mirror of
https://github.com/warmcat/libwebsockets.git
synced 2025-03-16 00:00:07 +01:00
4804624905
lws_ss_set_metadata can fail... eg, due to transient OOM situation... if it does, caller must take appropriate action like disconnect and retry. So mark the api as requiring the result checking, and make sure all the examples do it.
564 lines
19 KiB
C
564 lines
19 KiB
C
/*
|
|
* lws-minimal-secure-streams-post
|
|
*
|
|
* Written in 2010-2020 by Andy Green <andy@warmcat.com>
|
|
*
|
|
* This file is made available under the Creative Commons CC0 1.0
|
|
* Universal Public Domain Dedication.
|
|
*
|
|
*
|
|
* This demonstrates a minimal http client using secure streams api.
|
|
*
|
|
* It visits https://warmcat.com/ and receives the html page there.
|
|
*
|
|
* This example is built two different ways from the same source... one includes
|
|
* the policy everything needed to fulfil the stream directly. The other -client
|
|
* variant has no policy itself and some other minor init changes, and connects
|
|
* to the -proxy example to actually get the connection done.
|
|
*
|
|
* In the -client build case, the example does not even init the tls libraries
|
|
* since the proxy part will take care of all that.
|
|
*/
|
|
|
|
#include <libwebsockets.h>
|
|
#include <string.h>
|
|
#include <signal.h>
|
|
#include <assert.h>
|
|
|
|
/*
|
|
* uncomment to force network traffic through 127.0.0.1:1080
|
|
*
|
|
* On your local machine, you can run a SOCKS5 proxy like this
|
|
*
|
|
* $ ssh -N -D 0.0.0.0:1080 localhost -v
|
|
*
|
|
* If enabled, this also fetches a remote policy that also
|
|
* specifies that all traffic should go through the remote
|
|
* proxy.
|
|
*/
|
|
// #define VIA_LOCALHOST_SOCKS
|
|
|
|
static int interrupted, bad = 1, force_cpd_fail_portal,
|
|
force_cpd_fail_no_internet;
|
|
static unsigned int timeout_ms = 3000;
|
|
static lws_state_notify_link_t nl;
|
|
|
|
static const char * const postbody =
|
|
"--boundary\r\n"
|
|
"Content-Disposition: form-data; name=\"text\"\r\n"
|
|
"\r\n"
|
|
"value1\r\n"
|
|
"--boundary\r\n"
|
|
"Content-Disposition: form-data; "
|
|
"name=\"field2\"; filename=\"example.txt\"\r\n"
|
|
"\r\n"
|
|
"value2\r\n"
|
|
"00-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"01-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"02-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"03-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"04-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"05-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"06-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"07-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"08-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"09-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"0a-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"0b-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"0c-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"0d-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"0e-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"0f-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"10-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"11-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"12-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"13-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"14-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"15-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"16-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"17-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"18-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"19-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"1a-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"1b-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"1c-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"1d-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"1e-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"1f-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"20-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"21-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"22-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"23-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"24-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"25-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"26-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"27-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"28-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"29-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"2a-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"2b-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"2c-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"2d-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"2e-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"2f-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"30-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"31-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"32-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"33-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"34-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"35-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"36-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"37-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"38-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"39-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"3a-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"3b-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"3c-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"3d-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"3e-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"3f-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"40-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"41-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"42-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"43-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"44-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"45-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"46-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"47-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"48-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"49-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"4a-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"4b-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"4c-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"4d-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"4e-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"4f-0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\r\n"
|
|
"--boundary--\r\n";
|
|
|
|
/*
|
|
* If the -proxy app is fulfilling our connection, then we don't need to have
|
|
* the policy in the client.
|
|
*
|
|
* When we build with LWS_SS_USE_SSPC, the apis hook up to a proxy process over
|
|
* a Unix Domain Socket. To test that, you need to separately run the
|
|
* ./lws-minimal-secure-streams-proxy test app on the same machine.
