/*
 * keyd.c - key retrieval daemon
 *
 * Copyright 2004,2011 Jonathan McDowell <noodles@earth.li>
 *
 * This program is free software: you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by the Free
 * Software Foundation; version 2 of the License.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program.  If not, see <https://www.gnu.org/licenses/>.
 */

#include <errno.h>
#include <fcntl.h>
#include <getopt.h>
#include <inttypes.h>
#include <poll.h>
#include <signal.h>
#include <stdbool.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <sys/un.h>
#include <time.h>
#include <unistd.h>

#include "build-config.h"

#ifdef HAVE_SYSTEMD
#include <systemd/sd-daemon.h>
#endif

#include "charfuncs.h"
#include "cleanup.h"
#include "keyd.h"
#include "keydb.h"
#include "keyid.h"
#include "keystructs.h"
#include "log.h"
#include "mem.h"
#include "onak-conf.h"
#include "parsekey.h"

/* Maximum number of clients we're prepared to accept at once */
#define MAX_CLIENTS 16

static bool using_socket_activation = false;

static struct keyd_stats *stats;

static void daemonize(void)
{
	pid_t pid;

	pid = fork();

	if (pid < 0) {
		logthing(LOGTHING_CRITICAL,
			"Failed to fork into background: %d (%s)",
			errno,
			strerror(errno));
		exit(EXIT_FAILURE);
	} else if (pid > 0) {
		logthing(LOGTHING_INFO, "Backgrounded as pid %d.", pid);
		exit(EXIT_SUCCESS);
	}

	if (setsid() == -1) {
		logthing(LOGTHING_CRITICAL,
			"Couldn't set process group leader: %d (%s)",
			errno,
			strerror(errno));
		exit(EXIT_FAILURE);
	}

	if (!freopen("/dev/null", "r", stdin)) {
		logthing(LOGTHING_CRITICAL,
			"Couldn't reopen stdin to NULL: %d (%s)",
			errno,
			strerror(errno));
		exit(EXIT_FAILURE);
	}
	if (!freopen("/dev/null", "w", stdout)) {
		logthing(LOGTHING_CRITICAL,
			"Couldn't reopen stdout to NULL: %d (%s)",
			errno,
			strerror(errno));
		exit(EXIT_FAILURE);
	}
	if (!freopen("/dev/null", "w", stderr)) {
		logthing(LOGTHING_CRITICAL,
			"Couldn't reopen stderr to NULL: %d (%s)",
			errno,
			strerror(errno));
		exit(EXIT_FAILURE);
	}

	return;
}

static bool keyd_write_key(int fd, struct openpgp_publickey *key)
{
	struct openpgp_packet_list *packets = NULL;
	struct openpgp_packet_list *list_end = NULL;
	struct buffer_ctx           storebuf;
	ssize_t written;
	bool    ok = true;

	storebuf.offset = 0;
	storebuf.size = 8192;
	storebuf.buffer = malloc(8192);

	flatten_publickey(key,
				&packets,
				&list_end);
	write_openpgp_stream(buffer_putchar,
				&storebuf,
				packets);
	logthing(LOGTHING_TRACE,
				"Sending %d bytes.",
				storebuf.offset);
	written = write(fd, &storebuf.offset,
			sizeof(storebuf.offset));
	if (written == 0) {
		ok = false;
	} else {
		written = write(fd, storebuf.buffer,
			storebuf.offset);
		if (written != storebuf.offset) {
			ok = false;
		}
	}

	free(storebuf.buffer);
	storebuf.buffer = NULL;
	storebuf.size = storebuf.offset = 0;
	free_packet_list(packets);
	packets = list_end = NULL;

	return (ok);
}

static bool keyd_write_reply(int fd, enum keyd_reply _reply)
{
	uint32_t reply = _reply;
	ssize_t written;
	bool ok = true;

