src/transport/plugin_transport_https.c

   1 /*
   2      This file is part of GNUnet
   3      (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Christian Grothoff (and other contributing authors)
   4
   5      GNUnet is free software; you can redistribute it and/or modify
   6      it under the terms of the GNU General Public License as published
   7      by the Free Software Foundation; either version 3, or (at your
   8      option) any later version.
   9
  10      GNUnet is distributed in the hope that it will be useful, but
  11      WITHOUT ANY WARRANTY; without even the implied warranty of
  12      MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13      General Public License for more details.
  14
  15      You should have received a copy of the GNU General Public License
  16      along with GNUnet; see the file COPYING.  If not, write to the
  17      Free Software Foundation, Inc., 59 Temple Place - Suite 330,
  18      Boston, MA 02111-1307, USA.
  19 */
  20
  21 /**
  22  * @file transport/plugin_transport_https.c
  23  * @brief https transport service plugin
  24  * @author Matthias Wachs
  25  */
  26
  27 #include "platform.h"
  28 #include "gnunet_common.h"
  29 #include "gnunet_constants.h"
  30 #include "gnunet_protocols.h"
  31 #include "gnunet_connection_lib.h"
  32 #include "gnunet_service_lib.h"
  33 #include "gnunet_statistics_service.h"
  34 #include "gnunet_transport_service.h"
  35 #include "gnunet_resolver_service.h"
  36 #include "gnunet_server_lib.h"
  37 #include "gnunet_container_lib.h"
  38 #include "plugin_transport.h"
  39 #include "gnunet_os_lib.h"
  40 #include "gnunet_disk_lib.h"
  41 #include "microhttpd.h"
  42 #include <curl/curl.h>
  43
  44 #define DEBUG_HTTPS GNUNET_NO
  45 #define VERBOSE GNUNET_NO
  46 #define DEBUG_CURL GNUNET_NO
  47 #define DEBUG_CONNECTIONS GNUNET_NO
  48 #define DEBUG_SESSION_SELECTION GNUNET_NO
  49
  50 #define INBOUND GNUNET_NO
  51 #define OUTBOUND GNUNET_YES
  52
  53 #define PROTOCOL_PREFIX "https"
  54
  55 /**
  56  * Text of the response sent back after the last bytes of a PUT
  57  * request have been received (just to formally obey the HTTP
  58  * protocol).
  59  */
  60 #define HTTP_PUT_RESPONSE "Thank you!"
  61
  62 /**
  63  * After how long do we expire an address that we
  64  * learned from another peer if it is not reconfirmed
  65  * by anyone?
  66  */
  67 #define LEARNED_ADDRESS_EXPIRATION GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_HOURS, 6)
  68
  69 /**
  70  * Page returned if request invalid
  71  */
  72 #define HTTP_ERROR_RESPONSE "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\"><HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>Not Found</H1>The requested URL was not found on this server.<P><HR><ADDRESS></ADDRESS></BODY></HTML>"
  73
  74 /**
  75  * Timeout for a http connect
  76  */
  77 #define HTTP_CONNECT_TIMEOUT 30
  78
  79 /**
  80  * Network format for IPv4 addresses.
  81  */
  82 struct IPv4HttpAddress
  83 {
  84   /**
  85    * IPv4 address, in network byte order.
  86    */
  87   uint32_t ipv4_addr GNUNET_PACKED;
  88
  89   /**
  90    * Port number, in network byte order.
  91    */
  92   uint16_t u_port GNUNET_PACKED;
  93
  94 };
  95
  96
  97 /**
  98  * Network format for IPv6 addresses.
  99  */
 100 struct IPv6HttpAddress
 101 {
 102   /**
 103    * IPv6 address.
 104    */
 105   struct in6_addr ipv6_addr GNUNET_PACKED;
 106
 107   /**
 108    * Port number, in network byte order.
 109    */
 110   uint16_t u6_port GNUNET_PACKED;
 111
 112 };
 113
 114
 115 /**
 116  *  Message to send using http
 117  */
 118 struct HTTP_Message
 119 {
 120   /**
 121    * next pointer for double linked list
 122    */
 123   struct HTTP_Message * next;
 124
 125   /**
 126    * previous pointer for double linked list
 127    */
 128   struct HTTP_Message * prev;
 129
 130   /**
 131    * buffer containing data to send
 132    */
 133   char *buf;
 134
 135   /**
 136    * amount of data already sent
 137    */
 138   size_t pos;
 139
 140   /**
 141    * buffer length
 142    */
 143   size_t size;
 144
 145   /**
 146    * Continuation function to call once the transmission buffer
 147    * has again space available.  NULL if there is no
 148    * continuation to call.
 149    */
 150   GNUNET_TRANSPORT_TransmitContinuation transmit_cont;
 151
 152   /**
 153    * Closure for transmit_cont.
 154    */
 155   void *transmit_cont_cls;
 156 };
 157
 158
 159 struct HTTP_PeerContext
 160 {
 161   /**
 162    * peer's identity
 163    */
 164   struct GNUNET_PeerIdentity identity;
 165
 166   /**
 167    * Pointer to the global plugin struct.
 168    */
 169   struct Plugin *plugin;
 170
 171   /**
 172    * Linked list of connections with this peer
 173    * head
 174    */
 175   struct Session * head;
 176
 177   /**
 178    * Linked list of connections with this peer
 179    * tail
 180    */
 181   struct Session * tail;
 182
 183   /**
 184    * id for next session
 185    */
 186   size_t session_id_counter;
 187
 188   /**
 189    * Last session used to send data
 190    */
 191   struct Session * last_session;
 192 };
 193
 194
 195 struct Session
 196 {
 197   /**
 198    * API requirement.
 199    */
 200   struct SessionHeader header;
 201
 202   /**
 203    * next session in linked list
 204    */
 205   struct Session * next;
 206
 207   /**
 208    * previous session in linked list
 209    */
 210   struct Session * prev;
 211
 212   /**
 213    * address of this session
 214    */
 215   void * addr;
 216
 217   /**
 218    * address length
 219    */
 220   size_t addrlen;
 221
 222   /**
 223    * target url
 224    */
 225   char * url;
 226
 227   /**
 228    * Message queue for outbound messages
 229    * head of queue
 230    */
 231   struct HTTP_Message * pending_msgs_head;
 232
 233   /**
 234    * Message queue for outbound messages
 235    * tail of queue
 236    */
 237   struct HTTP_Message * pending_msgs_tail;
 238
 239   /**
 240    * partner peer this connection belongs to
 241    */
 242   struct HTTP_PeerContext * peercontext;
 243
 244   /**
 245    * message stream tokenizer for incoming data
 246    */
 247   struct GNUNET_SERVER_MessageStreamTokenizer *msgtok;
 248
 249   /**
 250    * session direction
 251    * outbound: OUTBOUND (GNUNET_YES)
 252    * inbound : INBOUND (GNUNET_NO)
 253    */
 254   unsigned int direction;
 255
 256   /**
 257    * is session connected to send data?
 258    */
 259   unsigned int send_connected;
 260
 261   /**
 262    * is send connection active?
 263    */
 264   unsigned int send_active;
 265
 266   /**
 267    * connection disconnect forced (e.g. from transport)
 268    */
 269   unsigned int send_force_disconnect;
 270
 271   /**
 272    * is session connected to receive data?
 273    */
 274   unsigned int recv_connected;
 275
 276   /**
 277    * is receive connection active?
 278    */
 279   unsigned int recv_active;
 280
 281   /**
 282    * connection disconnect forced (e.g. from transport)
 283    */
 284   unsigned int recv_force_disconnect;
 285
 286   /**
 287    * id for next session
 288    * NOTE: 0 is not an ID, zero is not defined. A correct ID is always > 0
 289    */
 290   size_t session_id;
 291
 292   /**
 293    * entity managing sending data
 294    * outbound session: CURL *
 295    * inbound session: mhd_connection *
 296    */
 297   void * send_endpoint;
 298
 299   /**
 300    * entity managing recieving data
 301    * outbound session: CURL *
 302    * inbound session: mhd_connection *
 303    */
 304   void * recv_endpoint;
 305 };
 306
 307 /**
 308  * Encapsulation of all of the state of the plugin.
 309  */
 310 struct Plugin
 311 {
 312   /**
 313    * Our environment.
 314    */
 315   struct GNUNET_TRANSPORT_PluginEnvironment *env;
 316
 317   /**
 318    * Handle for reporting statistics.
 319    */
 320   struct GNUNET_STATISTICS_Handle *stats;
 321
 322   unsigned int port_inbound;
 323
 324   struct GNUNET_CONTAINER_MultiHashMap *peers;
 325
 326   /**
 327    * Daemon for listening for new IPv4 connections.
 328    */
 329   struct MHD_Daemon *http_server_daemon_v4;
 330
 331   /**
 332    * Daemon for listening for new IPv6connections.
 333    */
 334   struct MHD_Daemon *http_server_daemon_v6;
 335
 336   /**
 337    * Our primary task for http daemon handling IPv4 connections
 338    */
 339   GNUNET_SCHEDULER_TaskIdentifier http_server_task_v4;
 340
 341   /**
 342    * Our primary task for http daemon handling IPv6 connections
 343    */
 344   GNUNET_SCHEDULER_TaskIdentifier http_server_task_v6;
 345
 346   /**
 347    * The task sending data
 348    */
 349   GNUNET_SCHEDULER_TaskIdentifier http_curl_task;
 350
 351   /**
 352    * cURL Multihandle
 353    */
 354   CURLM * multi_handle;
 355
 356   /**
 357    * Our ASCII encoded, hashed peer identity
 358    * This string is used to distinguish between connections and is added to the urls
 359    */
 360   struct GNUNET_CRYPTO_HashAsciiEncoded my_ascii_hash_ident;
 361
 362   struct sockaddr_in * bind4_address;
 363   struct sockaddr_in6 * bind6_address;
 364   char * bind_hostname;
 365   int use_ipv6;
 366   int use_ipv4;
 367
 368   /* The certificate MHD uses as an \0 terminated string */
 369   char * cert;
 370
 371   /* The private key MHD uses as an \0 terminated string */
 372   char * key;
 373
 374   char * crypto_init;
 375 };
 376
 377
 378 /**
 379  * Function called for a quick conversion of the binary address to
 380  * a numeric address.  Note that the caller must not free the
 381  * address and that the next call to this function is allowed
 382  * to override the address again.
 383  *
 384  * @param cls closure
 385  * @param addr binary address
 386  * @param addrlen length of the address
 387  * @return string representing the same address
 388  */
 389 static const char*
 390 http_plugin_address_to_string (void *cls,
 391                                    const void *addr,
 392                                    size_t addrlen);
 393
 394
 395 /**
 396  * Call MHD to process pending ipv4 requests and then go back
 397  * and schedule the next run.
 398  */
 399 static void http_server_daemon_v4_run (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc);
 400 /**
 401  * Call MHD to process pending ipv6 requests and then go back
 402  * and schedule the next run.
