123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942 |
- /* Copyright 2001,2002 Roger Dingledine, Matej Pfajfar. */
- /* See LICENSE for licensing information */
- /* $Id$ */
- #include "or.h"
- /********* START PROTOTYPES **********/
- static void dumpstats(void); /* dump stats to stdout */
- static int init_descriptor(void);
- /********* START VARIABLES **********/
- extern char *conn_type_to_string[];
- extern char *conn_state_to_string[][_CONN_TYPE_MAX+1];
- or_options_t options; /* command-line and config-file options */
- int global_read_bucket; /* max number of bytes I can read this second */
- static connection_t *connection_array[MAXCONNECTIONS] =
- { NULL };
- static struct pollfd poll_array[MAXCONNECTIONS];
- static int nfds=0; /* number of connections currently active */
- #ifndef MS_WINDOWS /* do signal stuff only on unix */
- static int please_dumpstats=0; /* whether we should dump stats during the loop */
- static int please_reset =0; /* whether we just got a sighup */
- static int please_reap_children=0; /* whether we should waitpid for exited children*/
- #endif /* signal stuff */
- /* private keys */
- static crypto_pk_env_t *onionkey=NULL;
- static crypto_pk_env_t *linkkey=NULL;
- static crypto_pk_env_t *identitykey=NULL;
- routerinfo_t *my_routerinfo=NULL;
- /********* END VARIABLES ************/
- void set_onion_key(crypto_pk_env_t *k) {
- onionkey = k;
- }
- crypto_pk_env_t *get_onion_key(void) {
- assert(onionkey);
- return onionkey;
- }
- void set_link_key(crypto_pk_env_t *k)
- {
- linkkey = k;
- }
- crypto_pk_env_t *get_link_key(void)
- {
- assert(linkkey);
- return linkkey;
- }
- void set_identity_key(crypto_pk_env_t *k) {
- identitykey = k;
- }
- crypto_pk_env_t *get_identity_key(void) {
- assert(identitykey);
- return identitykey;
- }
- /****************************************************************************
- *
- * This section contains accessors and other methods on the connection_array
- * and poll_array variables (which are global within this file and unavailable
- * outside it).
- *
- ****************************************************************************/
- int connection_add(connection_t *conn) {
- if(nfds >= options.MaxConn-1) {
- log(LOG_WARNING,"connection_add(): failing because nfds is too high.");
- return -1;
- }
-
- conn->poll_index = nfds;
- connection_set_poll_socket(conn);
- connection_array[nfds] = conn;
- /* zero these out here, because otherwise we'll inherit values from the previously freed one */
- poll_array[nfds].events = 0;
- poll_array[nfds].revents = 0;
- nfds++;
- log(LOG_INFO,"connection_add(): new conn type %d, socket %d, nfds %d.",conn->type, conn->s, nfds);
- return 0;
- }
- void connection_set_poll_socket(connection_t *conn) {
- poll_array[conn->poll_index].fd = conn->s;
- }
- int connection_remove(connection_t *conn) {
- int current_index;
- assert(conn);
- assert(nfds>0);
- log(LOG_INFO,"connection_remove(): removing socket %d, nfds now %d",conn->s, nfds-1);
- circuit_about_to_close_connection(conn); /* if it's an edge conn, remove it from the list
- * of conn's on this circuit. If it's not on an edge,
- * flush and send destroys for all circuits on this conn
- */
- current_index = conn->poll_index;
- if(current_index == nfds-1) { /* this is the end */
- nfds--;
- return 0;
- }
- /* we replace this one with the one at the end, then free it */
- nfds--;
- poll_array[current_index].fd = poll_array[nfds].fd;
- poll_array[current_index].events = poll_array[nfds].events;
- poll_array[current_index].revents = poll_array[nfds].revents;
- connection_array[current_index] = connection_array[nfds];
- connection_array[current_index]->poll_index = current_index;
- return 0;
- }
- connection_t *connection_twin_get_by_addr_port(uint32_t addr, uint16_t port) {
- /* Find a connection to the router described by addr and port,
- * or alternately any router which knows its key.
