XRootD
Loading...
Searching...
No Matches
XrdHttpProtocol.hh
Go to the documentation of this file.
1//------------------------------------------------------------------------------
2// This file is part of XrdHTTP: A pragmatic implementation of the
3// HTTP/WebDAV protocol for the Xrootd framework
4//
5// Copyright (c) 2013 by European Organization for Nuclear Research (CERN)
6// Author: Fabrizio Furano <furano@cern.ch>
7// File Date: Nov 2012
8//------------------------------------------------------------------------------
9// XRootD is free software: you can redistribute it and/or modify
10// it under the terms of the GNU Lesser General Public License as published by
11// the Free Software Foundation, either version 3 of the License, or
12// (at your option) any later version.
13//
14// XRootD is distributed in the hope that it will be useful,
15// but WITHOUT ANY WARRANTY; without even the implied warranty of
16// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17// GNU General Public License for more details.
18//
19// You should have received a copy of the GNU Lesser General Public License
20// along with XRootD. If not, see <http://www.gnu.org/licenses/>.
21//------------------------------------------------------------------------------
22
23
24#ifndef __XRDHTTP_PROTOCOL_H__
25#define __XRDHTTP_PROTOCOL_H__
26
35
36
37#include <cstdlib>
38#include <unistd.h>
39#include <sys/types.h>
40
41#include "XrdSys/XrdSysError.hh"
44#include "Xrd/XrdObject.hh"
47#include "Xrd/XrdProtocol.hh"
48#include "XrdOuc/XrdOucHash.hh"
51#include "XrdNet/XrdNetPMark.hh"
53
54#include <openssl/ssl.h>
55
56#include <unordered_map>
57#include <vector>
58
59#include "XrdHttpReq.hh"
60
61/******************************************************************************/
62/* D e f i n e s */
63/******************************************************************************/
64
65
66#ifndef __GNUC__
67#define __attribute__(x)
68#endif
69
70class XrdOucTokenizer;
71class XrdOucTrace;
72class XrdBuffer;
73class XrdLink;
77struct XrdVersionInfo;
78class XrdOucGMap;
80
82
83 friend class XrdHttpReq;
84 friend class XrdHttpExtReq;
85
86public:
87
89 static int Configure(char *parms, XrdProtocol_Config *pi);
90
92 void DoIt() {
93 if (Resume) (*this.*Resume)();
94 }
95
97 static int parseHeader2CGI(XrdOucStream &Config, XrdSysError & err, std::map<std::string, std::string> & header2cgi);
98
101
103 int Process(XrdLink *lp); // Sync: Job->Link.DoIt->Process
104
105
107 void Recycle(XrdLink *lp, int consec, const char *reason);
108
110 int Stats(char *buff, int blen, int do_sync = 0);
111
112
113
114
116 int doStat(char *fname);
117
119 int doChksum(const XrdOucString &fname);
120
124 XrdHttpProtocol(bool imhttps);
126 Cleanup();
127 }
128
131
132
135
136 // XrdHttp checksum handling class
138
141
143 bool isHTTPS() { return ishttps; }
144
145private:
146
147
149 int (XrdHttpProtocol::*Resume)();
150
152 static bool InitTLS();
153
155 static bool InitSecurity();
156
158 int StartSimpleResp(int code, const char *desc, const char *header_to_add, long long bodylen, bool keepalive);
159
161 int SendData(const char *body, int bodylen);
162
164 void Cleanup();
165
167 void Reset();
168
171 int HandleAuthentication(XrdLink* lp);
172
175 int GetVOMSData(XrdLink *lp);
176
177 // Handle gridmap file mapping if present
178 // Second argument is the OpenSSL hash of the EEC, if present; this allows
179 // a consistent fallback if the user is not in the mapfile.
