getnamingo-registry/epp/start_epp.php
Pinga 34da89751d Added scripts for testing the components
- DAS server output optimization
- Fixed EPP formatting error
2024-01-24 13:48:52 +02:00

566 lines
No EOL
27 KiB
PHP

<?php
global $c;
$c = require_once 'config.php';
require_once 'src/EppWriter.php';
require_once 'src/helpers.php';
require_once 'src/epp-check.php';
require_once 'src/epp-info.php';
require_once 'src/epp-create.php';
require_once 'src/epp-update.php';
require_once 'src/epp-renew.php';
require_once 'src/epp-poll.php';
require_once 'src/epp-transfer.php';
require_once 'src/epp-delete.php';
$logFilePath = '/var/log/namingo/epp.log';
$log = setupLogger($logFilePath, 'EPP');
use Swoole\Table;
use Swoole\Timer;
use Swoole\Coroutine\Server;
use Swoole\Coroutine\Server\Connection;
$table = new Table(1024);
$table->column('clid', Table::TYPE_STRING, 64);
$table->column('logged_in', Table::TYPE_INT, 1);
$table->create();
$permittedIPsTable = new Table(1024);
$permittedIPsTable->column('addr', Table::TYPE_STRING, 64);
$permittedIPsTable->create();
// Initialize the PDO connection pool
$pool = new Swoole\Database\PDOPool(
(new Swoole\Database\PDOConfig())
->withDriver($c['db_type'])
->withHost($c['db_host'])
->withPort($c['db_port'])
->withDbName($c['db_database'])
->withUsername($c['db_username'])
->withPassword($c['db_password'])
->withCharset('utf8mb4')
);
Swoole\Runtime::enableCoroutine();
$server = new Server($c['epp_host'], $c['epp_port']);
$server->set([
'enable_coroutine' => true,
'log_file' => '/var/log/namingo/epp_application.log',
'log_level' => SWOOLE_LOG_INFO,
'worker_num' => swoole_cpu_num() * 4,
'pid_file' => $c['epp_pid'],
'tcp_user_timeout' => 10,
'max_request' => 1000,
'open_tcp_nodelay' => true,
'max_conn' => 1024,
'heartbeat_check_interval' => 60,
'heartbeat_idle_time' => 120,
'open_ssl' => true,
'ssl_cert_file' => $c['ssl_cert'],
'ssl_key_file' => $c['ssl_key'],
'ssl_verify_peer' => false,
'ssl_allow_self_signed' => false,
'ssl_protocols' => SWOOLE_SSL_TLSv1_2 | SWOOLE_SSL_TLSv1_3,
'ssl_ciphers' => 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384',
]);
$log->info('Namingo EPP server started');
$server->handle(function (Connection $conn) use ($table, $pool, $c, $log, $permittedIPsTable) {
// Get the client information
$clientInfo = $conn->exportSocket()->getpeername();
$clientIP = $clientInfo['address'] ?? '';
// Check if the IP is in the permitted list
if (!$permittedIPsTable->exist($clientIP)) {
$log->warning('Access denied. The IP address ' . $clientIP . ' is not authorized for this service.');
$conn->close();
return;
}
$log->info('new client from ' . $clientIP . ' connected');
sendGreeting($conn);
while (true) {
try {
// Get a PDO connection from the pool
$pdo = $pool->get();
$data = $conn->recv();
$connId = spl_object_id($conn);
if ($data === false || strlen($data) < 4) {
sendEppError($conn, $pdo, 2000, 'Data reception error');
break;
}
$length = unpack('N', substr($data, 0, 4))[1];
$xmlData = substr($data, 4, $length - 4);
// If you're using PHP < 8.0
libxml_disable_entity_loader(true);
libxml_use_internal_errors(true);
$xml = simplexml_load_string($xmlData);
if ($xml === false) {
sendEppError($conn, $pdo, 2001, 'Invalid XML');
break;
}
$xml->registerXPathNamespace('e', 'urn:ietf:params:xml:ns:epp-1.0');
$xml->registerXPathNamespace('xsi', 'http://www.w3.org/2001/XMLSchema-instance');
$xml->registerXPathNamespace('domain', 'urn:ietf:params:xml:ns:domain-1.0');
$xml->registerXPathNamespace('contact', 'urn:ietf:params:xml:ns:contact-1.0');
$xml->registerXPathNamespace('host', 'urn:ietf:params:xml:ns:host-1.0');
$xml->registerXPathNamespace('rgp', 'urn:ietf:params:xml:ns:rgp-1.0');
$xml->registerXPathNamespace('secDNS', 'urn:ietf:params:xml:ns:secDNS-1.1');
$xml->registerXPathNamespace('launch', 'urn:ietf:params:xml:ns:launch-1.0');
$xml->registerXPathNamespace('fee', 'urn:ietf:params:xml:ns:epp:fee-1.0');
$xml->registerXPathNamespace('mark', 'urn:ietf:params:xml:ns:mark-1.0');
$xml->registerXPathNamespace('allocationToken', 'urn:ietf:params:xml:ns:allocationToken-1.0');
if ($xml->getName() != 'epp') {
continue; // Skip this iteration if not an EPP command
}
switch (true) {
