2 * uhttpd - Tiny single-threaded httpd - Main component
4 * Copyright (C) 2010 Jo-Philipp Wich <xm@subsignal.org>
6 * Licensed under the Apache License, Version 2.0 (the "License");
7 * you may not use this file except in compliance with the License.
8 * You may obtain a copy of the License at
10 * http://www.apache.org/licenses/LICENSE-2.0
12 * Unless required by applicable law or agreed to in writing, software
13 * distributed under the License is distributed on an "AS IS" BASIS,
14 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15 * See the License for the specific language governing permissions and
16 * limitations under the License.
19 #define _XOPEN_SOURCE 500 /* crypt() */
22 #include "uhttpd-utils.h"
23 #include "uhttpd-file.h"
26 #include "uhttpd-cgi.h"
30 #include "uhttpd-lua.h"
34 #include "uhttpd-tls.h"
40 static void uh_sigterm(int sig)
45 static void uh_sigchld(int sig)
47 while( waitpid(-1, NULL, WNOHANG) > 0 ) { }
50 static void uh_config_parse(struct config *conf)
58 const char *path = conf->file ? conf->file : "/etc/httpd.conf";
61 if( (c = fopen(path, "r")) != NULL )
63 memset(line, 0, sizeof(line));
65 while( fgets(line, sizeof(line) - 1, c) )
67 if( (line[0] == '/') && (strchr(line, ':') != NULL) )
69 if( !(user = strchr(line, ':')) || (*user++ = 0) ||
70 !(pass = strchr(user, ':')) || (*pass++ = 0) ||
71 !(eol = strchr(pass, '\n')) || (*eol++ = 0) )
74 if( !uh_auth_add(line, user, pass) )
77 "Notice: No password set for user %s, ignoring "
78 "authentication on %s\n", user, line
82 else if( !strncmp(line, "I:", 2) )
84 if( !(user = strchr(line, ':')) || (*user++ = 0) ||
85 !(eol = strchr(user, '\n')) || (*eol++ = 0) )
88 conf->index_file = strdup(user);
90 else if( !strncmp(line, "E404:", 5) )
92 if( !(user = strchr(line, ':')) || (*user++ = 0) ||
93 !(eol = strchr(user, '\n')) || (*eol++ = 0) )
96 conf->error_handler = strdup(user);
104 static int uh_socket_bind(
105 fd_set *serv_fds, int *max_fd, const char *host, const char *port,
106 struct addrinfo *hints, int do_tls, struct config *conf
113 struct listener *l = NULL;
114 struct addrinfo *addrs = NULL, *p = NULL;
116 if( (status = getaddrinfo(host, port, hints, &addrs)) != 0 )
118 fprintf(stderr, "getaddrinfo(): %s\n", gai_strerror(status));
121 /* try to bind a new socket to each found address */
122 for( p = addrs; p; p = p->ai_next )
125 if( (sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol)) == -1 )
131 /* "address already in use" */
132 if( setsockopt(sock, SOL_SOCKET, SO_REUSEADDR, &yes, sizeof(yes)) == -1 )
134 perror("setsockopt()");
138 /* required to get parallel v4 + v6 working */
139 if( p->ai_family == AF_INET6 )
141 if( setsockopt(sock, IPPROTO_IPV6, IPV6_V6ONLY, &yes, sizeof(yes)) == -1 )
143 perror("setsockopt()");
149 if( bind(sock, p->ai_addr, p->ai_addrlen) == -1 )
156 if( listen(sock, UH_LIMIT_CLIENTS) == -1 )
162 /* add listener to global list */
163 if( ! (l = uh_listener_add(sock, conf)) )
166 "uh_listener_add(): Can not create more than "
167 "%i listen sockets\n", UH_LIMIT_LISTENERS
175 l->tls = do_tls ? conf->tls : NULL;
