2006-09-19 19:58:09 +00:00
/*
2006-03-25 23:50:09 +00:00
* Asterisk - - An open source telephony toolkit .
*
* Copyright ( C ) 1999 - 2006 , Digium , Inc .
*
* Mark Spencer < markster @ digium . com >
*
* See http : //www.asterisk.org for more information about
* the Asterisk project . Please do not directly contact
* any of the maintainers of this project for assistance ;
* the project provides a web site , mailing lists and IRC
* channels for your use .
*
* This program is free software , distributed under the terms of
* the GNU General Public License Version 2. See the LICENSE file
* at the top of the source tree .
*/
2006-03-26 16:48:47 +00:00
/*!
2006-09-19 19:58:09 +00:00
* \ file
2006-04-03 18:38:28 +00:00
* \ brief http server for AMI access
2006-03-26 16:48:47 +00:00
*
2006-04-03 18:38:28 +00:00
* \ author Mark Spencer < markster @ digium . com >
2007-04-06 21:16:38 +00:00
*
* This program implements a tiny http server
* and was inspired by micro - httpd by Jef Poskanzer
2006-09-19 19:58:09 +00:00
*
2006-04-03 18:38:28 +00:00
* \ ref AstHTTP - AMI over the http protocol
2006-03-26 16:48:47 +00:00
*/
2006-06-07 18:54:56 +00:00
# include "asterisk.h"
ASTERISK_FILE_VERSION ( __FILE__ , " $Revision$ " )
2006-03-25 23:50:09 +00:00
# include <sys/types.h>
# include <stdio.h>
# include <unistd.h>
# include <stdlib.h>
# include <time.h>
# include <string.h>
# include <netinet/in.h>
# include <sys/time.h>
# include <sys/socket.h>
2006-04-01 08:49:54 +00:00
# include <sys/stat.h>
2006-03-25 23:50:09 +00:00
# include <sys/signal.h>
# include <arpa/inet.h>
# include <errno.h>
# include <fcntl.h>
# include <pthread.h>
2006-03-26 16:48:47 +00:00
2007-04-06 21:16:38 +00:00
# include "minimime/mm.h"
2006-03-26 16:48:47 +00:00
# include "asterisk/cli.h"
# include "asterisk/http.h"
# include "asterisk/utils.h"
# include "asterisk/strings.h"
2006-04-01 08:49:54 +00:00
# include "asterisk/options.h"
# include "asterisk/config.h"
2006-12-23 20:13:14 +00:00
# include "asterisk/stringfields.h"
2007-02-20 20:32:13 +00:00
# include "asterisk/version.h"
2007-04-06 21:16:38 +00:00
# include "asterisk/manager.h"
2006-03-25 23:50:09 +00:00
# define MAX_PREFIX 80
2006-04-02 23:55:15 +00:00
# define DEFAULT_PREFIX " / asterisk"
2006-03-25 23:50:09 +00:00
2007-01-24 09:31:26 +00:00
/* See http.h for more information about the SSL implementation */
2006-10-22 19:09:25 +00:00
# if defined(HAVE_OPENSSL) && (defined(HAVE_FUNOPEN) || defined(HAVE_FOPENCOOKIE))
# define DO_SSL /* comment in/out if you want to support ssl */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
# endif
2006-12-07 16:42:29 +00:00
static struct tls_config http_tls_cfg ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
2006-11-25 17:37:04 +00:00
static void * httpd_helper_thread ( void * arg ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
/*!
* we have up to two accepting threads , one for http , one for https
*/
static struct server_args http_desc = {
. accept_fd = - 1 ,
. master = AST_PTHREADT_NULL ,
2006-12-07 16:42:29 +00:00
. tls_cfg = NULL ,
2006-11-28 00:02:42 +00:00
. poll_timeout = - 1 ,
2006-11-25 17:37:04 +00:00
. name = " http server " ,
2006-11-27 21:25:55 +00:00
. accept_fn = server_root ,
2006-11-25 17:37:04 +00:00
. worker_fn = httpd_helper_thread ,
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
} ;
static struct server_args https_desc = {
. accept_fd = - 1 ,
. master = AST_PTHREADT_NULL ,
2006-12-07 16:42:29 +00:00
. tls_cfg = & http_tls_cfg ,
2006-11-28 00:02:42 +00:00
. poll_timeout = - 1 ,
2006-11-25 17:37:04 +00:00
. name = " https server " ,
2006-11-27 21:25:55 +00:00
. accept_fn = server_root ,
2006-11-25 17:37:04 +00:00
. worker_fn = httpd_helper_thread ,
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
} ;
2006-03-25 23:50:09 +00:00
2006-12-28 20:02:41 +00:00
static AST_RWLIST_HEAD_STATIC ( uris , ast_http_uri ) ; /*!< list of supported handlers */
2006-10-16 08:38:35 +00:00
2007-04-06 21:16:38 +00:00
struct ast_http_post_mapping {
AST_RWLIST_ENTRY ( ast_http_post_mapping ) entry ;
char * from ;
char * to ;
} ;
static AST_RWLIST_HEAD_STATIC ( post_mappings , ast_http_post_mapping ) ;
2006-10-16 08:38:35 +00:00
/* all valid URIs must be prepended by the string in prefix. */
2006-03-25 23:50:09 +00:00
static char prefix [ MAX_PREFIX ] ;
2006-12-27 22:14:33 +00:00
static int enablestatic ;
2006-04-01 08:49:54 +00:00
2006-04-03 18:38:28 +00:00
/*! \brief Limit the kinds of files we're willing to serve up */
2006-04-01 08:49:54 +00:00
static struct {
2007-04-11 14:49:07 +00:00
const char * ext ;
const char * mtype ;
2006-04-01 08:49:54 +00:00
} mimetypes [ ] = {
{ " png " , " image/png " } ,
{ " jpg " , " image/jpeg " } ,
{ " js " , " application/x-javascript " } ,
{ " wav " , " audio/x-wav " } ,
{ " mp3 " , " audio/mpeg " } ,
2007-03-21 18:10:01 +00:00
{ " svg " , " image/svg+xml " } ,
2007-04-11 14:49:07 +00:00
{ " svgz " , " image/svg+xml " } ,
2007-04-05 15:48:17 +00:00
{ " gif " , " image/gif " } ,
2006-04-01 08:49:54 +00:00
} ;
2006-12-23 20:13:14 +00:00
struct http_uri_redirect {
AST_LIST_ENTRY ( http_uri_redirect ) entry ;
2006-12-24 03:29:42 +00:00
char * dest ;
char target [ 0 ] ;
2006-12-23 20:13:14 +00:00
} ;
2006-12-28 20:05:00 +00:00
static AST_RWLIST_HEAD_STATIC ( uri_redirects , http_uri_redirect ) ;
2006-12-23 20:13:14 +00:00
2007-04-11 14:49:07 +00:00
static const char * ftype2mtype ( const char * ftype , char * wkspace , int wkspacelen )
2006-04-01 08:49:54 +00:00
{
int x ;
if ( ftype ) {
for ( x = 0 ; x < sizeof ( mimetypes ) / sizeof ( mimetypes [ 0 ] ) ; x + + ) {
if ( ! strcasecmp ( ftype , mimetypes [ x ] . ext ) )
return mimetypes [ x ] . mtype ;
}
}
snprintf ( wkspace , wkspacelen , " text/%s " , ftype ? ftype : " plain " ) ;
return wkspace ;
}
2006-12-16 09:33:31 +00:00
static struct ast_str * static_callback ( struct sockaddr_in * req , const char * uri , struct ast_variable * vars , int * status , char * * title , int * contentlength )
2006-04-01 08:49:54 +00:00
{
2006-12-16 09:33:31 +00:00
struct ast_str * result ;
2006-04-01 08:49:54 +00:00
char * path ;
2007-04-11 14:49:07 +00:00
char * ftype ;
const char * mtype ;
2006-04-01 08:49:54 +00:00
char wkspace [ 80 ] ;
struct stat st ;
int len ;
int fd ;
2006-09-19 19:58:09 +00:00
/* Yuck. I'm not really sold on this, but if you don't deliver static content it makes your configuration
2006-04-01 08:49:54 +00:00
substantially more challenging , but this seems like a rather irritating feature creep on Asterisk . */
if ( ! enablestatic | | ast_strlen_zero ( uri ) )
