1 /*
2 This file is part of libmicrohttpd
3 Copyright (C) 2007, 2008 Christian Grothoff (and other contributing authors)
4
5 This library is free software; you can redistribute it and/or
6 modify it under the terms of the GNU Lesser General Public
7 License as published by the Free Software Foundation; either
8 version 2.1 of the License, or (at your option) any later version.
9
10 This library is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 Lesser General Public License for more details.
14
15 You should have received a copy of the GNU Lesser General Public
16 License along with this library; if not, write to the Free Software
17 Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
18 */
19 /**
20 * @file https_fileserver_example.c
21 * @brief a simple HTTPS file server using TLS.
22 *
23 * Usage :
24 *
25 * 'http_fileserver_example HTTP-PORT SECONDS-TO-RUN'
26 *
27 * The certificate & key are required by the server to operate, Omitting the
28 * path arguments will cause the server to use the hard coded example certificate & key.
29 *
30 * 'certtool' may be used to generate these if required.
31 *
32 * @author Sagie Amir
33 */
34
35 #include "platform.h"
36 #include <microhttpd.h>
37 #include <sys/stat.h>
38 #include <gnutls/gnutls.h>
39 #include <gcrypt.h>
40
41 #define BUF_SIZE 1024
42 #define MAX_URL_LEN 255
43
44 // TODO remove if unused
45 #define CAFILE "ca.pem"
46 #define CRLFILE "crl.pem"
47
48 #define EMPTY_PAGE "<html><head><title>File not found</title></head><body>File not found</body></html>"
49
50 /* Test Certificate */
51 const char cert_pem[] =
52 "-----BEGIN CERTIFICATE-----\n"
53 "MIICpjCCAZCgAwIBAgIESEPtjjALBgkqhkiG9w0BAQUwADAeFw0wODA2MDIxMjU0\n"
54 "MzhaFw0wOTA2MDIxMjU0NDZaMAAwggEfMAsGCSqGSIb3DQEBAQOCAQ4AMIIBCQKC\n"
55 "AQC03TyUvK5HmUAirRp067taIEO4bibh5nqolUoUdo/LeblMQV+qnrv/RNAMTx5X\n"
56 "fNLZ45/kbM9geF8qY0vsPyQvP4jumzK0LOJYuIwmHaUm9vbXnYieILiwCuTgjaud\n"
57 "3VkZDoQ9fteIo+6we9UTpVqZpxpbLulBMh/VsvX0cPJ1VFC7rT59o9hAUlFf9jX/\n"
58 "GmKdYI79MtgVx0OPBjmmSD6kicBBfmfgkO7bIGwlRtsIyMznxbHu6VuoX/eVxrTv\n"
59 "rmCwgEXLWRZ6ru8MQl5YfqeGXXRVwMeXU961KefbuvmEPccgCxm8FZ1C1cnDHFXh\n"
60 "siSgAzMBjC/b6KVhNQ4KnUdZAgMBAAGjLzAtMAwGA1UdEwEB/wQCMAAwHQYDVR0O\n"
61 "BBYEFJcUvpjvE5fF/yzUshkWDpdYiQh/MAsGCSqGSIb3DQEBBQOCAQEARP7eKSB2\n"
62 "RNd6XjEjK0SrxtoTnxS3nw9sfcS7/qD1+XHdObtDFqGNSjGYFB3Gpx8fpQhCXdoN\n"
63 "8QUs3/5ZVa5yjZMQewWBgz8kNbnbH40F2y81MHITxxCe1Y+qqHWwVaYLsiOTqj2/\n"
64 "0S3QjEJ9tvklmg7JX09HC4m5QRYfWBeQLD1u8ZjA1Sf1xJriomFVyRLI2VPO2bNe\n"
