2015-01-14 12:53:33 -06:00
|
|
|
/* server.c
|
2014-06-24 16:48:08 -05:00
|
|
|
*
|
2016-07-19 15:44:02 -05:00
|
|
|
* Copyright (C) 2014-2016 wolfSSL Inc.
|
2014-06-24 16:48:08 -05:00
|
|
|
*
|
|
|
|
* This file is part of wolfSSH.
|
|
|
|
*
|
|
|
|
* wolfSSH is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
2016-07-19 15:44:02 -05:00
|
|
|
* the Free Software Foundation; either version 3 of the License, or
|
2014-06-24 16:48:08 -05:00
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
|
|
|
* wolfSSH is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
2016-07-19 15:44:02 -05:00
|
|
|
* along with wolfSSH. If not, see <http://www.gnu.org/licenses/>.
|
2014-06-24 16:48:08 -05:00
|
|
|
*/
|
|
|
|
|
|
|
|
|
2014-07-01 19:27:47 -05:00
|
|
|
#include <ctype.h>
|
2014-07-03 13:08:34 -05:00
|
|
|
#include <string.h>
|
|
|
|
#include <unistd.h>
|
|
|
|
#include <netdb.h>
|
|
|
|
#include <netinet/in.h>
|
|
|
|
#include <netinet/tcp.h>
|
|
|
|
#include <arpa/inet.h>
|
|
|
|
#include <sys/ioctl.h>
|
|
|
|
#include <sys/time.h>
|
|
|
|
#include <sys/socket.h>
|
2014-06-24 16:48:08 -05:00
|
|
|
#include <stdio.h>
|
2014-07-03 13:08:34 -05:00
|
|
|
#include <pthread.h>
|
2014-06-24 16:48:08 -05:00
|
|
|
#include <wolfssh/ssh.h>
|
2014-08-14 13:46:23 -05:00
|
|
|
#ifndef SO_NOSIGPIPE
|
|
|
|
#include <signal.h>
|
|
|
|
#endif
|
2014-06-24 16:48:08 -05:00
|
|
|
|
|
|
|
|
2014-07-01 19:27:47 -05:00
|
|
|
typedef int SOCKET_T;
|
|
|
|
#ifdef TEST_IPV6
|
|
|
|
typedef struct sockaddr_in6 SOCKADDR_IN_T;
|
|
|
|
#define AF_INET_V AF_INET6
|
|
|
|
static const char* wolfsshIP = "::1";
|
|
|
|
#else
|
|
|
|
typedef struct sockaddr_in SOCKADDR_IN_T;
|
|
|
|
#define AF_INET_V AF_INET
|
|
|
|
static const char* wolfsshIP = "127.0.0.1";
|
|
|
|
#endif
|
2014-07-28 09:12:54 -05:00
|
|
|
#define SERVER_PORT_NUMBER 22222
|
2014-08-15 16:20:42 -05:00
|
|
|
#define SCRATCH_BUFFER_SIZE 1200
|
2014-07-01 19:27:47 -05:00
|
|
|
|
|
|
|
#if defined(__MACH__) || defined(USE_WINDOWS_API)
|
|
|
|
#ifndef _SOCKLEN_T
|
|
|
|
typedef int socklen_t;
|
|
|
|
#endif
|
|
|
|
#endif
|
|
|
|
/* HPUX doesn't use socklent_t for third parameter to accept, unless
|
|
|
|
_XOPEN_SOURCE_EXTENDED is defined */
|
|
|
|
#if !defined(__hpux__) && !defined(CYASSL_MDK_ARM) && !defined(CYASSL_IAR_ARM)
|
2014-07-03 13:08:34 -05:00
|
|
|
typedef socklen_t SOCKLEN_T;
|
2014-07-01 19:27:47 -05:00
|
|
|
#else
|
|
|
|
#if defined _XOPEN_SOURCE_EXTENDED
|
2014-07-03 13:08:34 -05:00
|
|
|
typedef socklen_t SOCKLEN_T;
|
2014-07-01 19:27:47 -05:00
|
|
|
#else
|
2014-07-03 13:08:34 -05:00
|
|
|
typedef int SOCKLEN_T;
|
2014-07-01 19:27:47 -05:00
|
|
|
#endif
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
2014-07-03 13:08:34 -05:00
|
|
|
#if defined(_POSIX_THREADS) && !defined(__MINGW32__)
|
|
|
|
typedef void* THREAD_RETURN;
