Project

General

Profile

Download (12.6 KB) Statistics
| Branch: | Tag: | Revision:
1 4668f9f7 Scott Ullrich
<?php
2 b46bfcf5 Bill Marquette
/* $Id$ */
3 5b237745 Scott Ullrich
/*
4 580182e2 Colin Smith
	system_firmware.php
5 1cecfbf7 Scott Ullrich
	Copyright (C) 2008 Scott Ullrich <sullrich@gmail.com>
6
	All rights reserved.
7 580182e2 Colin Smith
8 1cecfbf7 Scott Ullrich
	originally part of m0n0wall (http://m0n0.ch/wall)
9 580182e2 Colin Smith
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
10
	All rights reserved.
11
12
	Redistribution and use in source and binary forms, with or without
13
	modification, are permitted provided that the following conditions are met:
14
15
	1. Redistributions of source code must retain the above copyright notice,
16
	   this list of conditions and the following disclaimer.
17
18
	2. Redistributions in binary form must reproduce the above copyright
19
	   notice, this list of conditions and the following disclaimer in the
20
	   documentation and/or other materials provided with the distribution.
21
22
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
23
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
24
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
25
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
26
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
28
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
29
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
30
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
31
	POSSIBILITY OF SUCH DAMAGE.
32 5b237745 Scott Ullrich
*/
33 1d333258 Scott Ullrich
/*
34 4b805dbc Renato Botelho
	pfSense_BUILDER_BINARIES:	/usr/bin/tar
35 1d333258 Scott Ullrich
	pfSense_MODULE:	firmware
36
*/
37 5b237745 Scott Ullrich
38 6b07c15a Matthew Grooms
##|+PRIV
39
##|*IDENT=page-system-firmware-manualupdate
40
##|*NAME=System: Firmware: Manual Update page
41
##|*DESCR=Allow access to the 'System: Firmware: Manual Update' page.
42
##|*MATCH=system_firmware.php*
43
##|-PRIV
44
45 3958d63b Colin Smith
$d_isfwfile = 1;
46 7385a6b4 Scott Ullrich
$nocsrf = true;
47
48 f0394a03 Scott Ullrich
require_once("globals.inc");
49 c1605b35 Scott Ullrich
require_once("functions.inc");
50 6605faea Scott Ullrich
require_once("guiconfig.inc");
51 da55e467 Scott Ullrich
52
$curcfg = $config['system']['firmware'];
53
54 73b9d3c6 jim-p
$kerneltypes = array(
55 bff167fd jim-p
	'SMP' => gettext("Standard Kernel"),
56
	'wrap' => gettext("Embedded Kernel"),
57 73b9d3c6 jim-p
);
58
59 6605faea Scott Ullrich
require_once("xmlrpc_client.inc");
60 aa08f46b Bill Marquette
61 47d11b79 Mark Crane
/* Allow additional execution time 0 = no limit. */
62 8999038a Scott Ullrich
ini_set('max_execution_time', '9999');
63
ini_set('max_input_time', '9999');
64 0045dfd1 Scott Ullrich
65 d2d86ca3 Scott Ullrich
function file_is_for_platform($filename, $ul_name) {
66 f0394a03 Scott Ullrich
	global $g;
67 3350a691 Scott Ullrich
	if($g['platform'] == "nanobsd") {
68 d2d86ca3 Scott Ullrich
		if(stristr($ul_name, "nanobsd"))
69 7475fc0b Scott Ullrich
			return true;
70
		else
71 4b805dbc Renato Botelho
			return false;
72 7475fc0b Scott Ullrich
	}
73 e6d5af4b Ermal
	$_gb = exec("/usr/bin/tar xzf $filename -C /tmp/ etc/platform");
74
	unset($_gb);
75 4b805dbc Renato Botelho
	if(!file_exists("/tmp/etc/platform"))
76 fe38f1da Scott Ullrich
		return false;
77 e6d5af4b Ermal
	$upgrade_is_for_platform = trim(file_get_contents("/tmp/etc/platform", " \n\t\r"));
78
	if ($g['platform'] == $upgrade_is_for_platform) {
79
		@unlink("/tmp/etc/platform");
80 f0394a03 Scott Ullrich
		return true;
81
	}
82
	return false;
83
}
84
85 cdd3238d Scott Ullrich
function file_upload_error_message($error_code) {
86 4b805dbc Renato Botelho
	switch ($error_code) {
87
	case UPLOAD_ERR_INI_SIZE:
88
		return gettext('The uploaded file exceeds the upload_max_filesize directive in php.ini');
89
	case UPLOAD_ERR_FORM_SIZE:
90
		return gettext('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form');
91
	case UPLOAD_ERR_PARTIAL:
92
		return gettext('The uploaded file was only partially uploaded');
93
	case UPLOAD_ERR_NO_FILE:
94
		return gettext('No file was uploaded');
95
	case UPLOAD_ERR_NO_TMP_DIR:
96
		return gettext('Missing a temporary folder');
97
	case UPLOAD_ERR_CANT_WRITE:
98
		return gettext('Failed to write file to disk');
99
	case UPLOAD_ERR_EXTENSION:
100
		return gettext('File upload stopped by extension');
101
	default:
102
		return gettext('Unknown upload error');
103
	}
104 cdd3238d Scott Ullrich
}
105
106 8b7c81d7 Scott Ullrich
/* if upgrade in progress, alert user */
107 a368a026 Ermal Lu?i
if(is_subsystem_dirty('firmwarelock')) {
108 1b4f376d Vinicius Coque
	$pgtitle = array(gettext("System"),gettext("Firmware"),gettext("Manual Update"));
109 8b7c81d7 Scott Ullrich
	include("head.inc");
110
	echo "<body link=\"#0000CC\" vlink=\"#0000CC\" alink=\"#0000CC\">\n";
111
	include("fbegin.inc");
112
	echo "<div>\n";
113 02559d7d Colin Fleming
	print_info_box(gettext("An upgrade is currently in progress.<p>The firewall will reboot when the operation is complete.") . "</p><p><img src='/themes/{$g['theme']}/images/icons/icon_fw-update.gif' alt='update' /></p>");
114 8b7c81d7 Scott Ullrich
	echo "</div>\n";
115
	include("fend.inc");
116
	echo "</body>";
117
	echo "</html>";
118
	exit;
119
}
120
121 4b805dbc Renato Botelho
if($_POST['backupbeforeupgrade'])
122 b2a67b55 Scott Ullrich
	touch("/tmp/perform_full_backup.txt");
123
124 e6d5af4b Ermal
if ($_POST['kerneltype'] && in_array($_POST['kerneltype'], array_keys($kerneltypes)))
125
	file_put_contents("/boot/kernel/pfsense_kernel.txt", $_POST['kerneltype']);
126 afa829bb Scott Ullrich
127 aa08f46b Bill Marquette
/* Handle manual upgrade */
128 a368a026 Ermal Lu?i
if ($_POST && !is_subsystem_dirty('firmwarelock')) {
129 4b805dbc Renato Botelho
130 580182e2 Colin Smith
	unset($input_errors);
131
	unset($sig_warning);
132
133 4134b5e6 Carlos Eduardo Ramos
	if (stristr($_POST['Submit'], gettext("Enable")))
134 580182e2 Colin Smith
		$mode = "enable";
135 4134b5e6 Carlos Eduardo Ramos
	else if (stristr($_POST['Submit'], gettext("Disable")))
136 580182e2 Colin Smith
		$mode = "disable";
137 4134b5e6 Carlos Eduardo Ramos
	else if (stristr($_POST['Submit'], gettext("Upgrade")) || $_POST['sig_override'])
138 580182e2 Colin Smith
		$mode = "upgrade";
139
	else if ($_POST['sig_no']) {
140 709f48f0 Scott Ullrich
		if(file_exists("{$g['upload_path']}/firmware.tgz"))
141
				unlink("{$g['upload_path']}/firmware.tgz");
142 580182e2 Colin Smith
	}
143
	if ($mode) {
144
		if ($mode == "enable") {
145 b6f67235 Scott Ullrich
			conf_mount_rw();
146 a368a026 Ermal Lu?i
			mark_subsystem_dirty('firmware');
147 580182e2 Colin Smith
		} else if ($mode == "disable") {
148 b6f67235 Scott Ullrich
			conf_mount_ro();
149 a368a026 Ermal Lu?i
			clear_subsystem_dirty('firmware');
150 580182e2 Colin Smith
		} else if ($mode == "upgrade") {
151 cdd3238d Scott Ullrich
			if ($_FILES['ulfile']['error'])
152 4b805dbc Renato Botelho
				$errortext = "(" . file_upload_error_message($_FILES['ulfile']['error']) . ")";
153 580182e2 Colin Smith
			if (is_uploaded_file($_FILES['ulfile']['tmp_name'])) {
154
				/* verify firmware image(s) */
155 d2d86ca3 Scott Ullrich
				if (file_is_for_platform($_FILES['ulfile']['tmp_name'], $_FILES['ulfile']['name']) == false && !$_POST['sig_override'])
156 33a2693c Chris Buechler
					$input_errors[] = gettext("The uploaded image file is not for this platform.");
157 580182e2 Colin Smith
				else if (!file_exists($_FILES['ulfile']['tmp_name'])) {
158
					/* probably out of memory for the MFS */
159 1b4f376d Vinicius Coque
					$input_errors[] = gettext("Image upload failed (out of memory?)");
160 0d64af59 Ermal Lu?i
					mwexec("/etc/rc.firmware disable");
161 a368a026 Ermal Lu?i
