Browse Source
implement full ICE support
Squashed commit of the following: commitpull/81/head00213e66c7Author: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 27 09:40:04 2015 -0500 perform ICE restart if we change ports commit27fbcbd6cbAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 15:58:12 2015 -0500 locking fixes commit60c1c5ae13Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 15:58:06 2015 -0500 unkernelize when ICE completes commit1d816f9864Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 15:54:44 2015 -0500 relaxed locking where not needed commit75b58a9093Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 11:46:08 2015 -0500 use atomic bitfield instead of bitfield+mutex commit03552eeed9Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 11:24:59 2015 -0500 shuffle around aux.h a bit more commitb9b8a3aa5eAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 11:16:12 2015 -0500 remove some code redundancy through a "state machine" commit0b4bfef1b1Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 10:10:41 2015 -0500 reorder to match struct commita2a51d81a8Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 10:10:03 2015 -0500 clear more states for ICE restart commitd554a2b858Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 09:58:29 2015 -0500 dont duplicate candidates on re-invite commit4c804652b7Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 09:58:20 2015 -0500 retain ICE role across re-invites commit4a586dd72dAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 09:42:09 2015 -0500 eliminate duplicate log messages commitef0be2e308Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 26 09:32:36 2015 -0500 fix incorrect log message commit2544b60f00Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 15:26:48 2015 -0500 better logging for ICE agents commitc42807384eAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 15:18:27 2015 -0500 dont run ICE checks if we dont have a password commit1b56cb75b5Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 15:16:19 2015 -0500 ICE pairs should go in triggered queue only once commitd10c56f3aeAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 14:04:00 2015 -0500 obsolete the ICE agent running flag commit52237e3399Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 14:02:06 2015 -0500 cease checks once ICE is completed commit5332d18612Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 13:53:57 2015 -0500 fix ICE completion logging commit85f5fd63aaAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 13:53:33 2015 -0500 make better use of bit flags commit796b48bb78Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 12:09:46 2015 -0500 improved learned candidate pairing and completion logic commitd15561072eAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 11:21:45 2015 -0500 support upper case transport strings commit557da7b1c3Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 10:43:57 2015 -0500 use struct endpoint in ice candidates commit951040bfd6Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 10:31:13 2015 -0500 more meaningful ICE log messages commit8ec2426bd3Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 09:54:49 2015 -0500 shut down agent if no components - limit number of candidates commit149260f3a6Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 25 09:44:13 2015 -0500 handle ICE restarts commit6a18c31f81Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 16:29:01 2015 -0500 dont clear succeeded flag when nominating commit93e0861d02Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 16:21:40 2015 -0500 use correct pwd in stun binding response commit32ba3ea406Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 16:03:09 2015 -0500 use deterministic foundation for