my_ssl_server.c 67 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236
  1. /*
  2. * ssl_server.c
  3. *
  4. * Created on: 08.11.2017
  5. * Author: balbekova
  6. */
  7. #ifdef SSL_SERVER_ENABLE
  8. #include "lwip/opt.h"
  9. #include "lwip/arch.h"
  10. #include "lwip/api.h"
  11. #include "lwip/tcp.h"
  12. #include "my_ssl_server.h"
  13. #include "web_params_api.h"
  14. #include "parameters.h"
  15. #include "urlcode.h"
  16. #include "bt6703_fs/fsdata.c"
  17. #include "settings_api.h"
  18. #include "netconf.h"
  19. #include "common_config.h"
  20. #include "testing.h"
  21. #include "rtc.h"
  22. #include "rng.h"
  23. #include "megatec.h"
  24. #include "log.h"
  25. #include "hal.h"
  26. #include "radius_user.h"
  27. #include "sntp_api.h"
  28. #ifdef PRINTF_STDLIB
  29. #include <stdio.h>
  30. #endif
  31. #ifdef PRINTF_CUSTOM
  32. #include "tinystdio.h"
  33. #endif
  34. #include <string.h>
  35. #include <stdlib.h>
  36. #include "FreeRTOS.h"
  37. #include "task.h"
  38. #include "fr_timers.h"
  39. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err);
  40. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err);
  41. static int fs_open(char *name, struct fs_file *file);
  42. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len);
  43. static void send_data(struct tcp_pcb *pcb, struct http_state *hs);
  44. #ifdef HTTP_AUTH_ENABLE
  45. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len);
  46. static void HTTP_SetUserCookie(char *str, uint8_t user_id);
  47. static void HTTP_UpdateUserLoginTime(uint8_t user_id);
  48. static void HTTP_ForceUserLogout(uint8_t user_id);
  49. void LogoutTimerCallback(TimerHandle_t pxTimer);
  50. void LoginTimerCallback(TimerHandle_t pxTimer);
  51. static void getAuthenticatedState(void);
  52. #endif
  53. static uint32_t Parse_Content_Length(char *data, uint32_t len);
  54. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len);
  55. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value);
  56. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen);
  57. char sendBuf[SEND_BUF_MAX_LEN];
  58. uint16_t sendBufLoadLen = 0;
  59. uint16_t printLen = 0;
  60. char receiveBuf[RECIVE_BUF_MAX_LEN];
  61. uint16_t receivedBufLen = 0;
  62. #ifdef HTTP_AUTH_ENABLE
  63. #define MAX_POST_REQ_LEN 256
  64. char post_req_data[MAX_POST_REQ_LEN];
  65. uint32_t post_data_count = 0;
  66. uint32_t log_post_reqn;
  67. /* Logout timeout, 30 minutes */
  68. #define WEB_LOGOUT_TIME configTICK_RATE_HZ*60*30
  69. /* Max user active sessions count */
  70. #define WEB_USER_MAX_SESSION_COUNT 5
  71. struct {
  72. //auth_session_t session[WEB_USER_MAX_SESSION_COUNT];
  73. char cookie[MAX_WEB_COOKIE_LEN];
  74. TimerHandle_t LogoutTimer;
  75. } users[MAX_WEB_USERS];
  76. TimerHandle_t RepeatLoginTimer;
  77. /* Repeat Login timeout, 1 minutes */
  78. #define REPEAT_LOGIN_TIME configTICK_RATE_HZ*60*1
  79. uint8_t cnt_err_psw = 0;
  80. bool Authenticated = false;
  81. uint8_t user_id; // Id of currently logged-in user
  82. /* Level of currently logged-in user */
  83. uint8_t seclevel = 0xFF;
  84. #endif
  85. /* Max HTTP file name length including "/" */
  86. #define MAX_FILENAME_LEN 32
  87. /* Max HTTP Etag field length */
  88. #define MAX_ETAG_LEN 48
  89. static const char If_None_Match[] = "If-None-Match: ";
  90. static const char Etag[] = "ETag: ";
  91. static volatile uint32_t size = 0;
  92. static uint32_t TotalReceived = 0;
  93. static volatile uint32_t TotalData = 0;
  94. static uint32_t ContentLengthOffset = 0;
  95. static const char Content_Length[17] =
  96. /* Content Length */
  97. {0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x3a, 0x20, };
  98. const char HTTP_304_NOT_MODIFIED[] = "HTTP/1.1 304 Not Modified\r\n\r\n";
  99. const char HTTP_403_NOT_WHITE_LIST[] = "HTTP/1.1 403 Forbidden\r\n\r\n";
  100. const char HTTP_401_NO_AUTH[] = "HTTP/1.1 401 No authorization\r\n\r\n";
  101. const char HTTP_500_SERVER_ERROR[] = "HTTP/1.1 500 Internal Server Error\r\n\r\n";
  102. const char HTTP_200_OK[] = "HTTP/1.1 200 OK\r\n\r\n";
  103. /* utf-8 marker to support MS Excel */
  104. const char UTF8_BOM[] = {0xEF, 0xBB, 0xBF, 0x00};
  105. unsigned long log_ptr = 0;
  106. unsigned long log_size = 0;
  107. bool fLogTransInprog = false;
  108. static bool fl_raddius_net_err = false;
  109. /**
  110. * @brief Общая структура настроек
  111. */
  112. extern SETTINGS_t sSettings;
  113. struct fs_file file = {0, 0};
  114. typedef struct {
  115. char client_req[30];
  116. uint8_t len;
  117. REQ_TYPE_SEND_t req_type_send;
  118. ACCESS_TYPE_t accsess;
  119. char *(*handler)(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut);
  120. } web_func_handler_t;
  121. web_func_handler_t process_web_funcs[] = {
  122. #ifdef HTTP_AUTH_ENABLE
  123. { "POST /login.cgi", 15, COMMON_ANSWER, ALL_ACCESS, HTTP_LoginPage },
  124. { "GET /logout.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_LogoutPage },
  125. { "GET /changepwd.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ChangeUserPwd },
  126. #endif
  127. { "GET /getJson.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetParamsPage },
  128. { "GET /settings.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSettingsPage },
  129. { "POST /settings.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_SetSettingsPage },
  130. { "GET /getcert.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSert},
  131. { "POST /srv_crt_upload.cgi", 24, COMMON_ANSWER, TIME_ACCESS, HTTP_Upload_Sert},
  132. { "GET /info.cgi", 13, COMMON_ANSWER, TIME_ACCESS, HTTP_GetInfo },
  133. { "POST /info.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_SetInfoPage },
  134. { "GET /history.cgi", 16, HISTORY_ANSWER, TIME_ACCESS, HTTP_HistoryPage },
  135. { "GET /ups_history.cgi", 19, UPS_HISTORY_ANSWER, TIME_ACCESS, HTTP_UpsHistoryPage },
  136. { "GET /reset.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_Reset },
  137. { "GET /bat_test.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSTest },
  138. { "GET /ups_power.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSshutdown },
  139. { "GET /reboot.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_Reboot },
  140. { "GET /confirm.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_Confirm },
  141. { "GET /fw_update.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ConfirmBootPwd },
  142. { "GET", 3, COMMON_ANSWER, ALL_ACCESS, HTTP_GetRequest },
  143. { "", 0, COMMON_ANSWER, ALL_ACCESS, HTTP_NoFound },
  144. { "", 0, 0, 0, NULL }
  145. };
  146. /**
  147. * @brief closes tcp connection
  148. * @param pcb: pointer to a tcp_pcb struct
  149. * @param hs: pointer to a http_state struct
  150. * @retval
  151. */
  152. static void close_conn(struct tcp_pcb *pcb, struct http_state *hs)
  153. {
  154. tcp_arg(pcb, NULL);
  155. tcp_sent(pcb, NULL);
  156. tcp_recv(pcb, NULL);
  157. mem_free(hs);
  158. err_t err = tcp_close(pcb);
  159. DBG printf("%p close = %d (pcb: %d, pbuf_pool: %d)\r\n", pcb, err,
  160. lwip_stats.memp[MEMP_TCP_PCB]->used,
  161. lwip_stats.memp[MEMP_PBUF_POOL]->used);
  162. }
  163. /**
  164. * @brief callback function for handling TCP HTTP traffic
  165. * @param arg: pointer to an argument structure to be passed to callback function
  166. * @param pcb: pointer to a tcp_pcb structure
  167. * @param p: pointer to a packet buffer
  168. * @param err: LwIP error code
  169. * @retval err
  170. */
  171. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err)
  172. {
  173. char *data;
  174. struct http_state *hs;
  175. char buf[150];
  176. hs = arg;
  177. if (err == ERR_OK && p != NULL) {
  178. tcp_recved(pcb, p->tot_len);
  179. if (hs->file == NULL) {
