s_socket.c revision 215697
1/* apps/s_socket.c -  socket-related functions used by s_client and s_server */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#include <stdio.h>
60#include <stdlib.h>
61#include <string.h>
62#include <errno.h>
63#include <signal.h>
64
65#ifdef FLAT_INC
66#include "e_os2.h"
67#else
68#include "../e_os2.h"
69#endif
70
71/* With IPv6, it looks like Digital has mixed up the proper order of
72   recursive header file inclusion, resulting in the compiler complaining
73   that u_int isn't defined, but only if _POSIX_C_SOURCE is defined, which
74   is needed to have fileno() declared correctly...  So let's define u_int */
75#if defined(OPENSSL_SYS_VMS_DECC) && !defined(__U_INT)
76#define __U_INT
77typedef unsigned int u_int;
78#endif
79
80#define USE_SOCKETS
81#define NON_MAIN
82#include "apps.h"
83#undef USE_SOCKETS
84#undef NON_MAIN
85#include "s_apps.h"
86#include <openssl/ssl.h>
87
88#ifdef FLAT_INC
89#include "e_os.h"
90#else
91#include "../e_os.h"
92#endif
93
94#ifndef OPENSSL_NO_SOCK
95
96#if defined(OPENSSL_SYS_NETWARE) && defined(NETWARE_BSDSOCK)
97#include "netdb.h"
98#endif
99
100static struct hostent *GetHostByName(char *name);
101#if defined(OPENSSL_SYS_WINDOWS) || (defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK))
102static void ssl_sock_cleanup(void);
103#endif
104static int ssl_sock_init(void);
105static int init_client_ip(int *sock,unsigned char ip[4], int port, int type);
106static int init_server(int *sock, int port, int type);
107static int init_server_long(int *sock, int port,char *ip, int type);
108static int do_accept(int acc_sock, int *sock, char **host);
109static int host_ip(char *str, unsigned char ip[4]);
110
111#ifdef OPENSSL_SYS_WIN16
112#define SOCKET_PROTOCOL	0 /* more microsoft stupidity */
113#else
114#define SOCKET_PROTOCOL	IPPROTO_TCP
115#endif
116
117#if defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK)
118static int wsa_init_done=0;
119#endif
120
121#ifdef OPENSSL_SYS_WINDOWS
122static struct WSAData wsa_state;
123static int wsa_init_done=0;
124
125#ifdef OPENSSL_SYS_WIN16
126static HWND topWnd=0;
127static FARPROC lpTopWndProc=NULL;
128static FARPROC lpTopHookProc=NULL;
129extern HINSTANCE _hInstance;  /* nice global CRT provides */
130
131static LONG FAR PASCAL topHookProc(HWND hwnd, UINT message, WPARAM wParam,
132	     LPARAM lParam)
133	{
134	if (hwnd == topWnd)
135		{
136		switch(message)
137			{
138		case WM_DESTROY:
139		case WM_CLOSE:
140			SetWindowLong(topWnd,GWL_WNDPROC,(LONG)lpTopWndProc);
141			ssl_sock_cleanup();
142			break;
143			}
144		}
145	return CallWindowProc(lpTopWndProc,hwnd,message,wParam,lParam);
146	}
147
148static BOOL CALLBACK enumproc(HWND hwnd,LPARAM lParam)
149	{
150	topWnd=hwnd;
151	return(FALSE);
152	}
153
154#endif /* OPENSSL_SYS_WIN32 */
155#endif /* OPENSSL_SYS_WINDOWS */
156
157#ifdef OPENSSL_SYS_WINDOWS
158static void ssl_sock_cleanup(void)
159	{
160	if (wsa_init_done)
161		{
162		wsa_init_done=0;
163#ifndef OPENSSL_SYS_WINCE
164		WSACancelBlockingCall();
165#endif
166		WSACleanup();
167		}
168	}
169#elif defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK)
170static void sock_cleanup(void)
171    {
172    if (wsa_init_done)
173        {
174        wsa_init_done=0;
175		WSACleanup();
176		}
177	}
178#endif
179
180static int ssl_sock_init(void)
181	{
182#ifdef WATT32
183	extern int _watt_do_exit;
184	_watt_do_exit = 0;
185	if (sock_init())
186		return (0);
187#elif defined(OPENSSL_SYS_WINDOWS)
