1*18ef43d7Sflorian /* $OpenBSD: engine.c,v 1.19 2021/05/13 11:22:15 florian Exp $ */ 253293e44Sflorian 353293e44Sflorian /* 453293e44Sflorian * Copyright (c) 2018 Florian Obser <florian@openbsd.org> 553293e44Sflorian * Copyright (c) 2004, 2005 Claudio Jeker <claudio@openbsd.org> 653293e44Sflorian * Copyright (c) 2004 Esben Norby <norby@openbsd.org> 753293e44Sflorian * Copyright (c) 2003, 2004 Henning Brauer <henning@openbsd.org> 853293e44Sflorian * 953293e44Sflorian * Permission to use, copy, modify, and distribute this software for any 1053293e44Sflorian * purpose with or without fee is hereby granted, provided that the above 1153293e44Sflorian * copyright notice and this permission notice appear in all copies. 1253293e44Sflorian * 1353293e44Sflorian * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 1453293e44Sflorian * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 1553293e44Sflorian * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 1653293e44Sflorian * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 1753293e44Sflorian * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 1853293e44Sflorian * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 1953293e44Sflorian * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 2053293e44Sflorian */ 2153293e44Sflorian 2253293e44Sflorian #include <sys/types.h> 2353293e44Sflorian #include <sys/queue.h> 2453293e44Sflorian #include <sys/socket.h> 2553293e44Sflorian #include <sys/syslog.h> 2653293e44Sflorian #include <sys/uio.h> 2753293e44Sflorian 2853293e44Sflorian #include <netinet/in.h> 2953293e44Sflorian #include <net/if.h> 3053293e44Sflorian #include <arpa/inet.h> 3153293e44Sflorian #include <netinet/icmp6.h> 3253293e44Sflorian 3353293e44Sflorian #include <errno.h> 3453293e44Sflorian #include <event.h> 3553293e44Sflorian #include <imsg.h> 3653293e44Sflorian #include <signal.h> 3753293e44Sflorian #include <stdlib.h> 3853293e44Sflorian #include <string.h> 3953293e44Sflorian #include <pwd.h> 4053293e44Sflorian #include <unistd.h> 4153293e44Sflorian 4253293e44Sflorian #include "log.h" 4353293e44Sflorian #include "rad.h" 4453293e44Sflorian #include "engine.h" 4553293e44Sflorian 460c40990eSflorian struct engine_iface { 470c40990eSflorian TAILQ_ENTRY(engine_iface) entry; 480c40990eSflorian struct event timer; 490c40990eSflorian uint32_t if_index; 500c40990eSflorian }; 510c40990eSflorian 520c40990eSflorian TAILQ_HEAD(, engine_iface) engine_interfaces; 530c40990eSflorian 540c40990eSflorian 5553293e44Sflorian __dead void engine_shutdown(void); 5653293e44Sflorian void engine_sig_handler(int sig, short, void *); 5753293e44Sflorian void engine_dispatch_frontend(int, short, void *); 5853293e44Sflorian void engine_dispatch_main(int, short, void *); 5953293e44Sflorian void parse_ra_rs(struct imsg_ra_rs *); 6053293e44Sflorian void parse_ra(struct imsg_ra_rs *); 6153293e44Sflorian void parse_rs(struct imsg_ra_rs *); 620c40990eSflorian void update_iface(uint32_t); 634a78c7cfSflorian void remove_iface(uint32_t); 640c40990eSflorian struct engine_iface *find_engine_iface_by_id(uint32_t); 650c40990eSflorian void iface_timeout(int, short, void *); 6653293e44Sflorian 6753293e44Sflorian struct rad_conf *engine_conf; 68032fa683Sflorian static struct imsgev *iev_frontend; 69032fa683Sflorian static struct imsgev *iev_main; 7053293e44Sflorian struct sockaddr_in6 all_nodes; 7153293e44Sflorian 7253293e44Sflorian void 