diff options
author | Werner Koch <[email protected]> | 2017-06-08 07:30:48 +0000 |
---|---|---|
committer | Werner Koch <[email protected]> | 2017-06-08 07:37:36 +0000 |
commit | 9b43220b8ad1a5c1cd51de3bbfff7ccbcc3fa877 (patch) | |
tree | 6ef342f715e143c390eff68629d909e94f6cbd6f /dirmngr/dirmngr.c | |
parent | dirmngr: Allow a timeout for HTTP and other TCP connects. (diff) | |
download | gnupg-9b43220b8ad1a5c1cd51de3bbfff7ccbcc3fa877.tar.gz gnupg-9b43220b8ad1a5c1cd51de3bbfff7ccbcc3fa877.zip |
dirmngr: Implement HTTP connect timeouts of 15 or 2 seconds.
* dirmngr/dirmngr.c (oConnectTimeout, oConnectQuickTimeout): New
enums.
(opts): New options --connect-timeout and --connect-quick-timeout.
(DEFAULT_CONNECT_TIMEOUT): New.
(DEFAULT_CONNECT_QUICK_TIMEOUT): New.
(parse_rereadable_options): Handle new options.
(post_option_parsing): New. Use instead of direct calls to
set_debug() and set_tor_mode ().
(main): Setup default timeouts.
(dirmngr_init_default_ctrl): Set standard connect timeout.
* dirmngr/dirmngr.h (opt): New fields connect_timeout and
connect_quick_timeout.
(server_control_s): New field timeout.
* dirmngr/ks-engine-finger.c (ks_finger_fetch): Pass timeout to
http_raw_connect.
* dirmngr/ks-engine-hkp.c (send_request): Call
http_session_set_timeout.
* dirmngr/ks-engine-http.c (ks_http_fetch): Ditto.
* dirmngr/server.c (cmd_wkd_get, cmd_ks_search, cmd_ks_get)
(cmd_ks_fetch): Implement --quick option.
--
The standard connect timeouts are way to long so we add a timeout to
the connect calls. Also implement the --quick option which is already
used by gpg for non-important requests (e.g. looking up a key for
verification).
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'dirmngr/dirmngr.c')
-rw-r--r-- | dirmngr/dirmngr.c | 43 |
1 files changed, 39 insertions, 4 deletions
diff --git a/dirmngr/dirmngr.c b/dirmngr/dirmngr.c index 8393e0bf3..6eabca9c3 100644 --- a/dirmngr/dirmngr.c +++ b/dirmngr/dirmngr.c @@ -147,6 +147,8 @@ enum cmd_and_opt_values { oStandardResolver, oRecursiveResolver, oResolverTimeout, + oConnectTimeout, + oConnectQuickTimeout, aTest }; @@ -250,6 +252,8 @@ static ARGPARSE_OPTS opts[] = { ARGPARSE_s_n (oStandardResolver, "standard-resolver", "@"), ARGPARSE_s_n (oRecursiveResolver, "recursive-resolver", "@"), ARGPARSE_s_i (oResolverTimeout, "resolver-timeout", "@"), + ARGPARSE_s_i (oConnectTimeout, "connect-timeout", "@"), + ARGPARSE_s_i (oConnectQuickTimeout, "connect-quick-timeout", "@"), ARGPARSE_group (302,N_("@\n(See the \"info\" manual for a complete listing " "of all commands and options)\n")), @@ -277,6 +281,9 @@ static struct debug_flags_s debug_flags [] = #define DEFAULT_MAX_REPLIES 10 #define DEFAULT_LDAP_TIMEOUT 100 /* arbitrary large timeout */ +#define DEFAULT_CONNECT_TIMEOUT (15*1000) /* 15 seconds */ +#define DEFAULT_CONNECT_QUICK_TIMEOUT ( 2*1000) /* 2 seconds */ + /* For the cleanup handler we need to keep track of the socket's name. */ static const char *socket_name; /* If the socket has been redirected, this is the name of the @@ -602,6 +609,8 @@ parse_rereadable_options (ARGPARSE_ARGS *pargs, int reread) disable_check_own_socket = 0; enable_standard_resolver (0); set_dns_timeout (0); + opt.connect_timeout = 0; + opt.connect_quick_timeout = 0; return 1; } @@ -703,6 +712,14 @@ parse_rereadable_options (ARGPARSE_ARGS *pargs, int reread) set_dns_timeout (pargs->r.ret_int); break; + case oConnectTimeout: + opt.connect_timeout = pargs->r.ret_ulong * 1000; + break; + + case oConnectQuickTimeout: + opt.connect_quick_timeout = pargs->r.ret_ulong * 1000; + break; + default: return 0; /* Not handled. */ } @@ -716,6 +733,21 @@ parse_rereadable_options (ARGPARSE_ARGS *pargs, int reread) } +/* This fucntion is called after option parsing to adjust some values + * and call option setup functions. */ +static void +post_option_parsing (void) +{ + /* It would be too surpirsing if the quick timeout is larger than + * the standard value. */ + if (opt.connect_quick_timeout > opt.connect_timeout) + opt.connect_quick_timeout = opt.connect_timeout; + + set_debug (); + set_tor_mode (); +} + + #ifndef HAVE_W32_SYSTEM static int pid_suffix_callback (unsigned long *r_suffix) @@ -844,6 +876,10 @@ main (int argc, char **argv) /* Reset rereadable options to default values. */ parse_rereadable_options (NULL, 0); + /* Default TCP timeouts. */ + opt.connect_timeout = DEFAULT_CONNECT_TIMEOUT; + opt.connect_quick_timeout = DEFAULT_CONNECT_QUICK_TIMEOUT; + /* LDAP defaults. */ opt.add_new_ldapservers = 0; opt.ldaptimeout = DEFAULT_LDAP_TIMEOUT; @@ -1031,8 +1067,7 @@ main (int argc, char **argv) log_printf ("\n"); } - set_debug (); - set_tor_mode (); + post_option_parsing (); /* Get LDAP server list from file. */ #if USE_LDAP @@ -1513,6 +1548,7 @@ dirmngr_init_default_ctrl (ctrl_t ctrl) if (opt.http_proxy) ctrl->http_proxy = xstrdup (opt.http_proxy); ctrl->http_no_crl = 1; + ctrl->timeout = opt.connect_timeout; } @@ -1774,8 +1810,7 @@ reread_configuration (void) } fclose (fp); - set_debug (); - set_tor_mode (); + post_option_parsing (); } |