]> git.meshlink.io Git - meshlink/blobdiff - src/protocol_auth.c
Add an astylerc file and reformat all code.
[meshlink] / src / protocol_auth.c
index b05b04b1c1317bfe20c1e47b87aef6682b59ecde..c748ead7afc469063c30091a0cac68b74429e728 100644 (file)
 #include "xalloc.h"
 #include "ed25519/sha512.h"
 
+#include <assert.h>
+
+extern bool node_write_devclass(meshlink_handle_t *mesh, node_t *n);
+
 static bool send_proxyrequest(meshlink_handle_t *mesh, connection_t *c) {
        switch(mesh->proxytype) {
-               case PROXY_HTTP: {
-                       char *host;
-                       char *port;
-
-                       sockaddr2str(&c->address, &host, &port);
-                       send_request(mesh, c, "CONNECT %s:%s HTTP/1.1\r\n\r", host, port);
-                       free(host);
-                       free(port);
-                       return true;
-               }
-               case PROXY_SOCKS4: {
-                       if(c->address.sa.sa_family != AF_INET) {
-                               logger(mesh, MESHLINK_ERROR, "Cannot connect to an IPv6 host through a SOCKS 4 proxy!");
-                               return false;
-                       }
-                       char s4req[9 + (mesh->proxyuser ? strlen(mesh->proxyuser) : 0)];
-                       s4req[0] = 4;
-                       s4req[1] = 1;
-                       memcpy(s4req + 2, &c->address.in.sin_port, 2);
-                       memcpy(s4req + 4, &c->address.in.sin_addr, 4);
-                       if(mesh->proxyuser)
-                               memcpy(s4req + 8, mesh->proxyuser, strlen(mesh->proxyuser));
-                       s4req[sizeof s4req - 1] = 0;
-                       c->tcplen = 8;
-                       return send_meta(mesh, c, s4req, sizeof s4req);
+       case PROXY_HTTP: {
+               char *host;
+               char *port;
+
+               sockaddr2str(&c->address, &host, &port);
+               send_request(mesh, c, "CONNECT %s:%s HTTP/1.1\r\n\r", host, port);
+               free(host);
+               free(port);
+               return true;
+       }
+       case PROXY_SOCKS4: {
+               if(c->address.sa.sa_family != AF_INET) {
+                       logger(mesh, MESHLINK_ERROR, "Cannot connect to an IPv6 host through a SOCKS 4 proxy!");
+                       return false;
                }
-               case PROXY_SOCKS5: {
-                       int len = 3 + 6 + (c->address.sa.sa_family == AF_INET ? 4 : 16);
-                       c->tcplen = 2;
-                       if(mesh->proxypass)
-                               len += 3 + strlen(mesh->proxyuser) + strlen(mesh->proxypass);
-                       char s5req[len];
-                       int i = 0;
-                       s5req[i++] = 5;
-                       s5req[i++] = 1;
-                       if(mesh->proxypass) {
-                               s5req[i++] = 2;
-                               s5req[i++] = 1;
-                               s5req[i++] = strlen(mesh->proxyuser);
-                               memcpy(s5req + i, mesh->proxyuser, strlen(mesh->proxyuser));
-                               i += strlen(mesh->proxyuser);
-                               s5req[i++] = strlen(mesh->proxypass);
-                               memcpy(s5req + i, mesh->proxypass, strlen(mesh->proxypass));
-                               i += strlen(mesh->proxypass);
-                               c->tcplen += 2;
-                       } else {
-                               s5req[i++] = 0;
-                       }
-                       s5req[i++] = 5;
+               char s4req[9 + (mesh->proxyuser ? strlen(mesh->proxyuser) : 0)];
+               s4req[0] = 4;
+               s4req[1] = 1;
+               memcpy(s4req + 2, &c->address.in.sin_port, 2);
+               memcpy(s4req + 4, &c->address.in.sin_addr, 4);
+               if(mesh->proxyuser)
+                       memcpy(s4req + 8, mesh->proxyuser, strlen(mesh->proxyuser));
+               s4req[sizeof s4req - 1] = 0;
+               c->tcplen = 8;