7353293e44Sflorian engine_sig_handler(int sig, short event, void *arg) 7453293e44Sflorian { 7553293e44Sflorian /* 7653293e44Sflorian * Normal signal handler rules don't apply because libevent 7753293e44Sflorian * decouples for us. 7853293e44Sflorian */ 7953293e44Sflorian 8053293e44Sflorian switch (sig) { 8153293e44Sflorian case SIGINT: 8253293e44Sflorian case SIGTERM: 8353293e44Sflorian engine_shutdown(); 8453293e44Sflorian default: 8553293e44Sflorian fatalx("unexpected signal"); 8653293e44Sflorian } 8753293e44Sflorian } 8853293e44Sflorian 8953293e44Sflorian void 9053293e44Sflorian engine(int debug, int verbose) 9153293e44Sflorian { 9253293e44Sflorian struct event ev_sigint, ev_sigterm; 9353293e44Sflorian struct passwd *pw; 9453293e44Sflorian 9553293e44Sflorian engine_conf = config_new_empty(); 9653293e44Sflorian 9753293e44Sflorian log_init(debug, LOG_DAEMON); 9853293e44Sflorian log_setverbose(verbose); 9953293e44Sflorian 10053293e44Sflorian if ((pw = getpwnam(RAD_USER)) == NULL) 10153293e44Sflorian fatal("getpwnam"); 10253293e44Sflorian 10353293e44Sflorian if (chroot(pw->pw_dir) == -1) 10453293e44Sflorian fatal("chroot"); 10553293e44Sflorian if (chdir("/") == -1) 10653293e44Sflorian fatal("chdir(\"/\")"); 10753293e44Sflorian 1083c6be478Sflorian setproctitle("%s", "engine"); 1093c6be478Sflorian log_procinit("engine"); 11053293e44Sflorian 11153293e44Sflorian if (setgroups(1, &pw->pw_gid) || 11253293e44Sflorian setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) || 11353293e44Sflorian setresuid(pw->pw_uid, pw->pw_uid, pw->pw_uid)) 11453293e44Sflorian fatal("can't drop privileges"); 11553293e44Sflorian 11653293e44Sflorian if (pledge("stdio recvfd", NULL) == -1) 11753293e44Sflorian fatal("pledge"); 11853293e44Sflorian 11953293e44Sflorian event_init(); 12053293e44Sflorian 12153293e44Sflorian /* Setup signal handler(s). */ 12253293e44Sflorian signal_set(&ev_sigint, SIGINT, engine_sig_handler, NULL); 12353293e44Sflorian signal_set(&ev_sigterm, SIGTERM, engine_sig_handler, NULL); 12453293e44Sflorian signal_add(&ev_sigint, NULL); 12553293e44Sflorian signal_add(&ev_sigterm, NULL); 12653293e44Sflorian signal(SIGPIPE, SIG_IGN); 12753293e44Sflorian signal(SIGHUP, SIG_IGN); 12853293e44Sflorian 12953293e44Sflorian /* Setup pipe and event handler to the main process. */ 13053293e44Sflorian if ((iev_main = malloc(sizeof(struct imsgev))) == NULL) 13153293e44Sflorian fatal(NULL); 13253293e44Sflorian 13353293e44Sflorian imsg_init(&iev_main->ibuf, 3); 13453293e44Sflorian iev_main->handler = engine_dispatch_main; 13553293e44Sflorian 13653293e44Sflorian /* Setup event handlers. */ 13753293e44Sflorian iev_main->events = EV_READ; 13853293e44Sflorian event_set(&iev_main->ev, iev_main->ibuf.fd, iev_main->events, 13953293e44Sflorian iev_main->handler, iev_main); 14053293e44Sflorian event_add(&iev_main->ev, NULL); 14153293e44Sflorian 14253293e44Sflorian all_nodes.sin6_len = sizeof(all_nodes); 14353293e44Sflorian all_nodes.sin6_family = AF_INET6; 14453293e44Sflorian if (inet_pton(AF_INET6, "ff02::1", &all_nodes.sin6_addr) != 1) 14553293e44Sflorian fatal("inet_pton"); 14653293e44Sflorian 1474a78c7cfSflorian TAILQ_INIT(&engine_interfaces); 1484a78c7cfSflorian 14953293e44Sflorian event_dispatch(); 15053293e44Sflorian 15153293e44Sflorian engine_shutdown(); 15253293e44Sflorian } 15353293e44Sflorian 15453293e44Sflorian __dead void 15553293e44Sflorian engine_shutdown(void) 15653293e44Sflorian { 15753293e44Sflorian /* Close pipes. */ 15853293e44Sflorian msgbuf_clear(&iev_frontend->ibuf.w); 15953293e44Sflorian close(iev_frontend->ibuf.fd); 16053293e44Sflorian msgbuf_clear(&iev_main->ibuf.w); 16153293e44Sflorian close(iev_main->ibuf.fd); 16253293e44Sflorian 16353293e44Sflorian config_clear(engine_conf); 16453293e44Sflorian 16553293e44Sflorian free(iev_frontend); 16653293e44Sflorian free(iev_main); 16753293e44Sflorian 16853293e44Sflorian log_info("engine exiting"); 16953293e44Sflorian exit(0); 17053293e44Sflorian } 17153293e44Sflorian 17253293e44Sflorian int 17353293e44Sflorian engine_imsg_compose_frontend(int type, pid_t pid, void *data, uint16_t datalen) 17453293e44Sflorian { 17553293e44Sflorian return (imsg_compose_event(iev_frontend, type, 0, pid, -1, 17653293e44Sflorian data, datalen)); 17753293e44Sflorian } 17853293e44Sflorian 17953293e44Sflorian void 18053293e44Sflorian engine_dispatch_frontend(int fd, short event, void *bula) 18153293e44Sflorian { 18253293e44Sflorian struct imsgev *iev = bula; 18353293e44Sflorian struct imsgbuf *ibuf; 18453293e44Sflorian struct imsg imsg; 18553293e44Sflorian struct imsg_ra_rs ra_rs; 18653293e44Sflorian ssize_t n; 1870c40990eSflorian uint32_t if_index; 18853293e44Sflorian int shut = 0, verbose; 18953293e44Sflorian 19053293e44Sflorian ibuf = &iev->ibuf; 19153293e44Sflorian 19253293e44Sflorian if (event & EV_READ) { 19353293e44Sflorian if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN) 19453293e44Sflorian fatal("imsg_read error"); 19553293e44Sflorian if (n == 0) /* Connection closed. */ 19653293e44Sflorian shut = 1; 19753293e44Sflorian } 19853293e44Sflorian if (event & EV_WRITE) { 19953293e44Sflorian if ((n = msgbuf_write(&ibuf->w)) == -1 && errno != EAGAIN) 20053293e44Sflorian fatal("msgbuf_write"); 20153293e44Sflorian if (n == 0) /* Connection closed. */ 20253293e44Sflorian shut = 1; 20353293e44Sflorian } 20453293e44Sflorian 20553293e44Sflorian for (;;) { 20653293e44Sflorian if ((n = imsg_get(ibuf, &imsg)) == -1) 20753293e44Sflorian fatal("%s: imsg_get error", __func__); 20853293e44Sflorian if (n == 0) /* No more messages. */ 20953293e44Sflorian break; 21053293e44Sflorian 21153293e44Sflorian switch (imsg.hdr.type) { 21253293e44Sflorian case IMSG_RA_RS: 213b17c900dSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(ra_rs)) 21451a61992Spamela fatalx("%s: IMSG_RA_RS wrong length: %lu", 215b17c900dSpamela __func__, IMSG_DATA_SIZE(imsg)); 21653293e44Sflorian memcpy(&ra_rs, imsg.data, sizeof(ra_rs)); 21753293e44Sflorian parse_ra_rs(&ra_rs); 21853293e44Sflorian break; 2190c40990eSflorian case IMSG_UPDATE_IF: 220b17c900dSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(if_index)) 22151a61992Spamela fatalx("%s: IMSG_UPDATE_IF wrong length: %lu", 222b17c900dSpamela __func__, IMSG_DATA_SIZE(imsg)); 2230c40990eSflorian memcpy(&if_index, imsg.data, sizeof(if_index)); 2240c40990eSflorian update_iface(if_index); 2250c40990eSflorian break; 2264a78c7cfSflorian case IMSG_REMOVE_IF: 227b17c900dSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(if_index)) 22851a61992Spamela fatalx("%s: IMSG_REMOVE_IF wrong length: %lu", 229b17c900dSpamela __func__, IMSG_DATA_SIZE(imsg)); 2304a78c7cfSflorian memcpy(&if_index, imsg.data, sizeof(if_index)); 2314a78c7cfSflorian remove_iface(if_index); 2324a78c7cfSflorian break; 23353293e44Sflorian case IMSG_CTL_LOG_VERBOSE: 2340eb5c43bSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(verbose)) 