ssl-proxy-openssl.c revision cca4ba2a504d70a9fe9fee37f8433997359de52c
c25356d5978632df6203437e1953bcb29e0c736fTimo Sirainen* Copyright (c) 2002-2013 Dovecot authors, see the included COPYING file */
c25356d5978632df6203437e1953bcb29e0c736fTimo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#include "login-common.h"
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen#include "array.h"
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen#include "ioloop.h"
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen#include "net.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "ostream.h"
aef92409cf369afdd2ecd81a4f80083cd4082f46Timo Sirainen#include "read-full.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "safe-memset.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "hash.h"
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#include "llist.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "master-interface.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "master-service-ssl-settings.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "client-common.h"
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen#include "ssl-proxy.h"
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#include <fcntl.h>
0add8c99ca65e56dbf613595fc37c41aafff3f7fTimo Sirainen#include <unistd.h>
40ef82c46f6652412b068ebcdac7c3e74840a284Timo Sirainen#include <sys/stat.h>
105addcb709523868418cc3e3baad7ad3453a91eTimo Sirainen
aef92409cf369afdd2ecd81a4f80083cd4082f46Timo Sirainen#ifdef HAVE_OPENSSL
aef92409cf369afdd2ecd81a4f80083cd4082f46Timo Sirainen
aef92409cf369afdd2ecd81a4f80083cd4082f46Timo Sirainen#include "iostream-openssl.h"
aef92409cf369afdd2ecd81a4f80083cd4082f46Timo Sirainen#include <openssl/crypto.h>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#include <openssl/engine.h>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#include <openssl/x509.h>
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen#include <openssl/pem.h>
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen#include <openssl/ssl.h>
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen#include <openssl/err.h>
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen#include <openssl/rand.h>
56f45b3f3ae20e5c933701f4657dda5ef1916855Timo Sirainen
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainen/* Check every 30 minutes if parameters file has been updated */
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainen#define SSL_PARAMFILE_CHECK_INTERVAL (60*30)
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainen
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainen#define SSL_PARAMETERS_PATH "ssl-params"
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen#ifndef SSL_CTRL_SET_TLSEXT_HOSTNAME /* FIXME: this may be unnecessary.. */
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# undef HAVE_SSL_GET_SERVERNAME
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen#endif
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
51795bfe9d05d92fe942cb451aec2b9d16d32a11Timo Sirainenenum ssl_io_action {
51795bfe9d05d92fe942cb451aec2b9d16d32a11Timo Sirainen SSL_ADD_INPUT,
51795bfe9d05d92fe942cb451aec2b9d16d32a11Timo Sirainen SSL_REMOVE_INPUT,
51795bfe9d05d92fe942cb451aec2b9d16d32a11Timo Sirainen SSL_ADD_OUTPUT,
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen SSL_REMOVE_OUTPUT
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen};
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenstruct ssl_proxy {
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen int refcount;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen struct ssl_proxy *prev, *next;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen SSL *ssl;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen struct client *client;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen struct ip_addr ip;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen const struct login_settings *login_set;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen const struct master_service_ssl_settings *ssl_set;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen pool_t set_pool;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen int fd_ssl, fd_plain;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen struct io *io_ssl_read, *io_ssl_write, *io_plain_read, *io_plain_write;
659fe5d24825b160cae512538088020d97a60239Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen unsigned char plainout_buf[1024];
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen unsigned int plainout_size;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
659fe5d24825b160cae512538088020d97a60239Timo Sirainen unsigned char sslout_buf[1024];
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen unsigned int sslout_size;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
232d5bef3c709e90e24f0874a36854b92187bb6cTimo Sirainen ssl_handshake_callback_t *handshake_callback;
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen void *handshake_context;
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen const char *cert_error;
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen char *last_error;
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen unsigned int handshaked:1;
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen unsigned int destroyed:1;
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen unsigned int cert_received:1;
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen unsigned int cert_broken:1;
16c89b1260c9d07c01c83a9219424d3727069b2eTimo Sirainen unsigned int client_proxy:1;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen};
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainenstruct ssl_parameters {
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen const char *path;
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen time_t last_refresh;
faed8babca9914257f34fb2e603d74016d563b2dTimo Sirainen int fd;
e06c0b65c16ccce69bbee009ead14d7d3d17a256Timo Sirainen
