26#include <winpr/path.h>
27#include <winpr/collections.h>
28#include <winpr/cmdline.h>
31#include <freerdp/server/proxy/proxy_config.h>
33#include <freerdp/server/proxy/proxy_log.h>
35#include <freerdp/crypto/crypto.h>
36#include <freerdp/channels/cliprdr.h>
37#include <freerdp/channels/rdpsnd.h>
38#include <freerdp/channels/audin.h>
39#include <freerdp/channels/rdpdr.h>
40#include <freerdp/channels/disp.h>
41#include <freerdp/channels/rail.h>
42#include <freerdp/channels/rdpei.h>
43#include <freerdp/channels/tsmf.h>
44#include <freerdp/channels/video.h>
45#include <freerdp/channels/rdpecam.h>
49#define TAG PROXY_TAG("config")
51#define CONFIG_PRINT_SECTION(section) WLog_INFO(TAG, "\t%s:", section)
52#define CONFIG_PRINT_SECTION_KEY(section, key) WLog_INFO(TAG, "\t%s/%s:", section, key)
53#define CONFIG_PRINT_STR(config, key) WLog_INFO(TAG, "\t\t%s: %s", #key, (config)->key)
54#define CONFIG_PRINT_STR_CONTENT(config, key) \
55 WLog_INFO(TAG, "\t\t%s: %s", #key, (config)->key ? "set" : NULL)
56#define CONFIG_PRINT_BOOL(config, key) WLog_INFO(TAG, "\t\t%s: %s", #key, boolstr((config)->key))
57#define CONFIG_PRINT_UINT16(config, key) WLog_INFO(TAG, "\t\t%s: %" PRIu16 "", #key, (config)->key)
58#define CONFIG_PRINT_UINT32(config, key) WLog_INFO(TAG, "\t\t%s: %" PRIu32 "", #key, (config)->key)
60static const char* bool_str_true =
"true";
61static const char* bool_str_false =
"false";
62static const char* boolstr(BOOL rc)
64 return rc ? bool_str_true : bool_str_false;
67static const char* section_server =
"Server";
68static const char* key_host =
"Host";
69static const char* key_port =
"Port";
71static const char* section_target =
"Target";
72static const char* key_target_fixed =
"FixedTarget";
73static const char* key_target_user =
"User";
74static const char* key_target_pwd =
"Password";
75static const char* key_target_domain =
"Domain";
76static const char* key_target_tls_seclevel =
"TlsSecLevel";
78static const char* section_plugins =
"Plugins";
79static const char* key_plugins_modules =
"Modules";
80static const char* key_plugins_required =
"Required";
82static const char* section_channels =
"Channels";
83static const char* key_channels_gfx =
"GFX";
84static const char* key_channels_disp =
"DisplayControl";
85static const char* key_channels_clip =
"Clipboard";
86static const char* key_channels_mic =
"AudioInput";
87static const char* key_channels_sound =
"AudioOutput";
88static const char* key_channels_rdpdr =
"DeviceRedirection";
89static const char* key_channels_video =
"VideoRedirection";
90static const char* key_channels_camera =
"CameraRedirection";
91static const char* key_channels_rails =
"RemoteApp";
92static const char* key_channels_blacklist =
"PassthroughIsBlacklist";
93static const char* key_channels_pass =
"Passthrough";
94static const char* key_channels_intercept =
"Intercept";
96static const char* section_input =
"Input";
97static const char* key_input_kbd =
"Keyboard";
98static const char* key_input_mouse =
"Mouse";
99static const char* key_input_multitouch =
"Multitouch";
101static const char* section_security =
"Security";
102static const char* key_security_server_nla =
"ServerNlaSecurity";
103static const char* key_security_server_tls =
"ServerTlsSecurity";
104static const char* key_security_server_rdp =
"ServerRdpSecurity";
105static const char* key_security_client_nla =
"ClientNlaSecurity";
106static const char* key_security_client_tls =
"ClientTlsSecurity";
107static const char* key_security_client_rdp =
"ClientRdpSecurity";
108static const char* key_security_client_fallback =
"ClientAllowFallbackToTls";
110static const char* section_certificates =
"Certificates";
111static const char* key_private_key_file =
"PrivateKeyFile";
112static const char* key_private_key_content =
"PrivateKeyContent";
113static const char* key_cert_file =
"CertificateFile";
114static const char* key_cert_content =
"CertificateContent";
116WINPR_ATTR_MALLOC(CommandLineParserFree, 1)
118static
char** pf_config_parse_comma_separated_list(const
char* list,
size_t* count)
123 if (strlen(list) == 0)
129 return CommandLineParseCommaSeparatedValues(list, count);
132static BOOL pf_config_get_uint16(wIniFile* ini,
