my_ssl_server.c 68 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266
  1. /*
  2. * ssl_server.c
  3. *
  4. * Created on: 08.11.2017
  5. * Author: balbekova
  6. */
  7. #include "common_config.h"
  8. #ifdef SSL_SERVER_ENABLE
  9. #include "lwip/opt.h"
  10. #include "lwip/arch.h"
  11. #include "lwip/api.h"
  12. #include "lwip/tcp.h"
  13. #include "my_ssl_server.h"
  14. #include "web_params_api.h"
  15. #include "parameters.h"
  16. #include "urlcode.h"
  17. #include "bt6703_fs/fsdata.c"
  18. #include "settings_api.h"
  19. #include "netconf.h"
  20. #include "testing.h"
  21. #include "rtc.h"
  22. #include "rng.h"
  23. #include "megatec.h"
  24. #include "log.h"
  25. #include "hal.h"
  26. #include "radius_user.h"
  27. #include "sntp_api.h"
  28. #ifdef PRINTF_STDLIB
  29. #include <stdio.h>
  30. #endif
  31. #ifdef PRINTF_CUSTOM
  32. #include "tinystdio.h"
  33. #endif
  34. #include <string.h>
  35. #include <stdlib.h>
  36. #include "FreeRTOS.h"
  37. #include "task.h"
  38. #include "fr_timers.h"
  39. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err);
  40. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err);
  41. static int fs_open(char *name, struct fs_file *file);
  42. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len);
  43. static void send_data(struct tcp_pcb *pcb, struct http_state *hs);
  44. #ifdef HTTP_AUTH_ENABLE
  45. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len);
  46. static void HTTP_SetUserCookie(char *str, uint8_t user_id);
  47. static void HTTP_UpdateUserLoginTime(uint8_t user_id);
  48. static void HTTP_ForceUserLogout(uint8_t user_id);
  49. void LogoutTimerCallback(TimerHandle_t pxTimer);
  50. void LoginTimerCallback(TimerHandle_t pxTimer);
  51. static void getAuthenticatedState(void);
  52. #endif
  53. static uint32_t Parse_Content_Length(char *data, uint32_t len);
  54. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len);
  55. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value);
  56. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen);
  57. char sendBuf[SEND_BUF_MAX_LEN];
  58. uint16_t sendBufLoadLen = 0;
  59. uint16_t printLen = 0;
  60. char receiveBuf[RECIVE_BUF_MAX_LEN];
  61. uint16_t receivedBufLen = 0;
  62. #ifdef HTTP_AUTH_ENABLE
  63. #define MAX_POST_REQ_LEN 256
  64. char post_req_data[MAX_POST_REQ_LEN];
  65. uint32_t post_data_count = 0;
  66. uint32_t log_post_reqn;
  67. /* Logout timeout, 30 minutes */
  68. #define WEB_LOGOUT_TIME configTICK_RATE_HZ*60*30
  69. /* Max user active sessions count */
  70. #define WEB_USER_MAX_SESSION_COUNT 5
  71. struct {
  72. //auth_session_t session[WEB_USER_MAX_SESSION_COUNT];
  73. char cookie[MAX_WEB_COOKIE_LEN];
  74. TimerHandle_t LogoutTimer;
  75. } users[MAX_WEB_USERS];
  76. TimerHandle_t RepeatLoginTimer;
  77. /* Repeat Login timeout, 1 minutes */
  78. #define REPEAT_LOGIN_TIME configTICK_RATE_HZ*60*1
  79. uint8_t cnt_err_psw = 0;
  80. bool Authenticated = false;
  81. uint8_t user_id; // Id of currently logged-in user
  82. /* Level of currently logged-in user */
  83. uint8_t seclevel = 0xFF;
  84. #endif
  85. /* Max HTTP file name length including "/" */
  86. #define MAX_FILENAME_LEN 32
  87. /* Max HTTP Etag field length */
  88. #define MAX_ETAG_LEN 48
  89. static const char If_None_Match[] = "If-None-Match: ";
  90. static const char Etag[] = "ETag: ";
  91. static volatile uint32_t size = 0;
  92. static uint32_t TotalReceived = 0;
  93. static volatile uint32_t TotalData = 0;
  94. static uint32_t ContentLengthOffset = 0;
  95. static const char Content_Length[17] =
  96. /* Content Length */
  97. {0x43, 0x6f, 0x6e, 0x74, 0x65, 0x6e, 0x74, 0x2d, 0x4c, 0x65, 0x6e, 0x67, 0x74, 0x68, 0x3a, 0x20, };
  98. const char HTTP_304_NOT_MODIFIED[] = "HTTP/1.1 304 Not Modified\r\n\r\n";
  99. const char HTTP_403_NOT_WHITE_LIST[] = "HTTP/1.1 403 Forbidden\r\n\r\n";
  100. const char HTTP_401_NO_AUTH[] = "HTTP/1.1 401 No authorization\r\n\r\n";
  101. const char HTTP_500_SERVER_ERROR[] = "HTTP/1.1 500 Internal Server Error\r\n\r\n";
  102. const char HTTP_200_OK[] = "HTTP/1.1 200 OK\r\n\r\n";
  103. /* utf-8 marker to support MS Excel */
  104. const char UTF8_BOM[] = {0xEF, 0xBB, 0xBF, 0x00};
  105. unsigned long log_ptr = 0;
  106. unsigned long log_size = 0;
  107. bool fLogTransInprog = false;
  108. static bool fl_raddius_net_err = false;
  109. /**
  110. * @brief Общая структура настроек
  111. */
  112. extern SETTINGS_t sSettings;
  113. struct fs_file file = {0, 0};
  114. typedef struct {
  115. char client_req[30];
  116. uint8_t len;
  117. REQ_TYPE_SEND_t req_type_send;
  118. ACCESS_TYPE_t accsess;
  119. char *(*handler)(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut);
  120. } web_func_handler_t;
  121. web_func_handler_t process_web_funcs[] = {
  122. #ifdef HTTP_AUTH_ENABLE
  123. { "POST /login.cgi", 15, COMMON_ANSWER, ALL_ACCESS, HTTP_LoginPage },
  124. { "GET /logout.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_LogoutPage },
  125. { "GET /changepwd.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ChangeUserPwd },
  126. #endif
  127. { "GET /getJson.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetParamsPage },
  128. { "GET /settings.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSettingsPage },
  129. { "POST /settings.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_SetSettingsPage },
  130. { "GET /getcert.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_GetSert},
  131. { "POST /srv_crt_upload.cgi", 24, COMMON_ANSWER, TIME_ACCESS, HTTP_Upload_Sert},
  132. { "GET /info.cgi", 13, COMMON_ANSWER, TIME_ACCESS, HTTP_GetInfo },
  133. { "POST /info.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_SetInfoPage },
  134. { "GET /history.cgi", 16, HISTORY_ANSWER, TIME_ACCESS, HTTP_HistoryPage },
  135. { "GET /ups_history.cgi", 19, UPS_HISTORY_ANSWER, TIME_ACCESS, HTTP_UpsHistoryPage },
  136. { "GET /reset.cgi", 14, COMMON_ANSWER, TIME_ACCESS, HTTP_Reset },
  137. { "GET /bat_test.cgi", 17, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSTest },
  138. { "GET /ups_power.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_UPSshutdown },
  139. { "GET /reboot.cgi", 15, COMMON_ANSWER, TIME_ACCESS, HTTP_Reboot },
  140. { "GET /confirm.cgi", 16, COMMON_ANSWER, TIME_ACCESS, HTTP_Confirm },
  141. { "GET /fw_update.cgi", 18, COMMON_ANSWER, TIME_ACCESS, HTTP_ConfirmBootPwd },
  142. { "GET /ups_serial.cgi", 19, COMMON_ANSWER, TIME_ACCESS, HTTP_UPS_Serial },
  143. { "GET", 3, COMMON_ANSWER, ALL_ACCESS, HTTP_GetRequest },
  144. { "", 0, COMMON_ANSWER, ALL_ACCESS, HTTP_NoFound },
  145. { "", 0, 0, 0, NULL }
  146. };
  147. /**
  148. * @brief closes tcp connection
  149. * @param pcb: pointer to a tcp_pcb struct
  150. * @param hs: pointer to a http_state struct
  151. * @retval
  152. */
  153. static void close_conn(struct tcp_pcb *pcb, struct http_state *hs)
  154. {
  155. tcp_arg(pcb, NULL);
  156. tcp_sent(pcb, NULL);
  157. tcp_recv(pcb, NULL);
  158. mem_free(hs);
  159. err_t err = tcp_close(pcb);
  160. DBG printf("%p close = %d (pcb: %d, pbuf_pool: %d)\r\n", pcb, err,
  161. lwip_stats.memp[MEMP_TCP_PCB]->used,
  162. lwip_stats.memp[MEMP_PBUF_POOL]->used);
  163. }
  164. /**
  165. * @brief callback function for handling TCP HTTP traffic
  166. * @param arg: pointer to an argument structure to be passed to callback function
  167. * @param pcb: pointer to a tcp_pcb structure
  168. * @param p: pointer to a packet buffer
  169. * @param err: LwIP error code
  170. * @retval err
  171. */
  172. static err_t http_recv(void *arg, struct tcp_pcb *pcb, struct pbuf *p, err_t err)
  173. {
  174. char *data;
  175. struct http_state *hs;
  176. char buf[150];
  177. hs = arg;
  178. if (err == ERR_OK && p != NULL) {
  179. tcp_recved(pcb, p->tot_len);
