mirror of
https://gitlab.uni-freiburg.de/opensourcevdi/spice
synced 2025-12-31 02:41:52 +00:00
40ef0cb625
Due to ticket expiration, it is possible that the streaming channels for the client are created after the ticket expires. Currently, streaming channels are created dynamically when the guest starts streaming to the server, which can happen at any time (for instance if you decide to start the graphic server manually). If the ticket has expired before the streaming channel is created, authentication will fail and the client will not be able to connect. To avoid this, create the channels when the first main channel connection is made. This ensures that client will connect to all streaming channels. This could be considered a temporary solution. There may be other situations where it would be useful to connect new channels after the ticket has expired, but enabling this behavior would require protocol changes and a careful analysis of security implications. Signed-off-by: Frediano Ziglio <fziglio@redhat.com> Acked-by: Christophe Fergeau <cfergeau@redhat.com>
142 lines
4.2 KiB
C
142 lines
4.2 KiB
C
/* -*- Mode: C; c-basic-offset: 4; indent-tabs-mode: nil -*- */
|
|
/*
|
|
Copyright (C) 2009-2015 Red Hat, Inc.
|
|
|
|
This library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
This library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with this library; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef REDS_PRIVATE_H_
|
|
#define REDS_PRIVATE_H_
|
|
|
|
#include <spice/protocol.h>
|
|
#include <spice/stats.h>
|
|
|
|
#include "main-dispatcher.h"
|
|
#include "main-channel.h"
|
|
#include "inputs-channel.h"
|
|
#include "stat-file.h"
|
|
#include "red-record-qxl.h"
|
|
|
|
#define MIGRATE_TIMEOUT (MSEC_PER_SEC * 10)
|
|
#define MM_TIME_DELTA 400 /*ms*/
|
|
|
|
typedef struct TicketAuthentication {
|
|
char password[SPICE_MAX_PASSWORD_LENGTH];
|
|
time_t expiration_time;
|
|
} TicketAuthentication;
|
|
|
|
typedef struct TicketInfo {
|
|
RSA *rsa;
|
|
int rsa_size;
|
|
BIGNUM *bn;
|
|
SpiceLinkEncryptedTicket encrypted_ticket;
|
|
} TicketInfo;
|
|
|
|
typedef struct MonitorMode {
|
|
uint32_t x_res;
|
|
uint32_t y_res;
|
|
} MonitorMode;
|
|
|
|
typedef struct RedsMigPendingLink {
|
|
SpiceLinkMess *link_msg;
|
|
RedStream *stream;
|
|
} RedsMigPendingLink;
|
|
|
|
typedef struct RedsMigTargetClient {
|
|
RedsState *reds;
|
|
RedClient *client;
|
|
GList *pending_links;
|
|
} RedsMigTargetClient;
|
|
|
|
typedef struct ChannelSecurityOptions ChannelSecurityOptions;
|
|
|
|
typedef struct RedSSLParameters {
|
|
char keyfile_password[256];
|
|
char certs_file[256];
|
|
char private_key_file[256];
|
|
char ca_certificate_file[256];
|
|
char dh_key_file[256];
|
|
char ciphersuite[256];
|
|
} RedSSLParameters;
|
|
|
|
typedef struct RedCharDeviceVDIPort RedCharDeviceVDIPort;
|
|
typedef struct RedServerConfig RedServerConfig;
|
|
|
|
struct RedsState {
|
|
RedServerConfig *config;
|
|
int listen_socket;
|
|
int secure_listen_socket;
|
|
SpiceWatch *listen_watch;
|
|
SpiceWatch *secure_listen_watch;
|
|
RedCharDeviceVDIPort *agent_dev;
|
|
int pending_mouse_event;
|
|
GList *clients;
|
|
MainChannel *main_channel;
|
|
InputsChannel *inputs_channel;
|
|
|
|
int mig_wait_connect; /* src waits for clients to establish connection to dest
|
|
(before migration starts) */
|
|
int mig_wait_disconnect; /* src waits for clients to disconnect (after migration completes) */
|
|
GList *mig_wait_disconnect_clients;/* List of RedsMigWaitDisconnectClient. Holds the clients
|
|
which the src waits for their disconnection */
|
|
|
|
|
|
int mig_inprogress;
|
|
int expect_migrate;
|
|
int src_do_seamless_migrate; /* per migration. Updated after the migration handshake
|
|
between the 2 servers */
|
|
int dst_do_seamless_migrate; /* per migration. Updated after the migration handshake
|
|
between the 2 servers */
|
|
GList *mig_target_clients;
|
|
|
|
GList *channels;
|
|
SpiceMouseMode mouse_mode;
|
|
int is_client_mouse_allowed;
|
|
int dispatcher_allows_client_mouse;
|
|
MonitorMode monitor_mode;
|
|
SpiceTimer *mig_timer;
|
|
|
|
int vm_running;
|
|
GList *char_devices; /* list of SpiceCharDeviceState */
|
|
int seamless_migration_enabled; /* command line arg */
|
|
|
|
SSL_CTX *ctx;
|
|
|
|
#ifdef RED_STATISTICS
|
|
RedStatFile *stat_file;
|
|
#endif
|
|
int allow_multiple_clients;
|
|
bool late_initialization_done;
|
|
|
|
/* Intermediate state for on going monitors config message from a single
|
|
* client, being passed to the guest */
|
|
SpiceBuffer client_monitors_config;
|
|
|
|
int mm_time_enabled;
|
|
uint32_t mm_time_latency;
|
|
|
|
SpiceCharDeviceInstance *vdagent;
|
|
SpiceMigrateInstance *migration_interface;
|
|
|
|
SpiceCoreInterfaceInternal core;
|
|
GList *qxl_instances;
|
|
MainDispatcher *main_dispatcher;
|
|
RedRecord *record;
|
|
};
|
|
|
|
#define FOREACH_QXL_INSTANCE(_reds, _qxl) \
|
|
GLIST_FOREACH(_reds->qxl_instances, QXLInstance, _qxl)
|
|
|
|
#endif /* REDS_PRIVATE_H_ */
|