188	if (!wsa_init_done)
189		{
190		int err;
191
192#ifdef SIGINT
193		signal(SIGINT,(void (*)(int))ssl_sock_cleanup);
194#endif
195		wsa_init_done=1;
196		memset(&wsa_state,0,sizeof(wsa_state));
197		if (WSAStartup(0x0101,&wsa_state)!=0)
198			{
199			err=WSAGetLastError();
200			BIO_printf(bio_err,"unable to start WINSOCK, error code=%d\n",err);
201			return(0);
202			}
203
204#ifdef OPENSSL_SYS_WIN16
205		EnumTaskWindows(GetCurrentTask(),enumproc,0L);
206		lpTopWndProc=(FARPROC)GetWindowLong(topWnd,GWL_WNDPROC);
207		lpTopHookProc=MakeProcInstance((FARPROC)topHookProc,_hInstance);
208
209		SetWindowLong(topWnd,GWL_WNDPROC,(LONG)lpTopHookProc);
210#endif /* OPENSSL_SYS_WIN16 */
211		}
212#elif defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK)
213   WORD wVerReq;
214   WSADATA wsaData;
215   int err;
216
217   if (!wsa_init_done)
218      {
219
220# ifdef SIGINT
221      signal(SIGINT,(void (*)(int))sock_cleanup);
222# endif
223
224      wsa_init_done=1;
225      wVerReq = MAKEWORD( 2, 0 );
226      err = WSAStartup(wVerReq,&wsaData);
227      if (err != 0)
228         {
229         BIO_printf(bio_err,"unable to start WINSOCK2, error code=%d\n",err);
230         return(0);
231         }
232      }
233#endif /* OPENSSL_SYS_WINDOWS */
234	return(1);
235	}
236
237int init_client(int *sock, char *host, int port, int type)
238	{
239	unsigned char ip[4];
240	short p=0;
241
242	if (!host_ip(host,&(ip[0])))
243		{
244		return(0);
245		}
246	if (p != 0) port=p;
247	return(init_client_ip(sock,ip,port,type));
248	}
249
250static int init_client_ip(int *sock, unsigned char ip[4], int port, int type)
251	{
252	unsigned long addr;
253	struct sockaddr_in them;
254	int s,i;
255
256	if (!ssl_sock_init()) return(0);
257
258	memset((char *)&them,0,sizeof(them));
259	them.sin_family=AF_INET;
260	them.sin_port=htons((unsigned short)port);
261	addr=(unsigned long)
262		((unsigned long)ip[0]<<24L)|
263		((unsigned long)ip[1]<<16L)|
264		((unsigned long)ip[2]<< 8L)|
265		((unsigned long)ip[3]);
266	them.sin_addr.s_addr=htonl(addr);
267
268	if (type == SOCK_STREAM)
269		s=socket(AF_INET,SOCK_STREAM,SOCKET_PROTOCOL);
270	else /* ( type == SOCK_DGRAM) */
271		s=socket(AF_INET,SOCK_DGRAM,IPPROTO_UDP);
272
273	if (s == INVALID_SOCKET) { perror("socket"); return(0); }
274
275#ifndef OPENSSL_SYS_MPE
276	if (type == SOCK_STREAM)
277		{
278		i=0;
279		i=setsockopt(s,SOL_SOCKET,SO_KEEPALIVE,(char *)&i,sizeof(i));
280		if (i < 0) { perror("keepalive"); return(0); }
281		}
282#endif
283
284	if (connect(s,(struct sockaddr *)&them,sizeof(them)) == -1)
285		{ close(s); perror("connect"); return(0); }
286	*sock=s;
287	return(1);
288	}
289
290int do_server(int port, int type, int *ret, int (*cb)(char *hostname, int s, unsigned char *context), unsigned char *context)
291	{
292	int sock;
293	char *name = NULL;
294	int accept_socket;
295	int i;
296
297	if (!init_server(&accept_socket,port,type)) return(0);
298
299	if (ret != NULL)
300		{
301		*ret=accept_socket;
302		/* return(1);*/
303		}
304  	for (;;)
305  		{
306		if (type==SOCK_STREAM)
307			{
308			if (do_accept(accept_socket,&sock,&name) == 0)
309				{
310				SHUTDOWN(accept_socket);
311				return(0);
312				}
313			}
314		else
315			sock = accept_socket;
316		i=(*cb)(name,sock, context);
317		if (name != NULL) OPENSSL_free(name);
318		if (type==SOCK_STREAM)
319			SHUTDOWN2(sock);
320		if (i < 0)
321			{
322			SHUTDOWN2(accept_socket);
323			return(i);
324			}
325		}
326	}
327
