Mercurial > hg > quicktun
annotate src/common.c @ 61:66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
author | Ivo Smits <Ivo@UFO-Net.nl> |
---|---|
date | Wed, 04 Jan 2017 21:42:38 +0100 |
parents | 2f4d333f7500 |
children | fa4983c5f7ea |
rev | line source |
---|---|
0 | 1 /* Copyright 2010 Ivo Smits <Ivo@UCIS.nl>. All rights reserved. |
2 Redistribution and use in source and binary forms, with or without modification, are | |
3 permitted provided that the following conditions are met: | |
4 | |
5 1. Redistributions of source code must retain the above copyright notice, this list of | |
6 conditions and the following disclaimer. | |
7 | |
8 2. Redistributions in binary form must reproduce the above copyright notice, this list | |
9 of conditions and the following disclaimer in the documentation and/or other materials | |
10 provided with the distribution. | |
11 | |
12 THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED | |
13 WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND | |
14 FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR | |
15 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR | |
16 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR | |
17 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON | |
18 ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING | |
19 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF | |
20 ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
21 | |
22 The views and conclusions contained in the software and documentation are those of the | |
23 authors and should not be interpreted as representing official policies, either expressed | |
24 or implied, of Ivo Smits.*/ | |
25 | |
26 #include <stdio.h> | |
27 #include <stdlib.h> | |
28 #include <string.h> | |
29 #include <fcntl.h> | |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
30 #include <unistd.h> |
36
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
31 #include <pwd.h> |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
32 #include <grp.h> |
0 | 33 #ifndef HAVE_NETINET_IN_H |
34 #include <netinet/in.h> | |
35 #endif | |
36 #include <sys/ioctl.h> | |
7 | 37 #include <sys/socket.h> |
0 | 38 #include <poll.h> |
39 #include <netdb.h> | |
40 #include <stdlib.h> | |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
41 #include <arpa/inet.h> |
8
6d86596d8884
Fixed BSD support, improved randombytes/secret key generation
ivo <Ivo@UCIS.nl>
parents:
7
diff
changeset
|
42 #include <net/if.h> |
7 | 43 #ifdef linux |
44 #include <linux/if_tun.h> | |
45 #include <linux/if_ether.h> | |
46 #else | |
47 #define ETH_FRAME_LEN 1514 | |
48 #include <net/if_tun.h> | |
13 | 49 #ifdef SOLARIS |
50 #include <sys/stropts.h> | |
51 #include <sys/sockio.h> | |
52 #endif | |
7 | 53 #endif |
0 | 54 |
55 #define MAX_PACKET_LEN (ETH_FRAME_LEN+4) //Some space for optional packet information | |
56 | |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
57 typedef union { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
58 struct sockaddr any; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
59 struct sockaddr_in ip4; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
60 struct sockaddr_in6 ip6; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
61 } sockaddr_any; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
62 |
0 | 63 struct qtsession; |
64 struct qtproto { | |
65 int encrypted; | |
66 int buffersize_raw; | |
67 int buffersize_enc; | |
68 int offset_raw; | |
69 int offset_enc; | |
70 int (*encode)(struct qtsession* sess, char* raw, char* enc, int len); | |
71 int (*decode)(struct qtsession* sess, char* enc, char* raw, int len); | |
72 int (*init)(struct qtsession* sess); | |
73 int protocol_data_size; | |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
74 void (*idle)(struct qtsession* sess); |
0 | 75 }; |
76 struct qtsession { | |
77 struct qtproto protocol; | |
78 void* protocol_data; | |
79 int fd_socket; | |
80 int fd_dev; | |
81 int remote_float; | |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
82 sockaddr_any remote_addr; |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
83 int use_pi; |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
84 int poll_timeout; |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
85 void (*sendnetworkpacket)(struct qtsession* sess, char* msg, int len); |
0 | 86 }; |
87 | |
88 #ifdef COMBINED_BINARY | |
89 extern char* (*getconf)(const char*); | |
90 extern int errorexit(const char*); | |
91 extern int errorexitp(const char*); | |
92 extern void print_header(); | |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