180 //
181 // @return 0 if successful, otherwise !0
182 int HandleGridMap(XrdLink* lp, const char * eechash);
183
186 int getDataOneShot(int blen, bool wait=false);
187
189 static BIO *CreateBIO(XrdLink *lp);
190
194 struct extHInfo
195 {XrdOucString extHName; // The instance name (1 to 16 characters)
196 XrdOucString extHPath; // The shared library path
197 XrdOucString extHParm; // The parameter (sort of)
198 bool extHNoTlsOK; // If true the exthandler can be loaded if TLS has NOT been configured
199 extHInfo(const char *hName, const char *hPath, const char *hParm, const bool hNoTlsOK)
200 : extHName(hName), extHPath(hPath), extHParm(hParm), extHNoTlsOK(hNoTlsOK) {}
201 ~extHInfo() {}
202 };
204 static int Config(const char *fn, XrdOucEnv *myEnv);
205 static const char *Configed();
206 static int xtrace(XrdOucStream &Config);
207 static int xsslcert(XrdOucStream &Config);
208 static int xsslkey(XrdOucStream &Config);
209 static int xsecxtractor(XrdOucStream &Config);
210 static int xcors(XrdOucStream &Config);
211 static int xexthandler(XrdOucStream & Config, std::vector<extHInfo> &hiVec);
212 static int xsslcadir(XrdOucStream &Config);
213 static int xsslcipherfilter(XrdOucStream &Config);
214 static int xdesthttps(XrdOucStream &Config);
215 static int xlistdeny(XrdOucStream &Config);
216 static int xlistredir(XrdOucStream &Config);
217 static int xselfhttps2http(XrdOucStream &Config);
218 static int xembeddedstatic(XrdOucStream &Config);
219 static int xstaticheader(XrdOucStream &Config);
220 static int xstaticredir(XrdOucStream &Config);
221 static int xstaticpreload(XrdOucStream &Config);
222 static int xgmap(XrdOucStream &Config);
223 static int xsslcafile(XrdOucStream &Config);
224 static int xsslverifydepth(XrdOucStream &Config);
225 static int xsecretkey(XrdOucStream &Config);
226 static int xheader2cgi(XrdOucStream &Config);
227 static int xhttpsmode(XrdOucStream &Config);
228 static int xtlsreuse(XrdOucStream &Config);
229 static int xauth(XrdOucStream &Config);
230 static int xtlsclientauth(XrdOucStream &Config);
231 static int xmaxdelay(XrdOucStream &Config);
232
233 static bool isRequiredXtractor; // If true treat secxtractor errors as fatal
234 static XrdHttpSecXtractor *secxtractor;
235
236 static bool usingEC; // using XrdEC
237 static bool hasCache; // This is a caching server
238 // Loads the SecXtractor plugin, if available
239 static int LoadSecXtractor(XrdSysError *eDest, const char *libName,
240 const char *libParms);
241
242 // An oldstyle struct array to hold exthandlers
243 #define MAX_XRDHTTPEXTHANDLERS 4
244 static struct XrdHttpExtHandlerInfo {
245 char name[16];
247 } exthandler[MAX_XRDHTTPEXTHANDLERS];
248 static int exthandlercnt;
249
250 static int LoadExtHandlerNoTls(std::vector<extHInfo> &hiVec,
251 const char *cFN, XrdOucEnv &myEnv);
252
253 // Loads the ExtHandler plugin, if available
254 static int LoadExtHandler(std::vector<extHInfo> &hiVec,
255 const char *cFN, XrdOucEnv &myEnv);
256
257 static int LoadExtHandler(XrdSysError *eDest, const char *libName,
258 const char *configFN, const char *libParms,
259 XrdOucEnv *myEnv, const char *instName);
260
261 static int LoadCorsHandler(XrdSysError *eDest, const char * libname);
262 // Determines whether one of the loaded ExtHandlers are interested in
263 // handling a given request.
264 //
265 // Returns NULL if there is no matching handler.