					clear_subsystem_dirty('firmware');
162 580182e2 Colin Smith
				} else {
163
					/* move the image so PHP won't delete it */
164 1ef7b568 Scott Ullrich
					rename($_FILES['ulfile']['tmp_name'], "{$g['upload_path']}/firmware.tgz");
165 580182e2 Colin Smith
166
					/* check digital signature */
167 1ef7b568 Scott Ullrich
					$sigchk = verify_digital_signature("{$g['upload_path']}/firmware.tgz");
168 580182e2 Colin Smith
169
					if ($sigchk == 1)
170 1b4f376d Vinicius Coque
						$sig_warning = gettext("The digital signature on this image is invalid.");
171 a0116247 Ermal
					else if ($sigchk == 2 && !isset($config['system']['firmware']['allowinvalidsig']))
172 1b4f376d Vinicius Coque
						$sig_warning = gettext("This image is not digitally signed.");
173 a0116247 Ermal
					else if (($sigchk >= 3))
174 1b4f376d Vinicius Coque
						$sig_warning = gettext("There has been an error verifying the signature on this image.");
175 580182e2 Colin Smith
176 709f48f0 Scott Ullrich
					if (!verify_gzip_file("{$g['upload_path']}/firmware.tgz")) {
177 1b4f376d Vinicius Coque
						$input_errors[] = gettext("The image file is corrupt.");
178 1ef7b568 Scott Ullrich
						unlink("{$g['upload_path']}/firmware.tgz");
179 580182e2 Colin Smith
					}
180
				}
181
			}
182
183 1834f481 Scott Ullrich
			run_plugins("/usr/local/pkg/firmware_upgrade");
184
185 e6d5af4b Ermal
			/* Check for input errors, firmware locks, warnings, then check for firmware if sig_override is set */
186
			if (!$input_errors && !is_subsystem_dirty('firmwarelock') && (!$sig_warning || $_POST['sig_override'])) {
187
				if (file_exists("{$g['upload_path']}/firmware.tgz")) {
188
					/* fire up the update script in the background */
189
					mark_subsystem_dirty('firmwarelock');
190
					$savemsg = gettext("The firmware is now being updated. The firewall will reboot automatically.");
191
					if (stristr($_FILES['ulfile']['name'],"nanobsd") or $_POST['isnano'] == "yes")
192
						mwexec_bg("/etc/rc.firmware pfSenseNanoBSDupgrade {$g['upload_path']}/firmware.tgz");
193
					else if(stristr($_FILES['ulfile']['name'],"bdiff"))
194
						mwexec_bg("/etc/rc.firmware delta_update {$g['upload_path']}/firmware.tgz");
195
					else  {
196
						if($g['platform'] == "nanobsd")
197
							$whichone = "pfSenseNanoBSDupgrade";
198
						else
199
							$whichone = "pfSenseupgrade";
200
						mwexec_bg("/etc/rc.firmware {$whichone} {$g['upload_path']}/firmware.tgz");
201
						unset($whichone);
202
					}
203
				} else
204
					$savemsg = sprintf(gettext("Firmware image missing or other error, please try again %s."),$errortext);
205
			}
206 580182e2 Colin Smith
		}
207
	}
208 5b237745 Scott Ullrich
}
209 e2fa4962 Scott Ullrich
210 3c446c66 Erik Fonnesbeck
$pgtitle = array(gettext("System"),gettext("Firmware"));
211 52380979 Scott Ullrich
include("head.inc");
212
213 5b237745 Scott Ullrich
?>
214 4b805dbc Renato Botelho
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
215 afc04d58 Scott Ullrich
<form action="system_firmware.php" method="post" enctype="multipart/form-data">
216
<?php
217
	/* Construct an upload_id for this session */
218 4111fcf5 Ermal
	if (!session_id())
219
		$upload_id = uniqid();
220
	else
221
		$upload_id = session_id();
222 afc04d58 Scott Ullrich
?>
223 4b805dbc Renato Botelho
<input type="hidden" name="UPLOAD_IDENTIFIER" value="<?php echo $upload_id;?>" />
224 580182e2 Colin Smith
<?php include("fbegin.inc"); ?>
225
<?php if ($input_errors) print_input_errors($input_errors); ?>
226 1ef7b568 Scott Ullrich
<?php if ($savemsg) print_info_box($savemsg); ?>
227 580182e2 Colin Smith
<?php if ($fwinfo <> "") print_info_box($fwinfo); ?>
228 77720bd3 Colin Smith
<?php if ($sig_warning && !$input_errors): ?>
229 4668f9f7 Scott Ullrich
<?php
230 02559d7d Colin Fleming
	$sig_warning = "<strong>" . $sig_warning . "</strong><br/>" . gettext("This means that the image you uploaded " .