|
|
|
|
typedef pthread_t THREAD_TYPE;
|
|
|
|
#define CYASSL_THREAD
|
|
|
|
#define INFINITE -1
|
|
|
|
#define WAIT_OBJECT_0 0L
|
|
|
|
#elif defined(CYASSL_MDK_ARM)
|
|
|
|
typedef unsigned int THREAD_RETURN;
|
|
|
|
typedef int THREAD_TYPE;
|
|
|
|
#define CYASSL_THREAD
|
|
|
|
#else
|
|
|
|
typedef unsigned int THREAD_RETURN;
|
|
|
|
typedef intptr_t THREAD_TYPE;
|
|
|
|
#define CYASSL_THREAD __stdcall
|
|
|
|
#endif
|
|
|
|
|
2016-08-25 15:15:24 -05:00
|
|
|
#ifdef __GNUC__
|
|
|
|
#define NORETURN __attribute__((noreturn))
|
|
|
|
#else
|
|
|
|
#define NORETURN
|
|
|
|
#endif
|
|
|
|
|
2014-07-03 13:08:34 -05:00
|
|
|
|
|
|
|
typedef struct {
|
|
|
|
SOCKET_T clientFd;
|
|
|
|
} thread_ctx_t;
|
|
|
|
|
|
|
|
|
2016-08-25 15:15:24 -05:00
|
|
|
static INLINE NORETURN void err_sys(const char* msg)
|
2014-07-01 19:27:47 -05:00
|
|
|
{
|
|
|
|
printf("server error: %s\n", msg);
|
2016-08-25 15:15:24 -05:00
|
|
|
exit(EXIT_FAILURE);
|
2014-07-01 19:27:47 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
|
2016-04-01 16:40:22 -05:00
|
|
|
static INLINE void build_addr(SOCKADDR_IN_T* addr, const char* peer,
|
2014-07-03 13:08:34 -05:00
|
|
|
uint16_t port)
|
2014-07-01 19:27:47 -05:00
|
|
|
{
|
|
|
|
int useLookup = 0;
|
|
|
|
(void)useLookup;
|
|
|
|
|
|
|
|
memset(addr, 0, sizeof(SOCKADDR_IN_T));
|
|
|
|
|
|
|
|
#ifndef TEST_IPV6
|
|
|
|
/* peer could be in human readable form */
|
|
|
|
if ( (peer != INADDR_ANY) && isalpha((int)peer[0])) {
|
|
|
|
#ifdef CYASSL_MDK_ARM
|
|
|
|
int err;
|
|
|
|
struct hostent* entry = gethostbyname(peer, &err);
|
|
|
|
#else
|
|
|
|
struct hostent* entry = gethostbyname(peer);
|
|
|
|
#endif
|
|
|
|
|
|
|
|
if (entry) {
|
|
|
|
memcpy(&addr->sin_addr.s_addr, entry->h_addr_list[0],
|
|
|
|
entry->h_length);
|
|
|
|
useLookup = 1;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
err_sys("no entry for host");
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifndef TEST_IPV6
|
|
|
|
#if defined(CYASSL_MDK_ARM)
|
|
|
|
addr->sin_family = PF_INET;
|
|
|
|
#else
|
|
|
|
addr->sin_family = AF_INET_V;
|
|
|
|
#endif
|
|
|
|
addr->sin_port = htons(port);
|
|
|
|
if (peer == INADDR_ANY)
|
|
|
|
addr->sin_addr.s_addr = INADDR_ANY;
|
|
|
|
else {
|
|
|
|
if (!useLookup)
|
|
|
|
addr->sin_addr.s_addr = inet_addr(peer);
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
addr->sin6_family = AF_INET_V;
|
|
|
|
addr->sin6_port = htons(port);
|
|
|
|
if (peer == INADDR_ANY)
|
|
|
|
addr->sin6_addr = in6addr_any;
|
|
|
|
else {
|
|
|
|
#ifdef HAVE_GETADDRINFO
|
|
|
|
struct addrinfo hints;
|
|
|
|
struct addrinfo* answer = NULL;
|
|
|
|
int ret;
|
|
|
|
char strPort[80];
|
|
|
|
|
|
|
|
memset(&hints, 0, sizeof(hints));
|
|
|
|
|
|
|
|
hints.ai_family = AF_INET_V;
|
|
|
|
hints.ai_socktype = udp ? SOCK_DGRAM : SOCK_STREAM;
|
|
|
|
