2 This file is part of GNUnet
3 (C) 2007, 2009, 2011, 2012 Christian Grothoff
5 GNUnet is free software; you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published
7 by the Free Software Foundation; either version 3, or (at your
8 option) any later version.
10 GNUnet is distributed in the hope that it will be useful, but
11 WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with GNUnet; see the file COPYING. If not, write to the
17 Free Software Foundation, Inc., 59 Temple Place - Suite 330,
18 Boston, MA 02111-1307, USA.
22 * @file test_gnunet_vpn.c
23 * @brief testcase for tunneling HTTP over the GNUnet VPN
24 * @author Christian Grothoff
27 #include <curl/curl.h>
28 #include <microhttpd.h>
29 #include "gnunet_vpn_service.h"
30 #include "gnunet_testing_lib.h"
34 #define TIMEOUT GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_SECONDS, 300)
38 * Return value for 'main'.
40 static int global_ret;
42 static struct GNUNET_VPN_Handle *vpn;
44 static struct MHD_Daemon *mhd;
46 static GNUNET_SCHEDULER_TaskIdentifier mhd_task_id;
48 static GNUNET_SCHEDULER_TaskIdentifier curl_task_id;
50 static GNUNET_SCHEDULER_TaskIdentifier ctrl_c_task_id;
52 static struct GNUNET_VPN_RedirectionRequest *rr;
61 * IP address of the ultimate destination.
63 static const char *dest_ip;
66 * Address family of the dest_ip.
71 * Address family to use by the curl client.
82 static struct CBC cbc;
86 copy_buffer (void *ptr, size_t size, size_t nmemb, void *ctx)
88 struct CBC *cbc = ctx;
90 if (cbc->pos + size * nmemb > sizeof (cbc->buf))
91 return 0; /* overflow */
92 memcpy (&cbc->buf[cbc->pos], ptr, size * nmemb);
93 cbc->pos += size * nmemb;
99 mhd_ahc (void *cls, struct MHD_Connection *connection, const char *url,
100 const char *method, const char *version, const char *upload_data,
101 size_t * upload_data_size, void **unused)
104 struct MHD_Response *response;
107 if (0 != strcmp ("GET", method))
108 return MHD_NO; /* unexpected method */
115 GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
116 "MHD sends respose for request to URL `%s'\n", url);
118 MHD_create_response_from_buffer (strlen (url), (void *) url,
119 MHD_RESPMEM_MUST_COPY);
120 ret = MHD_queue_response (connection, MHD_HTTP_OK, response);
121 MHD_destroy_response (response);
131 if (mhd_task_id != GNUNET_SCHEDULER_NO_TASK)
133 GNUNET_SCHEDULER_cancel (mhd_task_id);
134 mhd_task_id = GNUNET_SCHEDULER_NO_TASK;
136 if (curl_task_id != GNUNET_SCHEDULER_NO_TASK)
138 GNUNET_SCHEDULER_cancel (curl_task_id);
139 curl_task_id = GNUNET_SCHEDULER_NO_TASK;
141 if (ctrl_c_task_id != GNUNET_SCHEDULER_NO_TASK)
143 GNUNET_SCHEDULER_cancel (ctrl_c_task_id);
144 ctrl_c_task_id = GNUNET_SCHEDULER_NO_TASK;
148 MHD_stop_daemon (mhd);
153 GNUNET_VPN_cancel_request (rr);
158 GNUNET_VPN_disconnect (vpn);
161 GNUNET_free_non_null (url);
167 * Function to run the HTTP client.