93 extern void hex2bin(unsigned char*, const char*, const int); |
22
38d495566d1c
Re-added some debugging messages to nacltai protocol code, enabled by the DEBUG environment variable
Ivo Smits <Ivo@UCIS.nl>
parents:
15
diff
changeset
|
94 extern int debug; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
95 extern int qtrun(struct qtproto* p); |
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
96 extern int qtprocessargs(int argc, char** argv); |
0 | 97 #else |
98 | |
99 char* (*getconf)(const char*) = getenv; | |
22
38d495566d1c
Re-added some debugging messages to nacltai protocol code, enabled by the DEBUG environment variable
Ivo Smits <Ivo@UCIS.nl>
parents:
15
diff
changeset
|
100 int debug = 0; |
38
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
101 static int gargc = 0; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
102 static char** gargv = NULL; |
0 | 103 |
104 int errorexit(const char* text) { | |
105 fprintf(stderr, "%s\n", text); | |
106 return -1; | |
107 } | |
52
3115f8af98bb
Added support for libsodium, fixed bug in USE_PI compatibility mode, improved timestamp checking in nacltai protocol
Ivo Smits <Ivo@UCIS.nl>
parents:
49
diff
changeset
|
108 int errorexit2(const char* text, const char* error) { |
3115f8af98bb
Added support for libsodium, fixed bug in USE_PI compatibility mode, improved timestamp checking in nacltai protocol
Ivo Smits <Ivo@UCIS.nl>
parents:
49
diff
changeset
|
109 fprintf(stderr, "%s: %s\n", text, error); |
3115f8af98bb
Added support for libsodium, fixed bug in USE_PI compatibility mode, improved timestamp checking in nacltai protocol
Ivo Smits <Ivo@UCIS.nl>
parents:
49
diff
changeset
|
110 return -1; |
3115f8af98bb
Added support for libsodium, fixed bug in USE_PI compatibility mode, improved timestamp checking in nacltai protocol
Ivo Smits <Ivo@UCIS.nl>
parents:
49
diff
changeset
|
111 } |
0 | 112 int errorexitp(const char* text) { |
113 perror(text); | |
114 return -1; | |
115 } | |
116 | |
117 void print_header() { | |
61
66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
Ivo Smits <Ivo@UFO-Net.nl>
parents:
59
diff
changeset
|
118 fprintf(stderr, "UCIS QuickTun "QT_VERSION" (c) 2010-2017 Ivo Smits <Ivo@UCIS.nl>\n"); |
22
38d495566d1c
Re-added some debugging messages to nacltai protocol code, enabled by the DEBUG environment variable
Ivo Smits <Ivo@UCIS.nl>
parents:
15
diff
changeset
|
119 fprintf(stderr, "More information: http://wiki.ucis.nl/QuickTun\n"); |
0 | 120 } |
121 | |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
122 static int is_all_zero(void* buf, int size) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
123 int i; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
124 char* bb = (char*)buf; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
125 for (i = 0; i < size; i++) if (bb[i] != 0) return 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
126 return 1; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
127 } |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
128 static int sockaddr_is_zero_address(sockaddr_any* sa) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
129 int af = sa->any.sa_family; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
130 if (af == AF_INET) return is_all_zero(&sa->ip4.sin_addr, sizeof(struct in_addr)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
131 if (af == AF_INET6) return is_all_zero(&sa->ip6.sin6_addr, sizeof(struct in6_addr)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
132 return is_all_zero(sa, sizeof(sockaddr_any)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
133 } |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
134 static int sockaddr_set_port(sockaddr_any* sa, int port) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
135 port = htons(port); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
136 int af = sa->any.sa_family; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
137 if (af == AF_INET) sa->ip4.sin_port = port; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
138 else if (af == AF_INET6) sa->ip6.sin6_port = port; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
139 else return errorexit("Unknown address family"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
140 return 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
141 } |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
142 static int sockaddr_equal(sockaddr_any* a, sockaddr_any* b) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
143 if (a->any.sa_family != b->any.sa_family) return 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
