Blame


1 8ad1c570 2021-05-09 op /*
2 8ad1c570 2021-05-09 op * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
3 8ad1c570 2021-05-09 op *
4 8ad1c570 2021-05-09 op * Permission to use, copy, modify, and distribute this software for any
5 8ad1c570 2021-05-09 op * purpose with or without fee is hereby granted, provided that the above
6 8ad1c570 2021-05-09 op * copyright notice and this permission notice appear in all copies.
7 8ad1c570 2021-05-09 op *
8 8ad1c570 2021-05-09 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 8ad1c570 2021-05-09 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 8ad1c570 2021-05-09 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 8ad1c570 2021-05-09 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 8ad1c570 2021-05-09 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 8ad1c570 2021-05-09 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 8ad1c570 2021-05-09 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 8ad1c570 2021-05-09 op */
16 8ad1c570 2021-05-09 op
17 8ad1c570 2021-05-09 op #include "gmid.h"
18 8ad1c570 2021-05-09 op
19 8ad1c570 2021-05-09 op #include <assert.h>
20 8ad1c570 2021-05-09 op #include <errno.h>
21 8ad1c570 2021-05-09 op #include <string.h>
22 8ad1c570 2021-05-09 op
23 8ad1c570 2021-05-09 op /*
24 8ad1c570 2021-05-09 op * Sometimes it can be useful to inspect the fastcgi traffic as
25 8ad1c570 2021-05-09 op * received by gmid.
26 8ad1c570 2021-05-09 op *
27 8ad1c570 2021-05-09 op * This will make gmid connect to a `debug.sock' socket (that must
28 8ad1c570 2021-05-09 op * exists) in the current directory and send there a copy of what gets
29 8ad1c570 2021-05-09 op * read. The socket can be created and monitored e.g. with
30 8ad1c570 2021-05-09 op *
31 8ad1c570 2021-05-09 op * rm -f debug.sock ; nc -Ulk ./debug.sock | hexdump -C
32 8ad1c570 2021-05-09 op *
33 8ad1c570 2021-05-09 op * NB: the sandbox must be disabled for this to work.
34 8ad1c570 2021-05-09 op */
35 8ad1c570 2021-05-09 op #define DEBUG_FCGI 0
36 8ad1c570 2021-05-09 op
37 f740b61b 2021-06-11 op #if DEBUG_FCGI
38 8ad1c570 2021-05-09 op # include <sys/un.h>
39 8ad1c570 2021-05-09 op static int debug_socket = -1;
40 8ad1c570 2021-05-09 op #endif
41 8ad1c570 2021-05-09 op
42 8ad1c570 2021-05-09 op struct fcgi_header {
43 8ad1c570 2021-05-09 op unsigned char version;
44 8ad1c570 2021-05-09 op unsigned char type;
45 8ad1c570 2021-05-09 op unsigned char req_id1;
46 8ad1c570 2021-05-09 op unsigned char req_id0;
47 8ad1c570 2021-05-09 op unsigned char content_len1;
48 8ad1c570 2021-05-09 op unsigned char content_len0;
49 8ad1c570 2021-05-09 op unsigned char padding;
50 8ad1c570 2021-05-09 op unsigned char reserved;
51 8ad1c570 2021-05-09 op };
52 8ad1c570 2021-05-09 op
53 8ad1c570 2021-05-09 op /*
54 8ad1c570 2021-05-09 op * number of bytes in a FCGI_HEADER. Future version of the protocol
55 8ad1c570 2021-05-09 op * will not reduce this number.