- * This connection *must* be in 'open' state.
- * If not, return NULL.
- */
- int i;
- connection_t *conn;
- routerinfo_t *router;
- /* first check if it's there exactly */
- conn = connection_exact_get_by_addr_port(addr,port);
- if(conn && connection_state_is_open(conn)) {
- log(LOG_INFO,"connection_twin_get_by_addr_port(): Found exact match.");
- return conn;
- }
- /* now check if any of the other open connections are a twin for this one */
- router = router_get_by_addr_port(addr,port);
- if(!router)
- return NULL;
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- assert(conn);
- if(connection_state_is_open(conn) &&
- !conn->marked_for_close &&
- !crypto_pk_cmp_keys(conn->onion_pkey, router->onion_pkey)) {
- log(LOG_INFO,"connection_twin_get_by_addr_port(): Found twin (%s).",conn->address);
- return conn;
- }
- }
- /* guess not */
- return NULL;
- }
- connection_t *connection_exact_get_by_addr_port(uint32_t addr, uint16_t port) {
- int i;
- connection_t *conn;
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- if(conn->addr == addr && conn->port == port && !conn->marked_for_close)
- return conn;
- }
- return NULL;
- }
- connection_t *connection_get_by_type(int type) {
- int i;
- connection_t *conn;
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- if(conn->type == type && !conn->marked_for_close)
- return conn;
- }
- return NULL;
- }
- connection_t *connection_get_by_type_state(int type, int state) {
- int i;
- connection_t *conn;
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- if(conn->type == type && conn->state == state && !conn->marked_for_close)
- return conn;
- }
- return NULL;
- }
- connection_t *connection_get_by_type_state_lastwritten(int type, int state) {
- int i;
- connection_t *conn, *best=NULL;
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- if(conn->type == type && conn->state == state && !conn->marked_for_close)
- if(!best || conn->timestamp_lastwritten < best->timestamp_lastwritten)
- best = conn;
- }
- return best;
- }
- void connection_watch_events(connection_t *conn, short events) {
- assert(conn && conn->poll_index < nfds);
- poll_array[conn->poll_index].events = events;
- }
- int connection_is_reading(connection_t *conn) {
- return poll_array[conn->poll_index].events & POLLIN;
- }
- void connection_stop_reading(connection_t *conn) {
- assert(conn && conn->poll_index < nfds);
- log(LOG_DEBUG,"connection_stop_reading() called.");
- if(poll_array[conn->poll_index].events & POLLIN)
- poll_array[conn->poll_index].events -= POLLIN;
- }
- void connection_start_reading(connection_t *conn) {
- assert(conn && conn->poll_index < nfds);
- poll_array[conn->poll_index].events |= POLLIN;
- }
- void connection_stop_writing(connection_t *conn) {
- assert(conn && conn->poll_index < nfds);
- if(poll_array[conn->poll_index].events & POLLOUT)
- poll_array[conn->poll_index].events -= POLLOUT;
- }
- void connection_start_writing(connection_t *conn) {
- assert(conn && conn->poll_index < nfds);
- poll_array[conn->poll_index].events |= POLLOUT;
- }
- static void conn_read(int i) {
- connection_t *conn;
