flimflam: Add L2TP/IPsec VPN plugin

scripts/libppp-plugin.c

Index: scripts/libppp-plugin.c
diff --git a/scripts/libppp-plugin.c b/scripts/libppp-plugin.c
new file mode 100644
index 0000000000000000000000000000000000000000..f912bc77ad1d961b7ddb0af1ddd55971a5524f2e
--- /dev/null
+++ b/scripts/libppp-plugin.c
@@ -0,0 +1,322 @@
+/*
+ *
+ *  Connection Manager
+ *
+ *  Copyright (C) 2007-2010  Intel Corporation. All rights reserved.
+ *
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+ *
+ */

[Sam Leffler, 2011/03/04 17:47:45]

need a comment explaining this is built into a .so that's loaded into ppp; I
kept looking for main until I read the plugin code and saw it was passed as a
dso

[kmixter1, 2011/03/05 09:30:51]

Done.

+
+#ifdef HAVE_CONFIG_H
+#include <config.h>
+#endif
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <syslog.h>
+#include <fcntl.h>
+#include <pppd/pppd.h>
+#include <pppd/fsm.h>
+#include <pppd/ipcp.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
+
+#include <dbus/dbus.h>
+
+#define INET_ADDRES_LEN (INET_ADDRSTRLEN + 5)
+#define INET_DNS_LEN	(2*INET_ADDRSTRLEN + 9)
+
+static char *busname = NULL;
+static char *interface = NULL;
+static char *path = NULL;
+
+static DBusConnection *connection = NULL;
+
+char pppd_version[] = VERSION;
+
+int plugin_init(void);
+
+static void append(DBusMessageIter *dict, const char *key, const char *value)
+{
+	DBusMessageIter entry;
+	/* We clean the environment before invoking openconnect, but
+	   might as well still filter out the few things that get
+	   added that we're not interested in */
+	if (!strcmp(key, "PWD") || !strcmp(key, "_") ||
+	    !strcmp(key, "SHLVL") || !strcmp(key, "connman_busname") ||
+	    !strcmp(key, "connman_network"))
+		return;
+
+	dbus_message_iter_open_container(dict, DBUS_TYPE_DICT_ENTRY,
+							NULL, &entry);
+
+	dbus_message_iter_append_basic(&entry, DBUS_TYPE_STRING, &key);
+
+	dbus_message_iter_append_basic(&entry, DBUS_TYPE_STRING, &value);
+
+	dbus_message_iter_close_container(dict, &entry);
+}
+
+
+static int pptp_have_secret()
+{
+	return 1;
+}
+
+static int pptp_get_secret (char *username, char *password)

[Sam Leffler, 2011/03/04 17:47:45]

s/secret (/secret(/ (seems inconsistent--but perhaps this is prevailing style)

[kmixter1, 2011/03/05 09:30:51]

Done.

+{
+	DBusMessage *msg, *reply;
+	const char *user, *pass;
+	DBusError err;
+
+        syslog(LOG_INFO, "libppp-plugin.so: requesting secret");
+	if (username == NULL && password == NULL)

[Sam Leffler, 2011/03/04 17:47:45]

seems like you want some error msgs here; maybe sent via syslog unless they can
be captured some other way

[kmixter1, 2011/03/05 09:30:51]

Done.  Now I'm logging like error messages are free.

+		return -1;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (password == NULL)
+		return 1;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (connection == NULL)
+		return -1;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	dbus_error_init(&err);
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	msg = dbus_message_new_method_call(busname, path,
+						interface, "getsec");
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (msg == NULL)
+			return -1;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	dbus_message_append_args(msg, DBUS_TYPE_INVALID, DBUS_TYPE_INVALID);
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	reply = dbus_connection_send_with_reply_and_block(connection,
+								msg, -1, &err);
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (reply == NULL) {
+		if (dbus_error_is_set(&err) == TRUE)
+			dbus_error_free(&err);
+
+		dbus_message_unref(msg);
+		return -1;
+	}
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	dbus_message_unref(msg);
+
+	dbus_error_init(&err);
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (dbus_message_get_args(reply, &err, DBUS_TYPE_STRING, &user,
+						DBUS_TYPE_STRING, &pass,
+						DBUS_TYPE_INVALID) == FALSE) {
+		if (dbus_error_is_set(&err) == TRUE)
+			dbus_error_free(&err);
+
+		dbus_message_unref(reply);
+		return -1;
+	}
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (username != NULL)
+		strcpy(username, user);
+
+	strcpy(password, pass);
+
+	dbus_message_unref(reply);
+
+        return 1;
+}
+
+static void ppptp_up (void *data, int arg)
+{
+	char buf[INET_ADDRES_LEN];
+	const char *reason = "connect";
+        DBusMessageIter iter, dict;
+	DBusMessage *msg;
+
+        syslog(LOG_INFO, "libppp-plugin.so: interface up %s", ifname);
+	if (connection == NULL)
+		return;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (ipcp_gotoptions[0].ouraddr == 0)
+		return;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	msg = dbus_message_new_method_call(busname, path,
+						interface, "notify");
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	if (msg == NULL)
+		return;
+
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+	dbus_message_set_no_reply(msg, TRUE);
+
+	dbus_message_append_args(msg,
+			DBUS_TYPE_STRING, &reason, DBUS_TYPE_INVALID);
+
+	dbus_message_iter_init_append(msg, &iter);
+
+	dbus_message_iter_open_container(&iter, DBUS_TYPE_ARRAY,
+			DBUS_DICT_ENTRY_BEGIN_CHAR_AS_STRING
+			DBUS_TYPE_STRING_AS_STRING DBUS_TYPE_STRING_AS_STRING
+			DBUS_DICT_ENTRY_END_CHAR_AS_STRING, &dict);
+
+	append(&dict, "INTERNAL_IFNAME", ifname);
+
+	inet_ntop(AF_INET, &ipcp_gotoptions[0].ouraddr, buf, INET_ADDRSTRLEN);
+	append(&dict, "INTERNAL_IP4_ADDRESS", buf);
+
+	inet_ntop(AF_INET, &ipcp_gotoptions[0].hisaddr, buf, INET_ADDRSTRLEN);
+	append(&dict, "EXTERNAL_IP4_ADDRESS", buf);
+
+	inet_ntop(AF_INET, &ipcp_hisoptions[0].ouraddr, buf, INET_ADDRSTRLEN);
+	append(&dict, "EXTERNAL_IP4_ADDRESS2", buf);
+
+	strcpy(buf, "255.255.255.255");
+	append(&dict, "INTERNAL_IP4_NETMASK", buf);
+
+        if (ipcp_gotoptions[0].dnsaddr[0] || ipcp_gotoptions[0].dnsaddr[1]) {
+                if (ipcp_gotoptions[0].dnsaddr[0]) {
+			inet_ntop(AF_INET, &ipcp_gotoptions[0].dnsaddr[0],
+							buf, INET_ADDRSTRLEN);
+                        append(&dict, "DNS1", buf);
+		}
+                if (ipcp_gotoptions[0].dnsaddr[1]) {
+			inet_ntop(AF_INET, &ipcp_gotoptions[0].dnsaddr[1],
+							buf, INET_ADDRSTRLEN);
+                        append(&dict, "DNS2", buf);
+		}
+        }
+
+	append(&dict, "MTU", "1400");