56 8ad1c570 2021-05-09 op */
57 8ad1c570 2021-05-09 op #define FCGI_HEADER_LEN 8
58 8ad1c570 2021-05-09 op
59 8ad1c570 2021-05-09 op /*
60 8ad1c570 2021-05-09 op * values for the version component
61 8ad1c570 2021-05-09 op */
62 8ad1c570 2021-05-09 op #define FCGI_VERSION_1 1
63 8ad1c570 2021-05-09 op
64 8ad1c570 2021-05-09 op /*
65 8ad1c570 2021-05-09 op * values for the type component
66 8ad1c570 2021-05-09 op */
67 8ad1c570 2021-05-09 op #define FCGI_BEGIN_REQUEST 1
68 8ad1c570 2021-05-09 op #define FCGI_ABORT_REQUEST 2
69 8ad1c570 2021-05-09 op #define FCGI_END_REQUEST 3
70 8ad1c570 2021-05-09 op #define FCGI_PARAMS 4
71 8ad1c570 2021-05-09 op #define FCGI_STDIN 5
72 8ad1c570 2021-05-09 op #define FCGI_STDOUT 6
73 8ad1c570 2021-05-09 op #define FCGI_STDERR 7
74 8ad1c570 2021-05-09 op #define FCGI_DATA 8
75 8ad1c570 2021-05-09 op #define FCGI_GET_VALUES 9
76 8ad1c570 2021-05-09 op #define FCGI_GET_VALUES_RESULT 10
77 8ad1c570 2021-05-09 op #define FCGI_UNKNOWN_TYPE 11
78 8ad1c570 2021-05-09 op #define FCGI_MAXTYPE (FCGI_UNKNOWN_TYPE)
79 8ad1c570 2021-05-09 op
80 8ad1c570 2021-05-09 op struct fcgi_begin_req {
81 8ad1c570 2021-05-09 op unsigned char role1;
82 8ad1c570 2021-05-09 op unsigned char role0;
83 8ad1c570 2021-05-09 op unsigned char flags;
84 8ad1c570 2021-05-09 op unsigned char reserved[5];
85 8ad1c570 2021-05-09 op };
86 8ad1c570 2021-05-09 op
87 8ad1c570 2021-05-09 op struct fcgi_begin_req_record {
88 8ad1c570 2021-05-09 op struct fcgi_header header;
89 8ad1c570 2021-05-09 op struct fcgi_begin_req body;
90 8ad1c570 2021-05-09 op };
91 8ad1c570 2021-05-09 op
92 8ad1c570 2021-05-09 op /*
93 8ad1c570 2021-05-09 op * mask for flags;
94 8ad1c570 2021-05-09 op */
95 8ad1c570 2021-05-09 op #define FCGI_KEEP_CONN 1
96 8ad1c570 2021-05-09 op
97 8ad1c570 2021-05-09 op /*
98 8ad1c570 2021-05-09 op * values for the role
99 8ad1c570 2021-05-09 op */
100 8ad1c570 2021-05-09 op #define FCGI_RESPONDER 1
101 8ad1c570 2021-05-09 op #define FCGI_AUTHORIZER 2
102 8ad1c570 2021-05-09 op #define FCGI_FILTER 3
103 8ad1c570 2021-05-09 op
104 8ad1c570 2021-05-09 op struct fcgi_end_req_body {
105 8ad1c570 2021-05-09 op unsigned char app_status3;
106 8ad1c570 2021-05-09 op unsigned char app_status2;
107 8ad1c570 2021-05-09 op unsigned char app_status1;
108 8ad1c570 2021-05-09 op unsigned char app_status0;
109 8ad1c570 2021-05-09 op unsigned char proto_status;
110 8ad1c570 2021-05-09 op unsigned char reserved[3];
111 8ad1c570 2021-05-09 op };
112 8ad1c570 2021-05-09 op
113 8ad1c570 2021-05-09 op /*
114 8ad1c570 2021-05-09 op * values for proto_status
115 8ad1c570 2021-05-09 op */
116 8ad1c570 2021-05-09 op #define FCGI_REQUEST_COMPLETE 0
117 8ad1c570 2021-05-09 op #define FCGI_CANT_MPX_CONN 1
118 8ad1c570 2021-05-09 op #define FCGI_OVERLOADED 2
119 8ad1c570 2021-05-09 op #define FCGI_UNKNOWN_ROLE 3
120 8ad1c570 2021-05-09 op
121 8ad1c570 2021-05-09 op /*
122 8ad1c570 2021-05-09 op * Variable names for FCGI_GET_VALUES / FCGI_GET_VALUES_RESULT
123 8ad1c570 2021-05-09 op * records.
