2010-03-25 15:46:16 +00:00
|
|
|
#!/bin/sh /etc/rc.common
|
|
|
|
# Copyright (C) 2010 Jo-Philipp Wich
|
|
|
|
|
|
|
|
START=50
|
2011-11-07 22:59:06 +00:00
|
|
|
|
2013-09-17 21:45:30 +00:00
|
|
|
USE_PROCD=1
|
2011-11-07 22:59:06 +00:00
|
|
|
|
2010-03-25 15:46:16 +00:00
|
|
|
UHTTPD_BIN="/usr/sbin/uhttpd"
|
|
|
|
PX5G_BIN="/usr/sbin/px5g"
|
2016-10-04 14:38:31 +00:00
|
|
|
OPENSSL_BIN="/usr/bin/openssl"
|
2010-03-25 15:46:16 +00:00
|
|
|
|
|
|
|
append_arg() {
|
|
|
|
local cfg="$1"
|
|
|
|
local var="$2"
|
|
|
|
local opt="$3"
|
|
|
|
local def="$4"
|
|
|
|
local val
|
|
|
|
|
|
|
|
config_get val "$cfg" "$var"
|
2013-09-17 21:45:30 +00:00
|
|
|
[ -n "$val" -o -n "$def" ] && procd_append_param command "$opt" "${val:-$def}"
|
2010-03-25 15:46:16 +00:00
|
|
|
}
|
|
|
|
|
2010-07-23 13:15:22 +00:00
|
|
|
append_bool() {
|
|
|
|
local cfg="$1"
|
|
|
|
local var="$2"
|
|
|
|
local opt="$3"
|
|
|
|
local def="$4"
|
|
|
|
local val
|
|
|
|
|
|
|
|
config_get_bool val "$cfg" "$var" "$def"
|
2013-09-17 21:45:30 +00:00
|
|
|
[ "$val" = 1 ] && procd_append_param command "$opt"
|
2010-07-23 13:15:22 +00:00
|
|
|
}
|
|
|
|
|
2010-03-25 15:46:16 +00:00
|
|
|
generate_keys() {
|
|
|
|
local cfg="$1"
|
|
|
|
local key="$2"
|
|
|
|
local crt="$3"
|
2020-05-04 14:13:13 +00:00
|
|
|
local days bits country state location organization commonname
|
2010-03-25 15:46:16 +00:00
|
|
|
|
|
|
|
config_get days "$cfg" days
|
|
|
|
config_get bits "$cfg" bits
|
|
|
|
config_get country "$cfg" country
|
|
|
|
config_get state "$cfg" state
|
|
|
|
config_get location "$cfg" location
|
2020-05-04 14:13:13 +00:00
|
|
|
config_get organization "$cfg" organization
|
2010-03-25 15:46:16 +00:00
|
|
|
config_get commonname "$cfg" commonname
|
2019-08-05 18:34:39 +00:00
|
|
|
config_get key_type "$cfg" key_type
|
|
|
|
config_get ec_curve "$cfg" ec_curve
|
2010-03-25 15:46:16 +00:00
|
|
|
|
2016-10-05 08:11:15 +00:00
|
|
|
# Prefer px5g for certificate generation (existence evaluated last)
|
2016-10-04 14:38:31 +00:00
|
|
|
local GENKEY_CMD=""
|
2019-08-05 18:34:39 +00:00
|
|
|
local KEY_OPTS="rsa:${bits:-2048}"
|
2016-10-06 17:37:59 +00:00
|
|
|
local UNIQUEID=$(dd if=/dev/urandom bs=1 count=4 | hexdump -e '1/1 "%02x"')
|
2019-08-05 18:34:39 +00:00
|
|
|
[ "$key_type" = "ec" ] && KEY_OPTS="ec -pkeyopt ec_paramgen_curve:${ec_curve:-P-256}"
|
2017-02-17 13:21:47 +00:00
|
|
|
[ -x "$OPENSSL_BIN" ] && GENKEY_CMD="$OPENSSL_BIN req -x509 -sha256 -outform der -nodes"
