26#include <winpr/path.h>
27#include <winpr/collections.h>
28#include <winpr/cmdline.h>
31#include <freerdp/server/proxy/proxy_config.h>
33#include <freerdp/server/proxy/proxy_log.h>
35#include <freerdp/crypto/crypto.h>
36#include <freerdp/channels/cliprdr.h>
37#include <freerdp/channels/rdpsnd.h>
38#include <freerdp/channels/audin.h>
39#include <freerdp/channels/rdpdr.h>
40#include <freerdp/channels/disp.h>
41#include <freerdp/channels/rail.h>
42#include <freerdp/channels/rdpei.h>
43#include <freerdp/channels/tsmf.h>
44#include <freerdp/channels/video.h>
45#include <freerdp/channels/rdpecam.h>
49#define TAG PROXY_TAG("config")
51#define CONFIG_PRINT_SECTION(section) WLog_INFO(TAG, "\t%s:", section)
52#define CONFIG_PRINT_SECTION_KEY(section, key) WLog_INFO(TAG, "\t%s/%s:", section, key)
53#define CONFIG_PRINT_STR(config, key) WLog_INFO(TAG, "\t\t%s: %s", #key, (config)->key)
54#define CONFIG_PRINT_STR_CONTENT(config, key) \
55 WLog_INFO(TAG, "\t\t%s: %s", #key, (config)->key ? "set" : NULL)
56#define CONFIG_PRINT_BOOL(config, key) WLog_INFO(TAG, "\t\t%s: %s", #key, boolstr((config)->key))
57#define CONFIG_PRINT_UINT16(config, key) WLog_INFO(TAG, "\t\t%s: %" PRIu16 "", #key, (config)->key)
58#define CONFIG_PRINT_UINT32(config, key) WLog_INFO(TAG, "\t\t%s: %" PRIu32 "", #key, (config)->key)
60static const char* bool_str_true =
"true";
61static const char* bool_str_false =
"false";
62static const char* boolstr(BOOL rc)
64 return rc ? bool_str_true : bool_str_false;
67static const char* section_server =
"Server";
68static const char* key_host =
"Host";
69static const char* key_port =
"Port";
71static const char* section_target =
"Target";
72static const char* key_target_fixed =
"FixedTarget";
73static const char* key_target_user =
"User";
74static const char* key_target_pwd =
"Password";
75static const char* key_target_domain =
"Domain";
76static const char* key_target_tls_seclevel =
"TlsSecLevel";
78static const char* section_plugins =
"Plugins";
79static const char* key_plugins_modules =
"Modules";
80static const char* key_plugins_required =
"Required";
82static const char* section_channels =
"Channels";
83static const char* key_channels_gfx =
"GFX";
84static const char* key_channels_disp =
"DisplayControl";
85static const char* key_channels_clip =
"Clipboard";
86static const char* key_channels_mic =
"AudioInput";
87static const char* key_channels_sound =
"AudioOutput";
88static const char* key_channels_rdpdr =
"DeviceRedirection";
89static const char* key_channels_video =
"VideoRedirection";
90static const char* key_channels_camera =
"CameraRedirection";
91static const char* key_channels_rails =
"RemoteApp";
92static const char* key_channels_blacklist =
"PassthroughIsBlacklist";
93static const char* key_channels_pass =
"Passthrough";
94static const char* key_channels_intercept =
"Intercept";
96static const char* section_input =
"Input";
97static const char* key_input_kbd =
"Keyboard";
98static const char* key_input_mouse =
"Mouse";
99static const char* key_input_multitouch =
"Multitouch";
101static const char* section_security =
"Security";
102static const char* key_security_server_nla =
"ServerNlaSecurity";
103static const char* key_security_server_tls =
"ServerTlsSecurity";
104static const char* key_security_server_rdp =
"ServerRdpSecurity";
105static const char* key_security_client_nla =
"ClientNlaSecurity";
106static const char* key_security_client_tls =
"ClientTlsSecurity";
107static const char* key_security_client_rdp =
"ClientRdpSecurity";
108static const char* key_security_client_fallback =
"ClientAllowFallbackToTls";
110static const char* section_certificates =
"Certificates";
111static const char* key_private_key_file =
"PrivateKeyFile";
112static const char* key_private_key_content =
"PrivateKeyContent";
113static const char* key_cert_file =
"CertificateFile";
114static const char* key_cert_content =
"CertificateContent";
116WINPR_ATTR_MALLOC(CommandLineParserFree, 1)
117static
char** pf_config_parse_comma_separated_list(const
char* list,
size_t* count)
122 if (strlen(list) == 0)
128 return CommandLineParseCommaSeparatedValues(list, count);
131static BOOL pf_config_get_uint16(wIniFile* ini,