144 if (a->any.sa_family == AF_INET) return a->ip4.sin_port == b->ip4.sin_port && a->ip4.sin_addr.s_addr == b->ip4.sin_addr.s_addr; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
145 if (a->any.sa_family == AF_INET6) return a->ip6.sin6_port == b->ip6.sin6_port && memcmp(&a->ip6.sin6_addr, &b->ip6.sin6_addr, sizeof(struct in6_addr)) == 0 && a->ip6.sin6_scope_id == b->ip6.sin6_scope_id; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
146 return memcmp(a, b, sizeof(sockaddr_any)) == 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
147 } |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
148 static void sockaddr_to_string(sockaddr_any* sa, char* str, int strbuflen) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
149 if (sa->any.sa_family == AF_INET) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
150 if (!inet_ntop(AF_INET, &sa->ip4.sin_addr, str, strbuflen)) str[0] = 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
151 int i = strlen(str); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
152 snprintf(str + i, strbuflen - i, ":%u", ntohs(sa->ip4.sin_port)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
153 } else if (sa->any.sa_family == AF_INET6) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
154 if (!inet_ntop(AF_INET6, &sa->ip6.sin6_addr, str, strbuflen)) str[0] = 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
155 int i = strlen(str); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
156 snprintf(str + i, strbuflen - i, "%%%d:%u", sa->ip6.sin6_scope_id, ntohs(sa->ip6.sin6_port)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
157 } else { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
158 strncpy(str, "Unknown AF", strbuflen); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
159 } |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
160 str[strbuflen - 1] = 0; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
161 } |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
162 |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
163 static int init_udp(struct qtsession* session) { |
0 | 164 char* envval; |
6
cf9b44b46be5
Use stderr for output instead of stdout, added debugging code to nacltai
root <root@Really.UFO-Net.nl>
parents:
4
diff
changeset
|
165 fprintf(stderr, "Initializing UDP socket...\n"); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
166 struct addrinfo *ai_local = NULL, *ai_remote = NULL; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
167 unsigned short af = 0; |
52
3115f8af98bb
Added support for libsodium, fixed bug in USE_PI compatibility mode, improved timestamp checking in nacltai protocol
Ivo Smits <Ivo@UCIS.nl>
parents:
49
diff
changeset
|
168 int ret; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
169 if ((envval = getconf("LOCAL_ADDRESS"))) { |
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
170 if ((ret = getaddrinfo(envval, NULL, NULL, &ai_local))) return errorexit2("getaddrinfo(LOCAL_ADDRESS)", gai_strerror(ret)); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
171 if (!ai_local) return errorexit("LOCAL_ADDRESS lookup failed"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
172 if (ai_local->ai_addrlen > sizeof(sockaddr_any)) return errorexit("Resolved LOCAL_ADDRESS is too big"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
173 af = ai_local->ai_family; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
174 } |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
175 if ((envval = getconf("REMOTE_ADDRESS"))) { |
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
176 if ((ret = getaddrinfo(envval, NULL, NULL, &ai_remote))) return errorexit2("getaddrinfo(REMOTE_ADDRESS)", gai_strerror(ret)); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
177 if (!ai_remote) return errorexit("REMOTE_ADDRESS lookup failed"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
178 if (ai_remote->ai_addrlen > sizeof(sockaddr_any)) return errorexit("Resolved REMOTE_ADDRESS is too big"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
179 if (af && af != ai_remote->ai_family) return errorexit("Address families do not match"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
180 af = ai_remote->ai_family; |
0 | 181 } |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
182 if (!af) af = AF_INET; |
57
4c083d81f5a8
Fixes for OpenBSD (thanks to Pi <pi-quicktun@mrtheplague.net> and SeekingFor)
Ivo Smits <Ivo@UCIS.nl>
parents:
55
diff
changeset
|
183 int sa_size = sizeof(sockaddr_any); |
4c083d81f5a8
Fixes for OpenBSD (thanks to Pi <pi-quicktun@mrtheplague.net> and SeekingFor)
