blob: d051e6d34764dad9eacef286400eb5dfeaa33660 [file] [log] [blame]
Radek Krejci206fcd62015-10-07 15:42:48 +02001/**
2 * \file session_p.h
3 * \author Radek Krejci <rkrejci@cesnet.cz>
Michal Vaskob48aa812016-01-18 14:13:09 +01004 * \author Michal Vasko <mvasko@cesnet.cz>
Radek Krejci206fcd62015-10-07 15:42:48 +02005 * \brief libnetconf2 session manipulation
6 *
Michal Vasko4c1fb492017-01-30 14:31:07 +01007 * Copyright (c) 2017 CESNET, z.s.p.o.
Radek Krejci206fcd62015-10-07 15:42:48 +02008 *
Radek Krejci9b81f5b2016-02-24 13:14:49 +01009 * This source code is licensed under BSD 3-Clause License (the "License").
10 * You may not use this file except in compliance with the License.
11 * You may obtain a copy of the License at
Michal Vaskoafd416b2016-02-25 14:51:46 +010012 *
Radek Krejci9b81f5b2016-02-24 13:14:49 +010013 * https://opensource.org/licenses/BSD-3-Clause
Radek Krejci206fcd62015-10-07 15:42:48 +020014 */
15
16#ifndef NC_SESSION_PRIVATE_H_
17#define NC_SESSION_PRIVATE_H_
18
Radek Krejcife0b3472015-10-12 13:43:42 +020019#include <stdint.h>
Radek Krejci206fcd62015-10-07 15:42:48 +020020#include <pthread.h>
21
Michal Vasko4ef14932015-12-04 11:09:10 +010022#include <libyang/libyang.h>
Michal Vasko7bcb48e2016-01-15 10:28:54 +010023
Michal Vasko4ef14932015-12-04 11:09:10 +010024#include "libnetconf.h"
Michal Vasko7bcb48e2016-01-15 10:28:54 +010025#include "netconf.h"
Michal Vasko4ef14932015-12-04 11:09:10 +010026#include "session.h"
Michal Vaskoa8ad4482016-01-28 14:25:54 +010027#include "messages_client.h"
Michal Vasko4ef14932015-12-04 11:09:10 +010028
Radek Krejci53691be2016-02-22 13:58:37 +010029#ifdef NC_ENABLED_SSH
Michal Vasko4ef14932015-12-04 11:09:10 +010030
Radek Krejci206fcd62015-10-07 15:42:48 +020031# include <libssh/libssh.h>
32# include <libssh/callbacks.h>
Michal Vasko086311b2016-01-08 09:53:11 +010033# include <libssh/server.h>
Michal Vasko7b62fed2015-10-26 15:39:46 +010034
35/* seconds */
Michal Vaskoc111ac52015-12-08 14:36:36 +010036# define NC_SSH_TIMEOUT 10
Michal Vasko5c2f7952016-01-22 13:16:31 +010037/* number of all supported authentication methods */
Michal Vaskoc111ac52015-12-08 14:36:36 +010038# define NC_SSH_AUTH_COUNT 3
Michal Vasko7b62fed2015-10-26 15:39:46 +010039
Michal Vasko7227f352016-02-01 12:11:40 +010040/* ACCESS unlocked */
Michal Vasko3031aae2016-01-27 16:07:18 +010041struct nc_client_ssh_opts {
Michal Vasko7b62fed2015-10-26 15:39:46 +010042 /* SSH authentication method preferences */
43 struct {
44 NC_SSH_AUTH_TYPE type;
Michal Vasko3031aae2016-01-27 16:07:18 +010045 int16_t value;
Michal Vaskoc111ac52015-12-08 14:36:36 +010046 } auth_pref[NC_SSH_AUTH_COUNT];
Michal Vasko7b62fed2015-10-26 15:39:46 +010047
48 /* SSH key pairs */
49 struct {
50 char *pubkey_path;
51 char *privkey_path;
Michal Vasko3031aae2016-01-27 16:07:18 +010052 int8_t privkey_crypt;
Michal Vasko7b62fed2015-10-26 15:39:46 +010053 } *keys;
Michal Vasko3031aae2016-01-27 16:07:18 +010054 uint16_t key_count;
55
Michal Vasko30e2c872016-02-18 10:03:21 +010056 /* SSH authentication callbacks */
Radek Krejci90a84a22017-05-25 13:53:00 +020057 int (*auth_hostkey_check)(const char *, ssh_session, void *);
58 char *(*auth_password)(const char *, const char *, void *);
59 char *(*auth_interactive)(const char *, const char *, const char *, int, void *);
60 char *(*auth_privkey_passphrase)(const char *, void *);
61
62 /* private data for the callbacks */
63 void *auth_hostkey_check_priv;
64 void *auth_password_priv;
65 void *auth_interactive_priv;
66 void *auth_privkey_passphrase_priv;
Michal Vasko30e2c872016-02-18 10:03:21 +010067
Michal Vasko3031aae2016-01-27 16:07:18 +010068 char *username;
Michal Vasko7b62fed2015-10-26 15:39:46 +010069};
70
Michal Vasko7227f352016-02-01 12:11:40 +010071/* ACCESS locked, separate locks */
Michal Vasko3031aae2016-01-27 16:07:18 +010072struct nc_server_ssh_opts {
Michal Vaskoe2713da2016-08-22 16:06:40 +020073 /* SSH bind options */
74 const char **hostkeys;
75 uint8_t hostkey_count;
76 const char *banner;
Michal Vasko086311b2016-01-08 09:53:11 +010077
Michal Vasko086311b2016-01-08 09:53:11 +010078 int auth_methods;
79 uint16_t auth_attempts;
80 uint16_t auth_timeout;
81};
82
Radek Krejci53691be2016-02-22 13:58:37 +010083#endif /* NC_ENABLED_SSH */
Radek Krejci206fcd62015-10-07 15:42:48 +020084
Radek Krejci53691be2016-02-22 13:58:37 +010085#ifdef NC_ENABLED_TLS
Michal Vasko4ef14932015-12-04 11:09:10 +010086
Michal Vaskoc111ac52015-12-08 14:36:36 +010087# include <openssl/bio.h>
88# include <openssl/ssl.h>
Michal Vasko11d4cdb2015-10-29 11:42:52 +010089
Michal Vasko7227f352016-02-01 12:11:40 +010090/* ACCESS unlocked */
Michal Vasko3031aae2016-01-27 16:07:18 +010091struct nc_client_tls_opts {
92 char *cert_path;
93 char *key_path;