e06c0b65c16ccce69bbee009ead14d7d3d17a256Timo Sirainen DH *dh_512, *dh_1024;
e06c0b65c16ccce69bbee009ead14d7d3d17a256Timo Sirainen};
a928e7efabb1672b1476e597106d4b4b81ac6f3cTimo Sirainen
e06c0b65c16ccce69bbee009ead14d7d3d17a256Timo Sirainenstruct ssl_server_context {
e06c0b65c16ccce69bbee009ead14d7d3d17a256Timo Sirainen SSL_CTX *ctx;
838f56174b963779a88083a0d0e85b30d2d846e7Timo Sirainen pool_t pool;
894987bf45718f8849cc3898afdfb1ac3cfa2445Timo Sirainen
894987bf45718f8849cc3898afdfb1ac3cfa2445Timo Sirainen const char *cert;
894987bf45718f8849cc3898afdfb1ac3cfa2445Timo Sirainen const char *key;
838f56174b963779a88083a0d0e85b30d2d846e7Timo Sirainen const char *ca;
838f56174b963779a88083a0d0e85b30d2d846e7Timo Sirainen const char *cipher_list;
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainen const char *protocols;
d143077bd518de129b8d446fb58e003903e50867Timo Sirainen bool verify_client_cert;
d143077bd518de129b8d446fb58e003903e50867Timo Sirainen};
d143077bd518de129b8d446fb58e003903e50867Timo Sirainen
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainenstatic int extdata_index;
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic HASH_TABLE(struct ssl_server_context *,
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainen struct ssl_server_context *) ssl_servers;
bbf796c17f02538058d7559bfe96d677e5b55015Timo Sirainenstatic SSL_CTX *ssl_client_ctx;
838f56174b963779a88083a0d0e85b30d2d846e7Timo Sirainenstatic unsigned int ssl_proxy_count;
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic struct ssl_proxy *ssl_proxies;
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic struct ssl_parameters ssl_params;
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic int ssl_username_nid;
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic ENGINE *ssl_engine;
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainen
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainenstatic void plain_read(struct ssl_proxy *proxy);
6e07b4251bf6a3cf34019c351a32a65c08392e58Timo Sirainenstatic void ssl_read(struct ssl_proxy *proxy);
6e07b4251bf6a3cf34019c351a32a65c08392e58Timo Sirainenstatic void ssl_write(struct ssl_proxy *proxy);
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainenstatic void ssl_step(struct ssl_proxy *proxy);
6a19e109ee8c5a6f688da83a86a7f6abeb71abddTimo Sirainenstatic void ssl_proxy_destroy(struct ssl_proxy *proxy);
d143077bd518de129b8d446fb58e003903e50867Timo Sirainenstatic void ssl_proxy_unref(struct ssl_proxy *proxy);
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainen
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic struct ssl_server_context *
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenssl_server_context_init(const struct login_settings *login_set,
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainen const struct master_service_ssl_settings *ssl_set);
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainenstatic void ssl_server_context_deinit(struct ssl_server_context **_ctx);
5a07b37a9df398b5189c14872a600384208ab74bTimo Sirainen
7797aa2479e99aeb71057b7a2584b2cb72e4d3f8Timo Sirainenstatic unsigned int ssl_server_context_hash(const struct ssl_server_context *ctx)
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen{
a928e7efabb1672b1476e597106d4b4b81ac6f3cTimo Sirainen unsigned int i, g, h = 0;
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen
1175f27441385a7011629f295f42708f9a3a4ffcTimo Sirainen /* checking for different certs is typically good enough,
0d70a702dec63d22535684fec6a7247c5f153208Timo Sirainen and it should be enough to check only the first few bytes. */
0d70a702dec63d22535684fec6a7247c5f153208Timo Sirainen for (i = 0; i < 16 && ctx->cert[i] != '\0'; i++) {
0d70a702dec63d22535684fec6a7247c5f153208Timo Sirainen h = (h << 4) + ctx->cert[i];
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen if ((g = h & 0xf0000000UL)) {
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen h = h ^ (g >> 24);
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen h = h ^ g;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen }
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen }
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen return h;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen}
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen
94aa90d2d17a7aebcda5a4193a62e80ddbb169b7Timo Sirainenstatic int ssl_server_context_cmp(const struct ssl_server_context *ctx1,
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen const struct ssl_server_context *ctx2)
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen{
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen if (strcmp(ctx1->cert, ctx2->cert) != 0)
2d49f150b4bce6f2f59a84e268e4777901c3e42cTimo Sirainen return 1;
2d49f150b4bce6f2f59a84e268e4777901c3e42cTimo Sirainen if (strcmp(ctx1->key, ctx2->key) != 0)
2d49f150b4bce6f2f59a84e268e4777901c3e42cTimo Sirainen return 1;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen if (null_strcmp(ctx1->ca, ctx2->ca) != 0)
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen return 1;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen if (null_strcmp(ctx1->cipher_list, ctx2->cipher_list) != 0)
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen return 1;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen if (null_strcmp(ctx1->protocols, ctx2->protocols) != 0)
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen return 1;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen return ctx1->verify_client_cert == ctx2->verify_client_cert ? 0 : 1;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen}
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainenstatic void ssl_params_corrupted(void)
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen{
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen i_fatal("Corrupted SSL parameters file in state_dir: ssl-parameters.dat");
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen}
