]> git.ipfire.org Git - thirdparty/squid.git/blame - src/http.cc
Summary: Fixup remaining MSVC issues.
[thirdparty/squid.git] / src / http.cc
CommitLineData
da2b3a17 1
30a4f2a8 2/*
00d77d6b 3 * $Id: http.cc,v 1.425 2003/08/04 22:14:42 robertc Exp $
30a4f2a8 4 *
5 * DEBUG: section 11 Hypertext Transfer Protocol (HTTP)
6 * AUTHOR: Harvest Derived
7 *
2b6662ba 8 * SQUID Web Proxy Cache http://www.squid-cache.org/
e25c139f 9 * ----------------------------------------------------------
30a4f2a8 10 *
2b6662ba 11 * Squid is the result of efforts by numerous individuals from
12 * the Internet community; see the CONTRIBUTORS file for full
13 * details. Many organizations have provided support for Squid's
14 * development; see the SPONSORS file for full details. Squid is
15 * Copyrighted (C) 2001 by the Regents of the University of
16 * California; see the COPYRIGHT file for full details. Squid
17 * incorporates software developed and/or copyrighted by other
18 * sources; see the CREDITS file for full details.
30a4f2a8 19 *
20 * This program is free software; you can redistribute it and/or modify
21 * it under the terms of the GNU General Public License as published by
22 * the Free Software Foundation; either version 2 of the License, or
23 * (at your option) any later version.
24 *
25 * This program is distributed in the hope that it will be useful,
26 * but WITHOUT ANY WARRANTY; without even the implied warranty of
27 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
28 * GNU General Public License for more details.
29 *
30 * You should have received a copy of the GNU General Public License
31 * along with this program; if not, write to the Free Software
cbdec147 32 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
e25c139f 33 *
30a4f2a8 34 */
019dd986 35
4a83b852 36/*
37 * Anonymizing patch by lutz@as-node.jena.thur.de
de3bdb4c 38 * have a look into http-anon.c to get more informations.
4a83b852 39 */
40
44a47c6e 41#include "squid.h"
e6ccf245 42#include "http.h"
43#include "authenticate.h"
44#include "Store.h"
528b2c61 45#include "HttpReply.h"
46#include "HttpRequest.h"
47#include "MemObject.h"
48#include "HttpHdrContRange.h"
4fb35c3c 49#include "ACLChecklist.h"
b67e2c8c 50#if DELAY_POOLS
51#include "DelayPools.h"
52#endif
e6ccf245 53
54CBDATA_TYPE(HttpStateData);
55
090089c4 56
6bf8443a 57static const char *const crlf = "\r\n";
4db43fab 58
c3d63b2a 59static CWCB httpSendRequestEntity;
54220df8 60
c4b7a5a9 61static IOCB httpReadReply;
b6a2f15e 62static void httpSendRequest(HttpStateData *);
9e4ad609 63static PF httpStateFree;
64static PF httpTimeout;
f5b8bbc4 65static void httpCacheNegatively(StoreEntry *);
66static void httpMakePrivate(StoreEntry *);
67static void httpMakePublic(StoreEntry *);
f9cece6e 68static void httpMaybeRemovePublic(StoreEntry *, http_status);
528b2c61 69static void copyOneHeaderFromClientsideRequestToUpstreamRequest(const HttpHeaderEntry *e, String strConnection, request_t * request, request_t * orig_request,
62e76326 70 HttpHeader * hdr_out, int we_do_ranges, http_state_flags);
528b2c61 71static int decideIfWeDoRanges (request_t * orig_request);
72
b8d8561b 73
b177367b 74static void
59715b38 75httpStateFree(int fd, void *data)
f5558c95 76{
e6ccf245 77 HttpStateData *httpState = static_cast<HttpStateData *>(data);
62e76326 78
0d4d4170 79 if (httpState == NULL)
62e76326 80 return;
81
f88211e8 82 storeUnlockObject(httpState->entry);
62e76326 83
0d4d4170 84 if (httpState->reply_hdr) {
62e76326 85 memFree(httpState->reply_hdr, MEM_8K_BUF);
86 httpState->reply_hdr = NULL;
0d4d4170 87 }
62e76326 88
30a4f2a8 89 requestUnlink(httpState->request);
20cc1450 90 requestUnlink(httpState->orig_request);
7dd44885 91 httpState->request = NULL;
92 httpState->orig_request = NULL;
93 cbdataFree(httpState);
f5558c95 94}
95
b8d8561b 96int
75e88d56 97httpCachable(method_t method)
090089c4 98{
090089c4 99 /* GET and HEAD are cachable. Others are not. */
62e76326 100
6eb42cae 101 if (method != METHOD_GET && method != METHOD_HEAD)
62e76326 102 return 0;
103
090089c4 104 /* else cachable */
105 return 1;
106}
107
b8d8561b 108static void
5c5783a2 109httpTimeout(int fd, void *data)
090089c4 110{
e6ccf245 111 HttpStateData *httpState = static_cast<HttpStateData *>(data);
593c9a75 112 StoreEntry *entry = httpState->entry;
9fb13bb6 113 debug(11, 4) ("httpTimeout: FD %d: '%s'\n", fd, storeUrl(entry));
62e76326 114
12158bdc 115 if (entry->store_status == STORE_PENDING) {
62e76326 116 if (entry->isEmpty()) {
117 fwdFail(httpState->fwd,
118 errorCon(ERR_READ_TIMEOUT, HTTP_GATEWAY_TIMEOUT));
119 }
9b312a19 120 }
62e76326 121
0d4d4170 122 comm_close(fd);
090089c4 123}
124
30a4f2a8 125/* This object can be cached for a long time */
b8d8561b 126static void
127httpMakePublic(StoreEntry * entry)
30a4f2a8 128{
d46a87a8 129 if (EBIT_TEST(entry->flags, ENTRY_CACHABLE))
62e76326 130 storeSetPublicKey(entry);
30a4f2a8 131}
132
133/* This object should never be cached at all */
b8d8561b 134static void
135httpMakePrivate(StoreEntry * entry)
30a4f2a8 136{
30a4f2a8 137 storeExpireNow(entry);
30a4f2a8 138 storeReleaseRequest(entry); /* delete object when not used */
f3e570e9 139 /* storeReleaseRequest clears ENTRY_CACHABLE flag */
30a4f2a8 140}
141
142/* This object may be negatively cached */
b8d8561b 143static void
144httpCacheNegatively(StoreEntry * entry)
30a4f2a8 145{
79b5cc5f 146 storeNegativeCache(entry);
62e76326 147
d46a87a8 148 if (EBIT_TEST(entry->flags, ENTRY_CACHABLE))
62e76326 149 storeSetPublicKey(entry);
30a4f2a8 150}
151
f9cece6e 152static void
153httpMaybeRemovePublic(StoreEntry * e, http_status status)
154{
62e76326 155
156 int remove
157 = 0;
158
7e3ce7b9 159 int forbidden = 0;
62e76326 160
f9cece6e 161 StoreEntry *pe;
62e76326 162
d46a87a8 163 if (!EBIT_TEST(e->flags, KEY_PRIVATE))
62e76326 164 return;
165
f9cece6e 166 switch (status) {
62e76326 167
f9cece6e 168 case HTTP_OK:
62e76326 169
f9cece6e 170 case HTTP_NON_AUTHORITATIVE_INFORMATION:
62e76326 171
f9cece6e 172 case HTTP_MULTIPLE_CHOICES:
62e76326 173
f9cece6e 174 case HTTP_MOVED_PERMANENTLY:
62e76326 175
f9cece6e 176 case HTTP_MOVED_TEMPORARILY:
62e76326 177
f9cece6e 178 case HTTP_GONE:
62e76326 179
7e3ce7b9 180 case HTTP_NOT_FOUND:
62e76326 181
182 remove
183 = 1;
184
185 break;
186
7e3ce7b9 187 case HTTP_FORBIDDEN:
62e76326 188
7e3ce7b9 189 case HTTP_METHOD_NOT_ALLOWED:
62e76326 190 forbidden = 1;
191
192 break;
193
f9cece6e 194#if WORK_IN_PROGRESS
62e76326 195
c8fd0193 196 case HTTP_UNAUTHORIZED:
62e76326 197 forbidden = 1;
198
199 break;
200
f9cece6e 201#endif
62e76326 202
f9cece6e 203 default:
7e3ce7b9 204#if QUESTIONABLE
62e76326 205 /*
206 * Any 2xx response should eject previously cached entities...
207 */
abb929f0 208
62e76326 209 if (status >= 200 && status < 300)
210 remove
211 = 1;
212
7e3ce7b9 213#endif
62e76326 214
215 break;
f9cece6e 216 }
62e76326 217
218 if (!remove
219 && !forbidden)
220 return;
221
f9cece6e 222 assert(e->mem_obj);
62e76326 223
f66a9ef4 224 if (e->mem_obj->request)
62e76326 225 pe = storeGetPublicByRequest(e->mem_obj->request);
f66a9ef4 226 else
62e76326 227 pe = storeGetPublic(e->mem_obj->url, e->mem_obj->method);
228
f66a9ef4 229 if (pe != NULL) {
62e76326 230 assert(e != pe);
231 storeRelease(pe);
0856d155 232 }
62e76326 233
7e3ce7b9 234 /*
235 * Also remove any cached HEAD response in case the object has
236 * changed.