94 char *ca_file;
95 char *ca_dir;
96 int8_t tls_ctx_change;
Michal Vasko11d4cdb2015-10-29 11:42:52 +010097 SSL_CTX *tls_ctx;
Michal Vasko3031aae2016-01-27 16:07:18 +010098
99 char *crl_file;
100 char *crl_dir;
101 int8_t crl_store_change;
102 X509_STORE *crl_store;
Michal Vasko11d4cdb2015-10-29 11:42:52 +0100103};
104
Michal Vasko7227f352016-02-01 12:11:40 +0100105/* ACCESS locked, separate locks */
Michal Vasko3031aae2016-01-27 16:07:18 +0100106struct nc_server_tls_opts {
Michal Vasko4c1fb492017-01-30 14:31:07 +0100107 const char *server_cert;
108 const char **trusted_cert_lists;
109 uint16_t trusted_cert_list_count;
Michal Vaskoe2713da2016-08-22 16:06:40 +0200110 const char *trusted_ca_file;
111 const char *trusted_ca_dir;
Michal Vasko0457bb42016-01-08 15:49:13 +0100112 X509_STORE *crl_store;
113
Michal Vasko5e3f3392016-01-20 11:13:01 +0100114 struct nc_ctn {
Michal Vasko0457bb42016-01-08 15:49:13 +0100115 uint32_t id;
116 const char *fingerprint;
Michal Vaskoc14e3c82016-01-11 16:14:30 +0100117 NC_TLS_CTN_MAPTYPE map_type;
Michal Vasko0457bb42016-01-08 15:49:13 +0100118 const char *name;
Michal Vasko5e3f3392016-01-20 11:13:01 +0100119 struct nc_ctn *next;
Michal Vasko0457bb42016-01-08 15:49:13 +0100120 } *ctn;
Michal Vasko0457bb42016-01-08 15:49:13 +0100121};
122
Radek Krejci53691be2016-02-22 13:58:37 +0100123#endif /* NC_ENABLED_TLS */
Radek Krejci43390242015-10-08 15:34:04 +0200124
Michal Vasko7227f352016-02-01 12:11:40 +0100125/* ACCESS unlocked */
Michal Vasko3031aae2016-01-27 16:07:18 +0100126struct nc_client_opts {
127 char *schema_searchpath;
128
129 struct nc_bind {
130 const char *address;
131 uint16_t port;
132 int sock;
Michal Vasko0a3f3752016-10-13 14:58:38 +0200133 int pollin;
Michal Vasko3031aae2016-01-27 16:07:18 +0100134 } *ch_binds;
Michal Vasko2e6defd2016-10-07 15:48:15 +0200135 NC_TRANSPORT_IMPL *ch_bind_ti;
Michal Vasko3031aae2016-01-27 16:07:18 +0100136 uint16_t ch_bind_count;
137};
138
Radek Krejci62aa0642017-05-25 16:33:49 +0200139/* ACCESS unlocked */
140struct nc_client_context {
Radek Krejci5cebc6b2017-05-26 13:24:38 +0200141 unsigned int refcount;
Radek Krejci62aa0642017-05-25 16:33:49 +0200142 struct nc_client_opts opts;
143#ifdef NC_ENABLED_SSH
144 struct nc_client_ssh_opts ssh_opts;
145 struct nc_client_ssh_opts ssh_ch_opts;
146#endif /* NC_ENABLED_SSH */
147#ifdef NC_ENABLED_TLS
148 struct nc_client_tls_opts tls_opts;
149 struct nc_client_tls_opts tls_ch_opts;
150#endif /* NC_ENABLED_TLS */
151};
152
Michal Vasko0457bb42016-01-08 15:49:13 +0100153struct nc_server_opts {
Michal Vaskoa43589b2016-02-17 13:24:59 +0100154 /* ACCESS unlocked (dictionary locked internally in libyang) */
Michal Vasko0457bb42016-01-08 15:49:13 +0100155 struct ly_ctx *ctx;
156
Michal Vasko7227f352016-02-01 12:11:40 +0100157 /* ACCESS unlocked */
Michal Vasko0457bb42016-01-08 15:49:13 +0100158 NC_WD_MODE wd_basic_mode;
159 int wd_also_supported;
Radek Krejci658782b2016-12-04 22:04:55 +0100160 unsigned int capabilities_count;
161 const char **capabilities;
Michal Vasko0457bb42016-01-08 15:49:13 +0100162
Michal Vasko7227f352016-02-01 12:11:40 +0100163 /* ACCESS unlocked */
Michal Vasko0457bb42016-01-08 15:49:13 +0100164 uint16_t hello_timeout;
165 uint16_t idle_timeout;
Michal Vasko7060bcf2016-11-28 14:48:11 +0100166#ifdef NC_ENABLED_TLS
167 int (*user_verify_clb)(const struct nc_session *session);
Michal Vasko4c1fb492017-01-30 14:31:07 +0100168
169 int (*server_cert_clb)(const char *name, void *user_data, char **cert_path, char **cert_data,char **privkey_path,
170 char **privkey_data, int *privkey_data_rsa);
171 void *server_cert_data;
172 void (*server_cert_data_free)(void *data);
173
174 int (*trusted_cert_list_clb)(const char *name, void *user_data, char ***cert_paths, int *cert_path_count,
175 char ***cert_data, int *cert_data_count);
176 void *trusted_cert_list_data;
177 void (*trusted_cert_list_data_free)(void *data);
Michal Vasko7060bcf2016-11-28 14:48:11 +0100178#endif
Michal Vasko0457bb42016-01-08 15:49:13 +0100179
Michal Vasko17dfda92016-12-01 14:06:16 +0100180#ifdef NC_ENABLED_SSH
181 /* ACCESS locked with authkey_lock */
182 struct {
183 const char *path;
184 const char *base64;
185 NC_SSH_KEY_TYPE type;
186 const char *username;
187 } *authkeys;
188 uint16_t authkey_count;
189 pthread_mutex_t authkey_lock;
Michal Vasko4c1fb492017-01-30 14:31:07 +0100190
191 int (*hostkey_clb)(const char *name, void *user_data, char **privkey_path, char **privkey_data, int *privkey_data_rsa);
192 void *hostkey_data;
193 void (*hostkey_data_free)(void *data);
Michal Vasko17dfda92016-12-01 14:06:16 +0100194#endif
195
Michal Vaskoade892d2017-02-22 13:40:35 +0100196 /* ACCESS locked, add/remove endpts/binds - bind_lock + WRITE endpt_lock (strict order!)