+               return send_meta(mesh, c, s4req, sizeof s4req);
+       }
+       case PROXY_SOCKS5: {
+               int len = 3 + 6 + (c->address.sa.sa_family == AF_INET ? 4 : 16);
+               c->tcplen = 2;
+               if(mesh->proxypass)
+                       len += 3 + strlen(mesh->proxyuser) + strlen(mesh->proxypass);
+               char s5req[len];
+               int i = 0;
+               s5req[i++] = 5;
+               s5req[i++] = 1;
+               if(mesh->proxypass) {
+                       s5req[i++] = 2;
                        s5req[i++] = 1;
+                       s5req[i++] = strlen(mesh->proxyuser);
+                       memcpy(s5req + i, mesh->proxyuser, strlen(mesh->proxyuser));
+                       i += strlen(mesh->proxyuser);
+                       s5req[i++] = strlen(mesh->proxypass);
+                       memcpy(s5req + i, mesh->proxypass, strlen(mesh->proxypass));
+                       i += strlen(mesh->proxypass);
+                       c->tcplen += 2;
+               } else
                        s5req[i++] = 0;
-                       if(c->address.sa.sa_family == AF_INET) {
-                               s5req[i++] = 1;
-                               memcpy(s5req + i, &c->address.in.sin_addr, 4);
-                               i += 4;
-                               memcpy(s5req + i, &c->address.in.sin_port, 2);
-                               i += 2;
-                               c->tcplen += 10;
-                       } else if(c->address.sa.sa_family == AF_INET6) {
-                               s5req[i++] = 3;
-                               memcpy(s5req + i, &c->address.in6.sin6_addr, 16);
-                               i += 16;
-                               memcpy(s5req + i, &c->address.in6.sin6_port, 2);
-                               i += 2;
-                               c->tcplen += 22;
-                       } else {
-                               logger(mesh, MESHLINK_ERROR, "Address family %hx not supported for SOCKS 5 proxies!", c->address.sa.sa_family);
-                               return false;
-                       }
-                       if(i > len)
-                               abort();
-                       return send_meta(mesh, c, s5req, sizeof s5req);
-               }
-               case PROXY_SOCKS4A:
-                       logger(mesh, MESHLINK_ERROR, "Proxy type not implemented yet");
-                       return false;
-               case PROXY_EXEC:
-                       return true;
-               default:
-                       logger(mesh, MESHLINK_ERROR, "Unknown proxy type");
+               s5req[i++] = 5;
+               s5req[i++] = 1;
+               s5req[i++] = 0;
+               if(c->address.sa.sa_family == AF_INET) {
+                       s5req[i++] = 1;
+                       memcpy(s5req + i, &c->address.in.sin_addr, 4);
+                       i += 4;
+                       memcpy(s5req + i, &c->address.in.sin_port, 2);
+                       i += 2;
+                       c->tcplen += 10;
+               } else if(c->address.sa.sa_family == AF_INET6) {
+                       s5req[i++] = 3;
+                       memcpy(s5req + i, &c->address.in6.sin6_addr, 16);
+                       i += 16;
+                       memcpy(s5req + i, &c->address.in6.sin6_port, 2);
+                       i += 2;
+                       c->tcplen += 22;
+               } else {
+                       logger(mesh, MESHLINK_ERROR, "Address family %hx not supported for SOCKS 5 proxies!", c->address.sa.sa_family);
                        return false;
+               }
+               if(i > len)
+                       abort();
+               return send_meta(mesh, c, s5req, sizeof s5req);
+       }
+       case PROXY_SOCKS4A:
+               logger(mesh, MESHLINK_ERROR, "Proxy type not implemented yet");
+               return false;
+       case PROXY_EXEC:
+               return true;
+       default:
+               logger(mesh, MESHLINK_ERROR, "Unknown proxy type");
+               return false;
        }
 }
 