  180. if (hs->file == NULL) {
  181. data = p->payload;
  182. receivedBufLen = p->tot_len;
  183. memcpy(receiveBuf, p->payload, receivedBufLen);
  184. // На производстве
  185. if (strncmp(data, "GET /setProdate.cgi", 19) == 0 && strncmp(sSettings.sFlags.testState, "T2OK", 4)) {
  186. HTTP_Prodate(receiveBuf, sendBuf, receivedBufLen, &sendBufLoadLen);
  187. hs->file = sendBuf;
  188. hs->left = sendBufLoadLen;
  189. send_data(pcb, hs);
  190. tcp_sent(pcb, http_sent);
  191. } else {
  192. strcpy(sendBuf, HTTP_200_OK);
  193. memset(buf, 0, sizeof(buf));
  194. // strcat(sendBuf,"<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://192.168.14.35\"/></head></html>\r\n\r\n");
  195. if (sSettings.sFlags.netsettingsChanged == true) {
  196. sprintf(buf,
  197. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  198. sSettings.sWebTempParams.ip);
  199. } else {
  200. sprintf(buf,
  201. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=https://%s\"/></head></html>\r\n\r\n",
  202. sSettings.sWebParams.ip);
  203. }
  204. strcat(sendBuf, buf);
  205. // strcat(sendBuf,"1");
  206. sendBufLoadLen = strlen(sendBuf);
  207. hs->file = sendBuf;
  208. hs->left = sendBufLoadLen;
  209. send_data(pcb, hs);
  210. tcp_sent(pcb, http_sent);
  211. }
  212. }
  213. pbuf_free(p);
  214. close_conn(pcb, hs);
  215. }
  216. if (err == ERR_OK && p == NULL) {
  217. close_conn(pcb, hs);
  218. }
  219. return ERR_OK;
  220. }
  221. /**
  222. * @brief callback function for handling connection errors
  223. * @param arg: pointer to an argument to be passed to callback function
  224. * @param err: LwIP error code
  225. * @retval none
  226. */
  227. static void conn_err(void *arg, err_t err)
  228. {
  229. struct http_state *hs;
  230. (void)err;
  231. hs = arg;
  232. mem_free(hs);
  233. }
  234. /**
  235. * @brief callback function called after a successfull TCP data packet transmission
  236. * @param arg: pointer to an argument to be passed to callback function
  237. * @param pcb: pointer on tcp_pcb structure
  238. * @param len
  239. * @retval err : LwIP error code
  240. */
  241. static err_t http_sent(void *arg, struct tcp_pcb *pcb, u16_t len)
  242. {
  243. struct http_state *hs;
  244. (void)len;
  245. hs = arg;
  246. if (hs->left > 0) {
  247. send_data(pcb, hs);
  248. } else {
  249. close_conn(pcb, hs);
  250. }
  251. return ERR_OK;
  252. }
  253. /**
  254. * @brief sends data found in member "file" of a http_state struct
  255. * @param pcb: pointer to a tcp_pcb struct
  256. * @param hs: pointer to a http_state struct
  257. * @retval none
  258. */
  259. static void send_data(struct tcp_pcb *pcb, struct http_state *hs)
  260. {
  261. err_t err;
  262. u16_t len;
  263. /* We cannot send more data than space available in the send
  264. buffer */
  265. if (tcp_sndbuf(pcb) < hs->left) {
  266. len = tcp_sndbuf(pcb);
  267. } else {
  268. len = hs->left;
  269. }
  270. err = tcp_write(pcb, hs->file, len, 0);
  271. if (err == ERR_OK) {
  272. hs->file += len;
  273. hs->left -= len;
  274. }
  275. }
  276. /**
  277. * @brief tcp poll callback function
  278. * @param arg: pointer to an argument to be passed to callback function
  279. * @param pcb: pointer on tcp_pcb structure
  280. * @retval err_t
  281. */
  282. static err_t http_poll(void *arg, struct tcp_pcb *pcb)
  283. {
  284. if (arg == NULL) {
  285. tcp_close(pcb);
  286. } else {
  287. send_data(pcb, (struct http_state *)arg);
  288. }
  289. return ERR_OK;
  290. }
  291. /**
  292. * @brief callback function on TCP connection setup ( on port 80)
  293. * @param arg: pointer to an argument structure to be passed to callback function
  294. * @param pcb: pointer to a tcp_pcb structure
  295. * &param err: Lwip stack error code
  296. * @retval err
  297. */
  298. static err_t http_accept(void *arg, struct tcp_pcb *pcb, err_t err)
  299. {
  300. struct http_state *hs;
  301. /* Allocate memory for the structure that holds the state of the connection */
  302. hs = mem_malloc(sizeof(struct http_state));
  303. if (hs == NULL) {
  304. return ERR_MEM;
  305. }
  306. /* Initialize the structure. */
  307. hs->file = NULL;
  308. hs->left = 0;
  309. /* Tell TCP that this is the structure we wish to be passed for our
  310. callbacks. */
  311. tcp_arg(pcb, hs);
  312. /* Tell TCP that we wish to be informed of incoming data by a call
  313. to the http_recv() function. */
  314. tcp_recv(pcb, http_recv);
  315. tcp_err(pcb, conn_err);
  316. tcp_poll(pcb, http_poll, 10);
  317. return ERR_OK;
  318. }
  319. /**
  320. * @brief Opens a file defined in fsdata.c ROM filesystem
  321. * @param name : pointer to a file name
  322. * @param file : pointer to a fs_file structure
  323. * @retval 1 if success, 0 if fail
  324. */
  325. static int fs_open(char *name, struct fs_file *file)
  326. {
  327. struct fsdata_file_noconst *f;
  328. for (f = (struct fsdata_file_noconst *)FS_ROOT; f != NULL; f = (struct fsdata_file_noconst *)f->next) {
  329. if (!strcmp(name, f->name)) {
  330. file->data = f->data;
  331. file->len = f->len;
  332. return 1;
  333. }
  334. }
  335. return 0;
  336. }
  337. /**
  338. * @brief Initialize the HTTP server (start its thread)
  339. * @param none
  340. * @retval None
  341. */
  342. void HTTP_Init()
  343. {
  344. struct tcp_pcb *pcb;
  345. pcb = tcp_new();
  346. tcp_bind(pcb, IP_ADDR_ANY, 80);
  347. pcb = tcp_listen(pcb);
  348. tcp_accept(pcb, http_accept);
  349. }
  350. /**
  351. * @brief Extract the Content_Length data from HTML data
  352. * @param data : pointer on receive packet buffer
  353. * @param len : buffer length
  354. * @retval size : Content_length in numeric format
  355. */
  356. static uint32_t Parse_Content_Length(char *data, uint32_t len)
  357. {
  358. uint32_t i = 0, size = 0, S = 1;
  359. int32_t j = 0;
  360. char sizestring[6], *ptr;
  361. ContentLengthOffset = 0;
  362. /* find Content-Length data in packet buffer */
  363. for (i = 0; i < len; i++) {
  364. if (strncmp ((char *)(data + i), Content_Length, 16) == 0) {
  365. ContentLengthOffset = i + 16;
  366. break;
  367. }
  368. }
  369. /* read Content-Length value */
  370. if (ContentLengthOffset) {
  371. i = 0;
  372. ptr = (char *)(data + ContentLengthOffset);
  373. while (*(ptr + i) != 0x0d) {
  374. sizestring[i] = *(ptr + i);
  375. i++;
  376. ContentLengthOffset++;
  377. }
  378. if (i > 0) {
  379. /* transform string data into numeric format */
  380. for (j = i - 1; j >= 0; j--) {
  381. size += (sizestring[j] - 0x30) * S;
  382. S = S * 10;
  383. }
  384. }
  385. }
  386. return size;
  387. }
  388. /**
  389. * @brief
  390. * @retval None
  391. */
  392. uint8_t GetCookieValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  393. {
  394. char *beginValue = 0;
  395. char *endValue = 0;
  396. char *endValueTemp = 0;
  397. int len = 0;
  398. char *strPtr = 0;
  399. strPtr = strstr(inStr, paramName);
  400. if (strPtr != 0) {
  401. beginValue = strpbrk(strPtr, "=");
  402. endValue = strpbrk(strPtr, ";");
  403. endValueTemp = strpbrk(strPtr, "\r");
  404. if (endValueTemp != 0 && endValueTemp < endValue) {
  405. endValue = endValueTemp;
  406. }
  407. if (endValue == 0) {
  408. endValue = strpbrk(strPtr, "\n");
  409. }
  410. len = endValue - beginValue - 1;
  411. strncpy(paramValue, beginValue + 1, len);
  412. *endValue = '0';
  413. *beginValue = '0';
  414. *paramLen = len;
  415. return 1;
  416. } else {
  417. *paramLen = 0;
  418. return 0;
  419. }
  420. }
  421. char *Parce_Boundary(const char *data, uint32_t len, char *dst, uint8_t dstlen)
  422. {
  423. char *ptr = NULL;
  424. char *boundary = NULL;
  425. uint8_t i = 0;
  426. for (uint32_t j = 0; j < len; j++) {
  427. if (strncmp ((char *)(data + j), "boundary=", 9) == 0) {
