86903b2003-01-23Martin Nilsson // This is a ChiliMoon protocol module.
50c4c42001-08-23Martin Nilsson // Copyright © 2001, Roxen IS.
1539082005-04-15Marc Dirix // $Id: prot_https.pike,v 2.14 2005/04/14 23:07:00 _cvs_dirix Exp $
c39ebd2000-12-28Martin Stjernholm  // --- Debug defines --- #ifdef SSL3_DEBUG
e6ad502004-05-17Martin Nilsson # define SSL3_WERR(X ...) werror("SSL3: " X)
c39ebd2000-12-28Martin Stjernholm #else
e6ad502004-05-17Martin Nilsson # define SSL3_WERR(X ...)
c39ebd2000-12-28Martin Stjernholm #endif
0d0e952000-11-13Per Hedbor inherit SSLProtocol; constant supports_ipless = 0; constant name = "https";
a9fa0d2001-07-21Martin Stjernholm constant prot_name = "https";
3250252002-06-14Martin Nilsson constant requesthandlerfile = "plugins/protocols/http.pike";
0d0e952000-11-13Per Hedbor constant default_port = 443; class fallback_redirect_request { string in = ""; string out; string default_prefix; int port; Stdio.File f; void die() {
e6ad502004-05-17Martin Nilsson  SSL3_WERR("fallback_redirect_request::die()\n");
e317812004-04-03Martin Nilsson  f->set_blocking();
0d0e952000-11-13Per Hedbor  f->close(); }
e317812004-04-03Martin Nilsson  void write_callback()
0d0e952000-11-13Per Hedbor  {
e6ad502004-05-17Martin Nilsson  SSL3_WERR("fallback_redirect_request::write_callback()\n");
e317812004-04-03Martin Nilsson  int written = f->write(out);
0d0e952000-11-13Per Hedbor  if (written <= 0) die();
e317812004-04-03Martin Nilsson  else { out = out[written..];
f487162004-06-04Stephen R. van den Berg  if (!sizeof(out))
e317812004-04-03Martin Nilsson  die(); }
0d0e952000-11-13Per Hedbor  }
1539082005-04-15Marc Dirix  void timeout() { SSL3_WERR("fallback_redirect_request::timeout()"); die(); }
e317812004-04-03Martin Nilsson  void read_callback(mixed ignored, string s)
0d0e952000-11-13Per Hedbor  {
e6ad502004-05-17Martin Nilsson  SSL3_WERR("fallback_redirect_request::read_callback(X, %O)\n", s);
0d0e952000-11-13Per Hedbor  in += s; string name; string prefix;
1539082005-04-15Marc Dirix  remove_call_out(timeout);
6bae6e2002-10-22Martin Nilsson  if (has_value(in, "\r\n\r\n"))
0d0e952000-11-13Per Hedbor  { array(string) lines = in / "\r\n"; array(string) req = replace(lines[0], "\t", " ") / " "; if (sizeof(req) < 2) { out = "HTTP/1.0 400 Bad Request\r\n\r\n"; } else { if (sizeof(req) == 2) { name = req[1]; } else { name = req[1..sizeof(req)-2] * " "; foreach(map(lines[1..], `/, ":"), array header) { if ( (sizeof(header) >= 2) && (lower_case(header[0]) == "host") ) prefix = "https://" + header[1] - " "; } } if (prefix) { if (prefix[-1] == '/')
d748002004-06-04Stephen R. van den Berg  prefix = prefix[..sizeof(prefix)-2];
0d0e952000-11-13Per Hedbor  prefix = prefix + ":" + port; } else { /* default_prefix (aka MyWorldLocation) already contains the * portnumber. */ if (!(prefix = default_prefix)) { /* This case is most unlikely to occur, * but better safe than sorry... */ string ip = (f->query_address(1)/" ")[0];
1539082005-04-15Marc Dirix  /* RFC 3986 3.2.2. Host * * host = IP-literal / IPv4address / reg-name * IP-literal = "[" ( IPv6address / IPvFuture ) "]" * IPvFuture = "v" 1*HEXDIG "." 1*( unreserved / sub-delims / ":" ) * * IPv6address is as in RFC3513. */ if (has_value(ip, ":")) { // IPv6 ip = "[" + ip + "]"; }
0d0e952000-11-13Per Hedbor  prefix = "https://" + ip + ":" + port; } else if (prefix[..4] == "http:") { /* Broken MyWorldLocation -- fix. */ prefix = "https:" + prefix[5..]; } } out = sprintf("HTTP/1.0 301 Redirect to secure server\r\n" "Location: %s%s\r\n\r\n", prefix, name); } f->set_read_callback(0); f->set_write_callback(write_callback);