237 */
f66a9ef4 238 if (e->mem_obj->request)
62e76326 239 pe = storeGetPublicByRequestMethod(e->mem_obj->request, METHOD_HEAD);
f66a9ef4 240 else
62e76326 241 pe = storeGetPublic(e->mem_obj->url, METHOD_HEAD);
242
f66a9ef4 243 if (pe != NULL) {
62e76326 244 assert(e != pe);
245 storeRelease(pe);
7e3ce7b9 246 }
62e76326 247
7e3ce7b9 248 if (forbidden)
62e76326 249 return;
250
7e3ce7b9 251 switch (e->mem_obj->method) {
62e76326 252
7e3ce7b9 253 case METHOD_PUT:
62e76326 254
7e3ce7b9 255 case METHOD_DELETE:
62e76326 256
7e3ce7b9 257 case METHOD_PROPPATCH:
62e76326 258
7e3ce7b9 259 case METHOD_MKCOL:
62e76326 260
7e3ce7b9 261 case METHOD_MOVE:
62e76326 262
42b51993 263 case METHOD_BMOVE:
62e76326 264
42b51993 265 case METHOD_BDELETE:
62e76326 266 /*
267 * Remove any cached GET object if it is beleived that the
268 * object may have changed as a result of other methods
269 */
270
271 if (e->mem_obj->request)
272 pe = storeGetPublicByRequestMethod(e->mem_obj->request, METHOD_GET);
273 else
274 pe = storeGetPublic(e->mem_obj->url, METHOD_GET);
275
276 if (pe != NULL) {
277 assert(e != pe);
278 storeRelease(pe);
279 }
280
281 break;
282
c8be6d7b 283 default:
62e76326 284 /* Keep GCC happy. The methods above are all mutating HTTP methods
285 */
286 break;
0856d155 287 }
f9cece6e 288}
289
43ae1d95 290void
291HttpStateData::processSurrogateControl(HttpReply *reply)
292{
293#if ESI
294
295 if (request->flags.accelerated && reply->surrogate_control) {
296 HttpHdrScTarget *sctusable =
297 httpHdrScGetMergedTarget(reply->surrogate_control,
298 Config.Accel.surrogate_id);
299
300 if (sctusable) {
301 if (EBIT_TEST(sctusable->mask, SC_NO_STORE) ||
302 (Config.onoff.surrogate_is_remote
303 && EBIT_TEST(sctusable->mask, SC_NO_STORE_REMOTE))) {
304 surrogateNoStore = true;
305 httpMakePrivate(entry);
306 }
307
308 /* The HttpHeader logic cannot tell if the header it's parsing is a reply to an
309 * accelerated request or not...
310 * Still, this is an abtraction breach. - RC
311 */
312 if (sctusable->max_age != -1) {
313 if (sctusable->max_age < sctusable->max_stale)
314 reply->expires = reply->date + sctusable->max_age;
315 else
316 reply->expires = reply->date + sctusable->max_stale;
317
318 /* And update the timestamps */
319 storeTimestampsSet(entry);
320 }
321
322 /* We ignore cache-control directives as per the Surrogate specification */
323 ignoreCacheControl = true;
324
325 httpHdrScTargetDestroy(sctusable);
326 }
327 }
328
329#endif
330}
331
528b2c61 332int
333cacheControlAllowsCaching(HttpHdrCc *cc)
334{
335 if (cc) {
62e76326 336 const int cc_mask = cc->mask;
337
338 if (EBIT_TEST(cc_mask, CC_PRIVATE))
339 return 0;
340
341 if (EBIT_TEST(cc_mask, CC_NO_CACHE))
342 return 0;
343
344 if (EBIT_TEST(cc_mask, CC_NO_STORE))
345 return 0;
528b2c61 346 }
62e76326 347
528b2c61 348 return 1;
349}
350
924f73bc 351int
352HttpStateData::cacheableReply()
c54e9052 353{
924f73bc 354 HttpReply const *rep = entry->getReply();
528b2c61 355 HttpHeader const *hdr = &rep->header;
d8b249ef 356 const int cc_mask = (rep->cache_control) ? rep->cache_control->mask : 0;
c68e9c6b 357 const char *v;
62e76326 358
924f73bc 359 if (surrogateNoStore)
43ae1d95 360 return 0;
361
528b2c61 362 if (!cacheControlAllowsCaching(rep->cache_control))
62e76326 363 return 0;
364
924f73bc 365 if (!ignoreCacheControl) {
43ae1d95 366 if (EBIT_TEST(cc_mask, CC_PRIVATE))
367 return 0;
368
369 if (EBIT_TEST(cc_mask, CC_NO_CACHE))
370 return 0;
371
372 if (EBIT_TEST(cc_mask, CC_NO_STORE))
373 return 0;
374 }
375
924f73bc 376 if (request->flags.auth) {
62e76326 377 /*
378 * Responses to requests with authorization may be cached
379 * only if a Cache-Control: public reply header is present.
380 * RFC 2068, sec 14.9.4
381 */
382
383 if (!EBIT_TEST(cc_mask, CC_PUBLIC))
384 return 0;
a6dfe2d9 385 }
62e76326 386
c68e9c6b 387 /* Pragma: no-cache in _replies_ is not documented in HTTP,
388 * but servers like "Active Imaging Webcast/2.0" sure do use it */
389 if (httpHeaderHas(hdr, HDR_PRAGMA)) {
62e76326 390 String s = httpHeaderGetList(hdr, HDR_PRAGMA);
391 const int no_cache = strListIsMember(&s, "no-cache", ',');
392 s.clean();
393
394 if (no_cache)
395 return 0;
c68e9c6b 396 }
62e76326 397
c68e9c6b 398 /*
399 * The "multipart/x-mixed-replace" content type is used for
400 * continuous push replies. These are generally dynamic and
401 * probably should not be cachable
402 */
403 if ((v = httpHeaderGetStr(hdr, HDR_CONTENT_TYPE)))
62e76326 404 if (!strncasecmp(v, "multipart/x-mixed-replace", 25))
405 return 0;
406
924f73bc 407 switch (entry->getReply()->sline.status) {
62e76326 408 /* Responses that are cacheable */
409
19a04dac 410 case HTTP_OK:
62e76326 411
19a04dac 412 case HTTP_NON_AUTHORITATIVE_INFORMATION:
62e76326 413
19a04dac 414 case HTTP_MULTIPLE_CHOICES:
62e76326 415
19a04dac 416 case HTTP_MOVED_PERMANENTLY:
62e76326 417
19a04dac 418 case HTTP_GONE:
62e76326 419 /*
420 * Don't cache objects that need to be refreshed on next request,
421 * unless we know how to refresh it.