 403  */
 404 static void http_server_daemon_v6_run (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc);
 405
 406 /**
 407  * Function setting up curl handle and selecting message to send
 408  * @param cls plugin
 409  * @param ses session to send data to
 410  * @param con connection
 411  * @return bytes sent to peer
 412  */
 413 static ssize_t send_check_connections (void *cls, struct Session *ps);
 414
 415 /**
 416  * Function setting up file descriptors and scheduling task to run
 417  * @param cls closure
 418  * @param ses session to send data to
 419  * @param
 420  */
 421 static int curl_schedule(void *cls );
 422
 423
 424
 425 static char * create_url(void * cls, const void * addr, size_t addrlen, size_t id)
 426 {
 427   struct Plugin *plugin = cls;
 428   char *url = NULL;
 429
 430   GNUNET_assert ((addr!=NULL) && (addrlen != 0));
 431   GNUNET_asprintf(&url,
 432                   "%s://%s/%s;%u", PROTOCOL_PREFIX,
 433                   http_plugin_address_to_string(NULL, addr, addrlen),
 434                   (char *) (&plugin->my_ascii_hash_ident),id);
 435
 436   return url;
 437 }
 438
 439 /**
 440  * Removes a message from the linked list of messages
 441  * @param con connection to remove message from
 442  * @param msg message to remove
 443  * @return GNUNET_SYSERR if msg not found, GNUNET_OK on success
 444  */
 445 static int remove_http_message (struct Session * ps, struct HTTP_Message * msg)
 446 {
 447   GNUNET_CONTAINER_DLL_remove(ps->pending_msgs_head,ps->pending_msgs_tail,msg);
 448   GNUNET_free(msg);
 449   return GNUNET_OK;
 450 }
 451
 452 int remove_peer_context_Iterator (void *cls, const GNUNET_HashCode *key, void *value);
 453
 454 /**
 455  * Removes a session from the linked list of sessions
 456  * @param pc peer context
 457  * @param ps session
 458  * @param call_msg_cont GNUNET_YES to call pending message continuations, otherwise no
 459  * @param call_msg_cont_result, result to call message continuations with
 460  * @return GNUNET_SYSERR if msg not found, GNUNET_OK on success
 461  */
 462 static int remove_session (struct HTTP_PeerContext * pc, struct Session * ps,  int call_msg_cont, int call_msg_cont_result)
 463 {
 464   struct HTTP_Message * msg;
 465   struct Plugin * plugin = ps->peercontext->plugin;
 466
 467 #if DEBUG_CONNECTIONS
 468   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: removing %s session %X with id %u\n", ps, (ps->direction == INBOUND) ? "inbound" : "outbound", ps, ps->session_id);
 469 #endif
 470   plugin->env->session_end(plugin, &pc->identity, ps);
 471
 472   GNUNET_free_non_null (ps->addr);
 473   GNUNET_SERVER_mst_destroy (ps->msgtok);
 474   GNUNET_free(ps->url);
 475
 476   if (ps->direction==INBOUND)
 477   {
 478           if (ps->recv_endpoint != NULL)
 479           {
 480                   curl_easy_cleanup(ps->recv_endpoint);
 481                   ps->recv_endpoint = NULL;
 482           }
 483           if (ps->send_endpoint != NULL)
 484           {
 485                   curl_easy_cleanup(ps->send_endpoint);
 486                   ps->send_endpoint = NULL;
 487           }
 488   }
 489
 490   msg = ps->pending_msgs_head;
 491   while (msg!=NULL)
 492   {
 493     if ((call_msg_cont == GNUNET_YES) && (msg->transmit_cont!=NULL))
 494     {
 495       msg->transmit_cont (msg->transmit_cont_cls,&pc->identity,call_msg_cont_result);
 496     }
 497     GNUNET_free(msg);
 498     GNUNET_CONTAINER_DLL_remove(ps->pending_msgs_head,ps->pending_msgs_head,msg);
 499     msg = ps->pending_msgs_head;
 500   }
 501
 502   GNUNET_CONTAINER_DLL_remove(pc->head,pc->tail,ps);
 503   GNUNET_free(ps);
 504   ps = NULL;
 505
 506   /* no sessions left remove peer */
 507   if (pc->head==NULL)
 508   {
 509 #if DEBUG_HTTPS
 510   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"No sessions left for peer `%s', removing context\n",GNUNET_i2s(&pc->identity));
 511 #endif
 512         remove_peer_context_Iterator(plugin, &pc->identity.hashPubKey, pc);
 513   }
 514
 515   return GNUNET_OK;
 516 }
 517
 518 int remove_peer_context_Iterator (void *cls, const GNUNET_HashCode *key, void *value)
 519 {
 520   struct Plugin *plugin = cls;
 521   struct HTTP_PeerContext * pc = value;
 522   struct Session * ps = pc->head;
 523   struct Session * tmp = NULL;
 524   struct HTTP_Message * msg = NULL;
 525   struct HTTP_Message * msg_tmp = NULL;
 526 #if DEBUG_HTTPS
 527   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Freeing context for peer `%s'\n",GNUNET_i2s(&pc->identity));
 528 #endif
 529   GNUNET_CONTAINER_multihashmap_remove (plugin->peers, &pc->identity.hashPubKey, pc);
 530   while (ps!=NULL)
 531   {
 532         plugin->env->session_end(plugin, &pc->identity, ps);
 533         tmp = ps->next;
 534
 535     GNUNET_free_non_null (ps->addr);
 536     GNUNET_free(ps->url);
 537     if (ps->msgtok != NULL)
 538       GNUNET_SERVER_mst_destroy (ps->msgtok);
 539
 540     msg = ps->pending_msgs_head;
 541     while (msg!=NULL)
 542     {
 543       msg_tmp = msg->next;
 544       GNUNET_free(msg);
 545       msg = msg_tmp;
 546     }
 547     if (ps->direction==OUTBOUND)
 548     {
 549       if (ps->send_endpoint!=NULL)
 550         curl_easy_cleanup(ps->send_endpoint);
 551       if (ps->recv_endpoint!=NULL)
 552         curl_easy_cleanup(ps->recv_endpoint);
 553     }
 554
 555     GNUNET_free(ps);
 556     ps=tmp;
 557   }
 558   GNUNET_free(pc);
 559   GNUNET_STATISTICS_update (plugin->env->stats,
 560                             gettext_noop ("# HTTP peers active"),
 561                             -1,
 562                             GNUNET_NO);
 563   return GNUNET_YES;
 564 }
 565
 566 /**
 567  * Add the IP of our network interface to the list of
 568  * our external IP addresses.
 569  *
 570  * @param cls the 'struct Plugin*'
 571  * @param name name of the interface
 572  * @param isDefault do we think this may be our default interface
 573  * @param addr address of the interface
 574  * @param addrlen number of bytes in addr
 575  * @return GNUNET_OK to continue iterating
 576  */
 577 static int
 578 process_interfaces (void *cls,
 579                     const char *name,
 580                     int isDefault,
 581                     const struct sockaddr *addr, socklen_t addrlen)
 582 {
 583   struct Plugin *plugin = cls;
 584   struct IPv4HttpAddress * t4;
 585   struct IPv6HttpAddress * t6;
 586   int af;
 587
 588
 589   GNUNET_assert(cls !=NULL);
 590   af = addr->sa_family;
 591   if ((af == AF_INET) && (plugin->use_ipv4 == GNUNET_YES) && (plugin->bind6_address == NULL))
 592     {
 593           struct in_addr bnd_cmp = ((struct sockaddr_in *) addr)->sin_addr;
 594       t4 = GNUNET_malloc(sizeof(struct IPv4HttpAddress));
 595       /* Not skipping loopback addresses
 596       if (INADDR_LOOPBACK == ntohl(((struct sockaddr_in *) addr)->sin_addr.s_addr))
 597       {
 598
 599         return GNUNET_OK;
 600       }
 601       */
 602       t4->ipv4_addr = ((struct sockaddr_in *) addr)->sin_addr.s_addr;
 603       t4->u_port = htons (plugin->port_inbound);
 604       if (plugin->bind4_address != NULL)
 605       {
 606           if (0 == memcmp(&plugin->bind4_address->sin_addr, &bnd_cmp, sizeof (struct in_addr)))
 607           {
 608                   plugin->env->notify_address(plugin->env->cls,"https",t4, sizeof (struct IPv4HttpAddress), GNUNET_TIME_UNIT_FOREVER_REL);
 609           }
 610       }
 611       else
 612       {
 613           plugin->env->notify_address(plugin->env->cls,"https",t4, sizeof (struct IPv4HttpAddress), GNUNET_TIME_UNIT_FOREVER_REL);
 614       }
 615       GNUNET_free (t4);
 616     }
 617   else if ((af == AF_INET6) && (plugin->use_ipv6 == GNUNET_YES)  && (plugin->bind4_address == NULL))
 618     {
 619           struct in6_addr bnd_cmp6 = ((struct sockaddr_in6 *) addr)->sin6_addr;
 620       t6 = GNUNET_malloc(sizeof(struct IPv6HttpAddress));
 621       if (IN6_IS_ADDR_LINKLOCAL (&((struct sockaddr_in6 *) addr)->sin6_addr))
 622         {
 623           return GNUNET_OK;
 624         }
 625
 626       if (plugin->bind6_address != NULL)
 627       {
 628           if (0 == memcmp(&plugin->bind6_address->sin6_addr, &bnd_cmp6, sizeof (struct in6_addr)))
 629           {
 630               memcpy (&t6->ipv6_addr,
 631                       &((struct sockaddr_in6 *) addr)->sin6_addr,
 632                       sizeof (struct in6_addr));
 633               t6->u6_port = htons (plugin->port_inbound);
 634               plugin->env->notify_address(plugin->env->cls,"https",t6,sizeof (struct IPv6HttpAddress) , GNUNET_TIME_UNIT_FOREVER_REL);
 635           }
 636       }
 637       else
 638       {
 639           memcpy (&t6->ipv6_addr,
 640                   &((struct sockaddr_in6 *) addr)->sin6_addr,
 641                   sizeof (struct in6_addr));
 642           t6->u6_port = htons (plugin->port_inbound);
 643           plugin->env->notify_address(plugin->env->cls,"https",t6,sizeof (struct IPv6HttpAddress) , GNUNET_TIME_UNIT_FOREVER_REL);
 644       }
 645       GNUNET_free (t6);
 646     }
 647   return GNUNET_OK;
 648 }
 649
 650
 651 /**
 652  * Callback called by MHD when a connection is terminated
 653  */
 654 static void mhd_termination_cb (void *cls, struct MHD_Connection * connection, void **httpSessionCache)
 655 {
 656   struct Session * ps = *httpSessionCache;
 657   if (ps == NULL)
 658     return;
 659   struct HTTP_PeerContext * pc = ps->peercontext;
 660
 661   if (connection==ps->recv_endpoint)
 662   {
 663 #if DEBUG_CONNECTIONS
 664     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: inbound connection from peer `%s' was terminated\n", ps, GNUNET_i2s(&pc->identity));
 665 #endif
 666     ps->recv_active = GNUNET_NO;
 667     ps->recv_connected = GNUNET_NO;
 668     ps->recv_endpoint = NULL;
 669   }
 670   if (connection==ps->send_endpoint)
 671   {
 672
 673     ps->send_active = GNUNET_NO;
 674     ps->send_connected = GNUNET_NO;
 675     ps->send_endpoint = NULL;
 676 #if DEBUG_CONNECTIONS
 677     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: outbound connection from peer `%s' was terminated\n", ps, GNUNET_i2s(&pc->identity));
 678 #endif
 679   }
 680
 681   /* if both connections disconnected, remove session */
 682   if ((ps->send_connected == GNUNET_NO) && (ps->recv_connected == GNUNET_NO))
 683   {
 684       GNUNET_STATISTICS_update (pc->plugin->env->stats,
 685                             gettext_noop ("# HTTPS inbound sessions for peers active"),
 686                             -1,
 687                             GNUNET_NO);
 688     remove_session(pc,ps,GNUNET_YES,GNUNET_SYSERR);
 689   }
 690 }
 691
 692 static void mhd_write_mst_cb (void *cls,
 693                               void *client,
 694                               const struct GNUNET_MessageHeader *message)
 695 {
 696
 697   struct Session *ps  = cls;
 698   struct HTTP_PeerContext *pc = ps->peercontext;
 699   GNUNET_assert(ps != NULL);
 700   GNUNET_assert(pc != NULL);
 701 #if DEBUG_HTTPS
 702   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
 703               "Connection %X: Forwarding message to transport service, type %u and size %u from `%s' (`%s')\n",
 704               ps,
 705               ntohs(message->type),
 706               ntohs(message->size),
 707               GNUNET_i2s(&(ps->peercontext)->identity),http_plugin_address_to_string(NULL,ps->addr,ps->addrlen));
 708 #endif
 709   pc->plugin->env->receive (ps->peercontext->plugin->env->cls,
 710                             &pc->identity,
 711                             message, 1, ps,
 712                             NULL,
 713                             0);
 714 }
 715
 716 /**
 717  * Check if ip is allowed to connect.
 718  */
 719 static int
 720 mhd_accept_cb (void *cls,
 721                       const struct sockaddr *addr, socklen_t addr_len)
 722 {
 723 #if 0
 724   struct Plugin *plugin = cls;
 725 #endif
 726   /* Every connection is accepted, nothing more to do here */
 727   return MHD_YES;
 728 }
 729
 730 int mhd_send_callback (void *cls, uint64_t pos, char *buf, int max)
 731 {
 732   int bytes_read = 0;
 733
 734   struct Session * ps = cls;
 735   struct HTTP_PeerContext * pc;
 736   struct HTTP_Message * msg;
 737
 738   GNUNET_assert (ps!=NULL);
 739   pc = ps->peercontext;
 740   msg = ps->pending_msgs_tail;
 741   if (ps->send_force_disconnect==GNUNET_YES)
 742   {
 743 #if DEBUG_CONNECTIONS
 744     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: outbound forced to disconnect\n",ps);
 745 #endif
 746     return -1;
 747   }
 748
 749   if (msg!=NULL)
 750   {
 751     if ((msg->size-msg->pos) <= max)
 752     {
 753       memcpy(buf,&msg->buf[msg->pos],(msg->size-msg->pos));
 754       bytes_read = msg->size-msg->pos;
 755       msg->pos+=(msg->size-msg->pos);
 756     }
 757     else
 758     {
 759       memcpy(buf,&msg->buf[msg->pos],max);
 760       msg->pos+=max;
 761       bytes_read = max;
 762     }
 763
 764     if (msg->pos==msg->size)
 765     {
 766       if (NULL!=msg->transmit_cont)
 767         msg->transmit_cont (msg->transmit_cont_cls,&pc->identity,GNUNET_OK);
 768       remove_http_message(ps,msg);
 769     }
 770   }
 771   return bytes_read;
 772 }
 773
 774 /**
 775  * Process GET or PUT request received via MHD.  For
 776  * GET, queue response that will send back our pending
 777  * messages.  For PUT, process incoming data and send
 778  * to GNUnet core.  In either case, check if a session
 779  * already exists and create a new one if not.