0d0451206a91e9f96e522075dce28a89adc2325dTimo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenstatic void read_next(struct ssl_parameters *params, void *data, size_t size)
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen{
d5cebe7f98e63d4e2822863ef2faa4971e8b3a5dTimo Sirainen int ret;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainen if ((ret = read_full(params->fd, data, size)) < 0)
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainen i_fatal("read(%s) failed: %m", params->path);
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainen if (ret == 0)
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainen ssl_params_corrupted();
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainen}
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainen
ae8817f05005f57bba32479a610b52d083e2b6ebTimo Sirainenstatic bool read_dh_parameters_next(struct ssl_parameters *params)
c680a6b35b459045e92814778908da5a93922107Timo Sirainen{
c680a6b35b459045e92814778908da5a93922107Timo Sirainen unsigned char *buf;
c680a6b35b459045e92814778908da5a93922107Timo Sirainen const unsigned char *cbuf;
c680a6b35b459045e92814778908da5a93922107Timo Sirainen unsigned int len;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen int bits;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen /* read bit size. 0 ends the DH parameters list. */
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen read_next(params, &bits, sizeof(bits));
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
5f78b33aa505b17e23cdf27b071a24e127b3db54Timo Sirainen if (bits == 0)
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen return FALSE;
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen /* read data size. */
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen read_next(params, &len, sizeof(len));
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen if (len > 1024*100) /* should be enough? */
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen ssl_params_corrupted();
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen buf = i_malloc(len);
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen read_next(params, buf, len);
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen cbuf = buf;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen switch (bits) {
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen case 512:
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen params->dh_512 = d2i_DHparams(NULL, &cbuf, len);
95a1a5195d56f3cf5d1e529aad668f87ad3b979bTimo Sirainen break;
c9c24293550541307f1bb41bba4a0fdfe2fa59e0Timo Sirainen case 1024:
c9c24293550541307f1bb41bba4a0fdfe2fa59e0Timo Sirainen params->dh_1024 = d2i_DHparams(NULL, &cbuf, len);
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen break;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen default:
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen ssl_params_corrupted();
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen }
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
43d32cbe60fdaef2699d99f1ca259053e9350411Timo Sirainen i_free(buf);
6ef7e31619edfaa17ed044b45861d106a86191efTimo Sirainen return TRUE;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen}
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
93b29720c5141f787bd1861796867e4595c9d084Timo Sirainenstatic void ssl_free_parameters(struct ssl_parameters *params)
93b29720c5141f787bd1861796867e4595c9d084Timo Sirainen{
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen if (params->dh_512 != NULL) {
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen DH_free(params->dh_512);
8a3d609fdd84f5938c82e8e7eeb84a24ab41b317Timo Sirainen params->dh_512 = NULL;
8a3d609fdd84f5938c82e8e7eeb84a24ab41b317Timo Sirainen }
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen if (params->dh_1024 != NULL) {
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen DH_free(params->dh_1024);
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen params->dh_1024 = NULL;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen }
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen}
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenstatic void ssl_refresh_parameters(struct ssl_parameters *params)
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen{
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen char c;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen int ret;
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen if (params->last_refresh > ioloop_time - SSL_PARAMFILE_CHECK_INTERVAL)
a050ca9def13949dbaa67bd6574a41c4f397ae26Timo Sirainen return;
6ef7e31619edfaa17ed044b45861d106a86191efTimo Sirainen params->last_refresh = ioloop_time;
6ef7e31619edfaa17ed044b45861d106a86191efTimo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen params->fd = net_connect_unix(params->path);
902222fb0928d1701f20a384b73f327b1d9a15ddTimo Sirainen if (params->fd == -1) {
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen i_error("connect(%s) failed: %m", params->path);
902222fb0928d1701f20a384b73f327b1d9a15ddTimo Sirainen return;
2a6af811ea3de3cf9e2f15e446674dd21b0705f3Timo Sirainen }
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen net_set_nonblock(params->fd, FALSE);
ssl_free_parameters(params);
while (read_dh_parameters_next(params)) ;
if ((ret = read_full(params->fd, &c, 1)) < 0)
i_fatal("read(%s) failed: %m", params->path);
else if (ret != 0) {
/* more data than expected */
ssl_params_corrupted();
}
if (close(params->fd) < 0)
i_error("close(%s) failed: %m", params->path);
params->fd = -1;
}
static void ssl_set_io(struct ssl_proxy *proxy, enum ssl_io_action action)
{
switch (action) {
case SSL_ADD_INPUT:
if (proxy->io_ssl_read != NULL)
break;
proxy->io_ssl_read = io_add(proxy->fd_ssl, IO_READ,
ssl_step, proxy);
break;
case SSL_REMOVE_INPUT:
if (proxy->io_ssl_read != NULL)
io_remove(&proxy->io_ssl_read);
break;
case SSL_ADD_OUTPUT:
if (proxy->io_ssl_write != NULL)
break;
proxy->io_ssl_write = io_add(proxy->fd_ssl, IO_WRITE,
ssl_step, proxy);
break;
case SSL_REMOVE_OUTPUT:
if (proxy->io_ssl_write != NULL)