const char* section,
const char* key,
133 UINT16* result, BOOL required)
136 const char* strval = NULL;
138 WINPR_ASSERT(result);
140 strval = IniFile_GetKeyValueString(ini, section, key);
141 if (!strval && required)
143 WLog_ERR(TAG,
"key '%s.%s' does not exist.", section, key);
146 val = IniFile_GetKeyValueInt(ini, section, key);
147 if ((val <= 0) || (val > UINT16_MAX))
149 WLog_ERR(TAG,
"invalid value %d for key '%s.%s'.", val, section, key);
153 *result = (UINT16)val;
157static BOOL pf_config_get_uint32(wIniFile* ini,
const char* section,
const char* key,
158 UINT32* result, BOOL required)
160 WINPR_ASSERT(result);
162 const char* strval = IniFile_GetKeyValueString(ini, section, key);
166 WLog_ERR(TAG,
"key '%s.%s' does not exist.", section, key);
170 const int val = IniFile_GetKeyValueInt(ini, section, key);
173 WLog_ERR(TAG,
"invalid value %d for key '%s.%s'.", val, section, key);
177 *result = (UINT32)val;
181static BOOL pf_config_get_bool(wIniFile* ini,
const char* section,
const char* key, BOOL fallback)
184 const char* str_value = NULL;
186 str_value = IniFile_GetKeyValueString(ini, section, key);
189 WLog_WARN(TAG,
"key '%s.%s' not found, value defaults to %s.", section, key,
190 fallback ? bool_str_true : bool_str_false);
194 if (_stricmp(str_value, bool_str_true) == 0)
196 if (_stricmp(str_value, bool_str_false) == 0)
199 num_value = IniFile_GetKeyValueInt(ini, section, key);
207static const char* pf_config_get_str(wIniFile* ini,
const char* section,
const char* key,
210 const char* value = NULL;
212 value = IniFile_GetKeyValueString(ini, section, key);
217 WLog_ERR(TAG,
"key '%s.%s' not found.", section, key);
224static BOOL pf_config_load_server(wIniFile* ini, proxyConfig* config)
226 WINPR_ASSERT(config);
227 const char* host = pf_config_get_str(ini, section_server, key_host, FALSE);
233 config->Host = _strdup(host);
238 if (!pf_config_get_uint16(ini, section_server, key_port, &config->Port, TRUE))
244static BOOL pf_config_load_target(wIniFile* ini, proxyConfig* config)
246 const char* target_value = NULL;
248 WINPR_ASSERT(config);
249 config->FixedTarget = pf_config_get_bool(ini, section_target, key_target_fixed, FALSE);
251 if (!pf_config_get_uint16(ini, section_target, key_port, &config->TargetPort,
252 config->FixedTarget))
255 if (!pf_config_get_uint32(ini, section_target, key_target_tls_seclevel,
256 &config->TargetTlsSecLevel, FALSE))
259 if (config->FixedTarget)
261 target_value = pf_config_get_str(ini, section_target, key_host, TRUE);
265 free(config->TargetHost);
266 config->TargetHost = _strdup(target_value);
267 if (!config->TargetHost)
271 target_value = pf_config_get_str(ini, section_target, key_target_user, FALSE);
274 free(config->TargetUser);
275 config->TargetUser = _strdup(target_value);
276 if (!config->TargetUser)
280 target_value = pf_config_get_str(ini, section_target, key_target_pwd, FALSE);
283 free(config->TargetPassword);
284 config->TargetPassword = _strdup(target_value);
285 if (!config->TargetPassword)
289 target_value = pf_config_get_str(ini, section_target, key_target_domain, FALSE);
292 free(config->TargetDomain);
293 config->TargetDomain = _strdup(target_value);
294 if (!config->TargetDomain)
301static BOOL pf_config_load_channels(wIniFile* ini, proxyConfig* config)
303 WINPR_ASSERT(config);
304 config->GFX = pf_config_get_bool(ini, section_channels, key_channels_gfx, TRUE);
305 config->DisplayControl = pf_config_get_bool(ini, section_channels, key_channels_disp, TRUE);
306 config->Clipboard = pf_config_get_bool(ini, section_channels, key_channels_clip, FALSE);
307 config->AudioOutput = pf_config_get_bool(ini, section_channels, key_channels_mic, TRUE);
308 config->AudioInput = pf_config_get_bool(ini, section_channels, key_channels_sound, TRUE);
309 config->DeviceRedirection = pf_config_get_bool(ini, section_channels, key_channels_rdpdr, TRUE);
310 config->VideoRedirection = pf_config_get_bool(ini, section_channels, key_channels_video, TRUE);
311 config->CameraRedirection =
312 pf_config_get_bool(ini, section_channels, key_channels_camera, TRUE);
313 config->RemoteApp = pf_config_get_bool(ini, section_channels, key_channels_rails, FALSE);
