my_ssl_server.c 67 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237
  1. /*
  2. * ssl_server.c
  3. *
  4. * Created on: 08.11.2017
  5. * Author: balbekova
  6. */
  7. #include "common_config.h"
  8. #ifdef SSL_SERVER_ENABLE
  9. #include "lwip/opt.h"
  10. #include "lwip/arch.h"
  11. #include "lwip/api.h"
  12. #include "lwip/tcp.h"
  13. #include "my_ssl_server.h"
  14. #include "web_params_api.h"
  15. #include "parameters.h"
  16. #include "urlcode.h"
  17. #include "bt6703_fs/fsdata.c"
  18. #include "settings_api.h"
  19. #include "netconf.h"
  20. #include "testing.h"
  21. #include "rtc.h"
  22. #include "rng.h"
  23. #include "megatec.h"
  24. #include "log.h"
  25. #include "hal.h"
  26. #include "radius_user.h"
  27. #include "sntp_api.h"
  28. #ifdef PRINTF_STDLIB
  29. #include <stdio.h>
  30. #endif
  31. #ifdef PRINTF_CUSTOM
  32. #include "tinystdio.h"
  33. #endif
  34. #include <string.h>
  35. #include <stdlib.h>
  36. #include "FreeRTOS.h"
  37. #include "task.h"
  38. #include "fr_timers.h"
  39. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err);
  40. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err);
  41. static int fs_open(char *name, struct fs_file *file);
  42. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len);
  43. static void send_data(struct tcp_pcb *pcb, struct http_state *hs);
  44. #ifdef HTTP_AUTH_ENABLE
  45. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len);
  46. static void HTTP_SetUserCookie(char *str, uint8_t user_id);
  47. static void HTTP_UpdateUserLoginTime(uint8_t user_id);
  48. static void HTTP_ForceUserLogout(uint8_t user_id);
  49. void LogoutTimerCallback(TimerHandle_t pxTimer);
  50. void LoginTimerCallback(TimerHandle_t pxTimer);
  51. static void getAuthenticatedState(void);
  52. #endif
  53. static uint32_t Parse_Content_Length(char *data, uint32_t len);
  54. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len);
  55. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value);
  56. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen);
  57. char sendBuf[SEND_BUF_MAX_LEN];
  58. uint16_t sendBufLoadLen = 0;
  59. uint16_t printLen = 0;
  60. char receiveBuf[RECIVE_BUF_MAX_LEN];
  61. uint16_t receivedBufLen = 0;
  62. #ifdef HTTP_AUTH_ENABLE
  63. #define MAX_POST_REQ_LEN 256
  64. char post_req_data[MAX_POST_REQ_LEN];
  65. uint32_t post_data_count = 0;
  66. uint32_t log_post_reqn;
  67. /* Logout timeout, 30 minutes */
  68. #define WEB_LOGOUT_TIME configTICK_RATE_HZ*60*30
  69. /* Max user active sessions count */
  70. #define WEB_USER_MAX_SESSION_COUNT 5
  71. struct {
  72. //auth_session_t session[WEB_USER_MAX_SESSION_COUNT];
  73. char cookie[MAX_WEB_COOKIE_LEN];
  74. TimerHandle_t LogoutTimer;
  75. } users[MAX_WEB_USERS];
  76. TimerHandle_t RepeatLoginTimer;
  77. /* Repeat Login timeout, 1 minutes */
  78. #define REPEAT_LOGIN_TIME configTICK_RATE_HZ*60*1
  79. uint8_t cnt_err_psw = 0;
  80. bool Authenticated = false;
  81. uint8_t user_id; // Id of currently logged-in user
  82. /* Level of currently logged-in user */
  83. uint8_t seclevel = 0xFF;
  84. #endif
  85. /* Max HTTP file name length including "/" */
  86. #define MAX_FILENAME_LEN 32
  87. /* Max HTTP Etag field length */
  88. #define MAX_ETAG_LEN 48
  89. static const char If_None_Match[] = "If-None-Match: ";
  90. static const char Etag[] = "ETag: ";
  91. static volatile uint32_t size = 0;
  92. static uint32_t TotalReceived = 0;
  93. static volatile uint32_t TotalData = 0;
  94. static uint32_t ContentLengthOffset = 0;
  95. static const char Content_Length[17] =
  96. /* Content Length */
  97. {0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x3a, 0x20, };
  98. const char HTTP_304_NOT_MODIFIED[] = "HTTP/1.1 304 Not Modified\r\n\r\n";
  99. const char HTTP_403_NOT_WHITE_LIST[] = "HTTP/1.1 403 Forbidden\r\n\r\n";
  100. const char HTTP_401_NO_AUTH[] = "HTTP/1.1 401 No authorization\r\n\r\n";
  101. const char HTTP_500_SERVER_ERROR[] = "HTTP/1.1 500 Internal Server Error\r\n\r\n";
  102. const char HTTP_200_OK[] = "HTTP/1.1 200 OK\r\n\r\n";
  103. /* utf-8 marker to support MS Excel */
  104. const char UTF8_BOM[] = {0xEF, 0xBB, 0xBF, 0x00};
  105. unsigned long log_ptr = 0;
  106. unsigned long log_size = 0;
  107. bool fLogTransInprog = false;
  108. static bool fl_raddius_net_err = false;
  109. /**
  110. * @brief Общая структура настроек
  111. */
  112. extern SETTINGS_t sSettings;
  113. struct fs_file file = {0, 0};
  114. typedef struct {
  115. char client_req[30];
  116. uint8_t len;
  117. REQ_TYPE_SEND_t req_type_send;
  118. ACCESS_TYPE_t accsess;
  119. char *(*handler)(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut);
  120. } web_func_handler_t;
  121. web_func_handler_t process_web_funcs[] = {
  122. #ifdef HTTP_AUTH_ENABLE
  123. { "POST /login.cgi", 15, COMMON_ANSWER, ALL_ACCESS, HTTP_LoginPage },
  124. { "GET /logout.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_LogoutPage },
  125. { "GET /changepwd.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ChangeUserPwd },
  126. #endif
  127. { "GET /getJson.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetParamsPage },
  128. { "GET /settings.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSettingsPage },
  129. { "POST /settings.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_SetSettingsPage },
  130. { "GET /getcert.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSert},
  131. { "POST /srv_crt_upload.cgi", 24, COMMON_ANSWER, TIME_ACCESS, HTTP_Upload_Sert},
  132. { "GET /info.cgi", 13, COMMON_ANSWER, TIME_ACCESS, HTTP_GetInfo },
  133. { "POST /info.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_SetInfoPage },
  134. { "GET /history.cgi", 16, HISTORY_ANSWER, TIME_ACCESS, HTTP_HistoryPage },
  135. { "GET /ups_history.cgi", 19, UPS_HISTORY_ANSWER, TIME_ACCESS, HTTP_UpsHistoryPage },
  136. { "GET /reset.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_Reset },
  137. { "GET /bat_test.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSTest },
  138. { "GET /ups_power.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSshutdown },
  139. { "GET /reboot.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_Reboot },
  140. { "GET /confirm.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_Confirm },
  141. { "GET /fw_update.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ConfirmBootPwd },
  142. { "GET", 3, COMMON_ANSWER, ALL_ACCESS, HTTP_GetRequest },
  143. { "", 0, COMMON_ANSWER, ALL_ACCESS, HTTP_NoFound },
  144. { "", 0, 0, 0, NULL }
  145. };
  146. /**
  147. * @brief closes tcp connection
  148. * @param pcb: pointer to a tcp_pcb struct
  149. * @param hs: pointer to a http_state struct
  150. * @retval
  151. */
  152. static void close_conn(struct tcp_pcb *pcb, struct http_state *hs)
  153. {
  154. tcp_arg(pcb, NULL);
  155. tcp_sent(pcb, NULL);
  156. tcp_recv(pcb, NULL);
  157. mem_free(hs);
  158. err_t err = tcp_close(pcb);
  159. DBG printf("%p close = %d (pcb: %d, pbuf_pool: %d)\r\n", pcb, err,
  160. lwip_stats.memp[MEMP_TCP_PCB]->used,
  161. lwip_stats.memp[MEMP_PBUF_POOL]->used);
  162. }
  163. /**
  164. * @brief callback function for handling TCP HTTP traffic
  165. * @param arg: pointer to an argument structure to be passed to callback function
  166. * @param pcb: pointer to a tcp_pcb structure
  167. * @param p: pointer to a packet buffer
  168. * @param err: LwIP error code
  169. * @retval err
  170. */
  171. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err)
  172. {
  173. char *data;
  174. struct http_state *hs;
  175. char buf[150];
  176. hs = arg;
  177. if (err == ERR_OK && p != NULL) {
  178. tcp_recved(pcb, p->tot_len);
  179. if (hs->file == NULL) {