  428. boundary = (char *)data + j + 9;
  429. break;
  430. }
  431. }
  432. if (!boundary) { return NULL; }
  433. *dst++ = '-';
  434. *dst++ = '-';
  435. ptr = boundary;
  436. while ((*ptr != 0x0d) && (i < dstlen - 4)) {
  437. *dst++ = *ptr++;
  438. i++;
  439. }
  440. //*dst++ = '-';
  441. //*dst++ = '-';
  442. *dst = '\0';
  443. if (i > 0) {
  444. return boundary;
  445. } else {
  446. return NULL;
  447. }
  448. }
  449. void ClearParamString(char *inBuf)
  450. {
  451. uint16_t len;
  452. char *str;
  453. str = strstr(inBuf, "HTTP");
  454. if (str != 0) {
  455. len = str - inBuf;
  456. memset(str, 0, RECIVE_BUF_MAX_LEN - len - 1);
  457. }
  458. }
  459. /**
  460. * @brief
  461. * @retval None
  462. */
  463. uint8_t GetParamValue(char *inStr, char *paramName, char *paramValue, uint8_t *paramLen)
  464. {
  465. char *beginValue = 0;
  466. char *endValue = 0;
  467. int len = 0;
  468. char *strPtr = 0;
  469. char paramName_tmp[50];
  470. memset(paramName_tmp, 0, sizeof(paramName_tmp));
  471. paramName_tmp[0] = '&';
  472. strncat(paramName_tmp, paramName, strlen(paramName));
  473. strcat(paramName_tmp, "=");
  474. strPtr = strstr(inStr, paramName_tmp);
  475. if (strPtr == 0) {
  476. paramName_tmp[0] = '0';
  477. strPtr = strstr(inStr, paramName_tmp);
  478. if (strPtr == 0) {
  479. paramName_tmp[0] = '\n';
  480. strPtr = strstr(inStr, paramName_tmp);
  481. }
  482. if (strPtr == 0) {
  483. paramName_tmp[0] = '?';
  484. strPtr = strstr(inStr, paramName_tmp);
  485. }
  486. }
  487. if (strPtr != 0) {
  488. beginValue = strpbrk(strPtr, "=");
  489. endValue = strpbrk(&strPtr[1], "&");
  490. if (endValue == 0) {
  491. endValue = strpbrk(strPtr, " ");
  492. }
  493. len = endValue - beginValue - 1;
  494. strncpy(paramValue, beginValue + 1, len);
  495. *endValue = '0';
  496. *beginValue = '0';
  497. *paramLen = len;
  498. return 1;
  499. } else {
  500. *paramLen = 0;
  501. return 0;
  502. }
  503. }
  504. // -----------------------------------------------------------------------------
  505. #include "mbedtls/platform.h"
  506. #include "mbedtls/entropy.h"
  507. #include "mbedtls/ctr_drbg.h"
  508. #include "mbedtls/certs.h"
  509. #include "mbedtls/x509.h"
  510. #include "mbedtls/net_sockets.h"
  511. #include "mbedtls/error.h"
  512. #include "mbedtls/debug.h"
  513. #include "mbedtls/memory_buffer_alloc.h"
  514. #include "mbedtls_time.h"
  515. #include "mbedtls_debug.h"
  516. #include "FreeRTOS.h"
  517. #include "task.h"
  518. #include "cert_req.h"
  519. #include <stdlib.h>
  520. #include <string.h>
  521. extern unsigned char req_cert[];
  522. static mbedtls_net_context listen_fd, client_fd;
  523. static const uint8_t *pers = (uint8_t *)("ssl_server");
  524. mbedtls_entropy_context entropy;
  525. mbedtls_ctr_drbg_context ctr_drbg;
  526. mbedtls_ssl_context ssl;
  527. mbedtls_ssl_config conf;
  528. mbedtls_x509_crt srvcert;
  529. mbedtls_pk_context pkey;
  530. //
  531. void ssl_server(void *pvParameters)
  532. {
  533. SSL_SERVER_STATE ssl_state = SSL_ACCEPT;
  534. char *sendPtr;
  535. int ret;
  536. mbedtls_net_init( &listen_fd );
  537. mbedtls_net_init( &client_fd );
  538. mbedtls_ssl_init( &ssl );
  539. mbedtls_ssl_config_init( &conf );
  540. mbedtls_x509_crt_init( &srvcert );
  541. mbedtls_pk_init( &pkey );
  542. mbedtls_entropy_init( &entropy );
  543. mbedtls_ctr_drbg_init( &ctr_drbg );
  544. mbedtls_platform_set_time(&MBEDTLS_GetTime);
  545. #if defined(MBEDTLS_DEBUG_C)
  546. mbedtls_debug_set_threshold(DEBUG_LEVEL);
  547. mbedtls_ssl_conf_dbg(&conf, MBEDTLS_Debug, NULL);
  548. #endif
  549. // 1. Load the certificates and private RSA key
  550. mbedtls_printf( "\r\n . Loading the server cert. and key..." );
  551. ret = mbedtls_x509_crt_parse( &srvcert, (const unsigned char *) sSettings.our_srv_crt,
  552. (strlen(sSettings.our_srv_crt) + 1) );//mbedtls_test_srv_crtmbedtls_test_srv_crt_len
  553. if ( ret != 0 ) {
  554. mbedtls_printf( " failed\r\n ! mbedtls_x509_crt_parse returned %d\r\n", ret );
  555. ssl_state = SSL_CRITICAL_ERROR;
  556. }
  557. ret = mbedtls_pk_parse_key( &pkey, (const unsigned char *) mbedtls_test_srv_key, mbedtls_test_srv_key_len, NULL, 0 );
  558. if ( ret != 0 ) {
  559. mbedtls_printf( " failed\r\n ! mbedtls_pk_parse_key returned %d\r\n", ret );
  560. ssl_state = SSL_CRITICAL_ERROR;
  561. }
  562. mbedtls_printf( " ok\r\n" );
  563. // 2. Setup the listening TCP socket
  564. mbedtls_printf( " . Bind on https://localhost:443/ ..." );
  565. if ((ret = mbedtls_net_bind(&listen_fd, NULL, "443", MBEDTLS_NET_PROTO_TCP )) != 0) {
  566. mbedtls_printf( " failed\n ! mbedtls_net_bind returned %d\r\n", ret );
  567. ssl_state = SSL_CRITICAL_ERROR;
  568. }
  569. mbedtls_printf( " ok\r\n" );
  570. // 3. Seed the RNG
  571. mbedtls_printf( " . Seeding the random number generator..." );
  572. if ((ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, (const unsigned char *) pers,
  573. strlen( (char *)pers))) != 0) {
  574. mbedtls_printf( " failed\r\n ! mbedtls_ctr_drbg_seed returned %d\r\n", ret );
  575. ssl_state = SSL_CRITICAL_ERROR;
  576. }
  577. mbedtls_printf( " ok\r\n" );
  578. // 4. Setup stuff
  579. mbedtls_printf( " . Setting up the SSL data...." );
  580. if ( ( ret = mbedtls_ssl_config_defaults(&conf, MBEDTLS_SSL_IS_SERVER, MBEDTLS_SSL_TRANSPORT_STREAM,
  581. MBEDTLS_SSL_PRESET_DEFAULT)) != 0) {
  582. mbedtls_printf( " failed\r\n ! mbedtls_ssl_config_defaults returned %d\r\n", ret );
  583. ssl_state = SSL_CRITICAL_ERROR;
  584. }
  585. mbedtls_ssl_conf_rng(&conf, mbedtls_ctr_drbg_random, &ctr_drbg);
  586. mbedtls_ssl_conf_ca_chain(&conf, srvcert.next, NULL);
  587. if ( ( ret = mbedtls_ssl_conf_own_cert(&conf, &srvcert, &pkey ) ) != 0) {
  588. mbedtls_printf( " failed\r\n ! mbedtls_ssl_conf_own_cert returned %d\r\n", ret );
  589. ssl_state = SSL_CRITICAL_ERROR;
  590. }
  591. if ( ( ret = mbedtls_ssl_setup( &ssl, &conf ) ) != 0 ) {
  592. mbedtls_printf( " failed\r\n ! mbedtls_ssl_setup returned %d\r\n", ret );
  593. ssl_state = SSL_CRITICAL_ERROR;
  594. }
  595. mbedtls_printf( " ok\r\n" );
  596. for (;;) {
  597. switch (ssl_state) {
  598. case SSL_ACCEPT :
  599. mbedtls_ssl_session_reset( &ssl );
  600. mbedtls_printf( " . Waiting for a remote connection ...\r\n" );
  601. if ((ret = mbedtls_net_accept(&listen_fd, &client_fd, NULL, 0, NULL)) != 0) {
  602. mbedtls_printf( " failed\r\n ! mbedtls_net_accept returned %d\r\n", ret );
  603. ssl_state = SSL_ERROR;
  604. } else {
  605. mbedtls_ssl_set_bio( &ssl, &client_fd, mbedtls_net_send, mbedtls_net_recv, NULL );//mbedtls_net_recv
  606. mbedtls_printf( " ok\r\n" );
  607. ssl_state = SSL_HANDSHAKE;
  608. }
  609. break;
  610. case SSL_HANDSHAKE :
  611. mbedtls_printf( " . Performing the SSL/TLS handshake..." );
  612. while ( ( ret = mbedtls_ssl_handshake( &ssl ) ) != 0 ) {
  613. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  614. mbedtls_printf( " failed\r\n ! mbedtls_ssl_handshake returned %d\r\n", ret );
  615. ssl_state = SSL_ERROR;
  616. break;
  617. }
  618. }
  619. if (ret != 0) {
  620. ssl_state = SSL_ERROR;
  621. } else {
  622. mbedtls_printf( " ok\r\n" );
  623. ssl_state = SSL_READ;
  624. }
  625. break;
  626. case SSL_READ :
  627. //printf("SSL_READ\r\n");
  628. if (SSL_ReadRoutine(&ssl, (unsigned char *)receiveBuf) <= 0) {
  629. ssl_state = SSL_ERROR;
  630. } else {
  631. ssl_state = SSL_PROCESSING;
  632. }
  633. break;
  634. case SSL_PROCESSING :
  635. //printf("SSL_PROCESSING\r\n");
  636. sendPtr = SSL_ProcessingRoutine(&sendBufLoadLen);
  637. if (sendPtr) {
  638. ssl_state = SSL_WRITE;
  639. } else {
  640. ssl_state = SSL_ACCEPT;
  641. }
  642. break;
  643. case SSL_WRITE :
  644. //printf("SSL_WRITE\r\n");