 780  */
 781 static int
 782 mdh_access_cb (void *cls,
 783                        struct MHD_Connection *mhd_connection,
 784                        const char *url,
 785                        const char *method,
 786                        const char *version,
 787                        const char *upload_data,
 788                        size_t * upload_data_size, void **httpSessionCache)
 789 {
 790   struct Plugin *plugin = cls;
 791   struct MHD_Response *response;
 792   const union MHD_ConnectionInfo * conn_info;
 793
 794   struct sockaddr_in  *addrin;
 795   struct sockaddr_in6 *addrin6;
 796
 797   char address[INET6_ADDRSTRLEN+14];
 798   struct GNUNET_PeerIdentity pi_in;
 799   size_t id_num = 0;
 800
 801   struct IPv4HttpAddress ipv4addr;
 802   struct IPv6HttpAddress ipv6addr;
 803
 804   struct HTTP_PeerContext *pc;
 805   struct Session *ps = NULL;
 806   struct Session *ps_tmp = NULL;
 807
 808   int res = GNUNET_NO;
 809   int send_error_to_client;
 810   void * addr;
 811   size_t addr_len;
 812
 813   GNUNET_assert(cls !=NULL);
 814   send_error_to_client = GNUNET_NO;
 815
 816   if (NULL == *httpSessionCache)
 817   {
 818     /* check url for peer identity , if invalid send HTTP 404*/
 819     size_t len = strlen(&url[1]);
 820     char * peer = GNUNET_malloc(104+1);
 821
 822     if ((len>104) && (url[104]==';'))
 823     {
 824         char * id = GNUNET_malloc((len-104)+1);
 825         strcpy(id,&url[105]);
 826         memcpy(peer,&url[1],103);
 827         peer[103] = '\0';
 828         id_num = strtoul ( id, NULL , 10);
 829         GNUNET_free(id);
 830     }
 831     res = GNUNET_CRYPTO_hash_from_string (peer, &(pi_in.hashPubKey));
 832     GNUNET_free(peer);
 833     if ( GNUNET_SYSERR == res )
 834     {
 835       response = MHD_create_response_from_data (strlen (HTTP_ERROR_RESPONSE),HTTP_ERROR_RESPONSE, MHD_NO, MHD_NO);
 836       res = MHD_queue_response (mhd_connection, MHD_HTTP_NOT_FOUND, response);
 837       MHD_destroy_response (response);
 838 #if DEBUG_CONNECTIONS
 839       if (res == MHD_YES)
 840         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Peer has no valid ident, sent HTTP 1.1/404\n");
 841       else
 842         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Peer has no valid ident, could not send error\n");
 843 #endif
 844       return res;
 845     }
 846   }
 847   else
 848   {
 849     ps = *httpSessionCache;
 850     pc = ps->peercontext;
 851   }
 852
 853   if (NULL == *httpSessionCache)
 854   {
 855     /* get peer context */
 856     pc = GNUNET_CONTAINER_multihashmap_get (plugin->peers, &pi_in.hashPubKey);
 857     /* Peer unknown */
 858     if (pc==NULL)
 859     {
 860       pc = GNUNET_malloc(sizeof (struct HTTP_PeerContext));
 861       pc->plugin = plugin;
 862       pc->session_id_counter=1;
 863       pc->last_session = NULL;
 864       memcpy(&pc->identity, &pi_in, sizeof(struct GNUNET_PeerIdentity));
 865       GNUNET_CONTAINER_multihashmap_put(plugin->peers, &pc->identity.hashPubKey, pc, GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
 866       GNUNET_STATISTICS_update (plugin->env->stats,
 867                             gettext_noop ("# HTTP peers active"),
 868                             1,
 869                             GNUNET_NO);
 870     }
 871
 872     conn_info = MHD_get_connection_info(mhd_connection, MHD_CONNECTION_INFO_CLIENT_ADDRESS );
 873     /* Incoming IPv4 connection */
 874     if ( AF_INET == conn_info->client_addr->sin_family)
 875     {
 876       addrin = conn_info->client_addr;
 877       inet_ntop(addrin->sin_family, &(addrin->sin_addr),address,INET_ADDRSTRLEN);
 878       memcpy(&ipv4addr.ipv4_addr,&(addrin->sin_addr),sizeof(struct in_addr));
 879       ipv4addr.u_port = addrin->sin_port;
 880       addr = &ipv4addr;
 881       addr_len = sizeof(struct IPv4HttpAddress);
 882     }
 883     /* Incoming IPv6 connection */
 884     if ( AF_INET6 == conn_info->client_addr->sin_family)
 885     {
 886       addrin6 = (struct sockaddr_in6 *) conn_info->client_addr;
 887       inet_ntop(addrin6->sin6_family, &(addrin6->sin6_addr),address,INET6_ADDRSTRLEN);
 888       memcpy(&ipv6addr.ipv6_addr,&(addrin6->sin6_addr),sizeof(struct in6_addr));
 889       ipv6addr.u6_port = addrin6->sin6_port;
 890       addr = &ipv6addr;
 891       addr_len = sizeof(struct IPv6HttpAddress);
 892     }
 893
 894     ps = NULL;
 895     /* only inbound sessions here */
 896
 897     ps_tmp = pc->head;
 898     while (ps_tmp!=NULL)
 899     {
 900       if ((ps_tmp->direction==INBOUND) && (ps_tmp->session_id == id_num) && (id_num!=0))
 901       {
 902         if ((ps_tmp->recv_force_disconnect!=GNUNET_YES) && (ps_tmp->send_force_disconnect!=GNUNET_YES))
 903         ps=ps_tmp;
 904         break;
 905       }
 906       ps_tmp=ps_tmp->next;
 907     }
 908
 909     if (ps==NULL)
 910     {
 911       ps = GNUNET_malloc(sizeof (struct Session));
 912       ps->addr = GNUNET_malloc(addr_len);
 913       memcpy(ps->addr,addr,addr_len);
 914       ps->addrlen = addr_len;
 915       ps->direction=INBOUND;
 916       ps->pending_msgs_head = NULL;
 917       ps->pending_msgs_tail = NULL;
 918       ps->send_connected=GNUNET_NO;
 919       ps->send_active=GNUNET_NO;
 920       ps->recv_connected=GNUNET_NO;
 921       ps->recv_active=GNUNET_NO;
 922       ps->peercontext=pc;
 923       ps->session_id =id_num;
 924       ps->url = create_url (plugin, ps->addr, ps->addrlen, ps->session_id);
 925       GNUNET_CONTAINER_DLL_insert(pc->head,pc->tail,ps);
 926       GNUNET_STATISTICS_update (plugin->env->stats,
 927                             gettext_noop ("# HTTPS inbound sessions for peers active"),
 928                             1,
 929                             GNUNET_NO);
 930     }
 931
 932     *httpSessionCache = ps;
 933     if (ps->msgtok==NULL)
 934       ps->msgtok = GNUNET_SERVER_mst_create (&mhd_write_mst_cb, ps);
 935 #if DEBUG_HTTPS
 936     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: HTTPS Daemon has new an incoming `%s' request from peer `%s' (`%s')\n",
 937                 ps,
 938                 method,
 939                 GNUNET_i2s(&pc->identity),
 940                 http_plugin_address_to_string(NULL, ps->addr, ps->addrlen));
 941 #endif
 942   }
 943
 944   /* Is it a PUT or a GET request */
 945   if (0 == strcmp (MHD_HTTP_METHOD_PUT, method))
 946   {
 947     if (ps->recv_force_disconnect == GNUNET_YES)
 948     {
 949 #if DEBUG_CONNECTIONS
 950       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: inbound connection was forced to disconnect\n",ps);
 951 #endif
 952       ps->recv_active = GNUNET_NO;
 953       return MHD_NO;
 954     }
 955     if ((*upload_data_size == 0) && (ps->recv_active==GNUNET_NO))
 956     {
 957       ps->recv_endpoint = mhd_connection;
 958       ps->recv_connected = GNUNET_YES;
 959       ps->recv_active = GNUNET_YES;
 960       ps->recv_force_disconnect = GNUNET_NO;
 961 #if DEBUG_CONNECTIONS
 962       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: inbound PUT connection connected\n",ps);
 963 #endif
 964       return MHD_YES;
 965     }
 966
 967     /* Transmission of all data complete */
 968     if ((*upload_data_size == 0) && (ps->recv_active == GNUNET_YES))
 969     {
 970       response = MHD_create_response_from_data (strlen (HTTP_PUT_RESPONSE),HTTP_PUT_RESPONSE, MHD_NO, MHD_NO);
 971       res = MHD_queue_response (mhd_connection, MHD_HTTP_OK, response);
 972 #if DEBUG_CONNECTIONS
 973       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: Sent HTTP/1.1: 200 OK as PUT Response\n",ps);
 974 #endif
 975       MHD_destroy_response (response);
 976       ps->recv_active=GNUNET_NO;
 977       return MHD_YES;
 978     }
 979
 980     /* Recieving data */
 981     if ((*upload_data_size > 0) && (ps->recv_active == GNUNET_YES))
 982     {
 983       res = GNUNET_SERVER_mst_receive(ps->msgtok, ps, upload_data,*upload_data_size, GNUNET_NO, GNUNET_NO);
 984       (*upload_data_size) = 0;
 985       return MHD_YES;
 986     }
 987     else
 988       return MHD_NO;
 989   }
 990   if ( 0 == strcmp (MHD_HTTP_METHOD_GET, method) )
 991   {
 992     if (ps->send_force_disconnect == GNUNET_YES)
 993     {
 994 #if DEBUG_CONNECTIONS
 995       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: outbound connection was  forced to disconnect\n",ps);
 996 #endif
 997       ps->send_active = GNUNET_NO;
 998       return MHD_NO;
 999     }
1000           ps->send_connected = GNUNET_YES;
1001           ps->send_active = GNUNET_YES;
1002           ps->send_endpoint = mhd_connection;
1003           ps->send_force_disconnect = GNUNET_NO;
1004 #if DEBUG_CONNECTIONS
1005           GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: inbound GET connection connected\n",ps);
1006 #endif
1007           response = MHD_create_response_from_callback(-1,32 * 1024, &mhd_send_callback, ps, NULL);
1008           res = MHD_queue_response (mhd_connection, MHD_HTTP_OK, response);
1009           MHD_destroy_response (response);
1010           return MHD_YES;
1011   }
1012   return MHD_NO;
1013 }
1014
1015 /**
1016  * Function that queries MHD's select sets and
1017  * starts the task waiting for them.
1018  */
1019 static GNUNET_SCHEDULER_TaskIdentifier
1020 http_server_daemon_prepare (void * cls, struct MHD_Daemon *daemon_handle)
1021 {
1022   struct Plugin *plugin = cls;
1023   GNUNET_SCHEDULER_TaskIdentifier ret;
1024   fd_set rs;
1025   fd_set ws;
1026   fd_set es;
1027   struct GNUNET_NETWORK_FDSet *wrs;
1028   struct GNUNET_NETWORK_FDSet *wws;
1029   struct GNUNET_NETWORK_FDSet *wes;
1030   int max;
1031   unsigned long long timeout;
1032   int haveto;
1033   struct GNUNET_TIME_Relative tv;
1034
1035   GNUNET_assert(cls !=NULL);
1036   ret = GNUNET_SCHEDULER_NO_TASK;
1037   FD_ZERO(&rs);
1038   FD_ZERO(&ws);
1039   FD_ZERO(&es);
1040   wrs = GNUNET_NETWORK_fdset_create ();
1041   wes = GNUNET_NETWORK_fdset_create ();
1042   wws = GNUNET_NETWORK_fdset_create ();
1043   max = -1;
1044   GNUNET_assert (MHD_YES ==
1045                  MHD_get_fdset (daemon_handle,
1046                                 &rs,
1047                                 &ws,
1048                                 &es,
1049                                 &max));
1050   haveto = MHD_get_timeout (daemon_handle, &timeout);
1051   if (haveto == MHD_YES)
1052     tv.value = (uint64_t) timeout;
1053   else
1054     tv = GNUNET_TIME_UNIT_FOREVER_REL;
1055   GNUNET_NETWORK_fdset_copy_native (wrs, &rs, max);
1056   GNUNET_NETWORK_fdset_copy_native (wws, &ws, max);
1057   GNUNET_NETWORK_fdset_copy_native (wes, &es, max);
1058   if (daemon_handle == plugin->http_server_daemon_v4)
1059   {
1060         if (plugin->http_server_task_v4 != GNUNET_SCHEDULER_NO_TASK)
1061         {
1062                 GNUNET_SCHEDULER_cancel(plugin->env->sched, plugin->http_server_task_v4);
1063                 plugin->http_server_daemon_v4 = GNUNET_SCHEDULER_NO_TASK;
1064         }
1065
1066     ret = GNUNET_SCHEDULER_add_select (plugin->env->sched,
1067                                        GNUNET_SCHEDULER_PRIORITY_DEFAULT,
1068                                        GNUNET_SCHEDULER_NO_TASK,
1069                                        tv,
1070                                        wrs,
1071                                        wws,
1072                                        &http_server_daemon_v4_run,
1073                                        plugin);
1074   }
1075   if (daemon_handle == plugin->http_server_daemon_v6)
1076   {
1077         if (plugin->http_server_task_v6 != GNUNET_SCHEDULER_NO_TASK)
1078         {
1079                 GNUNET_SCHEDULER_cancel(plugin->env->sched, plugin->http_server_task_v6);
1080                 plugin->http_server_task_v6 = GNUNET_SCHEDULER_NO_TASK;
1081         }
1082
1083     ret = GNUNET_SCHEDULER_add_select (plugin->env->sched,
1084                                        GNUNET_SCHEDULER_PRIORITY_DEFAULT,
1085                                        GNUNET_SCHEDULER_NO_TASK,
1086                                        tv,
1087                                        wrs,
1088                                        wws,
1089                                        &http_server_daemon_v6_run,
1090                                        plugin);
1091   }
1092   GNUNET_NETWORK_fdset_destroy (wrs);
1093   GNUNET_NETWORK_fdset_destroy (wws);
1094   GNUNET_NETWORK_fdset_destroy (wes);
1095   return ret;
1096 }
1097
1098 /**
1099  * Call MHD to process pending requests and then go back
1100  * and schedule the next run.
1101  */
1102 static void http_server_daemon_v4_run (void *cls,
1103                              const struct GNUNET_SCHEDULER_TaskContext *tc)
1104 {
1105   struct Plugin *plugin = cls;
1106
1107   GNUNET_assert(cls !=NULL);
1108   plugin->http_server_task_v4 = GNUNET_SCHEDULER_NO_TASK;
1109
1110   if (0 != (tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN))
1111     return;
1112
1113   GNUNET_assert (MHD_YES == MHD_run (plugin->http_server_daemon_v4));
1114   plugin->http_server_task_v4 = http_server_daemon_prepare (plugin, plugin->http_server_daemon_v4);
1115   return;
1116 }
1117
1118
1119 /**
1120  * Call MHD to process pending requests and then go back
1121  * and schedule the next run.