197 * modify endpts - WRITE endpt_lock
198 * access endpts - READ endpt_lock
199 * modify/poll binds - bind_lock */
Michal Vasko3031aae2016-01-27 16:07:18 +0100200 struct nc_bind *binds;
Michal Vaskoade892d2017-02-22 13:40:35 +0100201 pthread_mutex_t bind_lock;
Michal Vasko3031aae2016-01-27 16:07:18 +0100202 struct nc_endpt {
203 const char *name;
Michal Vasko2e6defd2016-10-07 15:48:15 +0200204 NC_TRANSPORT_IMPL ti;
205 union {
Michal Vaskoe2713da2016-08-22 16:06:40 +0200206#ifdef NC_ENABLED_SSH
Michal Vasko2e6defd2016-10-07 15:48:15 +0200207 struct nc_server_ssh_opts *ssh;
Michal Vaskoe2713da2016-08-22 16:06:40 +0200208#endif
Michal Vasko6b151062016-08-22 16:20:47 +0200209#ifdef NC_ENABLED_TLS
Michal Vasko2e6defd2016-10-07 15:48:15 +0200210 struct nc_server_tls_opts *tls;
Michal Vaskoe2713da2016-08-22 16:06:40 +0200211#endif
Michal Vasko2e6defd2016-10-07 15:48:15 +0200212 } opts;
Michal Vasko3031aae2016-01-27 16:07:18 +0100213 } *endpts;
214 uint16_t endpt_count;
Michal Vasko2e6defd2016-10-07 15:48:15 +0200215 pthread_rwlock_t endpt_lock;
216
217 /* ACCESS locked, add/remove CH clients - WRITE lock ch_client_lock
218 * modify CH clients - READ lock ch_client_lock + ch_client_lock */
219 struct nc_ch_client {
220 const char *name;
221 NC_TRANSPORT_IMPL ti;
222 struct nc_ch_endpt {
223 const char *name;
224 const char *address;
225 uint16_t port;
226 } *ch_endpts;
227 uint16_t ch_endpt_count;
228 union {
229#ifdef NC_ENABLED_SSH
230 struct nc_server_ssh_opts *ssh;
231#endif
232#ifdef NC_ENABLED_TLS
233 struct nc_server_tls_opts *tls;
234#endif
235 } opts;
236 NC_CH_CONN_TYPE conn_type;
237 union {
238 struct {
239 uint32_t idle_timeout;
240 uint16_t ka_max_wait;
241 uint8_t ka_max_attempts;
242 } persist;
243 struct {
244 uint16_t idle_timeout;
245 uint16_t reconnect_timeout;
246 } period;
247 } conn;
248 NC_CH_START_WITH start_with;
249 uint8_t max_attempts;
250 pthread_mutex_t lock;
251 } *ch_clients;
252 uint16_t ch_client_count;
253 pthread_rwlock_t ch_client_lock;
Michal Vaskob48aa812016-01-18 14:13:09 +0100254
Michal Vasko7227f352016-02-01 12:11:40 +0100255 /* ACCESS locked with sid_lock */
Michal Vaskob48aa812016-01-18 14:13:09 +0100256 uint32_t new_session_id;
257 pthread_spinlock_t sid_lock;
Michal Vasko0457bb42016-01-08 15:49:13 +0100258};
259
Radek Krejci206fcd62015-10-07 15:42:48 +0200260/**
Michal Vasko0190bc32016-03-02 15:47:49 +0100261 * Sleep time in msec to wait between nc_recv_notif() calls.
Michal Vaskoa8ad4482016-01-28 14:25:54 +0100262 */
263#define NC_CLIENT_NOTIF_THREAD_SLEEP 10000
264
265/**
Michal Vasko0190bc32016-03-02 15:47:49 +0100266 * Timeout in msec for transport-related data to arrive (ssh_handle_key_exchange(), SSL_accept(), SSL_connect()).
Michal Vasko36c7be82017-02-22 13:37:59 +0100267 * It can be quite a lot on slow machines (waiting for TLS cert-to-name resolution, ...).
Michal Vasko0190bc32016-03-02 15:47:49 +0100268 */
Michal Vasko23edb632017-02-23 15:15:52 +0100269#define NC_TRANSPORT_TIMEOUT 10000
Michal Vasko36c7be82017-02-22 13:37:59 +0100270
271/**
272 * Timeout in msec for acquiring a lock of a session (used with a condition, so higher numbers could be required
273 * only in case of extreme concurrency).
274 */
275#define NC_SESSION_LOCK_TIMEOUT 500
Michal Vasko0190bc32016-03-02 15:47:49 +0100276
277/**
Michal Vaskof471fa02017-02-15 10:48:12 +0100278 * Timeout in msec for acquiring a lock of a session that is supposed to be freed.
279 */
Michal Vasko36c7be82017-02-22 13:37:59 +0100280#define NC_SESSION_FREE_LOCK_TIMEOUT 1000
Michal Vaskof471fa02017-02-15 10:48:12 +0100281
282/**
283 * Timeout in msec for acquiring a lock of a pollsession structure.
284 */
285#define NC_PS_LOCK_TIMEOUT 500
286
287/**
Michal Vasko1a22db42017-03-17 09:09:15 +0100288 * Time slept in msec if no endpoint was created for a running Call Home client.
