Blame gio/ghttpproxy.c

Packit ae235b
/* GIO - GLib Input, Output and Streaming Library
Packit ae235b
 *
Packit ae235b
 * Copyright (C) 2010 Collabora, Ltd.
Packit ae235b
 * Copyright (C) 2014 Red Hat, Inc.
Packit ae235b
 *
Packit ae235b
 * This library is free software; you can redistribute it and/or
Packit ae235b
 * modify it under the terms of the GNU Lesser General Public
Packit ae235b
 * License as published by the Free Software Foundation; either
Packit ae235b
 * version 2.1 of the License, or (at your option) any later version.
Packit ae235b
 *
Packit ae235b
 * This library is distributed in the hope that it will be useful,
Packit ae235b
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
Packit ae235b
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
Packit ae235b
 * Lesser General Public License for more details.
Packit ae235b
 *
Packit ae235b
 * You should have received a copy of the GNU Lesser General
Packit ae235b
 * Public License along with this library; if not, see <http://www.gnu.org/licenses/>.
Packit ae235b
 *
Packit ae235b
 * Author:  Nicolas Dufresne <nicolas.dufresne@collabora.co.uk>
Packit ae235b
 *          Marc-André Lureau <marcandre.lureau@redhat.com>
Packit ae235b
 */
Packit ae235b
Packit ae235b
#include "config.h"
Packit ae235b
Packit ae235b
#include "ghttpproxy.h"
Packit ae235b
Packit ae235b
#include <string.h>
Packit ae235b
#include <stdlib.h>
Packit ae235b
Packit ae235b
#include "giomodule.h"
Packit ae235b
#include "giomodule-priv.h"
Packit ae235b
#include "giostream.h"
Packit ae235b
#include "ginputstream.h"
Packit ae235b
#include "glibintl.h"
Packit ae235b
#include "goutputstream.h"
Packit ae235b
#include "gproxy.h"
Packit ae235b
#include "gproxyaddress.h"
Packit ae235b
#include "gsocketconnectable.h"
Packit ae235b
#include "gtask.h"
Packit ae235b
#include "gtlsclientconnection.h"
Packit ae235b
#include "gtlsconnection.h"
Packit ae235b
Packit ae235b
Packit ae235b
struct _GHttpProxy
Packit ae235b
{
Packit ae235b
  GObject parent;
Packit ae235b
};
Packit ae235b
Packit ae235b
struct _GHttpProxyClass
Packit ae235b
{
Packit ae235b
  GObjectClass parent_class;
Packit ae235b
};
Packit ae235b
Packit ae235b
static void g_http_proxy_iface_init (GProxyInterface *proxy_iface);
Packit ae235b
Packit ae235b
#define g_http_proxy_get_type _g_http_proxy_get_type
Packit ae235b
G_DEFINE_TYPE_WITH_CODE (GHttpProxy, g_http_proxy, G_TYPE_OBJECT,
Packit ae235b
                         G_IMPLEMENT_INTERFACE (G_TYPE_PROXY,
Packit ae235b
                                                g_http_proxy_iface_init)
Packit ae235b
                         _g_io_modules_ensure_extension_points_registered ();
Packit ae235b
                         g_io_extension_point_implement (G_PROXY_EXTENSION_POINT_NAME,
Packit ae235b
                                                         g_define_type_id,
Packit ae235b
                                                         "http",
Packit ae235b
                                                         0))
Packit ae235b
Packit ae235b
static void
Packit ae235b
g_http_proxy_init (GHttpProxy *proxy)
Packit ae235b
{
Packit ae235b
}
Packit ae235b
Packit ae235b
static gchar *
Packit ae235b
create_request (GProxyAddress  *proxy_address,
Packit ae235b
                gboolean       *has_cred,
Packit ae235b
                GError        **error)
Packit ae235b
{
Packit ae235b
