1 /*****************************************************************************
2 * http.c: HTTP input module
3 *****************************************************************************
4 * Copyright (C) 2001-2008 the VideoLAN team
7 * Authors: Laurent Aimar <fenrir@via.ecp.fr>
8 * Christophe Massiot <massiot@via.ecp.fr>
9 * RĂ©mi Denis-Courmont <rem # videolan.org>
10 * Antoine Cellerier <dionoea at videolan dot org>
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU General Public License as published by
14 * the Free Software Foundation; either version 2 of the License, or
15 * (at your option) any later version.
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU General Public License for more details.
22 * You should have received a copy of the GNU General Public License
23 * along with this program; if not, write to the Free Software
24 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston MA 02110-1301, USA.
25 *****************************************************************************/
27 /*****************************************************************************
29 *****************************************************************************/
34 #include <vlc_common.h>
35 #include <vlc_plugin.h>
38 #include <vlc_access.h>
40 #include <vlc_dialog.h>
42 #include <vlc_network.h>
45 #include <vlc_strings.h>
46 #include <vlc_charset.h>
47 #include <vlc_input.h>
59 /*****************************************************************************
61 *****************************************************************************/
62 static int Open ( vlc_object_t * );
63 static void Close( vlc_object_t * );
65 #define PROXY_TEXT N_("HTTP proxy")
66 #define PROXY_LONGTEXT N_( \
67 "HTTP proxy to be used It must be of the form " \
68 "http://[user@]myproxy.mydomain:myport/ ; " \
69 "if empty, the http_proxy environment variable will be tried." )
71 #define PROXY_PASS_TEXT N_("HTTP proxy password")
72 #define PROXY_PASS_LONGTEXT N_( \
73 "If your HTTP proxy requires a password, set it here." )
75 #define CACHING_TEXT N_("Caching value in ms")
76 #define CACHING_LONGTEXT N_( \
77 "Caching value for HTTP streams. This " \
78 "value should be set in milliseconds." )
80 #define AGENT_TEXT N_("HTTP user agent")
81 #define AGENT_LONGTEXT N_("User agent that will be " \
82 "used for the connection.")
84 #define RECONNECT_TEXT N_("Auto re-connect")
85 #define RECONNECT_LONGTEXT N_( \
86 "Automatically try to reconnect to the stream in case of a sudden " \
89 #define CONTINUOUS_TEXT N_("Continuous stream")
90 #define CONTINUOUS_LONGTEXT N_("Read a file that is " \
91 "being constantly updated (for example, a JPG file on a server). " \
92 "You should not globally enable this option as it will break all other " \
93 "types of HTTP streams." )
95 #define FORWARD_COOKIES_TEXT N_("Forward Cookies")
96 #define FORWARD_COOKIES_LONGTEXT N_("Forward Cookies across http redirections ")
99 set_description( N_("HTTP input") )
100 set_capability( "access", 0 )
101 set_shortname( N_( "HTTP(S)" ) )
102 set_category( CAT_INPUT )
103 set_subcategory( SUBCAT_INPUT_ACCESS )
105 add_string( "http-proxy", NULL, NULL, PROXY_TEXT, PROXY_LONGTEXT,
107 add_password( "http-proxy-pwd", NULL, NULL,
108 PROXY_PASS_TEXT, PROXY_PASS_LONGTEXT, false )
109 add_integer( "http-caching", 4 * DEFAULT_PTS_DELAY / 1000, NULL,
110 CACHING_TEXT, CACHING_LONGTEXT, true )
112 add_string( "http-user-agent", COPYRIGHT_MESSAGE , NULL, AGENT_TEXT,
113 AGENT_LONGTEXT, true )
114 add_bool( "http-reconnect", 0, NULL, RECONNECT_TEXT,
115 RECONNECT_LONGTEXT, true )
116 add_bool( "http-continuous", 0, NULL, CONTINUOUS_TEXT,
117 CONTINUOUS_LONGTEXT, true )
119 add_bool( "http-forward-cookies", true, NULL, FORWARD_COOKIES_TEXT,
120 FORWARD_COOKIES_LONGTEXT, true )
121 add_obsolete_string("http-user")
122 add_obsolete_string("http-pwd")
123 add_shortcut( "http" )
124 add_shortcut( "https" )
125 add_shortcut( "unsv" )
126 add_shortcut( "itpc" ) /* iTunes Podcast */
127 add_shortcut( "icyx" )
128 set_callbacks( Open, Close )
131 /*****************************************************************************
133 *****************************************************************************/
135 /* RFC 2617: Basic and Digest Access Authentication */
136 typedef struct http_auth_t
147 char *psz_HA1; /* stored H(A1) value if algorithm = "MD5-sess" */
153 tls_session_t *p_tls;
158 char *psz_user_agent;
164 http_auth_t proxy_auth;
165 char *psz_proxy_passbuf;
169 const char *psz_protocol;
191 int64_t i_icy_offset;
204 vlc_array_t * cookies;
208 static int OpenWithCookies( vlc_object_t *p_this, vlc_array_t *cookies );
211 static ssize_t Read( access_t *, uint8_t *, size_t );
212 static ssize_t ReadCompressed( access_t *, uint8_t *, size_t );
213 static int Seek( access_t *, int64_t );
214 static int Control( access_t *, int, va_list );
217 static int Connect( access_t *, int64_t );
218 static int Request( access_t *p_access, int64_t i_tell );
219 static void Disconnect( access_t * );
221 /* Small Cookie utilities. Cookies support is partial. */
222 static char * cookie_get_content( const char * cookie );
223 static char * cookie_get_domain( const char * cookie );
224 static char * cookie_get_name( const char * cookie );
225 static void cookie_append( vlc_array_t * cookies, char * cookie );
228 static void AuthParseHeader( access_t *p_access, const char *psz_header,
229 http_auth_t *p_auth );
230 static void AuthReply( access_t *p_acces, const char *psz_prefix,
231 vlc_url_t *p_url, http_auth_t *p_auth );
232 static int AuthCheckReply( access_t *p_access, const char *psz_header,
233 vlc_url_t *p_url, http_auth_t *p_auth );
234 static void AuthReset( http_auth_t *p_auth );
236 /*****************************************************************************
