diff options
author | June McEnroe <june@causal.agency> | 2019-10-19 21:31:11 -0400 |
---|---|---|
committer | June McEnroe <june@causal.agency> | 2019-10-19 21:31:11 -0400 |
commit | 2b9244fd6b80e6bd8472fe805ce6cf734754ce31 (patch) | |
tree | ba8df5bf168e90dd1c817238ba87a1a2c09bd9b2 /listen.c | |
parent | Bind to all available addresses (diff) | |
download | pounce-2b9244fd6b80e6bd8472fe805ce6cf734754ce31.tar.gz pounce-2b9244fd6b80e6bd8472fe805ce6cf734754ce31.zip |
Move listen code to listen.c
Diffstat (limited to 'listen.c')
-rw-r--r-- | listen.c | 105 |
1 files changed, 105 insertions, 0 deletions
diff --git a/listen.c b/listen.c new file mode 100644 index 0000000..4ecf5d3 --- /dev/null +++ b/listen.c @@ -0,0 +1,105 @@ +/* Copyright (C) 2019 C. McEnroe <june@causal.agency> + * + * This program is free software: you can redistribute it and/or modify + * it under the terms of the GNU Affero General Public License as published by + * the Free Software Foundation, either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU Affero General Public License for more details. + * + * You should have received a copy of the GNU Affero General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + */ + +#include <err.h> +#include <netdb.h> +#include <netinet/in.h> +#include <poll.h> +#include <stdlib.h> +#include <sys/socket.h> +#include <sysexits.h> +#include <tls.h> +#include <unistd.h> + +#include "bouncer.h" + +static struct tls *server; + +void listenConfig(const char *cert, const char *priv) { + struct tls_config *config = tls_config_new(); + if (!config) errx(EX_SOFTWARE, "tls_config_new"); + + int error = tls_config_set_keypair_file(config, cert, priv); + if (error) { + errx( + EX_CONFIG, "tls_config_set_keypair_file: %s", + tls_config_error(config) + ); + } + + server = tls_server(); + if (!server) errx(EX_SOFTWARE, "tls_server"); + + error = tls_configure(server, config); + if (error) errx(EX_SOFTWARE, "tls_configure: %s", tls_error(server)); + tls_config_free(config); +} + +size_t +listenBind( + struct pollfd fds[], size_t cap, + const char *host, const char *port +) { + struct addrinfo *head; + struct addrinfo hints = { + .ai_family = AF_UNSPEC, + .ai_socktype = SOCK_STREAM, + .ai_protocol = IPPROTO_TCP, + }; + int error = getaddrinfo(host, port, &hints, &head); + if (error) errx(EX_NOHOST, "%s:%s: %s", host, port, gai_strerror(error)); + + size_t len = 0; + for (struct addrinfo *ai = head; ai && len < cap; ai = ai->ai_next) { + int sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol); + if (sock < 0) err(EX_OSERR, "socket"); + + error = bind(sock, ai->ai_addr, ai->ai_addrlen); + if (error) { + warn("%s:%s", host, port); + close(sock); + continue; + } + + error = listen(sock, 1); + if (error) err(EX_IOERR, "listen"); + + fds[len].fd = sock; + fds[len].events = POLLIN; + len++; + } + freeaddrinfo(head); + + if (!len) errx(EX_UNAVAILABLE, "could not bind any sockets"); + return len; +} + +struct tls *listenAccept(struct pollfd *poll, int fd) { + int sock = accept(fd, NULL, NULL); + if (sock < 0) err(EX_IOERR, "accept"); + + int yes = 1; + int error = setsockopt(sock, SOL_SOCKET, SO_NOSIGPIPE, &yes, sizeof(yes)); + if (error) err(EX_OSERR, "setsockopt"); + + struct tls *client; + error = tls_accept_socket(server, &client, sock); + if (error) errx(EX_SOFTWARE, "tls_accept_socket: %s", tls_error(server)); + + poll->fd = sock; + poll->events = POLLIN; + return client; +} |