266 static XrdHttpExtHandler *FindMatchingExtHandler(const XrdHttpReq &);
267
268 // Tells if an ext handler with the given name has already been loaded
269 static bool ExtHandlerLoaded(const char *handlername);
270
272 XrdBuffer *myBuff;
274 char *myBuffStart, *myBuffEnd;
275
277 XrdOucString tmpline;
278
280 int BuffAvailable();
282 int BuffUsed();
284 int BuffFree();
285
287 void BuffConsume(int blen);
289 int BuffgetData(int blen, char **data, bool wait);
291 int BuffgetLine(XrdOucString &dest);
292
294 int SendSimpleResp(int code, const char *desc, const char *header_to_add, const char *body, long long bodylen, bool keepalive);
295
297 // API.
298 int StartChunkedResp(int code, const char *desc, const char *header_to_add, long long bodylen, bool keepalive);
299
301 // indicates that this is the last chunk in the response.
302 int ChunkResp(const char *body, long long bodylen);
303
305 // of the chunk is known but the body is not immediately available.
306 int ChunkRespHeader(long long bodylen);
307
309 int ChunkRespFooter();
310
312 char *GetClientIPStr();
313
315 bool DoingLogin;
316
318 bool DoneSetInfo;
319
321 long ResumeBytes;
322
324 SSL *ssl;
325
327 BIO *sbio;
328
330 static BIO *sslbio_err;
331
333 bool ishttps;
334
337 bool ssldone;
338 static XrdCryptoFactory *myCryptoFactory;
339
340protected:
341
342 // Statistical area
343 //
344// static XrdXrootdStats *SI;
345// int numReads; // Count for kXR_read
346// int numReadP; // Count for kXR_read pre-preads
347// int numReadV; // Count for kR_readv
348// int numSegsV; // Count for kR_readv segmens
349// int numWrites; // Count
350// int numFiles; // Count
351//
352// int cumReads; // Count less numReads
353// int cumReadP; // Count less numReadP
354// int cumReadV; // Count less numReadV
355// int cumSegsV; // Count less numSegsV
356// int cumWrites; // Count less numWrites
357// long long totReadP; // Bytes
358
359 static XrdScheduler *Sched; // System scheduler
360 static XrdBuffManager *BPool; // Buffer manager
361 static XrdSysError eDest; // Error message handler
362 static XrdSecService *CIA; // Authentication Server
363
366
369 char *Addr_str;
370
372 static XrdOucGMap *servGMap; // Grid mapping service
373
376
377
381
382 static std::string xrdcorsLibPath;
383
385 //
386 // Processing configuration values
387 //
388
390 static int hailWait;
391
393 static int readWait;
394
396 static int Port;
397
399 static char * Port_str;
400
403
406
408 static char *gridmap;// [s] gridmap file [/etc/grid-security/gridmap]
409 static bool isRequiredGridmap; // If true treat gridmap errors as fatal
410 static bool compatNameGeneration; // If true, utilize the old algorithm for username generation for unknown users.
411
413 static char *secretkey;
414
416 static int sslverifydepth;
417
419 static bool isdesthttps;
420
422 static char *listredir;
423
425 static bool listdeny;
426
428 static bool selfhttps2http;
429
431 static bool embeddedstatic;
432
433 // Url to redirect to in the case a /static is requested
434 static char *staticredir;
435
436 // Maximum amount of time an operation on the bridge can be
437 // delayed
438 static int m_maxdelay;
439
440 // Hash that keeps preloaded files
442 char *data;
443 int len;
444 };
446
449
451 static std::map< std::string, std::string > hdr2cgimap;
452
454 static int m_bio_type;
455
457 static BIO_METHOD *m_bio_method;
458
460 static char * xrd_cslist;
461
464
466 static bool tpcForwardCreds;
467
469 static std::unordered_map<std::string, std::vector<std::pair<std::string, std::string>>> m_staticheader_map;
470
473 static std::unordered_map<std::string, std::string> m_staticheaders;
474};
475#endif
int kXR_int32
Definition XPtypes.hh:89
#define MAX_XRDHTTPEXTHANDLERS
Main request/response class, handling the logical status of the communication.
static char * secretkey
The key used to calculate the url hashes.
static BIO_METHOD * m_bio_method
C-style vptr table for our custom BIO objects.
static char * gridmap
Gridmap file location. The same used by XrdSecGsi.
static XrdScheduler * Sched
static kXR_int32 myRole
Our role.
static char * sslcafile
static XrdNetPMark * pmarkHandle
Packet marking handler pointer (assigned from the environment during the Config() call)
static char * Port_str
Our port, as a string.