422 */
423
924f73bc 424 if (!refreshIsCachable(entry))
62e76326 425 return 0;
426
427 /* don't cache objects from peers w/o LMT, Date, or Expires */
428 /* check that is it enough to check headers @?@ */
429 if (rep->date > -1)
430 return 1;
431 else if (rep->last_modified > -1)
432 return 1;
924f73bc 433 else if (!_peer)
62e76326 434 return 1;
435
436 /* @?@ (here and 302): invalid expires header compiles to squid_curtime */
437 else if (rep->expires > -1)
438 return 1;
439 else
440 return 0;
441
442 /* NOTREACHED */
443 break;
444
445 /* Responses that only are cacheable if the server says so */
446
19a04dac 447 case HTTP_MOVED_TEMPORARILY:
62e76326 448 if (rep->expires > -1)
449 return 1;
450 else
451 return 0;
452
453 /* NOTREACHED */
454 break;
455
456 /* Errors can be negatively cached */
457
19a04dac 458 case HTTP_NO_CONTENT:
62e76326 459
19a04dac 460 case HTTP_USE_PROXY:
62e76326 461
19a04dac 462 case HTTP_BAD_REQUEST:
62e76326 463
19a04dac 464 case HTTP_FORBIDDEN:
62e76326 465
19a04dac 466 case HTTP_NOT_FOUND:
62e76326 467
19a04dac 468 case HTTP_METHOD_NOT_ALLOWED:
62e76326 469
19a04dac 470 case HTTP_REQUEST_URI_TOO_LARGE:
62e76326 471
19a04dac 472 case HTTP_INTERNAL_SERVER_ERROR:
62e76326 473
19a04dac 474 case HTTP_NOT_IMPLEMENTED:
62e76326 475
19a04dac 476 case HTTP_BAD_GATEWAY:
62e76326 477
19a04dac 478 case HTTP_SERVICE_UNAVAILABLE:
62e76326 479
19a04dac 480 case HTTP_GATEWAY_TIMEOUT:
62e76326 481 return -1;
482
483 /* NOTREACHED */
484 break;
485
486 /* Some responses can never be cached */
487
0cdcddb9 488 case HTTP_PARTIAL_CONTENT: /* Not yet supported */
62e76326 489
19a04dac 490 case HTTP_SEE_OTHER:
62e76326 491
19a04dac 492 case HTTP_NOT_MODIFIED:
62e76326 493
19a04dac 494 case HTTP_UNAUTHORIZED:
62e76326 495
19a04dac 496 case HTTP_PROXY_AUTHENTICATION_REQUIRED:
62e76326 497
0cdcddb9 498 case HTTP_INVALID_HEADER: /* Squid header parsing error */
62e76326 499 return 0;
500
c54e9052 501 default: /* Unknown status code */
924f73bc 502 debug (11,0)("HttpStateData::cacheableReply: unknown http status code in reply\n");
62e76326 503
504 return 0;
505
506 /* NOTREACHED */
507 break;
c54e9052 508 }
62e76326 509
79d39a72 510 /* NOTREACHED */
c54e9052 511}
090089c4 512
f66a9ef4 513/*
514 * For Vary, store the relevant request headers as
515 * virtual headers in the reply
516 * Returns false if the variance cannot be stored
517 */
518const char *
528b2c61 519httpMakeVaryMark(request_t * request, HttpReply const * reply)
f66a9ef4 520{
f66a9ef4 521 String vary, hdr;
522 const char *pos = NULL;
523 const char *item;
524 const char *value;
525 int ilen;
528b2c61 526 static String vstr;
f66a9ef4 527
528b2c61 528 vstr.clean();
f66a9ef4 529 vary = httpHeaderGetList(&reply->header, HDR_VARY);
62e76326 530
f66a9ef4 531 while (strListGetItem(&vary, ',', &item, &ilen, &pos)) {
62e76326 532 char *name = (char *)xmalloc(ilen + 1);
533 xstrncpy(name, item, ilen + 1);
534 Tolower(name);
535 strListAdd(&vstr, name, ',');
536 hdr = httpHeaderGetByName(&request->header, name);
537 safe_free(name);
538 value = hdr.buf();
539
540 if (value) {
541 value = rfc1738_escape_part(value);
542 vstr.append("=\"", 2);
543 vstr.append(value);
544 vstr.append("\"", 1);
545 }
546
547 hdr.clean();
f66a9ef4 548 }
62e76326 549
528b2c61 550 vary.clean();
f66a9ef4 551#if X_ACCELERATOR_VARY
62e76326 552
f66a9ef4 553 vary = httpHeaderGetList(&reply->header, HDR_X_ACCELERATOR_VARY);
62e76326 554
f66a9ef4 555 while (strListGetItem(&vary, ',', &item, &ilen, &pos)) {
62e76326 556 char *name = (char *)xmalloc(ilen + 1);
557 xstrncpy(name, item, ilen + 1);
558 Tolower(name);
559 strListAdd(&vstr, name, ',');
560 hdr = httpHeaderGetByName(&request->header, name);
561 safe_free(name);
562 value = hdr.buf();
563
564 if (value) {
565 value = rfc1738_escape_part(value);
566 vstr.append("=\"", 2);
567 vstr.append(value);
568 vstr.append("\"", 1);
569 }
570
571 hdr.clean();
f66a9ef4 572 }
62e76326 573
528b2c61 574 vary.clean();
f66a9ef4 575#endif
62e76326 576
528b2c61 577 debug(11, 3) ("httpMakeVaryMark: %s\n", vstr.buf());
578 return vstr.buf();
f66a9ef4 579}
580
cb69b4c7 581/* rewrite this later using new interfaces @?@ */
b8d8561b 582void
e6ccf245 583HttpStateData::processReplyHeader(const char *buf, int size)
f5558c95 584{
585 char *t = NULL;
d3fb4dea 586 int room;
9bc73deb 587 size_t hdr_len;
528b2c61 588 /* Creates a blank header. If this routine is made incremental, this will
589 * not do
590 */
591 HttpReply *reply = httpReplyCreate();
9bc73deb 592 Ctx ctx;
b6cfb65c 593 debug(11, 3) ("httpProcessReplyHeader: key '%s'\n",
62e76326 594 entry->getMD5Text());
595
e6ccf245 596 if (reply_hdr == NULL)
62e76326 597 reply_hdr = (char *)memAllocate(MEM_8K_BUF);
598
e6ccf245 599 assert(reply_hdr_state == 0);
62e76326 600
e6ccf245 601 hdr_len = reply_hdr_size;
62e76326 602
9bc73deb 603 room = 8191 - hdr_len;
62e76326 604
e6ccf245 605 xmemcpy(reply_hdr + hdr_len, buf, room < size ? room : size);
62e76326 606
9bc73deb 607 hdr_len += room < size ? room : size;
62e76326 608
e6ccf245 609 reply_hdr[hdr_len] = '\0';
62e76326 610
e6ccf245 611 reply_hdr_size = hdr_len;
62e76326 612
e6ccf245 613 if (hdr_len > 4 && strncmp(reply_hdr, "HTTP/", 5)) {
62e76326 614 debug(11, 3) ("httpProcessReplyHeader: Non-HTTP-compliant header: '%s'\n", reply_hdr);
615 reply_hdr_state += 2;
616 reply->sline.status = HTTP_INVALID_HEADER;
617 storeEntryReplaceObject (entry, reply);
618
619 if (eof == 1) {
620 fwdComplete(fwd);
621 comm_close(fd);
622 }
623
624 return;
f5558c95 625 }
62e76326 626
e6ccf245 627 t = reply_hdr + hdr_len;
9bc73deb 628 /* headers can be incomplete only if object still arriving */
62e76326 629
e6ccf245 630 if (!eof) {
62e76326 631 size_t k = headersEnd(reply_hdr, 8192);
632
633 if (0 == k) {
634 if (eof == 1) {
635 fwdComplete(fwd);
636 comm_close(fd);
637 }
638
639 return; /* headers not complete */
640 }
641
642 t = reply_hdr + k;
9bc73deb 643 }
62e76326 644
9bc73deb 645 *t = '\0';
e6ccf245 646 reply_hdr_state++;
647 assert(reply_hdr_state == 1);
9bc73deb 648 ctx = ctx_enter(entry->mem_obj->url);
e6ccf245 649 reply_hdr_state++;
9bc73deb 650 debug(11, 9) ("GOT HTTP REPLY HDR:\n---------\n%s\n----------\n",
62e76326 651 reply_hdr);
9bc73deb 652 /* Parse headers into reply structure */
653 /* what happens if we fail to parse here? */
e6ccf245 654 httpReplyParse(reply, reply_hdr, hdr_len);
43ae1d95 655 processSurrogateControl (reply);
528b2c61 656 /* TODO: we need our own reply * in the httpState, as we probably don't want to replace
657 * the storeEntry with interim headers
658 */
659
660 /* TODO: IF the reply is a 1.0 reply, AND it has a Connection: Header
661 * Parse the header and remove all referenced headers
662 */
663
664 storeEntryReplaceObject(entry, reply);
665 /* DO NOT USE reply now */
666 reply = NULL;
667
668 if (entry->getReply()->content_range)
62e76326 669 currentOffset = entry->getReply()->content_range->spec.offset;
670
9bc73deb 671 storeTimestampsSet(entry);
62e76326 672
9bc73deb 673 /* Check if object is cacheable or not based on reply code */
528b2c61 674 debug(11, 3) ("httpProcessReplyHeader: HTTP CODE: %d\n", entry->getReply()->sline.status);
62e76326 675
9bc73deb 676 if (neighbors_do_private_keys)
62e76326 677 httpMaybeRemovePublic(entry, entry->getReply()->sline.status);
e6ccf245 678
924f73bc 679 switch (cacheableReply()) {
62e76326 680
9bc73deb 681 case 1:
62e76326 682
683 if (httpHeaderHas(&entry->getReply()->header, HDR_VARY)
f66a9ef4 684#if X_ACCELERATOR_VARY
62e76326 685 || httpHeaderHas(&entry->getReply()->header, HDR_X_ACCELERATOR_VARY)
f66a9ef4 686#endif
62e76326 687 ) {
688 const char *vary = httpMakeVaryMark(orig_request, entry->getReply());
689
690 if (vary) {
691 entry->mem_obj->vary_headers = xstrdup(vary);
692 /* Kill the old base object if a change in variance is detected */
693 httpMakePublic(entry);
694 } else {
695 httpMakePrivate(entry);
696 }
697 } else {
698 httpMakePublic(entry);
699 }
700
701 break;
702
9bc73deb 703 case 0:
62e76326 704 httpMakePrivate(entry);
705 break;
706
9bc73deb 707 case -1:
62e76326 708 httpCacheNegatively(entry);
709 break;
710
9bc73deb 711 default:
62e76326 712 assert(0);
713 break;
9bc73deb 714 }
62e76326 715
43ae1d95 716 if (!ignoreCacheControl && entry->getReply()->cache_control) {
62e76326 717 if (EBIT_TEST(entry->getReply()->cache_control->mask, CC_PROXY_REVALIDATE))
718 EBIT_SET(entry->flags, ENTRY_REVALIDATE);
719 else if (EBIT_TEST(entry->getReply()->cache_control->mask, CC_MUST_REVALIDATE))
720 EBIT_SET(entry->flags, ENTRY_REVALIDATE);
9bc73deb 721 }
62e76326 722
e6ccf245 723 if (flags.keepalive)
62e76326 724 if (_peer)
725 _peer->stats.n_keepalives_sent++;
726
528b2c61 727 if (entry->getReply()->keep_alive)
62e76326 728 if (_peer)
729 _peer->stats.n_keepalives_recv++;
730
528b2c61 731 if (entry->getReply()->date > -1 && !_peer) {
62e76326 732 int skew = abs(entry->getReply()->date - squid_curtime);
733
734 if (skew > 86400)
735 debug(11, 3) ("%s's clock is skewed by %d seconds!\n",
736 request->host, skew);
f5558c95 737 }
62e76326 738
9bc73deb 739 ctx_exit(ctx);
c3609322 740#if HEADERS_LOG
62e76326 741
528b2c61 742 headersLog(1, 0, request->method, entry->getReply());
c3609322 743#endif
62e76326 744
e6ccf245 745 if (eof == 1) {
62e76326 746 fwdComplete(fwd);
747 comm_close(fd);
e6ccf245 748 }
f5558c95 749}
750
528b2c61 751HttpStateData::ConnectionStatus
752HttpStateData::statusIfComplete() const
603a02fd 753{
528b2c61 754 HttpReply const *reply = entry->getReply();
755 /* If the reply wants to close the connection, it takes precedence */
62e76326 756
528b2c61 757 if (httpHeaderHasConnDir(&reply->header, "close"))
62e76326 758 return COMPLETE_NONPERSISTENT_MSG;
759
528b2c61 760 /* If we didn't send a keep-alive request header, then this
978e455f 761 * can not be a persistent connection.
