SpSecureClient.cpp 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847
  1. #include "SpSecureClient.h"
  2. #include "sp_cfg.h"
  3. #include "sp_env.h"
  4. #include "spShareMemoryBase.h"
  5. #include "toolkit.h"
  6. #include "dbgutil.h"
  7. #ifdef RVC_OS_WIN
  8. #include "IHttpFunc.h"
  9. #include "sp_checkEntity.h"
  10. #include "SpEntity.h"
  11. #endif
  12. #include <winpr/winsock.h>
  13. #include "TokenKeeper_client_g.h"
  14. using namespace TokenKeeper;
  15. #define TAG RVCCOMM_TAG("SecureClient")
  16. CEntityBase* SpSecureClient::m_pEntity = NULL;
  17. void getHttpToken(std::string &channelId, std::string &token, std::string &terminalNo, std::string &reserve1)
  18. {
  19. CSimpleString t_channelId, t_token;
  20. CSystemStaticInfo info;
  21. if (SpSecureClient::m_pEntity == NULL)
  22. return;
  23. if (SpSecureClient::m_pEntity->GetFunction()->GetToken(t_channelId, t_token) != ErrorCodeEnum::Error_Succeed ||
  24. SpSecureClient::m_pEntity->GetFunction()->GetSystemStaticInfo(info) != ErrorCodeEnum::Error_Succeed)
  25. return;
  26. if(t_channelId.GetLength() != 0 && t_token.GetLength() != 0 && info.strTerminalID.GetLength() != 0)
  27. {
  28. channelId = t_channelId.GetData();
  29. token = t_token.GetData();
  30. terminalNo = info.strTerminalID.GetData();
  31. }
  32. }
  33. enum CommEventEnum
  34. {
  35. //连接主用地址 事件 1 0xNNN08001 连接配置文件定义的主用地址,需要记录地址信息。如果为短连接,记录首次连接事件。
  36. CE_ConnectMasterServer = 0x00008001,
  37. //连接备用地址 事件 1 0xNNN08002 如果没有定义备用地址,就不会有这条信息
  38. CE_ConnectSlaveServer = 0x00008002,
  39. //主动断开连接 事件 1 0xNNN08011 如果为短连接,无需记录此事件
  40. CE_ActiveClose = 0x00008011,
  41. //读取配置失败 错误 3 0xNNN08021 不能读到需要配置项,代码或配置有误,可以切换备份区域,或需要人干预
  42. CE_ReadCfgFail = 0x00008021,
  43. //连接地址无效 错误 2 0xNNN88031 对端不存在,配置错误,或当前服务器故障
  44. CE_InvalidAddr = 0x00088031,
  45. //对端拒绝连接 错误 2 0xNNN88032 对端存在,但可能故障,导致服务器拒绝建立连接
  46. CE_PeerReject = 0x00088032,
  47. //连接超时 错误 2 0xNNN88033 等待连接超时
  48. CE_ConnectTimeout = 0x00088033,
  49. //容量拒绝 错误 2 0xNNN88034 由于达到后台的最大容量,连接拒绝,需要重试
  50. CE_ReachMaxNum = 0x00088034,
  51. //服务暂停 错误 2 0xNNN88035 后台暂停服务,实体可以切换主备服务或抛出连接失败,切换备份区域
  52. CE_OutOfService = 0x00088035,
  53. //失去连接 错误 2 0xNNN88036 由于对端或网络原因连接断开
  54. CE_LostConnection = 0x00088036,
  55. //无效请求包 错误 3 0xNNN88041 实体或后台代码错误,需要进行人工修复。在描述中应该说明错误的原因。
  56. CE_InvalidReqPack = 0x00088041,
  57. //鉴权不可识别 错误 3 0xNNN88051 由于服务准入服务证书不符,不能解开请求包,错误需要干预,不能自动修复。
  58. CE_AuthFailed = 0x00088051,
  59. //鉴权信息不匹配 错误 2 0xNNN88052 请求时鉴权信息不匹配,需要重新进行准入。
  60. CE_HashMismatch = 0x00088052,
  61. //当前区域连接失败 事件 2 0xNNN880F1 由于多次尝试失败,或发生不可尝试错误,实体放弃了当前区域连接尝试,用于驱动状态切换。记录区域代码。
  62. CE_CurRegionDisabled = 0x000880F1,
  63. };
  64. void* SpSecureClient::logProducer(NULL);
  65. void SpSecureClient::DbgWithLink_DualActive(const char* formatStr, ...) {
  66. if (formatStr == nullptr)
  67. return;
  68. va_list arg;
  69. va_start(arg, formatStr);
  70. //不这么写?貌似到DbgWithLink内后,arg会被析构?