Michal Vaskoade892d2017-02-22 13:40:35 +0100289 */
290#define NC_CH_NO_ENDPT_WAIT 1000
291
292/**
Michal Vasko1a22db42017-03-17 09:09:15 +0100293 * Time slept in msec after a failed Call Home endpoint session creation.
Michal Vaskoade892d2017-02-22 13:40:35 +0100294 */
295#define NC_CH_ENDPT_FAIL_WAIT 1000
296
297/**
Michal Vasko80cad7f2015-12-08 14:42:27 +0100298 * Number of sockets kept waiting to be accepted.
299 */
Michal Vasko0a3f3752016-10-13 14:58:38 +0200300#define NC_REVERSE_QUEUE 5
Michal Vasko80cad7f2015-12-08 14:42:27 +0100301
302/**
Michal Vasko5c2f7952016-01-22 13:16:31 +0100303 * @brief Type of the session
Radek Krejci206fcd62015-10-07 15:42:48 +0200304 */
305typedef enum {
Radek Krejci695d4fa2015-10-22 13:23:54 +0200306 NC_CLIENT, /**< client side */
307 NC_SERVER /**< server side */
Radek Krejci206fcd62015-10-07 15:42:48 +0200308} NC_SIDE;
309
310/**
311 * @brief Enumeration of the supported NETCONF protocol versions
312 */
313typedef enum {
Michal Vasko5c2f7952016-01-22 13:16:31 +0100314 NC_VERSION_10 = 0, /**< NETCONF 1.0 - RFC 4741, 4742 */
Radek Krejci206fcd62015-10-07 15:42:48 +0200315 NC_VERSION_11 = 1 /**< NETCONF 1.1 - RFC 6241, 6242 */
316} NC_VERSION;
317
318#define NC_VERSION_10_ENDTAG "]]>]]>"
319#define NC_VERSION_10_ENDTAG_LEN 6
320
321/**
Michal Vaskoad611702015-12-03 13:41:51 +0100322 * @brief Container to serialize PRC messages
Radek Krejci5686ff72015-10-09 13:33:56 +0200323 */
Michal Vaskoad611702015-12-03 13:41:51 +0100324struct nc_msg_cont {
325 struct lyxml_elem *msg;
326 struct nc_msg_cont *next;
Radek Krejci5686ff72015-10-09 13:33:56 +0200327};
328
329/**
Radek Krejci206fcd62015-10-07 15:42:48 +0200330 * @brief NETCONF session structure
331 */
332struct nc_session {
Radek Krejci695d4fa2015-10-22 13:23:54 +0200333 NC_STATUS status; /**< status of the session */
Michal Vasko428087d2016-01-14 16:04:28 +0100334 NC_SESSION_TERM_REASON term_reason; /**< reason of termination, if status is NC_STATUS_INVALID */
Radek Krejci695d4fa2015-10-22 13:23:54 +0200335 NC_SIDE side; /**< side of the session: client or server */
Radek Krejci5686ff72015-10-09 13:33:56 +0200336
337 /* NETCONF data */
Radek Krejci206fcd62015-10-07 15:42:48 +0200338 uint32_t id; /**< NETCONF session ID (session-id-type) */
339 NC_VERSION version; /**< NETCONF protocol version */
Radek Krejci5686ff72015-10-09 13:33:56 +0200340
341 /* Transport implementation */
Radek Krejci206fcd62015-10-07 15:42:48 +0200342 NC_TRANSPORT_IMPL ti_type; /**< transport implementation type to select items from ti union */
Radek Krejci695d4fa2015-10-22 13:23:54 +0200343 pthread_mutex_t *ti_lock; /**< lock to access ti. Note that in case of libssh TI, it can be shared with other
Michal Vaskob7ea2432015-10-26 15:38:40 +0100344 NETCONF sessions on the same SSH session (but different SSH channel) */
Michal Vaskoade892d2017-02-22 13:40:35 +0100345 pthread_cond_t *ti_cond; /**< ti_inuse condition */
346 volatile int *ti_inuse; /**< variable indicating whether TI is being communicated on or not, protected by
347 ti_cond and ti_lock */
Radek Krejci206fcd62015-10-07 15:42:48 +0200348 union {
349 struct {
350 int in; /**< input file descriptor */
351 int out; /**< output file descriptor */
Radek Krejci206fcd62015-10-07 15:42:48 +0200352 } fd; /**< NC_TI_FD transport implementation structure */
Radek Krejci53691be2016-02-22 13:58:37 +0100353#ifdef NC_ENABLED_SSH
Radek Krejci206fcd62015-10-07 15:42:48 +0200354 struct {
Radek Krejci206fcd62015-10-07 15:42:48 +0200355 ssh_channel channel;
Radek Krejci695d4fa2015-10-22 13:23:54 +0200356 ssh_session session;
357 struct nc_session *next; /**< pointer to the next NETCONF session on the same