	written = write(fd, &reply, sizeof(reply));
	if (written != sizeof(reply)) {
		ok = false;
	}

	return (ok);
}

static bool keyd_write_size(int fd, size_t size)
{
	ssize_t written;
	bool ok = true;

	written = write(fd, &size, sizeof(size));
	if (written != sizeof(size)) {
		ok = false;
	}

	return (ok);
}

static void iteratefunc(void *ctx, struct openpgp_publickey *key)
{
	int      *fd = (int *) ctx;
	uint64_t  keyid;

	if (key != NULL) {
		get_keyid(key, &keyid);
		logthing(LOGTHING_TRACE,
				"Iterating over 0x%016" PRIX64 ".",
				keyid);

		keyd_write_key(*fd, key);
	}

	return;
}

static int sock_init(const char *sockname)
{
	struct sockaddr_un sock;
	int                fd = -1;
	int                ret = -1;
#ifdef HAVE_SYSTEMD
	int                n;

	n = sd_listen_fds(0);
	if (n > 1) {
		logthing(LOGTHING_ERROR,
			"Too many file descriptors received from systemd.");
	} else if (n == 1) {
		fd = SD_LISTEN_FDS_START + 0;
		if (sd_is_socket_unix(fd, SOCK_STREAM, 1, NULL, 0) <= 0) {
			logthing(LOGTHING_ERROR,
				"systemd passed an invalid socket.");
			fd = -1;
		}
		using_socket_activation = true;
	} else {
#endif
		fd = socket(PF_UNIX, SOCK_STREAM, 0);
		if (fd != -1) {
			ret = fcntl(fd, F_SETFD, FD_CLOEXEC);
		}

		if (ret != -1) {
			sock.sun_family = AF_UNIX;
			strncpy(sock.sun_path, sockname,
					sizeof(sock.sun_path) - 1);
			unlink(sockname);
			ret = bind(fd, (struct sockaddr *) &sock,
					sizeof(sock));
		}

		if (ret != -1) {
			ret = listen(fd, 5);
		}

		if (ret == -1) {
			logthing(LOGTHING_ERROR,
				"Couldn't open socket to listen on: %s (%d)",
				strerror(errno),
				errno);
			close(fd);
			fd = -1;
		}
#ifdef HAVE_SYSTEMD
	}
#endif

	return fd;
}

static int sock_do(struct onak_dbctx *dbctx, int fd)
{
	uint32_t cmd = KEYD_CMD_UNKNOWN;
	ssize_t  bytes = 0;
	ssize_t  count = 0;
	int	 ret = 0;
	uint64_t keyid = 0;
	char     *search = NULL;
	struct openpgp_publickey *key = NULL;
	struct openpgp_packet_list *packets = NULL;
	struct buffer_ctx storebuf;
	struct skshash hash;
	struct openpgp_fingerprint fingerprint;

	/*
	 * Get the command from the client.
	 */
	bytes = read(fd, &cmd, sizeof(cmd));

	logthing(LOGTHING_DEBUG, "Read %d bytes, command: %d", bytes, cmd);