prflx cands commit2f2dc91515Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 15:21:13 2015 -0500 handle initial ICE role commita6b8ad25e6Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 14:43:47 2015 -0500 another ICE scheduling fix commitc572b04e55Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 14:14:29 2015 -0500 make ICE aware of rtcp-mux commit93cd2d2560Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 14:13:27 2015 -0500 print timestamp when logging to stderr commit22a52ffda2Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 14:13:13 2015 -0500 ICE scheduling fixes commit5d2d1a7739Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 13:27:59 2015 -0500 increase ICE pwd length to make chrome happy commitceff6698dbAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 13:09:54 2015 -0500 dont discard RTP if ICE hasnt finished yet commite809877d0eAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 13:06:31 2015 -0500 implement remote-candidates (untested) commit41670eadbbAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 11:58:13 2015 -0500 shut down ICE agent when everything fails commit1ca26c4a81Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 11:10:46 2015 -0500 fix up SDP output for ICE candidates commit0287d68f33Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 10:09:49 2015 -0500 process ICE completion and fire up DTLS if desired commit5b6386036bAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 09:37:52 2015 -0500 use a btree to schedule ice checks commit2bc25f1e0fAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 24 09:37:02 2015 -0500 convert shutdown condition into global var commitecf0c5587cAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Mon Feb 23 14:50:46 2015 -0500 replace poller_now with timeval g_now commit164ecdd7acAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Mon Feb 23 13:00:15 2015 -0500 handle nominations if we're controlling commitd013659365Author: Richard Fuchs <rfuchs@sipwise.com> Date: Mon Feb 23 12:11:40 2015 -0500 copy controlling/ed role into agent commit09f1cae14aAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Mon Feb 23 12:02:54 2015 -0500 separate nominated pairs from valid pairs commitf75f338cdeAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Mon Feb 23 11:55:30 2015 -0500 organize aux.h into sections commitd6acee1392Author: Richard Fuchs <rfuchs@sipwise.com> Date: Mon Feb 23 11:55:17 2015 -0500 use b-tree for various ICE lists commitaf9804d139Author: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 16:21:09 2015 -0500 prepare to finalize ice processing commit18df118375Author: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 16:19:50 2015 -0500 prettier logging commit280755c61aAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 15:02:14 2015 -0500 implement unfreezing of other components on success commit5d13657d5bAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 15:00:24 2015 -0500 bitfield access macros commit71746ad6a1Author: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 14:15:05 2015 -0500 handle ice updates and duplicate candidates commit02309d1b5bAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 12:22:29 2015 -0500 handle role conflicts commit52acf54ba5Author: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 10:24:01 2015 -0500 proper pair priorities calculation commit307af79e8dAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 09:54:18 2015 -0500 fix address family mixups commit7cbfd4d36aAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 20 09:14:49 2015 -0500 delay dtls startup and timeout checks while ice is running commit2a8ab75228Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 19 16:47:56 2015 -0500 process ice/stun responses