1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297 |
- /* Copyright 2001,2002 Roger Dingledine, Matej Pfajfar. */
- /* See LICENSE for licensing information */
- /* $Id$ */
- #define OR_PUBLICKEY_BEGIN_TAG "-----BEGIN RSA PUBLIC KEY-----\n"
- #define OR_PUBLICKEY_END_TAG "-----END RSA PUBLIC KEY-----\n"
- #define OR_SIGNATURE_BEGIN_TAG "-----BEGIN SIGNATURE-----\n"
- #define OR_SIGNATURE_END_TAG "-----END SIGNATURE-----\n"
- #define _GNU_SOURCE
- /* XXX this is required on rh7 to make strptime not complain. how bad
- * is this for portability?
- */
- #include "or.h"
- /****************************************************************************/
- static directory_t *directory = NULL; /* router array */
- static routerinfo_t *desc_routerinfo = NULL; /* my descriptor */
- static char descriptor[8192]; /* string representation of my descriptor */
- extern or_options_t options; /* command-line and config-file options */
- /****************************************************************************/
- struct directory_token;
- typedef struct directory_token directory_token_t;
- /* static function prototypes */
- void routerlist_free(routerinfo_t *list);
- static char *eat_whitespace(char *s);
- static char *eat_whitespace_no_nl(char *s);
- static char *find_whitespace(char *s);
- static void router_free_exit_policy(routerinfo_t *router);
- static int router_add_exit_policy_from_string(routerinfo_t *router, char *s);
- static int router_add_exit_policy(routerinfo_t *router,
- directory_token_t *tok);
- static int router_resolve_directory(directory_t *dir);
- /****************************************************************************/
- void router_retry_connections(void) {
- int i;
- routerinfo_t *router;
- for (i=0;i<directory->n_routers;i++) {
- router = directory->routers[i];
- if(!connection_exact_get_by_addr_port(router->addr,router->or_port)) { /* not in the list */
- log_fn(LOG_DEBUG,"connecting to OR %s:%u.",router->address,router->or_port);
- connection_or_connect(router);
- }
- }
- }
- routerinfo_t *router_pick_directory_server(void) {
- /* pick the first running router with a positive dir_port */
- int i;
- routerinfo_t *router;
-
- if(!directory)
- return NULL;
- for(i=0;i<directory->n_routers;i++) {
- router = directory->routers[i];
- if(router->dir_port > 0 && router->is_running)
- return router;
- }
- return NULL;
- }
- void router_upload_desc_to_dirservers(void) {
- int i;
- routerinfo_t *router;
- if(!directory)
- return;
- if (!router_get_my_descriptor()) {
- log_fn(LOG_WARNING, "No descriptor; skipping upload");
- return;
- }
- for(i=0;i<directory->n_routers;i++) {
- router = directory->routers[i];
- if(router->dir_port > 0)
- directory_initiate_command(router, DIR_CONN_STATE_CONNECTING_UPLOAD);
- }
- }
- routerinfo_t *router_get_by_addr_port(uint32_t addr, uint16_t port) {
- int i;
- routerinfo_t *router;
- assert(directory);
- for(i=0;i<directory->n_routers;i++) {
- router = directory->routers[i];
- if ((router->addr == addr) && (router->or_port == port))
- return router;
- }
- return NULL;
- }
- routerinfo_t *router_get_by_link_pk(crypto_pk_env_t *pk)
- {
- int i;
- routerinfo_t *router;
- assert(directory);
- for(i=0;i<directory->n_routers;i++) {
- router = directory->routers[i];
- if (0 == crypto_pk_cmp_keys(router->link_pkey, pk))
- return router;
- }
- return NULL;
- }
- routerinfo_t *router_get_by_nickname(char *nickname)
- {
- int i;
- routerinfo_t *router;
- assert(directory);
- for(i=0;i<directory->n_routers;i++) {
- router = directory->routers[i];
- if (0 == strcmp(router->nickname, nickname))
- return router;
- }
- return NULL;
- }
- void router_get_directory(directory_t **pdirectory) {
- *pdirectory = directory;
- }
- /* delete a list of routers from memory */
- void routerinfo_free(routerinfo_t *router)
- {
- struct exit_policy_t *e = NULL, *etmp = NULL;
-
- if (!router)
- return;
- if (router->address)
- free(router->address);
- if (router->onion_pkey)
- crypto_free_pk_env(router->onion_pkey);
- if (router->link_pkey)
- crypto_free_pk_env(router->link_pkey);
- if (router->identity_pkey)
- crypto_free_pk_env(router->identity_pkey);
- e = router->exit_policy;