goto out403 ;
/* Disallow any funny filenames at all */
if ( ( uri [ 0 ] < 33 ) | | strchr ( " ./|~@#$%^&*() \t " , uri [ 0 ] ) )
goto out403 ;
if ( strstr ( uri , " /.. " ) )
goto out403 ;
2006-09-19 19:58:09 +00:00
2006-04-01 08:49:54 +00:00
if ( ( ftype = strrchr ( uri , ' . ' ) ) )
ftype + + ;
2007-04-11 14:49:07 +00:00
mtype = ftype2mtype ( ftype , wkspace , sizeof ( wkspace ) ) ;
2006-09-19 19:58:09 +00:00
2006-04-01 08:49:54 +00:00
/* Cap maximum length */
2006-04-15 22:53:53 +00:00
len = strlen ( uri ) + strlen ( ast_config_AST_DATA_DIR ) + strlen ( " /static-http/ " ) + 5 ;
2006-04-01 08:49:54 +00:00
if ( len > 1024 )
goto out403 ;
2006-09-19 19:58:09 +00:00
2006-04-01 08:49:54 +00:00
path = alloca ( len ) ;
2006-04-15 22:53:53 +00:00
sprintf ( path , " %s/static-http/%s " , ast_config_AST_DATA_DIR , uri ) ;
2006-04-01 08:49:54 +00:00
if ( stat ( path , & st ) )
goto out404 ;
if ( S_ISDIR ( st . st_mode ) )
goto out404 ;
fd = open ( path , O_RDONLY ) ;
if ( fd < 0 )
goto out403 ;
2006-12-16 09:33:31 +00:00
2006-04-01 08:49:54 +00:00
len = st . st_size + strlen ( mtype ) + 40 ;
2006-12-16 09:33:31 +00:00
result = ast_str_create ( len ) ;
if ( result = = NULL ) /* XXX not really but... */
goto out403 ;
ast_str_append ( & result , 0 , " Content-type: %s \r \n \r \n " , mtype ) ;
* contentlength = read ( fd , result - > str + result - > used , st . st_size ) ;
if ( * contentlength < 0 ) {
close ( fd ) ;
2007-06-06 21:20:11 +00:00
ast_free ( result ) ;
2006-12-16 09:33:31 +00:00
goto out403 ;
2006-04-01 08:49:54 +00:00
}
2006-12-16 09:33:31 +00:00
result - > used + = * contentlength ;
2006-07-18 20:26:38 +00:00
close ( fd ) ;
2006-12-16 09:33:31 +00:00
return result ;
2006-04-01 08:49:54 +00:00
out404 :
* status = 404 ;
2007-06-14 23:01:01 +00:00
* title = ast_strdup ( " Not Found " ) ;
2006-04-01 08:49:54 +00:00
return ast_http_error ( 404 , " Not Found " , NULL , " Nothing to see here. Move along. " ) ;
out403 :
* status = 403 ;
2007-06-14 23:01:01 +00:00
* title = ast_strdup ( " Access Denied " ) ;
2006-04-01 08:49:54 +00:00
return ast_http_error ( 403 , " Access Denied " , NULL , " Sorry, I cannot let you do that, Dave. " ) ;
}
2006-03-25 23:50:09 +00:00
2006-12-16 09:33:31 +00:00
static struct ast_str * httpstatus_callback ( struct sockaddr_in * req , const char * uri , struct ast_variable * vars , int * status , char * * title , int * contentlength )
2006-03-25 23:50:09 +00:00
{
2006-12-16 09:33:31 +00:00
struct ast_str * out = ast_str_create ( 512 ) ;
2006-03-25 23:50:09 +00:00
struct ast_variable * v ;
2006-12-16 09:33:31 +00:00
if ( out = = NULL )
return out ;
ast_str_append ( & out , 0 ,
2006-03-25 23:50:09 +00:00
" \r \n "
" <title>Asterisk HTTP Status</title> \r \n "
" <body bgcolor= \" #ffffff \" > \r \n "
" <table bgcolor= \" #f1f1f1 \" align= \" center \" ><tr><td bgcolor= \" #e0e0ff \" colspan= \" 2 \" width= \" 500 \" > \r \n "
" <h2> Asterisk™ HTTP Status</h2></td></tr> \r \n " ) ;
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td><i>Prefix</i></td><td><b>%s</b></td></tr> \r \n " , prefix ) ;
ast_str_append ( & out , 0 , " <tr><td><i>Bind Address</i></td><td><b>%s</b></td></tr> \r \n " ,
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ast_inet_ntoa ( http_desc . oldsin . sin_addr ) ) ;
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td><i>Bind Port</i></td><td><b>%d</b></td></tr> \r \n " ,
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ntohs ( http_desc . oldsin . sin_port ) ) ;
2006-12-07 16:42:29 +00:00
if ( http_tls_cfg . enabled )
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td><i>SSL Bind Port</i></td><td><b>%d</b></td></tr> \r \n " ,
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ntohs ( https_desc . oldsin . sin_port ) ) ;
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td colspan= \" 2 \" ><hr></td></tr> \r \n " ) ;
for ( v = vars ; v ; v = v - > next ) {
2006-04-01 08:49:54 +00:00
if ( strncasecmp ( v - > name , " cookie_ " , 7 ) )
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td><i>Submitted Variable '%s'</i></td><td>%s</td></tr> \r \n " , v - > name , v - > value ) ;
2006-04-01 08:49:54 +00:00
}
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td colspan= \" 2 \" ><hr></td></tr> \r \n " ) ;
for ( v = vars ; v ; v = v - > next ) {
2006-04-01 08:49:54 +00:00
if ( ! strncasecmp ( v - > name , " cookie_ " , 7 ) )
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " <tr><td><i>Cookie '%s'</i></td><td>%s</td></tr> \r \n " , v - > name , v - > value ) ;
2006-03-25 23:50:09 +00:00
}
2006-12-16 09:33:31 +00:00
ast_str_append ( & out , 0 , " </table><center><font size= \" -1 \" ><i>Asterisk and Digium are registered trademarks of Digium, Inc.</i></font></center></body> \r \n " ) ;
return out ;
2006-03-25 23:50:09 +00:00
}
static struct ast_http_uri statusuri = {
. callback = httpstatus_callback ,
. description = " Asterisk HTTP General Status " ,
. uri = " httpstatus " ,
. has_subtree = 0 ,
} ;
2006-09-19 19:58:09 +00:00
2006-04-01 08:49:54 +00:00
static struct ast_http_uri staticuri = {
. callback = static_callback ,
. description = " Asterisk HTTP Static Delivery " ,
. uri = " static " ,
. has_subtree = 1 ,
2007-04-30 15:30:02 +00:00
. static_content = 1 ,
2006-04-01 08:49:54 +00:00
} ;
2006-09-19 19:58:09 +00:00
2006-12-16 09:33:31 +00:00
struct ast_str * ast_http_error ( int status , const char * title , const char * extra_header , const char * text )
2006-03-25 23:50:09 +00:00
{
2006-12-16 09:33:31 +00:00
struct ast_str * out = ast_str_create ( 512 ) ;
if ( out = = NULL )
return out ;
ast_str_set ( & out , 0 ,
2006-03-25 23:50:09 +00:00
" Content-type: text/html \r \n "
" %s "
" \r \n "
" <!DOCTYPE HTML PUBLIC \" -//IETF//DTD HTML 2.0//EN \" > \r \n "
" <html><head> \r \n "
" <title>%d %s</title> \r \n "
" </head><body> \r \n "
" <h1>%s</h1> \r \n "
" <p>%s</p> \r \n "
" <hr /> \r \n "
" <address>Asterisk Server</address> \r \n "
" </body></html> \r \n " ,
( extra_header ? extra_header : " " ) , status , title , title , text ) ;
2006-12-16 09:33:31 +00:00
return out ;
2006-03-25 23:50:09 +00:00
}
2006-10-16 08:38:35 +00:00
/*! \brief
2007-01-24 09:31:26 +00:00
* Link the new uri into the list .
*
* They are sorted by length of
2006-10-16 08:38:35 +00:00
* the string , not alphabetically . Duplicate entries are not replaced ,
* but the insertion order ( using < = and not just < ) makes sure that
* more recent insertions hide older ones .
* On a lookup , we just scan the list and stop at the first matching entry .