Ivo Smits <Ivo@UCIS.nl>
parents:
55
diff
changeset
|
184 if (af == AF_INET) sa_size = sizeof(struct sockaddr_in); |
4c083d81f5a8
Fixes for OpenBSD (thanks to Pi <pi-quicktun@mrtheplague.net> and SeekingFor)
Ivo Smits <Ivo@UCIS.nl>
parents:
55
diff
changeset
|
185 else if (af == AF_INET6) sa_size = sizeof(struct sockaddr_in6); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
186 int sfd = socket(af, SOCK_DGRAM, IPPROTO_UDP); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
187 if (sfd < 0) return errorexitp("Could not create UDP socket"); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
188 sockaddr_any udpaddr; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
189 memset(&udpaddr, 0, sizeof(udpaddr)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
190 udpaddr.any.sa_family = af; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
191 if (ai_local) memcpy(&udpaddr, ai_local->ai_addr, ai_local->ai_addrlen); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
192 int port = 2998; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
193 if ((envval = getconf("LOCAL_PORT"))) port = atoi(envval); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
194 if (sockaddr_set_port(&udpaddr, port)) return -1; |
57
4c083d81f5a8
Fixes for OpenBSD (thanks to Pi <pi-quicktun@mrtheplague.net> and SeekingFor)
Ivo Smits <Ivo@UCIS.nl>
parents:
55
diff
changeset
|
195 if (bind(sfd, &udpaddr.any, sa_size)) return errorexitp("Could not bind socket"); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
196 memset(&udpaddr, 0, sizeof(udpaddr)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
197 udpaddr.any.sa_family = af; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
198 if (ai_remote) memcpy(&udpaddr, ai_remote->ai_addr, ai_remote->ai_addrlen); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
199 if (!ai_remote || sockaddr_is_zero_address(&udpaddr)) { |
0 | 200 session->remote_float = 1; |
201 } else { | |
12
e4b60d041491
Make sure that the session buffer is zero
Ivo Smits <Ivo@UCIS.nl>
parents:
9
diff
changeset
|
202 session->remote_float = getconf("REMOTE_FLOAT") ? 1 : 0; |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
203 port = 2998; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
204 if ((envval = getconf("REMOTE_PORT"))) port = atoi(envval); |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
205 if (sockaddr_set_port(&udpaddr, port)) return -1; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
206 session->remote_addr = udpaddr; |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
207 if (session->remote_float) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
208 session->remote_float = 2; |
2
b2c7c83a1dda
Accept 0.0.0.0 remote address for float mode
ivo <ivo@UFO-Net.nl>
parents:
0
diff
changeset
|
209 } else { |
57
4c083d81f5a8
Fixes for OpenBSD (thanks to Pi <pi-quicktun@mrtheplague.net> and SeekingFor)
Ivo Smits <Ivo@UCIS.nl>
parents:
55
diff
changeset
|
210 if (connect(sfd, &udpaddr.any, sa_size)) return errorexitp("Could not connect socket"); |
0 | 211 } |
212 } | |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
213 if (ai_local) freeaddrinfo(ai_local); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
214 if (ai_remote) freeaddrinfo(ai_remote); |
0 | 215 session->fd_socket = sfd; |
216 return sfd; | |
217 } | |
218 | |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
219 static int init_tuntap(struct qtsession* session) { |
0 | 220 char* envval; |
7 | 221 fprintf(stderr, "Initializing tun/tap device...\n"); |
0 | 222 int ttfd; //Tap device file descriptor |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
223 int tunmode = 0; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
224 if ((envval = getconf("TUN_MODE"))) tunmode = atoi(envval); |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
225 session->use_pi = 0; |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
226 if (tunmode && (envval = getconf("USE_PI"))) session->use_pi = atoi(envval); |
54
4ff8003d0973
Fix for OpenBSD tun/tap initialization
Ivo Smits <Ivo@UCIS.nl>
parents:
52
diff
changeset
|
227 #if defined(__linux__) |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
228 struct ifreq ifr; //required for tun/tap setup |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
229 memset(&ifr, 0, sizeof(ifr)); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
230 if ((ttfd = open("/dev/net/tun", O_RDWR)) < 0) return errorexitp("Could not open tun/tap device file"); |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
231 if ((envval = getconf("INTERFACE"))) strcpy(ifr.ifr_name, envval); |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