1539082005-04-15Marc Dirix  } else { if (sizeof(in) > 5) { string q = replace(upper_case(in[..10]), "\t", " "); if (!(has_prefix(q, "GET ") || has_prefix(q, "HEAD ") || has_prefix(q, "OPTIONS ") || has_prefix(q, "PUT ") || has_prefix(q, "PROPFIND "))) { // Doesn't look like a HTTP request. // Bail out. SSL3_WERR(sprintf("fallback_redirect_request->read_callback():\n" "Doesn't look like HTTP (method: %O)\n", q)); die(); return; } } call_out(timeout, 30);
0d0e952000-11-13Per Hedbor  } }
e317812004-04-03Martin Nilsson  void create(Stdio.File socket, string s, string l, int p)
0d0e952000-11-13Per Hedbor  {
e6ad502004-05-17Martin Nilsson  SSL3_WERR("fallback_redirect_request(X, %O, %O, %O)\n", s, l||"CONFIG PORT", p);
0d0e952000-11-13Per Hedbor  f = socket; default_prefix = l; port = p; f->set_nonblocking(read_callback, 0, die); read_callback(f, s); }
e317812004-04-03Martin Nilsson  string _sprintf(int t) { return t=='O' && sprintf("fallback_redirect_request(%O)", f); }
0d0e952000-11-13Per Hedbor } class http_fallback {
e317812004-04-03Martin Nilsson  SSL.sslfile my_fd;
0d0e952000-11-13Per Hedbor  void ssl_alert_callback(object alert, object|int n, string data) {
e6ad502004-05-17Martin Nilsson  SSL3_WERR("http_fallback(X, %O, %O)\n", n, data);
0d0e952000-11-13Per Hedbor  // trace(1);
1539082005-04-15Marc Dirix  if (((my_fd->current_write_state|| my_fd->query_connection()->current_write_state)->seq_num == 0) && has_value(lower_case(data), "http"))
0d0e952000-11-13Per Hedbor  {
1539082005-04-15Marc Dirix  Stdio.File raw_fd; if (my_fd->shutdown) { raw_fd = my_fd->shutdown(); } else { raw_fd = my_fd->socket; my_fd->socket = 0; }
0d0e952000-11-13Per Hedbor  /* Redirect to a https-url */
1539082005-04-15Marc Dirix 
0d0e952000-11-13Per Hedbor  fallback_redirect_request(raw_fd, data, my_fd->config && my_fd->config->query("MyWorldLocation"), port);
1539082005-04-15Marc Dirix  if (!my_fd->shutdown) { // Old sslfile contains cyclic references. destruct(my_fd); }
0d0e952000-11-13Per Hedbor  } }
e317812004-04-03Martin Nilsson  void ssl_accept_callback(mixed ignored)
0d0e952000-11-13Per Hedbor  {
e6ad502004-05-17Martin Nilsson  SSL3_WERR("ssl_accept_callback(X)\n");
e317812004-04-03Martin Nilsson  my_fd->set_alert_callback(0); /* Forget about http_fallback */ my_fd->set_accept_callback(0);
0d0e952000-11-13Per Hedbor  my_fd = 0; /* Not needed any more */ }
1539082005-04-15Marc Dirix  void create(SSL.sslfile|Stdio.File fd)
0d0e952000-11-13Per Hedbor  { my_fd = fd; fd->set_alert_callback(ssl_alert_callback); fd->set_accept_callback(ssl_accept_callback); }
e317812004-04-03Martin Nilsson  string _sprintf(int t) { return t=='O' && sprintf("http_fallback(%O)", my_fd); }
0d0e952000-11-13Per Hedbor }
1539082005-04-15Marc Dirix Stdio.File accept()
0d0e952000-11-13Per Hedbor {
1539082005-04-15Marc Dirix  object(Stdio.File)|SSL.sslfile q = ::accept();
0d0e952000-11-13Per Hedbor  if (q) { http_fallback(q); } return q; } int set_cookie, set_cookie_only_once; void fix_cvars( Variable.Variable a ) { set_cookie = query( "set_cookie" ); set_cookie_only_once = query( "set_cookie_only_once" ); } void create( mixed ... args ) {
f9531d2004-04-04Martin Nilsson  core.set_up_http_variables( this );
0d0e952000-11-13Per Hedbor  if( variables[ "set_cookie" ] ) variables[ "set_cookie" ]->set_changed_callback( fix_cvars ); if( variables[ "set_cookie_only_once" ] ) variables[ "set_cookie_only_once" ]->set_changed_callback( fix_cvars ); fix_cvars(0); ::create( @args ); }