mirror of
https://github.com/deneraraujo/OpenVPNAdapter.git
synced 2026-04-24 00:00:05 +08:00
f5fda0fa73
6608878d5 [OVPN3-341] implement mssfix support 1bf3fc0e4 win: update project files f8d209435 travis: update to default osx image: xcode9.4 31eb246a8 travis.yml: align deps version to lib-version 996f86635 RunContext: fixed rebase issue that added two "default: signal_rearm();" clauses aebea6456 build script: minor changes to Cityhash inclusion 1d754072c modstat: make update_file_mod_time_nanoseconds() a no-op on non-Linux 7974c9867 Fixed some breakage caused by recent endian/ffs commits a0dd7fe8b endian.hpp: break out endian compile-time tests to endian_platform.hpp c8bdf5a34 ffs.hpp: support additional numeric types dcb0c9452 BufferType: append() argument can now be a flexible buffer type 2009a8a25 Added AsioTimerSafe 39e71b7dd event_loop_wait_barrier: use a longer default timeout when running under valgrind 8b7e08e9b string::contains_non_space_ctrl: consider ASCII char 127 (DEL) to be a control char e43024d7c RunContext: rearm non-terminating signals 6ab379323 write_binary_atomic: remove temporary file on move failure 55dc653cd path: added is_contained() 02bf235c6 Reverted previous commit: "ReplyParser: added undefined status" 84dbc5b9b Allow test/cli.cpp to be used with NetCfg Tunbuilder client 80fed2c55 Allow updating auth-token during session ad7da751e don't print time in debug message and use OPENVPN_LOG_PROTO_VERBOSE 981407994 tls-crypt-v2: implement abstract metadata parser be38bbeb8 tls-crypt-v2: test/ssl/proto.cpp - extend protocol test 60fcf374f tls-crypt-v2: implement WKc appending/unwrapping logic 51f4a3a29 tls-crypt-v2: introduce CONTROL_HARD_RESET_V3 packet type 156a6e58b tls-crypt-v2: implement client key parser and renderer 54a97b381 ssl: add support for encoding/decoding PEM format f090fcda4 tls-crypt: make HMAC API more generic d87f5bbc0 OpenSSL: init library 2ea88a93b Add Remote endpoint information to protect_socket call 0a081ee17 [OVPN3-315] cli/go: add option to compile SITNL component 5bbfb57c0 [OVPN3-315] TunLinux::Client: allow user to select netlink at compile time e8458a68e [OVPN3-315] GW: add netlink support 4e77edb9e [OVPN3-315] TunLinux: add Netlink implementation for Tun setup methods 68508fe56 bigmutex: include missing extern.hpp header a7b923e1e Fix logic inversion from commit 2de9aebc 923e10d13 runcontext: arrange members to allow inheritance 2de9aebc7 Replace deprecated mbedtls_sha1 with mbedtls_sha1_ret e9c0bd00b Remove unused private field ee17c33c2 Add virtual deconstructor to TransportClientParent fab64ba0f Fix clang warning about unused attributes and missing overrides 2624d9ddf Also parse dhcp-option DNS6 as DNS server for compatibility with OpenVPN 2 6d12c9cc2 Refuse external pki with non RSA keys 4a25059f5 test/ovpncli: Don't override PROF env variable f241c4c5f scripts: Add tool to update copyright years 27beeb03d Update lz4 version to 1.8.3 17e356858 Define DASIO_HAS_STD_STRING_VIEW on Android build b107fd994 Remove unsupported platforms from Android build 6a200f72e Ensure all Android components are always installed fbcd374a4 [OVPN3-327] OpenSSL: ensure >TLS1.0 is negotiated by default d9b1f78b6 JSON: #define OPENVPN_JSON_INTERNAL when internal JSON library is used 39290f19d Fix build issues with #if macro on big-endian hardware d4f62d9ed Fix instantiating a new URL instead of parsing the URL git-subtree-dir: Sources/OpenVPNAdapter/Libraries/Vendors/openvpn git-subtree-split: 6608878d57eec1c64c16c5a13ee65b2cf0418ca1
399 lines
8.2 KiB
C++
399 lines
8.2 KiB
C++
// OpenVPN -- An application to securely tunnel IP networks
|
|
// over a single port, with support for SSL/TLS-based
|
|
// session authentication and key exchange,
|
|
// packet encryption, packet authentication, and
|
|
// packet compression.