*/
2006-03-25 23:50:09 +00:00
int ast_http_uri_link ( struct ast_http_uri * urih )
{
2006-12-23 20:13:14 +00:00
struct ast_http_uri * uri ;
2006-10-16 08:38:35 +00:00
int len = strlen ( urih - > uri ) ;
2006-12-28 20:02:41 +00:00
AST_RWLIST_WRLOCK ( & uris ) ;
2006-12-23 20:13:14 +00:00
2006-12-28 20:02:41 +00:00
if ( AST_RWLIST_EMPTY ( & uris ) | | strlen ( AST_RWLIST_FIRST ( & uris ) - > uri ) < = len ) {
AST_RWLIST_INSERT_HEAD ( & uris , urih , entry ) ;
AST_RWLIST_UNLOCK ( & uris ) ;
2006-12-23 20:13:14 +00:00
return 0 ;
2006-03-25 23:50:09 +00:00
}
2006-12-23 20:13:14 +00:00
2006-12-28 20:02:41 +00:00
AST_RWLIST_TRAVERSE ( & uris , uri , entry ) {
if ( AST_RWLIST_NEXT ( uri , entry )
& & strlen ( AST_RWLIST_NEXT ( uri , entry ) - > uri ) < = len ) {
AST_RWLIST_INSERT_AFTER ( & uris , uri , urih , entry ) ;
AST_RWLIST_UNLOCK ( & uris ) ;
2006-12-23 20:13:14 +00:00
return 0 ;
}
}
2006-12-28 20:02:41 +00:00
AST_RWLIST_INSERT_TAIL ( & uris , urih , entry ) ;
2006-12-23 20:13:14 +00:00
2006-12-28 20:02:41 +00:00
AST_RWLIST_UNLOCK ( & uris ) ;
2006-12-23 20:13:14 +00:00
2006-03-25 23:50:09 +00:00
return 0 ;
2006-09-19 19:58:09 +00:00
}
2006-03-25 23:50:09 +00:00
void ast_http_uri_unlink ( struct ast_http_uri * urih )
{
2006-12-28 20:02:41 +00:00
AST_RWLIST_WRLOCK ( & uris ) ;
AST_RWLIST_REMOVE ( & uris , urih , entry ) ;
AST_RWLIST_UNLOCK ( & uris ) ;
2006-03-25 23:50:09 +00:00
}
2007-04-06 21:16:38 +00:00
/*! \note This assumes that the post_mappings list is locked */
static struct ast_http_post_mapping * find_post_mapping ( const char * uri )
{
struct ast_http_post_mapping * post_map ;
if ( ! ast_strlen_zero ( prefix ) & & strncmp ( prefix , uri , strlen ( prefix ) ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " URI %s does not have prefix %s \n " , uri , prefix ) ;
2007-04-06 21:16:38 +00:00
return NULL ;
}
uri + = strlen ( prefix ) ;
if ( * uri = = ' / ' )
uri + + ;
AST_RWLIST_TRAVERSE ( & post_mappings , post_map , entry ) {
if ( ! strcmp ( uri , post_map - > from ) )
return post_map ;
}
return NULL ;
}
static int get_filename ( struct mm_mimepart * part , char * fn , size_t fn_len )
{
const char * filename ;
filename = mm_content_getdispositionparambyname ( part - > type , " filename " ) ;
if ( ast_strlen_zero ( filename ) )
return - 1 ;
ast_copy_string ( fn , filename , fn_len ) ;
return 0 ;
}
static void post_raw ( struct mm_mimepart * part , const char * post_dir , const char * fn )
{
char filename [ PATH_MAX ] ;
FILE * f ;
const char * body ;
size_t body_len ;
snprintf ( filename , sizeof ( filename ) , " %s/%s " , post_dir , fn ) ;
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Posting raw data to %s \n " , filename ) ;
2007-04-06 21:16:38 +00:00
if ( ! ( f = fopen ( filename , " w " ) ) ) {
ast_log ( LOG_WARNING , " Unable to open %s for writing file from a POST! \n " , filename ) ;
return ;
}
if ( ! ( body = mm_mimepart_getbody ( part , 0 ) ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Couldn't get the mimepart body \n " ) ;
2007-04-06 21:16:38 +00:00
fclose ( f ) ;
return ;
}
body_len = mm_mimepart_getlength ( part ) ;
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Body length is %ld \n " , ( long int ) body_len ) ;
2007-04-06 21:16:38 +00:00
fwrite ( body , 1 , body_len , f ) ;
fclose ( f ) ;
}
static struct ast_str * handle_post ( struct server_instance * ser , char * uri ,
int * status , char * * title , int * contentlength , struct ast_variable * headers ,
struct ast_variable * cookies )
{
char buf ;
FILE * f ;
size_t res ;
struct ast_variable * var ;
int content_len = 0 ;
MM_CTX * ctx ;
int mm_res , i ;
struct ast_http_post_mapping * post_map ;
const char * post_dir ;
unsigned long ident = 0 ;
for ( var = cookies ; var ; var = var - > next ) {
if ( strcasecmp ( var - > name , " mansession_id " ) )
continue ;
if ( sscanf ( var - > value , " %lx " , & ident ) ! = 1 ) {
* status = 400 ;
* title = ast_strdup ( " Bad Request " ) ;
return ast_http_error ( 400 , " Bad Request " , NULL , " The was an error parsing the request. " ) ;
}
if ( ! astman_verify_session_writepermissions ( ident , EVENT_FLAG_CONFIG ) ) {
* status = 401 ;
* title = ast_strdup ( " Unauthorized " ) ;
return ast_http_error ( 401 , " Unauthorized " , NULL , " You are not authorized to make this request. " ) ;
}
break ;
}
if ( ! var ) {
* status = 401 ;
* title = ast_strdup ( " Unauthorized " ) ;
return ast_http_error ( 401 , " Unauthorized " , NULL , " You are not authorized to make this request. " ) ;
}
if ( ! ( f = tmpfile ( ) ) )
return NULL ;
for ( var = headers ; var ; var = var - > next ) {
if ( ! strcasecmp ( var - > name , " Content-Length " ) ) {
if ( ( sscanf ( var - > value , " %u " , & content_len ) ) ! = 1 ) {
ast_log ( LOG_ERROR , " Invalid Content-Length in POST request! \n " ) ;
fclose ( f ) ;
return NULL ;
}
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Got a Content-Length of %d \n " , content_len ) ;
2007-04-06 21:16:38 +00:00
} else if ( ! strcasecmp ( var - > name , " Content-Type " ) )
fprintf ( f , " Content-Type: %s \r \n \r \n " , var - > value ) ;
}
while ( ( res = fread ( & buf , 1 , 1 , ser - > f ) ) ) {
fwrite ( & buf , 1 , 1 , f ) ;
content_len - - ;
if ( ! content_len )
break ;
}
if ( fseek ( f , SEEK_SET , 0 ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Failed to seek temp file back to beginning. \n " ) ;
2007-04-06 21:16:38 +00:00
fclose ( f ) ;
return NULL ;
}
AST_RWLIST_RDLOCK ( & post_mappings ) ;
if ( ! ( post_map = find_post_mapping ( uri ) ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " %s is not a valid URI for POST \n " , uri ) ;
2007-04-06 21:16:38 +00:00
AST_RWLIST_UNLOCK ( & post_mappings ) ;
fclose ( f ) ;
* status = 404 ;
* title = ast_strdup ( " Not Found " ) ;
return ast_http_error ( 404 , " Not Found " , NULL , " The requested URL was not found on this server. " ) ;
}
post_dir = ast_strdupa ( post_map - > to ) ;
post_map = NULL ;
AST_RWLIST_UNLOCK ( & post_mappings ) ;
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Going to post files to dir %s \n " , post_dir ) ;
2007-04-06 21:16:38 +00:00
if ( ! ( ctx = mm_context_new ( ) ) ) {
fclose ( f ) ;
return NULL ;
}
mm_res = mm_parse_fileptr ( ctx , f , MM_PARSE_LOOSE , 0 ) ;
fclose ( f ) ;
if ( mm_res = = - 1 ) {
ast_log ( LOG_ERROR , " Error parsing MIME data \n " ) ;
mm_context_free ( ctx ) ;
* status = 400 ;
* title = ast_strdup ( " Bad Request " ) ;
return ast_http_error ( 400 , " Bad Request " , NULL , " The was an error parsing the request. " ) ;
}
mm_res = mm_context_countparts ( ctx ) ;
if ( ! mm_res ) {
ast_log ( LOG_ERROR , " Invalid MIME data, found no parts! \n " ) ;
mm_context_free ( ctx ) ;
* status = 400 ;
* title = ast_strdup ( " Bad Request " ) ;
return ast_http_error ( 400 , " Bad Request " , NULL , " The was an error parsing the request. " ) ;
}
if ( option_debug ) {
if ( mm_context_iscomposite ( ctx ) )
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Found %d MIME parts \n " , mm_res - 1 ) ;
2007-04-06 21:16:38 +00:00
else
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " We have a flat (not multi-part) message \n " ) ;
2007-04-06 21:16:38 +00:00
}
for ( i = 1 ; i < mm_res ; i + + ) {
struct mm_mimepart * part ;
char fn [ PATH_MAX ] ;
if ( ! ( part = mm_context_getpart ( ctx , i ) ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Failed to get mime part num %d \n " , i ) ;
2007-04-06 21:16:38 +00:00
continue ;
}
if ( get_filename ( part , fn , sizeof ( fn ) ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Failed to retrieve a filename for part num %d \n " , i ) ;
2007-04-06 21:16:38 +00:00
continue ;
}
if ( ! part - > type ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " This part has no content struct? \n " ) ;
2007-04-06 21:16:38 +00:00
continue ;
}
/* XXX This assumes the MIME part body is not encoded! */
post_raw ( part , post_dir , fn ) ;
}
mm_context_free ( ctx ) ;
* status = 200 ;
* title = ast_strdup ( " OK " ) ;
return ast_http_error ( 200 , " OK " , NULL , " File successfully uploaded. " ) ;
}
2007-04-30 15:30:02 +00:00
static struct ast_str * handle_uri ( struct sockaddr_in * sin , char * uri , int * status ,
char * * title , int * contentlength , struct ast_variable * * cookies ,
unsigned int * static_content )
2006-03-25 23:50:09 +00:00
{
char * c ;
2006-12-16 09:33:31 +00:00
struct ast_str * out = NULL ;
2006-10-18 04:05:56 +00:00
char * params = uri ;
2006-03-25 23:50:09 +00:00
struct ast_http_uri * urih = NULL ;
2006-10-18 04:05:56 +00:00
int l ;
2006-03-25 23:50:09 +00:00
struct ast_variable * vars = NULL , * v , * prev = NULL ;
2006-12-23 20:13:14 +00:00
struct http_uri_redirect * redirect ;
2006-10-16 08:38:35 +00:00
2006-10-18 04:05:56 +00:00
strsep ( & params , " ? " ) ;
2006-10-16 08:38:35 +00:00
/* Extract arguments from the request and store them in variables. */
2006-03-25 23:50:09 +00:00
if ( params ) {
2006-10-16 08:38:35 +00:00
char * var , * val ;
2006-10-18 04:05:56 +00:00
while ( ( val = strsep ( & params , " & " ) ) ) {
var = strsep ( & val , " = " ) ;
if ( val )
2007-06-20 20:41:06 +00:00
ast_uri_decode ( val ) ;
2006-10-18 04:05:56 +00:00
else
2006-03-25 23:50:09 +00:00
val = " " ;
ast_uri_decode ( var ) ;
if ( ( v = ast_variable_new ( var , val ) ) ) {
if ( vars )
prev - > next = v ;
else
vars = v ;
prev = v ;
}
}
}
2006-10-16 08:38:35 +00:00
/*
* Append the cookies to the variables ( the only reason to have them
* at the end is to avoid another pass of the cookies list to find
2006-10-18 04:05:56 +00:00
* the tail ) .
