X-Git-Url: http://git.meshlink.io/?a=blobdiff_plain;f=src%2Fprotocol_auth.c;h=82254593e36aa0a5982ad447dae801c5baa76f89;hb=a021bf25db676353b8ea50740ce343962c3dddb9;hp=fa71874f3d4e3464dbeb4f0efddb270b98efafb3;hpb=56ecf5049433a45c865f945915b65bdae307ba4f;p=meshlink diff --git a/src/protocol_auth.c b/src/protocol_auth.c index fa71874f..82254593 100644 --- a/src/protocol_auth.c +++ b/src/protocol_auth.c @@ -36,22 +36,24 @@ #include "utils.h" #include "xalloc.h" #include "ed25519/sha512.h" + +extern bool node_write_devclass(meshlink_handle_t *mesh, node_t *n); -static bool send_proxyrequest(connection_t *c) { +static bool send_proxyrequest(meshlink_handle_t *mesh, connection_t *c) { switch(mesh->proxytype) { case PROXY_HTTP: { char *host; char *port; sockaddr2str(&c->address, &host, &port); - send_request(c, "CONNECT %s:%s HTTP/1.1\r\n\r", host, port); + send_request(mesh, c, "CONNECT %s:%s HTTP/1.1\r\n\r", host, port); free(host); free(port); return true; } case PROXY_SOCKS4: { if(c->address.sa.sa_family != AF_INET) { - logger(DEBUG_ALWAYS, LOG_ERR, "Cannot connect to an IPv6 host through a SOCKS 4 proxy!"); + logger(mesh, MESHLINK_ERROR, "Cannot connect to an IPv6 host through a SOCKS 4 proxy!"); return false; } char s4req[9 + (mesh->proxyuser ? strlen(mesh->proxyuser) : 0)]; @@ -63,7 +65,7 @@ static bool send_proxyrequest(connection_t *c) { memcpy(s4req + 8, mesh->proxyuser, strlen(mesh->proxyuser)); s4req[sizeof s4req - 1] = 0; c->tcplen = 8; - return send_meta(c, s4req, sizeof s4req); + return send_meta(mesh, c, s4req, sizeof s4req); } case PROXY_SOCKS5: { int len = 3 + 6 + (c->address.sa.sa_family == AF_INET ? 4 : 16); @@ -105,39 +107,38 @@ static bool send_proxyrequest(connection_t *c) { i += 2; c->tcplen += 22; } else { - logger(DEBUG_ALWAYS, LOG_ERR, "Address family %hx not supported for SOCKS 5 proxies!", c->address.sa.sa_family); + logger(mesh, MESHLINK_ERROR, "Address family %hx not supported for SOCKS 5 proxies!", c->address.sa.sa_family); return false; } if(i > len) abort(); - return send_meta(c, s5req, sizeof s5req); + return send_meta(mesh, c, s5req, sizeof s5req); } case PROXY_SOCKS4A: - logger(DEBUG_ALWAYS, LOG_ERR, "Proxy type not implemented yet"); + logger(mesh, MESHLINK_ERROR, "Proxy type not implemented yet"); return false; case PROXY_EXEC: return true; default: - logger(DEBUG_ALWAYS, LOG_ERR, "Unknown proxy type"); + logger(mesh, MESHLINK_ERROR, "Unknown proxy type"); return false; } } -bool send_id(connection_t *c) { - gettimeofday(&c->start, NULL); - +bool send_id(meshlink_handle_t *mesh, connection_t *c) { + int minor = mesh->self->connection->protocol_minor; if(mesh->proxytype && c->outgoing) - if(!send_proxyrequest(c)) + if(!send_proxyrequest(mesh, c)) return false; - return send_request(c, "%d %s %d.%d", ID, mesh->self->connection->name, mesh->self->connection->protocol_major, minor); + return send_request(mesh, c, "%d %s %d.%d", ID, mesh->self->connection->name, mesh->self->connection->protocol_major, minor); } -static bool finalize_invitation(connection_t *c, const char *data, uint16_t len) { +static bool finalize_invitation(meshlink_handle_t *mesh, connection_t *c, const void *data, uint16_t len) { if(strchr(data, '\n')) { - logger(DEBUG_ALWAYS, LOG_ERR, "Received invalid key from invited node %s (%s)!\n", c->name, c->hostname); + logger(mesh, MESHLINK_ERROR, "Received invalid key from invited node %s (%s)!\n", c->name, c->hostname); return false; } @@ -145,35 +146,39 @@ static bool finalize_invitation(connection_t *c, const char *data, uint16_t len) char filename[PATH_MAX]; snprintf(filename, sizeof filename, "%s" SLASH "hosts" SLASH "%s", mesh->confbase, c->name); if(!access(filename, F_OK)) { - logger(DEBUG_ALWAYS, LOG_ERR, "Host config file for %s (%s) already exists!