178 /* add socket to server fd set */
179 FD_SET(sock, serv_fds);
181 *max_fd = max(*max_fd, sock);
196 static struct http_request * uh_http_header_parse(struct client *cl, char *buffer, int buflen)
198 char *method = &buffer[0];
200 char *version = NULL;
202 char *headers = NULL;
203 char *hdrname = NULL;
204 char *hdrdata = NULL;
209 static struct http_request req;
211 memset(&req, 0, sizeof(req));
214 /* terminate initial header line */
215 if( (headers = strfind(buffer, buflen, "\r\n", 2)) != NULL )
217 buffer[buflen-1] = 0;
222 /* find request path */
223 if( (path = strchr(buffer, ' ')) != NULL )
226 /* find http version */
227 if( (path != NULL) && ((version = strchr(path, ' ')) != NULL) )
232 if( strcmp(method, "GET") && strcmp(method, "HEAD") && strcmp(method, "POST") )
235 uh_http_response(cl, 405, "Method Not Allowed");
243 req.method = UH_HTTP_MSG_GET;
247 req.method = UH_HTTP_MSG_HEAD;
251 req.method = UH_HTTP_MSG_POST;
257 if( !path || !strlen(path) )
259 /* malformed request */
260 uh_http_response(cl, 400, "Bad Request");
269 if( strcmp(version, "HTTP/0.9") && strcmp(version, "HTTP/1.0") && strcmp(version, "HTTP/1.1") )
271 /* unsupported version */
272 uh_http_response(cl, 400, "Bad Request");
277 req.version = strtof(&version[5], NULL);
281 /* process header fields */
282 for( i = (int)(headers - buffer); i < buflen; i++ )
284 /* found eol and have name + value, push out header tuple */
285 if( hdrname && hdrdata && (buffer[i] == '\r' || buffer[i] == '\n') )
290 if( (hdrcount + 1) < array_size(req.headers) )
292 req.headers[hdrcount++] = hdrname;
293 req.headers[hdrcount++] = hdrdata;
295 hdrname = hdrdata = NULL;
301 uh_http_response(cl, 413, "Request Entity Too Large");
306 /* have name but no value and found a colon, start of value */
307 else if( hdrname && !hdrdata && ((i+2) < buflen) &&
308 (buffer[i] == ':') && (buffer[i+1] == ' ')
311 hdrdata = &buffer[i+2];
314 /* have no name and found [A-Z], start of name */
315 else if( !hdrname && isalpha(buffer[i]) && isupper(buffer[i]) )
317 hdrname = &buffer[i];
322 req.redirect_status = 200;
326 /* Malformed request */
327 uh_http_response(cl, 400, "Bad Request");
332 static struct http_request * uh_http_header_recv(struct client *cl)
334 static char buffer[UH_LIMIT_MSGHEAD];
335 char *bufptr = &buffer[0];
338 struct timeval timeout;
342 ssize_t blen = sizeof(buffer)-1;
346 memset(buffer, 0, sizeof(buffer));
351 FD_SET(cl->socket, &reader);
353 /* fail after 0.1s */
355 timeout.tv_usec = 100000;
357 /* check whether fd is readable */
358 if( select(cl->socket + 1, &reader, NULL, NULL, &timeout) > 0 )
361 rlen = uh_tcp_peek(cl, bufptr, blen);
365 if( (idxptr = strfind(buffer, sizeof(buffer), "\r\n\r\n", 4)) )
367 blen -= uh_tcp_recv(cl, bufptr, (int)(idxptr - bufptr) + 4);
369 /* header read complete ... */
370 return uh_http_header_parse(cl, buffer, sizeof(buffer) - blen - 1);
374 rlen = uh_tcp_recv(cl, bufptr, rlen);
381 /* invalid request (unexpected eof/timeout) */
382 uh_http_response(cl, 408, "Request Timeout");
388 /* invalid request (unexpected eof/timeout) */