io_remove(&proxy->io_ssl_write);
break;
}
}
static void plain_block_input(struct ssl_proxy *proxy, bool block)
{
if (block) {
if (proxy->io_plain_read != NULL)
io_remove(&proxy->io_plain_read);
} else {
if (proxy->io_plain_read == NULL) {
proxy->io_plain_read = io_add(proxy->fd_plain, IO_READ,
plain_read, proxy);
}
}
}
static void plain_read(struct ssl_proxy *proxy)
{
ssize_t ret;
bool corked = FALSE;
if (proxy->sslout_size == sizeof(proxy->sslout_buf)) {
/* buffer full, block input until it's written */
plain_block_input(proxy, TRUE);
return;
}
proxy->refcount++;
while (proxy->sslout_size < sizeof(proxy->sslout_buf) &&
!proxy->destroyed) {
ret = net_receive(proxy->fd_plain,
proxy->sslout_buf + proxy->sslout_size,
sizeof(proxy->sslout_buf) -
proxy->sslout_size);
if (ret <= 0) {
if (ret < 0)
ssl_proxy_destroy(proxy);
break;
} else {
proxy->sslout_size += ret;
if (!corked) {
if (net_set_cork(proxy->fd_ssl, TRUE) == 0)
corked = TRUE;
}
ssl_write(proxy);
}
}
if (corked)
net_set_cork(proxy->fd_ssl, FALSE);
ssl_proxy_unref(proxy);
}
static void plain_write(struct ssl_proxy *proxy)
{
ssize_t ret;
proxy->refcount++;
ret = net_transmit(proxy->fd_plain, proxy->plainout_buf,
proxy->plainout_size);
if (ret < 0)
ssl_proxy_destroy(proxy);
else {
proxy->plainout_size -= ret;
memmove(proxy->plainout_buf, proxy->plainout_buf + ret,
proxy->plainout_size);
if (proxy->plainout_size > 0) {
if (proxy->io_plain_write == NULL) {
proxy->io_plain_write =
io_add(proxy->fd_plain, IO_WRITE,
plain_write, proxy);
}
} else {
if (proxy->io_plain_write != NULL)
io_remove(&proxy->io_plain_write);
}
ssl_set_io(proxy, SSL_ADD_INPUT);
if (SSL_pending(proxy->ssl) > 0)
ssl_read(proxy);
}
ssl_proxy_unref(proxy);
}
static const char *ssl_err2str(unsigned long err, const char *data, int flags)
{
const char *ret;
char *buf;
size_t err_size = 256;
buf = t_malloc(err_size);
buf[err_size-1] = '\0';
ERR_error_string_n(err, buf, err_size-1);
ret = buf;
if ((flags & ERR_TXT_STRING) != 0)
ret = t_strdup_printf("%s: %s", buf, data);
return ret;
}
static const char *ssl_last_error(void)
{
unsigned long err;
const char *data;
int flags;
err = ERR_get_error_line_data(NULL, NULL, &data, &flags);
while (err != 0 && ERR_peek_error() != 0) {
i_error("SSL: Stacked error: %s",
ssl_err2str(err, data, flags));
err = ERR_get_error();
}
if (err == 0) {
if (errno != 0)
return strerror(errno);
return "Unknown error";
}
return ssl_err2str(err, data, flags);
}
static void ssl_handle_error(struct ssl_proxy *proxy, int ret,
const char *func_name)
{
const char *errstr = NULL;
int err;
proxy->refcount++;
i_free_and_null(proxy->last_error);
err = SSL_get_error(proxy->ssl, ret);
switch (err) {
case SSL_ERROR_WANT_READ:
ssl_set_io(proxy, SSL_ADD_INPUT);
break;
case SSL_ERROR_WANT_WRITE:
ssl_set_io(proxy, SSL_ADD_OUTPUT);
break;
case SSL_ERROR_SYSCALL:
/* eat up the error queue */
if (ERR_peek_error() != 0)
errstr = ssl_last_error();
else if (ret != 0)
errstr = strerror(errno);
else {
/* EOF. */
errstr = "Disconnected";
break;
}
errstr = t_strdup_printf("%s syscall failed: %s",
func_name, errstr);
break;
case SSL_ERROR_ZERO_RETURN:
/* clean connection closing */
ssl_proxy_destroy(proxy);
break;
case SSL_ERROR_SSL:
if (ERR_GET_REASON(ERR_peek_error()) == ERR_R_MALLOC_FAILURE) {
i_error("OpenSSL malloc() failed. "
"You may need to increase login_process_size");
}
errstr = t_strdup_printf("%s failed: %s",
func_name, ssl_last_error());
break;
default:
errstr = t_strdup_printf("%s failed: unknown failure %d (%s)",
func_name, err, ssl_last_error());
break;
}
if (errstr != NULL) {
proxy->last_error = i_strdup(errstr);
ssl_proxy_destroy(proxy);
}
ssl_proxy_unref(proxy);
}
static void ssl_handshake(struct ssl_proxy *proxy)
{
int ret;
if (proxy->client_proxy) {
ret = SSL_connect(proxy->ssl);
if (ret != 1) {
ssl_handle_error(proxy, ret, "SSL_connect()");
return;
}
} else {
ret = SSL_accept(proxy->ssl);
if (ret != 1) {
ssl_handle_error(proxy, ret, "SSL_accept()");
return;
}
}
i_free_and_null(proxy->last_error);
proxy->handshaked = TRUE;
ssl_set_io(proxy, SSL_ADD_INPUT);
plain_block_input(proxy, FALSE);
if (proxy->handshake_callback != NULL) {
if (proxy->handshake_callback(proxy->handshake_context) < 0)
ssl_proxy_destroy(proxy);
}
}
static void ssl_read(struct ssl_proxy *proxy)
{
int ret;
while (proxy->plainout_size < sizeof(proxy->plainout_buf) &&
!proxy->destroyed) {
ret = SSL_read(proxy->ssl,
proxy->plainout_buf + proxy->plainout_size,
sizeof(proxy->plainout_buf) -
proxy->plainout_size);
if (ret <= 0) {
ssl_handle_error(proxy, ret, "SSL_read()");
break;
} else {
i_free_and_null(proxy->last_error);
proxy->plainout_size += ret;
plain_write(proxy);
}
}
}
static void ssl_write(struct ssl_proxy *proxy)
{
int ret;
ret = SSL_write(proxy->ssl, proxy->sslout_buf, proxy->sslout_size);
if (ret <= 0)
ssl_handle_error(proxy, ret, "SSL_write()");
else {
i_free_and_null(proxy->last_error);
proxy->sslout_size -= ret;
memmove(proxy->sslout_buf, proxy->sslout_buf + ret,
proxy->sslout_size);
ssl_set_io(proxy, proxy->sslout_size > 0 ?
SSL_ADD_OUTPUT : SSL_REMOVE_OUTPUT);
plain_block_input(proxy, FALSE);
}
}
static void ssl_step(struct ssl_proxy *proxy)
{
proxy->refcount++;
if (!proxy->handshaked)
ssl_handshake(proxy);
if (proxy->handshaked) {
if (proxy->plainout_size == sizeof(proxy->plainout_buf))
ssl_set_io(proxy, SSL_REMOVE_INPUT);
else
ssl_read(proxy);
if (proxy->sslout_size == 0)
ssl_set_io(proxy, SSL_REMOVE_OUTPUT);
else {
net_set_cork(proxy->fd_ssl, TRUE);
ssl_write(proxy);
net_set_cork(proxy->fd_ssl, FALSE);
}
}
ssl_proxy_unref(proxy);
}
static int
ssl_proxy_alloc_common(SSL_CTX *ssl_ctx, int fd, const struct ip_addr *ip,
pool_t set_pool, const struct login_settings *login_set,
const struct master_service_ssl_settings *ssl_set,
struct ssl_proxy **proxy_r)
{
struct ssl_proxy *proxy;
SSL *ssl;
int sfd[2];
i_assert(fd != -1);
*proxy_r = NULL;
if (!ssl_initialized) {
i_error("SSL support not enabled in configuration");
return -1;
}
ssl_refresh_parameters(&ssl_params);
ssl = SSL_new(ssl_ctx);
if (ssl == NULL) {