  180. data = p->payload;
  181. receivedBufLen = p->tot_len;
  182. memcpy(receiveBuf, p->payload, receivedBufLen);
  183. // На производстве
  184. if (strncmp(data, "GET /setProdate.cgi", 19) == 0 && strncmp(sSettings.sFlags.testState, "T2OK", 4)) {
  185. HTTP_Prodate(receiveBuf, sendBuf, receivedBufLen, &sendBufLoadLen);
  186. hs->file = sendBuf;
  187. hs->left = sendBufLoadLen;
  188. send_data(pcb, hs);
  189. tcp_sent(pcb, http_sent);
  190. } else {
  191. strcpy(sendBuf, HTTP_200_OK);
  192. memset(buf, 0, sizeof(buf));
  193. // strcat(sendBuf,"<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://192.168.14.35\"/></head></html>\r\n\r\n");
  194. if (sSettings.sFlags.netsettingsChanged == true) {
  195. sprintf(buf,
  196. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  197. sSettings.sWebTempParams.ip);
  198. } else {
  199. sprintf(buf,
  200. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  201. sSettings.sWebParams.ip);
  202. }
  203. strcat(sendBuf, buf);
  204. // strcat(sendBuf,"1");
  205. sendBufLoadLen = strlen(sendBuf);
  206. hs->file = sendBuf;
  207. hs->left = sendBufLoadLen;
  208. send_data(pcb, hs);
  209. tcp_sent(pcb, http_sent);
  210. }
  211. }
  212. pbuf_free(p);
  213. close_conn(pcb, hs);
  214. }
  215. if (err == ERR_OK && p == NULL) {
  216. close_conn(pcb, hs);
  217. }
  218. return ERR_OK;
  219. }
  220. /**
  221. * @brief callback function for handling connection errors
  222. * @param arg: pointer to an argument to be passed to callback function
  223. * @param err: LwIP error code
  224. * @retval none
  225. */
  226. static void conn_err(void *arg, err_t err)
  227. {
  228. struct http_state *hs;
  229. (void)err;
  230. hs = arg;
  231. mem_free(hs);
  232. }
  233. /**
  234. * @brief callback function called after a successfull TCP data packet transmission
  235. * @param arg: pointer to an argument to be passed to callback function
  236. * @param pcb: pointer on tcp_pcb structure
  237. * @param len
  238. * @retval err : LwIP error code
  239. */
  240. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len)
  241. {
  242. struct http_state *hs;
  243. (void)len;
  244. hs = arg;
  245. if (hs->left > 0) {
  246. send_data(pcb, hs);
  247. } else {
  248. close_conn(pcb, hs);
  249. }
  250. return ERR_OK;
  251. }
  252. /**
  253. * @brief sends data found in member "file" of a http_state struct
  254. * @param pcb: pointer to a tcp_pcb struct
  255. * @param hs: pointer to a http_state struct
  256. * @retval none
  257. */
  258. static void send_data(struct tcp_pcb *pcb, struct http_state *hs)
  259. {
  260. err_t err;
  261. u16_t len;
  262. /* We cannot send more data than space available in the send
  263. buffer */
  264. if (tcp_sndbuf(pcb) < hs->left) {
  265. len = tcp_sndbuf(pcb);
  266. } else {
  267. len = hs->left;
  268. }
  269. err = tcp_write(pcb, hs->file, len, 0);
  270. if (err == ERR_OK) {
  271. hs->file += len;
  272. hs->left -= len;
  273. }
  274. }
  275. /**
  276. * @brief tcp poll callback function
  277. * @param arg: pointer to an argument to be passed to callback function
  278. * @param pcb: pointer on tcp_pcb structure
  279. * @retval err_t
  280. */
  281. static err_t http_poll(void *arg, struct tcp_pcb *pcb)
  282. {
  283. if (arg == NULL) {
  284. tcp_close(pcb);
  285. } else {
  286. send_data(pcb, (struct http_state *)arg);
  287. }
  288. return ERR_OK;
  289. }
  290. /**
  291. * @brief callback function on TCP connection setup ( on port 80)
  292. * @param arg: pointer to an argument structure to be passed to callback function
  293. * @param pcb: pointer to a tcp_pcb structure
  294. * &param err: Lwip stack error code
  295. * @retval err
  296. */
  297. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err)
  298. {
  299. struct http_state *hs;
  300. /* Allocate memory for the structure that holds the state of the connection */
  301. hs = mem_malloc(sizeof(struct http_state));
  302. if (hs == NULL) {
  303. return ERR_MEM;
  304. }
  305. /* Initialize the structure. */
  306. hs->file = NULL;
  307. hs->left = 0;
  308. /* Tell TCP that this is the structure we wish to be passed for our
  309. callbacks. */
  310. tcp_arg(pcb, hs);
  311. /* Tell TCP that we wish to be informed of incoming data by a call
  312. to the http_recv() function. */
  313. tcp_recv(pcb, http_recv);
  314. tcp_err(pcb, conn_err);
  315. tcp_poll(pcb, http_poll, 10);
  316. return ERR_OK;
  317. }
  318. /**
  319. * @brief Opens a file defined in fsdata.c ROM filesystem
  320. * @param name : pointer to a file name
  321. * @param file : pointer to a fs_file structure
  322. * @retval 1 if success, 0 if fail
  323. */
  324. static int fs_open(char *name, struct fs_file *file)
  325. {
  326. struct fsdata_file_noconst *f;
  327. for (f = (struct fsdata_file_noconst *)FS_ROOT; f != NULL; f = (struct fsdata_file_noconst *)f->next) {
  328. if (!strcmp(name, f->name)) {
  329. file->data = f->data;
  330. file->len = f->len;
  331. return 1;
  332. }
  333. }
  334. return 0;
  335. }
  336. /**
  337. * @brief Initialize the HTTP server (start its thread)
  338. * @param none
  339. * @retval None
  340. */
  341. void HTTP_Init()
  342. {
  343. struct tcp_pcb *pcb;
  344. pcb = tcp_new();
  345. tcp_bind(pcb, IP_ADDR_ANY, 80);
  346. pcb = tcp_listen(pcb);
  347. tcp_accept(pcb, http_accept);
  348. }
  349. /**
  350. * @brief Extract the Content_Length data from HTML data
  351. * @param data : pointer on receive packet buffer
  352. * @param len : buffer length
  353. * @retval size : Content_length in numeric format
  354. */
  355. static uint32_t Parse_Content_Length(char *data, uint32_t len)
  356. {
  357. uint32_t i = 0, size = 0, S = 1;
  358. int32_t j = 0;
  359. char sizestring[6], *ptr;
  360. ContentLengthOffset = 0;
  361. /* find Content-Length data in packet buffer */
  362. for (i = 0; i < len; i++) {
  363. if (strncmp ((char *)(data + i), Content_Length, 16) == 0) {
  364. ContentLengthOffset = i + 16;
  365. break;
  366. }
  367. }
  368. /* read Content-Length value */
  369. if (ContentLengthOffset) {
  370. i = 0;
  371. ptr = (char *)(data + ContentLengthOffset);
  372. while (*(ptr + i) != 0x0d) {
  373. sizestring[i] = *(ptr + i);
  374. i++;
  375. ContentLengthOffset++;
  376. }
  377. if (i > 0) {
  378. /* transform string data into numeric format */
  379. for (j = i - 1; j >= 0; j--) {
  380. size += (sizestring[j] - 0x30) * S;
  381. S = S * 10;
  382. }
  383. }
  384. }
  385. return size;
  386. }
  387. /**
  388. * @brief
  389. * @retval None
  390. */
  391. uint8_t GetCookieValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  392. {
  393. char *beginValue = 0;
  394. char *endValue = 0;
  395. char *endValueTemp = 0;
  396. int len = 0;
  397. char *strPtr = 0;
  398. strPtr = strstr(inStr, paramName);
  399. if (strPtr != 0) {
  400. beginValue = strpbrk(strPtr, "=");
  401. endValue = strpbrk(strPtr, ";");
  402. endValueTemp = strpbrk(strPtr, "\r");
  403. if (endValueTemp != 0 && endValueTemp < endValue) {
  404. endValue = endValueTemp;
  405. }
  406. if (endValue == 0) {
  407. endValue = strpbrk(strPtr, "\n");
  408. }
  409. len = endValue - beginValue - 1;
  410. strncpy(paramValue, beginValue + 1, len);
  411. *endValue = '0';
  412. *beginValue = '0';
  413. *paramLen = len;
  414. return 1;
  415. } else {
  416. *paramLen = 0;
  417. return 0;
  418. }
  419. }
  420. char *Parce_Boundary(const char *data, uint32_t len, char *dst, uint8_t dstlen)
  421. {
  422. char *ptr = NULL;
  423. char *boundary = NULL;
  424. uint8_t i = 0;
  425. for (uint32_t j = 0; j < len; j++) {
  426. if (strncmp ((char *)(data + j), "boundary=", 9) == 0) {
  427. boundary = (char *)data + j + 9;