232 ifr.ifr_flags = tunmode ? IFF_TUN : IFF_TAP; |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
233 if (!session->use_pi) ifr.ifr_flags |= IFF_NO_PI; |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
234 if (ioctl(ttfd, TUNSETIFF, (void *)&ifr) < 0) return errorexitp("TUNSETIFF ioctl failed"); |
32
51c6d2fc712f
Fixes contributed by Daniel Dickinson <daniel@cshore.neomailbox.net>
Ivo Smits <Ivo@UCIS.nl>
parents:
30
diff
changeset
|
235 #elif defined SOLARIS |
13 | 236 int ip_fd = -1, if_fd = -1, ppa = 0; |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
237 if ((ttfd = open("/dev/tun", O_RDWR)) < 0) return errorexitp("Could not open tun device file"); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
238 if ((ip_fd = open("/dev/ip", O_RDWR, 0)) < 0) return errorexitp("Could not open /dev/ip"); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
239 if ((envval = getconf("INTERFACE"))) { |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
240 while (*envval && !isdigit((int)*envval)) envval++; |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
241 ppa = atoi(envval); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
242 } |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
243 if ((ppa = ioctl(ttfd, TUNNEWPPA, ppa)) < 0) return errorexitp("Could not assign new PPA"); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
244 if ((if_fd = open("/dev/tun", O_RDWR, 0)) < 0) return errorexitp("Could not open tun device file again"); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
245 if (ioctl(if_fd, I_PUSH, "ip") < 0) return errorexitp("Could not push IP module"); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
246 if (ioctl(if_fd, IF_UNITSEL, (char *)&ppa) < 0) return errorexitp("Could not set PPA"); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
247 if (ioctl(ip_fd, I_LINK, if_fd) < 0) return errorexitp("Could not link TUN device to IP"); |
7 | 248 #else |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
249 if (!(envval = getconf("INTERFACE"))) envval = "/dev/tun0"; |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
250 if ((ttfd = open(envval, O_RDWR)) < 0) return errorexitp("Could not open tun device file"); |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
251 if (tunmode) { |
33
422f3582bd38
Possible fix for tun mode on FreeBSD
Ivo Smits <Ivo@UCIS.nl>
parents:
32
diff
changeset
|
252 int i = IFF_POINTOPOINT | IFF_MULTICAST; |
34
b876afa5a72a
Fixed the build script and FreeBSD tun mode
Ivo Smits <Ivo@UCIS.nl>
parents:
33
diff
changeset
|
253 ioctl(ttfd, TUNSIFMODE, &i); |
54
4ff8003d0973
Fix for OpenBSD tun/tap initialization
Ivo Smits <Ivo@UCIS.nl>
parents:
52
diff
changeset
|
254 #if defined(__OpenBSD__) |
4ff8003d0973
Fix for OpenBSD tun/tap initialization
Ivo Smits <Ivo@UCIS.nl>
parents:
52
diff
changeset
|
255 if (!session->use_pi) session->use_pi = 2; |
4ff8003d0973
Fix for OpenBSD tun/tap initialization
Ivo Smits <Ivo@UCIS.nl>
parents:
52
diff
changeset
|
256 #else |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
257 i = session->use_pi ? 1 : 0; |
34
b876afa5a72a
Fixed the build script and FreeBSD tun mode
Ivo Smits <Ivo@UCIS.nl>
parents:
33
diff
changeset
|
258 ioctl(ttfd, TUNSIFHEAD, &i); |
54
4ff8003d0973
Fix for OpenBSD tun/tap initialization
Ivo Smits <Ivo@UCIS.nl>
parents:
52
diff
changeset
|
259 #endif |
33
422f3582bd38
Possible fix for tun mode on FreeBSD
Ivo Smits <Ivo@UCIS.nl>
parents:
32
diff
changeset
|
260 } |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
261 #endif |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
262 if ((envval = getconf("TUN_UP_SCRIPT"))) system(envval); |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
263 session->fd_dev = ttfd; |
0 | 264 return ttfd; |
265 } | |
266 | |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
267 void hex2bin(unsigned char* dest, const char* src, const int count) { |
0 | 268 int i; |
269 for (i = 0; i < count; i++) { | |
270 if (*src >= '0' && *src <= '9') *dest = *src - '0'; | |
271 else if (*src >= 'a' && * src <='f') *dest = *src - 'a' + 10; | |
272 else if (*src >= 'A' && * src <='F') *dest = *src - 'A' + 10; | |
273 src++; *dest = *dest << 4; | |
274 if (*src >= '0' && *src <= '9') *dest += *src - '0'; | |
275 else if (*src >= 'a' && *src <= 'f') *dest += *src - 'a' + 10; | |
276 else if (*src >= 'A' && *src <= 'F') *dest += *src - 'A' + 10; | |
277 src++; dest++; | |
278 } | |
279 } | |
280 | |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
281 static int drop_privileges() { |
36