  71. int n = _vscprintf(formatStr, arg) + 1;
  72. std::vector<char> buf(n + 1, '\0');
  73. vsnprintf(&buf[0], n, formatStr, arg);
  74. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__).withLogProducer(logProducer).withExtendLog(false)(&buf[0]);
  75. if(EntityResource::getSaveFile())
  76. m_log.LOGERROR(&buf[0]);
  77. va_end(arg);
  78. }
  79. // 不应该直接delete,而用DecRef()
  80. SpSecureClient::~SpSecureClient()
  81. {
  82. //this would lost the process at UOS plat.
  83. //#ifndef _WIN32
  84. // if (logProducer != NULL) {
  85. // destroy_log_producer_storage(logProducer);
  86. // logProducer = NULL;
  87. // }
  88. //#endif
  89. }
  90. SpSecureClient::SpSecureClient(CEntityBase *pEntityBase)
  91. : m_bClosed(true)
  92. {
  93. m_pEntity = pEntityBase;
  94. if(logProducer == NULL) {
  95. logProducer = create_log_producer_storage("DualActive", "0", "", "", "");
  96. }
  97. }
  98. std::pair<bool, std::string> FromAddressToIP(std::string host) {
  99. struct hostent* ht = NULL;
  100. ht = gethostbyname(host.c_str());
  101. if (ht) {
  102. for (int i = 0; ; i++) {
  103. if (ht->h_addr_list[i] != NULL)
  104. return std::make_pair(true, inet_ntoa(*((struct in_addr*)ht->h_addr_list[i])));
  105. else
  106. break;
  107. }
  108. for (int j = 0; ; j++) {
  109. if (ht->h_aliases[j] != NULL)
  110. return std::make_pair(true, ht->h_aliases[j]);
  111. else
  112. break;
  113. }
  114. }
  115. return std::make_pair(false, "");
  116. }
  117. bool SpSecureClient::Connect(const char *pServerAddr, int nPort, int nOption) // wait until all authentication operation has been finished
  118. {
  119. TOOLKIT_ASSERT(m_pEntity != NULL);
  120. auto ipRet = FromAddressToIP(pServerAddr);
  121. std::string dstIp = ipRet.first ? ipRet.second : pServerAddr;
  122. bool result = false;
  123. if (GetFunction()->Connect(dstIp.c_str(), nPort, nOption))
  124. {
  125. m_bClosed = false;
  126. result = true;
  127. }
  128. else {
  129. DbgWithLink_DualActive("connect to %s:%d, option=%d, result:%s", dstIp.c_str(), nPort, nOption, result ? "SUCCESS" : "FAIL");
  130. result = false;
  131. }
  132. return result;
  133. }
  134. void SpSecureClient::connectClose(const char *pEntityName)
  135. {
  136. if (NULL == pEntityName)
  137. return;
  138. ENTITY_CONNECT_INFO connectInfo;
  139. if (!findConnectInfo(pEntityName, &connectInfo))
  140. {
  141. DbgWithLink_DualActive("can not find %s in connection list.", pEntityName);
  142. return;
  143. }
  144. connectInfo.m_currentLink = -1;
  145. }
  146. bool SpSecureClient::findConnectInfo(const char *pEntityName, ENTITY_CONNECT_INFO *connectInfo)
  147. {
  148. if (NULL == pEntityName || NULL == connectInfo)
  149. return false;
  150. connectControl *entityConnect = connectControl::getInstance();
  151. if (entityConnect->getEntityInfo(pEntityName, connectInfo))
  152. return true;
  153. return false;
  154. }
  155. bool SpSecureClient::readConnectInfoFromCentralSetting(const char *pEntityName, ENTITY_CONNECT_INFO *connectInfo)
  156. {
  157. if (NULL == pEntityName || NULL == connectInfo)
  158. return false;
  159. connectControl *entityConnect = connectControl::getInstance();
  160. bool readSuccess = entityConnect->getEntityInfo(pEntityName, connectInfo);
  161. //获得集中配置信息
  162. auto pFunc = m_pEntity->GetFunction();
  163. CSmartPointer<IConfigInfo> spConfig;
  164. if (Error_Succeed != pFunc->OpenConfig(Config_CenterSetting, spConfig))
  165. {
  166. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("open center setting config fail");
  167. return false;
  168. }
  169. CSimpleStringA str;
  170. int readEach = 1;