  428. break;
  429. }
  430. }
  431. if (!boundary) { return NULL; }
  432. *dst++ = '-';
  433. *dst++ = '-';
  434. ptr = boundary;
  435. while ((*ptr != 0x0d) && (i < dstlen - 4)) {
  436. *dst++ = *ptr++;
  437. i++;
  438. }
  439. //*dst++ = '-';
  440. //*dst++ = '-';
  441. *dst = '\0';
  442. if (i > 0) {
  443. return boundary;
  444. } else {
  445. return NULL;
  446. }
  447. }
  448. void ClearParamString(char *inBuf)
  449. {
  450. uint16_t len;
  451. char *str;
  452. str = strstr(inBuf, "HTTP");
  453. if (str != 0) {
  454. len = str - inBuf;
  455. memset(str, 0, RECIVE_BUF_MAX_LEN - len - 1);
  456. }
  457. }
  458. /**
  459. * @brief
  460. * @retval None
  461. */
  462. uint8_t GetParamValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  463. {
  464. char *beginValue = 0;
  465. char *endValue = 0;
  466. int len = 0;
  467. char *strPtr = 0;
  468. char paramName_tmp[50];
  469. memset(paramName_tmp, 0, sizeof(paramName_tmp));
  470. paramName_tmp[0] = '&';
  471. strncat(paramName_tmp, paramName, strlen(paramName));
  472. strcat(paramName_tmp, "=");
  473. strPtr = strstr(inStr, paramName_tmp);
  474. if (strPtr == 0) {
  475. paramName_tmp[0] = '0';
  476. strPtr = strstr(inStr, paramName_tmp);
  477. if (strPtr == 0) {
  478. paramName_tmp[0] = '\n';
  479. strPtr = strstr(inStr, paramName_tmp);
  480. }
  481. if (strPtr == 0) {
  482. paramName_tmp[0] = '?';
  483. strPtr = strstr(inStr, paramName_tmp);
  484. }
  485. }
  486. if (strPtr != 0) {
  487. beginValue = strpbrk(strPtr, "=");
  488. endValue = strpbrk(&strPtr[1], "&");
  489. if (endValue == 0) {
  490. endValue = strpbrk(strPtr, " ");
  491. }
  492. len = endValue - beginValue - 1;
  493. strncpy(paramValue, beginValue + 1, len);
  494. *endValue = '0';
  495. *beginValue = '0';
  496. *paramLen = len;
  497. return 1;
  498. } else {
  499. *paramLen = 0;
  500. return 0;
  501. }
  502. }
  503. // -----------------------------------------------------------------------------
  504. #include "mbedtls/platform.h"
  505. #include "mbedtls/entropy.h"
  506. #include "mbedtls/ctr_drbg.h"
  507. #include "mbedtls/certs.h"
  508. #include "mbedtls/x509.h"
  509. #include "mbedtls/net_sockets.h"
  510. #include "mbedtls/error.h"
  511. #include "mbedtls/debug.h"
  512. #include "mbedtls/memory_buffer_alloc.h"
  513. #include "mbedtls_time.h"
  514. #include "mbedtls_debug.h"
  515. #include "FreeRTOS.h"
  516. #include "task.h"
  517. #include "cert_req.h"
  518. #include <stdlib.h>
  519. #include <string.h>
  520. extern unsigned char req_cert[];
  521. static mbedtls_net_context listen_fd, client_fd;
  522. static const uint8_t *pers = (uint8_t *)("ssl_server");
  523. mbedtls_entropy_context entropy;
  524. mbedtls_ctr_drbg_context ctr_drbg;
  525. mbedtls_ssl_context ssl;
  526. mbedtls_ssl_config conf;
  527. mbedtls_x509_crt srvcert;
  528. mbedtls_pk_context pkey;
  529. //
  530. void ssl_server(void *pvParameters)
  531. {
  532. SSL_SERVER_STATE ssl_state = SSL_ACCEPT;
  533. char *sendPtr;
  534. int ret;
  535. mbedtls_net_init( &listen_fd );
  536. mbedtls_net_init( &client_fd );
  537. mbedtls_ssl_init( &ssl );
  538. mbedtls_ssl_config_init( &conf );
  539. mbedtls_x509_crt_init( &srvcert );
  540. mbedtls_pk_init( &pkey );
  541. mbedtls_entropy_init( &entropy );
  542. mbedtls_ctr_drbg_init( &ctr_drbg );
  543. mbedtls_platform_set_time(&MBEDTLS_GetTime);
  544. #if defined(MBEDTLS_DEBUG_C)
  545. mbedtls_debug_set_threshold(DEBUG_LEVEL);
  546. mbedtls_ssl_conf_dbg(&conf, MBEDTLS_Debug, NULL);
  547. #endif
  548. // 1. Load the certificates and private RSA key
  549. mbedtls_printf( "\r\n . Loading the server cert. and key..." );
  550. ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) sSettings.our_srv_crt,
  551. (strlen(sSettings.our_srv_crt) + 1) );//mbedtls_test_srv_crtmbedtls_test_srv_crt_len
  552. if ( ret != 0 ) {
  553. mbedtls_printf( " failed\r\n ! mbedtls_x509_crt_parse returned %d\r\n", ret );
  554. ssl_state = SSL_CRITICAL_ERROR;
  555. }
  556. ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_srv_key, mbedtls_test_srv_key_len, NULL, 0 );
  557. if ( ret != 0 ) {
  558. mbedtls_printf( " failed\r\n ! mbedtls_pk_parse_key returned %d\r\n", ret );
  559. ssl_state = SSL_CRITICAL_ERROR;
  560. }
  561. mbedtls_printf( " ok\r\n" );
  562. // 2. Setup the listening TCP socket
  563. mbedtls_printf( " . Bind on https://localhost:443/ ..." );
  564. if ((ret = mbedtls_net_bind(&listen_fd, NULL, "443", MBEDTLS_NET_PROTO_TCP )) != 0) {
  565. mbedtls_printf( " failed\n ! mbedtls_net_bind returned %d\r\n", ret );
  566. ssl_state = SSL_CRITICAL_ERROR;
  567. }
  568. mbedtls_printf( " ok\r\n" );
  569. // 3. Seed the RNG
  570. mbedtls_printf( " . Seeding the random number generator..." );
  571. if ((ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, (const unsigned char *) pers,
  572. strlen( (char *)pers))) != 0) {
  573. mbedtls_printf( " failed\r\n ! mbedtls_ctr_drbg_seed returned %d\r\n", ret );
  574. ssl_state = SSL_CRITICAL_ERROR;
  575. }
  576. mbedtls_printf( " ok\r\n" );
  577. // 4. Setup stuff
  578. mbedtls_printf( " . Setting up the SSL data...." );
  579. if ( ( ret = mbedtls_ssl_config_defaults(&conf, MBEDTLS_SSL_IS_SERVER, MBEDTLS_SSL_TRANSPORT_STREAM,
  580. MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
  581. mbedtls_printf( " failed\r\n ! mbedtls_ssl_config_defaults returned %d\r\n", ret );
  582. ssl_state = SSL_CRITICAL_ERROR;
  583. }
  584. mbedtls_ssl_conf_rng(&conf, mbedtls_ctr_drbg_random, &ctr_drbg);
  585. mbedtls_ssl_conf_ca_chain(&conf, srvcert.next, NULL);
  586. if ( ( ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, &pkey ) ) != 0) {
  587. mbedtls_printf( " failed\r\n ! mbedtls_ssl_conf_own_cert returned %d\r\n", ret );
  588. ssl_state = SSL_CRITICAL_ERROR;
  589. }
  590. if ( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 ) {
  591. mbedtls_printf( " failed\r\n ! mbedtls_ssl_setup returned %d\r\n", ret );
  592. ssl_state = SSL_CRITICAL_ERROR;
  593. }
  594. mbedtls_printf( " ok\r\n" );
  595. for (;;) {
  596. switch (ssl_state) {
  597. case SSL_ACCEPT :
  598. mbedtls_ssl_session_reset( &ssl );
  599. mbedtls_printf( " . Waiting for a remote connection ...\r\n" );
  600. if ((ret = mbedtls_net_accept(&listen_fd, &client_fd, NULL, 0, NULL)) != 0) {
  601. mbedtls_printf( " failed\r\n ! mbedtls_net_accept returned %d\r\n", ret );
  602. ssl_state = SSL_ERROR;
  603. } else {
  604. mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv, NULL );//mbedtls_net_recv
  605. mbedtls_printf( " ok\r\n" );
  606. ssl_state = SSL_HANDSHAKE;
  607. }
  608. break;
  609. case SSL_HANDSHAKE :
  610. mbedtls_printf( " . Performing the SSL/TLS handshake..." );
  611. while ( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) {
  612. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  613. mbedtls_printf( " failed\r\n ! mbedtls_ssl_handshake returned %d\r\n", ret );
  614. ssl_state = SSL_ERROR;
  615. break;
  616. }
  617. }
  618. if (ret != 0) {
  619. ssl_state = SSL_ERROR;
  620. } else {
  621. mbedtls_printf( " ok\r\n" );
  622. ssl_state = SSL_READ;
  623. }
  624. break;
  625. case SSL_READ :
  626. //printf("SSL_READ\r\n");
  627. if (SSL_ReadRoutine(&ssl, (unsigned char *)receiveBuf) <= 0) {
  628. ssl_state = SSL_ERROR;
  629. } else {
  630. ssl_state = SSL_PROCESSING;
  631. }
  632. break;
  633. case SSL_PROCESSING :
  634. //printf("SSL_PROCESSING\r\n");
  635. sendPtr = SSL_ProcessingRoutine(&sendBufLoadLen);
  636. if (sendPtr) {
  637. ssl_state = SSL_WRITE;
  638. } else {
  639. ssl_state = SSL_ACCEPT;
  640. }
  641. break;
  642. case SSL_WRITE :
  643. //printf("SSL_WRITE\r\n");