124 8ad1c570 2021-05-09 op */
125 8ad1c570 2021-05-09 op #define FCGI_MAX_CONNS "FCGI_MAX_CONNS"
126 8ad1c570 2021-05-09 op #define FCGI_MAX_REQS "FCGI_MAX_REQS"
127 8ad1c570 2021-05-09 op #define FCGI_MPXS_CONNS "FCGI_MPXS_CONNS"
128 8ad1c570 2021-05-09 op
129 8ad1c570 2021-05-09 op static int
130 4cd25209 2021-10-07 op prepare_header(struct fcgi_header *h, int type, size_t size,
131 8ad1c570 2021-05-09 op size_t padding)
132 8ad1c570 2021-05-09 op {
133 4cd25209 2021-10-07 op int id = 1;
134 4cd25209 2021-10-07 op
135 8ad1c570 2021-05-09 op memset(h, 0, sizeof(*h));
136 8ad1c570 2021-05-09 op
137 8ad1c570 2021-05-09 op h->version = FCGI_VERSION_1;
138 4842c72d 2021-10-18 op h->type = type;
139 8ad1c570 2021-05-09 op h->req_id1 = (id >> 8);
140 8ad1c570 2021-05-09 op h->req_id0 = (id & 0xFF);
141 8ad1c570 2021-05-09 op h->content_len1 = (size >> 8);
142 8ad1c570 2021-05-09 op h->content_len0 = (size & 0xFF);
143 8ad1c570 2021-05-09 op h->padding = padding;
144 8ad1c570 2021-05-09 op
145 8ad1c570 2021-05-09 op return 0;
146 8ad1c570 2021-05-09 op }
147 8ad1c570 2021-05-09 op
148 8ad1c570 2021-05-09 op static int
149 4cd25209 2021-10-07 op fcgi_begin_request(struct bufferevent *bev)
150 8ad1c570 2021-05-09 op {
151 8ad1c570 2021-05-09 op struct fcgi_begin_req_record r;
152 8ad1c570 2021-05-09 op
153 8ad1c570 2021-05-09 op memset(&r, 0, sizeof(r));
154 4cd25209 2021-10-07 op prepare_header(&r.header, FCGI_BEGIN_REQUEST, sizeof(r.body), 0);
155 8ad1c570 2021-05-09 op assert(sizeof(r.body) == FCGI_HEADER_LEN);
156 8ad1c570 2021-05-09 op
157 8ad1c570 2021-05-09 op r.body.role1 = 0;
158 8ad1c570 2021-05-09 op r.body.role0 = FCGI_RESPONDER;
159 8ad1c570 2021-05-09 op r.body.flags = FCGI_KEEP_CONN;
160 8ad1c570 2021-05-09 op
161 741b69be 2021-09-26 op if (bufferevent_write(bev, &r, sizeof(r)) == -1)
162 8ad1c570 2021-05-09 op return -1;
163 8ad1c570 2021-05-09 op return 0;
164 8ad1c570 2021-05-09 op }
165 8ad1c570 2021-05-09 op
166 8ad1c570 2021-05-09 op static int
167 4cd25209 2021-10-07 op fcgi_send_param(struct bufferevent *bev, const char *name,
168 741b69be 2021-09-26 op const char *value)
169 8ad1c570 2021-05-09 op {
170 8ad1c570 2021-05-09 op struct fcgi_header h;
171 4842c72d 2021-10-18 op uint32_t namlen, vallen, padlen;
172 8ad1c570 2021-05-09 op uint8_t s[8];
173 8ad1c570 2021-05-09 op size_t size;
174 e5d82d94 2022-03-19 op const char padding[8] = { 0 };
175 8ad1c570 2021-05-09 op
176 8ad1c570 2021-05-09 op namlen = strlen(name);
177 8ad1c570 2021-05-09 op vallen = strlen(value);
178 8ad1c570 2021-05-09 op size = namlen + vallen + 8; /* 4 for the sizes */
179 8ad1c570 2021-05-09 op padlen = (8 - (size & 0x7)) & 0x7;
180 8ad1c570 2021-05-09 op
181 8ad1c570 2021-05-09 op s[0] = ( namlen >> 24) | 0x80;