	if (bytes != sizeof(cmd)) {
		ret = 1;
	}
	
	if (ret == 0) {
		if (cmd < KEYD_CMD_LAST) {
			stats->command_stats[cmd]++;
		} else {
			stats->command_stats[KEYD_CMD_UNKNOWN]++;
		}
		switch (cmd) {
		case KEYD_CMD_VERSION:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				cmd = sizeof(keyd_version);
				bytes = write(fd, &cmd, sizeof(cmd));
				if (bytes != sizeof(cmd)) {
					ret = 1;
				}
			}
			if (ret == 0) {
				bytes = write(fd, &keyd_version,
					sizeof(keyd_version));
				if (bytes != sizeof(keyd_version)) {
					ret = 1;
				}
			}
			break;
		case KEYD_CMD_GET:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				if ((read(fd, &bytes, 1) != 1) ||
						(bytes > MAX_FINGERPRINT_LEN)) {
					ret = 1;
				} else {
					fingerprint.length = bytes;
					bytes = read(fd, fingerprint.fp,
						fingerprint.length);
					if (bytes != fingerprint.length) {
						ret = 1;
					}
				}
			}
			if (ret == 0) {
				logthing(LOGTHING_INFO,
						"Fetching by fingerprint"
						", result: %d",
						dbctx->fetch_key(dbctx,
							&fingerprint,
							&key, false));
				if (key != NULL) {
					keyd_write_key(fd, key);
					free_publickey(key);
					key = NULL;
				} else {
					if (!keyd_write_size(fd, 0)) {
						ret = 1;
					}
				}
			}
			break;
		case KEYD_CMD_GET_ID:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				bytes = read(fd, &keyid, sizeof(keyid));
				if (bytes != sizeof(keyid)) {
					ret = 1;
				}
			}
			if (ret == 0) {
				logthing(LOGTHING_INFO,
						"Fetching 0x%" PRIX64
						", result: %d",
						keyid,
						dbctx->fetch_key_id(dbctx,
							keyid,
							&key, false));
				if (key != NULL) {
					keyd_write_key(fd, key);
					free_publickey(key);
					key = NULL;
				} else {
					if (!keyd_write_size(fd, 0)) {
						ret = 1;
					}
				}
			}
			break;
		case KEYD_CMD_GET_FP:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				if ((read(fd, &bytes, 1) != 1) ||
						(bytes > MAX_FINGERPRINT_LEN)) {
					ret = 1;
				} else {
					fingerprint.length = bytes;
					bytes = read(fd, fingerprint.fp,
						fingerprint.length);
					if (bytes != fingerprint.length) {
						ret = 1;
					}
				}
			}
			if (ret == 0) {
				logthing(LOGTHING_INFO,
						"Fetching by fingerprint"
						", result: %d",
						dbctx->fetch_key_fp(dbctx,
							&fingerprint,
							&key, false));
				if (key != NULL) {
					keyd_write_key(fd, key);
					free_publickey(key);
					key = NULL;
				} else {
					if (!keyd_write_size(fd, 0)) {
						ret = 1;
					}
				}
			}
			break;
		case KEYD_CMD_GET_TEXT:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				bytes = read(fd, &count, sizeof(count));
				if (bytes != sizeof(count)) {
					ret = 1;
				}
			}
			if (ret == 0) {
				search = malloc(count+1);
				bytes = read(fd, search, count);
				if (bytes != count) {
					ret = 1;
					free(search);
					break;
				}
				search[count] = 0;
				logthing(LOGTHING_INFO,
						"Fetching %s, result: %d",
						search,
						dbctx->fetch_key_text(dbctx,
							search, &key));
				if (key != NULL) {
					keyd_write_key(fd, key);
