my_ssl_server.c 66 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216
  1. /*
  2. * ssl_server.c
  3. *
  4. * Created on: 08.11.2017
  5. * Author: balbekova
  6. */
  7. #ifdef SSL_SERVER_ENABLE
  8. #include "lwip/opt.h"
  9. #include "lwip/arch.h"
  10. #include "lwip/api.h"
  11. #include "lwip/tcp.h"
  12. #include "my_ssl_server.h"
  13. #include "web_params_api.h"
  14. #include "parameters.h"
  15. #include "urlcode.h"
  16. #include "bt6703_fs/fsdata.c"
  17. #include "settings_api.h"
  18. #include "netconf.h"
  19. #include "common_config.h"
  20. #include "testing.h"
  21. #include "rtc.h"
  22. #include "rng.h"
  23. #include "megatec.h"
  24. #include "log.h"
  25. #include "hal.h"
  26. #include "radius_user.h"
  27. #include "sntp_api.h"
  28. #ifdef PRINTF_STDLIB
  29. #include <stdio.h>
  30. #endif
  31. #ifdef PRINTF_CUSTOM
  32. #include "tinystdio.h"
  33. #endif
  34. #include <string.h>
  35. #include <stdlib.h>
  36. #include "FreeRTOS.h"
  37. #include "task.h"
  38. #include "fr_timers.h"
  39. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err);
  40. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err);
  41. static int fs_open(char *name, struct fs_file *file);
  42. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len);
  43. static void send_data(struct tcp_pcb *pcb, struct http_state *hs);
  44. #ifdef HTTP_AUTH_ENABLE
  45. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len);
  46. static void HTTP_SetUserCookie(char *str, uint8_t user_id);
  47. static void HTTP_UpdateUserLoginTime(uint8_t user_id);
  48. static void HTTP_ForceUserLogout(uint8_t user_id);
  49. void LogoutTimerCallback(TimerHandle_t pxTimer);
  50. void LoginTimerCallback(TimerHandle_t pxTimer);
  51. static void getAuthenticatedState(void);
  52. #endif
  53. static uint32_t Parse_Content_Length(char *data, uint32_t len);
  54. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len);
  55. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value);
  56. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen);
  57. char sendBuf[SEND_BUF_MAX_LEN];
  58. uint16_t sendBufLoadLen = 0;
  59. uint16_t printLen = 0;
  60. char receiveBuf[RECIVE_BUF_MAX_LEN];
  61. uint16_t receivedBufLen = 0;
  62. #ifdef HTTP_AUTH_ENABLE
  63. #define MAX_POST_REQ_LEN 256
  64. char post_req_data[MAX_POST_REQ_LEN];
  65. uint32_t post_data_count = 0;
  66. uint32_t log_post_reqn;
  67. /* Logout timeout, 30 minutes */
  68. #define WEB_LOGOUT_TIME configTICK_RATE_HZ*60*30
  69. /* Max user active sessions count */
  70. #define WEB_USER_MAX_SESSION_COUNT 5
  71. struct {
  72. //auth_session_t session[WEB_USER_MAX_SESSION_COUNT];
  73. char cookie[MAX_WEB_COOKIE_LEN];
  74. TimerHandle_t LogoutTimer;
  75. } users[MAX_WEB_USERS];
  76. TimerHandle_t RepeatLoginTimer;
  77. /* Repeat Login timeout, 1 minutes */
  78. #define REPEAT_LOGIN_TIME configTICK_RATE_HZ*60*1
  79. uint8_t cnt_err_psw = 0;
  80. bool Authenticated = false;
  81. uint8_t user_id; // Id of currently logged-in user
  82. /* Level of currently logged-in user */
  83. uint8_t seclevel = 0xFF;
  84. #endif
  85. /* Max HTTP file name length including "/" */
  86. #define MAX_FILENAME_LEN 32
  87. /* Max HTTP Etag field length */
  88. #define MAX_ETAG_LEN 48
  89. static const char If_None_Match[] = "If-None-Match: ";
  90. static const char Etag[] = "ETag: ";
  91. static volatile uint32_t size = 0;
  92. static uint32_t TotalReceived = 0;
  93. static volatile uint32_t TotalData = 0;
  94. static uint32_t ContentLengthOffset = 0;
  95. static const char Content_Length[17] =
  96. /* Content Length */
  97. {0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x3a, 0x20, };
  98. const char HTTP_304_NOT_MODIFIED[] = "HTTP/1.1 304 Not Modified\r\n\r\n";
  99. const char HTTP_403_NOT_WHITE_LIST[] = "HTTP/1.1 403 Forbidden\r\n\r\n";
  100. const char HTTP_401_NO_AUTH[] = "HTTP/1.1 401 No authorization\r\n\r\n";
  101. const char HTTP_500_SERVER_ERROR[] = "HTTP/1.1 500 Internal Server Error\r\n\r\n";
  102. const char HTTP_200_OK[] = "HTTP/1.1 200 OK\r\n\r\n";
  103. /* utf-8 marker to support MS Excel */
  104. const char UTF8_BOM[] = {0xEF, 0xBB, 0xBF, 0x00};
  105. unsigned long log_ptr = 0;
  106. unsigned long log_size = 0;
  107. bool fLogTransInprog = false;
  108. static bool fl_raddius_net_err = false;
  109. /**
  110. * @brief Общая структура настроек
  111. */
  112. extern SETTINGS_t sSettings;
  113. struct fs_file file = {0, 0};
  114. typedef struct {
  115. char client_req[30];
  116. uint8_t len;
  117. REQ_TYPE_SEND_t req_type_send;
  118. ACCESS_TYPE_t accsess;
  119. char *(*handler)(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut);
  120. } web_func_handler_t;
  121. web_func_handler_t process_web_funcs[] = {
  122. #ifdef HTTP_AUTH_ENABLE
  123. { "POST /login.cgi", 15, COMMON_ANSWER, ALL_ACCESS, HTTP_LoginPage },
  124. { "GET /logout.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_LogoutPage },
  125. { "GET /changepwd.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ChangeUserPwd },
  126. #endif
  127. { "GET /getJson.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetParamsPage },
  128. { "GET /settings.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSettingsPage },
  129. { "POST /settings.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_SetSettingsPage },
  130. { "GET /getcert.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSert},
  131. { "POST /srv_crt_upload.cgi", 24, COMMON_ANSWER, TIME_ACCESS, HTTP_Upload_Sert},
  132. { "GET /info.cgi", 13, COMMON_ANSWER, TIME_ACCESS, HTTP_GetInfo },
  133. { "POST /info.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_SetInfoPage },
  134. { "GET /history.cgi", 16, HISTORY_ANSWER, TIME_ACCESS, HTTP_HistoryPage },
  135. { "GET /ups_history.cgi", 19, UPS_HISTORY_ANSWER, TIME_ACCESS, HTTP_UpsHistoryPage },
  136. { "GET /reset.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_Reset },
  137. { "GET /bat_test.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSTest },
  138. { "GET /ups_power.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSshutdown },
  139. { "GET /reboot.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_Reboot },
  140. { "GET /confirm.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_Confirm },
  141. { "GET /fw_update.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ConfirmBootPwd },
  142. { "GET", 3, COMMON_ANSWER, ALL_ACCESS, HTTP_GetRequest },
  143. { "", 0, COMMON_ANSWER, ALL_ACCESS, HTTP_NoFound },
  144. { "", 0, 0, 0, NULL }
  145. };
  146. /**
  147. * @brief closes tcp connection
  148. * @param pcb: pointer to a tcp_pcb struct
  149. * @param hs: pointer to a http_state struct
  150. * @retval
  151. */
  152. static void close_conn(struct tcp_pcb *pcb, struct http_state *hs)
  153. {
  154. tcp_arg(pcb, NULL);
  155. tcp_sent(pcb, NULL);
  156. tcp_recv(pcb, NULL);
  157. mem_free(hs);
  158. err_t err = tcp_close(pcb);
  159. DBG printf("%p close = %d (pcb: %d, pbuf_pool: %d)\r\n", pcb, err,
  160. lwip_stats.memp[MEMP_TCP_PCB]->used,
  161. lwip_stats.memp[MEMP_PBUF_POOL]->used);
  162. }
  163. /**
  164. * @brief callback function for handling TCP HTTP traffic
  165. * @param arg: pointer to an argument structure to be passed to callback function
  166. * @param pcb: pointer to a tcp_pcb structure
  167. * @param p: pointer to a packet buffer
  168. * @param err: LwIP error code
  169. * @retval err
  170. */
  171. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err)
  172. {
  173. char *data;
  174. struct http_state *hs;
  175. char buf[150];