|
2016-10-05 08:11:15 +00:00
|
|
|
[ -x "$PX5G_BIN" ] && GENKEY_CMD="$PX5G_BIN selfsigned -der"
|
2016-10-04 14:38:31 +00:00
|
|
|
[ -n "$GENKEY_CMD" ] && {
|
|
|
|
$GENKEY_CMD \
|
2019-08-05 18:34:39 +00:00
|
|
|
-days ${days:-730} -newkey ${KEY_OPTS} -keyout "${UHTTPD_KEY}.new" -out "${UHTTPD_CERT}.new" \
|
2024-05-01 10:50:23 +00:00
|
|
|
-subj /C="${country:-ZZ}"/ST="${state:-Somewhere}"/L="${location:-Unknown}"/O="${organization:-OpenWrt$UNIQUEID}"/CN="${commonname:-OpenWrt}" \
|
|
|
|
-addext extendedKeyUsage=serverAuth -addext subjectAltName=DNS:"${commonname:-OpenWrt}"
|
2015-03-15 10:32:10 +00:00
|
|
|
sync
|
|
|
|
mv "${UHTTPD_KEY}.new" "${UHTTPD_KEY}"
|
|
|
|
mv "${UHTTPD_CERT}.new" "${UHTTPD_CERT}"
|
2010-08-11 13:30:47 +00:00
|
|
|
}
|
2010-03-25 15:46:16 +00:00
|
|
|
}
|
|
|
|
|
2016-08-13 23:24:59 +00:00
|
|
|
create_httpauth() {
|
|
|
|
local cfg="$1"
|
|
|
|
local prefix username password
|
|
|
|
|
|
|
|
config_get prefix "$cfg" prefix
|
|
|
|
config_get username "$cfg" username
|
|
|
|
config_get password "$cfg" password
|
|
|
|
|
|
|
|
if [ -z "$prefix" ] || [ -z "$username" ] || [ -z "$password" ]; then
|
|
|
|
return
|
|
|
|
fi
|
|
|
|
echo "${prefix}:${username}:${password}" >>$httpdconf
|
|
|
|
haveauth=1
|
|
|
|
}
|
|
|
|
|
2018-08-23 07:07:23 +00:00
|
|
|
append_lua_prefix() {
|
|
|
|
local v="$1"
|
|
|
|
local prefix="${v%%=*}"
|
|
|
|
local handler="${v#*=}"
|
|
|
|
|
|
|
|
if [ "$prefix" != "$handler" ] && [ -n "$prefix" ] && [ -f "$handler" ]; then
|
|
|
|
procd_append_param command -l "$prefix" -L "$handler"
|
|
|
|
else
|
|
|
|
echo "Skipping invalid Lua prefix \"$v\"" >&2
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
|
2021-11-23 18:30:30 +00:00
|
|
|
append_ucode_prefix() {
|
|
|
|
local v="$1"
|
|
|
|
local prefix="${v%%=*}"
|
|
|
|
local handler="${v#*=}"
|
|
|
|
|
|
|
|
if [ "$prefix" != "$handler" ] && [ -n "$prefix" ] && [ -f "$handler" ]; then
|
|
|
|
procd_append_param command -o "$prefix" -O "$handler"
|
|
|
|
else
|
|
|
|
echo "Skipping invalid ucode prefix \"$v\"" >&2
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
|
2010-03-25 15:46:16 +00:00
|
|
|
start_instance()
|
|
|
|
{
|
|
|
|
UHTTPD_CERT=""
|
|
|
|
UHTTPD_KEY=""
|
|
|
|
|
|
|
|
local cfg="$1"
|
2010-05-17 19:35:15 +00:00
|
|
|
local realm="$(uci_get system.@system[0].hostname)"
|
2016-08-13 23:24:59 +00:00
|
|
|