					free_publickey(key);
					key = NULL;
				} else {
					if (!keyd_write_size(fd, 0)) {
						ret = 1;
					}
				}
				free(search);
			}
			break;
		case KEYD_CMD_STORE:
		case KEYD_CMD_UPDATE:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				bytes = read(fd, &storebuf.size,
					sizeof(storebuf.size));
				logthing(LOGTHING_TRACE, "Reading %d bytes.",
					storebuf.size);
				if (bytes != sizeof(storebuf.size)) {
					ret = 1;
				}
			}
			if (ret == 0 && storebuf.size > 0) {
				storebuf.buffer = malloc(storebuf.size);
				storebuf.offset = 0;
				bytes = count = 0;
				while (bytes >= 0 && count < storebuf.size) {
					bytes = read(fd,
						&storebuf.buffer[count],
						storebuf.size - count);
					logthing(LOGTHING_TRACE,
							"Read %d bytes.",
							bytes);
					count += bytes;
				}
				read_openpgp_stream(buffer_fetchchar,
						&storebuf,
						&packets,
						0);
				parse_keys(packets, &key);
				dbctx->store_key(dbctx, key, false,
					(cmd == KEYD_CMD_UPDATE));
				free_packet_list(packets);
				packets = NULL;
				free_publickey(key);
				key = NULL;
				free(storebuf.buffer);
				storebuf.buffer = NULL;
				storebuf.size = storebuf.offset = 0;
			}
			break;
		case KEYD_CMD_DELETE:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				bytes = read(fd, &fingerprint,
						sizeof(fingerprint));
				if (bytes != sizeof(fingerprint)) {
					ret = 1;
				}
			}
			if (ret == 0) {
				logthing(LOGTHING_INFO,
						"Deleting 0x%" PRIX64
						", result: %d",
						keyid,
						dbctx->delete_key(dbctx,
							&fingerprint, false));
			}
			break;
		case KEYD_CMD_KEYITER:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				dbctx->iterate_keys(dbctx, iteratefunc,
					&fd);
				if (!keyd_write_size(fd, 0)) {
					ret = 1;
				}
			}
			break;
		case KEYD_CMD_CLOSE:
			/* We're going to close the FD even if this fails */
			(void) keyd_write_reply(fd, KEYD_REPLY_OK);
			ret = 1;
			break;
		case KEYD_CMD_QUIT:
			/* We're going to quit even if this fails */
			(void) keyd_write_reply(fd, KEYD_REPLY_OK);
			logthing(LOGTHING_NOTICE,
				"Exiting due to quit request.");
			ret = 1;
			trytocleanup();
			break;
		case KEYD_CMD_STATS:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				cmd = sizeof(*stats);
				bytes = write(fd, &cmd, sizeof(cmd));
				if (bytes != sizeof(cmd)) {
					ret = 1;
				}
			}
			if (ret == 0) {
				bytes = write(fd, stats, sizeof(*stats));
				if (bytes != sizeof(*stats)) {
					ret = 1;
				}
			}
			break;
		case KEYD_CMD_GET_SKSHASH:
			if (!keyd_write_reply(fd, KEYD_REPLY_OK)) {
				ret = 1;
			}
			if (ret == 0) {
				bytes = read(fd, hash.hash, sizeof(hash.hash));
				if (bytes != sizeof(hash.hash)) {
					ret = 1;
				}
			}
			if (ret == 0) {
				logthing(LOGTHING_INFO,
						"Fetching by hash"
						", result: %d",
						dbctx->fetch_key_skshash(dbctx,
							&hash, &key));
				if (key != NULL) {
					keyd_write_key(fd, key);
					free_publickey(key);
					key = NULL;
				} else {
					if (!keyd_write_size(fd, 0)) {
						ret = 1;
					}
				}
			}
			break;