const char* section,
const char* key,
132 UINT16* result, BOOL required)
135 const char* strval = NULL;
137 WINPR_ASSERT(result);
139 strval = IniFile_GetKeyValueString(ini, section, key);
140 if (!strval && required)
142 WLog_ERR(TAG,
"key '%s.%s' does not exist.", section, key);
145 val = IniFile_GetKeyValueInt(ini, section, key);
146 if ((val <= 0) || (val > UINT16_MAX))
148 WLog_ERR(TAG,
"invalid value %d for key '%s.%s'.", val, section, key);
152 *result = (UINT16)val;
156static BOOL pf_config_get_uint32(wIniFile* ini,
const char* section,
const char* key,
157 UINT32* result, BOOL required)
159 WINPR_ASSERT(result);
161 const char* strval = IniFile_GetKeyValueString(ini, section, key);
165 WLog_ERR(TAG,
"key '%s.%s' does not exist.", section, key);
169 const int val = IniFile_GetKeyValueInt(ini, section, key);
172 WLog_ERR(TAG,
"invalid value %d for key '%s.%s'.", val, section, key);
176 *result = (UINT32)val;
180static BOOL pf_config_get_bool(wIniFile* ini,
const char* section,
const char* key, BOOL fallback)
183 const char* str_value = NULL;
185 str_value = IniFile_GetKeyValueString(ini, section, key);
188 WLog_WARN(TAG,
"key '%s.%s' not found, value defaults to %s.", section, key,
189 fallback ? bool_str_true : bool_str_false);
193 if (_stricmp(str_value, bool_str_true) == 0)
195 if (_stricmp(str_value, bool_str_false) == 0)
198 num_value = IniFile_GetKeyValueInt(ini, section, key);
206static const char* pf_config_get_str(wIniFile* ini,
const char* section,
const char* key,
209 const char* value = NULL;
211 value = IniFile_GetKeyValueString(ini, section, key);
216 WLog_ERR(TAG,
"key '%s.%s' not found.", section, key);
223static BOOL pf_config_load_server(wIniFile* ini, proxyConfig* config)
225 WINPR_ASSERT(config);
226 const char* host = pf_config_get_str(ini, section_server, key_host, FALSE);
232 config->Host = _strdup(host);
237 if (!pf_config_get_uint16(ini, section_server, key_port, &config->Port, TRUE))
243static BOOL pf_config_load_target(wIniFile* ini, proxyConfig* config)
245 const char* target_value = NULL;
247 WINPR_ASSERT(config);
248 config->FixedTarget = pf_config_get_bool(ini, section_target, key_target_fixed, FALSE);
250 if (!pf_config_get_uint16(ini, section_target, key_port, &config->TargetPort,
251 config->FixedTarget))
254 if (!pf_config_get_uint32(ini, section_target, key_target_tls_seclevel,
255 &config->TargetTlsSecLevel, FALSE))
258 if (config->FixedTarget)
260 target_value = pf_config_get_str(ini, section_target, key_host, TRUE);
264 free(config->TargetHost);
265 config->TargetHost = _strdup(target_value);
266 if (!config->TargetHost)
270 target_value = pf_config_get_str(ini, section_target, key_target_user, FALSE);
273 free(config->TargetUser);
274 config->TargetUser = _strdup(target_value);
275 if (!config->TargetUser)
279 target_value = pf_config_get_str(ini, section_target, key_target_pwd, FALSE);
282 free(config->TargetPassword);
283 config->TargetPassword = _strdup(target_value);
284 if (!config->TargetPassword)
288 target_value = pf_config_get_str(ini, section_target, key_target_domain, FALSE);
291 free(config->TargetDomain);
292 config->TargetDomain = _strdup(target_value);
293 if (!config->TargetDomain)
300static BOOL pf_config_load_channels(wIniFile* ini, proxyConfig* config)
302 WINPR_ASSERT(config);
303 config->GFX = pf_config_get_bool(ini, section_channels, key_channels_gfx, TRUE);
304 config->DisplayControl = pf_config_get_bool(ini, section_channels, key_channels_disp, TRUE);
305 config->Clipboard = pf_config_get_bool(ini, section_channels, key_channels_clip, FALSE);
306 config->AudioOutput = pf_config_get_bool(ini, section_channels, key_channels_mic, TRUE);
307 config->AudioInput = pf_config_get_bool(ini, section_channels, key_channels_sound, TRUE);
308 config->DeviceRedirection = pf_config_get_bool(ini, section_channels, key_channels_rdpdr, TRUE);
309 config->VideoRedirection = pf_config_get_bool(ini, section_channels, key_channels_video, TRUE);
310 config->CameraRedirection =
311 pf_config_get_bool(ini, section_channels, key_channels_camera, TRUE);
312 config->RemoteApp = pf_config_get_bool(ini, section_channels, key_channels_rails, FALSE);