762 */
528b2c61 763 if (!flags.keepalive)
62e76326 764 return COMPLETE_NONPERSISTENT_MSG;
765
9f5a2895 766 /*
767 * What does the reply have to say about keep-alive?
768 */
b6a2f15e 769 /*
770 * XXX BUG?
771 * If the origin server (HTTP/1.0) does not send a keep-alive
772 * header, but keeps the connection open anyway, what happens?
773 * We'll return here and http.c waits for an EOF before changing
774 * store_status to STORE_OK. Combine this with ENTRY_FWD_HDR_WAIT
775 * and an error status code, and we might have to wait until
776 * the server times out the socket.
777 */
9f5a2895 778 if (!reply->keep_alive)
528b2c61 779 return COMPLETE_NONPERSISTENT_MSG;
62e76326 780
528b2c61 781 return COMPLETE_PERSISTENT_MSG;
782}
783
784HttpStateData::ConnectionStatus
785HttpStateData::persistentConnStatus() const
786{
787 HttpReply const *reply = entry->getReply();
788 int clen;
789 debug(11, 3) ("httpPconnTransferDone: FD %d\n", fd);
790 ConnectionStatus result = statusIfComplete();
51fdcbd5 791 debug(11, 5) ("httpPconnTransferDone: content_length=%d\n",
62e76326 792 reply->content_length);
35282fbf 793 /* If we haven't seen the end of reply headers, we are not done */
62e76326 794
528b2c61 795 if (reply_hdr_state < 2)
62e76326 796 return INCOMPLETE_MSG;
797
528b2c61 798 clen = httpReplyBodySize(request->method, reply);
62e76326 799
35282fbf 800 /* If there is no message body, we can be persistent */
801 if (0 == clen)
62e76326 802 return result;
803
35282fbf 804 /* If the body size is unknown we must wait for EOF */
805 if (clen < 0)
62e76326 806 return INCOMPLETE_MSG;
807
35282fbf 808 /* If the body size is known, we must wait until we've gotten all of it. */
528b2c61 809 if (entry->mem_obj->endOffset() < reply->content_length + reply->hdr_sz)
62e76326 810 return INCOMPLETE_MSG;
811
35282fbf 812 /* We got it all */
528b2c61 813 return result;
603a02fd 814}
090089c4 815
816/* This will be called when data is ready to be read from fd. Read until
817 * error or connection closed. */
f5558c95 818/* XXX this function is too long! */
b8d8561b 819static void
c4b7a5a9 820httpReadReply(int fd, char *buf, size_t len, comm_err_t flag, int xerrno,void *data)
821{
822 HttpStateData *httpState = static_cast<HttpStateData *>(data);
7194987f 823 assert (fd == httpState->fd);
1d5161bd 824 PROF_start(HttpStateData_readReply);
c4b7a5a9 825 httpState->readReply (fd, buf, len, flag, xerrno, data);
1d5161bd 826 PROF_stop(HttpStateData_readReply);
c4b7a5a9 827}
828
829void
528b2c61 830HttpStateData::readReply (int fd, char *readBuf, size_t len, comm_err_t flag, int xerrno,void *data)
090089c4 831{
30a4f2a8 832 int bin;
090089c4 833 int clen;
c4b7a5a9 834 do_next_read = 0;
c4b7a5a9 835
836
528b2c61 837 assert(buf == readBuf);
c4b7a5a9 838
839 /* Bail out early on COMM_ERR_CLOSING - close handlers will tidy up for us
62e76326 840 */
841
c4b7a5a9 842 if (flag == COMM_ERR_CLOSING) {
d09176e1 843 debug (11,3)("http socket closing\n");
c4b7a5a9 844 return;
845 }
846
e92e4e44 847 if (EBIT_TEST(entry->flags, ENTRY_ABORTED)) {
62e76326 848 maybeReadData();
849 return;
e92e4e44 850 }
c4b7a5a9 851
1513873c 852 errno = 0;
c4b7a5a9 853 /* prepare the read size for the next read (if any) */
447e176b 854#if DELAY_POOLS
62e76326 855
a46d2c0e 856 DelayId delayId = entry->mem_obj->mostBytesAllowed();
62e76326 857
447e176b 858#endif
62e76326 859
c4b7a5a9 860 debug(11, 5) ("httpReadReply: FD %d: len %d.\n", fd, (int)len);
62e76326 861
c4b7a5a9 862 if (flag == COMM_OK && len > 0) {
447e176b 863#if DELAY_POOLS
62e76326 864 delayId.bytesIn(len);
447e176b 865#endif
62e76326 866
867 kb_incr(&statCounter.server.all.kbytes_in, len);
868 kb_incr(&statCounter.server.http.kbytes_in, len);
869 commSetTimeout(fd, Config.Timeout.read, NULL, NULL);
870 IOStats.Http.reads++;
871
872 for (clen = len - 1, bin = 0; clen; bin++)
873 clen >>= 1;
874
875 IOStats.Http.read_hist[bin]++;
30a4f2a8 876 }
62e76326 877
b60ad213 878 if (!reply_hdr && flag == COMM_OK && len > 0) {
62e76326 879 /* Skip whitespace */
880
881 while (len > 0 && xisspace(*buf))
882 xmemmove(buf, buf + 1, len--);
883
884 if (len == 0) {
885 /* Continue to read... */
886 do_next_read = 1;
887 maybeReadData();
888 return;
889 }
5ede6c8f 890 }
62e76326 891
c4b7a5a9 892 if (flag != COMM_OK || len < 0) {
62e76326 893 debug(50, 2) ("httpReadReply: FD %d: read failure: %s.\n",
894 fd, xstrerror());
895
896 if (ignoreErrno(errno)) {
897 do_next_read = 1;
898 } else if (entry->isEmpty()) {
899 ErrorState *err;
900 err = errorCon(ERR_READ_ERROR, HTTP_INTERNAL_SERVER_ERROR);
901 err->request = requestLink((request_t *) request);
902 err->xerrno = errno;
903 fwdFail(fwd, err);
904 do_next_read = 0;
905 comm_close(fd);
906 } else {
907 do_next_read = 0;
908 comm_close(fd);
909 }
528b2c61 910 } else if (flag == COMM_OK && len == 0 && entry->isEmpty()) {
62e76326 911 ErrorState *err;
912 err = errorCon(ERR_ZERO_SIZE_OBJECT, HTTP_SERVICE_UNAVAILABLE);
913 err->xerrno = errno;
914 err->request = requestLink((request_t *) request);
915 fwdFail(fwd, err);
916 eof = 1;
917 do_next_read = 0;
918 comm_close(fd);
c4b7a5a9 919 } else if (flag == COMM_OK && len == 0) {
62e76326 920 /* Connection closed; retrieval done. */
921 eof = 1;
922
923 if (reply_hdr_state < 2)
924 /*
925 * Yes Henrik, there is a point to doing this. When we
926 * called httpProcessReplyHeader() before, we didn't find
927 * the end of headers, but now we are definately at EOF, so
928 * we want to process the reply headers.
929 */
930 /* doesn't return */
931 processReplyHeader(buf, len);
932 else {
933 fwdComplete(fwd);
934 do_next_read = 0;
935 comm_close(fd);
936 }
090089c4 937 } else {
62e76326 938 if (reply_hdr_state < 2) {
939 processReplyHeader(buf, len);
940
941 if (reply_hdr_state == 2) {
942 http_status s = entry->getReply()->sline.status;
225644d7 943#if WIP_FWD_LOG
62e76326 944
945 fwdStatus(fwd, s);
225644d7 946#endif
62e76326 947 /*
948 * If its not a reply that we will re-forward, then
949 * allow the client to get it.