  645. SSL_WriteRoutine(&ssl, sendPtr, sendBufLoadLen);
  646. ssl_state = SSL_CLOSE;
  647. break;
  648. case SSL_CLOSE :
  649. //printf("SSL_CLOSE\r\n");
  650. mbedtls_ssl_close_notify(&ssl);
  651. mbedtls_net_free(&client_fd);
  652. //mbedtls_ssl_free( &ssl );
  653. ssl_state = SSL_ACCEPT;
  654. break;
  655. case SSL_ERROR :
  656. //printf("SSL_ERROR\r\n");
  657. //mbedtls_net_free(&client_fd);
  658. //mbedtls_ssl_free( &ssl );
  659. mbedtls_ssl_close_notify(&ssl);
  660. mbedtls_net_free(&client_fd);
  661. ssl_state = SSL_ACCEPT;
  662. break;
  663. case SSL_CRITICAL_ERROR:
  664. //printf("SSL_CRITICAL_ERROR\r\n");
  665. mbedtls_x509_crt_free( &srvcert );
  666. mbedtls_pk_free( &pkey );
  667. mbedtls_ssl_free( &ssl );
  668. mbedtls_ssl_config_free( &conf );
  669. mbedtls_ctr_drbg_free( &ctr_drbg );
  670. mbedtls_entropy_free( &entropy );
  671. vTaskDelete(NULL);
  672. break;
  673. }
  674. }
  675. }
  676. /**
  677. * @brief Initialize the HTTPS server (start its thread)
  678. */
  679. void HTTPS_Init()
  680. {
  681. char buf[MAX_WEB_COOKIE_LEN];
  682. uint8_t user_id;
  683. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  684. // Flush user cookie by random value
  685. sprintf(buf, "%X", (unsigned int)GetRandomNumber());
  686. HTTP_SetUserCookie(buf, user_id);
  687. // Create user logout timers
  688. users[user_id].LogoutTimer = xTimerCreate("LogoutTmr", WEB_LOGOUT_TIME, pdFALSE, ( void * ) user_id,
  689. LogoutTimerCallback);
  690. }
  691. RepeatLoginTimer = xTimerCreate("LoginTmr", REPEAT_LOGIN_TIME, pdFALSE, ( void * ) 0, LoginTimerCallback);
  692. }
  693. //
  694. int SSL_ReadRoutine(mbedtls_ssl_context *ssl, unsigned char *recvBuf)
  695. {
  696. int ret;
  697. mbedtls_printf( " < Read from client:" );
  698. do {
  699. receivedBufLen = RECIVE_BUF_MAX_LEN - 1;
  700. memset(recvBuf, 0, RECIVE_BUF_MAX_LEN);
  701. ret = mbedtls_ssl_read(ssl, receiveBuf, receivedBufLen);
  702. if ( ret == MBEDTLS_ERR_SSL_WANT_READ || ret == MBEDTLS_ERR_SSL_WANT_WRITE ) {
  703. continue;
  704. }
  705. if ( ret <= 0 ) {
  706. switch ( ret ) {
  707. case MBEDTLS_ERR_SSL_PEER_CLOSE_NOTIFY:
  708. mbedtls_printf( " connection was closed gracefully\r\n" );
  709. break;
  710. case MBEDTLS_ERR_NET_CONN_RESET:
  711. mbedtls_printf( " connection was reset by peer\r\n" );
  712. break;
  713. default:
  714. mbedtls_printf( "mbedtls_ssl_read returned -0x%x\r\n", -ret );
  715. break;
  716. }
  717. return ret;
  718. }
  719. receivedBufLen = ret;
  720. } while (0);
  721. }
  722. //
  723. SSL_SERVER_STATE SSL_WriteRoutine(mbedtls_ssl_context *ssl, char *data, int datalen)
  724. {
  725. return SSL_SendFrames(ssl, data, datalen);
  726. }
  727. //
  728. char *SSL_ProcessingRoutine(uint16_t *sendLen)
  729. {
  730. web_func_handler_t *h;
  731. getAuthenticatedState();
  732. if ( Authenticated == false && sSettings.sRADIUS.Auth_enable == false) {
  733. HTTP_LOGIN(sendBuf, sendLen);
  734. return sendBuf;
  735. }
  736. for (h = &process_web_funcs[0]; h->handler; h++) {
  737. if (strncmp(receiveBuf, h->client_req, h->len) == 0) {
  738. #ifdef HTTP_AUTH_ENABLE
  739. if (h->accsess == TIME_ACCESS && !Authenticated) {
  740. strcpy(sendBuf, HTTP_401_NO_AUTH);
  741. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false))
  742. strcat(sendBuf,
  743. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/rslogin.html\"/></head></html>\r\n");
  744. else
  745. strcat(sendBuf,
  746. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/login.html\"/></head></html>\r\n");
  747. *sendLen = strlen(sendBuf);
  748. return sendBuf;
  749. }
  750. #endif
  751. return h->handler(0, receiveBuf, sendBuf, receivedBufLen, sendLen);
  752. }
  753. }
  754. }
  755. #define FRAME_SIZE (1000)
  756. SSL_SERVER_STATE SSL_SendFrames(mbedtls_ssl_context *ssl, char *data, int datalen)
  757. {
  758. SSL_SERVER_STATE ret;
  759. int retClose;
  760. int index = 0;
  761. int k = 0;
  762. int lastframe, nbrframes;
  763. nbrframes = datalen / FRAME_SIZE;
  764. while (nbrframes > 0) {
  765. index = k * FRAME_SIZE;
  766. if (SSL_Write(ssl, (data + index), FRAME_SIZE ) == SSL_WRITE_ERROR) {
  767. return SSL_WRITE_ERROR;
  768. }
  769. nbrframes--;
  770. k++;
  771. }
  772. index = k * FRAME_SIZE;
  773. lastframe = datalen % FRAME_SIZE ;
  774. if (SSL_Write(ssl, (data + index), lastframe ) == SSL_WRITE_ERROR) {
  775. return SSL_WRITE_ERROR;
  776. }
  777. return SSL_WRITE_OK;
  778. }
  779. SSL_SERVER_STATE SSL_Write(mbedtls_ssl_context *ssl, char *data, int datalen)
  780. {
  781. int ret;
  782. mbedtls_printf( " > Write to client:" );
  783. while ( ( ret = mbedtls_ssl_write(ssl, data, datalen) ) <= 0 ) {
  784. if ( ret == MBEDTLS_ERR_NET_CONN_RESET ) {
  785. mbedtls_printf( " failed\r\n ! peer closed the connection\r\n" );
  786. return SSL_WRITE_ERROR;
  787. }
  788. if ( ret != MBEDTLS_ERR_SSL_WANT_READ && ret != MBEDTLS_ERR_SSL_WANT_WRITE ) {
  789. mbedtls_printf( " failed\r\n ! mbedtls_ssl_write returned %d\r\n", ret );
  790. return SSL_WRITE_ERROR;
  791. }
  792. }
  793. mbedtls_printf( " %d bytes written\r\n", ret);
  794. return SSL_WRITE_OK;
  795. }
  796. char *HTTP_HistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  797. {
  798. uint8_t valueLen = 0;
  799. char value[20];
  800. (void)reqNum;
  801. (void)lenBufIn;
  802. (void)reqNum;
  803. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  804. ClearParamString(bufIn);
  805. memset(value, 0, 20);
  806. GetParamValue(bufIn, "page", value, &valueLen);
  807. if (strcmp(value, "all") == 0) {
  808. if (!LOG_IsInit()) {
  809. return 0;
  810. }
  811. if (fLogTransInprog == false) {
  812. // Send log as raw data
  813. log_ptr = 0;
  814. log_size = History_GetTotalSTRCount() * STRING_SIZE_HISTORY + sizeof(UTF8_BOM) - 1;
  815. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  816. *lenBufOut = strlen(bufOut);
  817. // Set file transfer in progress flag
  818. fLogTransInprog = true;
  819. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  820. return 0;
  821. }
  822. HTTP_SendHistory();
  823. return 0;
  824. } else {
  825. // We send nothing if file transfer already in progress
  826. return 0;
  827. }
  828. } else {
  829. if (!LOG_IsInit()) {
  830. return 0;
  831. } else {
  832. HTTP_GetHistoryPage(bufOut, atoi(value));
  833. *lenBufOut = strlen(bufOut);
  834. return bufOut;
  835. }
  836. }
  837. }
  838. char *HTTP_UpsHistoryPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  839. {
  840. uint8_t valueLen = 0;
  841. char value[20];
  842. (void)lenBufIn;
  843. (void)reqNum;
  844. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  845. ClearParamString(bufIn);
  846. memset(value, 0, 20);
  847. GetParamValue(bufIn, "page", value, &valueLen);
  848. if (strcmp(value, "all") == 0) {
  849. if (!LOG_IsInit()) {
  850. return 0;
  851. }
  852. if (fLogTransInprog == false) {
  853. // Send log as raw data
  854. log_ptr = 0;
  855. log_size = LOG_GetTotalSTRCount() * STRING_SIZE + sizeof(UTF8_BOM) - 1;
  856. sprintf(bufOut, "HTTP/1.1 200 OK\r\nContent-Length:%lu\r\n\r\n%s", log_size, UTF8_BOM);
  857. *lenBufOut = strlen(bufOut);
  858. // Set file transfer in progress flag
  859. fLogTransInprog = true;
  860. if (SSL_SendFrames(&ssl, bufOut, *lenBufOut) == SSL_ERROR) {
  861. return 0;
  862. }
  863. HTTP_SendLog();
  864. return 0;
  865. } else {
  866. // We send nothing if file transfer already in progress
  867. return 0;
  868. }
  869. } else {
  870. if (!LOG_IsInit()) {
  871. return 0;
  872. } else {
  873. HTTP_GetUpsHistoryPage(bufOut, atoi(value));
  874. *lenBufOut = strlen(bufOut);
  875. return bufOut;
  876. }
  877. }
  878. }
  879. /**
  880. * @brief Установка даты производства
  881. */
  882. // TODO Убрать заглушку!
