X-Git-Url: https://git.sesse.net/?p=cubemap;a=blobdiff_plain;f=config.cpp;h=47118b48612e18bce0966c7bb696326532cf277e;hp=aa0f670a4b78a0607db4bf8af1d1232a14f21426;hb=16a03b9858752fae9e81af261821a2a22855fde3;hpb=6889a665614e926437484a556124a5ff60363568 diff --git a/config.cpp b/config.cpp index aa0f670..47118b4 100644 --- a/config.cpp +++ b/config.cpp @@ -12,6 +12,8 @@ #include #include +#include "tlse.h" + #include "acceptor.h" #include "config.h" #include "log.h" @@ -174,6 +176,104 @@ bool fetch_config_int(const vector &config, const string &keyword, i return false; } +bool load_file_to_string(const string &filename, size_t max_size, string *contents) +{ + contents->clear(); + + FILE *fp = fopen(filename.c_str(), "r"); + if (fp == NULL) { + log_perror(filename.c_str()); + return false; + } + + char buf[4096]; + while (!feof(fp)) { + size_t ret = fread(buf, 1, sizeof(buf), fp); + if (ret > 0) { + contents->append(buf, buf + ret); + } else { + if (ferror(fp)) { + log_perror(filename.c_str()); + fclose(fp); + return false; + } + assert(feof(fp)); + break; + } + + if (contents->size() > max_size) { + log(ERROR, "%s was longer than the maximum allowed %zu bytes", filename.c_str(), max_size); + fclose(fp); + return false; + } + } + fclose(fp); + return true; +} + +bool parse_tls_parameters(const map ¶meters, AcceptorConfig *acceptor) +{ + bool has_cert = false, has_key = false; + + map::const_iterator tls_cert_it = parameters.find("tls_cert"); + if (tls_cert_it != parameters.end()) { + if (!load_file_to_string(tls_cert_it->second, 1048576, &acceptor->certificate_chain)) { + return false; + } + + // Verify that the certificate is valid. + bool is_server = true; + TLSContext *server_context = tls_create_context(is_server, TLS_V12); + int num_cert = tls_load_certificates( + server_context, + reinterpret_cast(acceptor->certificate_chain.data()), + acceptor->certificate_chain.size()); + if (num_cert < 0) { + log_tls_error(tls_cert_it->second.c_str(), num_cert); + tls_destroy_context(server_context); + return false; + } else if (num_cert == 0) { + log(ERROR, "%s did not contain any certificates", tls_cert_it->second.c_str()); + return false; + } + tls_destroy_context(server_context); + has_cert = true; + } + + map::const_iterator tls_key_it = parameters.find("tls_key"); + if (tls_key_it != parameters.end()) { + if (!load_file_to_string(tls_key_it->second, 1048576, &acceptor->private_key)) { + return false; + } + + // Verify that the key is valid. + bool is_server = true; + TLSContext *server_context = tls_create_context(is_server, TLS_V12); + int num_keys = tls_load_private_key( + server_context, + reinterpret_cast(acceptor->private_key.data()), + acceptor->private_key.size()); + if (num_keys < 0) { + log_tls_error(tls_key_it->second.c_str(), num_keys); + tls_destroy_context(server_context); + return false; + } else if (num_keys == 0) { + log(ERROR, "%s did not contain any private keys", tls_key_it->second.c_str()); + return false; + } + tls_destroy_context(server_context); + has_key = true; + } + + if (has_cert != has_key) { + log(ERROR, "Only one of tls_cert= and tls_key= was given, needs zero or both"); + return false; + } + + return true; +} + + bool parse_port(const ConfigLine &line, Config *config) { if (line.arguments.size() != 1) { @@ -190,6 +290,9 @@ bool parse_port(const ConfigLine &line, Config *config) AcceptorConfig acceptor; acceptor.addr = create_any_address(port); + if (!parse_tls_parameters(line.parameters, &acceptor)) { + return false; + } config->acceptors.push_back(acceptor); return true; } @@ -205,6 +308,9 @@ bool parse_listen(const ConfigLine &line, Config *config) if (!parse_hostport(line.arguments[0], &acceptor.addr)) { return false; } + if (!parse_tls_parameters(line.parameters, &acceptor)) { + return false; + } config->acceptors.push_back(acceptor); return true; } @@ -242,7 +348,7 @@ bool parse_stream(const ConfigLine &line, Config *config) stream.prebuffering_bytes = atoi(prebuffer_it->second.c_str()); } - // Parse encoding. + // Parse output encoding. map::const_iterator encoding_parm_it = line.parameters.find("encoding"); if (encoding_parm_it == line.parameters.end() || encoding_parm_it->second == "raw") { @@ -254,6 +360,18 @@ bool parse_stream(const ConfigLine &line, Config *config) return false; } + // Parse input encoding. + map::const_iterator src_encoding_parm_it = line.parameters.find("src_encoding"); + if (src_encoding_parm_it == line.parameters.end() || + src_encoding_parm_it->second == "metacube") { + stream.src_encoding = StreamConfig::STREAM_ENCODING_METACUBE; + } else if (src_encoding_parm_it->second == "raw") { + stream.src_encoding = StreamConfig::STREAM_ENCODING_RAW; + } else { + log(ERROR, "Parameter 'src_encoding' must be either 'raw' or 'metacube' (default)"); + return false; + } + // Parse the pacing rate, converting from kilobits to bytes as needed. map::const_iterator pacing_rate_it = line.parameters.find("pacing_rate_kbit"); if (pacing_rate_it == line.parameters.end()) { @@ -322,6 +440,26 @@ bool parse_udpstream(const ConfigLine &line, Config *config) return true; } +bool parse_gen204(const ConfigLine &line, Config *config) +{ + if (line.arguments.size() != 1) { + log(ERROR, "'gen204' takes exactly one argument"); + return false; + } + + Gen204Config gen204; + gen204.url = line.arguments[0]; + + // Parse the CORS origin, if it exists. + map::const_iterator allow_origin_it = line.parameters.find("allow_origin"); + if (allow_origin_it != line.parameters.end()) { + gen204.allow_origin = allow_origin_it->second; + } + + config->pings.push_back(gen204); + return true; +} + bool parse_error_log(const ConfigLine &line, Config *config) { if (line.arguments.size() != 0) { @@ -423,6 +561,10 @@ bool parse_config(const string &filename, Config *config) if (!parse_udpstream(line, config)) { return false; } + } else if (line.keyword == "gen204") { + if (!parse_gen204(line, config)) { + return false; + } } else if (line.keyword == "error_log") { if (!parse_error_log(line, config)) { return false;