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
282 char* envval; |
49 | 283 struct passwd *pw = NULL; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
284 if ((envval = getconf("SETUID"))) { |
49 | 285 pw = getpwnam(envval); |
286 if (!pw) return errorexitp("getpwnam"); | |
287 } | |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
288 if ((envval = getconf("CHROOT"))) { |
49 | 289 if (chroot(envval)) return errorexitp("chroot"); |
290 if (chdir("/")) return errorexitp("chdir /"); | |
291 } | |
292 if (pw) { | |
36
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
293 if (setgroups(0, NULL) == -1) return errorexitp("setgroups"); |
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
294 if (setgid(pw->pw_gid) == -1) return errorexitp("setgid"); |
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
295 if (setuid(pw->pw_uid) == -1) return errorexitp("setuid"); |
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
296 } |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
297 return 0; |
36
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
298 } |
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
299 |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
300 static void qtsendnetworkpacket(struct qtsession* session, char* msg, int len) { |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
301 if (session->remote_float == 0) { |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
302 len = write(session->fd_socket, msg, len); |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
303 } else if (session->remote_float == 2) { |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
304 len = sendto(session->fd_socket, msg, len, 0, (struct sockaddr*)&session->remote_addr, sizeof(sockaddr_any)); |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
305 } |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
306 } |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
307 |
0 | 308 int qtrun(struct qtproto* p) { |
22
38d495566d1c
Re-added some debugging messages to nacltai protocol code, enabled by the DEBUG environment variable
Ivo Smits <Ivo@UCIS.nl>
parents:
15
diff
changeset
|
309 if (getconf("DEBUG")) debug = 1; |
0 | 310 struct qtsession session; |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
311 session.poll_timeout = -1; |
0 | 312 session.protocol = *p; |
6
cf9b44b46be5
Use stderr for output instead of stdout, added debugging code to nacltai
root <root@Really.UFO-Net.nl>
parents:
4
diff
changeset
|
313 |
29
7c5e5be876bb
Small fix to error handling during initialization
Ivo Smits <Ivo@UCIS.nl>
parents:
28
diff
changeset
|
314 if (init_udp(&session) < 0) return -1; |
6
cf9b44b46be5
Use stderr for output instead of stdout, added debugging code to nacltai
root <root@Really.UFO-Net.nl>
parents:
4
diff
changeset
|
315 int sfd = session.fd_socket; |
cf9b44b46be5
Use stderr for output instead of stdout, added debugging code to nacltai
root <root@Really.UFO-Net.nl>
parents:
4
diff
changeset
|
316 |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
317 session.sendnetworkpacket = qtsendnetworkpacket; |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
318 |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
319 if (init_tuntap(&session) < 0) return -1; |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
320 int ttfd = session.fd_dev; |
0 | 321 |
322 char protocol_data[p->protocol_data_size]; | |
12
e4b60d041491
Make sure that the session buffer is zero
Ivo Smits <Ivo@UCIS.nl>
parents:
9
diff
changeset
|
323 memset(protocol_data, 0, p->protocol_data_size); |
57
4c083d81f5a8
Fixes for OpenBSD (thanks to Pi <pi-quicktun@mrtheplague.net> and SeekingFor)
Ivo Smits <Ivo@UCIS.nl>
parents:
55
diff
changeset
|
324 session.protocol_data = protocol_data; |
27
5ba185ca7102
Fixed error checking during initialization, restructured code a bit to make it even simpler
Ivo Smits <Ivo@UCIS.nl>
parents:
22
diff
changeset
|
325 if (p->init && p->init(&session) < 0) return -1; |
0 | 326 |
36
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
327 if (drop_privileges() < 0) return -1; |
1fe62a94c28a
Added option SETUID to drop privileges
Ivo Smits <Ivo@UCIS.nl>
parents:
35
diff
changeset
|
328 |
6
cf9b44b46be5
Use stderr for output instead of stdout, added debugging code to nacltai
root <root@Really.UFO-Net.nl>
parents:
4
diff
changeset
|
329 fprintf(stderr, "The tunnel is now operational!\n"); |
0 | 330 |
331 struct pollfd fds[2]; | |
332 fds[0].fd = ttfd; | |
333 fds[0].events = POLLIN; | |
334 fds[1].fd = sfd; | |
335 fds[1].events = POLLIN; | |
336 | |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
