2018-09-20 01:49:47 +02:00
|
|
|
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
|
/*
|
2019-01-02 01:58:10 +01:00
|
|
|
* Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
|
2017-11-30 16:23:50 +01:00
|
|
|
*/
|
2015-06-05 15:58:00 +02:00
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#ifdef __linux__
|
2015-06-05 15:58:00 +02:00
|
|
|
#include <libmnl/libmnl.h>
|
|
|
|
|
#include <linux/if_link.h>
|
|
|
|
|
#include <linux/netlink.h>
|
|
|
|
|
#include <linux/rtnetlink.h>
|
2017-09-25 04:22:09 +02:00
|
|
|
#include <linux/genetlink.h>
|
|
|
|
|
#include "mnlg.h"
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#endif
|
2015-06-05 15:58:00 +02:00
|
|
|
#include <netinet/in.h>
|
2018-05-21 06:10:54 +02:00
|
|
|
#include <sys/socket.h>
|
2015-06-05 15:58:00 +02:00
|
|
|
#include <net/if.h>
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#include <errno.h>
|
2015-06-05 15:58:00 +02:00
|
|
|
#include <stdbool.h>
|
|
|
|
|
#include <stddef.h>
|
|
|
|
|
#include <stdio.h>
|
|
|
|
|
#include <stdlib.h>
|
|
|
|
|
#include <string.h>
|
2017-11-17 13:39:02 +01:00
|
|
|
#include <ctype.h>
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#include <unistd.h>
|
|
|
|
|
#include <time.h>
|
|
|
|
|
#include <dirent.h>
|
2016-08-01 21:31:07 +02:00
|
|
|
#include <signal.h>
|
2017-05-15 23:24:48 +02:00
|
|
|
#include <netdb.h>
|
|
|
|
|
#include <limits.h>
|
2015-06-05 15:58:00 +02:00
|
|
|
#include <sys/types.h>
|
|
|
|
|
#include <sys/ioctl.h>
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#include <sys/types.h>
|
|
|
|
|
#include <sys/stat.h>
|
|
|
|
|
#include <sys/un.h>
|
2017-05-15 23:24:48 +02:00
|
|
|
#include <arpa/inet.h>
|
2015-06-05 15:58:00 +02:00
|
|
|
|
2016-07-20 21:24:27 +02:00
|
|
|
#include "ipc.h"
|
2017-09-25 04:22:09 +02:00
|
|
|
#include "containers.h"
|
2017-05-15 23:24:48 +02:00
|
|
|
#include "encoding.h"
|
|
|
|
|
#include "curve25519.h"
|
2017-09-25 04:22:09 +02:00
|
|
|
#include "../uapi/wireguard.h"
|
2015-06-05 15:58:00 +02:00
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#define SOCK_PATH RUNSTATEDIR "/wireguard/"
|
|
|
|
|
#define SOCK_SUFFIX ".sock"
|
2017-10-02 13:05:35 +02:00
|
|
|
#ifdef __linux__
|
|
|
|
|
#define SOCKET_BUFFER_SIZE MNL_SOCKET_BUFFER_SIZE
|
|
|
|
|
#else
|
|
|
|
|
#define SOCKET_BUFFER_SIZE 8192
|
|
|
|
|
#endif
|
|
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
struct inflatable_buffer {
|
|
|
|
|
char *buffer;
|
|
|
|
|
char *next;
|
|
|
|
|
bool good;
|
|
|
|
|
size_t len;
|
|
|
|
|
size_t pos;
|
|
|
|
|
};
|
|
|
|
|
|
2018-02-17 19:39:26 +01:00
|
|
|
#define max(a, b) ((a) > (b) ? (a) : (b))
|
2015-06-05 15:58:00 +02:00
|
|
|
static int add_next_to_inflatable_buffer(struct inflatable_buffer *buffer)
|
|
|
|
|
{
|
|
|
|
|
size_t len, expand_to;
|
|
|
|
|
char *new_buffer;
|
|
|
|
|
|
|
|
|
|
if (!buffer->good || !buffer->next) {
|
|
|
|
|
free(buffer->next);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
buffer->good = false;
|
2015-06-05 15:58:00 +02:00
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
len = strlen(buffer->next) + 1;
|
|
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if (len == 1) {
|
|
|
|
|
free(buffer->next);
|
|
|
|
|
buffer->good = false;
|
2015-06-05 15:58:00 +02:00
|
|
|
return 0;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
}
|
2015-06-05 15:58:00 +02:00
|
|
|
|
|
|
|
|
if (buffer->len - buffer->pos <= len) {
|
|
|
|
|
expand_to = max(buffer->len * 2, buffer->len + len + 1);
|
|
|
|
|
new_buffer = realloc(buffer->buffer, expand_to);
|
|
|
|
|
if (!new_buffer) {
|
|
|
|
|
free(buffer->next);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
buffer->good = false;
|
2015-06-05 15:58:00 +02:00
|
|
|
return -errno;
|
|
|
|
|
}
|
|
|
|
|
memset(&new_buffer[buffer->len], 0, expand_to - buffer->len);
|
|
|
|
|
buffer->buffer = new_buffer;
|
|
|
|
|
buffer->len = expand_to;
|
|
|
|
|
}
|
|
|
|
|
memcpy(&buffer->buffer[buffer->pos], buffer->next, len);
|
|
|
|
|
free(buffer->next);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
buffer->good = false;
|
2015-06-05 15:58:00 +02:00
|
|
|
buffer->pos += len;
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2017-05-15 23:24:48 +02:00
|
|
|
static FILE *userspace_interface_file(const char *interface)
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
{
|
|
|
|
|
struct stat sbuf;
|
2016-07-22 20:30:34 +02:00
|
|
|
struct sockaddr_un addr = { .sun_family = AF_UNIX };
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
int fd = -1, ret;
|
2017-10-02 03:44:06 +02:00
|
|
|
FILE *f = NULL;
|
2016-07-20 20:52:11 +02:00
|
|
|
|
2018-02-17 19:39:26 +01:00
|
|
|
errno = EINVAL;
|
2016-07-20 20:52:11 +02:00
|
|
|
if (strchr(interface, '/'))
|
|
|
|
|
goto out;
|
2018-02-14 23:21:11 +01:00
|
|
|
ret = snprintf(addr.sun_path, sizeof(addr.sun_path), SOCK_PATH "%s" SOCK_SUFFIX, interface);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if (ret < 0)
|
|
|
|
|
goto out;
|
|
|
|
|
ret = stat(addr.sun_path, &sbuf);
|
|
|
|
|
if (ret < 0)
|
|
|
|
|
goto out;
|
2018-02-17 19:39:26 +01:00
|
|
|
errno = EBADF;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if (!S_ISSOCK(sbuf.st_mode))
|
|
|
|
|
goto out;
|
|
|
|
|
|
2016-07-22 21:07:12 +02:00
|
|
|
ret = fd = socket(AF_UNIX, SOCK_STREAM, 0);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if (ret < 0)
|
|
|
|
|
goto out;
|
2016-07-20 20:52:11 +02:00
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
ret = connect(fd, (struct sockaddr *)&addr, sizeof(addr));
|
|
|
|
|
if (ret < 0) {
|
|
|
|
|
if (errno == ECONNREFUSED) /* If the process is gone, we try to clean up the socket. */
|
|
|
|
|
unlink(addr.sun_path);
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
2017-05-15 23:24:48 +02:00
|
|
|
f = fdopen(fd, "r+");
|
2018-02-17 19:39:26 +01:00
|
|
|
if (f)
|
|
|
|
|
errno = 0;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
