2 bd5f7954 2021-01-01 op * Copyright (c) 2020, 2021, 2022 Omar Polo <op@omarpolo.com>
4 d5aba4c7 2020-12-24 op * Permission to use, copy, modify, and distribute this software for any
5 d5aba4c7 2020-12-24 op * purpose with or without fee is hereby granted, provided that the above
6 d5aba4c7 2020-12-24 op * copyright notice and this permission notice appear in all copies.
8 d5aba4c7 2020-12-24 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 d5aba4c7 2020-12-24 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 d5aba4c7 2020-12-24 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 d5aba4c7 2020-12-24 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 d5aba4c7 2020-12-24 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 d5aba4c7 2020-12-24 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 d5aba4c7 2020-12-24 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 488f059a 2020-12-24 op #ifndef GMID_H
18 488f059a 2020-12-24 op #define GMID_H
20 52418c8d 2021-02-12 op #include "config.h"
22 252908e6 2021-01-24 op #include <sys/socket.h>
23 252908e6 2021-01-24 op #include <sys/types.h>
25 488f059a 2020-12-24 op #include <arpa/inet.h>
26 488f059a 2020-12-24 op #include <netinet/in.h>
28 252908e6 2021-01-24 op #include <dirent.h>
29 bc99d868 2021-03-19 op #include <limits.h>
30 bc99d868 2021-03-19 op #include <netdb.h>
31 ca21e100 2021-02-04 op #include <signal.h>
32 488f059a 2020-12-24 op #include <stdio.h>
33 488f059a 2020-12-24 op #include <stdlib.h>
34 b63e30ff 2021-02-07 op #include <time.h>
35 488f059a 2020-12-24 op #include <tls.h>
36 488f059a 2020-12-24 op #include <unistd.h>
38 02be96c6 2021-02-09 op #include <openssl/x509.h>
40 efb6210d 2021-10-02 op #if HAVE_EVENT2
41 efb6210d 2021-10-02 op # include <event2/event.h>
42 efb6210d 2021-10-02 op # include <event2/event_compat.h>
43 efb6210d 2021-10-02 op # include <event2/event_struct.h>
44 efb6210d 2021-10-02 op # include <event2/buffer.h>
45 efb6210d 2021-10-02 op # include <event2/buffer_compat.h>
46 efb6210d 2021-10-02 op # include <event2/bufferevent.h>
47 efb6210d 2021-10-02 op # include <event2/bufferevent_struct.h>
48 efb6210d 2021-10-02 op # include <event2/bufferevent_compat.h>
50 efb6210d 2021-10-02 op # include <event.h>
53 c5b4db93 2022-09-10 op #define VERSION_STR(n) n " " VERSION
54 c5b4db93 2022-09-10 op #define GE_STRING VERSION_STR("ge")
55 c5b4db93 2022-09-10 op #define GG_STRING VERSION_STR("gg")
56 c5b4db93 2022-09-10 op #define GMID_STRING VERSION_STR("gmid")
58 f361f799 2021-07-10 op #define GMID_VERSION "gmid/" VERSION
60 488f059a 2020-12-24 op #define GEMINI_URL_LEN (1024+3) /* URL max len + \r\n + \0 */
62 488f059a 2020-12-24 op #define SUCCESS 20
63 0be51733 2021-01-20 op #define TEMP_REDIRECT 30
64 488f059a 2020-12-24 op #define TEMP_FAILURE 40
65 35744950 2021-02-01 op #define CGI_ERROR 42
66 72b033ef 2021-12-29 op #define PROXY_ERROR 43
67 488f059a 2020-12-24 op #define NOT_FOUND 51
68 7b1d9790 2021-01-11 op #define PROXY_REFUSED 53
69 488f059a 2020-12-24 op #define BAD_REQUEST 59
70 02be96c6 2021-02-09 op #define CLIENT_CERT_REQ 60
71 02be96c6 2021-02-09 op #define CERT_NOT_AUTH 61
73 35cf19e3 2021-01-28 op /* maximum hostname and label length, +1 for the NUL-terminator */
74 35cf19e3 2021-01-28 op #define DOMAIN_NAME_LEN (253+1)
75 35cf19e3 2021-01-28 op #define LABEL_LEN (63+1)
