[deb_shairplay.git] / src / lib / raop.c

/**
 *  Copyright (C) 2011-2012  Juho Vähä-Herttua
 *
 *  This library is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU Lesser General Public
 *  License as published by the Free Software Foundation; either
 *  version 2.1 of the License, or (at your option) any later version.
 *
 *  This library is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 *  Lesser General Public License for more details.
 */

#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <assert.h>

#include "raop.h"
#include "raop_rtp.h"
#include "rsakey.h"
#include "digest.h"
#include "httpd.h"
#include "sdp.h"

#include "global.h"
#include "utils.h"
#include "netutils.h"
#include "logger.h"
#include "compat.h"

/* Actually 345 bytes for 2048-bit key */
#define MAX_SIGNATURE_LEN 512

/* Let's just decide on some length */
#define MAX_PASSWORD_LEN 64

/* MD5 as hex fits here */
#define MAX_NONCE_LEN 32

struct raop_s {
	/* Callbacks for audio */
	raop_callbacks_t callbacks;

	/* Logger instance */
	logger_t *logger;

	/* HTTP daemon and RSA key */
	httpd_t *httpd;
	rsakey_t *rsakey;

	/* Hardware address information */
	unsigned char hwaddr[MAX_HWADDR_LEN];
	int hwaddrlen;

	/* Password information */
	char password[MAX_PASSWORD_LEN+1];
};

struct raop_conn_s {
	raop_t *raop;
	raop_rtp_t *raop_rtp;

	unsigned char *local;
	int locallen;

	unsigned char *remote;
	int remotelen;

	char nonce[MAX_NONCE_LEN+1];
};
typedef struct raop_conn_s raop_conn_t;

static void *
conn_init(void *opaque, unsigned char *local, int locallen, unsigned char *remote, int remotelen)
{
	raop_conn_t *conn;

	conn = calloc(1, sizeof(raop_conn_t));
	if (!conn) {
		return NULL;
	}
	conn->raop = opaque;
	conn->raop_rtp = NULL;

	if (locallen == 4) {
		logger_log(conn->raop->logger, LOGGER_INFO,
		           "Local: %d.%d.%d.%d",
		           local[0], local[1], local[2], local[3]);
	} else if (locallen == 16) {
		logger_log(conn->raop->logger, LOGGER_INFO,
		           "Local: %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x",
		           local[0], local[1], local[2], local[3], local[4], local[5], local[6], local[7],
		           local[8], local[9], local[10], local[11], local[12], local[13], local[14], local[15]);
	}
	if (remotelen == 4) {
		logger_log(conn->raop->logger, LOGGER_INFO,
		           "Remote: %d.%d.%d.%d",
		           remote[0], remote[1], remote[2], remote[3]);
	} else if (remotelen == 16) {
		logger_log(conn->raop->logger, LOGGER_INFO,
		           "Remote: %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x",
		           remote[0], remote[1], remote[2], remote[3], remote[4], remote[5], remote[6], remote[7],
		           remote[8], remote[9], remote[10], remote[11], remote[12], remote[13], remote[14], remote[15]);
	}

	conn->local = malloc(locallen);
	assert(conn->local);
	memcpy(conn->local, local, locallen);

	conn->remote = malloc(remotelen);
	assert(conn->remote);
	memcpy(conn->remote, remote, remotelen);

	conn->locallen = locallen;
	conn->remotelen = remotelen;

	digest_generate_nonce(conn->nonce, sizeof(conn->nonce));
	return conn;
}

static void
conn_request(void *ptr, http_request_t *request, http_response_t **response)
{
	raop_conn_t *conn = ptr;
	raop_t *raop = conn->raop;

	http_response_t *res;
	const char *method;
	const char *cseq;
	const char *challenge;
	int require_auth = 0;

	method = http_request_get_method(request);
	cseq = http_request_get_header(request, "CSeq");
	if (!method || !cseq) {
		return;
	}

	res = http_response_init("RTSP/1.0", 200, "OK");
	if (strlen(raop->password)) {
		const char *authorization;

		authorization = http_request_get_header(request, "Authorization");
		if (authorization) {
			logger_log(conn->raop->logger, LOGGER_DEBUG, "Our nonce: %s", conn->nonce);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "Authorization: %s", authorization);
		}
		if (!digest_is_valid("AppleTV", raop->password, conn->nonce, method, http_request_get_url(request), authorization)) {
			char *authstr;
			int authstrlen;

			/* Allocate the authenticate string */
			authstrlen = sizeof("Digest realm=\"AppleTV\", nonce=\"\"") + sizeof(conn->nonce) + 1;
			authstr = malloc(authstrlen);

			/* Concatenate the authenticate string */
			memset(authstr, 0, authstrlen);
			strcat(authstr, "Digest realm=\"AppleTV\", nonce=\"");
			strcat(authstr, conn->nonce);
			strcat(authstr, "\"");

