corosync-qnetd.c 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661
  1. /*
  2. * Copyright (c) 2015-2016 Red Hat, Inc.
  3. *
  4. * All rights reserved.
  5. *
  6. * Author: Jan Friesse (jfriesse@redhat.com)
  7. *
  8. * This software licensed under BSD license, the text of which follows:
  9. *
  10. * Redistribution and use in source and binary forms, with or without
  11. * modification, are permitted provided that the following conditions are met:
  12. *
  13. * - Redistributions of source code must retain the above copyright notice,
  14. * this list of conditions and the following disclaimer.
  15. * - Redistributions in binary form must reproduce the above copyright notice,
  16. * this list of conditions and the following disclaimer in the documentation
  17. * and/or other materials provided with the distribution.
  18. * - Neither the name of the Red Hat, Inc. nor the names of its
  19. * contributors may be used to endorse or promote products derived from this
  20. * software without specific prior written permission.
  21. *
  22. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  23. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25. * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  26. * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  27. * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  28. * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  29. * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  30. * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  31. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  32. * THE POSSIBILITY OF SUCH DAMAGE.
  33. */
  34. #include <err.h>
  35. #include <errno.h>
  36. #include <getopt.h>
  37. #include <limits.h>
  38. #include <signal.h>
  39. #include <unistd.h>
  40. #include "qnet-config.h"
  41. #include "dynar.h"
  42. #include "dynar-str.h"
  43. #include "dynar-getopt-lex.h"
  44. #include "nss-sock.h"
  45. #include "pr-poll-array.h"
  46. #include "qnetd-advanced-settings.h"
  47. #include "qnetd-algorithm.h"
  48. #include "qnetd-instance.h"
  49. #include "qnetd-ipc.h"
  50. #include "qnetd-log.h"
  51. #include "qnetd-client-net.h"
  52. #include "qnetd-client-msg-received.h"
  53. #include "qnetd-poll-array-user-data.h"
  54. #include "utils.h"
  55. #include "msg.h"
  56. #ifdef HAVE_LIBSYSTEMD
  57. #include <systemd/sd-daemon.h>
  58. #endif
  59. /*
  60. * This is global variable used for comunication with main loop and signal (calls close)
  61. */
  62. struct qnetd_instance *global_instance;
  63. enum tlv_decision_algorithm_type
  64. qnetd_static_supported_decision_algorithms[QNETD_STATIC_SUPPORTED_DECISION_ALGORITHMS_SIZE] = {
  65. TLV_DECISION_ALGORITHM_TYPE_TEST,
  66. TLV_DECISION_ALGORITHM_TYPE_FFSPLIT,
  67. TLV_DECISION_ALGORITHM_TYPE_2NODELMS,
  68. TLV_DECISION_ALGORITHM_TYPE_LMS,
  69. };
  70. static void
  71. qnetd_err_nss(void)
  72. {
  73. qnetd_log_nss(LOG_CRIT, "NSS error");
  74. exit(1);
  75. }
  76. static void
  77. qnetd_warn_nss(void)
  78. {
  79. qnetd_log_nss(LOG_WARNING, "NSS warning");
  80. }
  81. static PRPollDesc *
  82. qnetd_pr_poll_array_create(struct qnetd_instance *instance)
  83. {
  84. struct pr_poll_array *poll_array;
  85. const struct qnetd_client_list *client_list;
  86. struct qnetd_client *client;
  87. PRPollDesc *poll_desc;
  88. struct qnetd_poll_array_user_data *user_data;
  89. const struct unix_socket_client_list *ipc_client_list;
  90. struct unix_socket_client *ipc_client;
  91. poll_array = &instance->poll_array;
  92. client_list = &instance->clients;
  93. ipc_client_list = &instance->local_ipc.clients;
  94. pr_poll_array_clean(poll_array);
  95. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  96. return (NULL);
  97. }
  98. poll_desc->fd = instance->server.socket;
  99. poll_desc->in_flags = PR_POLL_READ;
  100. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET;
  101. if (qnetd_ipc_is_closed(instance)) {
  102. qnetd_log(LOG_DEBUG, "Listening socket is closed");
  103. return (NULL);
  104. }
  105. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  106. return (NULL);
  107. }
  108. poll_desc->fd = instance->ipc_socket_poll_fd;
  109. poll_desc->in_flags = PR_POLL_READ;
  110. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET;
  111. TAILQ_FOREACH(client, client_list, entries) {
  112. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  113. return (NULL);
  114. }
