SocketCore.cc 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457
  1. /* <!-- copyright */
  2. /*
  3. * aria2 - a simple utility for downloading files faster
  4. *
  5. * Copyright (C) 2006 Tatsuhiro Tsujikawa
  6. *
  7. * This program is free software; you can redistribute it and/or modify
  8. * it under the terms of the GNU General Public License as published by
  9. * the Free Software Foundation; either version 2 of the License, or
  10. * (at your option) any later version.
  11. *
  12. * This program is distributed in the hope that it will be useful,
  13. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  15. * GNU General Public License for more details.
  16. *
  17. * You should have received a copy of the GNU General Public License
  18. * along with this program; if not, write to the Free Software
  19. * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  20. */
  21. /* copyright --> */
  22. #include "SocketCore.h"
  23. #include "DlRetryEx.h"
  24. #include "DlAbortEx.h"
  25. #include "message.h"
  26. #include <unistd.h>
  27. #include <fcntl.h>
  28. #include <netdb.h>
  29. #include <sys/types.h>
  30. #include <sys/socket.h>
  31. #include <netinet/in.h>
  32. #include <arpa/inet.h>
  33. #include <sys/time.h>
  34. #include <netdb.h>
  35. #include <errno.h>
  36. SocketCore::SocketCore():sockfd(-1) {
  37. init();
  38. }
  39. SocketCore::SocketCore(int sockfd):sockfd(sockfd) {
  40. init();
  41. }
  42. void SocketCore::init() {
  43. use = 1;
  44. secure = false;
  45. #ifdef HAVE_LIBSSL
  46. // for SSL
  47. sslCtx = NULL;
  48. ssl = NULL;
  49. #endif // HAVE_LIBSSL
  50. #ifdef HAVE_LIBGNUTLS
  51. sslSession = NULL;
  52. sslXcred = NULL;
  53. peekBufMax = 4096;
  54. peekBuf = new char[peekBufMax];
  55. peekBufLength = 0;
  56. #endif //HAVE_LIBGNUTLS
  57. }
  58. SocketCore::~SocketCore() {
  59. closeConnection();
  60. #ifdef HAVE_LIBGNUTLS
  61. delete [] peekBuf;
  62. #endif // HAVE_LIBGNUTLS
  63. }
  64. void SocketCore::beginListen(int port) {
  65. closeConnection();
  66. //sockfd = socket(AF_UNSPEC, SOCK_STREAM, PF_UNSPEC);
  67. sockfd = socket(AF_INET, SOCK_STREAM, 0);
  68. if(sockfd == -1) {
  69. throw new DlAbortEx(EX_SOCKET_OPEN, strerror(errno));
  70. }
  71. socklen_t sockopt = 1;
  72. if(setsockopt(sockfd, SOL_SOCKET, SO_REUSEADDR, &sockopt, sizeof(socklen_t)) < 0) {
  73. close(sockfd);
  74. sockfd = -1;
  75. throw new DlAbortEx(EX_SOCKET_SET_OPT, strerror(errno));
  76. }
  77. struct sockaddr_in sockaddr;
  78. memset((char*)&sockaddr, 0, sizeof(sockaddr));
  79. sockaddr.sin_family = AF_INET;
  80. sockaddr.sin_addr.s_addr = INADDR_ANY;
  81. sockaddr.sin_port = htons(port);
  82. if(bind(sockfd, (struct sockaddr*)&sockaddr, sizeof(sockaddr)) == -1) {
  83. throw new DlAbortEx(EX_SOCKET_BIND, strerror(errno));
  84. }
  85. if(listen(sockfd, 1) == -1) {
  86. throw new DlAbortEx(EX_SOCKET_LISTEN, strerror(errno));
  87. }
  88. setNonBlockingMode();
  89. }
  90. SocketCore* SocketCore::acceptConnection() const {
  91. struct sockaddr_in sockaddr;
  92. socklen_t len = sizeof(sockaddr);
  93. memset((char*)&sockaddr, 0, sizeof(sockaddr));
  94. int fd;
  95. if((fd = accept(sockfd, (struct sockaddr*)&sockaddr, &len)) == -1) {
  96. throw new DlAbortEx(EX_SOCKET_ACCEPT, strerror(errno));
  97. }
  98. SocketCore* s = new SocketCore(fd);
  99. return s;
  100. }
  101. void SocketCore::getAddrInfo(pair<string, int>& addrinfo) const {
  102. struct sockaddr_in listenaddr;