238 *****************************************************************************/
239 static int Open( vlc_object_t *p_this )
241 return OpenWithCookies( p_this, NULL );
244 static int OpenWithCookies( vlc_object_t *p_this, vlc_array_t *cookies )
246 access_t *p_access = (access_t*)p_this;
249 /* Only forward an store cookies if the corresponding option is activated */
250 bool b_forward_cookies = var_CreateGetBool( p_access, "http-forward-cookies" );
251 vlc_array_t * saved_cookies = b_forward_cookies ? (cookies ? cookies : vlc_array_new()) : NULL;
253 /* Set up p_access */
254 STANDARD_READ_ACCESS_INIT;
256 p_access->pf_read = ReadCompressed;
259 p_sys->b_proxy = false;
260 p_sys->psz_proxy_passbuf = NULL;
261 p_sys->i_version = 1;
262 p_sys->b_seekable = true;
263 p_sys->psz_mime = NULL;
264 p_sys->psz_pragma = NULL;
265 p_sys->b_mms = false;
266 p_sys->b_icecast = false;
267 p_sys->psz_location = NULL;
268 p_sys->psz_user_agent = NULL;
269 p_sys->b_pace_control = true;
270 p_sys->b_ssl = false;
272 p_sys->b_compressed = false;
273 /* 15 is the max windowBits, +32 to enable optional gzip decoding */
274 if( inflateInit2( &p_sys->inflate.stream, 32+15 ) != Z_OK )
275 msg_Warn( p_access, "Error during zlib initialisation: %s",
276 p_sys->inflate.stream.msg );
277 if( zlibCompileFlags() & (1<<17) )
278 msg_Warn( p_access, "Your zlib was compiled without gzip support." );
279 p_sys->inflate.p_buffer = NULL;
283 p_sys->i_icy_meta = 0;
284 p_sys->i_icy_offset = 0;
285 p_sys->psz_icy_name = NULL;
286 p_sys->psz_icy_genre = NULL;
287 p_sys->psz_icy_title = NULL;
288 p_sys->i_remaining = 0;
289 p_sys->b_persist = false;
290 p_access->info.i_size = -1;
291 p_access->info.i_pos = 0;
292 p_access->info.b_eof = false;
294 p_sys->cookies = saved_cookies;
296 /* Parse URI - remove spaces */
297 p = psz = strdup( p_access->psz_path );
298 while( (p = strchr( p, ' ' )) != NULL )
300 vlc_UrlParse( &p_sys->url, psz, 0 );
303 if( p_sys->url.psz_host == NULL || *p_sys->url.psz_host == '\0' )
305 msg_Warn( p_access, "invalid host" );
308 if( !strncmp( p_access->psz_access, "https", 5 ) )
312 if( p_sys->url.i_port <= 0 )
313 p_sys->url.i_port = 443;
317 if( p_sys->url.i_port <= 0 )
318 p_sys->url.i_port = 80;
322 p_sys->psz_user_agent = var_CreateGetString( p_access, "http-user-agent" );
325 psz = var_CreateGetNonEmptyString( p_access, "http-proxy" );
328 p_sys->b_proxy = true;
329 vlc_UrlParse( &p_sys->proxy, psz, 0 );
335 pxProxyFactory *pf = px_proxy_factory_new();
340 i=asprintf(&buf, "%s://%s", p_access->psz_access, p_access->psz_path);
343 msg_Dbg(p_access, "asking libproxy about url '%s'", buf);
344 char **proxies = px_proxy_factory_get_proxies(pf, buf);
347 msg_Dbg(p_access, "libproxy suggest to use '%s'", proxies[0]);
348 if(strcmp(proxies[0],"direct://") != 0)
350 p_sys->b_proxy = true;
351 vlc_UrlParse( &p_sys->proxy, proxies[0], 0);
354 for(i=0;proxies[i];i++) free(proxies[i]);
358 px_proxy_factory_free(pf);
362 msg_Err(p_access, "Allocating memory for libproxy failed");
368 psz = getenv( "http_proxy" );
371 p_sys->b_proxy = true;
372 vlc_UrlParse( &p_sys->proxy, psz, 0 );
376 if( psz ) /* No, this is NOT a use-after-free error */
378 psz = var_CreateGetNonEmptyString( p_access, "http-proxy-pwd" );
380 p_sys->proxy.psz_password = p_sys->psz_proxy_passbuf = psz;
385 if( p_sys->proxy.psz_host == NULL || *p_sys->proxy.psz_host == '\0' )
387 msg_Warn( p_access, "invalid proxy host" );
390 if( p_sys->proxy.i_port <= 0 )
392 p_sys->proxy.i_port = 80;
396 msg_Dbg( p_access, "http: server='%s' port=%d file='%s",
397 p_sys->url.psz_host, p_sys->url.i_port, p_sys->url.psz_path );
400 msg_Dbg( p_access, " proxy %s:%d", p_sys->proxy.psz_host,
401 p_sys->proxy.i_port );
403 if( p_sys->url.psz_username && *p_sys->url.psz_username )
405 msg_Dbg( p_access, " user='%s'", p_sys->url.psz_username );
408 p_sys->b_reconnect = var_CreateGetBool( p_access, "http-reconnect" );
409 p_sys->b_continuous = var_CreateGetBool( p_access, "http-continuous" );
413 switch( Connect( p_access, 0 ) )
419 /* Retry with http 1.0 */
420 msg_Dbg( p_access, "switching to HTTP version 1.0" );
421 p_sys->i_version = 0;
422 p_sys->b_seekable = false;
424 if( !vlc_object_alive (p_access) || Connect( p_access, 0 ) )
432 msg_Err( p_access, "You should not be here" );
437 if( p_sys->i_code == 401 )
439 char *psz_login, *psz_password;
441 if( p_sys->url.psz_username && p_sys->url.psz_password &&
442 p_sys->auth.psz_nonce && p_sys->auth.i_nonce == 0 )
444 Disconnect( p_access );
447 msg_Dbg( p_access, "authentication failed for realm %s",
448 p_sys->auth.psz_realm );
449 dialog_Login( p_access, &psz_login, &psz_password,
450 _("HTTP authentication"),
451 _("Please enter a valid login name and a password for realm %s."),
452 p_sys->auth.psz_realm );
453 if( psz_login != NULL && psz_password != NULL )
455 msg_Dbg( p_access, "retrying with user=%s", psz_login );
456 p_sys->url.psz_username = psz_login;
457 p_sys->url.psz_password = psz_password;
458 Disconnect( p_access );
464 free( psz_password );
469 if( ( p_sys->i_code == 301 || p_sys->i_code == 302 ||
470 p_sys->i_code == 303 || p_sys->i_code == 307 ) &&
471 p_sys->psz_location && *p_sys->psz_location )
473 msg_Dbg( p_access, "redirection to %s", p_sys->psz_location );
475 /* Do not accept redirection outside of HTTP works */
476 if( strncmp( p_sys->psz_location, "http", 4 )
477 || ( ( p_sys->psz_location[4] != ':' ) /* HTTP */
478 && strncmp( p_sys->psz_location + 4, "s:", 2 ) /* HTTP/SSL */ ) )
480 msg_Err( p_access, "insecure redirection ignored" );
483 free( p_access->psz_path );
484 p_access->psz_path = strdup( p_sys->psz_location );
485 /* Clean up current Open() run */
486 vlc_UrlClean( &p_sys->url );
487 AuthReset( &p_sys->auth );
488 vlc_UrlClean( &p_sys->proxy );
489 free( p_sys->psz_proxy_passbuf );
490 AuthReset( &p_sys->proxy_auth );
