ch) {
277 0126d91d 2022-09-07 op case 'd':
278 0126d91d 2022-09-07 op certs_dir = optarg;
279 0126d91d 2022-09-07 op break;
280 0126d91d 2022-09-07 op case 'H':
281 0126d91d 2022-09-07 op hostname = optarg;
282 0126d91d 2022-09-07 op break;
283 0126d91d 2022-09-07 op case 'h':
284 0126d91d 2022-09-07 op usage();
285 0126d91d 2022-09-07 op break;
286 0126d91d 2022-09-07 op case 'p':
287 509d0509 2023-06-23 op port = strtonum(optarg, 0, UINT16_MAX, &errstr);
288 0126d91d 2022-09-07 op if (errstr)
289 df5058c9 2023-06-05 op fatalx("port number is %s: %s", errstr,
290 df5058c9 2023-06-05 op optarg);
291 0126d91d 2022-09-07 op break;
292 0126d91d 2022-09-07 op case 'V':
293 c5b4db93 2022-09-10 op puts("Version: " GE_STRING);
294 0126d91d 2022-09-07 op return 0;
295 0126d91d 2022-09-07 op default:
296 0126d91d 2022-09-07 op usage();
297 0126d91d 2022-09-07 op break;
298 0126d91d 2022-09-07 op }
299 0126d91d 2022-09-07 op }
300 0126d91d 2022-09-07 op argc -= optind;
301 0126d91d 2022-09-07 op argv += optind;
302 0126d91d 2022-09-07 op
303 0126d91d 2022-09-07 op if (argc > 1)
304 0126d91d 2022-09-07 op usage();
305 0126d91d 2022-09-07 op
306 0126d91d 2022-09-07 op /* prepare the configuration */
307 af1dab18 2023-06-09 op init_mime(&conf->mime);
308 0126d91d 2022-09-07 op
309 0126d91d 2022-09-07 op if (certs_dir == NULL)
310 0126d91d 2022-09-07 op certs_dir = data_dir();
311 0126d91d 2022-09-07 op
312 0126d91d 2022-09-07 op /* set up the implicit vhost and location */
313 0126d91d 2022-09-07 op host = xcalloc(1, sizeof(*host));
314 af1dab18 2023-06-09 op TAILQ_INSERT_HEAD(&conf->hosts, host, vhosts);
315 0126d91d 2022-09-07 op
316 0126d91d 2022-09-07 op loc = xcalloc(1, sizeof(*loc));
317 0126d91d 2022-09-07 op loc->fcgi = -1;
318 0126d91d 2022-09-07 op TAILQ_INSERT_HEAD(&host->locations, loc, locations);
319 0126d91d 2022-09-07 op
320 0126d91d 2022-09-07 op load_local_cert(host, hostname, certs_dir);
321 0126d91d 2022-09-07 op
322 534afd0d 2022-10-05 op strlcpy(host->domain, "*", sizeof(host->domain));
323 0126d91d 2022-09-07 op loc->auto_index = 1;
324 534afd0d 2022-10-05 op strlcpy(loc->match, "*", sizeof(loc->match));
325 0126d91d 2022-09-07 op
326 0126d91d 2022-09-07 op if (*argv == NULL) {
327 0126d91d 2022-09-07 op if (getcwd(path, sizeof(path)) == NULL)
328 0126d91d 2022-09-07 op fatal("getcwd");
329 534afd0d 2022-10-05 op strlcpy(loc->dir, path, sizeof(loc->dir));
330 534afd0d 2022-10-05 op } else {
331 534afd0d 2022-10-05 op char *tmp;
332 0126d91d 2022-09-07 op
333 534afd0d 2022-10-05 op tmp = absolutify_path(*argv);
334 534afd0d 2022-10-05 op strlcpy(loc->dir, tmp, sizeof(loc->dir));
335 534afd0d 2022-10-05 op free(tmp);
336 534afd0d 2022-10-05 op }
337 534afd0d 2022-10-05 op
338 0126d91d 2022-09-07 op /* start the server */
339 0126d91d 2022-09-07 op signal(SIGPIPE, SIG_IGN);
340 0126d91d 2022-09-07 op setproctitle("%s", loc->dir);
341 509d0509 2023-06-23 op return serve(conf, hostname, port, loc->dir);
342 0126d91d 2022-09-07 op }