337 int pi_length = 0; |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
338 if (session.use_pi == 2) pi_length = 4; |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
339 |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
340 char buffer_raw_a[p->buffersize_raw + pi_length]; |
0 | 341 char buffer_enc_a[p->buffersize_enc]; |
342 char* buffer_raw = buffer_raw_a; | |
343 char* buffer_enc = buffer_enc_a; | |
344 | |
345 while (1) { | |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
346 int len = poll(fds, 2, session.poll_timeout); |
0 | 347 if (len < 0) return errorexitp("poll error"); |
348 else if (fds[0].revents & (POLLERR | POLLHUP | POLLNVAL)) return errorexit("poll error on tap device"); | |
349 else if (fds[1].revents & (POLLHUP | POLLNVAL)) return errorexit("poll error on udp socket"); | |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
350 if (len == 0 && p->idle) p->idle(&session); |
0 | 351 if (fds[0].revents & POLLIN) { |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
352 len = read(ttfd, buffer_raw + p->offset_raw, p->buffersize_raw + pi_length); |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
353 if (len < pi_length) errorexit("read packet smaller than header from tun device"); |
0 | 354 if (session.remote_float == 0 || session.remote_float == 2) { |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
355 len = p->encode(&session, buffer_raw + pi_length, buffer_enc, len - pi_length); |
0 | 356 if (len < 0) return len; |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
357 if (len == 0) continue; //encoding is not yet possible |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
358 qtsendnetworkpacket(&session, buffer_enc + p->offset_enc, len); |
0 | 359 } |
360 } | |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
361 if (fds[1].revents & POLLERR) { |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
362 int out; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
363 socklen_t slen = sizeof(out); |
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
364 getsockopt(sfd, SOL_SOCKET, SO_ERROR, &out, &slen); |
15
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
365 fprintf(stderr, "Received error %d on udp socket\n", out); |
1fa5b5fa49e1
Fixed a race condition caused by reception of ICMP errors
Ivo Smits <Ivo@UCIS.nl>
parents:
13
diff
changeset
|
366 } |
0 | 367 if (fds[1].revents & POLLIN) { |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
368 sockaddr_any recvaddr; |
0 | 369 socklen_t recvaddr_len = sizeof(recvaddr); |
370 if (session.remote_float == 0) { | |
371 len = read(sfd, buffer_enc + p->offset_enc, p->buffersize_enc); | |
372 } else { | |
373 len = recvfrom(sfd, buffer_enc + p->offset_enc, p->buffersize_enc, 0, (struct sockaddr*)&recvaddr, &recvaddr_len); | |
374 } | |
375 if (len < 0) { | |
59
2f4d333f7500
Fix SO_ERROR ouput type
Andreas Rottmann <a.rottmann@gmx.at>
parents:
57
diff
changeset
|
376 int out; |
55
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
377 socklen_t slen = sizeof(out); |
5685fad38195
Fixed compiler warnings from clang (including small bug in private key loading)
Ivo Smits <Ivo@UCIS.nl>
parents:
54
diff
changeset
|
378 getsockopt(sfd, SOL_SOCKET, SO_ERROR, &out, &slen); |
59
2f4d333f7500
Fix SO_ERROR ouput type
Andreas Rottmann <a.rottmann@gmx.at>
parents:
57
diff
changeset
|
379 fprintf(stderr, "Received end of file on udp socket (error %d)\n", out); |
0 | 380 } else { |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
381 len = p->decode(&session, buffer_enc, buffer_raw + pi_length, len); |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
382 if (len < 0) continue; |
47
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
383 if (session.remote_float != 0 && !sockaddr_equal(&session.remote_addr, &recvaddr)) { |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
384 char epname[INET6_ADDRSTRLEN + 1 + 2 + 1 + 5]; //addr%scope:port |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
385 sockaddr_to_string(&recvaddr, epname, sizeof(epname)); |
e896392f7e03
Added support for connecting over IPv6
Ivo Smits <Ivo@UCIS.nl>
parents:
41
diff
changeset
|
386 fprintf(stderr, "Remote endpoint has changed to %s\n", epname); |
0 | 387 session.remote_addr = recvaddr; |
388 session.remote_float = 2; | |
389 } | |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
390 if (len > 0 && session.use_pi == 2) { |
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
391 int ipver = (buffer_raw[p->offset_raw + pi_length] >> 4) & 0xf; |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