[Sam Leffler, 2011/03/04 17:47:45]

say what?

[kmixter1, 2011/03/05 09:30:51]

yeah. upstream. I'll remove it since it's obvious bogus and we're not using it
on the flimflam side.

+
+	dbus_message_iter_close_container(&iter, &dict);
+
+	dbus_connection_send(connection, msg, NULL);
+
+	dbus_connection_flush(connection);
+
+	dbus_message_unref(msg);
+        syslog(LOG_INFO, "libppp-plugin.so: CP%d", __LINE__);
+}
+
+static void pptp_exit (void *data, int arg)

[Sam Leffler, 2011/03/04 17:47:45]

s/ (/(/ or something to make style consistent

[kmixter1, 2011/03/05 09:30:51]

Done.

+{
+	if (connection != NULL) {
+		dbus_connection_unref(connection);
+		connection = NULL;
+	}
+
+	if (busname != NULL) {
+		free(busname);
+		busname = NULL;
+	}
+
+	if (interface != NULL) {
+		free(interface);
+		interface = NULL;
+	}
+
+	if (path != NULL) {
+		free(path);
+		path = NULL;
+	}
+}
+
+static void pptp_phase_change(void *data, int arg)
+{
+        const char *reason = "disconnect";
+	DBusMessage *msg;
+
+        syslog(LOG_INFO, "libppp-plugin.so: phase change");
+	if (connection == NULL)
+		return;
+
+	if (arg == PHASE_DEAD || arg == PHASE_DISCONNECT) {
+		msg = dbus_message_new_method_call(busname, path,
+						interface, "notify");
+		if (msg == NULL)
+			return;
+
+		dbus_message_set_no_reply(msg, TRUE);
+
+		dbus_message_append_args(msg,
+			DBUS_TYPE_STRING, &reason, DBUS_TYPE_INVALID);
+
+		dbus_connection_send(connection, msg, NULL);
+
+		dbus_connection_flush(connection);
+
+		dbus_message_unref(msg);
+	}
+}
+
+int plugin_init(void)
+{
+	DBusError error;
+	static const char *bus, *inter, *p;
+
+	dbus_error_init(&error);
+
+	bus = getenv("CONNMAN_BUSNAME");
+	inter = getenv("CONNMAN_INTERFACE");
+	p = getenv("CONNMAN_PATH");
+
+        syslog(LOG_INFO, "libppp-plugin.so: initialized %s, %s, %s", bus, inter, p);
+
+	if (!bus || !inter || !p)
+		return -1;
+
+	busname = strdup(bus);
+	interface = strdup(inter);
+	path = strdup(p);
+
+	if (!busname || !interface || !path) {
+		pptp_exit(NULL, 0);
+		return -1;
+	}
+
+	connection = dbus_bus_get(DBUS_BUS_SYSTEM, &error);
+	if (connection == NULL) {
+		if (dbus_error_is_set(&error) == TRUE)
+                        dbus_error_free(&error);
+
+		pptp_exit(NULL, 0);
+		return -1;
+	}
+
+	pap_passwd_hook = pptp_get_secret;
+	chap_passwd_hook = pptp_get_secret;
+
+	chap_check_hook = pptp_have_secret;
+	pap_check_hook = pptp_have_secret;
+
+	add_notifier (&ip_up_notifier, ppptp_up, NULL);
+	add_notifier (&phasechange, pptp_phase_change, NULL);
+	add_notifier (&exitnotify, pptp_exit, connection);
+
+	return 0;
+}