491 free( p_sys->psz_mime );
492 free( p_sys->psz_pragma );
493 free( p_sys->psz_location );
494 free( p_sys->psz_user_agent );
496 Disconnect( p_access );
497 cookies = p_sys->cookies;
500 /* Do new Open() run with new data */
501 return OpenWithCookies( p_this, cookies );
506 msg_Dbg( p_access, "this is actually a live mms server, BAIL" );
510 if( !strcmp( p_sys->psz_protocol, "ICY" ) || p_sys->b_icecast )
512 if( p_sys->psz_mime && strcasecmp( p_sys->psz_mime, "application/ogg" ) )
514 if( !strcasecmp( p_sys->psz_mime, "video/nsv" ) ||
515 !strcasecmp( p_sys->psz_mime, "video/nsa" ) )
517 free( p_access->psz_demux );
518 p_access->psz_demux = strdup( "nsv" );
520 else if( !strcasecmp( p_sys->psz_mime, "audio/aac" ) ||
521 !strcasecmp( p_sys->psz_mime, "audio/aacp" ) )
523 free( p_access->psz_demux );
524 p_access->psz_demux = strdup( "m4a" );
526 else if( !strcasecmp( p_sys->psz_mime, "audio/mpeg" ) )
528 free( p_access->psz_demux );
529 p_access->psz_demux = strdup( "mp3" );
532 msg_Info( p_access, "Raw-audio server found, %s demuxer selected",
533 p_access->psz_demux );
535 #if 0 /* Doesn't work really well because of the pre-buffering in
536 * shoutcast servers (the buffer content will be sent as fast as
538 p_sys->b_pace_control = false;
541 else if( !p_sys->psz_mime )
543 free( p_access->psz_demux );
545 p_access->psz_demux = strdup( "mp3" );
547 /* else probably Ogg Vorbis */
549 else if( !strcasecmp( p_access->psz_access, "unsv" ) &&
551 !strcasecmp( p_sys->psz_mime, "misc/ultravox" ) )
553 free( p_access->psz_demux );
554 /* Grrrr! detect ultravox server and force NSV demuxer */
555 p_access->psz_demux = strdup( "nsv" );
557 else if( !strcmp( p_access->psz_access, "itpc" ) )
559 free( p_access->psz_demux );
560 p_access->psz_demux = strdup( "podcast" );
562 else if( p_sys->psz_mime &&
563 !strncasecmp( p_sys->psz_mime, "application/xspf+xml", 20 ) &&
564 ( memchr( " ;\t", p_sys->psz_mime[20], 4 ) != NULL ) )
566 free( p_access->psz_demux );
567 p_access->psz_demux = strdup( "xspf-open" );
570 if( p_sys->b_reconnect ) msg_Dbg( p_access, "auto re-connect enabled" );
573 var_Create( p_access, "http-caching", VLC_VAR_INTEGER |VLC_VAR_DOINHERIT );
578 vlc_UrlClean( &p_sys->url );
579 vlc_UrlClean( &p_sys->proxy );
580 free( p_sys->psz_proxy_passbuf );
581 free( p_sys->psz_mime );
582 free( p_sys->psz_pragma );
583 free( p_sys->psz_location );
584 free( p_sys->psz_user_agent );
586 Disconnect( p_access );
591 for( i = 0; i < vlc_array_count( p_sys->cookies ); i++ )
592 free(vlc_array_item_at_index( p_sys->cookies, i ));
593 vlc_array_destroy( p_sys->cookies );
597 inflateEnd( &p_sys->inflate.stream );
603 /*****************************************************************************
605 *****************************************************************************/
606 static void Close( vlc_object_t *p_this )
608 access_t *p_access = (access_t*)p_this;
609 access_sys_t *p_sys = p_access->p_sys;
611 vlc_UrlClean( &p_sys->url );
612 AuthReset( &p_sys->auth );
613 vlc_UrlClean( &p_sys->proxy );
614 AuthReset( &p_sys->proxy_auth );
616 free( p_sys->psz_mime );
617 free( p_sys->psz_pragma );
618 free( p_sys->psz_location );
620 free( p_sys->psz_icy_name );
621 free( p_sys->psz_icy_genre );
622 free( p_sys->psz_icy_title );
624 free( p_sys->psz_user_agent );
626 Disconnect( p_access );
631 for( i = 0; i < vlc_array_count( p_sys->cookies ); i++ )
632 free(vlc_array_item_at_index( p_sys->cookies, i ));
633 vlc_array_destroy( p_sys->cookies );
637 inflateEnd( &p_sys->inflate.stream );
638 free( p_sys->inflate.p_buffer );
644 /*****************************************************************************
645 * Read: Read up to i_len bytes from the http connection and place in
646 * p_buffer. Return the actual number of bytes read
647 *****************************************************************************/
648 static int ReadICYMeta( access_t *p_access );
649 static ssize_t Read( access_t *p_access, uint8_t *p_buffer, size_t i_len )
651 access_sys_t *p_sys = p_access->p_sys;
654 if( p_sys->fd == -1 )
656 p_access->info.b_eof = true;
660 if( p_access->info.i_size >= 0 &&
661 i_len + p_access->info.i_pos > p_access->info.i_size )
663 if( ( i_len = p_access->info.i_size - p_access->info.i_pos ) == 0 )
665 p_access->info.b_eof = true;
670 if( p_sys->b_chunked )
672 if( p_sys->i_chunk < 0 )
674 p_access->info.b_eof = true;
678 if( p_sys->i_chunk <= 0 )
680 char *psz = net_Gets( VLC_OBJECT(p_access), p_sys->fd, p_sys->p_vs );
681 /* read the chunk header */
684 /* fatal error - end of file */
685 msg_Dbg( p_access, "failed reading chunk-header line" );
688 p_sys->i_chunk = strtoll( psz, NULL, 16 );
691 if( p_sys->i_chunk <= 0 ) /* eof */
694 p_access->info.b_eof = true;
699 if( i_len > p_sys->i_chunk )
701 i_len = p_sys->i_chunk;
704 else if( p_access->info.i_size != -1 && (int64_t)i_len > p_sys->i_remaining) {
705 /* Only ask for the remaining length */
706 i_len = (size_t)p_sys->i_remaining;
708 p_access->info.b_eof = true;
714 if( p_sys->i_icy_meta > 0 && p_access->info.i_pos-p_sys->i_icy_offset > 0 )
716 int64_t i_next = p_sys->i_icy_meta -
717 (p_access->info.i_pos - p_sys->i_icy_offset ) % p_sys->i_icy_meta;
719 if( i_next == p_sys->i_icy_meta )
721 if( ReadICYMeta( p_access ) )
723 p_access->info.b_eof = true;
731 i_read = net_Read( p_access, p_sys->fd, p_sys->p_vs, p_buffer, i_len, false );
735 p_access->info.i_pos += i_read;
737 if( p_sys->b_chunked )
739 p_sys->i_chunk -= i_read;
740 if( p_sys->i_chunk <= 0 )
742 /* read the empty line */
743 char *psz = net_Gets( VLC_OBJECT(p_access), p_sys->fd, p_sys->p_vs );
748 else if( i_read <= 0 )
751 * I very much doubt that this will work.
752 * If i_read == 0, the connection *IS* dead, so the only
753 * sensible thing to do is Disconnect() and then retry.
