corosync-qnetd.c 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653
  1. /*
  2. * Copyright (c) 2015-2016 Red Hat, Inc.
  3. *
  4. * All rights reserved.
  5. *
  6. * Author: Jan Friesse (jfriesse@redhat.com)
  7. *
  8. * This software licensed under BSD license, the text of which follows:
  9. *
  10. * Redistribution and use in source and binary forms, with or without
  11. * modification, are permitted provided that the following conditions are met:
  12. *
  13. * - Redistributions of source code must retain the above copyright notice,
  14. * this list of conditions and the following disclaimer.
  15. * - Redistributions in binary form must reproduce the above copyright notice,
  16. * this list of conditions and the following disclaimer in the documentation
  17. * and/or other materials provided with the distribution.
  18. * - Neither the name of the Red Hat, Inc. nor the names of its
  19. * contributors may be used to endorse or promote products derived from this
  20. * software without specific prior written permission.
  21. *
  22. * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  23. * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  24. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  25. * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
  26. * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  27. * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  28. * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  29. * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
  30. * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  31. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
  32. * THE POSSIBILITY OF SUCH DAMAGE.
  33. */
  34. #include <err.h>
  35. #include <errno.h>
  36. #include <getopt.h>
  37. #include <signal.h>
  38. #include <unistd.h>
  39. #include "qnet-config.h"
  40. #include "dynar.h"
  41. #include "dynar-str.h"
  42. #include "dynar-getopt-lex.h"
  43. #include "nss-sock.h"
  44. #include "pr-poll-array.h"
  45. #include "qnetd-advanced-settings.h"
  46. #include "qnetd-algorithm.h"
  47. #include "qnetd-instance.h"
  48. #include "qnetd-ipc.h"
  49. #include "qnetd-log.h"
  50. #include "qnetd-client-net.h"
  51. #include "qnetd-client-msg-received.h"
  52. #include "qnetd-poll-array-user-data.h"
  53. #include "utils.h"
  54. #include "msg.h"
  55. /*
  56. * This is global variable used for comunication with main loop and signal (calls close)
  57. */
  58. struct qnetd_instance *global_instance;
  59. enum tlv_decision_algorithm_type
  60. qnetd_static_supported_decision_algorithms[QNETD_STATIC_SUPPORTED_DECISION_ALGORITHMS_SIZE] = {
  61. TLV_DECISION_ALGORITHM_TYPE_TEST,
  62. TLV_DECISION_ALGORITHM_TYPE_FFSPLIT,
  63. TLV_DECISION_ALGORITHM_TYPE_2NODELMS,
  64. TLV_DECISION_ALGORITHM_TYPE_LMS,
  65. };
  66. static void
  67. qnetd_err_nss(void)
  68. {
  69. qnetd_log_nss(LOG_CRIT, "NSS error");
  70. exit(1);
  71. }
  72. static void
  73. qnetd_warn_nss(void)
  74. {
  75. qnetd_log_nss(LOG_WARNING, "NSS warning");
  76. }
  77. static PRPollDesc *
  78. qnetd_pr_poll_array_create(struct qnetd_instance *instance)
  79. {
  80. struct pr_poll_array *poll_array;
  81. const struct qnetd_client_list *client_list;
  82. struct qnetd_client *client;
  83. PRPollDesc *poll_desc;
  84. struct qnetd_poll_array_user_data *user_data;
  85. const struct unix_socket_client_list *ipc_client_list;
  86. struct unix_socket_client *ipc_client;
  87. poll_array = &instance->poll_array;
  88. client_list = &instance->clients;
  89. ipc_client_list = &instance->local_ipc.clients;
  90. pr_poll_array_clean(poll_array);
  91. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  92. return (NULL);
  93. }
  94. poll_desc->fd = instance->server.socket;
  95. poll_desc->in_flags = PR_POLL_READ;
  96. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET;
  97. if (qnetd_ipc_is_closed(instance)) {
  98. qnetd_log(LOG_DEBUG, "Listening socket is closed");
  99. return (NULL);
  100. }
  101. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  102. return (NULL);
  103. }
  104. poll_desc->fd = instance->ipc_socket_poll_fd;
  105. poll_desc->in_flags = PR_POLL_READ;
  106. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET;
  107. TAILQ_FOREACH(client, client_list, entries) {
  108. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  109. return (NULL);
  110. }
  111. poll_desc->fd = client->socket;