 bool send_id(meshlink_handle_t *mesh, connection_t *c) {
-       
+
        int minor = mesh->self->connection->protocol_minor;
 
        if(mesh->proxytype && c->outgoing)
@@ -256,7 +259,7 @@ bool id_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
 
        if(sscanf(request, "%*d " MAX_STRING " %d.%d", name, &c->protocol_major, &c->protocol_minor) < 2) {
                logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s)", "ID", c->name,
-                          c->hostname);
+                      c->hostname);
                return false;
        }
 
@@ -285,14 +288,14 @@ bool id_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
                c->protocol_minor = 2;
                c->allow_request = 1;
 
-               return sptps_start(&c->sptps, c, false, false, mesh->invitation_key, c->ecdsa, "meshlink invitation", 15, send_meta_sptps, receive_invitation_sptps);
+               return sptps_start(&c->sptps, c, false, false, mesh->invitation_key, c->ecdsa, meshlink_invitation_label, sizeof meshlink_invitation_label, send_meta_sptps, receive_invitation_sptps);
        }
 
        /* Check if identity is a valid name */
 
        if(!check_id(name)) {
                logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s): %s", "ID", c->name,
-                          c->hostname, "invalid name");
+                      c->hostname, "invalid name");
                return false;
        }
 
@@ -301,7 +304,7 @@ bool id_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
        if(c->outgoing) {
                if(strcmp(c->name, name)) {
                        logger(mesh, MESHLINK_ERROR, "Peer %s is %s instead of %s", c->hostname, name,
-                                  c->name);
+                              c->name);
                        return false;
                }
        } else {
@@ -314,7 +317,7 @@ bool id_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
 
        if(c->protocol_major != mesh->self->connection->protocol_major) {
                logger(mesh, MESHLINK_ERROR, "Peer %s (%s) uses incompatible version %d.%d",
-                       c->name, c->hostname, c->protocol_major, c->protocol_minor);
+                      c->name, c->hostname, c->protocol_major, c->protocol_minor);
                return false;
        }
 
@@ -325,30 +328,39 @@ bool id_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
                        logger(mesh, MESHLINK_ERROR, "Peer %s had unknown identity (%s)", c->hostname, c->name);
                        return false;
                }
+       }
 
-               read_ecdsa_public_key(mesh, c);
-       } else {
-               if(c->protocol_minor && !ecdsa_active(c->ecdsa))
-                       c->protocol_minor = 1;
+       read_ecdsa_public_key(mesh, c);
+
+       if(!ecdsa_active(c->ecdsa)) {
+               logger(mesh, MESHLINK_ERROR, "No key known for peer %s (%s)", c->name, c->hostname);
+
+               node_t *n = lookup_node(mesh, c->name);
+               if(n && !n->status.waitingforkey) {
+                       logger(mesh, MESHLINK_INFO, "Requesting key from peer %s (%s)", c->name, c->hostname);
+                       send_req_key(mesh, n);
+               }
+
+               return false;
        }
 
        /* Forbid version rollback for nodes whose ECDSA key we know */
 
        if(ecdsa_active(c->ecdsa) && c->protocol_minor < 2) {
                logger(mesh, MESHLINK_ERROR, "Peer %s (%s) tries to roll back protocol version to %d.%d",
-                       c->name, c->hostname, c->protocol_major, c->protocol_minor);
+                      c->name, c->hostname, c->protocol_major, c->protocol_minor);
                return false;
        }
 
        c->allow_request = ACK;
-       char label[25 + strlen(mesh->self->name) + strlen(c->name)];
+       char label[sizeof meshlink_tcp_label + strlen(mesh->self->name) + strlen(c->name) + 2];
 
        if(c->outgoing)
-               snprintf(label, sizeof label, "meshlink TCP key expansion %s %s", mesh->self->name, c->name);
+               snprintf(label, sizeof label, "%s %s %s", meshlink_tcp_label, mesh->self->name, c->name);
        else
-               snprintf(label, sizeof label, "meshlink TCP key expansion %s %s", c->name, mesh->self->name);
+               snprintf(label, sizeof label, "%s %s %s", meshlink_tcp_label, c->name, mesh->self->name);
 
