X-Git-Url: http://git.meshlink.io/?a=blobdiff_plain;f=src%2Fprotocol_key.c;fp=src%2Fprotocol_key.c;h=c278531cc745b896b4aaa9707a68b18eb05fd1a7;hb=f3014d25c8b6f8cc1cf8ab48cabf6fbc8e8311d0;hp=6ee28750376aeaa07f8bdeb7c4c4e84ca7a5e5a0;hpb=51726faeea70c12caf2540d62dbdc135c5dfaf18;p=meshlink-tiny diff --git a/src/protocol_key.c b/src/protocol_key.c index 6ee2875..c278531 100644 --- a/src/protocol_key.c +++ b/src/protocol_key.c @@ -31,8 +31,6 @@ #include "utils.h" #include "xalloc.h" -static const int req_key_timeout = 2; - bool key_changed_h(meshlink_handle_t *mesh, connection_t *c, const char *request) { (void)mesh; (void)c; @@ -40,381 +38,16 @@ bool key_changed_h(meshlink_handle_t *mesh, connection_t *c, const char *request return true; } -static bool send_initial_sptps_data(void *handle, uint8_t type, const void *data, size_t len) { - (void)type; - - assert(data); - assert(len); - - node_t *to = handle; - meshlink_handle_t *mesh = to->mesh; - - if(!to->nexthop || !to->nexthop->connection) { - logger(mesh, MESHLINK_WARNING, "Cannot send SPTPS data to %s via %s", to->name, to->nexthop ? to->nexthop->name : to->name); - return false; - } - - to->sptps.send_data = send_sptps_data; - char buf[len * 4 / 3 + 5]; - b64encode(data, buf, len); - return send_request(mesh, to->nexthop->connection, "%d %s %s %d %s", REQ_KEY, mesh->self->name, to->name, REQ_KEY, buf); -} - -bool send_canonical_address(meshlink_handle_t *mesh, node_t *to) { - if(!mesh->self->canonical_address) { - return true; - } - - return send_request(mesh, to->nexthop->connection, "%d %s %s %d %s", REQ_KEY, mesh->self->name, to->name, REQ_CANONICAL, mesh->self->canonical_address); -} - -bool send_req_key(meshlink_handle_t *mesh, node_t *to) { - if(!node_read_public_key(mesh, to)) { - logger(mesh, MESHLINK_DEBUG, "No ECDSA key known for %s", to->name); - - if(!to->nexthop || !to->nexthop->connection) { - logger(mesh, MESHLINK_WARNING, "Cannot send REQ_PUBKEY to %s via %s", to->name, to->nexthop ? to->nexthop->name : to->name); - return true; - } - - char *pubkey = ecdsa_get_base64_public_key(mesh->private_key); - send_request(mesh, to->nexthop->connection, "%d %s %s %d %s", REQ_KEY, mesh->self->name, to->name, REQ_PUBKEY, pubkey); - free(pubkey); - return true; - } - - if(to->sptps.label) { - logger(mesh, MESHLINK_DEBUG, "send_req_key(%s) called while sptps->label != NULL!", to->name); - } - - /* Send our canonical address to help with UDP hole punching */ - send_canonical_address(mesh, to); - - char label[sizeof(meshlink_udp_label) + strlen(mesh->self->name) + strlen(to->name) + 2]; - snprintf(label, sizeof(label), "%s %s %s", meshlink_udp_label, mesh->self->name, to->name); - sptps_stop(&to->sptps); - to->status.validkey = false; - to->status.waitingforkey = true; - to->last_req_key = mesh->loop.now.tv_sec; - return sptps_start(&to->sptps, to, true, true, mesh->private_key, to->ecdsa, label, sizeof(label) - 1, send_initial_sptps_data, receive_sptps_record); -} - -/* REQ_KEY is overloaded to allow arbitrary requests to be routed between two nodes. */ - -static bool req_key_ext_h(meshlink_handle_t *mesh, connection_t *c, const char *request, node_t *from, int reqno) { - (void)c; - - if(!from->nexthop || !from->nexthop->connection) { - logger(mesh, MESHLINK_WARNING, "Cannot answer REQ_KEY from %s via %s", from->name, from->nexthop ? from->nexthop->name : from->name); - return true; - } - - switch(reqno) { - case REQ_PUBKEY: { - char *pubkey = ecdsa_get_base64_public_key(mesh->private_key); - - if(!node_read_public_key(mesh, from)) { - char hiskey[MAX_STRING_SIZE]; - - if(sscanf(request, "%*d %*s %*s %*d " MAX_STRING, hiskey) == 1) { - from->ecdsa = ecdsa_set_base64_public_key(hiskey); - - if(!from->ecdsa) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "REQ_PUBKEY", from->name, "invalid pubkey"); - return true; - } - - logger(mesh, MESHLINK_INFO, "Learned ECDSA public key from %s", from->name); - from->status.dirty = true; - - if(!node_write_config(mesh, from, true)) { - // ignore - } - } - } - - send_request(mesh, from->nexthop->connection, "%d %s %s %d %s", REQ_KEY, mesh->self->name, from->name, ANS_PUBKEY, pubkey); - free(pubkey); - return true; - } - - case ANS_PUBKEY: { - if(node_read_public_key(mesh, from)) { - logger(mesh, MESHLINK_WARNING, "Got ANS_PUBKEY from %s even though we already have his pubkey", from->name); - return true; - } - - char pubkey[MAX_STRING_SIZE]; - - if(sscanf(request, "%*d %*s %*s %*d " MAX_STRING, pubkey) != 1 || !