|
|
//
|
|
// Copyright (C) 2012-2017 OpenVPN Inc.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License Version 3
|
|
// as published by the Free Software Foundation.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program in the COPYING file.
|
|
// If not, see <http://www.gnu.org/licenses/>.
|
|
//
|
|
// Adapted from code Copyright (c) 2003-2012 Christopher M. Kohlhoff (chris at kohlhoff dot com)
|
|
//
|
|
// Distributed under the Boost Software License, Version 1.0. (See accompanying
|
|
// file LICENSE_1_0.txt or copy at http://www.boost.org/LICENSE_1_0.txt)
|
|
|
|
// Parse an HTTP reply
|
|
|
|
#ifndef OPENVPN_HTTP_REPLY_H
|
|
#define OPENVPN_HTTP_REPLY_H
|
|
|
|
#include <openvpn/http/header.hpp>
|
|
#include <openvpn/http/parseutil.hpp>
|
|
|
|
namespace openvpn {
|
|
namespace HTTP {
|
|
|
|
struct Reply {
|
|
Reply() : http_version_major(0), http_version_minor(0), status_code(0) {}
|
|
|
|
void reset()
|
|
{
|
|
http_version_major = 0;
|
|
http_version_minor = 0;
|
|
status_code = 0;
|
|
status_text = "";
|
|
headers.clear();
|
|
}
|
|
|
|
std::string to_string() const
|
|
{
|
|
std::ostringstream out;
|
|
out << "HTTP Reply" << std::endl;
|
|
out << "version=" << http_version_major << '/' << http_version_minor << std::endl;
|
|
out << "status_code=" << status_code << std::endl;
|
|
out << "status_text=" << status_text << std::endl;
|
|
out << headers.to_string();
|
|
return out.str();
|
|
}
|
|
|
|
int http_version_major;
|
|
int http_version_minor;
|
|
int status_code;
|
|
std::string status_text;
|
|
HeaderList headers;
|
|
};
|
|
|
|
class ReplyParser {
|
|
enum state
|
|
{
|
|
http_version_h,
|
|
http_version_t_1,
|
|
http_version_t_2,
|
|
http_version_p,
|
|
http_version_slash,
|
|
http_version_major_start,
|
|
http_version_major,
|
|
http_version_minor_start,
|
|
http_version_minor,
|
|
status_code_start,
|
|
status_code,
|
|
status_text_start,
|
|
status_text,
|
|
expecting_newline_1,
|
|
header_line_start,
|
|
header_lws,
|
|
header_name,
|
|
space_before_header_value,
|
|
header_value,
|
|
expecting_newline_2,
|
|
expecting_newline_3
|
|
};
|
|
|
|
public:
|
|
enum status {
|
|
pending,
|
|
fail,
|
|
success,
|
|
};
|
|
|
|
ReplyParser()
|
|
: state_(http_version_h)
|
|
{
|
|
}
|
|
|
|
// Reset to initial parser state.
|
|
void reset()
|
|
{
|
|
state_ = http_version_h;
|
|
}
|
|
|
|
// Parse some HTTP reply data.
|
|
status consume(Reply& req, const unsigned char input)
|
|
{
|
|
switch (state_)
|
|
{
|
|
case http_version_h:
|
|
if (input == 'H')
|
|
{
|
|
state_ = http_version_t_1;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_t_1:
|
|
if (input == 'T')
|
|
{
|
|
state_ = http_version_t_2;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_t_2:
|
|
if (input == 'T')
|
|
{
|
|
state_ = http_version_p;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_p:
|
|
if (input == 'P')
|
|
{
|
|
state_ = http_version_slash;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_slash:
|
|
if (input == '/')
|
|
{
|
|
req.http_version_major = 0;
|
|
req.http_version_minor = 0;
|
|
state_ = http_version_major_start;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_major_start:
|
|
if (Util::is_digit(input))
|
|
{
|
|
req.http_version_major = req.http_version_major * 10 + input - '0';
|
|
state_ = http_version_major;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_major:
|
|
if (input == '.')