  644. SSL_WriteRoutine(&ssl, sendPtr, sendBufLoadLen);
  645. ssl_state = SSL_CLOSE;
  646. break;
  647. case SSL_CLOSE :
  648. //printf("SSL_CLOSE\r\n");
  649. mbedtls_ssl_close_notify(&ssl);
  650. mbedtls_net_free(&client_fd);
  651. //mbedtls_ssl_free( &ssl );
  652. ssl_state = SSL_ACCEPT;
  653. break;
  654. case SSL_ERROR :
  655. //printf("SSL_ERROR\r\n");
  656. //mbedtls_net_free(&client_fd);
  657. //mbedtls_ssl_free( &ssl );
  658. mbedtls_ssl_close_notify(&ssl);
  659. mbedtls_net_free(&client_fd);
  660. ssl_state = SSL_ACCEPT;
  661. break;
  662. case SSL_CRITICAL_ERROR:
  663. //printf("SSL_CRITICAL_ERROR\r\n");
  664. mbedtls_x509_crt_free( &srvcert );
  665. mbedtls_pk_free( &pkey );
  666. mbedtls_ssl_free( &ssl );
  667. mbedtls_ssl_config_free( &conf );
  668. mbedtls_ctr_drbg_free( &ctr_drbg );
  669. mbedtls_entropy_free( &entropy );
  670. vTaskDelete(NULL);
  671. break;
  672. }
  673. }
  674. }
  675. /**
  676. * @brief Initialize the HTTPS server (start its thread)
  677. */
  678. void HTTPS_Init()
  679. {
  680. char buf[MAX_WEB_COOKIE_LEN];
  681. uint8_t user_id;
  682. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  683. // Flush user cookie by random value
  684. sprintf(buf, "%X", (unsigned int)GetRandomNumber());
  685. HTTP_SetUserCookie(buf, user_id);
  686. // Create user logout timers
  687. users[user_id].LogoutTimer = xTimerCreate("LogoutTmr", WEB_LOGOUT_TIME, pdFALSE, ( void * ) user_id,
  688. LogoutTimerCallback);
  689. }
  690. RepeatLoginTimer = xTimerCreate("LoginTmr", REPEAT_LOGIN_TIME, pdFALSE, ( void * ) 0, LoginTimerCallback);
  691. }
  692. //
  693. int SSL_ReadRoutine(mbedtls_ssl_context *ssl, unsigned char *recvBuf)
  694. {
  695. int ret;
  696. mbedtls_printf( " < Read from client:" );
  697. do {
  698. receivedBufLen = RECIVE_BUF_MAX_LEN - 1;
  699. memset(recvBuf, 0, RECIVE_BUF_MAX_LEN);
  700. ret = mbedtls_ssl_read(ssl, receiveBuf, receivedBufLen);
  701. if ( ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE ) {
  702. continue;
  703. }
  704. if ( ret <= 0 ) {
  705. switch ( ret ) {
  706. case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
  707. mbedtls_printf( " connection was closed gracefully\r\n" );
  708. break;
  709. case MBEDTLS_ERR_NET_CONN_RESET:
  710. mbedtls_printf( " connection was reset by peer\r\n" );
  711. break;
  712. default:
  713. mbedtls_printf( "mbedtls_ssl_read returned -0x%x\r\n", -ret );
  714. break;
  715. }
  716. return ret;
  717. }
  718. receivedBufLen = ret;
  719. } while (0);
  720. }
  721. //
  722. SSL_SERVER_STATE SSL_WriteRoutine(mbedtls_ssl_context *ssl, char *data, int datalen)
  723. {
  724. return SSL_SendFrames(ssl, data, datalen);
  725. }
  726. //
  727. char *SSL_ProcessingRoutine(uint16_t *sendLen)
  728. {
  729. web_func_handler_t *h;
  730. getAuthenticatedState();
  731. if ( Authenticated == false && sSettings.sRADIUS.Auth_enable == false) {
  732. HTTP_LOGIN(sendBuf, sendLen);
  733. return sendBuf;
  734. }
  735. for (h = &process_web_funcs[0]; h->handler; h++) {
  736. if (strncmp(receiveBuf, h->client_req, h->len) == 0) {
  737. #ifdef HTTP_AUTH_ENABLE
  738. if (h->accsess == TIME_ACCESS && !Authenticated) {
  739. strcpy(sendBuf, HTTP_401_NO_AUTH);
  740. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false))
  741. strcat(sendBuf,
  742. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/rslogin.html\"/></head></html>\r\n");
  743. else
  744. strcat(sendBuf,
  745. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/login.html\"/></head></html>\r\n");
  746. *sendLen = strlen(sendBuf);
  747. return sendBuf;
  748. }
  749. #endif
  750. return h->handler(0, receiveBuf, sendBuf, receivedBufLen, sendLen);
  751. }
  752. }
  753. }
  754. #define FRAME_SIZE (1000)
  755. SSL_SERVER_STATE SSL_SendFrames(mbedtls_ssl_context *ssl, char *data, int datalen)
  756. {
  757. SSL_SERVER_STATE ret;
  758. int retClose;
  759. int index = 0;
  760. int k = 0;
  761. int lastframe, nbrframes;
  762. nbrframes = datalen / FRAME_SIZE;
  763. while (nbrframes > 0) {
  764. index = k * FRAME_SIZE;
  765. if (SSL_Write(ssl, (data + index), FRAME_SIZE ) == SSL_WRITE_ERROR) {
  766. return SSL_WRITE_ERROR;
  767. }
  768. nbrframes--;
  769. k++;
  770. }
  771. index = k * FRAME_SIZE;
  772. lastframe = datalen % FRAME_SIZE ;
  773. if (SSL_Write(ssl, (data + index), lastframe ) == SSL_WRITE_ERROR) {
  774. return SSL_WRITE_ERROR;
  775. }
  776. return SSL_WRITE_OK;
  777. }
  778. SSL_SERVER_STATE SSL_Write(mbedtls_ssl_context *ssl, char *data, int datalen)
  779. {
  780. int ret;
  781. mbedtls_printf( " > Write to client:" );
  782. while ( ( ret = mbedtls_ssl_write(ssl, data, datalen) ) <= 0 ) {
  783. if ( ret == MBEDTLS_ERR_NET_CONN_RESET ) {
  784. mbedtls_printf( " failed\r\n ! peer closed the connection\r\n" );
  785. return SSL_WRITE_ERROR;
  786. }
  787. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  788. mbedtls_printf( " failed\r\n ! mbedtls_ssl_write returned %d\r\n", ret );
  789. return SSL_WRITE_ERROR;
  790. }
  791. }
  792. mbedtls_printf( " %d bytes written\r\n", ret);
  793. return SSL_WRITE_OK;
  794. }
  795. char *HTTP_HistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  796. {
  797. uint8_t valueLen = 0;
  798. char value[20];
  799. (void)reqNum;
  800. (void)lenBufIn;
  801. (void)reqNum;
  802. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  803. ClearParamString(bufIn);
  804. memset(value, 0, 20);
  805. GetParamValue(bufIn, "page", value, &valueLen);
  806. if (strcmp(value, "all") == 0) {
  807. if (!LOG_IsInit()) {
  808. return 0;
  809. }
  810. if (fLogTransInprog == false) {
  811. // Send log as raw data
  812. log_ptr = 0;
  813. log_size = History_GetTotalSTRCount() * STRING_SIZE_HISTORY + sizeof(UTF8_BOM) - 1;
  814. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  815. *lenBufOut = strlen(bufOut);
  816. // Set file transfer in progress flag
  817. fLogTransInprog = true;
  818. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  819. return 0;
  820. }
  821. HTTP_SendHistory();
  822. return 0;
  823. } else {
  824. // We send nothing if file transfer already in progress
  825. return 0;
  826. }
  827. } else {
  828. if (!LOG_IsInit()) {
  829. return 0;
  830. } else {
  831. HTTP_GetHistoryPage(bufOut, atoi(value));
  832. *lenBufOut = strlen(bufOut);
  833. return bufOut;
  834. }
  835. }
  836. }
  837. char *HTTP_UpsHistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  838. {
  839. uint8_t valueLen = 0;
  840. char value[20];
  841. (void)lenBufIn;
  842. (void)reqNum;
  843. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  844. ClearParamString(bufIn);
  845. memset(value, 0, 20);
  846. GetParamValue(bufIn, "page", value, &valueLen);
  847. if (strcmp(value, "all") == 0) {
  848. if (!LOG_IsInit()) {
  849. return 0;
  850. }
  851. if (fLogTransInprog == false) {
  852. // Send log as raw data
  853. log_ptr = 0;
  854. log_size = LOG_GetTotalSTRCount() * STRING_SIZE + sizeof(UTF8_BOM) - 1;
  855. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  856. *lenBufOut = strlen(bufOut);
  857. // Set file transfer in progress flag
  858. fLogTransInprog = true;
  859. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  860. return 0;
  861. }
  862. HTTP_SendLog();
  863. return 0;
  864. } else {
  865. // We send nothing if file transfer already in progress
  866. return 0;
  867. }
  868. } else {
  869. if (!LOG_IsInit()) {
  870. return 0;
  871. } else {
  872. HTTP_GetUpsHistoryPage(bufOut, atoi(value));
  873. *lenBufOut = strlen(bufOut);
  874. return bufOut;
  875. }
  876. }
  877. }
  878. /**
  879. * @brief Установка даты производства
  880. */
  881. // TODO Убрать заглушку!