77 aa9543b9 2022-09-10 op #define MEDIATYPE_NAMEMAX 128 /* file name extension */
78 aa9543b9 2022-09-10 op #define MEDIATYPE_TYPEMAX 128 /* length of type/subtype */
80 534afd0d 2022-10-05 op #define FCGI_NAME_MAX 511
81 534afd0d 2022-10-05 op #define FCGI_VAL_MAX 511
83 8ad1c570 2021-05-09 op #define FCGI_MAX 32
84 2c3e53da 2021-03-03 op #define PROC_MAX 16
90 054387bb 2021-12-29 op uint16_t port_no;
93 054387bb 2021-12-29 op char *fragment;
96 054387bb 2021-12-29 op struct parser {
98 054387bb 2021-12-29 op struct iri *parsed;
99 054387bb 2021-12-29 op const char *err;
102 8ad1c570 2021-05-09 op struct fcgi {
104 534afd0d 2022-10-05 op char path[PATH_MAX];
105 534afd0d 2022-10-05 op char port[32];
107 8ad1c570 2021-05-09 op extern struct fcgi fcgi[FCGI_MAX];
109 b7967bc1 2021-01-02 op TAILQ_HEAD(proxyhead, proxy);
110 7bdcc91e 2021-01-01 op struct proxy {
111 534afd0d 2022-10-05 op char match_proto[32];
112 534afd0d 2022-10-05 op char match_host[HOST_NAME_MAX + 1];
113 534afd0d 2022-10-05 op char match_port[32];
115 534afd0d 2022-10-05 op char host[HOST_NAME_MAX + 1];
116 534afd0d 2022-10-05 op char port[32];
117 534afd0d 2022-10-05 op char sni[HOST_NAME_MAX];
119 c7c8ef44 2021-01-01 op uint32_t protocols;
120 5128c0b0 2021-01-01 op int noverifyname;
121 7bdcc91e 2021-01-01 op uint8_t *cert;
122 7bdcc91e 2021-01-01 op size_t certlen;
123 7bdcc91e 2021-01-01 op uint8_t *key;
124 7bdcc91e 2021-01-01 op size_t keylen;
125 ba94a608 2022-01-04 op X509_STORE *reqca;
127 b7967bc1 2021-01-02 op TAILQ_ENTRY(proxy) proxies;
130 b8e64ccd 2021-03-31 op TAILQ_HEAD(lochead, location);
131 c8b74339 2021-01-24 op struct location {
132 534afd0d 2022-10-05 op char match[128];
133 534afd0d 2022-10-05 op char lang[32];
134 534afd0d 2022-10-05 op char default_mime[MEDIATYPE_TYPEMAX];
135 534afd0d 2022-10-05 op char index[PATH_MAX];
136 252908e6 2021-01-24 op int auto_index; /* 0 auto, -1 off, 1 on */
137 6abda252 2021-02-06 op int block_code;
138 534afd0d 2022-10-05 op char block_fmt[GEMINI_URL_LEN];
140 02be96c6 2021-02-09 op X509_STORE *reqca;
141 793835cb 2021-02-23 op int disable_log;
144 534afd0d 2022-10-05 op char dir[PATH_MAX];
147 b8e64ccd 2021-03-31 op TAILQ_ENTRY(location) locations;
150 9cc630aa 2021-04-28 op TAILQ_HEAD(envhead, envlist);
151 9cc630aa 2021-04-28 op struct envlist {
152 534afd0d 2022-10-05 op char name[FCGI_NAME_MAX];
153 534afd0d 2022-10-05 op char value[FCGI_VAL_MAX];
154 9cc630aa 2021-04-28 op TAILQ_ENTRY(envlist) envs;
157 cc8c2901 2021-04-29 op TAILQ_HEAD(aliashead, alist);
158 cc8c2901 2021-04-29 op struct alist {
159 534afd0d 2022-10-05 op char alias[HOST_NAME_MAX + 1];
160 cc8c2901 2021-04-29 op TAILQ_ENTRY(alist) aliases;
163 b8e64ccd 2021-03-31 op extern TAILQ_HEAD(vhosthead, vhost) hosts;
164 15902770 2021-01-15 op struct vhost {
165 534afd0d 2022-10-05 op char domain[HOST_NAME_MAX + 1];
166 534afd0d 2022-10-05 op char cert[PATH_MAX];
167 534afd0d 2022-10-05 op char key[PATH_MAX];
168 534afd0d 2022-10-05 op char ocsp[PATH_MAX];
170 b8e64ccd 2021-03-31 op TAILQ_ENTRY(vhost) vhosts;
173 a8a1f439 2021-07-07 op * the first location rule is always '*' and holds the default
174 b8e64ccd 2021-03-31 op * settings for the vhost, then follows the "real" location
175 a8a1f439 2021-07-07 op * rules as specified in the configuration.
