]> git.meshlink.io Git - meshlink/blob - src/control.c
Add PRF to derive key material from the ECDH shared secret.
[meshlink] / src / control.c
1 /*
2     control.c -- Control socket handling.
3     Copyright (C) 2007 Guus Sliepen <guus@tinc-vpn.org>
4
5     This program is free software; you can redistribute it and/or modify
6     it under the terms of the GNU General Public License as published by
7     the Free Software Foundation; either version 2 of the License, or
8     (at your option) any later version.
9
10     This program is distributed in the hope that it will be useful,
11     but WITHOUT ANY WARRANTY; without even the implied warranty of
12     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13     GNU General Public License for more details.
14
15     You should have received a copy of the GNU General Public License along
16     with this program; if not, write to the Free Software Foundation, Inc.,
17     51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
18 */
19
20 #include "system.h"
21 #include "crypto.h"
22 #include "conf.h"
23 #include "control.h"
24 #include "control_common.h"
25 #include "graph.h"
26 #include "logger.h"
27 #include "meta.h"
28 #include "net.h"
29 #include "netutl.h"
30 #include "protocol.h"
31 #include "route.h"
32 #include "splay_tree.h"
33 #include "utils.h"
34 #include "xalloc.h"
35
36 char controlcookie[65];
37 extern char *pidfilename;
38
39 static bool control_return(connection_t *c, int type, int error) {
40         return send_request(c, "%d %d %d", CONTROL, type, error);
41 }
42
43 static bool control_ok(connection_t *c, int type) {
44         return control_return(c, type, 0);
45 }
46
47 bool control_h(connection_t *c, char *request) {
48         int type;
49
50         if(!c->status.control || c->allow_request != CONTROL) {
51                 logger(LOG_ERR, "Unauthorized control request from %s (%s)", c->name, c->hostname);
52                 return false;
53         }
54
55         if(sscanf(request, "%*d %d", &type) != 1) {
56                 logger(LOG_ERR, "Got bad %s from %s (%s)", "CONTROL", c->name, c->hostname);
57                 return false;
58         }
59
60         switch (type) {
61                 case REQ_STOP:
62                         event_loopexit(NULL);
63                         return control_ok(c, REQ_STOP);
64
65                 case REQ_DUMP_NODES:
66                         return dump_nodes(c);
67                         
68                 case REQ_DUMP_EDGES:
69                         return dump_edges(c);
70
71                 case REQ_DUMP_SUBNETS:
72                         return dump_subnets(c);
73
74                 case REQ_DUMP_CONNECTIONS:
75                         return dump_connections(c);
76
77                 case REQ_PURGE:
78                         purge();
79                         return control_ok(c, REQ_PURGE);
80
81                 case REQ_SET_DEBUG: {
82                         int new_level;
83                         if(sscanf(request, "%*d %*d %d", &new_level) != 1)
84                                 return false;
85                         send_request(c, "%d %d %d", CONTROL, REQ_SET_DEBUG, debug_level);
86                         if(new_level >= 0)
87                                 debug_level = new_level;
88                         return true;
89                 }
90
91                 case REQ_RETRY:
92                         retry();
93                         return control_ok(c, REQ_RETRY);
94
95                 case REQ_RELOAD:
96                         logger(LOG_NOTICE, "Got '%s' command", "reload");
97                         int result = reload_configuration();
98                         return control_return(c, REQ_RELOAD, result);
99
100                 case REQ_DISCONNECT: {
101                         char name[MAX_STRING_SIZE];
102                         connection_t *other;
103                         splay_node_t *node, *next;
104                         bool found = false;
105
106                         if(sscanf(request, "%*d %*d " MAX_STRING, name) != 1)
107                                 return control_return(c, REQ_DISCONNECT, -1);
108
109                         for(node = connection_tree->head; node; node = next) {
110                                 next = node->next;
111                                 other = node->data;
112                                 if(strcmp(other->name, name))
113                                         continue;
114                                 terminate_connection(other, other->status.active);
115                                 found = true;
116                         }
117
118                         return control_return(c, REQ_DISCONNECT, found ? 0 : -2);
119                 }
120
121                 case REQ_DUMP_TRAFFIC:
122                         return dump_traffic(c);
123
124                 case REQ_PCAP:
125                         c->status.pcap = true;
126                         pcap = true;
127                         return true;
128
129                 default:
130                         return send_request(c, "%d %d", CONTROL, REQ_INVALID);
131         }
132 }
133
134 bool init_control(void) {
135         randomize(controlcookie, sizeof controlcookie / 2);
136         bin2hex(controlcookie, controlcookie, sizeof controlcookie / 2);
137         controlcookie[sizeof controlcookie - 1] = 0;
138
139         FILE *f = fopen(pidfilename, "w");
140         if(!f) {
141                 logger(LOG_ERR, "Cannot write control socket cookie file %s: %s", pidfilename, strerror(errno));
142                 return false;
143         }
144
145 #ifdef HAVE_FCHMOD
146         fchmod(fileno(f), 0600);
147 #else
148         chmod(pidfilename, 0600);
149 #endif
150         // Get the address and port of the first listening socket
151
152         char *localhost = NULL;
153         sockaddr_t sa;
154         socklen_t len = sizeof sa;
155
156         if(getsockname(listen_socket[0].tcp, (struct sockaddr *)&sa, &len))
157                 xasprintf(&localhost, "127.0.0.1 port %d", myport);
158         else
159                 localhost = sockaddr2hostname(&sa);
160
161         fprintf(f, "%d %s %s\n", (int)getpid(), controlcookie, localhost);
162
163         free(localhost);
164         fclose(f);
165
166         return true;
167 }
168
169 void exit_control(void) {
170         unlink(pidfilename);
171 }