tang/src/tangd.c

/* vim: set tabstop=8 shiftwidth=4 softtabstop=4 expandtab smarttab colorcolumn=80: */
/*
 * Copyright (c) 2016 Red Hat, Inc.
 * Author: Nathaniel McCallum <npmccallum@redhat.com>
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#include "http.h"

#include <sys/types.h>
#include <sys/stat.h>
#include <limits.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <getopt.h>

#include <jose/jose.h>
#include "keys.h"
#include "socket.h"

#define MAX_URL 256

static const struct option long_options[] = {
	{"port", 1, 0, 'p'},
	{"endpoint", 1, 0, 'e'},
	{"listen", 0, 0, 'l'},
	{"version", 0, 0, 'v'},
	{"help", 0, 0, 'h'},
	{NULL, 0, 0, 0}
};

static void
print_help(const char *name)
{
	fprintf(stderr, "Usage: %s [OPTIONS] <jwkdir>\n", name);
	fprintf(stderr, "  -p, --port=PORT                 Specify the port to listen (default 9090)\n");
	fprintf(stderr, "  -e, --endpoint=ENDPOINT         Specify endpoint to listen (empty by default)\n");
	fprintf(stderr, "  -l, --listen                    Run as a service and wait for connections\n");
	fprintf(stderr, "  -v, --version                   Display program version\n");
	fprintf(stderr, "  -h, --help                      Show this help message\n");
}

static void
print_version(void)
{
	fprintf(stderr, "tangd %s\n", VERSION);
}

static void
str_cleanup(char **str)
{
    if (str)
        free(*str);
}

static int
adv(http_method_t method, const char *path, const char *body,
    regmatch_t matches[], void *misc)
{
    __attribute__((cleanup(str_cleanup))) char *adv = NULL;
    __attribute__((cleanup(str_cleanup))) char *thp = NULL;
    __attribute__((cleanup(cleanup_tang_keys_info))) struct tang_keys_info *tki = NULL;
    json_auto_t *jws = NULL;
    const char *jwkdir = misc;

    tki = read_keys(jwkdir);
    if (!tki || tki->m_keys_count == 0) {
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);
    }

    if (matches[1].rm_so < matches[1].rm_eo) {
        size_t size = matches[1].rm_eo - matches[1].rm_so;
        thp = strndup(&path[matches[1].rm_so], size);
        if (!thp)
            return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);
    }

    jws = find_jws(tki, thp);
    if (!jws) {
        return http_reply(HTTP_STATUS_NOT_FOUND, NULL);
    }

    adv = json_dumps(jws, 0);
    if (!adv)
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);

    return http_reply(HTTP_STATUS_OK,
                      "Content-Type: application/jose+json\r\n"
                      "Content-Length: %zu\r\n"
                      "\r\n%s", strlen(adv), adv);
}

static int
rec(http_method_t method, const char *path, const char *body,
    regmatch_t matches[], void *misc)
{
    __attribute__((cleanup(str_cleanup))) char *enc = NULL;
    __attribute__((cleanup(str_cleanup))) char *thp = NULL;
    __attribute__((cleanup(cleanup_tang_keys_info))) struct tang_keys_info *tki = NULL;
    size_t size = matches[1].rm_eo - matches[1].rm_so;
    const char *jwkdir = misc;
    json_auto_t *jwk = NULL;
    json_auto_t *req = NULL;
    json_auto_t *rep = NULL;
    const char *alg = NULL;
    const char *kty = NULL;
    const char *d = NULL;

    /*
     * Parse and validate the request JWK
     */

    req = json_loads(body, 0, NULL);
    if (!req)
        return http_reply(HTTP_STATUS_BAD_REQUEST, NULL);

    if (!jose_jwk_prm(NULL, req, false, "deriveKey"))
        return http_reply(HTTP_STATUS_FORBIDDEN, NULL);

    if (json_unpack(req, "{s:s,s?s}", "kty", &kty, "alg", &alg) < 0)
        return http_reply(HTTP_STATUS_BAD_REQUEST, NULL);

    if (strcmp(kty, "EC") != 0)
        return http_reply(HTTP_STATUS_BAD_REQUEST, NULL);

    if (alg && strcmp(alg, "ECMR") != 0)
        return http_reply(HTTP_STATUS_BAD_REQUEST, NULL);

    /*
     * Parse and validate the server-side JWK
     */
    tki = read_keys(jwkdir);
    if (!tki || tki->m_keys_count == 0) {
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);
    }

    thp = strndup(&path[matches[1].rm_so], size);
    if (!thp)
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);

    jwk = find_jwk(tki, thp);
    if (!jwk)
        return http_reply(HTTP_STATUS_NOT_FOUND, NULL);

    if (!jose_jwk_prm(NULL, jwk, true, "deriveKey"))
        return http_reply(HTTP_STATUS_FORBIDDEN, NULL);

    if (json_unpack(jwk, "{s:s,s?s}", "d", &d, "alg", &alg) < 0)
        return http_reply(HTTP_STATUS_FORBIDDEN, NULL);

    if (alg && strcmp(alg, "ECMR") != 0)
        return http_reply(HTTP_STATUS_FORBIDDEN, NULL);

