2 * uhttpd - Tiny single-threaded httpd - Main component
4 * Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
10 * http://www.apache.org/licenses/LICENSE-2.0
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
19 #define _XOPEN_SOURCE 500 /* crypt() */
22 #include "uhttpd-utils.h"
23 #include "uhttpd-file.h"
26 #include "uhttpd-cgi.h"
30 #include "uhttpd-lua.h"
34 #include "uhttpd-tls.h"
40 static void uh_sigterm(int sig)
45 static void uh_sigchld(int sig)
47 while( waitpid(-1, NULL, WNOHANG) > 0 ) { }
50 static void uh_config_parse(struct config *conf)
58 const char *path = conf->file ? conf->file : "/etc/httpd.conf";
61 if( (c = fopen(path, "r")) != NULL )
63 memset(line, 0, sizeof(line));
65 while( fgets(line, sizeof(line) - 1, c) )
67 if( (line[0] == '/') && (strchr(line, ':') != NULL) )
69 if( !(user = strchr(line, ':')) || (*user++ = 0) ||
70 !(pass = strchr(user, ':')) || (*pass++ = 0) ||
71 !(eol = strchr(pass, '\n')) || (*eol++ = 0) )
74 if( !uh_auth_add(line, user, pass) )
77 "Notice: No password set for user %s, ignoring "
78 "authentication on %s\n", user, line
82 else if( !strncmp(line, "I:", 2) )
84 if( !(user = strchr(line, ':')) || (*user++ = 0) ||
85 !(eol = strchr(user, '\n')) || (*eol++ = 0) )
88 conf->index_file = strdup(user);
90 else if( !strncmp(line, "E404:", 5) )
92 if( !(user = strchr(line, ':')) || (*user++ = 0) ||
93 !(eol = strchr(user, '\n')) || (*eol++ = 0) )
96 conf->error_handler = strdup(user);
104 static int uh_socket_bind(
105 fd_set *serv_fds, int *max_fd, const char *host, const char *port,
106 struct addrinfo *hints, int do_tls, struct config *conf
113 struct listener *l = NULL;
114 struct addrinfo *addrs = NULL, *p = NULL;
116 if( (status = getaddrinfo(host, port, hints, &addrs)) != 0 )
118 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
121 /* try to bind a new socket to each found address */
122 for( p = addrs; p; p = p->ai_next )
125 if( (sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1 )
131 /* "address already in use" */
132 if( setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)) == -1 )
134 perror("setsockopt()");
138 /* required to get parallel v4 + v6 working */
139 if( p->ai_family == AF_INET6 )
141 if( setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1 )
143 perror("setsockopt()");
149 if( bind(sock, p->ai_addr, p->ai_addrlen) == -1 )
156 if( listen(sock, UH_LIMIT_CLIENTS) == -1 )
162 /* add listener to global list */
163 if( ! (l = uh_listener_add(sock, conf)) )
166 "uh_listener_add(): Can not create more than "
167 "%i listen sockets\n", UH_LIMIT_LISTENERS
175 l->tls = do_tls ? conf->tls : NULL;
178 /* add socket to server fd set */
179 FD_SET(sock, serv_fds);
181 *max_fd = max(*max_fd, sock);
196 static struct http_request * uh_http_header_parse(struct client *cl, char *buffer, int buflen)
198 char *method = &buffer[0];
200 char *version = NULL;
202 char *headers = NULL;
203 char *hdrname = NULL;
204 char *hdrdata = NULL;
209 static struct http_request req;
211 memset(&req, 0, sizeof(req));
214 /* terminate initial header line */
215 if( (headers = strfind(buffer, buflen, "\r\n", 2)) != NULL )
217 buffer[buflen-1] = 0;
222 /* find request path */
223 if( (path = strchr(buffer, ' ')) != NULL )
226 /* find http version */
227 if( (path != NULL) && ((version = strchr(path, ' ')) != NULL) )
232 if( strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST") )
235 uh_http_response(cl, 405, "Method Not Allowed");
243 req.method = UH_HTTP_MSG_GET;
247 req.method = UH_HTTP_MSG_HEAD;
251 req.method = UH_HTTP_MSG_POST;
257 if( !path || !strlen(path) )
259 /* malformed request */
260 uh_http_response(cl, 400, "Bad Request");
269 if( (version == NULL) || (strcmp(version, "HTTP/0.9") &&