  180. data = p->payload;
  181. receivedBufLen = p->tot_len;
  182. memcpy(receiveBuf, p->payload, receivedBufLen);
  183. // На производстве
  184. if (strncmp(data, "GET /setProdate.cgi", 19) == 0 && strncmp(sSettings.sFlags.testState, "T2OK", 4)) {
  185. HTTP_Prodate(receiveBuf, sendBuf, receivedBufLen, &sendBufLoadLen);
  186. hs->file = sendBuf;
  187. hs->left = sendBufLoadLen;
  188. send_data(pcb, hs);
  189. tcp_sent(pcb, http_sent);
  190. } else {
  191. strcpy(sendBuf, HTTP_200_OK);
  192. memset(buf, 0, sizeof(buf));
  193. // strcat(sendBuf,"<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://192.168.14.35\"/></head></html>\r\n\r\n");
  194. if (sSettings.sFlags.netsettingsChanged == true) {
  195. sprintf(buf,
  196. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  197. sSettings.sWebTempParams.ip);
  198. } else {
  199. sprintf(buf,
  200. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  201. sSettings.sWebParams.ip);
  202. }
  203. strcat(sendBuf, buf);
  204. // strcat(sendBuf,"1");
  205. sendBufLoadLen = strlen(sendBuf);
  206. hs->file = sendBuf;
  207. hs->left = sendBufLoadLen;
  208. send_data(pcb, hs);
  209. tcp_sent(pcb, http_sent);
  210. }
  211. }
  212. pbuf_free(p);
  213. close_conn(pcb, hs);
  214. }
  215. if (err == ERR_OK && p == NULL) {
  216. close_conn(pcb, hs);
  217. }
  218. return ERR_OK;
  219. }
  220. /**
  221. * @brief callback function for handling connection errors
  222. * @param arg: pointer to an argument to be passed to callback function
  223. * @param err: LwIP error code
  224. * @retval none
  225. */
  226. static void conn_err(void *arg, err_t err)
  227. {
  228. struct http_state *hs;
  229. (void)err;
  230. hs = arg;
  231. mem_free(hs);
  232. }
  233. /**
  234. * @brief callback function called after a successfull TCP data packet transmission
  235. * @param arg: pointer to an argument to be passed to callback function
  236. * @param pcb: pointer on tcp_pcb structure
  237. * @param len
  238. * @retval err : LwIP error code
  239. */
  240. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len)
  241. {
  242. struct http_state *hs;
  243. (void)len;
  244. hs = arg;
  245. if (hs->left > 0) {
  246. send_data(pcb, hs);
  247. } else {
  248. close_conn(pcb, hs);
  249. }
  250. return ERR_OK;
  251. }
  252. /**
  253. * @brief sends data found in member "file" of a http_state struct
  254. * @param pcb: pointer to a tcp_pcb struct
  255. * @param hs: pointer to a http_state struct
  256. * @retval none
  257. */
  258. static void send_data(struct tcp_pcb *pcb, struct http_state *hs)
  259. {
  260. err_t err;
  261. u16_t len;
  262. /* We cannot send more data than space available in the send
  263. buffer */
  264. if (tcp_sndbuf(pcb) < hs->left) {
  265. len = tcp_sndbuf(pcb);
  266. } else {
  267. len = hs->left;
  268. }
  269. err = tcp_write(pcb, hs->file, len, 0);
  270. if (err == ERR_OK) {
  271. hs->file += len;
  272. hs->left -= len;
  273. }
  274. }
  275. /**
  276. * @brief tcp poll callback function
  277. * @param arg: pointer to an argument to be passed to callback function
  278. * @param pcb: pointer on tcp_pcb structure
  279. * @retval err_t
  280. */
  281. static err_t http_poll(void *arg, struct tcp_pcb *pcb)
  282. {
  283. if (arg == NULL) {
  284. tcp_close(pcb);
  285. } else {
  286. send_data(pcb, (struct http_state *)arg);
  287. }
  288. return ERR_OK;
  289. }
  290. /**
  291. * @brief callback function on TCP connection setup ( on port 80)
  292. * @param arg: pointer to an argument structure to be passed to callback function
  293. * @param pcb: pointer to a tcp_pcb structure
  294. * &param err: Lwip stack error code
  295. * @retval err
  296. */
  297. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err)
  298. {
  299. struct http_state *hs;
  300. /* Allocate memory for the structure that holds the state of the connection */
  301. hs = mem_malloc(sizeof(struct http_state));
  302. if (hs == NULL) {
  303. return ERR_MEM;
  304. }
  305. /* Initialize the structure. */
  306. hs->file = NULL;
  307. hs->left = 0;
  308. /* Tell TCP that this is the structure we wish to be passed for our
  309. callbacks. */
  310. tcp_arg(pcb, hs);
  311. /* Tell TCP that we wish to be informed of incoming data by a call
  312. to the http_recv() function. */
  313. tcp_recv(pcb, http_recv);
  314. tcp_err(pcb, conn_err);
  315. tcp_poll(pcb, http_poll, 10);
  316. return ERR_OK;
  317. }
  318. /**
  319. * @brief Opens a file defined in fsdata.c ROM filesystem
  320. * @param name : pointer to a file name
  321. * @param file : pointer to a fs_file structure
  322. * @retval 1 if success, 0 if fail
  323. */
  324. static int fs_open(char *name, struct fs_file *file)
  325. {
  326. struct fsdata_file_noconst *f;
  327. for (f = (struct fsdata_file_noconst *)FS_ROOT; f != NULL; f = (struct fsdata_file_noconst *)f->next) {
  328. if (!strcmp(name, f->name)) {
  329. file->data = f->data;
  330. file->len = f->len;
  331. return 1;
  332. }
  333. }
  334. return 0;
  335. }
  336. /**
  337. * @brief Initialize the HTTP server (start its thread)
  338. * @param none
  339. * @retval None
  340. */
  341. void HTTP_Init()
  342. {
  343. struct tcp_pcb *pcb;
  344. pcb = tcp_new();
  345. tcp_bind(pcb, IP_ADDR_ANY, 80);
  346. pcb = tcp_listen(pcb);
  347. tcp_accept(pcb, http_accept);
  348. }
  349. /**
  350. * @brief Extract the Content_Length data from HTML data
  351. * @param data : pointer on receive packet buffer
  352. * @param len : buffer length
  353. * @retval size : Content_length in numeric format
  354. */
  355. static uint32_t Parse_Content_Length(char *data, uint32_t len)
  356. {
  357. uint32_t i = 0, size = 0, S = 1;
  358. int32_t j = 0;
  359. char sizestring[6], *ptr;
  360. ContentLengthOffset = 0;
  361. /* find Content-Length data in packet buffer */
  362. for (i = 0; i < len; i++) {
  363. if (strncmp ((char *)(data + i), Content_Length, 16) == 0) {
  364. ContentLengthOffset = i + 16;
  365. break;
  366. }
  367. }
  368. /* read Content-Length value */
  369. if (ContentLengthOffset) {
  370. i = 0;
  371. ptr = (char *)(data + ContentLengthOffset);
  372. while (*(ptr + i) != 0x0d) {
  373. sizestring[i] = *(ptr + i);
  374. i++;
  375. ContentLengthOffset++;
  376. }
  377. if (i > 0) {
  378. /* transform string data into numeric format */
  379. for (j = i - 1; j >= 0; j--) {
  380. size += (sizestring[j] - 0x30) * S;
  381. S = S * 10;
  382. }
  383. }
  384. }
  385. return size;
  386. }
  387. /**
  388. * @brief
  389. * @retval None
  390. */
  391. uint8_t GetCookieValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  392. {
  393. char *beginValue = 0;
  394. char *endValue = 0;
  395. char *endValueTemp = 0;
  396. int len = 0;
  397. char *strPtr = 0;
  398. strPtr = strstr(inStr, paramName);
  399. if (strPtr != 0) {
  400. beginValue = strpbrk(strPtr, "=");
  401. endValue = strpbrk(strPtr, ";");
  402. endValueTemp = strpbrk(strPtr, "\r");
  403. if (endValueTemp != 0 && endValueTemp < endValue) {
  404. endValue = endValueTemp;
  405. }
  406. if (endValue == 0) {
  407. endValue = strpbrk(strPtr, "\n");
  408. }
  409. len = endValue - beginValue - 1;
  410. strncpy(paramValue, beginValue + 1, len);
  411. *endValue = '0';
  412. *beginValue = '0';
  413. *paramLen = len;
  414. return 1;
  415. } else {
  416. *paramLen = 0;
  417. return 0;
  418. }
  419. }
  420. char *Parce_Boundary(const char *data, uint32_t len, char *dst, uint8_t dstlen)
  421. {
  422. char *ptr = NULL;
  423. char *boundary = NULL;
  424. uint8_t i = 0;
  425. for (uint32_t j = 0; j < len; j++) {
  426. if (strncmp ((char *)(data + j), "boundary=", 9) == 0) {
  427. boundary = (char *)data + j + 9;
