2 * Copyright (C) 2006-2012 Tobias Brunner
3 * Copyright (C) 2005-2009 Martin Willi
4 * Copyright (C) 2006 Daniel Roethlisberger
5 * Copyright (C) 2005 Jan Hutter
6 * Hochschule fuer Technik Rapperswil
8 * This program is free software; you can redistribute it and/or modify it
9 * under the terms of the GNU General Public License as published by the
10 * Free Software Foundation; either version 2 of the License, or (at your
11 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
13 * This program is distributed in the hope that it will be useful, but
14 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
15 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
20 #define _POSIX_PTHREAD_SEMANTICS /* for two param sigwait on OpenSolaris */
22 #undef _POSIX_PTHREAD_SEMANTICS
25 #include <sys/types.h>
26 #include <sys/utsname.h>
34 #include <utils/backtrace.h>
35 #include <threading/thread.h>
38 #include <private/android_filesystem_config.h> /* for AID_VPN */
42 * PID file, in which charon stores its process id
44 #define PID_FILE IPSEC_PIDDIR "/charon.pid"
47 * Global reference to PID file (required to truncate, if undeletable)
49 static FILE *pidfile
= NULL
;
52 * Log levels as defined via command line arguments
54 static level_t levels
[DBG_MAX
];
57 * Whether to only use syslog when logging
59 static bool use_syslog
= FALSE
;
62 * hook in library for debugging messages
64 extern void (*dbg
) (debug_t group
, level_t level
, char *fmt
, ...);
67 * Logging hook for library logs, using stderr output
69 static void dbg_stderr(debug_t group
, level_t level
, char *fmt
, ...)
76 fprintf(stderr
, "00[%N] ", debug_names
, group
);
77 vfprintf(stderr
, fmt
, args
);
78 fprintf(stderr
, "\n");
84 * Run the daemon and handle unix signals
90 /* handle SIGINT, SIGHUP ans SIGTERM in this handler */
92 sigaddset(&set
, SIGINT
);
93 sigaddset(&set
, SIGHUP
);
94 sigaddset(&set
, SIGTERM
);
95 sigprocmask(SIG_BLOCK
, &set
, NULL
);
102 error
= sigwait(&set
, &sig
);
105 DBG1(DBG_DMN
, "error %d while waiting for a signal", error
);
112 DBG1(DBG_DMN
, "signal of type SIGHUP received. Reloading "
114 if (lib
->settings
->load_files(lib
->settings
, NULL
, FALSE
))
116 charon
->load_loggers(charon
, levels
, !use_syslog
);
117 lib
->plugins
->reload(lib
->plugins
, NULL
);
121 DBG1(DBG_DMN
, "reloading config failed, keeping old");
127 DBG1(DBG_DMN
, "signal of type SIGINT received. Shutting down");
128 charon
->bus
->alert(charon
->bus
, ALERT_SHUTDOWN_SIGNAL
, sig
);
133 DBG1(DBG_DMN
, "signal of type SIGTERM received. Shutting down");
134 charon
->bus
->alert(charon
->bus
, ALERT_SHUTDOWN_SIGNAL
, sig
);
139 DBG1(DBG_DMN
, "unknown signal %d received. Ignored", sig
);
149 static bool lookup_uid_gid()
152 if (!charon
->caps
->resolve_uid(charon
->caps
, IPSEC_USER
))
158 if (!charon
->caps
->resolve_gid(charon
->caps
, IPSEC_GROUP
))
164 charon
->caps
->set_uid(charon
->caps
, AID_VPN
);
170 * Handle SIGSEGV/SIGILL signals raised by threads
172 static void segv_handler(int signal
)
174 backtrace_t
*backtrace
;
176 DBG1(DBG_DMN
, "thread %u received %d", thread_current_id(), signal
);
177 backtrace
= backtrace_create(2);
178 backtrace
->log(backtrace
, NULL
, TRUE
);
179 backtrace
->log(backtrace
, stderr
, TRUE
);
180 backtrace
->destroy(backtrace
);
182 DBG1(DBG_DMN
, "killing ourself, received critical signal");
187 * Check/create PID file, return TRUE if already running
189 static bool check_pidfile()
193 if (stat(PID_FILE
, &stb
) == 0)
195 pidfile
= fopen(PID_FILE
, "r");
201 memset(buf
, 0, sizeof(buf
));
202 if (fread(buf
, 1, sizeof(buf
), pidfile
))
204 buf
[sizeof(buf
) - 1] = '\0';
208 if (pid
&& kill(pid
, 0) == 0)
209 { /* such a process is running */
213 DBG1(DBG_DMN
, "removing pidfile '"PID_FILE
"', process not running");
217 /* create new pidfile */
218 pidfile
= fopen(PID_FILE
, "w");
221 ignore_result(fchown(fileno(pidfile
),
222 charon
->caps
->get_uid(charon
->caps
),
223 charon
->caps
->get_gid(charon
->caps
)));
224 fprintf(pidfile
, "%d\n", getpid());
231 * Delete/truncate the PID file
233 static void unlink_pidfile()
235 /* because unlinking the PID file may fail, we truncate it to ensure the
236 * daemon can be properly restarted. one probable cause for this is the
237 * combination of not running as root and the effective user lacking
238 * permissions on the parent dir(s) of the PID file */
241 ignore_result(ftruncate(fileno(pidfile
), 0));
248 * print command line usage and exit
250 static void usage(const char *msg
)
252 if (msg
!= NULL
&& *msg
!= '\0')
254 fprintf(stderr
, "%s\n", msg
);
256 fprintf(stderr
, "Usage: charon\n"
260 " [--debug-<type> <level>]\n"
261 " <type>: log context type (dmn|mgr|ike|chd|job|cfg|knl|net|asn|enc|tnc|imc|imv|pts|tls|esp|lib)\n"
262 " <level>: log verbosity (-1 = silent, 0 = audit, 1 = control,\n"
263 " 2 = controlmore, 3 = raw, 4 = private)\n"
269 * Main function, starts the daemon.