1122  */
1123 static void http_server_daemon_v6_run (void *cls,
1124                              const struct GNUNET_SCHEDULER_TaskContext *tc)
1125 {
1126   struct Plugin *plugin = cls;
1127
1128   GNUNET_assert(cls !=NULL);
1129   plugin->http_server_task_v6 = GNUNET_SCHEDULER_NO_TASK;
1130
1131   if (0 != (tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN))
1132     return;
1133
1134   GNUNET_assert (MHD_YES == MHD_run (plugin->http_server_daemon_v6));
1135   plugin->http_server_task_v6 = http_server_daemon_prepare (plugin, plugin->http_server_daemon_v6);
1136   return;
1137 }
1138
1139 static size_t curl_get_header_cb( void *ptr, size_t size, size_t nmemb, void *stream)
1140 {
1141   struct Session * ps = stream;
1142
1143   long http_result = 0;
1144   int res;
1145   /* Getting last http result code */
1146   if (ps->recv_connected==GNUNET_NO)
1147   {
1148     GNUNET_assert(NULL!=ps);
1149     res = curl_easy_getinfo(ps->recv_endpoint, CURLINFO_RESPONSE_CODE, &http_result);
1150     if (CURLE_OK == res)
1151     {
1152       if (http_result == 200)
1153       {
1154         ps->recv_connected = GNUNET_YES;
1155         ps->recv_active = GNUNET_YES;
1156 #if DEBUG_CONNECTIONS
1157         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: connected to recieve data\n",ps);
1158 #endif
1159         // Calling send_check_connections again since receive is established
1160         send_check_connections (ps->peercontext->plugin, ps);
1161       }
1162     }
1163   }
1164
1165 #if DEBUG_CURL
1166   char * tmp;
1167   size_t len = size * nmemb;
1168
1169   tmp = NULL;
1170   if ((size * nmemb) < SIZE_MAX)
1171     tmp = GNUNET_malloc (len+1);
1172
1173   if ((tmp != NULL) && (len > 0))
1174   {
1175     memcpy(tmp,ptr,len);
1176     if (len>=2)
1177     {
1178       if (tmp[len-2] == 13)
1179         tmp[len-2]= '\0';
1180     }
1181 #if DEBUG_CURL
1182     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: Header: %s\n",ps,tmp);
1183 #endif
1184   }
1185   if (NULL != tmp)
1186     GNUNET_free (tmp);
1187 #endif
1188
1189   return size * nmemb;
1190 }
1191
1192 static size_t curl_put_header_cb( void *ptr, size_t size, size_t nmemb, void *stream)
1193 {
1194   struct Session * ps = stream;
1195
1196   char * tmp;
1197   size_t len = size * nmemb;
1198   long http_result = 0;
1199   int res;
1200
1201   /* Getting last http result code */
1202   GNUNET_assert(NULL!=ps);
1203   res = curl_easy_getinfo(ps->send_endpoint, CURLINFO_RESPONSE_CODE, &http_result);
1204   if (CURLE_OK == res)
1205   {
1206     if ((http_result == 100) && (ps->send_connected==GNUNET_NO))
1207     {
1208       ps->send_connected = GNUNET_YES;
1209       ps->send_active = GNUNET_YES;
1210 #if DEBUG_CONNECTIONS
1211       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: connected to send data\n",ps);
1212 #endif
1213     }
1214     if ((http_result == 200) && (ps->send_connected==GNUNET_YES))
1215     {
1216       ps->send_connected = GNUNET_NO;
1217       ps->send_active = GNUNET_NO;
1218 #if DEBUG_CONNECTIONS
1219       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: sending disconnected\n",ps);
1220 #endif
1221     }
1222   }
1223
1224   tmp = NULL;
1225   if ((size * nmemb) < SIZE_MAX)
1226     tmp = GNUNET_malloc (len+1);
1227
1228   if ((tmp != NULL) && (len > 0))
1229   {
1230     memcpy(tmp,ptr,len);
1231     if (len>=2)
1232     {
1233       if (tmp[len-2] == 13)
1234         tmp[len-2]= '\0';
1235     }
1236   }
1237   if (NULL != tmp)
1238     GNUNET_free (tmp);
1239
1240   return size * nmemb;
1241 }
1242
1243 /**
1244  * Callback method used with libcurl
1245  * Method is called when libcurl needs to read data during sending
1246  * @param stream pointer where to write data
1247  * @param size size of an individual element
1248  * @param nmemb count of elements that can be written to the buffer
1249  * @param ptr source pointer, passed to the libcurl handle
1250  * @return bytes written to stream
1251  */
1252 static size_t curl_send_cb(void *stream, size_t size, size_t nmemb, void *ptr)
1253 {
1254   struct Session * ps = ptr;
1255   struct HTTP_Message * msg = ps->pending_msgs_tail;
1256   size_t bytes_sent;
1257   size_t len;
1258
1259   if (ps->send_active == GNUNET_NO)
1260         return CURL_READFUNC_PAUSE;
1261
1262
1263   if ((ps->pending_msgs_tail == NULL) && (ps->send_active == GNUNET_YES))
1264   {
1265 #if DEBUG_CONNECTIONS
1266     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: No Message to send, pausing connection\n",ps);
1267 #endif
1268     ps->send_active = GNUNET_NO;
1269     return CURL_READFUNC_PAUSE;
1270   }
1271
1272   msg = ps->pending_msgs_tail;
1273   /* data to send */
1274   if (msg->pos < msg->size)
1275   {
1276     /* data fit in buffer */
1277     if ((msg->size - msg->pos) <= (size * nmemb))
1278     {
1279       len = (msg->size - msg->pos);
1280       memcpy(stream, &msg->buf[msg->pos], len);
1281       msg->pos += len;
1282       bytes_sent = len;
1283     }
1284     else
1285     {
1286       len = size*nmemb;
1287       memcpy(stream, &msg->buf[msg->pos], len);
1288       msg->pos += len;
1289       bytes_sent = len;
1290     }
1291   }
1292   /* no data to send */
1293   else
1294   {
1295     bytes_sent = 0;
1296   }
1297
1298   if ( msg->pos == msg->size)
1299   {
1300 #if DEBUG_CONNECTIONS
1301     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: Message with %u bytes sent, removing message from queue \n",ps, msg->pos);
1302 #endif
1303     /* Calling transmit continuation  */
1304     if (( NULL != ps->pending_msgs_tail) && (NULL != ps->pending_msgs_tail->transmit_cont))
1305       msg->transmit_cont (ps->pending_msgs_tail->transmit_cont_cls,&(ps->peercontext)->identity,GNUNET_OK);
1306     remove_http_message(ps, msg);
1307   }
1308   return bytes_sent;
1309 }
1310
1311 static void curl_receive_mst_cb  (void *cls,
1312                                 void *client,
1313                                 const struct GNUNET_MessageHeader *message)
1314 {
1315   struct Session *ps  = cls;
1316   struct HTTP_PeerContext *pc = ps->peercontext;
1317   GNUNET_assert(ps != NULL);
1318   GNUNET_assert(pc != NULL);
1319 #if DEBUG_HTTPS
1320   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
1321               "Connection %X: Forwarding message to transport service, type %u and size %u from `%s' (`%s')\n",
1322               ps,
1323               ntohs(message->type),
1324               ntohs(message->size),
1325               GNUNET_i2s(&(pc->identity)),http_plugin_address_to_string(NULL,ps->addr,ps->addrlen));
1326 #endif
1327   pc->plugin->env->receive (pc->plugin->env->cls,
1328                             &pc->identity,
1329                             message, 1, ps,
1330                             ps->addr,
1331                             ps->addrlen);
1332 }
1333
1334
1335 /**
1336 * Callback method used with libcurl
1337 * Method is called when libcurl needs to write data during sending
1338 * @param stream pointer where to write data
1339 * @param size size of an individual element
1340 * @param nmemb count of elements that can be written to the buffer
1341 * @param ptr destination pointer, passed to the libcurl handle
1342 * @return bytes read from stream
1343 */
1344 static size_t curl_receive_cb( void *stream, size_t size, size_t nmemb, void *ptr)
1345 {
1346   struct Session * ps = ptr;
1347 #if DEBUG_CONNECTIONS
1348   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: %u bytes received\n",ps, size*nmemb);
1349 #endif
1350   GNUNET_SERVER_mst_receive(ps->msgtok, ps, stream, size*nmemb, GNUNET_NO, GNUNET_NO);
1351   return (size * nmemb);
1352
1353 }
1354
1355 static void curl_perform (void *cls,
1356              const struct GNUNET_SCHEDULER_TaskContext *tc)
1357 {
1358   struct Plugin *plugin = cls;
1359   static unsigned int handles_last_run;
1360   int running;
1361   struct CURLMsg *msg;
1362   CURLMcode mret;
1363   struct Session *ps = NULL;
1364   struct HTTP_PeerContext *pc = NULL;
1365   struct HTTP_Message * cur_msg = NULL;
1366   long http_result;
1367   char * tmp;
1368
1369   GNUNET_assert(cls !=NULL);
1370
1371   plugin->http_curl_task = GNUNET_SCHEDULER_NO_TASK;
1372   if (0 != (tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN))
1373     return;
1374
1375   do
1376     {
1377       running = 0;
1378       mret = curl_multi_perform (plugin->multi_handle, &running);
1379       if ((running < handles_last_run) && (running>0))
1380         {
1381           do
1382             {
1383
1384               msg = curl_multi_info_read (plugin->multi_handle, &running);
1385               if (running == 0)
1386                   break;
1387               /* get session for affected curl handle */
1388               GNUNET_assert ( msg->easy_handle != NULL );
1389               curl_easy_getinfo(msg->easy_handle, CURLINFO_PRIVATE, &tmp);
1390               ps = (struct Session *) tmp;
1391               GNUNET_assert ( ps != NULL );
1392               pc = ps->peercontext;
1393               GNUNET_assert ( pc != NULL );
1394               switch (msg->msg)
1395                 {
1396
1397                 case CURLMSG_DONE:
1398                   if ( (msg->data.result != CURLE_OK) &&
1399                        (msg->data.result != CURLE_GOT_NOTHING) )
1400                   {
1401                     /* sending msg failed*/
1402                     if (msg->easy_handle == ps->send_endpoint)
1403                     {
1404 #if DEBUG_CONNECTIONS
1405                       GNUNET_log(GNUNET_ERROR_TYPE_INFO,
1406                                  _("Connection %X: HTTPS PUT to peer `%s' (`%s') failed: `%s' `%s'\n"),
1407                                  ps,
1408                                  GNUNET_i2s(&pc->identity),
1409                                  http_plugin_address_to_string(NULL, ps->addr, ps->addrlen),
1410                                  "curl_multi_perform",
1411                                  curl_easy_strerror (msg->data.result));
1412 #endif
1413                       ps->send_connected = GNUNET_NO;
1414                       ps->send_active = GNUNET_NO;
1415                       curl_multi_remove_handle(plugin->multi_handle,ps->send_endpoint);
1416                       //curl_easy_cleanup(ps->send_endpoint);
1417                       //ps->send_endpoint=NULL;
1418                       cur_msg = ps->pending_msgs_tail;
1419                       if (( NULL != cur_msg) && ( NULL != cur_msg->transmit_cont))
1420                         cur_msg->transmit_cont (cur_msg->transmit_cont_cls,&pc->identity,GNUNET_SYSERR);
1421                     }
1422                     /* GET connection failed */
1423                     if (msg->easy_handle == ps->recv_endpoint)
1424                     {
1425 #if DEBUG_CONNECTIONS
1426                       GNUNET_log(GNUNET_ERROR_TYPE_INFO,
1427                            _("Connection %X: HTTPS GET to peer `%s' (`%s') failed: `%s' `%s'\n"),
1428                            ps,
1429                            GNUNET_i2s(&pc->identity),
1430                            http_plugin_address_to_string(NULL, ps->addr, ps->addrlen),
1431                            "curl_multi_perform",
1432                            curl_easy_strerror (msg->data.result));
1433 #endif
1434                       ps->recv_connected = GNUNET_NO;
1435                       ps->recv_active = GNUNET_NO;
1436                       curl_multi_remove_handle(plugin->multi_handle,ps->recv_endpoint);
1437                       //curl_easy_cleanup(ps->recv_endpoint);
1438                       //ps->recv_endpoint=NULL;
1439                     }
1440                   }
1441                   else
1442                   {
1443                     if (msg->easy_handle == ps->send_endpoint)
1444                     {
1445                       GNUNET_assert (CURLE_OK == curl_easy_getinfo(msg->easy_handle, CURLINFO_RESPONSE_CODE, &http_result));
1446 #if DEBUG_CONNECTIONS
1447                       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
1448                                   "Connection %X: HTTPS PUT connection to peer `%s' (`%s') was closed with HTTP code %u\n",
1449                                    ps,
1450                                    GNUNET_i2s(&pc->identity),
1451                                    http_plugin_address_to_string(NULL, ps->addr, ps->addrlen),
1452                                    http_result);
1453 #endif
1454                       /* Calling transmit continuation  */
1455                       cur_msg = ps->pending_msgs_tail;
1456                       if (( NULL != cur_msg) && (NULL != cur_msg->transmit_cont))
1457                       {
1458                         /* HTTP 1xx : Last message before here was informational */
1459                         if ((http_result >=100) && (http_result < 200))
1460                           cur_msg->transmit_cont (cur_msg->transmit_cont_cls,&pc->identity,GNUNET_OK);
1461                         /* HTTP 2xx: successful operations */
1462                         if ((http_result >=200) && (http_result < 300))
1463                           cur_msg->transmit_cont (cur_msg->transmit_cont_cls,&pc->identity,GNUNET_OK);
1464                         /* HTTP 3xx..5xx: error */
1465                         if ((http_result >=300) && (http_result < 600))
1466                           cur_msg->transmit_cont (cur_msg->transmit_cont_cls,&pc->identity,GNUNET_SYSERR);
1467                       }
1468                       ps->send_connected = GNUNET_NO;
1469                       ps->send_active = GNUNET_NO;
1470                       curl_multi_remove_handle(plugin->multi_handle,ps->send_endpoint);
1471                       //curl_easy_cleanup(ps->send_endpoint);
1472                       //ps->send_endpoint =NULL;
1473                     }
1474                     if (msg->easy_handle == ps->recv_endpoint)
