2 * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
4 * Permission to use, copy, modify, and distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
32 static void handle_imsg_cgi_req(struct imsgbuf*, struct imsg*, size_t);
33 static void handle_imsg_fcgi_req(struct imsgbuf*, struct imsg*, size_t);
34 static void handle_imsg_quit(struct imsgbuf*, struct imsg*, size_t);
35 static void handle_dispatch_imsg(int, short, void*);
37 static imsg_handlerfn *handlers[] = {
38 [IMSG_FCGI_REQ] = handle_imsg_fcgi_req,
39 [IMSG_CGI_REQ] = handle_imsg_cgi_req,
40 [IMSG_QUIT] = handle_imsg_quit,
44 safe_setenv(const char *name, const char *val)
52 xasprintf(const char *fmt, ...)
58 if (vasprintf(&s, fmt, ap) == -1)
66 do_exec(const char *ex, const char *spath, char *query)
68 char **argv, buf[PATH_MAX], *sname, *t;
71 /* restore the default handlers */
72 signal(SIGPIPE, SIG_DFL);
73 signal(SIGCHLD, SIG_DFL);
74 signal(SIGHUP, SIG_DFL);
75 signal(SIGINT, SIG_DFL);
76 signal(SIGTERM, SIG_DFL);
78 strlcpy(buf, spath, sizeof(buf));
79 sname = basename(buf);
81 if (query == NULL || strchr(query, '=') != NULL) {
82 if ((argv = calloc(2, sizeof(char*))) == NULL)
86 warn("execvp: %s", argv[0]);
91 for (t = query ;; t++, n++) {
92 if ((t = strchr(t, '+')) == NULL)
96 if ((argv = calloc(n+2, sizeof(char*))) == NULL)
100 for (i = 0; i < n; ++i) {
101 t = strchr(query, '+');
104 argv[i+1] = pct_decode_str(query);
109 warn("execvp: %s", argv[0]);
113 setenv_time(const char *var, time_t t)
121 strftime(timebuf, sizeof(timebuf), "%FT%TZ",
122 gmtime_r(&t, &tminfo));
123 setenv(var, timebuf, 1);
126 /* fd or -1 on error */
128 launch_cgi(struct iri *iri, struct cgireq *req, struct vhost *vhost,
129 struct location *loc)
131 int p[2], errp[2]; /* read end, write end */
135 if (pipe(errp) == -1)
142 case 0: { /* child */
144 char iribuf[GEMINI_URL_LEN];
149 if (dup2(p[1], 1) == -1)
153 if (dup2(errp[1], 2) == -1)
156 ex = xasprintf("%s/%s", loc->dir, req->spath);
158 serialize_iri(iri, iribuf, sizeof(iribuf));
160 safe_setenv("GATEWAY_INTERFACE", "CGI/1.1");
161 safe_setenv("GEMINI_DOCUMENT_ROOT", loc->dir);
162 safe_setenv("GEMINI_SCRIPT_FILENAME",
163 xasprintf("%s/%s", loc->dir, req->spath));
164 safe_setenv("GEMINI_URL", iribuf);
166 strlcpy(path, "/", sizeof(path));
167 strlcat(path, req->spath, sizeof(path));
168 safe_setenv("GEMINI_URL_PATH", path);
170 if (*req->relpath != '\0') {
171 strlcpy(path, "/", sizeof(path));
172 strlcat(path, req->relpath, sizeof(path));
173 safe_setenv("PATH_INFO", path);
175 strlcpy(path, loc->dir, sizeof(path));
176 strlcat(path, "/", sizeof(path));
177 strlcat(path, req->relpath, sizeof(path));
178 safe_setenv("PATH_TRANSLATED", path);
181 safe_setenv("QUERY_STRING", iri->query);
182 safe_setenv("REMOTE_ADDR", req->addr);
183 safe_setenv("REMOTE_HOST", req->addr);
184 safe_setenv("REQUEST_METHOD", "");
186 strlcpy(path, "/", sizeof(path));
187 strlcat(path, req->spath, sizeof(path));
188 safe_setenv("SCRIPT_NAME", path);
190 safe_setenv("SERVER_NAME", iri->host);
192 snprintf(path, sizeof(path), "%d", conf.port);
193 safe_setenv("SERVER_PORT", path);
195 safe_setenv("SERVER_PROTOCOL", "GEMINI");
196 safe_setenv("SERVER_SOFTWARE", GMID_VERSION);
198 if (*req->subject != '\0')
199 safe_setenv("AUTH_TYPE", "Certificate");
201 safe_setenv("AUTH_TYPE", "");
203 safe_setenv("REMOTE_USER", req->subject);
204 safe_setenv("TLS_CLIENT_ISSUER", req->issuer);
205 safe_setenv("TLS_CLIENT_HASH", req->hash);
206 safe_setenv("TLS_VERSION", req->version);
207 safe_setenv("TLS_CIPHER", req->cipher);
209 snprintf(path, sizeof(path), "%d", req->cipher_strength);
210 safe_setenv("TLS_CIPHER_STRENGTH", path);
212 setenv_time("TLS_CLIENT_NOT_AFTER", req->notafter);