177 b8e64ccd 2021-03-31 op struct lochead locations;
179 f740b61b 2021-06-11 op struct envhead params;
180 cc8c2901 2021-04-29 op struct aliashead aliases;
181 b7967bc1 2021-01-02 op struct proxyhead proxies;
184 a010b0dd 2021-01-18 op struct etm { /* extension to mime */
185 aa9543b9 2022-09-10 op char mime[MEDIATYPE_TYPEMAX];
186 aa9543b9 2022-09-10 op char ext[MEDIATYPE_NAMEMAX];
189 b2a6b613 2021-01-21 op struct mime {
190 a010b0dd 2021-01-18 op struct etm *t;
195 15902770 2021-01-15 op struct conf {
196 3abf91b0 2021-02-07 op /* from command line */
197 3abf91b0 2021-02-07 op int foreground;
199 76000995 2022-09-06 op int can_open_sockets;
201 3abf91b0 2021-02-07 op /* in the config */
204 ae08ec7d 2021-01-25 op uint32_t protos;
205 ae08ec7d 2021-01-25 op struct mime mime;
206 7277bb7d 2022-09-10 op char chroot[PATH_MAX];
207 7277bb7d 2022-09-10 op char user[LOGIN_NAME_MAX];
211 d090dc84 2021-02-08 op extern const char *config_path;
212 15902770 2021-01-15 op extern struct conf conf;
214 5c485529 2022-09-10 op extern struct imsgbuf logibuf, servibuf[PROC_MAX];
216 2c3e53da 2021-03-03 op extern int servpipes[PROC_MAX];
218 bc99d868 2021-03-19 op typedef void (imsg_handlerfn)(struct imsgbuf*, struct imsg*, size_t);
221 efe7d180 2021-10-02 op REQUEST_UNDECIDED,
222 efe7d180 2021-10-02 op REQUEST_FILE,
224 efe7d180 2021-10-02 op REQUEST_FCGI,
225 72b033ef 2021-12-29 op REQUEST_PROXY,
226 efe7d180 2021-10-02 op REQUEST_DONE,
229 72b033ef 2021-12-29 op #define IS_INTERNAL_REQUEST(x) \
230 72b033ef 2021-12-29 op (x) != REQUEST_FCGI && \
231 72b033ef 2021-12-29 op (x) != REQUEST_PROXY)
233 488f059a 2020-12-24 op struct client {
235 488f059a 2020-12-24 op struct tls *ctx;
237 ea27eaaa 2022-03-27 op size_t reqlen;
238 0be51733 2021-01-20 op struct iri iri;
239 3300cbe0 2021-01-27 op char domain[DOMAIN_NAME_LEN];
241 efe7d180 2021-10-02 op struct bufferevent *bev;
245 efe7d180 2021-10-02 op struct bufferevent *cgibev;
247 b7967bc1 2021-01-02 op struct proxy *proxy;
248 72b033ef 2021-12-29 op struct bufferevent *proxybev;
249 72b033ef 2021-12-29 op struct tls *proxyctx;
250 e0f6dc64 2022-01-27 op int proxyevset;
251 72b033ef 2021-12-29 op struct event proxyev;
253 efe7d180 2021-10-02 op char *header;
256 488f059a 2020-12-24 op const char *meta;
258 11c98667 2021-04-25 op struct dirent **dir;
259 11c98667 2021-04-25 op int dirlen, diroff;
261 c836cdfa 2021-03-29 op /* big enough to store STATUS + SPACE + META + CRLF */
262 c836cdfa 2021-03-29 op char sbuf[1029];
263 27b2fa9a 2021-02-12 op ssize_t len, off;
265 709d6e5e 2021-01-10 op struct sockaddr_storage addr;
266 bc99d868 2021-03-19 op struct vhost *host; /* host they're talking to */
267 1feaf2a6 2021-05-15 op size_t loc; /* location matched */
269 207b3e80 2021-10-07 op SPLAY_ENTRY(client) entry;
271 207b3e80 2021-10-07 op SPLAY_HEAD(client_tree_id, client);
272 207b3e80 2021-10-07 op extern struct client_tree_id clients;
274 72b033ef 2021-12-29 op struct connreq {
275 72b033ef 2021-12-29 op char host[NI_MAXHOST];
