[package] uhttpd: add /etc/uhttpd.key and /etc/uhttpd.crt to conffile hints
[openwrt/svn-archive/archive.git] / package / uhttpd / src / uhttpd.c
1 /*
2 * uhttpd - Tiny single-threaded httpd - Main component
3 *
4 * Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
5 *
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
9 *
10 * http://www.apache.org/licenses/LICENSE-2.0
11 *
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
17 */
18
19 #define _XOPEN_SOURCE 500 /* crypt() */
20
21 #include "uhttpd.h"
22 #include "uhttpd-utils.h"
23 #include "uhttpd-file.h"
24
25 #ifdef HAVE_CGI
26 #include "uhttpd-cgi.h"
27 #endif
28
29 #ifdef HAVE_LUA
30 #include "uhttpd-lua.h"
31 #endif
32
33 #ifdef HAVE_TLS
34 #include "uhttpd-tls.h"
35 #endif
36
37
38 static int run = 1;
39
40 static void uh_sigterm(int sig)
41 {
42 run = 0;
43 }
44
45 static void uh_sigchld(int sig)
46 {
47 while( waitpid(-1, NULL, WNOHANG) > 0 ) { }
48 }
49
50 static void uh_config_parse(struct config *conf)
51 {
52 FILE *c;
53 char line[512];
54 char *col1 = NULL;
55 char *col2 = NULL;
56 char *eol = NULL;
57
58 const char *path = conf->file ? conf->file : "/etc/httpd.conf";
59
60
61 if( (c = fopen(path, "r")) != NULL )
62 {
63 memset(line, 0, sizeof(line));
64
65 while( fgets(line, sizeof(line) - 1, c) )
66 {
67 if( (line[0] == '/') && (strchr(line, ':') != NULL) )
68 {
69 if( !(col1 = strchr(line, ':')) || (*col1++ = 0) ||
70 !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
71 !(eol = strchr(col2, '\n')) || (*eol++ = 0) )
72 continue;
73
74 if( !uh_auth_add(line, col1, col2) )
75 {
76 fprintf(stderr,
77 "Notice: No password set for user %s, ignoring "
78 "authentication on %s\n", col1, line
79 );
80 }
81 }
82 else if( !strncmp(line, "I:", 2) )
83 {
84 if( !(col1 = strchr(line, ':')) || (*col1++ = 0) ||
85 !(eol = strchr(col1, '\n')) || (*eol++ = 0) )
86 continue;
87
88 conf->index_file = strdup(col1);
89 }
90 else if( !strncmp(line, "E404:", 5) )
91 {
92 if( !(col1 = strchr(line, ':')) || (*col1++ = 0) ||
93 !(eol = strchr(col1, '\n')) || (*eol++ = 0) )
94 continue;
95
96 conf->error_handler = strdup(col1);
97 }
98 #ifdef HAVE_CGI
99 else if( (line[0] == '*') && (strchr(line, ':') != NULL) )
100 {
101 if( !(col1 = strchr(line, '*')) || (*col1++ = 0) ||
102 !(col2 = strchr(col1, ':')) || (*col2++ = 0) ||
103 !(eol = strchr(col2, '\n')) || (*eol++ = 0) )
104 continue;
105
106 if( !uh_interpreter_add(col1, col2) )
107 {
108 fprintf(stderr,
109 "Unable to add interpreter %s for extension %s: "
110 "Out of memory\n", col2, col1
111 );
112 }
113 }
114 #endif
115 }
116
117 fclose(c);
118 }
119 }
120
121 static int uh_socket_bind(
122 fd_set *serv_fds, int *max_fd, const char *host, const char *port,
123 struct addrinfo *hints, int do_tls, struct config *conf
124 ) {
125 int sock = -1;
126 int yes = 1;
127 int status;
128 int bound = 0;
129
130 int tcp_ka_idl = 1;
131 int tcp_ka_int = 1;
132 int tcp_ka_cnt = 3;
133
134 struct listener *l = NULL;
135 struct addrinfo *addrs = NULL, *p = NULL;
136