  883. void HTTP_Prodate(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  884. {
  885. uint8_t valueLen = 0;
  886. char value[20];
  887. (void)lenBufIn;
  888. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  889. ClearParamString(bufIn);
  890. memset(value, 0, 20);
  891. GetParamValue(bufIn, "prodate", value, &valueLen);
  892. /*
  893. printf("Prodate: ");
  894. printf(value);
  895. printf("\r\n");
  896. */
  897. /* Устанавливаем дату производства */
  898. SETTINGS_SetProDate(value, valueLen);
  899. /* Пока отправляем true */
  900. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\n\r\nTrue");
  901. *lenBufOut = strlen(bufOut);
  902. TEST_SetServerFlag();
  903. }
  904. /**
  905. * @brief
  906. * @retval None
  907. */
  908. char *HTTP_SetSettingsPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  909. {
  910. char *DataOffset;
  911. (void)reqNum;
  912. if (seclevel == USER) {
  913. return 0;
  914. }
  915. DataOffset = 0;
  916. // POST Packet received
  917. TotalReceived = 0;
  918. TotalData = 0;
  919. memset(bufOut, 0, strlen(bufOut));
  920. bufOut[0] = '0';
  921. // parse packet for Content-length field
  922. size = Parse_Content_Length(bufIn, lenBufIn);
  923. DataOffset = strstr(bufIn, "managerIP");
  924. // case of MSIE8 : we do not receive data in the POST packet
  925. if (DataOffset == 0) {
  926. SSL_ReadRoutine(&ssl, bufIn);
  927. DataOffset = strstr(bufIn, "managerIP");
  928. }
  929. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  930. TotalData += TotalReceived;
  931. strncat(bufOut, DataOffset, TotalReceived);
  932. for (int i = TotalData; i < size; i ++) {
  933. SSL_ReadRoutine(&ssl, bufIn);
  934. strncat(sendBuf, bufIn, receivedBufLen);
  935. TotalData += receivedBufLen;
  936. }
  937. // check if last data packet
  938. if (TotalData == size) {
  939. DBG printf("State: Received %u bytes\r\n", (unsigned int)TotalData);
  940. // printf("receive %s \r\n", sendBuf);
  941. strncat(bufOut, " ", 1);
  942. HTTP_SetSettings(bufOut, strlen(sendBuf));
  943. memset(sendBuf, 0, size);
  944. strcpy(bufOut, HTTP_200_OK);
  945. strcat(bufOut,
  946. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/settings.html\"/></head></html>\r\n");
  947. *lenBufOut = strlen(bufOut);
  948. return bufOut;
  949. }
  950. return 0;
  951. }
  952. /**
  953. * @brief
  954. * @retval None
  955. */
  956. void HTTP_SetSettings(char *buf, uint16_t lenBuf)
  957. {
  958. uint8_t valueLen = 0;
  959. const uint8_t len = MAX_WEB_PARAM_LEN;
  960. char value[MAX_WEB_PARAM_LEN];
  961. char str[MAX_WEB_PARAM_LEN];
  962. (void)lenBuf;
  963. //printf(buf);
  964. //ClearParamString(buf);
  965. #define XJSON_SETTINGS_TAG(tag, get_param, set_param) JSON_SET_PARAM(tag, set_param, buf);
  966. WEB_SETTINGS_TAGS_TABLE
  967. #undef XJSON_SETTINGS_CREATE
  968. /* Если параметры WEB изменились выставляем флаг, сохраняем настройки и перезагружаемся */
  969. if (GetStateWebReinit() == true) {
  970. SetWebReinitFlag(true);
  971. HTTP_SaveSettings();
  972. /* Блокируем управление ключем на тау секунд*/
  973. //IO_KeyBlockOn();
  974. vTaskDelay(1010);
  975. Reboot(WEB_ACT);
  976. }
  977. HTTP_SaveSettings();
  978. }
  979. /**
  980. * @brief
  981. * @retval None
  982. */
  983. char *HTTP_GetSert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  984. {
  985. (void)bufIn;
  986. (void)lenBufIn;
  987. (void)reqNum;
  988. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  989. strcpy(bufOut, HTTP_200_OK);
  990. SSL_CreateReqCert();
  991. strncpy(bufOut, req_cert, strlen(req_cert));
  992. *lenBufOut = strlen(bufOut);
  993. return bufOut;
  994. }
  995. /**
  996. * @brief
  997. * @retval None
  998. */
  999. char *HTTP_Upload_Sert(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1000. {
  1001. char *DataOffset;
  1002. static char boundary[70];
  1003. static char *pbound = NULL;
  1004. char *ContentOffset = 0;
  1005. (void)reqNum;
  1006. DataOffset = 0;
  1007. TotalData = 0;
  1008. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1009. //printf("receive %s \r\n", receiveBuf);
  1010. // parse packet for Content-length field
  1011. size = Parse_Content_Length(bufIn, lenBufIn);
  1012. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1013. if (pbound != NULL) {
  1014. ContentOffset = strstr(bufIn, boundary);
  1015. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1016. if ( DataOffset != NULL ) {
  1017. DataOffset += 4;
  1018. }
  1019. } else {
  1020. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1021. bufIn[receivedBufLen] = '\0';
  1022. lenBufIn = receivedBufLen;
  1023. pbound = Parce_Boundary(bufIn, lenBufIn, boundary, sizeof(boundary));
  1024. if (pbound != NULL) {
  1025. ContentOffset = strstr(bufIn, boundary);
  1026. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1027. if ( DataOffset != NULL ) {
  1028. DataOffset += 4;
  1029. }
  1030. }
  1031. }
  1032. // case of MSIE8 : we do not receive data in the POST packet
  1033. if (DataOffset == NULL) {
  1034. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1035. bufIn[receivedBufLen] = '\0';
  1036. lenBufIn = receivedBufLen;
  1037. //printf("receive2 %s \r\n", bufIn);
  1038. ContentOffset = strstr(bufIn, boundary);
  1039. DataOffset = strstr(ContentOffset, "\r\n\r\n");
  1040. if ( DataOffset != NULL ) {
  1041. DataOffset += 4;
  1042. }
  1043. }
  1044. TotalReceived = lenBufIn - (uint32_t)(ContentOffset - bufIn);
  1045. TotalData += TotalReceived;
  1046. strncat(bufOut, DataOffset, TotalReceived);
  1047. while (TotalData < size) {
  1048. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1049. bufIn[receivedBufLen] = '\0';
  1050. //printf("receive3 %s \r\n", receiveBuf);
  1051. strncat(bufOut, bufIn, lenBufIn);
  1052. TotalData += lenBufIn;
  1053. //printf("TotalData %d \r\n", TotalData);
  1054. /*printf("receivedBufLen %d \r\n", receivedBufLen);
  1055. printf("TotalData %d \r\n", TotalData);
  1056. printf("size %d \r\n", size);
  1057. printf("receive3 %s \r\n", (receiveBuf+receivedBufLen - 30));*/
  1058. }
  1059. //printf("TotalData %d \r\n", TotalData);
  1060. // check if last data packet
  1061. if (TotalData == size) {
  1062. // printf("receive %s \r\n", sendBuf);
  1063. if (strstr(bufOut, "BEGIN CERTIFICATE") != NULL) {
  1064. DataOffset = strstr(bufOut, "-----END CERTIFICATE");
  1065. uint32_t len_crt = (uint32_t)(DataOffset - bufOut) + 25;
  1066. memset(sSettings.our_srv_crt, 0, sizeof(sSettings.our_srv_crt));
  1067. memcpy(sSettings.our_srv_crt, bufOut, len_crt);
  1068. strcat(bufOut, "\r\n");
  1069. HTTP_SaveSettings();
  1070. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1071. strcpy(bufOut, HTTP_200_OK);
  1072. strcat(bufOut, "1");
  1073. } else {
  1074. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1075. strcpy(bufOut, HTTP_200_OK);
  1076. strcat(bufOut, "Некорректный сертефикат");
  1077. }
  1078. *lenBufOut = strlen(bufOut);
  1079. return bufOut;
  1080. }
  1081. return 0;
  1082. }
  1083. /**
  1084. * @brief
  1085. * @retval None
  1086. */
  1087. char *HTTP_SetInfoPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1088. {
  1089. char *DataOffset;
  1090. (void)reqNum;
  1091. if (seclevel == USER) {
  1092. return 0;
  1093. }
  1094. DataOffset = 0;
  1095. // POST Packet received{
  1096. TotalReceived = 0;
  1097. TotalData = 0;
  1098. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1099. bufOut[0] = '0';
  1100. // parse packet for Content-length field
  1101. size = Parse_Content_Length(bufIn, lenBufIn);
  1102. DataOffset = strstr(bufIn, "sysname");
  1103. // case of MSIE8 : we do not receive data in the POST packet
  1104. if (DataOffset == 0) {
  1105. SSL_ReadRoutine(&ssl, bufIn);
  1106. DataOffset = strstr(bufIn, "sysname");
  1107. }
  1108. TotalReceived = receivedBufLen - (DataOffset - bufIn);
  1109. TotalData += TotalReceived;
  1110. strncat(bufOut, DataOffset, TotalReceived);
  1111. // check if last data packet
  1112. if (TotalData == size) {
  1113. strncat(bufOut, " ", 1);
  1114. HTTP_SetInfo(bufOut, strlen(bufOut));
  1115. memset(bufOut, 0, size);
  1116. strcpy(bufOut, HTTP_200_OK);
  1117. strcat(bufOut,
  1118. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/info.html\"/></head></html>\r\n\r\n");
  1119. *lenBufOut = strlen(bufOut);
  1120. return bufOut;
  1121. }
  1122. return 0;
  1123. }
  1124. /**
  1125. * @brief
  1126. * @retval None
  1127. */
  1128. void HTTP_SetInfo(char *buf, uint16_t lenBuf)
  1129. {
  1130. uint8_t valueLen = 0;
  1131. const uint8_t len = 110;
  1132. char value[330];
  1133. char str[110];
  1134. (void)lenBuf;
  1135. // ClearParamString(buf);
  1136. memset(value, 0, len);
  1137. /* Название устройства */
  1138. GetParamValue(buf, "sysname", value, &valueLen);
  1139. url_decode(str, sizeof(str), value);
  1140. SetNameDeviceStr(str);
  1141. memset(value, 0, len);
  1142. /* Владелец */
  1143. GetParamValue(buf, "owner", value, &valueLen);
  1144. url_decode(str, sizeof(str), value);
  1145. SetOwner(str);
  1146. memset(value, 0, len);