  171. if (Error_Succeed == spConfig->ReadConfigValue("SpBase", "ReadEach", str) && !str.IsNullOrEmpty())
  172. readEach = atoi(str);
  173. if (0 == readEach && readSuccess)
  174. return true;//不是每次都读取新的Entity的IP和Port,只在实体启动时读取一次
  175. ErrorCodeEnum configRc = Error_Bug;
  176. if (Error_Succeed != (configRc = spConfig->ReadConfigValue(pEntityName, "Server", str)) || str.IsNullOrEmpty())
  177. {
  178. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("read Main::Server config fail, %d, %s", configRc, pEntityName);
  179. return false;
  180. }
  181. CSimpleStringA strServer1;
  182. int nServer1Port;
  183. if (Error_Succeed != (configRc = ParseIPAddress(str, strServer1, nServer1Port)))
  184. {
  185. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("parse ip addr fail: %s, %d", (const char*)str, configRc);
  186. return false;
  187. }
  188. CSimpleStringA strServer2 = "";
  189. int nServer2Port = 0;
  190. if (Error_Succeed == spConfig->ReadConfigValue(pEntityName, "Server_Backup", str) && !str.IsNullOrEmpty())
  191. ParseIPAddress(str, strServer2, nServer2Port);
  192. int dualActive = -1;
  193. if (Error_Succeed == spConfig->ReadConfigValue("SpBase", "DualActive", str) && !str.IsNullOrEmpty())
  194. dualActive = atoi(str);
  195. if (readSuccess)
  196. connectInfo->setParam(pEntityName, strServer1.GetData(), nServer1Port, strServer2.GetData(), nServer2Port, dualActive, connectInfo->m_currentLink);
  197. else
  198. {
  199. //DbgWithLink_DualActive("call clear");
  200. connectInfo->clear();
  201. connectInfo->setParam(pEntityName, strServer1.GetData(), nServer1Port, strServer2.GetData(), nServer2Port, dualActive);
  202. }
  203. entityConnect->setEntityInfo(connectInfo);
  204. return true;
  205. }
  206. bool SpSecureClient::setConnectInfo(const ENTITY_CONNECT_INFO *connectInfo)
  207. {
  208. if (NULL == connectInfo)
  209. return false;
  210. connectControl *entityConnect = connectControl::getInstance();
  211. entityConnect->setLastLink(connectInfo->m_currentLink);
  212. return entityConnect->setEntityInfo(connectInfo);
  213. }
  214. // 使用集中配置项连接
  215. bool SpSecureClient::ConnectFromCentralSetting()
  216. {
  217. #ifdef RVC_OS_WIN
  218. SetthreadGroup(GetCurrentThreadId(), m_pEntity->GetEntityName());
  219. #endif // RVC_OS_WIN
  220. if (IsConnectionOK())
  221. return true;
  222. const char* pEntityName = m_pEntity->GetEntityName();
  223. ENTITY_CONNECT_INFO connectInfo;
  224. if (!readConnectInfoFromCentralSetting(pEntityName, &connectInfo))
  225. {
  226. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("Read %s Info Failed", pEntityName);
  227. DbgWithLink_DualActive("Read %s Info Failed", pEntityName);
  228. return false;
  229. }
  230. // 判断当前是否已经准入,已经准入则强制使用安全连接
  231. int nOption = 3;
  232. CSimpleStringA strVal;
  233. if (Error_Succeed == m_pEntity->GetFunction()->GetSysVar("EntryPermit", strVal)) {
  234. if (strVal == "L" && stricmp(pEntityName, "AccessAuthorization") != 0 && stricmp(pEntityName, "Initializer") != 0)
  235. nOption = 2; // 优先使用缓存密钥
  236. }
  237. if (1 == connectInfo.m_DualActive)
  238. return Connect_Dual(&connectInfo, nOption);
  239. else
  240. return Connect_Single(&connectInfo, nOption);
  241. }
  242. int SpSecureClient::getCurrentLink()
  243. {
  244. if (!IsConnectionOK())
  245. return -1;
  246. const char* pEntityName = m_pEntity->GetEntityName();
  247. ENTITY_CONNECT_INFO connectInfo;
  248. if (!readConnectInfoFromCentralSetting(pEntityName, &connectInfo))
  249. {
  250. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("Read %s Info Failed", pEntityName);
  251. return -1;
  252. }
  253. return connectInfo.m_currentLink;
  254. }