137 if( (status = getaddrinfo(host, port, hints, &addrs)) != 0 )
138 {
139 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
140 }
141
142 /* try to bind a new socket to each found address */
143 for( p = addrs; p; p = p->ai_next )
144 {
145 /* get the socket */
146 if( (sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1 )
147 {
148 perror("socket()");
149 goto error;
150 }
151
152 /* "address already in use" */
153 if( setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)) )
154 {
155 perror("setsockopt()");
156 goto error;
157 }
158
159 /* TCP keep-alive */
160 if( setsockopt(sock, SOL_SOCKET, SO_KEEPALIVE, &yes, sizeof(yes)) ||
161 setsockopt(sock, SOL_TCP, TCP_KEEPIDLE, &tcp_ka_idl, sizeof(tcp_ka_idl)) ||
162 setsockopt(sock, SOL_TCP, TCP_KEEPINTVL, &tcp_ka_int, sizeof(tcp_ka_int)) ||
163 setsockopt(sock, SOL_TCP, TCP_KEEPCNT, &tcp_ka_cnt, sizeof(tcp_ka_cnt)) )
164 {
165 fprintf(stderr, "Notice: Unable to enable TCP keep-alive: %s\n",
166 strerror(errno));
167 }
168
169 /* required to get parallel v4 + v6 working */
170 if( p->ai_family == AF_INET6 )
171 {
172 if( setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1 )
173 {
174 perror("setsockopt()");
175 goto error;
176 }
177 }
178
179 /* bind */
180 if( bind(sock, p->ai_addr, p->ai_addrlen) == -1 )
181 {
182 perror("bind()");
183 goto error;
184 }
185
186 /* listen */
187 if( listen(sock, UH_LIMIT_CLIENTS) == -1 )
188 {
189 perror("listen()");
190 goto error;
191 }
192
193 /* add listener to global list */
194 if( ! (l = uh_listener_add(sock, conf)) )
195 {
196 fprintf(stderr, "uh_listener_add(): Failed to allocate memory\n");
197 goto error;
198 }
199
200 #ifdef HAVE_TLS
201 /* init TLS */
202 l->tls = do_tls ? conf->tls : NULL;
203 #endif
204
205 /* add socket to server fd set */
206 FD_SET(sock, serv_fds);
207 fd_cloexec(sock);
208 *max_fd = max(*max_fd, sock);
209
210 bound++;
211 continue;
212
213 error:
214 if( sock > 0 )
215 close(sock);
216 }
217
218 freeaddrinfo(addrs);
219
220 return bound;
221 }
222
223 static struct http_request * uh_http_header_parse(struct client *cl, char *buffer, int buflen)
224 {
225 char *method = &buffer[0];
226 char *path = NULL;
227 char *version = NULL;
228
229 char *headers = NULL;
230 char *hdrname = NULL;
231 char *hdrdata = NULL;
232
233 int i;
234 int hdrcount = 0;
235
236 static struct http_request req;
237
238 memset(&req, 0, sizeof(req));
239
240
241 /* terminate initial header line */
242 if( (headers = strfind(buffer, buflen, "\r\n", 2)) != NULL )
243 {
244 buffer[buflen-1] = 0;
245
246 *headers++ = 0;
247 *headers++ = 0;
248
249 /* find request path */
250 if( (path = strchr(buffer, ' ')) != NULL )
251 *path++ = 0;
252
253 /* find http version */
254 if( (path != NULL) && ((version = strchr(path, ' ')) != NULL) )
255 *version++ = 0;
256
257
258 /* check method */
259 if( strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST") )
260 {
261 /* invalid method */
262 uh_http_response(cl, 405, "Method Not Allowed");
263 return NULL;
264 }
265 else
266 {
267 switch(method[0])
268 {
269 case 'G':