314 config->PassthroughIsBlacklist =
315 pf_config_get_bool(ini, section_channels, key_channels_blacklist, FALSE);
316 config->Passthrough = pf_config_parse_comma_separated_list(
317 pf_config_get_str(ini, section_channels, key_channels_pass, FALSE),
318 &config->PassthroughCount);
319 config->Intercept = pf_config_parse_comma_separated_list(
320 pf_config_get_str(ini, section_channels, key_channels_intercept, FALSE),
321 &config->InterceptCount);
326static BOOL pf_config_load_input(wIniFile* ini, proxyConfig* config)
328 WINPR_ASSERT(config);
329 config->Keyboard = pf_config_get_bool(ini, section_input, key_input_kbd, TRUE);
330 config->Mouse = pf_config_get_bool(ini, section_input, key_input_mouse, TRUE);
331 config->Multitouch = pf_config_get_bool(ini, section_input, key_input_multitouch, TRUE);
335static BOOL pf_config_load_security(wIniFile* ini, proxyConfig* config)
337 WINPR_ASSERT(config);
338 config->ServerTlsSecurity =
339 pf_config_get_bool(ini, section_security, key_security_server_tls, TRUE);
340 config->ServerNlaSecurity =
341 pf_config_get_bool(ini, section_security, key_security_server_nla, FALSE);
342 config->ServerRdpSecurity =
343 pf_config_get_bool(ini, section_security, key_security_server_rdp, TRUE);
345 config->ClientTlsSecurity =
346 pf_config_get_bool(ini, section_security, key_security_client_tls, TRUE);
347 config->ClientNlaSecurity =
348 pf_config_get_bool(ini, section_security, key_security_client_nla, TRUE);
349 config->ClientRdpSecurity =
350 pf_config_get_bool(ini, section_security, key_security_client_rdp, TRUE);
351 config->ClientAllowFallbackToTls =
352 pf_config_get_bool(ini, section_security, key_security_client_fallback, TRUE);
356static BOOL pf_config_load_modules(wIniFile* ini, proxyConfig* config)
358 const char* modules_to_load = NULL;
359 const char* required_modules = NULL;
361 modules_to_load = pf_config_get_str(ini, section_plugins, key_plugins_modules, FALSE);
362 required_modules = pf_config_get_str(ini, section_plugins, key_plugins_required, FALSE);
364 WINPR_ASSERT(config);
365 config->Modules = pf_config_parse_comma_separated_list(modules_to_load, &config->ModulesCount);
367 config->RequiredPlugins =
368 pf_config_parse_comma_separated_list(required_modules, &config->RequiredPluginsCount);
372static char* pf_config_decode_base64(
const char* data,
const char* name,
size_t* pLength)
374 const char* headers[] = {
"-----BEGIN PUBLIC KEY-----",
"-----BEGIN RSA PUBLIC KEY-----",
375 "-----BEGIN CERTIFICATE-----",
"-----BEGIN PRIVATE KEY-----",
376 "-----BEGIN RSA PRIVATE KEY-----" };
378 size_t decoded_length = 0;
379 char* decoded = NULL;
382 WLog_ERR(TAG,
"Invalid base64 data [NULL] for %s", name);
387 WINPR_ASSERT(pLength);
389 const size_t length = strlen(data);
391 if (strncmp(data,
"-----", 5) == 0)
393 BOOL expected = FALSE;
394 for (
size_t x = 0; x < ARRAYSIZE(headers); x++)
396 const char* header = headers[x];
398 if (strncmp(data, header, strlen(header)) == 0)
407 char hdr[128] = { 0 };
408 const char* end = strchr(&data[5],
'-');
414 const size_t s = MIN(ARRAYSIZE(hdr) - 1ULL, (
size_t)(end - data));
415 memcpy(hdr, data, s);
418 WLog_WARN(TAG,
"PEM has unexpected header '%s'. Known supported headers are:", hdr);
419 for (
size_t x = 0; x < ARRAYSIZE(headers); x++)
421 const char* header = headers[x];
422 WLog_WARN(TAG,
"%s", header);
426 *pLength = length + 1;
427 return _strdup(data);
430 crypto_base64_decode(data, length, (BYTE**)&decoded, &decoded_length);
431 if (!decoded || decoded_length == 0)
433 WLog_ERR(TAG,
"Failed to decode base64 data of length %" PRIuz
" for %s", length, name);
438 *pLength = strnlen(decoded, decoded_length) + 1;
442static BOOL pf_config_load_certificates(wIniFile* ini, proxyConfig* config)
444 const char* tmp1 = NULL;
445 const char* tmp2 = NULL;
448 WINPR_ASSERT(config);
450 tmp1 = pf_config_get_str(ini, section_certificates, key_cert_file, FALSE);
453 if (!winpr_PathFileExists(tmp1))
455 WLog_ERR(TAG,
"%s/%s file %s does not exist", section_certificates, key_cert_file,
459 config->CertificateFile = _strdup(tmp1);
460 config->CertificatePEM =