1475                     {
1476 #if DEBUG_CONNECTIONS
1477                       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
1478                                   "Connection %X: HTTP GET connection to peer `%s' (`%s') was closed with HTTP code %u\n",
1479                                    ps,
1480                                    GNUNET_i2s(&pc->identity),
1481                                    http_plugin_address_to_string(NULL, ps->addr, ps->addrlen),
1482                                    http_result);
1483 #endif
1484                       ps->recv_connected = GNUNET_NO;
1485                       ps->recv_active = GNUNET_NO;
1486                       curl_multi_remove_handle(plugin->multi_handle,ps->recv_endpoint);
1487                       //curl_easy_cleanup(ps->recv_endpoint);
1488                       //ps->recv_endpoint=NULL;
1489                     }
1490                   }
1491                   if ((ps->recv_connected == GNUNET_NO) && (ps->send_connected == GNUNET_NO))
1492                     remove_session (pc, ps, GNUNET_YES, GNUNET_SYSERR);
1493                   break;
1494                 default:
1495                   break;
1496                 }
1497
1498             }
1499           while ( (running > 0) );
1500         }
1501       handles_last_run = running;
1502     }
1503   while (mret == CURLM_CALL_MULTI_PERFORM);
1504   curl_schedule(plugin);
1505 }
1506
1507
1508 /**
1509  * Function setting up file descriptors and scheduling task to run
1510  * @param ses session to send data to
1511  * @return GNUNET_SYSERR for hard failure, GNUNET_OK for ok
1512  */
1513 static void
1514 http_plugin_disconnect (void *cls,
1515                             const struct GNUNET_PeerIdentity *target)
1516 {
1517
1518
1519   struct Plugin *plugin = cls;
1520   struct HTTP_PeerContext *pc = NULL;
1521   struct Session *ps = NULL;
1522   //struct Session *tmp = NULL;
1523
1524   pc = GNUNET_CONTAINER_multihashmap_get (plugin->peers, &target->hashPubKey);
1525   if (pc==NULL)
1526     return;
1527   ps = pc->head;
1528
1529   while (ps!=NULL)
1530   {
1531     /* Telling transport that session is getting disconnected */
1532     plugin->env->session_end(plugin, target, ps);
1533     if (ps->direction==OUTBOUND)
1534     {
1535       if (ps->send_endpoint!=NULL)
1536       {
1537         //GNUNET_assert(CURLM_OK == curl_multi_remove_handle(plugin->multi_handle,ps->send_endpoint));
1538         //curl_easy_cleanup(ps->send_endpoint);
1539         //ps->send_endpoint=NULL;
1540         ps->send_force_disconnect = GNUNET_YES;
1541       }
1542       if (ps->recv_endpoint!=NULL)
1543       {
1544        //GNUNET_assert(CURLM_OK == curl_multi_remove_handle(plugin->multi_handle,ps->recv_endpoint));
1545        //curl_easy_cleanup(ps->recv_endpoint);
1546        //ps->recv_endpoint=NULL;
1547        ps->recv_force_disconnect = GNUNET_YES;
1548       }
1549     }
1550
1551     if (ps->direction==INBOUND)
1552     {
1553       ps->recv_force_disconnect = GNUNET_YES;
1554       ps->send_force_disconnect = GNUNET_YES;
1555     }
1556
1557     while (ps->pending_msgs_head!=NULL)
1558     {
1559       remove_http_message(ps, ps->pending_msgs_head);
1560     }
1561     ps->recv_active = GNUNET_NO;
1562     ps->send_active = GNUNET_NO;
1563     ps=ps->next;
1564   }
1565 }
1566
1567
1568 static int curl_schedule(void *cls)
1569 {
1570   struct Plugin *plugin = cls;
1571   fd_set rs;
1572   fd_set ws;
1573   fd_set es;
1574   int max;
1575   struct GNUNET_NETWORK_FDSet *grs;
1576   struct GNUNET_NETWORK_FDSet *gws;
1577   long to;
1578   CURLMcode mret;
1579
1580   GNUNET_assert(cls !=NULL);
1581
1582   /* Cancel previous scheduled task */
1583   if (plugin->http_curl_task !=  GNUNET_SCHEDULER_NO_TASK)
1584   {
1585           GNUNET_SCHEDULER_cancel(plugin->env->sched, plugin->http_curl_task);
1586           plugin->http_curl_task = GNUNET_SCHEDULER_NO_TASK;
1587   }
1588   max = -1;
1589   FD_ZERO (&rs);
1590   FD_ZERO (&ws);
1591   FD_ZERO (&es);
1592   mret = curl_multi_fdset (plugin->multi_handle, &rs, &ws, &es, &max);
1593   if (mret != CURLM_OK)
1594     {
1595       GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
1596                   _("%s failed at %s:%d: `%s'\n"),
1597                   "curl_multi_fdset", __FILE__, __LINE__,
1598                   curl_multi_strerror (mret));
1599       return GNUNET_SYSERR;
1600     }
1601   mret = curl_multi_timeout (plugin->multi_handle, &to);
1602   if (mret != CURLM_OK)
1603     {
1604       GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
1605                   _("%s failed at %s:%d: `%s'\n"),
1606                   "curl_multi_timeout", __FILE__, __LINE__,
1607                   curl_multi_strerror (mret));
1608       return GNUNET_SYSERR;
1609     }
1610
1611   grs = GNUNET_NETWORK_fdset_create ();
1612   gws = GNUNET_NETWORK_fdset_create ();
1613   GNUNET_NETWORK_fdset_copy_native (grs, &rs, max + 1);
1614   GNUNET_NETWORK_fdset_copy_native (gws, &ws, max + 1);
1615   plugin->http_curl_task = GNUNET_SCHEDULER_add_select (plugin->env->sched,
1616                                    GNUNET_SCHEDULER_PRIORITY_DEFAULT,
1617                                    GNUNET_SCHEDULER_NO_TASK,
1618                                    GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_SECONDS, 0),
1619                                    grs,
1620                                    gws,
1621                                    &curl_perform,
1622                                    plugin);
1623   GNUNET_NETWORK_fdset_destroy (gws);
1624   GNUNET_NETWORK_fdset_destroy (grs);
1625   return GNUNET_OK;
1626 }
1627
1628 /**
1629  * Function setting up curl handle and selecting message to send
1630  * @param cls plugin
1631  * @param ses session to send data to
1632  * @param con connection
1633  * @return GNUNET_SYSERR on failure, GNUNET_NO if connecting, GNUNET_YES if ok
1634  */
1635 static ssize_t send_check_connections (void *cls, struct Session *ps)
1636 {
1637   struct Plugin *plugin = cls;
1638   CURLMcode mret;
1639   struct HTTP_Message * msg;
1640
1641   struct GNUNET_TIME_Relative timeout = GNUNET_CONSTANTS_IDLE_CONNECTION_TIMEOUT;
1642
1643   GNUNET_assert(cls !=NULL);
1644
1645   if (ps->direction == OUTBOUND)
1646   {
1647     /* RECV DIRECTION */
1648     /* Check if session is connected to receive data, otherwise connect to peer */
1649     if (ps->recv_connected == GNUNET_NO)
1650     {
1651         int fresh = GNUNET_NO;
1652         if (ps->recv_endpoint == NULL)
1653         {
1654             fresh = GNUNET_YES;
1655                 ps->recv_endpoint = curl_easy_init();
1656         }
1657 #if DEBUG_CURL
1658         curl_easy_setopt(ps->recv_endpoint, CURLOPT_VERBOSE, 1L);
1659 #endif
1660         curl_easy_setopt(ps->recv_endpoint, CURLOPT_URL, ps->url);
1661         curl_easy_setopt (ps->recv_endpoint, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1);
1662         //curl_easy_setopt (ps->recv_endpoint, CURLOPT_SSL_CIPHER_LIST, cipher_suite);
1663                 curl_easy_setopt(ps->recv_endpoint, CURLOPT_SSL_VERIFYPEER, 0);
1664                 curl_easy_setopt(ps->recv_endpoint, CURLOPT_SSL_VERIFYHOST, 0);
1665         curl_easy_setopt(ps->recv_endpoint, CURLOPT_HEADERFUNCTION, &curl_get_header_cb);
1666         curl_easy_setopt(ps->recv_endpoint, CURLOPT_WRITEHEADER, ps);
1667         curl_easy_setopt(ps->recv_endpoint, CURLOPT_READFUNCTION, curl_send_cb);
1668         curl_easy_setopt(ps->recv_endpoint, CURLOPT_READDATA, ps);
1669         curl_easy_setopt(ps->recv_endpoint, CURLOPT_WRITEFUNCTION, curl_receive_cb);
1670         curl_easy_setopt(ps->recv_endpoint, CURLOPT_WRITEDATA, ps);
1671         curl_easy_setopt(ps->recv_endpoint, CURLOPT_TIMEOUT, (long) timeout.value);
1672         curl_easy_setopt(ps->recv_endpoint, CURLOPT_PRIVATE, ps);
1673         curl_easy_setopt(ps->recv_endpoint, CURLOPT_CONNECTTIMEOUT, HTTP_CONNECT_TIMEOUT);
1674         curl_easy_setopt(ps->recv_endpoint, CURLOPT_BUFFERSIZE, GNUNET_SERVER_MAX_MESSAGE_SIZE);
1675
1676         if (fresh==GNUNET_YES)
1677         {
1678                         mret = curl_multi_add_handle(plugin->multi_handle, ps->recv_endpoint);
1679                         if (mret != CURLM_OK)
1680                         {
1681                           GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
1682                                                   _("Connection: %X: %s failed at %s:%d: `%s'\n"),
1683                                                   ps,
1684                                                   "curl_multi_add_handle", __FILE__, __LINE__,
1685                                                   curl_multi_strerror (mret));
1686                           return GNUNET_SYSERR;
1687                         }
1688         }
1689         if (curl_schedule (plugin) == GNUNET_SYSERR)
1690         {
1691 #if DEBUG_CONNECTIONS
1692         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: could not schedule curl task\n",ps);
1693 #endif
1694                 return GNUNET_SYSERR;
1695         }
1696 #if DEBUG_CONNECTIONS
1697         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: inbound not connected, initiating connection\n",ps);
1698 #endif
1699     }
1700
1701     /* waiting for receive direction */
1702     if (ps->recv_connected==GNUNET_NO)
1703       return GNUNET_NO;
1704
1705     /* SEND DIRECTION */
1706     /* Check if session is connected to send data, otherwise connect to peer */
1707     if ((ps->send_connected == GNUNET_YES) && (ps->send_endpoint!= NULL))
1708     {
1709       if (ps->send_active == GNUNET_YES)
1710       {
1711 #if DEBUG_CONNECTIONS
1712         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: outbound active, enqueueing message\n",ps);
1713 #endif
1714         return GNUNET_YES;
1715       }
1716       if (ps->send_active == GNUNET_NO)
1717       {
1718 #if DEBUG_CONNECTIONS
1719         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: outbound paused, unpausing existing connection and enqueueing message\n",ps);
1720 #endif
1721         if (CURLE_OK == curl_easy_pause(ps->send_endpoint,CURLPAUSE_CONT))
1722         {
1723                         ps->send_active=GNUNET_YES;
1724                         return GNUNET_YES;
1725         }
1726         else
1727                 return GNUNET_SYSERR;
1728       }
1729     }
1730     /* not connected, initiate connection */
1731     if (ps->send_connected==GNUNET_NO)
1732     {
1733         int fresh = GNUNET_NO;
1734         if (NULL == ps->send_endpoint)
1735         {
1736                 ps->send_endpoint = curl_easy_init();
1737                 fresh = GNUNET_YES;
1738         }
1739                 GNUNET_assert (ps->send_endpoint != NULL);
1740                 GNUNET_assert (NULL != ps->pending_msgs_tail);
1741 #if DEBUG_CONNECTIONS
1742                 GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Connection %X: outbound not connected, initiating connection\n",ps);
1743 #endif
1744                 ps->send_active = GNUNET_NO;
1745                 msg = ps->pending_msgs_tail;
1746
1747 #if DEBUG_CURL
1748                 curl_easy_setopt(ps->send_endpoint, CURLOPT_VERBOSE, 1L);
1749 #endif
1750                 curl_easy_setopt(ps->send_endpoint, CURLOPT_URL, ps->url);
1751                 curl_easy_setopt(ps->send_endpoint, CURLOPT_PUT, 1L);
1752                 curl_easy_setopt(ps->send_endpoint, CURLOPT_HEADERFUNCTION, &curl_put_header_cb);
1753                 curl_easy_setopt(ps->send_endpoint, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1);
1754                 curl_easy_setopt(ps->send_endpoint, CURLOPT_SSL_VERIFYPEER, 0);
1755                 curl_easy_setopt(ps->send_endpoint, CURLOPT_SSL_VERIFYHOST, 0);
1756
1757                 curl_easy_setopt(ps->send_endpoint, CURLOPT_WRITEHEADER, ps);
1758                 curl_easy_setopt(ps->send_endpoint, CURLOPT_READFUNCTION, curl_send_cb);
1759                 curl_easy_setopt(ps->send_endpoint, CURLOPT_READDATA, ps);
1760                 curl_easy_setopt(ps->send_endpoint, CURLOPT_WRITEFUNCTION, curl_receive_cb);
1761                 curl_easy_setopt(ps->send_endpoint, CURLOPT_READDATA, ps);
1762                 curl_easy_setopt(ps->send_endpoint, CURLOPT_TIMEOUT, (long) timeout.value);
1763                 curl_easy_setopt(ps->send_endpoint, CURLOPT_PRIVATE, ps);
1764                 curl_easy_setopt(ps->send_endpoint, CURLOPT_CONNECTTIMEOUT, HTTP_CONNECT_TIMEOUT);
1765                 curl_easy_setopt(ps->send_endpoint, CURLOPT_BUFFERSIZE, GNUNET_SERVER_MAX_MESSAGE_SIZE);
1766
1767                 if (fresh==GNUNET_YES)
1768                 {
1769                         mret = curl_multi_add_handle(plugin->multi_handle, ps->send_endpoint);
1770                         if (mret != CURLM_OK)
1771                         {
1772                           GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
1773                                                   _("Connection: %X: %s failed at %s:%d: `%s'\n"),
1774                                                   ps,
1775                                                   "curl_multi_add_handle", __FILE__, __LINE__,
1776                                                   curl_multi_strerror (mret));
1777                           return GNUNET_SYSERR;
1778                         }
1779                 }
1780     }
1781     if (curl_schedule (plugin) == GNUNET_SYSERR)
1782         return GNUNET_SYSERR;
1783     return GNUNET_YES;
1784   }
1785   if (ps->direction == INBOUND)
1786   {
1787     GNUNET_assert (NULL != ps->pending_msgs_tail);
1788     if ((ps->recv_connected==GNUNET_YES) && (ps->send_connected==GNUNET_YES) &&
1789         (ps->recv_force_disconnect==GNUNET_NO) && (ps->recv_force_disconnect==GNUNET_NO))
1790         return GNUNET_YES;
1791   }
1792   return GNUNET_SYSERR;
1793 }
1794