358 SSH session, but different SSH channel. If no such session exists, it is NULL.
359 otherwise there is a ring list of the NETCONF sessions */
Radek Krejci206fcd62015-10-07 15:42:48 +0200360 } libssh;
361#endif
Radek Krejci53691be2016-02-22 13:58:37 +0100362#ifdef NC_ENABLED_TLS
Radek Krejci206fcd62015-10-07 15:42:48 +0200363 SSL *tls;
364#endif
Radek Krejci5686ff72015-10-09 13:33:56 +0200365 } ti; /**< transport implementation data */
Radek Krejciac6d3472015-10-22 15:47:18 +0200366 const char *username;
367 const char *host;
Michal Vasko38a7c6c2015-12-04 12:29:20 +0100368 uint16_t port;
Radek Krejci5686ff72015-10-09 13:33:56 +0200369
370 /* other */
371 struct ly_ctx *ctx; /**< libyang context of the session */
Michal Vasko2cc4c682016-03-01 09:16:48 +0100372 void *data; /**< arbitrary user data */
Radek Krejci695d4fa2015-10-22 13:23:54 +0200373 uint8_t flags; /**< various flags of the session - TODO combine with status and/or side */
Michal Vasko086311b2016-01-08 09:53:11 +0100374#define NC_SESSION_SHAREDCTX 0x01
Michal Vaskob05053d2016-01-22 16:12:06 +0100375#define NC_SESSION_CALLHOME 0x02
Radek Krejci5686ff72015-10-09 13:33:56 +0200376
Michal Vasko2e6defd2016-10-07 15:48:15 +0200377 union {
378 struct {
Radek Krejcif637ba82016-10-18 14:18:14 +0200379 /* client side only data */
Michal Vasko2e6defd2016-10-07 15:48:15 +0200380 uint64_t msgid;
Michal Vasko2cb24b42017-05-23 14:59:11 +0200381 char **cpblts; /**< list of server's capabilities on client side */
Michal Vasko2e6defd2016-10-07 15:48:15 +0200382 struct nc_msg_cont *replies; /**< queue for RPC replies received instead of notifications */
383 struct nc_msg_cont *notifs; /**< queue for notifications received instead of RPC reply */
Radek Krejcif637ba82016-10-18 14:18:14 +0200384 volatile pthread_t *ntf_tid; /**< running notifications receiving thread */
Michal Vaskoeee99412016-11-21 10:19:43 +0100385
386 /* client flags */
387 /* some server modules failed to load so the data from them will be ignored - not use strict flag for parsing */
388# define NC_SESSION_CLIENT_NOT_STRICT 0x40
Michal Vasko2e6defd2016-10-07 15:48:15 +0200389 } client;
390 struct {
Radek Krejcif637ba82016-10-18 14:18:14 +0200391 /* server side only data */
Michal Vasko2e6defd2016-10-07 15:48:15 +0200392 time_t session_start; /**< time the session was created */
393 time_t last_rpc; /**< time the last RPC was received on this session */
Michal Vasko3486a7c2017-03-03 13:28:07 +0100394 int ntf_status; /**< flag whether the session is subscribed to any stream */
Michal Vasko2e6defd2016-10-07 15:48:15 +0200395 pthread_mutex_t *ch_lock; /**< Call Home thread lock */
396 pthread_cond_t *ch_cond; /**< Call Home thread condition */
Michal Vasko086311b2016-01-08 09:53:11 +0100397
Michal Vaskoeee99412016-11-21 10:19:43 +0100398 /* server flags */
Radek Krejci53691be2016-02-22 13:58:37 +0100399#ifdef NC_ENABLED_SSH
Michal Vasko2e6defd2016-10-07 15:48:15 +0200400 /* SSH session authenticated */
401# define NC_SESSION_SSH_AUTHENTICATED 0x04
402 /* netconf subsystem requested */
403# define NC_SESSION_SSH_SUBSYS_NETCONF 0x08
404 /* new SSH message arrived */
405# define NC_SESSION_SSH_NEW_MSG 0x10
406 /* this session is passed to nc_sshcb_msg() */
407# define NC_SESSION_SSH_MSG_CB 0x20
Michal Vasko06e22432016-01-15 10:30:06 +0100408
Michal Vasko2e6defd2016-10-07 15:48:15 +0200409 uint16_t ssh_auth_attempts; /**< number of failed SSH authentication attempts */
Michal Vaskoc14e3c82016-01-11 16:14:30 +0100410#endif
Radek Krejci53691be2016-02-22 13:58:37 +0100411#ifdef NC_ENABLED_TLS
Michal Vasko2e6defd2016-10-07 15:48:15 +0200412 X509 *client_cert; /**< TLS client certificate if used for authentication */
Michal Vaskoc14e3c82016-01-11 16:14:30 +0100413#endif
Michal Vasko2e6defd2016-10-07 15:48:15 +0200414 } server;
415 } opts;
Radek Krejci206fcd62015-10-07 15:42:48 +0200416};
417
Michal Vaskoe4300a82017-05-24 10:35:42 +0200418enum nc_ps_session_state {
419 NC_PS_STATE_NONE = 0, /**< session is not being worked with */
420 NC_PS_STATE_BUSY, /**< session is being polled or communicated on (and locked) */
421 NC_PS_STATE_INVALID /**< session is invalid and was already returned by another poll */
422};
423
Michal Vasko48a63ed2016-03-01 09:48:21 +0100424/* ACCESS locked */
Michal Vaskofb89d772016-01-08 12:25:35 +0100425struct nc_pollsession {
Michal Vaskoe4300a82017-05-24 10:35:42 +0200426 struct {
427 struct nc_session *session;
428 enum nc_ps_session_state state;
429 } *sessions;
Michal Vaskofb89d772016-01-08 12:25:35 +0100430 uint16_t session_count;
Michal Vasko99f251b2017-01-11 11:31:46 +0100431 uint16_t last_event_session;
Michal Vaskobe86fe32016-04-07 10:43:03 +0200432
433 pthread_cond_t cond;
Michal Vasko48a63ed2016-03-01 09:48:21 +0100434 pthread_mutex_t lock;
Michal Vaskobe86fe32016-04-07 10:43:03 +0200435 uint8_t queue[NC_PS_QUEUE_SIZE]; /**< round buffer, queue is empty when queue_len == 0 */
436 uint8_t queue_begin; /**< queue starts on queue[queue_begin] */
437 uint8_t queue_len; /**< queue ends on queue[queue_begin + queue_len - 1] */
Michal Vaskofb89d772016-01-08 12:25:35 +0100438};
439
Michal Vaskoa8ad4482016-01-28 14:25:54 +0100440struct nc_ntf_thread_arg {
441 struct nc_session *session;
442 void (*notif_clb)(struct nc_session *session, const struct nc_notif *notif);
443};
444
Michal Vasko4eb3c312016-03-01 14:09:37 +0100445void *nc_realloc(void *ptr, size_t size);
446
Michal Vasko086311b2016-01-08 09:53:11 +0100447NC_MSG_TYPE nc_send_msg(struct nc_session *session, struct lyd_node *op);
448
Radek Krejci28472922016-07-15 11:51:16 +0200449#ifndef HAVE_PTHREAD_MUTEX_TIMEDLOCK
450int pthread_mutex_timedlock(pthread_mutex_t *mutex, const struct timespec *abstime);
451#endif
452
Radek Krejci7ac16052016-07-15 11:48:18 +0200453int nc_gettimespec(struct timespec *ts);
Michal Vaskoe2713da2016-08-22 16:06:40 +0200454
Radek Krejcida0afb22017-05-26 16:25:59 +0200455int32_t nc_difftimespec(const struct timespec *ts1, const struct timespec *ts2);
Michal Vasko36c7be82017-02-22 13:37:59 +0100456
457void nc_addtimespec(struct timespec *ts, uint32_t msec);
Michal Vasko99f251b2017-01-11 11:31:46 +0100458
Michal Vaskoade892d2017-02-22 13:40:35 +0100459struct nc_session *nc_new_session(int not_allocate_ti);
460
461int nc_session_lock(struct nc_session *session, int timeout, const char *func);
462
463int nc_session_unlock(struct nc_session *session, int timeout, const char *func);
Michal Vasko086311b2016-01-08 09:53:11 +0100464
Michal Vasko227f8ff2016-07-26 14:08:59 +0200465int nc_ps_lock(struct nc_pollsession *ps, uint8_t *id, const char *func);
Michal Vaskof04a52a2016-04-07 10:52:10 +0200466
Michal Vasko227f8ff2016-07-26 14:08:59 +0200467int nc_ps_unlock(struct nc_pollsession *ps, uint8_t id, const char *func);
Michal Vaskof04a52a2016-04-07 10:52:10 +0200468
Radek Krejci206fcd62015-10-07 15:42:48 +0200469/**
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100470 * @brief Fill libyang context in \p session. Context models are based on the stored session
471 * capabilities. If the server does not support \<get-schema\>, the models are searched
Radek Krejcic9a6d252016-03-04 14:50:34 +0100472 * for in the directory set using nc_client_schema_searchpath().