  112. poll_desc->in_flags = PR_POLL_READ;
  113. if (!send_buffer_list_empty(&client->send_buffer_list)) {
  114. poll_desc->in_flags |= PR_POLL_WRITE;
  115. }
  116. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT;
  117. user_data->client = client;
  118. }
  119. TAILQ_FOREACH(ipc_client, ipc_client_list, entries) {
  120. if (!ipc_client->reading_line && !ipc_client->writing_buffer) {
  121. continue;
  122. }
  123. if (pr_poll_array_add(poll_array, &poll_desc, (void **)&user_data) < 0) {
  124. return (NULL);
  125. }
  126. poll_desc->fd = ((struct qnetd_ipc_user_data *)ipc_client->user_data)->nspr_poll_fd;
  127. if (ipc_client->reading_line) {
  128. poll_desc->in_flags |= PR_POLL_READ;
  129. }
  130. if (ipc_client->writing_buffer) {
  131. poll_desc->in_flags |= PR_POLL_WRITE;
  132. }
  133. user_data->type = QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT;
  134. user_data->ipc_client = ipc_client;
  135. }
  136. pr_poll_array_gc(poll_array);
  137. return (poll_array->array);
  138. }
  139. static int
  140. qnetd_poll(struct qnetd_instance *instance)
  141. {
  142. struct qnetd_client *client;
  143. PRPollDesc *pfds;
  144. PRInt32 poll_res;
  145. ssize_t i;
  146. int client_disconnect;
  147. struct qnetd_poll_array_user_data *user_data;
  148. struct unix_socket_client *ipc_client;
  149. client = NULL;
  150. client_disconnect = 0;
  151. pfds = qnetd_pr_poll_array_create(instance);
  152. if (pfds == NULL) {
  153. return (-1);
  154. }
  155. if ((poll_res = PR_Poll(pfds, pr_poll_array_size(&instance->poll_array),
  156. timer_list_time_to_expire(&instance->main_timer_list))) >= 0) {
  157. timer_list_expire(&instance->main_timer_list);
  158. /*
  159. * Walk thru pfds array and process events
  160. */
  161. for (i = 0; i < pr_poll_array_size(&instance->poll_array); i++) {
  162. user_data = pr_poll_array_get_user_data(&instance->poll_array, i);
  163. client = NULL;
  164. ipc_client = NULL;
  165. client_disconnect = 0;
  166. switch (user_data->type) {
  167. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  168. break;
  169. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  170. client = user_data->client;
  171. client_disconnect = client->schedule_disconnect;
  172. break;
  173. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  174. break;
  175. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  176. ipc_client = user_data->ipc_client;
  177. client_disconnect = ipc_client->schedule_disconnect;
  178. }
  179. if (!client_disconnect && poll_res > 0 &&
  180. pfds[i].out_flags & PR_POLL_READ) {
  181. switch (user_data->type) {
  182. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  183. qnetd_client_net_accept(instance);
  184. break;
  185. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  186. if (qnetd_client_net_read(instance, client) == -1) {
  187. client_disconnect = 1;
  188. }
  189. break;
  190. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  191. qnetd_ipc_accept(instance, &ipc_client);
  192. break;
  193. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  194. qnetd_ipc_io_read(instance, ipc_client);
  195. break;
  196. }
  197. }
  198. if (!client_disconnect && poll_res > 0 &&
  199. pfds[i].out_flags & PR_POLL_WRITE) {
  200. switch (user_data->type) {
  201. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  202. /*
  203. * Poll write on listen socket -> fatal error
  204. */
  205. qnetd_log(LOG_CRIT, "POLL_WRITE on listening socket");
  206. return (-1);
  207. break;
  208. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  209. if (qnetd_client_net_write(instance, client) == -1) {
  210. client_disconnect = 1;
  211. }
  212. break;
  213. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  214. qnetd_log(LOG_CRIT, "POLL_WRITE on listening IPC socket");
  215. return (-1);
  216. break;
  217. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  218. qnetd_ipc_io_write(instance, ipc_client);
  219. break;
  220. }
  221. }
  222. if (!client_disconnect && poll_res > 0 &&
  223. (pfds[i].out_flags & (PR_POLL_ERR|PR_POLL_NVAL|PR_POLL_HUP|PR_POLL_EXCEPT)) &&
  224. !(pfds[i].out_flags & (PR_POLL_READ|PR_POLL_WRITE))) {
  225. switch (user_data->type) {
  226. case QNETD_POLL_ARRAY_USER_DATA_TYPE_SOCKET:
  227. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_SOCKET:
  228. if (pfds[i].out_flags != PR_POLL_NVAL) {
  229. /*
  230. * Poll ERR on listening socket is fatal error.