  176. hs = arg;
  177. if (err == ERR_OK && p != NULL) {
  178. tcp_recved(pcb, p->tot_len);
  179. if (hs->file == NULL) {
  180. data = p->payload;
  181. receivedBufLen = p->tot_len;
  182. memcpy(receiveBuf, p->payload, receivedBufLen);
  183. // На производстве
  184. if (strncmp(data, "GET /setProdate.cgi", 19) == 0 && strncmp(sSettings.sFlags.testState, "T2OK", 4)) {
  185. HTTP_Prodate(receiveBuf, sendBuf, receivedBufLen, &sendBufLoadLen);
  186. hs->file = sendBuf;
  187. hs->left = sendBufLoadLen;
  188. send_data(pcb, hs);
  189. tcp_sent(pcb, http_sent);
  190. } else {
  191. strcpy(sendBuf, HTTP_200_OK);
  192. memset(buf, 0, sizeof(buf));
  193. // strcat(sendBuf,"<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://192.168.14.35\"/></head></html>\r\n\r\n");
  194. if (sSettings.sFlags.netsettingsChanged == true) {
  195. sprintf(buf,
  196. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  197. sSettings.sWebTempParams.ip);
  198. } else {
  199. sprintf(buf,
  200. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  201. sSettings.sWebParams.ip);
  202. }
  203. strcat(sendBuf, buf);
  204. // strcat(sendBuf,"1");
  205. sendBufLoadLen = strlen(sendBuf);
  206. hs->file = sendBuf;
  207. hs->left = sendBufLoadLen;
  208. send_data(pcb, hs);
  209. tcp_sent(pcb, http_sent);
  210. }
  211. }
  212. pbuf_free(p);
  213. close_conn(pcb, hs);
  214. }
  215. if (err == ERR_OK && p == NULL) {
  216. close_conn(pcb, hs);
  217. }
  218. return ERR_OK;
  219. }
  220. /**
  221. * @brief callback function for handling connection errors
  222. * @param arg: pointer to an argument to be passed to callback function
  223. * @param err: LwIP error code
  224. * @retval none
  225. */
  226. static void conn_err(void *arg, err_t err)
  227. {
  228. struct http_state *hs;
  229. (void)err;
  230. hs = arg;
  231. mem_free(hs);
  232. }
  233. /**
  234. * @brief callback function called after a successfull TCP data packet transmission
  235. * @param arg: pointer to an argument to be passed to callback function
  236. * @param pcb: pointer on tcp_pcb structure
  237. * @param len
  238. * @retval err : LwIP error code
  239. */
  240. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len)
  241. {
  242. struct http_state *hs;
  243. (void)len;
  244. hs = arg;
  245. if (hs->left > 0) {
  246. send_data(pcb, hs);
  247. } else {
  248. close_conn(pcb, hs);
  249. }
  250. return ERR_OK;
  251. }
  252. /**
  253. * @brief sends data found in member "file" of a http_state struct
  254. * @param pcb: pointer to a tcp_pcb struct
  255. * @param hs: pointer to a http_state struct
  256. * @retval none
  257. */
  258. static void send_data(struct tcp_pcb *pcb, struct http_state *hs)
  259. {
  260. err_t err;
  261. u16_t len;
  262. /* We cannot send more data than space available in the send
  263. buffer */
  264. if (tcp_sndbuf(pcb) < hs->left) {
  265. len = tcp_sndbuf(pcb);
  266. } else {
  267. len = hs->left;
  268. }
  269. err = tcp_write(pcb, hs->file, len, 0);
  270. if (err == ERR_OK) {
  271. hs->file += len;
  272. hs->left -= len;
  273. }
  274. }
  275. /**
  276. * @brief tcp poll callback function
  277. * @param arg: pointer to an argument to be passed to callback function
  278. * @param pcb: pointer on tcp_pcb structure
  279. * @retval err_t
  280. */
  281. static err_t http_poll(void *arg, struct tcp_pcb *pcb)
  282. {
  283. if (arg == NULL) {
  284. tcp_close(pcb);
  285. } else {
  286. send_data(pcb, (struct http_state *)arg);
  287. }
  288. return ERR_OK;
  289. }
  290. /**
  291. * @brief callback function on TCP connection setup ( on port 80)
  292. * @param arg: pointer to an argument structure to be passed to callback function
  293. * @param pcb: pointer to a tcp_pcb structure
  294. * &param err: Lwip stack error code
  295. * @retval err
  296. */
  297. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err)
  298. {
  299. struct http_state *hs;
  300. /* Allocate memory for the structure that holds the state of the connection */
  301. hs = mem_malloc(sizeof(struct http_state));
  302. if (hs == NULL) {
  303. return ERR_MEM;
  304. }
  305. /* Initialize the structure. */
  306. hs->file = NULL;
  307. hs->left = 0;
  308. /* Tell TCP that this is the structure we wish to be passed for our
  309. callbacks. */
  310. tcp_arg(pcb, hs);
  311. /* Tell TCP that we wish to be informed of incoming data by a call
  312. to the http_recv() function. */
  313. tcp_recv(pcb, http_recv);
  314. tcp_err(pcb, conn_err);
  315. tcp_poll(pcb, http_poll, 10);
  316. return ERR_OK;
  317. }
  318. /**
  319. * @brief Opens a file defined in fsdata.c ROM filesystem
  320. * @param name : pointer to a file name
  321. * @param file : pointer to a fs_file structure
  322. * @retval 1 if success, 0 if fail
  323. */
  324. static int fs_open(char *name, struct fs_file *file)
  325. {
  326. struct fsdata_file_noconst *f;
  327. for (f = (struct fsdata_file_noconst *)FS_ROOT; f != NULL; f = (struct fsdata_file_noconst *)f->next) {
  328. if (!strcmp(name, f->name)) {
  329. file->data = f->data;
  330. file->len = f->len;
  331. return 1;
  332. }
  333. }
  334. return 0;
  335. }
  336. /**
  337. * @brief Initialize the HTTP server (start its thread)
  338. * @param none
  339. * @retval None
  340. */
  341. void HTTP_Init()
  342. {
  343. struct tcp_pcb *pcb;
  344. pcb = tcp_new();
  345. tcp_bind(pcb, IP_ADDR_ANY, 80);
  346. pcb = tcp_listen(pcb);
  347. tcp_accept(pcb, http_accept);
  348. }
  349. /**
  350. * @brief Extract the Content_Length data from HTML data
  351. * @param data : pointer on receive packet buffer
  352. * @param len : buffer length
  353. * @retval size : Content_length in numeric format
  354. */
  355. static uint32_t Parse_Content_Length(char *data, uint32_t len)
  356. {
  357. uint32_t i = 0, size = 0, S = 1;
  358. int32_t j = 0;
  359. char sizestring[6], *ptr;
  360. ContentLengthOffset = 0;
  361. /* find Content-Length data in packet buffer */
  362. for (i = 0; i < len; i++) {
  363. if (strncmp ((char *)(data + i), Content_Length, 16) == 0) {
  364. ContentLengthOffset = i + 16;
  365. break;
  366. }
  367. }
  368. /* read Content-Length value */
  369. if (ContentLengthOffset) {
  370. i = 0;
  371. ptr = (char *)(data + ContentLengthOffset);
  372. while (*(ptr + i) != 0x0d) {
  373. sizestring[i] = *(ptr + i);
  374. i++;
  375. ContentLengthOffset++;
  376. }
  377. if (i > 0) {
  378. /* transform string data into numeric format */
  379. for (j = i - 1; j >= 0; j--) {
  380. size += (sizestring[j] - 0x30) * S;
  381. S = S * 10;
  382. }
  383. }
  384. }
  385. return size;
  386. }
  387. /**
  388. * @brief
  389. * @retval None
  390. */
  391. uint8_t GetCookieValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  392. {
  393. char *beginValue = 0;
  394. char *endValue = 0;
  395. char *endValueTemp = 0;
  396. int len = 0;
  397. char *strPtr = 0;
  398. strPtr = strstr(inStr, paramName);
  399. if (strPtr != 0) {
  400. beginValue = strpbrk(strPtr, "=");
  401. endValue = strpbrk(strPtr, ";");
  402. endValueTemp = strpbrk(strPtr, "\r");
  403. if (endValueTemp != 0 && endValueTemp < endValue) {
  404. endValue = endValueTemp;
  405. }
  406. if (endValue == 0) {
  407. endValue = strpbrk(strPtr, "\n");
  408. }
  409. len = endValue - beginValue - 1;
  410. strncpy(paramValue, beginValue + 1, len);
  411. *endValue = '0';
  412. *beginValue = '0';
  413. *paramLen = len;
  414. return 1;
  415. } else {
  416. *paramLen = 0;
  417. return 0;
  418. }
  419. }