  const gchar *hostname;
Packit ae235b
  gint port;
Packit ae235b
  const gchar *username;
Packit ae235b
  const gchar *password;
Packit ae235b
  GString *request;
Packit ae235b
  gchar *ascii_hostname;
Packit ae235b
Packit ae235b
  if (has_cred)
Packit ae235b
    *has_cred = FALSE;
Packit ae235b
Packit ae235b
  hostname = g_proxy_address_get_destination_hostname (proxy_address);
Packit ae235b
  ascii_hostname = g_hostname_to_ascii (hostname);
Packit ae235b
  if (!ascii_hostname)
Packit ae235b
    {
Packit ae235b
      g_set_error_literal (error, G_IO_ERROR, G_IO_ERROR_FAILED,
Packit ae235b
                           _("Invalid hostname"));
Packit ae235b
      return NULL;
Packit ae235b
    }
Packit ae235b
  port = g_proxy_address_get_destination_port (proxy_address);
Packit ae235b
  username = g_proxy_address_get_username (proxy_address);
Packit ae235b
  password = g_proxy_address_get_password (proxy_address);
Packit ae235b
Packit ae235b
  request = g_string_new (NULL);
Packit ae235b
Packit ae235b
  g_string_append_printf (request,
Packit ae235b
                          "CONNECT %s:%i HTTP/1.0\r\n"
Packit ae235b
                          "Host: %s:%i\r\n"
Packit ae235b
                          "Proxy-Connection: keep-alive\r\n"
Packit ae235b
                          "User-Agent: GLib/%i.%i\r\n",
Packit ae235b
                          ascii_hostname, port,
Packit ae235b
                          ascii_hostname, port,
Packit ae235b
                          GLIB_MAJOR_VERSION, GLIB_MINOR_VERSION);
Packit ae235b
  g_free (ascii_hostname);
Packit ae235b
Packit ae235b
  if (username != NULL && password != NULL)
Packit ae235b
    {
Packit ae235b
      gchar *cred;
Packit ae235b
      gchar *base64_cred;
Packit ae235b
Packit ae235b
      if (has_cred)
Packit ae235b
        *has_cred = TRUE;
Packit ae235b
Packit ae235b
      cred = g_strdup_printf ("%s:%s", username, password);
Packit ae235b
      base64_cred = g_base64_encode ((guchar *) cred, strlen (cred));
Packit ae235b
      g_free (cred);
Packit ae235b
      g_string_append_printf (request,
Packit ae235b
                              "Proxy-Authorization: Basic %s\r\n",
Packit ae235b
                              base64_cred);
Packit ae235b
      g_free (base64_cred);
Packit ae235b
    }
Packit ae235b
Packit ae235b
  g_string_append (request, "\r\n");
Packit ae235b
Packit ae235b
  return g_string_free (request, FALSE);
Packit ae235b
}
Packit ae235b
Packit ae235b
static gboolean
Packit ae235b
check_reply (const gchar  *buffer,
Packit ae235b
             gboolean      has_cred,
Packit ae235b
             GError      **error)
Packit ae235b
{
Packit ae235b
  gint err_code;
Packit ae235b
  const gchar *ptr = buffer + 7;
Packit ae235b
Packit ae235b
  if (strncmp (buffer, "HTTP/1.", 7) != 0 || (*ptr != '0' && *ptr != '1'))
Packit ae235b
    {
Packit ae235b
      g_set_error_literal (error, G_IO_ERROR, G_IO_ERROR_PROXY_FAILED,
Packit ae235b
                           _("Bad HTTP proxy reply"));
Packit ae235b
      return FALSE;
Packit ae235b
    }
Packit ae235b
Packit ae235b
  ptr++;
Packit ae235b
  while (*ptr == ' ')
Packit ae235b
    ptr++;
Packit ae235b
Packit ae235b
  err_code = atoi (ptr);
Packit ae235b
Packit ae235b
  if (err_code < 200 || err_code >= 300)
Packit ae235b
    {
Packit ae235b
      switch (err_code)
Packit ae235b
        {
Packit ae235b
          case 403:
Packit ae235b