270 req.method = UH_HTTP_MSG_GET;
271 break;
272
273 case 'H':
274 req.method = UH_HTTP_MSG_HEAD;
275 break;
276
277 case 'P':
278 req.method = UH_HTTP_MSG_POST;
279 break;
280 }
281 }
282
283 /* check path */
284 if( !path || !strlen(path) )
285 {
286 /* malformed request */
287 uh_http_response(cl, 400, "Bad Request");
288 return NULL;
289 }
290 else
291 {
292 req.url = path;
293 }
294
295 /* check version */
296 if( (version == NULL) || (strcmp(version, "HTTP/0.9") &&
297 strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1")) )
298 {
299 /* unsupported version */
300 uh_http_response(cl, 400, "Bad Request");
301 return NULL;
302 }
303 else
304 {
305 req.version = strtof(&version[5], NULL);
306 }
307
308
309 /* process header fields */
310 for( i = (int)(headers - buffer); i < buflen; i++ )
311 {
312 /* found eol and have name + value, push out header tuple */
313 if( hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n') )
314 {
315 buffer[i] = 0;
316
317 /* store */
318 if( (hdrcount + 1) < array_size(req.headers) )
319 {
320 req.headers[hdrcount++] = hdrname;
321 req.headers[hdrcount++] = hdrdata;
322
323 hdrname = hdrdata = NULL;
324 }
325
326 /* too large */
327 else
328 {
329 uh_http_response(cl, 413, "Request Entity Too Large");
330 return NULL;
331 }
332 }
333
334 /* have name but no value and found a colon, start of value */
335 else if( hdrname && !hdrdata && ((i+2) < buflen) &&
336 (buffer[i] == ':') && (buffer[i+1] == ' ')
337 ) {
338 buffer[i] = 0;
339 hdrdata = &buffer[i+2];
340 }
341
342 /* have no name and found [A-Z], start of name */
343 else if( !hdrname && isalpha(buffer[i]) && isupper(buffer[i]) )
344 {
345 hdrname = &buffer[i];
346 }
347 }
348
349 /* valid enough */
350 req.redirect_status = 200;
351 return &req;
352 }
353
354 /* Malformed request */
355 uh_http_response(cl, 400, "Bad Request");
356 return NULL;
357 }
358
359
360 static struct http_request * uh_http_header_recv(struct client *cl)
361 {
362 static char buffer[UH_LIMIT_MSGHEAD];
363 char *bufptr = &buffer[0];
364 char *idxptr = NULL;
365
366 struct timeval timeout;
367
368 fd_set reader;
369
370 ssize_t blen = sizeof(buffer)-1;
371 ssize_t rlen = 0;
372
373 memset(buffer, 0, sizeof(buffer));
374
375 while( blen > 0 )
376 {
377 FD_ZERO(&reader);
378 FD_SET(cl->socket, &reader);
379
380 /* fail after 0.1s */
381 timeout.tv_sec = 0;
382 timeout.tv_usec = 100000;
383
384 /* check whether fd is readable */
385 if( select(cl->socket + 1, &reader, NULL, NULL, &timeout) > 0 )
386 {
387 /* receive data */
388 ensure_out(rlen = uh_tcp_peek(cl, bufptr, blen));
389
390 if( (idxptr = strfind(buffer, sizeof(buffer), "\r\n\r\n", 4)) )
391 {
392 ensure_out(rlen = uh_tcp_recv(cl, bufptr,
393 (int)(idxptr - bufptr) + 4));
394
395 /* header read complete ... */
396 blen -= rlen;
397 return uh_http_header_parse(cl, buffer,
398 sizeof(buffer) - blen - 1);
399 }
400 else
401 {
402 ensure_out(rlen = uh_tcp_recv(cl, bufptr, rlen));
403
404 /* unexpected eof - #7904 */
405 if( rlen == 0 )
406 return NULL;
407