231 77a89fb6 Scott Ullrich
		"is not an official/supported image and may lead to unexpected behavior or security " .
232
		"compromises. Only install images that come from sources that you trust, and make sure ".
233 02559d7d Colin Fleming
		"that the image has not been tampered with.") . "<br/><br/>".
234 1b4f376d Vinicius Coque
		gettext("Do you want to install this image anyway (on your own risk)?");
235 5b237745 Scott Ullrich
print_info_box($sig_warning);
236 bfed48a4 Scott Ullrich
if(stristr($_FILES['ulfile']['name'],"nanobsd"))
237 02559d7d Colin Fleming
	echo "<input type='hidden' name='isnano' id='isnano' value='yes' />\n";
238 5b237745 Scott Ullrich
?>
239 02559d7d Colin Fleming
<input name="sig_override" type="submit" class="formbtn" id="sig_override" value=" <?=gettext("Yes");?> " />
240
<input name="sig_no" type="submit" class="formbtn" id="sig_no" value=" <?=gettext("No"); ?> " />
241 5b237745 Scott Ullrich
<?php else: ?>
242 a368a026 Ermal Lu?i
<?php if (!is_subsystem_dirty('firmwarelock')): ?>
243 02559d7d Colin Fleming
	<table width="100%" border="0" cellpadding="0" cellspacing="0" summary="firmware">
244 77a89fb6 Scott Ullrich
		<tr>
245
			<td>
246 4820d297 Scott Ullrich
<?php
247
	$tab_array = array();
248 3ff39566 Scott Ullrich
	$tab_array[] = array(gettext("Manual Update"), true, "system_firmware.php");
249
	$tab_array[] = array(gettext("Auto Update"), false, "system_firmware_check.php");
250
	$tab_array[] = array(gettext("Updater Settings"), false, "system_firmware_settings.php");
251
	if($g['hidedownloadbackup'] == false)
252
		$tab_array[] = array(gettext("Restore Full Backup"), false, "system_firmware_restorefullbackup.php");
253 4820d297 Scott Ullrich
	display_top_tabs($tab_array);
254
?>
255 77a89fb6 Scott Ullrich
			</td>
256 580182e2 Colin Smith
		</tr>
257 77a89fb6 Scott Ullrich
		<tr>
258
			<td>
259
				<div id="mainarea">
260 02559d7d Colin Fleming
					<table class="tabcont" width="100%" border="0" cellpadding="6" cellspacing="0" summary="main area">
261 4b805dbc Renato Botelho
					<tr>
262 a6d8feb6 Renato Botelho
						<td colspan="2" class="listtopic"><?=gettext("Invoke") ." ". $g['product_name'] ." ".  gettext("Manual Upgrade"); ?></td>
263 77a89fb6 Scott Ullrich
					</tr>
264
					<tr>
265 4b805dbc Renato Botelho
						<td width="22%" valign="baseline" class="vncell">&nbsp;</td>
266
						<td width="78%" class="vtable">
267 a368a026 Ermal Lu?i
						<?php if (!is_subsystem_dirty('rebootreq')): ?>
268
						<?php if (!is_subsystem_dirty('firmware')): ?>
269 02559d7d Colin Fleming
						<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Enable firmware upload");?>" />
270 e40d415a Scott Ullrich
						<br/>
271 68e14a6b Scott Ullrich
							<?php printf(gettext('Click "Enable firmware upload" to begin.'),$g['firmware_update_text']);?>
272 e40d415a Scott Ullrich
						<br/>
273 77a89fb6 Scott Ullrich
						<?php else: ?>
274 02559d7d Colin Fleming
							<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Disable firmware upload");?>" />
275 e40d415a Scott Ullrich
					</td>
276
					</tr>
277
					<tr>
278 4b805dbc Renato Botelho
						<td width="22%" valign="baseline" class="vncell">&nbsp;</td>