  428. break;
  429. }
  430. }
  431. if (!boundary) { return NULL; }
  432. *dst++ = '-';
  433. *dst++ = '-';
  434. ptr = boundary;
  435. while ((*ptr != 0x0d) && (i < dstlen - 4)) {
  436. *dst++ = *ptr++;
  437. i++;
  438. }
  439. //*dst++ = '-';
  440. //*dst++ = '-';
  441. *dst = '\0';
  442. if (i > 0) {
  443. return boundary;
  444. } else {
  445. return NULL;
  446. }
  447. }
  448. void ClearParamString(char *inBuf)
  449. {
  450. uint16_t len;
  451. char *str;
  452. str = strstr(inBuf, "HTTP");
  453. if (str != 0) {
  454. len = str - inBuf;
  455. memset(str, 0, RECIVE_BUF_MAX_LEN - len - 1);
  456. }
  457. }
  458. /**
  459. * @brief
  460. * @retval None
  461. */
  462. uint8_t GetParamValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  463. {
  464. char *beginValue = 0;
  465. char *endValue = 0;
  466. int len = 0;
  467. char *strPtr = 0;
  468. char paramName_tmp[50];
  469. memset(paramName_tmp, 0, sizeof(paramName_tmp));
  470. paramName_tmp[0] = '&';
  471. strncat(paramName_tmp, paramName, strlen(paramName));
  472. strcat(paramName_tmp, "=");
  473. strPtr = strstr(inStr, paramName_tmp);
  474. if (strPtr == 0) {
  475. paramName_tmp[0] = '0';
  476. strPtr = strstr(inStr, paramName_tmp);
  477. if (strPtr == 0) {
  478. paramName_tmp[0] = '\n';
  479. strPtr = strstr(inStr, paramName_tmp);
  480. }
  481. if (strPtr == 0) {
  482. paramName_tmp[0] = '?';
  483. strPtr = strstr(inStr, paramName_tmp);
  484. }
  485. }
  486. if (strPtr != 0) {
  487. beginValue = strpbrk(strPtr, "=");
  488. endValue = strpbrk(&strPtr[1], "&");
  489. if (endValue == 0) {
  490. endValue = strpbrk(strPtr, " ");
  491. }
  492. len = endValue - beginValue - 1;
  493. strncpy(paramValue, beginValue + 1, len);
  494. *endValue = '0';
  495. *beginValue = '0';
  496. *paramLen = len;
  497. return 1;
  498. } else {
  499. *paramLen = 0;
  500. return 0;
  501. }
  502. }
  503. // -----------------------------------------------------------------------------
  504. #include "mbedtls/platform.h"
  505. #include "mbedtls/entropy.h"
  506. #include "mbedtls/ctr_drbg.h"
  507. #include "mbedtls/certs.h"
  508. #include "mbedtls/x509.h"
  509. #include "mbedtls/net_sockets.h"
  510. #include "mbedtls/error.h"
  511. #include "mbedtls/debug.h"
  512. #include "mbedtls/memory_buffer_alloc.h"
  513. #include "mbedtls_time.h"
  514. #include "mbedtls_debug.h"
  515. #include "FreeRTOS.h"
  516. #include "task.h"
  517. #include "cert_req.h"
  518. #include <stdlib.h>
  519. #include <string.h>
  520. extern unsigned char req_cert[];
  521. static mbedtls_net_context listen_fd, client_fd;
  522. static const uint8_t *pers = (uint8_t *)("ssl_server");
  523. mbedtls_entropy_context entropy;
  524. mbedtls_ctr_drbg_context ctr_drbg;
  525. mbedtls_ssl_context ssl;
  526. mbedtls_ssl_config conf;
  527. mbedtls_x509_crt srvcert;
  528. mbedtls_pk_context pkey;
  529. //
  530. void ssl_server(void *pvParameters)
  531. {
  532. SSL_SERVER_STATE ssl_state = SSL_ACCEPT;
  533. char *sendPtr;
  534. int ret;
  535. mbedtls_net_init( &listen_fd );
  536. mbedtls_net_init( &client_fd );
  537. mbedtls_ssl_init( &ssl );
  538. mbedtls_ssl_config_init( &conf );
  539. mbedtls_x509_crt_init( &srvcert );
  540. mbedtls_pk_init( &pkey );
  541. mbedtls_entropy_init( &entropy );
  542. mbedtls_ctr_drbg_init( &ctr_drbg );
  543. mbedtls_platform_set_time(&MBEDTLS_GetTime);
  544. #if defined(MBEDTLS_DEBUG_C)
  545. mbedtls_debug_set_threshold(DEBUG_LEVEL);
  546. mbedtls_ssl_conf_dbg(&conf, MBEDTLS_Debug, NULL);
  547. #endif
  548. // 1. Load the certificates and private RSA key
  549. mbedtls_printf( "\r\n . Loading the server cert. and key..." );
  550. ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) sSettings.our_srv_crt,
  551. (strlen(sSettings.our_srv_crt) + 1) );//mbedtls_test_srv_crtmbedtls_test_srv_crt_len
  552. if ( ret != 0 ) {
  553. mbedtls_printf( " failed\r\n ! mbedtls_x509_crt_parse returned %d\r\n", ret );
  554. ssl_state = SSL_CRITICAL_ERROR;
  555. }
  556. ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_srv_key, mbedtls_test_srv_key_len, NULL, 0 );
  557. if ( ret != 0 ) {
  558. mbedtls_printf( " failed\r\n ! mbedtls_pk_parse_key returned %d\r\n", ret );
  559. ssl_state = SSL_CRITICAL_ERROR;
  560. }
  561. mbedtls_printf( " ok\r\n" );
  562. // 2. Setup the listening TCP socket
  563. mbedtls_printf( " . Bind on https://localhost:443/ ..." );
  564. if ((ret = mbedtls_net_bind(&listen_fd, NULL, "443", MBEDTLS_NET_PROTO_TCP )) != 0) {
  565. mbedtls_printf( " failed\n ! mbedtls_net_bind returned %d\r\n", ret );
  566. ssl_state = SSL_CRITICAL_ERROR;
  567. }
  568. mbedtls_printf( " ok\r\n" );
  569. // 3. Seed the RNG
  570. mbedtls_printf( " . Seeding the random number generator..." );
  571. if ((ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, (const unsigned char *) pers,
  572. strlen( (char *)pers))) != 0) {
  573. mbedtls_printf( " failed\r\n ! mbedtls_ctr_drbg_seed returned %d\r\n", ret );
  574. ssl_state = SSL_CRITICAL_ERROR;
  575. }
  576. mbedtls_printf( " ok\r\n" );
  577. // 4. Setup stuff
  578. mbedtls_printf( " . Setting up the SSL data...." );
  579. if ( ( ret = mbedtls_ssl_config_defaults(&conf, MBEDTLS_SSL_IS_SERVER, MBEDTLS_SSL_TRANSPORT_STREAM,
  580. MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
  581. mbedtls_printf( " failed\r\n ! mbedtls_ssl_config_defaults returned %d\r\n", ret );
  582. ssl_state = SSL_CRITICAL_ERROR;
  583. }
  584. mbedtls_ssl_conf_rng(&conf, mbedtls_ctr_drbg_random, &ctr_drbg);
  585. mbedtls_ssl_conf_ca_chain(&conf, srvcert.next, NULL);
  586. if ( ( ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, &pkey ) ) != 0) {
  587. mbedtls_printf( " failed\r\n ! mbedtls_ssl_conf_own_cert returned %d\r\n", ret );
  588. ssl_state = SSL_CRITICAL_ERROR;
  589. }
  590. if ( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 ) {
  591. mbedtls_printf( " failed\r\n ! mbedtls_ssl_setup returned %d\r\n", ret );
  592. ssl_state = SSL_CRITICAL_ERROR;
  593. }
  594. mbedtls_printf( " ok\r\n" );
  595. for (;;) {
  596. switch (ssl_state) {
  597. case SSL_ACCEPT :
  598. mbedtls_ssl_session_reset( &ssl );
  599. mbedtls_printf( " . Waiting for a remote connection ...\r\n" );
  600. if ((ret = mbedtls_net_accept(&listen_fd, &client_fd, NULL, 0, NULL)) != 0) {
  601. mbedtls_printf( " failed\r\n ! mbedtls_net_accept returned %d\r\n", ret );
  602. ssl_state = SSL_ERROR;
  603. } else {
  604. mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv, NULL );//mbedtls_net_recv
  605. mbedtls_printf( " ok\r\n" );
  606. ssl_state = SSL_HANDSHAKE;
  607. }
  608. break;
  609. case SSL_HANDSHAKE :
  610. mbedtls_printf( " . Performing the SSL/TLS handshake..." );
  611. while ( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) {
  612. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  613. mbedtls_printf( " failed\r\n ! mbedtls_ssl_handshake returned %d\r\n", ret );
  614. ssl_state = SSL_ERROR;
  615. break;
  616. }
  617. }
  618. if (ret != 0) {
  619. ssl_state = SSL_ERROR;
  620. } else {
  621. mbedtls_printf( " ok\r\n" );
  622. ssl_state = SSL_READ;
  623. }
  624. break;
  625. case SSL_READ :
  626. //printf("SSL_READ\r\n");
  627. if (SSL_ReadRoutine(&ssl, (unsigned char *)receiveBuf) <= 0) {
  628. ssl_state = SSL_ERROR;
  629. } else {
  630. ssl_state = SSL_PROCESSING;
  631. }
  632. break;
  633. case SSL_PROCESSING :
  634. //printf("SSL_PROCESSING\r\n");
  635. sendPtr = SSL_ProcessingRoutine(&sendBufLoadLen);
  636. if (sendPtr) {
  637. ssl_state = SSL_WRITE;
  638. } else {
  639. ssl_state = SSL_ACCEPT;
  640. }
  641. break;
  642. case SSL_WRITE :
  643. //printf("SSL_WRITE\r\n");