- if(!(poll_array[i].revents & (POLLIN|POLLHUP|POLLERR)))
- return; /* this conn doesn't want to read */
- /* see http://www.greenend.org.uk/rjk/2001/06/poll.html for
- * discussion of POLLIN vs POLLHUP */
- conn = connection_array[i];
- log_fn(LOG_DEBUG,"socket %d wants to read.",conn->s);
-
- assert_connection_ok(conn, time(NULL));
- if(
- /* XXX does POLLHUP also mean it's definitely broken? */
- #ifdef MS_WINDOWS
- (poll_array[i].revents & POLLERR) ||
- #endif
- connection_handle_read(conn) < 0)
- {
- /* this connection is broken. remove it */
- log_fn(LOG_INFO,"%s connection broken, removing.", conn_type_to_string[conn->type]);
- connection_remove(conn);
- connection_free(conn);
- if(i<nfds) { /* we just replaced the one at i with a new one. process it too. */
- conn_read(i);
- }
- } else assert_connection_ok(conn, time(NULL));
- }
- static void conn_write(int i) {
- connection_t *conn;
- if(!(poll_array[i].revents & POLLOUT))
- return; /* this conn doesn't want to write */
- conn = connection_array[i];
- log_fn(LOG_DEBUG,"socket %d wants to write.",conn->s);
- assert_connection_ok(conn, time(NULL));
- if(connection_handle_write(conn) < 0) { /* this connection is broken. remove it. */
- log_fn(LOG_INFO,"%s connection broken, removing.", conn_type_to_string[conn->type]);
- connection_remove(conn);
- connection_free(conn);
- if(i<nfds) { /* we just replaced the one at i with a new one. process it too. */
- conn_write(i);
- }
- } else assert_connection_ok(conn, time(NULL));
- }
- static void check_conn_marked(int i) {
- connection_t *conn;
- conn = connection_array[i];
- assert_connection_ok(conn, time(NULL));
- if(conn->marked_for_close) {
- log_fn(LOG_INFO,"Cleaning up connection (fd %d).",conn->s);
- if(conn->s >= 0) { /* might be an incomplete edge connection */
- /* FIXME there's got to be a better way to check for this -- and make other checks? */
- if(connection_speaks_cells(conn)) {
- if(conn->state == OR_CONN_STATE_OPEN)
- flush_buf_tls(conn->tls, conn->outbuf, &conn->outbuf_flushlen);
- } else {
- flush_buf(conn->s, conn->outbuf, &conn->outbuf_flushlen);
- }
- if(connection_wants_to_flush(conn)) /* not done flushing */
- log_fn(LOG_WARNING,"Conn (socket %d) still wants to flush. Losing %d bytes!",conn->s, (int)buf_datalen(conn->inbuf));
- }
- connection_remove(conn);
- connection_free(conn);
- if(i<nfds) { /* we just replaced the one at i with a new one.
- process it too. */
- check_conn_marked(i);
- }
- }
- }
- static int prepare_for_poll(void) {
- int i;
- connection_t *conn;
- struct timeval now; //soonest;
- static long current_second = 0; /* from previous calls to gettimeofday */
- static long time_to_fetch_directory = 0;
- static long time_to_new_circuit = 0;
- // int ms_until_conn;
- cell_t cell;
- circuit_t *circ;
- my_gettimeofday(&now);
- if(now.tv_sec > current_second) { /* the second has rolled over. check more stuff. */
- if(!options.DirPort) {
- if(time_to_fetch_directory < now.tv_sec) {
- /* it's time to fetch a new directory */
- /* NOTE directory servers do not currently fetch directories.
- * Hope this doesn't bite us later.
