Make password authentication work on iTunes again, fixes #20.
[deb_shairplay.git] / src / lib / raop.c
CommitLineData
23e7e3ae
JVH
1/**
2 * Copyright (C) 2011-2012 Juho Vähä-Herttua
3 *
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
8 *
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
13 */
14
2340bcd3
JVH
15#include <stdlib.h>
16#include <stdio.h>
17#include <string.h>
18#include <assert.h>
19
20#include "raop.h"
21#include "raop_rtp.h"
22#include "rsakey.h"
e4169f77 23#include "digest.h"
2340bcd3
JVH
24#include "httpd.h"
25#include "sdp.h"
26
27#include "global.h"
28#include "utils.h"
29#include "netutils.h"
30#include "logger.h"
566c9bf8 31#include "compat.h"
2340bcd3
JVH
32
33/* Actually 345 bytes for 2048-bit key */
34#define MAX_SIGNATURE_LEN 512
35
e4169f77
JVH
36/* Let's just decide on some length */
37#define MAX_PASSWORD_LEN 64
38
39/* MD5 as hex fits here */
268f72c8 40#define MAX_NONCE_LEN 32
e4169f77 41
2340bcd3
JVH
42struct raop_s {
43 /* Callbacks for audio */
44 raop_callbacks_t callbacks;
45
46 /* Logger instance */
fda63ad4 47 logger_t *logger;
2340bcd3
JVH
48
49 /* HTTP daemon and RSA key */
50 httpd_t *httpd;
51 rsakey_t *rsakey;
52
53 /* Hardware address information */
54 unsigned char hwaddr[MAX_HWADDR_LEN];
55 int hwaddrlen;
e4169f77
JVH
56
57 /* Password information */
58 char password[MAX_PASSWORD_LEN+1];
2340bcd3
JVH
59};
60
61struct raop_conn_s {
62 raop_t *raop;
63 raop_rtp_t *raop_rtp;
64
65 unsigned char *local;
66 int locallen;
67
68 unsigned char *remote;
69 int remotelen;
e4169f77
JVH
70
71 char nonce[MAX_NONCE_LEN+1];
2340bcd3
JVH
72};
73typedef struct raop_conn_s raop_conn_t;
74
75static void *
76conn_init(void *opaque, unsigned char *local, int locallen, unsigned char *remote, int remotelen)
77{
78 raop_conn_t *conn;
2340bcd3
JVH
79
80 conn = calloc(1, sizeof(raop_conn_t));
81 if (!conn) {
82 return NULL;
83 }
84 conn->raop = opaque;
85 conn->raop_rtp = NULL;
86
c891f978 87 if (locallen == 4) {
fda63ad4 88 logger_log(conn->raop->logger, LOGGER_INFO,
46212791 89 "Local: %d.%d.%d.%d",
c891f978
JVH
90 local[0], local[1], local[2], local[3]);
91 } else if (locallen == 16) {
fda63ad4 92 logger_log(conn->raop->logger, LOGGER_INFO,
46212791 93 "Local: %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x",
c891f978
JVH
94 local[0], local[1], local[2], local[3], local[4], local[5], local[6], local[7],
95 local[8], local[9], local[10], local[11], local[12], local[13], local[14], local[15]);
2340bcd3 96 }
c891f978 97 if (remotelen == 4) {
fda63ad4 98 logger_log(conn->raop->logger, LOGGER_INFO,
46212791 99 "Remote: %d.%d.%d.%d",
c891f978
JVH
100 remote[0], remote[1], remote[2], remote[3]);
101 } else if (remotelen == 16) {
fda63ad4 102 logger_log(conn->raop->logger, LOGGER_INFO,
46212791 103 "Remote: %02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x:%02x%02x",
c891f978
JVH
104 remote[0], remote[1], remote[2], remote[3], remote[4], remote[5], remote[6], remote[7],
105 remote[8], remote[9], remote[10], remote[11], remote[12], remote[13], remote[14], remote[15]);
2340bcd3 106 }
2340bcd3
JVH
107
108 conn->local = malloc(locallen);
109 assert(conn->local);
110 memcpy(conn->local, local, locallen);
111
112 conn->remote = malloc(remotelen);
113 assert(conn->remote);
114 memcpy(conn->remote, remote, remotelen);
115
116 conn->locallen = locallen;
117 conn->remotelen = remotelen;
e4169f77
JVH
118
119 digest_generate_nonce(conn->nonce, sizeof(conn->nonce));
2340bcd3
JVH
120 return conn;
121}