i_error("SSL_new() failed: %s", ssl_last_error());
return -1;
}
if (SSL_set_fd(ssl, fd) != 1) {
i_error("SSL_set_fd() failed: %s", ssl_last_error());
SSL_free(ssl);
return -1;
}
if (socketpair(AF_UNIX, SOCK_STREAM, 0, sfd) < 0) {
i_error("socketpair() failed: %m");
SSL_free(ssl);
return -1;
}
net_set_nonblock(sfd[0], TRUE);
net_set_nonblock(sfd[1], TRUE);
net_set_nonblock(fd, TRUE);
proxy = i_new(struct ssl_proxy, 1);
proxy->refcount = 2;
proxy->ssl = ssl;
proxy->login_set = login_set;
proxy->ssl_set = ssl_set;
proxy->fd_ssl = fd;
proxy->fd_plain = sfd[0];
proxy->ip = *ip;
proxy->set_pool = set_pool;
pool_ref(set_pool);
SSL_set_ex_data(ssl, extdata_index, proxy);
ssl_proxy_count++;
DLLIST_PREPEND(&ssl_proxies, proxy);
*proxy_r = proxy;
return sfd[1];
}
static struct ssl_server_context *
ssl_server_context_get(const struct login_settings *login_set,
const struct master_service_ssl_settings *set)
{
struct ssl_server_context *ctx, lookup_ctx;
memset(&lookup_ctx, 0, sizeof(lookup_ctx));
lookup_ctx.cert = set->ssl_cert;
lookup_ctx.key = set->ssl_key;
lookup_ctx.ca = set->ssl_ca;
lookup_ctx.cipher_list = set->ssl_cipher_list;
lookup_ctx.protocols = set->ssl_protocols;
lookup_ctx.verify_client_cert = set->ssl_verify_client_cert ||
login_set->auth_ssl_require_client_cert ||
login_set->auth_ssl_username_from_cert;
ctx = hash_table_lookup(ssl_servers, &lookup_ctx);
if (ctx == NULL)
ctx = ssl_server_context_init(login_set, set);
return ctx;
}
int ssl_proxy_alloc(int fd, const struct ip_addr *ip, pool_t set_pool,
const struct login_settings *login_set,
const struct master_service_ssl_settings *ssl_set,
struct ssl_proxy **proxy_r)
{
struct ssl_server_context *ctx;
ctx = ssl_server_context_get(login_set, ssl_set);
return ssl_proxy_alloc_common(ctx->ctx, fd, ip,
set_pool, login_set, ssl_set, proxy_r);
}
int ssl_proxy_client_alloc(int fd, struct ip_addr *ip, pool_t set_pool,
const struct login_settings *login_set,
const struct master_service_ssl_settings *ssl_set,
ssl_handshake_callback_t *callback, void *context,
struct ssl_proxy **proxy_r)
{
int ret;
ret = ssl_proxy_alloc_common(ssl_client_ctx, fd, ip,
set_pool, login_set, ssl_set, proxy_r);
if (ret < 0)
return -1;
(*proxy_r)->handshake_callback = callback;
(*proxy_r)->handshake_context = context;
(*proxy_r)->client_proxy = TRUE;
return ret;
}
void ssl_proxy_start(struct ssl_proxy *proxy)
{
ssl_step(proxy);
}
void ssl_proxy_set_client(struct ssl_proxy *proxy, struct client *client)
{
i_assert(proxy->client == NULL);
client_ref(client);
proxy->client = client;
}
bool ssl_proxy_has_valid_client_cert(const struct ssl_proxy *proxy)
{
return proxy->cert_received && !proxy->cert_broken;
}
bool ssl_proxy_has_broken_client_cert(struct ssl_proxy *proxy)
{
return proxy->cert_received && proxy->cert_broken;
}
int ssl_proxy_cert_match_name(struct ssl_proxy *proxy, const char *verify_name)
{
return openssl_cert_match_name(proxy->ssl, verify_name);
}
const char *ssl_proxy_get_peer_name(struct ssl_proxy *proxy)
{
X509 *x509;
char *name;
int len;
if (!ssl_proxy_has_valid_client_cert(proxy))
return NULL;
x509 = SSL_get_peer_certificate(proxy->ssl);
if (x509 == NULL)
return NULL; /* we should have had it.. */
len = X509_NAME_get_text_by_NID(X509_get_subject_name(x509),
ssl_username_nid, NULL, 0);
if (len < 0)
name = "";
else {
name = t_malloc(len + 1);
if (X509_NAME_get_text_by_NID(X509_get_subject_name(x509),
ssl_username_nid, name, len + 1) < 0)
name = "";
else if (strlen(name) != (size_t)len) {
/* NUL characters in name. Someone's trying to fake
being another user? Don't allow it. */
name = "";
}
}
X509_free(x509);
return *name == '\0' ? NULL : name;
}
bool ssl_proxy_is_handshaked(const struct ssl_proxy *proxy)
{
return proxy->handshaked;
}
const char *ssl_proxy_get_last_error(const struct ssl_proxy *proxy)
{
return proxy->last_error;
}
const char *ssl_proxy_get_security_string(struct ssl_proxy *proxy)
{
const SSL_CIPHER *cipher;
int bits, alg_bits;
const char *comp_str;
if (!proxy->handshaked)
return "";
cipher = SSL_get_current_cipher(proxy->ssl);
bits = SSL_CIPHER_get_bits(cipher, &alg_bits);
comp_str = ssl_proxy_get_compression(proxy);
comp_str = comp_str == NULL ? "" : t_strconcat(" ", comp_str, NULL);
return t_strdup_printf("%s with cipher %s (%d/%d bits)%s",
SSL_get_version(proxy->ssl),
SSL_CIPHER_get_name(cipher),
bits, alg_bits, comp_str);
}
const char *ssl_proxy_get_compression(struct ssl_proxy *proxy ATTR_UNUSED)
{
#ifdef HAVE_SSL_COMPRESSION
const COMP_METHOD *comp;
comp = SSL_get_current_compression(proxy->ssl);
return comp == NULL ? NULL : SSL_COMP_get_name(comp);
#else
return NULL;
#endif
}
const char *ssl_proxy_get_cert_error(struct ssl_proxy *proxy)
{
return proxy->cert_error != NULL ? proxy->cert_error :
"(Unknown error)";
}
void ssl_proxy_free(struct ssl_proxy **_proxy)
{
struct ssl_proxy *proxy = *_proxy;
*_proxy = NULL;
ssl_proxy_unref(proxy);
}
static void ssl_proxy_unref(struct ssl_proxy *proxy)
{
if (--proxy->refcount > 0)
return;
i_assert(proxy->refcount == 0);
SSL_free(proxy->ssl);
pool_unref(&proxy->set_pool);
i_free(proxy->last_error);
i_free(proxy);
}
static void ssl_proxy_destroy(struct ssl_proxy *proxy)
{
if (proxy->destroyed)
return;
proxy->destroyed = TRUE;
ssl_proxy_count--;
DLLIST_REMOVE(&ssl_proxies, proxy);
if (proxy->io_ssl_read != NULL)
io_remove(&proxy->io_ssl_read);
if (proxy->io_ssl_write != NULL)
io_remove(&proxy->io_ssl_write);
if (proxy->io_plain_read != NULL)
io_remove(&proxy->io_plain_read);
if (proxy->io_plain_write != NULL)
io_remove(&proxy->io_plain_write);
(void)SSL_shutdown(proxy->ssl);
net_disconnect(proxy->fd_ssl);
net_disconnect(proxy->fd_plain);
if (proxy->client != NULL)
client_unref(&proxy->client);
ssl_proxy_unref(proxy);
}
static RSA *ssl_gen_rsa_key(SSL *ssl ATTR_UNUSED,
int is_export ATTR_UNUSED, int keylength)
{
return RSA_generate_key(keylength, RSA_F4, NULL, NULL);
}
static DH *ssl_tmp_dh_callback(SSL *ssl ATTR_UNUSED,
int is_export, int keylength)
{
/* Well, I'm not exactly sure why the logic in here is this.