279
						<td width="78%" class="vtable">
280
							<?php
281
								if ($g['platform'] == "nanobsd")
282
									$type = "*.img.gz";
283 e40d415a Scott Ullrich
								else
284 4b805dbc Renato Botelho
									$type = "*.tgz";
285
							?>
286 e40d415a Scott Ullrich
							<strong><?=gettext("Firmware image file ($type):");?> </strong>
287 02559d7d Colin Fleming
							<input name="ulfile" type="file" class="formfld" />
288
							<br />
289 77a89fb6 Scott Ullrich
							<?php
290 4b805dbc Renato Botelho
								if(!file_exists("/boot/kernel/pfsense_kernel.txt")) {
291
									if($g['platform'] == "pfSense") {
292 79eaddf4 Renato Botelho
										echo gettext("Please select kernel type") , ": ";
293 77a89fb6 Scott Ullrich
										echo "<select name='kerneltype'>";
294 73b9d3c6 jim-p
										foreach($kerneltypes as $kerntype => $kerndescr) {
295
											echo "<option value='{$kerntype}'>{$kerndescr}</option>";
296
										}
297 77a89fb6 Scott Ullrich
										echo "</select>";
298 02559d7d Colin Fleming
										echo "<br/>";
299 77a89fb6 Scott Ullrich
									}
300
								}
301
							?>
302 9beebb5e Renato Botelho
							<?php if ($g['hidebackupbeforeupgrade'] === false): ?>
303 02559d7d Colin Fleming
							<input type="checkbox" name='backupbeforeupgrade' id='backupbeforeupgrade' /> <?=gettext("Perform full backup prior to upgrade");?>
304
							<br/>
305 9beebb5e Renato Botelho
							<?php endif; ?>
306 02559d7d Colin Fleming
							<input name="Submit" type="submit" class="formbtn" value="<?=gettext("Upgrade firmware");?>" />
307 e40d415a Scott Ullrich
							<?=gettext('Click "Upgrade firmware" to start the upgrade process.');?>
308 77a89fb6 Scott Ullrich
						<?php endif; else: ?>
309 1b4f376d Vinicius Coque
							<strong><?=gettext("You must reboot the system before you can upgrade the firmware.");?></strong>
310 77a89fb6 Scott Ullrich
						<?php endif; ?>
311 0045dfd1 Scott Ullrich
				</td>
312 77a89fb6 Scott Ullrich
			</tr>
313
			<tr>
314
				<td width="22%" valign="top">&nbsp;</td>
315 e40d415a Scott Ullrich
				<td width="78%">
316 09b964a2 Scott Ullrich
						<?php if (is_subsystem_dirty('firmware')): ?>
317 e40d415a Scott Ullrich
					<span class="vexpl">
318
						<span class="red">
319
							<strong>
320 02559d7d Colin Fleming
								<?=gettext("Warning:");?><br/>
321 e40d415a Scott Ullrich
							</strong>
322
						</span>
323
						<?=gettext("DO NOT abort the firmware upgrade once it " .
324 4b805dbc Renato Botelho
								"has started. The firewall will reboot automatically after " .
325
								"storing the new firmware. The configuration will be maintained.");?>
326 e40d415a Scott Ullrich
					</span>
327 09b964a2 Scott Ullrich
						<?php endif; ?>
328 02559d7d Colin Fleming
				</td></tr>
329 77a89fb6 Scott Ullrich
			</table>
330 e12d98ea Bill Marquette
		</div>
331 02559d7d Colin Fleming
	</td></tr>
332 222494af Colin Smith
</table>
333 afc04d58 Scott Ullrich
334 03c64985 Scott Ullrich
<?php endif; endif; ?>
335 5b237745 Scott Ullrich
<?php include("fend.inc"); ?>
336 02559d7d Colin Fleming
</form>
337 5b237745 Scott Ullrich
</body>
338
</html>