- */
- directory_initiate_command(router_pick_directory_server(),
- DIR_CONN_STATE_CONNECTING_FETCH);
- time_to_fetch_directory = now.tv_sec + options.DirFetchPeriod;
- }
- }
- if(options.APPort && time_to_new_circuit < now.tv_sec) {
- circuit_expire_unused_circuits();
- circuit_launch_new(-1); /* tell it to forget about previous failures */
- circ = circuit_get_newest_open();
- if(!circ || circ->dirty) {
- log_fn(LOG_INFO,"Youngest circuit %s; launching replacement.", circ ? "dirty" : "missing");
- circuit_launch_new(0); /* make an onion and lay the circuit */
- }
- time_to_new_circuit = now.tv_sec + options.NewCircuitPeriod;
- }
- if(global_read_bucket < 9*options.TotalBandwidth) {
- global_read_bucket += options.TotalBandwidth;
- log_fn(LOG_DEBUG,"global_read_bucket now %d.", global_read_bucket);
- }
- /* do housekeeping for each connection */
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- if(connection_receiver_bucket_should_increase(conn)) {
- conn->receiver_bucket += conn->bandwidth;
- // log_fn(LOG_DEBUG,"Receiver bucket %d now %d.", i, conn->receiver_bucket);
- }
- if(conn->wants_to_read == 1 /* it's marked to turn reading back on now */
- && global_read_bucket > 0 /* and we're allowed to read */
- && (!connection_speaks_cells(conn) || conn->receiver_bucket > 0)) {
- /* and either a non-cell conn or a cell conn with non-empty bucket */
- conn->wants_to_read = 0;
- connection_start_reading(conn);
- if(conn->wants_to_write == 1) {
- conn->wants_to_write = 0;
- connection_start_writing(conn);
- }
- }
- /* check connections to see whether we should send a keepalive, expire, or wait */
- if(!connection_speaks_cells(conn))
- continue; /* this conn type doesn't send cells */
- if(now.tv_sec >= conn->timestamp_lastwritten + options.KeepalivePeriod) {
- if((!options.OnionRouter && !circuit_get_by_conn(conn)) ||
- (!connection_state_is_open(conn))) {
- /* we're an onion proxy, with no circuits; or our handshake has expired. kill it. */
- log_fn(LOG_INFO,"Expiring connection to %d (%s:%d).",
- i,conn->address, conn->port);
- conn->marked_for_close = 1;
- } else {
- /* either a full router, or we've got a circuit. send a padding cell. */
- // log_fn(LOG_DEBUG,"Sending keepalive to (%s:%d)",
- // conn->address, conn->port);
- memset(&cell,0,sizeof(cell_t));
- cell.command = CELL_PADDING;
- if(connection_write_cell_to_buf(&cell, conn) < 0)
- conn->marked_for_close = 1;
- }
- }
- }
- /* blow away any connections that need to die. can't do this later
- * because we might open up a circuit and not realize it we're about to cull it.
- */
- for(i=0;i<nfds;i++)
- check_conn_marked(i);
- current_second = now.tv_sec; /* remember which second it is, for next time */
- }
- return (1000 - (now.tv_usec / 1000)); /* how many milliseconds til the next second? */
- }
- static crypto_pk_env_t *init_key_from_file(const char *fname)
- {
- crypto_pk_env_t *prkey = NULL;
- int fd = -1;
- FILE *file = NULL;
- if (!(prkey = crypto_new_pk_env(CRYPTO_PK_RSA))) {
- log(LOG_ERR, "Error creating crypto environment.");
- goto error;
- }
- switch(file_status(fname)) {
- case FN_DIR:
- case FN_ERROR:
- log(LOG_ERR, "Can't read key from %s", fname);
- goto error;
- case FN_NOENT:
- log(LOG_INFO, "No key found in %s; generating fresh key.", fname);
- if (crypto_pk_generate_key(prkey)) {
- log(LOG_ERR, "Error generating key: %s", crypto_perror());
- goto error;
- }
- if (crypto_pk_check_key(prkey) <= 0) {
- log(LOG_ERR, "Generated key seems invalid");
- goto error;
- }
- log(LOG_INFO, "Generated key seems valid");