It's the same as in Postfix, so it can't be too wrong. */
if (is_export && keylength == 512 && ssl_params.dh_512 != NULL)
return ssl_params.dh_512;
return ssl_params.dh_1024;
}
static void ssl_info_callback(const SSL *ssl, int where, int ret)
{
struct ssl_proxy *proxy;
proxy = SSL_get_ex_data(ssl, extdata_index);
if (!proxy->ssl_set->verbose_ssl)
return;
if ((where & SSL_CB_ALERT) != 0) {
i_warning("SSL alert: where=0x%x, ret=%d: %s %s [%s]",
where, ret, SSL_alert_type_string_long(ret),
SSL_alert_desc_string_long(ret),
net_ip2addr(&proxy->ip));
} else if (ret == 0) {
i_warning("SSL failed: where=0x%x: %s [%s]",
where, SSL_state_string_long(ssl),
net_ip2addr(&proxy->ip));
} else {
i_debug("SSL: where=0x%x, ret=%d: %s [%s]",
where, ret, SSL_state_string_long(ssl),
net_ip2addr(&proxy->ip));
}
}
static int ssl_verify_client_cert(int preverify_ok, X509_STORE_CTX *ctx)
{
SSL *ssl;
struct ssl_proxy *proxy;
char buf[1024];
X509_NAME *subject;
ssl = X509_STORE_CTX_get_ex_data(ctx,
SSL_get_ex_data_X509_STORE_CTX_idx());
proxy = SSL_get_ex_data(ssl, extdata_index);
proxy->cert_received = TRUE;
if (proxy->client_proxy && !proxy->login_set->ssl_require_crl &&
(ctx->error == X509_V_ERR_UNABLE_TO_GET_CRL ||
ctx->error == X509_V_ERR_CRL_HAS_EXPIRED)) {
/* no CRL given with the CA list. don't worry about it. */
preverify_ok = 1;
}
if (!preverify_ok)
proxy->cert_broken = TRUE;
subject = X509_get_subject_name(ctx->current_cert);
(void)X509_NAME_oneline(subject, buf, sizeof(buf));
buf[sizeof(buf)-1] = '\0'; /* just in case.. */
if (proxy->cert_error == NULL) {
proxy->cert_error = p_strdup_printf(proxy->client->pool, "%s: %s",
X509_verify_cert_error_string(ctx->error), buf);
}
if (proxy->ssl_set->verbose_ssl ||
(proxy->login_set->auth_verbose && !preverify_ok)) {
if (preverify_ok)
i_info("Valid certificate: %s", buf);
else {
i_info("Invalid certificate: %s: %s",
X509_verify_cert_error_string(ctx->error), buf);
}
}
/* Return success anyway, because if ssl_require_client_cert=no we
could still allow authentication. */
return 1;
}
static int
pem_password_callback(char *buf, int size, int rwflag ATTR_UNUSED,
void *userdata)
{
if (userdata == NULL) {
i_error("SSL private key file is password protected, "
"but password isn't given");
return 0;
}
if (i_strocpy(buf, userdata, size) < 0)
return 0;
return strlen(buf);
}
unsigned int ssl_proxy_get_count(void)
{
return ssl_proxy_count;
}
static bool is_pem_key(const char *cert)
{
return strstr(cert, "PRIVATE KEY---") != NULL;
}
static void load_ca(X509_STORE *store, const char *ca,
STACK_OF(X509_NAME) **xnames_r)
{
/* mostly just copy&pasted from X509_load_cert_crl_file() */
STACK_OF(X509_INFO) *inf;
X509_INFO *itmp;
X509_NAME *xname;
BIO *bio;
int i;
bio = BIO_new_mem_buf(t_strdup_noconst(ca), strlen(ca));
if (bio == NULL)
i_fatal("BIO_new_mem_buf() failed");
inf = PEM_X509_INFO_read_bio(bio, NULL, NULL, NULL);
if (inf == NULL)
i_fatal("Couldn't parse ssl_ca: %s", ssl_last_error());
BIO_free(bio);
if (xnames_r != NULL) {
*xnames_r = sk_X509_NAME_new_null();
if (*xnames_r == NULL)
i_fatal_status(FATAL_OUTOFMEM, "sk_X509_NAME_new_null() failed");
}
for(i = 0; i < sk_X509_INFO_num(inf); i++) {
itmp = sk_X509_INFO_value(inf, i);
if(itmp->x509) {
X509_STORE_add_cert(store, itmp->x509);
xname = X509_get_subject_name(itmp->x509);
if (xname != NULL && xnames_r != NULL) {
xname = X509_NAME_dup(xname);
if (xname == NULL)
i_fatal_status(FATAL_OUTOFMEM, "X509_NAME_dup() failed");
sk_X509_NAME_push(*xnames_r, xname);
}
}
if(itmp->crl)
X509_STORE_add_crl(store, itmp->crl);
}
sk_X509_INFO_pop_free(inf, X509_INFO_free);
}
static STACK_OF(X509_NAME) *
ssl_proxy_ctx_init(SSL_CTX *ssl_ctx, const struct master_service_ssl_settings *set,
bool load_xnames)
{
X509_STORE *store;
STACK_OF(X509_NAME) *xnames = NULL;
/* enable all SSL workarounds, except empty fragments as it
makes SSL more vulnerable against attacks */
SSL_CTX_set_options(ssl_ctx, SSL_OP_ALL &
~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
#ifdef SSL_MODE_RELEASE_BUFFERS
SSL_CTX_set_mode(ssl_ctx, SSL_MODE_RELEASE_BUFFERS);
#endif
if (*set->ssl_ca != '\0') {
/* set trusted CA certs */
store = SSL_CTX_get_cert_store(ssl_ctx);
load_ca(store, set->ssl_ca, load_xnames ? &xnames : NULL);
}
SSL_CTX_set_info_callback(ssl_ctx, ssl_info_callback);
if (SSL_CTX_need_tmp_RSA(ssl_ctx))
SSL_CTX_set_tmp_rsa_callback(ssl_ctx, ssl_gen_rsa_key);
SSL_CTX_set_tmp_dh_callback(ssl_ctx, ssl_tmp_dh_callback);
return xnames;
}
static void