  115. poll_desc->fd = client->socket;
  116. poll_desc->in_flags = PR_POLL_READ;
  117. if (!send_buffer_list_empty(&client->send_buffer_list)) {
  118. poll_desc->in_flags |= PR_POLL_WRITE;
  119. }
  120. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT;
  121. user_data->client = client;
  122. }
  123. TAILQ_FOREACH(ipc_client, ipc_client_list, entries) {
  124. if (!ipc_client->reading_line && !ipc_client->writing_buffer) {
  125. continue;
  126. }
  127. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  128. return (NULL);
  129. }
  130. poll_desc->fd = ((struct qnetd_ipc_user_data *)ipc_client->user_data)->nspr_poll_fd;
  131. if (ipc_client->reading_line) {
  132. poll_desc->in_flags |= PR_POLL_READ;
  133. }
  134. if (ipc_client->writing_buffer) {
  135. poll_desc->in_flags |= PR_POLL_WRITE;
  136. }
  137. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT;
  138. user_data->ipc_client = ipc_client;
  139. }
  140. pr_poll_array_gc(poll_array);
  141. return (poll_array->array);
  142. }
  143. static int
  144. qnetd_poll(struct qnetd_instance *instance)
  145. {
  146. struct qnetd_client *client;
  147. PRPollDesc *pfds;
  148. PRInt32 poll_res;
  149. ssize_t i;
  150. int client_disconnect;
  151. struct qnetd_poll_array_user_data *user_data;
  152. struct unix_socket_client *ipc_client;
  153. client = NULL;
  154. client_disconnect = 0;
  155. pfds = qnetd_pr_poll_array_create(instance);
  156. if (pfds == NULL) {
  157. return (-1);
  158. }
  159. if ((poll_res = PR_Poll(pfds, pr_poll_array_size(&instance->poll_array),
  160. timer_list_time_to_expire(&instance->main_timer_list))) >= 0) {
  161. timer_list_expire(&instance->main_timer_list);
  162. /*
  163. * Walk thru pfds array and process events
  164. */
  165. for (i = 0; i < pr_poll_array_size(&instance->poll_array); i++) {
  166. user_data = pr_poll_array_get_user_data(&instance->poll_array, i);
  167. client = NULL;
  168. ipc_client = NULL;
  169. client_disconnect = 0;
  170. switch (user_data->type) {
  171. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  172. break;
  173. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  174. client = user_data->client;
  175. client_disconnect = client->schedule_disconnect;
  176. break;
  177. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  178. break;
  179. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  180. ipc_client = user_data->ipc_client;
  181. client_disconnect = ipc_client->schedule_disconnect;
  182. }
  183. if (!client_disconnect && poll_res > 0 &&
  184. pfds[i].out_flags & PR_POLL_READ) {
  185. switch (user_data->type) {
  186. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  187. qnetd_client_net_accept(instance);
  188. break;
  189. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  190. if (qnetd_client_net_read(instance, client) == -1) {
  191. client_disconnect = 1;
  192. }
  193. break;
  194. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  195. qnetd_ipc_accept(instance, &ipc_client);
  196. break;
  197. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  198. qnetd_ipc_io_read(instance, ipc_client);
  199. break;
  200. }
  201. }
  202. if (!client_disconnect && poll_res > 0 &&
  203. pfds[i].out_flags & PR_POLL_WRITE) {
  204. switch (user_data->type) {
  205. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  206. /*
  207. * Poll write on listen socket -> fatal error
  208. */
  209. qnetd_log(LOG_CRIT, "POLL_WRITE on listening socket");
  210. return (-1);
  211. break;
  212. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  213. if (qnetd_client_net_write(instance, client) == -1) {
  214. client_disconnect = 1;
  215. }
  216. break;
  217. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  218. qnetd_log(LOG_CRIT, "POLL_WRITE on listening IPC socket");
  219. return (-1);
  220. break;
  221. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  222. qnetd_ipc_io_write(instance, ipc_client);
  223. break;
  224. }
  225. }
  226. if (!client_disconnect && poll_res > 0 &&
  227. (pfds[i].out_flags & (PR_POLL_ERR|PR_POLL_NVAL|PR_POLL_HUP|PR_POLL_EXCEPT)) &&
  228. !(pfds[i].out_flags & (PR_POLL_READ|PR_POLL_WRITE))) {
  229. switch (user_data->type) {
  230. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  231. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  232. if (pfds[i].out_flags != PR_POLL_NVAL) {
  233. /*
  234. * Poll ERR on listening socket is fatal error.