- while (e) {
- etmp = e->next;
- if (e->string) free(e->string);
- if (e->address) free(e->address);
- if (e->port) free(e->port);
- free(e);
- e = etmp;
- }
- free(router);
- }
- void directory_free(directory_t *directory)
- {
- int i;
- for (i = 0; i < directory->n_routers; ++i)
- routerinfo_free(directory->routers[i]);
- if (directory->routers)
- free(directory->routers);
- if(directory->software_versions)
- free(directory->software_versions);
- free(directory);
- }
- void router_mark_as_down(char *nickname) {
- routerinfo_t *router = router_get_by_nickname(nickname);
- if(!router) /* we don't seem to know about him in the first place */
- return;
- log_fn(LOG_DEBUG,"Marking %s as down.",router->nickname);
- router->is_running = 0;
- }
- /* load the router list */
- int router_get_list_from_file(char *routerfile)
- {
- char *string;
- string = read_file_to_str(routerfile);
- if(!string) {
- log_fn(LOG_WARNING,"Failed to load routerfile %s.",routerfile);
- return -1;
- }
-
- if(router_get_list_from_string(string) < 0) {
- log_fn(LOG_WARNING,"The routerfile itself was corrupt.");
- free(string);
- return -1;
- }
- free(string);
- return 0;
- }
- typedef enum {
- K_ACCEPT,
- K_DIRECTORY_SIGNATURE,
- K_RECOMMENDED_SOFTWARE,
- K_REJECT,
- K_ROUTER,
- K_SIGNED_DIRECTORY,
- K_SIGNING_KEY,
- K_ONION_KEY,
- K_LINK_KEY,
- K_ROUTER_SIGNATURE,
- K_PUBLISHED,
- K_RUNNING_ROUTERS,
- K_PLATFORM,
- _SIGNATURE,
- _PUBLIC_KEY,
- _ERR,
- _EOF
- } directory_keyword;
- struct token_table_ent { char *t; int v; };
- static struct token_table_ent token_table[] = {
- { "accept", K_ACCEPT },
- { "directory-signature", K_DIRECTORY_SIGNATURE },
- { "reject", K_REJECT },
- { "router", K_ROUTER },
- { "recommended-software", K_RECOMMENDED_SOFTWARE },
- { "signed-directory", K_SIGNED_DIRECTORY },
- { "signing-key", K_SIGNING_KEY },
- { "onion-key", K_ONION_KEY },
- { "link-key", K_LINK_KEY },
- { "router-signature", K_ROUTER_SIGNATURE },
- { "published", K_PUBLISHED },
- { "running-routers", K_RUNNING_ROUTERS },
- { "platform", K_PLATFORM },
- { NULL, -1 }
- };
- #define MAX_ARGS 1024
- struct directory_token {
- directory_keyword tp;
- union {
- struct {
- char *args[MAX_ARGS+1];
- int n_args;
- } cmd;
- char *signature;
- char *error;
- crypto_pk_env_t *public_key;
- } val;
- };
- /* Free any malloced resources allocated for a token. Don't call this if
- you inherit the reference to those resources.
- */
- static void
- router_release_token(directory_token_t *tok)
- {
- switch (tok->tp)
- {
- case _SIGNATURE:
- free(tok->val.signature);
- break;
- case _PUBLIC_KEY:
- crypto_free_pk_env(tok->val.public_key);
- break;
- default:
- break;
- }
- }
- static int
- _router_get_next_token(char **s, directory_token_t *tok) {
- char *next;
- crypto_pk_env_t *pkey = NULL;
- char *signature = NULL;
- int i, done;
- tok->tp = _ERR;
- tok->val.error = "";
- *s = eat_whitespace(*s);
- if (!**s) {
- tok->tp = _EOF;
- return 0;
- } else if (**s == '-') {
- next = strchr(*s, '\n');
- if (! next) { tok->val.error = "No newline at EOF"; return -1; }
- ++next;
- if (! strncmp(*s, OR_PUBLICKEY_BEGIN_TAG, next-*s)) {
- next = strstr(*s, OR_PUBLICKEY_END_TAG);
- if (!next) { tok->val.error = "No public key end tag found"; return -1; }
- next = strchr(next, '\n'); /* Part of OR_PUBLICKEY_END_TAG; can't fail.*/
- ++next;
- if (!(pkey = crypto_new_pk_env(CRYPTO_PK_RSA)))
- return -1;
- if (crypto_pk_read_public_key_from_string(pkey, *s, next-*s)) {
- crypto_free_pk_env(pkey);
- tok->val.error = "Couldn't parse public key.";
- return -1;
- }
- tok->tp = _PUBLIC_KEY;
- tok->val.public_key = pkey;
- *s = next;
- return 0;
- } else if (! strncmp(*s, OR_SIGNATURE_BEGIN_TAG, next-*s)) {
- /* Advance past newline; can't fail. */
- *s = strchr(*s, '\n');
- ++*s;
- /* Find end of base64'd data */
- next = strstr(*s, OR_SIGNATURE_END_TAG);
- if (!next) { tok->val.error = "No signature end tag found"; return -1; }
-
- signature = tor_malloc(256);
- i = base64_decode(signature, 256, *s, next-*s);
- if (i<0) {
- free(signature);
- tok->val.error = "Error decoding signature."; return -1;
- } else if (i != 128) {
- free(signature);