  1147. /* Владелец */
  1148. GetParamValue(buf, "sysLocation", value, &valueLen);
  1149. url_decode(str, sizeof(str), value);
  1150. SetLocation(str);
  1151. memset(value, 0, len);
  1152. /* Комментарий */
  1153. GetParamValue(buf, "comment", value, &valueLen);
  1154. url_decode(str, sizeof(str), value);
  1155. SetComment(str);
  1156. memset(value, 0, len);
  1157. HTTP_SaveSettings();
  1158. }
  1159. /**
  1160. * @brief Запуск/останов теста UPS
  1161. */
  1162. char *HTTP_UPSTest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1163. {
  1164. uint8_t valueLen = 0;
  1165. char tempValue[20];
  1166. char tempValue2[20];
  1167. int8_t res = 0;
  1168. char log_string[50];
  1169. (void)lenBufIn;
  1170. (void)reqNum;
  1171. memset(tempValue, 0, 20);
  1172. memset(tempValue2, 0, 20);
  1173. memset(log_string, 0, 50);
  1174. strcpy(bufOut, HTTP_200_OK);
  1175. GetParamValue(bufIn, "func", tempValue, &valueLen);
  1176. if (strcmp(tempValue, "stop") == 0) {
  1177. res = ups_metac_service_pdu(ups_cancel_test);
  1178. if (res == 1 || res == 0) {
  1179. strcat(bufOut, "Команда \"Останов теста\" принята ИБП!");
  1180. strcpy(log_string, name_login);
  1181. strcat(log_string, " (Останов)");
  1182. log_event_data(LOG_TEST_UPS, log_string);
  1183. }
  1184. if (res == -1) {
  1185. strcat(bufOut, "Команда \"Останов теста\" отклонена ИБП!");
  1186. }
  1187. } else if (strcmp(tempValue, "discharge") == 0) {
  1188. res = ups_metac_service_pdu(ups_test_low_bat);
  1189. set_act_source(WEB_ACT);
  1190. if (res == 1 || res == 0) {
  1191. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1192. }
  1193. if (res == -1) {
  1194. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1195. }
  1196. } else if (strncmp(tempValue, "time", 6) == 0) {
  1197. GetParamValue(bufIn, "time", tempValue2, &valueLen);
  1198. TimeParam = atoi(tempValue2);
  1199. res = ups_metac_service_pdu(ups_test_time);
  1200. if (res == 1 || res == 0) {
  1201. strcat(bufOut, "Команда \"Запуск теста\" принята ИБП!");
  1202. }
  1203. if (res == -1) {
  1204. strcat(bufOut, "Команда \"Запуск теста\" отклонена ИБП!");
  1205. }
  1206. }
  1207. *lenBufOut = strlen(bufOut);
  1208. return bufOut;
  1209. }
  1210. /**
  1211. * @brief Выклюение UPS
  1212. */
  1213. char *HTTP_UPSshutdown(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1214. {
  1215. uint8_t valueLen = 0;
  1216. char *valueLenEnd = 0;
  1217. char tempValue[50];
  1218. char tempValue2[50];
  1219. int8_t res = 0;
  1220. char log_string[50];
  1221. (void)lenBufIn;
  1222. (void)reqNum;
  1223. memset(tempValue, 0, 50);
  1224. memset(log_string, 0, 50);
  1225. strcpy(bufOut, HTTP_200_OK);
  1226. GetParamValue(bufIn, "func", tempValue, &valueLen);
  1227. if (strcmp(tempValue, "reboot") == 0) {
  1228. res = ups_metac_service_pdu(ups_cancel_shut_down);
  1229. if (res == 1) {
  1230. strcpy(log_string, name_login);
  1231. strcat(log_string, " (Останов)");
  1232. log_event_data(LOG_SHUTDOWN_UPS, log_string);
  1233. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" принята ИБП!");
  1234. } else {
  1235. strcat(bufOut, "Команда \"Отмена выключения нагрузки\" отклонена ИБП!");
  1236. }
  1237. } else if (strncmp(tempValue, "off", 5) == 0) {
  1238. memset(tempValue2, 0, 50);
  1239. GetParamValue(bufIn, "after", tempValue2, &valueLen);
  1240. TimeParamFloat = atof(tempValue2);
  1241. res = ups_metac_service_pdu(ups_shutdown);
  1242. if (res == 1) {
  1243. strcat(bufOut, "Команда \"Отключения нагрузки\" принята ИБП!");
  1244. log_event_data(LOG_SHUTDOWN_UPS, name_login);
  1245. } else {
  1246. strcat(bufOut, "Команда \"Отключения нагрузки\" отклонена ИБП!");
  1247. }
  1248. }
  1249. *lenBufOut = strlen(bufOut);
  1250. return bufOut;
  1251. }
  1252. char *HTTP_UPS_Serial(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1253. {
  1254. uint8_t valueLen = 0;
  1255. char tempValue[50];
  1256. (void)lenBufIn;
  1257. (void)reqNum;
  1258. memset(tempValue, 0, 50);
  1259. strcpy(bufOut, HTTP_200_OK);
  1260. GetParamValue(bufIn, "cmd_us", tempValue, &valueLen);
  1261. if (valueLen <= 8) {
  1262. SetUPSSerialStr(tempValue);
  1263. SETTINGS_Save();
  1264. strcat(bufOut,
  1265. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/info.html\" /></head><center><h2>Серийный номер ИБП установлен</h2></center></html>");
  1266. } else {
  1267. strcat(bufOut,
  1268. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/info.html\" /></head><center><h2>Ошибка установки серийного номера ИБП</h2></center></html>");
  1269. }
  1270. *lenBufOut = strlen(bufOut);
  1271. return bufOut;
  1272. }
  1273. char *HTTP_Reset(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1274. {
  1275. (void)bufIn;
  1276. (void)bufOut;
  1277. (void)lenBufIn;
  1278. (void)reqNum;
  1279. HTTP_ResetSettings();
  1280. HTTP_SaveSettings();
  1281. fs_open("/settings.html", &file);
  1282. *lenBufOut = file.len;
  1283. return file.data;
  1284. }
  1285. char *HTTP_Confirm(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1286. {
  1287. (void)bufIn;
  1288. (void)bufOut;
  1289. (void)lenBufIn;
  1290. (void)reqNum;
  1291. SetWebReinitFlag(false);
  1292. SetConfirmWebParamsFlag();
  1293. fs_open("/index.html", &file);
  1294. *lenBufOut = file.len;
  1295. return file.data;
  1296. }
  1297. char *HTTP_GetRequest(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1298. {
  1299. (void)bufOut;
  1300. (void)reqNum;
  1301. #ifdef HTTP_AUTH_ENABLE
  1302. const char *html_page_name[] = {
  1303. "/main.css",
  1304. "/rotek.png",
  1305. "/favicon.ico",
  1306. "/role.js"
  1307. };
  1308. #endif
  1309. char filename[MAX_FILENAME_LEN];
  1310. char nonmatch[MAX_ETAG_LEN];
  1311. char *pnonmatch = NULL;
  1312. uint8_t len;
  1313. memset(filename, 0, MAX_FILENAME_LEN);
  1314. if (GetFileName(bufIn, filename, &len)) {
  1315. /* Parce If-Non_Match value */
  1316. #ifdef HTTP_AUTH_ENABLE
  1317. if (!Authenticated) {
  1318. for (uint8_t i = 0; i < 4; i ++) {
  1319. if (strcmp(filename, html_page_name[i]) == 0) {
  1320. break;
  1321. }
  1322. if (i == 3) {
  1323. if((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1324. strcpy(filename, "/rslogin.html");
  1325. } else {
  1326. strcpy(filename, "/login.html");
  1327. }
  1328. }
  1329. }
  1330. } else {
  1331. HTTP_UpdateUserLoginTime(user_id);
  1332. }
  1333. #endif
  1334. uint8_t nonmatch_len = Parse_Header(bufIn, lenBufIn, If_None_Match, 15, nonmatch);
  1335. if (nonmatch_len < MAX_ETAG_LEN && nonmatch_len > 0) {
  1336. //DBG printf("If_None_Match: %s\r\n", nonmatch);
  1337. pnonmatch = nonmatch;
  1338. }
  1339. return send_file(filename, pnonmatch, &file, lenBufOut);
  1340. }
  1341. return 0;
  1342. }
  1343. char* HTTP_NoFound(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1344. {
  1345. (void)bufIn;
  1346. (void)bufOut;
  1347. (void)lenBufIn;
  1348. (void)reqNum;
  1349. #ifdef HTTP_AUTH_ENABLE
  1350. HTTP_UpdateUserLoginTime(user_id);
  1351. #endif
  1352. fs_open("/index.html", &file); // +
  1353. *lenBufOut = file.len;
  1354. return file.data;
  1355. }
  1356. /**
  1357. * @brief Проверка пароля для перехода в режим bootloader
  1358. * @retval None
  1359. */
  1360. char *HTTP_ConfirmBootPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1361. {
  1362. (void)bufIn;
  1363. (void)lenBufIn;
  1364. (void)reqNum;
  1365. strcpy(bufOut, HTTP_200_OK);
  1366. *lenBufOut = strlen(bufOut);
  1367. /* Запускаем задачу отложенной перезагрузки. Контроллер должен успеть
  1368. отправить ответ серверу о статусе пароля */
  1369. HTTP_StartResetTask(true);
  1370. return bufOut;
  1371. }
  1372. #ifdef HTTP_AUTH_ENABLE
  1373. void LoginTimerCallback(TimerHandle_t pxTimer)
  1374. {
  1375. cnt_err_psw = 0;
  1376. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1377. xTimerStop(RepeatLoginTimer, 0);
  1378. }
  1379. /**
  1380. * @brief Проверка пароля для входа в Web
  1381. * @retval None
  1382. */
  1383. int HTTP_ConfirmWebPwd(char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1384. {
  1385. char tempStr[52];
  1386. char login[20];
  1387. char password[20];
  1388. uint8_t valueLen, user_id = 0xff;
  1389. char *strPtr = 0;
  1390. char WebPassword[MAX_WEB_PASSWD_LEN];
  1391. char WebLogin[MAX_WEB_LOGIN_LEN];
  1392. memset(login, 0, 20);
  1393. memset(password, 0, 20);
  1394. memset(tempStr, 0, 52);
  1395. memset(name_login, 0, 50);
  1396. tempStr[0] = '0';
  1397. /* Get first 50 bytes of string */
  1398. strncat(tempStr, bufIn, 49);
  1399. /* Add " " to the string in order GetParamValue() can be able to parse the param */
  1400. strcat(tempStr, " ");
  1401. GetParamValue(tempStr, "login", login, &valueLen);
  1402. GetParamValue(tempStr, "password", password, &valueLen);
  1403. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1404. switch (RC_Login(login, password)) {
  1405. case RC_ERROR:
  1406. Authenticated = false;
  1407. break;
  1408. case RC_LOGIN_ADMIN_OK:
  1409. Authenticated = true;
  1410. user_id = 0;
  1411. break;
