op public repos

Blame

Date:: Fri Jun 23 21:03:29 2023 UTC
Message:: implement `listen on' Listening by default on all the addresses is so bad I don't know why I haven't changed this before. Anyway. Add a `listen on $hostname port $port' syntax to the config file and deprecate the old "port" and "ipv6" global setting. Still try to honour them when no "listen on" directive is used for backward compatibily, but this will go away in the next next version hopefully. At the moment the `listen on' in server context don't filter the host, i.e. one can still reach a host from a address not specified in the corresponding `liste on', this will be added later.
Actions:: History | Blob | Raw File
  1 0126d91d 2022-09-07 op /*
  2 0126d91d 2022-09-07 op  * Copyright (c) 2022 Omar Polo <op@omarpolo.com>
  3 0126d91d 2022-09-07 op  *
  4 0126d91d 2022-09-07 op  * Permission to use, copy, modify, and distribute this software for any
  5 0126d91d 2022-09-07 op  * purpose with or without fee is hereby granted, provided that the above
  6 0126d91d 2022-09-07 op  * copyright notice and this permission notice appear in all copies.
  7 0126d91d 2022-09-07 op  *
  8 0126d91d 2022-09-07 op  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  9 0126d91d 2022-09-07 op  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 10 0126d91d 2022-09-07 op  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 11 0126d91d 2022-09-07 op  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 12 0126d91d 2022-09-07 op  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 13 0126d91d 2022-09-07 op  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 14 0126d91d 2022-09-07 op  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 15 0126d91d 2022-09-07 op  */
 16 0126d91d 2022-09-07 op 
 17 0126d91d 2022-09-07 op #include "gmid.h"
 18 0126d91d 2022-09-07 op 
 19 0126d91d 2022-09-07 op #include <sys/stat.h>
 20 0126d91d 2022-09-07 op #include <sys/wait.h>
 21 0126d91d 2022-09-07 op 
 22 0126d91d 2022-09-07 op #include <errno.h>
 23 0126d91d 2022-09-07 op #include <fcntl.h>
 24 0126d91d 2022-09-07 op #include <getopt.h>
 25 0046c1fe 2023-06-06 op #include <locale.h>
 26 0126d91d 2022-09-07 op #include <libgen.h>
 27 0126d91d 2022-09-07 op #include <signal.h>
 28 0126d91d 2022-09-07 op #include <string.h>
 29 eae52ad4 2023-06-06 op #include <syslog.h>
 30 0126d91d 2022-09-07 op #include <unistd.h>
 31 0126d91d 2022-09-07 op 
 32 eae52ad4 2023-06-06 op #include "log.h"
 33 df5058c9 2023-06-05 op 
 34 797c4609 2023-06-08 op int privsep_process;
 35 0126d91d 2022-09-07 op 
 36 0126d91d 2022-09-07 op static const struct option opts[] = {
 37 0126d91d 2022-09-07 op 	{"help",	no_argument,	NULL,	'h'},
 38 0126d91d 2022-09-07 op 	{"version",	no_argument,	NULL,	'V'},
 39 0126d91d 2022-09-07 op 	{NULL,		0,		NULL,	0},
 40 0126d91d 2022-09-07 op };
 41 797c4609 2023-06-08 op 
 42 797c4609 2023-06-08 op void