  255. bool SpSecureClient::Connect_Single(ENTITY_CONNECT_INFO *connectInfo, int option)
  256. {
  257. if (NULL == connectInfo || 0 == strlen(connectInfo->m_EntityName))
  258. return false;
  259. //DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("mod %s using option %d", connectInfo->m_EntityName, option);
  260. DbgWithLink_DualActive("mod %s using option %d", connectInfo->m_EntityName, option);
  261. if (Connect(connectInfo->m_ServerIP, connectInfo->m_ServerPort, option))
  262. connectInfo->m_currentLink = 0;
  263. else if (0 != strlen(connectInfo->m_Server_BackupIP) && strcmp(connectInfo->m_ServerIP, connectInfo->m_Server_BackupIP)
  264. && Connect(connectInfo->m_Server_BackupIP, connectInfo->m_Server_BackupPort, option))
  265. connectInfo->m_currentLink = 1;
  266. else
  267. connectInfo->m_currentLink = -1;
  268. setConnectInfo(connectInfo);
  269. DbgWithLink_DualActive("Single Connection: EntityName:%s, server:%s %d, serverBackup:%s %d, DualOpen: %d, currentLink:%d", connectInfo->m_EntityName, connectInfo->m_ServerIP,
  270. connectInfo->m_ServerPort, connectInfo->m_Server_BackupIP, connectInfo->m_Server_BackupPort, connectInfo->m_DualActive, connectInfo->m_currentLink);
  271. return -1 != connectInfo->m_currentLink;
  272. }
  273. bool SpSecureClient::Connect_Dual(ENTITY_CONNECT_INFO *connectInfo, int option)
  274. {
  275. if (NULL == connectInfo || 0 == strlen(connectInfo->m_EntityName))
  276. return false;
  277. connectControl *entityConnect = connectControl::getInstance();
  278. bool quickConnect = false;
  279. const int priorLink = entityConnect->getPriorLink(connectInfo->m_lastLink);
  280. if (-1 != priorLink)
  281. {
  282. /*
  283. 根据上次双活成功时的server进行连接
  284. */
  285. if (0 == priorLink && 0 != strlen(connectInfo->m_ServerIP)) {
  286. connectInfo->m_currentLink = (Connect(connectInfo->m_ServerIP, connectInfo->m_ServerPort, option) ? 0 : -1);
  287. }
  288. else if (1 == priorLink && 0 != strlen(connectInfo->m_Server_BackupIP)) {
  289. connectInfo->m_currentLink = (Connect(connectInfo->m_Server_BackupIP, connectInfo->m_Server_BackupPort, option) ? 1 : -1);
  290. }
  291. quickConnect = (-1 == connectInfo->m_currentLink ? false : true);
  292. }
  293. if (!IsConnectionOK()) {
  294. /*
  295. 根据终端号进行连接
  296. */
  297. //获取终端号,判断优先连接的IP和端口
  298. auto pFunc = m_pEntity->GetFunction();
  299. CSmartPointer<IConfigInfo> spConfig;
  300. auto rc = pFunc->OpenConfig(Config_Root, spConfig);
  301. if (rc != Error_Succeed) {
  302. DbgWithLink(LOG_LEVEL_INFO, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("read root.ini Fail: %s", SpStrError(rc));
  303. return false;
  304. }
  305. CSimpleStringA strValue;
  306. spConfig->ReadConfigValue("Terminal", "TerminalNo", strValue);
  307. bool isMainServer = true;
  308. if (strValue.GetLength() > 0) {
  309. char str[20] = "";
  310. sprintf(str, "%s", (const char*)strValue);
  311. const int f = (str[strlen(str) - 1] - '0');
  312. isMainServer = (0 == (f % 2));
  313. DbgWithLink_DualActive("TerminalNo: %s, lastByte: %d, MainServer:%d", str, f, isMainServer);
  314. }
  315. DbgWithLink_DualActive("mod %s using option %d", connectInfo->m_EntityName, option);
  316. if (0 == strlen(connectInfo->m_Server_BackupIP) && 0 == strlen(connectInfo->m_ServerIP)) {
  317. connectInfo->m_currentLink = -1;
  318. } else if (0 == strlen(connectInfo->m_Server_BackupIP))
  319. {//serverBackup Ip and port error, link to server
  320. connectInfo->m_currentLink = (Connect(connectInfo->m_ServerIP, connectInfo->m_ServerPort, option) ? 0 : -1);//Link to first one
  321. DbgWithLink_DualActive("%s serverBackup param error", connectInfo->m_EntityName);
  322. }
