+
+#include "mod_ssl-private.h"
+
+#include "gridsite.h"
+
+#ifndef IPV6_ADD_MEMBERSHIP
+#ifdef IPV6_JOIN_GROUP
+#define IPV6_ADD_MEMBERSHIP IPV6_JOIN_GROUP
+#endif
+#endif
+
+#ifndef UNSET
+#define UNSET -1
+#endif
+
+#define GRST_SESSIONS_DIR "/var/www/sessions"
+
+module AP_MODULE_DECLARE_DATA gridsite_module;
+
+#define GRST_SITECAST_GROUPS 32
+
+struct sitecast_group
+ { char *address; int port; };
+
+#define GRST_SITECAST_ALIASES 32
+
+struct sitecast_alias
+ { const char *sitecast_url; const char *scheme; int port;
+ const char *local_path; const char *local_hostname; };
+
+/* Globals, defined by main server directives in httpd.conf
+ These are assigned default values in create_gridsite_srv_config() */
+
+int gridhttpport = 0; /* set by create_gridsite_srv_config, used as flag */
+char *sessionsdir = NULL;
+char *sitecastdnlists = NULL;
+char *ocspmodes = NULL;
+struct sitecast_group sitecastgroups[GRST_SITECAST_GROUPS+1];
+struct sitecast_alias sitecastaliases[GRST_SITECAST_ALIASES];
+
+ /* This global records whether the SSLSrvConfigRec struct will have
+ the extra BOOL insecure_reneg member */
+int mod_ssl_with_insecure_reneg = 0;
+
+struct sitecast_sockets {
+ fd_set fds;
+ int max_fd;
+} sitecast_sockets;
+
+#if AP_MODULE_MAGIC_AT_LEAST(20051115,0)
+/* SSL_app_data2_idx is private in Apache 2.2 mod_ssl but can be
+ determined at init time, and then recorded here */
+int GRST_SSL_app_data2_idx = -1;
+#endif
+
+typedef struct
+{
+ int auth;
+ int autopasscode;
+ int requirepasscode;
+ int zoneslashes;
+ int envs;
+ int format;
+ int indexes;
+ char *indexheader;
+ int gridsitelink;
+ char *adminfile;
+ char *adminuri;
+ char *helpuri;
+ char *loginuri;
+ char *dnlists;
+ char *dnlistsuri;
+ char *adminlist;
+ int gsiproxylimit;
+ char *unzip;
+ char *methods;
+ char *editable;
+ char *headfile;
+ char *footfile;
+ int gridhttp;
+ char *aclformat;
+ char *aclpath;
+ char *execmethod;
+ char *delegationuri;
+ ap_unix_identity_t execugid;
+ apr_fileperms_t diskmode;
+} mod_gridsite_dir_cfg; /* per-directory config choices */
+
+
+/*
+ * parse_content_range() is loosely
+ * based on modules/dav/main/mod_dav.c from Apache
+ */
+
+int parse_content_range(request_rec *r, apr_off_t *range_start,
+ apr_off_t *range_end, apr_off_t *range_length)
+{
+// this all needs verifying to be ok for large (>2GB, >4GB) files
+
+ const char *range_c;
+ char *range;
+ char *dash;
+ char *slash;
+
+ range_c = apr_table_get(r->headers_in, "content-range");
+ if (range_c == NULL) return 0;
+
+ range = apr_pstrdup(r->pool, range_c);
+
+ if ((strncasecmp(range, "bytes ", 6) != 0) ||
+ ((dash = ap_strchr(range, '-')) == NULL) ||
+ ((slash = ap_strchr(range, '/')) == NULL))
+ {
+ return 0; /* malformed header. ignore it (per S14.16 of RFC2616) */
+ }
+
+ *dash = *slash = '\0';
+
+ // Check for GridSite-specific Content-Range: bytes *-*/LENGTH form
+
+ if ((range[6] == '*') && (dash[1] == '*'))
+ {
+ if (slash[1] == '*') return 0; /* invalid truncation length */
+
+ *range_length = apr_atoi64(&slash[1]);
+ *range_start = 0;
+ *range_end = 0;
+
+ return 1; /* a valid (truncation) length */
+ }
+
+ *range_length = 0;
+ *range_start = apr_atoi64(&range[6]);
+ *range_end = apr_atoi64(&dash[1]);
+
+ if ((*range_end < *range_start) ||
+ ((slash[1] != '*') && (apr_atoi64(&slash[1]) <= *range_end)))
+ return 0; /* ignore invalid ranges */
+
+ /* we now have a valid range */
+ return 1;
+}
+
+char *html_escape(apr_pool_t *pool, char *s)
+{
+ int htmlspecials, i;
+ char *escaped, *p;