  235. * POLL_NVAL is used as a signal to quit poll loop.
  236. */
  237. qnetd_log(LOG_CRIT, "POLL_ERR (%u) on listening "
  238. "socket", pfds[i].out_flags);
  239. } else {
  240. qnetd_log(LOG_DEBUG, "Listening socket is closed");
  241. }
  242. return (-1);
  243. break;
  244. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  245. qnetd_log(LOG_DEBUG, "POLL_ERR (%u) on client socket. "
  246. "Disconnecting.", pfds[i].out_flags);
  247. client_disconnect = 1;
  248. break;
  249. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  250. qnetd_log(LOG_DEBUG, "POLL_ERR (%u) on ipc client socket."
  251. " Disconnecting.", pfds[i].out_flags);
  252. client_disconnect = 1;
  253. break;
  254. }
  255. }
  256. /*
  257. * If client is scheduled for disconnect, disconnect it
  258. */
  259. if (user_data->type == QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT &&
  260. client_disconnect) {
  261. qnetd_instance_client_disconnect(instance, client, 0);
  262. } else if (user_data->type == QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT &&
  263. (client_disconnect || ipc_client->schedule_disconnect)) {
  264. qnetd_ipc_client_disconnect(instance, ipc_client);
  265. }
  266. }
  267. }
  268. return (0);
  269. }
  270. static void
  271. signal_int_handler(int sig)
  272. {
  273. qnetd_log(LOG_DEBUG, "SIGINT received - closing server IPC socket");
  274. qnetd_ipc_close(global_instance);
  275. }
  276. static void
  277. signal_term_handler(int sig)
  278. {
  279. qnetd_log(LOG_DEBUG, "SIGTERM received - closing server IPC socket");
  280. qnetd_ipc_close(global_instance);
  281. }
  282. static void
  283. signal_handlers_register(void)
  284. {
  285. struct sigaction act;
  286. act.sa_handler = signal_int_handler;
  287. sigemptyset(&act.sa_mask);
  288. act.sa_flags = SA_RESTART;
  289. sigaction(SIGINT, &act, NULL);
  290. act.sa_handler = signal_term_handler;
  291. sigemptyset(&act.sa_mask);
  292. act.sa_flags = SA_RESTART;
  293. sigaction(SIGTERM, &act, NULL);
  294. }
  295. static void
  296. usage(void)
  297. {
  298. printf("usage: %s [-46dfhv] [-l listen_addr] [-p listen_port] [-s tls]\n", QNETD_PROGRAM_NAME);
  299. printf("%14s[-c client_cert_required] [-m max_clients] [-S option=value[,option2=value2,...]]\n", "");
  300. }
  301. static void
  302. display_version(void)
  303. {
  304. enum msg_type *supported_messages;
  305. size_t no_supported_messages;
  306. size_t zi;
  307. msg_get_supported_messages(&supported_messages, &no_supported_messages);
  308. printf("Corosync Qdevice Network Daemon, version '%s'\n\n", VERSION);
  309. printf("Supported algorithms: ");
  310. for (zi = 0; zi < QNETD_STATIC_SUPPORTED_DECISION_ALGORITHMS_SIZE; zi++) {
  311. if (zi != 0) {
  312. printf(", ");
  313. }
  314. printf("%s (%u)",
  315. tlv_decision_algorithm_type_to_str(qnetd_static_supported_decision_algorithms[zi]),
  316. qnetd_static_supported_decision_algorithms[zi]);
  317. }
  318. printf("\n");
  319. printf("Supported message types: ");
  320. for (zi = 0; zi < no_supported_messages; zi++) {
  321. if (zi != 0) {
  322. printf(", ");
  323. }
  324. printf("%s (%u)", msg_type_to_str(supported_messages[zi]), supported_messages[zi]);
  325. }
  326. printf("\n");
  327. }
  328. static void
  329. cli_parse_long_opt(struct qnetd_advanced_settings *advanced_settings, const char *long_opt)
  330. {
  331. struct dynar_getopt_lex lex;
  332. struct dynar dynar_long_opt;
  333. const char *opt;
  334. const char *val;
  335. int res;
  336. dynar_init(&dynar_long_opt, strlen(long_opt) + 1);