hints.ai_protocol = udp ? IPPROTO_UDP : IPPROTO_TCP;
|
|
|
|
|
|
|
|
SNPRINTF(strPort, sizeof(strPort), "%d", port);
|
|
|
|
strPort[79] = '\0';
|
|
|
|
|
|
|
|
ret = getaddrinfo(peer, strPort, &hints, &answer);
|
|
|
|
if (ret < 0 || answer == NULL)
|
|
|
|
err_sys("getaddrinfo failed");
|
|
|
|
|
|
|
|
memcpy(addr, answer->ai_addr, answer->ai_addrlen);
|
|
|
|
freeaddrinfo(answer);
|
|
|
|
#else
|
|
|
|
printf("no ipv6 getaddrinfo, loopback only tests/examples\n");
|
|
|
|
addr->sin6_addr = in6addr_loopback;
|
|
|
|
#endif
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2016-04-01 16:40:22 -05:00
|
|
|
static INLINE void tcp_socket(SOCKET_T* sockFd)
|
2014-07-01 19:27:47 -05:00
|
|
|
{
|
2014-07-03 13:08:34 -05:00
|
|
|
*sockFd = socket(AF_INET_V, SOCK_STREAM, 0);
|
2014-07-01 19:27:47 -05:00
|
|
|
|
|
|
|
#ifdef USE_WINDOWS_API
|
2014-07-03 13:08:34 -05:00
|
|
|
if (*sockFd == INVALID_SOCKET)
|
2014-07-01 19:27:47 -05:00
|
|
|
err_sys("socket failed\n");
|
|
|
|
#else
|
2014-07-03 13:08:34 -05:00
|
|
|
if (*sockFd < 0)
|
2014-07-01 19:27:47 -05:00
|
|
|
err_sys("socket failed\n");
|
|
|
|
#endif
|
|
|
|
|
2015-01-14 12:53:33 -06:00
|
|
|
#ifndef USE_WINDOWS_API
|
2014-07-01 19:27:47 -05:00
|
|
|
#ifdef SO_NOSIGPIPE
|
|
|
|
{
|
|
|
|
int on = 1;
|
|
|
|
socklen_t len = sizeof(on);
|
2014-07-03 13:08:34 -05:00
|
|
|
int res = setsockopt(*sockFd, SOL_SOCKET, SO_NOSIGPIPE, &on, len);
|
2014-07-01 19:27:47 -05:00
|
|
|
if (res < 0)
|
|
|
|
err_sys("setsockopt SO_NOSIGPIPE failed\n");
|
|
|
|
}
|
|
|
|
#elif defined(CYASSL_MDK_ARM)
|
|
|
|
/* nothing to define */
|
|
|
|
#else /* no S_NOSIGPIPE */
|
|
|
|
signal(SIGPIPE, SIG_IGN);
|
|
|
|
#endif /* S_NOSIGPIPE */
|
|
|
|
|
|
|
|
#if defined(TCP_NODELAY)
|
|
|
|
{
|
|
|
|
int on = 1;
|
|
|
|
socklen_t len = sizeof(on);
|
2014-07-03 13:08:34 -05:00
|
|
|
int res = setsockopt(*sockFd, IPPROTO_TCP, TCP_NODELAY, &on, len);
|
2014-07-01 19:27:47 -05:00
|
|
|
if (res < 0)
|
|
|
|
err_sys("setsockopt TCP_NODELAY failed\n");
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
#endif /* USE_WINDOWS_API */
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2016-04-01 16:40:22 -05:00
|
|
|
static INLINE void tcp_bind(SOCKET_T* sockFd, uint16_t port, int useAnyAddr)
|
2014-07-01 19:27:47 -05:00
|
|
|
{
|
|
|
|
SOCKADDR_IN_T addr;
|
|
|
|
|
|
|
|
/* don't use INADDR_ANY by default, firewall may block, make user switch
|
|
|
|
on */
|
2014-07-03 13:08:34 -05:00
|
|
|
build_addr(&addr, (useAnyAddr ? INADDR_ANY : wolfsshIP), port);
|
|
|
|
tcp_socket(sockFd);
|
2014-07-01 19:27:47 -05:00
|
|
|
|
|
|
|
#if !defined(USE_WINDOWS_API) && !defined(CYASSL_MDK_ARM)
|
|
|
|
{
|
|
|
|
int res, on = 1;
|
|
|
|
socklen_t len = sizeof(on);
|
2014-07-03 13:08:34 -05:00
|
|
|
res = setsockopt(*sockFd, SOL_SOCKET, SO_REUSEADDR, &on, len);
|