461 crypto_read_pem(config->CertificateFile, &config->CertificatePEMLength);
462 if (!config->CertificatePEM)
464 config->CertificatePEMLength += 1;
466 tmp2 = pf_config_get_str(ini, section_certificates, key_cert_content, FALSE);
469 if (strlen(tmp2) < 1)
471 WLog_ERR(TAG,
"%s/%s has invalid empty value", section_certificates, key_cert_content);
474 config->CertificateContent = _strdup(tmp2);
475 config->CertificatePEM = pf_config_decode_base64(
476 config->CertificateContent,
"CertificateContent", &config->CertificatePEMLength);
477 if (!config->CertificatePEM)
483 "%s/%s and %s/%s are "
484 "mutually exclusive options",
485 section_certificates, key_cert_file, section_certificates, key_cert_content);
488 else if (!tmp1 && !tmp2)
491 "%s/%s or %s/%s are "
493 section_certificates, key_cert_file, section_certificates, key_cert_content);
497 tmp1 = pf_config_get_str(ini, section_certificates, key_private_key_file, FALSE);
500 if (!winpr_PathFileExists(tmp1))
502 WLog_ERR(TAG,
"%s/%s file %s does not exist", section_certificates,
503 key_private_key_file, tmp1);
506 config->PrivateKeyFile = _strdup(tmp1);
507 config->PrivateKeyPEM =
508 crypto_read_pem(config->PrivateKeyFile, &config->PrivateKeyPEMLength);
509 if (!config->PrivateKeyPEM)
511 config->PrivateKeyPEMLength += 1;
513 tmp2 = pf_config_get_str(ini, section_certificates, key_private_key_content, FALSE);
516 if (strlen(tmp2) < 1)
518 WLog_ERR(TAG,
"%s/%s has invalid empty value", section_certificates,
519 key_private_key_content);
522 config->PrivateKeyContent = _strdup(tmp2);
523 config->PrivateKeyPEM = pf_config_decode_base64(
524 config->PrivateKeyContent,
"PrivateKeyContent", &config->PrivateKeyPEMLength);
525 if (!config->PrivateKeyPEM)
532 "%s/%s and %s/%s are "
533 "mutually exclusive options",
534 section_certificates, key_private_key_file, section_certificates,
535 key_private_key_content);
538 else if (!tmp1 && !tmp2)
541 "%s/%s or %s/%s are "
542 "are required settings",
543 section_certificates, key_private_key_file, section_certificates,
544 key_private_key_content);
553 proxyConfig* config = NULL;
557 config = calloc(1,
sizeof(proxyConfig));
561 config->TargetTlsSecLevel = 1;
564 if (!pf_config_load_server(ini, config))
567 if (!pf_config_load_target(ini, config))
570 if (!pf_config_load_channels(ini, config))
573 if (!pf_config_load_input(ini, config))
576 if (!pf_config_load_security(ini, config))
579 if (!pf_config_load_modules(ini, config))
582 if (!pf_config_load_certificates(ini, config))
584 config->ini = IniFile_Clone(ini);
590 WINPR_PRAGMA_DIAG_PUSH
591 WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
593 WINPR_PRAGMA_DIAG_POP
601 wIniFile* ini = IniFile_New();
606 if (IniFile_SetKeyValueString(ini, section_server, key_host,
"0.0.0.0") < 0)
608 if (IniFile_SetKeyValueInt(ini, section_server, key_port, 3389) < 0)
612 if (IniFile_SetKeyValueString(ini, section_target, key_host,
"somehost.example.com") < 0)
614 if (IniFile_SetKeyValueInt(ini, section_target, key_port, 3389) < 0)
616 if (IniFile_SetKeyValueString(ini, section_target, key_target_fixed, bool_str_true) < 0)
618 if (IniFile_SetKeyValueInt(ini, section_target, key_target_tls_seclevel, 1) < 0)
622 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_gfx, bool_str_true) < 0)
624 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_disp, bool_str_true) < 0)
626 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_clip, bool_str_true) < 0)
628 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_mic, bool_str_true) < 0)
630 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_sound, bool_str_true) < 0)
632 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_rdpdr, bool_str_true) < 0)
634 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_video, bool_str_true) < 0)
636 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_camera, bool_str_true) < 0)
638 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_rails, bool_str_false) < 0)
641 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_blacklist, bool_str_true) < 0)
643 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_pass,
"") < 0)
645 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_intercept,