- tok->val.error = "Bad length on decoded signature."; return -1;
- }
- tok->tp = _SIGNATURE;
- tok->val.signature = signature;
- next = strchr(next, '\n'); /* Part of OR_SIGNATURE_END_TAG; can't fail.*/
- *s = next+1;
- return 0;
- } else {
- tok->val.error = "Unrecognized begin line"; return -1;
- }
- } else {
- next = find_whitespace(*s);
- if (!next) {
- tok->val.error = "Unexpected EOF"; return -1;
- }
- for (i = 0 ; token_table[i].t ; ++i) {
- if (!strncmp(token_table[i].t, *s, next-*s)) {
- tok->tp = token_table[i].v;
- i = 0;
- done = (*next == '\n');
- *s = eat_whitespace_no_nl(next);
- while (**s != '\n' && i <= MAX_ARGS && !done) {
- next = find_whitespace(*s);
- if (*next == '\n')
- done = 1;
- *next = 0;
- tok->val.cmd.args[i++] = *s;
- *s = eat_whitespace_no_nl(next+1);
- };
- tok->val.cmd.n_args = i;
- if (i > MAX_ARGS) {
- tok->tp = _ERR;
- tok->val.error = "Too many arguments"; return -1;
- }
- return 0;
- }
- }
- tok->val.error = "Unrecognized command"; return -1;
- }
- }
- #ifdef DEBUG_ROUTER_TOKENS
- static void
- router_dump_token(directory_token_t *tok) {
- int i;
- switch(tok->tp)
- {
- case _SIGNATURE:
- puts("(signature)");
- return;
- case _PUBLIC_KEY:
- puts("(public key)");
- return;
- case _ERR:
- printf("(Error: %s\n)", tok->val.error);
- return;
- case _EOF:
- puts("EOF");
- return;
- case K_ACCEPT: printf("Accept"); break;
- case K_DIRECTORY_SIGNATURE: printf("Directory-Signature"); break;
- case K_REJECT: printf("Reject"); break;
- case K_RECOMMENDED_SOFTWARE: printf("Server-Software"); break;
- case K_ROUTER: printf("Router"); break;
- case K_SIGNED_DIRECTORY: printf("Signed-Directory"); break;
- case K_SIGNING_KEY: printf("Signing-Key"); break;
- case K_ONION_KEY: printf("Onion-key"); break;
- case K_LINK_KEY: printf("Link-key"); break;
- case K_ROUTER_SIGNATURE: printf("Router-signature"); break;
- case K_PUBLISHED: printf("Published"); break;
- case K_RUNNING_ROUTERS: printf("Running-routers"); break;
- case K_PLATFORM: printf("Platform"); break;
- default:
- printf("?????? %d\n", tok->tp); return;
- }
- for (i = 0; i < tok->val.cmd.n_args; ++i) {
- printf(" \"%s\"", tok->val.cmd.args[i]);
- }
- printf("\n");
- return;
- }
- static int
- router_get_next_token(char **s, directory_token_t *tok) {
- int i;
- i = _router_get_next_token(s, tok);
- router_dump_token(tok);
- return i;
- }
- #else
- #define router_get_next_token _router_get_next_token
- #endif
- /* return the first char of s that is not whitespace and not a comment */
- static char *eat_whitespace(char *s) {
- assert(s);
- while(isspace(*s) || *s == '#') {
- while(isspace(*s))
- s++;
- if(*s == '#') { /* read to a \n or \0 */
- while(*s && *s != '\n')
- s++;
- if(!*s)
- return s;
- }
- }
- return s;
- }
- static char *eat_whitespace_no_nl(char *s) {
- while(*s == ' ' || *s == '\t')
- ++s;
- return s;
- }
- /* return the first char of s that is whitespace or '#' or '\0 */
- static char *find_whitespace(char *s) {
- assert(s);
- while(*s && !isspace(*s) && *s != '#')
- s++;
- return s;
- }
- int router_get_list_from_string(char *s)
- {
- if (router_get_list_from_string_impl(&s, &directory, -1, NULL)) {
- log(LOG_WARNING, "Error parsing router file");
- return -1;
- }
- if (router_resolve_directory(directory)) {
- log(LOG_WARNING, "Error resolving directory");
- return -1;
- }
- return 0;
- }
- static int router_get_hash_impl(char *s, char *digest, const char *start_str,
- const char *end_str)
- {
- char *start, *end;
- start = strstr(s, start_str);
- if (!start) {
- log_fn(LOG_WARNING,"couldn't find \"%s\"",start_str);
- return -1;
- }
- end = strstr(start+strlen(start_str), end_str);
- if (!end) {
- log_fn(LOG_WARNING,"couldn't find \"%s\"",end_str);
- return -1;
- }
- end = strchr(end, '\n');
- if (!end) {
- log_fn(LOG_WARNING,"couldn't find EOL");
- return -1;
- }
- ++end;
-
- if (crypto_SHA_digest(start, end-start, digest)) {
- log_fn(LOG_WARNING,"couldn't compute digest");
- return -1;
- }
- return 0;
- }
- int router_get_dir_hash(char *s, char *digest)
- {
- return router_get_hash_impl(s,digest,
- "signed-directory","directory-signature");
- }
- int router_get_router_hash(char *s, char *digest)
- {
- return router_get_hash_impl(s,digest,