2006-10-16 08:38:35 +00:00
*/
2006-04-01 08:49:54 +00:00
if ( prev )
prev - > next = * cookies ;
else
vars = * cookies ;
* cookies = NULL ;
2006-03-25 23:50:09 +00:00
ast_uri_decode ( uri ) ;
2006-10-16 08:38:35 +00:00
2006-12-28 20:05:00 +00:00
AST_RWLIST_RDLOCK ( & uri_redirects ) ;
AST_RWLIST_TRAVERSE ( & uri_redirects , redirect , entry ) {
2006-12-23 20:13:14 +00:00
if ( ! strcasecmp ( uri , redirect - > target ) ) {
char buf [ 512 ] ;
snprintf ( buf , sizeof ( buf ) , " Location: %s \r \n " , redirect - > dest ) ;
out = ast_http_error ( 302 , " Moved Temporarily " , buf ,
" There is no spoon... " ) ;
* status = 302 ;
2007-06-14 23:01:01 +00:00
* title = ast_strdup ( " Moved Temporarily " ) ;
2006-12-23 20:13:14 +00:00
break ;
}
}
2006-12-28 20:05:00 +00:00
AST_RWLIST_UNLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
if ( redirect )
goto cleanup ;
2006-10-16 08:38:35 +00:00
/* We want requests to start with the prefix and '/' */
2006-10-18 04:05:56 +00:00
l = strlen ( prefix ) ;
if ( l & & ! strncasecmp ( uri , prefix , l ) & & uri [ l ] = = ' / ' ) {
uri + = l + 1 ;
2006-10-16 08:38:35 +00:00
/* scan registered uris to see if we match one. */
2006-12-28 20:02:41 +00:00
AST_RWLIST_RDLOCK ( & uris ) ;
AST_RWLIST_TRAVERSE ( & uris , urih , entry ) {
2006-10-18 04:05:56 +00:00
l = strlen ( urih - > uri ) ;
c = uri + l ; /* candidate */
if ( strncasecmp ( urih - > uri , uri , l ) /* no match */
| | ( * c & & * c ! = ' / ' ) ) /* substring */
continue ;
if ( * c = = ' / ' )
c + + ;
if ( ! * c | | urih - > has_subtree ) {
uri = c ;
break ;
2006-03-25 23:50:09 +00:00
}
}
2006-12-23 20:13:14 +00:00
if ( ! urih )
2006-12-28 20:02:41 +00:00
AST_RWLIST_UNLOCK ( & uris ) ;
2006-03-25 23:50:09 +00:00
}
if ( urih ) {
2007-04-30 15:30:02 +00:00
if ( urih - > static_content )
* static_content = 1 ;
2006-12-16 09:33:31 +00:00
out = urih - > callback ( sin , uri , vars , status , title , contentlength ) ;
2006-12-28 20:02:41 +00:00
AST_RWLIST_UNLOCK ( & uris ) ;
2006-03-25 23:50:09 +00:00
} else {
2006-12-16 09:33:31 +00:00
out = ast_http_error ( 404 , " Not Found " , NULL ,
2006-10-18 04:05:56 +00:00
" The requested URL was not found on this server. " ) ;
2006-03-25 23:50:09 +00:00
* status = 404 ;
2007-06-14 23:01:01 +00:00
* title = ast_strdup ( " Not Found " ) ;
2006-03-25 23:50:09 +00:00
}
2006-12-23 20:13:14 +00:00
cleanup :
2006-10-18 04:05:56 +00:00
ast_variables_destroy ( vars ) ;
2006-12-16 09:33:31 +00:00
return out ;
2006-03-25 23:50:09 +00:00
}
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
# ifdef DO_SSL
2006-10-22 19:09:25 +00:00
# if defined(HAVE_FUNOPEN)
# define HOOK_T int
# define LEN_T int
# else
# define HOOK_T ssize_t
# define LEN_T size_t
# endif
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
/*!
* replacement read / write functions for SSL support .
* We use wrappers rather than SSL_read / SSL_write directly so
* we can put in some debugging .
*/
2006-10-22 19:09:25 +00:00
static HOOK_T ssl_read ( void * cookie , char * buf , LEN_T len )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
{
2006-10-22 19:09:25 +00:00
int i = SSL_read ( cookie , buf , len - 1 ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
#if 0
if ( i > = 0 )
buf [ i ] = ' \0 ' ;
2006-10-22 19:09:25 +00:00
ast_verbose ( " ssl read size %d returns %d <%s> \n " , ( int ) len , i , buf ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
# endif
return i ;
}
2006-10-22 19:09:25 +00:00
static HOOK_T ssl_write ( void * cookie , const char * buf , LEN_T len )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
{
#if 0
char * s = alloca ( len + 1 ) ;
strncpy ( s , buf , len ) ;
s [ len ] = ' \0 ' ;
2006-10-22 19:09:25 +00:00
ast_verbose ( " ssl write size %d <%s> \n " , ( int ) len , s ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
# endif
return SSL_write ( cookie , buf , len ) ;
}
static int ssl_close ( void * cookie )
{
close ( SSL_get_fd ( cookie ) ) ;
SSL_shutdown ( cookie ) ;
SSL_free ( cookie ) ;
return 0 ;
}
2006-10-22 19:09:25 +00:00
# endif /* DO_SSL */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
2006-11-27 19:19:48 +00:00
/*!
* creates a FILE * from the fd passed by the accept thread .
* This operation is potentially expensive ( certificate verification ) ,
* so we do it in the child thread context .
*/
static void * make_file_from_fd ( void * data )
2006-03-25 23:50:09 +00:00
{
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
struct server_instance * ser = data ;
2006-03-25 23:50:09 +00:00
2006-10-22 19:09:25 +00:00
/*
* open a FILE * as appropriate .