  323. else
  324. {
  325. if (isMainServer)
  326. {//link to first server
  327. if (Connect(connectInfo->m_ServerIP, connectInfo->m_ServerPort, option))
  328. connectInfo->m_currentLink = 0;
  329. else if (
  330. strcmp(connectInfo->m_ServerIP, connectInfo->m_Server_BackupIP)
  331. && Connect(connectInfo->m_Server_BackupIP, connectInfo->m_Server_BackupPort, option)
  332. ) {
  333. connectInfo->m_currentLink = 1;
  334. }
  335. else {
  336. connectInfo->m_currentLink = -1;
  337. }
  338. }
  339. else
  340. {//link to second server
  341. DbgWithLink_DualActive("BackUp");
  342. if (Connect(connectInfo->m_Server_BackupIP, connectInfo->m_Server_BackupPort, option))
  343. connectInfo->m_currentLink = 1;
  344. else if (strcmp(connectInfo->m_ServerIP, connectInfo->m_Server_BackupIP)
  345. && Connect(connectInfo->m_ServerIP, connectInfo->m_ServerPort, option))
  346. connectInfo->m_currentLink = 0;
  347. else
  348. connectInfo->m_currentLink = -1;
  349. }
  350. }
  351. }
  352. /*
  353. 连接结束
  354. */
  355. char msg[1024];
  356. sprintf(msg, "%sDual Connection: EntityName:%s, server:%s %d, serverBackup:%s %d, DualOpen: %d, currentLink:%d, curEntityNum:%d", (quickConnect ? "quick " : ""),
  357. connectInfo->m_EntityName, connectInfo->m_ServerIP, connectInfo->m_ServerPort, connectInfo->m_Server_BackupIP,
  358. connectInfo->m_Server_BackupPort, connectInfo->m_DualActive, connectInfo->m_currentLink, entityConnect->getEntityNum());
  359. DbgWithLink_DualActive(msg);
  360. setConnectInfo(connectInfo);
  361. return (-1 != connectInfo->m_currentLink);
  362. }
  363. bool SpSecureClient::IsConnectionOK()
  364. {
  365. return GetFunction()->IsConnectionOK();
  366. }
  367. bool SpSecureClient::IsSecureConn()
  368. {
  369. return GetFunction()->IsSecureConnection();
  370. }
  371. void SpSecureClient::Close()
  372. {
  373. if (!m_bClosed)
  374. {
  375. m_bClosed = true;
  376. GetFunction()->Close();
  377. //clear the connect Info
  378. connectClose(m_pEntity->GetEntityName());
  379. DbgWithLink_DualActive("%s closed", m_pEntity->GetEntityName());
  380. }
  381. }
  382. string SpSecureClient::SendPackage(const CSmartPointer<IPackage>& pSendPkg)
  383. {
  384. return GetFunction()->SendPackage(pSendPkg);
  385. }
  386. CSmartPointer<IPackage> SpSecureClient::ReceivePackage(int nWaitSecond)
  387. {
  388. return GetFunction()->ReceivePackage(nWaitSecond);
  389. }
  390. CSmartPointer<IPackage> SpSecureClient::CreateNewPackage(const char *pServiceCode)
  391. {
  392. return GetFunction()->CreateNewPackage(pServiceCode);
  393. }
  394. CSmartPointer<IPackage> SpSecureClient::CreateReplyPackage(const CSmartPointer<IPackage>& pRecvPkg)
  395. {
  396. return GetFunction()->CreateReplyPackage(pRecvPkg);
  397. }
  398. void SpSecureClient::OnErrorMsg(DWORD dwSysCode, DWORD dwUserCode, const CSimpleStringA &pErrMsg)
  399. {
  400. // 切换到实体线程执行
  401. DbgWithLink(LOG_LEVEL_ERROR, LOG_TYPE_SYSTEM).setAPI(__FUNCTION__)("SpSecureClient error: %s", (const char*)pErrMsg);
  402. }
  403. void SpSecureClient::OnDisconnect()
  404. {
  405. DbgWithLink_DualActive("Entity %s OnDisconnect", m_pEntity->GetEntityName());
  406. }
  407. void SpSecureClient::OnReConnect()
  408. {
  409. if (!IsConnectionOK())
  410. {//可能OnDisconnect被重载,已重新连接
  411. DbgWithLink_DualActive("Entity %s disconnect, try to reconnect", m_pEntity->GetEntityName());
  412. ConnectFromCentralSetting();
  413. }
  414. }
  415. struct OnPackageTask : public ITaskSp
  416. {
  417. OnPackageTask(SpSecureClient *pClient, IPackage* pkg)
  418. :m_pSecureClient(pClient), m_pPackage(pkg)
  419. {}
  420. SpSecureClient *m_pSecureClient;