- "router ","router-signature");
- }
- /* return 0 if myversion is in start. Else return -1. */
- int compare_recommended_versions(char *myversion, char *start) {
- int len_myversion = strlen(myversion);
- char *comma;
- char *end = start + strlen(start);
- log_fn(LOG_DEBUG,"checking '%s' in '%s'.", myversion, start);
-
- for(;;) {
- comma = strchr(start, ',');
- if( ((comma ? comma : end) - start == len_myversion) &&
- !strncmp(start, myversion, len_myversion)) /* only do strncmp if the length matches */
- return 0; /* success, it's there */
- if(!comma)
- return -1; /* nope */
- start = comma+1;
- }
- }
- int router_get_dir_from_string(char *s, crypto_pk_env_t *pkey)
- {
- if (router_get_dir_from_string_impl(s, &directory, pkey)) {
- log_fn(LOG_WARNING, "Couldn't parse directory.");
- return -1;
- }
- if (router_resolve_directory(directory)) {
- log_fn(LOG_WARNING, "Error resolving directory");
- return -1;
- }
- if (compare_recommended_versions(VERSION, directory->software_versions) < 0) {
- log(LOG_WARNING, "You are running tor version %s, which is no longer supported.\nPlease upgrade to one of %s.", VERSION, directory->software_versions);
- if(options.IgnoreVersion) {
- log(LOG_WARNING, "IgnoreVersion is set. If it breaks, we told you so.");
- } else {
- log(LOG_ERR,"Set IgnoreVersion config variable if you want to proceed.");
- fflush(0);
- exit(0);
- }
- }
- return 0;
- }
- int router_get_dir_from_string_impl(char *s, directory_t **dest,
- crypto_pk_env_t *pkey)
- {
- directory_token_t tok;
- char digest[20];
- char signed_digest[128];
- directory_t *new_dir = NULL;
- char *versions;
- struct tm published;
- time_t published_on;
- const char *good_nickname_lst[1024];
- int n_good_nicknames;
-
- #define NEXT_TOK() \
- do { \
- if (router_get_next_token(&s, &tok)) { \
- log_fn(LOG_WARNING, "Error reading directory: %s", tok.val.error);\
- return -1; \
- } } while (0)
- #define TOK_IS(type,name) \
- do { \
- if (tok.tp != type) { \
- router_release_token(&tok); \
- log_fn(LOG_WARNING, "Error reading directory: expected %s", name);\
- return -1; \
- } } while(0)
- if (router_get_dir_hash(s, digest)) {
- log_fn(LOG_WARNING, "Unable to compute digest of directory");
- goto err;
- }
- log(LOG_DEBUG,"Received directory hashes to %02x:%02x:%02x:%02x",
- ((int)digest[0])&0xff,((int)digest[1])&0xff,
- ((int)digest[2])&0xff,((int)digest[3])&0xff);
- NEXT_TOK();
- TOK_IS(K_SIGNED_DIRECTORY, "signed-directory");
- NEXT_TOK();
- TOK_IS(K_PUBLISHED, "published");
- if (tok.val.cmd.n_args != 2) {
- log_fn(LOG_WARNING, "Invalid published line");
- goto err;
- }
- tok.val.cmd.args[1][-1] = ' ';
- if (!strptime(tok.val.cmd.args[0], "%Y-%m-%d %H:%M:%S", &published)) {
- log_fn(LOG_WARNING, "Published time was unparseable"); goto err;
- }
- published_on = timegm(&published);
- NEXT_TOK();
- TOK_IS(K_RECOMMENDED_SOFTWARE, "recommended-software");
- if (tok.val.cmd.n_args != 1) {
- log_fn(LOG_WARNING, "Invalid recommended-software line");
- goto err;
- }
- versions = tor_strdup(tok.val.cmd.args[0]);
-
- NEXT_TOK();
- TOK_IS(K_RUNNING_ROUTERS, "running-routers");
- n_good_nicknames = tok.val.cmd.n_args;
- memcpy(good_nickname_lst, tok.val.cmd.args, n_good_nicknames*sizeof(char *));
- if (router_get_list_from_string_impl(&s, &new_dir,
- n_good_nicknames, good_nickname_lst)) {
- log_fn(LOG_WARNING, "Error reading routers from directory");
- goto err;
- }
- new_dir->software_versions = versions;
- new_dir->published_on = published_on;
- NEXT_TOK();
- TOK_IS(K_DIRECTORY_SIGNATURE, "directory-signature");
- NEXT_TOK();
- TOK_IS(_SIGNATURE, "signature");
- if (pkey) {
- if (crypto_pk_public_checksig(pkey, tok.val.signature, 128, signed_digest)
- != 20) {
- log_fn(LOG_WARNING, "Error reading directory: invalid signature.");
- free(tok.val.signature);
- goto err;
- }
- log(LOG_DEBUG,"Signed directory hash starts %02x:%02x:%02x:%02x",
- ((int)signed_digest[0])&0xff,((int)signed_digest[1])&0xff,
- ((int)signed_digest[2])&0xff,((int)signed_digest[3])&0xff);
- if (memcmp(digest, signed_digest, 20)) {
- log_fn(LOG_WARNING, "Error reading directory: signature does not match.");
- free(tok.val.signature);
- goto err;