out:
|
2018-02-17 19:39:26 +01:00
|
|
|
ret = -errno;
|
2017-05-15 23:24:48 +02:00
|
|
|
if (ret) {
|
2018-02-17 19:39:26 +01:00
|
|
|
if (fd >= 0)
|
|
|
|
|
close(fd);
|
2017-05-15 23:24:48 +02:00
|
|
|
errno = -ret;
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
return f;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static bool userspace_has_wireguard_interface(const char *interface)
|
|
|
|
|
{
|
2017-09-26 15:02:41 +02:00
|
|
|
struct stat sbuf;
|
2017-09-25 04:22:09 +02:00
|
|
|
struct sockaddr_un addr = { .sun_family = AF_UNIX };
|
|
|
|
|
int fd, ret;
|
2017-09-26 15:02:41 +02:00
|
|
|
|
|
|
|
|
if (strchr(interface, '/'))
|
|
|
|
|
return false;
|
2018-02-14 23:21:11 +01:00
|
|
|
if (snprintf(addr.sun_path, sizeof(addr.sun_path), SOCK_PATH "%s" SOCK_SUFFIX, interface) < 0)
|
2017-09-25 04:22:09 +02:00
|
|
|
return false;
|
|
|
|
|
if (stat(addr.sun_path, &sbuf) < 0)
|
|
|
|
|
return false;
|
|
|
|
|
if (!S_ISSOCK(sbuf.st_mode))
|
|
|
|
|
return false;
|
|
|
|
|
ret = fd = socket(AF_UNIX, SOCK_STREAM, 0);
|
|
|
|
|
if (ret < 0)
|
2017-09-26 15:02:41 +02:00
|
|
|
return false;
|
2017-09-25 04:22:09 +02:00
|
|
|
ret = connect(fd, (struct sockaddr *)&addr, sizeof(addr));
|
|
|
|
|
if (ret < 0 && errno == ECONNREFUSED) { /* If the process is gone, we try to clean up the socket. */
|
|
|
|
|
close(fd);
|
|
|
|
|
unlink(addr.sun_path);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
return false;
|
2017-09-25 04:22:09 +02:00
|
|
|
}
|
|
|
|
|
close(fd);
|
|
|
|
|
return true;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int userspace_get_wireguard_interfaces(struct inflatable_buffer *buffer)
|
|
|
|
|
{
|
|
|
|
|
DIR *dir;
|
|
|
|
|
struct dirent *ent;
|
|
|
|
|
size_t len;
|
|
|
|
|
char *end;
|
|
|
|
|
int ret = 0;
|
|
|
|
|
|
|
|
|
|
dir = opendir(SOCK_PATH);
|
|
|
|
|
if (!dir)
|
2018-05-18 19:51:33 +02:00
|
|
|
return errno == ENOENT ? 0 : -errno;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
while ((ent = readdir(dir))) {
|
|
|
|
|
len = strlen(ent->d_name);
|
|
|
|
|
if (len <= strlen(SOCK_SUFFIX))
|
|
|
|
|
continue;
|
|
|
|
|
end = &ent->d_name[len - strlen(SOCK_SUFFIX)];
|
|
|
|
|
if (strncmp(end, SOCK_SUFFIX, strlen(SOCK_SUFFIX)))
|
|
|
|
|
continue;
|
|
|
|
|
*end = '\0';
|
|
|
|
|
if (!userspace_has_wireguard_interface(ent->d_name))
|
|
|
|
|
continue;
|
|
|
|
|
buffer->next = strdup(ent->d_name);
|
|
|
|
|
buffer->good = true;
|
|
|
|
|
ret = add_next_to_inflatable_buffer(buffer);
|
|
|
|
|
if (ret < 0)
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
out:
|
|
|
|
|
closedir(dir);
|
|
|
|
|
return ret;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int userspace_set_device(struct wgdevice *dev)
|
|
|
|
|
{
|
2017-05-15 23:24:48 +02:00
|
|
|
char hex[WG_KEY_LEN_HEX], ip[INET6_ADDRSTRLEN], host[4096 + 1], service[512 + 1];
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
struct wgpeer *peer;
|
2017-09-25 04:22:09 +02:00
|
|
|
struct wgallowedip *allowedip;
|
2017-05-15 23:24:48 +02:00
|
|
|
FILE *f;
|
|
|
|
|
int ret;
|
|
|
|
|
socklen_t addr_len;
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
f = userspace_interface_file(dev->name);
|
2017-05-15 23:24:48 +02:00
|
|
|
if (!f)
|
|
|
|
|
return -errno;
|
|
|
|
|
fprintf(f, "set=1\n");
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
if (dev->flags & WGDEVICE_HAS_PRIVATE_KEY) {
|
2017-05-15 23:24:48 +02:00
|
|
|
key_to_hex(hex, dev->private_key);
|
|
|
|
|
fprintf(f, "private_key=%s\n", hex);
|
2017-01-08 23:00:41 +01:00
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
if (dev->flags & WGDEVICE_HAS_LISTEN_PORT)
|
|
|
|
|
fprintf(f, "listen_port=%u\n", dev->listen_port);
|
|
|
|
|
if (dev->flags & WGDEVICE_HAS_FWMARK)
|
2017-05-15 23:24:48 +02:00
|
|
|
fprintf(f, "fwmark=%u\n", dev->fwmark);
|
|
|
|
|
if (dev->flags & WGDEVICE_REPLACE_PEERS)
|
|
|
|
|
fprintf(f, "replace_peers=true\n");
|
|
|
|
|
|
2017-10-25 17:13:46 +02:00
|
|
|
for_each_wgpeer(dev, peer) {
|
2017-05-15 23:24:48 +02:00
|
|
|
key_to_hex(hex, peer->public_key);
|
|
|
|
|
fprintf(f, "public_key=%s\n", hex);
|
|
|
|
|
if (peer->flags & WGPEER_REMOVE_ME) {
|
|
|
|
|
fprintf(f, "remove=true\n");
|
|
|
|
|
continue;
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
if (peer->flags & WGPEER_HAS_PRESHARED_KEY) {
|
2017-05-15 23:24:48 +02:00
|
|
|
key_to_hex(hex, peer->preshared_key);
|
|
|
|
|
fprintf(f, "preshared_key=%s\n", hex);
|
|
|
|
|
}
|
|
|
|
|
if (peer->endpoint.addr.sa_family == AF_INET || peer->endpoint.addr.sa_family == AF_INET6) {
|
|
|
|
|
addr_len = 0;
|
|
|
|
|
if (peer->endpoint.addr.sa_family == AF_INET)
|
|
|
|
|
addr_len = sizeof(struct sockaddr_in);
|
|
|
|
|
else if (peer->endpoint.addr.sa_family == AF_INET6)
|
|
|
|
|
addr_len = sizeof(struct sockaddr_in6);
|
|
|
|
|
if (!getnameinfo(&peer->endpoint.addr, addr_len, host, sizeof(host), service, sizeof(service), NI_DGRAM | NI_NUMERICSERV | NI_NUMERICHOST)) {
|
|
|
|
|
if (peer->endpoint.addr.sa_family == AF_INET6 && strchr(host, ':'))
|
|
|
|
|
fprintf(f, "endpoint=[%s]:%s\n", host, service);
|
|
|
|
|
else
|
|
|
|
|
fprintf(f, "endpoint=%s:%s\n", host, service);
|
|
|
|
|
}
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
if (peer->flags & WGPEER_HAS_PERSISTENT_KEEPALIVE_INTERVAL)
|
2017-05-15 23:24:48 +02:00
|
|
|
fprintf(f, "persistent_keepalive_interval=%u\n", peer->persistent_keepalive_interval);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (peer->flags & WGPEER_REPLACE_ALLOWEDIPS)
|
2017-05-15 23:24:48 +02:00
|
|
|
fprintf(f, "replace_allowed_ips=true\n");
|
2017-10-25 17:13:46 +02:00
|
|
|
for_each_wgallowedip(peer, allowedip) {
|
2017-09-25 04:22:09 +02:00
|
|
|
if (allowedip->family == AF_INET) {
|
|
|
|
|
if (!inet_ntop(AF_INET, &allowedip->ip4, ip, INET6_ADDRSTRLEN))
|
2017-05-15 23:24:48 +02:00
|
|
|
continue;
|
2017-09-25 04:22:09 +02:00
|