122
123static void
124conn_request(void *ptr, http_request_t *request, http_response_t **response)
125{
8e679577 126 const char realm[] = "airplay";
2340bcd3
JVH
127 raop_conn_t *conn = ptr;
128 raop_t *raop = conn->raop;
129
130 http_response_t *res;
131 const char *method;
132 const char *cseq;
133 const char *challenge;
e4169f77 134 int require_auth = 0;
2340bcd3
JVH
135
136 method = http_request_get_method(request);
137 cseq = http_request_get_header(request, "CSeq");
138 if (!method || !cseq) {
139 return;
140 }
141
142 res = http_response_init("RTSP/1.0", 200, "OK");
8e679577 143 if (strcmp(method, "OPTIONS") && strlen(raop->password)) {
e4169f77
JVH
144 const char *authorization;
145
146 authorization = http_request_get_header(request, "Authorization");
147 if (authorization) {
fda63ad4
JVH
148 logger_log(conn->raop->logger, LOGGER_DEBUG, "Our nonce: %s", conn->nonce);
149 logger_log(conn->raop->logger, LOGGER_DEBUG, "Authorization: %s", authorization);
e4169f77 150 }
8e679577 151 if (!digest_is_valid(realm, raop->password, conn->nonce, method, http_request_get_url(request), authorization)) {
e4169f77
JVH
152 char *authstr;
153 int authstrlen;
154
155 /* Allocate the authenticate string */
8e679577 156 authstrlen = sizeof("Digest realm=\"\", nonce=\"\"") + sizeof(realm) + sizeof(conn->nonce) + 1;
e4169f77
JVH
157 authstr = malloc(authstrlen);
158
159 /* Concatenate the authenticate string */
160 memset(authstr, 0, authstrlen);
8e679577
JVH
161 strcat(authstr, "Digest realm=\"");
162 strcat(authstr, realm);
163 strcat(authstr, "\", nonce=\"");
e4169f77
JVH
164 strcat(authstr, conn->nonce);
165 strcat(authstr, "\"");
166
167 /* Construct a new response */
168 require_auth = 1;
169 http_response_destroy(res);
170 res = http_response_init("RTSP/1.0", 401, "Unauthorized");
171 http_response_add_header(res, "WWW-Authenticate", authstr);
172 free(authstr);
88631dc4 173 logger_log(conn->raop->logger, LOGGER_DEBUG, "Authentication unsuccessful, sending Unauthorized");
e4169f77 174 } else {
88631dc4 175 logger_log(conn->raop->logger, LOGGER_DEBUG, "Authentication successful!");
e4169f77
JVH
176 }
177 }
178
2340bcd3
JVH
179 http_response_add_header(res, "CSeq", cseq);
180 http_response_add_header(res, "Apple-Jack-Status", "connected; type=analog");
181
182 challenge = http_request_get_header(request, "Apple-Challenge");
91c41e1d 183 if (!require_auth && challenge) {
2340bcd3
JVH
184 char signature[MAX_SIGNATURE_LEN];
185
186 memset(signature, 0, sizeof(signature));
187 rsakey_sign(raop->rsakey, signature, sizeof(signature), challenge,
188 conn->local, conn->locallen, raop->hwaddr, raop->hwaddrlen);
2340bcd3 189 http_response_add_header(res, "Apple-Response", signature);
c891f978 190
fda63ad4
JVH
191 logger_log(conn->raop->logger, LOGGER_DEBUG, "Got challenge: %s", challenge);
192 logger_log(conn->raop->logger, LOGGER_DEBUG, "Got response: %s", signature);
2340bcd3 193 }
e4169f77
JVH
194
195 if (require_auth) {
196 /* Do nothing in case of authentication request */
197 } else if (!strcmp(method, "OPTIONS")) {
2340bcd3
JVH
198 http_response_add_header(res, "Public", "ANNOUNCE, SETUP, RECORD, PAUSE, FLUSH, TEARDOWN, OPTIONS, GET_PARAMETER, SET_PARAMETER");
199 } else if (!strcmp(method, "ANNOUNCE")) {
200 const char *data;
201 int datalen;
202
203 unsigned char aeskey[16];
204 unsigned char aesiv[16];
205 int aeskeylen, aesivlen;
206
207 data = http_request_get_data(request, &datalen);
208 if (data) {
ba0970e1 209 sdp_t *sdp;