case isset($xml->command->login):
{
$clID = (string) $xml->command->login->clID;
$pw = (string) $xml->command->login->pw;
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $clID);
if (!$clid) {
sendEppError($conn, $pdo, 2200, 'Authentication error', $clTRID);
break;
}
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (checkLogin($pdo, $clID, $pw)) {
if (isset($xml->command->login->newPW)) {
$newPW = (string) $xml->command->login->newPW;
$options = [
'memory_cost' => 1024 * 128,
'time_cost' => 6,
'threads' => 4,
];
$hashedPassword = password_hash($newPW, PASSWORD_ARGON2ID, $options);
try {
$stmt = $pdo->prepare("UPDATE registrar SET pw = :newPW WHERE clid = :clID");
$stmt->bindParam(':newPW', $hashedPassword);
$stmt->bindParam(':clID', $clID);
$stmt->execute();
} catch (PDOException $e) {
sendEppError($conn, $pdo, 2400, 'Password could not be changed', $clTRID);
}
$svTRID = generateSvTRID();
$response = [
'command' => 'login',
'resultCode' => 1000,
'lang' => 'en-US',
'clTRID' => $clTRID,
'svTRID' => $svTRID,
'msg' => 'Password changed successfully. Session will be terminated'
];
$epp = new EPP\EppWriter();
$xml = $epp->epp_writer($response);
updateTransaction($pdo, 'login', null, null, 1000, 'Password changed successfully. Session will be terminated', $svTRID, $xml, $trans);
sendEppResponse($conn, $xml);
$conn->close();
break;
}
$table->set($connId, ['clid' => $clID, 'logged_in' => 1]);
$svTRID = generateSvTRID();
$response = [
'command' => 'login',
'resultCode' => 1000,
'lang' => 'en-US',
'clTRID' => $clTRID,
'svTRID' => $svTRID,
];
$epp = new EPP\EppWriter();
$xml = $epp->epp_writer($response);
$log->info('registrar ' . $clID . ' logged in');
updateTransaction($pdo, 'login', null, null, 1000, 'Command completed successfully', $svTRID, $xml, $trans);
sendEppResponse($conn, $xml);
} else {
sendEppError($conn, $pdo, 2200, 'Authentication error', $clTRID);
}
break;
}
case isset($xml->command->logout):
{
$data = $table->get($connId);
$clid = getClid($pdo, $clID);
$table->del($connId);
$clTRID = (string) $xml->command->clTRID;
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
$svTRID = generateSvTRID();
$response = [
'command' => 'logout',
'resultCode' => 1500,
'lang' => 'en-US',
'clTRID' => $clTRID,
'svTRID' => $svTRID,
];
$epp = new EPP\EppWriter();
$xml = $epp->epp_writer($response);
$log->info('registrar ' . $clID . ' logged out');
updateTransaction($pdo, 'logout', null, null, 1500, 'Command completed successfully; ending session', $svTRID, $xml, $trans);
sendEppResponse($conn, $xml);
$conn->close();
break;
}
case isset($xml->hello):
{
sendGreeting($conn);
break;
}
case isset($xml->command->poll):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processPoll($conn, $pdo, $xml, $data['clid'], $trans);
break;
}
case isset($xml->command->check) && isset($xml->command->check->children('urn:ietf:params:xml:ns:contact-1.0')->check):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processContactCheck($conn, $pdo, $xml, $trans);
break;
}
case isset($xml->command->create) && isset($xml->command->create->children('urn:ietf:params:xml:ns:contact-1.0')->create):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processContactCreate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->info) && isset($xml->command->info->children('urn:ietf:params:xml:ns:contact-1.0')->info):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processContactInfo($conn, $pdo, $xml, $trans);
break;
}
case isset($xml->command->update) && isset($xml->command->update->children('urn:ietf:params:xml:ns:contact-1.0')->update):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processContactUpdate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->delete) && isset($xml->command->delete->children('urn:ietf:params:xml:ns:contact-1.0')->delete):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processContactDelete($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->transfer) && isset($xml->command->transfer->children('urn:ietf:params:xml:ns:contact-1.0')->transfer):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processContactTransfer($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->check) && isset($xml->command->check->children('urn:ietf:params:xml:ns:domain-1.0')->check):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainCheck($conn, $pdo, $xml, $trans);