|
|
} else if (allowedip->family == AF_INET6) {
|
|
|
|
|
if (!inet_ntop(AF_INET6, &allowedip->ip6, ip, INET6_ADDRSTRLEN))
|
2017-05-15 23:24:48 +02:00
|
|
|
continue;
|
|
|
|
|
} else
|
|
|
|
|
continue;
|
2017-09-25 04:22:09 +02:00
|
|
|
fprintf(f, "allowed_ip=%s/%d\n", ip, allowedip->cidr);
|
2017-05-15 23:24:48 +02:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
fprintf(f, "\n");
|
|
|
|
|
fflush(f);
|
|
|
|
|
|
|
|
|
|
if (fscanf(f, "errno=%d\n\n", &ret) != 1)
|
|
|
|
|
ret = errno ? -errno : -EPROTO;
|
|
|
|
|
fclose(f);
|
2016-07-21 13:33:20 +02:00
|
|
|
errno = -ret;
|
2017-05-15 23:24:48 +02:00
|
|
|
return ret;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
}
|
|
|
|
|
|
2017-05-15 23:24:48 +02:00
|
|
|
#define NUM(max) ({ \
|
|
|
|
|
unsigned long long num; \
|
|
|
|
|
char *end; \
|
2017-11-17 13:39:02 +01:00
|
|
|
if (!isdigit(value[0])) \
|
2017-05-15 23:24:48 +02:00
|
|
|
break; \
|
|
|
|
|
num = strtoull(value, &end, 10); \
|
|
|
|
|
if (*end || num > max) \
|
|
|
|
|
break; \
|
|
|
|
|
num; \
|
|
|
|
|
})
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
|
2017-05-15 23:24:48 +02:00
|
|
|
static int userspace_get_device(struct wgdevice **out, const char *interface)
|
|
|
|
|
{
|
|
|
|
|
struct wgdevice *dev;
|
|
|
|
|
struct wgpeer *peer = NULL;
|
2017-09-25 04:22:09 +02:00
|
|
|
struct wgallowedip *allowedip = NULL;
|
|
|
|
|
size_t line_buffer_len = 0, line_len;
|
2017-05-15 23:24:48 +02:00
|
|
|
char *key = NULL, *value;
|
|
|
|
|
FILE *f;
|
|
|
|
|
int ret = -EPROTO;
|
|
|
|
|
|
2018-09-04 18:44:42 +02:00
|
|
|
*out = dev = calloc(1, sizeof(*dev));
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!dev)
|
|
|
|
|
return -errno;
|
|
|
|
|
|
2017-05-15 23:24:48 +02:00
|
|
|
f = userspace_interface_file(interface);
|
|
|
|
|
if (!f)
|
|
|
|
|
return -errno;
|
|
|
|
|
|
|
|
|
|
fprintf(f, "get=1\n\n");
|
|
|
|
|
fflush(f);
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
strncpy(dev->name, interface, IFNAMSIZ - 1);
|
|
|
|
|
dev->name[IFNAMSIZ - 1] = '\0';
|
2017-05-15 23:24:48 +02:00
|
|
|
|
|
|
|
|
while (getline(&key, &line_buffer_len, f) > 0) {
|
|
|
|
|
line_len = strlen(key);
|
|
|
|
|
if (line_len == 1 && key[0] == '\n') {
|
|
|
|
|
free(key);
|
|
|
|
|
fclose(f);
|
|
|
|
|
return ret;
|
|
|
|
|
}
|
|
|
|
|
value = strchr(key, '=');
|
|
|
|
|
if (!value || line_len == 0 || key[line_len - 1] != '\n')
|
|
|
|
|
break;
|
|
|
|
|
*value++ = key[--line_len] = '\0';
|
|
|
|
|
|
2017-08-02 21:07:25 +02:00
|
|
|
if (!peer && !strcmp(key, "private_key")) {
|
2017-05-15 23:24:48 +02:00
|
|
|
if (!key_from_hex(dev->private_key, value))
|
|
|
|
|
break;
|
|
|
|
|
curve25519_generate_public(dev->public_key, dev->private_key);
|
2017-11-11 04:30:21 +01:00
|
|
|
dev->flags |= WGDEVICE_HAS_PRIVATE_KEY | WGDEVICE_HAS_PUBLIC_KEY;
|
2017-09-25 04:22:09 +02:00
|
|
|
} else if (!peer && !strcmp(key, "listen_port")) {
|
|
|
|
|
dev->listen_port = NUM(0xffffU);
|
|
|
|
|
dev->flags |= WGDEVICE_HAS_LISTEN_PORT;
|
|
|
|
|
} else if (!peer && !strcmp(key, "fwmark")) {
|
2017-05-15 23:24:48 +02:00
|
|
|
dev->fwmark = NUM(0xffffffffU);
|
2017-09-25 04:22:09 +02:00
|
|
|
dev->flags |= WGDEVICE_HAS_FWMARK;
|
|
|
|
|
} else if (!strcmp(key, "public_key")) {
|
2018-09-04 18:44:42 +02:00
|
|
|
struct wgpeer *new_peer = calloc(1, sizeof(*new_peer));
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!new_peer) {
|
|
|
|
|
ret = -ENOMEM;
|
|
|
|
|
goto err;
|
|
|
|
|
}
|
|
|
|
|
allowedip = NULL;
|
|
|
|
|
if (peer)
|
|
|
|
|
peer->next_peer = new_peer;
|
|
|
|
|
else
|
|
|
|
|
dev->first_peer = new_peer;
|
|
|
|
|
peer = new_peer;
|
2017-05-15 23:24:48 +02:00
|
|
|
if (!key_from_hex(peer->public_key, value))
|
|
|
|
|
break;
|
2017-11-11 04:30:21 +01:00
|
|
|
peer->flags |= WGPEER_HAS_PUBLIC_KEY;
|
2017-05-15 23:24:48 +02:00
|
|
|
} else if (peer && !strcmp(key, "preshared_key")) {
|
|
|
|
|
if (!key_from_hex(peer->preshared_key, value))
|
|
|
|
|
break;
|
2017-11-11 04:30:21 +01:00
|
|
|
if (!key_is_zero(peer->preshared_key))
|
|
|
|
|
peer->flags |= WGPEER_HAS_PRESHARED_KEY;
|
2017-05-15 23:24:48 +02:00
|
|
|
} else if (peer && !strcmp(key, "endpoint")) {
|
|
|
|
|
char *begin, *end;
|
|
|
|
|
struct addrinfo *resolved;
|
|
|
|
|
struct addrinfo hints = {
|
|
|
|
|
.ai_family = AF_UNSPEC,
|
|
|
|
|
.ai_socktype = SOCK_DGRAM,
|
|
|
|
|
.ai_protocol = IPPROTO_UDP
|
|
|
|
|
};
|
|
|
|
|
if (!strlen(value))
|
|
|
|
|
break;
|
|
|
|
|
if (value[0] == '[') {
|
|
|
|
|
begin = &value[1];
|
|
|
|
|
end = strchr(value, ']');
|
|
|
|
|
if (!end)
|
|
|
|
|
break;
|
|
|
|
|
*end++ = '\0';
|
|
|
|
|
if (*end++ != ':' || !*end)
|
|
|
|
|
break;
|
|
|
|
|
} else {
|
|
|
|
|
begin = value;
|
|
|
|
|
end = strrchr(value, ':');
|
|
|
|
|
if (!end || !*(end + 1))
|
|
|
|
|
break;
|
|
|
|
|
*end++ = '\0';
|
|
|
|
|
}
|
|
|
|
|
if (getaddrinfo(begin, end, &hints, &resolved) != 0) {
|
|
|
|
|
errno = ENETUNREACH;
|
|
|
|
|
goto err;
|
|
|
|
|
}
|
|
|
|
|
if ((resolved->ai_family == AF_INET && resolved->ai_addrlen == sizeof(struct sockaddr_in)) ||
|
|
|
|
|
(resolved->ai_family == AF_INET6 && resolved->ai_addrlen == sizeof(struct sockaddr_in6)))
|
|
|
|
|
memcpy(&peer->endpoint.addr, resolved->ai_addr, resolved->ai_addrlen);
|
|
|
|
|
else {
|
|
|
|
|
freeaddrinfo(resolved);
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
freeaddrinfo(resolved);
|
2017-09-25 04:22:09 +02:00
|
|
|
} else if (peer && !strcmp(key, "persistent_keepalive_interval")) {
|
|
|
|
|
peer->persistent_keepalive_interval = NUM(0xffffU);
|
|
|
|
|
peer->flags |= WGPEER_HAS_PERSISTENT_KEEPALIVE_INTERVAL;
|
|
|
|
|
} else if (peer && !strcmp(key, "allowed_ip")) {
|
|
|
|
|
struct wgallowedip *new_allowedip;
|
2017-11-17 13:39:02 +01:00
|
|
|
char *end, *mask = value, *ip = strsep(&mask, "/");
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2017-11-17 13:39:02 +01:00
|