- if (crypto_pk_write_private_key_to_filename(prkey, fname)) {
- log(LOG_ERR, "Couldn't write generated key to %s.", fname);
- goto error;
- }
- return prkey;
- case FN_FILE:
- if (crypto_pk_read_private_key_from_filename(prkey, fname)) {
- log(LOG_ERR, "Error loading private key.");
- goto error;
- }
- return prkey;
- default:
- assert(0);
- }
- error:
- if (prkey)
- crypto_free_pk_env(prkey);
- if (fd >= 0 && !file)
- close(fd);
- if (file)
- fclose(file);
- return NULL;
- }
- static int init_keys(void)
- {
- char keydir[512];
- char fingerprint[FINGERPRINT_LEN+MAX_NICKNAME_LEN+3];
- char *cp;
- crypto_pk_env_t *prkey;
- /* OP's don't need keys. Just initialize the TLS context.*/
- if (!options.OnionRouter && !options.DirPort) {
- if (tor_tls_context_new(NULL, 0, NULL)<0) {
- log_fn(LOG_ERR, "Error creating TLS context for OP.");
- return -1;
- }
- return 0;
- }
- assert(options.DataDirectory);
- if (strlen(options.DataDirectory) > (512-128)) {
- log_fn(LOG_ERR, "DataDirectory is too long.");
- return -1;
- }
- strcpy(keydir, options.DataDirectory);
- if (check_private_dir(keydir, 1)) {
- return -1;
- }
- strcat(keydir, "/keys");
- if (check_private_dir(keydir, 1)) {
- return -1;
- }
- cp = keydir + strlen(keydir); /* End of string. */
- assert(!*cp);
-
- /* 1. Read identity key. Make it if none is found. */
- strcat(keydir, "/identity.key");
- prkey = init_key_from_file(keydir);
- if (!prkey) return -1;
- set_identity_key(prkey);
- /* 2. Read onion key. Make it if none is found. */
- *cp = '\0';
- strcat(keydir, "/onion.key");
- prkey = init_key_from_file(keydir);
- if (!prkey) return -1;
- set_onion_key(prkey);
-
- /* 3. Initialize link key and TLS context. */
- *cp = '\0';
- strcat(keydir, "/link.key");
- prkey = init_key_from_file(keydir);
- if (!prkey) return -1;
- set_link_key(prkey);
- if (tor_tls_context_new(prkey, 1, options.Nickname) < 0) {
- log_fn(LOG_ERR, "Error initializing TLS context");
- return -1;
- }
- /* 4. Dump router descriptor to 'router.desc' */
- /* Must be called after keys are initialized. */
- if (init_descriptor()<0) {
- log_fn(LOG_ERR, "Error initializing descriptor.");
- return -1;
- }
- strcpy(keydir, options.DataDirectory);
- strcat(keydir, "/router.desc");
- if (write_str_to_file(keydir, router_get_my_descriptor())) {
- return -1;
- }
- /* 5. Dump fingerprint to 'fingerprint' */
- strcpy(keydir, options.DataDirectory);
- strcat(keydir, "/fingerprint");
- assert(strlen(options.Nickname) <= MAX_NICKNAME_LEN);
- strcpy(fingerprint, options.Nickname);
- strcat(fingerprint, " ");
- if (crypto_pk_get_fingerprint(get_identity_key(),
- fingerprint+strlen(fingerprint))<0) {
- log_fn(LOG_ERR, "Error computing fingerprint");
- return -1;
- }
- strcat(fingerprint, "\n");
- if (write_str_to_file(keydir, fingerprint))
- return -1;
- return 0;
- }
- static int do_main_loop(void) {
- int i;
- int timeout;
- int poll_result;
-
- /* load the routers file */
- if(router_get_list_from_file(options.RouterFile) < 0) {
- log_fn(LOG_ERR,"Error loading router list.");
- return -1;
- }
- /* load the private keys, if we're supposed to have them, and set up the
- * TLS context. */
- if (init_keys() < 0) {
- log_fn(LOG_ERR,"Error initializing keys; exiting");
- return -1;
- }
- if(options.OnionRouter) {
- cpu_init(); /* launch cpuworkers. Need to do this *after* we've read the onion key. */
- router_upload_desc_to_dirservers(); /* upload our descriptor to all dirservers */
- }
- /* start up the necessary connections based on which ports are
- * non-zero. This is where we try to connect to all the other ORs,
- * and start the listeners.