  882. void HTTP_Prodate(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  883. {
  884. uint8_t valueLen = 0;
  885. char value[20];
  886. (void)lenBufIn;
  887. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  888. ClearParamString(bufIn);
  889. memset(value, 0, 20);
  890. GetParamValue(bufIn, "prodate", value, &valueLen);
  891. /*
  892. printf("Prodate: ");
  893. printf(value);
  894. printf("\r\n");
  895. */
  896. /* Устанавливаем дату производства */
  897. SETTINGS_SetProDate(value, valueLen);
  898. /* Пока отправляем true */
  899. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\n\r\nTrue");
  900. *lenBufOut = strlen(bufOut);
  901. TEST_SetServerFlag();
  902. }
  903. /**
  904. * @brief
  905. * @retval None
  906. */
  907. char *HTTP_SetSettingsPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  908. {
  909. char *DataOffset;
  910. (void)reqNum;
  911. if (seclevel == USER) {
  912. return 0;
  913. }
  914. DataOffset = 0;
  915. // POST Packet received
  916. TotalReceived = 0;
  917. TotalData = 0;
  918. memset(bufOut, 0, strlen(bufOut));
  919. bufOut[0] = '0';
  920. // parse packet for Content-length field
  921. size = Parse_Content_Length(bufIn, lenBufIn);
  922. DataOffset = strstr(bufIn, "managerIP");
  923. // case of MSIE8 : we do not receive data in the POST packet
  924. if (DataOffset == 0) {
  925. SSL_ReadRoutine(&ssl, bufIn);
  926. DataOffset = strstr(bufIn, "managerIP");
  927. }
  928. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  929. TotalData += TotalReceived;
  930. strncat(bufOut, DataOffset, TotalReceived);
  931. for (int i = TotalData; i < size; i ++) {
  932. SSL_ReadRoutine(&ssl, bufIn);
  933. strncat(sendBuf, bufIn, receivedBufLen);
  934. TotalData += receivedBufLen;
  935. }
  936. // check if last data packet
  937. if (TotalData == size) {
  938. DBG printf("State: Received %u bytes\r\n", (unsigned int)TotalData);
  939. // printf("receive %s \r\n", sendBuf);
  940. strncat(bufOut, " ", 1);
  941. HTTP_SetSettings(bufOut, strlen(sendBuf));
  942. memset(sendBuf, 0, size);
  943. strcpy(bufOut, HTTP_200_OK);
  944. strcat(bufOut,
  945. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/settings.html\"/></head></html>\r\n");
  946. *lenBufOut = strlen(bufOut);
  947. return bufOut;
  948. }
  949. return 0;
  950. }
  951. /**
  952. * @brief
  953. * @retval None
  954. */
  955. void HTTP_SetSettings(char *buf, uint16_t lenBuf)
  956. {
  957. uint8_t valueLen = 0;
  958. const uint8_t len = MAX_WEB_PARAM_LEN;
  959. char value[MAX_WEB_PARAM_LEN];
  960. char str[MAX_WEB_PARAM_LEN];
  961. (void)lenBuf;
  962. //printf(buf);
  963. //ClearParamString(buf);
  964. #define XJSON_SETTINGS_TAG(tag, get_param, set_param) JSON_SET_PARAM(tag, set_param, buf);
  965. WEB_SETTINGS_TAGS_TABLE
  966. #undef XJSON_SETTINGS_CREATE
  967. /* Если параметры WEB изменились выставляем флаг, сохраняем настройки и перезагружаемся */
  968. if (GetStateWebReinit() == true) {
  969. SetWebReinitFlag(true);
  970. HTTP_SaveSettings();
  971. /* Блокируем управление ключем на тау секунд*/
  972. //IO_KeyBlockOn();
  973. vTaskDelay(1010);
  974. Reboot(WEB_ACT);
  975. }
  976. HTTP_SaveSettings();
  977. }
  978. /**
  979. * @brief
  980. * @retval None
  981. */
  982. char *HTTP_GetSert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  983. {
  984. (void)bufIn;
  985. (void)lenBufIn;
  986. (void)reqNum;
  987. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  988. strcpy(bufOut, HTTP_200_OK);
  989. SSL_CreateReqCert();
  990. strncpy(bufOut, req_cert, strlen(req_cert));
  991. *lenBufOut = strlen(bufOut);
  992. return bufOut;
  993. }
  994. /**
  995. * @brief
  996. * @retval None
  997. */
  998. char *HTTP_Upload_Sert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  999. {
  1000. char *DataOffset;
  1001. static char boundary[70];
  1002. static char *pbound = NULL;
  1003. char *ContentOffset = 0;
  1004. (void)reqNum;
  1005. DataOffset = 0;
  1006. TotalData = 0;
  1007. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1008. //printf("receive %s \r\n", receiveBuf);
  1009. // parse packet for Content-length field
  1010. size = Parse_Content_Length(bufIn, lenBufIn);
  1011. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1012. if (pbound != NULL) {
  1013. ContentOffset = strstr(bufIn, boundary);
  1014. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1015. if ( DataOffset != NULL ) {
  1016. DataOffset += 4;
  1017. }
  1018. } else {
  1019. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1020. bufIn[receivedBufLen] = '\0';
  1021. lenBufIn = receivedBufLen;
  1022. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1023. if (pbound != NULL) {
  1024. ContentOffset = strstr(bufIn, boundary);
  1025. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1026. if ( DataOffset != NULL ) {
  1027. DataOffset += 4;
  1028. }
  1029. }
  1030. }
  1031. // case of MSIE8 : we do not receive data in the POST packet
  1032. if (DataOffset == NULL) {
  1033. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1034. bufIn[receivedBufLen] = '\0';
  1035. lenBufIn = receivedBufLen;
  1036. //printf("receive2 %s \r\n", bufIn);
  1037. ContentOffset = strstr(bufIn, boundary);
  1038. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1039. if ( DataOffset != NULL ) {
  1040. DataOffset += 4;
  1041. }
  1042. }
  1043. TotalReceived = lenBufIn - (uint32_t)(ContentOffset - bufIn);
  1044. TotalData += TotalReceived;
  1045. strncat(bufOut, DataOffset, TotalReceived);
  1046. while (TotalData < size) {
  1047. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1048. bufIn[receivedBufLen] = '\0';
  1049. //printf("receive3 %s \r\n", receiveBuf);
  1050. strncat(bufOut, bufIn, lenBufIn);
  1051. TotalData += lenBufIn;
  1052. //printf("TotalData %d \r\n", TotalData);
  1053. /*printf("receivedBufLen %d \r\n", receivedBufLen);
  1054. printf("TotalData %d \r\n", TotalData);
  1055. printf("size %d \r\n", size);
  1056. printf("receive3 %s \r\n", (receiveBuf+receivedBufLen - 30));*/
  1057. }
  1058. //printf("TotalData %d \r\n", TotalData);
  1059. // check if last data packet
  1060. if (TotalData == size) {
  1061. // printf("receive %s \r\n", sendBuf);
  1062. if (strstr(bufOut, "BEGIN CERTIFICATE") != NULL) {
  1063. DataOffset = strstr(bufOut, "-----END CERTIFICATE");
  1064. uint32_t len_crt = (uint32_t)(DataOffset - bufOut) + 25;
  1065. memset(sSettings.our_srv_crt, 0, sizeof(sSettings.our_srv_crt));
  1066. memcpy(sSettings.our_srv_crt, bufOut, len_crt);
  1067. strcat(bufOut, "\r\n");
  1068. HTTP_SaveSettings();
  1069. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1070. strcpy(bufOut, HTTP_200_OK);
  1071. strcat(bufOut, "1");
  1072. } else {
  1073. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1074. strcpy(bufOut, HTTP_200_OK);
  1075. strcat(bufOut, "Некорректный сертефикат");
  1076. }
  1077. *lenBufOut = strlen(bufOut);
  1078. return bufOut;
  1079. }
  1080. return 0;
  1081. }
  1082. /**
  1083. * @brief
  1084. * @retval None
  1085. */
  1086. char *HTTP_SetInfoPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1087. {
  1088. char *DataOffset;
  1089. (void)reqNum;
  1090. if (seclevel == USER) {
  1091. return 0;
  1092. }
  1093. DataOffset = 0;
  1094. // POST Packet received{
  1095. TotalReceived = 0;
  1096. TotalData = 0;
  1097. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1098. bufOut[0] = '0';
  1099. // parse packet for Content-length field
  1100. size = Parse_Content_Length(bufIn, lenBufIn);
  1101. DataOffset = strstr(bufIn, "sysname");
  1102. // case of MSIE8 : we do not receive data in the POST packet
  1103. if (DataOffset == 0) {
  1104. SSL_ReadRoutine(&ssl, bufIn);
  1105. DataOffset = strstr(bufIn, "sysname");
  1106. }
  1107. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  1108. TotalData += TotalReceived;
  1109. strncat(bufOut, DataOffset, TotalReceived);
  1110. // check if last data packet
  1111. if (TotalData == size) {
  1112. strncat(bufOut, " ", 1);
  1113. HTTP_SetInfo(bufOut, strlen(bufOut));
  1114. memset(bufOut, 0, size);
  1115. strcpy(bufOut, HTTP_200_OK);
  1116. strcat(bufOut,
  1117. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/info.html\"/></head></html>\r\n\r\n");
  1118. *lenBufOut = strlen(bufOut);
  1119. return bufOut;
  1120. }
  1121. return 0;
  1122. }
  1123. /**
  1124. * @brief
  1125. * @retval None
  1126. */
  1127. void HTTP_SetInfo(char *buf, uint16_t lenBuf)
  1128. {
  1129. uint8_t valueLen = 0;
  1130. const uint8_t len = 110;
  1131. char value[330];
  1132. char str[110];
  1133. (void)lenBuf;
  1134. // ClearParamString(buf);
  1135. memset(value, 0, len);