182 8ad1c570 2021-05-09 op s[1] = ((namlen >> 16) & 0xFF);
183 8ad1c570 2021-05-09 op s[2] = ((namlen >> 8) & 0xFF);
184 8ad1c570 2021-05-09 op s[3] = ( namlen & 0xFF);
185 8ad1c570 2021-05-09 op
186 8ad1c570 2021-05-09 op s[4] = ( vallen >> 24) | 0x80;
187 8ad1c570 2021-05-09 op s[5] = ((vallen >> 16) & 0xFF);
188 8ad1c570 2021-05-09 op s[6] = ((vallen >> 8) & 0xFF);
189 8ad1c570 2021-05-09 op s[7] = ( vallen & 0xFF);
190 8ad1c570 2021-05-09 op
191 4cd25209 2021-10-07 op prepare_header(&h, FCGI_PARAMS, size, padlen);
192 8ad1c570 2021-05-09 op
193 741b69be 2021-09-26 op if (bufferevent_write(bev, &h, sizeof(h)) == -1 ||
194 741b69be 2021-09-26 op bufferevent_write(bev, s, sizeof(s)) == -1 ||
195 741b69be 2021-09-26 op bufferevent_write(bev, name, namlen) == -1 ||
196 741b69be 2021-09-26 op bufferevent_write(bev, value, vallen) == -1 ||
197 741b69be 2021-09-26 op bufferevent_write(bev, padding, padlen) == -1)
198 8ad1c570 2021-05-09 op return -1;
199 8ad1c570 2021-05-09 op
200 8ad1c570 2021-05-09 op return 0;
201 8ad1c570 2021-05-09 op }
202 8ad1c570 2021-05-09 op
203 8ad1c570 2021-05-09 op static int
204 4cd25209 2021-10-07 op fcgi_end_param(struct bufferevent *bev)
205 8ad1c570 2021-05-09 op {
206 8ad1c570 2021-05-09 op struct fcgi_header h;
207 8ad1c570 2021-05-09 op
208 4cd25209 2021-10-07 op prepare_header(&h, FCGI_PARAMS, 0, 0);
209 741b69be 2021-09-26 op if (bufferevent_write(bev, &h, sizeof(h)) == -1)
210 8ad1c570 2021-05-09 op return -1;
211 8ad1c570 2021-05-09 op
212 4cd25209 2021-10-07 op prepare_header(&h, FCGI_STDIN, 0, 0);
213 741b69be 2021-09-26 op if (bufferevent_write(bev, &h, sizeof(h)) == -1)
214 8ad1c570 2021-05-09 op return -1;
215 8ad1c570 2021-05-09 op
216 8ad1c570 2021-05-09 op return 0;
217 8ad1c570 2021-05-09 op }
218 8ad1c570 2021-05-09 op
219 8ad1c570 2021-05-09 op static inline int
220 8ad1c570 2021-05-09 op recid(struct fcgi_header *h)
221 8ad1c570 2021-05-09 op {
222 4cd25209 2021-10-07 op return h->req_id0 + (h->req_id1 << 8);
223 8ad1c570 2021-05-09 op }
224 8ad1c570 2021-05-09 op
225 8ad1c570 2021-05-09 op static inline int
226 8ad1c570 2021-05-09 op reclen(struct fcgi_header *h)
227 8ad1c570 2021-05-09 op {
228 8ad1c570 2021-05-09 op return h->content_len0 + (h->content_len1 << 8);
229 8ad1c570 2021-05-09 op }
230 8ad1c570 2021-05-09 op
231 090b8a89 2021-07-06 op void
232 741b69be 2021-09-26 op fcgi_read(struct bufferevent *bev, void *d)
233 8ad1c570 2021-05-09 op {
234 4cd25209 2021-10-07 op struct client *c = d;
235 741b69be 2021-09-26 op struct evbuffer *src = EVBUFFER_INPUT(bev);
236 741b69be 2021-09-26 op struct fcgi_header hdr;
237 8ad1c570 2021-05-09 op struct fcgi_end_req_body end;
238 8ad1c570 2021-05-09 op size_t len;
239 8ad1c570 2021-05-09 op
240 741b69be 2021-09-26 op #if DEBUG_FCGI