|
|
*/
|
|
|
|
#if !defined(LWS_SS_USE_SSPC)
|
|
static const char * const default_ss_policy =
|
|
"{"
|
|
"\"release\":" "\"01234567\","
|
|
"\"product\":" "\"myproduct\","
|
|
"\"schema-version\":" "1,"
|
|
#if defined(VIA_LOCALHOST_SOCKS)
|
|
"\"via-socks5\":" "\"127.0.0.1:1080\","
|
|
#endif
|
|
|
|
"\"retry\": [" /* named backoff / retry strategies */
|
|
"{\"default\": {"
|
|
"\"backoff\": [" "1000,"
|
|
"2000,"
|
|
"3000,"
|
|
"5000,"
|
|
"10000"
|
|
"],"
|
|
"\"conceal\":" "5,"
|
|
"\"jitterpc\":" "20,"
|
|
"\"svalidping\":" "30,"
|
|
"\"svalidhup\":" "35"
|
|
"}}"
|
|
"],"
|
|
"\"certs\": [" /* named individual certificates in BASE64 DER */
|
|
/*
|
|
* Let's Encrypt certs for warmcat.com / libwebsockets.org
|
|
*
|
|
* We fetch the real policy from there using SS and switch to
|
|
* using that.
|
|
*/
|
|
"{\"dst_root_x3\": \""
|
|
"MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/"
|
|
"MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT"
|
|
"DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow"
|
|
"PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD"
|
|
"Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB"
|
|
"AN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmTrE4O"
|
|
"rz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq"
|
|
"OLl5CjH9UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b"
|
|
"xiqKqy69cK3FCxolkHRyxXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw"
|
|
"7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD"
|
|
"aeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNV"
|
|
"HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQMA0GCSqG"
|
|
"SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69"
|
|
"ikugdB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXr"
|
|
"AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZz"
|
|
"R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5"
|
|
"JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo"
|
|
"Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ"
|
|
"\"}"
|
|
"],"
|
|
"\"trust_stores\": [" /* named cert chains */
|
|
"{"
|
|
"\"name\": \"le_via_dst\","
|
|
"\"stack\": ["
|
|
"\"dst_root_x3\""
|
|
"]"
|
|
"}"
|
|
"],"
|
|
"\"s\": ["
|
|
/*
|
|
* "fetch_policy" decides from where the real policy
|
|
* will be fetched, if present. Otherwise the initial
|
|
* policy is treated as the whole, hardcoded, policy.
|
|
*/
|
|
"{\"fetch_policy\": {"
|
|
"\"endpoint\":" "\"warmcat.com\","
|
|
"\"port\":" "443,"
|
|
"\"protocol\":" "\"h1\","
|
|
"\"http_method\":" "\"GET\","
|
|
#if defined(VIA_LOCALHOST_SOCKS)
|
|
"\"http_url\":" "\"policy/minimal-proxy-socks.json\","
|
|
#else
|
|
"\"http_url\":" "\"policy/minimal-proxy.json\","
|
|
#endif
|
|
"\"tls\":" "true,"
|
|
"\"opportunistic\":" "true,"
|
|
"\"retry\":" "\"default\","
|
|
"\"tls_trust_store\":" "\"le_via_dst\""
|
|
"}},{"
|
|
/*
|
|
* "captive_portal_detect" describes
|
|
* what to do in order to check if the path to
|
|
* the Internet is being interrupted by a
|
|
* captive portal. If there's a larger policy
|
|
* fetched from elsewhere, it should also include
|
|