- }
- }
- free(tok.val.signature);
- NEXT_TOK();
- TOK_IS(_EOF, "end of directory");
- if (*dest)
- directory_free(*dest);
- *dest = new_dir;
- return 0;
- err:
- if (new_dir)
- directory_free(new_dir);
- return -1;
- #undef NEXT_TOK
- #undef TOK_IS
- }
- int router_get_list_from_string_impl(char **s, directory_t **dest,
- int n_good_nicknames,
- const char **good_nickname_lst)
- {
- routerinfo_t *router;
- routerinfo_t **rarray;
- int rarray_len = 0;
- int i;
- assert(s && *s);
- rarray = (routerinfo_t **)tor_malloc((sizeof(routerinfo_t *))*MAX_ROUTERS_IN_DIR);
- while (1) {
- *s = eat_whitespace(*s);
- if (strncmp(*s, "router ", 7)!=0)
- break;
- router = router_get_entry_from_string(s);
- if (!router) {
- log_fn(LOG_WARNING, "Error reading router");
- return -1;
- }
- if (rarray_len >= MAX_ROUTERS_IN_DIR) {
- log_fn(LOG_WARNING, "too many routers");
- routerinfo_free(router);
- continue;
- }
- if (n_good_nicknames>=0) {
- router->is_running = 0;
- for (i = 0; i < n_good_nicknames; ++i) {
- if (0==strcasecmp(good_nickname_lst[i], router->nickname)) {
- router->is_running = 1;
- break;
- }
- }
- } else {
- router->is_running = 1; /* start out assuming all dirservers are up */
- }
- rarray[rarray_len++] = router;
- log_fn(LOG_DEBUG,"just added router #%d.",rarray_len);
- }
-
- if (*dest)
- directory_free(*dest);
- *dest = (directory_t *)tor_malloc(sizeof(directory_t));
- (*dest)->routers = rarray;
- (*dest)->n_routers = rarray_len;
- (*dest)->software_versions = NULL;
- return 0;
- }
- static int
- router_resolve(routerinfo_t *router)
- {
- struct hostent *rent;
- rent = (struct hostent *)gethostbyname(router->address);
- if (!rent) {
- log_fn(LOG_WARNING,"Could not get address for router %s.",router->address);
- return -1;
- }
- assert(rent->h_length == 4);
- memcpy(&router->addr, rent->h_addr,rent->h_length);
- router->addr = ntohl(router->addr); /* get it back into host order */
- return 0;
- }
- static int
- router_resolve_directory(directory_t *dir)
- {
- int i, max, remove;
- if (!dir)
- dir = directory;
- max = dir->n_routers;
- for (i = 0; i < max; ++i) {
- remove = 0;
- if (router_resolve(dir->routers[i])) {
- log_fn(LOG_WARNING, "Couldn't resolve router %s; removing",
- dir->routers[i]->address);
- remove = 1;
- routerinfo_free(dir->routers[i]);
- } else if (options.Nickname && !strcmp(dir->routers[i]->nickname, options.Nickname)) {
- remove = 1;
- }
- if (remove) {
- dir->routers[i] = dir->routers[--max];
- --dir->n_routers;
- --i;
- }
- }
-
- return 0;
- }
- /* reads a single router entry from s.
- * updates s so it points to after the router it just read.
- * mallocs a new router, returns it if all goes well, else returns NULL.
- */
- routerinfo_t *router_get_entry_from_string(char**s) {
- routerinfo_t *router = NULL;
- char signed_digest[128];
- char digest[128];
- directory_token_t _tok;
- directory_token_t *tok = &_tok;
- struct tm published;
- int t;
- #define NEXT_TOKEN() \
- do { if (router_get_next_token(s, tok)) { \
- log_fn(LOG_WARNING, "Error reading directory: %s", tok->val.error);\
- goto err; \
- } } while(0)
- #define ARGS tok->val.cmd.args
- if (router_get_router_hash(*s, digest) < 0) {
- log_fn(LOG_WARNING, "Couldn't compute router hash.");
- return NULL;
- }
- NEXT_TOKEN();
- if (tok->tp != K_ROUTER) {
- router_release_token(tok);
- log_fn(LOG_WARNING,"Entry does not start with \"router\"");
- return NULL;
- }
- router = tor_malloc(sizeof(routerinfo_t));
- memset(router,0,sizeof(routerinfo_t)); /* zero it out first */
- /* C doesn't guarantee that NULL is represented by 0 bytes. You'll
- thank me for this someday. */
- router->onion_pkey = router->identity_pkey = router->link_pkey = NULL;
- if (tok->val.cmd.n_args != 6) {
- log_fn(LOG_WARNING,"Wrong # of arguments to \"router\"");
- goto err;
- }
- router->nickname = tor_strdup(ARGS[0]);
- if (strlen(router->nickname) > MAX_NICKNAME_LEN) {
- log_fn(LOG_WARNING,"Router nickname too long.");
- goto err;
- }
- if (strspn(router->nickname, LEGAL_NICKNAME_CHARACTERS) !=
- strlen(router->nickname)) {
- log_fn(LOG_WARNING, "Router nickname contains illegal characters.");
- goto err;
- }
-
- /* read router.address */