270 strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1")) )
272 /* unsupported version */
273 uh_http_response(cl, 400, "Bad Request");
278 req.version = strtof(&version[5], NULL);
282 /* process header fields */
283 for( i = (int)(headers - buffer); i < buflen; i++ )
285 /* found eol and have name + value, push out header tuple */
286 if( hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n') )
291 if( (hdrcount + 1) < array_size(req.headers) )
293 req.headers[hdrcount++] = hdrname;
294 req.headers[hdrcount++] = hdrdata;
296 hdrname = hdrdata = NULL;
302 uh_http_response(cl, 413, "Request Entity Too Large");
307 /* have name but no value and found a colon, start of value */
308 else if( hdrname && !hdrdata && ((i+2) < buflen) &&
309 (buffer[i] == ':') && (buffer[i+1] == ' ')
312 hdrdata = &buffer[i+2];
315 /* have no name and found [A-Z], start of name */
316 else if( !hdrname && isalpha(buffer[i]) && isupper(buffer[i]) )
318 hdrname = &buffer[i];
323 req.redirect_status = 200;
327 /* Malformed request */
328 uh_http_response(cl, 400, "Bad Request");
333 static struct http_request * uh_http_header_recv(struct client *cl)
335 static char buffer[UH_LIMIT_MSGHEAD];
336 char *bufptr = &buffer[0];
339 struct timeval timeout;
343 ssize_t blen = sizeof(buffer)-1;
347 memset(buffer, 0, sizeof(buffer));
352 FD_SET(cl->socket, &reader);
354 /* fail after 0.1s */
356 timeout.tv_usec = 100000;
358 /* check whether fd is readable */
359 if( select(cl->socket + 1, &reader, NULL, NULL, &timeout) > 0 )
362 rlen = uh_tcp_peek(cl, bufptr, blen);
366 if( (idxptr = strfind(buffer, sizeof(buffer), "\r\n\r\n", 4)) )
368 blen -= uh_tcp_recv(cl, bufptr, (int)(idxptr - bufptr) + 4);
370 /* header read complete ... */
371 return uh_http_header_parse(cl, buffer, sizeof(buffer) - blen - 1);
375 rlen = uh_tcp_recv(cl, bufptr, rlen);
382 /* invalid request (unexpected eof/timeout) */
383 uh_http_response(cl, 408, "Request Timeout");
389 /* invalid request (unexpected eof/timeout) */
390 uh_http_response(cl, 408, "Request Timeout");
395 /* request entity too large */
396 uh_http_response(cl, 413, "Request Entity Too Large");
400 static int uh_path_match(const char *prefix, const char *url)
402 if( (strstr(url, prefix) == url) &&
403 ((prefix[strlen(prefix)-1] == '/') ||
404 (strlen(url) == strlen(prefix)) ||
405 (url[strlen(prefix)] == '/'))
414 int main (int argc, char **argv)
421 /* master file descriptor list */
422 fd_set used_fds, serv_fds, read_fds;
424 /* working structs */
425 struct addrinfo hints;
426 struct http_request *req;
427 struct path_info *pin;
435 /* maximum file descriptor number */
436 int new_fd, cur_fd, max_fd = 0;
451 #if defined(HAVE_TLS) || defined(HAVE_LUA)
456 /* clear the master and temp sets */
461 /* handle SIGPIPE, SIGINT, SIGTERM, SIGCHLD */
463 sigemptyset(&sa.sa_mask);
465 sa.sa_handler = SIG_IGN;
466 sigaction(SIGPIPE, &sa, NULL);
468 sa.sa_handler = uh_sigchld;
469 sigaction(SIGCHLD, &sa, NULL);
471 sa.sa_handler = uh_sigterm;
472 sigaction(SIGINT, &sa, NULL);
473 sigaction(SIGTERM, &sa, NULL);
477 sigaddset(&ss, SIGCHLD);
478 sigprocmask(SIG_BLOCK, &ss, NULL);
480 /* prepare addrinfo hints */
481 memset(&hints, 0, sizeof(hints));
482 hints.ai_family = AF_UNSPEC;
483 hints.ai_socktype = SOCK_STREAM;
484 hints.ai_flags = AI_PASSIVE;
487 memset(&conf, 0, sizeof(conf));
488 memset(bind, 0, sizeof(bind));
491 /* load TLS plugin */
492 if( ! (lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)) )
495 "Notice: Unable to load TLS plugin - disabling SSL support! "
496 "(Reason: %s)\n", dlerror()
501 /* resolve functions */
502 if( !(conf.tls_init = dlsym(lib, "uh_tls_ctx_init")) ||
503 !(conf.tls_cert = dlsym(lib, "uh_tls_ctx_cert")) ||
504 !(conf.tls_key = dlsym(lib, "uh_tls_ctx_key")) ||