408 blen -= rlen;
409 bufptr += rlen;
410 }
411 }
412 else
413 {
414 /* invalid request (unexpected eof/timeout) */
415 return NULL;
416 }
417 }
418
419 /* request entity too large */
420 uh_http_response(cl, 413, "Request Entity Too Large");
421
422 out:
423 return NULL;
424 }
425
426 #if defined(HAVE_LUA) || defined(HAVE_CGI)
427 static int uh_path_match(const char *prefix, const char *url)
428 {
429 if( (strstr(url, prefix) == url) &&
430 ((prefix[strlen(prefix)-1] == '/') ||
431 (strlen(url) == strlen(prefix)) ||
432 (url[strlen(prefix)] == '/'))
433 ) {
434 return 1;
435 }
436
437 return 0;
438 }
439 #endif
440
441 static void uh_dispatch_request(
442 struct client *cl, struct http_request *req, struct path_info *pin
443 ) {
444 #ifdef HAVE_CGI
445 struct interpreter *ipr = NULL;
446
447 if( uh_path_match(cl->server->conf->cgi_prefix, pin->name) ||
448 (ipr = uh_interpreter_lookup(pin->phys)) )
449 {
450 uh_cgi_request(cl, req, pin, ipr);
451 }
452 else
453 #endif
454 {
455 uh_file_request(cl, req, pin);
456 }
457 }
458
459 static void uh_mainloop(struct config *conf, fd_set serv_fds, int max_fd)
460 {
461 /* master file descriptor list */
462 fd_set used_fds, read_fds;
463
464 /* working structs */
465 struct http_request *req;
466 struct path_info *pin;
467 struct client *cl;
468
469 /* maximum file descriptor number */
470 int new_fd, cur_fd = 0;
471
472 /* clear the master and temp sets */
473 FD_ZERO(&used_fds);
474 FD_ZERO(&read_fds);
475
476 /* backup server descriptor set */
477 used_fds = serv_fds;
478
479 /* loop */
480 while(run)
481 {
482 /* create a working copy of the used fd set */
483 read_fds = used_fds;
484
485 /* sleep until socket activity */
486 if( select(max_fd + 1, &read_fds, NULL, NULL, NULL) == -1 )
487 {
488 perror("select()");
489 exit(1);
490 }
491
492 /* run through the existing connections looking for data to be read */
493 for( cur_fd = 0; cur_fd <= max_fd; cur_fd++ )
494 {
495 /* is a socket managed by us */
496 if( FD_ISSET(cur_fd, &read_fds) )
497 {
498 /* is one of our listen sockets */
499 if( FD_ISSET(cur_fd, &serv_fds) )
500 {
501 /* handle new connections */
502 if( (new_fd = accept(cur_fd, NULL, 0)) != -1 )
503 {
504 /* add to global client list */
505 if( (cl = uh_client_add(new_fd, uh_listener_lookup(cur_fd))) != NULL )
506 {
507 #ifdef HAVE_TLS
508 /* setup client tls context */
509 if( conf->tls )
510 conf->tls_accept(cl);
511 #endif
512
513 /* add client socket to global fdset */
514 FD_SET(new_fd, &used_fds);
515 fd_cloexec(new_fd);
516 max_fd = max(max_fd, new_fd);
517 }
518
519 /* insufficient resources */
520 else
521 {
522 fprintf(stderr,
523 "uh_client_add(): Cannot allocate memory\n");
524
525 close(new_fd);
526 }
527 }
528 }
529
530 /* is a client socket */
531 else
532 {
533 if( ! (cl = uh_client_lookup(cur_fd)) )
534 {
535 /* this should not happen! */
536 fprintf(stderr,
537 "uh_client_lookup(): No entry for fd %i!\n",
538 cur_fd);
539
540 goto cleanup;
541 }
542
543 /* parse message header */
544 if( (req = uh_http_header_recv(cl)) != NULL )