  420. char *Parce_Boundary(const char *data, uint32_t len, char *dst, uint8_t dstlen)
  421. {
  422. char *ptr = NULL;
  423. char *boundary = NULL;
  424. uint8_t i = 0;
  425. for (uint32_t j = 0; j < len; j++) {
  426. if (strncmp ((char *)(data + j), "boundary=", 9) == 0) {
  427. boundary = (char *)data + j + 9;
  428. break;
  429. }
  430. }
  431. if (!boundary) { return NULL; }
  432. *dst++ = '-';
  433. *dst++ = '-';
  434. ptr = boundary;
  435. while ((*ptr != 0x0d) && (i < dstlen - 4)) {
  436. *dst++ = *ptr++;
  437. i++;
  438. }
  439. //*dst++ = '-';
  440. //*dst++ = '-';
  441. *dst = '\0';
  442. if (i > 0) {
  443. return boundary;
  444. } else {
  445. return NULL;
  446. }
  447. }
  448. void ClearParamString(char *inBuf)
  449. {
  450. uint16_t len;
  451. char *str;
  452. str = strstr(inBuf, "HTTP");
  453. if (str != 0) {
  454. len = str - inBuf;
  455. memset(str, 0, RECIVE_BUF_MAX_LEN - len - 1);
  456. }
  457. }
  458. /**
  459. * @brief
  460. * @retval None
  461. */
  462. uint8_t GetParamValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  463. {
  464. char *beginValue = 0;
  465. char *endValue = 0;
  466. int len = 0;
  467. char *strPtr = 0;
  468. strPtr = strstr(inStr, paramName);
  469. if (strPtr != 0) {
  470. beginValue = strpbrk(strPtr, "=");
  471. endValue = strpbrk(strPtr, "&");
  472. if (endValue == 0) {
  473. endValue = strpbrk(strPtr, " ");
  474. }
  475. len = endValue - beginValue - 1;
  476. strncpy(paramValue, beginValue + 1, len);
  477. *endValue = '0';
  478. *beginValue = '0';
  479. *paramLen = len;
  480. return 1;
  481. } else {
  482. *paramLen = 0;
  483. return 0;
  484. }
  485. }
  486. // -----------------------------------------------------------------------------
  487. #include "mbedtls/platform.h"
  488. #include "mbedtls/entropy.h"
  489. #include "mbedtls/ctr_drbg.h"
  490. #include "mbedtls/certs.h"
  491. #include "mbedtls/x509.h"
  492. #include "mbedtls/net_sockets.h"
  493. #include "mbedtls/error.h"
  494. #include "mbedtls/debug.h"
  495. #include "mbedtls/memory_buffer_alloc.h"
  496. #include "mbedtls_time.h"
  497. #include "mbedtls_debug.h"
  498. #include "FreeRTOS.h"
  499. #include "task.h"
  500. #include "cert_req.h"
  501. #include <stdlib.h>
  502. #include <string.h>
  503. extern unsigned char req_cert[];
  504. static mbedtls_net_context listen_fd, client_fd;
  505. static const uint8_t *pers = (uint8_t *)("ssl_server");
  506. mbedtls_entropy_context entropy;
  507. mbedtls_ctr_drbg_context ctr_drbg;
  508. mbedtls_ssl_context ssl;
  509. mbedtls_ssl_config conf;
  510. mbedtls_x509_crt srvcert;
  511. mbedtls_pk_context pkey;
  512. //
  513. void ssl_server(void *pvParameters)
  514. {
  515. SSL_SERVER_STATE ssl_state = SSL_ACCEPT;
  516. char *sendPtr;
  517. int ret;
  518. mbedtls_net_init( &listen_fd );
  519. mbedtls_net_init( &client_fd );
  520. mbedtls_ssl_init( &ssl );
  521. mbedtls_ssl_config_init( &conf );
  522. mbedtls_x509_crt_init( &srvcert );
  523. mbedtls_pk_init( &pkey );
  524. mbedtls_entropy_init( &entropy );
  525. mbedtls_ctr_drbg_init( &ctr_drbg );
  526. mbedtls_platform_set_time(&MBEDTLS_GetTime);
  527. #if defined(MBEDTLS_DEBUG_C)
  528. mbedtls_debug_set_threshold(DEBUG_LEVEL);
  529. mbedtls_ssl_conf_dbg(&conf, MBEDTLS_Debug, NULL);
  530. #endif
  531. // 1. Load the certificates and private RSA key
  532. mbedtls_printf( "\r\n . Loading the server cert. and key..." );
  533. ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) sSettings.our_srv_crt,
  534. (strlen(sSettings.our_srv_crt) + 1) );//mbedtls_test_srv_crtmbedtls_test_srv_crt_len
  535. if ( ret != 0 ) {
  536. mbedtls_printf( " failed\r\n ! mbedtls_x509_crt_parse returned %d\r\n", ret );
  537. ssl_state = SSL_CRITICAL_ERROR;
  538. }
  539. ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_srv_key, mbedtls_test_srv_key_len, NULL, 0 );
  540. if ( ret != 0 ) {
  541. mbedtls_printf( " failed\r\n ! mbedtls_pk_parse_key returned %d\r\n", ret );
  542. ssl_state = SSL_CRITICAL_ERROR;
  543. }
  544. mbedtls_printf( " ok\r\n" );
  545. // 2. Setup the listening TCP socket
  546. mbedtls_printf( " . Bind on https://localhost:443/ ..." );
  547. if ((ret = mbedtls_net_bind(&listen_fd, NULL, "443", MBEDTLS_NET_PROTO_TCP )) != 0) {
  548. mbedtls_printf( " failed\n ! mbedtls_net_bind returned %d\r\n", ret );
  549. ssl_state = SSL_CRITICAL_ERROR;
  550. }
  551. mbedtls_printf( " ok\r\n" );
  552. // 3. Seed the RNG
  553. mbedtls_printf( " . Seeding the random number generator..." );
  554. if ((ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, (const unsigned char *) pers,
  555. strlen( (char *)pers))) != 0) {
  556. mbedtls_printf( " failed\r\n ! mbedtls_ctr_drbg_seed returned %d\r\n", ret );
  557. ssl_state = SSL_CRITICAL_ERROR;
  558. }
  559. mbedtls_printf( " ok\r\n" );
  560. // 4. Setup stuff
  561. mbedtls_printf( " . Setting up the SSL data...." );
  562. if ( ( ret = mbedtls_ssl_config_defaults(&conf, MBEDTLS_SSL_IS_SERVER, MBEDTLS_SSL_TRANSPORT_STREAM,
  563. MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
  564. mbedtls_printf( " failed\r\n ! mbedtls_ssl_config_defaults returned %d\r\n", ret );
  565. ssl_state = SSL_CRITICAL_ERROR;
  566. }
  567. mbedtls_ssl_conf_rng(&conf, mbedtls_ctr_drbg_random, &ctr_drbg);
  568. mbedtls_ssl_conf_ca_chain(&conf, srvcert.next, NULL);
  569. if ( ( ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, &pkey ) ) != 0) {
  570. mbedtls_printf( " failed\r\n ! mbedtls_ssl_conf_own_cert returned %d\r\n", ret );
  571. ssl_state = SSL_CRITICAL_ERROR;
  572. }
  573. if ( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 ) {
  574. mbedtls_printf( " failed\r\n ! mbedtls_ssl_setup returned %d\r\n", ret );
  575. ssl_state = SSL_CRITICAL_ERROR;
  576. }
  577. mbedtls_printf( " ok\r\n" );
  578. for (;;) {
  579. switch (ssl_state) {
  580. case SSL_ACCEPT :
  581. mbedtls_ssl_session_reset( &ssl );
  582. mbedtls_printf( " . Waiting for a remote connection ...\r\n" );
  583. if ((ret = mbedtls_net_accept(&listen_fd, &client_fd, NULL, 0, NULL)) != 0) {
  584. mbedtls_printf( " failed\r\n ! mbedtls_net_accept returned %d\r\n", ret );
  585. ssl_state = SSL_ERROR;
  586. } else {
  587. mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv, NULL );//mbedtls_net_recv
  588. mbedtls_printf( " ok\r\n" );
  589. ssl_state = SSL_HANDSHAKE;
  590. }
  591. break;
  592. case SSL_HANDSHAKE :
  593. mbedtls_printf( " . Performing the SSL/TLS handshake..." );
  594. while ( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) {
  595. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  596. mbedtls_printf( " failed\r\n ! mbedtls_ssl_handshake returned %d\r\n", ret );
  597. ssl_state = SSL_ERROR;
  598. break;
  599. }
  600. }
  601. if (ret != 0) {
  602. ssl_state = SSL_ERROR;
  603. } else {
  604. mbedtls_printf( " ok\r\n" );
  605. ssl_state = SSL_READ;
  606. }
  607. break;
  608. case SSL_READ :
  609. //printf("SSL_READ\r\n");
  610. if (SSL_ReadRoutine(&ssl, (unsigned char *)receiveBuf) <= 0) {
  611. ssl_state = SSL_ERROR;
  612. } else {
  613. ssl_state = SSL_PROCESSING;
  614. }
  615. break;
  616. case SSL_PROCESSING :
  617. //printf("SSL_PROCESSING\r\n");
  618. sendPtr = SSL_ProcessingRoutine(&sendBufLoadLen);
  619. if (sendPtr) {
  620. ssl_state = SSL_WRITE;
  621. } else {
  622. ssl_state = SSL_ACCEPT;
  623. }
  624. break;
  625. case SSL_WRITE :
  626. //printf("SSL_WRITE\r\n");
  627. SSL_WriteRoutine(&ssl, sendPtr, sendBufLoadLen);
  628. ssl_state = SSL_CLOSE;
  629. break;
  630. case SSL_CLOSE :
  631. //printf("SSL_CLOSE\r\n");