*/
2006-12-07 16:42:29 +00:00
if ( ! ser - > parent - > tls_cfg )
2006-10-22 19:09:25 +00:00
ser - > f = fdopen ( ser - > fd , " w+ " ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
# ifdef DO_SSL
2006-12-07 16:42:29 +00:00
else if ( ( ser - > ssl = SSL_new ( ser - > parent - > tls_cfg - > ssl_ctx ) ) ) {
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
SSL_set_fd ( ser - > ssl , ser - > fd ) ;
2006-10-22 19:09:25 +00:00
if ( SSL_accept ( ser - > ssl ) = = 0 )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ast_verbose ( " error setting up ssl connection " ) ;
2006-10-22 19:09:25 +00:00
else {
# if defined(HAVE_FUNOPEN) /* the BSD interface */
ser - > f = funopen ( ser - > ssl , ssl_read , ssl_write , NULL , ssl_close ) ;
# elif defined(HAVE_FOPENCOOKIE) /* the glibc/linux interface */
static const cookie_io_functions_t cookie_funcs = {
ssl_read , ssl_write , NULL , ssl_close
} ;
ser - > f = fopencookie ( ser - > ssl , " w+ " , cookie_funcs ) ;
# else
/* could add other methods here */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
# endif
2006-10-22 19:09:25 +00:00
}
if ( ! ser - > f ) /* no success opening descriptor stacking */
SSL_free ( ser - > ssl ) ;
}
# endif /* DO_SSL */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( ! ser - > f ) {
close ( ser - > fd ) ;
2006-10-22 19:09:25 +00:00
ast_log ( LOG_WARNING , " FILE * open failed! \n " ) ;
2007-06-06 21:20:11 +00:00
ast_free ( ser ) ;
2006-11-27 19:19:48 +00:00
return NULL ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
}
2006-11-27 19:19:48 +00:00
return ser - > parent - > worker_fn ( ser ) ;
}
static void * httpd_helper_thread ( void * data )
{
char buf [ 4096 ] ;
char cookie [ 4096 ] ;
struct server_instance * ser = data ;
2007-04-06 21:16:38 +00:00
struct ast_variable * var , * prev = NULL , * vars = NULL , * headers = NULL ;
2006-12-16 09:33:31 +00:00
char * uri , * title = NULL ;
2006-11-27 19:19:48 +00:00
int status = 200 , contentlength = 0 ;
2006-12-16 09:33:31 +00:00
struct ast_str * out = NULL ;
2007-04-30 15:30:02 +00:00
unsigned int static_content = 0 ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
2006-10-18 04:05:56 +00:00
if ( ! fgets ( buf , sizeof ( buf ) , ser - > f ) )
goto done ;
2006-03-25 23:50:09 +00:00
2006-10-18 04:05:56 +00:00
uri = ast_skip_nonblanks ( buf ) ; /* Skip method */
if ( * uri )
* uri + + = ' \0 ' ;
2006-03-25 23:50:09 +00:00
2006-10-18 04:05:56 +00:00
uri = ast_skip_blanks ( uri ) ; /* Skip white space */
2006-04-01 08:49:54 +00:00
2006-10-18 04:05:56 +00:00
if ( * uri ) { /* terminate at the first blank */
2006-12-16 09:33:31 +00:00
char * c = ast_skip_nonblanks ( uri ) ;
2006-10-18 04:05:56 +00:00
if ( * c )
* c = ' \0 ' ;
}
/* process "Cookie: " lines */
while ( fgets ( cookie , sizeof ( cookie ) , ser - > f ) ) {
char * vname , * vval ;
int l ;
2006-10-16 06:30:51 +00:00
2006-10-18 04:05:56 +00:00
/* Trim trailing characters */
ast_trim_blanks ( cookie ) ;
if ( ast_strlen_zero ( cookie ) )
break ;
2007-04-06 21:16:38 +00:00
if ( strncasecmp ( cookie , " Cookie: " , 8 ) ) {
char * name , * value ;
value = ast_strdupa ( cookie ) ;
name = strsep ( & value , " : " ) ;
if ( ! value )
continue ;
value = ast_skip_blanks ( value ) ;
if ( ast_strlen_zero ( value ) )
continue ;
var = ast_variable_new ( name , value ) ;
if ( ! var )
continue ;
var - > next = headers ;
headers = var ;
2006-10-18 04:05:56 +00:00
continue ;
2007-04-06 21:16:38 +00:00
}
2006-08-17 04:26:28 +00:00
2006-10-18 04:05:56 +00:00
/* TODO - The cookie parsing code below seems to work
in IE6 and FireFox 1.5 . However , it is not entirely
correct , and therefore may not work in all
circumstances .
For more details see RFC 2109 and RFC 2965 */
/* FireFox cookie strings look like:
Cookie : mansession_id = " ******** "
InternetExplorer ' s look like :
Cookie : $ Version = " 1 " ; mansession_id = " ******** " */
2006-10-16 06:55:14 +00:00
2006-10-18 04:05:56 +00:00
/* If we got a FireFox cookie string, the name's right
after " Cookie: " */
vname = ast_skip_blanks ( cookie + 8 ) ;
2006-09-19 19:58:09 +00:00
2006-10-18 04:05:56 +00:00
/* If we got an IE cookie string, we need to skip to
past the version to get to the name */
if ( * vname = = ' $ ' ) {
strsep ( & vname , " ; " ) ;
if ( ! vname ) /* no name ? */
continue ;
vname = ast_skip_blanks ( vname ) ;
2006-04-01 08:49:54 +00:00
}
2006-10-18 04:05:56 +00:00
vval = strchr ( vname , ' = ' ) ;
if ( ! vval )
continue ;
/* Ditch the = and the quotes */
* vval + + = ' \0 ' ;
if ( * vval )
vval + + ;
if ( ( l = strlen ( vval ) ) )
vval [ l - 1 ] = ' \0 ' ; /* trim trailing quote */
var = ast_variable_new ( vname , vval ) ;
if ( var ) {
if ( prev )
prev - > next = var ;
else
vars = var ;
prev = var ;
2006-03-25 23:50:09 +00:00
}
}
2006-10-18 04:05:56 +00:00
if ( ! * uri )
2006-12-16 09:33:31 +00:00
out = ast_http_error ( 400 , " Bad Request " , NULL , " Invalid Request " ) ;
2007-04-06 21:16:38 +00:00
else if ( ! strcasecmp ( buf , " post " ) )
out = handle_post ( ser , uri , & status , & title , & contentlength , headers , vars ) ;
2006-10-18 04:05:56 +00:00
else if ( strcasecmp ( buf , " get " ) )
2006-12-16 09:33:31 +00:00
out = ast_http_error ( 501 , " Not Implemented " , NULL ,
2006-10-18 04:05:56 +00:00
" Attempt to use unimplemented / unsupported method " ) ;
else /* try to serve it */
2007-04-30 15:30:02 +00:00
out = handle_uri ( & ser - > requestor , uri , & status , & title , & contentlength , & vars , & static_content ) ;
2006-10-18 04:05:56 +00:00
/* If they aren't mopped up already, clean up the cookies */
if ( vars )
ast_variables_destroy ( vars ) ;
2006-12-16 09:33:31 +00:00
if ( out = = NULL )
out = ast_http_error ( 500 , " Internal Error " , NULL , " Internal Server Error " ) ;
if ( out ) {
2006-10-18 04:05:56 +00:00
time_t t = time ( NULL ) ;
char timebuf [ 256 ] ;
strftime ( timebuf , sizeof ( timebuf ) , " %a, %d %b %Y %H:%M:%S GMT " , gmtime ( & t ) ) ;
2006-10-22 08:28:16 +00:00
fprintf ( ser - > f , " HTTP/1.1 %d %s \r \n "
2007-02-20 20:32:13 +00:00
" Server: Asterisk/%s \r \n "
2006-10-22 08:28:16 +00:00
" Date: %s \r \n "
2007-04-30 15:30:02 +00:00
" Connection: close \r \n "
" %s " ,
status , title ? title : " OK " , ASTERISK_VERSION , timebuf ,
static_content ? " " : " Cache-Control: no-cache, no-store \r \n " ) ;
2006-10-22 08:28:16 +00:00
if ( ! contentlength ) { /* opaque body ? just dump it hoping it is properly formatted */
2006-12-16 09:33:31 +00:00
fprintf ( ser - > f , " %s " , out - > str ) ;
2006-10-22 08:28:16 +00:00
} else {
2006-12-16 09:33:31 +00:00
char * tmp = strstr ( out - > str , " \r \n \r \n " ) ;
2006-10-18 04:05:56 +00:00
if ( tmp ) {
2006-10-22 08:28:16 +00:00
fprintf ( ser - > f , " Content-length: %d \r \n " , contentlength ) ;
2006-10-18 04:05:56 +00:00
/* first write the header, then the body */
2006-12-16 09:33:31 +00:00
fwrite ( out - > str , 1 , ( tmp + 4 - out - > str ) , ser - > f ) ;
2006-10-22 08:28:16 +00:00
fwrite ( tmp + 4 , 1 , contentlength , ser - > f ) ;
2006-10-18 04:05:56 +00:00
}
2006-10-22 08:28:16 +00:00
}
2007-06-06 21:20:11 +00:00
ast_free ( out ) ;
2006-10-18 04:05:56 +00:00
}
if ( title )
2007-06-06 21:20:11 +00:00
ast_free ( title ) ;
2006-10-18 04:05:56 +00:00
done :
2007-03-08 13:27:02 +00:00
fclose ( ser - > f ) ;
