X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=src%2Fapps%2Fclient.cpp;h=bfb7fb1688148e104ccfaaea1cb69fd9472f155f;hb=bcc67d8ce710641222a9ec2d726fdbda42a81e45;hp=d7cda514b5bcaa8830c75156bf284b77089f96d0;hpb=d19fbcd86a265cb99dd8597430e8159e9403c743;p=cassiopeia.git diff --git a/src/apps/client.cpp b/src/apps/client.cpp index d7cda51..bfb7fb1 100644 --- a/src/apps/client.cpp +++ b/src/apps/client.cpp @@ -7,7 +7,7 @@ #include #include "db/database.h" -#include "db/mysql.h" +#include "db/psql.h" #include "crypto/simpleOpensslSigner.h" #include "crypto/remoteSigner.h" #include "crypto/sslUtil.h" @@ -45,18 +45,22 @@ void checkCRLs( std::shared_ptr sign ) { try { std::vector serials; std::pair, std::string> rev = sign->revoke( x.second, serials ); - } catch( const char* c ) { - logger::error( "Exception: ", c ); + } catch( const std::exception &e ) { + logger::error( "Exception: ", e.what() ); } } } int main( int argc, const char* argv[] ) { bool once = false; + bool resetOnly = false; if( argc == 2 && std::string( "--once" ) == argv[1] ) { once = true; } + if( argc == 2 && std::string( "--reset" ) == argv[1] ) { + resetOnly = true; + } std::string path; @@ -75,139 +79,149 @@ int main( int argc, const char* argv[] ) { logger::fatal( "Error: no serial device is given!" ); return -1; } - - std::shared_ptr jp( new MySQLJobProvider( sqlHost, sqlUser, sqlPass, sqlDB ) ); + std::shared_ptr jp = std::make_shared( sqlHost, sqlUser, sqlPass, sqlDB ); std::shared_ptr b = openSerial( serialPath ); std::shared_ptr slip1( BIO_new( toBio() ), BIO_free ); - static_cast( slip1->ptr )->setTarget( std::shared_ptr( new OpensslBIOWrapper( b ) ) ); - std::shared_ptr sign( new RemoteSigner( slip1, generateSSLContext( false ) ) ); + static_cast( slip1->ptr )->setTarget( std::make_shared( b ), false ); + auto sign = std::make_shared( slip1, generateSSLContext( false ) ); // std::shared_ptr sign( new SimpleOpensslSigner() ); + if( resetOnly ) { + std::cout << "Doing BIO reset" << std::endl; + int result = BIO_reset( slip1.get() ); + std::cout << "Did BIO reset, result " << result << ", exiting." << std::endl; + return result; + } + time_t lastCRLCheck = 0; while( true ) { - time_t current; - time( ¤t ); - - if( lastCRLCheck + 30 * 60 < current ) { - // todo set good log TODO FIXME - sign->setLog( std::shared_ptr( - &std::cout, - []( std::ostream * o ) { - ( void ) o; - } ) ); - checkCRLs( sign ); - lastCRLCheck = current; - } + try { + time_t current; + time( ¤t ); + + if( lastCRLCheck + 30 * 60 < current ) { + // todo set good log TODO FIXME + sign->setLog( std::shared_ptr( + &std::cout, + []( std::ostream* o ) { + ( void ) o; + } ) ); + checkCRLs( sign ); + lastCRLCheck = current; + } - std::shared_ptr job = jp->fetchJob(); + std::shared_ptr job; + try { + job = jp->fetchJob(); + } catch ( std::exception &e ){ + logger::errorf ( "Exception while fetchJob: %s", e.what() ); + } + if( !job ) { + logger::note( "Nothing to work on." ); + sleep( 5 ); + continue; + } - if( !job ) { - logger::debug( "Nothing to work on." ); - sleep( 5 ); - continue; - } + std::shared_ptr logPtr = openLogfile( std::string( "logs/" ) + job->id + std::string( "_" ) + job->warning + std::string( ".log" ) ); - std::shared_ptr logPtr = openLogfile( std::string( "logs/" ) + job->id + std::string( "_" ) + job->warning + std::string( ".log" ) ); + logger::logger_set log_set({logger::log_target(*logPtr, logger::level::debug)}, logger::auto_register::on); - std::ofstream& log = *( logPtr.get() ); + logger::note( "TASK ID: ", job->id ); + logger::note( "TRY: ", job->warning ); + logger::note( "TARGET: ", job->target ); + logger::note( "TASK: ", job->task ); - sign->setLog( logPtr ); - logger::note( "TASK ID: ", job->id ); - logger::note( "TRY: ", job->warning ); - logger::note( "TARGET: ", job->target ); - logger::note( "TASK: ", job->task ); + if( job->task == "sign" ) { + try { + std::shared_ptr cert = jp->fetchTBSCert( job ); + cert->wishFrom = job->from; + cert->wishTo = job->to; + logger::note( "INFO: Message Digest: ", cert->md ); + logger::note( "INFO: Profile ID: ", cert->profile ); - if( job->task == "sign" ) { - try { - std::shared_ptr cert = jp->fetchTBSCert( job ); - cert->wishFrom = job->from; - cert->wishTo = job->to; - logger::note( "INFO: Message Digest: ", cert->md ); - logger::note( "INFO: Profile ID: ", cert->profile ); - - for( auto& SAN : cert->SANs ) { - logger::notef( "INFO: SAN %s: %s", SAN->type, SAN->content ); - } + for( auto& SAN : cert->SANs ) { + logger::notef( "INFO: SAN %s: %s", SAN->type, SAN->content ); + } - for( auto& AVA : cert->AVAs ) { - logger::notef( "INFO: AVA %s: %s", AVA->name, AVA->value ); - } + for( auto& AVA : cert->AVAs ) { + logger::notef( "INFO: AVA %s: %s", AVA->name, AVA->value ); + } - if( !cert ) { - logger::error( "Unable to load CSR" ); - jp->failJob( job ); - continue; - } + if( !cert ) { + logger::error( "Unable to load CSR" ); + jp->failJob( job ); + continue; + } - logger::notef( "FINE: Found the CSR at '%s'", cert->csr ); - cert->csr_content = readFile( keyDir + "/../" + cert->csr ); - logger::note( "FINE: CSR content:\n", cert->csr_content ); + logger::notef( "FINE: Found the CSR at '%s'", cert->csr ); + cert->csr_content = readFile( keyDir + "/../" + cert->csr ); + logger::note( "FINE: CSR content:\n", cert->csr_content ); - std::shared_ptr res = sign->sign( cert ); + std::shared_ptr res = sign->sign( cert ); - if( !res ) { - logger::error( "ERROR: The signer failed. No certificate was returned." ); - jp->failJob( job ); - continue; - } + if( !res ) { + logger::error( "ERROR: The signer failed. No certificate was returned." ); + jp->failJob( job ); + continue; + } - logger::note( "FINE: CERTIFICATE LOG:\n", res->log ); - logger::note( "FINE: CERTIFICATE:\n", res->certificate ); - std::string fn = writeBackFile( job->target.c_str(), res->certificate, keyDir ); + logger::note( "FINE: CERTIFICATE LOG:\n", res->log ); + logger::note( "FINE: CERTIFICATE:\n", res->certificate ); + std::string fn = writeBackFile( job->target.c_str(), res->certificate, keyDir ); + + if( fn.empty() ) { + logger::error( "ERROR: Writeback of the certificate failed." ); + jp->failJob( job ); + continue; + } + + res->crt_name = fn; + jp->writeBack( job, res ); //! \FIXME: Check return value + logger::note( "FINE: signing done." ); + + if( DAEMON ) { + jp->finishJob( job ); + } - if( fn.empty() ) { - logger::error( "ERROR: Writeback of the certificate failed." ); - jp->failJob( job ); continue; + } catch( std::exception& c ) { + logger::error( "ERROR: ", c.what() ); } - res->crt_name = fn; - jp->writeBack( job, res ); //! \FIXME: Check return value - logger::note( "FINE: signing done." ); - - if( DAEMON ) { + try { + jp->failJob( job ); + } catch( std::exception& c ) { + logger::error( "ERROR: ", c.what() ); + } + } else if( job->task == "revoke" ) { + try { + logger::note( "revoking" ); + auto data = jp->getRevocationInfo( job ); + std::vector serials; + serials.push_back( data.first ); + logger::note( "revoking" ); + std::pair, std::string> rev = sign->revoke( CAs.at( data.second ), serials ); + std::string date = rev.second; + const unsigned char* pos = ( const unsigned char* ) date.data(); + std::shared_ptr time( d2i_ASN1_TIME( NULL, &pos, date.size() ), ASN1_TIME_free ); + + jp->writeBackRevocation( job, timeToString( time ) ); jp->finishJob( job ); + } catch( const std::exception& c ) { + logger::error( "Exception: ", c.what() ); } - - continue; - } catch( const char* c ) { - logger::error( "ERROR: ", c ); - } catch( std::string& c ) { - logger::error( "ERROR: ", c ); - } - - try { + } else { + logger::errorf( "Unknown job type (\"%s\")", job->task ); jp->failJob( job ); - } catch( const char* c ) { - logger::error( "ERROR: ", c ); - } catch( std::string& c ) { - logger::error( "ERROR: ", c ); } - } else if( job->task == "revoke" ) { - try { - auto data = jp->getRevocationInfo( job ); - std::vector serials; - serials.push_back( data.first ); - std::pair, std::string> rev = sign->revoke( CAs.at( data.second ), serials ); - std::string date = rev.second; - const unsigned char* pos = ( const unsigned char* ) date.data(); - std::shared_ptr time( d2i_ASN1_TIME( NULL, &pos, date.size() ), ASN1_TIME_free ); - - jp->writeBackRevocation( job, timeToString( time ) ); - jp->finishJob( job ); - } catch( const char* c ) { - logger::error( "Exception: ", c ); - } catch( const std::string& c ) { - logger::error( "Exception: ", c ); + + if( !DAEMON || once ) { + return 0; } - } else { - logger::errorf( "Unknown job type (\"%s\")", job->task ); - jp->failJob( job ); + } catch ( std::exception &e ){ + logger::errorf ( "std::exception in mainloop: %s", e.what() ); } - if( !DAEMON || once ) { - return 0; - } } }