276 72b033ef 2021-12-29 op char port[NI_MAXSERV];
282 488f059a 2020-12-24 op FILE_DIRECTORY,
283 488f059a 2020-12-24 op FILE_MISSING,
286 bc99d868 2021-03-19 op enum imsg_type {
287 8ad1c570 2021-05-09 op IMSG_FCGI_REQ,
288 8ad1c570 2021-05-09 op IMSG_FCGI_FD,
289 72b033ef 2021-12-29 op IMSG_CONN_REQ,
290 72b033ef 2021-12-29 op IMSG_CONN_FD,
292 41395640 2021-07-19 op IMSG_LOG_REQUEST,
293 e952c505 2021-06-15 op IMSG_LOG_TYPE,
298 8443bff7 2021-01-25 op char *data_dir(void);
299 d29a2ee2 2022-09-06 op void load_local_cert(struct vhost*, const char*, const char*);
300 ae08ec7d 2021-01-25 op void load_vhosts(void);
301 33ac26a0 2021-01-21 op int make_socket(int, int);
302 ae08ec7d 2021-01-25 op void setup_tls(void);
303 c8b74339 2021-01-24 op void init_config(void);
304 ca21e100 2021-02-04 op void free_config(void);
305 ae08ec7d 2021-01-25 op void drop_priv(void);
307 6abda252 2021-02-06 op void yyerror(const char*, ...);
308 13ed2fb6 2021-01-27 op void parse_conf(const char*);
309 f0a01fc7 2021-10-09 op void print_conf(void);
310 3b21cca3 2021-06-29 op int cmdline_symset(char *);
313 3abf91b0 2021-02-07 op void fatal(const char*, ...)
314 3abf91b0 2021-02-07 op __attribute__((format (printf, 1, 2)))
315 3abf91b0 2021-02-07 op __attribute__((__noreturn__));
317 3abf91b0 2021-02-07 op #define LOG_ATTR_FMT __attribute__((format (printf, 2, 3)))
318 3abf91b0 2021-02-07 op void log_err(struct client*, const char*, ...) LOG_ATTR_FMT;
319 3abf91b0 2021-02-07 op void log_warn(struct client*, const char*, ...) LOG_ATTR_FMT;
320 3abf91b0 2021-02-07 op void log_notice(struct client*, const char*, ...) LOG_ATTR_FMT;
321 3abf91b0 2021-02-07 op void log_info(struct client*, const char*, ...) LOG_ATTR_FMT;
322 3abf91b0 2021-02-07 op void log_debug(struct client*, const char*, ...) LOG_ATTR_FMT;
323 3abf91b0 2021-02-07 op void log_request(struct client*, char*, size_t);
324 376a5407 2021-02-23 op int logger_main(int, struct imsgbuf*);
327 b2a6b613 2021-01-21 op void init_mime(struct mime*);
328 d8d170aa 2022-04-08 op int add_mime(struct mime*, const char*, const char*);
329 d8d170aa 2022-04-08 op int load_default_mime(struct mime*);
330 18bd8391 2022-04-08 op void sort_mime(struct mime *);
331 6119e13e 2021-01-19 op const char *mime(struct vhost*, const char*);
332 d8d170aa 2022-04-08 op void free_mime(struct mime *);
334 d3a08f4d 2021-01-17 op /* server.c */
335 090b8a89 2021-07-06 op extern int shutting_down;
336 c8b74339 2021-01-24 op const char *vhost_lang(struct vhost*, const char*);
337 c8b74339 2021-01-24 op const char *vhost_default_mime(struct vhost*, const char*);
338 c8b74339 2021-01-24 op const char *vhost_index(struct vhost*, const char*);
339 252908e6 2021-01-24 op int vhost_auto_index(struct vhost*, const char*);
340 6abda252 2021-02-06 op int vhost_block_return(struct vhost*, const char*, int*, const char**);
341 8ad1c570 2021-05-09 op int vhost_fastcgi(struct vhost*, const char*);
342 1feaf2a6 2021-05-15 op int vhost_dirfd(struct vhost*, const char*, size_t*);