597bc69b 210 const char *remotestr, *rtpmapstr, *fmtpstr, *aeskeystr, *aesivstr;
ba0970e1
JVH
211
212 sdp = sdp_init(data, datalen);
213 remotestr = sdp_get_connection(sdp);
597bc69b 214 rtpmapstr = sdp_get_rtpmap(sdp);
ba0970e1
JVH
215 fmtpstr = sdp_get_fmtp(sdp);
216 aeskeystr = sdp_get_rsaaeskey(sdp);
217 aesivstr = sdp_get_aesiv(sdp);
218
fda63ad4 219 logger_log(conn->raop->logger, LOGGER_DEBUG, "connection: %s", remotestr);
597bc69b 220 logger_log(conn->raop->logger, LOGGER_DEBUG, "rtpmap: %s", rtpmapstr);
fda63ad4
JVH
221 logger_log(conn->raop->logger, LOGGER_DEBUG, "fmtp: %s", fmtpstr);
222 logger_log(conn->raop->logger, LOGGER_DEBUG, "rsaaeskey: %s", aeskeystr);
223 logger_log(conn->raop->logger, LOGGER_DEBUG, "aesiv: %s", aesivstr);
ba0970e1
JVH
224
225 aeskeylen = rsakey_decrypt(raop->rsakey, aeskey, sizeof(aeskey), aeskeystr);
226 aesivlen = rsakey_parseiv(raop->rsakey, aesiv, sizeof(aesiv), aesivstr);
fda63ad4
JVH
227 logger_log(conn->raop->logger, LOGGER_DEBUG, "aeskeylen: %d", aeskeylen);
228 logger_log(conn->raop->logger, LOGGER_DEBUG, "aesivlen: %d", aesivlen);
2340bcd3 229
c891f978
JVH
230 if (conn->raop_rtp) {
231 /* This should never happen */
232 raop_rtp_destroy(conn->raop_rtp);
233 conn->raop_rtp = NULL;
234 }
597bc69b 235 conn->raop_rtp = raop_rtp_init(raop->logger, &raop->callbacks, remotestr, rtpmapstr, fmtpstr, aeskey, aesiv);
fd7070e2
JVH
236 if (!conn->raop_rtp) {
237 logger_log(conn->raop->logger, LOGGER_ERR, "Error initializing the audio decoder");
c5f65268 238 http_response_set_disconnect(res, 1);
fd7070e2 239 }
2340bcd3
JVH
240 sdp_destroy(sdp);
241 }
242 } else if (!strcmp(method, "SETUP")) {
ba0970e1 243 unsigned short remote_cport=0, remote_tport=0;
2340bcd3
JVH
244 unsigned short cport=0, tport=0, dport=0;
245 const char *transport;
246 char buffer[1024];
247 int use_udp;
248
249 transport = http_request_get_header(request, "Transport");
250 assert(transport);
251
fda63ad4 252 logger_log(conn->raop->logger, LOGGER_INFO, "Transport: %s", transport);
2340bcd3 253 use_udp = strncmp(transport, "RTP/AVP/TCP", 11);
ba0970e1
JVH
254 if (use_udp) {
255 char *original, *current, *tmpstr;
256
257 current = original = strdup(transport);
258 if (original) {
259 while ((tmpstr = utils_strsep(&current, ";")) != NULL) {
260 unsigned short value;
261 int ret;
262
263 ret = sscanf(tmpstr, "control_port=%hu", &value);
264 if (ret == 1) {
fda63ad4 265 logger_log(conn->raop->logger, LOGGER_DEBUG, "Found remote control port: %hu", value);
ba0970e1
JVH
266 remote_cport = value;
267 }
268 ret = sscanf(tmpstr, "timing_port=%hu", &value);
269 if (ret == 1) {
fda63ad4 270 logger_log(conn->raop->logger, LOGGER_DEBUG, "Found remote timing port: %hu", value);
ba0970e1
JVH
271 remote_tport = value;
272 }
273 }
274 }
275 free(original);
276 }
fd7070e2
JVH
277 if (conn->raop_rtp) {
278 raop_rtp_start(conn->raop_rtp, use_udp, remote_cport, remote_tport, &cport, &tport, &dport);
279 } else {
c5f65268
JVH
280 logger_log(conn->raop->logger, LOGGER_ERR, "RAOP not initialized at SETUP, playing will fail!");
281 http_response_set_disconnect(res, 1);
fd7070e2 282 }
2340bcd3
JVH
283
284 memset(buffer, 0, sizeof(buffer));
285 if (use_udp) {
286 snprintf(buffer, sizeof(buffer)-1,
ba0970e1 287 "RTP/AVP/UDP;unicast;mode=record;timing_port=%hu;events;control_port=%hu;server_port=%hu",
2340bcd3
JVH
288 tport, cport, dport);
289 } else {
290 snprintf(buffer, sizeof(buffer)-1,
291 "RTP/AVP/TCP;unicast;interleaved=0-1;mode=record;server_port=%u",
292 dport);