* this since it needs to be done at least after
|
|
* every DHCP acquisition
|
|
*/
|
|
"\"captive_portal_detect\": {"
|
|
"\"endpoint\": \"connectivitycheck.android.com\","
|
|
"\"http_url\": \"generate_204\","
|
|
"\"port\": 80,"
|
|
"\"protocol\": \"h1\","
|
|
"\"http_method\": \"GET\","
|
|
"\"opportunistic\": true,"
|
|
"\"http_expect\": 204,"
|
|
"\"http_fail_redirect\": true"
|
|
"}}"
|
|
"]}"
|
|
;
|
|
|
|
#endif
|
|
|
|
typedef struct myss {
|
|
struct lws_ss_handle *ss;
|
|
void *opaque_data;
|
|
/* ... application specific state ... */
|
|
lws_sorted_usec_list_t sul;
|
|
|
|
size_t pos;
|
|
size_t len;
|
|
} myss_t;
|
|
|
|
#if !defined(LWS_SS_USE_SSPC)
|
|
|
|
static const char *canned_root_token_payload =
|
|
"grant_type=refresh_token"
|
|
"&refresh_token=Atzr|IwEBIJedGXjDqsU_vMxykqOMg"
|
|
"SHfYe3CPcedueWEMWSDMaDnEmiW8RlR1Kns7Cb4B-TOSnqp7ifVsY4BMY2B8tpHfO39XP"
|
|
"zfu9HapGjTR458IyHX44FE71pWJkGZ79uVBpljP4sazJuk8XS3Oe_yLnm_DIO6fU1nU3Y"
|
|
"0flYmsOiOAQE_gRk_pdlmEtHnpMA-9rLw3mkY5L89Ty9kUygBsiFaYatouROhbsTn8-jW"
|
|
"k1zZLUDpT6ICtBXSnrCIg0pUbZevPFhTwdXd6eX-u4rq0W-XaDvPWFO7au-iPb4Zk5eZE"
|
|
"iX6sissYrtNmuEXc2uHu7MnQO1hHCaTdIO2CANVumf-PHSD8xseamyh04sLV5JgFzY45S"
|
|
"KvKMajiUZuLkMokOx86rjC2Hdkx5DO7G-dbG1ufBDG-N79pFMSs7Ck5pc283IdLoJkCQc"
|
|
"AGvTX8o8I29QqkcGou-9TKhOJmpX8As94T61ok0UqqEKPJ7RhfQHHYdCtsdwxgvfVr9qI"
|
|
"xL_hDCcTho8opCVX-6QhJHl6SQFlTw13"
|
|
"&client_id="
|
|
"amzn1.application-oa2-client.4823334c434b4190a2b5a42c07938a2d";
|
|
|
|
#endif
|
|
|
|
/* secure streams payload interface */
|
|
|
|
static lws_ss_state_return_t
|
|
myss_rx(void *userobj, const uint8_t *buf, size_t len, int flags)
|
|
{
|
|
// myss_t *m = (myss_t *)userobj;
|
|
|
|
lwsl_user("%s: len %d, flags: %d\n", __func__, (int)len, flags);
|
|
lwsl_hexdump_info(buf, len);
|
|
|
|
/*
|
|
* If we received the whole message, for our example it means
|
|
* we are done.
|
|
*/
|
|
if (flags & LWSSS_FLAG_EOM) {
|
|
bad = 0;
|
|
interrupted = 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static lws_ss_state_return_t
|
|
myss_tx(void *userobj, lws_ss_tx_ordinal_t ord, uint8_t *buf, size_t *len,
|
|
int *flags)
|
|
{
|
|
myss_t *m = (myss_t *)userobj;
|
|
|
|
if (m->pos == m->len)
|
|
return LWSSSSRET_TX_DONT_SEND;
|
|
|
|
if (m->len - m->pos < *len)
|
|
*len = m->len - m->pos;
|
|
|
|
*flags = 0;
|
|
if (!m->pos)
|
|
*flags |= LWSSS_FLAG_SOM;
|
|
|
|
memcpy(buf, postbody + m->pos, *len);
|
|
|
|
m->pos += *len;
|
|
if (m->pos == m->len)
|
|
*flags |= LWSSS_FLAG_EOM;
|
|
else
|
|
lws_ss_request_tx(m->ss);
|
|
|
|
lwsl_notice("%s: write %d flags %d\n", __func__, (int)*len, (int)*flags);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static lws_ss_state_return_t
|
|
myss_state(void *userobj, void *sh, lws_ss_constate_t state,
|
|
lws_ss_tx_ordinal_t ack)
|
|
{
|
|
myss_t *m = (myss_t *)userobj;
|
|
|
|
lwsl_user("%s: h %p, %s, ord 0x%x\n", __func__, m->ss,
|
|
lws_ss_state_name((int)state), (unsigned int)ack);
|
|
|
|
switch (state) {
|
|
case LWSSSCS_CREATING:
|
|
|
|
/*
|
|
* CREATING is only coming after we have asked the upstream
|
|
* proxy to create the stream and it has been allowed.
