1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
/** --------------------------------------------------------------------
* @file operator-starttls.cc
* @brief Implementation of the STARTTLS command - based on sslserver
* @author Andreas Aardal Hanssen, Erwin Hoffmann
* @date 2002-2005, 2023
* ----------------------------------------------------------------- **/
#include "depot.h"
#include "iodevice.h"
#include "iofactory.h"
#include "operators.h"
#include "recursivedescent.h"
#include "session.h"
#include <iostream>
#include <string>
#include <fcntl.h>
#include <unistd.h>
using namespace ::std;
using namespace Binc;
//----------------------------------------------------------------------
StarttlsOperator::StarttlsOperator(void) {}
//----------------------------------------------------------------------
StarttlsOperator::~StarttlsOperator(void) {}
//----------------------------------------------------------------------
const string StarttlsOperator::getName(void) const
{
return "STARTTLS";
}
//----------------------------------------------------------------------
int StarttlsOperator::getState(void) const
{
return Session::NONAUTHENTICATED | Session::AUTHENTICATED | Session::SELECTED;
}
//----------------------------------------------------------------------
int StarttlsOperator::goStartTLS(void) const
{
Session &session = Session::getInstance();
if (getenv("UCSPITLS")) {
string fdstr;
int fd;
fdstr = session.getEnv("SSLCTLFD");
fd = std::stoi(fdstr);
if (write(fd, "Y", 1) < 1) return NOTHING;
bincClient.flush(); // flush all previous received data
fdstr = session.getEnv("SSLREADFD");
fd = std::stoi(fdstr);
if (fcntl(fd, F_GETFL, 0) == -1) return NOTHING;
close(0);
if (fcntl(fd, F_DUPFD, 0) == -1) return NOTHING;
close(fd);
fdstr = session.getEnv("SSLWRITEFD");
fd = std::stoi(fdstr);
if (fcntl(fd, F_GETFL, 0) == -1) return NOTHING;
close(1);
if (fcntl(fd, F_DUPFD, 1) == -1) return NOTHING;
close(fd);
}
return ACCEPT;
}
//------------------------------------------------------------------------
Operator::ProcessResult StarttlsOperator::process(Depot &depot, Request &command)
{
Session &session = Session::getInstance();
if (session.command.ssl) {
session.setLastError("Already in TLS mode");
return BAD;
}
bincClient << "* ENABLED StartTLS - begin negotiation now" << endl;
bincClient << command.getTag() << " OK STARTTLS completed" << endl;
if (goStartTLS() == ACCEPT)
session.command.ssl = true;
else
return NO;
return NOTHING;
}
//----------------------------------------------------------------------
Operator::ParseResult StarttlsOperator::parse(Request &c_in) const
{
Session &session = Session::getInstance();
if (c_in.getUidMode()) return REJECT;
Operator::ParseResult res;
if ((res = expectCRLF()) != ACCEPT) {
session.setLastError("Expected CRLF");
return res;
}
c_in.setName("STARTTLS");
return ACCEPT;
}
|