328static int init_server_long(int *sock, int port, char *ip, int type)
329	{
330	int ret=0;
331	struct sockaddr_in server;
332	int s= -1;
333
334	if (!ssl_sock_init()) return(0);
335
336	memset((char *)&server,0,sizeof(server));
337	server.sin_family=AF_INET;
338	server.sin_port=htons((unsigned short)port);
339	if (ip == NULL)
340		server.sin_addr.s_addr=INADDR_ANY;
341	else
342/* Added for T3E, address-of fails on bit field (beckman@acl.lanl.gov) */
343#ifndef BIT_FIELD_LIMITS
344		memcpy(&server.sin_addr.s_addr,ip,4);
345#else
346		memcpy(&server.sin_addr,ip,4);
347#endif
348
349		if (type == SOCK_STREAM)
350			s=socket(AF_INET,SOCK_STREAM,SOCKET_PROTOCOL);
351		else /* type == SOCK_DGRAM */
352			s=socket(AF_INET, SOCK_DGRAM,IPPROTO_UDP);
353
354	if (s == INVALID_SOCKET) goto err;
355#if defined SOL_SOCKET && defined SO_REUSEADDR
356		{
357		int j = 1;
358		setsockopt(s, SOL_SOCKET, SO_REUSEADDR,
359			   (void *) &j, sizeof j);
360		}
361#endif
362	if (bind(s,(struct sockaddr *)&server,sizeof(server)) == -1)
363		{
364#ifndef OPENSSL_SYS_WINDOWS
365		perror("bind");
366#endif
367		goto err;
368		}
369	/* Make it 128 for linux */
370	if (type==SOCK_STREAM && listen(s,128) == -1) goto err;
371	*sock=s;
372	ret=1;
373err:
374	if ((ret == 0) && (s != -1))
375		{
376		SHUTDOWN(s);
377		}
378	return(ret);
379	}
380
381static int init_server(int *sock, int port, int type)
382	{
383	return(init_server_long(sock, port, NULL, type));
384	}
385
386static int do_accept(int acc_sock, int *sock, char **host)
387	{
388	int ret;
389	struct hostent *h1,*h2;
390	static struct sockaddr_in from;
391	int len;
392/*	struct linger ling; */
393
394	if (!ssl_sock_init()) return(0);
395
396#ifndef OPENSSL_SYS_WINDOWS
397redoit:
398#endif
399
400	memset((char *)&from,0,sizeof(from));
401	len=sizeof(from);
402	/* Note: under VMS with SOCKETSHR the fourth parameter is currently
403	 * of type (int *) whereas under other systems it is (void *) if
404	 * you don't have a cast it will choke the compiler: if you do
405	 * have a cast then you can either go for (int *) or (void *).
406	 */
407	ret=accept(acc_sock,(struct sockaddr *)&from,(void *)&len);
408	if (ret == INVALID_SOCKET)
409		{
410#if defined(OPENSSL_SYS_WINDOWS) || (defined(OPENSSL_SYS_NETWARE) && !defined(NETWARE_BSDSOCK))
411		int i;
412		i=WSAGetLastError();
413		BIO_printf(bio_err,"accept error %d\n",i);
414#else
415		if (errno == EINTR)
416			{
417			/*check_timeout(); */
418			goto redoit;
419			}
420		fprintf(stderr,"errno=%d ",errno);
421		perror("accept");
422#endif
423		return(0);
424		}
425
426/*
427	ling.l_onoff=1;
428	ling.l_linger=0;
429	i=setsockopt(ret,SOL_SOCKET,SO_LINGER,(char *)&ling,sizeof(ling));
430	if (i < 0) { perror("linger"); return(0); }
431	i=0;
432	i=setsockopt(ret,SOL_SOCKET,SO_KEEPALIVE,(char *)&i,sizeof(i));
433	if (i < 0) { perror("keepalive"); return(0); }
434*/
435
436	if (host == NULL) goto end;
437#ifndef BIT_FIELD_LIMITS
438	/* I should use WSAAsyncGetHostByName() under windows */
439	h1=gethostbyaddr((char *)&from.sin_addr.s_addr,
440		sizeof(from.sin_addr.s_addr),AF_INET);
441#else
442	h1=gethostbyaddr((char *)&from.sin_addr,
443		sizeof(struct in_addr),AF_INET);
444#endif
445	if (h1 == NULL)
446		{
447		BIO_printf(bio_err,"bad gethostbyaddr\n");
448		*host=NULL;
449		/* return(0); */
450		}
451	else
452		{
453		if ((*host=(char *)OPENSSL_malloc(strlen(h1->h_name)+1)) == NULL)
454			{
455			perror("OPENSSL_malloc");
456			return(0);
457			}
458		BUF_strlcpy(*host,h1->h_name,strlen(h1->h_name)+1);
