1# $OpenBSD: Client.pm,v 1.6 2015/11/02 00:48:17 bluhm Exp $ 2 3# Copyright (c) 2010-2014 Alexander Bluhm <bluhm@openbsd.org> 4# 5# Permission to use, copy, modify, and distribute this software for any 6# purpose with or without fee is hereby granted, provided that the above 7# copyright notice and this permission notice appear in all copies. 8# 9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 16 17use strict; 18use warnings; 19 20package Client; 21use parent 'Proc'; 22use Carp; 23use Socket; 24use Socket6; 25use IO::Socket; 26use IO::Socket::INET6; 27use IO::Socket::SSL; 28use Sys::Syslog qw(:standard :extended :macros); 29 30sub new { 31 my $class = shift; 32 my %args = @_; 33 $args{ktracefile} ||= "client.ktrace"; 34 $args{logfile} ||= "client.log"; 35 $args{up} ||= "Openlog"; 36 my $self = Proc::new($class, %args); 37 $self->{connectproto} ||= "udp"; 38 return $self; 39} 40 41sub child { 42 my $self = shift; 43 44 if (defined($self->{connectdomain}) && 45 $self->{connectdomain} ne "sendsyslog") { 46 my $cs; 47 if ($self->{connectdomain} == AF_UNIX) { 48 $cs = IO::Socket::UNIX->new( 49 Type => SOCK_DGRAM, 50 Peer => $self->{connectpath} || "/dev/log", 51 ) or die ref($self), " socket unix failed: $!"; 52 $cs->setsockopt(SOL_SOCKET, SO_SNDBUF, 10000) 53 or die ref($self), " setsockopt failed: $!"; 54 } else { 55 $SSL_ERROR = ""; 56 my $iosocket = $self->{connectproto} eq "tls" ? 57 "IO::Socket::SSL" : "IO::Socket::INET6"; 58 my $proto = $self->{connectproto}; 59 $proto = "tcp" if $proto eq "tls"; 60 $cs = $iosocket->new( 61 Proto => $proto, 62 Domain => $self->{connectdomain}, 63 PeerAddr => $self->{connectaddr}, 64 PeerPort => $self->{connectport}, 65 SSL_verify_mode => SSL_VERIFY_NONE, 66 $self->{sslversion} ? 67 (SSL_version => $self->{sslversion}) : (), 68 $self->{sslciphers} ? 69 (SSL_cipher_list => $self->{sslciphers}) : (), 70 ) or die ref($self), " $iosocket socket connect ". 71 "failed: $!,$SSL_ERROR"; 72 print STDERR "connect sock: ",$cs->sockhost()," ", 73 $cs->sockport(),"\n"; 74 print STDERR "connect peer: ",$cs->peerhost()," ", 75 $cs->peerport(),"\n"; 76 if ($self->{connectproto} eq "tls") { 77 print STDERR "ssl version: ", 78 $cs->get_sslversion(),"\n"; 79 print STDERR "ssl cipher: ", 80 $cs->get_cipher(),"\n"; 81 print STDERR "ssl issuer: ", 82 $cs->peer_certificate('issuer'),"\n"; 83 print STDERR "ssl subject: ", 84 $cs->peer_certificate('subject'),"\n"; 85 print STDERR "ssl cn: ", 86 $cs->peer_certificate('cn'),"\n"; 87 } 88 } 89 90 *STDIN = *STDOUT = $self->{cs} = $cs; 91 } 92 93 if ($self->{logsock}) { 94 setlogsock($self->{logsock}) 95 or die ref($self), " setlogsock failed: $!"; 96 } 97 # we take LOG_UUCP as it is not used nowadays 98 openlog("syslogd-regress", "ndelay,perror,pid", LOG_UUCP); 99} 100 1011; 102