"") < 0)
649 if (IniFile_SetKeyValueString(ini, section_input, key_input_kbd, bool_str_true) < 0)
651 if (IniFile_SetKeyValueString(ini, section_input, key_input_mouse, bool_str_true) < 0)
653 if (IniFile_SetKeyValueString(ini, section_input, key_input_multitouch, bool_str_true) < 0)
657 if (IniFile_SetKeyValueString(ini, section_security, key_security_server_tls, bool_str_true) <
660 if (IniFile_SetKeyValueString(ini, section_security, key_security_server_nla, bool_str_false) <
663 if (IniFile_SetKeyValueString(ini, section_security, key_security_server_rdp, bool_str_true) <
667 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_tls, bool_str_true) <
670 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_nla, bool_str_true) <
673 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_rdp, bool_str_true) <
676 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_fallback,
681 if (IniFile_SetKeyValueString(ini, section_plugins, key_plugins_modules,
682 "module1,module2,...") < 0)
684 if (IniFile_SetKeyValueString(ini, section_plugins, key_plugins_required,
685 "module1,module2,...") < 0)
689 if (IniFile_SetKeyValueString(ini, section_certificates, key_cert_file,
690 "<absolute path to some certificate file> OR") < 0)
692 if (IniFile_SetKeyValueString(ini, section_certificates, key_cert_content,
693 "<Contents of some certificate file in PEM format>") < 0)
696 if (IniFile_SetKeyValueString(ini, section_certificates, key_private_key_file,
697 "<absolute path to some private key file> OR") < 0)
699 if (IniFile_SetKeyValueString(ini, section_certificates, key_private_key_content,
700 "<Contents of some private key file in PEM format>") < 0)
704 if (IniFile_WriteFile(ini, file) < 0)
716 proxyConfig* config = NULL;
717 wIniFile* ini = NULL;
723 WLog_ERR(TAG,
"IniFile_New() failed!");
727 if (IniFile_ReadBuffer(ini, buffer) < 0)
729 WLog_ERR(TAG,
"failed to parse ini: '%s'", buffer);
741 proxyConfig* config = NULL;
742 wIniFile* ini = IniFile_New();
746 WLog_ERR(TAG,
"IniFile_New() failed!");
750 if (IniFile_ReadFile(ini, path) < 0)
752 WLog_ERR(TAG,
"failed to parse ini file: '%s'", path);
762static void pf_server_config_print_list(
char** list,
size_t count)
765 for (
size_t i = 0; i < count; i++)
766 WLog_INFO(TAG,
"\t\t- %s", list[i]);
771 WINPR_ASSERT(config);
772 WLog_INFO(TAG,
"Proxy configuration:");
774 CONFIG_PRINT_SECTION(section_server);
775 CONFIG_PRINT_STR(config, Host);
776 CONFIG_PRINT_UINT16(config, Port);
778 if (config->FixedTarget)
780 CONFIG_PRINT_SECTION(section_target);
781 CONFIG_PRINT_STR(config, TargetHost);
782 CONFIG_PRINT_UINT16(config, TargetPort);
783 CONFIG_PRINT_UINT32(config, TargetTlsSecLevel);
785 if (config->TargetUser)
786 CONFIG_PRINT_STR(config, TargetUser);
787 if (config->TargetDomain)
788 CONFIG_PRINT_STR(config, TargetDomain);
791 CONFIG_PRINT_SECTION(section_input);
792 CONFIG_PRINT_BOOL(config, Keyboard);
793 CONFIG_PRINT_BOOL(config, Mouse);
794 CONFIG_PRINT_BOOL(config, Multitouch);
796 CONFIG_PRINT_SECTION(section_security);
797 CONFIG_PRINT_BOOL(config, ServerNlaSecurity);
798 CONFIG_PRINT_BOOL(config, ServerTlsSecurity);
799 CONFIG_PRINT_BOOL(config, ServerRdpSecurity);
800 CONFIG_PRINT_BOOL(config, ClientNlaSecurity);
801 CONFIG_PRINT_BOOL(config, ClientTlsSecurity);
802 CONFIG_PRINT_BOOL(config, ClientRdpSecurity);
803 CONFIG_PRINT_BOOL(config, ClientAllowFallbackToTls);
805 CONFIG_PRINT_SECTION(section_channels);
806 CONFIG_PRINT_BOOL(config, GFX);
807 CONFIG_PRINT_BOOL(config, DisplayControl);
808 CONFIG_PRINT_BOOL(config, Clipboard);
809 CONFIG_PRINT_BOOL(config, AudioOutput);
810 CONFIG_PRINT_BOOL(config, AudioInput);
811 CONFIG_PRINT_BOOL(config, DeviceRedirection);
812 CONFIG_PRINT_BOOL(config, VideoRedirection);
813 CONFIG_PRINT_BOOL(config, CameraRedirection);
814 CONFIG_PRINT_BOOL(config, RemoteApp);
815 CONFIG_PRINT_BOOL(config, PassthroughIsBlacklist);
817 if (config->PassthroughCount)
819 WLog_INFO(TAG,
"\tStatic Channels Proxy:");
820 pf_server_config_print_list(config->Passthrough, config->PassthroughCount);
823 if (config->InterceptCount)
825 WLog_INFO(TAG,
"\tStatic Channels Proxy-Intercept:");