XrdXrootd::Bridge * Bridge
The Bridge that we use to exercise the xrootd internals.
static char * staticredir
static XrdSysError eDest
static bool selfhttps2http
If client is HTTPS, self-redirect with HTTP+token.
friend class XrdHttpExtReq
static XrdHttpChecksumHandler cksumHandler
static XrdOucGMap * servGMap
The instance of the DN mapper. Created only when a valid path is given.
static int hailWait
Timeout for reading the handshake.
int doChksum(const XrdOucString &fname)
Perform a checksum request.
static XrdOucHash< StaticPreloadInfo > * staticpreload
static char * xrd_cslist
The list of checksums that were configured via the xrd.cksum parameter on the server config file.
static char * sslcipherfilter
static int m_bio_type
Type identifier for our custom BIO objects.
static std::map< std::string, std::string > hdr2cgimap
Rules that turn HTTP headers to cgi tokens in the URL, for internal comsumption.
static char * sslcert
OpenSSL stuff.
XrdLink * Link
The link we are bound to.
friend class XrdHttpReq
static char * sslkey
int doStat(char *fname)
Perform a Stat request.
XrdObject< XrdHttpProtocol > ProtLink
static int readWait
Timeout for reading data.
void Recycle(XrdLink *lp, int consec, const char *reason)
Recycle this instance.
void DoIt()
Override from the base class.
static std::unordered_map< std::string, std::vector< std::pair< std::string, std::string > > > m_staticheader_map
The static headers to always return; map is from verb to a list of (header, val) pairs.
static char * sslcadir
XrdHttpProtocol operator=(const XrdHttpProtocol &rhs)
bool isHTTPS()
called via https
static XrdHttpCors * xrdcors
static bool compatNameGeneration
static std::string xrdcorsLibPath
static bool isdesthttps
True if the redirections must be towards https targets.
static XrdObjectQ< XrdHttpProtocol > ProtStack
XrdProtocol * Match(XrdLink *lp)
Tells if the oustanding bytes on the socket match this protocol implementation.
static bool isRequiredGridmap
static char * listredir
Url to redirect to in the case a listing is requested.
int Stats(char *buff, int blen, int do_sync=0)
Get activity stats.
static int crlRefIntervalSec
CRL thread refresh interval.
static int Port
Our port.
static XrdHttpReadRangeHandler::Configuration ReadRangeConfig
configuration for the read range handler
static XrdSecService * CIA
static XrdBuffManager * BPool
static std::unordered_map< std::string, std::string > m_staticheaders
static bool tpcForwardCreds
If set to true, the HTTP TPC transfers will forward the credentials to redirected hosts.
int Process(XrdLink *lp)
Process data incoming from the socket.
XrdHttpProtocol(const XrdHttpProtocol &)=default
Ctor, dtors and copy ctor.
static bool listdeny
If true, any form of listing is denied.
static int parseHeader2CGI(XrdOucStream &Config, XrdSysError &err, std::map< std::string, std::string > &header2cgi)
Use this function to parse header2cgi configurations.
XrdSecEntity SecEntity
Authentication area.
static bool embeddedstatic
If true, use the embedded css and icons.
static int sslverifydepth
Depth of verification of a certificate chain.
static int Configure(char *parms, XrdProtocol_Config *pi)
Read and apply the configuration.
friend class XrdScheduler
Definition XrdJob.hh:44
XrdProtocol(const char *jname)