|
|
*/
|
|
|
|
if (lws_ss_set_metadata(m->ss, "ctype",
|
|
"multipart/form-data;boundary=\"boundary\"",
|
|
39))
|
|
return LWSSSSRET_DISCONNECT_ME;
|
|
|
|
/* provide a hint about the payload size */
|
|
m->pos = 0;
|
|
m->len = strlen(postbody);
|
|
lws_ss_request_tx_len(m->ss, (unsigned long)strlen(postbody));
|
|
break;
|
|
case LWSSSCS_CONNECTED:
|
|
lws_ss_request_tx(m->ss);
|
|
break;
|
|
case LWSSSCS_ALL_RETRIES_FAILED:
|
|
/* if we're out of retries, we want to close the app and FAIL */
|
|
interrupted = 1;
|
|
break;
|
|
case LWSSSCS_QOS_ACK_REMOTE:
|
|
lwsl_notice("%s: LWSSSCS_QOS_ACK_REMOTE\n", __func__);
|
|
break;
|
|
|
|
case LWSSSCS_TIMEOUT:
|
|
lwsl_notice("%s: LWSSSCS_TIMEOUT\n", __func__);
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int
|
|
app_system_state_nf(lws_state_manager_t *mgr, lws_state_notify_link_t *link,
|
|
int current, int target)
|
|
{
|
|
struct lws_context *context = lws_system_context_from_system_mgr(mgr);
|
|
#if !defined(LWS_SS_USE_SSPC)
|
|
|
|
lws_system_blob_t *ab = lws_system_get_blob(context,
|
|
LWS_SYSBLOB_TYPE_AUTH, 1 /* AUTH_IDX_ROOT */);
|
|
size_t size;
|
|
#endif
|
|
|
|
/*
|
|
* For the things we care about, let's notice if we are trying to get
|
|
* past them when we haven't solved them yet, and make the system
|
|
* state wait while we trigger the dependent action.
|
|
*/
|
|
switch (target) {
|
|
|
|
#if !defined(LWS_SS_USE_SSPC)
|
|
|
|
case LWS_SYSTATE_REGISTERED:
|
|
size = lws_system_blob_get_size(ab);
|
|
if (size)
|
|
break;
|
|
|
|
/* let's register our canned root token so auth can use it */
|
|
lws_system_blob_direct_set(ab,
|
|
(const uint8_t *)canned_root_token_payload,
|
|
strlen(canned_root_token_payload));
|
|
break;
|
|
|
|
#endif
|
|
|
|
case LWS_SYSTATE_OPERATIONAL:
|
|
if (current == LWS_SYSTATE_OPERATIONAL) {
|
|
lws_ss_info_t ssi;
|
|
|
|
/* We're making an outgoing secure stream ourselves */
|
|
|
|
memset(&ssi, 0, sizeof(ssi));
|
|
ssi.handle_offset = offsetof(myss_t, ss);
|
|
ssi.opaque_user_data_offset = offsetof(myss_t,
|
|
opaque_data);
|
|
ssi.rx = myss_rx;
|
|
ssi.tx = myss_tx;
|
|
ssi.state = myss_state;
|
|
ssi.user_alloc = sizeof(myss_t);
|
|
ssi.streamtype = "minpost";
|
|
|
|
if (lws_ss_create(context, 0, &ssi, NULL, NULL,
|
|
NULL, NULL)) {
|
|
lwsl_err("%s: failed to create secure stream\n",
|
|
__func__);
|
|
return -1;
|
|
}
|
|
}
|
|
break;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static lws_state_notify_link_t * const app_notifier_list[] = {
|
|
&nl, NULL
|
|
};
|
|
|
|
static void
|
|
sigint_handler(int sig)
|
|
{
|
|
interrupted = 1;
|
|
}
|
|
|
|
int main(int argc, const char **argv)
|
|
{
|
|
struct lws_context_creation_info info;
|
|
struct lws_context *context;
|
|
const char *p;
|
|
int n = 0;
|
|
|
|
signal(SIGINT, sigint_handler);
|
|
|
|
memset(&info, 0, sizeof info);
|
|
lws_cmdline_option_handle_builtin(argc, argv, &info);
|
|
|
|
lwsl_user("LWS secure streams test client [-d<verb>]\n");
|
|
|
|
/* these options are mutually exclusive if given */
|
|
|
|