+
+ for (htmlspecials=0,p=s; *p != '\0'; ++p)
+ if ((*p == '<') || (*p == '>') || (*p == '&') || (*p == '"'))
+ ++htmlspecials;
+
+ escaped = apr_palloc(pool, strlen(s) + htmlspecials * 6 + 1);
+
+ for (i=0,p=s; *p != '\0'; ++p)
+ {
+ if (*p == '<')
+ {
+ strcpy(&escaped[i], "<");
+ i += 4;
+ }
+ else if (*p == '>')
+ {
+ strcpy(&escaped[i], ">");
+ i += 4;
+ }
+ else if (*p == '&')
+ {
+ strcpy(&escaped[i], "&");
+ i += 5;
+ }
+ else if (*p == '"')
+ {
+ strcpy(&escaped[i], """);
+ i += 6;
+ }
+ else
+ {
+ escaped[i] = *p;
+ ++i;
+ }
+ }
+
+ escaped[i] = '\0';
+
+ return escaped;
+}
+
+char *make_admin_footer(request_rec *r, mod_gridsite_dir_cfg *conf,
+ int isdirectory)
+/*
+ make string holding last modified text and admin links
+*/
+{
+ char *out, *https, *p, *dn = NULL, *file = NULL, *permstr = NULL,
+ *temp, modified[99], *dir_uri, *grst_cred_auri_0 = NULL;
+ GRSTgaclPerm perm = GRST_PERM_NONE;
+ struct tm mtime_tm;
+ time_t mtime_time;
+
+ https = (char *) apr_table_get(r->subprocess_env, "HTTPS");
+
+ dir_uri = apr_pstrdup(r->pool, r->uri);
+ p = rindex(dir_uri, '/');
+
+ if (p == NULL) return "";
+
+ file = apr_pstrdup(r->pool, &p[1]);
+ p[1] = '\0';
+ /* dir_uri always gets both a leading and a trailing slash */
+
+ out = apr_pstrdup(r->pool, "\n");
+
+ if (!isdirectory)
+ {
+ mtime_time = apr_time_sec(r->finfo.mtime);
+
+ localtime_r(&mtime_time, &mtime_tm);
+ strftime(modified, sizeof(modified),
+ "%a %e %B %Y", &mtime_tm);
+ temp = apr_psprintf(r->pool,"
Last modified %s\n", modified);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+
+ if ((conf->adminuri != NULL) &&
+ (conf->adminuri[0] != '\0') &&
+ (conf->adminfile != NULL) &&
+ (conf->adminfile[0] != '\0') &&
+ (strncmp(file, GRST_HIST_PREFIX, sizeof(GRST_HIST_PREFIX)-1) != 0))
+ {
+ temp = apr_psprintf(r->pool,
+ ". "
+ "View page history\n",
+ conf->adminfile, file);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+
+ out = apr_pstrcat(r->pool, out, "", NULL);
+ }
+
+ out = apr_pstrcat(r->pool, out, "
", NULL);
+
+ if (r->connection->notes != NULL)
+ {
+ grst_cred_auri_0 = (char *)
+ apr_table_get(r->notes, "GRST_CRED_AURI_0");
+ }
+
+ if ((grst_cred_auri_0 != NULL) &&
+ (strncmp(grst_cred_auri_0, "dn:", 3) == 0))
+ {
+ dn = GRSThttpUrlDecode(&grst_cred_auri_0[3]);
+ if (dn[0] == '\0')
+ {
+ free(dn);
+ dn = NULL;
+ }
+ }
+
+ if (dn != NULL)
+ {
+ temp = apr_psprintf(r->pool,
+ "You are %s
\n", html_escape(r->pool,dn));
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+
+ if (r->notes != NULL)
+ permstr = (char *) apr_table_get(r->notes, "GRST_PERM");
+
+ if ((permstr != NULL) &&
+ (conf->adminuri != NULL) &&
+ (conf->adminuri[0] != '\0') &&
+ (conf->adminfile != NULL) &&
+ (conf->adminfile[0] != '\0'))
+ {
+ sscanf(permstr, "%d", &perm);
+
+ if (!isdirectory &&
+ GRSTgaclPermHasWrite(perm) &&
+ (strncmp(file, GRST_HIST_PREFIX,
+ sizeof(GRST_HIST_PREFIX) - 1) != 0))
+ {
+ temp = apr_psprintf(r->pool,
+ ""
+ "Edit page .\n", conf->adminfile, file);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+
+ if (GRSTgaclPermHasList(perm) || GRSTgaclPermHasWrite(perm))
+ {
+ temp = apr_psprintf(r->pool,
+ "Manage directory .\n",
+ dir_uri, conf->adminfile);
+
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+ }
+
+ free(dn);
+ }
+
+ if ((https != NULL) && (strcasecmp(https, "on") == 0))
+ temp = apr_psprintf(r->pool,
+ "Switch to HTTP \n",
+ r->server->server_hostname, r->unparsed_uri);
+ else temp = apr_psprintf(r->pool,
+ "Switch to HTTPS \n",
