corosync-qnetd.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478
  1. /*
  2. * Copyright (c) 2015-2016 Red Hat, Inc.
  3. *
  4. * All rights reserved.
  5. *
  6. * Author: Jan Friesse (jfriesse@redhat.com)
  7. *
  8. * This software licensed under BSD license, the text of which follows:
  9. *
  10. * Redistribution and use in source and binary forms, with or without
  11. * modification, are permitted provided that the following conditions are met:
  12. *
  13. * - Redistributions of source code must retain the above copyright notice,
  14. * this list of conditions and the following disclaimer.
  15. * - Redistributions in binary form must reproduce the above copyright notice,
  16. * this list of conditions and the following disclaimer in the documentation
  17. * and/or other materials provided with the distribution.
  18. * - Neither the name of the Red Hat, Inc. nor the names of its
  19. * contributors may be used to endorse or promote products derived from this
  20. * software without specific prior written permission.
  21. *
  22. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  23. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25. * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  26. * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  27. * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  28. * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  29. * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  30. * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  31. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  32. * THE POSSIBILITY OF SUCH DAMAGE.
  33. */
  34. #include <err.h>
  35. #include <errno.h>
  36. #include <getopt.h>
  37. #include <signal.h>
  38. #include <unistd.h>
  39. #include "qnet-config.h"
  40. #include "nss-sock.h"
  41. #include "pr-poll-array.h"
  42. #include "qnetd-algorithm.h"
  43. #include "qnetd-instance.h"
  44. #include "qnetd-log.h"
  45. #include "qnetd-client-net.h"
  46. #include "qnetd-client-msg-received.h"
  47. #include "qnetd-poll-array-user-data.h"
  48. #include "utils.h"
  49. /*
  50. * This is global variable used for comunication with main loop and signal (calls close)
  51. */
  52. PRFileDesc *global_server_socket;
  53. enum tlv_decision_algorithm_type
  54. qnetd_static_supported_decision_algorithms[QNETD_STATIC_SUPPORTED_DECISION_ALGORITHMS_SIZE] = {
  55. TLV_DECISION_ALGORITHM_TYPE_TEST,
  56. TLV_DECISION_ALGORITHM_TYPE_FFSPLIT,
  57. TLV_DECISION_ALGORITHM_TYPE_2NODELMS,
  58. TLV_DECISION_ALGORITHM_TYPE_LMS,
  59. };
  60. static void
  61. qnetd_err_nss(void) {
  62. qnetd_log_nss(LOG_CRIT, "NSS error");
  63. exit(1);
  64. }
  65. static void
  66. qnetd_warn_nss(void) {
  67. qnetd_log_nss(LOG_WARNING, "NSS warning");
  68. }
  69. static PRPollDesc *
  70. qnetd_pr_poll_array_create(struct qnetd_instance *instance)
  71. {
  72. struct pr_poll_array *poll_array;
  73. const struct qnetd_client_list *client_list;
  74. struct qnetd_client *client;
  75. PRPollDesc *poll_desc;
  76. struct qnetd_poll_array_user_data *user_data;
  77. poll_array = &instance->poll_array;
  78. client_list = &instance->clients;
  79. pr_poll_array_clean(poll_array);
  80. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  81. return (NULL);
  82. }
  83. poll_desc->fd = instance->server.socket;
  84. poll_desc->in_flags = PR_POLL_READ;
  85. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET;