|
|
if (!mask || !isdigit(mask[0]))
|
2017-05-15 23:24:48 +02:00
|
|
|
break;
|
2018-09-04 18:44:42 +02:00
|
|
|
new_allowedip = calloc(1, sizeof(*new_allowedip));
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!new_allowedip) {
|
|
|
|
|
ret = -ENOMEM;
|
|
|
|
|
goto err;
|
|
|
|
|
}
|
|
|
|
|
if (allowedip)
|
|
|
|
|
allowedip->next_allowedip = new_allowedip;
|
|
|
|
|
else
|
|
|
|
|
peer->first_allowedip = new_allowedip;
|
|
|
|
|
allowedip = new_allowedip;
|
|
|
|
|
allowedip->family = AF_UNSPEC;
|
2017-11-17 13:39:02 +01:00
|
|
|
if (strchr(ip, ':')) {
|
|
|
|
|
if (inet_pton(AF_INET6, ip, &allowedip->ip6) == 1)
|
2017-09-25 04:22:09 +02:00
|
|
|
allowedip->family = AF_INET6;
|
2017-05-15 23:24:48 +02:00
|
|
|
} else {
|
2017-11-17 13:39:02 +01:00
|
|
|
if (inet_pton(AF_INET, ip, &allowedip->ip4) == 1)
|
2017-09-25 04:22:09 +02:00
|
|
|
allowedip->family = AF_INET;
|
2017-05-15 23:24:48 +02:00
|
|
|
}
|
2017-11-17 13:39:02 +01:00
|
|
|
allowedip->cidr = strtoul(mask, &end, 10);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (*end || allowedip->family == AF_UNSPEC || (allowedip->family == AF_INET6 && allowedip->cidr > 128) || (allowedip->family == AF_INET && allowedip->cidr > 32))
|
2017-05-15 23:24:48 +02:00
|
|
|
break;
|
|
|
|
|
} else if (peer && !strcmp(key, "last_handshake_time_sec"))
|
2019-01-22 13:38:52 +01:00
|
|
|
peer->last_handshake_time.tv_sec = NUM(0x7fffffffffffffffULL);
|
2017-05-15 23:24:48 +02:00
|
|
|
else if (peer && !strcmp(key, "last_handshake_time_nsec"))
|
2019-01-22 13:38:52 +01:00
|
|
|
peer->last_handshake_time.tv_nsec = NUM(0x7fffffffffffffffULL);
|
2017-05-15 23:24:48 +02:00
|
|
|
else if (peer && !strcmp(key, "rx_bytes"))
|
|
|
|
|
peer->rx_bytes = NUM(0xffffffffffffffffULL);
|
|
|
|
|
else if (peer && !strcmp(key, "tx_bytes"))
|
|
|
|
|
peer->tx_bytes = NUM(0xffffffffffffffffULL);
|
|
|
|
|
else if (!strcmp(key, "errno"))
|
|
|
|
|
ret = -NUM(0x7fffffffU);
|
2016-07-22 21:07:12 +02:00
|
|
|
}
|
2017-05-15 23:24:48 +02:00
|
|
|
ret = -EPROTO;
|
|
|
|
|
err:
|
|
|
|
|
free(key);
|
2017-09-25 04:22:09 +02:00
|
|
|
free_wgdevice(dev);
|
2017-05-15 23:24:48 +02:00
|
|
|
*out = NULL;
|
|
|
|
|
fclose(f);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
errno = -ret;
|
|
|
|
|
return ret;
|
2017-01-10 04:50:42 +01:00
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
}
|
2017-05-15 23:24:48 +02:00
|
|
|
#undef NUM
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
|
|
|
|
|
#ifdef __linux__
|
2017-05-15 23:24:48 +02:00
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
static int parse_linkinfo(const struct nlattr *attr, void *data)
|
|
|
|
|
{
|
|
|
|
|
struct inflatable_buffer *buffer = data;
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
if (mnl_attr_get_type(attr) == IFLA_INFO_KIND && !strcmp("wireguard", mnl_attr_get_str(attr)))
|
|
|
|
|
buffer->good = true;
|
|
|
|
|
return MNL_CB_OK;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int parse_infomsg(const struct nlattr *attr, void *data)
|
|
|
|
|
{
|
|
|
|
|
struct inflatable_buffer *buffer = data;
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
if (mnl_attr_get_type(attr) == IFLA_LINKINFO)
|
|
|
|
|
return mnl_attr_parse_nested(attr, parse_linkinfo, data);
|
|
|
|
|
else if (mnl_attr_get_type(attr) == IFLA_IFNAME)
|
|
|
|
|
buffer->next = strdup(mnl_attr_get_str(attr));
|
|
|
|
|
return MNL_CB_OK;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int read_devices_cb(const struct nlmsghdr *nlh, void *data)
|
|
|
|
|
{
|
|
|
|
|
struct inflatable_buffer *buffer = data;
|
2017-05-15 23:24:48 +02:00
|
|
|
int ret;
|
|
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
buffer->good = false;
|
|
|
|
|
buffer->next = NULL;
|
2017-05-15 23:24:48 +02:00
|
|
|
ret = mnl_attr_parse(nlh, sizeof(struct ifinfomsg), parse_infomsg, data);
|
2015-06-05 15:58:00 +02:00
|
|
|
if (ret != MNL_CB_OK)
|
|
|
|
|
return ret;
|
|
|
|
|
ret = add_next_to_inflatable_buffer(buffer);
|
|
|
|
|
if (ret < 0)
|
|
|
|
|
return ret;
|
|
|
|
|
if (nlh->nlmsg_type != NLMSG_DONE)
|
|
|
|
|
return MNL_CB_OK + 1;
|
|
|
|
|
return MNL_CB_OK;
|
|
|
|
|
}
|
|
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
static int kernel_get_wireguard_interfaces(struct inflatable_buffer *buffer)
|
2015-06-05 15:58:00 +02:00
|
|
|
{
|
|
|
|
|
struct mnl_socket *nl = NULL;
|
|
|
|
|
char *rtnl_buffer = NULL;
|
|
|
|
|
size_t message_len;
|
|
|
|
|
unsigned int portid, seq;
|
|
|
|
|
ssize_t len;
|
|
|
|
|
int ret = 0;
|
|
|
|
|
struct nlmsghdr *nlh;
|
|
|
|
|
struct ifinfomsg *ifm;
|
|
|
|
|
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
ret = -ENOMEM;
|
2017-10-02 13:05:35 +02:00
|
|
|
rtnl_buffer = calloc(SOCKET_BUFFER_SIZE, 1);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if (!rtnl_buffer)
|
2015-06-05 15:58:00 +02:00
|
|
|
goto cleanup;
|
|
|
|
|
|
|
|
|
|
nl = mnl_socket_open(NETLINK_ROUTE);
|
|
|
|
|
if (!nl) {
|
|
|
|
|
ret = -errno;
|
|
|
|
|
goto cleanup;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (mnl_socket_bind(nl, 0, MNL_SOCKET_AUTOPID) < 0) {
|
|
|
|
|
ret = -errno;
|
|
|
|
|
goto cleanup;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
seq = time(NULL);
|
|
|
|
|
portid = mnl_socket_get_portid(nl);
|
|
|
|
|
nlh = mnl_nlmsg_put_header(rtnl_buffer);
|
|
|
|
|
nlh->nlmsg_type = RTM_GETLINK;
|
|
|
|
|
nlh->nlmsg_flags = NLM_F_REQUEST | NLM_F_ACK | NLM_F_DUMP;
|
|
|
|
|
nlh->nlmsg_seq = seq;
|
|
|
|
|
ifm = mnl_nlmsg_put_extra_header(nlh, sizeof(*ifm));
|
|
|
|
|
ifm->ifi_family = AF_UNSPEC;
|
|
|
|
|
message_len = nlh->nlmsg_len;
|
|
|
|
|
|
|
|
|
|
if (mnl_socket_sendto(nl, rtnl_buffer, message_len) < 0) {
|
|
|
|
|
ret = -errno;
|
|
|
|
|
goto cleanup;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
another:
|
2017-10-02 13:05:35 +02:00
|
|
|
if ((len = mnl_socket_recvfrom(nl, rtnl_buffer, SOCKET_BUFFER_SIZE)) < 0) {