950 */
951
952 if (!fwdReforwardableStatus(s))
953 EBIT_CLR(entry->flags, ENTRY_FWD_HDR_WAIT);
954 }
955 }
956
1d5161bd 957 PROF_start(HttpStateData_processReplyData);
62e76326 958 processReplyData(buf, len);
1d5161bd 959 PROF_stop(HttpStateData_processReplyData);
e6ccf245 960 }
961}
962
963void
528b2c61 964HttpStateData::processReplyData(const char *buf, size_t len)
e6ccf245 965{
528b2c61 966 if (reply_hdr_state < 2) {
62e76326 967 do_next_read = 1;
968 maybeReadData();
969 return;
528b2c61 970 }
62e76326 971
528b2c61 972 StoreIOBuffer tempBuffer;
62e76326 973
974 if (!flags.headers_pushed) {
975 /* The first block needs us to skip the headers */
976 /* TODO: make this cleaner. WE should push the headers, NOT the parser */
977 size_t end = headersEnd (buf, len);
978 /* IF len > end, we need to append data after the
979 * out of band update to the store
980 */
981
982 if (len > end) {
983 tempBuffer.data = (char *)buf+end;
984 tempBuffer.length = len - end;
985 tempBuffer.offset = currentOffset;
986 currentOffset += tempBuffer.length;
987 entry->write (tempBuffer);
988 }
989
990 flags.headers_pushed = 1;
991 } else {
992 tempBuffer.data = (char *)buf;
993 tempBuffer.length = len;
994 tempBuffer.offset = currentOffset;
995 currentOffset += len;
996 entry->write(tempBuffer);
997 }
528b2c61 998
e6ccf245 999 if (EBIT_TEST(entry->flags, ENTRY_ABORTED)) {
62e76326 1000 /*
1001 * the above storeAppend() call could ABORT this entry,
1002 * in that case, the server FD should already be closed.
1003 * there's nothing for us to do.
1004 */
1005 (void) 0;
1006 } else
1007 switch (persistentConnStatus()) {
1008
1009 case INCOMPLETE_MSG:
1010 /* Wait for EOF condition */
1011 do_next_read = 1;
1012 break;
1013
1014 case COMPLETE_PERSISTENT_MSG:
1015 /* yes we have to clear all these! */
62e76326 1016 commSetTimeout(fd, -1, NULL, NULL);
1017 do_next_read = 0;
62e76326 1018
1019 comm_remove_close_handler(fd, httpStateFree, this);
1020 fwdUnregister(fd, fwd);
bd0723ad 1021
1022 if (_peer) {
1023 if (_peer->options.originserver)
1024 pconnPush(fd, _peer->name, orig_request->port, orig_request->host);
1025 else
1026 pconnPush(fd, _peer->name, _peer->http_port, NULL);
1027 } else {
1028 pconnPush(fd, request->host, request->port, NULL);
1029 }
1030
62e76326 1031 fwdComplete(fwd);
1032 fd = -1;
1033 httpStateFree(fd, this);
1034 return;
1035
1036 case COMPLETE_NONPERSISTENT_MSG:
1037 /* close the connection ourselves */
1038 /* yes - same as for a complete persistent conn here */
62e76326 1039 commSetTimeout(fd, -1, NULL, NULL);
1040 commSetSelect(fd, COMM_SELECT_READ, NULL, NULL, 0);
62e76326 1041 comm_remove_close_handler(fd, httpStateFree, this);
1042 fwdUnregister(fd, fwd);
1043 fwdComplete(fwd);
1044 /* TODO: check that fd is still open here */
1045 comm_close (fd);
1046 fd = -1;
1047 httpStateFree(fd, this);
1048 return;
1049 }
1050
c4b7a5a9 1051 maybeReadData();
1052}
1053
1054void
1055HttpStateData::maybeReadData()
1056{
528b2c61 1057 if (do_next_read) {
62e76326 1058 do_next_read = 0;
a46d2c0e 1059 entry->delayAwareRead(fd, buf, SQUID_TCP_SO_RCVBUF, httpReadReply, this);
528b2c61 1060 }
090089c4 1061}
1062
1063/* This will be called when request write is complete. Schedule read of
1064 * reply. */
d576a6a6 1065void
1066HttpStateData::SendComplete(int fd, char *bufnotused, size_t size, comm_err_t errflag, void *data)
090089c4 1067{
e6ccf245 1068 HttpStateData *httpState = static_cast<HttpStateData *>(data);
9b312a19 1069 StoreEntry *entry = httpState->entry;
1070 ErrorState *err;
a3d5953d 1071 debug(11, 5) ("httpSendComplete: FD %d: size %d: errflag %d.\n",
62e76326 1072 fd, (int) size, errflag);
bc87dc25 1073#if URL_CHECKSUM_DEBUG
62e76326 1074
528b2c61 1075 entry->mem_obj->checkUrlChecksum();
bc87dc25 1076#endif
62e76326 1077
ee1679df 1078 if (size > 0) {
62e76326 1079 fd_bytes(fd, size, FD_WRITE);
1080 kb_incr(&statCounter.server.all.kbytes_out, size);
1081 kb_incr(&statCounter.server.http.kbytes_out, size);
ee1679df 1082 }
62e76326 1083
ea3a2a69 1084 if (errflag == COMM_ERR_CLOSING)
62e76326 1085 return;
1086
090089c4 1087 if (errflag) {
62e76326 1088 err = errorCon(ERR_WRITE_ERROR, HTTP_INTERNAL_SERVER_ERROR);
1089 err->xerrno = errno;
1090 err->request = requestLink(httpState->orig_request);
1091 errorAppendEntry(entry, err);
1092 comm_close(fd);
1093 return;
090089c4 1094 } else {
62e76326 1095 /* Schedule read reply. */
a46d2c0e 1096 entry->delayAwareRead(fd, httpState->buf, SQUID_TCP_SO_RCVBUF, httpReadReply, httpState);
62e76326 1097 /*
1098 * Set the read timeout here because it hasn't been set yet.
1099 * We only set the read timeout after the request has been
1100 * fully written to the server-side. If we start the timeout
1101 * after connection establishment, then we are likely to hit
1102 * the timeout for POST/PUT requests that have very large
1103 * request bodies.
1104 */
1105 commSetTimeout(fd, Config.Timeout.read, httpTimeout, httpState);
090089c4 1106 }
1107}
1108
99edd1c3 1109/*
1110 * build request headers and append them to a given MemBuf
1111 * used by httpBuildRequestPrefix()
818c6c9e 1112 * note: initialised the HttpHeader, the caller is responsible for Clean()-ing
99edd1c3 1113 */
e1e72f06 1114void
6bf8443a 1115httpBuildRequestHeader(request_t * request,
62e76326 1116 request_t * orig_request,
1117 StoreEntry * entry,
1118 HttpHeader * hdr_out,
1119 http_state_flags flags)
6bf8443a 1120{
99edd1c3 1121 /* building buffer for complex strings */
5999b776 1122#define BBUF_SZ (MAX_URL+32)
99edd1c3 1123 LOCAL_ARRAY(char, bbuf, BBUF_SZ);
99edd1c3 1124 const HttpHeader *hdr_in = &orig_request->header;
1125 const HttpHeaderEntry *e;
6bccf575 1126 String strFwd;
99edd1c3 1127 HttpHeaderPos pos = HttpHeaderInitPos;
75faaa7a 1128 assert (hdr_out->owner == hoRequest);
99edd1c3 1129 /* append our IMS header */
62e76326 1130
9bc73deb 1131 if (request->lastmod > -1 && request->method == METHOD_GET)
62e76326 1132 httpHeaderPutTime(hdr_out, HDR_IF_MODIFIED_SINCE, request->lastmod);
99edd1c3 1133
528b2c61 1134 bool we_do_ranges = decideIfWeDoRanges (orig_request);
1135
650c4b88 1136 String strConnection (httpHeaderGetList(hdr_in, HDR_CONNECTION));
62e76326 1137
528b2c61 1138 while ((e = httpHeaderGetEntry(hdr_in, &pos)))
62e76326 1139 copyOneHeaderFromClientsideRequestToUpstreamRequest(e, strConnection, request, orig_request, hdr_out, we_do_ranges, flags);
528b2c61 1140
43ae1d95 1141 /* Abstraction break: We should interpret multipart/byterange responses
528b2c61 1142 * into offset-length data, and this works around our inability to do so.