			/* Construct a new response */
			require_auth = 1;
			http_response_destroy(res);
			res = http_response_init("RTSP/1.0", 401, "Unauthorized");
			http_response_add_header(res, "WWW-Authenticate", authstr);
			free(authstr);
		} else {
			logger_log(conn->raop->logger, LOGGER_DEBUG, "AUTHENTICATION SUCCESS!");
		}
	}

	http_response_add_header(res, "CSeq", cseq);
	http_response_add_header(res, "Apple-Jack-Status", "connected; type=analog");

	challenge = http_request_get_header(request, "Apple-Challenge");
	if (!require_auth && challenge) {
		char signature[MAX_SIGNATURE_LEN];

		memset(signature, 0, sizeof(signature));
		rsakey_sign(raop->rsakey, signature, sizeof(signature), challenge,
		            conn->local, conn->locallen, raop->hwaddr, raop->hwaddrlen);
		http_response_add_header(res, "Apple-Response", signature);

		logger_log(conn->raop->logger, LOGGER_DEBUG, "Got challenge: %s", challenge);
		logger_log(conn->raop->logger, LOGGER_DEBUG, "Got response: %s", signature);
	}

	if (require_auth) {
		/* Do nothing in case of authentication request */
	} else if (!strcmp(method, "OPTIONS")) {
		http_response_add_header(res, "Public", "ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER");
	} else if (!strcmp(method, "ANNOUNCE")) {
		const char *data;
		int datalen;

		unsigned char aeskey[16];
		unsigned char aesiv[16];
		int aeskeylen, aesivlen;

		data = http_request_get_data(request, &datalen);
		if (data) {
			sdp_t *sdp;
			const char *remotestr, *rtpmapstr, *fmtpstr, *aeskeystr, *aesivstr;

			sdp = sdp_init(data, datalen);
			remotestr = sdp_get_connection(sdp);
			rtpmapstr = sdp_get_rtpmap(sdp);
			fmtpstr = sdp_get_fmtp(sdp);
			aeskeystr = sdp_get_rsaaeskey(sdp);
			aesivstr = sdp_get_aesiv(sdp);

			logger_log(conn->raop->logger, LOGGER_DEBUG, "connection: %s", remotestr);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "rtpmap: %s", rtpmapstr);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "fmtp: %s", fmtpstr);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "rsaaeskey: %s", aeskeystr);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "aesiv: %s", aesivstr);

			aeskeylen = rsakey_decrypt(raop->rsakey, aeskey, sizeof(aeskey), aeskeystr);
			aesivlen = rsakey_parseiv(raop->rsakey, aesiv, sizeof(aesiv), aesivstr);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "aeskeylen: %d", aeskeylen);
			logger_log(conn->raop->logger, LOGGER_DEBUG, "aesivlen: %d", aesivlen);

			if (conn->raop_rtp) {
				/* This should never happen */
				raop_rtp_destroy(conn->raop_rtp);
				conn->raop_rtp = NULL;
			}
			conn->raop_rtp = raop_rtp_init(raop->logger, &raop->callbacks, remotestr, rtpmapstr, fmtpstr, aeskey, aesiv);
			if (!conn->raop_rtp) {
				logger_log(conn->raop->logger, LOGGER_ERR, "Error initializing the audio decoder");
				http_response_set_disconnect(res, 1);
			}
			sdp_destroy(sdp);
		}
	} else if (!strcmp(method, "SETUP")) {
		unsigned short remote_cport=0, remote_tport=0;
		unsigned short cport=0, tport=0, dport=0;
		const char *transport;
		char buffer[1024];
		int use_udp;

		transport = http_request_get_header(request, "Transport");
		assert(transport);

		logger_log(conn->raop->logger, LOGGER_INFO, "Transport: %s", transport);
		use_udp = strncmp(transport, "RTP/AVP/TCP", 11);
		if (use_udp) {
			char *original, *current, *tmpstr;

			current = original = strdup(transport);
			if (original) {
				while ((tmpstr = utils_strsep(&current, ";")) != NULL) {
					unsigned short value;
					int ret;

					ret = sscanf(tmpstr, "control_port=%hu", &value);
					if (ret == 1) {
						logger_log(conn->raop->logger, LOGGER_DEBUG, "Found remote control port: %hu", value);
						remote_cport = value;
					}
					ret = sscanf(tmpstr, "timing_port=%hu", &value);
					if (ret == 1) {
						logger_log(conn->raop->logger, LOGGER_DEBUG, "Found remote timing port: %hu", value);
						remote_tport = value;
					}
				}
			}
			free(original);
		}
		if (conn->raop_rtp) {
			raop_rtp_start(conn->raop_rtp, use_udp, remote_cport, remote_tport, &cport, &tport, &dport);
		} else {
			logger_log(conn->raop->logger, LOGGER_ERR, "RAOP not initialized at SETUP, playing will fail!");
			http_response_set_disconnect(res, 1);
		}

		memset(buffer, 0, sizeof(buffer));
		if (use_udp) {
			snprintf(buffer, sizeof(buffer)-1,
			         "RTP/AVP/UDP;unicast;mode=record;timing_port=%hu;events;control_port=%hu;server_port=%hu",
			         tport, cport, dport);
		} else {
			snprintf(buffer, sizeof(buffer)-1,
			         "RTP/AVP/TCP;unicast;interleaved=0-1;mode=record;server_port=%u",
			         dport);
		}
		logger_log(conn->raop->logger, LOGGER_INFO, "Responding with %s", buffer);
		http_response_add_header(res, "Transport", buffer);
		http_response_add_header(res, "Session", "DEADBEEF");
	} else if (!strcmp(method, "SET_PARAMETER")) {
		const char *content_type;
		const char *data;
		int datalen;