2350eb5c43bSpamela fatalx("%s: IMSG_CTL_LOG_VERBOSE wrong length: " 2360eb5c43bSpamela "%lu", __func__, IMSG_DATA_SIZE(imsg)); 23753293e44Sflorian memcpy(&verbose, imsg.data, sizeof(verbose)); 23853293e44Sflorian log_setverbose(verbose); 23953293e44Sflorian break; 24053293e44Sflorian default: 24153293e44Sflorian log_debug("%s: unexpected imsg %d", __func__, 24253293e44Sflorian imsg.hdr.type); 24353293e44Sflorian break; 24453293e44Sflorian } 24553293e44Sflorian imsg_free(&imsg); 24653293e44Sflorian } 24753293e44Sflorian if (!shut) 24853293e44Sflorian imsg_event_add(iev); 24953293e44Sflorian else { 25053293e44Sflorian /* This pipe is dead. Remove its event handler. */ 25153293e44Sflorian event_del(&iev->ev); 25253293e44Sflorian event_loopexit(NULL); 25353293e44Sflorian } 25453293e44Sflorian } 25553293e44Sflorian 25653293e44Sflorian void 25753293e44Sflorian engine_dispatch_main(int fd, short event, void *bula) 25853293e44Sflorian { 25953293e44Sflorian static struct rad_conf *nconf; 26053293e44Sflorian static struct ra_iface_conf *ra_iface_conf; 2618815eebdSflorian static struct ra_options_conf *ra_options; 26253293e44Sflorian struct imsg imsg; 26353293e44Sflorian struct imsgev *iev = bula; 26453293e44Sflorian struct imsgbuf *ibuf; 26553293e44Sflorian struct ra_prefix_conf *ra_prefix_conf; 2664c40b7e8Sflorian struct ra_rdnss_conf *ra_rdnss_conf; 2674c40b7e8Sflorian struct ra_dnssl_conf *ra_dnssl_conf; 26853293e44Sflorian ssize_t n; 26953293e44Sflorian int shut = 0; 27053293e44Sflorian 27153293e44Sflorian ibuf = &iev->ibuf; 27253293e44Sflorian 27353293e44Sflorian if (event & EV_READ) { 27453293e44Sflorian if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN) 27553293e44Sflorian fatal("imsg_read error"); 27653293e44Sflorian if (n == 0) /* Connection closed. */ 27753293e44Sflorian shut = 1; 27853293e44Sflorian } 27953293e44Sflorian if (event & EV_WRITE) { 28053293e44Sflorian if ((n = msgbuf_write(&ibuf->w)) == -1 && errno != EAGAIN) 28153293e44Sflorian fatal("msgbuf_write"); 28253293e44Sflorian if (n == 0) /* Connection closed. */ 28353293e44Sflorian shut = 1; 28453293e44Sflorian } 28553293e44Sflorian 28653293e44Sflorian for (;;) { 28753293e44Sflorian if ((n = imsg_get(ibuf, &imsg)) == -1) 28853293e44Sflorian fatal("%s: imsg_get error", __func__); 28953293e44Sflorian if (n == 0) /* No more messages. */ 29053293e44Sflorian break; 29153293e44Sflorian 29253293e44Sflorian switch (imsg.hdr.type) { 29353293e44Sflorian case IMSG_SOCKET_IPC: 29453293e44Sflorian /* 29553293e44Sflorian * Setup pipe and event handler to the frontend 29653293e44Sflorian * process. 29753293e44Sflorian */ 2980eb5c43bSpamela if (iev_frontend) 2990eb5c43bSpamela fatalx("%s: received unexpected imsg fd " 30053293e44Sflorian "to engine", __func__); 3010eb5c43bSpamela 3020eb5c43bSpamela if ((fd = imsg.fd) == -1) 3030eb5c43bSpamela fatalx("%s: expected to receive imsg fd to " 30453293e44Sflorian "engine but didn't receive any", __func__); 30553293e44Sflorian 30653293e44Sflorian iev_frontend = malloc(sizeof(struct imsgev)); 30753293e44Sflorian if (iev_frontend == NULL) 30853293e44Sflorian fatal(NULL); 30953293e44Sflorian 31053293e44Sflorian imsg_init(&iev_frontend->ibuf, fd); 31153293e44Sflorian iev_frontend->handler = engine_dispatch_frontend; 31253293e44Sflorian iev_frontend->events = EV_READ; 31353293e44Sflorian 31453293e44Sflorian event_set(&iev_frontend->ev, iev_frontend->ibuf.fd, 