		default:
			logthing(LOGTHING_ERROR, "Got unknown command: %d",
					cmd);
			if (!keyd_write_reply(fd, KEYD_REPLY_UNKNOWN_CMD)) {
				ret = 1;
			}
		}
	}

	return(ret);
}

static int sock_close(int fd)
{
	shutdown(fd, SHUT_RDWR);
	return close(fd);
}

static int sock_accept(int fd)
{
	struct sockaddr_un sock;
	socklen_t          socklen;
	int    srv = -1;
	int    ret = -1;

	socklen = sizeof(sock);
	srv = accept(fd, (struct sockaddr *) &sock, &socklen);
	if (srv != -1) {
		ret = fcntl(srv, F_SETFD, FD_CLOEXEC);
	}

	if (ret != -1) {
		stats->connects++;
	}

	return (srv);
}

static void usage(void)
{
	puts("keyd " ONAK_VERSION " - backend key serving daemon for the "
		"onak PGP keyserver.\n");
	puts("Usage:\n");
	puts("\tkeyd [options]\n");
	puts("\tOptions:\n:");
	puts("-c <file> - use <file> as the config file");
	puts("-f        - run in the foreground");
	puts("-h        - show this help text");
	exit(EXIT_FAILURE);
}

int main(int argc, char *argv[])
{
	int fd = -1, fdcount, i, curfd, clients[MAX_CLIENTS];
	struct pollfd rfds[MAX_CLIENTS];
	char sockname[100];
	char *configfile = NULL;
	bool foreground = false;
	int optchar;
	struct onak_dbctx *dbctx;

	while ((optchar = getopt(argc, argv, "c:fh")) != -1 ) {
		switch (optchar) {
		case 'c':
			if (configfile != NULL) {
				free(configfile);
			}
			configfile = strdup(optarg);
			break;
		case 'f':
			foreground = true;
			break;
		case 'h':
		default:
			usage();
			break;
		}
	}

	readconfig(configfile);
	free(configfile);
	configfile = NULL;
	initlogthing("keyd", config.logfile);
	config.use_keyd = false;

	if (!foreground) {
		daemonize();
	}

	catchsignals();
	signal(SIGPIPE, SIG_IGN);


	stats = calloc(1, sizeof(*stats));
	if (!stats) {
		logthing(LOGTHING_ERROR,
			"Couldn't allocate memory for stats structure.");
		exit(EXIT_FAILURE);
	}
	stats->started = time(NULL);

	snprintf(sockname, sizeof(sockname) - 1, "%s/%s",
			config.sock_dir, KEYD_SOCKET);
	fd = sock_init(sockname);

	if (fd != -1) {
		memset(rfds, 0, sizeof(rfds));
		rfds[0].fd = fd;
		rfds[0].events = POLLIN;
		fdcount = 1;
		memset(clients, -1, sizeof (clients));

		dbctx = config.dbinit(config.backend, false);

		logthing(LOGTHING_NOTICE, "Accepting connections%s",
			using_socket_activation ? " (via systemd)" : "");
		while (!cleanup() && poll(rfds, fdcount, -1) != -1) {
			/*
			 * Deal with existing clients first; if we're at our
			 * connection limit then processing them might free
			 * things up and let us accept the next client below.
			 */
			curfd = 0;
			for (i = 0; i < MAX_CLIENTS; i++) {
				if (clients[i] != -1 && (rfds[++curfd].revents & POLLIN)) {
					logthing(LOGTHING_DEBUG,
						"Handling connection for client %d.", i);
					if (sock_do(dbctx, clients[i])) {
						sock_close(clients[i]);
						clients[i] = -1;
						logthing(LOGTHING_DEBUG,
							"Closed connection for client %d.", i);
					}
				}
			}
			/*
			 * Check if we have a new incoming connection to accept.
			 */
			if (rfds[0].revents & POLLIN) {
				for (i = 0; i < MAX_CLIENTS; i++) {
					if (clients[i] == -1) {
						break;
					}
				}
				if (i < MAX_CLIENTS) {
					logthing(LOGTHING_INFO,
						"Accepted connection %d.", i);
					clients[i] = sock_accept(fd);
				}
			}

			memset(rfds, 0, sizeof(rfds));
			rfds[0].fd = fd;
			rfds[0].events = POLLIN;
			fdcount = 1;
			for (i = 0; i < MAX_CLIENTS; i++) {
				if (clients[i] != -1) {
					rfds[fdcount].fd = clients[i];
					rfds[fdcount].events = POLLIN;
					fdcount++;
				}
			}
		}
		dbctx->cleanupdb(dbctx);
#ifdef HAVE_SYSTEMD
		if (!using_socket_activation) {
#endif
			sock_close(fd);
			unlink(sockname);
#ifdef HAVE_SYSTEMD
		}
#endif
	}

	free(stats);

	logthing(LOGTHING_NOTICE, "Exiting");
	cleanuplogthing();
	cleanupconfig();

	return(EXIT_SUCCESS);
}