313 config->PassthroughIsBlacklist =
314 pf_config_get_bool(ini, section_channels, key_channels_blacklist, FALSE);
315 config->Passthrough = pf_config_parse_comma_separated_list(
316 pf_config_get_str(ini, section_channels, key_channels_pass, FALSE),
317 &config->PassthroughCount);
318 config->Intercept = pf_config_parse_comma_separated_list(
319 pf_config_get_str(ini, section_channels, key_channels_intercept, FALSE),
320 &config->InterceptCount);
325static BOOL pf_config_load_input(wIniFile* ini, proxyConfig* config)
327 WINPR_ASSERT(config);
328 config->Keyboard = pf_config_get_bool(ini, section_input, key_input_kbd, TRUE);
329 config->Mouse = pf_config_get_bool(ini, section_input, key_input_mouse, TRUE);
330 config->Multitouch = pf_config_get_bool(ini, section_input, key_input_multitouch, TRUE);
334static BOOL pf_config_load_security(wIniFile* ini, proxyConfig* config)
336 WINPR_ASSERT(config);
337 config->ServerTlsSecurity =
338 pf_config_get_bool(ini, section_security, key_security_server_tls, TRUE);
339 config->ServerNlaSecurity =
340 pf_config_get_bool(ini, section_security, key_security_server_nla, FALSE);
341 config->ServerRdpSecurity =
342 pf_config_get_bool(ini, section_security, key_security_server_rdp, TRUE);
344 config->ClientTlsSecurity =
345 pf_config_get_bool(ini, section_security, key_security_client_tls, TRUE);
346 config->ClientNlaSecurity =
347 pf_config_get_bool(ini, section_security, key_security_client_nla, TRUE);
348 config->ClientRdpSecurity =
349 pf_config_get_bool(ini, section_security, key_security_client_rdp, TRUE);
350 config->ClientAllowFallbackToTls =
351 pf_config_get_bool(ini, section_security, key_security_client_fallback, TRUE);
355static BOOL pf_config_load_modules(wIniFile* ini, proxyConfig* config)
357 const char* modules_to_load = NULL;
358 const char* required_modules = NULL;
360 modules_to_load = pf_config_get_str(ini, section_plugins, key_plugins_modules, FALSE);
361 required_modules = pf_config_get_str(ini, section_plugins, key_plugins_required, FALSE);
363 WINPR_ASSERT(config);
364 config->Modules = pf_config_parse_comma_separated_list(modules_to_load, &config->ModulesCount);
366 config->RequiredPlugins =
367 pf_config_parse_comma_separated_list(required_modules, &config->RequiredPluginsCount);
371static char* pf_config_decode_base64(
const char* data,
const char* name,
size_t* pLength)
373 const char* headers[] = {
"-----BEGIN PUBLIC KEY-----",
"-----BEGIN RSA PUBLIC KEY-----",
374 "-----BEGIN CERTIFICATE-----",
"-----BEGIN PRIVATE KEY-----",
375 "-----BEGIN RSA PRIVATE KEY-----" };
377 size_t decoded_length = 0;
378 char* decoded = NULL;
381 WLog_ERR(TAG,
"Invalid base64 data [%p] for %s", data, name);
386 WINPR_ASSERT(pLength);
388 const size_t length = strlen(data);
390 if (strncmp(data,
"-----", 5) == 0)
392 BOOL expected = FALSE;
393 for (
size_t x = 0; x < ARRAYSIZE(headers); x++)
395 const char* header = headers[x];
397 if (strncmp(data, header, strlen(header)) == 0)
406 char hdr[128] = { 0 };
407 const char* end = strchr(&data[5],
'-');
413 const size_t s = MIN(ARRAYSIZE(hdr) - 1ULL, (
size_t)(end - data));
414 memcpy(hdr, data, s);
417 WLog_WARN(TAG,
"PEM has unexpected header '%s'. Known supported headers are:", hdr);
418 for (
size_t x = 0; x < ARRAYSIZE(headers); x++)
420 const char* header = headers[x];
421 WLog_WARN(TAG,
"%s", header);
425 *pLength = length + 1;
426 return _strdup(data);
429 crypto_base64_decode(data, length, (BYTE**)&decoded, &decoded_length);
430 if (!decoded || decoded_length == 0)
432 WLog_ERR(TAG,
"Failed to decode base64 data of length %" PRIuz
" for %s", length, name);
437 *pLength = strnlen(decoded, decoded_length) + 1;
441static BOOL pf_config_load_certificates(wIniFile* ini, proxyConfig* config)
443 const char* tmp1 = NULL;
444 const char* tmp2 = NULL;
447 WINPR_ASSERT(config);
449 tmp1 = pf_config_get_str(ini, section_certificates, key_cert_file, FALSE);
452 if (!winpr_PathFileExists(tmp1))
454 WLog_ERR(TAG,
"%s/%s file %s does not exist", section_certificates, key_cert_file,
458 config->CertificateFile = _strdup(tmp1);
459 config->CertificatePEM =