293 }
fda63ad4 294 logger_log(conn->raop->logger, LOGGER_INFO, "Responding with %s", buffer);
2340bcd3
JVH
295 http_response_add_header(res, "Transport", buffer);
296 http_response_add_header(res, "Session", "DEADBEEF");
297 } else if (!strcmp(method, "SET_PARAMETER")) {
036dec08 298 const char *content_type;
2340bcd3
JVH
299 const char *data;
300 int datalen;
2340bcd3 301
036dec08 302 content_type = http_request_get_header(request, "Content-Type");
2340bcd3 303 data = http_request_get_data(request, &datalen);
036dec08
JVH
304 if (!strcmp(content_type, "text/parameters")) {
305 char *datastr;
306 datastr = calloc(1, datalen+1);
307 if (data && datastr && conn->raop_rtp) {
308 memcpy(datastr, data, datalen);
309 if (!strncmp(datastr, "volume: ", 8)) {
310 float vol = 0.0;
311 sscanf(datastr+8, "%f", &vol);
312 raop_rtp_set_volume(conn->raop_rtp, vol);
313 }
fd7070e2
JVH
314 } else if (!conn->raop_rtp) {
315 logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER volume");
2340bcd3 316 }
036dec08
JVH
317 free(datastr);
318 } else if (!strcmp(content_type, "image/jpeg")) {
fda63ad4 319 logger_log(conn->raop->logger, LOGGER_INFO, "Got image data of %d bytes", datalen);
fd7070e2
JVH
320 if (conn->raop_rtp) {
321 raop_rtp_set_coverart(conn->raop_rtp, data, datalen);
322 } else {
323 logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER coverart");
324 }
036dec08 325 } else if (!strcmp(content_type, "application/x-dmap-tagged")) {
fda63ad4 326 logger_log(conn->raop->logger, LOGGER_INFO, "Got metadata of %d bytes", datalen);
fd7070e2
JVH
327 if (conn->raop_rtp) {
328 raop_rtp_set_metadata(conn->raop_rtp, data, datalen);
329 } else {
330 logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at SET_PARAMETER metadata");
331 }
2340bcd3
JVH
332 }
333 } else if (!strcmp(method, "FLUSH")) {
334 const char *rtpinfo;
335 int next_seq = -1;
336
337 rtpinfo = http_request_get_header(request, "RTP-Info");
c891f978 338 if (rtpinfo) {
fda63ad4 339 logger_log(conn->raop->logger, LOGGER_INFO, "Flush with RTP-Info: %s", rtpinfo);
c891f978
JVH
340 if (!strncmp(rtpinfo, "seq=", 4)) {
341 next_seq = strtol(rtpinfo+4, NULL, 10);
342 }
343 }
344 if (conn->raop_rtp) {
345 raop_rtp_flush(conn->raop_rtp, next_seq);
fd7070e2
JVH
346 } else {
347 logger_log(conn->raop->logger, LOGGER_WARNING, "RAOP not initialized at FLUSH");
2340bcd3 348 }
2340bcd3
JVH
349 } else if (!strcmp(method, "TEARDOWN")) {
350 http_response_add_header(res, "Connection", "close");
c891f978
JVH
351 if (conn->raop_rtp) {
352 /* Destroy our RTP session */
353 raop_rtp_stop(conn->raop_rtp);
354 raop_rtp_destroy(conn->raop_rtp);
355 conn->raop_rtp = NULL;
356 }
2340bcd3
JVH
357 }
358 http_response_finish(res, NULL, 0);
359
c5f65268 360 logger_log(conn->raop->logger, LOGGER_DEBUG, "Handled request %s with URL %s", method, http_request_get_url(request));
2340bcd3
JVH
361 *response = res;
362}
363
364static void
365conn_destroy(void *ptr)
366{
367 raop_conn_t *conn = ptr;
368
369 if (conn->raop_rtp) {
c891f978 370 /* This is done in case TEARDOWN was not called */
2340bcd3
JVH
371 raop_rtp_destroy(conn->raop_rtp);
372 }
373 free(conn->local);
374 free(conn->remote);
375 free(conn);
376}
377
378raop_t *
1d0adde5 379raop_init(int max_clients, raop_callbacks_t *callbacks, const char *pemkey, int *error)
2340bcd3
JVH
380{
381 raop_t *raop;
382 httpd_t *httpd;
383 rsakey_t *rsakey;
384 httpd_callbacks_t httpd_cbs;
385
386 assert(callbacks);
72fe063c
JVH
387 assert(max_clients > 0);