  86. TAILQ_FOREACH(client, client_list, entries) {
  87. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  88. return (NULL);
  89. }
  90. poll_desc->fd = client->socket;
  91. poll_desc->in_flags = PR_POLL_READ;
  92. if (!send_buffer_list_empty(&client->send_buffer_list)) {
  93. poll_desc->in_flags |= PR_POLL_WRITE;
  94. }
  95. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT;
  96. user_data->client = client;
  97. }
  98. pr_poll_array_gc(poll_array);
  99. return (poll_array->array);
  100. }
  101. static int
  102. qnetd_poll(struct qnetd_instance *instance)
  103. {
  104. struct qnetd_client *client;
  105. PRPollDesc *pfds;
  106. PRInt32 poll_res;
  107. ssize_t i;
  108. int client_disconnect;
  109. struct qnetd_poll_array_user_data *user_data;
  110. client = NULL;
  111. client_disconnect = 0;
  112. pfds = qnetd_pr_poll_array_create(instance);
  113. if (pfds == NULL) {
  114. return (-1);
  115. }
  116. if ((poll_res = PR_Poll(pfds, pr_poll_array_size(&instance->poll_array),
  117. timer_list_time_to_expire(&instance->main_timer_list))) >= 0) {
  118. timer_list_expire(&instance->main_timer_list);
  119. /*
  120. * Walk thru pfds array and process events
  121. */
  122. for (i = 0; i < pr_poll_array_size(&instance->poll_array); i++) {
  123. user_data = pr_poll_array_get_user_data(&instance->poll_array, i);
  124. switch (user_data->type) {
  125. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  126. client_disconnect = 0;
  127. break;
  128. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  129. client = user_data->client;
  130. client_disconnect = client->schedule_disconnect;
  131. break;
  132. }
  133. if (!client_disconnect && poll_res > 0 &&
  134. pfds[i].out_flags & PR_POLL_READ) {
  135. switch (user_data->type) {
  136. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  137. qnetd_client_net_accept(instance);
  138. break;
  139. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  140. if (qnetd_client_net_read(instance, client) == -1) {
  141. client_disconnect = 1;
  142. }
  143. break;
  144. }
  145. }
  146. if (!client_disconnect && poll_res > 0 &&
  147. pfds[i].out_flags & PR_POLL_WRITE) {
  148. switch (user_data->type) {
  149. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  150. /*
  151. * Poll write on listen socket -> fatal error
  152. */
  153. qnetd_log(LOG_CRIT, "POLL_WRITE on listening socket");
  154. return (-1);
  155. break;
  156. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  157. if (qnetd_client_net_write(instance, client) == -1) {
  158. client_disconnect = 1;
  159. }
  160. break;
  161. }
  162. }
  163. if (!client_disconnect && poll_res > 0 &&
  164. (pfds[i].out_flags & (PR_POLL_ERR|PR_POLL_NVAL|PR_POLL_HUP|PR_POLL_EXCEPT)) &&
  165. !(pfds[i].out_flags & (PR_POLL_READ|PR_POLL_WRITE))) {
  166. switch (user_data->type) {
  167. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  168. if (pfds[i].out_flags != PR_POLL_NVAL) {
  169. /*
  170. * Poll ERR on listening socket is fatal error.
  171. * POLL_NVAL is used as a signal to quit poll loop.
  172. */
  173. qnetd_log(LOG_CRIT, "POLL_ERR (%u) on listening "
  174. "socket", pfds[i].out_flags);
  175. } else {
  176. qnetd_log(LOG_DEBUG, "Listening socket is closed");
  177. }
  178. return (-1);
  179. break;
  180. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  181. qnetd_log(LOG_DEBUG, "POLL_ERR (%u) on client socket. "
  182. "Disconnecting.", pfds[i].out_flags);