- */
- retry_all_connections((uint16_t) options.ORPort,
- (uint16_t) options.APPort,
- (uint16_t) options.DirPort);
- for(;;) {
- #ifndef MS_WIN32 /* do signal stuff only on unix */
- if(please_dumpstats) {
- dumpstats();
- please_dumpstats = 0;
- }
- if(please_reset) {
- /* fetch a new directory */
- if(options.DirPort) {
- if(router_get_list_from_file(options.RouterFile) < 0) {
- log(LOG_WARNING,"Error reloading router list. Continuing with old list.");
- }
- } else {
- directory_initiate_command(router_pick_directory_server(), DIR_CONN_STATE_CONNECTING_FETCH);
- }
- /* close and reopen the log files */
- reset_logs();
- please_reset = 0;
- }
- if(please_reap_children) {
- while(waitpid(-1,NULL,WNOHANG)) ; /* keep reaping until no more zombies */
- please_reap_children = 0;
- }
- #endif /* signal stuff */
- timeout = prepare_for_poll();
- /* poll until we have an event, or the second ends */
- poll_result = poll(poll_array, nfds, timeout);
- #if 0 /* let catch() handle things like ^c, and otherwise don't worry about it */
- if(poll_result < 0) {
- log(LOG_ERR,"do_main_loop(): poll failed.");
- if(errno != EINTR) /* let the program survive things like ^z */
- return -1;
- }
- #endif
- if(poll_result > 0) { /* we have at least one connection to deal with */
- /* do all the reads and errors first, so we can detect closed sockets */
- for(i=0;i<nfds;i++)
- conn_read(i); /* this also blows away broken connections */
- /* then do the writes */
- for(i=0;i<nfds;i++)
- conn_write(i);
- /* any of the conns need to be closed now? */
- for(i=0;i<nfds;i++)
- check_conn_marked(i);
- }
- /* refilling buckets and sending cells happens at the beginning of the
- * next iteration of the loop, inside prepare_for_poll()
- */
- }
- }
- static void catch(int the_signal) {
- #ifndef MS_WIN32 /* do signal stuff only on unix */
- switch(the_signal) {
- // case SIGABRT:
- case SIGTERM:
- case SIGINT:
- log(LOG_ERR,"Catching signal %d, exiting cleanly.", the_signal);
- exit(0);
- case SIGHUP:
- please_reset = 1;
- break;
- case SIGUSR1:
- please_dumpstats = 1;
- break;
- case SIGCHLD:
- please_reap_children = 1;
- break;
- default:
- log(LOG_WARNING,"Caught signal %d that we can't handle??", the_signal);
- }
- #endif /* signal stuff */
- }
- static void dumpstats(void) { /* dump stats to stdout */
- int i;
- connection_t *conn;
- struct timeval now;
- printf("Dumping stats:\n");
- my_gettimeofday(&now);
- for(i=0;i<nfds;i++) {
- conn = connection_array[i];
- printf("Conn %d (socket %d) type %d (%s), state %d (%s), created %ld secs ago\n",
- i, conn->s, conn->type, conn_type_to_string[conn->type],
- conn->state, conn_state_to_string[conn->type][conn->state], now.tv_sec - conn->timestamp_created);
- if(!connection_is_listener(conn)) {
- printf("Conn %d is to '%s:%d'.\n",i,conn->address, conn->port);
- printf("Conn %d: %d bytes waiting on inbuf (last read %ld secs ago)\n",i,
- (int)buf_datalen(conn->inbuf),
- now.tv_sec - conn->timestamp_lastread);
- printf("Conn %d: %d bytes waiting on outbuf (last written %ld secs ago)\n",i,(int)buf_datalen(conn->outbuf),
- now.tv_sec - conn->timestamp_lastwritten);
- }
- circuit_dump_by_conn(conn); /* dump info about all the circuits using this conn */