\n", c->name, c->hostname); + logger(mesh, MESHLINK_ERROR, "Host config file for %s (%s) already exists!\n", c->name, c->hostname); return false; } FILE *f = fopen(filename, "w"); if(!f) { - logger(DEBUG_ALWAYS, LOG_ERR, "Error trying to create %s: %s\n", filename, strerror(errno)); + logger(mesh, MESHLINK_ERROR, "Error trying to create %s: %s\n", filename, strerror(errno)); return false; } - fprintf(f, "ECDSAPublicKey = %s\n", data); + fprintf(f, "ECDSAPublicKey = %s\n", (const char *)data); fclose(f); - logger(DEBUG_CONNECTIONS, LOG_INFO, "Key succesfully received from %s (%s)", c->name, c->hostname); + logger(mesh, MESHLINK_INFO, "Key succesfully received from %s (%s)", c->name, c->hostname); //TODO: callback to application to inform of an accepted invitation sptps_send_record(&c->sptps, 2, data, 0); + + load_all_nodes(mesh); + return true; } -static bool receive_invitation_sptps(void *handle, uint8_t type, const char *data, uint16_t len) { +static bool receive_invitation_sptps(void *handle, uint8_t type, const void *data, uint16_t len) { connection_t *c = handle; + meshlink_handle_t *mesh = c->mesh; if(type == 128) return true; if(type == 1 && c->status.invitation_used) - return finalize_invitation(c, data, len); + return finalize_invitation(mesh, c, data, len); if(type != 0 || len != 18 || c->status.invitation_used) return false; @@ -196,16 +201,16 @@ static bool receive_invitation_sptps(void *handle, uint8_t type, const char *dat // Atomically rename the invitation file if(rename(filename, usedname)) { if(errno == ENOENT) - logger(DEBUG_ALWAYS, LOG_ERR, "Peer %s tried to use non-existing invitation %s\n", c->hostname, cookie); + logger(mesh, MESHLINK_ERROR, "Peer %s tried to use non-existing invitation %s\n", c->hostname, cookie); else - logger(DEBUG_ALWAYS, LOG_ERR, "Error trying to rename invitation %s\n", cookie); + logger(mesh, MESHLINK_ERROR, "Error trying to rename invitation %s\n", cookie); return false; } // Open the renamed file FILE *f = fopen(usedname, "r"); if(!f) { - logger(DEBUG_ALWAYS, LOG_ERR, "Error trying to open invitation %s\n", cookie); + logger(mesh, MESHLINK_ERROR, "Error trying to open invitation %s\n", cookie); return false; } @@ -225,7 +230,7 @@ static bool receive_invitation_sptps(void *handle, uint8_t type, const char *dat buf[len] = 0; if(!*buf || !*name || strcasecmp(buf, "Name") || !check_id(name)) { - logger(DEBUG_ALWAYS, LOG_ERR, "Invalid invitation file %s\n", cookie); + logger(mesh, MESHLINK_ERROR, "Invalid invitation file %s\n", cookie); fclose(f); return false; } @@ -244,15 +249,15 @@ static bool receive_invitation_sptps(void *handle, uint8_t type, const char *dat c->status.invitation_used = true; - logger(DEBUG_CONNECTIONS, LOG_INFO, "Invitation %s succesfully sent to %s (%s)", cookie, c->name, c->hostname); + logger(mesh, MESHLINK_INFO, "Invitation %s succesfully sent to %s (%s)", cookie, c->name, c->hostname); return true; } -bool id_h(connection_t *c, const char *request) { +bool id_h(meshlink_handle_t *mesh, connection_t *c, const char *request) { char name[MAX_STRING_SIZE]; if(sscanf(request, "%*d " MAX_STRING " %d.%d", name, &c->protocol_major, &c->protocol_minor) < 2) { - logger(DEBUG_ALWAYS, LOG_ERR, "Got bad %s from %s (%s)", "ID", c->name, + logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s)", "ID", c->name, c->hostname); return false; } @@ -261,13 +266,13 @@ bool id_h(connection_t *c, const char *request) { if(name[0] == '?') { if(!mesh->invitation_key) { - logger(DEBUG_ALWAYS, LOG_ERR, "Got invitation from %s but we don't have an invitation key", c->hostname); + logger(mesh, MESHLINK_ERROR, "Got invitation from %s but we don't have an invitation key", c->hostname); return false; } c->ecdsa = ecdsa_set_base64_public_key(name + 1); if(!c->ecdsa) { - logger(DEBUG_ALWAYS, LOG_ERR, "Got