commit92da323dcfAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 19 15:14:30 2015 -0500 adding stun server script for testing commitc5cfeb122cAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 19 13:42:40 2015 -0500 act on stun requests, learn prflx candidates commit1cafd35e7aAuthor: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 19 13:30:14 2015 -0500 fix pktinfo for ipv4 packets commit8e338b8426Author: Richard Fuchs <rfuchs@sipwise.com> Date: Thu Feb 19 11:48:55 2015 -0500 rework interface handling to prepare to learn ICE candidate commit09e365c142Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 18 16:24:42 2015 -0500 add some locking commit8fc7b75095Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 18 16:05:20 2015 -0500 extend logic in response to stun req and implement triggered checks commit35eeb04376Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 18 12:46:42 2015 -0500 handle ice/stun retransmits and timeouts commitb5637565b6Author: Richard Fuchs <rfuchs@sipwise.com> Date: Wed Feb 18 11:19:19 2015 -0500 first implementation of sending ICE checks commitf0c1928c05Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 17 14:39:11 2015 -0500 preliminary list and loop for ICE checks commitc38d6e22c1Author: Richard Fuchs <rfuchs@sipwise.com> Date: Tue Feb 17 12:00:24 2015 -0500 pair up candidates and prepare to run checks commitd9559b4c59Author: Richard Fuchs <rfuchs@sipwise.com> Date: Fri Feb 13 15:36:29 2015 -0500 parse and remeber basic ICE attributes
Richard Fuchs
11 years ago
21 changed files with 2960 additions and 557 deletions
Split View
Diff Options
-
+1 -1daemon/Makefile
-
+21 -0daemon/aux.c
-
+248 -91daemon/aux.h
-
+274 -170daemon/call.c
-
+50 -20daemon/call.h
-
+2 -0daemon/call_interfaces.c
-
+6 -4daemon/dtls.c
-
+15 -15daemon/graphite.c
-
+1357 -0daemon/ice.c
-
+208 -0daemon/ice.h
-
+9 -1daemon/log.c
-
+11 -3daemon/log.h
-
+11 -8daemon/main.c
-
+3 -9daemon/poller.c
-
+2 -4daemon/poller.h
-
+200 -168daemon/sdp.c
-
+0 -1daemon/sdp.h
-
+224 -61daemon/stun.c
-
+23 -1daemon/stun.h
-
+91 -0tests/stun-client
-
+204 -0tests/stun-server
+ 1
- 1
daemon/Makefile
View File
+ 21
- 0
daemon/aux.c
View File
+ 248
- 91
daemon/aux.h
View File
+ 274
- 170
daemon/call.c
View File
+ 50
- 20
daemon/call.h
View File
+ 2
- 0
daemon/call_interfaces.c
View File
+ 6
- 4
daemon/dtls.c
View File
+ 15
- 15
daemon/graphite.c
View File
+ 1357
- 0
daemon/ice.c
File diff suppressed because it is too large
View File
+ 208
- 0
daemon/ice.h
View File
| @ -0,0 +1,208 @@ | |||
| #ifndef __ICE_H__ | |||
| #define __ICE_H__ | |||
| #include <arpa/inet.h> | |||
| #include <glib.h> | |||
| #include <sys/time.h> | |||
| #include <sys/types.h> | |||
| #include "str.h" | |||
| #include "obj.h" | |||
| #include "aux.h" | |||
| #include "call.h" | |||
| #define MAX_COMPONENTS 2 | |||
| #define TIMER_RUN_INTERVAL 20 /* ms */ | |||
| #define STUN_RETRANSMIT_INTERVAL 100 /* ms, with exponential backoff */ | |||
| #define STUN_MAX_RETRANSMITS 7 | |||
| #define MAX_ICE_CANDIDATES 100 | |||
| #define ICE_AGENT_COMPLETED 0x0002 | |||
| #define ICE_AGENT_CONTROLLING 0x0004 | |||
| #define ICE_AGENT_NOMINATING 0x0008 | |||
| #define ICE_PAIR_FROZEN 0x0001 | |||
| #define ICE_PAIR_IN_PROGRESS 0x0002 | |||
| #define ICE_PAIR_FAILED 0x0004 | |||
| #define ICE_PAIR_SUCCEEDED 0x0008 | |||
| #define ICE_PAIR_NOMINATED 0x0010 | |||
| #define ICE_PAIR_LEARNED 0x0020 | |||
| #define ICE_PAIR_VALID 0x0040 | |||
| #define ICE_PAIR_TO_USE 0x0080 | |||
| #define ICE_PAIR_TRIGGERED 0x0100 | |||
| #define PAIR_ISSET(p, f) bf_isset(&(p)->pair_flags, ICE_PAIR_ ## f) | |||
| #define PAIR_SET(p, f) bf_set(&(p)->pair_flags, ICE_PAIR_ ## f) | |||
| #define PAIR_SET2(p, f, g) bf_set(&(p)->pair_flags, ICE_PAIR_ ## f | ICE_PAIR_ ## g) | |||