2007-06-06 21:20:11 +00:00
ast_free ( ser ) ;
2006-03-25 23:50:09 +00:00
return NULL ;
}
2006-12-06 16:17:57 +00:00
void * server_root ( void * data )
2006-03-25 23:50:09 +00:00
{
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
struct server_args * desc = data ;
2006-03-25 23:50:09 +00:00
int fd ;
struct sockaddr_in sin ;
2006-07-07 06:57:02 +00:00
socklen_t sinlen ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
struct server_instance * ser ;
2006-03-25 23:50:09 +00:00
pthread_t launched ;
2006-09-19 19:58:09 +00:00
2006-03-25 23:50:09 +00:00
for ( ; ; ) {
2006-11-27 21:25:55 +00:00
int i , flags ;
2006-10-15 20:54:15 +00:00
2006-11-27 21:25:55 +00:00
if ( desc - > periodic_fn )
desc - > periodic_fn ( desc ) ;
i = ast_wait_for_input ( desc - > accept_fd , desc - > poll_timeout ) ;
if ( i < = 0 )
continue ;
2006-03-25 23:50:09 +00:00
sinlen = sizeof ( sin ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
fd = accept ( desc - > accept_fd , ( struct sockaddr * ) & sin , & sinlen ) ;
2006-03-25 23:50:09 +00:00
if ( fd < 0 ) {
if ( ( errno ! = EAGAIN ) & & ( errno ! = EINTR ) )
ast_log ( LOG_WARNING , " Accept failed: %s \n " , strerror ( errno ) ) ;
continue ;
}
2006-04-01 08:49:54 +00:00
ser = ast_calloc ( 1 , sizeof ( * ser ) ) ;
2006-10-15 20:54:15 +00:00
if ( ! ser ) {
ast_log ( LOG_WARNING , " No memory for new session: %s \n " , strerror ( errno ) ) ;
close ( fd ) ;
continue ;
}
flags = fcntl ( fd , F_GETFL ) ;
fcntl ( fd , F_SETFL , flags & ~ O_NONBLOCK ) ;
ser - > fd = fd ;
2006-11-27 19:19:48 +00:00
ser - > parent = desc ;
2006-10-15 20:54:15 +00:00
memcpy ( & ser - > requestor , & sin , sizeof ( ser - > requestor ) ) ;
2007-05-24 18:30:19 +00:00
if ( ast_pthread_create_detached_background ( & launched , NULL , make_file_from_fd , ser ) ) {
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ast_log ( LOG_WARNING , " Unable to launch helper thread: %s \n " , strerror ( errno ) ) ;
2006-10-15 20:54:15 +00:00
close ( ser - > fd ) ;
2007-06-06 21:20:11 +00:00
ast_free ( ser ) ;
2006-03-25 23:50:09 +00:00
}
2007-01-31 21:35:15 +00:00
2006-03-25 23:50:09 +00:00
}
return NULL ;
}
2006-12-07 16:42:29 +00:00
int ssl_setup ( struct tls_config * cfg )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
{
# ifndef DO_SSL
2006-12-07 16:42:29 +00:00
cfg - > enabled = 0 ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
return 0 ;
# else
2006-12-07 16:42:29 +00:00
if ( ! cfg - > enabled )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
return 0 ;
SSL_load_error_strings ( ) ;
SSLeay_add_ssl_algorithms ( ) ;
2006-12-07 16:42:29 +00:00
cfg - > ssl_ctx = SSL_CTX_new ( SSLv23_server_method ( ) ) ;
if ( ! ast_strlen_zero ( cfg - > certfile ) ) {
if ( SSL_CTX_use_certificate_file ( cfg - > ssl_ctx , cfg - > certfile , SSL_FILETYPE_PEM ) = = 0 | |
SSL_CTX_use_PrivateKey_file ( cfg - > ssl_ctx , cfg - > certfile , SSL_FILETYPE_PEM ) = = 0 | |
SSL_CTX_check_private_key ( cfg - > ssl_ctx ) = = 0 ) {
ast_verbose ( " ssl cert error <%s> " , cfg - > certfile ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
sleep ( 2 ) ;
2006-12-07 16:42:29 +00:00
cfg - > enabled = 0 ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
return 0 ;
}
}
2006-12-07 16:42:29 +00:00
if ( ! ast_strlen_zero ( cfg - > cipher ) ) {
if ( SSL_CTX_set_cipher_list ( cfg - > ssl_ctx , cfg - > cipher ) = = 0 ) {
ast_verbose ( " ssl cipher error <%s> " , cfg - > cipher ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
sleep ( 2 ) ;
2006-12-07 16:42:29 +00:00
cfg - > enabled = 0 ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
return 0 ;
}
}
ast_verbose ( " ssl cert ok " ) ;
return 1 ;
# endif
}
2006-04-01 08:49:54 +00:00
2006-11-25 17:37:04 +00:00
/*!
* This is a generic ( re ) start routine for a TCP server ,
* which does the socket / bind / listen and starts a thread for handling
* accept ( ) .
*/
2006-12-06 16:17:57 +00:00
void server_start ( struct server_args * desc )
2006-03-25 23:50:09 +00:00
{
int flags ;
int x = 1 ;
2006-09-19 19:58:09 +00:00
2006-03-25 23:50:09 +00:00
/* Do nothing if nothing has changed */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( ! memcmp ( & desc - > oldsin , & desc - > sin , sizeof ( desc - > oldsin ) ) ) {
2007-06-24 18:51:41 +00:00
ast_debug ( 1 , " Nothing changed in %s \n " , desc - > name ) ;
2006-03-25 23:50:09 +00:00
return ;
}
2006-09-19 19:58:09 +00:00
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
desc - > oldsin = desc - > sin ;
2006-09-19 19:58:09 +00:00
2006-03-25 23:50:09 +00:00
/* Shutdown a running server if there is one */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( desc - > master ! = AST_PTHREADT_NULL ) {
pthread_cancel ( desc - > master ) ;
pthread_kill ( desc - > master , SIGURG ) ;
pthread_join ( desc - > master , NULL ) ;
2006-03-25 23:50:09 +00:00
}
2006-09-19 19:58:09 +00:00
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( desc - > accept_fd ! = - 1 )
close ( desc - > accept_fd ) ;
2006-03-25 23:50:09 +00:00
/* If there's no new server, stop here */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( desc - > sin . sin_family = = 0 )
2006-03-25 23:50:09 +00:00
return ;
2006-11-25 17:37:04 +00:00
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
desc - > accept_fd = socket ( AF_INET , SOCK_STREAM , 0 ) ;
if ( desc - > accept_fd < 0 ) {
2006-11-25 17:37:04 +00:00
ast_log ( LOG_WARNING , " Unable to allocate socket for %s: %s \n " ,
desc - > name , strerror ( errno ) ) ;
2006-03-25 23:50:09 +00:00
return ;
}
2006-09-19 19:58:09 +00:00
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
setsockopt ( desc - > accept_fd , SOL_SOCKET , SO_REUSEADDR , & x , sizeof ( x ) ) ;
if ( bind ( desc - > accept_fd , ( struct sockaddr * ) & desc - > sin , sizeof ( desc - > sin ) ) ) {
2006-11-25 17:37:04 +00:00
ast_log ( LOG_NOTICE , " Unable to bind %s to %s:%d: %s \n " ,
desc - > name ,
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ast_inet_ntoa ( desc - > sin . sin_addr ) , ntohs ( desc - > sin . sin_port ) ,
2006-03-25 23:50:09 +00:00
strerror ( errno ) ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
goto error ;
2006-03-25 23:50:09 +00:00
}
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( listen ( desc - > accept_fd , 10 ) ) {
2006-11-25 17:37:04 +00:00
ast_log ( LOG_NOTICE , " Unable to listen for %s! \n " , desc - > name ) ;
goto error ;
2006-03-25 23:50:09 +00:00
}
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
flags = fcntl ( desc - > accept_fd , F_GETFL ) ;
fcntl ( desc - > accept_fd , F_SETFL , flags | O_NONBLOCK ) ;
2006-11-25 17:37:04 +00:00
if ( ast_pthread_create_background ( & desc - > master , NULL , desc - > accept_fn , desc ) ) {
ast_log ( LOG_NOTICE , " Unable to launch %s on %s:%d: %s \n " ,
desc - > name ,
ast_inet_ntoa ( desc - > sin . sin_addr ) , ntohs ( desc - > sin . sin_port ) ,
strerror ( errno ) ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
goto error ;
2006-03-25 23:50:09 +00:00
}
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
return ;
error :
close ( desc - > accept_fd ) ;
desc - > accept_fd = - 1 ;
2006-03-25 23:50:09 +00:00
}
2006-12-23 20:13:14 +00:00
/*!
* \ brief Add a new URI redirect
* The entries in the redirect list are sorted by length , just like the list
* of URI handlers .