65 "JDMXWuP+8kMC7gEvUnJ7A92Y2yrhu3QI3bjPk8uSpHea19Q77tul1UVBJ5g+zpH3\n"
66 "OsF5p0MyaVf09GTzcLds5nE/osTdXGUyHJapWReVmPm3Zn6gqYlnzD99z+DPIgIV\n"
67 "RhZvQx74NQnS6g==\n" "-----END CERTIFICATE-----\n";
68
69 const char key_pem[] =
70 "-----BEGIN RSA PRIVATE KEY-----\n"
71 "MIIEowIBAAKCAQEAtN08lLyuR5lAIq0adOu7WiBDuG4m4eZ6qJVKFHaPy3m5TEFf\n"
72 "qp67/0TQDE8eV3zS2eOf5GzPYHhfKmNL7D8kLz+I7psytCziWLiMJh2lJvb2152I\n"
73 "niC4sArk4I2rnd1ZGQ6EPX7XiKPusHvVE6VamacaWy7pQTIf1bL19HDydVRQu60+\n"
74 "faPYQFJRX/Y1/xpinWCO/TLYFcdDjwY5pkg+pInAQX5n4JDu2yBsJUbbCMjM58Wx\n"
75 "7ulbqF/3lca0765gsIBFy1kWeq7vDEJeWH6nhl10VcDHl1PetSnn27r5hD3HIAsZ\n"
76 "vBWdQtXJwxxV4bIkoAMzAYwv2+ilYTUOCp1HWQIDAQABAoIBAArOQv3R7gmqDspj\n"
77 "lDaTFOz0C4e70QfjGMX0sWnakYnDGn6DU19iv3GnX1S072ejtgc9kcJ4e8VUO79R\n"
78 "EmqpdRR7k8dJr3RTUCyjzf/C+qiCzcmhCFYGN3KRHA6MeEnkvRuBogX4i5EG1k5l\n"
79 "/5t+YBTZBnqXKWlzQLKoUAiMLPg0eRWh+6q7H4N7kdWWBmTpako7TEqpIwuEnPGx\n"
80 "u3EPuTR+LN6lF55WBePbCHccUHUQaXuav18NuDkcJmCiMArK9SKb+h0RqLD6oMI/\n"
81 "dKD6n8cZXeMBkK+C8U/K0sN2hFHACsu30b9XfdnljgP9v+BP8GhnB0nCB6tNBCPo\n"
82 "32srOwECgYEAxWh3iBT4lWqL6bZavVbnhmvtif4nHv2t2/hOs/CAq8iLAw0oWGZc\n"
83 "+JEZTUDMvFRlulr0kcaWra+4fN3OmJnjeuFXZq52lfMgXBIKBmoSaZpIh2aDY1Rd\n"
84 "RbEse7nQl9hTEPmYspiXLGtnAXW7HuWqVfFFP3ya8rUS3t4d07Hig8ECgYEA6ou6\n"
85 "OHiBRTbtDqLIv8NghARc/AqwNWgEc9PelCPe5bdCOLBEyFjqKiT2MttnSSUc2Zob\n"
86 "XhYkHC6zN1Mlq30N0e3Q61YK9LxMdU1vsluXxNq2rfK1Scb1oOlOOtlbV3zA3VRF\n"
87 "hV3t1nOA9tFmUrwZi0CUMWJE/zbPAyhwWotKyZkCgYEAh0kFicPdbABdrCglXVae\n"
88 "SnfSjVwYkVuGd5Ze0WADvjYsVkYBHTvhgRNnRJMg+/vWz3Sf4Ps4rgUbqK8Vc20b\n"
89 "AU5G6H6tlCvPRGm0ZxrwTWDHTcuKRVs+pJE8C/qWoklE/AAhjluWVoGwUMbPGuiH\n"
90 "6Gf1bgHF6oj/Sq7rv/VLZ8ECgYBeq7ml05YyLuJutuwa4yzQ/MXfghzv4aVyb0F3\n"
91 "QCdXR6o2IYgR6jnSewrZKlA9aPqFJrwHNR6sNXlnSmt5Fcf/RWO/qgJQGLUv3+rG\n"
92 "7kuLTNDR05azSdiZc7J89ID3Bkb+z2YkV+6JUiPq/Ei1+nDBEXb/m+/HqALU/nyj\n"
93 "P3gXeQKBgBusb8Rbd+KgxSA0hwY6aoRTPRt8LNvXdsB9vRcKKHUFQvxUWiUSS+L9\n"
94 "/Qu1sJbrUquKOHqksV5wCnWnAKyJNJlhHuBToqQTgKXjuNmVdYSe631saiI7PHyC\n"
95 "eRJ6DxULPxABytJrYCRrNqmXi5TCiqR2mtfalEMOPxz8rUU8dYyx\n"
96 "-----END RSA PRIVATE KEY-----\n";
97
98 static ssize_t
file_reader(void * cls,uint64_t pos,char * buf,size_t max)99 file_reader (void *cls, uint64_t pos, char *buf, size_t max)
100 {
101 FILE *file = cls;
102
103 (void) fseek (file, pos, SEEK_SET);
104 return fread (buf, 1, max, file);
105 }
106
107 static void
file_free_callback(void * cls)108 file_free_callback (void *cls)
109 {
110 FILE *file = cls;
111 fclose (file);
112 }
113
114 /* HTTP access handler call back */