  183. client_disconnect = 1;
  184. break;
  185. }
  186. }
  187. /*
  188. * If client is scheduled for disconnect, disconnect it
  189. */
  190. if (client_disconnect) {
  191. qnetd_instance_client_disconnect(instance, client, 0);
  192. }
  193. }
  194. }
  195. return (0);
  196. }
  197. static void
  198. signal_int_handler(int sig)
  199. {
  200. qnetd_log(LOG_DEBUG, "SIGINT received - closing server socket");
  201. PR_Close(global_server_socket);
  202. }
  203. static void
  204. signal_term_handler(int sig)
  205. {
  206. qnetd_log(LOG_DEBUG, "SIGTERM received - closing server socket");
  207. PR_Close(global_server_socket);
  208. }
  209. static void
  210. signal_handlers_register(void)
  211. {
  212. struct sigaction act;
  213. act.sa_handler = signal_int_handler;
  214. sigemptyset(&act.sa_mask);
  215. act.sa_flags = SA_RESTART;
  216. sigaction(SIGINT, &act, NULL);
  217. act.sa_handler = signal_term_handler;
  218. sigemptyset(&act.sa_mask);
  219. act.sa_flags = SA_RESTART;
  220. sigaction(SIGTERM, &act, NULL);
  221. }
  222. static void
  223. usage(void)
  224. {
  225. printf("usage: %s [-46dfh] [-l listen_addr] [-p listen_port] [-s tls]\n", QNETD_PROGRAM_NAME);
  226. printf("%14s[-c client_cert_required] [-m max_clients]\n", "");
  227. }
  228. static void
  229. cli_parse(int argc, char * const argv[], char **host_addr, uint16_t *host_port, int *foreground,
  230. int *debug_log, int *bump_log_priority, enum tlv_tls_supported *tls_supported,
  231. int *client_cert_required, size_t *max_clients, PRIntn *address_family)
  232. {
  233. int ch;
  234. char *ep;
  235. long long int tmpll;
  236. *host_addr = NULL;
  237. *host_port = QNETD_DEFAULT_HOST_PORT;
  238. *foreground = 0;
  239. *debug_log = 0;
  240. *bump_log_priority = 0;
  241. *tls_supported = QNETD_DEFAULT_TLS_SUPPORTED;
  242. *client_cert_required = QNETD_DEFAULT_TLS_CLIENT_CERT_REQUIRED;
  243. *max_clients = QNETD_DEFAULT_MAX_CLIENTS;
  244. *address_family = PR_AF_UNSPEC;
  245. while ((ch = getopt(argc, argv, "46dfhc:l:m:p:s:")) != -1) {
  246. switch (ch) {
  247. case '4':
  248. *address_family = PR_AF_INET;
  249. break;
  250. case '6':
  251. *address_family = PR_AF_INET6;
  252. break;
  253. case 'f':
  254. *foreground = 1;
  255. break;
  256. case 'd':
  257. if (*debug_log) {
  258. *bump_log_priority = 1;
  259. }
  260. *debug_log = 1;
  261. break;
  262. case 'c':
  263. if ((*client_cert_required = utils_parse_bool_str(optarg)) == -1) {
  264. errx(1, "client_cert_required should be on/yes/1, off/no/0");
  265. }
  266. break;
  267. case 'l':
  268. *host_addr = strdup(optarg);
  269. break;
  270. case 'm':
  271. errno = 0;
  272. tmpll = strtoll(optarg, &ep, 10);
  273. if (tmpll < 0 || errno != 0 || *ep != '\0') {
  274. errx(1, "max clients value %s is invalid", optarg);
  275. }
  276. *max_clients = (size_t)tmpll;
  277. break;
  278. case 'p':
  279. *host_port = strtol(optarg, &ep, 10);
  280. if (*host_port <= 0 || *host_port > ((uint16_t)~0) || *ep != '\0') {
  281. errx(1, "host port must be in range 0-65535");
  282. }
  283. break;
  284. case 's':
  285. if (strcasecmp(optarg, "on") == 0) {
  286. *tls_supported = QNETD_DEFAULT_TLS_SUPPORTED;
  287. } else if (strcasecmp(optarg, "off") == 0) {
  288. *tls_supported = TLV_TLS_UNSUPPORTED;
  289. } else if (strcasecmp(optarg, "req") == 0) {
  290. *tls_supported = TLV_TLS_REQUIRED;
  291. } else {
  292. errx(1, "tls must be one of on, off, req");