+ r->server->server_hostname, r->unparsed_uri);
+
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+
+ if ((conf->loginuri != NULL) && (conf->loginuri[0] != '\0'))
+ {
+ temp = apr_psprintf(r->pool,
+ ". Login/Logout\n",
+ conf->loginuri, r->unparsed_uri);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+
+ if ((conf->helpuri != NULL) && (conf->helpuri[0] != '\0'))
+ {
+ temp = apr_psprintf(r->pool,
+ ". Website Help\n", conf->helpuri);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+
+ if ((!isdirectory) &&
+ (conf->adminuri != NULL) &&
+ (conf->adminuri[0] != '\0') &&
+ (conf->adminfile != NULL) &&
+ (conf->adminfile[0] != '\0'))
+ {
+ temp = apr_psprintf(r->pool, ". "
+ "Print View\n", conf->adminfile, file);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+
+ if (conf->gridsitelink)
+ {
+ temp = apr_psprintf(r->pool,
+ ". Built with "
+ "GridSite %s\n", VERSION);
+ out = apr_pstrcat(r->pool, out, temp, NULL);
+ }
+
+ out = apr_pstrcat(r->pool, out, "\n\n", NULL);
+
+ return out;
+}
+
+void delegation_header(request_rec *r, mod_gridsite_dir_cfg *conf)
+{
+ apr_table_add(r->headers_out,
+ apr_pstrdup(r->pool, "Proxy-Delegation-Service"),
+ apr_psprintf(r->pool,"https://%s%s", r->hostname, conf->delegationuri));
+ return;
+
+}
+
+int html_format(request_rec *r, mod_gridsite_dir_cfg *conf)
+/*
+ try to do GridSite formatting of .html files (NOT .shtml etc)
+*/
+{
+ int i, fd, errstatus;
+ char *buf, *p, *file, *s, *head_formatted, *header_formatted,
+ *body_formatted, *admin_formatted, *footer_formatted;
+ size_t length;
+ struct stat statbuf;
+ apr_file_t *fp;
+
+ if (r->finfo.filetype == APR_NOFILE) return HTTP_NOT_FOUND;
+
+ if (apr_file_open(&fp, r->filename, APR_READ, 0, r->pool) != 0)
+ return HTTP_INTERNAL_SERVER_ERROR;
+
+
+ /* Put in Delegation service header if required */
+ if (conf->delegationuri) delegation_header(r, conf);
+
+ file = rindex(r->uri, '/');
+ if (file != NULL) ++file; /* file points to name without path */
+
+ buf = apr_palloc(r->pool, (size_t)(r->finfo.size + 1));
+ length = r->finfo.size;
+ apr_file_read(fp, buf, &length);
+ buf[r->finfo.size] = '\0';
+ apr_file_close(fp);
+
+ /* **** try to find a header file in this or parent directories **** */
+
+ fd = -1;
+
+ if (conf->headfile[0] == '/') /* try absolute */
+ {
+ fd = open(conf->headfile, O_RDONLY);
+ }
+ else /* try relative */
+ {
+ /* first make a buffer big enough to hold path names we want to try */
+ s = apr_palloc(r->pool,
+ strlen(r->filename) + strlen(conf->headfile) + 1);
+ strcpy(s, r->filename);
+
+ for (;;)
+ {
+ p = rindex(s, '/');
+ if (p == NULL) break; /* failed to find one */
+ p[1] = '\0';
+ strcat(p, conf->headfile);
+
+ fd = open(s, O_RDONLY);
+ if (fd != -1) break; /* found one */
+
+ *p = '\0';
+ }
+ }
+
+ if (fd == -1) /* not found, so set up not to output one */
+ {
+ head_formatted = apr_pstrdup(r->pool, "");
+ header_formatted = apr_pstrdup(r->pool, "");
+ body_formatted = buf;
+ }
+ else /* found a header file, so set up head and body to surround it */
+ {
+ fstat(fd, &statbuf);
+ header_formatted = apr_palloc(r->pool, statbuf.st_size + 1);
+ read(fd, header_formatted, statbuf.st_size);
+ header_formatted[statbuf.st_size] = '\0';
+ close(fd);
+
+ p = strstr(buf, "pool, "");
+ body_formatted = buf;
+ }
+ else
+ {
+ *p = '\0';
+ head_formatted = buf;
+ ++p;
+
+ while ((*p != '>') && (*p != '\0')) ++p;
+
+ if (*p == '\0')
+ {
+ body_formatted = p;
+ }
+ else
+ {
+ *p = '\0';
+ ++p;
+ body_formatted = p;
+ }
+ }
+ }
+
+ /* **** remove closing