  421. IPackage * m_pPackage;
  422. virtual void Process()
  423. {
  424. TOOLKIT_ASSERT(m_pPackage != NULL);
  425. CSmartPointer<IPackage> ptr;
  426. ptr.Attach(m_pPackage);
  427. m_pSecureClient->OnPkgAnswer(ptr);
  428. m_pSecureClient->DecRefCount();
  429. }
  430. };
  431. struct OnDisconnectTask : public ITaskSp
  432. {
  433. OnDisconnectTask(SpSecureClient *pClient)
  434. :m_pSecureClient(pClient)
  435. {}
  436. SpSecureClient *m_pSecureClient;
  437. virtual void Process()
  438. {
  439. m_pSecureClient->Close();
  440. m_pSecureClient->OnDisconnect();
  441. m_pSecureClient->DecRefCount();
  442. m_pSecureClient->OnReConnect();
  443. }
  444. };
  445. struct OnErrorTask : public ITaskSp
  446. {
  447. OnErrorTask(SpSecureClient *pClient, DWORD dwSysCode, DWORD dwUserCode, const char *pMsg)
  448. :m_pSecureClient(pClient), m_dwSysCode(dwSysCode), m_dwUserCode(dwUserCode), m_strErrMsg(pMsg)
  449. {}
  450. SpSecureClient *m_pSecureClient;
  451. DWORD m_dwSysCode;
  452. DWORD m_dwUserCode;
  453. CSimpleStringA m_strErrMsg;
  454. virtual void Process()
  455. {
  456. m_pSecureClient->OnErrorMsg(m_dwSysCode, m_dwUserCode, m_strErrMsg);
  457. m_pSecureClient->DecRefCount();
  458. }
  459. };
  460. void SpSecureClient::OnReceivePackage(CSmartPointer<IPackage> &pRecvPkg)
  461. {
  462. // 切换到实体线程执行
  463. OnPackageTask *pTask = new OnPackageTask(this, pRecvPkg.Detach());
  464. IncRefCount();
  465. m_pEntity->GetFunction()->PostEntityTaskFIFO(pTask);
  466. }
  467. void SpSecureClient::OnClose()
  468. {
  469. // 切换到实体线程执行
  470. OnDisconnectTask *pTask = new OnDisconnectTask(this);
  471. IncRefCount();
  472. m_pEntity->GetFunction()->PostEntityTaskFIFO(pTask);
  473. }
  474. void SpSecureClient::OnError(DWORD dwSysCode, DWORD dwUserCode, const char *pErrMsg)
  475. {
  476. // 切换到实体线程执行
  477. OnErrorTask *pTask = new OnErrorTask(this, dwSysCode, dwUserCode, pErrMsg);
  478. IncRefCount();
  479. m_pEntity->GetFunction()->PostEntityTaskFIFO(pTask);
  480. }
  481. void SpSecureClient::OnAuthPass()
  482. {
  483. }
  484. bool SpSecureClient::OnAuthRequestSM(CConnAuthSMReq* pReq)
  485. {
  486. ErrorCodeEnum Error = Error_Unexpect;
  487. CSystemStaticInfo si;
  488. m_pEntity->GetFunction()->GetSystemStaticInfo(si);
  489. CVerifyInfo info;
  490. memset(&info, 0, sizeof(info));
  491. strncpy(info.m_arrTerminalNo, (LPCSTR)si.strTerminalID, sizeof(info.m_arrTerminalNo) - 1);
  492. strcpy(info.m_arrServiceType, "CMBRVC");
  493. {
  494. //TODO: CrossPlaform IP [Gifur@2025730]
  495. #ifdef RVC_OS_LINUX
  496. char buf[512];
  497. toolkit_interface_address_t* addr;
  498. int count, i, aim = -1, backup = -1, third=-1;
  499. toolkit_interface_addresses(&addr, &count);
  500. i = count;
  501. WLog_DBG(TAG, "Number of interfaces: %d", count);
  502. while (i--) {
  503. toolkit_interface_address_t interface = addr[i];
  504. WLog_DBG(TAG, "Name: %s", interface.name);
  505. WLog_DBG(TAG, "Internal? %s", interface.is_internal ? "Yes" : "No");
  506. if (interface.address.address4.sin_family == AF_INET) {
  507. third = i;
  508. toolkit_ip4_name(&interface.address.address4, buf, sizeof(buf));
  509. WLog_DBG(TAG, "IPv4 address: %s", buf);
  510. CSimpleStringA s(buf);
  511. if (s.IsStartWith("99.") || s.IsStartWith("10.")) {
  512. aim = i;
  513. break;
  514. }
  515. if (!interface.is_internal && backup != -1) {
  516. backup = i;
  517. }
  518. } else if (interface.address.address4.sin_family == AF_INET6) {
  519. toolkit_ip6_name(&interface.address.address6, buf, sizeof(buf));
  520. WLog_DBG(TAG, "IPv6 address: %s", buf);
  521. }
  522. }
  523. if (aim == -1 && backup != -1) {
