1 files changed, 106 insertions, 0 deletions
diff --git a/core/checkcloudconnection.cpp b/core/checkcloudconnection.cpp
new file mode 100644
index 000000000..f29d971ba
--- /dev/null
+++ b/core/checkcloudconnection.cpp
@@ -0,0 +1,106 @@
+#include <QObject>
+#include <QTimer>
+#include <QNetworkAccessManager>
+#include <QNetworkReply>
+#include <QEventLoop>
+
+#include "pref.h"
+#include "helpers.h"
+#include "git-access.h"
+
+#include "checkcloudconnection.h"
+
+
+CheckCloudConnection::CheckCloudConnection(QObject *parent) :
+	QObject(parent),
+	reply(0)
+{
+
+}
+
+#define TEAPOT "/make-latte?number-of-shots=3"
+#define HTTP_I_AM_A_TEAPOT 418
+#define MILK "Linus does not like non-fat milk"
+bool CheckCloudConnection::checkServer()
+{
+	if (verbose)
+		fprintf(stderr, "Checking cloud connection...\n");
+
+	QTimer timer;
+	timer.setSingleShot(true);
+	QEventLoop loop;
+	QNetworkRequest request;
+	request.setRawHeader("Accept", "text/plain");
+	request.setRawHeader("User-Agent", getUserAgent().toUtf8());
+	request.setRawHeader("Client-Id", getUUID().toUtf8());
+	request.setUrl(QString(prefs.cloud_base_url) + TEAPOT);
+	QNetworkAccessManager *mgr = new QNetworkAccessManager();
+	reply = mgr->get(request);
+	connect(&timer, &QTimer::timeout, &loop, &QEventLoop::quit);
+	connect(reply, &QNetworkReply::finished, &loop, &QEventLoop::quit);
+	connect(reply, &QNetworkReply::sslErrors, this, &CheckCloudConnection::sslErrors);
+	for (int seconds = 1; seconds <= 5; seconds++) {
+		timer.start(1000); // wait five seconds
+		loop.exec();
+		if (timer.isActive()) {
+			// didn't time out, did we get the right response?
+			timer.stop();
+			if (reply->attribute(QNetworkRequest::HttpStatusCodeAttribute).toInt() == HTTP_I_AM_A_TEAPOT &&
+			    reply->readAll() == QByteArray(MILK)) {
+				reply->deleteLater();
+				mgr->deleteLater();
+				if (verbose > 1)
+					qWarning() << "Cloud storage: successfully checked connection to cloud server";
+				git_storage_update_progress(last_git_storage_update_val + 1, "successfully checked cloud connection");
+				return true;
+			}
+		} else if (seconds < 5) {
+			git_storage_update_progress(last_git_storage_update_val + 1, "waited 1 sec for cloud connection");
+		} else {
+			disconnect(reply, SIGNAL(finished()), &loop, SLOT(quit()));
+			reply->abort();
+		}
+	}
+	git_storage_update_progress(last_git_storage_update_val + 1, "cloud connection failed");
+	if (verbose)
+		qDebug() << "connection test to cloud server failed" <<
+			    reply->error() << reply->errorString() <<
+			    reply->attribute(QNetworkRequest::HttpStatusCodeAttribute).toInt() <<
+			    reply->readAll();
+	reply->deleteLater();
+	mgr->deleteLater();
+	if (verbose)
+		qWarning() << "Cloud storage: unable to connect to cloud server";
+	return false;
+}
+
+void CheckCloudConnection::sslErrors(QList<QSslError> errorList)
+{
+	if (verbose) {
+		qDebug() << "Received error response trying to set up https connection with cloud storage backend:";
+		Q_FOREACH (QSslError err, errorList) {
+			qDebug() << err.errorString();
+		}
+	}
+	QSslConfiguration conf = reply->sslConfiguration();
+	QSslCertificate cert = conf.peerCertificate();
+	QByteArray hexDigest = cert.digest().toHex();
+	if (reply->url().toString().contains(prefs.cloud_base_url) &&
+	    hexDigest == "13ff44c62996cfa5cd69d6810675490e") {
+		if (verbose)
+			qDebug() << "Overriding SSL check as I recognize the certificate digest" << hexDigest;
+		reply->ignoreSslErrors();
+	} else {
+		if (verbose)
+			qDebug() << "got invalid SSL certificate with hex digest" << hexDigest;
+	}
+}
+
+// helper to be used from C code
+extern "C" bool canReachCloudServer()
+{
+	if (verbose)
+		qWarning() << "Cloud storage: checking connection to cloud server";
+	CheckCloudConnection *checker = new CheckCloudConnection;
+	return checker->checkServer();
+}