bad invitation from %s", c->hostname); + logger(mesh, MESHLINK_ERROR, "Got bad invitation from %s", c->hostname); return false; } @@ -275,19 +280,20 @@ bool id_h(connection_t *c, const char *request) { char *mykey = ecdsa_get_base64_public_key(mesh->invitation_key); if(!mykey) return false; - if(!send_request(c, "%d %s", ACK, mykey)) + if(!send_request(mesh, c, "%d %s", ACK, mykey)) return false; free(mykey); c->protocol_minor = 2; + c->allow_request = 1; - return sptps_start(&c->sptps, c, false, false, mesh->invitation_key, c->ecdsa, "tinc invitation", 15, send_meta_sptps, receive_invitation_sptps); + return sptps_start(&c->sptps, c, false, false, mesh->invitation_key, c->ecdsa, "meshlink invitation", 15, send_meta_sptps, receive_invitation_sptps); } /* Check if identity is a valid name */ if(!check_id(name)) { - logger(DEBUG_ALWAYS, LOG_ERR, "Got bad %s from %s (%s): %s", "ID", c->name, + logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s): %s", "ID", c->name, c->hostname, "invalid name"); return false; } @@ -296,7 +302,7 @@ bool id_h(connection_t *c, const char *request) { if(c->outgoing) { if(strcmp(c->name, name)) { - logger(DEBUG_ALWAYS, LOG_ERR, "Peer %s is %s instead of %s", c->hostname, name, + logger(mesh, MESHLINK_ERROR, "Peer %s is %s instead of %s", c->hostname, name, c->name); return false; } @@ -309,7 +315,7 @@ bool id_h(connection_t *c, const char *request) { /* Check if version matches */ if(c->protocol_major != mesh->self->connection->protocol_major) { - logger(DEBUG_ALWAYS, LOG_ERR, "Peer %s (%s) uses incompatible version %d.%d", + logger(mesh, MESHLINK_ERROR, "Peer %s (%s) uses incompatible version %d.%d", c->name, c->hostname, c->protocol_major, c->protocol_minor); return false; } @@ -317,12 +323,12 @@ bool id_h(connection_t *c, const char *request) { if(!c->config_tree) { init_configuration(&c->config_tree); - if(!read_host_config(c->config_tree, c->name)) { - logger(DEBUG_ALWAYS, LOG_ERR, "Peer %s had unknown identity (%s)", c->hostname, c->name); + if(!read_host_config(mesh, c->config_tree, c->name)) { + logger(mesh, MESHLINK_ERROR, "Peer %s had unknown identity (%s)", c->hostname, c->name); return false; } - read_ecdsa_public_key(c); + read_ecdsa_public_key(mesh, c); } else { if(c->protocol_minor && !ecdsa_active(c->ecdsa)) c->protocol_minor = 1; @@ -331,7 +337,7 @@ bool id_h(connection_t *c, const char *request) { /* Forbid version rollback for nodes whose ECDSA key we know */ if(ecdsa_active(c->ecdsa) && c->protocol_minor < 2) { - logger(DEBUG_ALWAYS, LOG_ERR, "Peer %s (%s) tries to roll back protocol version to %d.%d", + logger(mesh, MESHLINK_ERROR, "Peer %s (%s) tries to roll back protocol version to %d.%d", c->name, c->hostname, c->protocol_major, c->protocol_minor); return false; } @@ -340,84 +346,82 @@ bool id_h(connection_t *c, const char *request) { char label[25 + strlen(mesh->self->name) + strlen(c->name)]; if(c->outgoing) - snprintf(label, sizeof label, "tinc TCP key expansion %s %s", mesh->self->name, c->name); + snprintf(label, sizeof label, "meshlink TCP key expansion %s %s", mesh->self->name, c->name); else - snprintf(label, sizeof label, "tinc TCP key expansion %s %s", c->name, mesh->self->name); + snprintf(label, sizeof label, "meshlink TCP key expansion %s %s", c->name, mesh->self->name); return sptps_start(&c->sptps, c, c->outgoing, false, mesh->self->connection->ecdsa, c->ecdsa, label, sizeof label, send_meta_sptps, receive_meta_sptps); } -bool send_ack(connection_t *c) { - /* ACK message contains rest of the information the other end needs - to create node_t and edge_t structures. */ - - struct timeval now; - bool choice; - - /* Estimate weight */ - - gettimeofday(&now, NULL); - c->estimated_weight = (now.tv_sec - c->start.tv_sec) * 1000 + (now.tv_usec - c->start.tv_usec) / 1000; +bool send_ack(meshlink_handle_t *mesh, connection_t *c) { /* Check some options */ if(mesh->self->options & OPTION_PMTU_DISCOVERY) c->options |= OPTION_PMTU_DISCOVERY; - return send_request(c, "%d %s %d %x", ACK, mesh->myport, c->estimated_weight, (c->options & 0xffffff) | (PROT_MINOR << 24)); + return send_request(mesh, c, "%d %s %d %x", ACK, mesh->myport, mesh->devclass, (c->options & 0xffffff) | (PROT_MINOR << 24)); } -static void send_everything(connection_t *c) { +static void send_everything(meshlink_handle_t *mesh, connection_t *c) { /* Send all known subnets and edges */ for splay_each(node_t, n, mesh->nodes) { for splay_each(edge_t, e, n->edge_tree) - send_add_edge(c, e); + send_add_edge(mesh, c, e); } } -bool ack_h(connection_t *c, const char *request) { +bool ack_h(meshlink_handle_t *mesh, connection_t *c, const char *request) { char hisport[MAX_STRING_SIZE]; char *hisaddress; - int weight, mtu; + int devclass; uint32_t options; node_t *n; - bool choice; - if(sscanf(request, "%*d " MAX_STRING " %d %x", hisport, &weight, &options) != 3) { - logger(DEBUG_ALWAYS, LOG_ERR, "Got bad %s from %s (%s)", "ACK", c->name, + if(sscanf(request, "%*d " MAX_STRING " %d %x", hisport, &devclass, &options) != 3) { + logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s)", "ACK", c->name, c->hostname); return false; } + if(devclass < 0 || devclass > _DEV_CLASS_MAX) { + logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s): %s", "ACK", c->name, + c->hostname, "devclass invalid"); + return false; + } + /* Check if we already have a node_t for him */ - n = lookup_node(c->name); + n = lookup_node(mesh, c->name); if(!n) { n = new_node(); n->name = xstrdup(c->name); - node_add(n); + node_add(mesh, n); } else { if(n->connection) { /* Oh dear, we already have a connection to this node. */ - logger(DEBUG_CONNECTIONS, LOG_DEBUG, "Established a second connection with %s (%s), closing old connection", n->connection->name, n->connection->hostname); + logger(mesh, MESHLINK_DEBUG, "Established a second connection with %s (%s), closing old connection", n->connection->name, n->connection->hostname); if(n->connection->outgoing) { if(c->outgoing) - logger(DEBUG_ALWAYS, LOG_WARNING, "Two outgoing connections to the same node!"); + logger(mesh, MESHLINK_WARNING, "Two outgoing connections to the same node!"); else c->outgoing = n->connection->outgoing; n->connection->outgoing = NULL; } - terminate_connection(n->connection, false); + terminate_connection(mesh, n->connection, false); /* Run graph algorithm to keep things in sync */ - graph(); + graph(mesh); } } + n->devclass = devclass; + node_write_devclass(mesh, n); + n->connection = c; c->node = n; if(!(c->options & options & OPTION_PMTU_DISCOVERY)) { @@ -431,12 +435,12 @@ bool ack_h(connection_t *c, const char *request) { c->allow_request = ALL; c->status.active = true; - logger(DEBUG_CONNECTIONS, LOG_NOTICE, "Connection with %s (%s) activated", c->name, + logger(mesh, MESHLINK_INFO, "Connection with %s (%s) activated", c->name, c->hostname); /* Send him everything we know */ - send_everything(c); + send_everything(mesh, c); /* Create an edge_t for this connection */ @@ -446,19 +450,19 @@ bool ack_h(connection_t *c, const char *request) { sockaddr2str(&c->address, &hisaddress, NULL); c->edge->address = str2sockaddr(hisaddress, hisport); free(hisaddress); - c->edge->weight = (weight + c->estimated_weight) / 2; + c->edge->weight = dev_class_traits[devclass].edge_weight; c->edge->connection = c; c->edge->options = c->options; - edge_add(c->edge); + edge_add(mesh, c->edge); /* Notify everyone of the new edge */ - send_add_edge(mesh->everyone, c->edge); + send_add_edge(mesh, mesh->everyone, c->edge); /* Run MST and SSSP algorithms */ - graph(); + graph(mesh); return true; }