  632. mbedtls_ssl_close_notify(&ssl);
  633. mbedtls_net_free(&client_fd);
  634. //mbedtls_ssl_free( &ssl );
  635. ssl_state = SSL_ACCEPT;
  636. break;
  637. case SSL_ERROR :
  638. //printf("SSL_ERROR\r\n");
  639. //mbedtls_net_free(&client_fd);
  640. //mbedtls_ssl_free( &ssl );
  641. mbedtls_ssl_close_notify(&ssl);
  642. mbedtls_net_free(&client_fd);
  643. ssl_state = SSL_ACCEPT;
  644. break;
  645. case SSL_CRITICAL_ERROR:
  646. //printf("SSL_CRITICAL_ERROR\r\n");
  647. mbedtls_x509_crt_free( &srvcert );
  648. mbedtls_pk_free( &pkey );
  649. mbedtls_ssl_free( &ssl );
  650. mbedtls_ssl_config_free( &conf );
  651. mbedtls_ctr_drbg_free( &ctr_drbg );
  652. mbedtls_entropy_free( &entropy );
  653. vTaskDelete(NULL);
  654. break;
  655. }
  656. }
  657. }
  658. /**
  659. * @brief Initialize the HTTPS server (start its thread)
  660. */
  661. void HTTPS_Init()
  662. {
  663. char buf[MAX_WEB_COOKIE_LEN];
  664. uint8_t user_id;
  665. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  666. // Flush user cookie by random value
  667. sprintf(buf, "%X", (unsigned int)GetRandomNumber());
  668. HTTP_SetUserCookie(buf, user_id);
  669. // Create user logout timers
  670. users[user_id].LogoutTimer = xTimerCreate("LogoutTmr", WEB_LOGOUT_TIME, pdFALSE, ( void * ) user_id,
  671. LogoutTimerCallback);
  672. }
  673. RepeatLoginTimer = xTimerCreate("LoginTmr", REPEAT_LOGIN_TIME, pdFALSE, ( void * ) 0, LoginTimerCallback);
  674. }
  675. //
  676. int SSL_ReadRoutine(mbedtls_ssl_context *ssl, unsigned char *recvBuf)
  677. {
  678. int ret;
  679. mbedtls_printf( " < Read from client:" );
  680. do {
  681. receivedBufLen = RECIVE_BUF_MAX_LEN - 1;
  682. memset(recvBuf, 0, RECIVE_BUF_MAX_LEN);
  683. ret = mbedtls_ssl_read(ssl, receiveBuf, receivedBufLen);
  684. if ( ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE ) {
  685. continue;
  686. }
  687. if ( ret <= 0 ) {
  688. switch ( ret ) {
  689. case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
  690. mbedtls_printf( " connection was closed gracefully\r\n" );
  691. break;
  692. case MBEDTLS_ERR_NET_CONN_RESET:
  693. mbedtls_printf( " connection was reset by peer\r\n" );
  694. break;
  695. default:
  696. mbedtls_printf( "mbedtls_ssl_read returned -0x%x\r\n", -ret );
  697. break;
  698. }
  699. return ret;
  700. }
  701. receivedBufLen = ret;
  702. } while (0);
  703. }
  704. //
  705. SSL_SERVER_STATE SSL_WriteRoutine(mbedtls_ssl_context *ssl, char *data, int datalen)
  706. {
  707. return SSL_SendFrames(ssl, data, datalen);
  708. }
  709. //
  710. char *SSL_ProcessingRoutine(uint16_t *sendLen)
  711. {
  712. web_func_handler_t *h;
  713. getAuthenticatedState();
  714. if ( Authenticated == false && sSettings.sRADIUS.Auth_enable == false) {
  715. HTTP_LOGIN(sendBuf, sendLen);
  716. return sendBuf;
  717. }
  718. for (h = &process_web_funcs[0]; h->handler; h++) {
  719. if (strncmp(receiveBuf, h->client_req, h->len) == 0) {
  720. #ifdef HTTP_AUTH_ENABLE
  721. if (h->accsess == TIME_ACCESS && !Authenticated) {
  722. strcpy(sendBuf, HTTP_401_NO_AUTH);
  723. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false))
  724. strcat(sendBuf,
  725. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/rslogin.html\"/></head></html>\r\n");
  726. else
  727. strcat(sendBuf,
  728. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/login.html\"/></head></html>\r\n");
  729. *sendLen = strlen(sendBuf);
  730. return sendBuf;
  731. }
  732. #endif
  733. return h->handler(0, receiveBuf, sendBuf, receivedBufLen, sendLen);
  734. }
  735. }
  736. }
  737. #define FRAME_SIZE (1000)
  738. SSL_SERVER_STATE SSL_SendFrames(mbedtls_ssl_context *ssl, char *data, int datalen)
  739. {
  740. SSL_SERVER_STATE ret;
  741. int retClose;
  742. int index = 0;
  743. int k = 0;
  744. int lastframe, nbrframes;
  745. nbrframes = datalen / FRAME_SIZE;
  746. while (nbrframes > 0) {
  747. index = k * FRAME_SIZE;
  748. if (SSL_Write(ssl, (data + index), FRAME_SIZE ) == SSL_WRITE_ERROR) {
  749. return SSL_WRITE_ERROR;
  750. }
  751. nbrframes--;
  752. k++;
  753. }
  754. index = k * FRAME_SIZE;
  755. lastframe = datalen % FRAME_SIZE ;
  756. if (SSL_Write(ssl, (data + index), lastframe ) == SSL_WRITE_ERROR) {
  757. return SSL_WRITE_ERROR;
  758. }
  759. return SSL_WRITE_OK;
  760. }
  761. SSL_SERVER_STATE SSL_Write(mbedtls_ssl_context *ssl, char *data, int datalen)
  762. {
  763. int ret;
  764. mbedtls_printf( " > Write to client:" );
  765. while ( ( ret = mbedtls_ssl_write(ssl, data, datalen) ) <= 0 ) {
  766. if ( ret == MBEDTLS_ERR_NET_CONN_RESET ) {
  767. mbedtls_printf( " failed\r\n ! peer closed the connection\r\n" );
  768. return SSL_WRITE_ERROR;
  769. }
  770. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  771. mbedtls_printf( " failed\r\n ! mbedtls_ssl_write returned %d\r\n", ret );
  772. return SSL_WRITE_ERROR;
  773. }
  774. }
  775. mbedtls_printf( " %d bytes written\r\n", ret);
  776. return SSL_WRITE_OK;
  777. }
  778. char *HTTP_HistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  779. {
  780. uint8_t valueLen = 0;
  781. char value[20];
  782. (void)reqNum;
  783. (void)lenBufIn;
  784. (void)reqNum;
  785. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  786. ClearParamString(bufIn);
  787. memset(value, 0, 20);
  788. GetParamValue(bufIn, "page=", value, &valueLen);
  789. if (strcmp(value, "all") == 0) {
  790. if (!LOG_IsInit()) {
  791. return 0;
  792. }
  793. if (fLogTransInprog == false) {
  794. // Send log as raw data
  795. log_ptr = 0;
  796. log_size = History_GetTotalSTRCount() * STRING_SIZE_HISTORY + sizeof(UTF8_BOM) - 1;
  797. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  798. *lenBufOut = strlen(bufOut);
  799. // Set file transfer in progress flag
  800. fLogTransInprog = true;
  801. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  802. return 0;
  803. }
  804. HTTP_SendHistory();
  805. return 0;
  806. } else {
  807. // We send nothing if file transfer already in progress
  808. return 0;
  809. }
  810. } else {
  811. if (!LOG_IsInit()) {
  812. return 0;
  813. } else {
  814. HTTP_GetHistoryPage(bufOut, atoi(value));
  815. *lenBufOut = strlen(bufOut);
  816. return bufOut;
  817. }
  818. }
  819. }
  820. char *HTTP_UpsHistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  821. {
  822. uint8_t valueLen = 0;
  823. char value[20];
  824. (void)lenBufIn;
  825. (void)reqNum;
  826. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  827. ClearParamString(bufIn);
  828. memset(value, 0, 20);
  829. GetParamValue(bufIn, "page=", value, &valueLen);
  830. if (strcmp(value, "all") == 0) {
  831. if (!LOG_IsInit()) {
  832. return 0;
  833. }
  834. if (fLogTransInprog == false) {
  835. // Send log as raw data
  836. log_ptr = 0;
  837. log_size = LOG_GetTotalSTRCount() * STRING_SIZE + sizeof(UTF8_BOM) - 1;
  838. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  839. *lenBufOut = strlen(bufOut);
  840. // Set file transfer in progress flag
  841. fLogTransInprog = true;
  842. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  843. return 0;
  844. }
  845. HTTP_SendLog();
  846. return 0;
  847. } else {
  848. // We send nothing if file transfer already in progress
  849. return 0;
  850. }
  851. } else {
  852. if (!LOG_IsInit()) {
  853. return 0;
  854. } else {
  855. HTTP_GetUpsHistoryPage(bufOut, atoi(value));
  856. *lenBufOut = strlen(bufOut);
  857. return bufOut;
  858. }
  859. }
  860. }
  861. /**
  862. * @brief Установка даты производства
  863. */
  864. // TODO Убрать заглушку!