  231. * POLL_NVAL is used as a signal to quit poll loop.
  232. */
  233. qnetd_log(LOG_CRIT, "POLL_ERR (%u) on listening "
  234. "socket", pfds[i].out_flags);
  235. } else {
  236. qnetd_log(LOG_DEBUG, "Listening socket is closed");
  237. }
  238. return (-1);
  239. break;
  240. case QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT:
  241. qnetd_log(LOG_DEBUG, "POLL_ERR (%u) on client socket. "
  242. "Disconnecting.", pfds[i].out_flags);
  243. client_disconnect = 1;
  244. break;
  245. case QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT:
  246. qnetd_log(LOG_DEBUG, "POLL_ERR (%u) on ipc client socket."
  247. " Disconnecting.", pfds[i].out_flags);
  248. client_disconnect = 1;
  249. break;
  250. }
  251. }
  252. /*
  253. * If client is scheduled for disconnect, disconnect it
  254. */
  255. if (user_data->type == QNETD_POLL_ARRAY_USER_DATA_TYPE_CLIENT &&
  256. client_disconnect) {
  257. qnetd_instance_client_disconnect(instance, client, 0);
  258. } else if (user_data->type == QNETD_POLL_ARRAY_USER_DATA_TYPE_IPC_CLIENT &&
  259. (client_disconnect || ipc_client->schedule_disconnect)) {
  260. qnetd_ipc_client_disconnect(instance, ipc_client);
  261. }
  262. }
  263. }
  264. return (0);
  265. }
  266. static void
  267. signal_int_handler(int sig)
  268. {
  269. qnetd_log(LOG_DEBUG, "SIGINT received - closing server IPC socket");
  270. qnetd_ipc_close(global_instance);
  271. }
  272. static void
  273. signal_term_handler(int sig)
  274. {
  275. qnetd_log(LOG_DEBUG, "SIGTERM received - closing server IPC socket");
  276. qnetd_ipc_close(global_instance);
  277. }
  278. static void
  279. signal_handlers_register(void)
  280. {
  281. struct sigaction act;
  282. act.sa_handler = signal_int_handler;
  283. sigemptyset(&act.sa_mask);
  284. act.sa_flags = SA_RESTART;
  285. sigaction(SIGINT, &act, NULL);
  286. act.sa_handler = signal_term_handler;
  287. sigemptyset(&act.sa_mask);
  288. act.sa_flags = SA_RESTART;
  289. sigaction(SIGTERM, &act, NULL);
  290. }
  291. static void
  292. usage(void)
  293. {
  294. printf("usage: %s [-46dfhv] [-l listen_addr] [-p listen_port] [-s tls]\n", QNETD_PROGRAM_NAME);
  295. printf("%14s[-c client_cert_required] [-m max_clients] [-S option=value[,option2=value2,...]]\n", "");
  296. }
  297. static void
  298. display_version(void)
  299. {
  300. enum msg_type *supported_messages;
  301. size_t no_supported_messages;
  302. size_t zi;
  303. msg_get_supported_messages(&supported_messages, &no_supported_messages);
  304. printf("Corosync Qdevice Network Daemon, version '%s'\n\n", VERSION);
  305. printf("Supported algorithms: ");
  306. for (zi = 0; zi < QNETD_STATIC_SUPPORTED_DECISION_ALGORITHMS_SIZE; zi++) {
  307. if (zi != 0) {
  308. printf(", ");
  309. }
  310. printf("%s (%u)",
  311. tlv_decision_algorithm_type_to_str(qnetd_static_supported_decision_algorithms[zi]),
  312. qnetd_static_supported_decision_algorithms[zi]);
  313. }
  314. printf("\n");
  315. printf("Supported message types: ");
  316. for (zi = 0; zi < no_supported_messages; zi++) {
  317. if (zi != 0) {
  318. printf(", ");
  319. }
  320. printf("%s (%u)", msg_type_to_str(supported_messages[zi]), supported_messages[zi]);
  321. }
  322. printf("\n");
  323. }
  324. static void
  325. cli_parse_long_opt(struct qnetd_advanced_settings *advanced_settings, const char *long_opt)
  326. {
  327. struct dynar_getopt_lex lex;
  328. struct dynar dynar_long_opt;
  329. const char *opt;
  330. const char *val;
  331. int res;
  332. dynar_init(&dynar_long_opt, strlen(long_opt) + 1);
