16278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh/* 26278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * Copyright (C) 2011 The Android Open Source Project 36278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * 46278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * Licensed under the Apache License, Version 2.0 (the "License"); 56278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * you may not use this file except in compliance with the License. 66278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * You may obtain a copy of the License at 76278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * 86278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * http://www.apache.org/licenses/LICENSE-2.0 96278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * 106278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * Unless required by applicable law or agreed to in writing, software 116278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * distributed under the License is distributed on an "AS IS" BASIS, 126278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 136278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * See the License for the specific language governing permissions and 146278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh * limitations under the License. 156278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh */ 166278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh 176278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh#include <stdio.h> 186278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh#include <stdlib.h> 196278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh#include <string.h> 201591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <errno.h> 216278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh 221591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <arpa/inet.h> 231591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <netinet/in.h> 241591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <sys/stat.h> 251591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <sys/types.h> 261591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <sys/socket.h> 271591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <sys/ioctl.h> 281591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <linux/if.h> 291591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <linux/route.h> 306278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh 311591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#define LOG_TAG "ip-up-vpn" 321591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#include <cutils/log.h> 331591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 341591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh#define DIR "/data/misc/vpn/" 351591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 361591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yehstatic const char *env(const char *name) { 371591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh const char *value = getenv(name); 381591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return value ? value : ""; 391591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh} 401591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 411591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yehstatic int set_address(struct sockaddr *sa, const char *address) { 421591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh sa->sa_family = AF_INET; 43f459d324bf7fcec3694460928efcccf3267c2f5eChia-chi Yeh errno = EINVAL; 441591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return inet_pton(AF_INET, address, &((struct sockaddr_in *)sa)->sin_addr); 451591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh} 461591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 471591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh/* 481591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * The primary goal is to create a file with VPN parameters. Currently they 491591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * are interface, addresses, routes, DNS servers, and search domains. Each 501591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * parameter occupies one line in the file, and it can be an empty string or 511591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * space-separated values. The order and the format must be consistent with 521591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * com.android.server.connectivity.Vpn. Here is an example. 531591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * 541591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * ppp0 551591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * 192.168.1.100/24 561591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * 0.0.0.0/0 571591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * 192.168.1.1 192.168.1.2 581591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * example.org 591591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * 601591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * The secondary goal is to unify the outcome of VPN. The current baseline 611591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * is to have an interface configured with the given address and netmask 621591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * and maybe add a host route to protect the tunnel. PPP-based VPN already 631591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * does this, but others might not. Routes, DNS servers, and search domains 641591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh * are handled by the framework since they can be overridden by the users. 651591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh */ 666278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yehint main(int argc, char **argv) 676278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh{ 681591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh FILE *state = fopen(DIR ".tmp", "wb"); 691591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (!state) { 703762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot create state: %s", strerror(errno)); 711591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 721591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 731591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 741591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (argc >= 6) { 751591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Invoked by pppd. */ 761591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s\n", argv[1]); 771591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s/32\n", argv[4]); 781591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "0.0.0.0/0\n"); 791591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s %s\n", env("DNS1"), env("DNS2")); 801591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "\n"); 811591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } else if (argc == 2) { 821591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Invoked by racoon. */ 831591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh const char *interface = env("INTERFACE"); 841591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh const char *address = env("INTERNAL_ADDR4"); 851591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh const char *routes = env("SPLIT_INCLUDE_CIDR"); 861591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 871591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh int s = socket(AF_INET, SOCK_DGRAM, 0); 881591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh struct rtentry rt; 891591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh struct ifreq ifr; 901591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 911591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh memset(&rt, 0, sizeof(rt)); 921591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh memset(&ifr, 0, sizeof(ifr)); 931591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 941591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Remove the old host route. There could be more than one. */ 951591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh rt.rt_flags |= RTF_UP | RTF_HOST; 961591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (set_address(&rt.rt_dst, env("REMOTE_ADDR"))) { 971591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh while (!ioctl(s, SIOCDELRT, &rt)); 981591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 991591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (errno != ESRCH) { 1003762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot remove host route: %s", strerror(errno)); 1011591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 1021591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 1031591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1041591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Create a new host route. */ 1051591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh rt.rt_flags |= RTF_GATEWAY; 1061591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (!set_address(&rt.rt_gateway, argv[1]) || 1071591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh (ioctl(s, SIOCADDRT, &rt) && errno != EEXIST)) { 1083762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot create host route: %s", strerror(errno)); 1091591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 1101591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 1111591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1121591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Bring up the interface. */ 1131591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh ifr.ifr_flags = IFF_UP; 1141591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh strncpy(ifr.ifr_name, interface, IFNAMSIZ); 1151591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (ioctl(s, SIOCSIFFLAGS, &ifr)) { 1163762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot bring up %s: %s", interface, strerror(errno)); 1171591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 1181591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 1191591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1201591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Set the address. */ 1211591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (!set_address(&ifr.ifr_addr, address) || 1221591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh ioctl(s, SIOCSIFADDR, &ifr)) { 1233762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot set address: %s", strerror(errno)); 1241591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 1251591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 1261591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1271591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* Set the netmask. */ 128f459d324bf7fcec3694460928efcccf3267c2f5eChia-chi Yeh if (set_address(&ifr.ifr_netmask, env("INTERNAL_NETMASK4"))) { 129f459d324bf7fcec3694460928efcccf3267c2f5eChia-chi Yeh if (ioctl(s, SIOCSIFNETMASK, &ifr)) { 1303762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot set netmask: %s", strerror(errno)); 131f459d324bf7fcec3694460928efcccf3267c2f5eChia-chi Yeh return 1; 132f459d324bf7fcec3694460928efcccf3267c2f5eChia-chi Yeh } 1331591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 1341591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1351591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh /* TODO: Send few packets to trigger phase 2? */ 1361591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1371591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s\n", interface); 1381591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s/%s\n", address, env("INTERNAL_CIDR4")); 1391591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s\n", routes[0] ? routes : "0.0.0.0/0"); 1401591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s\n", env("INTERNAL_DNS4_LIST")); 1411591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fprintf(state, "%s\n", env("DEFAULT_DOMAIN")); 1421591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } else { 1433762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot parse parameters"); 1441591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 1451591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh } 1461591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh 1471591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh fclose(state); 1481591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh if (chmod(DIR ".tmp", 0444) || rename(DIR ".tmp", DIR "state")) { 1493762c311729fe9f3af085c14c5c1fb471d994c03Steve Block ALOGE("Cannot write state: %s", strerror(errno)); 1501591aa004557859742fb89190ce76cbbf3a1ef12Chia-chi Yeh return 1; 1516278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh } 1526278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh return 0; 1536278d5ef052cec6afecae69328e084566bb157c6Chia-chi Yeh} 154