		content_type = http_request_get_header(request, "Content-Type");
		data = http_request_get_data(request, &datalen);
		if (!strcmp(content_type, "text/parameters")) {
			char *datastr;
			datastr = calloc(1, datalen+1);
			if (data && datastr && conn->raop_rtp) {
				memcpy(datastr, data, datalen);
				if (!strncmp(datastr, "volume: ", 8)) {
					float vol = 0.0;
					sscanf(datastr+8, "%f", &vol);
					raop_rtp_set_volume(conn->raop_rtp, vol);
				}
			} else if (!conn->raop_rtp) {
				logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER volume");
			}
			free(datastr);
		} else if (!strcmp(content_type, "image/jpeg")) {
			logger_log(conn->raop->logger, LOGGER_INFO, "Got image data of %d bytes", datalen);
			if (conn->raop_rtp) {
				raop_rtp_set_coverart(conn->raop_rtp, data, datalen);
			} else {
				logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER coverart");
			}
		} else if (!strcmp(content_type, "application/x-dmap-tagged")) {
			logger_log(conn->raop->logger, LOGGER_INFO, "Got metadata of %d bytes", datalen);
			if (conn->raop_rtp) {
				raop_rtp_set_metadata(conn->raop_rtp, data, datalen);
			} else {
				logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER metadata");
			}
		}
	} else if (!strcmp(method, "FLUSH")) {
		const char *rtpinfo;
		int next_seq = -1;

		rtpinfo = http_request_get_header(request, "RTP-Info");
		if (rtpinfo) {
			logger_log(conn->raop->logger, LOGGER_INFO, "Flush with RTP-Info: %s", rtpinfo);
			if (!strncmp(rtpinfo, "seq=", 4)) {
				next_seq = strtol(rtpinfo+4, NULL, 10);
			}
		}
		if (conn->raop_rtp) {
			raop_rtp_flush(conn->raop_rtp, next_seq);
		} else {
			logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at FLUSH");
		}
	} else if (!strcmp(method, "TEARDOWN")) {
		http_response_add_header(res, "Connection", "close");
		if (conn->raop_rtp) {
			/* Destroy our RTP session */
			raop_rtp_stop(conn->raop_rtp);
			raop_rtp_destroy(conn->raop_rtp);
			conn->raop_rtp = NULL;
		}
	}
	http_response_finish(res, NULL, 0);

	logger_log(conn->raop->logger, LOGGER_DEBUG, "Handled request %s with URL %s", method, http_request_get_url(request));
	*response = res;
}

static void
conn_destroy(void *ptr)
{
	raop_conn_t *conn = ptr;

	if (conn->raop_rtp) {
		/* This is done in case TEARDOWN was not called */
		raop_rtp_destroy(conn->raop_rtp);
	}
	free(conn->local);
	free(conn->remote);
	free(conn);
}

raop_t *
raop_init(int max_clients, raop_callbacks_t *callbacks, const char *pemkey, int *error)
{
	raop_t *raop;
	httpd_t *httpd;
	rsakey_t *rsakey;
	httpd_callbacks_t httpd_cbs;

	assert(callbacks);
	assert(max_clients > 0);
	assert(max_clients < 100);
	assert(pemkey);

	/* Initialize the network */
	if (netutils_init() < 0) {
		return NULL;
	}

	/* Validate the callbacks structure */
	if (!callbacks->audio_init ||
	    !callbacks->audio_process ||
	    !callbacks->audio_destroy) {
		return NULL;
	}

	/* Allocate the raop_t structure */
	raop = calloc(1, sizeof(raop_t));
	if (!raop) {
		return NULL;
	}

	/* Initialize the logger */
	raop->logger = logger_init();

	/* Set HTTP callbacks to our handlers */
	memset(&httpd_cbs, 0, sizeof(httpd_cbs));
	httpd_cbs.opaque = raop;
	httpd_cbs.conn_init = &conn_init;
	httpd_cbs.conn_request = &conn_request;
	httpd_cbs.conn_destroy = &conn_destroy;

	/* Initialize the http daemon */
	httpd = httpd_init(raop->logger, &httpd_cbs, max_clients);
	if (!httpd) {
		free(raop);
		return NULL;
	}

	/* Copy callbacks structure */
	memcpy(&raop->callbacks, callbacks, sizeof(raop_callbacks_t));

	/* Initialize RSA key handler */
	rsakey = rsakey_init_pem(pemkey);
	if (!rsakey) {
		free(httpd);
		free(raop);
		return NULL;
	}

	raop->httpd = httpd;
	raop->rsakey = rsakey;

	return raop;
}

raop_t *
raop_init_from_keyfile(int max_clients, raop_callbacks_t *callbacks, const char *keyfile, int *error)
{
	raop_t *raop;
	char *pemstr;

	if (utils_read_file(&pemstr, keyfile) < 0) {
		return NULL;
	}
	raop = raop_init(max_clients, callbacks, pemstr, error);
	free(pemstr);
	return raop;
}

void
raop_destroy(raop_t *raop)
{
	if (raop) {
		raop_stop(raop);

		httpd_destroy(raop->httpd);
		rsakey_destroy(raop->rsakey);
		logger_destroy(raop->logger);
		free(raop);

