mirror of
https://github.com/ElementsProject/lightning.git
synced 2024-11-19 09:54:16 +01:00
da9d92960d
We currently just ignore them. This is one reason the hsm (in some places) explicitly calls log_broken so we get some idea. This was the only subdaemon which had a NULL msgcb and msgname, so eliminate those checks in subd.c. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
89 lines
2.4 KiB
C
89 lines
2.4 KiB
C
#include "hsm_control.h"
|
|
#include "lightningd.h"
|
|
#include "subd.h"
|
|
#include <ccan/err/err.h>
|
|
#include <ccan/fdpass/fdpass.h>
|
|
#include <ccan/io/io.h>
|
|
#include <ccan/take/take.h>
|
|
#include <common/status.h>
|
|
#include <common/utils.h>
|
|
#include <errno.h>
|
|
#include <hsmd/gen_hsm_client_wire.h>
|
|
#include <inttypes.h>
|
|
#include <lightningd/hsm_control.h>
|
|
#include <lightningd/log.h>
|
|
#include <lightningd/log_status.h>
|
|
#include <string.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/types.h>
|
|
#include <wally_bip32.h>
|
|
#include <wire/wire_sync.h>
|
|
|
|
int hsm_get_client_fd(struct lightningd *ld,
|
|
const struct pubkey *id,
|
|
u64 dbid,
|
|
int capabilities)
|
|
{
|
|
int hsm_fd;
|
|
u8 *msg;
|
|
|
|
assert(dbid);
|
|
msg = towire_hsm_client_hsmfd(NULL, id, dbid, capabilities);
|
|
if (!wire_sync_write(ld->hsm_fd, take(msg)))
|
|
fatal("Could not write to HSM: %s", strerror(errno));
|
|
|
|
msg = wire_sync_read(tmpctx, ld->hsm_fd);
|
|
if (!fromwire_hsm_client_hsmfd_reply(msg))
|
|
fatal("Bad reply from HSM: %s", tal_hex(tmpctx, msg));
|
|
|
|
hsm_fd = fdpass_recv(ld->hsm_fd);
|
|
if (hsm_fd < 0)
|
|
fatal("Could not read fd from HSM: %s", strerror(errno));
|
|
return hsm_fd;
|
|
}
|
|
|
|
static unsigned int hsm_msg(struct subd *hsmd,
|
|
const u8 *msg, const int *fds UNUSED)
|
|
{
|
|
/* We only expect one thing from the HSM that's not a STATUS message */
|
|
struct pubkey client_id;
|
|
u8 *bad_msg;
|
|
|
|
if (!fromwire_hsmstatus_client_bad_request(tmpctx, msg, &client_id,
|
|
&bad_msg))
|
|
fatal("Bad status message from hsmd: %s", tal_hex(tmpctx, msg));
|
|
|
|
/* This should, of course, never happen. */
|
|
log_broken(hsmd->log, "client %s sent bad hsm request %s",
|
|
type_to_string(tmpctx, struct pubkey, &client_id),
|
|
tal_hex(tmpctx, bad_msg));
|
|
return 0;
|
|
}
|
|
|
|
void hsm_init(struct lightningd *ld)
|
|
{
|
|
u8 *msg;
|
|
int fds[2];
|
|
|
|
/* We actually send requests synchronously: only status is async. */
|
|
if (socketpair(AF_LOCAL, SOCK_STREAM, 0, fds) != 0)
|
|
err(1, "Could not create hsm socketpair");
|
|
|
|
ld->hsm = new_global_subd(ld, "lightning_hsmd",
|
|
hsm_client_wire_type_name,
|
|
hsm_msg,
|
|
take(&fds[1]), NULL);
|
|
if (!ld->hsm)
|
|
err(1, "Could not subd hsm");
|
|
|
|
ld->hsm_fd = fds[0];
|
|
if (!wire_sync_write(ld->hsm_fd, towire_hsm_init(tmpctx)))
|
|
err(1, "Writing init msg to hsm");
|
|
|
|
ld->wallet->bip32_base = tal(ld->wallet, struct ext_key);
|
|
msg = wire_sync_read(tmpctx, ld->hsm_fd);
|
|
if (!fromwire_hsm_init_reply(msg,
|
|
&ld->id, ld->wallet->bip32_base))
|
|
errx(1, "HSM did not give init reply");
|
|
}
|