  1412. case RC_LOGIN_USER_OK:
  1413. Authenticated = true;
  1414. user_id = 1;
  1415. break;
  1416. case RC_NET_ERR:
  1417. Authenticated = false;
  1418. fl_raddius_net_err = true;
  1419. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1420. strcat(bufOut,
  1421. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Ошибка соединения с RADIUS сервером</h2></center></html>");
  1422. *lenBufOut = strlen(bufOut);
  1423. return SEND_REQUIRED_NO;
  1424. break;
  1425. case RC_ACC_DENIED:
  1426. Authenticated = false;
  1427. break;
  1428. default:
  1429. break;
  1430. }
  1431. } else {
  1432. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1433. GetUserLogin(user_id, WebLogin, &valueLen);
  1434. GetUserPassword(user_id, WebPassword, &valueLen);
  1435. /* Check login and password */
  1436. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1437. (strncmp(WebPassword, password, MAX_WEB_PASSWD_LEN) == 0)) {
  1438. /* Login and pass are valid */
  1439. /* TODO replace global flag with user-pass-cookie */
  1440. if (cnt_err_psw < 4) {
  1441. cnt_err_psw = 0;
  1442. Authenticated = true;
  1443. } else {
  1444. Authenticated = false;
  1445. }
  1446. break;
  1447. } else {
  1448. Authenticated = false;
  1449. }
  1450. }
  1451. }
  1452. if (Authenticated) {
  1453. /* Generate cookie */
  1454. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1455. /* Set users cookie */
  1456. HTTP_SetUserCookie(tempStr, user_id);
  1457. HTTP_UpdateUserLoginTime(user_id);
  1458. /* Send login and cookie back */
  1459. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1460. strcat(bufOut, login);
  1461. strcat(bufOut, "\r\nSet-Cookie: id=");
  1462. strcat(bufOut, tempStr);
  1463. sprintf(tempStr, "%d", (user_id + 1));
  1464. strcat(bufOut, "\r\nSet-Cookie: role=");
  1465. strcat(bufOut, tempStr);
  1466. strcat(bufOut, "\r\nSet-Cookie: auth=1");
  1467. strcat(bufOut, "\r\n\r\n");
  1468. strcat(bufOut,
  1469. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1470. *lenBufOut = strlen(bufOut);
  1471. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1472. snprintf(name_login, (strlen(login) + 1), login);
  1473. } else {
  1474. fl_raddius_net_err = false;
  1475. switch (user_id) {
  1476. case 0:
  1477. snprintf(name_login, sizeof(name_login), "Администратор");
  1478. break;
  1479. case 1:
  1480. snprintf(name_login, sizeof(name_login), "Пользователь");
  1481. break;
  1482. default:
  1483. snprintf(name_login, (strlen(login) + 1), login);
  1484. break;
  1485. }
  1486. }
  1487. log_event_data(LOG_LOGIN, name_login);
  1488. /* Запускаем задачу-таймер логаута. */
  1489. /* TODO отправить ответ серверу о статусе пароля */
  1490. return SEND_REQUIRED_YES;
  1491. } else {
  1492. if (cnt_err_psw <= 4) {
  1493. cnt_err_psw ++;
  1494. }
  1495. DBG printf("cnt_err_psw %d", cnt_err_psw);
  1496. if (cnt_err_psw == 4) {
  1497. xTimerStart(RepeatLoginTimer, 0);
  1498. }
  1499. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type: text/html;\r\n\r\n");
  1500. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1501. if (cnt_err_psw < 4) {
  1502. strcat(bufOut,
  1503. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1504. } else {
  1505. strcat(bufOut,
  1506. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/rslogin.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1507. }
  1508. } else {
  1509. if (cnt_err_psw < 4) {
  1510. strcat(bufOut,
  1511. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Не правильный логин или пароль</h2></center></html>");
  1512. } else {
  1513. strcat(bufOut,
  1514. "<!DOCTYPE html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"refresh\" content=\"3; url=/login.html\" /></head><center><h2>Вход заблокирован!</h2></center></head><center><h2>Повторите попытку через 1 минуту</h2></center></html>");
  1515. }
  1516. }
  1517. *lenBufOut = strlen(bufOut);
  1518. return SEND_REQUIRED_NO;
  1519. }
  1520. }
  1521. void HTTP_LOGIN(char *bufOut, uint16_t *lenBufOut)
  1522. {
  1523. char tempStr[50];
  1524. uint8_t valueLen;
  1525. char WebLogin[MAX_WEB_LOGIN_LEN];
  1526. GetUserLogin(ADMIN, WebLogin, &valueLen);
  1527. memset(tempStr, 0, 50);
  1528. memset(name_login, 0, 50);
  1529. /* TODO replace global flag with user-pass-cookie */
  1530. Authenticated = true;
  1531. /* Generate cookie */
  1532. sprintf(tempStr, "%X", (unsigned int)GetRandomNumber());
  1533. /* Set users cookie */
  1534. HTTP_SetUserCookie(tempStr, ADMIN);
  1535. HTTP_UpdateUserLoginTime(ADMIN);
  1536. /* Send login and cookie back */
  1537. strcpy(bufOut, "HTTP/1.0 200 OK\r\nContent-Type:text/html\r\nSet-Cookie: uname=");
  1538. strcat(bufOut, WebLogin);
  1539. strcat(bufOut, "\r\nSet-Cookie: id=");
  1540. strcat(bufOut, tempStr);
  1541. strcat(bufOut, "\r\nSet-Cookie: role=0");
  1542. strcat(bufOut, "\r\nSet-Cookie: auth=0");
  1543. strcat(bufOut, "\r\n\r\n");
  1544. strcat(bufOut,
  1545. "<!DOCTYPE html><html lang=""><head><meta http-equiv=\"refresh\" content=\"0;url=/index.html\"/></head></html>\r\n\r\n");
  1546. *lenBufOut = strlen(bufOut);
  1547. snprintf(name_login, sizeof(name_login), "Администратор");
  1548. }
  1549. /**
  1550. * @brief Чтение Cookie пользователя
  1551. */
  1552. static void HTTP_GetUserCookie(uint8_t user_id, char *str, uint8_t *len)
  1553. {
  1554. sprintf(str, "%s", users[user_id].cookie);
  1555. *len = strlen(str);
  1556. }
  1557. /**
  1558. * @brief Установка Cookie пользователя
  1559. */
  1560. static void HTTP_SetUserCookie(char *str, uint8_t user_id)
  1561. {
  1562. strcpy(users[user_id].cookie, str);
  1563. }
  1564. /**
  1565. * @brief Обновление времени последней активности пользователя
  1566. */
  1567. static void HTTP_UpdateUserLoginTime(uint8_t user_id)
  1568. {
  1569. xTimerStart(users[user_id].LogoutTimer, 0);
  1570. }
  1571. /**
  1572. * @brief Принудительный логаут пользователя
  1573. */
  1574. static void HTTP_ForceUserLogout(uint8_t user_id)
  1575. {
  1576. char cookie[MAX_WEB_COOKIE_LEN];
  1577. /* Flush user cookie by random value */
  1578. sprintf(cookie, "%X", (unsigned int)GetRandomNumber());
  1579. HTTP_SetUserCookie(cookie, user_id);
  1580. }
  1581. /**
  1582. * @brief >Callback таймера логаута пользователя
  1583. */
  1584. void LogoutTimerCallback(TimerHandle_t pxTimer)
  1585. {
  1586. uint8_t user_id = (uint8_t)pvTimerGetTimerID( pxTimer );
  1587. if ( sSettings.sRADIUS.Auth_enable ) {
  1588. HTTP_ForceUserLogout(user_id);
  1589. }
  1590. }
  1591. /**
  1592. * @brief Смена пароля пользователя
  1593. * @retval None
  1594. */
  1595. char *HTTP_ChangeUserPwd(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1596. {
  1597. char tempStr[110];
  1598. char value[20];
  1599. char login[20];
  1600. char password[20];
  1601. char tmp[75];
  1602. uint8_t valueLen, valueLen2, user_id;
  1603. char WebLogin[MAX_WEB_LOGIN_LEN];
  1604. (void)reqNum;
  1605. (void)lenBufIn;
  1606. memset(login, 0, sizeof(login));
  1607. memset(password, 0, sizeof(password));
  1608. memset(tempStr, 0, sizeof(tempStr));
  1609. memset(value, 0, sizeof(value));
  1610. memset(tmp, 0, sizeof(tmp));
  1611. ClearParamString(bufIn);
  1612. strncpy(tempStr, bufIn, 110);
  1613. strcpy(bufOut, HTTP_200_OK);
  1614. if (GetParamValue(tempStr, "username", login, &valueLen) &&
  1615. GetParamValue(tempStr, "oldpass", tmp, &valueLen)) {
  1616. url_decode(password, sizeof(password), tmp);
  1617. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1618. memset(value, 0, 20);
  1619. memset(WebLogin, 0, MAX_WEB_LOGIN_LEN);
  1620. GetUserLogin(user_id, WebLogin, &valueLen);
  1621. GetUserPassword(user_id, value, &valueLen2);
  1622. /* Check login and password */
  1623. if ((strncmp(WebLogin, login, MAX_WEB_LOGIN_LEN) == 0) &&
  1624. (memcmp(password, value, 11) == 0)) {
  1625. memset(tmp, 0, sizeof(tmp));
  1626. memset(password, 0, 20);
  1627. if (GetParamValue(tempStr, "newpass", tmp, &valueLen)) {
  1628. url_decode(password, sizeof(password), tmp);
  1629. valueLen = strlen(password);
  1630. memcpy(sSettings.sAuth[user_id].password, password, sizeof(sSettings.sAuth[user_id].password));
  1631. HTTP_SaveSettings();
  1632. log_event_data(LOG_PSW_CHANGE, name_login);
  1633. strcat(bufOut, "Пароль успешно изменён");
  1634. *lenBufOut = strlen(bufOut);
  1635. return bufOut;
  1636. } else {
  1637. strcat(bufOut, "Введены некорректные данные!");
  1638. *lenBufOut = strlen(bufOut);
  1639. return bufOut;
  1640. }
  1641. }
  1642. }
  1643. strcat(bufOut, "Введён неверный пароль!");
  1644. } else {
  1645. strcat(bufOut, "Введены некорректные данные!");
  1646. }
  1647. *lenBufOut = strlen(bufOut);
  1648. return bufOut;
  1649. }
  1650. //
  1651. static void getAuthenticatedState(void)
  1652. {
  1653. char CookieBuf[51];
  1654. char *CookiePtr = NULL;
  1655. char name[MAX_WEB_COOKIE_LEN];
  1656. char id[MAX_WEB_COOKIE_LEN];
  1657. uint8_t nameLen = 0, idLen = 0;
  1658. receiveBuf[receivedBufLen] = '\0';
  1659. //printf("receive %s \r\n", receiveBuf);
  1660. // Get cookie "uname" value