		/* Cleanup the network */
		netutils_cleanup();
	}
}

int
raop_is_running(raop_t *raop)
{
	assert(raop);

	return httpd_is_running(raop->httpd);
}

void
raop_set_log_level(raop_t *raop, int level)
{
	assert(raop);

	logger_set_level(raop->logger, level);
}

void
raop_set_log_callback(raop_t *raop, raop_log_callback_t callback, void *cls)
{
	assert(raop);

	logger_set_callback(raop->logger, callback, cls);
}

int
raop_start(raop_t *raop, unsigned short *port, const char *hwaddr, int hwaddrlen, const char *password)
{
	assert(raop);
	assert(port);
	assert(hwaddr);

	/* Validate hardware address */
	if (hwaddrlen > MAX_HWADDR_LEN) {
		return -1;
	}

	memset(raop->password, 0, sizeof(raop->password));
	if (password) {
		/* Validate password */
		if (strlen(password) > MAX_PASSWORD_LEN) {
			return -1;
		}

		/* Copy password to the raop structure */
		strncpy(raop->password, password, MAX_PASSWORD_LEN);
	}

	/* Copy hwaddr to the raop structure */
	memcpy(raop->hwaddr, hwaddr, hwaddrlen);
	raop->hwaddrlen = hwaddrlen;

	return httpd_start(raop->httpd, port);
}

void
raop_stop(raop_t *raop)
{
	assert(raop);