| #define PAIR_CLEAR(p, f) bf_clear(&(p)->pair_flags, ICE_PAIR_ ## f) | |||
| #define PAIR_CLEAR2(p, f, g) bf_clear(&(p)->pair_flags, ICE_PAIR_ ## f | ICE_PAIR_ ## g) | |||
| #define AGENT_ISSET(p, f) bf_isset(&(p)->agent_flags, ICE_AGENT_ ## f) | |||
| #define AGENT_ISSET2(p, f, g) bf_isset(&(p)->agent_flags, ICE_AGENT_ ## f | ICE_AGENT_ ## g) | |||
| #define AGENT_SET(p, f) bf_set(&(p)->agent_flags, ICE_AGENT_ ## f) | |||
| #define AGENT_SET2(p, f, g) bf_set(&(p)->agent_flags, ICE_AGENT_ ## f | ICE_AGENT_ ## g) | |||
| #define AGENT_CLEAR(p, f) bf_clear(&(p)->agent_flags, ICE_AGENT_ ## f) | |||
| #define AGENT_CLEAR2(p, f, g) bf_clear(&(p)->agent_flags, ICE_AGENT_ ## f | ICE_AGENT_ ## g) | |||
| struct local_interface; | |||
| struct interface_address; | |||
| struct packet_stream; | |||
| struct call_media; | |||
| struct call; | |||
| struct stream_params; | |||
| struct stun_attrs; | |||
| enum ice_candidate_type { | |||
| ICT_UNKNOWN = 0, | |||
| ICT_HOST, | |||
| ICT_SRFLX, | |||
| ICT_PRFLX, | |||
| ICT_RELAY, | |||
| __ICT_LAST, | |||
| }; | |||
| enum ice_transport { | |||
| ITP_UNKNOWN = 0, | |||
| ITP_UDP, | |||
| // ITP_TCP, | |||
| }; | |||
| struct ice_candidate { | |||
| str foundation; | |||
| unsigned long component_id; | |||
| enum ice_transport transport; | |||
| unsigned long priority; | |||
| struct endpoint endpoint; | |||
| enum ice_candidate_type type; | |||
| struct in6_addr related_address; | |||
| unsigned int related_port; | |||
| }; | |||
| struct ice_candidate_pair { | |||
| struct ice_candidate *remote_candidate; | |||
| struct interface_address *local_address; | |||
| struct packet_stream *packet_stream; | |||
| volatile unsigned int pair_flags; | |||
| u_int32_t stun_transaction[3]; /* belongs to transaction_hash, thus agent->lock */ | |||
| unsigned int retransmit_ms; | |||
| struct timeval retransmit; | |||
| unsigned int retransmits; | |||
| struct ice_agent *agent; | |||
| u_int64_t pair_priority; | |||
| int was_controlling:1, | |||
| was_nominated:1; | |||
| }; | |||
| /* these are protected by the call's master_lock */ | |||
| struct ice_agent { | |||
| struct obj obj; | |||
| struct call *call; /* main reference */ | |||
| struct call_media *media; | |||
| struct local_interface *local_interface; | |||
| int desired_family; | |||
| mutex_t lock; /* for elements below. and call must be locked in R */ | |||
| /* lock order: in_lock first, then agent->lock */ | |||
| GQueue remote_candidates; | |||
| GQueue candidate_pairs; /* for storage */ | |||
| GQueue triggered; | |||
| GHashTable *candidate_hash; | |||
| GHashTable *pair_hash; | |||
| GHashTable *transaction_hash; | |||
| GHashTable *foundation_hash; | |||
| GTree *all_pairs; | |||
| GQueue all_pairs_list; /* sorted through gtree */ | |||
| GTree *nominated_pairs; /* nominated by peer */ | |||
| GTree *succeeded_pairs; /* checked by us */ | |||
| GTree *valid_pairs; /* succeeded and nominated */ | |||
| unsigned int active_components; | |||
| struct timeval start_nominating; | |||
| str ufrag[2]; /* 0 = remote, 1 = local */ | |||
| str pwd[2]; /* ditto */ | |||
| volatile unsigned int agent_flags; | |||
| struct timeval next_check; /* protected by ice_agents_timers_lock */ | |||
| struct timeval last_run; /* ditto */ | |||
| }; | |||
| extern const unsigned int ice_type_preferences[]; | |||
| extern const char * const ice_type_strings[]; | |||
| void ice_init(void); | |||
| enum ice_candidate_type ice_candidate_type(const str *s); | |||
| enum ice_transport ice_transport(const str *s); | |||
| int ice_has_related(enum ice_candidate_type); | |||
| void ice_foundation(struct interface_address *ifa); | |||
| void ice_agent_init(struct ice_agent **agp, struct call_media *media); | |||
| void ice_update(struct ice_agent *, struct stream_params *); | |||