389 uh_http_response(cl, 408, "Request Timeout");
394 /* request entity too large */
395 uh_http_response(cl, 413, "Request Entity Too Large");
399 static int uh_path_match(const char *prefix, const char *url)
401 if( (strstr(url, prefix) == url) &&
402 ((prefix[strlen(prefix)-1] == '/') ||
403 (strlen(url) == strlen(prefix)) ||
404 (url[strlen(prefix)] == '/'))
413 int main (int argc, char **argv)
420 /* master file descriptor list */
421 fd_set used_fds, serv_fds, read_fds;
423 /* working structs */
424 struct addrinfo hints;
425 struct http_request *req;
426 struct path_info *pin;
434 /* maximum file descriptor number */
435 int new_fd, cur_fd, max_fd = 0;
450 #if defined(HAVE_TLS) || defined(HAVE_LUA)
455 /* clear the master and temp sets */
460 /* handle SIGPIPE, SIGINT, SIGTERM, SIGCHLD */
462 sigemptyset(&sa.sa_mask);
464 sa.sa_handler = SIG_IGN;
465 sigaction(SIGPIPE, &sa, NULL);
467 sa.sa_handler = uh_sigchld;
468 sigaction(SIGCHLD, &sa, NULL);
470 sa.sa_handler = uh_sigterm;
471 sigaction(SIGINT, &sa, NULL);
472 sigaction(SIGTERM, &sa, NULL);
476 sigaddset(&ss, SIGCHLD);
477 sigprocmask(SIG_BLOCK, &ss, NULL);
479 /* prepare addrinfo hints */
480 memset(&hints, 0, sizeof(hints));
481 hints.ai_family = AF_UNSPEC;
482 hints.ai_socktype = SOCK_STREAM;
483 hints.ai_flags = AI_PASSIVE;
486 memset(&conf, 0, sizeof(conf));
487 memset(bind, 0, sizeof(bind));
490 /* load TLS plugin */
491 if( ! (lib = dlopen("uhttpd_tls.so", RTLD_LAZY | RTLD_GLOBAL)) )
494 "Notice: Unable to load TLS plugin - disabling SSL support! "
495 "(Reason: %s)\n", dlerror()
500 /* resolve functions */
501 if( !(conf.tls_init = dlsym(lib, "uh_tls_ctx_init")) ||
502 !(conf.tls_cert = dlsym(lib, "uh_tls_ctx_cert")) ||
503 !(conf.tls_key = dlsym(lib, "uh_tls_ctx_key")) ||
504 !(conf.tls_free = dlsym(lib, "uh_tls_ctx_free")) ||
505 !(conf.tls_accept = dlsym(lib, "uh_tls_client_accept")) ||
506 !(conf.tls_close = dlsym(lib, "uh_tls_client_close")) ||
507 !(conf.tls_recv = dlsym(lib, "uh_tls_client_recv")) ||
508 !(conf.tls_send = dlsym(lib, "uh_tls_client_send"))
511 "Error: Failed to lookup required symbols "
512 "in TLS plugin: %s\n", dlerror()
517 /* init SSL context */
518 if( ! (conf.tls = conf.tls_init()) )
520 fprintf(stderr, "Error: Failed to initalize SSL context\n");
526 while( (opt = getopt(argc, argv,
527 "fSDRC:K:E:I:p:s:h:c:l:L:d:r:m:x:t:T:")) > 0
534 if( (port = strrchr(optarg, ':')) != NULL )
536 if( (optarg[0] == '[') && (port > optarg) && (port[-1] == ']') )
537 memcpy(bind, optarg + 1,
538 min(sizeof(bind), (int)(port - optarg) - 2));
541 min(sizeof(bind), (int)(port - optarg)));
556 "Notice: TLS support is disabled, "
557 "ignoring '-s %s'\n", optarg
567 bound += uh_socket_bind(
568 &serv_fds, &max_fd, bind[0] ? bind : NULL, port,
569 &hints, (opt == 's'), &conf
572 memset(bind, 0, sizeof(bind));
580 if( conf.tls_cert(conf.tls, optarg) < 1 )
583 "Error: Invalid certificate file given\n");
596 if( conf.tls_key(conf.tls, optarg) < 1 )
599 "Error: Invalid private key file given\n");
611 if( ! realpath(optarg, conf.docroot) )
613 fprintf(stderr, "Error: Invalid directory %s: %s\n",