- router->address = tor_strdup(ARGS[1]);
- router->addr = 0;
- /* Read router->or_port */
- router->or_port = atoi(ARGS[2]);
- if(!router->or_port) {
- log_fn(LOG_WARNING,"or_port unreadable or 0. Failing.");
- goto err;
- }
-
- /* Router->ap_port */
- router->ap_port = atoi(ARGS[3]);
-
- /* Router->dir_port */
- router->dir_port = atoi(ARGS[4]);
- /* Router->bandwidth */
- router->bandwidth = atoi(ARGS[5]);
- if (!router->bandwidth) {
- log_fn(LOG_WARNING,"bandwidth unreadable or 0. Failing.");
- goto err;
- }
-
- log_fn(LOG_DEBUG,"or_port %d, ap_port %d, dir_port %d, bandwidth %d.",
- router->or_port, router->ap_port, router->dir_port, router->bandwidth);
- /* XXX Later, require platform before published. */
- NEXT_TOKEN();
- if (tok->tp == K_PLATFORM) {
- NEXT_TOKEN();
- }
-
- if (tok->tp != K_PUBLISHED) {
- log_fn(LOG_WARNING, "Missing published time"); goto err;
- }
- if (tok->val.cmd.n_args != 2) {
- log_fn(LOG_WARNING, "Wrong number of arguments to published"); goto err;
- }
- ARGS[1][-1] = ' '; /* Re-insert space. */
- if (!strptime(ARGS[0], "%Y-%m-%d %H:%M:%S", &published)) {
- log_fn(LOG_WARNING, "Published time was unparseable"); goto err;
- }
- router->published_on = timegm(&published);
- NEXT_TOKEN();
- if (tok->tp != K_ONION_KEY) {
- log_fn(LOG_WARNING, "Missing onion-key"); goto err;
- }
- NEXT_TOKEN();
- if (tok->tp != _PUBLIC_KEY) {
- log_fn(LOG_WARNING, "Missing onion key"); goto err;
- } /* XXX Check key length */
- router->onion_pkey = tok->val.public_key;
- NEXT_TOKEN();
- if (tok->tp != K_LINK_KEY) {
- log_fn(LOG_WARNING, "Missing link-key"); goto err;
- }
- NEXT_TOKEN();
- if (tok->tp != _PUBLIC_KEY) {
- log_fn(LOG_WARNING, "Missing link key"); goto err;
- } /* XXX Check key length */
- router->link_pkey = tok->val.public_key;
- NEXT_TOKEN();
- if (tok->tp != K_SIGNING_KEY) {
- log_fn(LOG_WARNING, "Missing signing-key"); goto err;
- }
- NEXT_TOKEN();
- if (tok->tp != _PUBLIC_KEY) {
- log_fn(LOG_WARNING, "Missing signing key"); goto err;
- }
- router->identity_pkey = tok->val.public_key;
- NEXT_TOKEN();
- while (tok->tp == K_ACCEPT || tok->tp == K_REJECT) {
- router_add_exit_policy(router, tok);
- NEXT_TOKEN();
- }
-
- if (tok->tp != K_ROUTER_SIGNATURE) {
- log_fn(LOG_WARNING,"Missing router signature");
- goto err;
- }
- NEXT_TOKEN();
- if (tok->tp != _SIGNATURE) {
- log_fn(LOG_WARNING,"Missing router signature");
- goto err;
- }
- assert (router->identity_pkey);
- if ((t=crypto_pk_public_checksig(router->identity_pkey, tok->val.signature,
- 128, signed_digest)) != 20) {
- log_fn(LOG_WARNING, "Invalid signature %d",t);
- goto err;
- }
- if (memcmp(digest, signed_digest, 20)) {
- log_fn(LOG_WARNING, "Mismatched signature");
- goto err;
- }
-
- return router;
- err:
- router_release_token(tok);
- if(router->address)
- free(router->address);
- if(router->link_pkey)
- crypto_free_pk_env(router->link_pkey);
- if(router->onion_pkey)
- crypto_free_pk_env(router->onion_pkey);
- if(router->identity_pkey)
- crypto_free_pk_env(router->identity_pkey);
- router_free_exit_policy(router);
- free(router);
- return NULL;
- #undef ARGS
- #undef NEXT_TOKEN
- }
- static void router_free_exit_policy(routerinfo_t *router) {
- struct exit_policy_t *tmpe;
- while(router->exit_policy) {
- tmpe = router->exit_policy;
- router->exit_policy = tmpe->next;
- free(tmpe->string);
- free(tmpe->address);
- free(tmpe->port);
- free(tmpe);
- }
- }
- void router_add_exit_policy_from_config(routerinfo_t *router) {
- char *s = options.ExitPolicy, *e;
- int last=0;
- char line[1024];
- if(!s) {
- log_fn(LOG_INFO,"No exit policy configured. Ok.");
- return; /* nothing to see here */
- }
- if(!*s) {
- log_fn(LOG_INFO,"Exit policy is empty. Ok.");
- return; /* nothing to see here */
- }
- for(;;) {
- e = strchr(s,',');
- if(!e) {
- last = 1;
- strcpy(line,s);
- } else {
- memcpy(line,s,e-s);
- line[e-s] = 0;
- }
- log_fn(LOG_DEBUG,"Adding new entry '%s'",line);
- if(router_add_exit_policy_from_string(router,line) < 0)
- log_fn(LOG_WARNING,"Malformed exit policy %s; skipping.", line);
- if(last)
- return;
- s = e+1;
- }
- }
- static int
- router_add_exit_policy_from_string(routerinfo_t *router,
- char *s)
- {