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100473 *
474 * @param[in] session Session to create the context for.
Michal Vaskoef578332016-01-25 13:20:09 +0100475 * @return 0 on success, 1 on some missing schemas, -1 on error.
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100476 */
Michal Vasko57eb9402015-12-08 14:38:12 +0100477int nc_ctx_check_and_fill(struct nc_session *session);
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100478
479/**
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100480 * @brief Perform NETCONF handshake on \p session.
481 *
482 * @param[in] session NETCONF session to use.
Michal Vasko71090fc2016-05-24 16:37:28 +0200483 * @return NC_MSG_HELLO on success, NC_MSG_BAD_HELLO on client \<hello\> message parsing fail
484 * (server-side only), NC_MSG_WOULDBLOCK on timeout, NC_MSG_ERROR on other error.
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100485 */
Michal Vasko71090fc2016-05-24 16:37:28 +0200486NC_MSG_TYPE nc_handshake(struct nc_session *session);
Michal Vasko9e2d3a32015-11-10 13:09:18 +0100487
488/**
Michal Vaskof05562c2016-01-20 12:06:43 +0100489 * @brief Create a socket connection.
490 *
491 * @param[in] host Hostname to connect to.
492 * @param[in] port Port to connect on.
493 * @return Connected socket or -1 on error.
494 */
495int nc_sock_connect(const char *host, uint16_t port);
496
497/**
498 * @brief Accept a new socket connection.
Michal Vasko80cad7f2015-12-08 14:42:27 +0100499 *
Michal Vaskoc61c4492016-01-25 11:13:34 +0100500 * @param[in] sock Listening socket.
Michal Vaskof05562c2016-01-20 12:06:43 +0100501 * @param[in] timeout Timeout in milliseconds.
502 * @param[out] peer_host Host the new connection was initiated from. Can be NULL.
503 * @param[out] peer_port Port the new connection is connected on. Can be NULL.
Michal Vasko80cad7f2015-12-08 14:42:27 +0100504 * @return Connected socket with the new connection, -1 on error.
505 */
Michal Vaskoc61c4492016-01-25 11:13:34 +0100506int nc_sock_accept(int sock, int timeout, char **peer_host, uint16_t *peer_port);
Michal Vasko80cad7f2015-12-08 14:42:27 +0100507
Michal Vasko1a38c862016-01-15 15:50:07 +0100508/**
509 * @brief Create a listening socket.
510 *
511 * @param[in] address IP address to listen on.
512 * @param[in] port Port to listen on.
513 * @return Listening socket, -1 on error.
514 */
Michal Vaskof05562c2016-01-20 12:06:43 +0100515int nc_sock_listen(const char *address, uint16_t port);
Michal Vaskofb89d772016-01-08 12:25:35 +0100516
Michal Vasko1a38c862016-01-15 15:50:07 +0100517/**
518 * @brief Accept a new connection on a listening socket.
519 *
520 * @param[in] binds Structure with the listening sockets.
521 * @param[in] bind_count Number of \p binds.
522 * @param[in] timeout Timeout for accepting.
Michal Vasko1a38c862016-01-15 15:50:07 +0100523 * @param[out] host Host of the remote peer. Can be NULL.
524 * @param[out] port Port of the new connection. Can be NULL.
Michal Vasko3031aae2016-01-27 16:07:18 +0100525 * @param[out] idx Index of the bind that was accepted. Can be NULL.
Michal Vasko1a38c862016-01-15 15:50:07 +0100526 * @return Accepted socket of the new connection, -1 on error.
527 */
Michal Vasko3031aae2016-01-27 16:07:18 +0100528int nc_sock_accept_binds(struct nc_bind *binds, uint16_t bind_count, int timeout, char **host, uint16_t *port, uint16_t *idx);
529
530/**
Michal Vaskoda514772016-02-01 11:32:01 +0100531 * @brief Lock endpoint structures for reading and the specific endpoint.
532 *
533 * @param[in] name Name of the endpoint.
Michal Vasko2e6defd2016-10-07 15:48:15 +0200534 * @param[in] ti Expected transport.
Michal Vaskoe2713da2016-08-22 16:06:40 +0200535 * @param[out] idx Index of the endpoint. Optional.
Michal Vaskoda514772016-02-01 11:32:01 +0100536 * @return Endpoint structure.