614 optarg, strerror(errno));
621 if( (strlen(optarg) == 0) || (optarg[0] != '/') )
623 fprintf(stderr, "Error: Invalid error handler: %s\n",
627 conf.error_handler = optarg;
632 if( (strlen(optarg) == 0) || (optarg[0] == '/') )
634 fprintf(stderr, "Error: Invalid index page: %s\n",
638 conf.index_file = optarg;
641 /* don't follow symlinks */
643 conf.no_symlinks = 1;
646 /* don't list directories */
648 conf.no_dirlists = 1;
652 conf.rfc1918_filter = 1;
658 conf.cgi_prefix = optarg;
665 conf.lua_prefix = optarg;
670 conf.lua_handler = optarg;
674 #if defined(HAVE_CGI) || defined(HAVE_LUA)
677 conf.script_timeout = atoi(optarg);
681 /* network timeout */
683 conf.network_timeout = atoi(optarg);
693 if( (port = malloc(strlen(optarg)+1)) != NULL )
695 memset(port, 0, strlen(optarg)+1);
696 uh_urldecode(port, strlen(optarg), optarg, strlen(optarg));
703 /* basic auth realm */
710 printf("%s\n", crypt(optarg, "$1$"));
721 "Usage: %s -p [addr:]port [-h docroot]\n"
722 " -f Do not fork to background\n"
723 " -c file Configuration file, default is '/etc/httpd.conf'\n"
724 " -p [addr:]port Bind to specified address and port, multiple allowed\n"
726 " -s [addr:]port Like -p but provide HTTPS on this port\n"
727 " -C file ASN.1 server certificate file\n"
728 " -K file ASN.1 server private key file\n"
730 " -h directory Specify the document root, default is '.'\n"
731 " -E string Use given virtual URL as 404 error handler\n"
732 " -I string Use given filename as index page for directories\n"
733 " -S Do not follow symbolic links outside of the docroot\n"
734 " -D Do not allow directory listings, send 403 instead\n"
735 " -R Enable RFC1918 filter\n"
737 " -l string URL prefix for Lua handler, default is '/lua'\n"
738 " -L file Lua handler script, omit to disable Lua\n"
741 " -x string URL prefix for CGI handler, default is '/cgi-bin'\n"
743 #if defined(HAVE_CGI) || defined(HAVE_LUA)
744 " -t seconds CGI and Lua script timeout in seconds, default is 60\n"
746 " -T seconds Network timeout in seconds, default is 30\n"
747 " -d string URL decode given string\n"
748 " -r string Specify basic auth realm\n"
749 " -m string MD5 crypt given string\n"
758 if( (tls == 1) && (keys < 2) )
760 fprintf(stderr, "Error: Missing private key or certificate file\n");
767 fprintf(stderr, "Error: No sockets bound, unable to continue\n");
771 /* default docroot */
772 if( !conf.docroot[0] && !realpath(".", conf.docroot) )
774 fprintf(stderr, "Error: Can not determine default document root: %s\n",
781 conf.realm = "Protected Area";
784 uh_config_parse(&conf);
786 /* default network timeout */
787 if( conf.network_timeout <= 0 )
788 conf.network_timeout = 30;
790 #if defined(HAVE_CGI) || defined(HAVE_LUA)
791 /* default script timeout */
792 if( conf.script_timeout <= 0 )
793 conf.script_timeout = 60;
797 /* default cgi prefix */
798 if( ! conf.cgi_prefix )
799 conf.cgi_prefix = "/cgi-bin";
803 /* load Lua plugin */
804 if( ! (lib = dlopen("uhttpd_lua.so", RTLD_LAZY | RTLD_GLOBAL)) )
807 "Notice: Unable to load Lua plugin - disabling Lua support! "