ssl_proxy_ctx_verify_client(SSL_CTX *ssl_ctx, STACK_OF(X509_NAME) *ca_names)
{
#if OPENSSL_VERSION_NUMBER >= 0x00907000L
X509_STORE *store;
store = SSL_CTX_get_cert_store(ssl_ctx);
X509_STORE_set_flags(store, X509_V_FLAG_CRL_CHECK |
X509_V_FLAG_CRL_CHECK_ALL);
#endif
SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE,
ssl_verify_client_cert);
/* set list of CA names that are sent to client */
SSL_CTX_set_client_CA_list(ssl_ctx, ca_names);
}
static const char *ssl_proxy_get_use_certificate_error(const char *cert)
{
unsigned long err;
err = ERR_peek_error();
if (ERR_GET_LIB(err) != ERR_LIB_PEM ||
ERR_GET_REASON(err) != PEM_R_NO_START_LINE)
return ssl_last_error();
else if (is_pem_key(cert)) {
return "The file contains a private key "
"(you've mixed ssl_cert and ssl_key settings)";
} else if (strchr(cert, '\n') == NULL) {
return t_strdup_printf("There is no valid PEM certificate. "
"(You probably forgot '<' from ssl_cert=<%s)", cert);
} else {
return "There is no valid PEM certificate.";
}
}
static const char *ssl_key_load_error(void)
{
unsigned long err = ERR_peek_error();
if (ERR_GET_LIB(err) == ERR_LIB_X509 &&
ERR_GET_REASON(err) == X509_R_KEY_VALUES_MISMATCH)
return "Key is for a different cert than ssl_cert";
else
return ssl_last_error();
}
static EVP_PKEY * ATTR_NULL(2)
ssl_proxy_load_key(const char *key, const char *password)
{
EVP_PKEY *pkey;
BIO *bio;
char *dup_password;
bio = BIO_new_mem_buf(t_strdup_noconst(key), strlen(key));
if (bio == NULL)
i_fatal("BIO_new_mem_buf() failed");
dup_password = t_strdup_noconst(password);
pkey = PEM_read_bio_PrivateKey(bio, NULL, pem_password_callback,
dup_password);
if (pkey == NULL) {
i_fatal("Couldn't parse private ssl_key: %s",
ssl_key_load_error());
}
BIO_free(bio);
return pkey;
}
static void
ssl_proxy_ctx_use_key(SSL_CTX *ctx,
const struct master_service_ssl_settings *set)
{
EVP_PKEY *pkey;
const char *password;
password = *set->ssl_key_password != '\0' ? set->ssl_key_password :
getenv(MASTER_SSL_KEY_PASSWORD_ENV);
pkey = ssl_proxy_load_key(set->ssl_key, password);
if (SSL_CTX_use_PrivateKey(ctx, pkey) != 1)
i_fatal("Can't load private ssl_key: %s", ssl_key_load_error());
EVP_PKEY_free(pkey);
}
static int
ssl_proxy_ctx_use_certificate_chain(SSL_CTX *ctx, const char *cert)
{
/* mostly just copy&pasted from SSL_CTX_use_certificate_chain_file() */
BIO *in;
X509 *x;
int ret = 0;
in = BIO_new_mem_buf(t_strdup_noconst(cert), strlen(cert));
if (in == NULL)
i_fatal("BIO_new_mem_buf() failed");
x = PEM_read_bio_X509(in, NULL, NULL, NULL);
if (x == NULL)
goto end;
ret = SSL_CTX_use_certificate(ctx, x);
#if 0
/* This is in OpenSSL code, but it seems to cause failures.. */
if (ERR_peek_error() != 0)
ret = 0;
#endif
if (ret != 0) {
/* If we could set up our certificate, now proceed to
* the CA certificates.
*/
X509 *ca;
int r;
unsigned long err;
while ((ca = PEM_read_bio_X509(in,NULL,NULL,NULL)) != NULL) {
r = SSL_CTX_add_extra_chain_cert(ctx, ca);
if (!r) {
X509_free(ca);
ret = 0;
goto end;
}
}
/* When the while loop ends, it's usually just EOF. */
err = ERR_peek_last_error();
if (ERR_GET_LIB(err) == ERR_LIB_PEM && ERR_GET_REASON(err) == PEM_R_NO_START_LINE)
ERR_clear_error();
else
ret = 0; /* some real error */
}
end:
if (x != NULL) X509_free(x);
BIO_free(in);
return ret;
}
#ifdef HAVE_SSL_GET_SERVERNAME
static void ssl_servername_callback(SSL *ssl, int *al ATTR_UNUSED,
void *context ATTR_UNUSED)
{
struct ssl_server_context *ctx;
struct ssl_proxy *proxy;
struct client *client;
const char *host;
void **other_sets;
proxy = SSL_get_ex_data(ssl, extdata_index);
host = SSL_get_servername(ssl, TLSEXT_NAMETYPE_host_name);
client = proxy->client;
if (!client->ssl_servername_settings_read) {
client->ssl_servername_settings_read = TRUE;
client->set = login_settings_read(client->pool,
&client->local_ip,
&client->ip, host,
&client->ssl_set,
&other_sets);
}
ctx = ssl_server_context_get(client->set, client->ssl_set);
SSL_set_SSL_CTX(ssl, ctx->ctx);
}
#endif
static struct ssl_server_context *
ssl_server_context_init(const struct login_settings *login_set,
const struct master_service_ssl_settings *ssl_set)
{
struct ssl_server_context *ctx;
SSL_CTX *ssl_ctx;
pool_t pool;
STACK_OF(X509_NAME) *xnames;
pool = pool_alloconly_create("ssl server context", 4096);
ctx = p_new(pool, struct ssl_server_context, 1);
ctx->pool = pool;
ctx->cert = p_strdup(pool, ssl_set->ssl_cert);
ctx->key = p_strdup(pool, ssl_set->ssl_key);
ctx->ca = p_strdup(pool, ssl_set->ssl_ca);