754 * Otherwise, I got recv() completely wrong. -- Courmisch
756 if( p_sys->b_continuous )
758 Request( p_access, 0 );
759 p_sys->b_continuous = false;
760 i_read = Read( p_access, p_buffer, i_len );
761 p_sys->b_continuous = true;
763 Disconnect( p_access );
764 if( p_sys->b_reconnect )
766 msg_Dbg( p_access, "got disconnected, trying to reconnect" );
767 if( Connect( p_access, p_access->info.i_pos ) )
769 msg_Dbg( p_access, "reconnection failed" );
773 p_sys->b_reconnect = false;
774 i_read = Read( p_access, p_buffer, i_len );
775 p_sys->b_reconnect = true;
780 p_access->info.b_eof = true;
781 else if( i_read < 0 )
782 p_access->b_error = true;
785 if( p_access->info.i_size != -1 )
787 p_sys->i_remaining -= i_read;
793 static int ReadICYMeta( access_t *p_access )
795 access_sys_t *p_sys = p_access->p_sys;
801 /* Read meta data length */
802 i_read = net_Read( p_access, p_sys->fd, p_sys->p_vs, &buffer, 1,
809 i_read = buffer << 4;
810 /* msg_Dbg( p_access, "ICY meta size=%u", i_read); */
812 psz_meta = malloc( i_read + 1 );
813 if( net_Read( p_access, p_sys->fd, p_sys->p_vs,
814 (uint8_t *)psz_meta, i_read, true ) != i_read )
817 psz_meta[i_read] = '\0'; /* Just in case */
819 /* msg_Dbg( p_access, "icy-meta=%s", psz_meta ); */
821 /* Now parse the meta */
822 /* Look for StreamTitle= */
823 p = strcasestr( (char *)psz_meta, "StreamTitle=" );
826 p += strlen( "StreamTitle=" );
827 if( *p == '\'' || *p == '"' )
829 char closing[] = { p[0], ';', '\0' };
830 char *psz = strstr( &p[1], closing );
832 psz = strchr( &p[1], ';' );
834 if( psz ) *psz = '\0';
838 char *psz = strchr( &p[1], ';' );
839 if( psz ) *psz = '\0';
842 if( !p_sys->psz_icy_title ||
843 strcmp( p_sys->psz_icy_title, &p[1] ) )
845 free( p_sys->psz_icy_title );
846 char *psz_tmp = strdup( &p[1] );
847 p_sys->psz_icy_title = EnsureUTF8( psz_tmp );
848 if( !p_sys->psz_icy_title )
850 p_access->info.i_update |= INPUT_UPDATE_META;
852 msg_Dbg( p_access, "New Title=%s", p_sys->psz_icy_title );
861 static ssize_t ReadCompressed( access_t *p_access, uint8_t *p_buffer,
864 access_sys_t *p_sys = p_access->p_sys;
866 if( p_sys->b_compressed )
870 if( !p_sys->inflate.p_buffer )
871 p_sys->inflate.p_buffer = malloc( 256 * 1024 );
873 if( p_sys->inflate.stream.avail_in == 0 )
875 ssize_t i_read = Read( p_access, p_sys->inflate.p_buffer + p_sys->inflate.stream.avail_in, 256 * 1024 );
876 if( i_read <= 0 ) return i_read;
877 p_sys->inflate.stream.next_in = p_sys->inflate.p_buffer;
878 p_sys->inflate.stream.avail_in = i_read;
881 p_sys->inflate.stream.avail_out = i_len;
882 p_sys->inflate.stream.next_out = p_buffer;
884 i_ret = inflate( &p_sys->inflate.stream, Z_SYNC_FLUSH );
885 msg_Warn( p_access, "inflate return value: %d, %s", i_ret, p_sys->inflate.stream.msg );
887 return i_len - p_sys->inflate.stream.avail_out;
891 return Read( p_access, p_buffer, i_len );
896 /*****************************************************************************
897 * Seek: close and re-open a connection at the right place
898 *****************************************************************************/
899 static int Seek( access_t *p_access, int64_t i_pos )
901 msg_Dbg( p_access, "trying to seek to %"PRId64, i_pos );
903 Disconnect( p_access );
905 if( p_access->info.i_size
906 && (uint64_t)i_pos >= (uint64_t)p_access->info.i_size ) {
907 msg_Err( p_access, "seek to far" );
908 int retval = Seek( p_access, p_access->info.i_size - 1 );
909 if( retval == VLC_SUCCESS ) {
911 Read( p_access, p_buffer, 1);
912 p_access->info.b_eof = false;
916 if( Connect( p_access, i_pos ) )
918 msg_Err( p_access, "seek failed" );
919 p_access->info.b_eof = true;
925 /*****************************************************************************
927 *****************************************************************************/
928 static int Control( access_t *p_access, int i_query, va_list args )
930 access_sys_t *p_sys = p_access->p_sys;
938 case ACCESS_CAN_SEEK:
939 pb_bool = (bool*)va_arg( args, bool* );
940 *pb_bool = p_sys->b_seekable;
942 case ACCESS_CAN_FASTSEEK:
943 pb_bool = (bool*)va_arg( args, bool* );
946 case ACCESS_CAN_PAUSE:
947 case ACCESS_CAN_CONTROL_PACE:
948 pb_bool = (bool*)va_arg( args, bool* );
950 #if 0 /* Disable for now until we have a clock synchro algo
951 * which works with something else than MPEG over UDP */
952 *pb_bool = p_sys->b_pace_control;
958 case ACCESS_GET_PTS_DELAY:
959 pi_64 = (int64_t*)va_arg( args, int64_t * );
960 *pi_64 = (int64_t)var_GetInteger( p_access, "http-caching" ) * 1000;
964 case ACCESS_SET_PAUSE_STATE:
967 case ACCESS_GET_META:
968 p_meta = (vlc_meta_t*)va_arg( args, vlc_meta_t* );
970 if( p_sys->psz_icy_name )
971 vlc_meta_Set( p_meta, vlc_meta_Title, p_sys->psz_icy_name );
972 if( p_sys->psz_icy_genre )
973 vlc_meta_Set( p_meta, vlc_meta_Genre, p_sys->psz_icy_genre );
974 if( p_sys->psz_icy_title )
975 vlc_meta_Set( p_meta, vlc_meta_NowPlaying, p_sys->psz_icy_title );
978 case ACCESS_GET_CONTENT_TYPE:
979 *va_arg( args, char ** ) =
980 p_sys->psz_mime ? strdup( p_sys->psz_mime ) : NULL;
983 case ACCESS_GET_TITLE_INFO:
984 case ACCESS_SET_TITLE:
985 case ACCESS_SET_SEEKPOINT:
986 case ACCESS_SET_PRIVATE_ID_STATE:
990 msg_Warn( p_access, "unimplemented query in control" );
997 /*****************************************************************************
999 *****************************************************************************/
1000 static int Connect( access_t *p_access, int64_t i_tell )
1002 access_sys_t *p_sys = p_access->p_sys;
1003 vlc_url_t srv = p_sys->b_proxy ? p_sys->proxy : p_sys->url;
1006 free( p_sys->psz_location );
1007 free( p_sys->psz_mime );
1008 free( p_sys->psz_pragma );
1010 free( p_sys->psz_icy_genre );
1011 free( p_sys->psz_icy_name );
1012 free( p_sys->psz_icy_title );
1015 p_sys->psz_location = NULL;
1016 p_sys->psz_mime = NULL;