174 curl_task (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
176 curl_task_id = GNUNET_SCHEDULER_NO_TASK;
188 struct GNUNET_NETWORK_FDSet nrs;
189 struct GNUNET_NETWORK_FDSet nws;
190 struct GNUNET_TIME_Relative delay;
199 curl_multi_perform (multi, &running);
202 GNUNET_assert (NULL != (msg = curl_multi_info_read (multi, &running)));
203 if (msg->msg == CURLMSG_DONE)
205 if (msg->data.result != CURLE_OK)
207 fprintf (stderr, "%s failed at %s:%d: `%s'\n", "curl_multi_perform",
208 __FILE__, __LINE__, curl_easy_strerror (msg->data.result));
212 curl_multi_remove_handle (multi, curl);
213 curl_multi_cleanup (multi);
214 curl_easy_cleanup (curl);
217 if (cbc.pos != strlen ("/hello_world"))
222 if (0 != strncmp ("/hello_world", cbc.buf, strlen ("/hello_world")))
225 GNUNET_log (GNUNET_ERROR_TYPE_WARNING,
226 "You might want to check if your host-based firewall is blocking the connections.\n");
229 GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, "Download complete, shutting down!\n");
233 GNUNET_assert (CURLM_OK == curl_multi_fdset (multi, &rs, &ws, &es, &max));
234 if ((CURLM_OK != curl_multi_timeout (multi, &timeout)) || (-1 == timeout))
235 delay = GNUNET_TIME_UNIT_SECONDS;
238 GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_MILLISECONDS,
239 (unsigned int) timeout);
240 GNUNET_NETWORK_fdset_copy_native (&nrs, &rs, max + 1);
241 GNUNET_NETWORK_fdset_copy_native (&nws, &ws, max + 1);
243 GNUNET_SCHEDULER_add_select (GNUNET_SCHEDULER_PRIORITY_DEFAULT, delay,
244 &nrs, &nws, &curl_task, NULL);
249 * Callback invoked from the VPN service once a redirection is
250 * available. Provides the IP address that can now be used to
251 * reach the requested destination (in our case, the MHD server)
254 * @param af address family, AF_INET or AF_INET6; AF_UNSPEC on error;
255 * will match 'result_af' from the request
256 * @param address IP address (struct in_addr or struct in_addr6, depending on 'af')
257 * that the VPN allocated for the redirection;
258 * traffic to this IP will now be redirected to the
259 * specified target peer; NULL on error
262 allocation_cb (void *cls, int af, const void *address)
264 char ips[INET6_ADDRSTRLEN];
269 fprintf (stderr, "VPN failed to allocate appropriate address\n");
270 GNUNET_SCHEDULER_shutdown ();
273 GNUNET_asprintf (&url, "http://%s:%u/hello_world",
274 inet_ntop (af, address, ips, sizeof (ips)),
275 (unsigned int) PORT);
276 curl = curl_easy_init ();
277 curl_easy_setopt (curl, CURLOPT_URL, url);
278 curl_easy_setopt (curl, CURLOPT_WRITEFUNCTION, ©_buffer);
279 curl_easy_setopt (curl, CURLOPT_WRITEDATA, &cbc);
280 curl_easy_setopt (curl, CURLOPT_FAILONERROR, 1);
281 curl_easy_setopt (curl, CURLOPT_TIMEOUT, 150L);
282 curl_easy_setopt (curl, CURLOPT_CONNECTTIMEOUT, 15L);
283 curl_easy_setopt (curl, CURLOPT_NOSIGNAL, 1);
285 multi = curl_multi_init ();
286 GNUNET_assert (multi != NULL);
287 GNUNET_assert (CURLM_OK == curl_multi_add_handle (multi, curl));
288 GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, "Beginning HTTP download from `%s'\n",
295 * Function to keep the HTTP server running.