115 static int
http_ahc(void * cls,struct MHD_Connection * connection,const char * url,const char * method,const char * version,const char * upload_data,size_t * upload_data_size,void ** ptr)116 http_ahc (void *cls,
117 struct MHD_Connection *connection,
118 const char *url,
119 const char *method,
120 const char *version,
121 const char *upload_data,
122 size_t *upload_data_size, void **ptr)
123 {
124 static int aptr;
125 struct MHD_Response *response;
126 int ret;
127 FILE *file;
128 struct stat buf;
129
130 if (0 != strcmp (method, MHD_HTTP_METHOD_GET))
131 return MHD_NO; /* unexpected method */
132 if (&aptr != *ptr)
133 {
134 /* do never respond on first call */
135 *ptr = &aptr;
136 return MHD_YES;
137 }
138 *ptr = NULL; /* reset when done */
139
140 if ( (0 == stat (&url[1], &buf)) &&
141 (S_ISREG (buf.st_mode)) )
142 file = fopen (&url[1], "rb");
143 else
144 file = NULL;
145 if (file == NULL)
146 {
147 response = MHD_create_response_from_buffer (strlen (EMPTY_PAGE),
148 (void *) EMPTY_PAGE,
149 MHD_RESPMEM_PERSISTENT);
150 ret = MHD_queue_response (connection, MHD_HTTP_NOT_FOUND, response);
151 MHD_destroy_response (response);
152 }
153 else
154 {
155 response = MHD_create_response_from_callback (buf.st_size, 32 * 1024, /* 32k PAGE_NOT_FOUND size */
156 &file_reader, file,
157 &file_free_callback);
158 if (response == NULL)
159 {
160 fclose (file);
161 return MHD_NO;
162 }
163 ret = MHD_queue_response (connection, MHD_HTTP_OK, response);
164 MHD_destroy_response (response);
165 }
166 return ret;
167 }
168
169 int
main(int argc,char * const * argv)170 main (int argc, char *const *argv)
171 {
172 struct MHD_Daemon *TLS_daemon;
173
174 if (argc == 2)
175 {
176 /* TODO check if this is truly necessary - disallow usage of the blocking /dev/random */
177 /* gcry_control(GCRYCTL_ENABLE_QUICK_RANDOM, 0); */
178 TLS_daemon =
179 MHD_start_daemon (MHD_USE_THREAD_PER_CONNECTION | MHD_USE_DEBUG |
180 MHD_USE_SSL, atoi (argv[1]), NULL, NULL, &http_ahc,
181 NULL, MHD_OPTION_CONNECTION_TIMEOUT, 256,
182 MHD_OPTION_HTTPS_MEM_KEY, key_pem,
183 MHD_OPTION_HTTPS_MEM_CERT, cert_pem,
184 MHD_OPTION_END);
185 }
186 else
187 {
188 printf ("Usage: %s HTTP-PORT\n", argv[0]);
189 return 1;
190 }
191
192 if (TLS_daemon == NULL)
193 {
194 fprintf (stderr, "Error: failed to start TLS_daemon\n");
195 return 1;
196 }
197 else
198 {
199 printf ("MHD daemon listening on port %d\n", atoi (argv[1]));
200 }
201
202 (void) getc (stdin);
203
204 MHD_stop_daemon (TLS_daemon);
205
206 return 0;
207 }
208