|
2015-06-05 15:58:00 +02:00
|
|
|
ret = -errno;
|
|
|
|
|
goto cleanup;
|
|
|
|
|
}
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if ((len = mnl_cb_run(rtnl_buffer, len, seq, portid, read_devices_cb, buffer)) < 0) {
|
2018-10-12 16:40:29 +02:00
|
|
|
/* Netlink returns NLM_F_DUMP_INTR if the set of all tunnels changed
|
|
|
|
|
* during the dump. That's unfortunate, but is pretty common on busy
|
|
|
|
|
* systems that are adding and removing tunnels all the time. Rather
|
|
|
|
|
* than retrying, potentially indefinitely, we just work with the
|
|
|
|
|
* partial results. */
|
|
|
|
|
if (errno != EINTR) {
|
|
|
|
|
ret = -errno;
|
|
|
|
|
goto cleanup;
|
|
|
|
|
}
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
|
|
|
|
if (len == MNL_CB_OK + 1)
|
|
|
|
|
goto another;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
ret = 0;
|
2015-06-05 15:58:00 +02:00
|
|
|
|
|
|
|
|
cleanup:
|
|
|
|
|
free(rtnl_buffer);
|
|
|
|
|
if (nl)
|
|
|
|
|
mnl_socket_close(nl);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
return ret;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
static int kernel_set_device(struct wgdevice *dev)
|
2015-06-05 15:58:00 +02:00
|
|
|
{
|
2017-09-25 04:22:09 +02:00
|
|
|
int ret = 0;
|
|
|
|
|
struct wgpeer *peer = NULL;
|
|
|
|
|
struct wgallowedip *allowedip = NULL;
|
|
|
|
|
struct nlattr *peers_nest, *peer_nest, *allowedips_nest, *allowedip_nest;
|
|
|
|
|
struct nlmsghdr *nlh;
|
|
|
|
|
struct mnlg_socket *nlg;
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
|
2017-10-16 22:18:29 +02:00
|
|
|
nlg = mnlg_socket_open(WG_GENL_NAME, WG_GENL_VERSION);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!nlg)
|
|
|
|
|
return -errno;
|
|
|
|
|
|
|
|
|
|
again:
|
|
|
|
|
nlh = mnlg_msg_prepare(nlg, WG_CMD_SET_DEVICE, NLM_F_REQUEST | NLM_F_ACK);
|
|
|
|
|
mnl_attr_put_strz(nlh, WGDEVICE_A_IFNAME, dev->name);
|
|
|
|
|
|
|
|
|
|
if (!peer) {
|
|
|
|
|
uint32_t flags = 0;
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
if (dev->flags & WGDEVICE_HAS_PRIVATE_KEY)
|
|
|
|
|
mnl_attr_put(nlh, WGDEVICE_A_PRIVATE_KEY, sizeof(dev->private_key), dev->private_key);
|
|
|
|
|
if (dev->flags & WGDEVICE_HAS_LISTEN_PORT)
|
|
|
|
|
mnl_attr_put_u16(nlh, WGDEVICE_A_LISTEN_PORT, dev->listen_port);
|
|
|
|
|
if (dev->flags & WGDEVICE_HAS_FWMARK)
|
|
|
|
|
mnl_attr_put_u32(nlh, WGDEVICE_A_FWMARK, dev->fwmark);
|
|
|
|
|
if (dev->flags & WGDEVICE_REPLACE_PEERS)
|
|
|
|
|
flags |= WGDEVICE_F_REPLACE_PEERS;
|
|
|
|
|
if (flags)
|
|
|
|
|
mnl_attr_put_u32(nlh, WGDEVICE_A_FLAGS, flags);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!dev->first_peer)
|
|
|
|
|
goto send;
|
|
|
|
|
peers_nest = peer_nest = allowedips_nest = allowedip_nest = NULL;
|
|
|
|
|
peers_nest = mnl_attr_nest_start(nlh, WGDEVICE_A_PEERS);
|
2018-10-08 03:06:47 +02:00
|
|
|
for (peer = peer ? peer : dev->first_peer; peer; peer = peer->next_peer) {
|
2017-09-25 04:22:09 +02:00
|
|
|
uint32_t flags = 0;
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2018-10-08 03:06:47 +02:00
|
|
|
peer_nest = mnl_attr_nest_start_check(nlh, SOCKET_BUFFER_SIZE, 0);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!peer_nest)
|
|
|
|
|
goto toobig_peers;
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_PUBLIC_KEY, sizeof(peer->public_key), peer->public_key))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_peers;
|
|
|
|
|
if (peer->flags & WGPEER_REMOVE_ME)
|
|
|
|
|
flags |= WGPEER_F_REMOVE_ME;
|
|
|
|
|
if (!allowedip) {
|
|
|
|
|
if (peer->flags & WGPEER_REPLACE_ALLOWEDIPS)
|
|
|
|
|
flags |= WGPEER_F_REPLACE_ALLOWEDIPS;
|
|
|
|
|
if (peer->flags & WGPEER_HAS_PRESHARED_KEY) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_PRESHARED_KEY, sizeof(peer->preshared_key), peer->preshared_key))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_peers;
|
|
|
|
|
}
|
|
|
|
|
if (peer->endpoint.addr.sa_family == AF_INET) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_ENDPOINT, sizeof(peer->endpoint.addr4), &peer->endpoint.addr4))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_peers;
|
|
|
|
|
} else if (peer->endpoint.addr.sa_family == AF_INET6) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_ENDPOINT, sizeof(peer->endpoint.addr6), &peer->endpoint.addr6))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_peers;
|
|
|
|
|
}
|
|
|
|
|
if (peer->flags & WGPEER_HAS_PERSISTENT_KEEPALIVE_INTERVAL) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_u16_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL, peer->persistent_keepalive_interval))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_peers;
|
|
|
|
|
}
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
if (flags) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_u32_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_FLAGS, flags))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_peers;
|
|
|
|
|
}
|
|
|
|
|
if (peer->first_allowedip) {
|
|
|
|
|
if (!allowedip)
|
|
|
|
|
allowedip = peer->first_allowedip;
|
2017-10-02 13:05:35 +02:00
|
|
|
allowedips_nest = mnl_attr_nest_start_check(nlh, SOCKET_BUFFER_SIZE, WGPEER_A_ALLOWEDIPS);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!allowedips_nest)
|
|
|
|
|
goto toobig_allowedips;
|
2018-10-08 03:06:47 +02:00
|
|
|
for (; allowedip; allowedip = allowedip->next_allowedip) {
|
|
|
|
|
allowedip_nest = mnl_attr_nest_start_check(nlh, SOCKET_BUFFER_SIZE, 0);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!allowedip_nest)
|
|
|
|
|
goto toobig_allowedips;
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_u16_check(nlh, SOCKET_BUFFER_SIZE, WGALLOWEDIP_A_FAMILY, allowedip->family))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_allowedips;
|
|
|
|
|
if (allowedip->family == AF_INET) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_check(nlh, SOCKET_BUFFER_SIZE, WGALLOWEDIP_A_IPADDR, sizeof(allowedip->ip4), &allowedip->ip4))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_allowedips;