302 mhd_task (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
304 mhd_task_id = GNUNET_SCHEDULER_NO_TASK;
311 ctrl_c_shutdown (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
313 ctrl_c_task_id = GNUNET_SCHEDULER_NO_TASK;
323 struct GNUNET_NETWORK_FDSet nrs;
324 struct GNUNET_NETWORK_FDSet nws;
329 unsigned MHD_LONG_LONG timeout;
330 struct GNUNET_TIME_Relative delay;
332 GNUNET_assert (GNUNET_SCHEDULER_NO_TASK == mhd_task_id);
337 GNUNET_assert (MHD_YES == MHD_get_fdset (mhd, &rs, &ws, &es, &max_fd));
338 if (MHD_YES == MHD_get_timeout (mhd, &timeout))
340 GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_MILLISECONDS,
341 (unsigned int) timeout);
343 delay = GNUNET_TIME_UNIT_FOREVER_REL;
344 GNUNET_NETWORK_fdset_copy_native (&nrs, &rs, max_fd + 1);
345 GNUNET_NETWORK_fdset_copy_native (&nws, &ws, max_fd + 1);
347 GNUNET_SCHEDULER_add_select (GNUNET_SCHEDULER_PRIORITY_DEFAULT, delay,
348 &nrs, &nws, &mhd_task, NULL);
353 run (void *cls, const struct GNUNET_CONFIGURATION_Handle *cfg,
354 struct GNUNET_TESTING_Peer *peer)
361 vpn = GNUNET_VPN_connect (cfg);
362 GNUNET_assert (NULL != vpn);
363 flags = MHD_USE_DEBUG;
364 if (AF_INET6 == dest_af)
365 flags |= MHD_USE_IPv6;
367 MHD_start_daemon (flags, PORT, NULL, NULL, &mhd_ahc, NULL,
371 GNUNET_assert (NULL != mhd);
377 GNUNET_assert (1 == inet_pton (dest_af, dest_ip, &v4));
381 GNUNET_assert (1 == inet_pton (dest_af, dest_ip, &v6));
387 rr = GNUNET_VPN_redirect_to_ip (vpn, src_af, dest_af, addr,
388 GNUNET_TIME_UNIT_FOREVER_ABS, &allocation_cb,
391 GNUNET_SCHEDULER_add_delayed (TIMEOUT, &ctrl_c_shutdown, NULL);
396 main (int argc, char *const *argv)
405 if (0 != ACCESS ("/dev/net/tun", R_OK))
407 GNUNET_log_strerror_file (GNUNET_ERROR_TYPE_ERROR, "access",
409 fprintf (stderr, "WARNING: System unable to run test, skipping.\n");
413 vpn_binary = GNUNET_OS_get_libexec_binary_path ("gnunet-helper-vpn");
414 exit_binary = GNUNET_OS_get_libexec_binary_path ("gnunet-helper-exit");
415 fprintf (stderr,"%s\n", vpn_binary);
416 fprintf (stderr,"%s\n", exit_binary);
417 if ((GNUNET_YES != (ret = GNUNET_OS_check_helper_binary (vpn_binary, GNUNET_YES, "-d gnunet-vpn - - 169.1.3.3.7 255.255.255.0"))) || //ipv4 only please!
418 (GNUNET_YES != (ret = GNUNET_OS_check_helper_binary (exit_binary, GNUNET_YES, "-d gnunet-vpn - - - 169.1.3.3.7 255.255.255.0")))) //no nat, ipv4 only
420 GNUNET_free (vpn_binary);
421 GNUNET_free (exit_binary);
423 "WARNING: gnunet-helper-{exit,vpn} binaries are not SUID, refusing to run test (as it would have to fail). %d\n", ret);
427 GNUNET_free (vpn_binary);
428 GNUNET_free (exit_binary);
430 if (NULL != strstr (bin, "lt-"))
431 bin = strstr (bin, "lt-") + 4;
432 type = strstr (bin, "-");
435 fprintf (stderr, "invalid binary name\n");
439 /* on Windows, .exe is suffixed to these binaries,
440 * thus cease comparison after the 6th char.
442 if (0 == strncmp (type, "4_to_6",6))
444 dest_ip = "FC5A:04E1:C2BA::1";
448 else if (0 == strncmp (type, "6_to_4",6))
450 dest_ip = "169.254.86.1";
454 else if (0 == strncmp (type, "4_over",6))
456 dest_ip = "169.254.86.1";
460 else if (0 == strncmp (type, "6_over",6))
462 dest_ip = "FC5A:04E1:C2BA::1";
468 fprintf (stderr, "invalid binary suffix `%s'\n", type);
471 if ((GNUNET_OK != GNUNET_NETWORK_test_pf (src_af)) ||
472 (GNUNET_OK != GNUNET_NETWORK_test_pf (dest_af)))
475 "Required address families not supported by this system, skipping test.\n");
478 if (0 != curl_global_init (CURL_GLOBAL_WIN32))
480 fprintf (stderr, "failed to initialize curl\n");
484 GNUNET_TESTING_peer_run ("test-gnunet-vpn", "test_gnunet_vpn.conf", &run,
487 GNUNET_DISK_directory_remove ("/tmp/gnunet-test-vpn");
491 /* end of test_gnunet_vpn.c */