 43 797c4609 2023-06-08 op log_request(struct client *c, char *meta, size_t l)
 44 797c4609 2023-06-08 op {
 45 797c4609 2023-06-08 op 	char hbuf[NI_MAXHOST], sbuf[NI_MAXSERV], b[GEMINI_URL_LEN];
 46 797c4609 2023-06-08 op 	const char *t;
 47 797c4609 2023-06-08 op 	int ec;
 48 797c4609 2023-06-08 op 
 49 37df23d1 2023-06-23 op 	ec = getnameinfo((struct sockaddr*)&c->raddr, c->raddrlen,
 50 797c4609 2023-06-08 op 	    hbuf, sizeof(hbuf),
 51 797c4609 2023-06-08 op 	    sbuf, sizeof(sbuf),
 52 797c4609 2023-06-08 op 	    NI_NUMERICHOST | NI_NUMERICSERV);
 53 797c4609 2023-06-08 op 	if (ec != 0)
 54 797c4609 2023-06-08 op 		fatalx("getnameinfo: %s", gai_strerror(ec));
 55 797c4609 2023-06-08 op 
 56 797c4609 2023-06-08 op 	if (c->iri.schema != NULL) {
 57 797c4609 2023-06-08 op 		/* serialize the IRI */
 58 797c4609 2023-06-08 op 		strlcpy(b, c->iri.schema, sizeof(b));
 59 797c4609 2023-06-08 op 		strlcat(b, "://", sizeof(b));
 60 797c4609 2023-06-08 op 
 61 797c4609 2023-06-08 op 		/* log the decoded host name, but if it was invalid
 62 797c4609 2023-06-08 op 		 * use the raw one. */
 63 797c4609 2023-06-08 op 		if (*c->domain != '\0')
 64 797c4609 2023-06-08 op 			strlcat(b, c->domain, sizeof(b));
 65 797c4609 2023-06-08 op 		else
 66 797c4609 2023-06-08 op 			strlcat(b, c->iri.host, sizeof(b));
 67 797c4609 2023-06-08 op 
 68 797c4609 2023-06-08 op 		if (*c->iri.path != '/')
 69 797c4609 2023-06-08 op 			strlcat(b, "/", sizeof(b));
 70 797c4609 2023-06-08 op 		strlcat(b, c->iri.path, sizeof(b)); /* TODO: sanitize UTF8 */
 71 797c4609 2023-06-08 op 		if (*c->iri.query != '\0') {	    /* TODO: sanitize UTF8 */
 72 797c4609 2023-06-08 op 			strlcat(b, "?", sizeof(b));
 73 797c4609 2023-06-08 op 			strlcat(b, c->iri.query, sizeof(b));
 74 797c4609 2023-06-08 op 		}
 75 797c4609 2023-06-08 op 	} else {
 76 797c4609 2023-06-08 op 		if ((t = c->req) == NULL)
 77 797c4609 2023-06-08 op 			t = "";
 78 797c4609 2023-06-08 op 		strlcpy(b, t, sizeof(b));
 79 797c4609 2023-06-08 op 	}
 80 0126d91d 2022-09-07 op 
 81 797c4609 2023-06-08 op 	if ((t = memchr(meta, '\r', l)) == NULL)
 82 ab55c781 2023-06-23 op 		t = meta + l;
 83 797c4609 2023-06-08 op 
 84 797c4609 2023-06-08 op 	fprintf(stderr, "%s:%s GET %s %.*s\n", hbuf, sbuf, b,
 85 797c4609 2023-06-08 op 	    (int)(t-meta), meta);
 86 797c4609 2023-06-08 op }
 87 797c4609 2023-06-08 op 
 88 0126d91d 2022-09-07 op void
 89 0126d91d 2022-09-07 op load_local_cert(struct vhost *h, const char *hostname, const char *dir)
 90 0126d91d 2022-09-07 op {
 91 0126d91d 2022-09-07 op 	char *cert, *key;
 92 0126d91d 2022-09-07 op 
 93 0126d91d 2022-09-07 op 	if (asprintf(&cert, "%s/%s.cert.pem", dir, hostname) == -1)
 94 2dd5994a 2023-06-06 op 		fatal("asprintf");
 95 0126d91d 2022-09-07 op 	if (asprintf(&key, "%s/%s.key.pem", dir, hostname) == -1)
 96 2dd5994a 2023-06-06 op 		fatal("asprintf");
 97 0126d91d 2022-09-07 op 