*/
static void add_redirect ( const char * value )
{
char * target , * dest ;
struct http_uri_redirect * redirect , * cur ;
2006-12-24 03:29:42 +00:00
unsigned int target_len ;
unsigned int total_len ;
2006-12-23 20:13:14 +00:00
dest = ast_strdupa ( value ) ;
2006-12-24 21:01:02 +00:00
dest = ast_skip_blanks ( dest ) ;
target = strsep ( & dest , " " ) ;
target = ast_skip_blanks ( target ) ;
target = strsep ( & target , " " ) ; /* trim trailing whitespace */
2006-12-23 20:13:14 +00:00
if ( ! dest ) {
ast_log ( LOG_WARNING , " Invalid redirect '%s' \n " , value ) ;
return ;
}
2006-12-24 03:29:42 +00:00
target_len = strlen ( target ) + 1 ;
total_len = sizeof ( * redirect ) + target_len + strlen ( dest ) + 1 ;
2006-12-23 20:13:14 +00:00
2006-12-24 03:29:42 +00:00
if ( ! ( redirect = ast_calloc ( 1 , total_len ) ) )
2006-12-23 20:13:14 +00:00
return ;
2006-12-24 03:29:42 +00:00
redirect - > dest = redirect - > target + target_len ;
strcpy ( redirect - > target , target ) ;
strcpy ( redirect - > dest , dest ) ;
2006-12-23 20:13:14 +00:00
2006-12-28 20:05:00 +00:00
AST_RWLIST_WRLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
2006-12-24 03:29:42 +00:00
target_len - - ; /* So we can compare directly with strlen() */
2006-12-28 20:05:00 +00:00
if ( AST_RWLIST_EMPTY ( & uri_redirects )
| | strlen ( AST_RWLIST_FIRST ( & uri_redirects ) - > target ) < = target_len ) {
AST_RWLIST_INSERT_HEAD ( & uri_redirects , redirect , entry ) ;
AST_RWLIST_UNLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
return ;
}
2006-12-28 20:05:00 +00:00
AST_RWLIST_TRAVERSE ( & uri_redirects , cur , entry ) {
if ( AST_RWLIST_NEXT ( cur , entry )
& & strlen ( AST_RWLIST_NEXT ( cur , entry ) - > target ) < = target_len ) {
AST_RWLIST_INSERT_AFTER ( & uri_redirects , cur , redirect , entry ) ;
AST_RWLIST_UNLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
return ;
}
}
2006-12-28 20:05:00 +00:00
AST_RWLIST_INSERT_TAIL ( & uri_redirects , redirect , entry ) ;
2006-12-23 20:13:14 +00:00
2006-12-28 20:05:00 +00:00
AST_RWLIST_UNLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
}
2007-04-06 21:16:38 +00:00
static void destroy_post_mapping ( struct ast_http_post_mapping * post_map )
{
if ( post_map - > from )
2007-06-06 21:20:11 +00:00
ast_free ( post_map - > from ) ;
2007-04-06 21:16:38 +00:00
if ( post_map - > to )
2007-06-06 21:20:11 +00:00
ast_free ( post_map - > to ) ;
ast_free ( post_map ) ;
2007-04-06 21:16:38 +00:00
}
static void destroy_post_mappings ( void )
{
struct ast_http_post_mapping * post_map ;
AST_RWLIST_WRLOCK ( & post_mappings ) ;
while ( ( post_map = AST_RWLIST_REMOVE_HEAD ( & post_mappings , entry ) ) )
destroy_post_mapping ( post_map ) ;
AST_RWLIST_UNLOCK ( & post_mappings ) ;
}
static void add_post_mapping ( const char * from , const char * to )
{
struct ast_http_post_mapping * post_map ;
if ( ! ( post_map = ast_calloc ( 1 , sizeof ( * post_map ) ) ) )
return ;
if ( ! ( post_map - > from = ast_strdup ( from ) ) ) {
destroy_post_mapping ( post_map ) ;
return ;
}
if ( ! ( post_map - > to = ast_strdup ( to ) ) ) {
destroy_post_mapping ( post_map ) ;
return ;
}
AST_RWLIST_WRLOCK ( & post_mappings ) ;
AST_RWLIST_INSERT_TAIL ( & post_mappings , post_map , entry ) ;
AST_RWLIST_UNLOCK ( & post_mappings ) ;
}
2006-03-25 23:50:09 +00:00
static int __ast_http_load ( int reload )
{
struct ast_config * cfg ;
struct ast_variable * v ;
int enabled = 0 ;
2006-04-01 08:49:54 +00:00
int newenablestatic = 0 ;
2006-03-25 23:50:09 +00:00
struct hostent * hp ;
struct ast_hostent ahp ;
char newprefix [ MAX_PREFIX ] ;
2006-11-27 20:21:40 +00:00
int have_sslbindaddr = 0 ;
2006-12-23 20:13:14 +00:00
struct http_uri_redirect * redirect ;
2006-04-03 18:38:28 +00:00
2006-11-25 17:37:04 +00:00
/* default values */
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
memset ( & http_desc . sin , 0 , sizeof ( http_desc . sin ) ) ;
http_desc . sin . sin_port = htons ( 8088 ) ;
2006-11-25 17:37:04 +00:00
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
memset ( & https_desc . sin , 0 , sizeof ( https_desc . sin ) ) ;
https_desc . sin . sin_port = htons ( 8089 ) ;
2007-04-06 21:16:38 +00:00
2006-03-25 23:50:09 +00:00
strcpy ( newprefix , DEFAULT_PREFIX ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
2006-12-07 16:42:29 +00:00
http_tls_cfg . enabled = 0 ;
if ( http_tls_cfg . certfile )
2007-06-06 21:20:11 +00:00
ast_free ( http_tls_cfg . certfile ) ;
2006-12-07 16:42:29 +00:00
http_tls_cfg . certfile = ast_strdup ( AST_CERTFILE ) ;
if ( http_tls_cfg . cipher )
2007-06-06 21:20:11 +00:00
ast_free ( http_tls_cfg . cipher ) ;
2006-12-07 16:42:29 +00:00
http_tls_cfg . cipher = ast_strdup ( " " ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
2006-12-28 20:05:00 +00:00
AST_RWLIST_WRLOCK ( & uri_redirects ) ;
while ( ( redirect = AST_RWLIST_REMOVE_HEAD ( & uri_redirects , entry ) ) )
2007-06-06 21:20:11 +00:00
ast_free ( redirect ) ;
2006-12-28 20:05:00 +00:00
AST_RWLIST_UNLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
2007-04-06 21:16:38 +00:00
destroy_post_mappings ( ) ;
2006-12-23 20:13:14 +00:00
cfg = ast_config_load ( " http.conf " ) ;
2006-03-25 23:50:09 +00:00
if ( cfg ) {
v = ast_variable_browse ( cfg , " general " ) ;
2006-12-23 20:13:14 +00:00
for ( ; v ; v = v - > next ) {
2006-03-25 23:50:09 +00:00
if ( ! strcasecmp ( v - > name , " enabled " ) )
enabled = ast_true ( v - > value ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
else if ( ! strcasecmp ( v - > name , " sslenable " ) )
2006-12-07 16:42:29 +00:00
http_tls_cfg . enabled = ast_true ( v - > value ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
else if ( ! strcasecmp ( v - > name , " sslbindport " ) )
https_desc . sin . sin_port = htons ( atoi ( v - > value ) ) ;
else if ( ! strcasecmp ( v - > name , " sslcert " ) ) {
2007-06-06 21:20:11 +00:00
ast_free ( http_tls_cfg . certfile ) ;
2006-12-07 16:42:29 +00:00
http_tls_cfg . certfile = ast_strdup ( v - > value ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
} else if ( ! strcasecmp ( v - > name , " sslcipher " ) ) {
2007-06-06 21:20:11 +00:00
ast_free ( http_tls_cfg . cipher ) ;
2006-12-07 16:42:29 +00:00
http_tls_cfg . cipher = ast_strdup ( v - > value ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
}
2006-04-01 08:49:54 +00:00
else if ( ! strcasecmp ( v - > name , " enablestatic " ) )
newenablestatic = ast_true ( v - > value ) ;
2006-03-25 23:50:09 +00:00
else if ( ! strcasecmp ( v - > name , " bindport " ) )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
http_desc . sin . sin_port = htons ( atoi ( v - > value ) ) ;
2006-11-27 20:21:40 +00:00
else if ( ! strcasecmp ( v - > name , " sslbindaddr " ) ) {
2006-03-25 23:50:09 +00:00
if ( ( hp = ast_gethostbyname ( v - > value , & ahp ) ) ) {
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
memcpy ( & https_desc . sin . sin_addr , hp - > h_addr , sizeof ( https_desc . sin . sin_addr ) ) ;
2006-11-27 20:21:40 +00:00
have_sslbindaddr = 1 ;
} else {
ast_log ( LOG_WARNING , " Invalid bind address '%s' \n " , v - > value ) ;