	httpd_stop(raop->httpd);
}
Commit	Line	Data
23e7e3ae JVH	1	/**
	2	* Copyright (C) 2011-2012 Juho Vähä-Herttua
	3	*
	4	* This library is free software; you can redistribute it and/or
	5	* modify it under the terms of the GNU Lesser General Public
	6	* License as published by the Free Software Foundation; either
	7	* version 2.1 of the License, or (at your option) any later version.
	8	*
	9	* This library is distributed in the hope that it will be useful,
	10	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	11	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	12	* Lesser General Public License for more details.
	13	*/
	14
2340bcd3 JVH	15	#include <stdlib.h>
	16	#include <stdio.h>
	17	#include <string.h>
	18	#include <assert.h>
	19
	20	#include "raop.h"
	21	#include "raop_rtp.h"
	22	#include "rsakey.h"
e4169f77	23	#include "digest.h"
2340bcd3 JVH	24	#include "httpd.h"
	25	#include "sdp.h"
	26
	27	#include "global.h"
	28	#include "utils.h"
	29	#include "netutils.h"
	30	#include "logger.h"
566c9bf8	31	#include "compat.h"
2340bcd3 JVH	32
	33	/* Actually 345 bytes for 2048-bit key */
	34	#define MAX_SIGNATURE_LEN 512
	35
e4169f77 JVH	36	/* Let's just decide on some length */
	37	#define MAX_PASSWORD_LEN 64
	38
	39	/* MD5 as hex fits here */
268f72c8	40	#define MAX_NONCE_LEN 32
e4169f77	41
2340bcd3 JVH	42	struct raop_s {
	43	/* Callbacks for audio */
	44	raop_callbacks_t callbacks;
	45
	46	/* Logger instance */
fda63ad4	47	logger_t *logger;
2340bcd3 JVH	48
	49	/* HTTP daemon and RSA key */
	50	httpd_t *httpd;
	51	rsakey_t *rsakey;
	52
	53	/* Hardware address information */
	54	unsigned char hwaddr[MAX_HWADDR_LEN];
	55	int hwaddrlen;
e4169f77 JVH	56
	57	/* Password information */
	58	char password[MAX_PASSWORD_LEN+1];
2340bcd3 JVH	59	};
	60
	61	struct raop_conn_s {
	62	raop_t *raop;
	63	raop_rtp_t *raop_rtp;
	64
	65	unsigned char *local;
	66	int locallen;
	67
	68	unsigned char *remote;
	69	int remotelen;
e4169f77 JVH	70
e4169f77 JVH	71	char nonce[MAX_NONCE_LEN+1];
2340bcd3 JVH	72	};
	73	typedef struct raop_conn_s raop_conn_t;
	74
	75	static void *
	76	conn_init(void opaque, unsigned char local, int locallen, unsigned char *remote, int remotelen)
	77	{
	78	raop_conn_t *conn;
2340bcd3 JVH	79
	80	conn = calloc(1, sizeof(raop_conn_t));
	81	if (!conn) {
	82	return NULL;
	83	}
	84	conn->raop = opaque;
	85	conn->raop_rtp = NULL;
	86
c891f978	87	if (locallen == 4) {
fda63ad4	88	logger_log(conn->raop->logger, LOGGER_INFO,
46212791	89	"Local: %d.%d.%d.%d",
c891f978 JVH	90	local[0], local[1], local[2], local[3]);
c891f978 JVH	91	} else if (locallen == 16) {
fda63ad4	92	logger_log(conn->raop->logger, LOGGER_INFO,
46212791	93	"Local: %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x",
c891f978 JVH	94	local[0], local[1], local[2], local[3], local[4], local[5], local[6], local[7],
c891f978 JVH	95	local[8], local[9], local[10], local[11], local[12], local[13], local[14], local[15]);
2340bcd3	96	}
c891f978	97	if (remotelen == 4) {
fda63ad4	98	logger_log(conn->raop->logger, LOGGER_INFO,
46212791	99	"Remote: %d.%d.%d.%d",
c891f978 JVH	100	remote[0], remote[1], remote[2], remote[3]);
c891f978 JVH	101	} else if (remotelen == 16) {
fda63ad4	102	logger_log(conn->raop->logger, LOGGER_INFO,
46212791	103	"Remote: %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x",
c891f978 JVH	104	remote[0], remote[1], remote[2], remote[3], remote[4], remote[5], remote[6], remote[7],
c891f978 JVH	105	remote[8], remote[9], remote[10], remote[11], remote[12], remote[13], remote[14], remote[15]);
2340bcd3	106	}
2340bcd3 JVH	107
	108	conn->local = malloc(locallen);
	109	assert(conn->local);
	110	memcpy(conn->local, local, locallen);
	111
	112	conn->remote = malloc(remotelen);
	113	assert(conn->remote);
	114	memcpy(conn->remote, remote, remotelen);
	115
	116	conn->locallen = locallen;
	117	conn->remotelen = remotelen;
e4169f77 JVH	118
e4169f77 JVH	119	digest_generate_nonce(conn->nonce, sizeof(conn->nonce));
2340bcd3 JVH	120	return conn;
	121	}
	122
	123	static void
	124	conn_request(void ptr, http_request_t request, http_response_t **response)
	125	{
	126	raop_conn_t *conn = ptr;
	127	raop_t *raop = conn->raop;
	128
	129	http_response_t *res;
	130	const char *method;
	131	const char *cseq;
	132	const char *challenge;
e4169f77	133	int require_auth = 0;
2340bcd3 JVH	134
	135	method = http_request_get_method(request);
	136	cseq = http_request_get_header(request, "CSeq");
	137	if (!method \|\| !cseq) {
	138	return;
	139	}
	140
	141	res = http_response_init("RTSP/1.0", 200, "OK");