1143 */
62e76326 1144 if (!we_do_ranges && orig_request->multipartRangeRequest()) {
1145 /* don't cache the result */
1146 orig_request->flags.cachable = 0;
1147 /* pretend it's not a range request */
00d77d6b 1148 delete orig_request->range;
62e76326 1149 orig_request->range = NULL;
1150 orig_request->flags.range = 0;
1151 }
528b2c61 1152
99edd1c3 1153
99edd1c3 1154 /* append Via */
736cb6aa 1155 if (Config.onoff.via) {
43ae1d95 1156 String strVia;
1157 strVia = httpHeaderGetList(hdr_in, HDR_VIA);
62e76326 1158 snprintf(bbuf, BBUF_SZ, "%d.%d %s",
1159 orig_request->http_ver.major,
1160 orig_request->http_ver.minor, ThisCache);
1161 strListAdd(&strVia, bbuf, ',');
1162 httpHeaderPutStr(hdr_out, HDR_VIA, strVia.buf());
1163 strVia.clean();
736cb6aa 1164 }
62e76326 1165
43ae1d95 1166#if ESI
1167 {
1168 /* Append Surrogate-Capabilities */
1169 String strSurrogate (httpHeaderGetList(hdr_in, HDR_SURROGATE_CAPABILITY));
ec43ae0e 1170 snprintf(bbuf, BBUF_SZ, "%s=\"Surrogate/1.0 ESI/1.0\"",
43ae1d95 1171 Config.Accel.surrogate_id);
1172 strListAdd(&strSurrogate, bbuf, ',');
1173 httpHeaderPutStr(hdr_out, HDR_SURROGATE_CAPABILITY, strSurrogate.buf());
1174 }
1175#endif
1176
99edd1c3 1177 /* append X-Forwarded-For */
6bccf575 1178 strFwd = httpHeaderGetList(hdr_in, HDR_X_FORWARDED_FOR);
62e76326 1179
6056ae68 1180 if (opt_forwarded_for && orig_request->client_addr.s_addr != no_addr.s_addr)
62e76326 1181 strListAdd(&strFwd, inet_ntoa(orig_request->client_addr), ',');
6056ae68 1182 else
62e76326 1183 strListAdd(&strFwd, "unknown", ',');
1184
528b2c61 1185 httpHeaderPutStr(hdr_out, HDR_X_FORWARDED_FOR, strFwd.buf());
62e76326 1186
528b2c61 1187 strFwd.clean();
6bccf575 1188
99edd1c3 1189 /* append Host if not there already */
1190 if (!httpHeaderHas(hdr_out, HDR_HOST)) {
62e76326 1191 if (orig_request->peer_domain) {
1192 httpHeaderPutStr(hdr_out, HDR_HOST, orig_request->peer_domain);
1193 } else if (orig_request->port == urlDefaultPort(orig_request->protocol)) {
1194 /* use port# only if not default */
1195 httpHeaderPutStr(hdr_out, HDR_HOST, orig_request->host);
1196 } else {
1197 httpHeaderPutStrf(hdr_out, HDR_HOST, "%s:%d",
1198 orig_request->host, (int) orig_request->port);
1199 }
6bf8443a 1200 }
62e76326 1201
c68e9c6b 1202 /* append Authorization if known in URL, not in header and going direct */
1203 if (!httpHeaderHas(hdr_out, HDR_AUTHORIZATION)) {
62e76326 1204 if (!request->flags.proxying && *request->login) {
1205 httpHeaderPutStrf(hdr_out, HDR_AUTHORIZATION, "Basic %s",
1206 base64_encode(request->login));
1207 }
c68e9c6b 1208 }
62e76326 1209
c68e9c6b 1210 /* append Proxy-Authorization if configured for peer, and proxying */
c3b33cb7 1211 if (request->flags.proxying && orig_request->peer_login &&
62e76326 1212 !httpHeaderHas(hdr_out, HDR_PROXY_AUTHORIZATION)) {
1213 if (*orig_request->peer_login == '*') {
1214 /* Special mode, to pass the username to the upstream cache */
1215 char loginbuf[256];
1216 const char *username = "-";
1217
1218 if (orig_request->auth_user_request)
1219 username = orig_request->auth_user_request->username();
abb929f0 1220 else if (orig_request->extacl_user.size())
1221 username = orig_request->extacl_user.buf();
62e76326 1222
1223 snprintf(loginbuf, sizeof(loginbuf), "%s%s", username, orig_request->peer_login + 1);
1224
1225 httpHeaderPutStrf(hdr_out, HDR_PROXY_AUTHORIZATION, "Basic %s",
1226 base64_encode(loginbuf));
1227 } else if (strcmp(orig_request->peer_login, "PASS") == 0) {
abb929f0 1228 if (orig_request->extacl_user.size() && orig_request->extacl_passwd.size()) {
1229 char loginbuf[256];
1230 snprintf(loginbuf, sizeof(loginbuf), "%s:%s", orig_request->extacl_user.buf(), orig_request->extacl_passwd.buf());
1231 httpHeaderPutStrf(hdr_out, HDR_PROXY_AUTHORIZATION, "Basic %s",
1232 base64_encode(loginbuf));
1233 }
62e76326 1234 } else if (strcmp(orig_request->peer_login, "PROXYPASS") == 0) {
1235 /* Nothing to do */
1236 } else {
1237 httpHeaderPutStrf(hdr_out, HDR_PROXY_AUTHORIZATION, "Basic %s",
1238 base64_encode(orig_request->peer_login));
1239 }
c68e9c6b 1240 }
62e76326 1241
be753325 1242 /* append WWW-Authorization if configured for peer */
1243 if (flags.originpeer && orig_request->peer_login &&
62e76326 1244 !httpHeaderHas(hdr_out, HDR_AUTHORIZATION)) {
1245 if (strcmp(orig_request->peer_login, "PASS") == 0) {
1246 /* No credentials to forward.. (should have been done above if available) */
1247 } else if (strcmp(orig_request->peer_login, "PROXYPASS") == 0) {
1248 /* Special mode, convert proxy authentication to WWW authentication
abb929f0 1249 * (also applies to authentication provided by external acl)
62e76326 1250 */
1251 const char *auth = httpHeaderGetStr(hdr_in, HDR_PROXY_AUTHORIZATION);
1252
1253 if (auth && strncasecmp(auth, "basic ", 6) == 0) {
1254 httpHeaderPutStr(hdr_out, HDR_AUTHORIZATION, auth);
abb929f0 1255 } else if (orig_request->extacl_user.size() && orig_request->extacl_passwd.size()) {
1256 char loginbuf[256];
1257 snprintf(loginbuf, sizeof(loginbuf), "%s:%s", orig_request->extacl_user.buf(), orig_request->extacl_passwd.buf());
1258 httpHeaderPutStrf(hdr_out, HDR_AUTHORIZATION, "Basic %s",
1259 base64_encode(loginbuf));
62e76326 1260 }
1261 } else if (*orig_request->peer_login == '*') {
1262 /* Special mode, to pass the username to the upstream cache */
1263 char loginbuf[256];
1264 const char *username = "-";
1265
1266 if (orig_request->auth_user_request)
1267 username = authenticateUserRequestUsername(orig_request->auth_user_request);
abb929f0 1268 else if (orig_request->extacl_user.size())
1269 username = orig_request->extacl_user.buf();
62e76326 1270
1271 snprintf(loginbuf, sizeof(loginbuf), "%s%s", username, orig_request->peer_login + 1);
1272
1273 httpHeaderPutStrf(hdr_out, HDR_AUTHORIZATION, "Basic %s",
1274 base64_encode(loginbuf));
1275 } else {
1276 /* Fixed login string */
1277 httpHeaderPutStrf(hdr_out, HDR_AUTHORIZATION, "Basic %s",
1278 base64_encode(orig_request->peer_login));
1279 }
be753325 1280 }
62e76326 1281
abb929f0 1282 /* append Cache-Control, add max-age if not there already */ {
62e76326 1283 HttpHdrCc *cc = httpHeaderGetCc(hdr_in);
1284
1285 if (!cc)
1286 cc = httpHdrCcCreate();
1287
1288 if (!EBIT_TEST(cc->mask, CC_MAX_AGE)) {
43ae1d95 1289 const char *url =
1290 entry ? storeUrl(entry) : urlCanonical(orig_request);
62e76326 1291 httpHdrCcSetMaxAge(cc, getMaxAge(url));
1292
1293 if (request->urlpath.size())
1294 assert(strstr(url, request->urlpath.buf()));
1295 }
1296
ce2d6441 1297 /* Set no-cache if determined needed but not found */
1298 if (orig_request->flags.nocache && !httpHeaderHas(hdr_in, HDR_PRAGMA))
1299 EBIT_SET(cc->mask, CC_NO_CACHE);
1300
1301 /* Enforce sibling relations */
62e76326 1302 if (flags.only_if_cached)
1303 EBIT_SET(cc->mask, CC_ONLY_IF_CACHED);
1304
1305 httpHeaderPutCc(hdr_out, cc);
1306
1307 httpHdrCcDestroy(cc);
6bf8443a 1308 }
62e76326 1309
99edd1c3 1310 /* maybe append Connection: keep-alive */
b515fc11 1311 if (flags.keepalive) {
62e76326 1312 if (flags.proxying) {
1313 httpHeaderPutStr(hdr_out, HDR_PROXY_CONNECTION, "keep-alive");
1314 } else {
1315 httpHeaderPutStr(hdr_out, HDR_CONNECTION, "keep-alive");
1316 }
603a02fd 1317 }
62e76326 1318
a7ad6e4e 1319 /* append Front-End-Https */
1320 if (flags.front_end_https) {
62e76326 1321 if (flags.front_end_https == 1 || request->protocol == PROTO_HTTPS)
1322 httpHeaderPutStr(hdr_out, HDR_FRONT_END_HTTPS, "On");
a7ad6e4e 1323 }
1324
6bccf575 1325 /* Now mangle the headers. */
1326 httpHdrMangleList(hdr_out, request);
62e76326 1327
528b2c61 1328 strConnection.clean();
99edd1c3 1329}
1330
528b2c61 1331
1332void
be753325 1333copyOneHeaderFromClientsideRequestToUpstreamRequest(const HttpHeaderEntry *e, String strConnection, request_t * request, request_t * orig_request, HttpHeader * hdr_out, int we_do_ranges, http_state_flags flags)
528b2c61 1334{
1335 debug(11, 5) ("httpBuildRequestHeader: %s: %s\n",
62e76326 1336 e->name.buf(), e->value.buf());
1337
528b2c61 1338 if (!httpRequestHdrAllowed(e, &strConnection)) {
62e76326 1339 debug(11, 2) ("'%s' header denied by anonymize_headers configuration\n",+ e->name.buf());
1340 return;
528b2c61 1341 }
62e76326 1342
528b2c61 1343 switch (e->id) {
62e76326 1344
be753325 1345 case HDR_PROXY_AUTHORIZATION:
62e76326 1346 /* Only pass on proxy authentication to peers for which
1347 * authentication forwarding is explicitly enabled
1348 */
1349
1350 if (flags.proxying && orig_request->peer_login &&
abb929f0 1351 (strcmp(orig_request->peer_login, "PASS") == 0 ||
1352 strcmp(orig_request->peer_login, "PROXYPASS") == 0)) {
62e76326 1353 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1354 }
1355
1356 break;
1357
be753325 1358 case HDR_AUTHORIZATION:
62e76326 1359 /* Pass on WWW authentication */
1360
1361 if (!flags.originpeer) {
1362 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1363 } else {
1364 /* In accelerators, only forward authentication if enabled
1365 * (see also below for proxy->server authentication)
1366 */
1367
abb929f0 1368 if (orig_request->peer_login &&
1369 (strcmp(orig_request->peer_login, "PASS") == 0 ||
1370 strcmp(orig_request->peer_login, "PROXYPASS") == 0)) {
62e76326 1371 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1372 }
1373 }
1374
1375 break;
1376
be753325 1377 case HDR_HOST:
62e76326 1378 /*
b883b594 1379 * Normally Squid rewrites the Host: header.