343 6abda252 2021-02-06 op int vhost_strip(struct vhost*, const char*);
344 02be96c6 2021-02-09 op X509_STORE *vhost_require_ca(struct vhost*, const char*);
345 793835cb 2021-02-23 op int vhost_disable_log(struct vhost*, const char*);
347 9b8f5ed2 2021-02-03 op void mark_nonblock(int);
348 efe7d180 2021-10-02 op void client_write(struct bufferevent *, void *);
349 8ad1c570 2021-05-09 op void start_reply(struct client*, int, const char*);
350 efe7d180 2021-10-02 op void client_close(struct client *);
351 3fdc457c 2022-03-26 op struct client *client_by_id(int);
352 bc99d868 2021-03-19 op void loop(struct tls*, int, int, struct imsgbuf*);
354 207b3e80 2021-10-07 op int client_tree_cmp(struct client *, struct client *);
355 207b3e80 2021-10-07 op SPLAY_PROTOTYPE(client_tree_id, client, entry, client_tree_cmp);
358 11c98667 2021-04-25 op int scandir_fd(int, struct dirent***, int(*)(const struct dirent*),
359 11c98667 2021-04-25 op int(*)(const struct dirent**, const struct dirent**));
360 11c98667 2021-04-25 op int select_non_dot(const struct dirent*);
361 11c98667 2021-04-25 op int select_non_dotdot(const struct dirent*);
364 741b69be 2021-09-26 op void fcgi_read(struct bufferevent *, void *);
365 741b69be 2021-09-26 op void fcgi_write(struct bufferevent *, void *);
366 741b69be 2021-09-26 op void fcgi_error(struct bufferevent *, short, void *);
367 4cd25209 2021-10-07 op void fcgi_req(struct client *);
369 dafb57b8 2021-01-15 op /* sandbox.c */
370 76000995 2022-09-06 op void sandbox_server_process(int);
371 62e001b0 2021-03-20 op void sandbox_logger_process(void);
374 ef04b551 2021-01-09 op int valid_multibyte_utf8(struct parser*);
375 3300cbe0 2021-01-27 op char *utf8_nth(char*, size_t);
378 3c1cf9d0 2021-01-11 op int parse_iri(char*, struct iri*, const char**);
379 2fafa2d2 2021-02-01 op int serialize_iri(struct iri*, char*, size_t);
380 f2f8eb35 2022-07-04 op int encode_path(char *, size_t, const char *);
381 9f006a21 2021-02-07 op char *pct_decode_str(char *);
383 72b033ef 2021-12-29 op /* proxy.c */
384 72b033ef 2021-12-29 op int proxy_init(struct client *);
387 a2fd8013 2021-01-29 op int puny_decode(const char*, char*, size_t, const char**);
389 44ee1bac 2021-01-27 op /* utils.c */
390 ca21e100 2021-02-04 op void block_signals(void);
391 ca21e100 2021-02-04 op void unblock_signals(void);
392 44ee1bac 2021-01-27 op int starts_with(const char*, const char*);
393 44ee1bac 2021-01-27 op int ends_with(const char*, const char*);
394 44ee1bac 2021-01-27 op ssize_t filesize(int);
395 2fafa2d2 2021-02-01 op char *absolutify_path(const char*);
396 ca21e100 2021-02-04 op char *xstrdup(const char*);
397 b8e64ccd 2021-03-31 op void *xcalloc(size_t, size_t);
398 3abf91b0 2021-02-07 op void gen_certificate(const char*, const char*, const char*);
399 02be96c6 2021-02-09 op X509_STORE *load_ca(const char*);
400 02be96c6 2021-02-09 op int validate_against_ca(X509_STORE*, const uint8_t*, size_t);
401 bc99d868 2021-03-19 op void dispatch_imsg(struct imsgbuf*, imsg_handlerfn**, size_t);