  103. memset((char*)&listenaddr, 0, sizeof(listenaddr));
  104. socklen_t len = sizeof(listenaddr);
  105. if(getsockname(sockfd, (struct sockaddr*)&listenaddr, &len) == -1) {
  106. throw new DlAbortEx(EX_SOCKET_GET_NAME, strerror(errno));
  107. }
  108. addrinfo.first = inet_ntoa(listenaddr.sin_addr);
  109. addrinfo.second = ntohs(listenaddr.sin_port);
  110. }
  111. void SocketCore::getPeerInfo(pair<string, int>& peerinfo) const {
  112. struct sockaddr_in peerin;
  113. memset(&peerin, 0, sizeof(peerin));
  114. int len = sizeof(peerin);
  115. if(getpeername(sockfd, (struct sockaddr*)&peerin, (socklen_t*)&len) < 0) {
  116. throw new DlAbortEx(EX_SOCKET_GET_PEER, strerror(errno));
  117. }
  118. peerinfo.first = inet_ntoa(peerin.sin_addr);
  119. peerinfo.second = ntohs(peerin.sin_port);
  120. }
  121. void SocketCore::establishConnection(const string& host, int port) {
  122. closeConnection();
  123. sockfd = socket(AF_INET, SOCK_STREAM, 0);
  124. if(sockfd == -1) {
  125. throw new DlAbortEx(EX_SOCKET_OPEN, strerror(errno));
  126. }
  127. socklen_t sockopt = 1;
  128. if(setsockopt(sockfd, SOL_SOCKET, SO_REUSEADDR, &sockopt, sizeof(socklen_t)) < 0) {
  129. close(sockfd);
  130. sockfd = -1;
  131. throw new DlAbortEx(EX_SOCKET_SET_OPT, strerror(errno));
  132. }
  133. struct sockaddr_in sockaddr;
  134. memset((char*)&sockaddr, 0, sizeof(sockaddr));
  135. sockaddr.sin_family = AF_INET;
  136. sockaddr.sin_port = htons(port);
  137. if(inet_aton(host.c_str(), &sockaddr.sin_addr)) {
  138. // ok
  139. } else {
  140. struct addrinfo ai;
  141. memset((char*)&ai, 0, sizeof(ai));
  142. ai.ai_flags = 0;
  143. ai.ai_family = PF_INET;
  144. ai.ai_socktype = SOCK_STREAM;
  145. ai.ai_protocol = 0;
  146. struct addrinfo* res;
  147. int ec;
  148. if((ec = getaddrinfo(host.c_str(), NULL, &ai, &res)) != 0) {
  149. throw new DlAbortEx(EX_RESOLVE_HOSTNAME,
  150. host.c_str(), gai_strerror(ec));
  151. }
  152. sockaddr.sin_addr = ((struct sockaddr_in*)res->ai_addr)->sin_addr;
  153. freeaddrinfo(res);
  154. }
  155. // make socket non-blocking mode
  156. setNonBlockingMode();
  157. if(connect(sockfd, (struct sockaddr*)&sockaddr, (socklen_t)sizeof(sockaddr)) == -1 && errno != EINPROGRESS) {
  158. throw new DlAbortEx(EX_SOCKET_CONNECT, host.c_str(), strerror(errno));
  159. }
  160. }
  161. void SocketCore::setNonBlockingMode() const {
  162. int flags = fcntl(sockfd, F_GETFL, 0);
  163. // TODO add error handling
  164. fcntl(sockfd, F_SETFL, flags|O_NONBLOCK);
  165. }
  166. void SocketCore::setBlockingMode() const {
  167. int flags = fcntl(sockfd, F_GETFL, 0);
  168. // TODO add error handling
  169. fcntl(sockfd, F_SETFL, flags&(~O_NONBLOCK));
  170. }
  171. void SocketCore::closeConnection() {
  172. #ifdef HAVE_LIBSSL
  173. // for SSL
  174. if(secure) {
  175. SSL_shutdown(ssl);
  176. }
  177. #endif // HAVE_LIBSSL
  178. #ifdef HAVE_LIBGNUTLS
  179. if(secure) {
  180. gnutls_bye(sslSession, GNUTLS_SHUT_RDWR);
  181. }
  182. #endif // HAVE_LIBGNUTLS
  183. if(sockfd != -1) {
  184. close(sockfd);
  185. sockfd = -1;
  186. }
  187. #ifdef HAVE_LIBSSL
  188. // for SSL
  189. if(secure) {
  190. SSL_free(ssl);
  191. SSL_CTX_free(sslCtx);
  192. }
  193. #endif // HAVE_LIBSSL
  194. #ifdef HAVE_LIBGNUTLS
  195. if(secure) {
  196. gnutls_deinit(sslSession);
  197. gnutls_certificate_free_credentials(sslXcred);
  198. }
  199. #endif // HAVE_LIBGNUTLS
  200. }
  201. bool SocketCore::isWritable(int timeout) const {