241 741b69be 2021-09-26 op if (debug_socket == -1) {
242 741b69be 2021-09-26 op struct sockaddr_un addr;
243 8ad1c570 2021-05-09 op
244 741b69be 2021-09-26 op if ((debug_socket = socket(AF_UNIX, SOCK_STREAM, 0)) == -1)
245 741b69be 2021-09-26 op err(1, "socket");
246 8ad1c570 2021-05-09 op
247 741b69be 2021-09-26 op memset(&addr, 0, sizeof(addr));
248 741b69be 2021-09-26 op addr.sun_family = AF_UNIX;
249 741b69be 2021-09-26 op strlcpy(addr.sun_path, "./debug.sock", sizeof(addr.sun_path));
250 741b69be 2021-09-26 op if (connect(debug_socket, (struct sockaddr*)&addr, sizeof(addr))
251 741b69be 2021-09-26 op == -1)
252 741b69be 2021-09-26 op err(1, "connect");
253 741b69be 2021-09-26 op }
254 741b69be 2021-09-26 op #endif
255 8ad1c570 2021-05-09 op
256 741b69be 2021-09-26 op for (;;) {
257 741b69be 2021-09-26 op if (EVBUFFER_LENGTH(src) < sizeof(hdr))
258 741b69be 2021-09-26 op return;
259 090b8a89 2021-07-06 op
260 741b69be 2021-09-26 op memcpy(&hdr, EVBUFFER_DATA(src), sizeof(hdr));
261 8ad1c570 2021-05-09 op
262 4cd25209 2021-10-07 op if (recid(&hdr) != 1) {
263 741b69be 2021-09-26 op log_err(NULL,
264 4cd25209 2021-10-07 op "got invalid client id %d from fcgi backend",
265 4cd25209 2021-10-07 op recid(&hdr));
266 8ad1c570 2021-05-09 op goto err;
267 741b69be 2021-09-26 op }
268 741b69be 2021-09-26 op
269 741b69be 2021-09-26 op len = reclen(&hdr);
270 8ad1c570 2021-05-09 op
271 741b69be 2021-09-26 op if (EVBUFFER_LENGTH(src) < sizeof(hdr) + len + hdr.padding)
272 741b69be 2021-09-26 op return;
273 8ad1c570 2021-05-09 op
274 741b69be 2021-09-26 op #if DEBUG_FCGI
275 c016b65c 2021-10-02 op write(debug_socket, EVBUFFER_DATA(src),
276 741b69be 2021-09-26 op sizeof(hdr) + len + hdr.padding);
277 741b69be 2021-09-26 op #endif
278 741b69be 2021-09-26 op
279 741b69be 2021-09-26 op evbuffer_drain(src, sizeof(hdr));
280 741b69be 2021-09-26 op
281 741b69be 2021-09-26 op switch (hdr.type) {
282 741b69be 2021-09-26 op case FCGI_END_REQUEST:
283 741b69be 2021-09-26 op if (len != sizeof(end)) {
284 741b69be 2021-09-26 op log_err(NULL,
285 741b69be 2021-09-26 op "got invalid end request record size");
286 741b69be 2021-09-26 op goto err;
287 741b69be 2021-09-26 op }
288 741b69be 2021-09-26 op bufferevent_read(bev, &end, sizeof(end));
289 741b69be 2021-09-26 op
290 741b69be 2021-09-26 op /* TODO: do something with the status? */
291 efe7d180 2021-10-02 op c->type = REQUEST_DONE;
292 efe7d180 2021-10-02 op client_write(c->bev, c);
293 741b69be 2021-09-26 op break;
294 741b69be 2021-09-26 op
295 741b69be 2021-09-26 op case FCGI_STDERR:
296 741b69be 2021-09-26 op /* discard stderr (for now) */
297 741b69be 2021-09-26 op evbuffer_drain(src, len);
298 741b69be 2021-09-26 op break;
299 741b69be 2021-09-26 op
300 741b69be 2021-09-26 op case FCGI_STDOUT:
301 d046e4d6 2021-10-04 op bufferevent_write(c->bev, EVBUFFER_DATA(src), len);
302 d046e4d6 2021-10-04 op evbuffer_drain(src, len);
303 741b69be 2021-09-26 op break;
304 8ad1c570 2021-05-09 op
305 741b69be 2021-09-26 op default:
306 741b69be 2021-09-26 op log_err(NULL, "got invalid fcgi record (type=%d)",
307 741b69be 2021-09-26 op hdr.type);
308 741b69be 2021-09-26 op goto err;
309 741b69be 2021-09-26 op }
310 8ad1c570 2021-05-09 op
311 741b69be 2021-09-26 op evbuffer_drain(src, hdr.padding);
312 741b69be 2021-09-26 op }
313 090b8a89 2021-07-06 op
314 741b69be 2021-09-26 op err:
315 4cd25209 2021-10-07 op fcgi_error(bev, EVBUFFER_ERROR, c);
316 741b69be 2021-09-26 op }
317 741b69be 2021-09-26 op
318 741b69be 2021-09-26 op void
319 741b69be 2021-09-26 op fcgi_write(struct bufferevent *bev, void *d)
320 741b69be 2021-09-26 op {
321 741b69be 2021-09-26 op /*
322 741b69be 2021-09-26 op * There's no much use for the write callback.
323 741b69be 2021-09-26 op */
324 8ad1c570 2021-05-09 op return;
325 741b69be 2021-09-26 op }
326 8ad1c570 2021-05-09 op
327 741b69be 2021-09-26 op void
328 741b69be 2021-09-26 op fcgi_error(struct bufferevent *bev, short err, void *d)
329 741b69be 2021-09-26 op {
330 4cd25209 2021-10-07 op struct client *c = d;
331 741b69be 2021-09-26 op
332 5f37f9c2 2021-10-02 op if (!(err & (EVBUFFER_ERROR|EVBUFFER_EOF)))
333 5f37f9c2 2021-10-02 op log_warn(NULL, "unknown event error (%x): %s",
334 5f37f9c2 2021-10-02 op err, strerror(errno));
335 741b69be 2021-09-26 op
336 4cd25209 2021-10-07 op c->type = REQUEST_DONE;
337 4cd25209 2021-10-07 op if (c->code != 0)
338 4cd25209 2021-10-07 op client_close(c);
339 4cd25209 2021-10-07 op else
340 4cd25209 2021-10-07 op start_reply(c, CGI_ERROR, "CGI error");
341 8ad1c570 2021-05-09 op }
342 8ad1c570 2021-05-09 op
343 8ad1c570 2021-05-09 op void
344 4cd25209 2021-10-07 op fcgi_req(struct client *c)
345 8ad1c570 2021-05-09 op {
346 f740b61b 2021-06-11 op char addr[NI_MAXHOST], buf[22];
347 d1051bfa 2021-05-15 op int e;
348 f740b61b 2021-06-11 op time_t tim;
349 f740b61b 2021-06-11 op struct tm tminfo;
350 f740b61b 2021-06-11 op struct envlist *p;
351 d1051bfa 2021-05-15 op
352 59c7ee13 2021-07-06 op e = getnameinfo((struct sockaddr*)&c->addr, sizeof(c->addr),
353 d1051bfa 2021-05-15 op addr, sizeof(addr),
354 d1051bfa 2021-05-15 op NULL, 0,
355 d1051bfa 2021-05-15 op NI_NUMERICHOST);
356 d1051bfa 2021-05-15 op if (e != 0)
357 b618111a 2021-10-02 op fatal("getnameinfo failed: %s (%s)",
358 b618111a 2021-10-02 op gai_strerror(e), strerror(errno));
359 d1051bfa 2021-05-15 op
360 4cd25209 2021-10-07 op fcgi_begin_request(c->cgibev);
361 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "GATEWAY_INTERFACE", "CGI/1.1");