|
|
|
|
|
} else if (allowedip->family == AF_INET6) {
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_check(nlh, SOCKET_BUFFER_SIZE, WGALLOWEDIP_A_IPADDR, sizeof(allowedip->ip6), &allowedip->ip6))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_allowedips;
|
|
|
|
|
}
|
2017-10-02 13:05:35 +02:00
|
|
|
if (!mnl_attr_put_u8_check(nlh, SOCKET_BUFFER_SIZE, WGALLOWEDIP_A_CIDR_MASK, allowedip->cidr))
|
2017-09-25 04:22:09 +02:00
|
|
|
goto toobig_allowedips;
|
|
|
|
|
mnl_attr_nest_end(nlh, allowedip_nest);
|
|
|
|
|
allowedip_nest = NULL;
|
|
|
|
|
}
|
|
|
|
|
mnl_attr_nest_end(nlh, allowedips_nest);
|
|
|
|
|
allowedips_nest = NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
mnl_attr_nest_end(nlh, peer_nest);
|
|
|
|
|
peer_nest = NULL;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
mnl_attr_nest_end(nlh, peers_nest);
|
|
|
|
|
peers_nest = NULL;
|
|
|
|
|
goto send;
|
|
|
|
|
toobig_allowedips:
|
|
|
|
|
if (allowedip_nest)
|
|
|
|
|
mnl_attr_nest_cancel(nlh, allowedip_nest);
|
|
|
|
|
if (allowedips_nest)
|
|
|
|
|
mnl_attr_nest_end(nlh, allowedips_nest);
|
|
|
|
|
mnl_attr_nest_end(nlh, peer_nest);
|
|
|
|
|
mnl_attr_nest_end(nlh, peers_nest);
|
|
|
|
|
goto send;
|
|
|
|
|
toobig_peers:
|
|
|
|
|
if (peer_nest)
|
|
|
|
|
mnl_attr_nest_cancel(nlh, peer_nest);
|
|
|
|
|
mnl_attr_nest_end(nlh, peers_nest);
|
|
|
|
|
goto send;
|
|
|
|
|
send:
|
|
|
|
|
if (mnlg_socket_send(nlg, nlh) < 0) {
|
|
|
|
|
ret = -errno;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
errno = 0;
|
|
|
|
|
if (mnlg_socket_recv_run(nlg, NULL, NULL) < 0) {
|
|
|
|
|
ret = errno ? -errno : -EINVAL;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
if (peer)
|
|
|
|
|
goto again;
|
|
|
|
|
|
|
|
|
|
out:
|
|
|
|
|
mnlg_socket_close(nlg);
|
|
|
|
|
errno = -ret;
|
|
|
|
|
return ret;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
static int parse_allowedip(const struct nlattr *attr, void *data)
|
2015-06-05 15:58:00 +02:00
|
|
|
{
|
2017-10-10 17:17:43 +02:00
|
|
|
struct wgallowedip *allowedip = data;
|
2017-09-25 04:22:09 +02:00
|
|
|
|
|
|
|
|
switch (mnl_attr_get_type(attr)) {
|
2017-10-17 19:20:52 +02:00
|
|
|
case WGALLOWEDIP_A_UNSPEC:
|
|
|
|
|
break;
|
2017-09-25 04:22:09 +02:00
|
|
|
case WGALLOWEDIP_A_FAMILY:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U16))
|
2017-10-10 17:17:43 +02:00
|
|
|
allowedip->family = mnl_attr_get_u16(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGALLOWEDIP_A_IPADDR:
|
2017-10-10 17:17:43 +02:00
|
|
|
if (mnl_attr_get_payload_len(attr) == sizeof(allowedip->ip4))
|
|
|
|
|
memcpy(&allowedip->ip4, mnl_attr_get_payload(attr), sizeof(allowedip->ip4));
|
|
|
|
|
else if (mnl_attr_get_payload_len(attr) == sizeof(allowedip->ip6))
|
|
|
|
|
memcpy(&allowedip->ip6, mnl_attr_get_payload(attr), sizeof(allowedip->ip6));
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGALLOWEDIP_A_CIDR_MASK:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U8))
|
2017-10-10 17:17:43 +02:00
|
|
|
allowedip->cidr = mnl_attr_get_u8(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return MNL_CB_OK;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int parse_allowedips(const struct nlattr *attr, void *data)
|
|
|
|
|
{
|
2017-10-10 17:17:43 +02:00
|
|
|
struct wgpeer *peer = data;
|
2018-09-04 18:44:42 +02:00
|
|
|
struct wgallowedip *new_allowedip = calloc(1, sizeof(*new_allowedip));
|
2017-03-24 04:01:25 +01:00
|
|
|
int ret;
|
2017-10-10 17:17:43 +02:00
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!new_allowedip) {
|
|
|
|
|
perror("calloc");
|
|
|
|
|
return MNL_CB_ERROR;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
2017-10-10 17:17:43 +02:00
|
|
|
if (!peer->first_allowedip)
|
|
|
|
|
peer->first_allowedip = peer->last_allowedip = new_allowedip;
|
|
|
|
|
else {
|
|
|
|
|
peer->last_allowedip->next_allowedip = new_allowedip;
|
|
|
|
|
peer->last_allowedip = new_allowedip;
|
|
|
|
|
}
|
|
|
|
|
ret = mnl_attr_parse_nested(attr, parse_allowedip, new_allowedip);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!ret)
|
|
|
|
|
return ret;
|
2017-10-10 17:17:43 +02:00
|
|
|
if (!((new_allowedip->family == AF_INET && new_allowedip->cidr <= 32) || (new_allowedip->family == AF_INET6 && new_allowedip->cidr <= 128)))
|
2017-09-25 04:22:09 +02:00
|
|
|
return MNL_CB_ERROR;
|
|
|
|
|
return MNL_CB_OK;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
static int parse_peer(const struct nlattr *attr, void *data)
|
2015-06-05 15:58:00 +02:00
|
|
|
{
|
2017-10-10 17:17:43 +02:00
|
|
|
struct wgpeer *peer = data;
|
2017-09-25 04:22:09 +02:00
|
|
|
|
|
|
|
|
switch (mnl_attr_get_type(attr)) {
|
2017-10-17 19:20:52 +02:00
|
|
|
case WGPEER_A_UNSPEC:
|
|
|
|
|
break;
|
2017-09-25 04:22:09 +02:00
|
|
|
case WGPEER_A_PUBLIC_KEY:
|
2017-11-11 04:30:21 +01:00
|
|
|
if (mnl_attr_get_payload_len(attr) == sizeof(peer->public_key)) {
|
2017-10-10 17:17:43 +02:00
|
|
|
memcpy(peer->public_key, mnl_attr_get_payload(attr), sizeof(peer->public_key));
|
2017-11-11 04:30:21 +01:00
|
|
|
peer->flags |= WGPEER_HAS_PUBLIC_KEY;
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGPEER_A_PRESHARED_KEY:
|
2017-11-11 04:30:21 +01:00
|
|
|
if (mnl_attr_get_payload_len(attr) == sizeof(peer->preshared_key)) {
|
2017-10-10 17:17:43 +02:00
|
|
|
memcpy(peer->preshared_key, mnl_attr_get_payload(attr), sizeof(peer->preshared_key));
|
2017-11-11 04:30:21 +01:00
|
|
|
if (!key_is_zero(peer->preshared_key))
|
|
|
|
|
peer->flags |= WGPEER_HAS_PRESHARED_KEY;
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGPEER_A_ENDPOINT: {
|
|
|
|
|
struct sockaddr *addr;
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
if (mnl_attr_get_payload_len(attr) < sizeof(*addr))
|
|
|
|
|
break;
|
|
|
|
|
addr = mnl_attr_get_payload(attr);
|