  202. fd_set fds;
  203. FD_ZERO(&fds);
  204. FD_SET(sockfd, &fds);
  205. struct timeval tv;
  206. tv.tv_sec = timeout;
  207. tv.tv_usec = 0;
  208. int r = select(sockfd+1, NULL, &fds, NULL, &tv);
  209. if(r == 1) {
  210. return true;
  211. } else if(r == 0) {
  212. // time out
  213. return false;
  214. } else {
  215. if(errno == EINPROGRESS || errno == EINTR) {
  216. return false;
  217. } else {
  218. throw new DlRetryEx(EX_SOCKET_CHECK_WRITABLE, strerror(errno));
  219. }
  220. }
  221. }
  222. bool SocketCore::isReadable(int timeout) const {
  223. #ifdef HAVE_LIBGNUTLS
  224. if(secure && peekBufLength > 0) {
  225. return true;
  226. }
  227. #endif // HAVE_LIBGNUTLS
  228. fd_set fds;
  229. FD_ZERO(&fds);
  230. FD_SET(sockfd, &fds);
  231. struct timeval tv;
  232. tv.tv_sec = timeout;
  233. tv.tv_usec = 0;
  234. int r = select(sockfd+1, &fds, NULL, NULL, &tv);
  235. if(r == 1) {
  236. return true;
  237. } else if(r == 0) {
  238. // time out
  239. return false;
  240. } else {
  241. if(errno == EINPROGRESS || errno == EINTR) {
  242. return false;
  243. } else {
  244. throw new DlRetryEx(EX_SOCKET_CHECK_READABLE, strerror(errno));
  245. }
  246. }
  247. }
  248. void SocketCore::writeData(const char* data, int len) {
  249. int ret = 0;
  250. if(!secure && (ret = send(sockfd, data, (size_t)len, 0)) != len
  251. #ifdef HAVE_LIBSSL
  252. // for SSL
  253. // TODO handling len == 0 case required
  254. || secure && (ret = SSL_write(ssl, data, len)) != len
  255. #endif // HAVE_LIBSSL
  256. #ifdef HAVE_LIBGNUTLS
  257. || secure && (ret = gnutls_record_send(sslSession, data, len)) != len
  258. #endif // HAVE_LIBGNUTLS
  259. ) {
  260. const char* errorMsg;
  261. #ifdef HAVE_LIBGNUTLS
  262. if(secure) {
  263. errorMsg = gnutls_strerror(ret);
  264. } else {
  265. errorMsg = strerror(errno);
  266. }
  267. #else // HAVE_LIBGNUTLS
  268. errorMsg = strerror(errno);
  269. #endif
  270. throw new DlRetryEx(EX_SOCKET_SEND, errorMsg);
  271. }
  272. }
  273. void SocketCore::readData(char* data, int& len) {
  274. int ret = 0;
  275. if(!secure && (ret = recv(sockfd, data, (size_t)len, 0)) < 0
  276. #ifdef HAVE_LIBSSL
  277. // for SSL
  278. // TODO handling len == 0 case required
  279. || secure && (ret = SSL_read(ssl, data, len)) < 0
  280. #endif // HAVE_LIBSSL
  281. #ifdef HAVE_LIBGNUTLS
  282. || secure && (ret = gnutlsRecv(data, len)) < 0
  283. #endif // HAVE_LIBGNUTLS
  284. ) {
  285. const char* errorMsg;
  286. #ifdef HAVE_LIBGNUTLS
  287. if(secure) {
  288. errorMsg = gnutls_strerror(ret);
  289. } else {
  290. errorMsg = strerror(errno);
  291. }
  292. #else // HAVE_LIBGNUTLS
  293. errorMsg = strerror(errno);
  294. #endif
  295. throw new DlRetryEx(EX_SOCKET_RECV, errorMsg);
  296. }
  297. len = ret;
  298. }
  299. void SocketCore::peekData(char* data, int& len) {
  300. int ret = 0;
  301. if(!secure && (ret = recv(sockfd, data, (size_t)len, MSG_PEEK)) < 0
  302. #ifdef HAVE_LIBSSL
  303. // for SSL
  304. // TODO handling len == 0 case required
  305. || secure && (ret = SSL_peek(ssl, data, len)) < 0
  306. #endif // HAVE_LIBSSL
  307. #ifdef HAVE_LIBGNUTLS
  308. || secure && (ret = gnutlsPeek(data, len)) < 0
  309. #endif // HAVE_LIBGNUTLS
  310. ) {
  311. const char* errorMsg;
  312. #ifdef HAVE_LIBGNUTLS
  313. if(secure) {
  314. errorMsg = gnutls_strerror(ret);
  315. } else {
  316. errorMsg = strerror(errno);
  317. }
  318. #else // HAVE_LIBGNUTLS