388 assert(max_clients < 100);
2340bcd3 389 assert(pemkey);
2340bcd3
JVH
390
391 /* Initialize the network */
392 if (netutils_init() < 0) {
393 return NULL;
394 }
395
396 /* Validate the callbacks structure */
b4cc5b07
JVH
397 if (!callbacks->audio_init ||
398 !callbacks->audio_process ||
2340bcd3
JVH
399 !callbacks->audio_destroy) {
400 return NULL;
401 }
402
2340bcd3
JVH
403 /* Allocate the raop_t structure */
404 raop = calloc(1, sizeof(raop_t));
405 if (!raop) {
406 return NULL;
407 }
408
409 /* Initialize the logger */
fda63ad4 410 raop->logger = logger_init();
2340bcd3
JVH
411
412 /* Set HTTP callbacks to our handlers */
413 memset(&httpd_cbs, 0, sizeof(httpd_cbs));
414 httpd_cbs.opaque = raop;
415 httpd_cbs.conn_init = &conn_init;
416 httpd_cbs.conn_request = &conn_request;
417 httpd_cbs.conn_destroy = &conn_destroy;
418
419 /* Initialize the http daemon */
462c72aa 420 httpd = httpd_init(raop->logger, &httpd_cbs, max_clients);
2340bcd3
JVH
421 if (!httpd) {
422 free(raop);
423 return NULL;
424 }
425
426 /* Copy callbacks structure */
427 memcpy(&raop->callbacks, callbacks, sizeof(raop_callbacks_t));
428
429 /* Initialize RSA key handler */
430 rsakey = rsakey_init_pem(pemkey);
431 if (!rsakey) {
432 free(httpd);
433 free(raop);
434 return NULL;
435 }
436
437 raop->httpd = httpd;
438 raop->rsakey = rsakey;
439
2340bcd3
JVH
440 return raop;
441}
442
443raop_t *
1d0adde5 444raop_init_from_keyfile(int max_clients, raop_callbacks_t *callbacks, const char *keyfile, int *error)
2340bcd3
JVH
445{
446 raop_t *raop;
447 char *pemstr;
448
449 if (utils_read_file(&pemstr, keyfile) < 0) {
450 return NULL;
451 }
1d0adde5 452 raop = raop_init(max_clients, callbacks, pemstr, error);
2340bcd3
JVH
453 free(pemstr);
454 return raop;
455}
456
457void
458raop_destroy(raop_t *raop)
459{
460 if (raop) {
461 raop_stop(raop);
462
463 httpd_destroy(raop->httpd);
464 rsakey_destroy(raop->rsakey);
fda63ad4 465 logger_destroy(raop->logger);
2340bcd3
JVH
466 free(raop);
467
468 /* Cleanup the network */
469 netutils_cleanup();
470 }
471}
472
5a746b97
JVH
473int
474raop_is_running(raop_t *raop)
475{
476 assert(raop);
477
478 return httpd_is_running(raop->httpd);
479}
480
fda63ad4
JVH
481void
482raop_set_log_level(raop_t *raop, int level)
483{
484 assert(raop);
485
486 logger_set_level(raop->logger, level);
487}
488
489void
2975b4b8 490raop_set_log_callback(raop_t *raop, raop_log_callback_t callback, void *cls)
fda63ad4
JVH
491{
492 assert(raop);
493
2975b4b8 494 logger_set_callback(raop->logger, callback, cls);
fda63ad4
JVH
495}
496
2340bcd3 497int
e4169f77 498raop_start(raop_t *raop, unsigned short *port, const char *hwaddr, int hwaddrlen, const char *password)
2340bcd3
JVH
499{
500 assert(raop);
501 assert(port);
406e9777
JVH
502 assert(hwaddr);
503
504 /* Validate hardware address */
505 if (hwaddrlen > MAX_HWADDR_LEN) {
506 return -1;
507 }
508
a68fedbb
JVH
509 memset(raop->password, 0, sizeof(raop->password));
510 if (password) {
511 /* Validate password */
512 if (strlen(password) > MAX_PASSWORD_LEN) {
513 return -1;
514 }
515
516 /* Copy password to the raop structure */
517 strncpy(raop->password, password, MAX_PASSWORD_LEN);
e4169f77
JVH
518 }
519
406e9777
JVH
520 /* Copy hwaddr to the raop structure */
521 memcpy(raop->hwaddr, hwaddr, hwaddrlen);
522 raop->hwaddrlen = hwaddrlen;
2340bcd3
JVH
523
524 return httpd_start(raop->httpd, port);
525}
526
527void
528raop_stop(raop_t *raop)
529{
530 assert(raop);
531
532 httpd_stop(raop->httpd);
533}
534