1795 static struct Session * send_select_session (void * cls, struct HTTP_PeerContext *pc, const void * addr, size_t addrlen, int force_address, struct Session * session)
1796 {
1797         struct Session * tmp = NULL;
1798         int addr_given = GNUNET_NO;
1799
1800         if ((addr!=NULL) && (addrlen>0))
1801                 addr_given = GNUNET_YES;
1802
1803         if (force_address == GNUNET_YES)
1804         {
1805                 /* check session given as argument */
1806                 if ((session != NULL) && (addr_given == GNUNET_YES))
1807                 {
1808                       if (0 == memcmp(session->addr, addr, addrlen))
1809                       {
1810                         /* connection can not be used, since it is disconnected */
1811                         if ((session->recv_force_disconnect==GNUNET_NO) && (session->send_force_disconnect==GNUNET_NO))
1812                         {
1813 #if DEBUG_SESSION_SELECTION
1814                                   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Session %X selected: Using session passed by transport to send to forced address \n", session);
1815 #endif
1816                                 return session;
1817                         }
1818                       }
1819                 }
1820                 /* check last session used */
1821                 if ((pc->last_session != NULL)&& (addr_given == GNUNET_YES))
1822                 {
1823                       if (0 == memcmp(pc->last_session->addr, addr, addrlen))
1824                       {
1825                         /* connection can not be used, since it is disconnected */
1826                         if ((pc->last_session->recv_force_disconnect==GNUNET_NO) && (pc->last_session->send_force_disconnect==GNUNET_NO))
1827                         {
1828 #if DEBUG_SESSION_SELECTION
1829                                   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Session %X selected: Using last session used to send to forced address \n", pc->last_session);
1830 #endif
1831                                 return pc->last_session;
1832                         }
1833                       }
1834                 }
1835                 /* find session in existing sessions */
1836                 tmp = pc->head;
1837                 while ((tmp!=NULL) && (addr_given == GNUNET_YES))
1838                 {
1839
1840                           if (0 == memcmp(tmp->addr, addr, addrlen))
1841                       {
1842                         /* connection can not be used, since it is disconnected */
1843                         if ((tmp->recv_force_disconnect==GNUNET_NO) && (tmp->send_force_disconnect==GNUNET_NO))
1844                         {
1845 #if DEBUG_SESSION_SELECTION
1846                                   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Session %X selected: Using existing session to send to forced address \n", session);
1847 #endif
1848                                   return session;
1849                         }
1850
1851                       }
1852                           tmp=tmp->next;
1853                 }
1854                 /* no session to use */
1855                 return NULL;
1856         }
1857         if ((force_address == GNUNET_NO) || (force_address == GNUNET_SYSERR))
1858         {
1859                 /* check session given as argument */
1860                 if (session != NULL)
1861                 {
1862                         /* connection can not be used, since it is disconnected */
1863                         if ((session->recv_force_disconnect==GNUNET_NO) && (session->send_force_disconnect==GNUNET_NO))
1864                         {
1865 #if DEBUG_SESSION_SELECTION
1866                                   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Session %X selected: Using session passed by transport to send not-forced address \n", session);
1867 #endif
1868                                   return session;
1869                         }
1870
1871                 }
1872                 /* check last session used */
1873                 if (pc->last_session != NULL)
1874                 {
1875                         /* connection can not be used, since it is disconnected */
1876                         if ((pc->last_session->recv_force_disconnect==GNUNET_NO) && (pc->last_session->send_force_disconnect==GNUNET_NO))
1877                         {
1878 #if DEBUG_SESSION_SELECTION
1879                                   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Session %X selected: Using last session to send to not-forced address \n", pc->last_session);
1880 #endif
1881                                 return pc->last_session;
1882                         }
1883                 }
1884                 /* find session in existing sessions */
1885                 tmp = pc->head;
1886                 while (tmp!=NULL)
1887                 {
1888                         /* connection can not be used, since it is disconnected */
1889                         if ((tmp->recv_force_disconnect==GNUNET_NO) && (tmp->send_force_disconnect==GNUNET_NO))
1890                         {
1891 #if DEBUG_SESSION_SELECTION
1892                                   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Session %X selected: Using existing session to send to not-forced address \n", tmp);
1893 #endif
1894                                 return tmp;
1895                         }
1896                         tmp=tmp->next;
1897                 }
1898                 return NULL;
1899         }
1900         return NULL;
1901 }
1902
1903 /**
1904  * Function that can be used by the transport service to transmit
1905  * a message using the plugin.   Note that in the case of a
1906  * peer disconnecting, the continuation MUST be called
1907  * prior to the disconnect notification itself.  This function
1908  * will be called with this peer's HELLO message to initiate
1909  * a fresh connection to another peer.
1910  *
1911  * @param cls closure
1912  * @param target who should receive this message
1913  * @param msgbuf the message to transmit
1914  * @param msgbuf_size number of bytes in 'msgbuf'
1915  * @param priority how important is the message (most plugins will
1916  *                 ignore message priority and just FIFO)
1917  * @param timeout how long to wait at most for the transmission (does not
1918  *                require plugins to discard the message after the timeout,
1919  *                just advisory for the desired delay; most plugins will ignore
1920  *                this as well)
1921  * @param session which session must be used (or NULL for "any")
1922  * @param addr the address to use (can be NULL if the plugin
1923  *                is "on its own" (i.e. re-use existing TCP connection))
1924  * @param addrlen length of the address in bytes
1925  * @param force_address GNUNET_YES if the plugin MUST use the given address,
1926  *                GNUNET_NO means the plugin may use any other address and
1927  *                GNUNET_SYSERR means that only reliable existing
1928  *                bi-directional connections should be used (regardless
1929  *                of address)
1930  * @param cont continuation to call once the message has
1931  *        been transmitted (or if the transport is ready
1932  *        for the next transmission call; or if the
1933  *        peer disconnected...); can be NULL
1934  * @param cont_cls closure for cont
1935  * @return number of bytes used (on the physical network, with overheads);
1936  *         -1 on hard errors (i.e. address invalid); 0 is a legal value
1937  *         and does NOT mean that the message was not transmitted (DV)
1938  */
1939 static ssize_t
1940 http_plugin_send (void *cls,
1941                   const struct GNUNET_PeerIdentity *target,
1942                   const char *msgbuf,
1943                   size_t msgbuf_size,
1944                   unsigned int priority,
1945                   struct GNUNET_TIME_Relative to,
1946                   struct Session *session,
1947                   const void *addr,
1948                   size_t addrlen,
1949                   int force_address,
1950                   GNUNET_TRANSPORT_TransmitContinuation cont,
1951                   void *cont_cls)
1952 {
1953   struct Plugin *plugin = cls;
1954   struct HTTP_Message *msg;
1955   struct HTTP_PeerContext * pc;
1956   struct Session * ps = NULL;
1957
1958   GNUNET_assert(cls !=NULL);
1959
1960 #if DEBUG_HTTPS
1961   char * force = GNUNET_malloc(40);
1962   if (force_address == GNUNET_YES)
1963     strcpy(force,"forced addr.");
1964   if (force_address == GNUNET_NO)
1965     strcpy(force,"any addr.");
1966   if (force_address == GNUNET_SYSERR)
1967     strcpy(force,"reliable bi-direc. address addr.");
1968
1969   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Transport tells me to send %u bytes to `%s' using %s (%s) and session: %X\n",
1970                                       msgbuf_size,
1971                                       GNUNET_i2s(target),
1972                                       force,
1973                                       http_plugin_address_to_string(NULL, addr, addrlen),
1974                                       session);
1975
1976   GNUNET_free(force);
1977 #endif
1978
1979   pc = GNUNET_CONTAINER_multihashmap_get (plugin->peers, &target->hashPubKey);
1980   /* Peer unknown */
1981   if (pc==NULL)
1982   {
1983     pc = GNUNET_malloc(sizeof (struct HTTP_PeerContext));
1984     pc->plugin = plugin;
1985     pc->session_id_counter=1;
1986     pc->last_session = NULL;
1987     memcpy(&pc->identity, target, sizeof(struct GNUNET_PeerIdentity));
1988     GNUNET_CONTAINER_multihashmap_put(plugin->peers, &pc->identity.hashPubKey, pc, GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY);
1989     GNUNET_STATISTICS_update (plugin->env->stats,
1990                             gettext_noop ("# HTTP peers active"),
1991                             1,
1992                             GNUNET_NO);
1993   }
1994
1995   ps = send_select_session (plugin, pc, addr, addrlen, force_address, session);
1996
1997   /* session not existing, but address forced -> creating new session */
1998   if (ps==NULL)
1999   {
2000     if ((addr!=NULL) && (addrlen!=0))
2001     {
2002       ps = GNUNET_malloc(sizeof (struct Session));
2003 #if DEBUG_SESSION_SELECTION
2004       if (force_address == GNUNET_YES)
2005         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"No existing connection & forced address: creating new session %X to peer %s\n", ps, GNUNET_i2s(target));
2006       if (force_address != GNUNET_YES)
2007         GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"No existing connection: creating new session %X to peer %s\n", ps, GNUNET_i2s(target));
2008 #endif
2009       if ((addrlen!=0) && (addr!=NULL))
2010       {
2011       ps->addr = GNUNET_malloc(addrlen);
2012       memcpy(ps->addr,addr,addrlen);
2013       ps->addrlen = addrlen;
2014       }
2015       else
2016       {
2017         ps->addr = NULL;
2018         ps->addrlen = 0;
2019       }
2020       ps->direction=OUTBOUND;
2021       ps->recv_connected = GNUNET_NO;
2022       ps->recv_force_disconnect = GNUNET_NO;
2023       ps->send_connected = GNUNET_NO;
2024       ps->send_force_disconnect = GNUNET_NO;
2025       ps->pending_msgs_head = NULL;
2026       ps->pending_msgs_tail = NULL;
2027       ps->peercontext=pc;
2028       ps->session_id = pc->session_id_counter;
2029       pc->session_id_counter++;
2030       ps->url = create_url (plugin, ps->addr, ps->addrlen, ps->session_id);
2031       if (ps->msgtok == NULL)
2032         ps->msgtok = GNUNET_SERVER_mst_create (&curl_receive_mst_cb, ps);
2033       GNUNET_CONTAINER_DLL_insert(pc->head,pc->tail,ps);
2034 /* FIXME */
2035
2036       GNUNET_STATISTICS_update (plugin->env->stats,
2037                             gettext_noop ("# HTTP outbound sessions for peers active"),
2038                             1,
2039                             GNUNET_NO);
2040     }
2041     else
2042     {
2043 #if DEBUG_HTTPS
2044       GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"No existing session found & and no address given: no way to send this message to peer `%s'!\n", GNUNET_i2s(target));
2045 #endif
2046       return GNUNET_SYSERR;
2047     }
2048   }
2049
2050   /* create msg */
2051   msg = GNUNET_malloc (sizeof (struct HTTP_Message) + msgbuf_size);
2052   msg->next = NULL;
2053   msg->size = msgbuf_size;
2054   msg->pos = 0;
2055   msg->buf = (char *) &msg[1];
2056   msg->transmit_cont = cont;
2057   msg->transmit_cont_cls = cont_cls;
2058   memcpy (msg->buf,msgbuf, msgbuf_size);
2059   GNUNET_CONTAINER_DLL_insert(ps->pending_msgs_head,ps->pending_msgs_tail,msg);
2060
2061   if (send_check_connections (plugin, ps) != GNUNET_SYSERR)
2062   {
2063           if (force_address != GNUNET_YES)
2064                   pc->last_session = ps;
2065
2066           if (pc->last_session==NULL)
2067                   pc->last_session = ps;
2068           return msg->size;
2069   }
2070   else
2071           return GNUNET_SYSERR;
2072 }
2073
2074
2075
2076 /**
2077  * Function that can be used to force the plugin to disconnect
2078  * from the given peer and cancel all previous transmissions
2079  * (and their continuationc).
2080  *
2081  * @param cls closure
2082  * @param target peer from which to disconnect
2083  */
2084 /**
2085  * Convert the transports address to a nice, human-readable
2086  * format.
2087  *
2088  * @param cls closure
2089  * @param type name of the transport that generated the address
2090  * @param addr one of the addresses of the host, NULL for the last address
2091  *        the specific address format depends on the transport
2092  * @param addrlen length of the address
2093  * @param numeric should (IP) addresses be displayed in numeric form?
2094  * @param timeout after how long should we give up?