| void ice_shutdown(struct ice_agent **); | |||
| void ice_restart(struct ice_agent *); | |||
| void ice_candidates_free(GQueue *); | |||
| void ice_remote_candidates(GQueue *, struct ice_agent *); | |||
| void ice_thread_run(void *); | |||
| int ice_request(struct packet_stream *, struct sockaddr_in6 *, struct in6_addr *, struct stun_attrs *); | |||
| int ice_response(struct packet_stream *ps, struct sockaddr_in6 *src, struct in6_addr *dst, | |||
| struct stun_attrs *attrs, u_int32_t transaction[3]); | |||
| /* returns 0 if ICE still has work to do, 1 otherwise */ | |||
| INLINE int ice_has_finished(struct call_media *media) { | |||
| if (!media) | |||
| return 1; | |||
| if (!MEDIA_ISSET(media, ICE)) | |||
| return 1; | |||
| if (!media->ice_agent) | |||
| return 1; | |||
| if (AGENT_ISSET(media->ice_agent, COMPLETED)) | |||
| return 1; | |||
| return 0; | |||
| } | |||
| INLINE unsigned int ice_type_preference(enum ice_candidate_type type) { | |||
| if (type >= __ICT_LAST) | |||
| return 0; | |||
| return ice_type_preferences[type]; | |||
| } | |||
| /* local_pref starts with 0 */ | |||
| INLINE u_int32_t ice_priority_pref(unsigned int type_pref, unsigned int local_pref, unsigned int component) { | |||
| return type_pref << 24 | (65535 - local_pref) << 8 | (256 - component); | |||
| } | |||
| INLINE u_int32_t ice_priority(enum ice_candidate_type type, unsigned int local_pref, unsigned int component) { | |||
| return ice_priority_pref(ice_type_preference(type), local_pref, component); | |||
| } | |||
| INLINE unsigned int ice_type_pref_from_prio(u_int32_t prio) { | |||
| return (prio & 0xff000000) >> 24; | |||
| } | |||
| INLINE unsigned int ice_local_pref_from_prio(u_int32_t prio) { | |||
| return 65535 - ((prio & 0xffff00) >> 8); | |||
| } | |||
| INLINE const char *ice_candidate_type_str(enum ice_candidate_type type) { | |||
| if (type >= __ICT_LAST) | |||
| return 0; | |||
| return ice_type_strings[type]; | |||
| } | |||
| #endif | |||
+ 9
- 1
daemon/log.c
View File
+ 11
- 3
daemon/log.h
View File
+ 11
- 8
daemon/main.c
View File
+ 3
- 9
daemon/poller.c
View File
+ 2
- 4
daemon/poller.h
View File
+ 200
- 168
daemon/sdp.c
View File
+ 0
- 1
daemon/sdp.h
View File
+ 224
- 61
daemon/stun.c
View File
+ 23
- 1
daemon/stun.h
View File
+ 91
- 0
tests/stun-client
View File
| @ -0,0 +1,91 @@ | |||
| #!/usr/bin/perl | |||
| use strict; | |||
| use warnings; | |||
| use Socket; | |||
| use Socket6; | |||
| use Digest::SHA qw(hmac_sha1); | |||
| use Digest::CRC qw(crc32); | |||
| my ($prio, $ip, $port, $username, $pwd) = @ARGV; | |||
| my $fd; | |||
| my @dests = getaddrinfo($ip, $port, AF_UNSPEC, SOCK_DGRAM); | |||
| while (@dests >= 5) { | |||
| my ($fam, $type, $prot, $addr, $canon, @dests) = @dests; | |||
| socket($fd, $fam, $type, $prot) or undef($fd), next; | |||
| connect($fd, $addr) or undef($fd), next; | |||
| last; | |||
| } | |||
| $fd or die($!); | |||
| my @rand = ('A' .. 'Z', 'a' .. 'z'); | |||
| my $ufrag = join('', (map {$rand[rand($#rand)]} (1 .. 10))); | |||
| my $tract = join('', (map {$rand[rand($#rand)]} (1 .. 12))); | |||
| my $control = rand() < .5; | |||
| my $tbreak = int(rand(0xffffffff)) * int(rand(0xffffffff)); | |||
| print("transaction: $tract\n"); | |||
| print("my username fragment: $ufrag\n"); | |||
| print("controll".($control?"ing":'ed')."\n"); | |||
| print("tie breaker: $tbreak\n"); | |||
| my $packet = ''; | |||
| $packet .= attr(6, "$username:$ufrag"); | |||
| $packet .= attr($control ? 0x802a : 0x8029, pack('Q', $tbreak)); | |||
| $packet .= attr(0x24, pack('N', $prio)); | |||
| $packet .= integrity(); | |||
| $packet .= fingerprint(); | |||
| $packet = header() . $packet; | |||
| send($fd, $packet, 0) or die $!; | |||
| my $buf; | |||