1380 * However, there is one case when we don't: If the URL
62e76326 1381 * went through our redirector and the admin configured
1382 * 'redir_rewrites_host' to be off.
1383 */
1384
b883b594 1385 if (request->flags.redirected && !Config.onoff.redir_rewrites_host)
1386 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1387 else {
1388 /* use port# only if not default */
1389
1390 if (orig_request->port == urlDefaultPort(orig_request->protocol)) {
1391 httpHeaderPutStr(hdr_out, HDR_HOST, orig_request->host);
1392 } else {
1393 httpHeaderPutStrf(hdr_out, HDR_HOST, "%s:%d",
1394 orig_request->host, (int) orig_request->port);
1395 }
1396 }
62e76326 1397
1398 break;
1399
be753325 1400 case HDR_IF_MODIFIED_SINCE:
62e76326 1401 /* append unless we added our own;
1402 * note: at most one client's ims header can pass through */
b883b594 1403
62e76326 1404 if (!httpHeaderHas(hdr_out, HDR_IF_MODIFIED_SINCE))
1405 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1406
1407 break;
1408
be753325 1409 case HDR_MAX_FORWARDS:
62e76326 1410 if (orig_request->method == METHOD_TRACE) {
1411 const int hops = httpHeaderEntryGetInt(e);
1412
1413 if (hops > 0)
1414 httpHeaderPutInt(hdr_out, HDR_MAX_FORWARDS, hops - 1);
1415 }
1416
1417 break;
1418
be753325 1419 case HDR_VIA:
62e76326 1420 /* If Via is disabled then forward any received header as-is */
1421
1422 if (!Config.onoff.via)
1423 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1424
1425 break;
1426
be753325 1427 case HDR_RANGE:
62e76326 1428
be753325 1429 case HDR_IF_RANGE:
62e76326 1430
be753325 1431 case HDR_REQUEST_RANGE:
62e76326 1432 if (!we_do_ranges)
1433 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1434
1435 break;
1436
be753325 1437 case HDR_PROXY_CONNECTION:
62e76326 1438
be753325 1439 case HDR_CONNECTION:
62e76326 1440
be753325 1441 case HDR_X_FORWARDED_FOR:
62e76326 1442
be753325 1443 case HDR_CACHE_CONTROL:
62e76326 1444 /* append these after the loop if needed */
1445 break;
1446
be753325 1447 case HDR_FRONT_END_HTTPS:
62e76326 1448 if (!flags.front_end_https)
1449 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
1450
1451 break;
1452
be753325 1453 default:
62e76326 1454 /* pass on all other header fields */
1455 httpHeaderAddEntry(hdr_out, httpHeaderEntryClone(e));
528b2c61 1456 }
1457}
1458
1459int
1460decideIfWeDoRanges (request_t * orig_request)
1461{
62e76326 1462 int result = 1;
1463 /* decide if we want to do Ranges ourselves
1464 * and fetch the whole object now)
1465 * We want to handle Ranges ourselves iff
1466 * - we can actually parse client Range specs
1467 * - the specs are expected to be simple enough (e.g. no out-of-order ranges)
1468 * - reply will be cachable
1469 * (If the reply will be uncachable we have to throw it away after
1470 * serving this request, so it is better to forward ranges to
1471 * the server and fetch only the requested content)
1472 */
1473
1474 if (NULL == orig_request->range || !orig_request->flags.cachable
1475 || orig_request->range->offsetLimitExceeded())
1476 result = 0;
1477
1478 debug(11, 8) ("decideIfWeDoRanges: range specs: %p, cachable: %d; we_do_ranges: %d\n",
1479 orig_request->range, orig_request->flags.cachable, result);
1480
1481 return result;
528b2c61 1482}
1483
1484
62e76326 1485/* build request prefix and append it to a given MemBuf;
99edd1c3 1486 * return the length of the prefix */
9bc73deb 1487mb_size_t
99edd1c3 1488httpBuildRequestPrefix(request_t * request,
62e76326 1489 request_t * orig_request,
1490 StoreEntry * entry,
1491 MemBuf * mb,
1492 http_state_flags flags)
99edd1c3 1493{
1494 const int offset = mb->size;
528b2c61 1495 http_version_t httpver;
1496 httpBuildVersion(&httpver, 1, 0);
1497 memBufPrintf(mb, "%s %s HTTP/%d.%d\r\n",
62e76326 1498 RequestMethodStr[request->method],
1499 request->urlpath.size() ? request->urlpath.buf() : "/",
1500 httpver.major,httpver.minor);
99edd1c3 1501 /* build and pack headers */
1502 {
75faaa7a 1503 HttpHeader hdr(hoRequest);
62e76326 1504 Packer p;
1505 httpBuildRequestHeader(request, orig_request, entry, &hdr, flags);
1506 packerToMemInit(&p, mb);
1507 httpHeaderPackInto(&hdr, &p);
1508 httpHeaderClean(&hdr);
1509 packerClean(&p);
9d9d144b 1510 }
99edd1c3 1511 /* append header terminator */
b8890359 1512 memBufAppend(mb, crlf, 2);
99edd1c3 1513 return mb->size - offset;
6bf8443a 1514}
62e76326 1515
090089c4 1516/* This will be called when connect completes. Write request. */
b8d8561b 1517static void
b6a2f15e 1518httpSendRequest(HttpStateData * httpState)
090089c4 1519{
99edd1c3 1520 MemBuf mb;
30a4f2a8 1521 request_t *req = httpState->request;
620da955 1522 StoreEntry *entry = httpState->entry;
29b8d8d6 1523 peer *p = httpState->_peer;
901e234d 1524 CWCB *sendHeaderDone;
090089c4 1525
43ae1d95 1526 debug(11, 5) ("httpSendRequest: FD %d: httpState %p.\n", httpState->fd,
1527 httpState);
090089c4 1528
a2ac85d9 1529 if (httpState->orig_request->body_connection.getRaw() != NULL)
62e76326 1530 sendHeaderDone = httpSendRequestEntity;
7db8b16d 1531 else
62e76326 1532 sendHeaderDone = HttpStateData::SendComplete;
54220df8 1533
be753325 1534 if (p != NULL) {
62e76326 1535 if (p->options.originserver) {
1536 httpState->flags.proxying = 0;
1537 httpState->flags.originpeer = 1;
1538 } else {
1539 httpState->flags.proxying = 1;
1540 httpState->flags.originpeer = 0;
1541 }
be753325 1542 } else {
62e76326 1543 httpState->flags.proxying = 0;
1544 httpState->flags.originpeer = 0;
be753325 1545 }
62e76326 1546
efb9218c 1547 /*
99edd1c3 1548 * Is keep-alive okay for all request methods?