            g_set_error_literal (error, G_IO_ERROR, G_IO_ERROR_PROXY_NOT_ALLOWED,
Packit ae235b
                                 _("HTTP proxy connection not allowed"));
Packit ae235b
            break;
Packit ae235b
          case 407:
Packit ae235b
            if (has_cred)
Packit ae235b
              g_set_error_literal (error, G_IO_ERROR, G_IO_ERROR_PROXY_AUTH_FAILED,
Packit ae235b
                                   _("HTTP proxy authentication failed"));
Packit ae235b
            else
Packit ae235b
              g_set_error_literal (error, G_IO_ERROR, G_IO_ERROR_PROXY_NEED_AUTH,
Packit ae235b
                                   _("HTTP proxy authentication required"));
Packit ae235b
            break;
Packit ae235b
          default:
Packit ae235b
            g_set_error (error, G_IO_ERROR, G_IO_ERROR_PROXY_FAILED,
Packit ae235b
                         _("HTTP proxy connection failed: %i"), err_code);
Packit ae235b
        }
Packit ae235b
Packit ae235b
      return FALSE;
Packit ae235b
    }
Packit ae235b
Packit ae235b
  return TRUE;
Packit ae235b
}
Packit ae235b
Packit ae235b
#define HTTP_END_MARKER "\r\n\r\n"
Packit ae235b
Packit ae235b
static GIOStream *
Packit ae235b
g_http_proxy_connect (GProxy         *proxy,
Packit ae235b
                      GIOStream      *io_stream,
Packit ae235b
                      GProxyAddress  *proxy_address,
Packit ae235b
                      GCancellable   *cancellable,
Packit ae235b
                      GError        **error)
Packit ae235b
{
Packit ae235b
  GInputStream *in;
Packit ae235b
  GOutputStream *out;
Packit ae235b
  gchar *buffer = NULL;
Packit ae235b
  gsize buffer_length;
Packit ae235b
  gssize bytes_read;
Packit ae235b
  gboolean has_cred;
Packit ae235b
  GIOStream *tlsconn = NULL;
Packit ae235b
Packit ae235b
  if (G_IS_HTTPS_PROXY (proxy))
Packit ae235b
    {
Packit ae235b
      tlsconn = g_tls_client_connection_new (io_stream,
Packit ae235b
                                             G_SOCKET_CONNECTABLE (proxy_address),
Packit ae235b
                                             error);
Packit ae235b
      if (!tlsconn)
Packit ae235b
        goto error;
Packit ae235b
Packit ae235b
#ifdef DEBUG
Packit ae235b
      {
Packit ae235b
        GTlsCertificateFlags tls_validation_flags = G_TLS_CERTIFICATE_VALIDATE_ALL;
Packit ae235b
Packit ae235b
        tls_validation_flags &= ~(G_TLS_CERTIFICATE_UNKNOWN_CA | G_TLS_CERTIFICATE_BAD_IDENTITY);
Packit ae235b
        g_tls_client_connection_set_validation_flags (G_TLS_CLIENT_CONNECTION (tlsconn),
Packit ae235b
                                                      tls_validation_flags);
Packit ae235b
      }
Packit ae235b
#endif
Packit ae235b
Packit ae235b
      if (!g_tls_connection_handshake (G_TLS_CONNECTION (tlsconn), cancellable, error))
Packit ae235b
        goto error;
Packit ae235b
Packit ae235b
      io_stream = tlsconn;
Packit ae235b
    }
Packit ae235b
Packit ae235b
  in = g_io_stream_get_input_stream (io_stream);
Packit ae235b
  out = g_io_stream_get_output_stream (io_stream);
Packit ae235b
Packit ae235b
  buffer = create_request (proxy_address, &has_cred, error);
Packit ae235b
  if (!buffer)
Packit ae235b
    goto error;
Packit ae235b
  if (!g_output_stream_write_all (out, buffer, strlen (buffer), NULL,
Packit ae235b
                                  cancellable, error))
Packit ae235b
    goto error;