  319. errorMsg = strerror(errno);
  320. #endif
  321. throw new DlRetryEx(EX_SOCKET_PEEK, errorMsg);
  322. }
  323. len = ret;
  324. }
  325. #ifdef HAVE_LIBGNUTLS
  326. int SocketCore::shiftPeekData(char* data, int len) {
  327. if(peekBufLength <= len) {
  328. memcpy(data, peekBuf, peekBufLength);
  329. int ret = peekBufLength;
  330. peekBufLength = 0;
  331. return ret;
  332. } else {
  333. memcpy(data, peekBuf, len);
  334. char* temp = new char[peekBufMax];
  335. memcpy(temp, peekBuf+len, peekBufLength-len);
  336. delete [] peekBuf;
  337. peekBuf = temp;
  338. peekBufLength -= len;
  339. return len;
  340. }
  341. }
  342. void SocketCore::addPeekData(char* data, int len) {
  343. if(peekBufLength+len > peekBufMax) {
  344. char* temp = new char[peekBufMax+len];
  345. memcpy(temp, peekBuf, peekBufLength);
  346. delete [] peekBuf;
  347. peekBuf = temp;
  348. peekBufMax = peekBufLength+len;
  349. }
  350. memcpy(peekBuf+peekBufLength, data, len);
  351. peekBufLength += len;
  352. }
  353. int SocketCore::gnutlsRecv(char* data, int len) {
  354. int plen = shiftPeekData(data, len);
  355. if(plen < len) {
  356. int ret = gnutls_record_recv(sslSession, data+plen, len-plen);
  357. if(ret < 0) {
  358. throw new DlRetryEx(EX_SOCKET_RECV, gnutls_strerror(ret));
  359. }
  360. return plen+ret;
  361. } else {
  362. return plen;
  363. }
  364. }
  365. int SocketCore::gnutlsPeek(char* data, int len) {
  366. if(peekBufLength >= len) {
  367. memcpy(data, peekBuf, len);
  368. return len;
  369. } else {
  370. memcpy(data, peekBuf, peekBufLength);
  371. int ret = gnutls_record_recv(sslSession, data+peekBufLength, len-peekBufLength);
  372. if(ret < 0) {
  373. throw new DlRetryEx(EX_SOCKET_PEEK, gnutls_strerror(ret));
  374. }
  375. addPeekData(data+peekBufLength, ret);
  376. return peekBufLength;
  377. }
  378. }
  379. #endif // HAVE_LIBGNUTLS
  380. void SocketCore::initiateSecureConnection() {
  381. #ifdef HAVE_LIBSSL
  382. // for SSL
  383. if(!secure) {
  384. sslCtx = SSL_CTX_new(SSLv23_client_method());
  385. if(sslCtx == NULL) {
  386. throw new DlAbortEx(EX_SSL_INIT_FAILURE);
  387. }
  388. SSL_CTX_set_mode(sslCtx, SSL_MODE_AUTO_RETRY);
  389. ssl = SSL_new(sslCtx);
  390. if(ssl == NULL) {
  391. throw new DlAbortEx(EX_SSL_INIT_FAILURE);
  392. }
  393. if(SSL_set_fd(ssl, sockfd) == 0) {
  394. throw new DlAbortEx(EX_SSL_INIT_FAILURE);
  395. }
  396. // TODO handling return value == 0 case required
  397. if(SSL_connect(ssl) <= 0) {
  398. throw new DlAbortEx(EX_SSL_INIT_FAILURE);
  399. }
  400. secure = true;
  401. }
  402. #endif // HAVE_LIBSSL
  403. #ifdef HAVE_LIBGNUTLS
  404. if(!secure) {
  405. const int cert_type_priority[3] = { GNUTLS_CRT_X509,
  406. GNUTLS_CRT_OPENPGP, 0
  407. };
  408. // while we do not support X509 certificate, most web servers require
  409. // X509 stuff.
  410. gnutls_certificate_allocate_credentials (&sslXcred);
  411. gnutls_init(&sslSession, GNUTLS_CLIENT);
  412. gnutls_set_default_priority(sslSession);
  413. gnutls_kx_set_priority(sslSession, cert_type_priority);
  414. // put the x509 credentials to the current session
  415. gnutls_credentials_set(sslSession, GNUTLS_CRD_CERTIFICATE, sslXcred);
  416. gnutls_transport_set_ptr(sslSession, (gnutls_transport_ptr_t)sockfd);
  417. int ret = gnutls_handshake(sslSession);
  418. if(ret < 0) {
  419. throw new DlAbortEx(gnutls_strerror(ret));
  420. }
  421. secure = true;
  422. }
  423. #endif // HAVE_LIBGNUTLS
  424. }