Improve initialisation of OpenSSL PRNG.

[radsecproxy.git] / lib / radsec.c

diff --git a/lib/radsec.c b/lib/radsec.c
index f645ee1..83ce6c5 100644 (file)
--- a/lib/radsec.c
+++ b/lib/radsec.c
@@ -1,104 +1,141 @@
+/* Copyright 2010-2013 NORDUnet A/S. All rights reserved.
+   See LICENSE for licensing information. */
+
+#if defined HAVE_CONFIG_H
+#include <config.h>
+#endif
+
 #include <stdio.h>
 #include <stdlib.h>
 #include <stdint.h>
+#include <string.h>
 #include <libgen.h>
+#include <assert.h>
+
+#include <radius/client.h>
+#include <event2/event.h>
+#include <event2/util.h>
+#include <radsec/radsec.h>
+#include <radsec/radsec-impl.h>
+#include "err.h"
+#include "debug.h"
+#include "radsecproxy/debug.h"
+#if defined (RS_ENABLE_TLS)
+#include "tls.h"
+#include <regex.h>
+#include "radsecproxy/list.h"
+#include "radsecproxy/radsecproxy.h"
+#endif
 
-#include <freeradius/libradius.h>
-#include "libradsec.h"
-#include "libradsec-impl.h"
-
+/* Public functions.  */
 int
-rs_context_create(struct rs_handle **ctx, const char *dict)
+rs_context_create (struct rs_context **ctx)
 {
-  struct rs_handle *h;
+  struct rs_context *h;
 
-  *ctx = NULL;
-  h = (struct rs_handle *) malloc (sizeof (struct rs_handle));
-  if (h)
-    {
-      char *buf;
-      char *dir, *fn;
-
-      buf = malloc (strlen (dict) + 1);
-      if (!buf)
-       {
-         free (h);
-         return RSE_NOMEM;
-       }
-      strcpy (buf, dict);
-      dir = dirname (buf);
-      free (buf);
-      strcpy (buf, dict);
-      fn = basename (buf);
-      free (buf);
-      if (dict_init (dir, fn) < 0)
-       {
-         free (h);
-         return RSE_SOME_ERROR;
-       }
-#if defined (DEBUG)
-      fr_log_fp = stderr;
-      fr_debug_flag = 1;
+#if defined (RS_ENABLE_TLS)
+  if (tls_init ())
+    return RSE_SSLERR;
 #endif
-      fr_randinit (&h->fr_randctx, 0);
-      fr_rand_seed (NULL, 0);
 
-      *ctx = h;
-    }
-  return (h ? RSE_OK : RSE_NOMEM);
-}
+  h = calloc (1, sizeof(*h));
+  if (h == NULL)
+    return RSE_NOMEM;
 
-void rs_context_destroy(struct rs_handle *ctx)
-{
-  free (ctx);
-}
+  debug_init ("libradsec");    /* radsecproxy compat, FIXME: remove */
 
-int rs_context_set_alloc_scheme(struct rs_handle *ctx, struct rs_alloc_scheme *scheme)
-{
-  return RSE_NOSYS;
-}
+  if (ctx != NULL)
+    *ctx = h;
 
-int rs_context_config_read(struct rs_handle *ctx, const char *config_file)
-{
-  return RSE_NOSYS;
+  return RSE_OK;
 }
 
-int rs_conn_create(const struct rs_handle *ctx, struct rs_connection **conn)
+struct rs_error *
+rs_resolve (struct evutil_addrinfo **addr,
+            rs_conn_type_t type,
+            const char *hostname,
+            const char *service)
 {
-  return RSE_NOSYS;
-}
+  int err;
+  struct evutil_addrinfo hints, *res = NULL;
 
-int rs_conn_add_server(struct rs_connection  *conn, rs_conn_type_t type, const char *host, int port, int timeout, int tries, const char *secret)
-{
-  return RSE_NOSYS;
+  memset (&hints, 0, sizeof(struct evutil_addrinfo));
+  hints.ai_family = AF_UNSPEC;
+  hints.ai_flags = AI_ADDRCONFIG;
+  switch (type)
+    {
+    case RS_CONN_TYPE_NONE:
+      return err_create (RSE_INVALID_CONN, __FILE__, __LINE__, NULL, NULL);
+    case RS_CONN_TYPE_TCP:
+      /* Fall through.  */
+    case RS_CONN_TYPE_TLS:
+      hints.ai_socktype = SOCK_STREAM;
+      hints.ai_protocol = IPPROTO_TCP;
+      break;
+    case RS_CONN_TYPE_UDP:
+      /* Fall through.  */
+    case RS_CONN_TYPE_DTLS:
+      hints.ai_socktype = SOCK_DGRAM;
+      hints.ai_protocol = IPPROTO_UDP;
+      break;
+    default:
+      return err_create (RSE_INVALID_CONN, __FILE__, __LINE__, NULL, NULL);
+    }
+  err = evutil_getaddrinfo (hostname, service, &hints, &res);
+  if (err)
+    return err_create (RSE_BADADDR, __FILE__, __LINE__,
+                      "%s:%s: bad host name or service name (%s)",
+                      hostname, service, evutil_gai_strerror(err));
+  *addr = res;                 /* Simply use first result.  */
+  return NULL;
 }
 
-int rs_conn_add_listener(struct rs_connection  *conn, rs_conn_type_t type, const char *host, int port, const char *secret)
+void
+rs_context_destroy (struct rs_context *ctx)
 {
-  return RSE_NOSYS;
-}
+  struct rs_realm *r = NULL;
+  struct rs_peer *p = NULL;
 
-int rs_conn_destroy(struct rs_connection  *conn)
-{
-  return RSE_NOSYS;
-}
+  if (ctx->config)
+    {
+      for (r = ctx->config->realms; r; )
+       {
+         struct rs_realm *tmp = r;
+         for (p = r->peers; p; )
+           {
+             struct rs_peer *tmp = p;
+             if (p->addr_cache)
+                {
+                  evutil_freeaddrinfo (p->addr_cache);
+                  p->addr_cache = NULL;
+                }
+             p = p->next;
+             rs_free (ctx, tmp);
+           }
+         free (r->name);
+          rs_free (ctx, r->transport_cred);
+         r = r->next;
+         rs_free (ctx, tmp);
+       }
+    }
 
-int rs_conn_set_eventbase(struct rs_connection *conn, struct event_base *eb)
-{
-  return RSE_NOSYS;
-}
+  if (ctx->config)
+    {
+      if (ctx->config->cfg)
+       {
+         cfg_free (ctx->config->cfg);
+         ctx->config->cfg = NULL;
+       }
+      rs_free (ctx, ctx->config);
+    }
 
-int rs_conn_set_callbacks(struct rs_connection *conn, struct rs_conn_callbacks *cb)
-{
-  return RSE_NOSYS;
+  free (ctx);
 }
 
-int rs_conn_set_server(struct rs_connection *conn, const char *name)
+int
+rs_context_set_alloc_scheme (struct rs_context *ctx,
+                            struct rs_alloc_scheme *scheme)
 {
-  return RSE_NOSYS;
+  return rs_err_ctx_push_fl (ctx, RSE_NOSYS, __FILE__, __LINE__, NULL);
 }
 
-int rs_conn_get_server(const struct rs_connection *conn, const char *name, size_t buflen)
-{
-  return RSE_NOSYS;
-}