460 crypto_read_pem(config->CertificateFile, &config->CertificatePEMLength);
461 if (!config->CertificatePEM)
463 config->CertificatePEMLength += 1;
465 tmp2 = pf_config_get_str(ini, section_certificates, key_cert_content, FALSE);
468 if (strlen(tmp2) < 1)
470 WLog_ERR(TAG,
"%s/%s has invalid empty value", section_certificates, key_cert_content);
473 config->CertificateContent = _strdup(tmp2);
474 config->CertificatePEM = pf_config_decode_base64(
475 config->CertificateContent,
"CertificateContent", &config->CertificatePEMLength);
476 if (!config->CertificatePEM)
482 "%s/%s and %s/%s are "
483 "mutually exclusive options",
484 section_certificates, key_cert_file, section_certificates, key_cert_content);
487 else if (!tmp1 && !tmp2)
490 "%s/%s or %s/%s are "
492 section_certificates, key_cert_file, section_certificates, key_cert_content);
496 tmp1 = pf_config_get_str(ini, section_certificates, key_private_key_file, FALSE);
499 if (!winpr_PathFileExists(tmp1))
501 WLog_ERR(TAG,
"%s/%s file %s does not exist", section_certificates,
502 key_private_key_file, tmp1);
505 config->PrivateKeyFile = _strdup(tmp1);
506 config->PrivateKeyPEM =
507 crypto_read_pem(config->PrivateKeyFile, &config->PrivateKeyPEMLength);
508 if (!config->PrivateKeyPEM)
510 config->PrivateKeyPEMLength += 1;
512 tmp2 = pf_config_get_str(ini, section_certificates, key_private_key_content, FALSE);
515 if (strlen(tmp2) < 1)
517 WLog_ERR(TAG,
"%s/%s has invalid empty value", section_certificates,
518 key_private_key_content);
521 config->PrivateKeyContent = _strdup(tmp2);
522 config->PrivateKeyPEM = pf_config_decode_base64(
523 config->PrivateKeyContent,
"PrivateKeyContent", &config->PrivateKeyPEMLength);
524 if (!config->PrivateKeyPEM)
531 "%s/%s and %s/%s are "
532 "mutually exclusive options",
533 section_certificates, key_private_key_file, section_certificates,
534 key_private_key_content);
537 else if (!tmp1 && !tmp2)
540 "%s/%s or %s/%s are "
541 "are required settings",
542 section_certificates, key_private_key_file, section_certificates,
543 key_private_key_content);
552 proxyConfig* config = NULL;
556 config = calloc(1,
sizeof(proxyConfig));
560 config->TargetTlsSecLevel = 1;
563 if (!pf_config_load_server(ini, config))
566 if (!pf_config_load_target(ini, config))
569 if (!pf_config_load_channels(ini, config))
572 if (!pf_config_load_input(ini, config))
575 if (!pf_config_load_security(ini, config))
578 if (!pf_config_load_modules(ini, config))
581 if (!pf_config_load_certificates(ini, config))
583 config->ini = IniFile_Clone(ini);
589 WINPR_PRAGMA_DIAG_PUSH
590 WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
592 WINPR_PRAGMA_DIAG_POP
600 wIniFile* ini = IniFile_New();
605 if (IniFile_SetKeyValueString(ini, section_server, key_host,
"0.0.0.0") < 0)
607 if (IniFile_SetKeyValueInt(ini, section_server, key_port, 3389) < 0)
611 if (IniFile_SetKeyValueString(ini, section_target, key_host,
"somehost.example.com") < 0)
613 if (IniFile_SetKeyValueInt(ini, section_target, key_port, 3389) < 0)
615 if (IniFile_SetKeyValueString(ini, section_target, key_target_fixed, bool_str_true) < 0)
617 if (IniFile_SetKeyValueInt(ini, section_target, key_target_tls_seclevel, 1) < 0)
621 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_gfx, bool_str_true) < 0)
623 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_disp, bool_str_true) < 0)
625 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_clip, bool_str_true) < 0)
627 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_mic, bool_str_true) < 0)
629 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_sound, bool_str_true) < 0)
631 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_rdpdr, bool_str_true) < 0)
633 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_video, bool_str_true) < 0)
635 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_camera, bool_str_true) < 0)
637 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_rails, bool_str_false) < 0)
640 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_blacklist, bool_str_true) < 0)
642 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_pass,
"") < 0)
644 if (IniFile_SetKeyValueString(ini, section_channels, key_channels_intercept,