  644. SSL_WriteRoutine(&ssl, sendPtr, sendBufLoadLen);
  645. ssl_state = SSL_CLOSE;
  646. break;
  647. case SSL_CLOSE :
  648. //printf("SSL_CLOSE\r\n");
  649. mbedtls_ssl_close_notify(&ssl);
  650. mbedtls_net_free(&client_fd);
  651. //mbedtls_ssl_free( &ssl );
  652. ssl_state = SSL_ACCEPT;
  653. break;
  654. case SSL_ERROR :
  655. //printf("SSL_ERROR\r\n");
  656. //mbedtls_net_free(&client_fd);
  657. //mbedtls_ssl_free( &ssl );
  658. mbedtls_ssl_close_notify(&ssl);
  659. mbedtls_net_free(&client_fd);
  660. ssl_state = SSL_ACCEPT;
  661. break;
  662. case SSL_CRITICAL_ERROR:
  663. //printf("SSL_CRITICAL_ERROR\r\n");
  664. mbedtls_x509_crt_free( &srvcert );
  665. mbedtls_pk_free( &pkey );
  666. mbedtls_ssl_free( &ssl );
  667. mbedtls_ssl_config_free( &conf );
  668. mbedtls_ctr_drbg_free( &ctr_drbg );
  669. mbedtls_entropy_free( &entropy );
  670. vTaskDelete(NULL);
  671. break;
  672. }
  673. }
  674. }
  675. /**
  676. * @brief Initialize the HTTPS server (start its thread)
  677. */
  678. void HTTPS_Init()
  679. {
  680. char buf[MAX_WEB_COOKIE_LEN];
  681. uint8_t user_id;
  682. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  683. // Flush user cookie by random value
  684. sprintf(buf, "%X", (unsigned int)GetRandomNumber());
  685. HTTP_SetUserCookie(buf, user_id);
  686. // Create user logout timers
  687. users[user_id].LogoutTimer = xTimerCreate("LogoutTmr", WEB_LOGOUT_TIME, pdFALSE, ( void * ) user_id,
  688. LogoutTimerCallback);
  689. }
  690. RepeatLoginTimer = xTimerCreate("LoginTmr", REPEAT_LOGIN_TIME, pdFALSE, ( void * ) 0, LoginTimerCallback);
  691. }
  692. //
  693. int SSL_ReadRoutine(mbedtls_ssl_context *ssl, unsigned char *recvBuf)
  694. {
  695. int ret;
  696. mbedtls_printf( " < Read from client:" );
  697. do {
  698. receivedBufLen = RECIVE_BUF_MAX_LEN - 1;
  699. memset(recvBuf, 0, RECIVE_BUF_MAX_LEN);
  700. ret = mbedtls_ssl_read(ssl, receiveBuf, receivedBufLen);
  701. if ( ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE ) {
  702. continue;
  703. }
  704. if ( ret <= 0 ) {
  705. switch ( ret ) {
  706. case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
  707. mbedtls_printf( " connection was closed gracefully\r\n" );
  708. break;
  709. case MBEDTLS_ERR_NET_CONN_RESET:
  710. mbedtls_printf( " connection was reset by peer\r\n" );
  711. break;
  712. default:
  713. mbedtls_printf( "mbedtls_ssl_read returned -0x%x\r\n", -ret );
  714. break;
  715. }
  716. return ret;
  717. }
  718. receivedBufLen = ret;
  719. } while (0);
  720. }
  721. //
  722. SSL_SERVER_STATE SSL_WriteRoutine(mbedtls_ssl_context *ssl, char *data, int datalen)
  723. {
  724. return SSL_SendFrames(ssl, data, datalen);
  725. }
  726. //
  727. char *SSL_ProcessingRoutine(uint16_t *sendLen)
  728. {
  729. web_func_handler_t *h;
  730. getAuthenticatedState();
  731. if ( Authenticated == false && sSettings.sRADIUS.Auth_enable == false) {
  732. HTTP_LOGIN(sendBuf, sendLen);
  733. return sendBuf;
  734. }
  735. for (h = &process_web_funcs[0]; h->handler; h++) {
  736. if (strncmp(receiveBuf, h->client_req, h->len) == 0) {
  737. #ifdef HTTP_AUTH_ENABLE
  738. if (h->accsess == TIME_ACCESS && !Authenticated) {
  739. strcpy(sendBuf, HTTP_401_NO_AUTH);
  740. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false))
  741. strcat(sendBuf,
  742. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/rslogin.html\"/></head></html>\r\n");
  743. else
  744. strcat(sendBuf,
  745. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/login.html\"/></head></html>\r\n");
  746. *sendLen = strlen(sendBuf);
  747. return sendBuf;
  748. }
  749. #endif
  750. return h->handler(0, receiveBuf, sendBuf, receivedBufLen, sendLen);
  751. }
  752. }
  753. }
  754. #define FRAME_SIZE (1000)
  755. SSL_SERVER_STATE SSL_SendFrames(mbedtls_ssl_context *ssl, char *data, int datalen)
  756. {
  757. SSL_SERVER_STATE ret;
  758. int retClose;
  759. int index = 0;
  760. int k = 0;
  761. int lastframe, nbrframes;
  762. nbrframes = datalen / FRAME_SIZE;
  763. while (nbrframes > 0) {
  764. index = k * FRAME_SIZE;
  765. if (SSL_Write(ssl, (data + index), FRAME_SIZE ) == SSL_WRITE_ERROR) {
  766. return SSL_WRITE_ERROR;
  767. }
  768. nbrframes--;
  769. k++;
  770. }
  771. index = k * FRAME_SIZE;
  772. lastframe = datalen % FRAME_SIZE ;
  773. if (SSL_Write(ssl, (data + index), lastframe ) == SSL_WRITE_ERROR) {
  774. return SSL_WRITE_ERROR;
  775. }
  776. return SSL_WRITE_OK;
  777. }
  778. SSL_SERVER_STATE SSL_Write(mbedtls_ssl_context *ssl, char *data, int datalen)
  779. {
  780. int ret;
  781. mbedtls_printf( " > Write to client:" );
  782. while ( ( ret = mbedtls_ssl_write(ssl, data, datalen) ) <= 0 ) {
  783. if ( ret == MBEDTLS_ERR_NET_CONN_RESET ) {
  784. mbedtls_printf( " failed\r\n ! peer closed the connection\r\n" );
  785. return SSL_WRITE_ERROR;
  786. }
  787. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  788. mbedtls_printf( " failed\r\n ! mbedtls_ssl_write returned %d\r\n", ret );
  789. return SSL_WRITE_ERROR;
  790. }
  791. }
  792. mbedtls_printf( " %d bytes written\r\n", ret);
  793. return SSL_WRITE_OK;
  794. }
  795. char *HTTP_HistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  796. {
  797. uint8_t valueLen = 0;
  798. char value[20];
  799. (void)reqNum;
  800. (void)lenBufIn;
  801. (void)reqNum;
  802. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  803. ClearParamString(bufIn);
  804. memset(value, 0, 20);
  805. GetParamValue(bufIn, "page", value, &valueLen);
  806. if (strcmp(value, "all") == 0) {
  807. if (!LOG_IsInit()) {
  808. return 0;
  809. }
  810. if (fLogTransInprog == false) {
  811. // Send log as raw data
  812. log_ptr = 0;
  813. log_size = History_GetTotalSTRCount() * STRING_SIZE_HISTORY + sizeof(UTF8_BOM) - 1;
  814. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  815. *lenBufOut = strlen(bufOut);
  816. // Set file transfer in progress flag
  817. fLogTransInprog = true;
  818. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  819. return 0;
  820. }
  821. HTTP_SendHistory();
  822. return 0;
  823. } else {
  824. // We send nothing if file transfer already in progress
  825. return 0;
  826. }
  827. } else {
  828. if (!LOG_IsInit()) {
  829. return 0;
  830. } else {
  831. HTTP_GetHistoryPage(bufOut, atoi(value));
  832. *lenBufOut = strlen(bufOut);
  833. return bufOut;
  834. }
  835. }
  836. }
  837. char *HTTP_UpsHistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  838. {
  839. uint8_t valueLen = 0;
  840. char value[20];
  841. (void)lenBufIn;
  842. (void)reqNum;
  843. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  844. ClearParamString(bufIn);
  845. memset(value, 0, 20);
  846. GetParamValue(bufIn, "page", value, &valueLen);
  847. if (strcmp(value, "all") == 0) {
  848. if (!LOG_IsInit()) {
  849. return 0;
  850. }
  851. if (fLogTransInprog == false) {
  852. // Send log as raw data
  853. log_ptr = 0;
  854. log_size = LOG_GetTotalSTRCount() * STRING_SIZE + sizeof(UTF8_BOM) - 1;
  855. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  856. *lenBufOut = strlen(bufOut);
  857. // Set file transfer in progress flag
  858. fLogTransInprog = true;
  859. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  860. return 0;
  861. }
  862. HTTP_SendLog();
  863. return 0;
  864. } else {
  865. // We send nothing if file transfer already in progress
  866. return 0;
  867. }
  868. } else {
  869. if (!LOG_IsInit()) {
  870. return 0;
  871. } else {
  872. HTTP_GetUpsHistoryPage(bufOut, atoi(value));
  873. *lenBufOut = strlen(bufOut);
  874. return bufOut;
  875. }
  876. }
  877. }
  878. /**
  879. * @brief Установка даты производства
  880. */
  881. // TODO Убрать заглушку!