459
460		h2=GetHostByName(*host);
461		if (h2 == NULL)
462			{
463			BIO_printf(bio_err,"gethostbyname failure\n");
464			return(0);
465			}
466		if (h2->h_addrtype != AF_INET)
467			{
468			BIO_printf(bio_err,"gethostbyname addr is not AF_INET\n");
469			return(0);
470			}
471		}
472end:
473	*sock=ret;
474	return(1);
475	}
476
477int extract_host_port(char *str, char **host_ptr, unsigned char *ip,
478	     short *port_ptr)
479	{
480	char *h,*p;
481
482	h=str;
483	p=strchr(str,':');
484	if (p == NULL)
485		{
486		BIO_printf(bio_err,"no port defined\n");
487		return(0);
488		}
489	*(p++)='\0';
490
491	if ((ip != NULL) && !host_ip(str,ip))
492		goto err;
493	if (host_ptr != NULL) *host_ptr=h;
494
495	if (!extract_port(p,port_ptr))
496		goto err;
497	return(1);
498err:
499	return(0);
500	}
501
502static int host_ip(char *str, unsigned char ip[4])
503	{
504	unsigned int in[4];
505	int i;
506
507	if (sscanf(str,"%u.%u.%u.%u",&(in[0]),&(in[1]),&(in[2]),&(in[3])) == 4)
508		{
509		for (i=0; i<4; i++)
510			if (in[i] > 255)
511				{
512				BIO_printf(bio_err,"invalid IP address\n");
513				goto err;
514				}
515		ip[0]=in[0];
516		ip[1]=in[1];
517		ip[2]=in[2];
518		ip[3]=in[3];
519		}
520	else
521		{ /* do a gethostbyname */
522		struct hostent *he;
523
524		if (!ssl_sock_init()) return(0);
525
526		he=GetHostByName(str);
527		if (he == NULL)
528			{
529			BIO_printf(bio_err,"gethostbyname failure\n");
530			goto err;
531			}
532		/* cast to short because of win16 winsock definition */
533		if ((short)he->h_addrtype != AF_INET)
534			{
535			BIO_printf(bio_err,"gethostbyname addr is not AF_INET\n");
536			return(0);
537			}
538		ip[0]=he->h_addr_list[0][0];
539		ip[1]=he->h_addr_list[0][1];
540		ip[2]=he->h_addr_list[0][2];
541		ip[3]=he->h_addr_list[0][3];
542		}
543	return(1);
544err:
545	return(0);
546	}
547
548int extract_port(char *str, short *port_ptr)
549	{
550	int i;
551	struct servent *s;
552
553	i=atoi(str);
554	if (i != 0)
555		*port_ptr=(unsigned short)i;
556	else
557		{
558		s=getservbyname(str,"tcp");
559		if (s == NULL)
560			{
561			BIO_printf(bio_err,"getservbyname failure for %s\n",str);
562			return(0);
563			}
564		*port_ptr=ntohs((unsigned short)s->s_port);
565		}
566	return(1);
567	}
568
569#define GHBN_NUM	4
570static struct ghbn_cache_st
571	{
572	char name[128];
573	struct hostent ent;
574	unsigned long order;
575	} ghbn_cache[GHBN_NUM];
576
577static unsigned long ghbn_hits=0L;
578static unsigned long ghbn_miss=0L;
579
580static struct hostent *GetHostByName(char *name)
581	{
582	struct hostent *ret;
583	int i,lowi=0;
584	unsigned long low= (unsigned long)-1;
585
586	for (i=0; i<GHBN_NUM; i++)
587		{
588		if (low > ghbn_cache[i].order)
589			{
590			low=ghbn_cache[i].order;
591			lowi=i;
592			}
593		if (ghbn_cache[i].order > 0)
594			{
595			if (strncmp(name,ghbn_cache[i].name,128) == 0)
596				break;
597			}
598		}
599	if (i == GHBN_NUM) /* no hit*/
600		{
601		ghbn_miss++;
602		ret=gethostbyname(name);
603		if (ret == NULL) return(NULL);
604		/* else add to cache */
605		if(strlen(name) < sizeof ghbn_cache[0].name)
606			{
607			strcpy(ghbn_cache[lowi].name,name);
608			memcpy((char *)&(ghbn_cache[lowi].ent),ret,sizeof(struct hostent));
609			ghbn_cache[lowi].order=ghbn_miss+ghbn_hits;
610			}
611		return(ret);
612		}
613	else
614		{
615		ghbn_hits++;
616		ret= &(ghbn_cache[i].ent);
617		ghbn_cache[i].order=ghbn_miss+ghbn_hits;
618		return(ret);
619		}
620	}
621
622#endif
623