362 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "GEMINI_URL_PATH", c->iri.path);
363 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "QUERY_STRING", c->iri.query);
364 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "REMOTE_ADDR", addr);
365 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "REMOTE_HOST", addr);
366 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "REQUEST_METHOD", "");
367 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "SERVER_NAME", c->iri.host);
368 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "SERVER_PROTOCOL", "GEMINI");
369 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "SERVER_SOFTWARE", GMID_VERSION);
370 f740b61b 2021-06-11 op
371 f740b61b 2021-06-11 op if (tls_peer_cert_provided(c->ctx)) {
372 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "AUTH_TYPE", "CERTIFICATE");
373 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "REMOTE_USER",
374 f740b61b 2021-06-11 op tls_peer_cert_subject(c->ctx));
375 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_CLIENT_ISSUER",
376 f740b61b 2021-06-11 op tls_peer_cert_issuer(c->ctx));
377 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_CLIENT_HASH",
378 f740b61b 2021-06-11 op tls_peer_cert_hash(c->ctx));
379 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_VERSION",
380 f740b61b 2021-06-11 op tls_conn_version(c->ctx));
381 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_CIPHER",
382 f740b61b 2021-06-11 op tls_conn_cipher(c->ctx));
383 8ad1c570 2021-05-09 op
384 f740b61b 2021-06-11 op snprintf(buf, sizeof(buf), "%d",
385 f740b61b 2021-06-11 op tls_conn_cipher_strength(c->ctx));
386 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_CIPHER_STRENGTH", buf);
387 f740b61b 2021-06-11 op
388 f740b61b 2021-06-11 op tim = tls_peer_cert_notbefore(c->ctx);
389 f740b61b 2021-06-11 op strftime(buf, sizeof(buf), "%FT%TZ",
390 f740b61b 2021-06-11 op gmtime_r(&tim, &tminfo));
391 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_CLIENT_NOT_BEFORE", buf);
392 f740b61b 2021-06-11 op
393 f740b61b 2021-06-11 op tim = tls_peer_cert_notafter(c->ctx);
394 f740b61b 2021-06-11 op strftime(buf, sizeof(buf), "%FT%TZ",
395 f740b61b 2021-06-11 op gmtime_r(&tim, &tminfo));
396 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "TLS_CLIENT_NOT_AFTER", buf);
397 f740b61b 2021-06-11 op
398 f740b61b 2021-06-11 op TAILQ_FOREACH(p, &c->host->params, envs) {
399 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, p->name, p->value);
400 f740b61b 2021-06-11 op }
401 f740b61b 2021-06-11 op } else
402 4cd25209 2021-10-07 op fcgi_send_param(c->cgibev, "AUTH_TYPE", "");
403 f740b61b 2021-06-11 op
404 4cd25209 2021-10-07 op if (fcgi_end_param(c->cgibev) == -1)
405 4cd25209 2021-10-07 op fcgi_error(c->cgibev, EVBUFFER_ERROR, c);
406 8ad1c570 2021-05-09 op }