e4169f77 JVH	142	if (strlen(raop->password)) {
	143	const char *authorization;
	144
	145	authorization = http_request_get_header(request, "Authorization");
	146	if (authorization) {
fda63ad4 JVH	147	logger_log(conn->raop->logger, LOGGER_DEBUG, "Our nonce: %s", conn->nonce);
fda63ad4 JVH	148	logger_log(conn->raop->logger, LOGGER_DEBUG, "Authorization: %s", authorization);
e4169f77	149	}
268f72c8	150	if (!digest_is_valid("AppleTV", raop->password, conn->nonce, method, http_request_get_url(request), authorization)) {
e4169f77 JVH	151	char *authstr;
	152	int authstrlen;
	153
	154	/* Allocate the authenticate string */
	155	authstrlen = sizeof("Digest realm=\"AppleTV\", nonce=\"\"") + sizeof(conn->nonce) + 1;
	156	authstr = malloc(authstrlen);
	157
	158	/* Concatenate the authenticate string */
	159	memset(authstr, 0, authstrlen);
	160	strcat(authstr, "Digest realm=\"AppleTV\", nonce=\"");
	161	strcat(authstr, conn->nonce);
	162	strcat(authstr, "\"");
	163
	164	/* Construct a new response */
	165	require_auth = 1;
	166	http_response_destroy(res);
	167	res = http_response_init("RTSP/1.0", 401, "Unauthorized");
	168	http_response_add_header(res, "WWW-Authenticate", authstr);
	169	free(authstr);
	170	} else {
fda63ad4	171	logger_log(conn->raop->logger, LOGGER_DEBUG, "AUTHENTICATION SUCCESS!");
e4169f77 JVH	172	}
	173	}
	174
2340bcd3 JVH	175	http_response_add_header(res, "CSeq", cseq);
	176	http_response_add_header(res, "Apple-Jack-Status", "connected; type=analog");
	177
	178	challenge = http_request_get_header(request, "Apple-Challenge");
91c41e1d	179	if (!require_auth && challenge) {
2340bcd3 JVH	180	char signature[MAX_SIGNATURE_LEN];
	181
	182	memset(signature, 0, sizeof(signature));
	183	rsakey_sign(raop->rsakey, signature, sizeof(signature), challenge,
	184	conn->local, conn->locallen, raop->hwaddr, raop->hwaddrlen);
2340bcd3	185	http_response_add_header(res, "Apple-Response", signature);
c891f978	186
fda63ad4 JVH	187	logger_log(conn->raop->logger, LOGGER_DEBUG, "Got challenge: %s", challenge);
fda63ad4 JVH	188	logger_log(conn->raop->logger, LOGGER_DEBUG, "Got response: %s", signature);
2340bcd3	189	}
e4169f77 JVH	190
	191	if (require_auth) {
	192	/* Do nothing in case of authentication request */
	193	} else if (!strcmp(method, "OPTIONS")) {
2340bcd3 JVH	194	http_response_add_header(res, "Public", "ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER");
	195	} else if (!strcmp(method, "ANNOUNCE")) {
	196	const char *data;
	197	int datalen;
	198
	199	unsigned char aeskey[16];
	200	unsigned char aesiv[16];
	201	int aeskeylen, aesivlen;
	202
	203	data = http_request_get_data(request, &datalen);
	204	if (data) {
ba0970e1	205	sdp_t *sdp;
597bc69b	206	const char remotestr, rtpmapstr, fmtpstr, aeskeystr, *aesivstr;
ba0970e1 JVH	207
	208	sdp = sdp_init(data, datalen);
	209	remotestr = sdp_get_connection(sdp);
597bc69b	210	rtpmapstr = sdp_get_rtpmap(sdp);
ba0970e1 JVH	211	fmtpstr = sdp_get_fmtp(sdp);
	212	aeskeystr = sdp_get_rsaaeskey(sdp);
	213	aesivstr = sdp_get_aesiv(sdp);
	214
fda63ad4	215	logger_log(conn->raop->logger, LOGGER_DEBUG, "connection: %s", remotestr);
597bc69b	216	logger_log(conn->raop->logger, LOGGER_DEBUG, "rtpmap: %s", rtpmapstr);
fda63ad4 JVH	217	logger_log(conn->raop->logger, LOGGER_DEBUG, "fmtp: %s", fmtpstr);
	218	logger_log(conn->raop->logger, LOGGER_DEBUG, "rsaaeskey: %s", aeskeystr);
	219	logger_log(conn->raop->logger, LOGGER_DEBUG, "aesiv: %s", aesivstr);
ba0970e1 JVH	220
	221	aeskeylen = rsakey_decrypt(raop->rsakey, aeskey, sizeof(aeskey), aeskeystr);
	222	aesivlen = rsakey_parseiv(raop->rsakey, aesiv, sizeof(aesiv), aesivstr);
fda63ad4 JVH	223	logger_log(conn->raop->logger, LOGGER_DEBUG, "aeskeylen: %d", aeskeylen);
fda63ad4 JVH	224	logger_log(conn->raop->logger, LOGGER_DEBUG, "aesivlen: %d", aesivlen);
2340bcd3	225
c891f978 JVH	226	if (conn->raop_rtp) {
	227	/* This should never happen */
	228	raop_rtp_destroy(conn->raop_rtp);
	229	conn->raop_rtp = NULL;
	230	}
597bc69b	231	conn->raop_rtp = raop_rtp_init(raop->logger, &raop->callbacks, remotestr, rtpmapstr, fmtpstr, aeskey, aesiv);
fd7070e2 JVH	232	if (!conn->raop_rtp) {
fd7070e2 JVH	233	logger_log(conn->raop->logger, LOGGER_ERR, "Error initializing the audio decoder");
c5f65268	234	http_response_set_disconnect(res, 1);
fd7070e2	235	}
2340bcd3 JVH	236	sdp_destroy(sdp);
	237	}
	238	} else if (!strcmp(method, "SETUP")) {
ba0970e1	239	unsigned short remote_cport=0, remote_tport=0;
2340bcd3 JVH	240	unsigned short cport=0, tport=0, dport=0;
	241	const char *transport;