(from->ecdsa = ecdsa_set_base64_public_key(pubkey))) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "ANS_PUBKEY", from->name, "invalid pubkey"); - return true; - } - - logger(mesh, MESHLINK_INFO, "Learned ECDSA public key from %s", from->name); - from->status.dirty = true; - - if(!node_write_config(mesh, from, true)) { - // ignore - } - - /* If we are trying to form an outgoing connection to this node, retry immediately */ - if(mesh->outgoing) { - if(mesh->outgoing->node == from && mesh->outgoing->ev.cb) { - mesh->outgoing->timeout = 0; - timeout_set(&mesh->loop, &mesh->outgoing->ev, &(struct timespec) { - 0, 0 - }); - } - } - - /* Also reset any UTCP timers */ - utcp_reset_timers(from->utcp); - - return true; - } - - case REQ_KEY: { - if(!node_read_public_key(mesh, from)) { - logger(mesh, MESHLINK_DEBUG, "No ECDSA key known for %s", from->name); - send_request(mesh, from->nexthop->connection, "%d %s %s %d", REQ_KEY, mesh->self->name, from->name, REQ_PUBKEY); - return true; - } - - if(from->sptps.label) { - logger(mesh, MESHLINK_DEBUG, "Got REQ_KEY from %s while we already started a SPTPS session!", from->name); - - if(mesh->loop.now.tv_sec < from->last_req_key + req_key_timeout && strcmp(mesh->self->name, from->name) < 0) { - logger(mesh, MESHLINK_DEBUG, "Ignoring REQ_KEY from %s.", from->name); - return true; - } - } - - char buf[MAX_STRING_SIZE]; - int len; - - if(sscanf(request, "%*d %*s %*s %*d " MAX_STRING, buf) != 1 || !(len = b64decode(buf, buf, strlen(buf)))) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "REQ_SPTPS_START", from->name, "invalid SPTPS data"); - return true; - } - - char label[sizeof(meshlink_udp_label) + strlen(from->name) + strlen(mesh->self->name) + 2]; - snprintf(label, sizeof(label), "%s %s %s", meshlink_udp_label, from->name, mesh->self->name); - sptps_stop(&from->sptps); - from->status.validkey = false; - from->status.waitingforkey = true; - from->last_req_key = mesh->loop.now.tv_sec; - - /* Send our canonical address to help with UDP hole punching */ - send_canonical_address(mesh, from); - - if(!sptps_start(&from->sptps, from, false, true, mesh->private_key, from->ecdsa, label, sizeof(label) - 1, send_sptps_data, receive_sptps_record)) { - logger(mesh, MESHLINK_ERROR, "Could not start SPTPS session with %s: %s", from->name, strerror(errno)); - return true; - } - - if(!sptps_receive_data(&from->sptps, buf, len)) { - logger(mesh, MESHLINK_ERROR, "Could not process SPTPS data from %s: %s", from->name, strerror(errno)); - return true; - } - - return true; - } - - case REQ_SPTPS: { - if(!from->status.validkey) { - logger(mesh, MESHLINK_ERROR, "Got REQ_SPTPS from %s but we don't have a valid key yet", from->name); - return true; - } - - char buf[MAX_STRING_SIZE]; - int len; - - if(sscanf(request, "%*d %*s %*s %*d " MAX_STRING, buf) != 1 || !(len = b64decode(buf, buf, strlen(buf)))) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "REQ_SPTPS", from->name, "invalid SPTPS data"); - return true; - } - - if(!sptps_receive_data(&from->sptps, buf, len)) { - logger(mesh, MESHLINK_ERROR, "Could not process SPTPS data from %s: %s", from->name, strerror(errno)); - return true; - } - - return true; - } - - case REQ_CANONICAL: { - char host[MAX_STRING_SIZE]; - char port[MAX_STRING_SIZE]; - - if(sscanf(request, "%*d %*s %*s %*d " MAX_STRING " " MAX_STRING, host, port) != 2) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "REQ_CANONICAL", from->name, "invalid canonical address"); - return true; - } - - char *canonical_address; - xasprintf(&canonical_address, "%s %s", host, port); - - if(mesh->log_level <= MESHLINK_DEBUG && (!from->canonical_address || strcmp(from->canonical_address, canonical_address))) { - logger(mesh, MESHLINK_DEBUG, "Updating canonical address of %s to %s", from->name, canonical_address); - } - - free(from->canonical_address); - from->canonical_address = canonical_address; - return true; - } - - default: - logger(mesh, MESHLINK_ERROR, "Unknown extended REQ_KEY request from %s: %s", from->name, request); - return