213 setenv_time("TLS_CLIENT_NOT_BEFORE", req->notbefore);
215 TAILQ_FOREACH(e, &vhost->env, envs) {
216 safe_setenv(e->name, e->value);
219 strlcpy(path, ex, sizeof(path));
227 do_exec(ex, req->spath, iri->query);
239 dprintf(p[1], "%d internal server error\r\n", TEMP_FAILURE);
243 static struct vhost *
248 TAILQ_FOREACH(h, &hosts, vhosts) {
257 static struct location *
258 loc_nth(struct vhost *vhost, size_t n)
260 struct location *loc;
262 TAILQ_FOREACH(loc, &vhost->locations, locations) {
272 handle_imsg_cgi_req(struct imsgbuf *ibuf, struct imsg *imsg, size_t datalen)
280 if (datalen != sizeof(req))
283 memcpy(&req, imsg->data, datalen);
285 iri.schema = req.iri_schema_off + req.buf;
286 iri.host = req.iri_host_off + req.buf;
287 iri.port = req.iri_port_off + req.buf;
288 iri.path = req.iri_path_off + req.buf;
289 iri.query = req.iri_query_off + req.buf;
290 iri.fragment = req.iri_fragment_off + req.buf;
292 /* patch the query, otherwise do_exec will always pass "" as
293 * first argument to the script. */
294 if (*iri.query == '\0')
297 if ((h = host_nth(req.host_off)) == NULL)
300 if ((l = loc_nth(h, req.loc_off)) == NULL)
303 fd = launch_cgi(&iri, &req, h, l);
304 imsg_compose(ibuf, IMSG_CGI_RES, imsg->hdr.peerid, 0, fd, NULL, 0);
309 fcgi_open_prog(struct fcgi *f)
316 if (socketpair(AF_UNIX, SOCK_STREAM, PF_UNIX, s) == -1)
317 err(1, "socketpair");
319 switch (p = fork()) {
324 if (dup2(s[1], 0) == -1)
326 execl(f->prog, f->prog, NULL);
327 err(1, "execl %s", f->prog);
335 fcgi_open_sock(struct fcgi *f)
337 struct sockaddr_un addr;
340 if ((fd = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) {
341 log_err(NULL, "socket: %s", strerror(errno));
345 memset(&addr, 0, sizeof(addr));
346 addr.sun_family = AF_UNIX;
347 strlcpy(addr.sun_path, f->path, sizeof(addr.sun_path));
349 if (connect(fd, (struct sockaddr*)&addr, sizeof(addr)) == -1) {
350 log_warn(NULL, "failed to connect to %s: %s", f->path,
360 fcgi_open_conn(struct fcgi *f)
362 struct addrinfo hints, *servinfo, *p;
365 memset(&hints, 0, sizeof(hints));
366 hints.ai_family = AF_UNSPEC;
367 hints.ai_socktype = SOCK_STREAM;
368 hints.ai_flags = AI_ADDRCONFIG;
370 if ((r = getaddrinfo(f->path, f->port, &hints, &servinfo)) != 0) {
371 log_warn(NULL, "getaddrinfo %s:%s: %s", f->path, f->port,
376 for (p = servinfo; p != NULL; p = p->ai_next) {
377 sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol);
380 if (connect(sock, p->ai_addr, p->ai_addrlen) == -1) {
388 log_warn(NULL, "couldn't connect to %s:%s", f->path, f->port);
392 freeaddrinfo(servinfo);
397 handle_imsg_fcgi_req(struct imsgbuf *ibuf, struct imsg *imsg, size_t datalen)
402 if (datalen != sizeof(id))
404 memcpy(&id, imsg->data, datalen);
406 if (id > FCGI_MAX || (fcgi[id].path == NULL && fcgi[id].prog == NULL))
411 fd = fcgi_open_prog(f);
412 else if (f->port != NULL)
413 fd = fcgi_open_conn(f);
415 fd = fcgi_open_sock(f);
417 imsg_compose(ibuf, IMSG_FCGI_FD, id, 0, fd, NULL, 0);
422 handle_imsg_quit(struct imsgbuf *ibuf, struct imsg *imsg, size_t datalen)
430 for (i = 0; i < conf.prefork; ++i) {
431 imsg_compose(&servibuf[i], IMSG_QUIT, 0, 0, -1, NULL, 0);
433 close(servibuf[i].fd);
440 handle_dispatch_imsg(int fd, short ev, void *d)
442 struct imsgbuf *ibuf = d;
443 dispatch_imsg(ibuf, handlers, sizeof(handlers));
447 executor_main(struct imsgbuf *ibuf)
449 struct event evs[PROC_MAX], imsgev;
455 event_set(&imsgev, ibuf->fd, EV_READ | EV_PERSIST,
456 handle_dispatch_imsg, ibuf);
457 event_add(&imsgev, NULL);
460 for (i = 0; i < conf.prefork; ++i) {
461 event_set(&evs[i], servibuf[i].fd, EV_READ | EV_PERSIST,
462 handle_dispatch_imsg, &servibuf[i]);
463 event_add(&evs[i], NULL);
466 sandbox_executor_process();