537 */
Michal Vaskoade892d2017-02-22 13:40:35 +0100538struct nc_endpt *nc_server_endpt_lock_get(const char *name, NC_TRANSPORT_IMPL ti, uint16_t *idx);
Michal Vasko3031aae2016-01-27 16:07:18 +0100539
Michal Vaskoda514772016-02-01 11:32:01 +0100540/**
Michal Vasko2e6defd2016-10-07 15:48:15 +0200541 * @brief Lock CH client structures for reading and the specific client.
542 *
543 * @param[in] name Name of the CH client.
544 * @param[in] ti Expected transport.
545 * @param[out] idx Index of the client. Optional.
546 * @return CH client structure.
547 */
548struct nc_ch_client *nc_server_ch_client_lock(const char *name, NC_TRANSPORT_IMPL ti, uint16_t *idx);
549
550/**
551 * @brief Unlock CH client strcutures and the specific client.
552 *
553 * @param[in] endpt Locked CH client structure.
554 */
555void nc_server_ch_client_unlock(struct nc_ch_client *client);
556
557/**
Michal Vaskoda514772016-02-01 11:32:01 +0100558 * @brief Add a client Call Home bind, listen on it.
559 *
560 * @param[in] address Address to bind to.
Michal Vasko2e6defd2016-10-07 15:48:15 +0200561 * @param[in] port Port to bind to.
562 * @param[in] ti Transport to use.
Michal Vaskoda514772016-02-01 11:32:01 +0100563 * @return 0 on success, -1 on error.
564 */
Michal Vasko3031aae2016-01-27 16:07:18 +0100565int nc_client_ch_add_bind_listen(const char *address, uint16_t port, NC_TRANSPORT_IMPL ti);
566
Michal Vaskoda514772016-02-01 11:32:01 +0100567/**
568 * @brief Remove a client Call Home bind, stop listening on it.
569 *
570 * @param[in] address Address of the bind. NULL matches any address.
571 * @param[in] port Port of the bind. 0 matches all ports.
Michal Vasko2e6defd2016-10-07 15:48:15 +0200572 * @param[in] ti Transport of the bind. 0 matches all transports.
Michal Vaskoda514772016-02-01 11:32:01 +0100573 * @return 0 on success, -1 on no matches found.
574 */
Michal Vasko3031aae2016-01-27 16:07:18 +0100575int nc_client_ch_del_bind(const char *address, uint16_t port, NC_TRANSPORT_IMPL ti);
576
Michal Vaskoda514772016-02-01 11:32:01 +0100577/**
578 * @brief Connect to a listening NETCONF client using Call Home.
579 *
580 * @param[in] host Hostname to connect to.
581 * @param[in] port Port to connect to.
582 * @param[in] ti Transport fo the connection.
Michal Vaskoda514772016-02-01 11:32:01 +0100583 * @param[out] session New Call Home session.
Michal Vasko71090fc2016-05-24 16:37:28 +0200584 * @return NC_MSG_HELLO on success, NC_MSG_BAD_HELLO on client \<hello\> message
585 * parsing fail, NC_MSG_WOULDBLOCK on timeout, NC_MSG_ERROR on other errors.
Michal Vaskoda514772016-02-01 11:32:01 +0100586 */
Michal Vasko71090fc2016-05-24 16:37:28 +0200587NC_MSG_TYPE nc_connect_callhome(const char *host, uint16_t port, NC_TRANSPORT_IMPL ti, struct nc_session **session);
Michal Vaskofb89d772016-01-08 12:25:35 +0100588
Michal Vaskoa7b8ca52016-03-01 12:09:29 +0100589void nc_init(void);
590
591void nc_destroy(void);
592
Radek Krejci53691be2016-02-22 13:58:37 +0100593#ifdef NC_ENABLED_SSH
Michal Vasko9e036d52016-01-08 10:49:26 +0100594
Michal Vaskoda514772016-02-01 11:32:01 +0100595/**
596 * @brief Accept a server Call Home connection on a socket.
597 *
598 * @param[in] sock Socket with a new connection.
599 * @param[in] host Hostname of the server.
600 * @param[in] port Port of the server.
601 * @param[in] ctx Context for the session. Can be NULL.
Michal Vasko0190bc32016-03-02 15:47:49 +0100602 * @param[in] timeout Transport operations timeout in msec.
Michal Vaskoda514772016-02-01 11:32:01 +0100603 * @return New session, NULL on error.
604 */
Michal Vasko0190bc32016-03-02 15:47:49 +0100605struct nc_session *nc_accept_callhome_ssh_sock(int sock, const char *host, uint16_t port, struct ly_ctx *ctx, int timeout);
Michal Vasko3031aae2016-01-27 16:07:18 +0100606
Michal Vasko1a38c862016-01-15 15:50:07 +0100607/**
608 * @brief Establish SSH transport on a socket.
609 *
610 * @param[in] session Session structure of the new connection.
611 * @param[in] sock Socket of the new connection.
Michal Vasko0190bc32016-03-02 15:47:49 +0100612 * @param[in] timeout Transport operations timeout in msec (not SSH authentication one).
Michal Vasko1a38c862016-01-15 15:50:07 +0100613 * @return 1 on success, 0 on timeout, -1 on error.
614 */
Michal Vasko0190bc32016-03-02 15:47:49 +0100615int nc_accept_ssh_session(struct nc_session *session, int sock, int timeout);
Michal Vasko9e036d52016-01-08 10:49:26 +0100616
Michal Vasko96164bf2016-01-21 15:41:58 +0100617/**
618 * @brief Callback called when a new SSH message is received.
619 *
620 * @param[in] sshsession SSH session the message arrived on.
621 * @param[in] msg SSH message itself.
622 * @param[in] data NETCONF session running on \p sshsession.
623 * @return 0 if the message was handled, 1 if it is left up to libssh.