  1136. /* Название устройства */
  1137. GetParamValue(buf, "sysname", value, &valueLen);
  1138. url_decode(str, sizeof(str), value);
  1139. SetNameDeviceStr(str);
  1140. memset(value, 0, len);
  1141. /* Владелец */
  1142. GetParamValue(buf, "owner", value, &valueLen);
  1143. url_decode(str, sizeof(str), value);
  1144. SetOwner(str);
  1145. memset(value, 0, len);
  1146. /* Владелец */
  1147. GetParamValue(buf, "sysLocation", value, &valueLen);
  1148. url_decode(str, sizeof(str), value);
  1149. SetLocation(str);
  1150. memset(value, 0, len);
  1151. /* Комментарий */
  1152. GetParamValue(buf, "comment", value, &valueLen);
  1153. url_decode(str, sizeof(str), value);
  1154. SetComment(str);
  1155. memset(value, 0, len);
  1156. HTTP_SaveSettings();
  1157. }
  1158. /**
  1159. * @brief Запуск/останов теста UPS
  1160. */
  1161. char *HTTP_UPSTest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1162. {
  1163. uint8_t valueLen = 0;
  1164. char tempValue[20];
  1165. char tempValue2[20];
  1166. int8_t res = 0;
  1167. char log_string[50];
  1168. (void)lenBufIn;
  1169. (void)reqNum;
  1170. memset(tempValue, 0, 20);
  1171. memset(tempValue2, 0, 20);
  1172. memset(log_string, 0, 50);
  1173. strcpy(bufOut, HTTP_200_OK);
  1174. GetParamValue(bufIn, "func", tempValue, &valueLen);
  1175. if (strcmp(tempValue, "stop") == 0) {
  1176. res = ups_metac_service_pdu(ups_cancel_test);
  1177. if (res == 1 || res == 0) {
  1178. strcat(bufOut, "Команда \"Останов теста\" принята ИБП!");
  1179. strcpy(log_string, name_login);
  1180. strcat(log_string, " (Останов)");
  1181. log_event_data(LOG_TEST_UPS, log_string);
  1182. }
  1183. if (res == -1) {
  1184. strcat(bufOut, "Команда \"Останов теста\" отклонена ИБП!");
  1185. }
  1186. } else if (strcmp(tempValue, "discharge") == 0) {
  1187. res = ups_metac_service_pdu(ups_test_low_bat);
  1188. set_act_source(WEB_ACT);
  1189. if (res == 1 || res == 0) {
  1190. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1191. }
  1192. if (res == -1) {
  1193. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1194. }
  1195. } else if (strncmp(tempValue, "time", 6) == 0) {
  1196. GetParamValue(bufIn, "time", tempValue2, &valueLen);
  1197. TimeParam = atoi(tempValue2);
  1198. res = ups_metac_service_pdu(ups_test_time);
  1199. if (res == 1 || res == 0) {
  1200. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1201. }
  1202. if (res == -1) {
  1203. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1204. }
  1205. }
  1206. *lenBufOut = strlen(bufOut);
  1207. return bufOut;
  1208. }
  1209. /**
  1210. * @brief Выклюение UPS
  1211. */
  1212. char *HTTP_UPSshutdown(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1213. {
  1214. uint8_t valueLen = 0;
  1215. char *valueLenEnd = 0;
  1216. char tempValue[50];
  1217. char tempValue2[50];
  1218. int8_t res = 0;
  1219. char log_string[50];
  1220. (void)lenBufIn;
  1221. (void)reqNum;
  1222. memset(tempValue, 0, 50);
  1223. memset(log_string, 0, 50);
  1224. strcpy(bufOut, HTTP_200_OK);
  1225. GetParamValue(bufIn, "func", tempValue, &valueLen);
  1226. if (strcmp(tempValue, "reboot") == 0) {
  1227. res = ups_metac_service_pdu(ups_cancel_shut_down);
  1228. if (res == 1) {
  1229. strcpy(log_string, name_login);
  1230. strcat(log_string, " (Останов)");
  1231. log_event_data(LOG_SHUTDOWN_UPS, log_string);
  1232. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" принята ИБП!");
  1233. } else {
  1234. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" отклонена ИБП!");
  1235. }
  1236. } else if (strncmp(tempValue, "off", 5) == 0) {
  1237. memset(tempValue2, 0, 50);
  1238. GetParamValue(bufIn, "after", tempValue2, &valueLen);
  1239. TimeParamFloat = atof(tempValue2);
  1240. res = ups_metac_service_pdu(ups_shutdown);
  1241. if (res == 1) {
  1242. strcat(bufOut, "Команда \"Отключения нагрузки\" принята ИБП!");
  1243. log_event_data(LOG_SHUTDOWN_UPS, name_login);
  1244. } else {
  1245. strcat(bufOut, "Команда \"Отключения нагрузки\" отклонена ИБП!");
  1246. }
  1247. }
  1248. *lenBufOut = strlen(bufOut);
  1249. return bufOut;
  1250. }
  1251. char *HTTP_Reset(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1252. {
  1253. (void)bufIn;
  1254. (void)bufOut;
  1255. (void)lenBufIn;
  1256. (void)reqNum;
  1257. HTTP_ResetSettings();
  1258. HTTP_SaveSettings();
  1259. fs_open("/settings.html", &file);
  1260. *lenBufOut = file.len;
  1261. return file.data;
  1262. }
  1263. char *HTTP_Confirm(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1264. {
  1265. (void)bufIn;
  1266. (void)bufOut;
  1267. (void)lenBufIn;
  1268. (void)reqNum;
  1269. SetWebReinitFlag(false);
  1270. SetConfirmWebParamsFlag();
  1271. fs_open("/index.html", &file);
  1272. *lenBufOut = file.len;
  1273. return file.data;
  1274. }
  1275. char *HTTP_GetRequest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1276. {
  1277. (void)bufOut;
  1278. (void)reqNum;
  1279. #ifdef HTTP_AUTH_ENABLE
  1280. const char *html_page_name[] = {
  1281. "/main.css",
  1282. "/rotek.png",
  1283. "/favicon.ico",
  1284. "/role.js"
  1285. };
  1286. #endif
  1287. char filename[MAX_FILENAME_LEN];
  1288. char nonmatch[MAX_ETAG_LEN];
  1289. char *pnonmatch = NULL;
  1290. uint8_t len;
  1291. memset(filename, 0, MAX_FILENAME_LEN);
  1292. if (GetFileName(bufIn, filename, &len)) {
  1293. /* Parce If-Non_Match value */
  1294. #ifdef HTTP_AUTH_ENABLE
  1295. if (!Authenticated) {
  1296. for (uint8_t i = 0; i < 4; i ++) {
  1297. if (strcmp(filename, html_page_name[i]) == 0) {
  1298. break;
  1299. }
  1300. if (i == 3) {
  1301. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1302. strcpy(filename, "/rslogin.html");
  1303. } else {
  1304. strcpy(filename, "/login.html");
  1305. }
  1306. }
  1307. }
  1308. } else {
  1309. HTTP_UpdateUserLoginTime(user_id);
  1310. }
  1311. #endif
  1312. uint8_t nonmatch_len = Parse_Header(bufIn, lenBufIn, If_None_Match, 15, nonmatch);
  1313. if (nonmatch_len < MAX_ETAG_LEN && nonmatch_len > 0) {
  1314. //DBG printf("If_None_Match: %s\r\n", nonmatch);
  1315. pnonmatch = nonmatch;
  1316. }
  1317. return send_file(filename, pnonmatch, &file, lenBufOut);
  1318. }
  1319. return 0;
  1320. }
  1321. char* HTTP_NoFound(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1322. {
  1323. (void)bufIn;
  1324. (void)bufOut;
  1325. (void)lenBufIn;
  1326. (void)reqNum;
  1327. #ifdef HTTP_AUTH_ENABLE
  1328. HTTP_UpdateUserLoginTime(user_id);
  1329. #endif
  1330. fs_open("/index.html", &file); // +
  1331. *lenBufOut = file.len;
  1332. return file.data;
  1333. }
  1334. /**
  1335. * @brief Проверка пароля для перехода в режим bootloader
  1336. * @retval None
  1337. */
  1338. char *HTTP_ConfirmBootPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1339. {
  1340. (void)bufIn;
  1341. (void)lenBufIn;
  1342. (void)reqNum;
  1343. strcpy(bufOut, HTTP_200_OK);
  1344. *lenBufOut = strlen(bufOut);
  1345. /* Запускаем задачу отложенной перезагрузки. Контроллер должен успеть
  1346. отправить ответ серверу о статусе пароля */
  1347. HTTP_StartResetTask(true);
  1348. return bufOut;
  1349. }
  1350. #ifdef HTTP_AUTH_ENABLE
  1351. void LoginTimerCallback(TimerHandle_t pxTimer)
  1352. {
  1353. cnt_err_psw = 0;
  1354. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1355. xTimerStop(RepeatLoginTimer, 0);
  1356. }
  1357. /**
  1358. * @brief Проверка пароля для входа в Web
  1359. * @retval None
  1360. */
  1361. int HTTP_ConfirmWebPwd(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1362. {
  1363. char tempStr[52];
  1364. char login[20];
  1365. char password[20];
  1366. uint8_t valueLen, user_id = 0xff;
  1367. char *strPtr = 0;
  1368. char WebPassword[MAX_WEB_PASSWD_LEN];
  1369. char WebLogin[MAX_WEB_LOGIN_LEN];
  1370. memset(login, 0, 20);
  1371. memset(password, 0, 20);
  1372. memset(tempStr, 0, 52);
  1373. memset(name_login, 0, 50);
  1374. tempStr[0] = '0';
  1375. /* Get first 50 bytes of string */
  1376. strncat(tempStr, bufIn, 49);
  1377. /* Add " " to the string in order GetParamValue() can be able to parse the param */
  1378. strcat(tempStr, " ");
  1379. GetParamValue(tempStr, "login", login, &valueLen);
  1380. GetParamValue(tempStr, "password", password, &valueLen);
  1381. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1382. switch (RC_Login(login, password)) {
  1383. case RC_ERROR:
  1384. Authenticated = false;
  1385. break;
  1386. case RC_LOGIN_ADMIN_OK:
  1387. Authenticated = true;
  1388. user_id = 0;
  1389. break;
  1390. case RC_LOGIN_USER_OK:
  1391. Authenticated = true;
  1392. user_id = 1;
  1393. break;
  1394. case RC_NET_ERR:
  1395. Authenticated = false;
  1396. fl_raddius_net_err = true;