Packit ae235b
Packit ae235b
  g_free (buffer);
Packit ae235b
Packit ae235b
  bytes_read = 0;
Packit ae235b
  buffer_length = 1024;
Packit ae235b
  buffer = g_malloc (buffer_length);
Packit ae235b
Packit ae235b
  /* Read byte-by-byte instead of using GDataInputStream
Packit ae235b
   * since we do not want to read beyond the end marker
Packit ae235b
   */
Packit ae235b
  do
Packit ae235b
    {
Packit ae235b
      gsize nread;
Packit ae235b
Packit ae235b
      nread = g_input_stream_read (in, buffer + bytes_read, 1, cancellable, error);
Packit ae235b
      if (nread == -1)
Packit ae235b
        goto error;
Packit ae235b
Packit ae235b
      if (nread == 0)
Packit ae235b
        break;
Packit ae235b
Packit ae235b
      ++bytes_read;
Packit ae235b
Packit ae235b
      if (bytes_read == buffer_length)
Packit ae235b
        {
Packit ae235b
          buffer_length = 2 * buffer_length;
Packit ae235b
          buffer = g_realloc (buffer, buffer_length);
Packit ae235b
        }
Packit ae235b
Packit ae235b
      *(buffer + bytes_read) = '\0';
Packit ae235b
Packit ae235b
      if (g_str_has_suffix (buffer, HTTP_END_MARKER))
Packit ae235b
        break;
Packit ae235b
    }
Packit ae235b
  while (TRUE);
Packit ae235b
Packit ae235b
  if (bytes_read == 0)
Packit ae235b
    {
Packit ae235b
      g_set_error_literal (error, G_IO_ERROR, G_IO_ERROR_PROXY_FAILED,
Packit ae235b
                           _("HTTP proxy server closed connection unexpectedly."));
Packit ae235b
      goto error;
Packit ae235b
    }
Packit ae235b
Packit ae235b
  if (!check_reply (buffer, has_cred, error))
Packit ae235b
    goto error;
Packit ae235b
Packit ae235b
  g_free (buffer);
Packit ae235b
Packit ae235b
  g_object_ref (io_stream);
Packit ae235b
  g_clear_object (&tlsconn);
Packit ae235b
Packit ae235b
  return io_stream;
Packit ae235b
Packit ae235b
error:
Packit ae235b
  g_clear_object (&tlsconn);
Packit ae235b
  g_free (buffer);
Packit ae235b
  return NULL;
Packit ae235b
}
Packit ae235b
Packit ae235b
typedef struct
Packit ae235b
{
Packit ae235b
  GIOStream *io_stream;
Packit ae235b
  GProxyAddress *proxy_address;
Packit ae235b
} ConnectAsyncData;
Packit ae235b
Packit ae235b
static void
Packit ae235b
free_connect_data (ConnectAsyncData *data)
Packit ae235b
{
Packit ae235b
  g_object_unref (data->io_stream);
Packit ae235b
  g_object_unref (data->proxy_address);
Packit ae235b
  g_slice_free (ConnectAsyncData, data);
Packit ae235b
}
Packit ae235b
Packit ae235b
static void
Packit ae235b
connect_thread (GTask        *task,
Packit ae235b
                gpointer      source_object,
Packit ae235b
                gpointer      task_data,
Packit ae235b
                GCancellable *cancellable)
Packit ae235b
{
Packit ae235b
  GProxy *proxy = source_object;
Packit ae235b
  ConnectAsyncData *data = task_data;
Packit ae235b
  GIOStream *res;
Packit ae235b
  GError *error = NULL;
Packit ae235b
Packit ae235b
  res = g_http_proxy_connect (proxy, data->io_stream, data->proxy_address,
Packit ae235b
                              cancellable, &error);
Packit ae235b
Packit ae235b
  if (res == NULL)
Packit ae235b
    g_task_return_error (task, error);
Packit ae235b
  else
Packit ae235b
    g_task_return_pointer (task, res, g_object_unref);
Packit ae235b
}
Packit ae235b
Packit ae235b
static void
Packit ae235b
g_http_proxy_connect_async (GProxy              *proxy,
Packit ae235b