31553293e44Sflorian iev_frontend->events, iev_frontend->handler, 31653293e44Sflorian iev_frontend); 31753293e44Sflorian event_add(&iev_frontend->ev, NULL); 31853293e44Sflorian break; 31953293e44Sflorian case IMSG_RECONF_CONF: 3202b2996d8Sflorian if (nconf != NULL) 3212b2996d8Sflorian fatalx("%s: IMSG_RECONF_CONF already in " 3222b2996d8Sflorian "progress", __func__); 3230eb5c43bSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(struct rad_conf)) 324ce1003a9Spamela fatalx("%s: IMSG_RECONF_CONF wrong length: %lu", 325ce1003a9Spamela __func__, IMSG_DATA_SIZE(imsg)); 32653293e44Sflorian if ((nconf = malloc(sizeof(struct rad_conf))) == NULL) 32753293e44Sflorian fatal(NULL); 32853293e44Sflorian memcpy(nconf, imsg.data, sizeof(struct rad_conf)); 32953293e44Sflorian SIMPLEQ_INIT(&nconf->ra_iface_list); 3308815eebdSflorian SIMPLEQ_INIT(&nconf->ra_options.ra_rdnss_list); 3318815eebdSflorian SIMPLEQ_INIT(&nconf->ra_options.ra_dnssl_list); 3328815eebdSflorian ra_options = &nconf->ra_options; 33353293e44Sflorian break; 33453293e44Sflorian case IMSG_RECONF_RA_IFACE: 3350eb5c43bSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(struct 3360eb5c43bSpamela ra_iface_conf)) 3370eb5c43bSpamela fatalx("%s: IMSG_RECONF_RA_IFACE wrong length: " 3380eb5c43bSpamela "%lu", __func__, IMSG_DATA_SIZE(imsg)); 33953293e44Sflorian if ((ra_iface_conf = malloc(sizeof(struct 34053293e44Sflorian ra_iface_conf))) == NULL) 34153293e44Sflorian fatal(NULL); 34253293e44Sflorian memcpy(ra_iface_conf, imsg.data, 34353293e44Sflorian sizeof(struct ra_iface_conf)); 34453293e44Sflorian ra_iface_conf->autoprefix = NULL; 34553293e44Sflorian SIMPLEQ_INIT(&ra_iface_conf->ra_prefix_list); 3468815eebdSflorian SIMPLEQ_INIT(&ra_iface_conf->ra_options.ra_rdnss_list); 3478815eebdSflorian SIMPLEQ_INIT(&ra_iface_conf->ra_options.ra_dnssl_list); 34853293e44Sflorian SIMPLEQ_INSERT_TAIL(&nconf->ra_iface_list, 34953293e44Sflorian ra_iface_conf, entry); 3508815eebdSflorian ra_options = &ra_iface_conf->ra_options; 35153293e44Sflorian break; 35253293e44Sflorian case IMSG_RECONF_RA_AUTOPREFIX: 3530eb5c43bSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(struct 3540eb5c43bSpamela ra_prefix_conf)) 3550eb5c43bSpamela fatalx("%s: IMSG_RECONF_RA_AUTOPREFIX wrong " 3560eb5c43bSpamela "length: %lu", __func__, 3570eb5c43bSpamela IMSG_DATA_SIZE(imsg)); 35853293e44Sflorian if ((ra_iface_conf->autoprefix = malloc(sizeof(struct 35953293e44Sflorian ra_prefix_conf))) == NULL) 36053293e44Sflorian fatal(NULL); 36153293e44Sflorian memcpy(ra_iface_conf->autoprefix, imsg.data, 36253293e44Sflorian sizeof(struct ra_prefix_conf)); 36353293e44Sflorian break; 36453293e44Sflorian case IMSG_RECONF_RA_PREFIX: 3650eb5c43bSpamela if (IMSG_DATA_SIZE(imsg) != sizeof(struct 3660eb5c43bSpamela ra_prefix_conf)) 3670eb5c43bSpamela fatalx("%s: IMSG_RECONF_RA_PREFIX wrong " 3680eb5c43bSpamela "length: %lu", __func__, 3690eb5c43bSpamela IMSG_DATA_SIZE(imsg)); 37053293e44Sflorian if ((ra_prefix_conf = malloc(sizeof(struct 37153293e44Sflorian ra_prefix_conf))) == NULL) 37253293e44Sflorian fatal(NULL); 37353293e44Sflorian memcpy(ra_prefix_conf, imsg.data, sizeof(struct 37453293e44Sflorian ra_prefix_conf)); 37553293e44Sflorian SIMPLEQ_INSERT_TAIL(&ra_iface_conf->ra_prefix_list, 37653293e44Sflorian ra_prefix_conf, entry); 37753293e44Sflorian break; 3784c40b7e8Sflorian case IMSG_RECONF_RA_RDNSS: 3790eb5c43bSpamela