624 */
625int nc_sshcb_msg(ssh_session sshsession, ssh_message msg, void *data);
626
Michal Vaskoc6b9c7b2016-01-28 11:10:08 +0100627void nc_server_ssh_clear_opts(struct nc_server_ssh_opts *opts);
Michal Vasko3031aae2016-01-27 16:07:18 +0100628
Michal Vaskob7558c52016-02-26 15:04:19 +0100629void nc_client_ssh_destroy_opts(void);
630
Radek Krejci53691be2016-02-22 13:58:37 +0100631#endif /* NC_ENABLED_SSH */
Michal Vasko9e036d52016-01-08 10:49:26 +0100632
Radek Krejci53691be2016-02-22 13:58:37 +0100633#ifdef NC_ENABLED_TLS
Michal Vasko9e036d52016-01-08 10:49:26 +0100634
Michal Vasko0190bc32016-03-02 15:47:49 +0100635struct nc_session *nc_accept_callhome_tls_sock(int sock, const char *host, uint16_t port, struct ly_ctx *ctx, int timeout);
Michal Vasko3031aae2016-01-27 16:07:18 +0100636
Michal Vasko1a38c862016-01-15 15:50:07 +0100637/**
638 * @brief Establish TLS transport on a socket.
639 *
640 * @param[in] session Session structure of the new connection.
641 * @param[in] sock Socket of the new connection.
Michal Vasko0190bc32016-03-02 15:47:49 +0100642 * @param[in] timeout Transport operations timeout in msec.
Michal Vasko1a38c862016-01-15 15:50:07 +0100643 * @return 1 on success, 0 on timeout, -1 on error.
644 */
Michal Vasko0190bc32016-03-02 15:47:49 +0100645int nc_accept_tls_session(struct nc_session *session, int sock, int timeout);
Michal Vasko9e036d52016-01-08 10:49:26 +0100646
Michal Vaskoc6b9c7b2016-01-28 11:10:08 +0100647void nc_server_tls_clear_opts(struct nc_server_tls_opts *opts);
Michal Vasko3031aae2016-01-27 16:07:18 +0100648
Michal Vaskob7558c52016-02-26 15:04:19 +0100649void nc_client_tls_destroy_opts(void);
650
Radek Krejci53691be2016-02-22 13:58:37 +0100651#endif /* NC_ENABLED_TLS */
Michal Vasko9e036d52016-01-08 10:49:26 +0100652
Michal Vasko80cad7f2015-12-08 14:42:27 +0100653/**
Radek Krejci206fcd62015-10-07 15:42:48 +0200654 * Functions
655 * - io.c
656 */
657
658/**
659 * @brief Read message from the wire.
660 *
661 * Accepts hello, rpc, rpc-reply and notification. Received string is transformed into
662 * libyang XML tree and the message type is detected from the top level element.
663 *
664 * @param[in] session NETCONF session from which the message is being read.
665 * @param[in] timeout Timeout in milliseconds. Negative value means infinite timeout,
666 * zero value causes to return immediately.
667 * @param[out] data XML tree built from the read data.
668 * @return Type of the read message. #NC_MSG_WOULDBLOCK is returned if timeout is positive
Radek Krejci5686ff72015-10-09 13:33:56 +0200669 * (or zero) value and it passed out without any data on the wire. #NC_MSG_ERROR is
Radek Krejci206fcd62015-10-07 15:42:48 +0200670 * returned on error and #NC_MSG_NONE is never returned by this function.
671 */
Michal Vasko05ba9df2016-01-13 14:40:27 +0100672NC_MSG_TYPE nc_read_msg_poll(struct nc_session* session, int timeout, struct lyxml_elem **data);
673
674/**
675 * @brief Read message from the wire.
676 *
677 * Accepts hello, rpc, rpc-reply and notification. Received string is transformed into
678 * libyang XML tree and the message type is detected from the top level element.
679 *
680 * @param[in] session NETCONF session from which the message is being read.
681 * @param[out] data XML tree built from the read data.
682 * @return Type of the read message. #NC_MSG_WOULDBLOCK is returned if timeout is positive
683 * (or zero) value and it passed out without any data on the wire. #NC_MSG_ERROR is
684 * returned on error and #NC_MSG_NONE is never returned by this function.
685 */
686NC_MSG_TYPE nc_read_msg(struct nc_session* session, struct lyxml_elem **data);
Radek Krejci206fcd62015-10-07 15:42:48 +0200687
Radek Krejcife0b3472015-10-12 13:43:42 +0200688/**
689 * @brief Write message into wire.
690 *
691 * @param[in] session NETCONF session to which the message will be written.
Radek Krejci127f8952016-10-12 14:57:16 +0200692 * @param[in] type The type of the message to write, specified as #NC_MSG_TYPE value. According to the type, the
Radek Krejcife0b3472015-10-12 13:43:42 +0200693 * specific additional parameters are required or accepted:
694 * - #NC_MSG_RPC
695 * - `struct lyd_node *op;` - operation (content of the \<rpc/\> to be sent. Required parameter.
696 * - `const char *attrs;` - additional attributes to be added into the \<rpc/\> element.
Michal Vasko05ba9df2016-01-13 14:40:27 +0100697 * Required parameter.
698 * `message-id` attribute is added automatically and default namespace is set to #NC_NS_BASE.
699 * Optional parameter.
Radek Krejcife0b3472015-10-12 13:43:42 +0200700 * - #NC_MSG_REPLY
Michal Vasko05ba9df2016-01-13 14:40:27 +0100701 * - `struct lyxml_node *rpc_elem;` - root of the RPC object to reply to. Required parameter.
702 * - `struct nc_server_reply *reply;` - RPC reply. Required parameter.
Radek Krejcife0b3472015-10-12 13:43:42 +0200703 * - #NC_MSG_NOTIF
704 * - TODO: content
705 * @return 0 on success
706 */
Radek Krejci127f8952016-10-12 14:57:16 +0200707int nc_write_msg(struct nc_session *session, int type, ...);
Radek Krejcife0b3472015-10-12 13:43:42 +0200708
Michal Vasko1a38c862016-01-15 15:50:07 +0100709/**
710 * @brief Check whether a session is still connected (on transport layer).
711 *
712 * @param[in] session Session to check.
713 * @return 1 if connected, 0 if not.
714 */
Michal Vasko428087d2016-01-14 16:04:28 +0100715int nc_session_is_connected(struct nc_session *session);
716
Radek Krejci206fcd62015-10-07 15:42:48 +0200717#endif /* NC_SESSION_PRIVATE_H_ */