"") < 0)
648 if (IniFile_SetKeyValueString(ini, section_input, key_input_kbd, bool_str_true) < 0)
650 if (IniFile_SetKeyValueString(ini, section_input, key_input_mouse, bool_str_true) < 0)
652 if (IniFile_SetKeyValueString(ini, section_input, key_input_multitouch, bool_str_true) < 0)
656 if (IniFile_SetKeyValueString(ini, section_security, key_security_server_tls, bool_str_true) <
659 if (IniFile_SetKeyValueString(ini, section_security, key_security_server_nla, bool_str_false) <
662 if (IniFile_SetKeyValueString(ini, section_security, key_security_server_rdp, bool_str_true) <
666 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_tls, bool_str_true) <
669 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_nla, bool_str_true) <
672 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_rdp, bool_str_true) <
675 if (IniFile_SetKeyValueString(ini, section_security, key_security_client_fallback,
680 if (IniFile_SetKeyValueString(ini, section_plugins, key_plugins_modules,
681 "module1,module2,...") < 0)
683 if (IniFile_SetKeyValueString(ini, section_plugins, key_plugins_required,
684 "module1,module2,...") < 0)
688 if (IniFile_SetKeyValueString(ini, section_certificates, key_cert_file,
689 "<absolute path to some certificate file> OR") < 0)
691 if (IniFile_SetKeyValueString(ini, section_certificates, key_cert_content,
692 "<Contents of some certificate file in PEM format>") < 0)
695 if (IniFile_SetKeyValueString(ini, section_certificates, key_private_key_file,
696 "<absolute path to some private key file> OR") < 0)
698 if (IniFile_SetKeyValueString(ini, section_certificates, key_private_key_content,
699 "<Contents of some private key file in PEM format>") < 0)
703 if (IniFile_WriteFile(ini, file) < 0)
715 proxyConfig* config = NULL;
716 wIniFile* ini = NULL;
722 WLog_ERR(TAG,
"IniFile_New() failed!");
726 if (IniFile_ReadBuffer(ini, buffer) < 0)
728 WLog_ERR(TAG,
"failed to parse ini: '%s'", buffer);
740 proxyConfig* config = NULL;
741 wIniFile* ini = IniFile_New();
745 WLog_ERR(TAG,
"IniFile_New() failed!");
749 if (IniFile_ReadFile(ini, path) < 0)
751 WLog_ERR(TAG,
"failed to parse ini file: '%s'", path);
761static void pf_server_config_print_list(
char** list,
size_t count)
764 for (
size_t i = 0; i < count; i++)
765 WLog_INFO(TAG,
"\t\t- %s", list[i]);
770 WINPR_ASSERT(config);
771 WLog_INFO(TAG,
"Proxy configuration:");
773 CONFIG_PRINT_SECTION(section_server);
774 CONFIG_PRINT_STR(config, Host);
775 CONFIG_PRINT_UINT16(config, Port);
777 if (config->FixedTarget)
779 CONFIG_PRINT_SECTION(section_target);
780 CONFIG_PRINT_STR(config, TargetHost);
781 CONFIG_PRINT_UINT16(config, TargetPort);
782 CONFIG_PRINT_UINT32(config, TargetTlsSecLevel);
784 if (config->TargetUser)
785 CONFIG_PRINT_STR(config, TargetUser);
786 if (config->TargetDomain)
787 CONFIG_PRINT_STR(config, TargetDomain);
790 CONFIG_PRINT_SECTION(section_input);
791 CONFIG_PRINT_BOOL(config, Keyboard);
792 CONFIG_PRINT_BOOL(config, Mouse);
793 CONFIG_PRINT_BOOL(config, Multitouch);
795 CONFIG_PRINT_SECTION(section_security);
796 CONFIG_PRINT_BOOL(config, ServerNlaSecurity);
797 CONFIG_PRINT_BOOL(config, ServerTlsSecurity);
798 CONFIG_PRINT_BOOL(config, ServerRdpSecurity);
799 CONFIG_PRINT_BOOL(config, ClientNlaSecurity);
800 CONFIG_PRINT_BOOL(config, ClientTlsSecurity);
801 CONFIG_PRINT_BOOL(config, ClientRdpSecurity);
802 CONFIG_PRINT_BOOL(config, ClientAllowFallbackToTls);
804 CONFIG_PRINT_SECTION(section_channels);
805 CONFIG_PRINT_BOOL(config, GFX);
806 CONFIG_PRINT_BOOL(config, DisplayControl);
807 CONFIG_PRINT_BOOL(config, Clipboard);
808 CONFIG_PRINT_BOOL(config, AudioOutput);
809 CONFIG_PRINT_BOOL(config, AudioInput);
810 CONFIG_PRINT_BOOL(config, DeviceRedirection);
811 CONFIG_PRINT_BOOL(config, VideoRedirection);
812 CONFIG_PRINT_BOOL(config, CameraRedirection);
813 CONFIG_PRINT_BOOL(config, RemoteApp);
814 CONFIG_PRINT_BOOL(config, PassthroughIsBlacklist);
816 if (config->PassthroughCount)
818 WLog_INFO(TAG,
"\tStatic Channels Proxy:");
819 pf_server_config_print_list(config->Passthrough, config->PassthroughCount);
822 if (config->InterceptCount)
824 WLog_INFO(TAG,
"\tStatic Channels Proxy-Intercept:");