 98 0126d91d 2022-09-07 op 	if (access(cert, R_OK) == -1 || access(key, R_OK) == -1)
 99 0126d91d 2022-09-07 op 		gen_certificate(hostname, cert, key);
100 0126d91d 2022-09-07 op 
101 797c4609 2023-06-08 op 	h->cert = tls_load_file(cert, &h->certlen, NULL);
102 797c4609 2023-06-08 op 	if (h->cert == NULL)
103 797c4609 2023-06-08 op 		fatal("can't load %s", cert);
104 797c4609 2023-06-08 op 
105 797c4609 2023-06-08 op 	h->key = tls_load_file(key, &h->keylen, NULL);
106 797c4609 2023-06-08 op 	if (h->key == NULL)
107 797c4609 2023-06-08 op 		fatal("can't load %s", key);
108 797c4609 2023-06-08 op 
109 534afd0d 2022-10-05 op 	strlcpy(h->domain, hostname, sizeof(h->domain));
110 0126d91d 2022-09-07 op }
111 0126d91d 2022-09-07 op 
112 0126d91d 2022-09-07 op /* wrapper around dirname(3).  dn must be PATH_MAX+1 at least. */
113 0126d91d 2022-09-07 op static void
114 0126d91d 2022-09-07 op pdirname(const char *path, char *dn)
115 0126d91d 2022-09-07 op {
116 0126d91d 2022-09-07 op 	char	 p[PATH_MAX+1];
117 0126d91d 2022-09-07 op 	char	*t;
118 0126d91d 2022-09-07 op 
119 0126d91d 2022-09-07 op 	strlcpy(p, path, sizeof(p));
120 0126d91d 2022-09-07 op 	t = dirname(p);
121 0126d91d 2022-09-07 op 	memmove(dn, t, strlen(t)+1);
122 0126d91d 2022-09-07 op }
123 0126d91d 2022-09-07 op 
124 0126d91d 2022-09-07 op static void
125 0126d91d 2022-09-07 op mkdirs(const char *path, mode_t mode)
126 0126d91d 2022-09-07 op {
127 0126d91d 2022-09-07 op 	char	dname[PATH_MAX+1];
128 0126d91d 2022-09-07 op 
129 0126d91d 2022-09-07 op 	pdirname(path, dname);
130 0126d91d 2022-09-07 op 	if (!strcmp(dname, "/"))
131 0126d91d 2022-09-07 op 		return;
132 0126d91d 2022-09-07 op 	mkdirs(dname, mode);
133 0126d91d 2022-09-07 op 	if (mkdir(path, mode) != 0 && errno != EEXIST)
134 df5058c9 2023-06-05 op 		fatal("can't mkdir %s", path);
135 0126d91d 2022-09-07 op }
136 0126d91d 2022-09-07 op 
137 0126d91d 2022-09-07 op /* $XDG_DATA_HOME/gmid */
138 0126d91d 2022-09-07 op char *
139 0126d91d 2022-09-07 op data_dir(void)
140 0126d91d 2022-09-07 op {
141 0126d91d 2022-09-07 op 	const char *home, *xdg;
142 0126d91d 2022-09-07 op 	char *t;
143 0126d91d 2022-09-07 op 
144 0126d91d 2022-09-07 op 	if ((xdg = getenv("XDG_DATA_HOME")) == NULL) {
145 0126d91d 2022-09-07 op 		if ((home = getenv("HOME")) == NULL)
146 2dd5994a 2023-06-06 op 			fatalx("XDG_DATA_HOME and HOME both empty");
147 0126d91d 2022-09-07 op 		if (asprintf(&t, "%s/.local/share/gmid", home) == -1)
148 2dd5994a 2023-06-06 op 			fatalx("asprintf");
149 0126d91d 2022-09-07 op 	} else {
150 0126d91d 2022-09-07 op 		if (asprintf(&t, "%s/gmid", xdg) == -1)
151 2dd5994a 2023-06-06 op 			fatal("asprintf");
152 0126d91d 2022-09-07 op 	}
153 0126d91d 2022-09-07 op 
154 0126d91d 2022-09-07 op 	mkdirs(t, 0755);
155 0126d91d 2022-09-07 op 	return t;
156 0126d91d 2022-09-07 op }
157 0126d91d 2022-09-07 op 
158 0126d91d 2022-09-07 op static int