- printf("\n");
- }
- }
- int dump_router_to_string(char *s, int maxlen, routerinfo_t *router,
- crypto_pk_env_t *ident_key) {
- char *onion_pkey;
- char *link_pkey;
- char *identity_pkey;
- char digest[20];
- char signature[128];
- char published[32];
- int onion_pkeylen, link_pkeylen, identity_pkeylen;
- int written;
- int result=0;
- struct exit_policy_t *tmpe;
- if(crypto_pk_write_public_key_to_string(router->onion_pkey,
- &onion_pkey,&onion_pkeylen)<0) {
- log_fn(LOG_WARNING,"write onion_pkey to string failed!");
- return -1;
- }
- if(crypto_pk_write_public_key_to_string(router->identity_pkey,
- &identity_pkey,&identity_pkeylen)<0) {
- log_fn(LOG_WARNING,"write identity_pkey to string failed!");
- return -1;
- }
- if(crypto_pk_write_public_key_to_string(router->link_pkey,
- &link_pkey,&link_pkeylen)<0) {
- log_fn(LOG_WARNING,"write link_pkey to string failed!");
- return -1;
- }
- strftime(published, 32, "%Y-%m-%d %H:%M:%S", gmtime(&router->published_on));
-
- result = snprintf(s, maxlen,
- "router %s %s %d %d %d %d\n"
- "published %s\n"
- "onion-key\n%s"
- "link-key\n%s"
- "signing-key\n%s",
- router->nickname,
- router->address,
- router->or_port,
- router->ap_port,
- router->dir_port,
- router->bandwidth,
- published,
- onion_pkey, link_pkey, identity_pkey);
- free(onion_pkey);
- free(link_pkey);
- free(identity_pkey);
- if(result < 0 || result >= maxlen) {
- /* apparently different glibcs do different things on snprintf error.. so check both */
- return -1;
- }
- written = result;
- for(tmpe=router->exit_policy; tmpe; tmpe=tmpe->next) {
- result = snprintf(s+written, maxlen-written, "%s %s:%s\n",
- tmpe->policy_type == EXIT_POLICY_ACCEPT ? "accept" : "reject",
- tmpe->address, tmpe->port);
- if(result < 0 || result+written > maxlen) {
- /* apparently different glibcs do different things on snprintf error.. so check both */
- return -1;
- }
- written += result;
- }
- if (written > maxlen-256) /* Not enough room for signature. */
- return -1;
- strcat(s+written, "router-signature\n");
- written += strlen(s+written);
- s[written] = '\0';
- if (router_get_router_hash(s, digest) < 0)
- return -1;
- if (crypto_pk_private_sign(ident_key, digest, 20, signature) < 0) {
- log_fn(LOG_WARNING, "Error signing digest");
- return -1;
- }
- strcat(s+written, "-----BEGIN SIGNATURE-----\n");
- written += strlen(s+written);
- if (base64_encode(s+written, maxlen-written, signature, 128) < 0) {
- log_fn(LOG_WARNING, "Couldn't base64-encode signature");
- /* XXX Nick: do we really mean to fall through here? */
- }
- written += strlen(s+written);
- strcat(s+written, "-----END SIGNATURE-----\n");
- written += strlen(s+written);
-
- if (written > maxlen-2)
- return -1;
- /* include a last '\n' */
- s[written] = '\n';
- s[written+1] = 0;
- return written+1;
- }
- int
- list_running_servers(char **nicknames_out)
- {
- char *nickname_lst[MAX_ROUTERS_IN_DIR];
- connection_t *conn;
- char *cp;
- int n = 0, i;
- int length;
- *nicknames_out = NULL;
- if (my_routerinfo)
- nickname_lst[n++] = my_routerinfo->nickname;
- for (i = 0; i<nfds; ++i) {
- conn = connection_array[i];
- if (conn->type != CONN_TYPE_OR || conn->state != OR_CONN_STATE_OPEN)