  1661. memset(CookieBuf, 0, sizeof(CookieBuf));
  1662. CookiePtr = strstr(receiveBuf, "uname=");
  1663. strncpy(CookieBuf, CookiePtr, 50);
  1664. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1665. memset(name, 0, MAX_WEB_COOKIE_LEN);
  1666. GetCookieValue(CookieBuf, "uname=", name, &nameLen);
  1667. //printf("********CookieBuf2= %s\r\n", CookieBuf);
  1668. //printf("********uname= %s\r\n", name);
  1669. memset(CookieBuf, 0, sizeof(CookieBuf));
  1670. // Get cookie "id" value
  1671. CookiePtr = strstr(receiveBuf, " id=");
  1672. strncpy(CookieBuf, CookiePtr, 50);
  1673. //printf("********CookieBuf1= %s\r\n", CookieBuf);
  1674. memset(id, 0, MAX_WEB_COOKIE_LEN);
  1675. GetCookieValue(CookieBuf, "id=", id, &idLen);
  1676. // printf("********ID= %s\r\n", id);
  1677. seclevel = 0xFF;
  1678. for (user_id = 0; user_id < MAX_WEB_USERS; user_id++) {
  1679. HTTP_GetUserCookie(user_id, CookieBuf, &idLen);
  1680. if (strncmp(id, CookieBuf, idLen) == 0 ) {
  1681. GetUserLevelInt(user_id, &seclevel);
  1682. Authenticated = true;
  1683. break;
  1684. }
  1685. Authenticated = false;
  1686. seclevel = 0xFF;
  1687. }
  1688. }
  1689. char *HTTP_LoginPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1690. {
  1691. (void)reqNum;
  1692. uint32_t req_data_received = 0;
  1693. char *offset = 0;
  1694. memset(bufOut, 0, SEND_BUF_MAX_LEN);
  1695. /* parse packet for Content-length field */
  1696. post_data_count = Parse_Content_Length(bufIn, lenBufIn);
  1697. printf("Content-length: %d\r\n", (int)post_data_count);
  1698. if (post_data_count < MAX_POST_REQ_LEN) {
  1699. memset(post_req_data, 0, MAX_POST_REQ_LEN);
  1700. /* parse packet for "\r\n\r\n" */
  1701. offset = (strstr(bufIn, "\r\n\r\n")) + 4;
  1702. req_data_received = lenBufIn - (offset - bufIn);
  1703. printf("req data received: %d\r\n", (int)req_data_received);
  1704. /* Check if "\r\n\r\n" was found */
  1705. if (offset != 0) {
  1706. /* if data was splited in two packets */
  1707. if (req_data_received < post_data_count) {
  1708. /* Copy request data to buffer */
  1709. snprintf(post_req_data, req_data_received, "%s", bufIn);
  1710. post_data_count -= req_data_received;
  1711. SSL_ReadRoutine(&ssl, (unsigned char *)bufIn);
  1712. offset = bufIn;
  1713. }
  1714. /* if data received completely */
  1715. if (strlen(bufIn) != 0) {
  1716. strncat(post_req_data, offset, post_data_count);
  1717. //printf("post_req_data: %s\r\n", post_req_data);
  1718. /* End reqest */
  1719. post_data_count = 0;
  1720. HTTP_ConfirmWebPwd(post_req_data, bufOut, strlen(post_req_data), lenBufOut);
  1721. *lenBufOut = strlen(bufOut);
  1722. return bufOut;
  1723. }
  1724. }
  1725. /* request was fragmented before "\r\n\r\n" */
  1726. else {
  1727. post_data_count = 0;
  1728. /* Redirect to login page */
  1729. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1730. fs_open("/rslogin.html", &file);
  1731. } else {
  1732. fs_open("/login.html", &file);
  1733. }
  1734. *lenBufOut = file.len;
  1735. return file.data;
  1736. }
  1737. } else {
  1738. DBG printf("Too long POST request!\r\n");
  1739. /* Ignore request */
  1740. post_data_count = 0;
  1741. /* Redirect to login page */
  1742. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1743. fs_open("/rslogin.html", &file);
  1744. } else {
  1745. fs_open("/login.html", &file);
  1746. }
  1747. *lenBufOut = file.len;
  1748. return file.data;
  1749. }
  1750. return 0;
  1751. }
  1752. char *HTTP_LogoutPage(uint32_t reqNum, char *bufIn, char *bufOut, uint16_t lenBufIn, uint16_t *lenBufOut)
  1753. {
  1754. (void)bufIn;
  1755. (void)bufOut;
  1756. (void)lenBufIn;
  1757. (void)reqNum;
  1758. Authenticated = false;
  1759. seclevel = 0xFF;
  1760. if ((sSettings.sRADIUS.RDSEnable == true) && (fl_raddius_net_err == false)) {
  1761. fs_open("/rslogin.html", &file);
  1762. } else {
  1763. fs_open("/login.html", &file);
  1764. }
  1765. *lenBufOut = file.len;
  1766. return file.data;
  1767. }
  1768. #endif
  1769. /**
  1770. * @brief Send callback for log file transfer (messages as is, not ordered)
  1771. */
  1772. void HTTP_SendHistory(void)
  1773. {
  1774. uint32_t nbytes = 0;
  1775. static bool start = true;
  1776. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1777. if (log_ptr + FILE_BUF_MAX_LEN <= log_size) {
  1778. nbytes = History_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN, start);
  1779. } else if (log_ptr < log_size) {
  1780. nbytes = History_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1781. } else {
  1782. nbytes = 0;
  1783. }
  1784. log_ptr += nbytes;
  1785. start = false;
  1786. if (nbytes == 0) {
  1787. // File transfer finished.
  1788. start = true;
  1789. // Clear file transfer in progress flag
  1790. fLogTransInprog = false;
  1791. return;
  1792. }
  1793. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1794. HTTP_SendHistory();
  1795. }
  1796. /**
  1797. * @brief Sent callback for log file transfer (messages as is, not ordered)
  1798. */
  1799. void HTTP_SendLog(void)
  1800. {
  1801. uint32_t nbytes = 0;
  1802. static bool start = true;
  1803. memset(logFileBuf, 0, FILE_BUF_MAX_LEN);
  1804. if (log_ptr + FILE_BUF_MAX_LEN_LOG <= log_size) {
  1805. nbytes = LOG_GetData(log_ptr, logFileBuf, FILE_BUF_MAX_LEN_LOG, start);
  1806. } else if (log_ptr < log_size) {
  1807. nbytes = LOG_GetData(log_ptr, logFileBuf, (log_size - log_ptr), start);
  1808. } else {
  1809. nbytes = 0;
  1810. }
  1811. log_ptr += nbytes;
  1812. start = false;
  1813. if (nbytes == 0) {
  1814. // File transfer finished.
  1815. start = true;
  1816. // Clear file transfer in progress flag
  1817. fLogTransInprog = false;
  1818. return;
  1819. }
  1820. SSL_SendFrames(&ssl, logFileBuf, nbytes);
  1821. HTTP_SendLog();
  1822. return;
  1823. }
  1824. /**
  1825. * @brief sends file from flash FS
  1826. * @param filename: pointer to the file name to send
  1827. * @param pnonmatch: pointer to the If-Non_Match value
  1828. * @param pcb: pointer to a tcp_pcb struct
  1829. * @param hs: pointer to a http_state struct
  1830. * @param file: pointer to a fs_file struct
  1831. * @retval
  1832. */
  1833. char *send_file(char *filename, char *pnonmatch, struct fs_file *file, uint16_t *Len)
  1834. {
  1835. int res = 0;
  1836. char etag[MAX_ETAG_LEN];
  1837. char *petag = NULL;
  1838. res = fs_open(filename, file);
  1839. if (res == 0) {
  1840. printf("Not found: %s\r\n", filename);
  1841. sprintf(filename, "/index.html");
  1842. fs_open(filename, file);
  1843. }
  1844. /* Find Etag value */
  1845. uint8_t etag_len = Parse_Header(file->data, file->len, Etag, 6, etag);
  1846. if (etag_len < MAX_ETAG_LEN && etag_len > 0) {
  1847. DBG printf("Etag: %s\r\n", etag);
  1848. petag = etag;
  1849. }
  1850. /* Compare Etag and If-Non-Match fields */
  1851. if (pnonmatch && petag && (strcmp(pnonmatch, petag) == 0)) {
  1852. /* Send 304 code */
  1853. sprintf(sendBuf, HTTP_304_NOT_MODIFIED);
  1854. DBG printf(sendBuf);
  1855. *Len = strlen(sendBuf);
  1856. return sendBuf;
  1857. } else {
  1858. *Len = file->len;
  1859. return file->data;
  1860. }
  1861. }
  1862. /**
  1863. * @brief Extract the custom field data from HTML data
  1864. * @param data : pointer on receive packet buffer
  1865. * @param len : buffer length
  1866. * @param field : field name
  1867. * @param flen : field name length
  1868. * @retval value : pointer for field data
  1869. */
  1870. static uint32_t Parse_Header(char *data, uint32_t len, const char *field, uint32_t flen, char *value)
  1871. {
  1872. uint32_t i = 0, size = 0;
  1873. char *ptr;
  1874. uint32_t Offset = 0;
  1875. /* Find field name in data buffer */
  1876. for (i = 0; i < len; i++) {
  1877. if (strncmp ((char *)(data + i), field, flen) == 0) {
  1878. Offset = i + flen;
  1879. break;
  1880. }
  1881. }
  1882. /* Copy Field value */
  1883. if (Offset) {
  1884. i = 0;
  1885. ptr = (char *)(data + Offset);
  1886. while (*(ptr + i) != 0x0d) {
  1887. value[i] = *(ptr + i);
  1888. i++;
  1889. }
  1890. value[i] = '\0';
  1891. size = i;
  1892. }
  1893. return size;
  1894. }
  1895. /**
  1896. * @brief
  1897. * @retval None
  1898. */
  1899. bool GetFileName(char *inStr, char *fileName, uint8_t *fileNameLen)
  1900. {
  1901. char *beginValue = NULL;
  1902. char *endValue = NULL;
  1903. int len = 0;
  1904. char *strPtr = NULL;
  1905. strPtr = strstr(inStr, "GET");
  1906. if (strPtr == NULL) {
  1907. strPtr = strstr(inStr, "POST");
  1908. }
  1909. if (strPtr == NULL) {
  1910. *fileNameLen = 0;
  1911. return false;
  1912. } else {
  1913. beginValue = strpbrk(strPtr, "/");
  1914. endValue = strpbrk(beginValue, " ");
  1915. if (endValue == NULL) {
  1916. *fileNameLen = 0;
  1917. return false;
  1918. }
  1919. len = endValue - beginValue;
  1920. if (len < MAX_FILENAME_LEN) {
  1921. strncpy(fileName, beginValue, len);
  1922. *fileNameLen = len;
  1923. fileName[len] = '\0';
  1924. return true;
  1925. } else {
  1926. return false;
  1927. }
  1928. }
  1929. }
  1930. #endif