545 {
546 /* RFC1918 filtering required? */
547 if( conf->rfc1918_filter &&
548 sa_rfc1918(&cl->peeraddr) &&
549 !sa_rfc1918(&cl->servaddr) )
550 {
551 uh_http_sendhf(cl, 403, "Forbidden",
552 "Rejected request from RFC1918 IP "
553 "to public server address");
554 }
555 else
556 #ifdef HAVE_LUA
557 /* Lua request? */
558 if( conf->lua_state &&
559 uh_path_match(conf->lua_prefix, req->url) )
560 {
561 /* auth ok? */
562 if( uh_auth_check(cl, req, pin) )
563 conf->lua_request(cl, req, conf->lua_state);
564 }
565 else
566 #endif
567 /* dispatch request */
568 if( (pin = uh_path_lookup(cl, req->url)) != NULL )
569 {
570 /* auth ok? */
571 if( uh_auth_check(cl, req, pin) )
572 uh_dispatch_request(cl, req, pin);
573 }
574
575 /* 404 */
576 else
577 {
578 /* Try to invoke an error handler */
579 pin = uh_path_lookup(cl, conf->error_handler);
580
581 if( pin && uh_auth_check(cl, req, pin) )
582 {
583 req->redirect_status = 404;
584 uh_dispatch_request(cl, req, pin);
585 }
586 else
587 {
588 uh_http_sendhf(cl, 404, "Not Found",
589 "No such file or directory");
590 }
591 }
592 }
593
594 #ifdef HAVE_TLS
595 /* free client tls context */
596 if( conf->tls )
597 conf->tls_close(cl);
598 #endif
599
600 cleanup:
601
602 /* close client socket */
603 close(cur_fd);
604 FD_CLR(cur_fd, &used_fds);
605
606 /* remove from global client list */
607 uh_client_remove(cur_fd);
608 }
609 }
610 }
611 }
612
613 #ifdef HAVE_LUA
614 /* destroy the Lua state */
615 if( conf->lua_state != NULL )
616 conf->lua_close(conf->lua_state);
617 #endif
618 }
619
620
621 int main (int argc, char **argv)
622 {
623 /* master file descriptor list */
624 fd_set used_fds, serv_fds, read_fds;
625
626 /* working structs */
627 struct addrinfo hints;
628 struct sigaction sa;
629 struct config conf;
630
631 /* signal mask */
632 sigset_t ss;
633
634 /* maximum file descriptor number */
635 int cur_fd, max_fd = 0;
636
637 #ifdef HAVE_TLS
638 int tls = 0;
639 int keys = 0;
640 #endif
641
642 int bound = 0;
643 int nofork = 0;
644
645 /* args */
646 int opt;
647 char bind[128];
648 char *port = NULL;
649
650 #if defined(HAVE_TLS) || defined(HAVE_LUA)
651 /* library handle */
652 void *lib;
653 #endif
654
655 /* clear the master and temp sets */
656 FD_ZERO(&used_fds);
657 FD_ZERO(&serv_fds);
658 FD_ZERO(&read_fds);
659
660 /* handle SIGPIPE, SIGINT, SIGTERM, SIGCHLD */
661 sa.sa_flags = 0;
662 sigemptyset(&sa.sa_mask);
663
664 sa.sa_handler = SIG_IGN;
665 sigaction(SIGPIPE, &sa, NULL);
666
667 sa.sa_handler = uh_sigchld;
668 sigaction(SIGCHLD, &sa, NULL);
669
670 sa.sa_handler = uh_sigterm;
671 sigaction(SIGINT, &sa, NULL);
672 sigaction(SIGTERM, &sa, NULL);
673
674 /* defer SIGCHLD */
675 sigemptyset(&ss);
676 sigaddset(&ss, SIGCHLD);
677 sigprocmask(SIG_BLOCK, &ss, NULL);
678
679 /* prepare addrinfo hints */
680 memset(&hints, 0, sizeof(hints));
681 hints.ai_family = AF_UNSPEC;
682 hints.ai_socktype = SOCK_STREAM;
683 hints.ai_flags = AI_PASSIVE;
684
685 /* parse args */
686 memset(&conf, 0, sizeof(conf));
687 memset(bind, 0, sizeof(bind));