2014-07-01 19:27:47 -05:00
|
|
|
if (res < 0)
|
|
|
|
err_sys("setsockopt SO_REUSEADDR failed\n");
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
|
2014-07-03 13:08:34 -05:00
|
|
|
if (bind(*sockFd, (const struct sockaddr*)&addr, sizeof(addr)) != 0)
|
2014-07-01 19:27:47 -05:00
|
|
|
err_sys("tcp bind failed");
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2014-07-03 13:08:34 -05:00
|
|
|
static THREAD_RETURN CYASSL_THREAD server_worker(void* vArgs)
|
2014-07-01 19:27:47 -05:00
|
|
|
{
|
2014-07-14 13:09:50 -05:00
|
|
|
WOLFSSH* ssh = (WOLFSSH*)vArgs;
|
|
|
|
SOCKET_T clientFd = wolfSSH_get_fd(ssh);
|
2015-01-07 15:49:01 -06:00
|
|
|
const char* msgA = "Who's there?!\r\n";
|
|
|
|
const char* msgB = "Go away!\r\n";
|
2014-07-01 19:27:47 -05:00
|
|
|
|
2015-01-14 12:53:33 -06:00
|
|
|
char rxBuf[4096];
|
|
|
|
int rxBufSz;
|
|
|
|
|
2014-07-14 13:09:50 -05:00
|
|
|
if (wolfSSH_accept(ssh) == WS_SUCCESS) {
|
2015-01-14 12:53:33 -06:00
|
|
|
|
2015-01-07 15:49:01 -06:00
|
|
|
wolfSSH_stream_send(ssh, (uint8_t*)msgA, (uint32_t)strlen(msgA));
|
2015-01-14 12:53:33 -06:00
|
|
|
|
|
|
|
rxBufSz = wolfSSH_stream_read(ssh, (uint8_t*)rxBuf, sizeof(rxBuf));
|
|
|
|
if (rxBufSz > 0) {
|
|
|
|
rxBuf[rxBufSz] = 0;
|
|
|
|
printf("client sent %d bytes\n%s", rxBufSz, rxBuf);
|
|
|
|
}
|
|
|
|
else
|
|
|
|
printf("wolfSSH_stream_read returned %d\n", rxBufSz);
|
|
|
|
|
2015-01-07 15:49:01 -06:00
|
|
|
wolfSSH_stream_send(ssh, (uint8_t*)msgB, (uint32_t)strlen(msgB));
|
2014-07-14 13:09:50 -05:00
|
|
|
}
|
2014-07-03 13:08:34 -05:00
|
|
|
close(clientFd);
|
2014-07-14 13:09:50 -05:00
|
|
|
wolfSSH_free(ssh);
|
2014-07-01 19:27:47 -05:00
|
|
|
|
2014-07-03 13:08:34 -05:00
|
|
|
return 0;
|
2014-07-01 19:27:47 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
|
2014-08-15 16:20:42 -05:00
|
|
|
static int load_file(const char* fileName, uint8_t* buf, uint32_t bufSz)
|
|
|
|
{
|
|
|
|
FILE* file;
|
|
|
|
uint32_t fileSz;
|
|
|
|
uint32_t readSz;
|
|
|
|
|
|
|
|
if (fileName == NULL) return 0;
|
|
|
|
|
|
|
|
file = fopen(fileName, "rb");
|
|
|
|
if (file == NULL) return 0;
|
|
|
|
fseek(file, 0, SEEK_END);
|
|
|
|
fileSz = (uint32_t)ftell(file);
|
|
|
|
rewind(file);
|
|
|
|
|
|
|
|
if (fileSz > bufSz) {
|
|
|
|
fclose(file);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
readSz = (uint32_t)fread(buf, 1, fileSz, file);
|
|
|
|
if (readSz < fileSz) {
|
|
|
|
fclose(file);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
return fileSz;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2014-06-24 16:48:08 -05:00
|
|
|
int main(void)
|
|
|
|
{
|
2014-07-14 13:09:50 -05:00
|
|
|
WOLFSSH_CTX* ctx = NULL;
|
2014-07-03 13:08:34 -05:00
|
|
|
SOCKET_T listenFd = 0;
|
2014-07-01 19:27:47 -05:00
|
|
|
|
2014-06-24 16:48:08 -05:00
|
|
|
#ifdef DEBUG_WOLFSSH
|
|
|
|