  337. if (dynar_str_cpy(&dynar_long_opt, long_opt) != 0) {
  338. errx(1, "Can't alloc memory for long option");
  339. }
  340. dynar_getopt_lex_init(&lex, &dynar_long_opt);
  341. while (dynar_getopt_lex_token_next(&lex) == 0 && strcmp(dynar_data(&lex.option), "") != 0) {
  342. opt = dynar_data(&lex.option);
  343. val = dynar_data(&lex.value);
  344. res = qnetd_advanced_settings_set(advanced_settings, opt, val);
  345. switch (res) {
  346. case -1:
  347. errx(1, "Unknown option '%s'", opt);
  348. break;
  349. case -2:
  350. errx(1, "Invalid value '%s' for option '%s'", val, opt);
  351. break;
  352. }
  353. }
  354. dynar_getopt_lex_destroy(&lex);
  355. dynar_destroy(&dynar_long_opt);
  356. }
  357. static void
  358. cli_parse(int argc, char * const argv[], char **host_addr, uint16_t *host_port, int *foreground,
  359. int *debug_log, int *bump_log_priority, enum tlv_tls_supported *tls_supported,
  360. int *client_cert_required, size_t *max_clients, PRIntn *address_family,
  361. struct qnetd_advanced_settings *advanced_settings)
  362. {
  363. int ch;
  364. long long int tmpll;
  365. *host_addr = NULL;
  366. *host_port = QNETD_DEFAULT_HOST_PORT;
  367. *foreground = 0;
  368. *debug_log = 0;
  369. *bump_log_priority = 0;
  370. *tls_supported = QNETD_DEFAULT_TLS_SUPPORTED;
  371. *client_cert_required = QNETD_DEFAULT_TLS_CLIENT_CERT_REQUIRED;
  372. *max_clients = QNETD_DEFAULT_MAX_CLIENTS;
  373. *address_family = PR_AF_UNSPEC;
  374. while ((ch = getopt(argc, argv, "46dfhvc:l:m:p:S:s:")) != -1) {
  375. switch (ch) {
  376. case '4':
  377. *address_family = PR_AF_INET;
  378. break;
  379. case '6':
  380. *address_family = PR_AF_INET6;
  381. break;
  382. case 'f':
  383. *foreground = 1;
  384. break;
  385. case 'd':
  386. if (*debug_log) {
  387. *bump_log_priority = 1;
  388. }
  389. *debug_log = 1;
  390. break;
  391. case 'c':
  392. if ((*client_cert_required = utils_parse_bool_str(optarg)) == -1) {
  393. errx(1, "client_cert_required should be on/yes/1, off/no/0");
  394. }
  395. break;
  396. case 'l':
  397. free(*host_addr);
  398. *host_addr = strdup(optarg);
  399. if (*host_addr == NULL) {
  400. errx(1, "Can't alloc memory for host addr string");
  401. }
  402. break;
  403. case 'm':
  404. if (utils_strtonum(optarg, 0, LLONG_MAX, &tmpll) == -1) {
  405. errx(1, "max clients value %s is invalid", optarg);
  406. }
  407. *max_clients = (size_t)tmpll;
  408. break;
  409. case 'p':
  410. if (utils_strtonum(optarg, 1, UINT16_MAX, &tmpll) == -1) {
  411. errx(1, "host port must be in range 1-%u", UINT16_MAX);
  412. }
  413. *host_port = tmpll;
  414. break;
  415. case 'S':
  416. cli_parse_long_opt(advanced_settings, optarg);
  417. break;
  418. case 's':
  419. if (strcasecmp(optarg, "on") == 0) {
  420. *tls_supported = QNETD_DEFAULT_TLS_SUPPORTED;
  421. } else if (strcasecmp(optarg, "off") == 0) {
  422. *tls_supported = TLV_TLS_UNSUPPORTED;
  423. } else if (strcasecmp(optarg, "req") == 0) {
  424. *tls_supported = TLV_TLS_REQUIRED;
  425. } else {
  426. errx(1, "tls must be one of on, off, req");
  427. }
  428. break;
  429. case 'v':
  430. display_version();
  431. exit(1);
  432. break;
  433. case 'h':
  434. case '?':
  435. usage();
  436. exit(1);
  437. break;
  438. }
  439. }
  440. }
  441. int
  442. main(int argc, char * const argv[])
  443. {
  444. struct qnetd_instance instance;
  445. struct qnetd_advanced_settings advanced_settings;
  446. char *host_addr;
  447. uint16_t host_port;
  448. int foreground;
  449. int debug_log;
  450. int bump_log_priority;
  451. enum tlv_tls_supported tls_supported;