break;
}
case isset($xml->command->info) && isset($xml->command->info->children('urn:ietf:params:xml:ns:domain-1.0')->info):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainInfo($conn, $pdo, $xml, $trans);
break;
}
case isset($xml->command->update) && isset($xml->command->update->children('urn:ietf:params:xml:ns:domain-1.0')->update):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainUpdate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->create) && isset($xml->command->create->children('urn:ietf:params:xml:ns:domain-1.0')->create):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainCreate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->delete) && isset($xml->command->delete->children('urn:ietf:params:xml:ns:domain-1.0')->delete):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainDelete($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->transfer) && isset($xml->command->transfer->children('urn:ietf:params:xml:ns:domain-1.0')->transfer):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainTransfer($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->check) && isset($xml->command->check->children('urn:ietf:params:xml:ns:host-1.0')->check):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processHostCheck($conn, $pdo, $xml, $trans);
break;
}
case isset($xml->command->create) && isset($xml->command->create->children('urn:ietf:params:xml:ns:host-1.0')->create):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processHostCreate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->info) && isset($xml->command->info->children('urn:ietf:params:xml:ns:host-1.0')->info):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processHostInfo($conn, $pdo, $xml, $trans);
break;
}
case isset($xml->command->update) && isset($xml->command->update->children('urn:ietf:params:xml:ns:host-1.0')->update):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processHostUpdate($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->delete) && isset($xml->command->delete->children('urn:ietf:params:xml:ns:host-1.0')->delete):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processHostDelete($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
case isset($xml->command->info) && isset($xml->command->info->children('https://namingo.org/epp/funds-1.0')->info):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processFundsInfo($conn, $pdo, $xml, $data['clid'], $trans);
break;
}
case isset($xml->command->renew) && isset($xml->command->renew->children('urn:ietf:params:xml:ns:domain-1.0')->renew):
{
$data = $table->get($connId);
$clTRID = (string) $xml->command->clTRID;
$clid = getClid($pdo, $data['clid']);
$xmlString = $xml->asXML();
$trans = createTransaction($pdo, $clid, $clTRID, $xmlString);
if (!$data || $data['logged_in'] !== 1) {
sendEppError($conn, $pdo, 2202, 'Authorization error', $clTRID);
$conn->close();
}
processDomainRenew($conn, $pdo, $xml, $data['clid'], $c['db_type'], $trans);
break;
}
default:
{
sendEppError($conn, $pdo, 2000, 'Unrecognized command');
break;
}
}
} catch (PDOException $e) {
// Handle database exceptions
$log->error('Database error: ' . $e->getMessage());
sendEppError($conn, $pdo, 2500, 'Error connecting to the EPP database');
$conn->close();
} catch (Throwable $e) {
// Catch any other exceptions or errors
$log->error('Error: ' . $e->getMessage());
sendEppError($conn, $pdo, 2500, 'General error');
$conn->close();
} finally {
// Return the connection to the pool
$pool->put($pdo);
}
}
sendEppError($conn, $pdo, 2000, 'Unrecognized command');
$log->info('client from ' . $clientIP . ' disconnected');
$conn->close();
});
Swoole\Coroutine::create(function () use ($pool, $permittedIPsTable) {
updatePermittedIPs($pool, $permittedIPsTable);
});
Swoole\Coroutine::create(function () use ($server) {
$server->start();
});
// Set a timer to update permitted IPs every 5 minutes (300000 milliseconds)
Timer::tick(300000, function() use ($pool, $permittedIPsTable) {
updatePermittedIPs($pool, $permittedIPsTable);
});