  293. }
  294. break;
  295. case 'h':
  296. case '?':
  297. usage();
  298. exit(1);
  299. break;
  300. }
  301. }
  302. }
  303. int
  304. main(int argc, char * const argv[])
  305. {
  306. struct qnetd_instance instance;
  307. char *host_addr;
  308. uint16_t host_port;
  309. int foreground;
  310. int debug_log;
  311. int bump_log_priority;
  312. enum tlv_tls_supported tls_supported;
  313. int client_cert_required;
  314. size_t max_clients;
  315. PRIntn address_family;
  316. int lock_file;
  317. int another_instance_running;
  318. cli_parse(argc, argv, &host_addr, &host_port, &foreground, &debug_log, &bump_log_priority,
  319. &tls_supported, &client_cert_required, &max_clients, &address_family);
  320. if (foreground) {
  321. qnetd_log_init(QNETD_LOG_TARGET_STDERR);
  322. } else {
  323. qnetd_log_init(QNETD_LOG_TARGET_SYSLOG);
  324. }
  325. qnetd_log_set_debug(debug_log);
  326. qnetd_log_set_priority_bump(bump_log_priority);
  327. /*
  328. * Daemonize
  329. */
  330. if (!foreground) {
  331. utils_tty_detach();
  332. }
  333. if ((lock_file = utils_flock(QNETD_LOCK_FILE, getpid(), &another_instance_running)) == -1) {
  334. if (another_instance_running) {
  335. qnetd_log(LOG_ERR, "Another instance is running");
  336. } else {
  337. qnetd_log_err(LOG_ERR, "Can't acquire lock");
  338. }
  339. exit(1);
  340. }
  341. qnetd_log(LOG_DEBUG, "Initializing nss");
  342. if (nss_sock_init_nss((tls_supported != TLV_TLS_UNSUPPORTED ?
  343. (char *)QNETD_NSS_DB_DIR : NULL)) != 0) {
  344. qnetd_err_nss();
  345. }
  346. if (SSL_ConfigServerSessionIDCache(0, 0, 0, NULL) != SECSuccess) {
  347. qnetd_err_nss();
  348. }
  349. if (qnetd_instance_init(&instance, QNETD_MAX_CLIENT_RECEIVE_SIZE,
  350. QNETD_MAX_CLIENT_SEND_BUFFERS, QNETD_MAX_CLIENT_SEND_SIZE,
  351. tls_supported, client_cert_required, max_clients) == -1) {
  352. qnetd_log(LOG_ERR, "Can't initialize qnetd");
  353. exit(1);
  354. }
  355. instance.host_addr = host_addr;
  356. instance.host_port = host_port;
  357. if (qnetd_instance_init_certs(&instance) == -1) {
  358. qnetd_err_nss();
  359. }
  360. qnetd_log(LOG_DEBUG, "Creating listening socket");
  361. instance.server.socket = nss_sock_create_listen_socket(instance.host_addr,
  362. instance.host_port, address_family);
  363. if (instance.server.socket == NULL) {
  364. qnetd_err_nss();
  365. }
  366. if (nss_sock_set_non_blocking(instance.server.socket) != 0) {
  367. qnetd_err_nss();
  368. }
  369. if (PR_Listen(instance.server.socket, QNETD_LISTEN_BACKLOG) != PR_SUCCESS) {
  370. qnetd_err_nss();
  371. }
  372. global_server_socket = instance.server.socket;
  373. signal_handlers_register();
  374. qnetd_log(LOG_DEBUG, "Registering algorithms");
  375. if (qnetd_algorithm_register_all() != 0) {
  376. exit(1);
  377. }
  378. qnetd_log(LOG_DEBUG, "QNetd ready to provide service");
  379. /*
  380. * MAIN LOOP
  381. */
  382. while (qnetd_poll(&instance) == 0) {
  383. }
  384. /*
  385. * Cleanup
  386. */
  387. CERT_DestroyCertificate(instance.server.cert);
  388. SECKEY_DestroyPrivateKey(instance.server.private_key);
  389. SSL_ClearSessionCache();
  390. SSL_ShutdownServerSessionIDCache();
  391. qnetd_instance_destroy(&instance);
  392. if (NSS_Shutdown() != SECSuccess) {
  393. qnetd_warn_nss();
  394. }
  395. if (PR_Cleanup() != PR_SUCCESS) {
  396. qnetd_warn_nss();
  397. }
  398. qnetd_log_close();
  399. return (0);
  400. }