1017 p_sys->psz_pragma = NULL;
1018 p_sys->b_mms = false;
1019 p_sys->b_chunked = false;
1021 p_sys->i_icy_meta = 0;
1022 p_sys->i_icy_offset = i_tell;
1023 p_sys->psz_icy_name = NULL;
1024 p_sys->psz_icy_genre = NULL;
1025 p_sys->psz_icy_title = NULL;
1026 p_sys->i_remaining = 0;
1027 p_sys->b_persist = false;
1029 p_access->info.i_size = -1;
1030 p_access->info.i_pos = i_tell;
1031 p_access->info.b_eof = false;
1033 /* Open connection */
1034 assert( p_sys->fd == -1 ); /* No open sockets (leaking fds is BAD) */
1035 p_sys->fd = net_ConnectTCP( p_access, srv.psz_host, srv.i_port );
1036 if( p_sys->fd == -1 )
1038 msg_Err( p_access, "cannot connect to %s:%d", srv.psz_host, srv.i_port );
1041 setsockopt (p_sys->fd, SOL_SOCKET, SO_KEEPALIVE, &(int){ 1 }, sizeof (int));
1043 /* Initialize TLS/SSL session */
1044 if( p_sys->b_ssl == true )
1046 /* CONNECT to establish TLS tunnel through HTTP proxy */
1047 if( p_sys->b_proxy )
1050 unsigned i_status = 0;
1052 if( p_sys->i_version == 0 )
1054 /* CONNECT is not in HTTP/1.0 */
1055 Disconnect( p_access );
1059 net_Printf( VLC_OBJECT(p_access), p_sys->fd, NULL,
1060 "CONNECT %s:%d HTTP/1.%d\r\nHost: %s:%d\r\n\r\n",
1061 p_sys->url.psz_host, p_sys->url.i_port,
1063 p_sys->url.psz_host, p_sys->url.i_port);
1065 psz = net_Gets( VLC_OBJECT(p_access), p_sys->fd, NULL );
1068 msg_Err( p_access, "cannot establish HTTP/TLS tunnel" );
1069 Disconnect( p_access );
1073 sscanf( psz, "HTTP/%*u.%*u %3u", &i_status );
1076 if( ( i_status / 100 ) != 2 )
1078 msg_Err( p_access, "HTTP/TLS tunnel through proxy denied" );
1079 Disconnect( p_access );
1085 psz = net_Gets( VLC_OBJECT(p_access), p_sys->fd, NULL );
1088 msg_Err( p_access, "HTTP proxy connection failed" );
1089 Disconnect( p_access );
1098 if( !vlc_object_alive (p_access) || p_access->b_error )
1100 Disconnect( p_access );
1107 /* TLS/SSL handshake */
1108 p_sys->p_tls = tls_ClientCreate( VLC_OBJECT(p_access), p_sys->fd,
1110 if( p_sys->p_tls == NULL )
1112 msg_Err( p_access, "cannot establish HTTP/TLS session" );
1113 Disconnect( p_access );
1116 p_sys->p_vs = &p_sys->p_tls->sock;
1119 return Request( p_access, i_tell ) ? -2 : 0;
1123 static int Request( access_t *p_access, int64_t i_tell )
1125 access_sys_t *p_sys = p_access->p_sys;
1127 v_socket_t *pvs = p_sys->p_vs;
1128 p_sys->b_persist = false;
1130 p_sys->i_remaining = 0;
1131 if( p_sys->b_proxy )
1133 if( p_sys->url.psz_path )
1135 net_Printf( VLC_OBJECT(p_access), p_sys->fd, NULL,
1136 "GET http://%s:%d%s HTTP/1.%d\r\n",
1137 p_sys->url.psz_host, p_sys->url.i_port,
1138 p_sys->url.psz_path, p_sys->i_version );
1142 net_Printf( VLC_OBJECT(p_access), p_sys->fd, NULL,
1143 "GET http://%s:%d/ HTTP/1.%d\r\n",
1144 p_sys->url.psz_host, p_sys->url.i_port,
1150 const char *psz_path = p_sys->url.psz_path;
1151 if( !psz_path || !*psz_path )
1155 if( p_sys->url.i_port != (pvs ? 443 : 80) )
1157 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs,
1158 "GET %s HTTP/1.%d\r\nHost: %s:%d\r\n",
1159 psz_path, p_sys->i_version, p_sys->url.psz_host,
1160 p_sys->url.i_port );
1164 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs,
1165 "GET %s HTTP/1.%d\r\nHost: %s\r\n",
1166 psz_path, p_sys->i_version, p_sys->url.psz_host );
1170 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs, "User-Agent: %s\r\n",
1171 p_sys->psz_user_agent );
1173 if( p_sys->i_version == 1 && ! p_sys->b_continuous )
1175 p_sys->b_persist = true;
1176 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs,
1177 "Range: bytes=%"PRIu64"-\r\n", i_tell );
1181 if( p_sys->cookies )
1184 for( i = 0; i < vlc_array_count( p_sys->cookies ); i++ )
1186 const char * cookie = vlc_array_item_at_index( p_sys->cookies, i );
1187 char * psz_cookie_content = cookie_get_content( cookie );
1188 char * psz_cookie_domain = cookie_get_domain( cookie );
1190 assert( psz_cookie_content );
1192 /* FIXME: This is clearly not conforming to the rfc */
1193 bool is_in_right_domain = (!psz_cookie_domain || strstr( p_sys->url.psz_host, psz_cookie_domain ));
1195 if( is_in_right_domain )
1197 msg_Dbg( p_access, "Sending Cookie %s", psz_cookie_content );
1198 if( net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs, "Cookie: %s\r\n", psz_cookie_content ) < 0 )
1199 msg_Err( p_access, "failed to send Cookie" );
1201 free( psz_cookie_content );
1202 free( psz_cookie_domain );
1206 /* Authentication */
1207 if( p_sys->url.psz_username || p_sys->url.psz_password )
1208 AuthReply( p_access, "", &p_sys->url, &p_sys->auth );
1210 /* Proxy Authentication */
1211 if( p_sys->proxy.psz_username || p_sys->proxy.psz_password )
1212 AuthReply( p_access, "Proxy-", &p_sys->proxy, &p_sys->proxy_auth );
1214 /* ICY meta data request */
1215 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs, "Icy-MetaData: 1\r\n" );
1218 if( net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs, "\r\n" ) < 0 )
1220 msg_Err( p_access, "failed to send request" );
1221 Disconnect( p_access );
1222 return VLC_EGENERIC;
1226 if( ( psz = net_Gets( VLC_OBJECT(p_access), p_sys->fd, pvs ) ) == NULL )
1228 msg_Err( p_access, "failed to read answer" );
1231 if( !strncmp( psz, "HTTP/1.", 7 ) )
1233 p_sys->psz_protocol = "HTTP";
1234 p_sys->i_code = atoi( &psz[9] );
1236 else if( !strncmp( psz, "ICY", 3 ) )
1238 p_sys->psz_protocol = "ICY";
1239 p_sys->i_code = atoi( &psz[4] );
1240 p_sys->b_reconnect = true;
1244 msg_Err( p_access, "invalid HTTP reply '%s'", psz );
1248 msg_Dbg( p_access, "protocol '%s' answer code %d",
1249 p_sys->psz_protocol, p_sys->i_code );
1250 if( !strcmp( p_sys->psz_protocol, "ICY" ) )
1252 p_sys->b_seekable = false;
1254 if( p_sys->i_code != 206 && p_sys->i_code != 401 )
1256 p_sys->b_seekable = false;
1258 /* Authentication error - We'll have to display the dialog */
1259 if( p_sys->i_code == 401 )
1263 /* Other fatal error */
1264 else if( p_sys->i_code >= 400 )