if(IMSG_DATA_SIZE(imsg) != sizeof(struct 3800eb5c43bSpamela ra_rdnss_conf)) 3810eb5c43bSpamela fatalx("%s: IMSG_RECONF_RA_RDNSS wrong length: " 3820eb5c43bSpamela "%lu", __func__, IMSG_DATA_SIZE(imsg)); 3834c40b7e8Sflorian if ((ra_rdnss_conf = malloc(sizeof(struct 3844c40b7e8Sflorian ra_rdnss_conf))) == NULL) 3854c40b7e8Sflorian fatal(NULL); 3864c40b7e8Sflorian memcpy(ra_rdnss_conf, imsg.data, sizeof(struct 3874c40b7e8Sflorian ra_rdnss_conf)); 3888815eebdSflorian SIMPLEQ_INSERT_TAIL(&ra_options->ra_rdnss_list, 3894c40b7e8Sflorian ra_rdnss_conf, entry); 3904c40b7e8Sflorian break; 3914c40b7e8Sflorian case IMSG_RECONF_RA_DNSSL: 3920eb5c43bSpamela if(IMSG_DATA_SIZE(imsg) != sizeof(struct 3930eb5c43bSpamela ra_dnssl_conf)) 3940eb5c43bSpamela fatalx("%s: IMSG_RECONF_RA_DNSSL wrong length: " 3950eb5c43bSpamela "%lu", __func__, IMSG_DATA_SIZE(imsg)); 3964c40b7e8Sflorian if ((ra_dnssl_conf = malloc(sizeof(struct 3974c40b7e8Sflorian ra_dnssl_conf))) == NULL) 3984c40b7e8Sflorian fatal(NULL); 3994c40b7e8Sflorian memcpy(ra_dnssl_conf, imsg.data, sizeof(struct 4004c40b7e8Sflorian ra_dnssl_conf)); 4018815eebdSflorian SIMPLEQ_INSERT_TAIL(&ra_options->ra_dnssl_list, 4024c40b7e8Sflorian ra_dnssl_conf, entry); 4034c40b7e8Sflorian break; 40453293e44Sflorian case IMSG_RECONF_END: 4052b2996d8Sflorian if (nconf == NULL) 4062b2996d8Sflorian fatalx("%s: IMSG_RECONF_END without " 4072b2996d8Sflorian "IMSG_RECONF_CONF", __func__); 40853293e44Sflorian merge_config(engine_conf, nconf); 40953293e44Sflorian nconf = NULL; 41053293e44Sflorian break; 41153293e44Sflorian default: 41253293e44Sflorian log_debug("%s: unexpected imsg %d", __func__, 41353293e44Sflorian imsg.hdr.type); 41453293e44Sflorian break; 41553293e44Sflorian } 41653293e44Sflorian imsg_free(&imsg); 41753293e44Sflorian } 41853293e44Sflorian if (!shut) 41953293e44Sflorian imsg_event_add(iev); 42053293e44Sflorian else { 42153293e44Sflorian /* This pipe is dead. Remove its event handler. */ 42253293e44Sflorian event_del(&iev->ev); 42353293e44Sflorian event_loopexit(NULL); 42453293e44Sflorian } 42553293e44Sflorian } 42653293e44Sflorian 42753293e44Sflorian 42853293e44Sflorian void 42953293e44Sflorian parse_ra_rs(struct imsg_ra_rs *ra_rs) 43053293e44Sflorian { 43153293e44Sflorian char ntopbuf[INET6_ADDRSTRLEN], ifnamebuf[IFNAMSIZ]; 43253293e44Sflorian struct icmp6_hdr *hdr; 43353293e44Sflorian 43453293e44Sflorian hdr = (struct icmp6_hdr *) ra_rs->packet; 43553293e44Sflorian 43653293e44Sflorian switch (hdr->icmp6_type) { 43753293e44Sflorian case ND_ROUTER_ADVERT: 43853293e44Sflorian parse_ra(ra_rs); 43953293e44Sflorian break; 44053293e44Sflorian case ND_ROUTER_SOLICIT: 44153293e44Sflorian parse_rs(ra_rs); 44253293e44Sflorian break; 44353293e44Sflorian default: 44453293e44Sflorian log_warnx("unexpected icmp6_type: %d from %s on %s", 44553293e44Sflorian hdr->icmp6_type, inet_ntop(AF_INET6, &ra_rs->from.sin6_addr, 44653293e44Sflorian ntopbuf, INET6_ADDRSTRLEN), if_indextoname(ra_rs->if_index, 44753293e44Sflorian ifnamebuf)); 44853293e44Sflorian break; 44953293e44Sflorian } 45053293e44Sflorian } 45153293e44Sflorian 45253293e44Sflorian void 45353293e44Sflorian parse_ra(struct imsg_ra_rs *ra) 45453293e44Sflorian { 45553293e44Sflorian char ntopbuf[INET6_ADDRSTRLEN], ifnamebuf[IFNAMSIZ]; 45653293e44Sflorian log_debug("got RA from %s on %s", 45753293e44Sflorian inet_ntop(AF_INET6, &ra->from.sin6_addr, ntopbuf, 45853293e44Sflorian