  452. int client_cert_required;
  453. size_t max_clients;
  454. PRIntn address_family;
  455. int lock_file;
  456. int another_instance_running;
  457. if (qnetd_advanced_settings_init(&advanced_settings) != 0) {
  458. errx(1, "Can't alloc memory for advanced settings");
  459. }
  460. cli_parse(argc, argv, &host_addr, &host_port, &foreground, &debug_log, &bump_log_priority,
  461. &tls_supported, &client_cert_required, &max_clients, &address_family, &advanced_settings);
  462. if (foreground) {
  463. qnetd_log_init(QNETD_LOG_TARGET_STDERR);
  464. } else {
  465. qnetd_log_init(QNETD_LOG_TARGET_SYSLOG);
  466. }
  467. qnetd_log_set_debug(debug_log);
  468. qnetd_log_set_priority_bump(bump_log_priority);
  469. /*
  470. * Daemonize
  471. */
  472. if (!foreground) {
  473. utils_tty_detach();
  474. }
  475. if ((lock_file = utils_flock(advanced_settings.lock_file, getpid(),
  476. &another_instance_running)) == -1) {
  477. if (another_instance_running) {
  478. qnetd_log(LOG_ERR, "Another instance is running");
  479. } else {
  480. qnetd_log_err(LOG_ERR, "Can't acquire lock");
  481. }
  482. exit(1);
  483. }
  484. qnetd_log(LOG_DEBUG, "Initializing nss");
  485. if (nss_sock_init_nss((tls_supported != TLV_TLS_UNSUPPORTED ?
  486. advanced_settings.nss_db_dir : NULL)) != 0) {
  487. qnetd_err_nss();
  488. }
  489. if (SSL_ConfigServerSessionIDCache(0, 0, 0, NULL) != SECSuccess) {
  490. qnetd_err_nss();
  491. }
  492. if (qnetd_instance_init(&instance, tls_supported, client_cert_required,
  493. max_clients, &advanced_settings) == -1) {
  494. qnetd_log(LOG_ERR, "Can't initialize qnetd");
  495. exit(1);
  496. }
  497. instance.host_addr = host_addr;
  498. instance.host_port = host_port;
  499. if (tls_supported != TLV_TLS_UNSUPPORTED && qnetd_instance_init_certs(&instance) == -1) {
  500. qnetd_err_nss();
  501. }
  502. qnetd_log(LOG_DEBUG, "Initializing local socket");
  503. if (qnetd_ipc_init(&instance) != 0) {
  504. return (1);
  505. }
  506. qnetd_log(LOG_DEBUG, "Creating listening socket");
  507. instance.server.socket = nss_sock_create_listen_socket(instance.host_addr,
  508. instance.host_port, address_family);
  509. if (instance.server.socket == NULL) {
  510. qnetd_err_nss();
  511. }
  512. if (nss_sock_set_non_blocking(instance.server.socket) != 0) {
  513. qnetd_err_nss();
  514. }
  515. if (PR_Listen(instance.server.socket, instance.advanced_settings->listen_backlog) !=
  516. PR_SUCCESS) {
  517. qnetd_err_nss();
  518. }
  519. global_instance = &instance;
  520. signal_handlers_register();
  521. qnetd_log(LOG_DEBUG, "Registering algorithms");
  522. if (qnetd_algorithm_register_all() != 0) {
  523. exit(1);
  524. }
  525. qnetd_log(LOG_DEBUG, "QNetd ready to provide service");
  526. #ifdef HAVE_LIBSYSTEMD
  527. sd_notify(0, "READY=1");
  528. #endif
  529. /*
  530. * MAIN LOOP
  531. */
  532. while (qnetd_poll(&instance) == 0) {
  533. }
  534. /*
  535. * Cleanup
  536. */
  537. qnetd_ipc_destroy(&instance);
  538. if (PR_Close(instance.server.socket) != PR_SUCCESS) {
  539. qnetd_warn_nss();
  540. }
  541. CERT_DestroyCertificate(instance.server.cert);
  542. SECKEY_DestroyPrivateKey(instance.server.private_key);
  543. SSL_ClearSessionCache();
  544. SSL_ShutdownServerSessionIDCache();
  545. qnetd_instance_destroy(&instance);
  546. qnetd_advanced_settings_destroy(&advanced_settings);
  547. if (NSS_Shutdown() != SECSuccess) {
  548. qnetd_warn_nss();
  549. }
  550. if (PR_Cleanup() != PR_SUCCESS) {
  551. qnetd_warn_nss();
  552. }
  553. qnetd_log_close();
  554. return (0);
  555. }