  524. aim = backup;
  525. }
  526. if (aim == -1 && third != -1)
  527. aim = third;
  528. memset(info.m_arrIP, 0, sizeof(info.m_arrIP));
  529. if (aim != -1) {
  530. char ipStr[32];
  531. int b1, b2, b3, b4;
  532. b1 = b2 = b3 = b4 = 0;
  533. toolkit_ip4_name(&addr[aim].address.address4, ipStr, sizeof(ipStr));
  534. WLog_DBG(TAG, "specified local ip: %s", ipStr);
  535. sscanf(ipStr, "%d.%d.%d.%d", &b1, &b2, &b3, &b4);
  536. info.m_arrIP[0] = (BYTE)b1;
  537. info.m_arrIP[1] = (BYTE)b2;
  538. info.m_arrIP[2] = (BYTE)b3;
  539. info.m_arrIP[3] = (BYTE)b4;
  540. }
  541. toolkit_free_interface_addresses(addr, count);
  542. #else
  543. hostent* ent = _gethostbyname(NULL);
  544. WLog_DBG(TAG, "_gethostbyname finished ");
  545. if (ent && ent->h_addr_list[0] != NULL) {
  546. int i = 0;
  547. WLog_DBG(TAG, "office hostname: %s", ent->h_name);
  548. for (; ent->h_addr_list[i] != NULL; ++i) {
  549. struct in_addr* in = (struct in_addr*)ent->h_addr_list[i];
  550. if (in->S_un.S_un_b.s_b1 == 99 || in->S_un.S_un_b.s_b1 == 10)
  551. break;
  552. }
  553. if (ent->h_addr_list[i] == NULL)
  554. i = 0;
  555. auto in = (struct in_addr*)ent->h_addr_list[i];
  556. info.m_arrIP[0] = in->S_un.S_un_b.s_b1;
  557. info.m_arrIP[1] = in->S_un.S_un_b.s_b2;
  558. info.m_arrIP[2] = in->S_un.S_un_b.s_b3;
  559. info.m_arrIP[3] = in->S_un.S_un_b.s_b4;
  560. }
  561. #endif //RVC_OS_LINUX
  562. }
  563. if(pReq != NULL)
  564. {
  565. // call token service to encrypt verify info
  566. TokenService_ClientBase* client = new TokenService_ClientBase(m_pEntity);
  567. Error = client->Connect();
  568. if (Error == Error_Succeed)
  569. {
  570. TokenService_EncryptWithPubKey_Req Req;
  571. TokenService_EncryptWithPubKey_Ans Ans;
  572. Req.raw_data.m_pData = (char*)&info;
  573. Req.raw_data.m_iLength = sizeof(info); //28
  574. Error = client->EncryptWithPubKey(Req, Ans, -1);
  575. if (Error != Error_Succeed) {
  576. LOG_TRACE("EncryptWithPriKey for VerifyInfo failed! Error = %s", SpStrError(Error));
  577. } else {
  578. memcpy_s(pReq->m_arrVerifyInfo, sizeof(pReq->m_arrVerifyInfo), Ans.enc_data.m_pData, Ans.enc_data.m_iLength);
  579. // get token
  580. TokenService_GetToken_Req Req1;
  581. TokenService_GetToken_Ans Ans1;
  582. Error = client->GetToken(Req1, Ans1, -1);
  583. if (Error != Error_Succeed) {
  584. LOG_TRACE("GetToken for VerifyInfo failed! Error = %s", SpStrError(Error));
  585. }
  586. else {
  587. memcpy_s(pReq->m_arrVerifyToken, sizeof(pReq->m_arrVerifyToken), Ans1.token.m_pData, Ans1.token.m_iLength);
  588. }
  589. }
  590. client->GetFunction()->CloseSession();
  591. }
  592. else {
  593. LOG_TRACE("connect to tokenservice failed! Error = %s", SpStrError(Error));
  594. client->SafeDelete();
  595. }
  596. }
  597. return Error == Error_Succeed;
  598. }
  599. bool SpSecureClient::OnSessionKeyRet(CConnAuthRet *pRet, BYTE *pBuf, int *pBufLen)
  600. {
  601. memset(pBuf, 0, *pBufLen);
  602. TokenService_ClientBase *client = new TokenService_ClientBase(m_pEntity);
  603. ErrorCodeEnum Error = client->Connect();
  604. if (Error == Error_Succeed)
  605. {
  606. TokenService_DecryptWithPriKey_Req Req;
  607. TokenService_DecryptWithPriKey_Ans Ans;
  608. Req.enc_data.m_pData = (char*)&pRet->m_arrEncSessionKey[0];
  609. Req.enc_data.m_iLength = sizeof(pRet->m_arrEncSessionKey);
  610. Error = client->DecryptWithPriKey(Req, Ans, -1);
  611. if (Error == Error_Succeed)
  612. {
  613. memcpy_s(pBuf, *pBufLen, Ans.raw_data.m_pData, Ans.raw_data.m_iLength);
  614. *pBufLen = Ans.raw_data.m_iLength;
  615. } else {
  616. *pBufLen = 0;
  617. LOG_TRACE("OnSessionKey decrypt session key failed! Error = %s", SpStrError(Error));