826 pf_server_config_print_list(config->Intercept, config->InterceptCount);
830 CONFIG_PRINT_SECTION_KEY(section_plugins, key_plugins_modules);
831 for (
size_t x = 0; x < config->ModulesCount; x++)
832 CONFIG_PRINT_STR(config, Modules[x]);
835 CONFIG_PRINT_SECTION_KEY(section_plugins, key_plugins_required);
836 for (
size_t x = 0; x < config->RequiredPluginsCount; x++)
837 CONFIG_PRINT_STR(config, RequiredPlugins[x]);
839 CONFIG_PRINT_SECTION(section_certificates);
840 CONFIG_PRINT_STR(config, CertificateFile);
841 CONFIG_PRINT_STR_CONTENT(config, CertificateContent);
842 CONFIG_PRINT_STR(config, PrivateKeyFile);
843 CONFIG_PRINT_STR_CONTENT(config, PrivateKeyContent);
846static void zfree(
char* str)
850 const size_t len = strlen(str);
855static void znfree(
char* str,
size_t len)
869 free(config->TargetHost);
870 free(config->TargetUser);
871 free(config->TargetDomain);
872 free(config->TargetPassword);
874 CommandLineParserFree(config->Passthrough);
875 CommandLineParserFree(config->Intercept);
876 CommandLineParserFree(config->Modules);
877 CommandLineParserFree(config->RequiredPlugins);
879 free(config->CertificateFile);
880 zfree(config->CertificateContent);
881 znfree(config->CertificatePEM, config->CertificatePEMLength);
882 free(config->PrivateKeyFile);
883 zfree(config->PrivateKeyContent);
884 znfree(config->PrivateKeyPEM, config->PrivateKeyPEMLength);
885 IniFile_Free(config->ini);
891 WINPR_ASSERT(config);
892 return config->RequiredPluginsCount;
897 WINPR_ASSERT(config);
898 if (index >= config->RequiredPluginsCount)
901 return config->RequiredPlugins[index];
906 WINPR_ASSERT(config);
907 return config->ModulesCount;
918 WINPR_ASSERT(config);
920 cnv.ppc = config->Modules;
924static BOOL pf_config_copy_string(
char** dst,
const char* src)
932static BOOL pf_config_copy_string_n(
char** dst,
const char* src,
size_t size)
936 if (src && (size > 0))
938 WINPR_ASSERT(strnlen(src, size) == size - 1);
939 *dst = calloc(size,
sizeof(
char));
942 memcpy(*dst, src, size);
948static BOOL pf_config_copy_string_list(
char*** dst,
size_t* size,
char** src,
size_t srcSize)
952 WINPR_ASSERT(src || (srcSize == 0));
956 if (srcSize > INT32_MAX)
961 char* csv = CommandLineToCommaSeparatedValues((INT32)srcSize, src);
962 *dst = CommandLineParseCommaSeparatedValues(csv, size);
971 proxyConfig* tmp = calloc(1,
sizeof(proxyConfig));
974 WINPR_ASSERT(config);
981 if (!pf_config_copy_string(&tmp->Host, config->Host))
983 if (!pf_config_copy_string(&tmp->TargetHost, config->TargetHost))
986 if (!pf_config_copy_string_list(&tmp->Passthrough, &tmp->PassthroughCount, config->Passthrough,
987 config->PassthroughCount))
989 if (!pf_config_copy_string_list(&tmp->Intercept, &tmp->InterceptCount, config->Intercept,
990 config->InterceptCount))
992 if (!pf_config_copy_string_list(&tmp->Modules, &tmp->ModulesCount, config->Modules,
993 config->ModulesCount))
995 if (!pf_config_copy_string_list(&tmp->RequiredPlugins, &tmp->RequiredPluginsCount,
996 config->RequiredPlugins, config->RequiredPluginsCount))
998 if (!pf_config_copy_string(&tmp->CertificateFile, config->CertificateFile))
1000 if (!pf_config_copy_string(&tmp->CertificateContent, config->CertificateContent))
1002 if (!pf_config_copy_string_n(&tmp->CertificatePEM, config->CertificatePEM,
1003 config->CertificatePEMLength))
1005 if (!pf_config_copy_string(&tmp->PrivateKeyFile, config->PrivateKeyFile))
1007 if (!pf_config_copy_string(&tmp->PrivateKeyContent, config->PrivateKeyContent))
1009 if (!pf_config_copy_string_n(&tmp->PrivateKeyPEM, config->PrivateKeyPEM,
1010 config->PrivateKeyPEMLength))
1013 tmp->ini = IniFile_Clone(config->ini);
1021 WINPR_PRAGMA_DIAG_PUSH
1022 WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
1024 WINPR_PRAGMA_DIAG_POP
1028struct config_plugin_data
1030 proxyPluginsManager* mgr;
1031 const proxyConfig* config;
1034static const char config_plugin_name[] =
"config";
1035static const char config_plugin_desc[] =
1036 "A plugin filtering according to proxy configuration file rules";
1038static BOOL config_plugin_unload(proxyPlugin* plugin)
1040 WINPR_ASSERT(plugin);
1045 free(plugin->custom);
1046 plugin->custom = NULL;