efb9218c 1549 */
efd900cb 1550 if (!Config.onoff.server_pconns)
62e76326 1551 httpState->flags.keepalive = 0;
efd900cb 1552 else if (p == NULL)
62e76326 1553 httpState->flags.keepalive = 1;
efb9218c 1554 else if (p->stats.n_keepalives_sent < 10)
62e76326 1555 httpState->flags.keepalive = 1;
43ae1d95 1556 else if ((double) p->stats.n_keepalives_recv /
1557 (double) p->stats.n_keepalives_sent > 0.50)
62e76326 1558 httpState->flags.keepalive = 1;
1559
a7ad6e4e 1560 if (httpState->_peer) {
62e76326 1561 if (neighborType(httpState->_peer, httpState->request) == PEER_SIBLING &&
1562 !httpState->_peer->options.allow_miss)
1563 httpState->flags.only_if_cached = 1;
1564
1565 httpState->flags.front_end_https = httpState->_peer->front_end_https;
a7ad6e4e 1566 }
62e76326 1567
99edd1c3 1568 memBufDefInit(&mb);
1569 httpBuildRequestPrefix(req,
62e76326 1570 httpState->orig_request,
1571 entry,
1572 &mb,
1573 httpState->flags);
b6a2f15e 1574 debug(11, 6) ("httpSendRequest: FD %d:\n%s\n", httpState->fd, mb.buf);
d4cb310b 1575 comm_old_write_mbuf(httpState->fd, mb, sendHeaderDone, httpState);
090089c4 1576}
b6a2f15e 1577
910169e5 1578void
db1cd23c 1579httpStart(FwdState * fwd)
603a02fd 1580{
db1cd23c 1581 int fd = fwd->server_fd;
28c60158 1582 HttpStateData *httpState;
910169e5 1583 request_t *proxy_req;
db1cd23c 1584 request_t *orig_req = fwd->request;
910169e5 1585 debug(11, 3) ("httpStart: \"%s %s\"\n",
62e76326 1586 RequestMethodStr[orig_req->method],
1587 storeUrl(fwd->entry));
e6ccf245 1588 CBDATA_INIT_TYPE(HttpStateData);
72711e31 1589 httpState = cbdataAlloc(HttpStateData);
43ae1d95 1590 httpState->ignoreCacheControl = false;
1591 httpState->surrogateNoStore = false;
db1cd23c 1592 storeLockObject(fwd->entry);
1593 httpState->fwd = fwd;
1594 httpState->entry = fwd->entry;
9e4ad609 1595 httpState->fd = fd;
62e76326 1596
db1cd23c 1597 if (fwd->servers)
62e76326 1598 httpState->_peer = fwd->servers->_peer; /* might be NULL */
1599
29b8d8d6 1600 if (httpState->_peer) {
62e76326 1601 const char *url;
1602
1603 if (httpState->_peer->options.originserver)
1604 url = orig_req->urlpath.buf();
1605 else
1606 url = storeUrl(httpState->entry);
1607
1608 proxy_req = requestCreate(orig_req->method,
1609 orig_req->protocol, url);
1610
1611 xstrncpy(proxy_req->host, httpState->_peer->host, SQUIDHOSTNAMELEN);
1612
1613 proxy_req->port = httpState->_peer->http_port;
1614
1615 proxy_req->flags = orig_req->flags;
1616
1617 proxy_req->lastmod = orig_req->lastmod;
1618
1619 httpState->request = requestLink(proxy_req);
1620
1621 httpState->orig_request = requestLink(orig_req);
1622
1623 proxy_req->flags.proxying = 1;
1624
1625 /*
1626 * This NEIGHBOR_PROXY_ONLY check probably shouldn't be here.
1627 * We might end up getting the object from somewhere else if,
1628 * for example, the request to this neighbor fails.
1629 */
1630 if (httpState->_peer->options.proxy_only)
1631 storeReleaseRequest(httpState->entry);
1632
95e36d02 1633#if DELAY_POOLS
62e76326 1634
a46d2c0e 1635 httpState->entry->setNoDelay(httpState->_peer->options.no_delay);
62e76326 1636
95e36d02 1637#endif
62e76326 1638
603a02fd 1639 } else {
62e76326 1640 httpState->request = requestLink(orig_req);
1641 httpState->orig_request = requestLink(orig_req);
603a02fd 1642 }
62e76326 1643
910169e5 1644 /*
1645 * register the handler to free HTTP state data when the FD closes
1646 */
1647 comm_add_close_handler(fd, httpStateFree, httpState);
62e76326 1648
83704487 1649 statCounter.server.all.requests++;
62e76326 1650
83704487 1651 statCounter.server.http.requests++;
62e76326 1652
b6a2f15e 1653 httpSendRequest(httpState);
62e76326 1654
b6a2f15e 1655 /*
1656 * We used to set the read timeout here, but not any more.
1657 * Now its set in httpSendComplete() after the full request,
1658 * including request body, has been written to the server.
1659 */
090089c4 1660}
1661
54220df8 1662static void
c3d63b2a 1663httpSendRequestEntityDone(int fd, void *data)
54220df8 1664{
e6ccf245 1665 HttpStateData *httpState = static_cast<HttpStateData *>(data);
4fb35c3c 1666 ACLChecklist ch;
43ae1d95 1667 debug(11, 5) ("httpSendRequestEntityDone: FD %d\n", fd);
8000a965 1668 ch.request = requestLink(httpState->request);
62e76326 1669
94439e4e 1670 if (!Config.accessList.brokenPosts) {
62e76326 1671 debug(11, 5) ("httpSendRequestEntityDone: No brokenPosts list\n");
1672 HttpStateData::SendComplete(fd, NULL, 0, COMM_OK, data);
94439e4e 1673 } else if (!aclCheckFast(Config.accessList.brokenPosts, &ch)) {
62e76326 1674 debug(11, 5) ("httpSendRequestEntityDone: didn't match brokenPosts\n");
1675 HttpStateData::SendComplete(fd, NULL, 0, COMM_OK, data);
94439e4e 1676 } else {
62e76326 1677 debug(11, 2) ("httpSendRequestEntityDone: matched brokenPosts\n");
1678 comm_old_write(fd, "\r\n", 2, HttpStateData::SendComplete, data, NULL);
54220df8 1679 }
94439e4e 1680}
1681
1682static void
e6ccf245 1683httpRequestBodyHandler(char *buf, ssize_t size, void *data)
94439e4e 1684{
1685 HttpStateData *httpState = (HttpStateData *) data;
62e76326 1686
94439e4e 1687 if (size > 0) {
62e76326 1688 comm_old_write(httpState->fd, buf, size, httpSendRequestEntity, data, memFree8K);
94439e4e 1689 } else if (size == 0) {
62e76326 1690 /* End of body */
1691 memFree8K(buf);
1692 httpSendRequestEntityDone(httpState->fd, data);
94439e4e 1693 } else {
62e76326 1694 /* Failed to get whole body, probably aborted */
1695 memFree8K(buf);
1696 HttpStateData::SendComplete(httpState->fd, NULL, 0, COMM_ERR_CLOSING, data);
b6a2f15e 1697 }
376bb137 1698}
1699
1700static void
3d7e9d7c 1701httpSendRequestEntity(int fd, char *bufnotused, size_t size, comm_err_t errflag, void *data)
376bb137 1702{
e6ccf245 1703 HttpStateData *httpState = static_cast<HttpStateData *>(data);
376bb137 1704 StoreEntry *entry = httpState->entry;
1705 ErrorState *err;
c3d63b2a 1706 debug(11, 5) ("httpSendRequestEntity: FD %d: size %d: errflag %d.\n",
62e76326 1707 fd, (int) size, errflag);
1708
376bb137 1709 if (size > 0) {
62e76326 1710 fd_bytes(fd, size, FD_WRITE);
1711 kb_incr(&statCounter.server.all.kbytes_out, size);
1712 kb_incr(&statCounter.server.http.kbytes_out, size);
376bb137 1713 }
62e76326 1714
376bb137 1715 if (errflag == COMM_ERR_CLOSING)
62e76326 1716 return;
1717
376bb137 1718 if (errflag) {
62e76326 1719 err = errorCon(ERR_WRITE_ERROR, HTTP_INTERNAL_SERVER_ERROR);
1720 err->xerrno = errno;
1721 err->request = requestLink(httpState->orig_request);
1722 errorAppendEntry(entry, err);
1723 comm_close(fd);
1724 return;
376bb137 1725 }
62e76326 1726
94439e4e 1727 if (EBIT_TEST(entry->flags, ENTRY_ABORTED)) {
62e76326 1728 comm_close(fd);
1729 return;
376bb137 1730 }
62e76326 1731
e6ccf245 1732 clientReadBody(httpState->orig_request, (char *)memAllocate(MEM_8K_BUF), 8192, httpRequestBodyHandler, httpState);
54220df8 1733}
ccf44862 1734
1735void
110eb4e5 1736httpBuildVersion(http_version_t * version, unsigned int major, unsigned int minor)
1737{
1738 version->major = major;
1739 version->minor = minor;
ccf44862 1740}