  882. void HTTP_Prodate(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  883. {
  884. uint8_t valueLen = 0;
  885. char value[20];
  886. (void)lenBufIn;
  887. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  888. ClearParamString(bufIn);
  889. memset(value, 0, 20);
  890. GetParamValue(bufIn, "prodate", value, &valueLen);
  891. /*
  892. printf("Prodate: ");
  893. printf(value);
  894. printf("\r\n");
  895. */
  896. /* Устанавливаем дату производства */
  897. SETTINGS_SetProDate(value, valueLen);
  898. /* Пока отправляем true */
  899. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\n\r\nTrue");
  900. *lenBufOut = strlen(bufOut);
  901. TEST_SetServerFlag();
  902. }
  903. /**
  904. * @brief
  905. * @retval None
  906. */
  907. char *HTTP_SetSettingsPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  908. {
  909. char *DataOffset;
  910. (void)reqNum;
  911. if (seclevel == USER) {
  912. return 0;
  913. }
  914. DataOffset = 0;
  915. // POST Packet received
  916. TotalReceived = 0;
  917. TotalData = 0;
  918. memset(bufOut, 0, strlen(bufOut));
  919. bufOut[0] = '0';
  920. // parse packet for Content-length field
  921. size = Parse_Content_Length(bufIn, lenBufIn);
  922. DataOffset = strstr(bufIn, "managerIP");
  923. // case of MSIE8 : we do not receive data in the POST packet
  924. if (DataOffset == 0) {
  925. SSL_ReadRoutine(&ssl, bufIn);
  926. DataOffset = strstr(bufIn, "managerIP");
  927. }
  928. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  929. TotalData += TotalReceived;
  930. strncat(bufOut, DataOffset, TotalReceived);
  931. for (int i = TotalData; i < size; i ++) {
  932. SSL_ReadRoutine(&ssl, bufIn);
  933. strncat(sendBuf, bufIn, receivedBufLen);
  934. TotalData += receivedBufLen;
  935. }
  936. // check if last data packet
  937. if (TotalData == size) {
  938. DBG printf("State: Received %u bytes\r\n", (unsigned int)TotalData);
  939. // printf("receive %s \r\n", sendBuf);
  940. strncat(bufOut, " ", 1);
  941. HTTP_SetSettings(bufOut, strlen(sendBuf));
  942. memset(sendBuf, 0, size);
  943. strcpy(bufOut, HTTP_200_OK);
  944. strcat(bufOut,
  945. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/settings.html\"/></head></html>\r\n");
  946. *lenBufOut = strlen(bufOut);
  947. return bufOut;
  948. }
  949. return 0;
  950. }
  951. /**
  952. * @brief
  953. * @retval None
  954. */
  955. void HTTP_SetSettings(char *buf, uint16_t lenBuf)
  956. {
  957. uint8_t valueLen = 0;
  958. const uint8_t len = MAX_WEB_PARAM_LEN;
  959. char value[MAX_WEB_PARAM_LEN];
  960. (void)lenBuf;
  961. //printf(buf);
  962. //ClearParamString(buf);
  963. #define XJSON_SETTINGS_TAG(tag, get_param, set_param) JSON_SET_PARAM(tag, set_param, buf);
  964. WEB_SETTINGS_TAGS_TABLE
  965. #undef XJSON_SETTINGS_CREATE
  966. /* Если параметры WEB изменились выставляем флаг, сохраняем настройки и перезагружаемся */
  967. if (GetStateWebReinit() == true) {
  968. SetWebReinitFlag(true);
  969. HTTP_SaveSettings();
  970. /* Блокируем управление ключем на тау секунд*/
  971. //IO_KeyBlockOn();
  972. vTaskDelay(1010);
  973. Reboot(WEB_ACT);
  974. }
  975. HTTP_SaveSettings();
  976. }
  977. /**
  978. * @brief
  979. * @retval None
  980. */
  981. char *HTTP_GetSert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  982. {
  983. (void)bufIn;
  984. (void)lenBufIn;
  985. (void)reqNum;
  986. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  987. strcpy(bufOut, HTTP_200_OK);
  988. SSL_CreateReqCert();
  989. strncpy(bufOut, req_cert, strlen(req_cert));
  990. *lenBufOut = strlen(bufOut);
  991. return bufOut;
  992. }
  993. /**
  994. * @brief
  995. * @retval None
  996. */
  997. char *HTTP_Upload_Sert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  998. {
  999. char *DataOffset;
  1000. static char boundary[70];
  1001. static char *pbound = NULL;
  1002. char *ContentOffset = 0;
  1003. (void)reqNum;
  1004. DataOffset = 0;
  1005. TotalData = 0;
  1006. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1007. //printf("receive %s \r\n", receiveBuf);
  1008. // parse packet for Content-length field
  1009. size = Parse_Content_Length(bufIn, lenBufIn);
  1010. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1011. if (pbound != NULL) {
  1012. ContentOffset = strstr(bufIn, boundary);
  1013. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1014. if ( DataOffset != NULL ) {
  1015. DataOffset += 4;
  1016. }
  1017. } else {
  1018. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1019. bufIn[receivedBufLen] = '\0';
  1020. lenBufIn = receivedBufLen;
  1021. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1022. if (pbound != NULL) {
  1023. ContentOffset = strstr(bufIn, boundary);
  1024. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1025. if ( DataOffset != NULL ) {
  1026. DataOffset += 4;
  1027. }
  1028. }
  1029. }
  1030. // case of MSIE8 : we do not receive data in the POST packet
  1031. if (DataOffset == NULL) {
  1032. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1033. bufIn[receivedBufLen] = '\0';
  1034. lenBufIn = receivedBufLen;
  1035. //printf("receive2 %s \r\n", bufIn);
  1036. ContentOffset = strstr(bufIn, boundary);
  1037. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1038. if ( DataOffset != NULL ) {
  1039. DataOffset += 4;
  1040. }
  1041. }
  1042. TotalReceived = lenBufIn - (uint32_t)(ContentOffset - bufIn);
  1043. TotalData += TotalReceived;
  1044. strncat(bufOut, DataOffset, TotalReceived);
  1045. while (TotalData < size) {
  1046. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1047. bufIn[receivedBufLen] = '\0';
  1048. //printf("receive3 %s \r\n", receiveBuf);
  1049. strncat(bufOut, bufIn, lenBufIn);
  1050. TotalData += lenBufIn;
  1051. //printf("TotalData %d \r\n", TotalData);
  1052. /*printf("receivedBufLen %d \r\n", receivedBufLen);
  1053. printf("TotalData %d \r\n", TotalData);
  1054. printf("size %d \r\n", size);
  1055. printf("receive3 %s \r\n", (receiveBuf+receivedBufLen - 30));*/
  1056. }
  1057. //printf("TotalData %d \r\n", TotalData);
  1058. // check if last data packet
  1059. if (TotalData == size) {
  1060. // printf("receive %s \r\n", sendBuf);
  1061. if (strstr(bufOut, "BEGIN CERTIFICATE") != NULL) {
  1062. DataOffset = strstr(bufOut, "-----END CERTIFICATE");
  1063. uint32_t len_crt = (uint32_t)(DataOffset - bufOut) + 25;
  1064. memset(sSettings.our_srv_crt, 0, sizeof(sSettings.our_srv_crt));
  1065. memcpy(sSettings.our_srv_crt, bufOut, len_crt);
  1066. strcat(bufOut, "\r\n");
  1067. HTTP_SaveSettings();
  1068. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1069. strcpy(bufOut, HTTP_200_OK);
  1070. strcat(bufOut, "1");
  1071. } else {
  1072. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1073. strcpy(bufOut, HTTP_200_OK);
  1074. strcat(bufOut, "Некорректный сертефикат");
  1075. }
  1076. *lenBufOut = strlen(bufOut);
  1077. return bufOut;
  1078. }
  1079. return 0;
  1080. }
  1081. /**
  1082. * @brief
  1083. * @retval None
  1084. */
  1085. char *HTTP_SetInfoPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1086. {
  1087. char *DataOffset;
  1088. (void)reqNum;
  1089. if (seclevel == USER) {
  1090. return 0;
  1091. }
  1092. DataOffset = 0;
  1093. // POST Packet received{
  1094. TotalReceived = 0;
  1095. TotalData = 0;
  1096. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1097. bufOut[0] = '0';
  1098. // parse packet for Content-length field
  1099. size = Parse_Content_Length(bufIn, lenBufIn);
  1100. DataOffset = strstr(bufIn, "sysname");
  1101. // case of MSIE8 : we do not receive data in the POST packet
  1102. if (DataOffset == 0) {
  1103. SSL_ReadRoutine(&ssl, bufIn);
  1104. DataOffset = strstr(bufIn, "sysname");
  1105. }
  1106. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  1107. TotalData += TotalReceived;
  1108. strncat(bufOut, DataOffset, TotalReceived);
  1109. // check if last data packet
  1110. if (TotalData == size) {
  1111. strncat(bufOut, " ", 1);
  1112. HTTP_SetInfo(bufOut, strlen(bufOut));
  1113. memset(bufOut, 0, size);
  1114. strcpy(bufOut, HTTP_200_OK);
  1115. strcat(bufOut,
  1116. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/info.html\"/></head></html>\r\n\r\n");
  1117. *lenBufOut = strlen(bufOut);
  1118. return bufOut;
  1119. }
  1120. return 0;
  1121. }
  1122. /**
  1123. * @brief
  1124. * @retval None
  1125. */
  1126. void HTTP_SetInfo(char *buf, uint16_t lenBuf)
  1127. {
  1128. uint8_t valueLen = 0;
  1129. const uint8_t len = 110;
  1130. char value[330];
  1131. char str[110];
  1132. (void)lenBuf;
  1133. // ClearParamString(buf);
  1134. memset(value, 0, len);
  1135. /* Название устройства */