INET6_ADDRSTRLEN), if_indextoname(ra->if_index, 45953293e44Sflorian ifnamebuf)); 46053293e44Sflorian /* XXX not yet */ 46153293e44Sflorian } 46253293e44Sflorian 46353293e44Sflorian void 46453293e44Sflorian parse_rs(struct imsg_ra_rs *rs) 46553293e44Sflorian { 46653293e44Sflorian struct nd_router_solicit *nd_rs; 46753293e44Sflorian struct imsg_send_ra send_ra; 46853293e44Sflorian ssize_t len; 46953293e44Sflorian const char *hbuf; 47053293e44Sflorian char ifnamebuf[IFNAMSIZ]; 47153293e44Sflorian uint8_t *p; 47253293e44Sflorian 47353293e44Sflorian hbuf = sin6_to_str(&rs->from); 47453293e44Sflorian 47553293e44Sflorian send_ra.if_index = rs->if_index; 47653293e44Sflorian memcpy(&send_ra.to, &all_nodes, sizeof(send_ra.to)); 47753293e44Sflorian 47853293e44Sflorian log_debug("got RS from %s on %s", hbuf, if_indextoname(rs->if_index, 47953293e44Sflorian ifnamebuf)); 48053293e44Sflorian 48153293e44Sflorian len = rs->len; 48253293e44Sflorian 483*18ef43d7Sflorian if (!(IN6_IS_ADDR_LINKLOCAL(&rs->from.sin6_addr) || 484*18ef43d7Sflorian IN6_IS_ADDR_UNSPECIFIED(&rs->from.sin6_addr))) { 485*18ef43d7Sflorian log_warnx("RA from invalid address %s on %s", hbuf, 4864e3dc766Sclaudio if_indextoname(rs->if_index, ifnamebuf)); 48753293e44Sflorian return; 48853293e44Sflorian } 48953293e44Sflorian 49053293e44Sflorian if ((size_t)len < sizeof(struct nd_router_solicit)) { 49153293e44Sflorian log_warnx("received too short message (%ld) from %s", len, 49253293e44Sflorian hbuf); 49353293e44Sflorian return; 49453293e44Sflorian } 49553293e44Sflorian 49653293e44Sflorian p = rs->packet; 49753293e44Sflorian nd_rs = (struct nd_router_solicit *)p; 49853293e44Sflorian len -= sizeof(struct nd_router_solicit); 49953293e44Sflorian p += sizeof(struct nd_router_solicit); 50053293e44Sflorian 50153293e44Sflorian if (nd_rs->nd_rs_code != 0) { 50253293e44Sflorian log_warnx("invalid ICMPv6 code (%d) from %s", nd_rs->nd_rs_code, 50353293e44Sflorian hbuf); 50453293e44Sflorian return; 50553293e44Sflorian } 50653293e44Sflorian while ((size_t)len >= sizeof(struct nd_opt_hdr)) { 50753293e44Sflorian struct nd_opt_hdr *nd_opt_hdr = (struct nd_opt_hdr *)p; 50853293e44Sflorian 50953293e44Sflorian len -= sizeof(struct nd_opt_hdr); 51053293e44Sflorian p += sizeof(struct nd_opt_hdr); 51153293e44Sflorian 51253293e44Sflorian if (nd_opt_hdr->nd_opt_len * 8 - 2 > len) { 51353293e44Sflorian log_warnx("invalid option len: %u > %ld", 51453293e44Sflorian nd_opt_hdr->nd_opt_len, len); 51553293e44Sflorian return; 51653293e44Sflorian } 51753293e44Sflorian switch (nd_opt_hdr->nd_opt_type) { 51853293e44Sflorian case ND_OPT_SOURCE_LINKADDR: 51953293e44Sflorian log_debug("got RS with source linkaddr option"); 52053293e44Sflorian memcpy(&send_ra.to, &rs->from, sizeof(send_ra.to)); 52153293e44Sflorian break; 52253293e44Sflorian default: 52353293e44Sflorian log_debug("\t\tUNKNOWN: %d", nd_opt_hdr->nd_opt_type); 52453293e44Sflorian break; 52553293e44Sflorian } 52653293e44Sflorian len -= nd_opt_hdr->nd_opt_len * 8 - 2; 52753293e44Sflorian p += nd_opt_hdr->nd_opt_len * 8 - 2; 52853293e44Sflorian } 52953293e44Sflorian engine_imsg_compose_frontend(IMSG_SEND_RA, 0, &send_ra, 53053293e44Sflorian sizeof(send_ra)); 53153293e44Sflorian } 5320c40990eSflorian 5330c40990eSflorian struct engine_iface* 5340c40990eSflorian find_engine_iface_by_id(uint32_t if_index) 5350c40990eSflorian { 5360c40990eSflorian struct engine_iface *engine_iface; 5370c40990eSflorian 