- directory_token_t tok;
- char *tmp, *cp;
- int r;
- int len, idx;
- len = strlen(s);
- tmp = cp = tor_malloc(len+2);
- for (idx = 0; idx < len; ++idx) {
- tmp[idx] = tolower(s[idx]);
- }
- tmp[len]='\n';
- tmp[len+1]='\0';
- if (router_get_next_token(&cp, &tok)) {
- log_fn(LOG_WARNING, "Error reading exit policy: %s", tok.val.error);
- free(tmp);
- return -1;
- }
- if (tok.tp != K_ACCEPT && tok.tp != K_REJECT) {
- log_fn(LOG_WARNING, "Expected 'accept' or 'reject'.");
- free(tmp);
- return -1;
- }
- r = router_add_exit_policy(router, &tok);
- free(tmp);
- return r;
- }
- static int router_add_exit_policy(routerinfo_t *router,
- directory_token_t *tok) {
- struct exit_policy_t *tmpe, *newe;
- char *arg, *colon;
- if (tok->val.cmd.n_args != 1)
- return -1;
- arg = tok->val.cmd.args[0];
- newe = tor_malloc(sizeof(struct exit_policy_t));
- memset(newe,0,sizeof(struct exit_policy_t));
-
- newe->string = tor_malloc(8+strlen(arg));
- if (tok->tp == K_REJECT) {
- strcpy(newe->string, "reject ");
- newe->policy_type = EXIT_POLICY_REJECT;
- } else {
- assert(tok->tp == K_ACCEPT);
- strcpy(newe->string, "accept ");
- newe->policy_type = EXIT_POLICY_ACCEPT;
- }
- strcat(newe->string, arg);
-
- colon = strchr(arg,':');
- if(!colon)
- goto policy_read_failed;
- *colon = 0;
- newe->address = tor_strdup(arg);
- newe->port = tor_strdup(colon+1);
- log_fn(LOG_DEBUG,"%s %s:%s",
- newe->policy_type == EXIT_POLICY_REJECT ? "reject" : "accept",
- newe->address, newe->port);
- /* now link newe onto the end of exit_policy */
- if(!router->exit_policy) {
- router->exit_policy = newe;
- return 0;
- }
- for(tmpe=router->exit_policy; tmpe->next; tmpe=tmpe->next) ;
- tmpe->next = newe;
- return 0;
- policy_read_failed:
- assert(newe->string);
- log_fn(LOG_WARNING,"Couldn't parse line '%s'. Dropping", newe->string);
- if(newe->string)
- free(newe->string);
- if(newe->address)
- free(newe->address);
- if(newe->port)
- free(newe->port);
- free(newe);
- return -1;
- }
- /* Return 0 if my exit policy says to allow connection to conn.
- * Else return -1.
- */
- int router_compare_to_exit_policy(connection_t *conn) {
- struct exit_policy_t *tmpe;
- struct in_addr in;
- assert(desc_routerinfo);
- for(tmpe=desc_routerinfo->exit_policy; tmpe; tmpe=tmpe->next) {
- assert(tmpe->address);
- assert(tmpe->port);
- log_fn(LOG_DEBUG,"Considering exit policy %s:%s",tmpe->address, tmpe->port);
- if(strcmp(tmpe->address,"*") &&
- inet_aton(tmpe->address,&in) == 0) { /* malformed IP. reject. */
- log_fn(LOG_WARNING,"Malformed IP %s in exit policy. Rejecting.",tmpe->address);
- return -1;
- }
- if((!strcmp(tmpe->address,"*") || conn->addr == ntohl(in.s_addr)) &&
- (!strcmp(tmpe->port,"*") || atoi(tmpe->port) == conn->port)) {
- log_fn(LOG_INFO,"Address '%s' matches '%s' and port '%s' matches '%d'. %s.",
- tmpe->address, conn->address,
- tmpe->port, conn->port,
- tmpe->policy_type == EXIT_POLICY_ACCEPT ? "Accepting" : "Rejecting");
- if(tmpe->policy_type == EXIT_POLICY_ACCEPT)
- return 0;
- else
- return -1;
- }
- }
- return 0; /* accept all by default. */
- }
- const char *router_get_my_descriptor(void) {
- if (!desc_routerinfo) {
- if (router_rebuild_descriptor())
- return NULL;
- }
- log_fn(LOG_DEBUG,"my desc is '%s'",descriptor);
- return descriptor;
- }
- const routerinfo_t *router_get_desc_routerinfo(void) {
- if (!desc_routerinfo) {
- if (router_rebuild_descriptor())
- return NULL;
- }
- return desc_routerinfo;
- }
- int router_rebuild_descriptor(void) {
- routerinfo_t *ri;
- char localhostname[256];
- char *address = options.Address;
- if(!address) { /* if not specified in config, we find a default */
- if(gethostname(localhostname,sizeof(localhostname)) < 0) {
- log_fn(LOG_WARNING,"Error obtaining local hostname");
- return -1;
- }
- address = localhostname;
- }
- ri = tor_malloc(sizeof(routerinfo_t));
- ri->address = tor_strdup(address);
- ri->nickname = tor_strdup(options.Nickname);
- /* No need to set addr. */
- ri->or_port = options.ORPort;
- ri->ap_port = options.APPort;
- ri->dir_port = options.DirPort;
- ri->published_on = time(NULL);
- ri->onion_pkey = crypto_pk_dup_key(get_onion_key());
- ri->link_pkey = crypto_pk_dup_key(get_link_key());