825 pf_server_config_print_list(config->Intercept, config->InterceptCount);
829 CONFIG_PRINT_SECTION_KEY(section_plugins, key_plugins_modules);
830 for (
size_t x = 0; x < config->ModulesCount; x++)
831 CONFIG_PRINT_STR(config, Modules[x]);
834 CONFIG_PRINT_SECTION_KEY(section_plugins, key_plugins_required);
835 for (
size_t x = 0; x < config->RequiredPluginsCount; x++)
836 CONFIG_PRINT_STR(config, RequiredPlugins[x]);
838 CONFIG_PRINT_SECTION(section_certificates);
839 CONFIG_PRINT_STR(config, CertificateFile);
840 CONFIG_PRINT_STR_CONTENT(config, CertificateContent);
841 CONFIG_PRINT_STR(config, PrivateKeyFile);
842 CONFIG_PRINT_STR_CONTENT(config, PrivateKeyContent);
845static void zfree(
char* str)
849 const size_t len = strlen(str);
854static void znfree(
char* str,
size_t len)
868 free(config->TargetHost);
869 free(config->TargetUser);
870 free(config->TargetDomain);
871 free(config->TargetPassword);
873 CommandLineParserFree(config->Passthrough);
874 CommandLineParserFree(config->Intercept);
875 CommandLineParserFree(config->Modules);
876 CommandLineParserFree(config->RequiredPlugins);
878 free(config->CertificateFile);
879 zfree(config->CertificateContent);
880 znfree(config->CertificatePEM, config->CertificatePEMLength);
881 free(config->PrivateKeyFile);
882 zfree(config->PrivateKeyContent);
883 znfree(config->PrivateKeyPEM, config->PrivateKeyPEMLength);
884 IniFile_Free(config->ini);
890 WINPR_ASSERT(config);
891 return config->RequiredPluginsCount;
896 WINPR_ASSERT(config);
897 if (index >= config->RequiredPluginsCount)
900 return config->RequiredPlugins[index];
905 WINPR_ASSERT(config);
906 return config->ModulesCount;
917 WINPR_ASSERT(config);
919 cnv.ppc = config->Modules;
923static BOOL pf_config_copy_string(
char** dst,
const char* src)
931static BOOL pf_config_copy_string_n(
char** dst,
const char* src,
size_t size)
935 if (src && (size > 0))
937 WINPR_ASSERT(strnlen(src, size) == size - 1);
938 *dst = calloc(size,
sizeof(
char));
941 memcpy(*dst, src, size);
947static BOOL pf_config_copy_string_list(
char*** dst,
size_t* size,
char** src,
size_t srcSize)
951 WINPR_ASSERT(src || (srcSize == 0));
955 if (srcSize > INT32_MAX)
960 char* csv = CommandLineToCommaSeparatedValues((INT32)srcSize, src);
961 *dst = CommandLineParseCommaSeparatedValues(csv, size);
970 proxyConfig* tmp = calloc(1,
sizeof(proxyConfig));
973 WINPR_ASSERT(config);
980 if (!pf_config_copy_string(&tmp->Host, config->Host))
982 if (!pf_config_copy_string(&tmp->TargetHost, config->TargetHost))
985 if (!pf_config_copy_string_list(&tmp->Passthrough, &tmp->PassthroughCount, config->Passthrough,
986 config->PassthroughCount))
988 if (!pf_config_copy_string_list(&tmp->Intercept, &tmp->InterceptCount, config->Intercept,
989 config->InterceptCount))
991 if (!pf_config_copy_string_list(&tmp->Modules, &tmp->ModulesCount, config->Modules,
992 config->ModulesCount))
994 if (!pf_config_copy_string_list(&tmp->RequiredPlugins, &tmp->RequiredPluginsCount,
995 config->RequiredPlugins, config->RequiredPluginsCount))
997 if (!pf_config_copy_string(&tmp->CertificateFile, config->CertificateFile))
999 if (!pf_config_copy_string(&tmp->CertificateContent, config->CertificateContent))
1001 if (!pf_config_copy_string_n(&tmp->CertificatePEM, config->CertificatePEM,
1002 config->CertificatePEMLength))
1004 if (!pf_config_copy_string(&tmp->PrivateKeyFile, config->PrivateKeyFile))
1006 if (!pf_config_copy_string(&tmp->PrivateKeyContent, config->PrivateKeyContent))
1008 if (!pf_config_copy_string_n(&tmp->PrivateKeyPEM, config->PrivateKeyPEM,
1009 config->PrivateKeyPEMLength))
1012 tmp->ini = IniFile_Clone(config->ini);
1020 WINPR_PRAGMA_DIAG_PUSH
1021 WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
1023 WINPR_PRAGMA_DIAG_POP
1027struct config_plugin_data
1029 proxyPluginsManager* mgr;
1030 const proxyConfig* config;
1033static const char config_plugin_name[] =
"config";
1034static const char config_plugin_desc[] =
1035 "A plugin filtering according to proxy configuration file rules";
1037static BOOL config_plugin_unload(proxyPlugin* plugin)
1039 WINPR_ASSERT(plugin);
1044 free(plugin->custom);
1045 plugin->custom = NULL;