  333. if (dynar_str_cpy(&dynar_long_opt, long_opt) != 0) {
  334. errx(1, "Can't alloc memory for long option");
  335. }
  336. dynar_getopt_lex_init(&lex, &dynar_long_opt);
  337. while (dynar_getopt_lex_token_next(&lex) == 0 && strcmp(dynar_data(&lex.option), "") != 0) {
  338. opt = dynar_data(&lex.option);
  339. val = dynar_data(&lex.value);
  340. res = qnetd_advanced_settings_set(advanced_settings, opt, val);
  341. switch (res) {
  342. case -1:
  343. errx(1, "Unknown option '%s'", opt);
  344. break;
  345. case -2:
  346. errx(1, "Invalid value '%s' for option '%s'", val, opt);
  347. break;
  348. }
  349. }
  350. dynar_getopt_lex_destroy(&lex);
  351. dynar_destroy(&dynar_long_opt);
  352. }
  353. static void
  354. cli_parse(int argc, char * const argv[], char **host_addr, uint16_t *host_port, int *foreground,
  355. int *debug_log, int *bump_log_priority, enum tlv_tls_supported *tls_supported,
  356. int *client_cert_required, size_t *max_clients, PRIntn *address_family,
  357. struct qnetd_advanced_settings *advanced_settings)
  358. {
  359. int ch;
  360. char *ep;
  361. long long int tmpll;
  362. *host_addr = NULL;
  363. *host_port = QNETD_DEFAULT_HOST_PORT;
  364. *foreground = 0;
  365. *debug_log = 0;
  366. *bump_log_priority = 0;
  367. *tls_supported = QNETD_DEFAULT_TLS_SUPPORTED;
  368. *client_cert_required = QNETD_DEFAULT_TLS_CLIENT_CERT_REQUIRED;
  369. *max_clients = QNETD_DEFAULT_MAX_CLIENTS;
  370. *address_family = PR_AF_UNSPEC;
  371. while ((ch = getopt(argc, argv, "46dfhvc:l:m:p:S:s:")) != -1) {
  372. switch (ch) {
  373. case '4':
  374. *address_family = PR_AF_INET;
  375. break;
  376. case '6':
  377. *address_family = PR_AF_INET6;
  378. break;
  379. case 'f':
  380. *foreground = 1;
  381. break;
  382. case 'd':
  383. if (*debug_log) {
  384. *bump_log_priority = 1;
  385. }
  386. *debug_log = 1;
  387. break;
  388. case 'c':
  389. if ((*client_cert_required = utils_parse_bool_str(optarg)) == -1) {
  390. errx(1, "client_cert_required should be on/yes/1, off/no/0");
  391. }
  392. break;
  393. case 'l':
  394. free(*host_addr);
  395. *host_addr = strdup(optarg);
  396. if (*host_addr == NULL) {
  397. errx(1, "Can't alloc memory for host addr string");
  398. }
  399. break;
  400. case 'm':
  401. errno = 0;
  402. tmpll = strtoll(optarg, &ep, 10);
  403. if (tmpll < 0 || errno != 0 || *ep != '\0') {
  404. errx(1, "max clients value %s is invalid", optarg);
  405. }
  406. *max_clients = (size_t)tmpll;
  407. break;
  408. case 'p':
  409. *host_port = strtol(optarg, &ep, 10);
  410. if (*host_port <= 0 || *host_port > ((uint16_t)~0) || *ep != '\0') {
  411. errx(1, "host port must be in range 0-65535");
  412. }
  413. break;
  414. case 'S':
  415. cli_parse_long_opt(advanced_settings, optarg);
  416. break;
  417. case 's':
  418. if (strcasecmp(optarg, "on") == 0) {
  419. *tls_supported = QNETD_DEFAULT_TLS_SUPPORTED;
  420. } else if (strcasecmp(optarg, "off") == 0) {
  421. *tls_supported = TLV_TLS_UNSUPPORTED;
  422. } else if (strcasecmp(optarg, "req") == 0) {
  423. *tls_supported = TLV_TLS_REQUIRED;
  424. } else {
  425. errx(1, "tls must be one of on, off, req");
  426. }
  427. break;
  428. case 'v':
  429. display_version();
  430. exit(1);
  431. break;
  432. case 'h':
  433. case '?':
  434. usage();
  435. exit(1);
  436. break;
  437. }
  438. }
  439. }
  440. int
  441. main(int argc, char * const argv[])
  442. {
  443. struct qnetd_instance instance;
  444. struct qnetd_advanced_settings advanced_settings;
  445. char *host_addr;
  446. uint16_t host_port;
  447. int foreground;
