qnetd-instance.c 5.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181
  1. /*
  2. * Copyright (c) 2015-2020 Red Hat, Inc.
  3. *
  4. * All rights reserved.
  5. *
  6. * Author: Jan Friesse (jfriesse@redhat.com)
  7. *
  8. * This software licensed under BSD license, the text of which follows:
  9. *
  10. * Redistribution and use in source and binary forms, with or without
  11. * modification, are permitted provided that the following conditions are met:
  12. *
  13. * - Redistributions of source code must retain the above copyright notice,
  14. * this list of conditions and the following disclaimer.
  15. * - Redistributions in binary form must reproduce the above copyright notice,
  16. * this list of conditions and the following disclaimer in the documentation
  17. * and/or other materials provided with the distribution.
  18. * - Neither the name of the Red Hat, Inc. nor the names of its
  19. * contributors may be used to endorse or promote products derived from this
  20. * software without specific prior written permission.
  21. *
  22. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  23. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25. * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  26. * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  27. * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  28. * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  29. * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  30. * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  31. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  32. * THE POSSIBILITY OF SUCH DAMAGE.
  33. */
  34. #include <sys/types.h>
  35. #include <pk11func.h>
  36. #include "log.h"
  37. #include "qnetd-instance.h"
  38. #include "qnetd-client.h"
  39. #include "qnetd-client-dpd-timer.h"
  40. #include "qnetd-algorithm.h"
  41. #include "qnetd-log-debug.h"
  42. #include "qnetd-client-algo-timer.h"
  43. static int
  44. qnetd_instance_poll_loop_pre_poll_cb(void *user_data1, void *user_data2)
  45. {
  46. struct qnetd_instance *instance = (struct qnetd_instance *)user_data1;
  47. struct qnetd_client *client;
  48. struct qnetd_client *client_next;
  49. /*
  50. * This functionality used to be per client fd in
  51. * the qnetd_client_net_socket_poll_loop_set_events_cb. Problem is, that
  52. * disconnect calls algorithm which may send message to other client
  53. * with fd which was already processed in the pr-poll-loop so POLLOUT is
  54. * not set till new loop exec is called (and that usually happens
  55. * because old one timeouts). To reproduce this problem use
  56. * ffsplit and make qnetd disconnect one of the clients - ffsplit needs to
  57. * send ack/nack votes, but it doesn't send them during first iteration
  58. * and waits for dpd timeout.
  59. */
  60. client = TAILQ_FIRST(&instance->clients);
  61. while (client != NULL) {
  62. client_next = TAILQ_NEXT(client, entries);
  63. if (client->schedule_disconnect) {
  64. if (pr_poll_loop_del_prfd(&instance->main_poll_loop,
  65. client->socket) == -1) {
  66. log(LOG_ERR, "pr_poll_loop_del_prfd for client socket failed");
  67. return (-1);
  68. }
  69. qnetd_instance_client_disconnect(instance, client, 0);
  70. }
  71. client = client_next;
  72. }
  73. return (0);
  74. }
  75. int
  76. qnetd_instance_init(struct qnetd_instance *instance,
  77. enum tlv_tls_supported tls_supported, int tls_client_cert_required, size_t max_clients,
  78. const struct qnetd_advanced_settings *advanced_settings)
  79. {
  80. memset(instance, 0, sizeof(*instance));
  81. instance->advanced_settings = advanced_settings;
  82. qnetd_client_list_init(&instance->clients);
  83. qnetd_cluster_list_init(&instance->clusters);
  84. instance->tls_supported = tls_supported;
  85. instance->tls_client_cert_required = tls_client_cert_required;
  86. instance->max_clients = max_clients;
  87. pr_poll_loop_init(&instance->main_poll_loop);
  88. if (pr_poll_loop_add_pre_poll_cb(&instance->main_poll_loop,
  89. qnetd_instance_poll_loop_pre_poll_cb,
  90. instance, NULL) == -1) {
  91. log(LOG_ERR, "Can't add instance pre poll loop cb");
  92. return (-1);
  93. }
  94. return (0);
  95. }
  96. int
  97. qnetd_instance_destroy(struct qnetd_instance *instance)
  98. {
  99. struct qnetd_client *client;
  100. struct qnetd_client *client_next;
  101. client = TAILQ_FIRST(&instance->clients);
  102. while (client != NULL) {
  103. client_next = TAILQ_NEXT(client, entries);
  104. qnetd_instance_client_disconnect(instance, client, 1);
  105. client = client_next;
  106. }
  107. qnetd_cluster_list_free(&instance->clusters);
  108. qnetd_client_list_free(&instance->clients);
  109. if (pr_poll_loop_del_pre_poll_cb(&instance->main_poll_loop,
  110. qnetd_instance_poll_loop_pre_poll_cb) == -1) {
  111. log(LOG_WARNING, "Can't delete instance pre poll loop cb");
  112. }
  113. pr_poll_loop_destroy(&instance->main_poll_loop);
  114. return (0);
  115. }
  116. void
  117. qnetd_instance_client_disconnect(struct qnetd_instance *instance, struct qnetd_client *client,
  118. int server_going_down)
  119. {
  120. qnetd_log_debug_client_disconnect(client, server_going_down);
  121. if (client->init_received) {
  122. qnetd_algorithm_client_disconnect(client, server_going_down);
  123. }
  124. qnetd_client_dpd_timer_destroy(instance, client);
  125. PR_Close(client->socket);
  126. if (client->cluster != NULL) {
  127. qnetd_cluster_list_del_client(&instance->clusters, client->cluster, client);
  128. }
  129. qnetd_client_algo_timer_abort(client);
  130. qnetd_client_list_del(&instance->clients, client);
  131. }
  132. int
  133. qnetd_instance_init_certs(struct qnetd_instance *instance)
  134. {
  135. instance->server.cert = PK11_FindCertFromNickname(
  136. instance->advanced_settings->cert_nickname, NULL);
  137. if (instance->server.cert == NULL) {
  138. return (-1);
  139. }
  140. instance->server.private_key = PK11_FindKeyByAnyCert(instance->server.cert, NULL);
  141. if (instance->server.private_key == NULL) {
  142. return (-1);
  143. }
  144. return (0);
  145. }