2095  * @param asc function to call on each string
2096  * @param asc_cls closure for asc
2097  */
2098 static void
2099 http_plugin_address_pretty_printer (void *cls,
2100                                         const char *type,
2101                                         const void *addr,
2102                                         size_t addrlen,
2103                                         int numeric,
2104                                         struct GNUNET_TIME_Relative timeout,
2105                                         GNUNET_TRANSPORT_AddressStringCallback
2106                                         asc, void *asc_cls)
2107 {
2108   const struct IPv4HttpAddress *t4;
2109   const struct IPv6HttpAddress *t6;
2110   struct sockaddr_in a4;
2111   struct sockaddr_in6 a6;
2112   char * address;
2113   char * ret;
2114   unsigned int port;
2115   unsigned int res;
2116
2117   GNUNET_assert(cls !=NULL);
2118   if (addrlen == sizeof (struct IPv6HttpAddress))
2119   {
2120     address = GNUNET_malloc (INET6_ADDRSTRLEN);
2121     t6 = addr;
2122     a6.sin6_addr = t6->ipv6_addr;
2123     inet_ntop(AF_INET6, &(a6.sin6_addr),address,INET6_ADDRSTRLEN);
2124     port = ntohs(t6->u6_port);
2125   }
2126   else if (addrlen == sizeof (struct IPv4HttpAddress))
2127   {
2128     address = GNUNET_malloc (INET_ADDRSTRLEN);
2129     t4 = addr;
2130     a4.sin_addr.s_addr =  t4->ipv4_addr;
2131     inet_ntop(AF_INET, &(a4.sin_addr),address,INET_ADDRSTRLEN);
2132     port = ntohs(t4->u_port);
2133   }
2134   else
2135   {
2136     /* invalid address */
2137     GNUNET_break_op (0);
2138     asc (asc_cls, NULL);
2139     return;
2140   }
2141   res = GNUNET_asprintf(&ret,"%s://%s:%u/", PROTOCOL_PREFIX, address,port);
2142   GNUNET_free (address);
2143   GNUNET_assert(res != 0);
2144   asc (asc_cls, ret);
2145   GNUNET_free_non_null (ret);
2146 }
2147
2148
2149
2150 /**
2151  * Another peer has suggested an address for this
2152  * peer and transport plugin.  Check that this could be a valid
2153  * address.  If so, consider adding it to the list
2154  * of addresses.
2155  *
2156  * @param cls closure
2157  * @param addr pointer to the address
2158  * @param addrlen length of addr
2159  * @return GNUNET_OK if this is a plausible address for this peer
2160  *         and transport
2161  */
2162 static int
2163 http_plugin_address_suggested (void *cls,
2164                                const void *addr, size_t addrlen)
2165 {
2166   struct Plugin *plugin = cls;
2167   struct IPv4HttpAddress *v4;
2168   struct IPv6HttpAddress *v6;
2169   unsigned int port;
2170
2171   GNUNET_assert(cls !=NULL);
2172   if ((addrlen != sizeof (struct IPv4HttpAddress)) &&
2173       (addrlen != sizeof (struct IPv6HttpAddress)))
2174     {
2175       return GNUNET_SYSERR;
2176     }
2177   if (addrlen == sizeof (struct IPv4HttpAddress))
2178     {
2179       v4 = (struct IPv4HttpAddress *) addr;
2180       /* Not skipping loopback
2181       if (INADDR_LOOPBACK == ntohl(v4->ipv4_addr))
2182       {
2183         return GNUNET_SYSERR;
2184       } */
2185       port = ntohs (v4->u_port);
2186       if (port != plugin->port_inbound)
2187       {
2188         return GNUNET_SYSERR;
2189       }
2190     }
2191   if (addrlen == sizeof (struct IPv6HttpAddress))
2192     {
2193       v6 = (struct IPv6HttpAddress *) addr;
2194       if (IN6_IS_ADDR_LINKLOCAL (&v6->ipv6_addr))
2195         {
2196           return GNUNET_SYSERR;
2197         }
2198       port = ntohs (v6->u6_port);
2199       if (port != plugin->port_inbound)
2200       {
2201         return GNUNET_SYSERR;
2202       }
2203     }
2204
2205   return GNUNET_OK;
2206 }
2207
2208
2209 /**
2210  * Function called for a quick conversion of the binary address to
2211  * a numeric address.  Note that the caller must not free the
2212  * address and that the next call to this function is allowed
2213  * to override the address again.
2214  *
2215  * @param cls closure
2216  * @param addr binary address
2217  * @param addrlen length of the address
2218  * @return string representing the same address
2219  */
2220 static const char*
2221 http_plugin_address_to_string (void *cls,
2222                                    const void *addr,
2223                                    size_t addrlen)
2224 {
2225   const struct IPv4HttpAddress *t4;
2226   const struct IPv6HttpAddress *t6;
2227   struct sockaddr_in a4;
2228   struct sockaddr_in6 a6;
2229   char * address;
2230   char * ret;
2231   uint16_t port;
2232   unsigned int res;
2233
2234   if (addrlen == sizeof (struct IPv6HttpAddress))
2235     {
2236       address = GNUNET_malloc (INET6_ADDRSTRLEN);
2237       t6 = addr;
2238       a6.sin6_addr = t6->ipv6_addr;
2239       inet_ntop(AF_INET6, &(a6.sin6_addr),address,INET6_ADDRSTRLEN);
2240       port = ntohs(t6->u6_port);
2241     }
2242   else if (addrlen == sizeof (struct IPv4HttpAddress))
2243     {
2244       address = GNUNET_malloc (INET_ADDRSTRLEN);
2245       t4 = addr;
2246       a4.sin_addr.s_addr =  t4->ipv4_addr;
2247       inet_ntop(AF_INET, &(a4.sin_addr),address,INET_ADDRSTRLEN);
2248       port = ntohs(t4->u_port);
2249     }
2250   else
2251     {
2252       /* invalid address */
2253       return NULL;
2254     }
2255   res = GNUNET_asprintf(&ret,"%s:%u",address,port);
2256   GNUNET_free (address);
2257   GNUNET_assert(res != 0);
2258   return ret;
2259 }
2260
2261 static char *
2262 load_certificate( const char * file )
2263 {
2264   struct GNUNET_DISK_FileHandle * gn_file;
2265
2266   struct stat fstat;
2267   char * text = NULL;
2268
2269   if (0!=STAT(file, &fstat))
2270           return NULL;
2271   text = GNUNET_malloc (fstat.st_size);
2272   gn_file = GNUNET_DISK_file_open(file,GNUNET_DISK_OPEN_READ, GNUNET_DISK_PERM_USER_READ);
2273   if (gn_file==NULL)
2274   {
2275           GNUNET_free(text);
2276           return NULL;
2277   }
2278   if (GNUNET_SYSERR == GNUNET_DISK_file_read(gn_file, text, fstat.st_size))
2279   {
2280           GNUNET_free(text);
2281           return NULL;
2282   }
2283   text[fstat.st_size] = '\0';
2284   GNUNET_DISK_file_close(gn_file);
2285
2286   return text;
2287 }
2288
2289
2290 /**
2291  * Exit point from the plugin.
2292  */
2293 void *
2294 libgnunet_plugin_transport_https_done (void *cls)
2295 {
2296   struct GNUNET_TRANSPORT_PluginFunctions *api = cls;
2297   struct Plugin *plugin = api->cls;
2298   CURLMcode mret;
2299   GNUNET_assert(cls !=NULL);
2300
2301   if (plugin->http_server_daemon_v4 != NULL)
2302   {
2303     MHD_stop_daemon (plugin->http_server_daemon_v4);
2304     plugin->http_server_daemon_v4 = NULL;
2305   }
2306   if (plugin->http_server_daemon_v6 != NULL)
2307   {
2308     MHD_stop_daemon (plugin->http_server_daemon_v6);
2309     plugin->http_server_daemon_v6 = NULL;
2310   }
2311
2312   if ( plugin->http_server_task_v4 != GNUNET_SCHEDULER_NO_TASK)
2313   {
2314     GNUNET_SCHEDULER_cancel(plugin->env->sched, plugin->http_server_task_v4);
2315     plugin->http_server_task_v4 = GNUNET_SCHEDULER_NO_TASK;
2316   }
2317
2318   if ( plugin->http_server_task_v6 != GNUNET_SCHEDULER_NO_TASK)
2319   {
2320     GNUNET_SCHEDULER_cancel(plugin->env->sched, plugin->http_server_task_v6);
2321     plugin->http_server_task_v6 = GNUNET_SCHEDULER_NO_TASK;
2322   }
2323
2324
2325   /* free all peer information */
2326   if (plugin->peers!=NULL)
2327   {
2328           GNUNET_CONTAINER_multihashmap_iterate (plugin->peers,
2329                                                                                          &remove_peer_context_Iterator,
2330                                                                                          plugin);
2331           GNUNET_CONTAINER_multihashmap_destroy (plugin->peers);
2332   }
2333   if (plugin->multi_handle!=NULL)
2334   {
2335           mret = curl_multi_cleanup(plugin->multi_handle);
2336 #if DEBUG_HTTPS
2337           if ( CURLM_OK != mret)
2338                 GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"curl multihandle clean up failed\n");
2339 #endif
2340           plugin->multi_handle = NULL;
2341   }
2342   curl_global_cleanup();
2343
2344   if ( plugin->http_curl_task != GNUNET_SCHEDULER_NO_TASK)
2345   {
2346     GNUNET_SCHEDULER_cancel(plugin->env->sched, plugin->http_curl_task);
2347     plugin->http_curl_task = GNUNET_SCHEDULER_NO_TASK;
2348   }
2349
2350   GNUNET_free_non_null (plugin->bind4_address);
2351   GNUNET_free_non_null (plugin->bind6_address);
2352   GNUNET_free_non_null (plugin->bind_hostname);
2353   GNUNET_free_non_null (plugin->crypto_init);
2354   GNUNET_free (plugin);
2355   GNUNET_free (api);
2356 #if DEBUG_HTTPS
2357   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Unload http plugin complete...\n");
2358 #endif
2359   return NULL;
2360 }
2361
2362
2363 /**
2364  * Entry point for the plugin.
2365  */
2366 void *
2367 libgnunet_plugin_transport_https_init (void *cls)
2368 {
2369   struct GNUNET_TRANSPORT_PluginEnvironment *env = cls;
2370   struct Plugin *plugin;
2371   struct GNUNET_TRANSPORT_PluginFunctions *api;
2372   struct GNUNET_TIME_Relative gn_timeout;
2373   long long unsigned int port;
2374
2375   char * key_file;
2376   char * cert_file;
2377
2378   GNUNET_assert(cls !=NULL);
2379 #if DEBUG_HTTPS
2380   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Starting https plugin...\n");
2381 #endif
2382
2383   plugin = GNUNET_malloc (sizeof (struct Plugin));
2384   plugin->stats = env->stats;
2385   plugin->env = env;
2386   plugin->peers = NULL;
2387   plugin->bind4_address = NULL;
2388   plugin->use_ipv6  = GNUNET_YES;
2389   plugin->use_ipv4  = GNUNET_YES;
2390
2391   api = GNUNET_malloc (sizeof (struct GNUNET_TRANSPORT_PluginFunctions));
2392   api->cls = plugin;
2393   api->send = &http_plugin_send;
2394   api->disconnect = &http_plugin_disconnect;
2395   api->address_pretty_printer = &http_plugin_address_pretty_printer;
2396   api->check_address = &http_plugin_address_suggested;
2397   api->address_to_string = &http_plugin_address_to_string;
2398
2399   /* Hashing our identity to use it in URLs */
2400   GNUNET_CRYPTO_hash_to_enc ( &(plugin->env->my_identity->hashPubKey), &plugin->my_ascii_hash_ident);
2401
2402   /* Use IPv6 yes/no */
2403   if (GNUNET_CONFIGURATION_have_value (env->cfg,
2404                                                                    "transport-https", "USE_IPv6"))
2405     {
2406           plugin->use_ipv6 = GNUNET_CONFIGURATION_get_value_yesno (env->cfg,
2407                                                                                                            "transport-https",
2408                                                                                                            "USE_IPv6");
2409     }
2410   /* Use IPv4 yes/no */
2411   if (GNUNET_CONFIGURATION_have_value (env->cfg,
2412                                                                    "transport-https", "USE_IPv4"))
2413     {
2414           plugin->use_ipv4 = GNUNET_CONFIGURATION_get_value_yesno (env->cfg,
2415                                                                                                            "transport-https",
2416                                                                                                            "USE_IPv4");
2417     }
2418   /* Reading port number from config file */
2419   if ((GNUNET_OK !=
2420        GNUNET_CONFIGURATION_get_value_number (env->cfg,
2421                                               "transport-https",
2422                                               "PORT",
2423                                               &port)) ||
2424       (port > 65535) )
2425     {
2426       GNUNET_log_from (GNUNET_ERROR_TYPE_ERROR,
2427                        "http",
2428                        _("Require valid port number for transport plugin `%s' in configuration!\n"),
2429                        "transport-https");
2430       libgnunet_plugin_transport_https_done (api);
2431       return NULL;
2432     }
2433
2434   /* Reading ipv4 addresse to bind to from config file */
2435   if ((plugin->use_ipv4==GNUNET_YES) && (GNUNET_CONFIGURATION_have_value (env->cfg,
2436                                                                    "transport-https", "BINDTO4")))
2437   {
2438           GNUNET_break (GNUNET_OK ==
2439                                         GNUNET_CONFIGURATION_get_value_string (env->cfg,
2440                                                                                                                    "transport-https",
2441                                                                                                                    "BINDTO4",
2442                                                                                                                    &plugin->bind_hostname));
2443           plugin->bind4_address = GNUNET_malloc(sizeof(struct sockaddr_in));
2444           plugin->bind4_address->sin_family = AF_INET;
2445           plugin->bind4_address->sin_port = htons (port);
2446
2447           if (inet_pton(AF_INET,plugin->bind_hostname, &plugin->bind4_address->sin_addr)<=0)
2448           {
2449                   GNUNET_log_from (GNUNET_ERROR_TYPE_ERROR,
2450                                                    "http",
2451                                                    _("Misconfigured address to bind to in configuration!\n"),
2452                                                    "transport-https");
2453                   GNUNET_free(plugin->bind4_address);
2454                   GNUNET_free(plugin->bind_hostname);
2455                   plugin->bind_hostname = NULL;
2456                   plugin->bind4_address = NULL;
2457           }
2458   }
2459
2460     /* Get crypto init string from config */
2461   if (GNUNET_CONFIGURATION_have_value (env->cfg,
2462                                                                            "transport-https", "CRYPTO_INIT"))
2463   {
2464                 GNUNET_CONFIGURATION_get_value_string (env->cfg,