392 int pihdr = 0; |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
393 #if defined linux |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
394 if (ipver == 4) pihdr = 0x0000 | (0x0008 << 16); //little endian: flags and protocol are swapped |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
395 else if (ipver == 6) pihdr = 0x0000 | (0xdd86 << 16); |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
396 #else |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
397 if (ipver == 4) pihdr = htonl(AF_INET); |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
398 else if (ipver == 6) pihdr = htonl(AF_INET6); |
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
399 #endif |
52
3115f8af98bb
Added support for libsodium, fixed bug in USE_PI compatibility mode, improved timestamp checking in nacltai protocol
Ivo Smits <Ivo@UCIS.nl>
parents:
49
diff
changeset
|
400 *(int*)(buffer_raw + p->offset_raw) = pihdr; |
35
a1ec0d6b6f13
Added USE_PI=2 setting to automatically add/remove packet information header
Ivo Smits <Ivo@UCIS.nl>
parents:
34
diff
changeset
|
401 } |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
402 if (len > 0) write(ttfd, buffer_raw + p->offset_raw, len + pi_length); |
0 | 403 } |
404 } | |
405 } | |
406 return 0; | |
407 } | |
38
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
408 |
41
54d28a81ca99
Small updates in preparation for stateful protocols
Ivo Smits <Ivo@UCIS.nl>
parents:
39
diff
changeset
|
409 static char* getconfcmdargs(const char* name) { |
38
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
410 int i; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
411 for (i = 1; i < gargc - 2; i++) { |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
412 if (strcmp(gargv[i], "-c")) continue; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
413 if (strcmp(gargv[i + 1], name)) continue; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
414 return gargv[i + 2]; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
415 } |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
416 return NULL; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
417 } |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
418 |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
419 int qtprocessargs(int argc, char** argv) { |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
420 int i; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
421 for (i = 1; i < argc; i++) { |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
422 char* a = argv[i]; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
423 if (!strcmp(a, "-h") || !strcmp(a, "--help")) { |
61
66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
Ivo Smits <Ivo@UFO-Net.nl>
parents:
59
diff
changeset
|
424 printf("Please read the documentation at http://wiki.ucis.nl/QuickTun\n"); |
66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
Ivo Smits <Ivo@UFO-Net.nl>
parents:
59
diff
changeset
|
425 return 0; |
38
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
426 } else if (!strcmp(a, "-v") || !strcmp(a, "--version")) { |
61
66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
Ivo Smits <Ivo@UFO-Net.nl>
parents:
59
diff
changeset
|
427 printf("UCIS QuickTun "QT_VERSION"\n"); |
66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
Ivo Smits <Ivo@UFO-Net.nl>
parents:
59
diff
changeset
|
428 return 0; |
38
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
429 } else if (!strcmp(a, "-c")) { |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
430 gargc = argc; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
431 gargv = argv; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
432 getconf = getconfcmdargs; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
433 i += 2; |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
434 } else { |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
435 return errorexit("Unexpected command line argument"); |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
436 } |
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
437 } |
61
66d9d80215f0
Fixed -h and -v return status, fixed source file permissions (thanks github.com/rotty)
Ivo Smits <Ivo@UFO-Net.nl>
parents:
59
diff
changeset
|
438 return 1; |
38
d9f5caa13898
Added support for NetBSD, added command line parsing to provide configuration options
Ivo Smits <Ivo@UCIS.nl>
parents:
36
diff
changeset
|
439 } |
0 | 440 #endif |
30
6f0e6b7dc088
Fixed build script to support multiple abis on one machine, bugfix in code, minor improvements
Ivo Smits <Ivo@UCIS.nl>
parents:
29
diff
changeset
|
441 |