  618. }
  619. client->GetFunction()->CloseSession();
  620. } else {
  621. LOG_TRACE("connect to tokenservice failed! Error = %s", SpStrError(Error));
  622. client->SafeDelete();
  623. }
  624. return Error == Error_Succeed;
  625. }
  626. bool SpSecureClient::OnSessionKeySMRet(CConnAuthSMRet* pRet, BYTE* pBuf, int* pBufLen)
  627. {
  628. memset(pBuf, 0, *pBufLen);
  629. TokenService_ClientBase* client = new TokenService_ClientBase(m_pEntity);
  630. ErrorCodeEnum Error = client->Connect();
  631. if (Error == Error_Succeed)
  632. {
  633. TokenService_DecryptWithPriKey_Req Req;
  634. TokenService_DecryptWithPriKey_Ans Ans;
  635. Req.enc_data.m_pData = (char*)&pRet->m_arrEncSessionKey[0];
  636. Req.enc_data.m_iLength = sizeof(pRet->m_arrEncSessionKey);
  637. Error = client->DecryptWithPriKey(Req, Ans, -1);
  638. if (Error == Error_Succeed)
  639. {
  640. memcpy_s(pBuf, *pBufLen, Ans.raw_data.m_pData, Ans.raw_data.m_iLength);
  641. *pBufLen = Ans.raw_data.m_iLength;
  642. }
  643. else {
  644. *pBufLen = 0;
  645. LOG_TRACE("OnSessionKey decrypt session key failed! Error = %s", SpStrError(Error));
  646. }
  647. client->GetFunction()->CloseSession();
  648. } else {
  649. LOG_TRACE("connect to tokenservice failed! Error = %s", SpStrError(Error));
  650. client->SafeDelete();
  651. }
  652. return Error == Error_Succeed;
  653. }
  654. bool SpSecureClient::OnGetSharedSK(char *pTerminalNo, int *pTerminalNoLen, BYTE *pBuf, int *pBufLen)
  655. {
  656. #ifdef RVC_OS_WIN
  657. ErrorCodeEnum Error = Error_Unexpect;
  658. CSystemStaticInfo si;
  659. {
  660. m_pEntity->GetFunction()->GetSystemStaticInfo(si);
  661. }
  662. TOOLKIT_ASSERT(si.strTerminalID.GetLength() <= *pTerminalNoLen);
  663. strcpy(pTerminalNo, (LPCSTR)si.strTerminalID);
  664. *pTerminalNoLen = strlen(pTerminalNo);
  665. {
  666. TokenService_ClientBase *client = new TokenService_ClientBase(m_pEntity);
  667. Error = client->Connect();
  668. if (Error == Error_Succeed) {
  669. TokenService_GetSharedSK_Req Req;
  670. TokenService_GetSharedSK_Ans Ans;
  671. Error = client->GetSharedSK(Req, Ans, 10000);
  672. if (Error == Error_Succeed) {
  673. memcpy_s(pBuf, *pBufLen, Ans.ssk.m_pData, Ans.ssk.m_iLength);
  674. *pBufLen = Ans.ssk.m_iLength;
  675. } else {
  676. *pBufLen = 0;
  677. LOG_TRACE("OnSessionKey decrypt session key failed! Error = %s", SpStrError(Error));
  678. }
  679. client->GetFunction()->CloseSession();
  680. } else {
  681. LOG_TRACE("connect to tokenservice failed! Error = %s", SpStrError(Error));
  682. client->SafeDelete();
  683. }
  684. }
  685. return Error == Error_Succeed;
  686. #else
  687. return false;
  688. #endif //_MSC_VER
  689. }
  690. ErrorCodeEnum SpSecureClient::ParseIPAddress(const char *str, CSimpleStringA &ip, int &port)
  691. {
  692. ErrorCodeEnum Error = Error_Unexpect;
  693. if (str) {
  694. char tmp1[32] = {};
  695. char tmp2[16] = {};
  696. sscanf(str, "%s %s", tmp1, tmp2);
  697. if (tmp1[0] != 0 && tmp2[0] != 0)
  698. {
  699. ip = tmp1;
  700. port = atoi(tmp2);
  701. Error = Error_Succeed;
  702. }
  703. else
  704. return Error;
  705. }
  706. return Error;
  707. }
  708. DWORD SpSecureClient::GetEntityUserCode(DWORD code)
  709. {
  710. TOOLKIT_ASSERT(m_pEntity != NULL);
  711. auto pEnv = sp_get_env();
  712. TOOLKIT_ASSERT(pEnv != NULL);
  713. auto pCfg = pEnv->cfg;
  714. TOOLKIT_ASSERT(pCfg != NULL);
  715. auto pEntity = sp_cfg_get_entity_by_name(pCfg, m_pEntity->GetEntityName());
  716. TOOLKIT_ASSERT(pEntity != NULL);
  717. DWORD dwDevelopID = pEntity->devel_id;
  718. return (dwDevelopID << 20 | code);
  719. }