-       return sptps_start(&c->sptps, c, c->outgoing, false, mesh->self->connection->ecdsa, c->ecdsa, label, sizeof label, send_meta_sptps, receive_meta_sptps);
+       return sptps_start(&c->sptps, c, c->outgoing, false, mesh->self->connection->ecdsa, c->ecdsa, label, sizeof label - 1, send_meta_sptps, receive_meta_sptps);
 }
 
 bool send_ack(meshlink_handle_t *mesh, connection_t *c) {
@@ -358,7 +370,7 @@ bool send_ack(meshlink_handle_t *mesh, connection_t *c) {
        if(mesh->self->options & OPTION_PMTU_DISCOVERY)
                c->options |= OPTION_PMTU_DISCOVERY;
 
-       return send_request(mesh, c, "%d %s %d %x", ACK, mesh->myport, mesh->dclass, (c->options & 0xffffff) | (PROT_MINOR << 24));
+       return send_request(mesh, c, "%d %s %d %x", ACK, mesh->myport, mesh->devclass, (c->options & 0xffffff) | (PROT_MINOR << 24));
 }
 
 static void send_everything(meshlink_handle_t *mesh, connection_t *c) {
@@ -373,13 +385,19 @@ static void send_everything(meshlink_handle_t *mesh, connection_t *c) {
 bool ack_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
        char hisport[MAX_STRING_SIZE];
        char *hisaddress;
-       int dclass;
+       int devclass;
        uint32_t options;
        node_t *n;
 
-       if(sscanf(request, "%*d " MAX_STRING " %d %x", hisport, &dclass, &options) != 3) {
+       if(sscanf(request, "%*d " MAX_STRING " %d %x", hisport, &devclass, &options) != 3) {
                logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s)", "ACK", c->name,
-                          c->hostname);
+                      c->hostname);
+               return false;
+       }
+
+       if(devclass < 0 || devclass > _DEV_CLASS_MAX) {
+               logger(mesh, MESHLINK_ERROR, "Got bad %s from %s (%s): %s", "ACK", c->name,
+                      c->hostname, "devclass invalid");
                return false;
        }
 
@@ -411,6 +429,11 @@ bool ack_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
                }
        }
 
+       n->devclass = devclass;
+       node_write_devclass(mesh, n);
+
+       n->last_successfull_connection = time(NULL);
+
        n->connection = c;
        c->node = n;
        if(!(c->options & options & OPTION_PMTU_DISCOVERY)) {
@@ -425,7 +448,7 @@ bool ack_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
        c->status.active = true;
 
        logger(mesh, MESHLINK_INFO, "Connection with %s (%s) activated", c->name,
-                          c->hostname);
+              c->hostname);
 
        /* Send him everything we know */
 
@@ -433,13 +456,15 @@ bool ack_h(meshlink_handle_t *mesh, connection_t *c, const char *request) {
 
        /* Create an edge_t for this connection */
 
+       assert(devclass >= 0 && devclass <= _DEV_CLASS_MAX);
+
        c->edge = new_edge();
        c->edge->from = mesh->self;
        c->edge->to = n;
        sockaddr2str(&c->address, &hisaddress, NULL);
        c->edge->address = str2sockaddr(hisaddress, hisport);
        free(hisaddress);
-       c->edge->weight = weight_from_dclass(dclass);
+       c->edge->weight = dev_class_traits[devclass].edge_weight;
        c->edge->connection = c;
        c->edge->options = c->options;