  1397. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1398. strcat(bufOut,
  1399. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Ошибка соединения с RADIUS сервером</h2></center></html>");
  1400. *lenBufOut = strlen(bufOut);
  1401. return SEND_REQUIRED_NO;
  1402. break;
  1403. case RC_ACC_DENIED:
  1404. Authenticated = false;
  1405. break;
  1406. default:
  1407. break;
  1408. }
  1409. } else {
  1410. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1411. GetUserLogin(user_id, WebLogin, &valueLen);
  1412. GetUserPassword(user_id, WebPassword, &valueLen);
  1413. /* Check login and password */
  1414. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1415. (strncmp(WebPassword, password, MAX_WEB_PASSWD_LEN) == 0)) {
  1416. /* Login and pass are valid */
  1417. /* TODO replace global flag with user-pass-cookie */
  1418. if (cnt_err_psw < 4) {
  1419. cnt_err_psw = 0;
  1420. Authenticated = true;
  1421. } else {
  1422. Authenticated = false;
  1423. }
  1424. break;
  1425. } else {
  1426. Authenticated = false;
  1427. }
  1428. }
  1429. }
  1430. if (Authenticated) {
  1431. /* Generate cookie */
  1432. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1433. /* Set users cookie */
  1434. HTTP_SetUserCookie(tempStr, user_id);
  1435. HTTP_UpdateUserLoginTime(user_id);
  1436. /* Send login and cookie back */
  1437. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1438. strcat(bufOut, login);
  1439. strcat(bufOut, "\r\nSet-Cookie: id=");
  1440. strcat(bufOut, tempStr);
  1441. sprintf(tempStr, "%d", (user_id + 1));
  1442. strcat(bufOut, "\r\nSet-Cookie: role=");
  1443. strcat(bufOut, tempStr);
  1444. strcat(bufOut, "\r\nSet-Cookie: auth=1");
  1445. strcat(bufOut, "\r\n\r\n");
  1446. strcat(bufOut,
  1447. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1448. *lenBufOut = strlen(bufOut);
  1449. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1450. snprintf(name_login, (strlen(login) + 1), login);
  1451. } else {
  1452. fl_raddius_net_err = false;
  1453. switch (user_id) {
  1454. case 0:
  1455. snprintf(name_login, sizeof(name_login), "Администратор");
  1456. break;
  1457. case 1:
  1458. snprintf(name_login, sizeof(name_login), "Пользователь");
  1459. break;
  1460. default:
  1461. snprintf(name_login, (strlen(login) + 1), login);
  1462. break;
  1463. }
  1464. }
  1465. log_event_data(LOG_LOGIN, name_login);
  1466. /* Запускаем задачу-таймер логаута. */
  1467. /* TODO отправить ответ серверу о статусе пароля */
  1468. return SEND_REQUIRED_YES;
  1469. } else {
  1470. if (cnt_err_psw <= 4) {
  1471. cnt_err_psw ++;
  1472. }
  1473. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1474. if (cnt_err_psw == 4) {
  1475. xTimerStart(RepeatLoginTimer, 0);
  1476. }
  1477. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1478. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1479. if (cnt_err_psw < 4) {
  1480. strcat(bufOut,
  1481. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1482. } else {
  1483. strcat(bufOut,
  1484. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1485. }
  1486. } else {
  1487. if (cnt_err_psw < 4) {
  1488. strcat(bufOut,
  1489. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1490. } else {
  1491. strcat(bufOut,
  1492. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1493. }
  1494. }
  1495. *lenBufOut = strlen(bufOut);
  1496. return SEND_REQUIRED_NO;
  1497. }
  1498. }
  1499. void HTTP_LOGIN(char *bufOut, uint16_t *lenBufOut)
  1500. {
  1501. char tempStr[50];
  1502. uint8_t valueLen;
  1503. char WebLogin[MAX_WEB_LOGIN_LEN];
  1504. GetUserLogin(ADMIN, WebLogin, &valueLen);
  1505. memset(tempStr, 0, 50);
  1506. memset(name_login, 0, 50);
  1507. /* TODO replace global flag with user-pass-cookie */
  1508. Authenticated = true;
  1509. /* Generate cookie */
  1510. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1511. /* Set users cookie */
  1512. HTTP_SetUserCookie(tempStr, ADMIN);
  1513. HTTP_UpdateUserLoginTime(ADMIN);
  1514. /* Send login and cookie back */
  1515. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1516. strcat(bufOut, WebLogin);
  1517. strcat(bufOut, "\r\nSet-Cookie: id=");
  1518. strcat(bufOut, tempStr);
  1519. strcat(bufOut, "\r\nSet-Cookie: role=0");
  1520. strcat(bufOut, "\r\nSet-Cookie: auth=0");
  1521. strcat(bufOut, "\r\n\r\n");
  1522. strcat(bufOut,
  1523. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1524. *lenBufOut = strlen(bufOut);
  1525. snprintf(name_login, sizeof(name_login), "Администратор");
  1526. }
  1527. /**
  1528. * @brief Чтение Cookie пользователя
  1529. */
  1530. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len)
  1531. {
  1532. sprintf(str, "%s", users[user_id].cookie);
  1533. *len = strlen(str);
  1534. }
  1535. /**
  1536. * @brief Установка Cookie пользователя
  1537. */
  1538. static void HTTP_SetUserCookie(char *str, uint8_t user_id)
  1539. {
  1540. strcpy(users[user_id].cookie, str);
  1541. }
  1542. /**
  1543. * @brief Обновление времени последней активности пользователя
  1544. */
  1545. static void HTTP_UpdateUserLoginTime(uint8_t user_id)
  1546. {
  1547. xTimerStart(users[user_id].LogoutTimer, 0);
  1548. }
  1549. /**
  1550. * @brief Принудительный логаут пользователя
  1551. */
  1552. static void HTTP_ForceUserLogout(uint8_t user_id)
  1553. {
  1554. char cookie[MAX_WEB_COOKIE_LEN];
  1555. /* Flush user cookie by random value */
  1556. sprintf(cookie, "%X", (unsigned int)GetRandomNumber());
  1557. HTTP_SetUserCookie(cookie, user_id);
  1558. }
  1559. /**
  1560. * @brief >Callback таймера логаута пользователя
  1561. */
  1562. void LogoutTimerCallback(TimerHandle_t pxTimer)
  1563. {
  1564. uint8_t user_id = (uint8_t)pvTimerGetTimerID( pxTimer );
  1565. if ( sSettings.sRADIUS.Auth_enable ) {
  1566. HTTP_ForceUserLogout(user_id);
  1567. }
  1568. }
  1569. /**
  1570. * @brief Смена пароля пользователя
  1571. * @retval None
  1572. */
  1573. char *HTTP_ChangeUserPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1574. {
  1575. char tempStr[110];
  1576. char value[20];
  1577. char login[20];
  1578. char password[20];
  1579. char tmp[75];
  1580. uint8_t valueLen, valueLen2, user_id;
  1581. char WebLogin[MAX_WEB_LOGIN_LEN];
  1582. (void)reqNum;
  1583. (void)lenBufIn;
  1584. memset(login, 0, sizeof(login));
  1585. memset(password, 0, sizeof(password));
  1586. memset(tempStr, 0, sizeof(tempStr));
  1587. memset(value, 0, sizeof(value));
  1588. memset(tmp, 0, sizeof(tmp));
  1589. ClearParamString(bufIn);
  1590. strncpy(tempStr, bufIn, 110);
  1591. strcpy(bufOut, HTTP_200_OK);
  1592. if (GetParamValue(tempStr, "username", login, &valueLen) &&
  1593. GetParamValue(tempStr, "oldpass", tmp, &valueLen)) {
  1594. url_decode(password, sizeof(password), tmp);
  1595. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1596. memset(value, 0, 20);
  1597. memset(WebLogin, 0, MAX_WEB_LOGIN_LEN);
  1598. GetUserLogin(user_id, WebLogin, &valueLen);
  1599. GetUserPassword(user_id, value, &valueLen2);
  1600. /* Check login and password */
  1601. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1602. (memcmp(password, value, 11) == 0)) {
  1603. memset(tmp, 0, sizeof(tmp));
  1604. memset(password, 0, 20);
  1605. if (GetParamValue(tempStr, "newpass", tmp, &valueLen)) {
  1606. url_decode(password, sizeof(password), tmp);
  1607. valueLen = strlen(password);
  1608. memcpy(sSettings.sAuth[user_id].password, password, sizeof(sSettings.sAuth[user_id].password));
  1609. HTTP_SaveSettings();
  1610. log_event_data(LOG_PSW_CHANGE, name_login);
  1611. strcat(bufOut, "Пароль успешно изменён");
  1612. *lenBufOut = strlen(bufOut);
  1613. return bufOut;
  1614. } else {
  1615. strcat(bufOut, "Введены некорректные данные!");
  1616. *lenBufOut = strlen(bufOut);
  1617. return bufOut;
  1618. }
  1619. }
  1620. }
  1621. strcat(bufOut, "Введён неверный пароль!");
  1622. } else {
  1623. strcat(bufOut, "Введены некорректные данные!");
  1624. }
  1625. *lenBufOut = strlen(bufOut);
  1626. return bufOut;
  1627. }
  1628. //
  1629. static void getAuthenticatedState(void)
  1630. {
  1631. char CookieBuf[51];
  1632. char *CookiePtr = NULL;
  1633. char name[MAX_WEB_COOKIE_LEN];
  1634. char id[MAX_WEB_COOKIE_LEN];
  1635. uint8_t nameLen = 0, idLen = 0;
  1636. receiveBuf[receivedBufLen] = '\0';
  1637. //printf("receive %s \r\n", receiveBuf);
  1638. // Get cookie "uname" value
  1639. memset(CookieBuf, 0, sizeof(CookieBuf));
  1640. CookiePtr = strstr(receiveBuf, "uname=");
  1641. strncpy(CookieBuf, CookiePtr, 50);
  1642. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1643. memset(name, 0, MAX_WEB_COOKIE_LEN);