2017-10-10 17:17:43 +02:00
|
|
|
if (addr->sa_family == AF_INET && mnl_attr_get_payload_len(attr) == sizeof(peer->endpoint.addr4))
|
|
|
|
|
memcpy(&peer->endpoint.addr4, addr, sizeof(peer->endpoint.addr4));
|
|
|
|
|
else if (addr->sa_family == AF_INET6 && mnl_attr_get_payload_len(attr) == sizeof(peer->endpoint.addr6))
|
|
|
|
|
memcpy(&peer->endpoint.addr6, addr, sizeof(peer->endpoint.addr6));
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
case WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U16))
|
2017-10-10 17:17:43 +02:00
|
|
|
peer->persistent_keepalive_interval = mnl_attr_get_u16(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGPEER_A_LAST_HANDSHAKE_TIME:
|
2017-10-10 17:17:43 +02:00
|
|
|
if (mnl_attr_get_payload_len(attr) == sizeof(peer->last_handshake_time))
|
|
|
|
|
memcpy(&peer->last_handshake_time, mnl_attr_get_payload(attr), sizeof(peer->last_handshake_time));
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGPEER_A_RX_BYTES:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U64))
|
2017-10-10 17:17:43 +02:00
|
|
|
peer->rx_bytes = mnl_attr_get_u64(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGPEER_A_TX_BYTES:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U64))
|
2017-10-10 17:17:43 +02:00
|
|
|
peer->tx_bytes = mnl_attr_get_u64(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGPEER_A_ALLOWEDIPS:
|
2017-10-10 17:17:43 +02:00
|
|
|
return mnl_attr_parse_nested(attr, parse_allowedips, peer);
|
2017-09-25 04:22:09 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return MNL_CB_OK;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
|
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
static int parse_peers(const struct nlattr *attr, void *data)
|
2015-06-05 15:58:00 +02:00
|
|
|
{
|
2017-10-10 17:17:43 +02:00
|
|
|
struct wgdevice *device = data;
|
2018-09-04 18:44:42 +02:00
|
|
|
struct wgpeer *new_peer = calloc(1, sizeof(*new_peer));
|
2015-06-05 15:58:00 +02:00
|
|
|
int ret;
|
2017-10-10 17:17:43 +02:00
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!new_peer) {
|
|
|
|
|
perror("calloc");
|
|
|
|
|
return MNL_CB_ERROR;
|
|
|
|
|
}
|
2017-10-10 17:17:43 +02:00
|
|
|
if (!device->first_peer)
|
|
|
|
|
device->first_peer = device->last_peer = new_peer;
|
|
|
|
|
else {
|
|
|
|
|
device->last_peer->next_peer = new_peer;
|
|
|
|
|
device->last_peer = new_peer;
|
|
|
|
|
}
|
|
|
|
|
ret = mnl_attr_parse_nested(attr, parse_peer, new_peer);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!ret)
|
|
|
|
|
return ret;
|
2017-11-11 04:30:21 +01:00
|
|
|
if (!(new_peer->flags & WGPEER_HAS_PUBLIC_KEY))
|
2017-09-25 04:22:09 +02:00
|
|
|
return MNL_CB_ERROR;
|
|
|
|
|
return MNL_CB_OK;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int parse_device(const struct nlattr *attr, void *data)
|
|
|
|
|
{
|
2017-10-10 17:17:43 +02:00
|
|
|
struct wgdevice *device = data;
|
2017-09-25 04:22:09 +02:00
|
|
|
|
|
|
|
|
switch (mnl_attr_get_type(attr)) {
|
2017-10-17 19:20:52 +02:00
|
|
|
case WGDEVICE_A_UNSPEC:
|
|
|
|
|
break;
|
2017-10-09 13:27:00 +02:00
|
|
|
case WGDEVICE_A_IFINDEX:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U32))
|
2017-10-10 17:17:43 +02:00
|
|
|
device->ifindex = mnl_attr_get_u32(attr);
|
2017-10-09 13:27:00 +02:00
|
|
|
break;
|
2017-09-25 04:22:09 +02:00
|
|
|
case WGDEVICE_A_IFNAME:
|
2018-02-14 23:21:11 +01:00
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_STRING)) {
|
2017-10-10 17:17:43 +02:00
|
|
|
strncpy(device->name, mnl_attr_get_str(attr), sizeof(device->name) - 1);
|
2018-02-14 23:21:11 +01:00
|
|
|
device->name[sizeof(device->name) - 1] = '\0';
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGDEVICE_A_PRIVATE_KEY:
|
2017-11-11 04:30:21 +01:00
|
|
|
if (mnl_attr_get_payload_len(attr) == sizeof(device->private_key)) {
|
2017-10-10 17:17:43 +02:00
|
|
|
memcpy(device->private_key, mnl_attr_get_payload(attr), sizeof(device->private_key));
|
2017-11-11 04:30:21 +01:00
|
|
|
device->flags |= WGDEVICE_HAS_PRIVATE_KEY;
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGDEVICE_A_PUBLIC_KEY:
|
2017-11-11 04:30:21 +01:00
|
|
|
if (mnl_attr_get_payload_len(attr) == sizeof(device->public_key)) {
|
2017-10-10 17:17:43 +02:00
|
|
|
memcpy(device->public_key, mnl_attr_get_payload(attr), sizeof(device->public_key));
|
2017-11-11 04:30:21 +01:00
|
|
|
device->flags |= WGDEVICE_HAS_PUBLIC_KEY;
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGDEVICE_A_LISTEN_PORT:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U16))
|
2017-10-10 17:17:43 +02:00
|
|
|
device->listen_port = mnl_attr_get_u16(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGDEVICE_A_FWMARK:
|
|
|
|
|
if (!mnl_attr_validate(attr, MNL_TYPE_U32))
|
2017-10-10 17:17:43 +02:00
|
|
|
device->fwmark = mnl_attr_get_u32(attr);
|
2017-09-25 04:22:09 +02:00
|
|
|
break;
|
|
|
|
|
case WGDEVICE_A_PEERS:
|
2017-10-10 17:17:43 +02:00
|
|
|
return mnl_attr_parse_nested(attr, parse_peers, device);
|
2017-09-25 04:22:09 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return MNL_CB_OK;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int read_device_cb(const struct nlmsghdr *nlh, void *data)
|
|
|
|
|
{
|
|
|
|
|
return mnl_attr_parse(nlh, sizeof(struct genlmsghdr), parse_device, data);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static void coalesce_peers(struct wgdevice *device)
|
|
|
|
|
{
|
|
|
|
|
struct wgpeer *old_next_peer, *peer = device->first_peer;
|
2017-10-10 17:17:43 +02:00
|
|
|
|
2017-09-25 04:22:09 +02:00
|
|
|
while (peer && peer->next_peer) {
|
|
|
|
|
if (memcmp(peer->public_key, peer->next_peer->public_key, WG_KEY_LEN)) {
|
|
|
|
|
peer = peer->next_peer;
|
|
|
|
|
continue;
|
|
|
|
|
}
|
2017-10-10 17:17:43 +02:00
|
|
|
if (!peer->first_allowedip) {
|
2017-09-25 04:22:09 +02:00
|
|
|
peer->first_allowedip = peer->next_peer->first_allowedip;
|
2017-10-10 17:17:43 +02:00