159 af1dab18 2023-06-09 op serve(struct conf *conf, const char *host, int port, const char *dir)
160 0126d91d 2022-09-07 op {
161 0126d91d 2022-09-07 op 	struct addrinfo hints, *res, *res0;
162 509d0509 2023-06-23 op 	struct vhost *vh = TAILQ_FIRST(&conf->hosts);
163 509d0509 2023-06-23 op 	struct address *addr, *acp;
164 4267093e 2023-06-06 op 	int r, error, saved_errno, sock = -1;
165 0126d91d 2022-09-07 op 	const char *cause = NULL;
166 0126d91d 2022-09-07 op 	char service[32];
167 509d0509 2023-06-23 op 	int any = 0;
168 0126d91d 2022-09-07 op 
169 509d0509 2023-06-23 op 	event_init();
170 509d0509 2023-06-23 op 
171 4267093e 2023-06-06 op 	r = snprintf(service, sizeof(service), "%d", port);
172 4267093e 2023-06-06 op 	if (r < 0 || (size_t)r >= sizeof(service))
173 0126d91d 2022-09-07 op 		fatal("snprintf");
174 0126d91d 2022-09-07 op 
175 0126d91d 2022-09-07 op 	memset(&hints, 0, sizeof(hints));
176 0126d91d 2022-09-07 op 	hints.ai_family = AF_UNSPEC;
177 0126d91d 2022-09-07 op 	hints.ai_socktype = SOCK_STREAM;
178 0126d91d 2022-09-07 op 	hints.ai_flags = AI_PASSIVE;
179 0126d91d 2022-09-07 op 	error = getaddrinfo(host, service, &hints, &res0);
180 0126d91d 2022-09-07 op 	if (error)
181 df5058c9 2023-06-05 op 		fatalx("%s", gai_strerror(error));
182 0126d91d 2022-09-07 op 	for (res = res0; res; res = res->ai_next) {
183 0126d91d 2022-09-07 op 		sock = socket(res->ai_family, res->ai_socktype,
184 0126d91d 2022-09-07 op 		    res->ai_protocol);
185 0126d91d 2022-09-07 op 		if (sock == -1) {
186 0126d91d 2022-09-07 op 			cause = "socket";
187 0126d91d 2022-09-07 op 			continue;
188 0126d91d 2022-09-07 op 		}
189 0126d91d 2022-09-07 op 
190 0126d91d 2022-09-07 op 		if (bind(sock, res->ai_addr, res->ai_addrlen) == -1) {
191 0126d91d 2022-09-07 op 			cause = "bind";
192 0126d91d 2022-09-07 op 			saved_errno = errno;
193 0126d91d 2022-09-07 op 			close(sock);
194 0126d91d 2022-09-07 op 			errno = saved_errno;
195 0126d91d 2022-09-07 op 			continue;
196 0126d91d 2022-09-07 op 		}
197 0126d91d 2022-09-07 op 
198 0126d91d 2022-09-07 op 		if (listen(sock, 5) == -1)
199 0126d91d 2022-09-07 op 			fatal("listen");
200 0126d91d 2022-09-07 op 
201 509d0509 2023-06-23 op 		any = 1;
202 509d0509 2023-06-23 op 
203 509d0509 2023-06-23 op 		addr = xcalloc(1, sizeof(*addr));
204 509d0509 2023-06-23 op 		addr->ai_flags = res->ai_flags;
205 509d0509 2023-06-23 op 		addr->ai_family = res->ai_family;
206 509d0509 2023-06-23 op 		addr->ai_socktype = res->ai_socktype;
207 509d0509 2023-06-23 op 		addr->ai_protocol = res->ai_protocol;
208 509d0509 2023-06-23 op 		addr->slen = res->ai_addrlen;
209 509d0509 2023-06-23 op 		memcpy(&addr->ss, res->ai_addr, res->ai_addrlen);
210 509d0509 2023-06-23 op 
211 509d0509 2023-06-23 op 		addr->conf = conf;
212 509d0509 2023-06-23 op 		addr->sock = sock;
213 509d0509 2023-06-23 op 		event_set(&addr->evsock, addr->sock, EV_READ|EV_PERSIST,