local listen http https interpreter indexes path handler httpdconf haveauth
|
2019-11-07 10:40:31 +00:00
|
|
|
local enabled
|
|
|
|
|
|
|
|
config_get_bool enabled "$cfg" 'enabled' 1
|
|
|
|
[ $enabled -gt 0 ] || return
|
2010-03-25 15:46:16 +00:00
|
|
|
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_open_instance
|
2013-11-11 12:19:02 +00:00
|
|
|
procd_set_param respawn
|
2015-02-26 13:44:05 +00:00
|
|
|
procd_set_param stderr 1
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_set_param command "$UHTTPD_BIN" -f
|
|
|
|
|
2016-08-13 23:24:59 +00:00
|
|
|
config_get config "$cfg" config
|
|
|
|
if [ -z "$config" ]; then
|
|
|
|
mkdir -p /var/etc/uhttpd
|
|
|
|
httpdconf="/var/etc/uhttpd/httpd.${cfg}.conf"
|
|
|
|
rm -f ${httpdconf}
|
|
|
|
config_list_foreach "$cfg" httpauth create_httpauth
|
|
|
|
if [ "$haveauth" = "1" ]; then
|
|
|
|
procd_append_param command -c ${httpdconf}
|
|
|
|
[ -r /etc/httpd.conf ] && cat /etc/httpd.conf >>/var/etc/uhttpd/httpd.${cfg}.conf
|
|
|
|
fi
|
|
|
|
fi
|
|
|
|
|
2010-03-25 15:46:16 +00:00
|
|
|
append_arg "$cfg" home "-h"
|
|
|
|
append_arg "$cfg" realm "-r" "${realm:-OpenWrt}"
|
|
|
|
append_arg "$cfg" config "-c"
|
|
|
|
append_arg "$cfg" cgi_prefix "-x"
|
2013-12-15 15:32:37 +00:00
|
|
|
[ -f /usr/lib/uhttpd_lua.so ] && {
|
2018-08-23 07:07:23 +00:00
|
|
|
local len
|
|
|
|
config_get len "$cfg" lua_prefix_LENGTH
|
|
|
|
|
|
|
|
if [ -n "$len" ]; then
|
|
|
|
config_list_foreach "$cfg" lua_prefix append_lua_prefix
|
|
|
|
else
|
|
|
|
config_get prefix "$cfg" lua_prefix
|
|
|
|
config_get handler "$cfg" lua_handler
|
|
|
|
append_lua_prefix "$prefix=$handler"
|
|
|
|
fi
|
2013-12-15 15:32:37 +00:00
|
|
|
}
|
|
|
|
[ -f /usr/lib/uhttpd_ubus.so ] && {
|
|
|
|
append_arg "$cfg" ubus_prefix "-u"
|
|
|
|
append_arg "$cfg" ubus_socket "-U"
|
2015-11-10 22:28:45 +00:00
|
|
|
append_bool "$cfg" ubus_cors "-X" 0
|
2013-12-15 15:32:37 +00:00
|
|
|
}
|
2021-11-23 18:30:30 +00:00
|
|
|
[ -f /usr/lib/uhttpd_ucode.so ] && {
|
|
|
|
config_list_foreach "$cfg" ucode_prefix append_ucode_prefix
|
|
|
|
}
|
2010-03-27 00:00:33 +00:00
|
|
|
append_arg "$cfg" script_timeout "-t"
|
2010-04-15 19:46:35 +00:00
|
|
|
append_arg "$cfg" network_timeout "-T"
|
2013-06-13 11:55:12 +00:00
|
|
|
append_arg "$cfg" http_keepalive "-k"
|
2011-01-09 23:35:45 +00:00
|
|
|
append_arg "$cfg" tcp_keepalive "-A"
|
2010-07-23 13:15:22 +00:00
|
|
|
append_arg "$cfg" error_page "-E"
|