  865. void HTTP_Prodate(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  866. {
  867. uint8_t valueLen = 0;
  868. char value[20];
  869. (void)lenBufIn;
  870. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  871. ClearParamString(bufIn);
  872. memset(value, 0, 20);
  873. GetParamValue(bufIn, "prodate=", value, &valueLen);
  874. /*
  875. printf("Prodate: ");
  876. printf(value);
  877. printf("\r\n");
  878. */
  879. /* Устанавливаем дату производства */
  880. SETTINGS_SetProDate(value, valueLen);
  881. /* Пока отправляем true */
  882. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\n\r\nTrue");
  883. *lenBufOut = strlen(bufOut);
  884. TEST_SetServerFlag();
  885. }
  886. /**
  887. * @brief
  888. * @retval None
  889. */
  890. char *HTTP_SetSettingsPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  891. {
  892. char *DataOffset;
  893. (void)reqNum;
  894. if (seclevel == USER) {
  895. return 0;
  896. }
  897. DataOffset = 0;
  898. // POST Packet received
  899. TotalReceived = 0;
  900. TotalData = 0;
  901. memset(bufOut, 0, strlen(bufOut));
  902. // parse packet for Content-length field
  903. size = Parse_Content_Length(bufIn, lenBufIn);
  904. DataOffset = strstr(bufIn, "managerIP");
  905. // case of MSIE8 : we do not receive data in the POST packet
  906. if (DataOffset == 0) {
  907. SSL_ReadRoutine(&ssl, bufIn);
  908. DataOffset = strstr(bufIn, "managerIP");
  909. }
  910. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  911. TotalData += TotalReceived;
  912. strncat(bufOut, DataOffset, TotalReceived);
  913. for (int i = TotalData; i < size; i ++) {
  914. SSL_ReadRoutine(&ssl, bufIn);
  915. strncat(sendBuf, bufIn, receivedBufLen);
  916. TotalData += receivedBufLen;
  917. }
  918. // check if last data packet
  919. if (TotalData == size) {
  920. DBG printf("State: Received %u bytes\r\n", (unsigned int)TotalData);
  921. // printf("receive %s \r\n", sendBuf);
  922. strncat(bufOut, " ", 1);
  923. HTTP_SetSettings(bufOut, strlen(sendBuf));
  924. memset(sendBuf, 0, size);
  925. strcpy(bufOut, HTTP_200_OK);
  926. strcat(bufOut,
  927. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/settings.html\"/></head></html>\r\n");
  928. *lenBufOut = strlen(bufOut);
  929. return bufOut;
  930. }
  931. return 0;
  932. }
  933. /**
  934. * @brief
  935. * @retval None
  936. */
  937. void HTTP_SetSettings(char *buf, uint16_t lenBuf)
  938. {
  939. uint8_t valueLen = 0;
  940. const uint8_t len = MAX_WEB_PARAM_LEN;
  941. char value[MAX_WEB_PARAM_LEN];
  942. (void)lenBuf;
  943. //printf(buf);
  944. //ClearParamString(buf);
  945. #define XJSON_SETTINGS_TAG(tag, get_param, set_param) JSON_SET_PARAM(tag, set_param, buf);
  946. WEB_SETTINGS_TAGS_TABLE
  947. #undef XJSON_SETTINGS_CREATE
  948. /* Если параметры WEB изменились выставляем флаг, сохраняем настройки и перезагружаемся */
  949. if (GetStateWebReinit() == true) {
  950. SetWebReinitFlag(true);
  951. HTTP_SaveSettings();
  952. /* Блокируем управление ключем на тау секунд*/
  953. //IO_KeyBlockOn();
  954. vTaskDelay(1010);
  955. Reboot(WEB_ACT);
  956. }
  957. HTTP_SaveSettings();
  958. }
  959. /**
  960. * @brief
  961. * @retval None
  962. */
  963. char *HTTP_GetSert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  964. {
  965. (void)bufIn;
  966. (void)lenBufIn;
  967. (void)reqNum;
  968. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  969. strcpy(bufOut, HTTP_200_OK);
  970. SSL_CreateReqCert();
  971. strncpy(bufOut, req_cert, strlen(req_cert));
  972. *lenBufOut = strlen(bufOut);
  973. return bufOut;
  974. }
  975. /**
  976. * @brief
  977. * @retval None
  978. */
  979. char *HTTP_Upload_Sert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  980. {
  981. char *DataOffset;
  982. static char boundary[70];
  983. static char *pbound = NULL;
  984. char *ContentOffset = 0;
  985. (void)reqNum;
  986. DataOffset = 0;
  987. TotalData = 0;
  988. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  989. //printf("receive %s \r\n", receiveBuf);
  990. // parse packet for Content-length field
  991. size = Parse_Content_Length(bufIn, lenBufIn);
  992. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  993. if (pbound != NULL) {
  994. ContentOffset = strstr(bufIn, boundary);
  995. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  996. if ( DataOffset != NULL ) {
  997. DataOffset += 4;
  998. }
  999. } else {
  1000. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1001. bufIn[receivedBufLen] = '\0';
  1002. lenBufIn = receivedBufLen;
  1003. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1004. if (pbound != NULL) {
  1005. ContentOffset = strstr(bufIn, boundary);
  1006. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1007. if ( DataOffset != NULL ) {
  1008. DataOffset += 4;
  1009. }
  1010. }
  1011. }
  1012. // case of MSIE8 : we do not receive data in the POST packet
  1013. if (DataOffset == NULL) {
  1014. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1015. bufIn[receivedBufLen] = '\0';
  1016. lenBufIn = receivedBufLen;
  1017. //printf("receive2 %s \r\n", bufIn);
  1018. ContentOffset = strstr(bufIn, boundary);
  1019. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1020. if ( DataOffset != NULL ) {
  1021. DataOffset += 4;
  1022. }
  1023. }
  1024. TotalReceived = lenBufIn - (uint32_t)(ContentOffset - bufIn);
  1025. TotalData += TotalReceived;
  1026. strncat(bufOut, DataOffset, TotalReceived);
  1027. while (TotalData < size) {
  1028. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1029. bufIn[receivedBufLen] = '\0';
  1030. //printf("receive3 %s \r\n", receiveBuf);
  1031. strncat(bufOut, bufIn, lenBufIn);
  1032. TotalData += lenBufIn;
  1033. //printf("TotalData %d \r\n", TotalData);
  1034. /*printf("receivedBufLen %d \r\n", receivedBufLen);
  1035. printf("TotalData %d \r\n", TotalData);
  1036. printf("size %d \r\n", size);
  1037. printf("receive3 %s \r\n", (receiveBuf+receivedBufLen - 30));*/
  1038. }
  1039. //printf("TotalData %d \r\n", TotalData);
  1040. // check if last data packet
  1041. if (TotalData == size) {
  1042. // printf("receive %s \r\n", sendBuf);
  1043. if (strstr(bufOut, "BEGIN CERTIFICATE") != NULL) {
  1044. DataOffset = strstr(bufOut, "-----END CERTIFICATE");
  1045. uint32_t len_crt = (uint32_t)(DataOffset - bufOut) + 25;
  1046. memset(sSettings.our_srv_crt, 0, sizeof(sSettings.our_srv_crt));
  1047. memcpy(sSettings.our_srv_crt, bufOut, len_crt);
  1048. strcat(bufOut, "\r\n");
  1049. HTTP_SaveSettings();
  1050. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1051. strcpy(bufOut, HTTP_200_OK);
  1052. strcat(bufOut, "1");
  1053. } else {
  1054. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1055. strcpy(bufOut, HTTP_200_OK);
  1056. strcat(bufOut, "Некорректный сертефикат");
  1057. }
  1058. *lenBufOut = strlen(bufOut);
  1059. return bufOut;
  1060. }
  1061. return 0;
  1062. }
  1063. /**
  1064. * @brief
  1065. * @retval None
  1066. */
  1067. char *HTTP_SetInfoPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1068. {
  1069. char *DataOffset;
  1070. (void)reqNum;
  1071. if (seclevel == USER) {
  1072. return 0;
  1073. }
  1074. DataOffset = 0;
  1075. // POST Packet received{
  1076. TotalReceived = 0;
  1077. TotalData = 0;
  1078. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1079. // parse packet for Content-length field
  1080. size = Parse_Content_Length(bufIn, lenBufIn);
  1081. DataOffset = strstr(bufIn, "sysname");
  1082. // case of MSIE8 : we do not receive data in the POST packet
  1083. if (DataOffset == 0) {
  1084. SSL_ReadRoutine(&ssl, bufIn);
  1085. DataOffset = strstr(bufIn, "sysname");
  1086. }
  1087. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  1088. TotalData += TotalReceived;
  1089. strncat(bufOut, DataOffset, TotalReceived);
  1090. // check if last data packet
  1091. if (TotalData == size) {
  1092. strncat(bufOut, " ", 1);
  1093. HTTP_SetInfo(bufOut, strlen(bufOut));
  1094. memset(bufOut, 0, size);
  1095. strcpy(bufOut, HTTP_200_OK);
  1096. strcat(bufOut,
  1097. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/info.html\"/></head></html>\r\n\r\n");
  1098. *lenBufOut = strlen(bufOut);
  1099. return bufOut;
  1100. }
  1101. return 0;
  1102. }
  1103. /**
  1104. * @brief
  1105. * @retval None
  1106. */
  1107. void HTTP_SetInfo(char *buf, uint16_t lenBuf)
  1108. {
  1109. uint8_t valueLen = 0;
  1110. const uint8_t len = 110;
  1111. char value[330];
  1112. char str[110];
  1113. (void)lenBuf;
  1114. // ClearParamString(buf);
  1115. memset(value, 0, len);
  1116. /* Название устройства */
  1117. GetParamValue(buf, "sysname=", value, &valueLen);