  1644. GetCookieValue(CookieBuf, "uname=", name, &nameLen);
  1645. //printf("********CookieBuf2= %s\r\n", CookieBuf);
  1646. //printf("********uname= %s\r\n", name);
  1647. memset(CookieBuf, 0, sizeof(CookieBuf));
  1648. // Get cookie "id" value
  1649. CookiePtr = strstr(receiveBuf, " id=");
  1650. strncpy(CookieBuf, CookiePtr, 50);
  1651. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1652. memset(id, 0, MAX_WEB_COOKIE_LEN);
  1653. GetCookieValue(CookieBuf, "id=", id, &idLen);
  1654. // printf("********ID= %s\r\n", id);
  1655. seclevel = 0xFF;
  1656. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1657. HTTP_GetUserCookie(user_id, CookieBuf, &idLen);
  1658. if (strncmp(id, CookieBuf, idLen) == 0 ) {
  1659. GetUserLevelInt(user_id, &seclevel);
  1660. Authenticated = true;
  1661. break;
  1662. }
  1663. Authenticated = false;
  1664. seclevel = 0xFF;
  1665. }
  1666. }
  1667. char *HTTP_LoginPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1668. {
  1669. (void)reqNum;
  1670. uint32_t req_data_received = 0;
  1671. char *offset = 0;
  1672. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1673. /* parse packet for Content-length field */
  1674. post_data_count = Parse_Content_Length(bufIn, lenBufIn);
  1675. printf("Content-length: %d\r\n", (int)post_data_count);
  1676. if (post_data_count < MAX_POST_REQ_LEN) {
  1677. memset(post_req_data, 0, MAX_POST_REQ_LEN);
  1678. /* parse packet for "\r\n\r\n" */
  1679. offset = (strstr(bufIn, "\r\n\r\n")) + 4;
  1680. req_data_received = lenBufIn - (offset - bufIn);
  1681. printf("req data received: %d\r\n", (int)req_data_received);
  1682. /* Check if "\r\n\r\n" was found */
  1683. if (offset != 0) {
  1684. /* if data was splited in two packets */
  1685. if (req_data_received < post_data_count) {
  1686. /* Copy request data to buffer */
  1687. snprintf(post_req_data, req_data_received, "%s", bufIn);
  1688. post_data_count -= req_data_received;
  1689. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1690. offset = bufIn;
  1691. }
  1692. /* if data received completely */
  1693. if (strlen(bufIn) != 0) {
  1694. strncat(post_req_data, offset, post_data_count);
  1695. //printf("post_req_data: %s\r\n", post_req_data);
  1696. /* End reqest */
  1697. post_data_count = 0;
  1698. HTTP_ConfirmWebPwd(post_req_data, bufOut, strlen(post_req_data), lenBufOut);
  1699. *lenBufOut = strlen(bufOut);
  1700. return bufOut;
  1701. }
  1702. }
  1703. /* request was fragmented before "\r\n\r\n" */
  1704. else {
  1705. post_data_count = 0;
  1706. /* Redirect to login page */
  1707. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1708. fs_open("/rslogin.html", &file);
  1709. } else {
  1710. fs_open("/login.html", &file);
  1711. }
  1712. *lenBufOut = file.len;
  1713. return file.data;
  1714. }
  1715. } else {
  1716. DBG printf("Too long POST request!\r\n");
  1717. /* Ignore request */
  1718. post_data_count = 0;
  1719. /* Redirect to login page */
  1720. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1721. fs_open("/rslogin.html", &file);
  1722. } else {
  1723. fs_open("/login.html", &file);
  1724. }
  1725. *lenBufOut = file.len;
  1726. return file.data;
  1727. }
  1728. return 0;
  1729. }
  1730. char *HTTP_LogoutPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1731. {
  1732. (void)bufIn;
  1733. (void)bufOut;
  1734. (void)lenBufIn;
  1735. (void)reqNum;
  1736. Authenticated = false;
  1737. seclevel = 0xFF;
  1738. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1739. fs_open("/rslogin.html", &file);
  1740. } else {
  1741. fs_open("/login.html", &file);
  1742. }
  1743. *lenBufOut = file.len;
  1744. return file.data;
  1745. }
  1746. #endif
  1747. /**
  1748. * @brief Send callback for log file transfer (messages as is, not ordered)
  1749. */
  1750. void HTTP_SendHistory(void)
  1751. {
  1752. uint32_t nbytes = 0;
  1753. static bool start = true;
  1754. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1755. if (log_ptr + FILE_BUF_MAX_LEN <= log_size) {
  1756. nbytes = History_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN, start);
  1757. } else if (log_ptr < log_size) {
  1758. nbytes = History_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1759. } else {
  1760. nbytes = 0;
  1761. }
  1762. log_ptr += nbytes;
  1763. start = false;
  1764. if (nbytes == 0) {
  1765. // File transfer finished.
  1766. start = true;
  1767. // Clear file transfer in progress flag
  1768. fLogTransInprog = false;
  1769. return;
  1770. }
  1771. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1772. HTTP_SendHistory();
  1773. }
  1774. /**
  1775. * @brief Sent callback for log file transfer (messages as is, not ordered)
  1776. */
  1777. void HTTP_SendLog(void)
  1778. {
  1779. uint32_t nbytes = 0;
  1780. static bool start = true;
  1781. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1782. if (log_ptr + FILE_BUF_MAX_LEN_LOG <= log_size) {
  1783. nbytes = LOG_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN_LOG, start);
  1784. } else if (log_ptr < log_size) {
  1785. nbytes = LOG_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1786. } else {
  1787. nbytes = 0;
  1788. }
  1789. log_ptr += nbytes;
  1790. start = false;
  1791. if (nbytes == 0) {
  1792. // File transfer finished.
  1793. start = true;
  1794. // Clear file transfer in progress flag
  1795. fLogTransInprog = false;
  1796. return;
  1797. }
  1798. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1799. HTTP_SendLog();
  1800. return;
  1801. }
  1802. /**
  1803. * @brief sends file from flash FS
  1804. * @param filename: pointer to the file name to send
  1805. * @param pnonmatch: pointer to the If-Non_Match value
  1806. * @param pcb: pointer to a tcp_pcb struct
  1807. * @param hs: pointer to a http_state struct
  1808. * @param file: pointer to a fs_file struct
  1809. * @retval
  1810. */
  1811. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len)
  1812. {
  1813. int res = 0;
  1814. char etag[MAX_ETAG_LEN];
  1815. char *petag = NULL;
  1816. res = fs_open(filename, file);
  1817. if (res == 0) {
  1818. printf("Not found: %s\r\n", filename);
  1819. sprintf(filename, "/index.html");
  1820. fs_open(filename, file);
  1821. }
  1822. /* Find Etag value */
  1823. uint8_t etag_len = Parse_Header(file->data, file->len, Etag, 6, etag);
  1824. if (etag_len < MAX_ETAG_LEN && etag_len > 0) {
  1825. DBG printf("Etag: %s\r\n", etag);
  1826. petag = etag;
  1827. }
  1828. /* Compare Etag and If-Non-Match fields */
  1829. if (pnonmatch && petag && (strcmp(pnonmatch, petag) == 0)) {
  1830. /* Send 304 code */
  1831. sprintf(sendBuf, HTTP_304_NOT_MODIFIED);
  1832. DBG printf(sendBuf);
  1833. *Len = strlen(sendBuf);
  1834. return sendBuf;
  1835. } else {
  1836. *Len = file->len;
  1837. return file->data;
  1838. }
  1839. }
  1840. /**
  1841. * @brief Extract the custom field data from HTML data
  1842. * @param data : pointer on receive packet buffer
  1843. * @param len : buffer length
  1844. * @param field : field name
  1845. * @param flen : field name length
  1846. * @retval value : pointer for field data
  1847. */
  1848. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value)
  1849. {
  1850. uint32_t i = 0, size = 0;
  1851. char *ptr;
  1852. uint32_t Offset = 0;
  1853. /* Find field name in data buffer */
  1854. for (i = 0; i < len; i++) {
  1855. if (strncmp ((char *)(data + i), field, flen) == 0) {
  1856. Offset = i + flen;
  1857. break;
  1858. }
  1859. }
  1860. /* Copy Field value */
  1861. if (Offset) {
  1862. i = 0;
  1863. ptr = (char *)(data + Offset);
  1864. while (*(ptr + i) != 0x0d) {
  1865. value[i] = *(ptr + i);
  1866. i++;
  1867. }
  1868. value[i] = '\0';
  1869. size = i;
  1870. }
  1871. return size;
  1872. }
  1873. /**
  1874. * @brief
  1875. * @retval None
  1876. */
  1877. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen)
  1878. {
  1879. char *beginValue = NULL;
  1880. char *endValue = NULL;
  1881. int len = 0;
  1882. char *strPtr = NULL;
  1883. strPtr = strstr(inStr, "GET");
  1884. if (strPtr == NULL) {
  1885. strPtr = strstr(inStr, "POST");
  1886. }
  1887. if (strPtr == NULL) {
  1888. *fileNameLen = 0;
  1889. return false;
  1890. } else {
  1891. beginValue = strpbrk(strPtr, "/");
  1892. endValue = strpbrk(beginValue, " ");
  1893. if (endValue == NULL) {
  1894. *fileNameLen = 0;
  1895. return false;
  1896. }
  1897. len = endValue - beginValue;
  1898. if (len < MAX_FILENAME_LEN) {
  1899. strncpy(fileName, beginValue, len);
  1900. *fileNameLen = len;
  1901. fileName[len] = '\0';
  1902. return true;
  1903. } else {
  1904. return false;
  1905. }
  1906. }
  1907. }
  1908. #endif