    /*
     * Perform the exchange and return
     */
    rep = jose_jwk_exc(NULL, jwk, req);
    if (!rep)
        return http_reply(HTTP_STATUS_BAD_REQUEST, NULL);

    if (json_object_set_new(rep, "alg", json_string("ECMR")) < 0)
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);

    if (json_object_set_new(rep, "key_ops", json_pack("[s]", "deriveKey")) < 0)
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);

    enc = json_dumps(rep, JSON_SORT_KEYS | JSON_COMPACT);
    if (!enc)
        return http_reply(HTTP_STATUS_INTERNAL_SERVER_ERROR, NULL);

    return http_reply(HTTP_STATUS_OK,
                      "Content-Type: application/jwk+json\r\n"
                      "Content-Length: %zu\r\n"
                      "\r\n%s", strlen(enc), enc);
}

static struct http_dispatch s_dispatch[] = {
    { adv, 1 << HTTP_GET,  2, "^/+adv/+([0-9A-Za-z_-]+)$" },
    { adv, 1 << HTTP_GET,  2, "^/+adv/*$" },
    { rec, 1 << HTTP_POST, 2, "^/+rec/+([0-9A-Za-z_-]+)$" },
    {}
};

#define DEFAULT_PORT 9090

static size_t
tang_http_parser_execute(http_parser_t *parser, const char* data, size_t len)
{
#ifdef USE_LLHTTP
    llhttp_errno_t error;
    size_t parsed_len;

    /*
     * Unlike http_parser, which returns the number of parsed
     * bytes in the _execute() call, llhttp returns an error
     * code.
     */

    if (data == NULL || len == 0) {
        error = llhttp_finish(parser);
    } else {
        error = llhttp_execute(parser, data, len);
    }

    parsed_len = len;
    /*
     * Adjust number of parsed bytes in case of error.
     */
    if (error != HPE_OK) {
        parsed_len = llhttp_get_error_pos(parser) - data;

        /* This isn't a real pause, just a way to stop parsing early. */
        if (error == HPE_PAUSED_UPGRADE) {
            llhttp_resume_after_upgrade(parser);
        }
    }

    return parsed_len;
#else
    return http_parser_execute(parser, &http_settings, data, len);
#endif
}

static int
process_request(const char *jwkdir, int in_fileno)
{
    struct http_state state = { .dispatch = s_dispatch, .misc = (char*)jwkdir };
    http_parser_t parser;
    struct stat st = {};
    char req[4096] = {};
    size_t rcvd = 0;
    int r = 0;

    tang_http_parser_init(&parser, &http_settings);
    parser.data = &state;

    if (stat(jwkdir, &st) != 0) {
        fprintf(stderr, "Error calling stat() on path: %s: %m\n", jwkdir);
        return EXIT_FAILURE;
    }

    if (!S_ISDIR(st.st_mode)) {
        fprintf(stderr, "Path is not a directory: %s\n", jwkdir);
        return EXIT_FAILURE;
    }

    for (;;) {
        r = read(in_fileno, &req[rcvd], sizeof(req) - rcvd - 1);
        if (r == 0)
            return rcvd > 0 ? EXIT_FAILURE : EXIT_SUCCESS;
        if (r < 0)
            return EXIT_FAILURE;

        rcvd += r;

        r = tang_http_parser_execute(&parser, req, rcvd);
        switch (tang_http_parser_errno(parser)) {
        case HPE_OK:
            break;
        case HPE_PAUSED:
            tang_http_parser_resume(&parser);
            break;
        default:
            fprintf(stderr, "HTTP Parsing Error: %s\n",
                    tang_http_errno_description(&parser, tang_http_parser_errno(parser)));
            return EXIT_SUCCESS;
        }

        memmove(req, &req[r], rcvd - r);
        rcvd -= r;
    }
    return EXIT_SUCCESS;
}

int
main(int argc, char *argv[])
{
    int listen = 0;
    int port = DEFAULT_PORT;
    const char *jwkdir = NULL;
    const char *endpoint = NULL;

    while (1) {
	int c = getopt_long(argc, argv, "lp:e:vh", long_options, NULL);
	if (c == -1)
            break;

	switch(c) {
            case 'v':
		print_version();
		return EXIT_SUCCESS;
	    case 'h':
		print_help(argv[0]);
		return EXIT_SUCCESS;
	    case 'p':
		port = atoi(optarg);
		break;
	    case 'e':
		endpoint = optarg;
		break;
	    case 'l':
		listen = 1;
		break;
	}
    }

    if (optind >= argc) {
        fprintf(stderr, "Usage: %s [OPTION] <jwkdir>\n", argv[0]);
	return EXIT_FAILURE;
    }
    jwkdir = argv[optind++];

    char adv_thp_endpoint[MAX_URL] = {};
    char adv_endpoint[MAX_URL] = {};
    char rec_endpoint[MAX_URL] = {};
    if (endpoint != NULL) {
        char *endpoint_ptr = (char*)endpoint;
        while (*endpoint_ptr == '/') {
            endpoint_ptr++;
        }
        snprintf(adv_thp_endpoint, MAX_URL, "^/%s/+adv/+([0-9A-Za-z_-]+)$", endpoint_ptr);
        snprintf(adv_endpoint, MAX_URL, "^/%s/+adv/*$", endpoint_ptr);
        snprintf(rec_endpoint, MAX_URL, "^/%s/+rec/+([0-9A-Za-z_-]+)$", endpoint_ptr);
        s_dispatch[0].re = adv_thp_endpoint;
        s_dispatch[1].re = adv_endpoint;
        s_dispatch[2].re = rec_endpoint;
    }
    if (listen == 0) { /* process one-shot query from stdin */
        return process_request(jwkdir, STDIN_FILENO);
    } else { /* listen and process all incoming connections */
        return run_service(jwkdir, port, process_request);
    }
}