  1136. GetParamValue(buf, "sysname", value, &valueLen);
  1137. url_decode(str, sizeof(str), value);
  1138. SetNameDeviceStr(str);
  1139. memset(value, 0, len);
  1140. /* Владелец */
  1141. GetParamValue(buf, "owner", value, &valueLen);
  1142. url_decode(str, sizeof(str), value);
  1143. SetOwner(str);
  1144. memset(value, 0, len);
  1145. /* Владелец */
  1146. GetParamValue(buf, "sysLocation", value, &valueLen);
  1147. url_decode(str, sizeof(str), value);
  1148. SetLocation(str);
  1149. memset(value, 0, len);
  1150. /* Комментарий */
  1151. GetParamValue(buf, "comment", value, &valueLen);
  1152. url_decode(str, sizeof(str), value);
  1153. SetComment(str);
  1154. memset(value, 0, len);
  1155. HTTP_SaveSettings();
  1156. }
  1157. /**
  1158. * @brief Запуск/останов теста UPS
  1159. */
  1160. char *HTTP_UPSTest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1161. {
  1162. uint8_t valueLen = 0;
  1163. char tempValue[20];
  1164. char tempValue2[20];
  1165. int8_t res = 0;
  1166. char log_string[50];
  1167. (void)lenBufIn;
  1168. (void)reqNum;
  1169. memset(tempValue, 0, 20);
  1170. memset(tempValue2, 0, 20);
  1171. memset(log_string, 0, 50);
  1172. strcpy(bufOut, HTTP_200_OK);
  1173. GetParamValue(bufIn, "func", tempValue, &valueLen);
  1174. if (strcmp(tempValue, "stop") == 0) {
  1175. res = ups_metac_service_pdu(ups_cancel_test);
  1176. if (res == 1 || res == 0) {
  1177. strcat(bufOut, "Команда \"Останов теста\" принята ИБП!");
  1178. strcpy(log_string, name_login);
  1179. strcat(log_string, " (Останов)");
  1180. log_event_data(LOG_TEST_UPS, log_string);
  1181. }
  1182. if (res == -1) {
  1183. strcat(bufOut, "Команда \"Останов теста\" отклонена ИБП!");
  1184. }
  1185. } else if (strcmp(tempValue, "discharge") == 0) {
  1186. res = ups_metac_service_pdu(ups_test_low_bat);
  1187. set_act_source(WEB_ACT);
  1188. if (res == 1 || res == 0) {
  1189. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1190. }
  1191. if (res == -1) {
  1192. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1193. }
  1194. } else if (strncmp(tempValue, "time", 6) == 0) {
  1195. GetParamValue(bufIn, "time", tempValue2, &valueLen);
  1196. TimeParam = atoi(tempValue2);
  1197. res = ups_metac_service_pdu(ups_test_time);
  1198. if (res == 1 || res == 0) {
  1199. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1200. }
  1201. if (res == -1) {
  1202. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1203. }
  1204. }
  1205. *lenBufOut = strlen(bufOut);
  1206. return bufOut;
  1207. }
  1208. /**
  1209. * @brief Выклюение UPS
  1210. */
  1211. char *HTTP_UPSshutdown(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1212. {
  1213. uint8_t valueLen = 0;
  1214. char *valueLenEnd = 0;
  1215. char tempValue[50];
  1216. char tempValue2[50];
  1217. int8_t res = 0;
  1218. char log_string[50];
  1219. (void)lenBufIn;
  1220. (void)reqNum;
  1221. memset(tempValue, 0, 50);
  1222. memset(log_string, 0, 50);
  1223. strcpy(bufOut, HTTP_200_OK);
  1224. GetParamValue(bufIn, "func", tempValue, &valueLen);
  1225. if (strcmp(tempValue, "reboot") == 0) {
  1226. res = ups_metac_service_pdu(ups_cancel_shut_down);
  1227. if (res == 1) {
  1228. strcpy(log_string, name_login);
  1229. strcat(log_string, " (Останов)");
  1230. log_event_data(LOG_SHUTDOWN_UPS, log_string);
  1231. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" принята ИБП!");
  1232. } else {
  1233. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" отклонена ИБП!");
  1234. }
  1235. } else if (strncmp(tempValue, "off", 5) == 0) {
  1236. memset(tempValue2, 0, 50);
  1237. GetParamValue(bufIn, "after", tempValue2, &valueLen);
  1238. TimeParamFloat = atof(tempValue2);
  1239. res = ups_metac_service_pdu(ups_shutdown);
  1240. if (res == 1) {
  1241. strcat(bufOut, "Команда \"Отключения нагрузки\" принята ИБП!");
  1242. log_event_data(LOG_SHUTDOWN_UPS, name_login);
  1243. } else {
  1244. strcat(bufOut, "Команда \"Отключения нагрузки\" отклонена ИБП!");
  1245. }
  1246. }
  1247. *lenBufOut = strlen(bufOut);
  1248. return bufOut;
  1249. }
  1250. char *HTTP_Reset(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1251. {
  1252. (void)bufIn;
  1253. (void)bufOut;
  1254. (void)lenBufIn;
  1255. (void)reqNum;
  1256. HTTP_ResetSettings();
  1257. HTTP_SaveSettings();
  1258. fs_open("/settings.html", &file);
  1259. *lenBufOut = file.len;
  1260. return file.data;
  1261. }
  1262. char *HTTP_Confirm(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1263. {
  1264. (void)bufIn;
  1265. (void)bufOut;
  1266. (void)lenBufIn;
  1267. (void)reqNum;
  1268. SetWebReinitFlag(false);
  1269. SetConfirmWebParamsFlag();
  1270. fs_open("/index.html", &file);
  1271. *lenBufOut = file.len;
  1272. return file.data;
  1273. }
  1274. char *HTTP_GetRequest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1275. {
  1276. (void)bufOut;
  1277. (void)reqNum;
  1278. #ifdef HTTP_AUTH_ENABLE
  1279. const char *html_page_name[] = {
  1280. "/main.css",
  1281. "/rotek.png",
  1282. "/favicon.ico",
  1283. "/role.js"
  1284. };
  1285. #endif
  1286. char filename[MAX_FILENAME_LEN];
  1287. char nonmatch[MAX_ETAG_LEN];
  1288. char *pnonmatch = NULL;
  1289. uint8_t len;
  1290. memset(filename, 0, MAX_FILENAME_LEN);
  1291. if (GetFileName(bufIn, filename, &len)) {
  1292. /* Parce If-Non_Match value */
  1293. #ifdef HTTP_AUTH_ENABLE
  1294. if (!Authenticated) {
  1295. for (uint8_t i = 0; i < 4; i ++) {
  1296. if (strcmp(filename, html_page_name[i]) == 0) {
  1297. break;
  1298. }
  1299. if (i == 3) {
  1300. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1301. strcpy(filename, "/rslogin.html");
  1302. } else {
  1303. strcpy(filename, "/login.html");
  1304. }
  1305. }
  1306. }
  1307. } else {
  1308. HTTP_UpdateUserLoginTime(user_id);
  1309. }
  1310. #endif
  1311. uint8_t nonmatch_len = Parse_Header(bufIn, lenBufIn, If_None_Match, 15, nonmatch);
  1312. if (nonmatch_len < MAX_ETAG_LEN && nonmatch_len > 0) {
  1313. //DBG printf("If_None_Match: %s\r\n", nonmatch);
  1314. pnonmatch = nonmatch;
  1315. }
  1316. return send_file(filename, pnonmatch, &file, lenBufOut);
  1317. }
  1318. return 0;
  1319. }
  1320. char* HTTP_NoFound(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1321. {
  1322. (void)bufIn;
  1323. (void)bufOut;
  1324. (void)lenBufIn;
  1325. (void)reqNum;
  1326. #ifdef HTTP_AUTH_ENABLE
  1327. HTTP_UpdateUserLoginTime(user_id);
  1328. #endif
  1329. fs_open("/index.html", &file); // +
  1330. *lenBufOut = file.len;
  1331. return file.data;
  1332. }
  1333. /**
  1334. * @brief Проверка пароля для перехода в режим bootloader
  1335. * @retval None
  1336. */
  1337. char *HTTP_ConfirmBootPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1338. {
  1339. (void)bufIn;
  1340. (void)lenBufIn;
  1341. (void)reqNum;
  1342. strcpy(bufOut, HTTP_200_OK);
  1343. *lenBufOut = strlen(bufOut);
  1344. /* Запускаем задачу отложенной перезагрузки. Контроллер должен успеть
  1345. отправить ответ серверу о статусе пароля */
  1346. HTTP_StartResetTask(true);
  1347. return bufOut;
  1348. }
  1349. #ifdef HTTP_AUTH_ENABLE
  1350. void LoginTimerCallback(TimerHandle_t pxTimer)
  1351. {
  1352. cnt_err_psw = 0;
  1353. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1354. xTimerStop(RepeatLoginTimer, 0);
  1355. }
  1356. /**
  1357. * @brief Проверка пароля для входа в Web
  1358. * @retval None
  1359. */
  1360. int HTTP_ConfirmWebPwd(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1361. {
  1362. char tempStr[52];
  1363. char login[20];
  1364. char password[20];
  1365. uint8_t valueLen, user_id = 0xff;
  1366. char *strPtr = 0;
  1367. char WebPassword[MAX_WEB_PASSWD_LEN];
  1368. char WebLogin[MAX_WEB_LOGIN_LEN];
  1369. memset(login, 0, 20);
  1370. memset(password, 0, 20);
  1371. memset(tempStr, 0, 52);
  1372. memset(name_login, 0, 50);
  1373. tempStr[0] = '0';
  1374. /* Get first 50 bytes of string */
  1375. strncpy(tempStr, bufIn, 49);
  1376. /* Add " " to the string in order GetParamValue() can be able to parse the param */
  1377. strcat(tempStr, " ");
  1378. GetParamValue(tempStr, "login", login, &valueLen);
  1379. GetParamValue(tempStr, "password", password, &valueLen);
  1380. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1381. switch (RC_Login(login, password)) {
  1382. case RC_ERROR:
  1383. Authenticated = false;
  1384. break;
  1385. case RC_LOGIN_ADMIN_OK:
  1386. Authenticated = true;
  1387. user_id = 0;
  1388. break;
  1389. case RC_LOGIN_USER_OK:
  1390. Authenticated = true;
  1391. user_id = 1;
  1392. break;
  1393. case RC_NET_ERR:
  1394. Authenticated = false;
  1395. fl_raddius_net_err = true;