ctx->cipher_list = p_strdup(pool, ssl_set->ssl_cipher_list);
ctx->protocols = p_strdup(pool, ssl_set->ssl_protocols);
ctx->verify_client_cert = ssl_set->ssl_verify_client_cert ||
login_set->auth_ssl_require_client_cert ||
login_set->auth_ssl_username_from_cert;
ctx->ctx = ssl_ctx = SSL_CTX_new(SSLv23_server_method());
if (ssl_ctx == NULL)
i_fatal("SSL_CTX_new() failed");
xnames = ssl_proxy_ctx_init(ssl_ctx, ssl_set, ctx->verify_client_cert);
if (SSL_CTX_set_cipher_list(ssl_ctx, ctx->cipher_list) != 1) {
i_fatal("Can't set cipher list to '%s': %s",
ctx->cipher_list, ssl_last_error());
}
SSL_CTX_set_options(ssl_ctx, openssl_get_protocol_options(ctx->protocols));
if (ssl_proxy_ctx_use_certificate_chain(ctx->ctx, ctx->cert) != 1) {
i_fatal("Can't load ssl_cert: %s",
ssl_proxy_get_use_certificate_error(ctx->cert));
}
#ifdef HAVE_SSL_GET_SERVERNAME
if (SSL_CTX_set_tlsext_servername_callback(ctx->ctx,
ssl_servername_callback) != 1) {
if (ssl_set->verbose_ssl)
i_debug("OpenSSL library doesn't support SNI");
}
#endif
ssl_proxy_ctx_use_key(ctx->ctx, ssl_set);
SSL_CTX_set_info_callback(ctx->ctx, ssl_info_callback);
if (ctx->verify_client_cert)
ssl_proxy_ctx_verify_client(ctx->ctx, xnames);
hash_table_insert(ssl_servers, ctx, ctx);
return ctx;
}
static void ssl_server_context_deinit(struct ssl_server_context **_ctx)
{
struct ssl_server_context *ctx = *_ctx;
SSL_CTX_free(ctx->ctx);
pool_unref(&ctx->pool);
}
static void
ssl_proxy_client_ctx_set_client_cert(SSL_CTX *ctx,
const struct login_settings *set)
{
EVP_PKEY *pkey;
if (*set->ssl_client_cert == '\0')
return;
if (ssl_proxy_ctx_use_certificate_chain(ctx, set->ssl_client_cert) != 1) {
i_fatal("Can't load ssl_client_cert: %s",
ssl_proxy_get_use_certificate_error(set->ssl_client_cert));
}
pkey = ssl_proxy_load_key(set->ssl_client_key, NULL);
if (SSL_CTX_use_PrivateKey(ctx, pkey) != 1) {
i_fatal("Can't load private ssl_client_key: %s",
ssl_key_load_error());
}
EVP_PKEY_free(pkey);
}
static void
ssl_proxy_init_client(const struct login_settings *login_set,
const struct master_service_ssl_settings *ssl_set)
{
STACK_OF(X509_NAME) *xnames;
if ((ssl_client_ctx = SSL_CTX_new(SSLv23_client_method())) == NULL)
i_fatal("SSL_CTX_new() failed");
xnames = ssl_proxy_ctx_init(ssl_client_ctx, ssl_set, TRUE);
ssl_proxy_ctx_verify_client(ssl_client_ctx, xnames);
ssl_proxy_client_ctx_set_client_cert(ssl_client_ctx, login_set);
}
void ssl_proxy_init(void)
{
const struct login_settings *login_set = global_login_settings;
const struct master_service_ssl_settings *ssl_set = global_ssl_settings;
static char dovecot[] = "dovecot";
unsigned char buf;
if (strcmp(ssl_set->ssl, "no") == 0)
return;
SSL_library_init();
SSL_load_error_strings();
OpenSSL_add_all_algorithms();
if (*ssl_set->ssl_crypto_device != '\0') {
ENGINE_load_builtin_engines();
ssl_engine = ENGINE_by_id(ssl_set->ssl_crypto_device);
if (ssl_engine == NULL) {
i_fatal("Unknown ssl_crypto_device: %s",
ssl_set->ssl_crypto_device);
}
ENGINE_init(ssl_engine);
ENGINE_set_default_RSA(ssl_engine);
ENGINE_set_default_DSA(ssl_engine);
ENGINE_set_default_ciphers(ssl_engine);
}
extdata_index = SSL_get_ex_new_index(0, dovecot, NULL, NULL, NULL);
hash_table_create(&ssl_servers, default_pool, 0,
ssl_server_context_hash, ssl_server_context_cmp);
(void)ssl_server_context_init(login_set, ssl_set);
ssl_proxy_init_client(login_set, ssl_set);
ssl_username_nid = OBJ_txt2nid(ssl_set->ssl_cert_username_field);
if (ssl_username_nid == NID_undef) {
i_fatal("Invalid ssl_cert_username_field: %s",
ssl_set->ssl_cert_username_field);
}
/* PRNG initialization might want to use /dev/urandom, make sure it
does it before chrooting. We might not have enough entropy at
the first try, so this function may fail. It's still been
initialized though. */
(void)RAND_bytes(&buf, 1);
memset(&ssl_params, 0, sizeof(ssl_params));
ssl_params.path = SSL_PARAMETERS_PATH;
ssl_proxy_count = 0;
ssl_proxies = NULL;
ssl_initialized = TRUE;
}
void ssl_proxy_deinit(void)
{
struct hash_iterate_context *iter;
struct ssl_server_context *ctx;
if (!ssl_initialized)
return;
while (ssl_proxies != NULL)
ssl_proxy_destroy(ssl_proxies);
iter = hash_table_iterate_init(ssl_servers);
while (hash_table_iterate(iter, ssl_servers, &ctx, &ctx))
ssl_server_context_deinit(&ctx);
hash_table_iterate_deinit(&iter);
hash_table_destroy(&ssl_servers);
ssl_free_parameters(&ssl_params);
SSL_CTX_free(ssl_client_ctx);
if (ssl_engine != NULL) {
ENGINE_finish(ssl_engine);
ENGINE_cleanup();
}
EVP_cleanup();
ERR_free_strings();
}
#endif