688
689 #ifdef HAVE_TLS
690 /* load TLS plugin */
691 if( ! (lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)) )
692 {
693 fprintf(stderr,
694 "Notice: Unable to load TLS plugin - disabling SSL support! "
695 "(Reason: %s)\n", dlerror()
696 );
697 }
698 else
699 {
700 /* resolve functions */
701 if( !(conf.tls_init = dlsym(lib, "uh_tls_ctx_init")) ||
702 !(conf.tls_cert = dlsym(lib, "uh_tls_ctx_cert")) ||
703 !(conf.tls_key = dlsym(lib, "uh_tls_ctx_key")) ||
704 !(conf.tls_free = dlsym(lib, "uh_tls_ctx_free")) ||
705 !(conf.tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
706 !(conf.tls_close = dlsym(lib, "uh_tls_client_close")) ||
707 !(conf.tls_recv = dlsym(lib, "uh_tls_client_recv")) ||
708 !(conf.tls_send = dlsym(lib, "uh_tls_client_send"))
709 ) {
710 fprintf(stderr,
711 "Error: Failed to lookup required symbols "
712 "in TLS plugin: %s\n", dlerror()
713 );
714 exit(1);
715 }
716
717 /* init SSL context */
718 if( ! (conf.tls = conf.tls_init()) )
719 {
720 fprintf(stderr, "Error: Failed to initalize SSL context\n");
721 exit(1);
722 }
723 }
724 #endif
725
726 while( (opt = getopt(argc, argv,
727 "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:x:i:t:T:")) > 0
728 ) {
729 switch(opt)
730 {
731 /* [addr:]port */
732 case 'p':
733 case 's':
734 if( (port = strrchr(optarg, ':')) != NULL )
735 {
736 if( (optarg[0] == '[') && (port > optarg) && (port[-1] == ']') )
737 memcpy(bind, optarg + 1,
738 min(sizeof(bind), (int)(port - optarg) - 2));
739 else
740 memcpy(bind, optarg,
741 min(sizeof(bind), (int)(port - optarg)));
742
743 port++;
744 }
745 else
746 {
747 port = optarg;
748 }
749
750 #ifdef HAVE_TLS
751 if( opt == 's' )
752 {
753 if( !conf.tls )
754 {
755 fprintf(stderr,
756 "Notice: TLS support is disabled, "
757 "ignoring '-s %s'\n", optarg
758 );
759 continue;
760 }
761
762 tls = 1;
763 }
764 #endif
765
766 /* bind sockets */
767 bound += uh_socket_bind(
768 &serv_fds, &max_fd, bind[0] ? bind : NULL, port,
769 &hints, (opt == 's'), &conf
770 );
771
772 memset(bind, 0, sizeof(bind));
773 break;
774
775 #ifdef HAVE_TLS
776 /* certificate */
777 case 'C':
778 if( conf.tls )
779 {
780 if( conf.tls_cert(conf.tls, optarg) < 1 )
781 {
782 fprintf(stderr,
783 "Error: Invalid certificate file given\n");
784 exit(1);
785 }
786
787 keys++;
788 }
789
790 break;
791
792 /* key */
793 case 'K':
794 if( conf.tls )
795 {
796 if( conf.tls_key(conf.tls, optarg) < 1 )
797 {
798 fprintf(stderr,
799 "Error: Invalid private key file given\n");
800 exit(1);
801 }
802
803 keys++;
804 }
805
806 break;
807 #endif
808
809 /* docroot */
810 case 'h':
811 if( ! realpath(optarg, conf.docroot) )
812 {
813 fprintf(stderr, "Error: Invalid directory %s: %s\n",
814 optarg, strerror(errno));
815 exit(1);
816 }
817 break;
818
819 /* error handler */
820 case 'E':
821 if( (strlen(optarg) == 0) || (optarg[0] != '/') )
822 {
823 fprintf(stderr, "Error: Invalid error handler: %s\n",
824 optarg);
825 exit(1);
826 }
827 conf.error_handler = optarg;
828 break;
829
830 /* index file */
831 case 'I':