1052static BOOL config_plugin_keyboard_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1056 const struct config_plugin_data* custom = NULL;
1057 const proxyConfig* cfg = NULL;
1060 WINPR_ASSERT(plugin);
1061 WINPR_ASSERT(pdata);
1062 WINPR_ASSERT(event_data);
1064 WINPR_UNUSED(event_data);
1066 custom = plugin->custom;
1067 WINPR_ASSERT(custom);
1069 cfg = custom->config;
1073 WLog_DBG(TAG,
"%s", boolstr(rc));
1077static BOOL config_plugin_unicode_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1081 const struct config_plugin_data* custom = NULL;
1082 const proxyConfig* cfg = NULL;
1085 WINPR_ASSERT(plugin);
1086 WINPR_ASSERT(pdata);
1087 WINPR_ASSERT(event_data);
1089 WINPR_UNUSED(event_data);
1091 custom = plugin->custom;
1092 WINPR_ASSERT(custom);
1094 cfg = custom->config;
1098 WLog_DBG(TAG,
"%s", boolstr(rc));
1102static BOOL config_plugin_mouse_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1106 const struct config_plugin_data* custom = NULL;
1107 const proxyConfig* cfg = NULL;
1110 WINPR_ASSERT(plugin);
1111 WINPR_ASSERT(pdata);
1112 WINPR_ASSERT(event_data);
1114 WINPR_UNUSED(event_data);
1116 custom = plugin->custom;
1117 WINPR_ASSERT(custom);
1119 cfg = custom->config;
1126static BOOL config_plugin_mouse_ex_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1130 const struct config_plugin_data* custom = NULL;
1131 const proxyConfig* cfg = NULL;
1134 WINPR_ASSERT(plugin);
1135 WINPR_ASSERT(pdata);
1136 WINPR_ASSERT(event_data);
1138 WINPR_UNUSED(event_data);
1140 custom = plugin->custom;
1141 WINPR_ASSERT(custom);
1143 cfg = custom->config;
1150static BOOL config_plugin_client_channel_data(WINPR_ATTR_UNUSED proxyPlugin* plugin,
1151 WINPR_ATTR_UNUSED proxyData* pdata,
void* param)
1155 WINPR_ASSERT(plugin);
1156 WINPR_ASSERT(pdata);
1157 WINPR_ASSERT(channel);
1159 WLog_DBG(TAG,
"%s [0x%04" PRIx16
"] got %" PRIuz, channel->channel_name, channel->channel_id,
1164static BOOL config_plugin_server_channel_data(WINPR_ATTR_UNUSED proxyPlugin* plugin,
1165 WINPR_ATTR_UNUSED proxyData* pdata,
void* param)
1169 WINPR_ASSERT(plugin);
1170 WINPR_ASSERT(pdata);
1171 WINPR_ASSERT(channel);
1173 WLog_DBG(TAG,
"%s [0x%04" PRIx16
"] got %" PRIuz, channel->channel_name, channel->channel_id,
1178static BOOL config_plugin_dynamic_channel_create(proxyPlugin* plugin,
1179 WINPR_ATTR_UNUSED proxyData* pdata,
void* param)
1184 WINPR_ASSERT(plugin);
1185 WINPR_ASSERT(pdata);
1186 WINPR_ASSERT(channel);
1188 const struct config_plugin_data* custom = plugin->custom;
1189 WINPR_ASSERT(custom);
1191 const proxyConfig* cfg = custom->config;
1194 pf_utils_channel_mode rc = pf_utils_get_channel_mode(cfg, channel->channel_name);
1198 case PF_UTILS_CHANNEL_INTERCEPT:
1199 case PF_UTILS_CHANNEL_PASSTHROUGH:
1202 case PF_UTILS_CHANNEL_BLOCK:
1210 if (strncmp(RDPGFX_DVC_CHANNEL_NAME, channel->channel_name,
1211 sizeof(RDPGFX_DVC_CHANNEL_NAME)) == 0)
1213 else if (strncmp(RDPSND_DVC_CHANNEL_NAME, channel->channel_name,
1214 sizeof(RDPSND_DVC_CHANNEL_NAME)) == 0)
1215 accept = cfg->AudioOutput;
1216 else if (strncmp(RDPSND_LOSSY_DVC_CHANNEL_NAME, channel->channel_name,
1217 sizeof(RDPSND_LOSSY_DVC_CHANNEL_NAME)) == 0)
1218 accept = cfg->AudioOutput;
1219 else if (strncmp(AUDIN_DVC_CHANNEL_NAME, channel->channel_name,
1220 sizeof(AUDIN_DVC_CHANNEL_NAME)) == 0)
1221 accept = cfg->AudioInput;
1222 else if (strncmp(RDPEI_DVC_CHANNEL_NAME, channel->channel_name,
1223 sizeof(RDPEI_DVC_CHANNEL_NAME)) == 0)
1224 accept = cfg->Multitouch;
1225 else if (strncmp(TSMF_DVC_CHANNEL_NAME, channel->channel_name,
1226 sizeof(TSMF_DVC_CHANNEL_NAME)) == 0)
1227 accept = cfg->VideoRedirection;
1228 else if (strncmp(VIDEO_CONTROL_DVC_CHANNEL_NAME, channel->channel_name,
1229 sizeof(VIDEO_CONTROL_DVC_CHANNEL_NAME)) == 0)
1230 accept = cfg->VideoRedirection;
1231 else if (strncmp(VIDEO_DATA_DVC_CHANNEL_NAME, channel->channel_name,
1232 sizeof(VIDEO_DATA_DVC_CHANNEL_NAME)) == 0)
1233 accept = cfg->VideoRedirection;
1234 else if (strncmp(RDPECAM_DVC_CHANNEL_NAME, channel->channel_name,
1235 sizeof(RDPECAM_DVC_CHANNEL_NAME)) == 0)
1236 accept = cfg->CameraRedirection;
1239 WLog_DBG(TAG,
"%s [0x%04" PRIx16
