X-Git-Url: http://git.archive.openwrt.org/?p=project%2Fuhttpd.git;a=blobdiff_plain;f=main.c;h=ab6fbb061d8788b27f88f3c67d01f8864b435d5f;hp=c0a6a823ae6f5b334a6c67d3721a91602ff554da;hb=119244d9b13e84eb898f9fb97e83cac260c1a0b5;hpb=c426f3dee96c2a4468ff54c881fa15fa651d275a diff --git a/main.c b/main.c index c0a6a82..ab6fbb0 100644 --- a/main.c +++ b/main.c @@ -17,6 +17,9 @@ * limitations under the License. */ +#define _BSD_SOURCE +#define _GNU_SOURCE +#define _XOPEN_SOURCE 700 #include #include #include @@ -29,7 +32,9 @@ #include #include "uhttpd.h" +#include "tls.h" +char uh_buf[4096]; static int run_server(void) { @@ -141,13 +146,9 @@ static int usage(const char *name) " -u string URL prefix for HTTP/JSON handler\n" " -U file Override ubus socket path\n" #endif -#ifdef HAVE_CGI " -x string URL prefix for CGI handler, default is '/cgi-bin'\n" " -i .ext=path Use interpreter at path for files with the given extension\n" -#endif -#if defined(HAVE_CGI) || defined(HAVE_LUA) || defined(HAVE_UBUS) " -t seconds CGI, Lua and UBUS script timeout in seconds, default is 60\n" -#endif " -T seconds Network timeout in seconds, default is 30\n" " -d string URL decode given string\n" " -r string Specify basic auth realm\n" @@ -161,9 +162,11 @@ static void init_defaults(void) { conf.script_timeout = 60; conf.network_timeout = 30; - conf.http_keepalive = 0; /* fixme */ + conf.http_keepalive = 20; conf.max_requests = 3; conf.realm = "Protected Area"; + conf.cgi_prefix = "/cgi-bin"; + conf.cgi_path = "/sbin:/usr/sbin:/bin:/usr/bin"; uh_index_add("index.html"); uh_index_add("index.htm"); @@ -171,14 +174,34 @@ static void init_defaults(void) uh_index_add("default.htm"); } +static void fixup_prefix(char *str) +{ + int len; + + if (!str || !str[0]) + return; + + len = strlen(str) - 1; + + while (len > 0 && str[len] == '/') + len--; + + str[len + 1] = 0; +} + int main(int argc, char **argv) { + const char *tls_key, *tls_crt; bool nofork = false; char *port; int opt, ch; int cur_fd; int bound = 0; + int n_tls = 0; + + BUILD_BUG_ON(sizeof(uh_buf) < PATH_MAX); + uh_dispatch_add(&cgi_dispatch); init_defaults(); signal(SIGPIPE, SIG_IGN); @@ -187,6 +210,7 @@ int main(int argc, char **argv) switch(ch) { case 's': + n_tls++; tls = true; /* fall through */ case 'p': @@ -194,11 +218,12 @@ int main(int argc, char **argv) break; case 'h': - if (!realpath(optarg, conf.docroot)) { + if (!realpath(optarg, uh_buf)) { fprintf(stderr, "Error: Invalid directory %s: %s\n", optarg, strerror(errno)); exit(1); } + conf.docroot = strdup(uh_buf); break; case 'E': @@ -235,6 +260,23 @@ int main(int argc, char **argv) conf.max_requests = atoi(optarg); break; + case 'x': + fixup_prefix(optarg); + conf.cgi_prefix = optarg; + break; + + case 'i': + port = strchr(optarg, '='); + if (optarg[0] != '.' || !port) { + fprintf(stderr, "Error: Invalid interpreter: %s\n", + optarg); + exit(1); + } + + *port++ = 0; + uh_interpreter_add(optarg, port); + break; + case 't': conf.script_timeout = atoi(optarg); break; @@ -286,6 +328,13 @@ int main(int argc, char **argv) conf.file = optarg; break; + case 'C': + tls_crt = optarg; + break; + + case 'K': + tls_key = optarg; + break; default: return usage(argv[0]); } @@ -298,6 +347,22 @@ int main(int argc, char **argv) return 1; } + if (n_tls) { + if (!tls_crt || !tls_key) { + fprintf(stderr, "Please specify a certificate and " + "a key file to enable SSL support\n"); + return 1; + } + +#ifdef HAVE_TLS + if (uh_tls_init(tls_key, tls_crt)) + return 1; +#else + fprintf(stderr, "Error: TLS support not compiled in.\n"); + return 1; +#endif + } + /* fork (if not disabled) */ if (!nofork) { switch (fork()) {