505 !(conf.tls_free = dlsym(lib, "uh_tls_ctx_free")) ||
506 !(conf.tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
507 !(conf.tls_close = dlsym(lib, "uh_tls_client_close")) ||
508 !(conf.tls_recv = dlsym(lib, "uh_tls_client_recv")) ||
509 !(conf.tls_send = dlsym(lib, "uh_tls_client_send"))
512 "Error: Failed to lookup required symbols "
513 "in TLS plugin: %s\n", dlerror()
518 /* init SSL context */
519 if( ! (conf.tls = conf.tls_init()) )
521 fprintf(stderr, "Error: Failed to initalize SSL context\n");
527 while( (opt = getopt(argc, argv,
528 "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:x:t:T:")) > 0
535 if( (port = strrchr(optarg, ':')) != NULL )
537 if( (optarg[0] == '[') && (port > optarg) && (port[-1] == ']') )
538 memcpy(bind, optarg + 1,
539 min(sizeof(bind), (int)(port - optarg) - 2));
542 min(sizeof(bind), (int)(port - optarg)));
557 "Notice: TLS support is disabled, "
558 "ignoring '-s %s'\n", optarg
568 bound += uh_socket_bind(
569 &serv_fds, &max_fd, bind[0] ? bind : NULL, port,
570 &hints, (opt == 's'), &conf
573 memset(bind, 0, sizeof(bind));
581 if( conf.tls_cert(conf.tls, optarg) < 1 )
584 "Error: Invalid certificate file given\n");
597 if( conf.tls_key(conf.tls, optarg) < 1 )
600 "Error: Invalid private key file given\n");
612 if( ! realpath(optarg, conf.docroot) )
614 fprintf(stderr, "Error: Invalid directory %s: %s\n",
615 optarg, strerror(errno));
622 if( (strlen(optarg) == 0) || (optarg[0] != '/') )
624 fprintf(stderr, "Error: Invalid error handler: %s\n",
628 conf.error_handler = optarg;
633 if( (strlen(optarg) == 0) || (optarg[0] == '/') )
635 fprintf(stderr, "Error: Invalid index page: %s\n",
639 conf.index_file = optarg;
642 /* don't follow symlinks */
644 conf.no_symlinks = 1;
647 /* don't list directories */
649 conf.no_dirlists = 1;
653 conf.rfc1918_filter = 1;
659 conf.cgi_prefix = optarg;
666 conf.lua_prefix = optarg;
671 conf.lua_handler = optarg;
675 #if defined(HAVE_CGI) || defined(HAVE_LUA)
678 conf.script_timeout = atoi(optarg);
682 /* network timeout */
684 conf.network_timeout = atoi(optarg);
694 if( (port = malloc(strlen(optarg)+1)) != NULL )
696 memset(port, 0, strlen(optarg)+1);
697 uh_urldecode(port, strlen(optarg), optarg, strlen(optarg));
704 /* basic auth realm */
711 printf("%s\n", crypt(optarg, "$1$"));
722 "Usage: %s -p [addr:]port [-h docroot]\n"
723 " -f Do not fork to background\n"
724 " -c file Configuration file, default is '/etc/httpd.conf'\n"
725 " -p [addr:]port Bind to specified address and port, multiple allowed\n"
727 " -s [addr:]port Like -p but provide HTTPS on this port\n"
728 " -C file ASN.1 server certificate file\n"
729 " -K file ASN.1 server private key file\n"
731 " -h directory Specify the document root, default is '.'\n"
732 " -E string Use given virtual URL as 404 error handler\n"
733 " -I string Use given filename as index page for directories\n"
734 " -S Do not follow symbolic links outside of the docroot\n"
735 " -D Do not allow directory listings, send 403 instead\n"
736 " -R Enable RFC1918 filter\n"
738 " -l string URL prefix for Lua handler, default is '/lua'\n"
739 " -L file Lua handler script, omit to disable Lua\n"
742 " -x string URL prefix for CGI handler, default is '/cgi-bin'\n"
744 #if defined(HAVE_CGI) || defined(HAVE_LUA)
745 " -t seconds CGI and Lua script timeout in seconds, default is 60\n"
747 " -T seconds Network timeout in seconds, default is 30\n"
748 " -d string URL decode given string\n"
749 " -r string Specify basic auth realm\n"
750 " -m string MD5 crypt given string\n"
759 if( (tls == 1) && (keys < 2) )
761 fprintf(stderr, "Error: Missing private key or certificate file\n");
768 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