  1396. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1397. strcat(bufOut,
  1398. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Ошибка соединения с RADIUS сервером</h2></center></html>");
  1399. *lenBufOut = strlen(bufOut);
  1400. return SEND_REQUIRED_NO;
  1401. break;
  1402. case RC_ACC_DENIED:
  1403. Authenticated = false;
  1404. break;
  1405. default:
  1406. break;
  1407. }
  1408. } else {
  1409. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1410. GetUserLogin(user_id, WebLogin, &valueLen);
  1411. GetUserPassword(user_id, WebPassword, &valueLen);
  1412. /* Check login and password */
  1413. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1414. (strncmp(WebPassword, password, MAX_WEB_PASSWD_LEN) == 0)) {
  1415. /* Login and pass are valid */
  1416. /* TODO replace global flag with user-pass-cookie */
  1417. if (cnt_err_psw < 4) {
  1418. cnt_err_psw = 0;
  1419. Authenticated = true;
  1420. } else {
  1421. Authenticated = false;
  1422. }
  1423. break;
  1424. } else {
  1425. Authenticated = false;
  1426. }
  1427. }
  1428. }
  1429. if (Authenticated) {
  1430. /* Generate cookie */
  1431. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1432. /* Set users cookie */
  1433. HTTP_SetUserCookie(tempStr, user_id);
  1434. HTTP_UpdateUserLoginTime(user_id);
  1435. /* Send login and cookie back */
  1436. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1437. strcat(bufOut, login);
  1438. strcat(bufOut, "\r\nSet-Cookie: id=");
  1439. strcat(bufOut, tempStr);
  1440. sprintf(tempStr, "%d", (user_id + 1));
  1441. strcat(bufOut, "\r\nSet-Cookie: role=");
  1442. strcat(bufOut, tempStr);
  1443. strcat(bufOut, "\r\nSet-Cookie: auth=1");
  1444. strcat(bufOut, "\r\n\r\n");
  1445. strcat(bufOut,
  1446. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1447. *lenBufOut = strlen(bufOut);
  1448. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1449. snprintf(name_login, (strlen(login) + 1), login);
  1450. } else {
  1451. fl_raddius_net_err = false;
  1452. switch (user_id) {
  1453. case 0:
  1454. snprintf(name_login, sizeof(name_login), "Администратор");
  1455. break;
  1456. case 1:
  1457. snprintf(name_login, sizeof(name_login), "Пользователь");
  1458. break;
  1459. default:
  1460. snprintf(name_login, (strlen(login) + 1), login);
  1461. break;
  1462. }
  1463. }
  1464. log_event_data(LOG_LOGIN, name_login);
  1465. /* Запускаем задачу-таймер логаута. */
  1466. /* TODO отправить ответ серверу о статусе пароля */
  1467. return SEND_REQUIRED_YES;
  1468. } else {
  1469. if (cnt_err_psw <= 4) {
  1470. cnt_err_psw ++;
  1471. }
  1472. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1473. if (cnt_err_psw == 4) {
  1474. xTimerStart(RepeatLoginTimer, 0);
  1475. }
  1476. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1477. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1478. if (cnt_err_psw < 4) {
  1479. strcat(bufOut,
  1480. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1481. } else {
  1482. strcat(bufOut,
  1483. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1484. }
  1485. } else {
  1486. if (cnt_err_psw < 4) {
  1487. strcat(bufOut,
  1488. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1489. } else {
  1490. strcat(bufOut,
  1491. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1492. }
  1493. }
  1494. *lenBufOut = strlen(bufOut);
  1495. return SEND_REQUIRED_NO;
  1496. }
  1497. }
  1498. void HTTP_LOGIN(char *bufOut, uint16_t *lenBufOut)
  1499. {
  1500. char tempStr[50];
  1501. uint8_t valueLen;
  1502. char WebLogin[MAX_WEB_LOGIN_LEN];
  1503. GetUserLogin(ADMIN, WebLogin, &valueLen);
  1504. memset(tempStr, 0, 50);
  1505. memset(name_login, 0, 50);
  1506. /* TODO replace global flag with user-pass-cookie */
  1507. Authenticated = true;
  1508. /* Generate cookie */
  1509. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1510. /* Set users cookie */
  1511. HTTP_SetUserCookie(tempStr, ADMIN);
  1512. HTTP_UpdateUserLoginTime(ADMIN);
  1513. /* Send login and cookie back */
  1514. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1515. strcat(bufOut, WebLogin);
  1516. strcat(bufOut, "\r\nSet-Cookie: id=");
  1517. strcat(bufOut, tempStr);
  1518. strcat(bufOut, "\r\nSet-Cookie: role=0");
  1519. strcat(bufOut, "\r\nSet-Cookie: auth=0");
  1520. strcat(bufOut, "\r\n\r\n");
  1521. strcat(bufOut,
  1522. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1523. *lenBufOut = strlen(bufOut);
  1524. snprintf(name_login, sizeof(name_login), "Администратор");
  1525. }
  1526. /**
  1527. * @brief Чтение Cookie пользователя
  1528. */
  1529. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len)
  1530. {
  1531. sprintf(str, "%s", users[user_id].cookie);
  1532. *len = strlen(str);
  1533. }
  1534. /**
  1535. * @brief Установка Cookie пользователя
  1536. */
  1537. static void HTTP_SetUserCookie(char *str, uint8_t user_id)
  1538. {
  1539. strcpy(users[user_id].cookie, str);
  1540. }
  1541. /**
  1542. * @brief Обновление времени последней активности пользователя
  1543. */
  1544. static void HTTP_UpdateUserLoginTime(uint8_t user_id)
  1545. {
  1546. xTimerStart(users[user_id].LogoutTimer, 0);
  1547. }
  1548. /**
  1549. * @brief Принудительный логаут пользователя
  1550. */
  1551. static void HTTP_ForceUserLogout(uint8_t user_id)
  1552. {
  1553. char cookie[MAX_WEB_COOKIE_LEN];
  1554. /* Flush user cookie by random value */
  1555. sprintf(cookie, "%X", (unsigned int)GetRandomNumber());
  1556. HTTP_SetUserCookie(cookie, user_id);
  1557. }
  1558. /**
  1559. * @brief >Callback таймера логаута пользователя
  1560. */
  1561. void LogoutTimerCallback(TimerHandle_t pxTimer)
  1562. {
  1563. uint8_t user_id = (uint8_t)pvTimerGetTimerID( pxTimer );
  1564. if ( sSettings.sRADIUS.Auth_enable ) {
  1565. HTTP_ForceUserLogout(user_id);
  1566. }
  1567. }
  1568. /**
  1569. * @brief Смена пароля пользователя
  1570. * @retval None
  1571. */
  1572. char *HTTP_ChangeUserPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1573. {
  1574. char tempStr[110];
  1575. char value[20];
  1576. char login[20];
  1577. char password[20];
  1578. char tmp[75];
  1579. uint8_t valueLen, valueLen2, user_id;
  1580. char WebLogin[MAX_WEB_LOGIN_LEN];
  1581. (void)reqNum;
  1582. (void)lenBufIn;
  1583. memset(login, 0, sizeof(login));
  1584. memset(password, 0, sizeof(password));
  1585. memset(tempStr, 0, sizeof(tempStr));
  1586. memset(value, 0, sizeof(value));
  1587. memset(tmp, 0, sizeof(tmp));
  1588. ClearParamString(bufIn);
  1589. strncpy(tempStr, bufIn, 110);
  1590. strcpy(bufOut, HTTP_200_OK);
  1591. if (GetParamValue(tempStr, "username", login, &valueLen) &&
  1592. GetParamValue(tempStr, "oldpass", tmp, &valueLen)) {
  1593. url_decode(password, sizeof(password), tmp);
  1594. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1595. memset(value, 0, 20);
  1596. memset(WebLogin, 0, MAX_WEB_LOGIN_LEN);
  1597. GetUserLogin(user_id, WebLogin, &valueLen);
  1598. GetUserPassword(user_id, value, &valueLen2);
  1599. /* Check login and password */
  1600. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1601. (memcmp(password, value, 11) == 0)) {
  1602. memset(tmp, 0, sizeof(tmp));
  1603. memset(password, 0, 20);
  1604. if (GetParamValue(tempStr, "newpass", tmp, &valueLen)) {
  1605. url_decode(password, sizeof(password), tmp);
  1606. valueLen = strlen(password);
  1607. memcpy(sSettings.sAuth[user_id].password, password, sizeof(sSettings.sAuth[user_id].password));
  1608. HTTP_SaveSettings();
  1609. log_event_data(LOG_PSW_CHANGE, name_login);
  1610. strcat(bufOut, "Пароль успешно изменён");
  1611. *lenBufOut = strlen(bufOut);
  1612. return bufOut;
  1613. } else {
  1614. strcat(bufOut, "Введены некорректные данные!");
  1615. *lenBufOut = strlen(bufOut);
  1616. return bufOut;
  1617. }
  1618. }
  1619. }
  1620. strcat(bufOut, "Введён неверный пароль!");
  1621. } else {
  1622. strcat(bufOut, "Введены некорректные данные!");
  1623. }
  1624. *lenBufOut = strlen(bufOut);
  1625. return bufOut;
  1626. }
  1627. //
  1628. static void getAuthenticatedState(void)
  1629. {
  1630. char CookieBuf[51];
  1631. char *CookiePtr = NULL;
  1632. char name[MAX_WEB_COOKIE_LEN];
  1633. char id[MAX_WEB_COOKIE_LEN];
  1634. uint8_t nameLen = 0, idLen = 0;
  1635. receiveBuf[receivedBufLen] = '\0';
  1636. //printf("receive %s \r\n", receiveBuf);
  1637. // Get cookie "uname" value
  1638. memset(CookieBuf, 0, sizeof(CookieBuf));
  1639. CookiePtr = strstr(receiveBuf, "uname=");
  1640. strncpy(CookieBuf, CookiePtr, 50);
  1641. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1642. memset(name, 0, MAX_WEB_COOKIE_LEN);