808 "(Reason: %s)\n", dlerror()
813 /* resolve functions */
814 if( !(conf.lua_init = dlsym(lib, "uh_lua_init")) ||
815 !(conf.lua_close = dlsym(lib, "uh_lua_close")) ||
816 !(conf.lua_request = dlsym(lib, "uh_lua_request"))
819 "Error: Failed to lookup required symbols "
820 "in Lua plugin: %s\n", dlerror()
825 /* init Lua runtime if handler is specified */
826 if( conf.lua_handler )
828 /* default lua prefix */
829 if( ! conf.lua_prefix )
830 conf.lua_prefix = "/lua";
832 L = conf.lua_init(conf.lua_handler);
837 /* fork (if not disabled) */
851 if( (cur_fd = open("/dev/null", O_WRONLY)) > -1 )
854 if( (cur_fd = open("/dev/null", O_RDONLY)) > -1 )
857 if( (cur_fd = open("/dev/null", O_RDONLY)) > -1 )
867 /* backup server descriptor set */
873 /* create a working copy of the used fd set */
876 /* sleep until socket activity */
877 if( select(max_fd + 1, &read_fds, NULL, NULL, NULL) == -1 )
883 /* run through the existing connections looking for data to be read */
884 for( cur_fd = 0; cur_fd <= max_fd; cur_fd++ )
886 /* is a socket managed by us */
887 if( FD_ISSET(cur_fd, &read_fds) )
889 /* is one of our listen sockets */
890 if( FD_ISSET(cur_fd, &serv_fds) )
892 /* handle new connections */
893 if( (new_fd = accept(cur_fd, NULL, 0)) != -1 )
895 /* add to global client list */
896 if( (cl = uh_client_add(new_fd, uh_listener_lookup(cur_fd))) != NULL )
899 /* setup client tls context */
904 /* add client socket to global fdset */
905 FD_SET(new_fd, &used_fds);
907 max_fd = max(max_fd, new_fd);
910 /* insufficient resources */
914 "uh_client_add(): Can not manage more than "
915 "%i client sockets, connection dropped\n",
924 /* is a client socket */
927 if( ! (cl = uh_client_lookup(cur_fd)) )
929 /* this should not happen! */
931 "uh_client_lookup(): No entry for fd %i!\n",
937 /* parse message header */
938 if( (req = uh_http_header_recv(cl)) != NULL )
940 /* RFC1918 filtering required? */
941 if( conf.rfc1918_filter && sa_rfc1918(&cl->peeraddr) &&
942 !sa_rfc1918(&cl->servaddr) )
944 uh_http_sendhf(cl, 403, "Forbidden",
945 "Rejected request from RFC1918 IP to public server address");
950 if( L && uh_path_match(conf.lua_prefix, req->url) )
952 conf.lua_request(cl, req, L);
956 /* dispatch request */
957 if( (pin = uh_path_lookup(cl, req->url)) != NULL )
960 if( uh_auth_check(cl, req, pin) )
963 if( uh_path_match(conf.cgi_prefix, pin->name) )
965 uh_cgi_request(cl, req, pin);
970 uh_file_request(cl, req, pin);
978 /* Try to invoke an error handler */
979 pin = uh_path_lookup(cl, conf.error_handler);
981 if( pin && uh_auth_check(cl, req, pin) )
983 req->redirect_status = 404;
986 if( uh_path_match(conf.cgi_prefix, pin->name) )
988 uh_cgi_request(cl, req, pin);
993 uh_file_request(cl, req, pin);
998 uh_http_sendhf(cl, 404, "Not Found",
999 "No such file or directory");
1007 uh_http_sendhf(cl, 400, "Bad Request",
1008 "Malformed request received");
1012 /* free client tls context */
1019 /* close client socket */
1021 FD_CLR(cur_fd, &used_fds);
1023 /* remove from global client list */
1024 uh_client_remove(cur_fd);
1031 /* destroy the Lua state */