772 /* default docroot */
773 if( !conf.docroot[0] && !realpath(".", conf.docroot) )
775 fprintf(stderr, "Error: Can not determine default document root: %s\n",
782 conf.realm = "Protected Area";
785 uh_config_parse(&conf);
787 /* default network timeout */
788 if( conf.network_timeout <= 0 )
789 conf.network_timeout = 30;
791 #if defined(HAVE_CGI) || defined(HAVE_LUA)
792 /* default script timeout */
793 if( conf.script_timeout <= 0 )
794 conf.script_timeout = 60;
798 /* default cgi prefix */
799 if( ! conf.cgi_prefix )
800 conf.cgi_prefix = "/cgi-bin";
804 /* load Lua plugin */
805 if( ! (lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)) )
808 "Notice: Unable to load Lua plugin - disabling Lua support! "
809 "(Reason: %s)\n", dlerror()
814 /* resolve functions */
815 if( !(conf.lua_init = dlsym(lib, "uh_lua_init")) ||
816 !(conf.lua_close = dlsym(lib, "uh_lua_close")) ||
817 !(conf.lua_request = dlsym(lib, "uh_lua_request"))
820 "Error: Failed to lookup required symbols "
821 "in Lua plugin: %s\n", dlerror()
826 /* init Lua runtime if handler is specified */
827 if( conf.lua_handler )
829 /* default lua prefix */
830 if( ! conf.lua_prefix )
831 conf.lua_prefix = "/lua";
833 L = conf.lua_init(conf.lua_handler);
838 /* fork (if not disabled) */
852 if( (cur_fd = open("/dev/null", O_WRONLY)) > -1 )
855 if( (cur_fd = open("/dev/null", O_RDONLY)) > -1 )
858 if( (cur_fd = open("/dev/null", O_RDONLY)) > -1 )
868 /* backup server descriptor set */
874 /* create a working copy of the used fd set */
877 /* sleep until socket activity */
878 if( select(max_fd + 1, &read_fds, NULL, NULL, NULL) == -1 )
884 /* run through the existing connections looking for data to be read */
885 for( cur_fd = 0; cur_fd <= max_fd; cur_fd++ )
887 /* is a socket managed by us */
888 if( FD_ISSET(cur_fd, &read_fds) )
890 /* is one of our listen sockets */
891 if( FD_ISSET(cur_fd, &serv_fds) )
893 /* handle new connections */
894 if( (new_fd = accept(cur_fd, NULL, 0)) != -1 )
896 /* add to global client list */
897 if( (cl = uh_client_add(new_fd, uh_listener_lookup(cur_fd))) != NULL )
900 /* setup client tls context */
905 /* add client socket to global fdset */
906 FD_SET(new_fd, &used_fds);
908 max_fd = max(max_fd, new_fd);
911 /* insufficient resources */
915 "uh_client_add(): Can not manage more than "
916 "%i client sockets, connection dropped\n",
925 /* is a client socket */
928 if( ! (cl = uh_client_lookup(cur_fd)) )
930 /* this should not happen! */
932 "uh_client_lookup(): No entry for fd %i!\n",
938 /* parse message header */
939 if( (req = uh_http_header_recv(cl)) != NULL )
941 /* RFC1918 filtering required? */
942 if( conf.rfc1918_filter && sa_rfc1918(&cl->peeraddr) &&
943 !sa_rfc1918(&cl->servaddr) )
945 uh_http_sendhf(cl, 403, "Forbidden",
946 "Rejected request from RFC1918 IP to public server address");
951 if( L && uh_path_match(conf.lua_prefix, req->url) )
953 conf.lua_request(cl, req, L);
957 /* dispatch request */
958 if( (pin = uh_path_lookup(cl, req->url)) != NULL )
961 if( uh_auth_check(cl, req, pin) )
964 if( uh_path_match(conf.cgi_prefix, pin->name) )
966 uh_cgi_request(cl, req, pin);
971 uh_file_request(cl, req, pin);
979 /* Try to invoke an error handler */
980 pin = uh_path_lookup(cl, conf.error_handler);
982 if( pin && uh_auth_check(cl, req, pin) )
984 req->redirect_status = 404;
987 if( uh_path_match(conf.cgi_prefix, pin->name) )
989 uh_cgi_request(cl, req, pin);
994 uh_file_request(cl, req, pin);
999 uh_http_sendhf(cl, 404, "Not Found",
1000 "No such file or directory");
1006 /* free client tls context */
1013 /* close client socket */
1015 FD_CLR(cur_fd, &used_fds);
1017 /* remove from global client list */
1018 uh_client_remove(cur_fd);
1025 /* destroy the Lua state */