"]: %s", channel->channel_name, channel->channel_id,
1244static BOOL config_plugin_channel_create(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1250 WINPR_ASSERT(plugin);
1251 WINPR_ASSERT(pdata);
1252 WINPR_ASSERT(channel);
1254 const struct config_plugin_data* custom = plugin->custom;
1255 WINPR_ASSERT(custom);
1257 const proxyConfig* cfg = custom->config;
1260 pf_utils_channel_mode rc = pf_utils_get_channel_mode(cfg, channel->channel_name);
1263 case PF_UTILS_CHANNEL_INTERCEPT:
1264 case PF_UTILS_CHANNEL_PASSTHROUGH:
1267 case PF_UTILS_CHANNEL_BLOCK:
1274 if (strncmp(CLIPRDR_SVC_CHANNEL_NAME, channel->channel_name,
1275 sizeof(CLIPRDR_SVC_CHANNEL_NAME)) == 0)
1276 accept = cfg->Clipboard;
1277 else if (strncmp(RDPSND_CHANNEL_NAME, channel->channel_name,
sizeof(RDPSND_CHANNEL_NAME)) ==
1279 accept = cfg->AudioOutput;
1280 else if (strncmp(RDPDR_SVC_CHANNEL_NAME, channel->channel_name,
1281 sizeof(RDPDR_SVC_CHANNEL_NAME)) == 0)
1282 accept = cfg->DeviceRedirection;
1283 else if (strncmp(DISP_DVC_CHANNEL_NAME, channel->channel_name,
1284 sizeof(DISP_DVC_CHANNEL_NAME)) == 0)
1285 accept = cfg->DisplayControl;
1286 else if (strncmp(RAIL_SVC_CHANNEL_NAME, channel->channel_name,
1287 sizeof(RAIL_SVC_CHANNEL_NAME)) == 0)
1288 accept = cfg->RemoteApp;
1291 WLog_DBG(TAG,
"%s [static]: %s", channel->channel_name, boolstr(accept));
1297 struct config_plugin_data* custom = NULL;
1298 proxyPlugin plugin = { 0 };
1300 plugin.name = config_plugin_name;
1301 plugin.description = config_plugin_desc;
1302 plugin.PluginUnload = config_plugin_unload;
1304 plugin.KeyboardEvent = config_plugin_keyboard_event;
1305 plugin.UnicodeEvent = config_plugin_unicode_event;
1306 plugin.MouseEvent = config_plugin_mouse_event;
1307 plugin.MouseExEvent = config_plugin_mouse_ex_event;
1308 plugin.ClientChannelData = config_plugin_client_channel_data;
1309 plugin.ServerChannelData = config_plugin_server_channel_data;
1310 plugin.ChannelCreate = config_plugin_channel_create;
1311 plugin.DynamicChannelCreate = config_plugin_dynamic_channel_create;
1312 plugin.userdata = userdata;
1314 custom = calloc(1,
sizeof(
struct config_plugin_data));
1318 custom->mgr = plugins_manager;
1319 custom->config = userdata;
1321 plugin.custom = custom;
1322 plugin.userdata = userdata;
1324 return plugins_manager->RegisterPlugin(plugins_manager, &plugin);
1327const char*
pf_config_get(
const proxyConfig* config,
const char* section,
const char* key)
1329 WINPR_ASSERT(config);
1330 WINPR_ASSERT(config->ini);
1331 WINPR_ASSERT(section);
1334 return IniFile_GetKeyValueString(config->ini, section, key);
void pf_server_config_free(proxyConfig *config)
pf_server_config_free Releases all resources associated with proxyConfig
proxyConfig * pf_server_config_load_file(const char *path)
pf_server_config_load_file Create a proxyConfig from a INI file found at path.
void pf_server_config_print(const proxyConfig *config)
pf_server_config_print Print the configuration to stdout
proxyConfig * pf_server_config_load_buffer(const char *buffer)
pf_server_config_load_buffer Create a proxyConfig from a memory string buffer in INI file format
BOOL pf_config_clone(proxyConfig **dst, const proxyConfig *config)
pf_config_clone Create a copy of the configuration
BOOL pf_server_config_dump(const char *file)
pf_server_config_dump Dumps a default INI configuration file
const char * pf_config_get(const proxyConfig *config, const char *section, const char *key)
pf_config_get get a value for a section/key
proxyConfig * server_config_load_ini(wIniFile *ini)
server_config_load_ini Create a proxyConfig from a already loaded INI file.
size_t pf_config_required_plugins_count(const proxyConfig *config)
pf_config_required_plugins_count
const char ** pf_config_modules(const proxyConfig *config)
pf_config_modules
BOOL pf_config_plugin(proxyPluginsManager *plugins_manager, void *userdata)
pf_config_plugin Register a proxy plugin handling event filtering defined in the configuration.
const char * pf_config_required_plugin(const proxyConfig *config, size_t index)
pf_config_required_plugin
size_t pf_config_modules_count(const proxyConfig *config)
pf_config_modules_count