                            GIOStream           *io_stream,
Packit ae235b
                            GProxyAddress       *proxy_address,
Packit ae235b
                            GCancellable        *cancellable,
Packit ae235b
                            GAsyncReadyCallback  callback,
Packit ae235b
                            gpointer             user_data)
Packit ae235b
{
Packit ae235b
  ConnectAsyncData *data;
Packit ae235b
  GTask *task;
Packit ae235b
Packit ae235b
  data = g_slice_new0 (ConnectAsyncData);
Packit ae235b
  data->io_stream = g_object_ref (io_stream);
Packit ae235b
  data->proxy_address = g_object_ref (proxy_address);
Packit ae235b
Packit ae235b
  task = g_task_new (proxy, cancellable, callback, user_data);
Packit ae235b
  g_task_set_source_tag (task, g_http_proxy_connect_async);
Packit ae235b
  g_task_set_task_data (task, data, (GDestroyNotify) free_connect_data);
Packit ae235b
Packit ae235b
  g_task_run_in_thread (task, connect_thread);
Packit ae235b
  g_object_unref (task);
Packit ae235b
}
Packit ae235b
Packit ae235b
static GIOStream *
Packit ae235b
g_http_proxy_connect_finish (GProxy        *proxy,
Packit ae235b
                             GAsyncResult  *result,
Packit ae235b
                             GError       **error)
Packit ae235b
{
Packit ae235b
  return g_task_propagate_pointer (G_TASK (result), error);
Packit ae235b
}
Packit ae235b
Packit ae235b
static gboolean
Packit ae235b
g_http_proxy_supports_hostname (GProxy *proxy)
Packit ae235b
{
Packit ae235b
  return TRUE;
Packit ae235b
}
Packit ae235b
Packit ae235b
static void
Packit ae235b
g_http_proxy_class_init (GHttpProxyClass *class)
Packit ae235b
{
Packit ae235b
}
Packit ae235b
Packit ae235b
static void
Packit ae235b
g_http_proxy_iface_init (GProxyInterface *proxy_iface)
Packit ae235b
{
Packit ae235b
  proxy_iface->connect = g_http_proxy_connect;
Packit ae235b
  proxy_iface->connect_async = g_http_proxy_connect_async;
Packit ae235b
  proxy_iface->connect_finish = g_http_proxy_connect_finish;
Packit ae235b
  proxy_iface->supports_hostname = g_http_proxy_supports_hostname;
Packit ae235b
}
Packit ae235b
Packit ae235b
struct _GHttpsProxy
Packit ae235b
{
Packit ae235b
  GHttpProxy parent;
Packit ae235b
};
Packit ae235b
Packit ae235b
struct _GHttpsProxyClass
Packit ae235b
{
Packit ae235b
  GHttpProxyClass parent_class;
Packit ae235b
};
Packit ae235b
Packit ae235b
#define g_https_proxy_get_type _g_https_proxy_get_type
Packit ae235b
G_DEFINE_TYPE_WITH_CODE (GHttpsProxy, g_https_proxy, G_TYPE_HTTP_PROXY,
Packit ae235b
                         G_IMPLEMENT_INTERFACE (G_TYPE_PROXY,
Packit ae235b
                                                g_http_proxy_iface_init)
Packit ae235b
                         _g_io_modules_ensure_extension_points_registered ();
Packit ae235b
                         g_io_extension_point_implement (G_PROXY_EXTENSION_POINT_NAME,
Packit ae235b
                                                         g_define_type_id,
Packit ae235b
                                                         "https",
Packit ae235b
                                                         0))
Packit ae235b
Packit ae235b
static void
Packit ae235b
g_https_proxy_init (GHttpsProxy *proxy)
Packit ae235b
{
Packit ae235b
}
Packit ae235b
Packit ae235b
static void
Packit ae235b
g_https_proxy_class_init (GHttpsProxyClass *class)
Packit ae235b
{
Packit ae235b
}