832 if( (strlen(optarg) == 0) || (optarg[0] == '/') )
833 {
834 fprintf(stderr, "Error: Invalid index page: %s\n",
835 optarg);
836 exit(1);
837 }
838 conf.index_file = optarg;
839 break;
840
841 /* don't follow symlinks */
842 case 'S':
843 conf.no_symlinks = 1;
844 break;
845
846 /* don't list directories */
847 case 'D':
848 conf.no_dirlists = 1;
849 break;
850
851 case 'R':
852 conf.rfc1918_filter = 1;
853 break;
854
855 #ifdef HAVE_CGI
856 /* cgi prefix */
857 case 'x':
858 conf.cgi_prefix = optarg;
859 break;
860
861 /* interpreter */
862 case 'i':
863 if( (optarg[0] == '.') && (port = strchr(optarg, '=')) )
864 {
865 *port++ = 0;
866 uh_interpreter_add(optarg, port);
867 }
868 else
869 {
870 fprintf(stderr, "Error: Invalid interpreter: %s\n",
871 optarg);
872 exit(1);
873 }
874 break;
875 #endif
876
877 #ifdef HAVE_LUA
878 /* lua prefix */
879 case 'l':
880 conf.lua_prefix = optarg;
881 break;
882
883 /* lua handler */
884 case 'L':
885 conf.lua_handler = optarg;
886 break;
887 #endif
888
889 #if defined(HAVE_CGI) || defined(HAVE_LUA)
890 /* script timeout */
891 case 't':
892 conf.script_timeout = atoi(optarg);
893 break;
894 #endif
895
896 /* network timeout */
897 case 'T':
898 conf.network_timeout = atoi(optarg);
899 break;
900
901 /* no fork */
902 case 'f':
903 nofork = 1;
904 break;
905
906 /* urldecode */
907 case 'd':
908 if( (port = malloc(strlen(optarg)+1)) != NULL )
909 {
910 memset(port, 0, strlen(optarg)+1);
911 uh_urldecode(port, strlen(optarg), optarg, strlen(optarg));
912 printf("%s", port);
913 free(port);
914 exit(0);
915 }
916 break;
917
918 /* basic auth realm */
919 case 'r':
920 conf.realm = optarg;
921 break;
922
923 /* md5 crypt */
924 case 'm':
925 printf("%s\n", crypt(optarg, "$1$"));
926 exit(0);
927 break;
928
929 /* config file */
930 case 'c':
931 conf.file = optarg;
932 break;
933
934 default:
935 fprintf(stderr,
936 "Usage: %s -p [addr:]port [-h docroot]\n"
937 " -f Do not fork to background\n"
938 " -c file Configuration file, default is '/etc/httpd.conf'\n"
939 " -p [addr:]port Bind to specified address and port, multiple allowed\n"
940 #ifdef HAVE_TLS
941 " -s [addr:]port Like -p but provide HTTPS on this port\n"
942 " -C file ASN.1 server certificate file\n"
943 " -K file ASN.1 server private key file\n"
944 #endif
945 " -h directory Specify the document root, default is '.'\n"
946 " -E string Use given virtual URL as 404 error handler\n"
947 " -I string Use given filename as index page for directories\n"
948 " -S Do not follow symbolic links outside of the docroot\n"
949 " -D Do not allow directory listings, send 403 instead\n"
950 " -R Enable RFC1918 filter\n"
951 #ifdef HAVE_LUA
952 " -l string URL prefix for Lua handler, default is '/lua'\n"
953 " -L file Lua handler script, omit to disable Lua\n"
954 #endif
955 #ifdef HAVE_CGI
956 " -x string URL prefix for CGI handler, default is '/cgi-bin'\n"
957 " -i .ext=path Use interpreter at path for files with the given extension\n"
958 #endif
959 #if defined(HAVE_CGI) || defined(HAVE_LUA)