- ri->identity_pkey = crypto_pk_dup_key(get_identity_key());
- ri->bandwidth = options.TotalBandwidth;
- ri->exit_policy = NULL; /* zero it out first */
- router_add_exit_policy_from_config(ri);
- if (desc_routerinfo)
- routerinfo_free(desc_routerinfo);
- desc_routerinfo = ri;
- if (router_dump_router_to_string(descriptor, 8192, ri, get_identity_key())<0) {
- log_fn(LOG_WARNING, "Couldn't dump router to string.");
- return -1;
- }
- return 0;
- }
- static void get_platform_str(char *platform, int len)
- {
- snprintf(platform, len-1, "Tor %s on %s", VERSION, get_uname());
- platform[len-1] = '\0';
- return;
- }
- #define DEBUG_ROUTER_DUMP_ROUTER_TO_STRING
- int router_dump_router_to_string(char *s, int maxlen, routerinfo_t *router,
- crypto_pk_env_t *ident_key) {
- char *onion_pkey;
- char *link_pkey;
- char *identity_pkey;
- char platform[256];
- char digest[20];
- char signature[128];
- char published[32];
- int onion_pkeylen, link_pkeylen, identity_pkeylen;
- int written;
- int result=0;
- struct exit_policy_t *tmpe;
- #ifdef DEBUG_ROUTER_DUMP_ROUTER_TO_STRING
- char *s_tmp, *s_dup;
- routerinfo_t *ri_tmp;
- #endif
-
- get_platform_str(platform, sizeof(platform));
- if (crypto_pk_cmp_keys(ident_key, router->identity_pkey)) {
- log_fn(LOG_WARNING,"Tried to sign a router with a private key that didn't match router's public key!");
- return -1;
- }
- if(crypto_pk_write_public_key_to_string(router->onion_pkey,
- &onion_pkey,&onion_pkeylen)<0) {
- log_fn(LOG_WARNING,"write onion_pkey to string failed!");
- return -1;
- }
- if(crypto_pk_write_public_key_to_string(router->identity_pkey,
- &identity_pkey,&identity_pkeylen)<0) {
- log_fn(LOG_WARNING,"write identity_pkey to string failed!");
- return -1;
- }
- if(crypto_pk_write_public_key_to_string(router->link_pkey,
- &link_pkey,&link_pkeylen)<0) {
- log_fn(LOG_WARNING,"write link_pkey to string failed!");
- return -1;
- }
- strftime(published, 32, "%Y-%m-%d %H:%M:%S", gmtime(&router->published_on));
-
- result = snprintf(s, maxlen,
- "router %s %s %d %d %d %d\n"
- "platform %s\n"
- "published %s\n"
- "onion-key\n%s"
- "link-key\n%s"
- "signing-key\n%s",
- router->nickname,
- router->address,
- router->or_port,
- router->ap_port,
- router->dir_port,
- router->bandwidth,
- platform,
- published,
- onion_pkey, link_pkey, identity_pkey);
- free(onion_pkey);
- free(link_pkey);
- free(identity_pkey);
- if(result < 0 || result >= maxlen) {
- /* apparently different glibcs do different things on snprintf error.. so check both */
- return -1;
- }
- written = result;
- for(tmpe=router->exit_policy; tmpe; tmpe=tmpe->next) {
- result = snprintf(s+written, maxlen-written, "%s %s:%s\n",
- tmpe->policy_type == EXIT_POLICY_ACCEPT ? "accept" : "reject",
- tmpe->address, tmpe->port);
- if(result < 0 || result+written > maxlen) {
- /* apparently different glibcs do different things on snprintf error.. so check both */
- return -1;
- }
- written += result;
- }
- if (written > maxlen-256) /* Not enough room for signature. */
- return -1;
- strcat(s+written, "router-signature\n");
- written += strlen(s+written);
- s[written] = '\0';
- if (router_get_router_hash(s, digest) < 0)
- return -1;
- if (crypto_pk_private_sign(ident_key, digest, 20, signature) < 0) {
- log_fn(LOG_WARNING, "Error signing digest");
- return -1;
- }
- strcat(s+written, "-----BEGIN SIGNATURE-----\n");
- written += strlen(s+written);
- if (base64_encode(s+written, maxlen-written, signature, 128) < 0) {
- log_fn(LOG_WARNING, "Couldn't base64-encode signature");
- return -1;
- }
- written += strlen(s+written);
- strcat(s+written, "-----END SIGNATURE-----\n");
- written += strlen(s+written);
-
- if (written > maxlen-2)
- return -1;
- /* include a last '\n' */
- s[written] = '\n';
- s[written+1] = 0;
- #ifdef DEBUG_ROUTER_DUMP_ROUTER_TO_STRING
- s_tmp = s_dup = tor_strdup(s);
- ri_tmp = router_get_entry_from_string(&s_tmp);
- if (!ri_tmp) {
- log_fn(LOG_ERR, "We just generated a router descriptor we can't parse: <<%s>>",
- s);
- return -1;
- }
- free(s_dup);
- routerinfo_free(ri_tmp);
- #endif
- return written+1;
- }
- /*
- Local Variables:
- mode:c
- indent-tabs-mode:nil
- c-basic-offset:2
- End:
- */
|