214 509d0509 2023-06-23 op 		    do_accept, addr);
215 509d0509 2023-06-23 op 
216 509d0509 2023-06-23 op 		TAILQ_INSERT_HEAD(&conf->addrs, addr, addrs);
217 509d0509 2023-06-23 op 
218 509d0509 2023-06-23 op 		acp = xcalloc(1, sizeof(*acp));
219 509d0509 2023-06-23 op 		memcpy(acp, addr, sizeof(*acp));
220 509d0509 2023-06-23 op 		acp->sock = -1;
221 509d0509 2023-06-23 op 		memset(&acp->evsock, 0, sizeof(acp->evsock));
222 509d0509 2023-06-23 op 		TAILQ_INSERT_HEAD(&vh->addrs, addr, addrs);
223 0126d91d 2022-09-07 op 	}
224 0126d91d 2022-09-07 op 
225 509d0509 2023-06-23 op 	if (!any)
226 0126d91d 2022-09-07 op 		fatal("%s", cause);
227 0126d91d 2022-09-07 op 	freeaddrinfo(res0);
228 0126d91d 2022-09-07 op 
229 797c4609 2023-06-08 op 	server_init(NULL, NULL, NULL);
230 af1dab18 2023-06-09 op 	if (server_configure_done(conf) == -1)
231 797c4609 2023-06-08 op 		fatalx("server configuration failed");
232 797c4609 2023-06-08 op 
233 eae52ad4 2023-06-06 op 	log_info("serving %s on port %d", dir, port);
234 797c4609 2023-06-08 op 	event_dispatch();
235 797c4609 2023-06-08 op 	log_info("quitting");
236 797c4609 2023-06-08 op 	return 0;
237 0126d91d 2022-09-07 op }
238 0126d91d 2022-09-07 op 
239 0126d91d 2022-09-07 op static __dead void
240 0126d91d 2022-09-07 op usage(void)
241 0126d91d 2022-09-07 op {
242 0126d91d 2022-09-07 op 	fprintf(stderr,
243 c5b4db93 2022-09-10 op 	    "Version: " GE_STRING "\n"
244 0126d91d 2022-09-07 op 	    "Usage: %s [-hVv] [-d certs-dir] [-H hostname] [-p port] [dir]\n",
245 0126d91d 2022-09-07 op 	    getprogname());
246 0126d91d 2022-09-07 op 	exit(1);
247 0126d91d 2022-09-07 op }
248 0126d91d 2022-09-07 op 
249 0126d91d 2022-09-07 op int
250 0126d91d 2022-09-07 op main(int argc, char **argv)
251 0126d91d 2022-09-07 op {
252 af1dab18 2023-06-09 op 	struct conf *conf;
253 0126d91d 2022-09-07 op 	struct vhost *host;
254 0126d91d 2022-09-07 op 	struct location *loc;
255 0126d91d 2022-09-07 op 	const char *errstr, *certs_dir = NULL, *hostname = "localhost";
256 0126d91d 2022-09-07 op 	char path[PATH_MAX];
257 509d0509 2023-06-23 op 	int ch, port = 1965;
258 0126d91d 2022-09-07 op 
259 0046c1fe 2023-06-06 op 	setlocale(LC_CTYPE, "");
260 0046c1fe 2023-06-06 op 
261 eae52ad4 2023-06-06 op 	log_init(1, LOG_DAEMON);
262 eae52ad4 2023-06-06 op 	log_setverbose(0);
263 af1dab18 2023-06-09 op 	conf = config_new();
264 0126d91d 2022-09-07 op 
265 ba290ef3 2023-06-11 op 	/* ge doesn't do privsep so no privsep crypto engine. */
266 ba290ef3 2023-06-11 op 	conf->use_privsep_crypto = 0;
267 ba290ef3 2023-06-11 op 
268 0126d91d 2022-09-07 op 	while ((ch = getopt_long(argc, argv, "d:H:hp:Vv", opts, NULL)) != -1) {
269 0126d91d 2022-09-07 op 		switch (ch) {
270 0126d91d 2022-09-07 op 		case 'd':
271 0126d91d 2022-09-07 op 			certs_dir = optarg;
272 0126d91d 2022-09-07 op 			break;
273 0126d91d 2022-09-07 op 		case 'H':
274 0126d91d 2022-09-07 op 			hostname = optarg;