1266 msg_Err( p_access, "error: %s", psz );
1274 char *psz = net_Gets( VLC_OBJECT(p_access), p_sys->fd, pvs );
1279 msg_Err( p_access, "failed to read answer" );
1283 if( !vlc_object_alive (p_access) || p_access->b_error )
1289 /* msg_Dbg( p_input, "Line=%s", psz ); */
1296 if( ( p = strchr( psz, ':' ) ) == NULL )
1298 msg_Err( p_access, "malformed header line: %s", psz );
1303 while( *p == ' ' ) p++;
1305 if( !strcasecmp( psz, "Content-Length" ) )
1307 int64_t i_size = i_tell + (p_sys->i_remaining = atoll( p ));
1308 if(i_size > p_access->info.i_size) {
1309 p_access->info.i_size = i_size;
1311 msg_Dbg( p_access, "this frame size=%"PRId64, p_sys->i_remaining );
1313 else if( !strcasecmp( psz, "Content-Range" ) ) {
1314 int64_t i_ntell = i_tell;
1315 int64_t i_nend = (p_access->info.i_size > 0)?(p_access->info.i_size - 1):i_tell;
1316 int64_t i_nsize = p_access->info.i_size;
1317 sscanf(p,"bytes %"PRId64"-%"PRId64"/%"PRId64,&i_ntell,&i_nend,&i_nsize);
1318 if(i_nend > i_ntell ) {
1319 p_access->info.i_pos = i_ntell;
1320 p_sys->i_remaining = i_nend+1-i_ntell;
1321 int64_t i_size = (i_nsize > i_nend) ? i_nsize : (i_nend + 1);
1322 if(i_size > p_access->info.i_size) {
1323 p_access->info.i_size = i_size;
1325 msg_Dbg( p_access, "stream size=%"PRId64",pos=%"PRId64",remaining=%"PRId64,i_nsize,i_ntell,p_sys->i_remaining);
1328 else if( !strcasecmp( psz, "Connection" ) ) {
1329 msg_Dbg( p_access, "Connection: %s",p );
1331 sscanf(p, "close%n",&i);
1333 p_sys->b_persist = false;
1336 else if( !strcasecmp( psz, "Location" ) )
1340 /* This does not follow RFC 2068, but yet if the url is not absolute,
1341 * handle it as everyone does. */
1344 const char *psz_http_ext = p_sys->b_ssl ? "s" : "" ;
1346 if( p_sys->url.i_port == ( p_sys->b_ssl ? 443 : 80 ) )
1348 if( asprintf(&psz_new_loc, "http%s://%s%s", psz_http_ext,
1349 p_sys->url.psz_host, p) < 0 )
1354 if( asprintf(&psz_new_loc, "http%s://%s:%d%s", psz_http_ext,
1355 p_sys->url.psz_host, p_sys->url.i_port, p) < 0 )
1361 psz_new_loc = strdup( p );
1364 free( p_sys->psz_location );
1365 p_sys->psz_location = psz_new_loc;
1367 else if( !strcasecmp( psz, "Content-Type" ) )
1369 free( p_sys->psz_mime );
1370 p_sys->psz_mime = strdup( p );
1371 msg_Dbg( p_access, "Content-Type: %s", p_sys->psz_mime );
1373 else if( !strcasecmp( psz, "Content-Encoding" ) )
1375 msg_Dbg( p_access, "Content-Encoding: %s", p );
1376 if( strcasecmp( p, "identity" ) )
1378 p_sys->b_compressed = true;
1380 msg_Warn( p_access, "Compressed content not supported. Rebuild with zlib support." );
1383 else if( !strcasecmp( psz, "Pragma" ) )
1385 if( !strcasecmp( psz, "Pragma: features" ) )
1386 p_sys->b_mms = true;
1387 free( p_sys->psz_pragma );
1388 p_sys->psz_pragma = strdup( p );
1389 msg_Dbg( p_access, "Pragma: %s", p_sys->psz_pragma );
1391 else if( !strcasecmp( psz, "Server" ) )
1393 msg_Dbg( p_access, "Server: %s", p );
1394 if( !strncasecmp( p, "Icecast", 7 ) ||
1395 !strncasecmp( p, "Nanocaster", 10 ) )
1397 /* Remember if this is Icecast
1398 * we need to force demux in this case without breaking
1401 /* Let live 365 streams (nanocaster) piggyback on the icecast
1402 * routine. They look very similar */
1404 p_sys->b_reconnect = true;
1405 p_sys->b_pace_control = false;
1406 p_sys->b_icecast = true;
1409 else if( !strcasecmp( psz, "Transfer-Encoding" ) )
1411 msg_Dbg( p_access, "Transfer-Encoding: %s", p );
1412 if( !strncasecmp( p, "chunked", 7 ) )
1414 p_sys->b_chunked = true;
1417 else if( !strcasecmp( psz, "Icy-MetaInt" ) )
1419 msg_Dbg( p_access, "Icy-MetaInt: %s", p );
1420 p_sys->i_icy_meta = atoi( p );
1421 if( p_sys->i_icy_meta < 0 )
1422 p_sys->i_icy_meta = 0;
1423 if( p_sys->i_icy_meta > 0 )
1424 p_sys->b_icecast = true;
1426 msg_Warn( p_access, "ICY metaint=%d", p_sys->i_icy_meta );
1428 else if( !strcasecmp( psz, "Icy-Name" ) )
1430 free( p_sys->psz_icy_name );
1431 char *psz_tmp = strdup( p );
1432 p_sys->psz_icy_name = EnsureUTF8( psz_tmp );
1433 if( !p_sys->psz_icy_name )
1435 msg_Dbg( p_access, "Icy-Name: %s", p_sys->psz_icy_name );
1437 p_sys->b_icecast = true; /* be on the safeside. set it here as well. */
1438 p_sys->b_reconnect = true;
1439 p_sys->b_pace_control = false;
1441 else if( !strcasecmp( psz, "Icy-Genre" ) )
1443 free( p_sys->psz_icy_genre );
1444 char *psz_tmp = strdup( p );
1445 p_sys->psz_icy_genre = EnsureUTF8( psz_tmp );
1446 if( !p_sys->psz_icy_genre )
1448 msg_Dbg( p_access, "Icy-Genre: %s", p_sys->psz_icy_genre );
1450 else if( !strncasecmp( psz, "Icy-Notice", 10 ) )
1452 msg_Dbg( p_access, "Icy-Notice: %s", p );
1454 else if( !strncasecmp( psz, "icy-", 4 ) ||
1455 !strncasecmp( psz, "ice-", 4 ) ||
1456 !strncasecmp( psz, "x-audiocast", 11 ) )
1458 msg_Dbg( p_access, "Meta-Info: %s: %s", psz, p );
1460 else if( !strcasecmp( psz, "Set-Cookie" ) )
1462 if( p_sys->cookies )
1464 msg_Dbg( p_access, "Accepting Cookie: %s", p );
1465 cookie_append( p_sys->cookies, strdup(p) );
1468 msg_Dbg( p_access, "We have a Cookie we won't remember: %s", p );
1470 else if( !strcasecmp( psz, "www-authenticate" ) )
1472 msg_Dbg( p_access, "Authentication header: %s", p );
1473 AuthParseHeader( p_access, p, &p_sys->auth );
1475 else if( !strcasecmp( psz, "proxy-authenticate" ) )
1477 msg_Dbg( p_access, "Proxy authentication header: %s", p );
1478 AuthParseHeader( p_access, p, &p_sys->proxy_auth );
1480 else if( !strcasecmp( psz, "authentication-info" ) )
1482 msg_Dbg( p_access, "Authentication Info header: %s", p );
1483 if( AuthCheckReply( p_access, p, &p_sys->url, &p_sys->auth ) )
1486 else if( !strcasecmp( psz, "proxy-authentication-info" ) )
1488 msg_Dbg( p_access, "Proxy Authentication Info header: %s", p );
1489 if( AuthCheckReply( p_access, p, &p_sys->proxy, &p_sys->proxy_auth ) )
1495 /* We close the stream for zero length data, unless of course the
1496 * server has already promised to do this for us.