960 " -t seconds CGI and Lua script timeout in seconds, default is 60\n"
961 #endif
962 " -T seconds Network timeout in seconds, default is 30\n"
963 " -d string URL decode given string\n"
964 " -r string Specify basic auth realm\n"
965 " -m string MD5 crypt given string\n"
966 "\n", argv[0]
967 );
968
969 exit(1);
970 }
971 }
972
973 #ifdef HAVE_TLS
974 if( (tls == 1) && (keys < 2) )
975 {
976 fprintf(stderr, "Error: Missing private key or certificate file\n");
977 exit(1);
978 }
979 #endif
980
981 if( bound < 1 )
982 {
983 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
984 exit(1);
985 }
986
987 /* default docroot */
988 if( !conf.docroot[0] && !realpath(".", conf.docroot) )
989 {
990 fprintf(stderr, "Error: Can not determine default document root: %s\n",
991 strerror(errno));
992 exit(1);
993 }
994
995 /* default realm */
996 if( ! conf.realm )
997 conf.realm = "Protected Area";
998
999 /* config file */
1000 uh_config_parse(&conf);
1001
1002 /* default network timeout */
1003 if( conf.network_timeout <= 0 )
1004 conf.network_timeout = 30;
1005
1006 #if defined(HAVE_CGI) || defined(HAVE_LUA)
1007 /* default script timeout */
1008 if( conf.script_timeout <= 0 )
1009 conf.script_timeout = 60;
1010 #endif
1011
1012 #ifdef HAVE_CGI
1013 /* default cgi prefix */
1014 if( ! conf.cgi_prefix )
1015 conf.cgi_prefix = "/cgi-bin";
1016 #endif
1017
1018 #ifdef HAVE_LUA
1019 /* load Lua plugin */
1020 if( ! (lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)) )
1021 {
1022 fprintf(stderr,
1023 "Notice: Unable to load Lua plugin - disabling Lua support! "
1024 "(Reason: %s)\n", dlerror()
1025 );
1026 }
1027 else
1028 {
1029 /* resolve functions */
1030 if( !(conf.lua_init = dlsym(lib, "uh_lua_init")) ||
1031 !(conf.lua_close = dlsym(lib, "uh_lua_close")) ||
1032 !(conf.lua_request = dlsym(lib, "uh_lua_request"))
1033 ) {
1034 fprintf(stderr,
1035 "Error: Failed to lookup required symbols "
1036 "in Lua plugin: %s\n", dlerror()
1037 );
1038 exit(1);
1039 }
1040
1041 /* init Lua runtime if handler is specified */
1042 if( conf.lua_handler )
1043 {
1044 /* default lua prefix */
1045 if( ! conf.lua_prefix )
1046 conf.lua_prefix = "/lua";
1047
1048 conf.lua_state = conf.lua_init(conf.lua_handler);
1049 }
1050 }
1051 #endif
1052
1053 /* fork (if not disabled) */
1054 if( ! nofork )
1055 {
1056 switch( fork() )
1057 {
1058 case -1:
1059 perror("fork()");
1060 exit(1);
1061
1062 case 0:
1063 /* daemon setup */
1064 if( chdir("/") )
1065 perror("chdir()");
1066
1067 if( (cur_fd = open("/dev/null", O_WRONLY)) > -1 )
1068 dup2(cur_fd, 0);
1069
1070 if( (cur_fd = open("/dev/null", O_RDONLY)) > -1 )
1071 dup2(cur_fd, 1);
1072
1073 if( (cur_fd = open("/dev/null", O_RDONLY)) > -1 )
1074 dup2(cur_fd, 2);
1075
1076 break;
1077
1078 default:
1079 exit(0);
1080 }
1081 }
1082
1083 /* server main loop */
1084 uh_mainloop(&conf, serv_fds, max_fd);
1085
1086 #ifdef HAVE_LUA
1087 /* destroy the Lua state */
1088 if( conf.lua_state != NULL )
1089 conf.lua_close(conf.lua_state);
1090 #endif
1091
1092 return 0;
1093 }
1094