| recv($fd, $buf, 200, 0) or die; | |||
| my ($code, $length, $cookie, $tract2, $attrs) = unpack('nnN a12 a*', $buf); | |||
| if ($cookie == 0x2112A442 || $tract2 ne $tract) { | |||
| printf("code: \%x\n", $code); | |||
| while ($attrs ne '') { | |||
| my ($type, $len, $cont); | |||
| ($type, $len, $attrs) = unpack('nn a*', $attrs); | |||
| my $pad = 0; | |||
| while ((($len + $pad) % 4) != 0) { | |||
| $pad++; | |||
| } | |||
| ($cont, $pad, $attrs) = unpack("a$len a$pad a*", $attrs); | |||
| printf(" attr type: \%x\n", $type); | |||
| print(" content: $cont\n"); | |||
| } | |||
| } | |||
| else { | |||
| print("not stun: ".unpack('H*', $buf)."\n"); | |||
| } | |||
| exit; | |||
| sub attr { | |||
| my ($type, $data) = @_; | |||
| my $len = length($data); | |||
| while ((length($data) % 4) != 0) { | |||
| $data .= "\0"; | |||
| } | |||
| return pack('nn a*', $type, $len, $data); | |||
| } | |||
| sub header { | |||
| my ($add_length) = @_; | |||
| $add_length ||= 0; | |||
| return pack('nnN a12', 1, length($packet) + $add_length, 0x2112A442, $tract); | |||
| } | |||
| sub integrity { | |||
| my $h = header(24); | |||
| my $hmac = hmac_sha1($h.$packet, $pwd); | |||
| return attr(8, $hmac); | |||
| } | |||
| sub fingerprint { | |||
| my $h = header(8); | |||
| my $crc = crc32($h.$packet); | |||
| return attr(0x8028, pack('N', ($crc ^ 0x5354554e))); | |||
| } | |||
+ 204
- 0
tests/stun-server
View File
| @ -0,0 +1,204 @@ | |||
| #!/usr/bin/perl | |||
| use strict; | |||
| use warnings; | |||
| use Socket; | |||
| use Socket6; | |||
| use Digest::SHA qw(hmac_sha1); | |||
| use Digest::CRC qw(crc32); | |||
| my ($controlling, $port, $username, $pwd, @addresses) = @ARGV; | |||
| my %attrs = ( | |||
| 6 => \&attr_un, | |||
| 8 => \&attr_mi, | |||
| 0x8028 => \&attr_fp, | |||
| 0x25 => \&attr_use, | |||
| 0x8029 => \&attr_controlled, | |||
| 0x802a => \&attr_controlling, | |||
| ); | |||
| my (@sockets, $packet, $tract, $code); | |||
| for my $addr (@addresses) { | |||
| my ($fam, $pka, $sin, $meth) = addrparse($addr, $port); | |||
| socket(my $fd, $fam, SOCK_DGRAM, 0) or die $!; | |||
| bind($fd, $sin) or die $!; | |||
| push(@sockets, {fd => $fd, fam => $fam, addr => $pka, sin => $sin, xormethod => $meth}); | |||
| } | |||
| while (1) { | |||
| my $rin = ''; | |||
| for my $s (@sockets) { | |||
| vec($rin, fileno($$s{fd}), 1) = 1; | |||
| } | |||
| select($rin, undef, undef, 1); | |||
| for my $s (@sockets) { | |||
| vec($rin, fileno($$s{fd}), 1) or next; | |||
| my $src = recv($$s{fd}, my $buf, 200, 0) or die $!; | |||
| print("\npacket from " . addrdeparse($$s{fam}, $src) . " on ". | |||
| addrdeparse($$s{fam}, $$s{sin}) . "\n"); | |||
| my ($cmd, $len, $cookie, $attrs); | |||
| ($cmd, $len, $cookie, $tract, $attrs) = unpack('nnN a12 a*', $buf); | |||
| if ($cookie != 0x2112A442) { | |||
| if ($buf =~ /^[\x14-\x3f]/s) { | |||
| print("DTLS\n"); | |||
| } | |||
| else { | |||
| print("not stun: " . unpack("H*", $buf)."\n"); | |||
| } | |||
| next; | |||
| } | |||
| $cmd == 1 or print("not stun request\n"), next; | |||
| length($attrs) == $len or print("length mismatch\n"), next; | |||
| my ($list, $hash) = unpack_attrs($attrs); | |||
| $$list[$#$list]{name} eq 'fingerprint' or print("last attr not fingerprint\n"), next; | |||
| $$list[$#$list-1]{name} eq 'message-integrity' or print("last but one attr not MI\n"), next; | |||
| $$hash{username} or print("no username\n"), next; | |||
| $$hash{controlling} and print("is controlling\n"); | |||
| $$hash{controlled} and print("is controlled\n"); | |||
| $$hash{'use-candidate'} and print("nominated\n"); | |||
| print("local username is $$hash{username}{split}[0], remote is $$hash{username}{split}[1]\n"); | |||
| if ($$hash{controlling} && $controlling || $$hash{controlled} && !$controlling) { | |||