}
} else if ( ! strcasecmp ( v - > name , " bindaddr " ) ) {
if ( ( hp = ast_gethostbyname ( v - > value , & ahp ) ) ) {
memcpy ( & http_desc . sin . sin_addr , hp - > h_addr , sizeof ( http_desc . sin . sin_addr ) ) ;
2006-03-25 23:50:09 +00:00
} else {
ast_log ( LOG_WARNING , " Invalid bind address '%s' \n " , v - > value ) ;
}
2006-04-02 09:10:43 +00:00
} else if ( ! strcasecmp ( v - > name , " prefix " ) ) {
if ( ! ast_strlen_zero ( v - > value ) ) {
newprefix [ 0 ] = ' / ' ;
ast_copy_string ( newprefix + 1 , v - > value , sizeof ( newprefix ) - 1 ) ;
} else {
newprefix [ 0 ] = ' \0 ' ;
}
2006-12-23 20:13:14 +00:00
} else if ( ! strcasecmp ( v - > name , " redirect " ) ) {
add_redirect ( v - > value ) ;
} else {
ast_log ( LOG_WARNING , " Ignoring unknown option '%s' in http.conf \n " , v - > name ) ;
2006-04-02 09:10:43 +00:00
}
2006-03-25 23:50:09 +00:00
}
2007-04-06 21:16:38 +00:00
for ( v = ast_variable_browse ( cfg , " post_mappings " ) ; v ; v = v - > next )
add_post_mapping ( v - > name , v - > value ) ;
2006-03-25 23:50:09 +00:00
ast_config_destroy ( cfg ) ;
}
2006-11-27 20:21:40 +00:00
if ( ! have_sslbindaddr )
https_desc . sin . sin_addr = http_desc . sin . sin_addr ;
2006-03-25 23:50:09 +00:00
if ( enabled )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
http_desc . sin . sin_family = https_desc . sin . sin_family = AF_INET ;
2006-10-16 08:38:35 +00:00
if ( strcmp ( prefix , newprefix ) )
2006-03-25 23:50:09 +00:00
ast_copy_string ( prefix , newprefix , sizeof ( prefix ) ) ;
2006-04-01 08:49:54 +00:00
enablestatic = newenablestatic ;
2006-11-25 17:37:04 +00:00
server_start ( & http_desc ) ;
2006-12-07 16:42:29 +00:00
if ( ssl_setup ( https_desc . tls_cfg ) )
2006-11-25 17:37:04 +00:00
server_start ( & https_desc ) ;
2007-04-06 21:16:38 +00:00
2006-03-25 23:50:09 +00:00
return 0 ;
}
static int handle_show_http ( int fd , int argc , char * argv [ ] )
{
struct ast_http_uri * urih ;
2006-12-23 20:13:14 +00:00
struct http_uri_redirect * redirect ;
2007-04-06 21:16:38 +00:00
struct ast_http_post_mapping * post_map ;
2006-12-23 20:13:14 +00:00
2006-04-14 04:59:11 +00:00
if ( argc ! = 3 )
2006-03-25 23:50:09 +00:00
return RESULT_SHOWUSAGE ;
2006-12-23 20:13:14 +00:00
2006-03-25 23:50:09 +00:00
ast_cli ( fd , " HTTP Server Status: \n " ) ;
ast_cli ( fd , " Prefix: %s \n " , prefix ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
if ( ! http_desc . oldsin . sin_family )
2006-03-25 23:50:09 +00:00
ast_cli ( fd , " Server Disabled \n \n " ) ;
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
else {
ast_cli ( fd , " Server Enabled and Bound to %s:%d \n \n " ,
ast_inet_ntoa ( http_desc . oldsin . sin_addr ) ,
ntohs ( http_desc . oldsin . sin_port ) ) ;
2006-12-07 16:42:29 +00:00
if ( http_tls_cfg . enabled )
Implement https support.
The changes are not large. Most of the diff comes from putting the
global variables describing an accept session into a structure, so
we can reuse the existing code for running multiple accept threads
on different ports.
Once this is done, and if your system has the funopen() library
function (and ssl, of course), it is just a matter of calling
the appropriate functions to set up the ssl connection on the
existing socket, and everything works on the secure channel now.
At the moment, the code is disabled because i have not implemented yet
the autoconf code to detect the presence of funopen(), and add -lssl
to main/Makefile if ssl libraries are present. And a bit of documentation
on the http.conf arguments, too.
If you want to manually enable https support, that is very simple
(step 0 1 2 will be eventually detected by ./configure, the
rest is something you will have to do anyways).
0. make sure your system has funopen(3). FreeBSD does, linux probably
does too, not sure about other systems.
1. uncomment the following line in main/http.c
// #define DO_SSL /* comment in/out if you want to support ssl */
2. add -lssl to AST_LIBS in main/Makefile
3. add the following options to http.conf
sslenable=yes
sslbindport=4433 ; pick one you like
sslcert=/tmp/foo.pem ; path to your certificate file.
4. generate a suitable certificate e.g. (example from mini_httpd's Makefile:
openssl req -new -x509 -days 365 -nodes -out /tmp/foo.pem -keyout /tmp/foo.pem
and here you go:
https://localhost:4433/asterisk/manager
now works.
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@45869 f38db490-d61c-443f-a65b-d21fe96a405b
2006-10-22 12:02:35 +00:00
ast_cli ( fd , " HTTPS Server Enabled and Bound to %s:%d \n \n " ,
ast_inet_ntoa ( https_desc . oldsin . sin_addr ) ,
ntohs ( https_desc . oldsin . sin_port ) ) ;
}
2006-12-23 20:13:14 +00:00
2006-03-25 23:50:09 +00:00
ast_cli ( fd , " Enabled URI's: \n " ) ;
2006-12-28 20:02:41 +00:00
AST_RWLIST_RDLOCK ( & uris ) ;
if ( AST_RWLIST_EMPTY ( & uris ) ) {
2006-03-25 23:50:09 +00:00
ast_cli ( fd , " None. \n " ) ;
2006-12-28 20:02:41 +00:00
} else {
AST_RWLIST_TRAVERSE ( & uris , urih , entry )
ast_cli ( fd , " %s/%s%s => %s \n " , prefix , urih - > uri , ( urih - > has_subtree ? " /... " : " " ) , urih - > description ) ;
}
AST_RWLIST_UNLOCK ( & uris ) ;
2006-12-23 20:13:14 +00:00
ast_cli ( fd , " \n Enabled Redirects: \n " ) ;
2006-12-28 20:05:00 +00:00
AST_RWLIST_RDLOCK ( & uri_redirects ) ;
AST_RWLIST_TRAVERSE ( & uri_redirects , redirect , entry )
2006-12-23 20:13:14 +00:00
ast_cli ( fd , " %s => %s \n " , redirect - > target , redirect - > dest ) ;
2006-12-28 20:05:00 +00:00
if ( AST_RWLIST_EMPTY ( & uri_redirects ) )
2006-12-23 20:13:14 +00:00
ast_cli ( fd , " None. \n " ) ;
2006-12-28 20:05:00 +00:00
AST_RWLIST_UNLOCK ( & uri_redirects ) ;
2006-12-23 20:13:14 +00:00
2007-04-06 21:16:38 +00:00
ast_cli ( fd , " \n POST mappings: \n " ) ;
AST_RWLIST_RDLOCK ( & post_mappings ) ;
AST_LIST_TRAVERSE ( & post_mappings , post_map , entry )
ast_cli ( fd , " %s/%s => %s \n " , prefix , post_map - > from , post_map - > to ) ;
ast_cli ( fd , " %s \n " , AST_LIST_EMPTY ( & post_mappings ) ? " None. \n " : " " ) ;
AST_RWLIST_UNLOCK ( & post_mappings ) ;
2006-03-25 23:50:09 +00:00
return RESULT_SUCCESS ;
}
int ast_http_reload ( void )
{
return __ast_http_load ( 1 ) ;
}
static char show_http_help [ ] =
2006-11-02 23:16:09 +00:00
" Usage: http show status \n "
2006-09-18 19:54:18 +00:00
" Lists status of internal HTTP engine \n " ;
static struct ast_cli_entry cli_http [ ] = {
2006-11-02 23:16:09 +00:00
{ { " http " , " show " , " status " , NULL } ,
2006-09-18 19:54:18 +00:00
handle_show_http , " Display HTTP server status " ,
2006-09-21 21:17:39 +00:00
show_http_help } ,
2006-03-25 23:50:09 +00:00
} ;
int ast_http_init ( void )
{
2007-04-06 21:16:38 +00:00
mm_library_init ( ) ;
mm_codec_registerdefaultcodecs ( ) ;
2006-03-25 23:50:09 +00:00
ast_http_uri_link ( & statusuri ) ;
2006-04-01 08:49:54 +00:00
ast_http_uri_link ( & staticuri ) ;
2006-09-18 19:54:18 +00:00
ast_cli_register_multiple ( cli_http , sizeof ( cli_http ) / sizeof ( struct ast_cli_entry ) ) ;
2007-04-06 21:16:38 +00:00
2006-03-25 23:50:09 +00:00
return __ast_http_load ( 0 ) ;
}