- continue; /* only list successfully handshaked OR's. */
- nickname_lst[n++] = conn->nickname;
- }
- length = n + 1; /* spaces + EOS + 1. */
- for (i = 0; i<n; ++i) {
- length += strlen(nickname_lst[i]);
- }
- *nicknames_out = tor_malloc(length);
- cp = *nicknames_out;
- for (i = 0; i<n; ++i) {
- if (i)
- strcat(cp, " ");
- strcat(cp, nickname_lst[i]);
- while (*cp)
- ++cp;
- }
- return 0;
- }
- static char descriptor[8192];
- /* XXX should this replace my_routerinfo? */
- static routerinfo_t *desc_routerinfo;
- const char *router_get_my_descriptor(void) {
- log_fn(LOG_DEBUG,"my desc is '%s'",descriptor);
- return descriptor;
- }
- static int init_descriptor(void) {
- routerinfo_t *ri;
- char localhostname[256];
- char *address = options.Address;
- if(!address) { /* if not specified in config, we find a default */
- if(gethostname(localhostname,sizeof(localhostname)) < 0) {
- log_fn(LOG_WARNING,"Error obtaining local hostname");
- return -1;
- }
- address = localhostname;
- }
- ri = tor_malloc(sizeof(routerinfo_t));
- ri->address = strdup(address);
- ri->nickname = strdup(options.Nickname);
- /* No need to set addr. */
- ri->or_port = options.ORPort;
- ri->ap_port = options.APPort;
- ri->dir_port = options.DirPort;
- ri->published_on = time(NULL);
- ri->onion_pkey = crypto_pk_dup_key(get_onion_key());
- ri->link_pkey = crypto_pk_dup_key(get_link_key());
- ri->identity_pkey = crypto_pk_dup_key(get_identity_key());
- ri->bandwidth = options.TotalBandwidth;
- ri->exit_policy = NULL; /* XXX implement this. */
- if (desc_routerinfo)
- routerinfo_free(desc_routerinfo);
- desc_routerinfo = ri;
- if (dump_router_to_string(descriptor, 8192, ri, get_identity_key())<0) {
- log_fn(LOG_WARNING, "Couldn't dump router to string.");
- return -1;
- }
- return 0;
- }
- void daemonize(void) {
- #ifndef MS_WINDOWS
- /* Fork; parent exits. */
- if (fork())
- exit(0);
- /* Create new session; make sure we never get a terminal */
- setsid();
- if (fork())
- exit(0);
- chdir("/");
- umask(000);
- fclose(stdin);
- fclose(stdout); /* XXX Nick: this closes our log, right? is it safe to leave this open? */
- fclose(stderr);
- #endif
- }
- int tor_main(int argc, char *argv[]) {
- int retval = 0;
- if(getconfig(argc,argv,&options))
- exit(1);
- log_set_severity(options.loglevel); /* assign logging severity level from options */
- global_read_bucket = options.TotalBandwidth; /* start it at 1 second of traffic */
- if(options.Daemon)
- daemonize();
- if(options.OnionRouter) { /* only spawn dns handlers if we're a router */
- dns_init(); /* initialize the dns resolve tree, and spawn workers */
- }
- #ifndef MS_WINDOWS /* do signal stuff only on unix */
- signal (SIGINT, catch); /* catch kills so we can exit cleanly */
- signal (SIGTERM, catch);
- signal (SIGUSR1, catch); /* to dump stats to stdout */
- signal (SIGHUP, catch); /* to reload directory */
- signal (SIGCHLD, catch); /* for exiting dns/cpu workers */
- #endif /* signal stuff */
- crypto_global_init();
- crypto_seed_rng();
- retval = do_main_loop();
- crypto_global_cleanup();
-
- return retval;
- }
- /*
- Local Variables:
- mode:c
- indent-tabs-mode:nil
- c-basic-offset:2
- End:
- */
|