275 0126d91d 2022-09-07 op 			break;
276 0126d91d 2022-09-07 op 		case 'h':
277 0126d91d 2022-09-07 op 			usage();
278 0126d91d 2022-09-07 op 			break;
279 0126d91d 2022-09-07 op 		case 'p':
280 509d0509 2023-06-23 op 			port = strtonum(optarg, 0, UINT16_MAX, &errstr);
281 0126d91d 2022-09-07 op 			if (errstr)
282 df5058c9 2023-06-05 op 				fatalx("port number is %s: %s", errstr,
283 df5058c9 2023-06-05 op 				    optarg);
284 0126d91d 2022-09-07 op 			break;
285 0126d91d 2022-09-07 op 		case 'V':
286 c5b4db93 2022-09-10 op 			puts("Version: " GE_STRING);
287 0126d91d 2022-09-07 op 			return 0;
288 0126d91d 2022-09-07 op 		default:
289 0126d91d 2022-09-07 op 			usage();
290 0126d91d 2022-09-07 op 			break;
291 0126d91d 2022-09-07 op 		}
292 0126d91d 2022-09-07 op 	}
293 0126d91d 2022-09-07 op 	argc -= optind;
294 0126d91d 2022-09-07 op 	argv += optind;
295 0126d91d 2022-09-07 op 
296 0126d91d 2022-09-07 op 	if (argc > 1)
297 0126d91d 2022-09-07 op 		usage();
298 0126d91d 2022-09-07 op 
299 0126d91d 2022-09-07 op 	/* prepare the configuration */
300 af1dab18 2023-06-09 op 	init_mime(&conf->mime);
301 0126d91d 2022-09-07 op 
302 0126d91d 2022-09-07 op 	if (certs_dir == NULL)
303 0126d91d 2022-09-07 op 		certs_dir = data_dir();
304 0126d91d 2022-09-07 op 
305 0126d91d 2022-09-07 op 	/* set up the implicit vhost and location */
306 0126d91d 2022-09-07 op 	host = xcalloc(1, sizeof(*host));
307 af1dab18 2023-06-09 op 	TAILQ_INSERT_HEAD(&conf->hosts, host, vhosts);
308 0126d91d 2022-09-07 op 
309 0126d91d 2022-09-07 op 	loc = xcalloc(1, sizeof(*loc));
310 0126d91d 2022-09-07 op 	loc->fcgi = -1;
311 0126d91d 2022-09-07 op 	TAILQ_INSERT_HEAD(&host->locations, loc, locations);
312 0126d91d 2022-09-07 op 
313 0126d91d 2022-09-07 op 	load_local_cert(host, hostname, certs_dir);
314 0126d91d 2022-09-07 op 
315 534afd0d 2022-10-05 op 	strlcpy(host->domain, "*", sizeof(host->domain));
316 0126d91d 2022-09-07 op 	loc->auto_index = 1;
317 534afd0d 2022-10-05 op 	strlcpy(loc->match, "*", sizeof(loc->match));
318 0126d91d 2022-09-07 op 
319 0126d91d 2022-09-07 op 	if (*argv == NULL) {
320 0126d91d 2022-09-07 op 		if (getcwd(path, sizeof(path)) == NULL)
321 0126d91d 2022-09-07 op 			fatal("getcwd");
322 534afd0d 2022-10-05 op 		strlcpy(loc->dir, path, sizeof(loc->dir));
323 534afd0d 2022-10-05 op 	} else {
324 534afd0d 2022-10-05 op 		char	*tmp;
325 0126d91d 2022-09-07 op 
326 534afd0d 2022-10-05 op 		tmp = absolutify_path(*argv);
327 534afd0d 2022-10-05 op 		strlcpy(loc->dir, tmp, sizeof(loc->dir));
328 534afd0d 2022-10-05 op 		free(tmp);
329 534afd0d 2022-10-05 op 	}
330 534afd0d 2022-10-05 op 
331 0126d91d 2022-09-07 op 	/* start the server */
332 0126d91d 2022-09-07 op 	signal(SIGPIPE, SIG_IGN);
333 0126d91d 2022-09-07 op 	setproctitle("%s", loc->dir);
334 509d0509 2023-06-23 op 	return serve(conf, hostname, port, loc->dir);
335 0126d91d 2022-09-07 op }