2012-05-28 00:52:24 +00:00
|
|
|
append_arg "$cfg" max_requests "-n" 3
|
2013-06-13 11:55:12 +00:00
|
|
|
append_arg "$cfg" max_connections "-N"
|
2010-07-23 13:15:22 +00:00
|
|
|
|
2013-06-13 11:55:12 +00:00
|
|
|
append_bool "$cfg" no_ubusauth "-a" 0
|
2010-07-23 13:15:22 +00:00
|
|
|
append_bool "$cfg" no_symlinks "-S" 0
|
|
|
|
append_bool "$cfg" no_dirlists "-D" 0
|
2010-08-11 00:05:34 +00:00
|
|
|
append_bool "$cfg" rfc1918_filter "-R" 0
|
2010-03-25 15:46:16 +00:00
|
|
|
|
2015-10-19 10:08:01 +00:00
|
|
|
config_get alias_list "$cfg" alias
|
|
|
|
for alias in $alias_list; do
|
|
|
|
procd_append_param command -y "$alias"
|
|
|
|
done
|
|
|
|
|
2010-04-03 13:09:10 +00:00
|
|
|
config_get http "$cfg" listen_http
|
|
|
|
for listen in $http; do
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_append_param command -p "$listen"
|
2010-04-03 13:09:10 +00:00
|
|
|
done
|
2010-03-25 15:46:16 +00:00
|
|
|
|
2010-08-14 00:54:24 +00:00
|
|
|
config_get interpreter "$cfg" interpreter
|
|
|
|
for path in $interpreter; do
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_append_param command -i "$path"
|
2010-08-14 00:54:24 +00:00
|
|
|
done
|
|
|
|
|
2012-10-15 18:19:57 +00:00
|
|
|
config_get indexes "$cfg" index_page
|
|
|
|
for path in $indexes; do
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_append_param command -I "$path"
|
2012-10-15 18:19:57 +00:00
|
|
|
done
|
|
|
|
|
2010-04-03 13:09:10 +00:00
|
|
|
config_get https "$cfg" listen_https
|
2010-03-25 15:46:16 +00:00
|
|
|
config_get UHTTPD_KEY "$cfg" key /etc/uhttpd.key
|
|
|
|
config_get UHTTPD_CERT "$cfg" cert /etc/uhttpd.crt
|
|
|
|
|
2014-08-25 12:39:34 +00:00
|
|
|
[ -f /lib/libustream-ssl.so ] && [ -n "$https" ] && {
|
2015-03-15 10:32:10 +00:00
|
|
|
[ -s "$UHTTPD_CERT" -a -s "$UHTTPD_KEY" ] || {
|
2010-03-25 15:46:16 +00:00
|
|
|
config_foreach generate_keys cert
|
|
|
|
}
|
|
|
|
|
|
|
|
[ -f "$UHTTPD_CERT" -a -f "$UHTTPD_KEY" ] && {
|
|
|
|
append_arg "$cfg" cert "-C"
|
|
|
|
append_arg "$cfg" key "-K"
|
|
|
|
|
2010-04-03 13:09:10 +00:00
|
|
|
for listen in $https; do
|
2013-09-25 07:44:48 +00:00
|
|
|
procd_append_param command -s "$listen"
|
2010-04-03 13:09:10 +00:00
|
|
|
done
|
2010-03-25 15:46:16 +00:00
|
|
|
}
|
2015-05-30 20:55:14 +00:00
|
|
|
|
|
|
|
append_bool "$cfg" redirect_https "-q" 0
|
2010-03-25 15:46:16 +00:00
|
|
|
}
|
|
|
|
|
2021-08-20 11:33:51 +00:00
|
|
|
config_get json_script "$cfg" json_script
