You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
106 lines
2.8 KiB
106 lines
2.8 KiB
#include "hsm_control.h"
|
|
#include "lightningd.h"
|
|
#include "peer_control.h"
|
|
#include "subd.h"
|
|
#include <ccan/err/err.h>
|
|
#include <ccan/io/io.h>
|
|
#include <ccan/take/take.h>
|
|
#include <daemon/log.h>
|
|
#include <inttypes.h>
|
|
#include <lightningd/hsm/gen_hsm_wire.h>
|
|
#include <wally_bip32.h>
|
|
|
|
static bool hsm_init_done(struct subd *hsm, const u8 *msg, const int *fds,
|
|
struct lightningd *ld)
|
|
{
|
|
u8 *serialized_extkey;
|
|
|
|
if (!fromwire_hsmctl_init_reply(hsm, msg, NULL, &ld->dstate.id,
|
|
&ld->peer_seed,
|
|
&serialized_extkey))
|
|
errx(1, "HSM did not give init reply");
|
|
|
|
log_info_struct(ld->log, "Our ID: %s", struct pubkey, &ld->dstate.id);
|
|
ld->bip32_base = tal(ld, struct ext_key);
|
|
if (bip32_key_unserialize(serialized_extkey, tal_len(serialized_extkey),
|
|
ld->bip32_base) != WALLY_OK)
|
|
errx(1, "HSM did not give unserializable BIP32 extkey");
|
|
|
|
io_break(ld->hsm);
|
|
return true;
|
|
}
|
|
|
|
static void hsm_finished(struct subd *hsm, int status)
|
|
{
|
|
if (WIFEXITED(status))
|
|
errx(1, "HSM failed (exit status %i), exiting.",
|
|
WEXITSTATUS(status));
|
|
errx(1, "HSM failed (signal %u), exiting.", WTERMSIG(status));
|
|
}
|
|
|
|
static enum subd_msg_ret hsm_msg(struct subd *hsm, const u8 *msg, int fd)
|
|
{
|
|
enum hsm_wire_type t = fromwire_peektype(msg);
|
|
u8 *badmsg;
|
|
struct peer *peer;
|
|
u64 id;
|
|
|
|
switch (t) {
|
|
case WIRE_HSMSTATUS_CLIENT_BAD_REQUEST:
|
|
if (!fromwire_hsmstatus_client_bad_request(msg, msg, NULL,
|
|
&id, &badmsg))
|
|
errx(1, "HSM bad status %s", tal_hex(msg, msg));
|
|
peer = peer_by_unique_id(hsm->ld, id);
|
|
|
|
/* "Shouldn't happen" */
|
|
errx(1, "HSM says bad cmd from %"PRIu64" (%s): %s",
|
|
id,
|
|
peer ? (peer->id ? type_to_string(msg, struct pubkey,
|
|
peer->id)
|
|
: "pubkey not yet known")
|
|
: "unknown peer",
|
|
tal_hex(msg, badmsg));
|
|
|
|
/* We don't get called for failed status. */
|
|
case WIRE_HSMSTATUS_INIT_FAILED:
|
|
case WIRE_HSMSTATUS_WRITEMSG_FAILED:
|
|
case WIRE_HSMSTATUS_BAD_REQUEST:
|
|
case WIRE_HSMSTATUS_FD_FAILED:
|
|
case WIRE_HSMSTATUS_KEY_FAILED:
|
|
|
|
/* HSM doesn't send these */
|
|
case WIRE_HSMCTL_INIT:
|
|
case WIRE_HSMCTL_HSMFD_ECDH:
|
|
case WIRE_HSMCTL_SIGN_FUNDING:
|
|
|
|
/* Replies should be paired to individual requests. */
|
|
case WIRE_HSMCTL_INIT_REPLY:
|
|
case WIRE_HSMCTL_HSMFD_ECDH_FD_REPLY:
|
|
case WIRE_HSMCTL_SIGN_FUNDING_REPLY:
|
|
errx(1, "HSM gave invalid message %s", hsm_wire_type_name(t));
|
|
}
|
|
return SUBD_COMPLETE;
|
|
}
|
|
|
|
void hsm_init(struct lightningd *ld, bool newdir)
|
|
{
|
|
bool create;
|
|
|
|
ld->hsm = new_subd(ld, ld, "lightningd_hsm", NULL,
|
|
hsm_wire_type_name,
|
|
hsm_msg, hsm_finished, -1);
|
|
if (!ld->hsm)
|
|
err(1, "Could not subd hsm");
|
|
|
|
if (newdir)
|
|
create = true;
|
|
else
|
|
create = (access("hsm_secret", F_OK) != 0);
|
|
|
|
subd_req(ld->hsm, take(towire_hsmctl_init(ld->hsm, create)),
|
|
-1, 0, hsm_init_done, ld);
|
|
|
|
if (io_loop(NULL, NULL) != ld->hsm)
|
|
errx(1, "Unexpected io exit during HSM startup");
|
|
}
|
|
|
|
|