1051static BOOL config_plugin_keyboard_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1055 const struct config_plugin_data* custom = NULL;
1056 const proxyConfig* cfg = NULL;
1059 WINPR_ASSERT(plugin);
1060 WINPR_ASSERT(pdata);
1061 WINPR_ASSERT(event_data);
1063 WINPR_UNUSED(event_data);
1065 custom = plugin->custom;
1066 WINPR_ASSERT(custom);
1068 cfg = custom->config;
1072 WLog_DBG(TAG,
"%s", boolstr(rc));
1076static BOOL config_plugin_unicode_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1080 const struct config_plugin_data* custom = NULL;
1081 const proxyConfig* cfg = NULL;
1084 WINPR_ASSERT(plugin);
1085 WINPR_ASSERT(pdata);
1086 WINPR_ASSERT(event_data);
1088 WINPR_UNUSED(event_data);
1090 custom = plugin->custom;
1091 WINPR_ASSERT(custom);
1093 cfg = custom->config;
1097 WLog_DBG(TAG,
"%s", boolstr(rc));
1101static BOOL config_plugin_mouse_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1105 const struct config_plugin_data* custom = NULL;
1106 const proxyConfig* cfg = NULL;
1109 WINPR_ASSERT(plugin);
1110 WINPR_ASSERT(pdata);
1111 WINPR_ASSERT(event_data);
1113 WINPR_UNUSED(event_data);
1115 custom = plugin->custom;
1116 WINPR_ASSERT(custom);
1118 cfg = custom->config;
1125static BOOL config_plugin_mouse_ex_event(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1129 const struct config_plugin_data* custom = NULL;
1130 const proxyConfig* cfg = NULL;
1133 WINPR_ASSERT(plugin);
1134 WINPR_ASSERT(pdata);
1135 WINPR_ASSERT(event_data);
1137 WINPR_UNUSED(event_data);
1139 custom = plugin->custom;
1140 WINPR_ASSERT(custom);
1142 cfg = custom->config;
1149static BOOL config_plugin_client_channel_data(WINPR_ATTR_UNUSED proxyPlugin* plugin,
1150 WINPR_ATTR_UNUSED proxyData* pdata,
void* param)
1154 WINPR_ASSERT(plugin);
1155 WINPR_ASSERT(pdata);
1156 WINPR_ASSERT(channel);
1158 WLog_DBG(TAG,
"%s [0x%04" PRIx16
"] got %" PRIuz, channel->channel_name, channel->channel_id,
1163static BOOL config_plugin_server_channel_data(WINPR_ATTR_UNUSED proxyPlugin* plugin,
1164 WINPR_ATTR_UNUSED proxyData* pdata,
void* param)
1168 WINPR_ASSERT(plugin);
1169 WINPR_ASSERT(pdata);
1170 WINPR_ASSERT(channel);
1172 WLog_DBG(TAG,
"%s [0x%04" PRIx16
"] got %" PRIuz, channel->channel_name, channel->channel_id,
1177static BOOL config_plugin_dynamic_channel_create(proxyPlugin* plugin,
1178 WINPR_ATTR_UNUSED proxyData* pdata,
void* param)
1183 WINPR_ASSERT(plugin);
1184 WINPR_ASSERT(pdata);
1185 WINPR_ASSERT(channel);
1187 const struct config_plugin_data* custom = plugin->custom;
1188 WINPR_ASSERT(custom);
1190 const proxyConfig* cfg = custom->config;
1193 pf_utils_channel_mode rc = pf_utils_get_channel_mode(cfg, channel->channel_name);
1197 case PF_UTILS_CHANNEL_INTERCEPT:
1198 case PF_UTILS_CHANNEL_PASSTHROUGH:
1201 case PF_UTILS_CHANNEL_BLOCK:
1209 if (strncmp(RDPGFX_DVC_CHANNEL_NAME, channel->channel_name,
1210 sizeof(RDPGFX_DVC_CHANNEL_NAME)) == 0)
1212 else if (strncmp(RDPSND_DVC_CHANNEL_NAME, channel->channel_name,
1213 sizeof(RDPSND_DVC_CHANNEL_NAME)) == 0)
1214 accept = cfg->AudioOutput;
1215 else if (strncmp(RDPSND_LOSSY_DVC_CHANNEL_NAME, channel->channel_name,
1216 sizeof(RDPSND_LOSSY_DVC_CHANNEL_NAME)) == 0)
1217 accept = cfg->AudioOutput;
1218 else if (strncmp(AUDIN_DVC_CHANNEL_NAME, channel->channel_name,
1219 sizeof(AUDIN_DVC_CHANNEL_NAME)) == 0)
1220 accept = cfg->AudioInput;
1221 else if (strncmp(RDPEI_DVC_CHANNEL_NAME, channel->channel_name,
1222 sizeof(RDPEI_DVC_CHANNEL_NAME)) == 0)
1223 accept = cfg->Multitouch;
1224 else if (strncmp(TSMF_DVC_CHANNEL_NAME, channel->channel_name,
1225 sizeof(TSMF_DVC_CHANNEL_NAME)) == 0)
1226 accept = cfg->VideoRedirection;
1227 else if (strncmp(VIDEO_CONTROL_DVC_CHANNEL_NAME, channel->channel_name,
1228 sizeof(VIDEO_CONTROL_DVC_CHANNEL_NAME)) == 0)
1229 accept = cfg->VideoRedirection;
1230 else if (strncmp(VIDEO_DATA_DVC_CHANNEL_NAME, channel->channel_name,
1231 sizeof(VIDEO_DATA_DVC_CHANNEL_NAME)) == 0)
1232 accept = cfg->VideoRedirection;
1233 else if (strncmp(RDPECAM_DVC_CHANNEL_NAME, channel->channel_name,
1234 sizeof(RDPECAM_DVC_CHANNEL_NAME)) == 0)
1235 accept = cfg->CameraRedirection;
1238 WLog_DBG(TAG,
"%s [0x%04" PRIx16