wolfSSH_Debugging_ON();
|
|
|
|
#endif
|
2014-07-03 13:08:34 -05:00
|
|
|
|
2014-06-24 16:48:08 -05:00
|
|
|
if (wolfSSH_Init() != WS_SUCCESS) {
|
|
|
|
fprintf(stderr, "Couldn't initialize wolfSSH.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
|
2014-08-15 13:37:00 -05:00
|
|
|
ctx = wolfSSH_CTX_new(WOLFSSH_ENDPOINT_SERVER, NULL);
|
2014-07-14 13:09:50 -05:00
|
|
|
if (ctx == NULL) {
|
|
|
|
fprintf(stderr, "Couldn't allocate SSH CTX data.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
|
2014-08-15 16:20:42 -05:00
|
|
|
{
|
|
|
|
uint8_t buf[SCRATCH_BUFFER_SIZE];
|
|
|
|
uint32_t bufSz;
|
|
|
|
|
|
|
|
bufSz = load_file("./certs/server-cert.der", buf, SCRATCH_BUFFER_SIZE);
|
|
|
|
if (bufSz == 0) {
|
|
|
|
fprintf(stderr, "Couldn't load certificate file.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
if (wolfSSH_CTX_UseCert_buffer(ctx,
|
|
|
|
buf, bufSz, WOLFSSH_FORMAT_ASN1) < 0) {
|
|
|
|
fprintf(stderr, "Couldn't use certificate buffer.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
|
|
|
|
bufSz = load_file("./certs/server-key.der", buf, SCRATCH_BUFFER_SIZE);
|
|
|
|
if (bufSz == 0) {
|
|
|
|
fprintf(stderr, "Couldn't load key file.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
if (wolfSSH_CTX_UsePrivateKey_buffer(ctx,
|
|
|
|
buf, bufSz, WOLFSSH_FORMAT_ASN1) < 0) {
|
|
|
|
fprintf(stderr, "Couldn't use key buffer.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2014-07-28 09:12:54 -05:00
|
|
|
tcp_bind(&listenFd, SERVER_PORT_NUMBER, 0);
|
2014-07-03 13:08:34 -05:00
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
SOCKET_T clientFd = 0;
|
|
|
|
SOCKADDR_IN_T clientAddr;
|
|
|
|
SOCKLEN_T clientAddrSz = sizeof(clientAddr);
|
|
|
|
THREAD_TYPE thread;
|
2014-07-14 13:09:50 -05:00
|
|
|
WOLFSSH* ssh;
|
2014-07-03 13:08:34 -05:00
|
|
|
|
2014-07-14 13:09:50 -05:00
|
|
|
ssh = wolfSSH_new(ctx);
|
|
|
|
if (ssh == NULL) {
|
|
|
|
fprintf(stderr, "Couldn't allocate SSH data.\n");
|
2014-07-03 13:08:34 -05:00
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (listen(listenFd, 5) != 0)
|
|
|
|
err_sys("tcp listen failed");
|
|
|
|
|
|
|
|
clientFd = accept(listenFd, (struct sockaddr*)&clientAddr,
|
|
|
|
&clientAddrSz);
|
|
|
|
if (clientFd == -1)
|
|
|
|
err_sys("tcp accept failed");
|
|
|
|
|
2014-07-14 13:09:50 -05:00
|
|
|
wolfSSH_set_fd(ssh, clientFd);
|
2014-07-03 13:08:34 -05:00
|
|
|
|
2014-07-14 13:09:50 -05:00
|
|
|
pthread_create(&thread, 0, server_worker, ssh);
|
2014-07-03 13:08:34 -05:00
|
|
|
pthread_detach(thread);
|
|
|
|
}
|
2014-07-01 19:27:47 -05:00
|
|
|
|
2014-06-24 16:48:08 -05:00
|
|
|
if (wolfSSH_Cleanup() != WS_SUCCESS) {
|
|
|
|
fprintf(stderr, "Couldn't clean up wolfSSH.\n");
|
|
|
|
exit(EXIT_FAILURE);
|
|
|
|
}
|
2014-07-01 19:27:47 -05:00
|
|
|
|
|
|
|
return 0;
|
2014-06-24 16:48:08 -05:00
|
|
|
}
|
|
|
|
|