  1118. url_decode(str, sizeof(str), value);
  1119. SetNameDeviceStr(str);
  1120. memset(value, 0, len);
  1121. /* Владелец */
  1122. GetParamValue(buf, "owner=", value, &valueLen);
  1123. url_decode(str, sizeof(str), value);
  1124. SetOwner(str);
  1125. memset(value, 0, len);
  1126. /* Владелец */
  1127. GetParamValue(buf, "sysLocation=", value, &valueLen);
  1128. url_decode(str, sizeof(str), value);
  1129. SetLocation(str);
  1130. memset(value, 0, len);
  1131. /* Комментарий */
  1132. GetParamValue(buf, "comment=", value, &valueLen);
  1133. url_decode(str, sizeof(str), value);
  1134. SetComment(str);
  1135. memset(value, 0, len);
  1136. HTTP_SaveSettings();
  1137. }
  1138. /**
  1139. * @brief Запуск/останов теста UPS
  1140. */
  1141. char *HTTP_UPSTest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1142. {
  1143. uint8_t valueLen = 0;
  1144. char tempValue[20];
  1145. char tempValue2[20];
  1146. int8_t res = 0;
  1147. char log_string[50];
  1148. (void)lenBufIn;
  1149. (void)reqNum;
  1150. memset(tempValue, 0, 20);
  1151. memset(tempValue2, 0, 20);
  1152. memset(log_string, 0, 50);
  1153. strcpy(bufOut, HTTP_200_OK);
  1154. GetParamValue(bufIn, "func=", tempValue, &valueLen);
  1155. if (strcmp(tempValue, "stop") == 0) {
  1156. res = ups_metac_service_pdu(ups_cancel_test);
  1157. if (res == 1 || res == 0) {
  1158. strcat(bufOut, "Команда \"Останов теста\" принята ИБП!");
  1159. strcpy(log_string, name_login);
  1160. strcat(log_string, " (Останов)");
  1161. log_event_data(LOG_TEST_UPS, log_string);
  1162. }
  1163. if (res == -1) {
  1164. strcat(bufOut, "Команда \"Останов теста\" отклонена ИБП!");
  1165. }
  1166. } else if (strcmp(tempValue, "discharge") == 0) {
  1167. res = ups_metac_service_pdu(ups_test_low_bat);
  1168. set_act_source(WEB_ACT);
  1169. if (res == 1 || res == 0) {
  1170. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1171. }
  1172. if (res == -1) {
  1173. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1174. }
  1175. } else if (strncmp(tempValue, "time", 6) == 0) {
  1176. GetParamValue(bufIn, "=", tempValue2, &valueLen);
  1177. TimeParam = atoi(tempValue2);
  1178. res = ups_metac_service_pdu(ups_test_time);
  1179. if (res == 1 || res == 0) {
  1180. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1181. }
  1182. if (res == -1) {
  1183. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1184. }
  1185. }
  1186. *lenBufOut = strlen(bufOut);
  1187. return bufOut;
  1188. }
  1189. /**
  1190. * @brief Выклюение UPS
  1191. */
  1192. char *HTTP_UPSshutdown(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1193. {
  1194. uint8_t valueLen = 0;
  1195. char *valueLenEnd = 0;
  1196. char tempValue[50];
  1197. char tempValue2[50];
  1198. int8_t res = 0;
  1199. char log_string[50];
  1200. (void)lenBufIn;
  1201. (void)reqNum;
  1202. memset(tempValue, 0, 50);
  1203. memset(log_string, 0, 50);
  1204. strcpy(bufOut, HTTP_200_OK);
  1205. GetParamValue(bufIn, "func=", tempValue, &valueLen);
  1206. if (strcmp(tempValue, "reboot") == 0) {
  1207. res = ups_metac_service_pdu(ups_cancel_shut_down);
  1208. if (res == 1) {
  1209. strcpy(log_string, name_login);
  1210. strcat(log_string, " (Останов)");
  1211. log_event_data(LOG_SHUTDOWN_UPS, log_string);
  1212. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" принята ИБП!");
  1213. } else {
  1214. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" отклонена ИБП!");
  1215. }
  1216. } else if (strncmp(tempValue, "off", 5) == 0) {
  1217. memset(tempValue2, 0, 50);
  1218. GetParamValue(bufIn, "after=", tempValue2, &valueLen);
  1219. TimeParamFloat = atof(tempValue2);
  1220. res = ups_metac_service_pdu(ups_shutdown);
  1221. if (res == 1) {
  1222. strcat(bufOut, "Команда \"Отключения нагрузки\" принята ИБП!");
  1223. log_event_data(LOG_SHUTDOWN_UPS, name_login);
  1224. } else {
  1225. strcat(bufOut, "Команда \"Отключения нагрузки\" отклонена ИБП!");
  1226. }
  1227. }
  1228. *lenBufOut = strlen(bufOut);
  1229. return bufOut;
  1230. }
  1231. char *HTTP_Reset(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1232. {
  1233. (void)bufIn;
  1234. (void)bufOut;
  1235. (void)lenBufIn;
  1236. (void)reqNum;
  1237. HTTP_ResetSettings();
  1238. HTTP_SaveSettings();
  1239. fs_open("/settings.html", &file);
  1240. *lenBufOut = file.len;
  1241. return file.data;
  1242. }
  1243. char *HTTP_Confirm(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1244. {
  1245. (void)bufIn;
  1246. (void)bufOut;
  1247. (void)lenBufIn;
  1248. (void)reqNum;
  1249. SetWebReinitFlag(false);
  1250. SetConfirmWebParamsFlag();
  1251. fs_open("/index.html", &file);
  1252. *lenBufOut = file.len;
  1253. return file.data;
  1254. }
  1255. char *HTTP_GetRequest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1256. {
  1257. (void)bufOut;
  1258. (void)reqNum;
  1259. #ifdef HTTP_AUTH_ENABLE
  1260. const char *html_page_name[] = {
  1261. "/main.css",
  1262. "/rotek.png",
  1263. "/favicon.ico",
  1264. "/role.js"
  1265. };
  1266. #endif
  1267. char filename[MAX_FILENAME_LEN];
  1268. char nonmatch[MAX_ETAG_LEN];
  1269. char *pnonmatch = NULL;
  1270. uint8_t len;
  1271. memset(filename, 0, MAX_FILENAME_LEN);
  1272. if (GetFileName(bufIn, filename, &len)) {
  1273. /* Parce If-Non_Match value */
  1274. #ifdef HTTP_AUTH_ENABLE
  1275. if (!Authenticated) {
  1276. for (uint8_t i = 0; i < 4; i ++) {
  1277. if (strcmp(filename, html_page_name[i]) == 0) {
  1278. break;
  1279. }
  1280. if (i == 3) {
  1281. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1282. strcpy(filename, "/rslogin.html");
  1283. } else {
  1284. strcpy(filename, "/login.html");
  1285. }
  1286. }
  1287. }
  1288. } else {
  1289. HTTP_UpdateUserLoginTime(user_id);
  1290. }
  1291. #endif
  1292. uint8_t nonmatch_len = Parse_Header(bufIn, lenBufIn, If_None_Match, 15, nonmatch);
  1293. if (nonmatch_len < MAX_ETAG_LEN && nonmatch_len > 0) {
  1294. //DBG printf("If_None_Match: %s\r\n", nonmatch);
  1295. pnonmatch = nonmatch;
  1296. }
  1297. return send_file(filename, pnonmatch, &file, lenBufOut);
  1298. }
  1299. return 0;
  1300. }
  1301. char* HTTP_NoFound(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1302. {
  1303. (void)bufIn;
  1304. (void)bufOut;
  1305. (void)lenBufIn;
  1306. (void)reqNum;
  1307. #ifdef HTTP_AUTH_ENABLE
  1308. HTTP_UpdateUserLoginTime(user_id);
  1309. #endif
  1310. fs_open("/index.html", &file); // +
  1311. *lenBufOut = file.len;
  1312. return file.data;
  1313. }
  1314. /**
  1315. * @brief Проверка пароля для перехода в режим bootloader
  1316. * @retval None
  1317. */
  1318. char *HTTP_ConfirmBootPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1319. {
  1320. (void)bufIn;
  1321. (void)lenBufIn;
  1322. (void)reqNum;
  1323. strcpy(bufOut, HTTP_200_OK);
  1324. *lenBufOut = strlen(bufOut);
  1325. /* Запускаем задачу отложенной перезагрузки. Контроллер должен успеть
  1326. отправить ответ серверу о статусе пароля */
  1327. HTTP_StartResetTask(true);
  1328. return bufOut;
  1329. }
  1330. #ifdef HTTP_AUTH_ENABLE
  1331. void LoginTimerCallback(TimerHandle_t pxTimer)
  1332. {
  1333. cnt_err_psw = 0;
  1334. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1335. xTimerStop(RepeatLoginTimer, 0);
  1336. }
  1337. /**
  1338. * @brief Проверка пароля для входа в Web
  1339. * @retval None
  1340. */
  1341. int HTTP_ConfirmWebPwd(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1342. {
  1343. char tempStr[50];
  1344. char login[20];
  1345. char password[20];
  1346. uint8_t valueLen, user_id = 0xff;
  1347. char *strPtr = 0;
  1348. char WebPassword[MAX_WEB_PASSWD_LEN];
  1349. char WebLogin[MAX_WEB_LOGIN_LEN];
  1350. memset(login, 0, 20);
  1351. memset(password, 0, 20);
  1352. memset(tempStr, 0, 50);
  1353. memset(name_login, 0, 50);
  1354. /* Get first 50 bytes of string */
  1355. strncpy(tempStr, bufIn, 49);
  1356. /* Add " " to the string in order GetParamValue() can be able to parse the param */
  1357. strcat(tempStr, " ");
  1358. GetParamValue(tempStr, "login=", login, &valueLen);
  1359. GetParamValue(tempStr, "password=", password, &valueLen);
  1360. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1361. switch (RC_Login(login, password)) {
  1362. case RC_ERROR:
  1363. Authenticated = false;
  1364. break;
  1365. case RC_LOGIN_ADMIN_OK:
  1366. Authenticated = true;
  1367. user_id = 0;
  1368. break;
  1369. case RC_LOGIN_USER_OK:
  1370. Authenticated = true;
  1371. user_id = 1;
  1372. break;
  1373. case RC_NET_ERR:
  1374. Authenticated = false;
  1375. fl_raddius_net_err = true;
  1376. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1377. strcat(bufOut,