2465                                                                                            "transport-https",
2466                                                                                            "CRYPTO_INIT",
2467                                                                                            &plugin->crypto_init);
2468   }
2469   else
2470   {
2471           GNUNET_asprintf(&plugin->crypto_init,"NORMAL");
2472   }
2473
2474   /* Get private key file from config */
2475   if (GNUNET_CONFIGURATION_have_value (env->cfg,
2476                                                                            "transport-https", "CERT_FILE"))
2477   {
2478           GNUNET_CONFIGURATION_get_value_string (env->cfg,
2479                                                                                          "transport-https",
2480                                                                                      "CERT_FILE",
2481                                                                                      &cert_file);
2482   }
2483   else
2484   {
2485           GNUNET_asprintf(&cert_file,"https.cert");
2486   }
2487
2488   /* Get private key file from config */
2489   if (GNUNET_CONFIGURATION_have_value (env->cfg,
2490                                                                            "transport-https", "KEY_FILE"))
2491   {
2492                 GNUNET_CONFIGURATION_get_value_string (env->cfg,
2493                                                                                            "transport-https",
2494                                                                                            "KEY_FILE",
2495                                                                                            &key_file);
2496   }
2497   else
2498   {
2499           GNUNET_asprintf(&key_file,"https.key");
2500   }
2501
2502   /* Get private key file from config */
2503   if (GNUNET_CONFIGURATION_have_value (env->cfg,
2504                                                                            "transport-https", "CERT_FILE"))
2505   {
2506           GNUNET_CONFIGURATION_get_value_string (env->cfg,
2507                                                                                          "transport-https",
2508                                                                                      "CERT_FILE",
2509                                                                                      &cert_file);
2510   }
2511   else
2512   {
2513           GNUNET_asprintf(&cert_file,"https.cert");
2514   }
2515
2516   /* Reading ipv4 addresse to bind to from config file */
2517   if ((plugin->use_ipv6==GNUNET_YES) && (GNUNET_CONFIGURATION_have_value (env->cfg,
2518                                                                    "transport-https", "BINDTO6")))
2519   {
2520           GNUNET_break (GNUNET_OK ==
2521                                         GNUNET_CONFIGURATION_get_value_string (env->cfg,
2522                                                                                                                    "transport-https",
2523                                                                                                                    "BINDTO6",
2524                                                                                                                    &plugin->bind_hostname));
2525
2526           plugin->bind6_address = GNUNET_malloc(sizeof(struct sockaddr_in6));
2527           plugin->bind6_address->sin6_family = AF_INET6;
2528           plugin->bind6_address->sin6_port = htons (port);
2529
2530       if (inet_pton(AF_INET6,plugin->bind_hostname, &plugin->bind6_address->sin6_addr)<=0)
2531           {
2532                   GNUNET_log_from (GNUNET_ERROR_TYPE_ERROR,
2533                                                    "http",
2534                                                    _("Misconfigured address to bind to in configuration!\n"),
2535                                                    "transport-https");
2536                   GNUNET_free(plugin->bind6_address);
2537                   GNUNET_free(plugin->bind_hostname);
2538                   plugin->bind_hostname = NULL;
2539                   plugin->bind6_address = NULL;
2540           }
2541   }
2542
2543   /* read key & certificates from file */
2544   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, "Loading TLS certificate `%s' `%s'\n", key_file, cert_file);
2545
2546   plugin->key = load_certificate( key_file );
2547   plugin->cert = load_certificate( cert_file );
2548
2549   if ((plugin->key==NULL) || (plugin->cert==NULL))
2550   {
2551           char * cmd;
2552           int ret = 0;
2553           GNUNET_asprintf(&cmd,"gnunet-transport-certificate-creation %s %s", key_file, cert_file);
2554           GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, "No usable TLS certificate found, creating certificate \n");
2555           ret = system(cmd);
2556
2557           if (ret != 0)
2558           {
2559                   GNUNET_log_from (GNUNET_ERROR_TYPE_ERROR,
2560                                            "https",
2561                                                    _("Could not create a new TLS certificate, shell script `%s' failed!\n"),cmd,
2562                                                    "transport-https");
2563                   GNUNET_free (key_file);
2564                   GNUNET_free (cert_file);
2565                   libgnunet_plugin_transport_https_done(api);
2566                   GNUNET_free (cmd);
2567                   return NULL;
2568           }
2569
2570           GNUNET_free (cmd);
2571
2572           plugin->key = load_certificate( key_file );
2573           plugin->cert = load_certificate( cert_file );
2574
2575           if ((plugin->key==NULL) || (plugin->cert==NULL))
2576           {
2577                   GNUNET_log_from (GNUNET_ERROR_TYPE_ERROR,
2578                                            "https",
2579                                                    _("No usable TLS certificate found and creating one failed! \n"),
2580                                                    "transport-https");
2581                   GNUNET_free (key_file);
2582                   GNUNET_free (cert_file);
2583                   libgnunet_plugin_transport_https_done(api);
2584                   return NULL;
2585           }
2586   }
2587
2588   GNUNET_free (key_file);
2589   GNUNET_free (cert_file);
2590
2591
2592   GNUNET_assert((plugin->key!=NULL) && (plugin->cert!=NULL));
2593   GNUNET_log (GNUNET_ERROR_TYPE_DEBUG, "TLS certificate loaded\n", key_file, cert_file);
2594
2595   GNUNET_assert ((port > 0) && (port <= 65535));
2596   plugin->port_inbound = port;
2597   gn_timeout = GNUNET_CONSTANTS_IDLE_CONNECTION_TIMEOUT;
2598   unsigned int timeout = (gn_timeout.value) / 1000;
2599   if ((plugin->http_server_daemon_v6 == NULL) && (plugin->use_ipv6 == GNUNET_YES) && (port != 0))
2600   {
2601         struct sockaddr * tmp = (struct sockaddr *) plugin->bind6_address;
2602     plugin->http_server_daemon_v6 = MHD_start_daemon (
2603 #if DEBUG_CONNECTIONS
2604                                                                    MHD_USE_DEBUG |
2605 #endif
2606                                                                    MHD_USE_IPv6 | MHD_USE_SSL,
2607                                        port,
2608                                        &mhd_accept_cb,
2609                                        plugin , &mdh_access_cb, plugin,
2610                                        /*MHD_OPTION_HTTPS_PRIORITIES,  "NORMAL:",*/
2611                                        /*MHD_OPTION_HTTPS_PRIORITIES,  "PERFORMANCE:",*/
2612                                        /* MHD_OPTION_HTTPS_PRIORITIES, "NONE:+VERS-TLS1.0:+ARCFOUR-128:+SHA1:+RSA:+COMP-NULL", */
2613                                        /*MHD_OPTION_HTTPS_PRIORITIES,  "NONE:+VERS-TLS1.0:+ARCFOUR-128:+MD5:+RSA:+COMP-NULL",*/
2614                                        MHD_OPTION_HTTPS_PRIORITIES,  plugin->crypto_init,
2615                                        MHD_OPTION_HTTPS_MEM_KEY, plugin->key,
2616                                        MHD_OPTION_HTTPS_MEM_CERT, plugin->cert,
2617                                        MHD_OPTION_SOCK_ADDR, tmp,
2618                                        MHD_OPTION_CONNECTION_LIMIT, (unsigned int) 32,
2619                                        //MHD_OPTION_PER_IP_CONNECTION_LIMIT, (unsigned int) 6,
2620                                        MHD_OPTION_CONNECTION_TIMEOUT, (unsigned int) timeout,
2621                                        MHD_OPTION_CONNECTION_MEMORY_LIMIT, (size_t) (16 * 1024),
2622                                        MHD_OPTION_NOTIFY_COMPLETED, &mhd_termination_cb, NULL,
2623                                        MHD_OPTION_END);
2624   }
2625   if ((plugin->http_server_daemon_v4 == NULL) && (plugin->use_ipv4 == GNUNET_YES) && (port != 0))
2626   {
2627   plugin->http_server_daemon_v4 = MHD_start_daemon (
2628 #if DEBUG_CONNECTIONS
2629                                                                    MHD_USE_DEBUG |
2630 #endif
2631                                                                    MHD_NO_FLAG | MHD_USE_SSL,
2632                                        port,
2633                                        &mhd_accept_cb,
2634                                        plugin , &mdh_access_cb, plugin,
2635                                        /*MHD_OPTION_HTTPS_PRIORITIES,  "NORMAL:",*/
2636                                        /*MHD_OPTION_HTTPS_PRIORITIES,  "PERFORMANCE:",*/
2637                                        /* MHD_OPTION_HTTPS_PRIORITIES, "NONE:+VERS-TLS1.0:+ARCFOUR-128:+SHA1:+RSA:+COMP-NULL", */
2638                                        /*MHD_OPTION_HTTPS_PRIORITIES,  "NONE:+VERS-TLS1.0:+ARCFOUR-128:+MD5:+RSA:+COMP-NULL",*/
2639                                        MHD_OPTION_HTTPS_PRIORITIES,  plugin->crypto_init,
2640                                        MHD_OPTION_HTTPS_MEM_KEY, plugin->key,
2641                                        MHD_OPTION_HTTPS_MEM_CERT, plugin->cert,
2642                                        MHD_OPTION_SOCK_ADDR, (struct sockaddr_in *)plugin->bind4_address,
2643                                        MHD_OPTION_CONNECTION_LIMIT, (unsigned int) 32,
2644                                        //MHD_OPTION_PER_IP_CONNECTION_LIMIT, (unsigned int) 6,
2645                                        MHD_OPTION_CONNECTION_TIMEOUT, (unsigned int) timeout,
2646                                        MHD_OPTION_CONNECTION_MEMORY_LIMIT, (size_t) (16 * 1024),
2647                                        MHD_OPTION_NOTIFY_COMPLETED, &mhd_termination_cb, NULL,
2648                                        MHD_OPTION_END);
2649   }
2650   if (plugin->http_server_daemon_v4 != NULL)
2651     plugin->http_server_task_v4 = http_server_daemon_prepare (plugin, plugin->http_server_daemon_v4);
2652   if (plugin->http_server_daemon_v6 != NULL)
2653     plugin->http_server_task_v6 = http_server_daemon_prepare (plugin, plugin->http_server_daemon_v6);
2654
2655
2656   if (plugin->http_server_task_v4 != GNUNET_SCHEDULER_NO_TASK)
2657   {
2658 #if DEBUG_HTTPS
2659           GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Starting HTTPS Server with IPv4 bound to %s with port %u\n",(plugin->bind_hostname!=NULL) ? plugin->bind_hostname : "every address",port);
2660 #endif
2661   }
2662   else if ((plugin->http_server_task_v6 != GNUNET_SCHEDULER_NO_TASK) && (plugin->http_server_task_v4 != GNUNET_SCHEDULER_NO_TASK))
2663   {
2664 #if DEBUG_HTTPS
2665     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Starting HTTPS Server with IPv6 bound to %s with port %u\n",(plugin->bind_hostname!=NULL) ? plugin->bind_hostname : "every address", port);
2666 #endif
2667   }
2668   else if ((plugin->http_server_task_v6 != GNUNET_SCHEDULER_NO_TASK) && (plugin->http_server_task_v4 == GNUNET_SCHEDULER_NO_TASK))
2669   {
2670 #if DEBUG_HTTPS
2671     GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,"Starting HTTPS Server with IPv4 and IPv6 bound to %s with port %u\n",(plugin->bind_hostname!=NULL) ? plugin->bind_hostname : "every address", port);
2672 #endif
2673   }
2674   else
2675   {
2676         char * tmp;
2677         if ((plugin->use_ipv6 == GNUNET_YES) && (plugin->use_ipv4 == GNUNET_YES))
2678                 GNUNET_asprintf(&tmp,"with IPv4 and IPv6 enabled");
2679         if ((plugin->use_ipv6 == GNUNET_NO) && (plugin->use_ipv4 == GNUNET_YES))
2680                 GNUNET_asprintf(&tmp,"with IPv4 enabled");
2681         if ((plugin->use_ipv6 == GNUNET_YES) && (plugin->use_ipv4 == GNUNET_NO))
2682                 GNUNET_asprintf(&tmp,"with IPv6 enabled");
2683         if ((plugin->use_ipv6 == GNUNET_NO) && (plugin->use_ipv4 == GNUNET_NO))
2684                 GNUNET_asprintf(&tmp,"with NO IP PROTOCOL enabled");
2685         GNUNET_log (GNUNET_ERROR_TYPE_ERROR,"HTTPS Server with %s could not be started on port %u! https plugin failed!\n",tmp, port);
2686         GNUNET_free(tmp);
2687     libgnunet_plugin_transport_https_done (api);
2688     return NULL;
2689   }
2690
2691   /* Initializing cURL */
2692   curl_global_init(CURL_GLOBAL_ALL);
2693   plugin->multi_handle = curl_multi_init();
2694
2695   if ( NULL == plugin->multi_handle )
2696   {
2697     GNUNET_log_from (GNUNET_ERROR_TYPE_ERROR,
2698                                    "http",
2699                                    _("Could not initialize curl multi handle, failed to start http plugin!\n"),
2700                                    "transport-https");
2701     libgnunet_plugin_transport_https_done (api);
2702     return NULL;
2703   }
2704
2705   plugin->peers = GNUNET_CONTAINER_multihashmap_create (10);
2706   GNUNET_OS_network_interfaces_list (&process_interfaces, plugin);
2707
2708   return api;
2709 }
2710
2711 /* end of plugin_transport_https.c */