|
|
|
|
for file in $json_script; do
|
2015-11-08 20:39:09 +00:00
|
|
|
[ -s "$file" ] && procd_append_param command -H "$file"
|
|
|
|
done
|
|
|
|
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_close_instance
|
2010-03-25 15:46:16 +00:00
|
|
|
}
|
|
|
|
|
2023-11-02 15:39:49 +00:00
|
|
|
uhttpd_interfaces()
|
|
|
|
{
|
|
|
|
local cfg="$1"
|
|
|
|
local http https listen ips
|
|
|
|
|
|
|
|
config_get http "$cfg" listen_http
|
|
|
|
config_get https "$cfg" listen_https
|
|
|
|
for listen in $http $https; do
|
|
|
|
case "$listen" in
|
|
|
|
"" |\
|
|
|
|
"0.0.0.0:"* |\
|
|
|
|
"[::]:"* )
|
|
|
|
continue
|
|
|
|
;;
|
|
|
|
*.*.*.*:*)
|
|
|
|
ips="$ips ${listen%%:*}
|
|
|
|
"
|
|
|
|
;;
|
|
|
|
\[*\]:* )
|
|
|
|
listen="${listen:1}"
|
|
|
|
ips="$ips ${listen%%]:*}
|
|
|
|
"
|
|
|
|
;;
|
|
|
|
esac
|
|
|
|
done
|
|
|
|
ips="$( echo "$ips" | sort -u )"
|
|
|
|
echo "$ips"
|
|
|
|
}
|
|
|
|
|
|
|
|
resolve_iface()
|
|
|
|
{
|
|
|
|
local cfg="$1"
|
|
|
|
local ipaddr ipaddrs testip="$2"
|
|
|
|
|
|
|
|
config_get ipaddrs "$cfg" ipaddr
|
|
|
|
for ipaddr in $ipaddrs; do
|
|
|
|
[ "$ipaddr" = "$testip" ] && echo "$cfg"
|
|
|
|
done
|
|
|
|
}
|
|
|
|
|
|
|
|
get_interface_by_ip()
|
|
|
|
{
|
|
|
|
config_load network
|
|
|
|
config_foreach resolve_iface interface "$@"
|
|
|
|
}
|
|
|
|
|
2013-09-17 21:45:30 +00:00
|
|
|
service_triggers()
|
2010-03-25 15:46:16 +00:00
|
|
|
{
|
2023-11-02 15:39:49 +00:00
|
|
|
local iface ifaces all=0
|
|
|
|
|
2013-09-17 21:45:30 +00:00
|
|
|
procd_add_reload_trigger "uhttpd"
|
2022-10-24 15:39:55 +00:00
|
|
|
procd_add_raw_trigger acme.renew 5000 /etc/init.d/uhttpd reload
|
2023-11-02 15:39:49 +00:00
|
|
|
|
|
|
|
config_load uhttpd
|
|
|
|
ips="$(config_foreach uhttpd_interfaces uhttpd)"
|
|
|
|
[ -z "$ips" ] && return 0
|
|
|
|
|
|
|
|
for ip in $ips; do
|
|
|
|
iface="$(get_interface_by_ip $ip)"
|
|
|
|
[ -z "$iface" ] && all=1
|
|
|
|
ifaces="$ifaces $iface"
|
|
|
|
done
|
|
|
|
|
|
|
|
if [ "$all" = "1" ]; then
|
|
|
|
procd_add_raw_trigger "interface.*.up" 1000 /etc/init.d/uhttpd start
|
|
|
|
else
|
|
|
|
for iface in $ifaces; do
|
|
|
|
procd_add_raw_trigger "interface.$iface.up" 1000 /etc/init.d/uhttpd start
|
|
|
|
done
|
|
|
|
fi
|
2010-03-25 15:46:16 +00:00
|
|
|
}
|
|
|
|
|
2013-09-17 21:45:30 +00:00
|
|
|
start_service() {
|
2010-03-25 15:46:16 +00:00
|
|
|
config_load uhttpd
|
|
|
|
config_foreach start_instance uhttpd
|
|
|
|
}
|