  1378. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Ошибка соединения с RADIUS сервером</h2></center></html>");
  1379. *lenBufOut = strlen(bufOut);
  1380. return SEND_REQUIRED_NO;
  1381. break;
  1382. case RC_ACC_DENIED:
  1383. Authenticated = false;
  1384. break;
  1385. default:
  1386. break;
  1387. }
  1388. } else {
  1389. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1390. GetUserLogin(user_id, WebLogin, &valueLen);
  1391. GetUserPassword(user_id, WebPassword, &valueLen);
  1392. /* Check login and password */
  1393. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1394. (strncmp(WebPassword, password, MAX_WEB_PASSWD_LEN) == 0)) {
  1395. /* Login and pass are valid */
  1396. /* TODO replace global flag with user-pass-cookie */
  1397. if (cnt_err_psw < 4) {
  1398. cnt_err_psw = 0;
  1399. Authenticated = true;
  1400. } else {
  1401. Authenticated = false;
  1402. }
  1403. break;
  1404. } else {
  1405. Authenticated = false;
  1406. }
  1407. }
  1408. }
  1409. if (Authenticated) {
  1410. /* Generate cookie */
  1411. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1412. /* Set users cookie */
  1413. HTTP_SetUserCookie(tempStr, user_id);
  1414. HTTP_UpdateUserLoginTime(user_id);
  1415. /* Send login and cookie back */
  1416. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1417. strcat(bufOut, login);
  1418. strcat(bufOut, "\r\nSet-Cookie: id=");
  1419. strcat(bufOut, tempStr);
  1420. sprintf(tempStr, "%d", (user_id + 1));
  1421. strcat(bufOut, "\r\nSet-Cookie: role=");
  1422. strcat(bufOut, tempStr);
  1423. strcat(bufOut, "\r\nSet-Cookie: auth=1");
  1424. strcat(bufOut, "\r\n\r\n");
  1425. strcat(bufOut,
  1426. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1427. *lenBufOut = strlen(bufOut);
  1428. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1429. snprintf(name_login, (strlen(login) + 1), login);
  1430. } else {
  1431. fl_raddius_net_err = false;
  1432. switch (user_id) {
  1433. case 0:
  1434. snprintf(name_login, sizeof(name_login), "Администратор");
  1435. break;
  1436. case 1:
  1437. snprintf(name_login, sizeof(name_login), "Пользователь");
  1438. break;
  1439. default:
  1440. snprintf(name_login, (strlen(login) + 1), login);
  1441. break;
  1442. }
  1443. }
  1444. log_event_data(LOG_LOGIN, name_login);
  1445. /* Запускаем задачу-таймер логаута. */
  1446. /* TODO отправить ответ серверу о статусе пароля */
  1447. return SEND_REQUIRED_YES;
  1448. } else {
  1449. if (cnt_err_psw <= 4) {
  1450. cnt_err_psw ++;
  1451. }
  1452. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1453. if (cnt_err_psw == 4) {
  1454. xTimerStart(RepeatLoginTimer, 0);
  1455. }
  1456. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1457. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1458. if (cnt_err_psw < 4) {
  1459. strcat(bufOut,
  1460. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1461. } else {
  1462. strcat(bufOut,
  1463. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1464. }
  1465. } else {
  1466. if (cnt_err_psw < 4) {
  1467. strcat(bufOut,
  1468. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1469. } else {
  1470. strcat(bufOut,
  1471. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1472. }
  1473. }
  1474. *lenBufOut = strlen(bufOut);
  1475. return SEND_REQUIRED_NO;
  1476. }
  1477. }
  1478. void HTTP_LOGIN(char *bufOut, uint16_t *lenBufOut)
  1479. {
  1480. char tempStr[50];
  1481. uint8_t valueLen;
  1482. char WebLogin[MAX_WEB_LOGIN_LEN];
  1483. GetUserLogin(ADMIN, WebLogin, &valueLen);
  1484. memset(tempStr, 0, 50);
  1485. memset(name_login, 0, 50);
  1486. /* TODO replace global flag with user-pass-cookie */
  1487. Authenticated = true;
  1488. /* Generate cookie */
  1489. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1490. /* Set users cookie */
  1491. HTTP_SetUserCookie(tempStr, ADMIN);
  1492. HTTP_UpdateUserLoginTime(ADMIN);
  1493. /* Send login and cookie back */
  1494. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1495. strcat(bufOut, WebLogin);
  1496. strcat(bufOut, "\r\nSet-Cookie: id=");
  1497. strcat(bufOut, tempStr);
  1498. strcat(bufOut, "\r\nSet-Cookie: role=0");
  1499. strcat(bufOut, "\r\nSet-Cookie: auth=0");
  1500. strcat(bufOut, "\r\n\r\n");
  1501. strcat(bufOut,
  1502. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1503. *lenBufOut = strlen(bufOut);
  1504. snprintf(name_login, sizeof(name_login), "Администратор");
  1505. }
  1506. /**
  1507. * @brief Чтение Cookie пользователя
  1508. */
  1509. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len)
  1510. {
  1511. sprintf(str, "%s", users[user_id].cookie);
  1512. *len = strlen(str);
  1513. }
  1514. /**
  1515. * @brief Установка Cookie пользователя
  1516. */
  1517. static void HTTP_SetUserCookie(char *str, uint8_t user_id)
  1518. {
  1519. strcpy(users[user_id].cookie, str);
  1520. }
  1521. /**
  1522. * @brief Обновление времени последней активности пользователя
  1523. */
  1524. static void HTTP_UpdateUserLoginTime(uint8_t user_id)
  1525. {
  1526. xTimerStart(users[user_id].LogoutTimer, 0);
  1527. }
  1528. /**
  1529. * @brief Принудительный логаут пользователя
  1530. */
  1531. static void HTTP_ForceUserLogout(uint8_t user_id)
  1532. {
  1533. char cookie[MAX_WEB_COOKIE_LEN];
  1534. /* Flush user cookie by random value */
  1535. sprintf(cookie, "%X", (unsigned int)GetRandomNumber());
  1536. HTTP_SetUserCookie(cookie, user_id);
  1537. }
  1538. /**
  1539. * @brief >Callback таймера логаута пользователя
  1540. */
  1541. void LogoutTimerCallback(TimerHandle_t pxTimer)
  1542. {
  1543. uint8_t user_id = (uint8_t)pvTimerGetTimerID( pxTimer );
  1544. if ( sSettings.sRADIUS.Auth_enable ) {
  1545. HTTP_ForceUserLogout(user_id);
  1546. }
  1547. }
  1548. /**
  1549. * @brief Смена пароля пользователя
  1550. * @retval None
  1551. */
  1552. char *HTTP_ChangeUserPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1553. {
  1554. char tempStr[110];
  1555. char value[20];
  1556. char login[20];
  1557. char password[20];
  1558. char tmp[75];
  1559. uint8_t valueLen, valueLen2, user_id;
  1560. char WebLogin[MAX_WEB_LOGIN_LEN];
  1561. (void)reqNum;
  1562. (void)lenBufIn;
  1563. memset(login, 0, sizeof(login));
  1564. memset(password, 0, sizeof(password));
  1565. memset(tempStr, 0, sizeof(tempStr));
  1566. memset(value, 0, sizeof(value));
  1567. memset(tmp, 0, sizeof(tmp));
  1568. ClearParamString(bufIn);
  1569. strncpy(tempStr, bufIn, 110);
  1570. strcpy(bufOut, HTTP_200_OK);
  1571. if (GetParamValue(tempStr, "username=", login, &valueLen) &&
  1572. GetParamValue(tempStr, "oldpass=", tmp, &valueLen)) {
  1573. url_decode(password, sizeof(password), tmp);
  1574. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1575. memset(value, 0, 20);
  1576. memset(WebLogin, 0, MAX_WEB_LOGIN_LEN);
  1577. GetUserLogin(user_id, WebLogin, &valueLen);
  1578. GetUserPassword(user_id, value, &valueLen2);
  1579. /* Check login and password */
  1580. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1581. (memcmp(password, value, 11) == 0)) {
  1582. memset(tmp, 0, sizeof(tmp));
  1583. memset(password, 0, 20);
  1584. if (GetParamValue(tempStr, "newpass=", tmp, &valueLen)) {
  1585. url_decode(password, sizeof(password), tmp);
  1586. valueLen = strlen(password);
  1587. memcpy(sSettings.sAuth[user_id].password, password, sizeof(sSettings.sAuth[user_id].password));
  1588. HTTP_SaveSettings();
  1589. log_event_data(LOG_PSW_CHANGE, name_login);
  1590. strcat(bufOut, "Пароль успешно изменён");
  1591. *lenBufOut = strlen(bufOut);
  1592. return bufOut;
  1593. } else {
  1594. strcat(bufOut, "Введены некорректные данные!");
  1595. *lenBufOut = strlen(bufOut);
  1596. return bufOut;
  1597. }
  1598. }
  1599. }
  1600. strcat(bufOut, "Введён неверный пароль!");
  1601. } else {
  1602. strcat(bufOut, "Введены некорректные данные!");
  1603. }
  1604. *lenBufOut = strlen(bufOut);
  1605. return bufOut;
  1606. }
  1607. //
  1608. static void getAuthenticatedState(void)
  1609. {
  1610. char CookieBuf[51];
  1611. char *CookiePtr = NULL;
  1612. char name[MAX_WEB_COOKIE_LEN];
  1613. char id[MAX_WEB_COOKIE_LEN];
  1614. uint8_t nameLen = 0, idLen = 0;
  1615. receiveBuf[receivedBufLen] = '\0';
  1616. //printf("receive %s \r\n", receiveBuf);
  1617. // Get cookie "uname" value
  1618. memset(CookieBuf, 0, sizeof(CookieBuf));
  1619. CookiePtr = strstr(receiveBuf, "uname=");
  1620. strncpy(CookieBuf, CookiePtr, 50);
  1621. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1622. memset(name, 0, MAX_WEB_COOKIE_LEN);
  1623. GetCookieValue(CookieBuf, "uname=", name, &nameLen);