271 int main(int argc
, char *argv
[])
273 struct sigaction action
;
274 int group
, status
= SS_RC_INITIALIZATION_FAILED
;
275 struct utsname utsname
;
277 /* logging for library during initialization, as we have no bus yet */
280 /* initialize library */
281 if (!library_init(NULL
))
284 exit(SS_RC_LIBSTRONGSWAN_INTEGRITY
);
287 if (lib
->integrity
&&
288 !lib
->integrity
->check_file(lib
->integrity
, "charon", argv
[0]))
290 dbg_stderr(DBG_DMN
, 1, "integrity check of charon failed");
292 exit(SS_RC_DAEMON_INTEGRITY
);
295 if (!libhydra_init("charon"))
297 dbg_stderr(DBG_DMN
, 1, "initialization failed - aborting charon");
300 exit(SS_RC_INITIALIZATION_FAILED
);
303 if (!libcharon_init("charon"))
305 dbg_stderr(DBG_DMN
, 1, "initialization failed - aborting charon");
309 /* use CTRL loglevel for default */
310 for (group
= 0; group
< DBG_MAX
; group
++)
312 levels
[group
] = LEVEL_CTRL
;
315 /* handle arguments */
318 struct option long_opts
[] = {
319 { "help", no_argument
, NULL
, 'h' },
320 { "version", no_argument
, NULL
, 'v' },
321 { "use-syslog", no_argument
, NULL
, 'l' },
322 /* TODO: handle "debug-all" */
323 { "debug-dmn", required_argument
, &group
, DBG_DMN
},
324 { "debug-mgr", required_argument
, &group
, DBG_MGR
},
325 { "debug-ike", required_argument
, &group
, DBG_IKE
},
326 { "debug-chd", required_argument
, &group
, DBG_CHD
},
327 { "debug-job", required_argument
, &group
, DBG_JOB
},
328 { "debug-cfg", required_argument
, &group
, DBG_CFG
},
329 { "debug-knl", required_argument
, &group
, DBG_KNL
},
330 { "debug-net", required_argument
, &group
, DBG_NET
},
331 { "debug-asn", required_argument
, &group
, DBG_ASN
},
332 { "debug-enc", required_argument
, &group
, DBG_ENC
},
333 { "debug-tnc", required_argument
, &group
, DBG_TNC
},
334 { "debug-imc", required_argument
, &group
, DBG_IMC
},
335 { "debug-imv", required_argument
, &group
, DBG_IMV
},
336 { "debug-pts", required_argument
, &group
, DBG_PTS
},
337 { "debug-tls", required_argument
, &group
, DBG_TLS
},
338 { "debug-esp", required_argument
, &group
, DBG_ESP
},
339 { "debug-lib", required_argument
, &group
, DBG_LIB
},
343 int c
= getopt_long(argc
, argv
, "", long_opts
, NULL
);
353 printf("Linux strongSwan %s\n", VERSION
);
360 /* option is in group */
361 levels
[group
] = atoi(optarg
);
371 if (!lookup_uid_gid())
373 dbg_stderr(DBG_DMN
, 1, "invalid uid/gid - aborting charon");
377 charon
->load_loggers(charon
, levels
, !use_syslog
);
379 if (uname(&utsname
) != 0)
381 memset(&utsname
, 0, sizeof(utsname
));
383 DBG1(DBG_DMN
, "Starting IKE charon daemon (strongSwan "VERSION
", %s %s, %s)",
384 utsname
.sysname
, utsname
.release
, utsname
.machine
);
387 DBG1(DBG_DMN
, "integrity tests enabled:");
388 DBG1(DBG_DMN
, "lib 'libstrongswan': passed file and segment integrity tests");
389 DBG1(DBG_DMN
, "lib 'libhydra': passed file and segment integrity tests");
390 DBG1(DBG_DMN
, "lib 'libcharon': passed file and segment integrity tests");
391 DBG1(DBG_DMN
, "daemon 'charon': passed file integrity test");
394 /* initialize daemon */
395 if (!charon
->initialize(charon
,
396 lib
->settings
->get_str(lib
->settings
, "charon.load", PLUGINS
)))
398 DBG1(DBG_DMN
, "initialization failed - aborting charon");
404 DBG1(DBG_DMN
, "charon already running (\""PID_FILE
"\" exists)");
408 if (!charon
->caps
->drop(charon
->caps
))
410 DBG1(DBG_DMN
, "capability dropping failed - aborting charon");
414 /* add handler for SEGV and ILL,
415 * INT, TERM and HUP are handled by sigwait() in run() */
416 action
.sa_handler
= segv_handler
;
418 sigemptyset(&action
.sa_mask
);
419 sigaddset(&action
.sa_mask
, SIGINT
);
420 sigaddset(&action
.sa_mask
, SIGTERM
);
421 sigaddset(&action
.sa_mask
, SIGHUP
);
422 sigaction(SIGSEGV
, &action
, NULL
);
423 sigaction(SIGILL
, &action
, NULL
);
424 sigaction(SIGBUS
, &action
, NULL
);
425 action
.sa_handler
= SIG_IGN
;
426 sigaction(SIGPIPE
, &action
, NULL
);
428 pthread_sigmask(SIG_SETMASK
, &action
.sa_mask
, NULL
);
430 /* start daemon (i.e. the threads in the thread-pool) */
431 charon
->start(charon
);
433 /* main thread goes to run loop */
436 /* normal termination, cleanup and exit */