true; - } -} - bool req_key_h(meshlink_handle_t *mesh, connection_t *c, const char *request) { - assert(request); - assert(*request); - - char from_name[MAX_STRING_SIZE]; - char to_name[MAX_STRING_SIZE]; - node_t *from, *to; - int reqno = 0; - - if(sscanf(request, "%*d " MAX_STRING " " MAX_STRING " %d", from_name, to_name, &reqno) < 2) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s", "REQ_KEY", c->name); - return false; - } - - if(!check_id(from_name) || !check_id(to_name)) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "REQ_KEY", c->name, "invalid name"); - return false; - } - - from = lookup_node(mesh, from_name); - - if(!from) { - logger(mesh, MESHLINK_ERROR, "Got %s from %s origin %s which does not exist in our connection list", - "REQ_KEY", c->name, from_name); - return true; - } - - to = lookup_node(mesh, to_name); - - if(!to) { - logger(mesh, MESHLINK_ERROR, "Got %s from %s destination %s which does not exist in our connection list", - "REQ_KEY", c->name, to_name); - return true; - } - - /* Check if this key request is for us */ - - if(to == mesh->self) { /* Yes */ - /* Is this an extended REQ_KEY message? */ - if(reqno) { - return req_key_ext_h(mesh, c, request, from, reqno); - } - - /* This should never happen. Ignore it, unless it came directly from the connected peer, in which case we disconnect. */ - return from->connection != c; - } else { - if(!to->status.reachable || !to->nexthop || !to->nexthop->connection) { - logger(mesh, MESHLINK_WARNING, "Got %s from %s destination %s which is not reachable", - "REQ_KEY", c->name, to_name); - return true; - } - - send_request(mesh, to->nexthop->connection, "%s", request); - } - + (void)mesh; + (void)c; + (void)request; return true; } bool ans_key_h(meshlink_handle_t *mesh, connection_t *c, const char *request) { - assert(request); - assert(*request); + (void)mesh; (void)c; - - char from_name[MAX_STRING_SIZE]; - char to_name[MAX_STRING_SIZE]; - char key[MAX_STRING_SIZE]; - char address[MAX_STRING_SIZE] = ""; - char port[MAX_STRING_SIZE] = ""; - int cipher, digest, maclength, compression; - node_t *from, *to; - - if(sscanf(request, "%*d "MAX_STRING" "MAX_STRING" "MAX_STRING" %d %d %d %d "MAX_STRING" "MAX_STRING, - from_name, to_name, key, &cipher, &digest, &maclength, - &compression, address, port) < 7) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s", "ANS_KEY", c->name); - return false; - } - - if(!check_id(from_name) || !check_id(to_name)) { - logger(mesh, MESHLINK_ERROR, "Got bad %s from %s: %s", "ANS_KEY", c->name, "invalid name"); - return false; - } - - from = lookup_node(mesh, from_name); - - if(!from) { - logger(mesh, MESHLINK_ERROR, "Got %s from %s origin %s which does not exist in our connection list", - "ANS_KEY", c->name, from_name); - return true; - } - - to = lookup_node(mesh, to_name); - - if(!to) { - logger(mesh, MESHLINK_ERROR, "Got %s from %s destination %s which does not exist in our connection list", - "ANS_KEY", c->name, to_name); - return true; - } - - /* Forward it if necessary */ - - if(to != mesh->self) { - logger(mesh, MESHLINK_WARNING, "Got %s from %s destination %s which is not for us", - "ANS_KEY", c->name, to_name); - return true; - } - - /* Is this an ANS_KEY informing us of our own reflexive UDP address? */ - - if(from == mesh->self) { - if(*key == '.' && *address && *port) { - /* Ignore reflexive UDP address */ - } else { - logger(mesh, MESHLINK_WARNING, "Got %s from %s from %s to %s", - "ANS_KEY", c->name, from_name, to_name); - } - - return true; - } - - /* Process SPTPS data if present */ - - if(*key != '.') { - /* Don't use key material until every check has passed. */ - from->status.validkey = false; - - /* Compression is not supported. */ - if(compression != 0) { - logger(mesh, MESHLINK_ERROR, "Node %s uses bogus compression level!", from->name); - return true; - } - - char buf[strlen(key)]; - int len = b64decode(key, buf, strlen(key)); - - if(!len || !sptps_receive_data(&from->sptps, buf, len)) { - logger(mesh, MESHLINK_ERROR, "Error processing SPTPS data from %s", from->name); - } - } - - if(from->status.validkey) { - if(*address && *port) { - /* Ignore reflexive UDP address */ - } - } - + (void)request; return true; -} +} \ No newline at end of file