1498 if( p_access->info.i_size != -1 && p_sys->i_remaining == 0 && p_sys->b_persist ) {
1499 Disconnect( p_access );
1504 Disconnect( p_access );
1505 return VLC_EGENERIC;
1508 /*****************************************************************************
1510 *****************************************************************************/
1511 static void Disconnect( access_t *p_access )
1513 access_sys_t *p_sys = p_access->p_sys;
1515 if( p_sys->p_tls != NULL)
1517 tls_ClientDelete( p_sys->p_tls );
1518 p_sys->p_tls = NULL;
1521 if( p_sys->fd != -1)
1523 net_Close(p_sys->fd);
1529 /*****************************************************************************
1530 * Cookies (FIXME: we may want to rewrite that using a nice structure to hold
1531 * them) (FIXME: only support the "domain=" param)
1532 *****************************************************************************/
1534 /* Get the NAME=VALUE part of the Cookie */
1535 static char * cookie_get_content( const char * cookie )
1537 char * ret = strdup( cookie );
1538 if( !ret ) return NULL;
1540 /* Look for a ';' */
1541 while( *str && *str != ';' ) str++;
1542 /* Replace it by a end-char */
1543 if( *str == ';' ) *str = 0;
1547 /* Get the domain where the cookie is stored */
1548 static char * cookie_get_domain( const char * cookie )
1550 const char * str = cookie;
1551 static const char domain[] = "domain=";
1554 /* Look for a ';' */
1557 if( !strncmp( str, domain, sizeof(domain) - 1 /* minus \0 */ ) )
1559 str += sizeof(domain) - 1 /* minus \0 */;
1560 char * ret = strdup( str );
1561 /* Now remove the next ';' if present */
1562 char * ret_iter = ret;
1563 while( *ret_iter && *ret_iter != ';' ) ret_iter++;
1564 if( *ret_iter == ';' )
1568 /* Go to next ';' field */
1569 while( *str && *str != ';' ) str++;
1570 if( *str == ';' ) str++;
1572 while( *str && *str == ' ' ) str++;
1577 /* Get NAME in the NAME=VALUE field */
1578 static char * cookie_get_name( const char * cookie )
1580 char * ret = cookie_get_content( cookie ); /* NAME=VALUE */
1581 if( !ret ) return NULL;
1583 while( *str && *str != '=' ) str++;
1588 /* Add a cookie in cookies, checking to see how it should be added */
1589 static void cookie_append( vlc_array_t * cookies, char * cookie )
1596 char * cookie_name = cookie_get_name( cookie );
1598 /* Don't send invalid cookies */
1602 char * cookie_domain = cookie_get_domain( cookie );
1603 for( i = 0; i < vlc_array_count( cookies ); i++ )
1605 char * current_cookie = vlc_array_item_at_index( cookies, i );
1606 char * current_cookie_name = cookie_get_name( current_cookie );
1607 char * current_cookie_domain = cookie_get_domain( current_cookie );
1609 assert( current_cookie_name );
1611 bool is_domain_matching = ( cookie_domain && current_cookie_domain &&
1612 !strcmp( cookie_domain, current_cookie_domain ) );
1614 if( is_domain_matching && !strcmp( cookie_name, current_cookie_name ) )
1616 /* Remove previous value for this cookie */
1617 free( current_cookie );
1618 vlc_array_remove( cookies, i );
1621 free( current_cookie_name );
1622 free( current_cookie_domain );
1625 free( current_cookie_name );
1626 free( current_cookie_domain );
1628 free( cookie_name );
1629 free( cookie_domain );
1630 vlc_array_append( cookies, cookie );
1633 /*****************************************************************************
1634 * "RFC 2617: Basic and Digest Access Authentication" header parsing
1635 *****************************************************************************/
1636 static char *AuthGetParam( const char *psz_header, const char *psz_param )
1638 char psz_what[strlen(psz_param)+3];
1639 sprintf( psz_what, "%s=\"", psz_param );
1640 psz_header = strstr( psz_header, psz_what );
1643 const char *psz_end;
1644 psz_header += strlen( psz_what );
1645 psz_end = strchr( psz_header, '"' );
1646 if( !psz_end ) /* Invalid since we should have a closing quote */
1647 return strdup( psz_header );
1648 return strndup( psz_header, psz_end - psz_header );
1656 static char *AuthGetParamNoQuotes( const char *psz_header, const char *psz_param )
1658 char psz_what[strlen(psz_param)+2];
1659 sprintf( psz_what, "%s=", psz_param );
1660 psz_header = strstr( psz_header, psz_what );
1663 const char *psz_end;
1664 psz_header += strlen( psz_what );
1665 psz_end = strchr( psz_header, ',' );
1666 /* XXX: Do we need to filter out trailing space between the value and
1667 * the comma/end of line? */
1668 if( !psz_end ) /* Can be valid if this is the last parameter */
1669 return strdup( psz_header );
1670 return strndup( psz_header, psz_end - psz_header );
1678 static void AuthParseHeader( access_t *p_access, const char *psz_header,
1679 http_auth_t *p_auth )
1681 /* FIXME: multiple auth methods can be listed (comma seperated) */
1683 /* 2 Basic Authentication Scheme */
1684 if( !strncasecmp( psz_header, "Basic ", strlen( "Basic " ) ) )
1686 msg_Dbg( p_access, "Using Basic Authentication" );
1687 psz_header += strlen( "Basic " );
1688 p_auth->psz_realm = AuthGetParam( psz_header, "realm" );
1689 if( !p_auth->psz_realm )
1690 msg_Warn( p_access, "Basic Authentication: "
1691 "Mandatory 'realm' parameter is missing" );
1693 /* 3 Digest Access Authentication Scheme */
1694 else if( !strncasecmp( psz_header, "Digest ", strlen( "Digest " ) ) )
1696 msg_Dbg( p_access, "Using Digest Access Authentication" );
1697 if( p_auth->psz_nonce ) return; /* FIXME */
1698 psz_header += strlen( "Digest " );
1699 p_auth->psz_realm = AuthGetParam( psz_header, "realm" );
1700 p_auth->psz_domain = AuthGetParam( psz_header, "domain" );
1701 p_auth->psz_nonce = AuthGetParam( psz_header, "nonce" );
1702 p_auth->psz_opaque = AuthGetParam( psz_header, "opaque" );
1703 p_auth->psz_stale = AuthGetParamNoQuotes( psz_header, "stale" );
1704 p_auth->psz_algorithm = AuthGetParamNoQuotes( psz_header, "algorithm" );
1705 p_auth->psz_qop = AuthGetParam( psz_header, "qop" );
1706 p_auth->i_nonce = 0;
1707 /* printf("realm: |%s|\ndomain: |%s|\nnonce: |%s|\nopaque: |%s|\n"
1708 "stale: |%s|\nalgorithm: |%s|\nqop: |%s|\n",
1709 p_auth->psz_realm,p_auth->psz_domain,p_auth->psz_nonce,
1710 p_auth->psz_opaque,p_auth->psz_stale,p_auth->psz_algorithm,
1711 p_auth->psz_qop); */
1712 if( !p_auth->psz_realm )
1713 msg_Warn( p_access, "Digest Access Authentication: "
1714 "Mandatory 'realm' parameter is missing" );
1715 if( !p_auth->psz_nonce )
1716 msg_Warn( p_access, "Digest Access Authentication: "
1717 "Mandatory 'nonce' parameter is missing" );
1718 if( p_auth->psz_qop ) /* FIXME: parse the qop list */
1720 char *psz_tmp = strchr( p_auth->psz_qop, ',' );
1721 if( psz_tmp ) *psz_tmp = '\0';
1726 const char *psz_end = strchr( psz_header, ' ' );
1728 msg_Warn( p_access, "Unknown authentication scheme: '%*s'",
1729 (int)(psz_end - psz_header), psz_header );
1731 msg_Warn( p_access, "Unknown authentication scheme: '%s'",