  448. int debug_log;
  449. int bump_log_priority;
  450. enum tlv_tls_supported tls_supported;
  451. int client_cert_required;
  452. size_t max_clients;
  453. PRIntn address_family;
  454. int lock_file;
  455. int another_instance_running;
  456. if (qnetd_advanced_settings_init(&advanced_settings) != 0) {
  457. errx(1, "Can't alloc memory for advanced settings");
  458. }
  459. cli_parse(argc, argv, &host_addr, &host_port, &foreground, &debug_log, &bump_log_priority,
  460. &tls_supported, &client_cert_required, &max_clients, &address_family, &advanced_settings);
  461. if (foreground) {
  462. qnetd_log_init(QNETD_LOG_TARGET_STDERR);
  463. } else {
  464. qnetd_log_init(QNETD_LOG_TARGET_SYSLOG);
  465. }
  466. qnetd_log_set_debug(debug_log);
  467. qnetd_log_set_priority_bump(bump_log_priority);
  468. /*
  469. * Daemonize
  470. */
  471. if (!foreground) {
  472. utils_tty_detach();
  473. }
  474. if ((lock_file = utils_flock(advanced_settings.lock_file, getpid(),
  475. &another_instance_running)) == -1) {
  476. if (another_instance_running) {
  477. qnetd_log(LOG_ERR, "Another instance is running");
  478. } else {
  479. qnetd_log_err(LOG_ERR, "Can't acquire lock");
  480. }
  481. exit(1);
  482. }
  483. qnetd_log(LOG_DEBUG, "Initializing nss");
  484. if (nss_sock_init_nss((tls_supported != TLV_TLS_UNSUPPORTED ?
  485. advanced_settings.nss_db_dir : NULL)) != 0) {
  486. qnetd_err_nss();
  487. }
  488. if (SSL_ConfigServerSessionIDCache(0, 0, 0, NULL) != SECSuccess) {
  489. qnetd_err_nss();
  490. }
  491. if (qnetd_instance_init(&instance, tls_supported, client_cert_required,
  492. max_clients, &advanced_settings) == -1) {
  493. qnetd_log(LOG_ERR, "Can't initialize qnetd");
  494. exit(1);
  495. }
  496. instance.host_addr = host_addr;
  497. instance.host_port = host_port;
  498. if (tls_supported != TLV_TLS_UNSUPPORTED && qnetd_instance_init_certs(&instance) == -1) {
  499. qnetd_err_nss();
  500. }
  501. qnetd_log(LOG_DEBUG, "Initializing local socket");
  502. if (qnetd_ipc_init(&instance) != 0) {
  503. return (1);
  504. }
  505. qnetd_log(LOG_DEBUG, "Creating listening socket");
  506. instance.server.socket = nss_sock_create_listen_socket(instance.host_addr,
  507. instance.host_port, address_family);
  508. if (instance.server.socket == NULL) {
  509. qnetd_err_nss();
  510. }
  511. if (nss_sock_set_non_blocking(instance.server.socket) != 0) {
  512. qnetd_err_nss();
  513. }
  514. if (PR_Listen(instance.server.socket, instance.advanced_settings->listen_backlog) !=
  515. PR_SUCCESS) {
  516. qnetd_err_nss();
  517. }
  518. global_instance = &instance;
  519. signal_handlers_register();
  520. qnetd_log(LOG_DEBUG, "Registering algorithms");
  521. if (qnetd_algorithm_register_all() != 0) {
  522. exit(1);
  523. }
  524. qnetd_log(LOG_DEBUG, "QNetd ready to provide service");
  525. /*
  526. * MAIN LOOP
  527. */
  528. while (qnetd_poll(&instance) == 0) {
  529. }
  530. /*
  531. * Cleanup
  532. */
  533. qnetd_ipc_destroy(&instance);
  534. if (PR_Close(instance.server.socket) != PR_SUCCESS) {
  535. qnetd_warn_nss();
  536. }
  537. CERT_DestroyCertificate(instance.server.cert);
  538. SECKEY_DestroyPrivateKey(instance.server.private_key);
  539. SSL_ClearSessionCache();
  540. SSL_ShutdownServerSessionIDCache();
  541. qnetd_instance_destroy(&instance);
  542. qnetd_advanced_settings_destroy(&advanced_settings);
  543. if (NSS_Shutdown() != SECSuccess) {
  544. qnetd_warn_nss();
  545. }
  546. if (PR_Cleanup() != PR_SUCCESS) {
  547. qnetd_warn_nss();
  548. }
  549. qnetd_log_close();
  550. return (0);
  551. }