|
|
{
|
|
state_ = http_version_minor_start;
|
|
return pending;
|
|
}
|
|
else if (Util::is_digit(input))
|
|
{
|
|
req.http_version_major = req.http_version_major * 10 + input - '0';
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_minor_start:
|
|
if (Util::is_digit(input))
|
|
{
|
|
req.http_version_minor = req.http_version_minor * 10 + input - '0';
|
|
state_ = http_version_minor;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case http_version_minor:
|
|
if (input == ' ')
|
|
{
|
|
state_ = status_code_start;
|
|
return pending;
|
|
}
|
|
else if (Util::is_digit(input))
|
|
{
|
|
req.http_version_minor = req.http_version_minor * 10 + input - '0';
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case status_code_start:
|
|
if (Util::is_digit(input))
|
|
{
|
|
req.status_code = req.status_code * 10 + input - '0';
|
|
state_ = status_code;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case status_code:
|
|
if (input == ' ')
|
|
{
|
|
state_ = status_text_start;
|
|
return pending;
|
|
}
|
|
else if (Util::is_digit(input))
|
|
{
|
|
req.status_code = req.status_code * 10 + input - '0';
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case status_text_start:
|
|
if (!Util::is_char(input) || Util::is_ctl(input) || Util::is_tspecial(input))
|
|
{
|
|
return fail;
|
|
}
|
|
else
|
|
{
|
|
state_ = status_text;
|
|
req.status_text.push_back(input);
|
|
return pending;
|
|
}
|
|
case status_text:
|
|
if (input == '\r')
|
|
{
|
|
state_ = expecting_newline_1;
|
|
return pending;
|
|
}
|
|
else if (!Util::is_char(input) || Util::is_ctl(input))
|
|
{
|
|
return fail;
|
|
}
|
|
else
|
|
{
|
|
req.status_text.push_back(input);
|
|
return pending;
|
|
}
|
|
case expecting_newline_1:
|
|
if (input == '\n')
|
|
{
|
|
state_ = header_line_start;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case header_line_start:
|
|
if (input == '\r')
|
|
{
|
|
state_ = expecting_newline_3;
|
|
return pending;
|
|
}
|
|
else if (!req.headers.empty() && (input == ' ' || input == '\t'))
|
|
{
|
|
state_ = header_lws;
|
|
return pending;
|
|
}
|
|
else if (!Util::is_char(input) || Util::is_ctl(input) || Util::is_tspecial(input))
|
|
{
|
|
return fail;
|
|
}
|
|
else
|
|
{
|
|
req.headers.push_back(Header());
|
|
req.headers.back().name.push_back(input);
|
|
state_ = header_name;
|
|
return pending;
|
|
}
|
|
case header_lws:
|
|
if (input == '\r')
|
|
{
|
|
state_ = expecting_newline_2;
|
|
return pending;
|
|
}
|
|
else if (input == ' ' || input == '\t')
|
|
{
|
|
return pending;
|
|
}
|
|
else if (Util::is_ctl(input))
|
|
{
|
|
return fail;
|
|
}
|
|
else
|
|
{
|
|
state_ = header_value;
|
|
req.headers.back().value.push_back(input);
|
|
return pending;
|
|
}
|
|
case header_name:
|
|
if (input == ':')
|
|
{
|
|
state_ = space_before_header_value;
|
|
return pending;
|
|
}
|
|
else if (!Util::is_char(input) || Util::is_ctl(input) || Util::is_tspecial(input))
|
|
{
|
|
return fail;
|
|
}
|
|
else
|
|
{
|
|
req.headers.back().name.push_back(input);
|
|
return pending;
|
|
}
|
|
case space_before_header_value:
|
|
if (input == ' ')
|
|
{
|
|
state_ = header_value;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case header_value:
|
|
if (input == '\r')
|
|
{
|
|
state_ = expecting_newline_2;
|
|
return pending;
|
|
}
|
|
else if (Util::is_ctl(input))
|
|
{
|
|
return fail;
|
|
}
|
|
else
|
|
{
|
|
req.headers.back().value.push_back(input);
|
|
return pending;
|
|
}
|
|
case expecting_newline_2:
|
|
if (input == '\n')
|
|
{
|
|
state_ = header_line_start;
|
|
return pending;
|
|
}
|
|
else
|
|
{
|
|
return fail;
|
|
}
|
|
case expecting_newline_3:
|
|
if (input == '\n')
|
|
return success;
|
|
else
|
|
return fail;
|
|
default:
|
|
return fail;
|
|
}
|
|
}
|
|
|
|
private:
|
|
// The current state of the parser.
|
|
state state_;
|
|
};
|
|
|
|
struct ReplyType
|
|
{
|
|
typedef Reply State;
|
|
typedef ReplyParser Parser;
|
|
};
|
|
}
|
|
}
|
|
|
|
#endif
|