  1624. //printf("********CookieBuf2= %s\r\n", CookieBuf);
  1625. //printf("********uname= %s\r\n", name);
  1626. memset(CookieBuf, 0, sizeof(CookieBuf));
  1627. // Get cookie "id" value
  1628. CookiePtr = strstr(receiveBuf, " id=");
  1629. strncpy(CookieBuf, CookiePtr, 50);
  1630. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1631. memset(id, 0, MAX_WEB_COOKIE_LEN);
  1632. GetCookieValue(CookieBuf, "id=", id, &idLen);
  1633. // printf("********ID= %s\r\n", id);
  1634. seclevel = 0xFF;
  1635. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1636. HTTP_GetUserCookie(user_id, CookieBuf, &idLen);
  1637. if (strncmp(id, CookieBuf, idLen) == 0 ) {
  1638. GetUserLevelInt(user_id, &seclevel);
  1639. Authenticated = true;
  1640. break;
  1641. }
  1642. Authenticated = false;
  1643. seclevel = 0xFF;
  1644. }
  1645. }
  1646. char *HTTP_LoginPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1647. {
  1648. (void)reqNum;
  1649. uint32_t req_data_received = 0;
  1650. char *offset = 0;
  1651. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1652. /* parse packet for Content-length field */
  1653. post_data_count = Parse_Content_Length(bufIn, lenBufIn);
  1654. printf("Content-length: %d\r\n", (int)post_data_count);
  1655. if (post_data_count < MAX_POST_REQ_LEN) {
  1656. memset(post_req_data, 0, MAX_POST_REQ_LEN);
  1657. /* parse packet for "\r\n\r\n" */
  1658. offset = (strstr(bufIn, "\r\n\r\n")) + 4;
  1659. req_data_received = lenBufIn - (offset - bufIn);
  1660. printf("req data received: %d\r\n", (int)req_data_received);
  1661. /* Check if "\r\n\r\n" was found */
  1662. if (offset != 0) {
  1663. /* if data was splited in two packets */
  1664. if (req_data_received < post_data_count) {
  1665. /* Copy request data to buffer */
  1666. snprintf(post_req_data, req_data_received, "%s", bufIn);
  1667. post_data_count -= req_data_received;
  1668. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1669. offset = bufIn;
  1670. }
  1671. /* if data received completely */
  1672. if (strlen(bufIn) != 0) {
  1673. strncat(post_req_data, offset, post_data_count);
  1674. //printf("post_req_data: %s\r\n", post_req_data);
  1675. /* End reqest */
  1676. post_data_count = 0;
  1677. HTTP_ConfirmWebPwd(post_req_data, bufOut, strlen(post_req_data), lenBufOut);
  1678. *lenBufOut = strlen(bufOut);
  1679. return bufOut;
  1680. }
  1681. }
  1682. /* request was fragmented before "\r\n\r\n" */
  1683. else {
  1684. post_data_count = 0;
  1685. /* Redirect to login page */
  1686. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1687. fs_open("/rslogin.html", &file);
  1688. } else {
  1689. fs_open("/login.html", &file);
  1690. }
  1691. *lenBufOut = file.len;
  1692. return file.data;
  1693. }
  1694. } else {
  1695. DBG printf("Too long POST request!\r\n");
  1696. /* Ignore request */
  1697. post_data_count = 0;
  1698. /* Redirect to login page */
  1699. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1700. fs_open("/rslogin.html", &file);
  1701. } else {
  1702. fs_open("/login.html", &file);
  1703. }
  1704. *lenBufOut = file.len;
  1705. return file.data;
  1706. }
  1707. return 0;
  1708. }
  1709. char *HTTP_LogoutPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1710. {
  1711. (void)bufIn;
  1712. (void)bufOut;
  1713. (void)lenBufIn;
  1714. (void)reqNum;
  1715. Authenticated = false;
  1716. seclevel = 0xFF;
  1717. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1718. fs_open("/rslogin.html", &file);
  1719. } else {
  1720. fs_open("/login.html", &file);
  1721. }
  1722. *lenBufOut = file.len;
  1723. return file.data;
  1724. }
  1725. #endif
  1726. /**
  1727. * @brief Send callback for log file transfer (messages as is, not ordered)
  1728. */
  1729. void HTTP_SendHistory(void)
  1730. {
  1731. uint32_t nbytes = 0;
  1732. static bool start = true;
  1733. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1734. if (log_ptr + FILE_BUF_MAX_LEN <= log_size) {
  1735. nbytes = History_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN, start);
  1736. } else if (log_ptr < log_size) {
  1737. nbytes = History_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1738. } else {
  1739. nbytes = 0;
  1740. }
  1741. log_ptr += nbytes;
  1742. start = false;
  1743. if (nbytes == 0) {
  1744. // File transfer finished.
  1745. start = true;
  1746. // Clear file transfer in progress flag
  1747. fLogTransInprog = false;
  1748. return;
  1749. }
  1750. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1751. HTTP_SendHistory();
  1752. }
  1753. /**
  1754. * @brief Sent callback for log file transfer (messages as is, not ordered)
  1755. */
  1756. void HTTP_SendLog(void)
  1757. {
  1758. uint32_t nbytes = 0;
  1759. static bool start = true;
  1760. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1761. if (log_ptr + FILE_BUF_MAX_LEN_LOG <= log_size) {
  1762. nbytes = LOG_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN_LOG, start);
  1763. } else if (log_ptr < log_size) {
  1764. nbytes = LOG_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1765. } else {
  1766. nbytes = 0;
  1767. }
  1768. log_ptr += nbytes;
  1769. start = false;
  1770. if (nbytes == 0) {
  1771. // File transfer finished.
  1772. start = true;
  1773. // Clear file transfer in progress flag
  1774. fLogTransInprog = false;
  1775. return;
  1776. }
  1777. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1778. HTTP_SendLog();
  1779. return;
  1780. }
  1781. /**
  1782. * @brief sends file from flash FS
  1783. * @param filename: pointer to the file name to send
  1784. * @param pnonmatch: pointer to the If-Non_Match value
  1785. * @param pcb: pointer to a tcp_pcb struct
  1786. * @param hs: pointer to a http_state struct
  1787. * @param file: pointer to a fs_file struct
  1788. * @retval
  1789. */
  1790. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len)
  1791. {
  1792. int res = 0;
  1793. char etag[MAX_ETAG_LEN];
  1794. char *petag = NULL;
  1795. res = fs_open(filename, file);
  1796. if (res == 0) {
  1797. printf("Not found: %s\r\n", filename);
  1798. sprintf(filename, "/index.html");
  1799. fs_open(filename, file);
  1800. }
  1801. /* Find Etag value */
  1802. uint8_t etag_len = Parse_Header(file->data, file->len, Etag, 6, etag);
  1803. if (etag_len < MAX_ETAG_LEN && etag_len > 0) {
  1804. DBG printf("Etag: %s\r\n", etag);
  1805. petag = etag;
  1806. }
  1807. /* Compare Etag and If-Non-Match fields */
  1808. if (pnonmatch && petag && (strcmp(pnonmatch, petag) == 0)) {
  1809. /* Send 304 code */
  1810. sprintf(sendBuf, HTTP_304_NOT_MODIFIED);
  1811. DBG printf(sendBuf);
  1812. *Len = strlen(sendBuf);
  1813. return sendBuf;
  1814. } else {
  1815. *Len = file->len;
  1816. return file->data;
  1817. }
  1818. }
  1819. /**
  1820. * @brief Extract the custom field data from HTML data
  1821. * @param data : pointer on receive packet buffer
  1822. * @param len : buffer length
  1823. * @param field : field name
  1824. * @param flen : field name length
  1825. * @retval value : pointer for field data
  1826. */
  1827. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value)
  1828. {
  1829. uint32_t i = 0, size = 0;
  1830. char *ptr;
  1831. uint32_t Offset = 0;
  1832. /* Find field name in data buffer */
  1833. for (i = 0; i < len; i++) {
  1834. if (strncmp ((char *)(data + i), field, flen) == 0) {
  1835. Offset = i + flen;
  1836. break;
  1837. }
  1838. }
  1839. /* Copy Field value */
  1840. if (Offset) {
  1841. i = 0;
  1842. ptr = (char *)(data + Offset);
  1843. while (*(ptr + i) != 0x0d) {
  1844. value[i] = *(ptr + i);
  1845. i++;
  1846. }
  1847. value[i] = '\0';
  1848. size = i;
  1849. }
  1850. return size;
  1851. }
  1852. /**
  1853. * @brief
  1854. * @retval None
  1855. */
  1856. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen)
  1857. {
  1858. char *beginValue = NULL;
  1859. char *endValue = NULL;
  1860. int len = 0;
  1861. char *strPtr = NULL;
  1862. strPtr = strstr(inStr, "GET");
  1863. if (strPtr == NULL) {
  1864. strPtr = strstr(inStr, "POST");
  1865. }
  1866. if (strPtr == NULL) {
  1867. *fileNameLen = 0;
  1868. return false;
  1869. } else {
  1870. beginValue = strpbrk(strPtr, "/");
  1871. endValue = strpbrk(beginValue, " ");
  1872. if (endValue == NULL) {
  1873. *fileNameLen = 0;
  1874. return false;
  1875. }
  1876. len = endValue - beginValue;
  1877. if (len < MAX_FILENAME_LEN) {
  1878. strncpy(fileName, beginValue, len);
  1879. *fileNameLen = len;
  1880. fileName[len] = '\0';
  1881. return true;
  1882. } else {
  1883. return false;
  1884. }
  1885. }
  1886. }
  1887. #endif