if (lws_cmdline_option(argc, argv, "--force-portal"))
|
|
force_cpd_fail_portal = 1;
|
|
|
|
if (lws_cmdline_option(argc, argv, "--force-no-internet"))
|
|
force_cpd_fail_no_internet = 1;
|
|
|
|
if ((p = lws_cmdline_option(argc, argv, "--timeout_ms")))
|
|
timeout_ms = (unsigned int)atoi(p);
|
|
|
|
info.fd_limit_per_thread = 1 + 6 + 1;
|
|
info.port = CONTEXT_PORT_NO_LISTEN;
|
|
#if defined(LWS_SS_USE_SSPC)
|
|
info.protocols = lws_sspc_protocols;
|
|
{
|
|
const char *p;
|
|
|
|
/* connect to ssproxy via UDS by default, else via
|
|
* tcp connection to this port */
|
|
if ((p = lws_cmdline_option(argc, argv, "-p")))
|
|
info.ss_proxy_port = (uint16_t)atoi(p);
|
|
|
|
/* UDS "proxy.ss.lws" in abstract namespace, else this socket
|
|
* path; when -p given this can specify the network interface
|
|
* to bind to */
|
|
if ((p = lws_cmdline_option(argc, argv, "-i")))
|
|
info.ss_proxy_bind = p;
|
|
|
|
/* if -p given, -a specifies the proxy address to connect to */
|
|
if ((p = lws_cmdline_option(argc, argv, "-a")))
|
|
info.ss_proxy_address = p;
|
|
}
|
|
#else
|
|
info.pss_policies_json = default_ss_policy;
|
|
info.options = LWS_SERVER_OPTION_EXPLICIT_VHOSTS |
|
|
LWS_SERVER_OPTION_DO_SSL_GLOBAL_INIT;
|
|
#endif
|
|
|
|
/* integrate us with lws system state management when context created */
|
|
|
|
nl.name = "app";
|
|
nl.notify_cb = app_system_state_nf;
|
|
info.register_notifier_list = app_notifier_list;
|
|
|
|
/* create the context */
|
|
|
|
context = lws_create_context(&info);
|
|
if (!context) {
|
|
lwsl_err("lws init failed\n");
|
|
return 1;
|
|
}
|
|
|
|
#if !defined(LWS_SS_USE_SSPC)
|
|
/*
|
|
* If we're being a proxied client, the proxy does all this
|
|
*/
|
|
|
|
/*
|
|
* Set the related lws_system blobs
|
|
*
|
|
* ...direct_set() sets a pointer, so the thing pointed to has to have
|
|
* a suitable lifetime, eg, something that already exists on the heap or
|
|
* a const string in .rodata like this
|
|
*/
|
|
|
|
lws_system_blob_direct_set(lws_system_get_blob(context,
|
|
LWS_SYSBLOB_TYPE_DEVICE_SERIAL, 0),
|
|
(const uint8_t *)"SN12345678", 10);
|
|
lws_system_blob_direct_set(lws_system_get_blob(context,
|
|
LWS_SYSBLOB_TYPE_DEVICE_FW_VERSION, 0),
|
|
(const uint8_t *)"v0.01", 5);
|
|
|
|
/*
|
|
* ..._heap_append() appends to a buflist kind of arrangement on heap,
|
|
* just one block is fine, otherwise it will concatenate the fragments
|
|
* in the order they were appended (and take care of freeing them at
|
|
* context destroy time). ..._heap_empty() is also available to remove
|
|
* everything that was already allocated.
|
|
*
|
|
* Here we use _heap_append() just so it's tested as well as direct set.
|
|
*/
|
|
|
|
lws_system_blob_heap_append(lws_system_get_blob(context,
|
|
LWS_SYSBLOB_TYPE_DEVICE_TYPE, 0),
|
|
(const uint8_t *)"spacerocket", 11);
|
|
#endif
|
|
|
|
/* the event loop */
|
|
|
|
while (n >= 0 && !interrupted)
|
|
n = lws_service(context, 0);
|
|
|
|
lws_context_destroy(context);
|
|
|
|
lwsl_user("Completed: %s\n", bad ? "failed" : "OK");
|
|
|
|
return bad;
|
|
}
|