	242	char buffer[1024];
	243	int use_udp;
	244
	245	transport = http_request_get_header(request, "Transport");
	246	assert(transport);
	247
fda63ad4	248	logger_log(conn->raop->logger, LOGGER_INFO, "Transport: %s", transport);
2340bcd3	249	use_udp = strncmp(transport, "RTP/AVP/TCP", 11);
ba0970e1 JVH	250	if (use_udp) {
	251	char original, current, *tmpstr;
	252
	253	current = original = strdup(transport);
	254	if (original) {
	255	while ((tmpstr = utils_strsep(&current, ";")) != NULL) {
	256	unsigned short value;
	257	int ret;
	258
	259	ret = sscanf(tmpstr, "control_port=%hu", &value);
	260	if (ret == 1) {
fda63ad4	261	logger_log(conn->raop->logger, LOGGER_DEBUG, "Found remote control port: %hu", value);
ba0970e1 JVH	262	remote_cport = value;
	263	}
	264	ret = sscanf(tmpstr, "timing_port=%hu", &value);
	265	if (ret == 1) {
fda63ad4	266	logger_log(conn->raop->logger, LOGGER_DEBUG, "Found remote timing port: %hu", value);
ba0970e1 JVH	267	remote_tport = value;
	268	}
	269	}
	270	}
	271	free(original);
	272	}
fd7070e2 JVH	273	if (conn->raop_rtp) {
	274	raop_rtp_start(conn->raop_rtp, use_udp, remote_cport, remote_tport, &cport, &tport, &dport);
	275	} else {
c5f65268 JVH	276	logger_log(conn->raop->logger, LOGGER_ERR, "RAOP not initialized at SETUP, playing will fail!");
c5f65268 JVH	277	http_response_set_disconnect(res, 1);
fd7070e2	278	}
2340bcd3 JVH	279
	280	memset(buffer, 0, sizeof(buffer));
	281	if (use_udp) {
	282	snprintf(buffer, sizeof(buffer)-1,
ba0970e1	283	"RTP/AVP/UDP;unicast;mode=record;timing_port=%hu;events;control_port=%hu;server_port=%hu",
2340bcd3 JVH	284	tport, cport, dport);
	285	} else {
	286	snprintf(buffer, sizeof(buffer)-1,
	287	"RTP/AVP/TCP;unicast;interleaved=0-1;mode=record;server_port=%u",
	288	dport);
	289	}
fda63ad4	290	logger_log(conn->raop->logger, LOGGER_INFO, "Responding with %s", buffer);
2340bcd3 JVH	291	http_response_add_header(res, "Transport", buffer);
	292	http_response_add_header(res, "Session", "DEADBEEF");
	293	} else if (!strcmp(method, "SET_PARAMETER")) {
036dec08	294	const char *content_type;
2340bcd3 JVH	295	const char *data;
2340bcd3 JVH	296	int datalen;
2340bcd3	297
036dec08	298	content_type = http_request_get_header(request, "Content-Type");
2340bcd3	299	data = http_request_get_data(request, &datalen);
036dec08 JVH	300	if (!strcmp(content_type, "text/parameters")) {
	301	char *datastr;
	302	datastr = calloc(1, datalen+1);
	303	if (data && datastr && conn->raop_rtp) {
	304	memcpy(datastr, data, datalen);
	305	if (!strncmp(datastr, "volume: ", 8)) {
	306	float vol = 0.0;
	307	sscanf(datastr+8, "%f", &vol);
	308	raop_rtp_set_volume(conn->raop_rtp, vol);
	309	}
fd7070e2 JVH	310	} else if (!conn->raop_rtp) {
fd7070e2 JVH	311	logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER volume");
2340bcd3	312	}
036dec08 JVH	313	free(datastr);
036dec08 JVH	314	} else if (!strcmp(content_type, "image/jpeg")) {
fda63ad4	315	logger_log(conn->raop->logger, LOGGER_INFO, "Got image data of %d bytes", datalen);
fd7070e2 JVH	316	if (conn->raop_rtp) {
	317	raop_rtp_set_coverart(conn->raop_rtp, data, datalen);
	318	} else {
	319	logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER coverart");
	320	}
036dec08	321	} else if (!strcmp(content_type, "application/x-dmap-tagged")) {
fda63ad4	322	logger_log(conn->raop->logger, LOGGER_INFO, "Got metadata of %d bytes", datalen);
fd7070e2 JVH	323	if (conn->raop_rtp) {
	324	raop_rtp_set_metadata(conn->raop_rtp, data, datalen);
	325	} else {
	326	logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER metadata");
	327	}
2340bcd3 JVH	328	}
	329	} else if (!strcmp(method, "FLUSH")) {
	330	const char *rtpinfo;
	331	int next_seq = -1;
	332
	333	rtpinfo = http_request_get_header(request, "RTP-Info");
c891f978	334	if (rtpinfo) {
fda63ad4	335	logger_log(conn->raop->logger, LOGGER_INFO, "Flush with RTP-Info: %s", rtpinfo);
c891f978 JVH	336	if (!strncmp(rtpinfo, "seq=", 4)) {
	337	next_seq = strtol(rtpinfo+4, NULL, 10);
	338	}
	339	}
	340	if (conn->raop_rtp) {
	341	raop_rtp_flush(conn->raop_rtp, next_seq);
fd7070e2 JVH	342	} else {
fd7070e2 JVH	343	logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at FLUSH");
2340bcd3	344	}
2340bcd3 JVH	345	} else if (!strcmp(method, "TEARDOWN")) {
2340bcd3 JVH	346	http_response_add_header(res, "Connection", "close");
c891f978 JVH	347	if (conn->raop_rtp) {
	348	/* Destroy our RTP session */
	349	raop_rtp_stop(conn->raop_rtp);
	350	raop_rtp_destroy(conn->raop_rtp);
	351	conn->raop_rtp = NULL;
	352	}
2340bcd3 JVH	353	}