5380c40990eSflorian TAILQ_FOREACH(engine_iface, &engine_interfaces, entry) { 5390c40990eSflorian if (engine_iface->if_index == if_index) 5400c40990eSflorian return engine_iface; 5410c40990eSflorian } 5420c40990eSflorian return (NULL); 5430c40990eSflorian } 5440c40990eSflorian 5450c40990eSflorian void 5460c40990eSflorian update_iface(uint32_t if_index) 5470c40990eSflorian { 5480c40990eSflorian struct engine_iface *engine_iface; 5490c40990eSflorian struct timeval tv; 5500c40990eSflorian 5510c40990eSflorian if ((engine_iface = find_engine_iface_by_id(if_index)) == NULL) { 5520c40990eSflorian engine_iface = calloc(1, sizeof(*engine_iface)); 5530c40990eSflorian engine_iface->if_index = if_index; 5540c40990eSflorian evtimer_set(&engine_iface->timer, iface_timeout, engine_iface); 5554a78c7cfSflorian TAILQ_INSERT_TAIL(&engine_interfaces, engine_iface, entry); 5560c40990eSflorian } 5570c40990eSflorian 5580c40990eSflorian tv.tv_sec = 0; 5590c40990eSflorian tv.tv_usec = arc4random_uniform(1000000); 5600c40990eSflorian evtimer_add(&engine_iface->timer, &tv); 5610c40990eSflorian } 5620c40990eSflorian 5630c40990eSflorian void 5644a78c7cfSflorian remove_iface(uint32_t if_index) 5654a78c7cfSflorian { 5664a78c7cfSflorian struct engine_iface *engine_iface; 5674a78c7cfSflorian struct imsg_send_ra send_ra; 5684a78c7cfSflorian char if_name[IF_NAMESIZE]; 5694a78c7cfSflorian 5704a78c7cfSflorian if ((engine_iface = find_engine_iface_by_id(if_index)) == NULL) { 5714a78c7cfSflorian /* we don't know this interface, frontend can delete it */ 5724a78c7cfSflorian engine_imsg_compose_frontend(IMSG_REMOVE_IF, 0, 5734a78c7cfSflorian &if_index, sizeof(if_index)); 5744a78c7cfSflorian return; 5754a78c7cfSflorian } 5764a78c7cfSflorian 5774a78c7cfSflorian send_ra.if_index = engine_iface->if_index; 5784a78c7cfSflorian memcpy(&send_ra.to, &all_nodes, sizeof(send_ra.to)); 5794a78c7cfSflorian 5804a78c7cfSflorian TAILQ_REMOVE(&engine_interfaces, engine_iface, entry); 5814a78c7cfSflorian evtimer_del(&engine_iface->timer); 5824a78c7cfSflorian 5834a78c7cfSflorian if (if_indextoname(if_index, if_name) != NULL) 5844a78c7cfSflorian engine_imsg_compose_frontend(IMSG_SEND_RA, 0, &send_ra, 5854a78c7cfSflorian sizeof(send_ra)); 5864a78c7cfSflorian engine_imsg_compose_frontend(IMSG_REMOVE_IF, 0, 5874a78c7cfSflorian &engine_iface->if_index, sizeof(engine_iface->if_index)); 5884a78c7cfSflorian free(engine_iface); 5894a78c7cfSflorian } 5904a78c7cfSflorian 5914a78c7cfSflorian void 5920c40990eSflorian iface_timeout(int fd, short events, void *arg) 5930c40990eSflorian { 5940c40990eSflorian struct engine_iface *engine_iface = (struct engine_iface *)arg; 5950c40990eSflorian struct imsg_send_ra send_ra; 5960c40990eSflorian struct timeval tv; 5970c40990eSflorian 5980c40990eSflorian tv.tv_sec = MIN_RTR_ADV_INTERVAL + 5990c40990eSflorian arc4random_uniform(MAX_RTR_ADV_INTERVAL - MIN_RTR_ADV_INTERVAL); 6000c40990eSflorian tv.tv_usec = arc4random_uniform(1000000); 6010c40990eSflorian 6020c40990eSflorian log_debug("%s new timeout in %lld", __func__, tv.tv_sec); 6030c40990eSflorian 6040c40990eSflorian evtimer_add(&engine_iface->timer, &tv); 6050c40990eSflorian 6060c40990eSflorian send_ra.if_index = engine_iface->if_index; 6070c40990eSflorian memcpy(&send_ra.to, &all_nodes, sizeof(send_ra.to)); 6080c40990eSflorian engine_imsg_compose_frontend(IMSG_SEND_RA, 0, &send_ra, 6090c40990eSflorian sizeof(send_ra)); 6100c40990eSflorian } 611