|
|
|
peer->last_allowedip = peer->next_peer->last_allowedip;
|
|
|
|
|
} else {
|
|
|
|
|
peer->last_allowedip->next_allowedip = peer->next_peer->first_allowedip;
|
|
|
|
|
peer->last_allowedip = peer->next_peer->last_allowedip;
|
|
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
old_next_peer = peer->next_peer;
|
|
|
|
|
peer->next_peer = old_next_peer->next_peer;
|
|
|
|
|
free(old_next_peer);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2017-10-10 17:17:43 +02:00
|
|
|
static int kernel_get_device(struct wgdevice **device, const char *interface)
|
2017-09-25 04:22:09 +02:00
|
|
|
{
|
|
|
|
|
int ret = 0;
|
|
|
|
|
struct nlmsghdr *nlh;
|
|
|
|
|
struct mnlg_socket *nlg;
|
|
|
|
|
|
2017-10-08 16:24:37 +02:00
|
|
|
try_again:
|
2018-09-04 18:44:42 +02:00
|
|
|
*device = calloc(1, sizeof(**device));
|
2017-10-10 17:17:43 +02:00
|
|
|
if (!*device)
|
2017-09-25 04:22:09 +02:00
|
|
|
return -errno;
|
|
|
|
|
|
2017-10-08 16:24:37 +02:00
|
|
|
nlg = mnlg_socket_open(WG_GENL_NAME, WG_GENL_VERSION);
|
2017-09-25 04:22:09 +02:00
|
|
|
if (!nlg) {
|
2017-10-10 17:17:43 +02:00
|
|
|
free_wgdevice(*device);
|
|
|
|
|
*device = NULL;
|
2017-09-25 04:22:09 +02:00
|
|
|
return -errno;
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
2017-09-25 04:22:09 +02:00
|
|
|
|
|
|
|
|
nlh = mnlg_msg_prepare(nlg, WG_CMD_GET_DEVICE, NLM_F_REQUEST | NLM_F_ACK | NLM_F_DUMP);
|
|
|
|
|
mnl_attr_put_strz(nlh, WGDEVICE_A_IFNAME, interface);
|
|
|
|
|
if (mnlg_socket_send(nlg, nlh) < 0) {
|
|
|
|
|
ret = -errno;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
errno = 0;
|
2017-10-10 17:17:43 +02:00
|
|
|
if (mnlg_socket_recv_run(nlg, read_device_cb, *device) < 0) {
|
2017-09-25 04:22:09 +02:00
|
|
|
ret = errno ? -errno : -EINVAL;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
2017-10-10 17:17:43 +02:00
|
|
|
coalesce_peers(*device);
|
2017-09-25 04:22:09 +02:00
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
out:
|
2017-09-25 04:22:09 +02:00
|
|
|
if (nlg)
|
|
|
|
|
mnlg_socket_close(nlg);
|
|
|
|
|
if (ret) {
|
2017-10-10 17:17:43 +02:00
|
|
|
free_wgdevice(*device);
|
2017-10-08 16:24:37 +02:00
|
|
|
if (ret == -EINTR)
|
|
|
|
|
goto try_again;
|
2017-10-10 17:17:43 +02:00
|
|
|
*device = NULL;
|
2017-09-25 04:22:09 +02:00
|
|
|
}
|
2015-06-05 15:58:00 +02:00
|
|
|
errno = -ret;
|
|
|
|
|
return ret;
|
|
|
|
|
}
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
/* first\0second\0third\0forth\0last\0\0 */
|
2016-07-20 21:24:27 +02:00
|
|
|
char *ipc_list_devices(void)
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
{
|
2017-10-02 13:05:35 +02:00
|
|
|
struct inflatable_buffer buffer = { .len = SOCKET_BUFFER_SIZE };
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
int ret;
|
|
|
|
|
|
|
|
|
|
ret = -ENOMEM;
|
2017-03-24 04:01:25 +01:00
|
|
|
buffer.buffer = calloc(1, buffer.len);
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
if (!buffer.buffer)
|
|
|
|
|
goto cleanup;
|
|
|
|
|
|
|
|
|
|
#ifdef __linux__
|
|
|
|
|
ret = kernel_get_wireguard_interfaces(&buffer);
|
|
|
|
|
if (ret < 0)
|
|
|
|
|
goto cleanup;
|
|
|
|
|
#endif
|
|
|
|
|
ret = userspace_get_wireguard_interfaces(&buffer);
|
|
|
|
|
if (ret < 0)
|
|
|
|
|
goto cleanup;
|
|
|
|
|
|
|
|
|
|
cleanup:
|
|
|
|
|
errno = -ret;
|
|
|
|
|
if (errno) {
|
|
|
|
|
free(buffer.buffer);
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
return buffer.buffer;
|
|
|
|
|
}
|
|
|
|
|
|
2016-07-20 21:24:27 +02:00
|
|
|
int ipc_get_device(struct wgdevice **dev, const char *interface)
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
{
|
|
|
|
|
#ifdef __linux__
|
|
|
|
|
if (userspace_has_wireguard_interface(interface))
|
|
|
|
|
return userspace_get_device(dev, interface);
|
|
|
|
|
return kernel_get_device(dev, interface);
|
|
|
|
|
#else
|
|
|
|
|
return userspace_get_device(dev, interface);
|
|
|
|
|
#endif
|
|
|
|
|
}
|
|
|
|
|
|
2016-07-20 21:24:27 +02:00
|
|
|
int ipc_set_device(struct wgdevice *dev)
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
{
|
|
|
|
|
#ifdef __linux__
|
2017-09-25 04:22:09 +02:00
|
|
|
if (userspace_has_wireguard_interface(dev->name))
|
wg: first additions of userspace integration
This is designed to work with a server that follows this:
struct sockaddr_un addr = {
.sun_family = AF_UNIX,
.sun_path = "/var/run/wireguard/wguserspace0.sock"
};
int fd, ret;
ssize_t len;
socklen_t socklen;
struct wgdevice *device;
fd = socket(AF_UNIX, SOCK_DGRAM, 0);
if (fd < 0)
exit(1);
if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0)
exit(1);
for (;;) {
/* First we look at how big the next message is, so we know how much to
* allocate. Note on BSD you can instead use ioctl(fd, FIONREAD, &len). */
len = recv(fd, NULL, 0, MSG_PEEK | MSG_TRUNC);
if (len < 0) {
handle_error();
continue;
}
/* Next we allocate a buffer for the received data. */
device = NULL;
if (len) {
device = malloc(len);
if (!device) {
handle_error();
continue;
}
}
/* Finally we receive the data, storing too the return address. */
socklen = sizeof(addr);
len = recvfrom(fd, device, len, 0, (struct sockaddr *)&addr, (socklen_t *)&socklen);
if (len < 0) {
handle_error();
free(device);
continue;
}
if (!len) { /* If len is zero, it's a "get" request, so we send our device back. */
device = get_current_wireguard_device(&len);
sendto(fd, device, len, 0, (struct sockaddr *)&addr, socklen);
} else { /* Otherwise, we just received a wgdevice, so we should "set" and send back the return status. */
ret = set_current_wireguard_device(device);
sendto(fd, &ret, sizeof(ret), 0, (struct sockaddr *)&addr, socklen);
free(device);
}
}
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2016-07-19 15:26:56 +02:00
|
|
|
return userspace_set_device(dev);
|
|
|
|
|
return kernel_set_device(dev);
|
|
|
|
|
#else
|
|
|
|
|
return userspace_set_device(dev);
|
|
|
|
|
#endif
|
|
|
|
|
}
|