	354	http_response_finish(res, NULL, 0);
	355
c5f65268	356	logger_log(conn->raop->logger, LOGGER_DEBUG, "Handled request %s with URL %s", method, http_request_get_url(request));
2340bcd3 JVH	357	*response = res;
	358	}
	359
	360	static void
	361	conn_destroy(void *ptr)
	362	{
	363	raop_conn_t *conn = ptr;
	364
	365	if (conn->raop_rtp) {
c891f978	366	/* This is done in case TEARDOWN was not called */
2340bcd3 JVH	367	raop_rtp_destroy(conn->raop_rtp);
	368	}
	369	free(conn->local);
	370	free(conn->remote);
	371	free(conn);
	372	}
	373
	374	raop_t *
1d0adde5	375	raop_init(int max_clients, raop_callbacks_t callbacks, const char pemkey, int *error)
2340bcd3 JVH	376	{
	377	raop_t *raop;
	378	httpd_t *httpd;
	379	rsakey_t *rsakey;
	380	httpd_callbacks_t httpd_cbs;
	381
	382	assert(callbacks);
72fe063c JVH	383	assert(max_clients > 0);
72fe063c JVH	384	assert(max_clients < 100);
2340bcd3	385	assert(pemkey);
2340bcd3 JVH	386
	387	/* Initialize the network */
	388	if (netutils_init() < 0) {
	389	return NULL;
	390	}
	391
	392	/* Validate the callbacks structure */
b4cc5b07 JVH	393	if (!callbacks->audio_init \|\|
b4cc5b07 JVH	394	!callbacks->audio_process \|\|
2340bcd3 JVH	395	!callbacks->audio_destroy) {
	396	return NULL;
	397	}
	398
2340bcd3 JVH	399	/* Allocate the raop_t structure */
	400	raop = calloc(1, sizeof(raop_t));
	401	if (!raop) {
	402	return NULL;
	403	}
	404
	405	/* Initialize the logger */
fda63ad4	406	raop->logger = logger_init();
2340bcd3 JVH	407
	408	/* Set HTTP callbacks to our handlers */
	409	memset(&httpd_cbs, 0, sizeof(httpd_cbs));
	410	httpd_cbs.opaque = raop;
	411	httpd_cbs.conn_init = &conn_init;
	412	httpd_cbs.conn_request = &conn_request;
	413	httpd_cbs.conn_destroy = &conn_destroy;
	414
	415	/* Initialize the http daemon */
462c72aa	416	httpd = httpd_init(raop->logger, &httpd_cbs, max_clients);
2340bcd3 JVH	417	if (!httpd) {
	418	free(raop);
	419	return NULL;
	420	}
	421
	422	/* Copy callbacks structure */
	423	memcpy(&raop->callbacks, callbacks, sizeof(raop_callbacks_t));
	424
	425	/* Initialize RSA key handler */
	426	rsakey = rsakey_init_pem(pemkey);
	427	if (!rsakey) {
	428	free(httpd);
	429	free(raop);
	430	return NULL;
	431	}
	432
	433	raop->httpd = httpd;
	434	raop->rsakey = rsakey;
	435
2340bcd3 JVH	436	return raop;
	437	}
	438
	439	raop_t *
1d0adde5	440	raop_init_from_keyfile(int max_clients, raop_callbacks_t callbacks, const char keyfile, int *error)
2340bcd3 JVH	441	{
	442	raop_t *raop;
	443	char *pemstr;
	444
	445	if (utils_read_file(&pemstr, keyfile) < 0) {
	446	return NULL;
	447	}
1d0adde5	448	raop = raop_init(max_clients, callbacks, pemstr, error);
2340bcd3 JVH	449	free(pemstr);
	450	return raop;
	451	}
	452
	453	void
	454	raop_destroy(raop_t *raop)
	455	{
	456	if (raop) {
	457	raop_stop(raop);
	458
	459	httpd_destroy(raop->httpd);
	460	rsakey_destroy(raop->rsakey);
fda63ad4	461	logger_destroy(raop->logger);
2340bcd3 JVH	462	free(raop);
	463
	464	/* Cleanup the network */
	465	netutils_cleanup();
	466	}
	467	}
	468
5a746b97 JVH	469	int
	470	raop_is_running(raop_t *raop)
	471	{
	472	assert(raop);
	473
	474	return httpd_is_running(raop->httpd);
	475	}
	476
fda63ad4 JVH	477	void
	478	raop_set_log_level(raop_t *raop, int level)
	479	{
	480	assert(raop);
	481
	482	logger_set_level(raop->logger, level);
	483	}
	484
	485	void
2975b4b8	486	raop_set_log_callback(raop_t raop, raop_log_callback_t callback, void cls)
fda63ad4 JVH	487	{
	488	assert(raop);
	489
2975b4b8	490	logger_set_callback(raop->logger, callback, cls);
fda63ad4 JVH	491	}
fda63ad4 JVH	492
2340bcd3	493	int
e4169f77	494	raop_start(raop_t raop, unsigned short port, const char hwaddr, int hwaddrlen, const char password)
2340bcd3 JVH	495	{
	496	assert(raop);
	497	assert(port);
406e9777 JVH	498	assert(hwaddr);
	499
	500	/* Validate hardware address */
	501	if (hwaddrlen > MAX_HWADDR_LEN) {
	502	return -1;
	503	}
	504
a68fedbb JVH	505	memset(raop->password, 0, sizeof(raop->password));
	506	if (password) {
	507	/* Validate password */
	508	if (strlen(password) > MAX_PASSWORD_LEN) {
	509	return -1;
	510	}
	511
	512	/* Copy password to the raop structure */
	513	strncpy(raop->password, password, MAX_PASSWORD_LEN);
e4169f77 JVH	514	}
e4169f77 JVH	515
406e9777 JVH	516	/* Copy hwaddr to the raop structure */
	517	memcpy(raop->hwaddr, hwaddr, hwaddrlen);
	518	raop->hwaddrlen = hwaddrlen;
2340bcd3 JVH	519
	520	return httpd_start(raop->httpd, port);
	521	}
	522
	523	void
	524	raop_stop(raop_t *raop)
	525	{
	526	assert(raop);
	527
	528	httpd_stop(raop->httpd);
	529	}
	530