1736 static char *AuthDigest( access_t *p_access, vlc_url_t *p_url,
1737 http_auth_t *p_auth, const char *psz_method )
1740 const char *psz_username = p_url->psz_username ? p_url->psz_username : "";
1741 const char *psz_password = p_url->psz_password ? p_url->psz_password : "";
1743 char *psz_HA1 = NULL;
1744 char *psz_HA2 = NULL;
1745 char *psz_response = NULL;
1749 if( p_auth->psz_HA1 )
1751 psz_HA1 = strdup( p_auth->psz_HA1 );
1752 if( !psz_HA1 ) goto error;
1757 AddMD5( &md5, psz_username, strlen( psz_username ) );
1758 AddMD5( &md5, ":", 1 );
1759 AddMD5( &md5, p_auth->psz_realm, strlen( p_auth->psz_realm ) );
1760 AddMD5( &md5, ":", 1 );
1761 AddMD5( &md5, psz_password, strlen( psz_password ) );
1764 psz_HA1 = psz_md5_hash( &md5 );
1765 if( !psz_HA1 ) goto error;
1767 if( p_auth->psz_algorithm
1768 && !strcmp( p_auth->psz_algorithm, "MD5-sess" ) )
1771 AddMD5( &md5, psz_HA1, 32 );
1773 AddMD5( &md5, ":", 1 );
1774 AddMD5( &md5, p_auth->psz_nonce, strlen( p_auth->psz_nonce ) );
1775 AddMD5( &md5, ":", 1 );
1776 AddMD5( &md5, p_auth->psz_cnonce, strlen( p_auth->psz_cnonce ) );
1779 psz_HA1 = psz_md5_hash( &md5 );
1780 if( !psz_HA1 ) goto error;
1781 p_auth->psz_HA1 = strdup( psz_HA1 );
1782 if( !p_auth->psz_HA1 ) goto error;
1789 AddMD5( &md5, psz_method, strlen( psz_method ) );
1790 AddMD5( &md5, ":", 1 );
1791 if( p_url->psz_path )
1792 AddMD5( &md5, p_url->psz_path, strlen( p_url->psz_path ) );
1794 AddMD5( &md5, "/", 1 );
1795 if( p_auth->psz_qop && !strcmp( p_auth->psz_qop, "auth-int" ) )
1800 AddMD5( &ent, "", 0 ); /* XXX: entity-body. should be ok for GET */
1802 psz_ent = psz_md5_hash( &ent );
1803 if( !psz_ent ) goto error;
1804 AddMD5( &md5, ":", 1 );
1805 AddMD5( &md5, psz_ent, 32 );
1809 psz_HA2 = psz_md5_hash( &md5 );
1810 if( !psz_HA2 ) goto error;
1812 /* Request digest */
1814 AddMD5( &md5, psz_HA1, 32 );
1815 AddMD5( &md5, ":", 1 );
1816 AddMD5( &md5, p_auth->psz_nonce, strlen( p_auth->psz_nonce ) );
1817 AddMD5( &md5, ":", 1 );
1819 && ( !strcmp( p_auth->psz_qop, "auth" )
1820 || !strcmp( p_auth->psz_qop, "auth-int" ) ) )
1823 snprintf( psz_inonce, 9, "%08x", p_auth->i_nonce );
1824 AddMD5( &md5, psz_inonce, 8 );
1825 AddMD5( &md5, ":", 1 );
1826 AddMD5( &md5, p_auth->psz_cnonce, strlen( p_auth->psz_cnonce ) );
1827 AddMD5( &md5, ":", 1 );
1828 AddMD5( &md5, p_auth->psz_qop, strlen( p_auth->psz_qop ) );
1829 AddMD5( &md5, ":", 1 );
1831 AddMD5( &md5, psz_HA2, 32 );
1833 psz_response = psz_md5_hash( &md5 );
1838 return psz_response;
1842 static void AuthReply( access_t *p_access, const char *psz_prefix,
1843 vlc_url_t *p_url, http_auth_t *p_auth )
1845 access_sys_t *p_sys = p_access->p_sys;
1846 v_socket_t *pvs = p_sys->p_vs;
1848 const char *psz_username = p_url->psz_username ? p_url->psz_username : "";
1849 const char *psz_password = p_url->psz_password ? p_url->psz_password : "";
1851 if( p_auth->psz_nonce )
1853 /* Digest Access Authentication */
1856 if( p_auth->psz_algorithm
1857 && strcmp( p_auth->psz_algorithm, "MD5" )
1858 && strcmp( p_auth->psz_algorithm, "MD5-sess" ) )
1860 msg_Err( p_access, "Digest Access Authentication: "
1861 "Unknown algorithm '%s'", p_auth->psz_algorithm );
1865 if( p_auth->psz_qop || !p_auth->psz_cnonce )
1867 /* FIXME: needs to be really random to prevent man in the middle
1869 free( p_auth->psz_cnonce );
1870 p_auth->psz_cnonce = strdup( "Some random string FIXME" );
1874 psz_response = AuthDigest( p_access, p_url, p_auth, "GET" );
1875 if( !psz_response ) return;
1877 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs,
1878 "%sAuthorization: Digest "
1879 /* Mandatory parameters */
1885 /* Optional parameters */
1886 "%s%s%s" /* algorithm */
1887 "%s%s%s" /* cnonce */
1888 "%s%s%s" /* opaque */
1889 "%s%s%s" /* message qop */
1890 "%s%08x%s" /* nonce count */
1892 /* Mandatory parameters */
1897 p_url->psz_path ? p_url->psz_path : "/",
1899 /* Optional parameters */
1900 p_auth->psz_algorithm ? "algorithm=\"" : "",
1901 p_auth->psz_algorithm ? p_auth->psz_algorithm : "",
1902 p_auth->psz_algorithm ? "\", " : "",
1903 p_auth->psz_cnonce ? "cnonce=\"" : "",
1904 p_auth->psz_cnonce ? p_auth->psz_cnonce : "",
1905 p_auth->psz_cnonce ? "\", " : "",
1906 p_auth->psz_opaque ? "opaque=\"" : "",
1907 p_auth->psz_opaque ? p_auth->psz_opaque : "",
1908 p_auth->psz_opaque ? "\", " : "",
1909 p_auth->psz_qop ? "qop=\"" : "",
1910 p_auth->psz_qop ? p_auth->psz_qop : "",
1911 p_auth->psz_qop ? "\", " : "",
1912 p_auth->i_nonce ? "nc=\"" : "uglyhack=\"", /* Will be parsed as an unhandled extension */
1914 p_auth->i_nonce ? "\"" : "\""
1917 free( psz_response );
1921 /* Basic Access Authentication */
1922 char buf[strlen( psz_username ) + strlen( psz_password ) + 2];
1925 snprintf( buf, sizeof( buf ), "%s:%s", psz_username, psz_password );
1926 b64 = vlc_b64_encode( buf );
1930 net_Printf( VLC_OBJECT(p_access), p_sys->fd, pvs,
1931 "%sAuthorization: Basic %s\r\n", psz_prefix, b64 );
1937 static int AuthCheckReply( access_t *p_access, const char *psz_header,
1938 vlc_url_t *p_url, http_auth_t *p_auth )
1940 int i_ret = VLC_EGENERIC;
1941 char *psz_nextnonce = AuthGetParam( psz_header, "nextnonce" );
1942 char *psz_qop = AuthGetParamNoQuotes( psz_header, "qop" );
1943 char *psz_rspauth = AuthGetParam( psz_header, "rspauth" );
1944 char *psz_cnonce = AuthGetParam( psz_header, "cnonce" );
1945 char *psz_nc = AuthGetParamNoQuotes( psz_header, "nc" );
1951 if( strcmp( psz_cnonce, p_auth->psz_cnonce ) )
1953 msg_Err( p_access, "HTTP Digest Access Authentication: server replied with a different client nonce value." );
1960 i_nonce = strtol( psz_nc, NULL, 16 );
1961 if( i_nonce != p_auth->i_nonce )
1963 msg_Err( p_access, "HTTP Digest Access Authentication: server replied with a different nonce count value." );
1968 if( psz_qop && p_auth->psz_qop && strcmp( psz_qop, p_auth->psz_qop ) )
1969 msg_Warn( p_access, "HTTP Digest Access Authentication: server replied using a different 'quality of protection' option" );
1971 /* All the clear text values match, let's now check the response
1973 psz_digest = AuthDigest( p_access, p_url, p_auth, "" );
1974 if( strcmp( psz_digest, psz_rspauth ) )
1976 msg_Err( p_access, "HTTP Digest Access Authentication: server replied with an invalid response digest (expected value: %s).", psz_digest );
1985 free( p_auth->psz_nonce );
1986 p_auth->psz_nonce = psz_nextnonce;
1987 psz_nextnonce = NULL;
1990 i_ret = VLC_SUCCESS;
1992 free( psz_nextnonce );
1994 free( psz_rspauth );
2001 static void AuthReset( http_auth_t *p_auth )
2003 FREENULL( p_auth->psz_realm );
2004 FREENULL( p_auth->psz_domain );
2005 FREENULL( p_auth->psz_nonce );
2006 FREENULL( p_auth->psz_opaque );
2007 FREENULL( p_auth->psz_stale );
2008 FREENULL( p_auth->psz_algorithm );
2009 FREENULL( p_auth->psz_qop );
2010 p_auth->i_nonce = 0;
2011 FREENULL( p_auth->psz_cnonce );
2012 FREENULL( p_auth->psz_HA1 );