  1643. GetCookieValue(CookieBuf, "uname=", name, &nameLen);
  1644. //printf("********CookieBuf2= %s\r\n", CookieBuf);
  1645. //printf("********uname= %s\r\n", name);
  1646. memset(CookieBuf, 0, sizeof(CookieBuf));
  1647. // Get cookie "id" value
  1648. CookiePtr = strstr(receiveBuf, " id=");
  1649. strncpy(CookieBuf, CookiePtr, 50);
  1650. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1651. memset(id, 0, MAX_WEB_COOKIE_LEN);
  1652. GetCookieValue(CookieBuf, "id=", id, &idLen);
  1653. // printf("********ID= %s\r\n", id);
  1654. seclevel = 0xFF;
  1655. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1656. HTTP_GetUserCookie(user_id, CookieBuf, &idLen);
  1657. if (strncmp(id, CookieBuf, idLen) == 0 ) {
  1658. GetUserLevelInt(user_id, &seclevel);
  1659. Authenticated = true;
  1660. break;
  1661. }
  1662. Authenticated = false;
  1663. seclevel = 0xFF;
  1664. }
  1665. }
  1666. char *HTTP_LoginPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1667. {
  1668. (void)reqNum;
  1669. uint32_t req_data_received = 0;
  1670. char *offset = 0;
  1671. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1672. /* parse packet for Content-length field */
  1673. post_data_count = Parse_Content_Length(bufIn, lenBufIn);
  1674. printf("Content-length: %d\r\n", (int)post_data_count);
  1675. if (post_data_count < MAX_POST_REQ_LEN) {
  1676. memset(post_req_data, 0, MAX_POST_REQ_LEN);
  1677. /* parse packet for "\r\n\r\n" */
  1678. offset = (strstr(bufIn, "\r\n\r\n")) + 4;
  1679. req_data_received = lenBufIn - (offset - bufIn);
  1680. printf("req data received: %d\r\n", (int)req_data_received);
  1681. /* Check if "\r\n\r\n" was found */
  1682. if (offset != 0) {
  1683. /* if data was splited in two packets */
  1684. if (req_data_received < post_data_count) {
  1685. /* Copy request data to buffer */
  1686. snprintf(post_req_data, req_data_received, "%s", bufIn);
  1687. post_data_count -= req_data_received;
  1688. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1689. offset = bufIn;
  1690. }
  1691. /* if data received completely */
  1692. if (strlen(bufIn) != 0) {
  1693. strncat(post_req_data, offset, post_data_count);
  1694. //printf("post_req_data: %s\r\n", post_req_data);
  1695. /* End reqest */
  1696. post_data_count = 0;
  1697. HTTP_ConfirmWebPwd(post_req_data, bufOut, strlen(post_req_data), lenBufOut);
  1698. *lenBufOut = strlen(bufOut);
  1699. return bufOut;
  1700. }
  1701. }
  1702. /* request was fragmented before "\r\n\r\n" */
  1703. else {
  1704. post_data_count = 0;
  1705. /* Redirect to login page */
  1706. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1707. fs_open("/rslogin.html", &file);
  1708. } else {
  1709. fs_open("/login.html", &file);
  1710. }
  1711. *lenBufOut = file.len;
  1712. return file.data;
  1713. }
  1714. } else {
  1715. DBG printf("Too long POST request!\r\n");
  1716. /* Ignore request */
  1717. post_data_count = 0;
  1718. /* Redirect to login page */
  1719. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1720. fs_open("/rslogin.html", &file);
  1721. } else {
  1722. fs_open("/login.html", &file);
  1723. }
  1724. *lenBufOut = file.len;
  1725. return file.data;
  1726. }
  1727. return 0;
  1728. }
  1729. char *HTTP_LogoutPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1730. {
  1731. (void)bufIn;
  1732. (void)bufOut;
  1733. (void)lenBufIn;
  1734. (void)reqNum;
  1735. Authenticated = false;
  1736. seclevel = 0xFF;
  1737. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1738. fs_open("/rslogin.html", &file);
  1739. } else {
  1740. fs_open("/login.html", &file);
  1741. }
  1742. *lenBufOut = file.len;
  1743. return file.data;
  1744. }
  1745. #endif
  1746. /**
  1747. * @brief Send callback for log file transfer (messages as is, not ordered)
  1748. */
  1749. void HTTP_SendHistory(void)
  1750. {
  1751. uint32_t nbytes = 0;
  1752. static bool start = true;
  1753. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1754. if (log_ptr + FILE_BUF_MAX_LEN <= log_size) {
  1755. nbytes = History_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN, start);
  1756. } else if (log_ptr < log_size) {
  1757. nbytes = History_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1758. } else {
  1759. nbytes = 0;
  1760. }
  1761. log_ptr += nbytes;
  1762. start = false;
  1763. if (nbytes == 0) {
  1764. // File transfer finished.
  1765. start = true;
  1766. // Clear file transfer in progress flag
  1767. fLogTransInprog = false;
  1768. return;
  1769. }
  1770. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1771. HTTP_SendHistory();
  1772. }
  1773. /**
  1774. * @brief Sent callback for log file transfer (messages as is, not ordered)
  1775. */
  1776. void HTTP_SendLog(void)
  1777. {
  1778. uint32_t nbytes = 0;
  1779. static bool start = true;
  1780. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1781. if (log_ptr + FILE_BUF_MAX_LEN_LOG <= log_size) {
  1782. nbytes = LOG_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN_LOG, start);
  1783. } else if (log_ptr < log_size) {
  1784. nbytes = LOG_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1785. } else {
  1786. nbytes = 0;
  1787. }
  1788. log_ptr += nbytes;
  1789. start = false;
  1790. if (nbytes == 0) {
  1791. // File transfer finished.
  1792. start = true;
  1793. // Clear file transfer in progress flag
  1794. fLogTransInprog = false;
  1795. return;
  1796. }
  1797. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1798. HTTP_SendLog();
  1799. return;
  1800. }
  1801. /**
  1802. * @brief sends file from flash FS
  1803. * @param filename: pointer to the file name to send
  1804. * @param pnonmatch: pointer to the If-Non_Match value
  1805. * @param pcb: pointer to a tcp_pcb struct
  1806. * @param hs: pointer to a http_state struct
  1807. * @param file: pointer to a fs_file struct
  1808. * @retval
  1809. */
  1810. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len)
  1811. {
  1812. int res = 0;
  1813. char etag[MAX_ETAG_LEN];
  1814. char *petag = NULL;
  1815. res = fs_open(filename, file);
  1816. if (res == 0) {
  1817. printf("Not found: %s\r\n", filename);
  1818. sprintf(filename, "/index.html");
  1819. fs_open(filename, file);
  1820. }
  1821. /* Find Etag value */
  1822. uint8_t etag_len = Parse_Header(file->data, file->len, Etag, 6, etag);
  1823. if (etag_len < MAX_ETAG_LEN && etag_len > 0) {
  1824. DBG printf("Etag: %s\r\n", etag);
  1825. petag = etag;
  1826. }
  1827. /* Compare Etag and If-Non-Match fields */
  1828. if (pnonmatch && petag && (strcmp(pnonmatch, petag) == 0)) {
  1829. /* Send 304 code */
  1830. sprintf(sendBuf, HTTP_304_NOT_MODIFIED);
  1831. DBG printf(sendBuf);
  1832. *Len = strlen(sendBuf);
  1833. return sendBuf;
  1834. } else {
  1835. *Len = file->len;
  1836. return file->data;
  1837. }
  1838. }
  1839. /**
  1840. * @brief Extract the custom field data from HTML data
  1841. * @param data : pointer on receive packet buffer
  1842. * @param len : buffer length
  1843. * @param field : field name
  1844. * @param flen : field name length
  1845. * @retval value : pointer for field data
  1846. */
  1847. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value)
  1848. {
  1849. uint32_t i = 0, size = 0;
  1850. char *ptr;
  1851. uint32_t Offset = 0;
  1852. /* Find field name in data buffer */
  1853. for (i = 0; i < len; i++) {
  1854. if (strncmp ((char *)(data + i), field, flen) == 0) {
  1855. Offset = i + flen;
  1856. break;
  1857. }
  1858. }
  1859. /* Copy Field value */
  1860. if (Offset) {
  1861. i = 0;
  1862. ptr = (char *)(data + Offset);
  1863. while (*(ptr + i) != 0x0d) {
  1864. value[i] = *(ptr + i);
  1865. i++;
  1866. }
  1867. value[i] = '\0';
  1868. size = i;
  1869. }
  1870. return size;
  1871. }
  1872. /**
  1873. * @brief
  1874. * @retval None
  1875. */
  1876. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen)
  1877. {
  1878. char *beginValue = NULL;
  1879. char *endValue = NULL;
  1880. int len = 0;
  1881. char *strPtr = NULL;
  1882. strPtr = strstr(inStr, "GET");
  1883. if (strPtr == NULL) {
  1884. strPtr = strstr(inStr, "POST");
  1885. }
  1886. if (strPtr == NULL) {
  1887. *fileNameLen = 0;
  1888. return false;
  1889. } else {
  1890. beginValue = strpbrk(strPtr, "/");
  1891. endValue = strpbrk(beginValue, " ");
  1892. if (endValue == NULL) {
  1893. *fileNameLen = 0;
  1894. return false;
  1895. }
  1896. len = endValue - beginValue;
  1897. if (len < MAX_FILENAME_LEN) {
  1898. strncpy(fileName, beginValue, len);
  1899. *fileNameLen = len;
  1900. fileName[len] = '\0';
  1901. return true;
  1902. } else {
  1903. return false;
  1904. }
  1905. }
  1906. }
  1907. #endif