| print("role conflict, replying with 487"); | |||
| $code = 0x0111; # binding error | |||
| $packet = attr(0x9, pack('CCCC a16', 0, 0, 4, 87, 'Role conflict')); | |||
| $packet .= integrity(); | |||
| $packet .= fingerprint(); | |||
| } | |||
| else { | |||
| $code = 0x101; # binding success | |||
| my $xorattr = $$s{xormethod}($src); | |||
| $packet = attr(0x20, $xorattr); | |||
| $packet .= integrity(); | |||
| $packet .= fingerprint(); | |||
| } | |||
| $packet = header() . $packet; | |||
| print("sending reply\n"); | |||
| send($$s{fd}, $packet, 0, $src); | |||
| } | |||
| } | |||
| exit; | |||
| sub xor4 { | |||
| my ($src) = @_; | |||
| my @a = unpack_sockaddr_in($src); | |||
| return pack('nna4', 1, $a[0] ^ 0x2112, $a[1] ^ "\x21\x12\xa4\x42"); | |||
| } | |||
| sub xor6 { | |||
| my ($src) = @_; | |||
| my @a = unpack_sockaddr_in6($src); | |||
| return pack('nna16', 2, $a[0] ^ 0x2112, | |||
| $a[1] ^ ("\x21\x12\xa4\x42" . $tract)); | |||
| } | |||
| sub addrparse { | |||
| my ($addr, $port) = @_; | |||
| my $r = inet_pton(AF_INET, $addr); | |||
| $r and return (AF_INET, $r, pack_sockaddr_in($port, $r), \&xor4); | |||
| $r = inet_pton(AF_INET6, $addr); | |||
| $r and return (AF_INET6, $r, pack_sockaddr_in6($port, $r), \&xor6); | |||
| die; | |||
| } | |||
| sub addrdeparse { | |||
| my ($fam, $sin) = @_; | |||
| if ($fam == AF_INET) { | |||
| my @up = unpack_sockaddr_in($sin); | |||
| return inet_ntop(AF_INET, $up[1]) . ":$up[0]"; | |||
| } | |||
| if ($fam == AF_INET6) { | |||
| my @up = unpack_sockaddr_in6($sin); | |||
| return '['.inet_ntop(AF_INET6, $up[1]) . "]:$up[0]"; | |||
| } | |||
| die; | |||
| } | |||
| sub attr_un { | |||
| my ($cont) = @_; | |||
| return {name => 'username', split => [$cont =~ /(.*):(.*)/]}; | |||
| } | |||
| sub attr_mi { | |||
| return {name => 'message-integrity'}; | |||
| } | |||
| sub attr_fp { | |||
| my ($cont) = @_; | |||
| return {name => 'fingerprint', value => unpack('N', $cont)}; | |||
| } | |||
| sub attr_use { | |||
| return {name => 'use-candidate'}; | |||
| } | |||
| sub attr_controlling { | |||
| my ($cont) = @_; | |||
| return {name => 'controlling', tiebreaker => unpack('Q', $cont)}; | |||
| } | |||
| sub attr_controlled { | |||
| my ($cont) = @_; | |||
| return {name => 'controlled', tiebreaker => unpack('Q', $cont)}; | |||
| } | |||
| sub unpack_attrs { | |||
| my ($s) = @_; | |||
| my (@out, %out); | |||
| while ($s ne '') { | |||
| my ($type, $len, $cont); | |||
| ($type, $len, $s) = unpack('nn a*', $s); | |||
| my $pad = 0; | |||
| while ((($len + $pad) % 4) != 0) { | |||
| $pad++; | |||
| } | |||
| ($cont, $pad, $s) = unpack("a$len a$pad a*", $s); | |||
| my $ins = {type => $type, len => $len, content => $cont, | |||
| raw => pack('nna*a*', $type, $len, $cont, $pad)}; | |||
| push(@out, $ins); | |||
| $out{$type} = $ins; | |||
| my $pars = $attrs{$type}; | |||
| $pars or next; | |||
| my $ai = $pars->($cont); | |||
| %$ins = (%$ins, %$ai); | |||
| $out{$$ins{name}} = $ins; | |||
| } | |||
| return (\@out, \%out); | |||
| } | |||
| sub attr { | |||
| my ($type, $data) = @_; | |||
| my $len = length($data); | |||
| while ((length($data) % 4) != 0) { | |||
| $data .= "\0"; | |||
| } | |||
| return pack('nn a*', $type, $len, $data); | |||
| } | |||
| sub header { | |||
| my ($add_length) = @_; | |||
| $add_length ||= 0; | |||
| return pack('nnN a12', $code, length($packet) + $add_length, 0x2112A442, $tract); | |||
| } | |||
| sub integrity { | |||
| my $h = header(24); | |||
| my $hmac = hmac_sha1($h.$packet, $pwd); | |||
| return attr(8, $hmac); | |||
| } | |||
| sub fingerprint { | |||
| my $h = header(8); | |||
| my $crc = crc32($h.$packet); | |||
| return attr(0x8028, pack('N', ($crc ^ 0x5354554e))); | |||
| } | |||