"]: %s", channel->channel_name, channel->channel_id,
1243static BOOL config_plugin_channel_create(proxyPlugin* plugin, WINPR_ATTR_UNUSED proxyData* pdata,
1249 WINPR_ASSERT(plugin);
1250 WINPR_ASSERT(pdata);
1251 WINPR_ASSERT(channel);
1253 const struct config_plugin_data* custom = plugin->custom;
1254 WINPR_ASSERT(custom);
1256 const proxyConfig* cfg = custom->config;
1259 pf_utils_channel_mode rc = pf_utils_get_channel_mode(cfg, channel->channel_name);
1262 case PF_UTILS_CHANNEL_INTERCEPT:
1263 case PF_UTILS_CHANNEL_PASSTHROUGH:
1266 case PF_UTILS_CHANNEL_BLOCK:
1273 if (strncmp(CLIPRDR_SVC_CHANNEL_NAME, channel->channel_name,
1274 sizeof(CLIPRDR_SVC_CHANNEL_NAME)) == 0)
1275 accept = cfg->Clipboard;
1276 else if (strncmp(RDPSND_CHANNEL_NAME, channel->channel_name,
sizeof(RDPSND_CHANNEL_NAME)) ==
1278 accept = cfg->AudioOutput;
1279 else if (strncmp(RDPDR_SVC_CHANNEL_NAME, channel->channel_name,
1280 sizeof(RDPDR_SVC_CHANNEL_NAME)) == 0)
1281 accept = cfg->DeviceRedirection;
1282 else if (strncmp(DISP_DVC_CHANNEL_NAME, channel->channel_name,
1283 sizeof(DISP_DVC_CHANNEL_NAME)) == 0)
1284 accept = cfg->DisplayControl;
1285 else if (strncmp(RAIL_SVC_CHANNEL_NAME, channel->channel_name,
1286 sizeof(RAIL_SVC_CHANNEL_NAME)) == 0)
1287 accept = cfg->RemoteApp;
1290 WLog_DBG(TAG,
"%s [static]: %s", channel->channel_name, boolstr(accept));
1296 struct config_plugin_data* custom = NULL;
1297 proxyPlugin plugin = { 0 };
1299 plugin.name = config_plugin_name;
1300 plugin.description = config_plugin_desc;
1301 plugin.PluginUnload = config_plugin_unload;
1303 plugin.KeyboardEvent = config_plugin_keyboard_event;
1304 plugin.UnicodeEvent = config_plugin_unicode_event;
1305 plugin.MouseEvent = config_plugin_mouse_event;
1306 plugin.MouseExEvent = config_plugin_mouse_ex_event;
1307 plugin.ClientChannelData = config_plugin_client_channel_data;
1308 plugin.ServerChannelData = config_plugin_server_channel_data;
1309 plugin.ChannelCreate = config_plugin_channel_create;
1310 plugin.DynamicChannelCreate = config_plugin_dynamic_channel_create;
1311 plugin.userdata = userdata;
1313 custom = calloc(1,
sizeof(
struct config_plugin_data));
1317 custom->mgr = plugins_manager;
1318 custom->config = userdata;
1320 plugin.custom = custom;
1321 plugin.userdata = userdata;
1323 return plugins_manager->RegisterPlugin(plugins_manager, &plugin);
1326const char*
pf_config_get(
const proxyConfig* config,
const char* section,
const char* key)
1328 WINPR_ASSERT(config);
1329 WINPR_ASSERT(config->ini);
1330 WINPR_ASSERT(section);
1333 return IniFile_GetKeyValueString(config->ini, section, key);
proxyConfig * pf_server_config_load_buffer(const char *buffer)
pf_server_config_load_buffer Create a proxyConfig from a memory string buffer in INI file format
void pf_server_config_free(proxyConfig *config)
pf_server_config_free Releases all resources associated with proxyConfig
void pf_server_config_print(const proxyConfig *config)
pf_server_config_print Print the configuration to stdout
BOOL pf_config_clone(proxyConfig **dst, const proxyConfig *config)
pf_config_clone Create a copy of the configuration
BOOL pf_server_config_dump(const char *file)
pf_server_config_dump Dumps a default INI configuration file
const char * pf_config_get(const proxyConfig *config, const char *section, const char *key)
pf_config_get get a value for a section/key
proxyConfig * server_config_load_ini(wIniFile *ini)
server_config_load_ini Create a proxyConfig from a already loaded INI file.
size_t pf_config_required_plugins_count(const proxyConfig *config)
pf_config_required_plugins_count
proxyConfig * pf_server_config_load_file(const char *path)
pf_server_config_load_file Create a proxyConfig from a INI file found at path.
const char ** pf_config_modules(const proxyConfig *config)
pf_config_modules
BOOL pf_config_plugin(proxyPluginsManager *plugins_manager, void *userdata)
pf_config_plugin Register a proxy plugin handling event filtering defined in the configuration.
const char * pf_config_required_plugin(const proxyConfig *config, size_t index)
pf_config_required_plugin
size_t pf_config_modules_count(const proxyConfig *config)
pf_config_modules_count