Project

General

Profile

Download (9.9 KB) Statistics
| Branch: | Tag: | Revision:
1
<?php
2
/* $Id$ */
3
/*
4
	system_firmware.php
5
	Copyright (C) 2008 Scott Ullrich <sullrich@gmail.com>
6
	All rights reserved.
7
	
8
	originally part of m0n0wall (http://m0n0.ch/wall)
9
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
10
	All rights reserved.
11
	
12
	
13
	originally part of m0n0wall (http://m0n0.ch/wall)
14

    
15
	Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
16
	All rights reserved.
17

    
18
	Redistribution and use in source and binary forms, with or without
19
	modification, are permitted provided that the following conditions are met:
20

    
21
	1. Redistributions of source code must retain the above copyright notice,
22
	   this list of conditions and the following disclaimer.
23

    
24
	2. Redistributions in binary form must reproduce the above copyright
25
	   notice, this list of conditions and the following disclaimer in the
26
	   documentation and/or other materials provided with the distribution.
27

    
28
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
29
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
30
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
31
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
32
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
33
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
34
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
35
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
36
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
37
	POSSIBILITY OF SUCH DAMAGE.
38
*/
39

    
40
$d_isfwfile = 1;
41
require_once("guiconfig.inc");
42

    
43
$curcfg = $config['system']['firmware'];
44

    
45

    
46
require_once("xmlrpc_client.inc");
47

    
48
/* Allow additional execution time 0 = no limit. */
49
ini_set('max_execution_time', '3600');
50
ini_set('max_input_time', '3600');
51

    
52
/* if upgrade in progress, alert user */
53
if(file_exists($d_firmwarelock_path)) {
54
	$pgtitle = "System: Firmware: Manual Update";
55
	include("head.inc");
56
	echo "<body link=\"#0000CC\" vlink=\"#0000CC\" alink=\"#0000CC\">\n";
57
	include("fbegin.inc");
58
	echo "<div>\n";
59
	print_info_box("An upgrade is currently in progress.<p>The firewall will reboot when the operation is complete.<p><center><img src='/themes/{$g['theme']}/images/icons/icon_fw-update.gif'>");
60
	echo "</div>\n";
61
	include("fend.inc");
62
	echo "</body>";
63
	echo "</html>";
64
	exit;
65
}
66

    
67
if($_POST['kerneltype']) {
68
	if($_POST['kerneltype'] == "single") 
69
		system("touch /boot/kernel/pfsense_kernel.txt");
70
	else 
71
		system("echo {$_POST['kerneltype']} > /boot/kernel/pfsense_kernel.txt");
72
}
73

    
74
/* Handle manual upgrade */
75
if ($_POST && !file_exists($d_firmwarelock_path)) {
76

    
77
	unset($input_errors);
78
	unset($sig_warning);
79

    
80
	if (stristr($_POST['Submit'], "Enable"))
81
		$mode = "enable";
82
	else if (stristr($_POST['Submit'], "Disable"))
83
		$mode = "disable";
84
	else if (stristr($_POST['Submit'], "Upgrade") || $_POST['sig_override'])
85
		$mode = "upgrade";
86
	else if ($_POST['sig_no']) {
87
		if(file_exists("{$g['upload_path']}/firmware.tgz"))
88
				unlink("{$g['upload_path']}/firmware.tgz");
89
	}
90
	if ($mode) {
91
		if ($mode == "enable") {
92
			conf_mount_rw();
93
			touch($d_fwupenabled_path);
94
		} else if ($mode == "disable") {
95
			conf_mount_ro();
96
			if (file_exists($d_fwupenabled_path))
97
				unlink($d_fwupenabled_path);
98
		} else if ($mode == "upgrade") {
99
			if (is_uploaded_file($_FILES['ulfile']['tmp_name'])) {
100
				/* verify firmware image(s) */
101
				if (!stristr($_FILES['ulfile']['name'], $g['platform']) && !$_POST['sig_override'])
102
					$input_errors[] = "The uploaded image file is not for this platform ({$g['platform']}).";
103
				else if (!file_exists($_FILES['ulfile']['tmp_name'])) {
104
					/* probably out of memory for the MFS */
105
					$input_errors[] = "Image upload failed (out of memory?)";
106
					exec_rc_script("/etc/rc.firmware disable");
107
					if (file_exists($d_fwupenabled_path))
108
						unlink($d_fwupenabled_path);
109
				} else {
110
					/* move the image so PHP won't delete it */
111
					rename($_FILES['ulfile']['tmp_name'], "{$g['upload_path']}/firmware.tgz");
112

    
113
					/* check digital signature */
114
					$sigchk = verify_digital_signature("{$g['upload_path']}/firmware.tgz");
115

    
116
					if ($sigchk == 1)
117
						$sig_warning = "The digital signature on this image is invalid.";
118
					else if ($sigchk == 2)
119
						$sig_warning = "This image is not digitally signed.";
120
					else if (($sigchk == 3) || ($sigchk == 4))
121
						$sig_warning = "There has been an error verifying the signature on this image.";
122

    
123
					if (!verify_gzip_file("{$g['upload_path']}/firmware.tgz")) {
124
						$input_errors[] = "The image file is corrupt.";
125
						unlink("{$g['upload_path']}/firmware.tgz");
126
					}
127
				}
128
			}
129
			
130
			run_plugins("/usr/local/pkg/firmware_upgrade");
131
			
132
            /* Check for input errors, firmware locks, warnings, then check for firmware if sig_override is set */
133
            if (!$input_errors && !file_exists($d_firmwarelock_path) && (!$sig_warning || $_POST['sig_override'])) {
134
                    if (file_exists("{$g['upload_path']}/firmware.tgz")) {
135
                            /* fire up the update script in the background */
136
                            touch($d_firmwarelock_path);
137
                            $savemsg = "The firmware is now being updated. The firewall will reboot automatically.";
138
							if(stristr($_FILES['ulfile']['name'],"nanobsd") or $_POST['isnano'] == "yes")
139
								mwexec_bg("/etc/rc.firmware pfSenseNanoBSDupgrade {$g['upload_path']}/firmware.tgz");
140
							else if(stristr($_FILES['ulfile']['name'],"bdiff"))
141
                            	mwexec_bg("/etc/rc.firmware delta_update {$g['upload_path']}/firmware.tgz");
142
							else 
143
								mwexec_bg("/etc/rc.firmware pfSenseupgrade {$g['upload_path']}/firmware.tgz");
144
                    } else {
145
                            $savemsg = "Firmware image missing or other error, please try again.";
146
                    }
147
            }
148
		}
149
	}
150
}
151

    
152
$pgtitle = "System: Firmware: Manual Update";
153
include("head.inc");
154

    
155
?>
156
<body link="#0000CC" vlink="#0000CC" alink="#0000CC">
157
<?php include("fbegin.inc"); ?>
158
<p class="pgtitle"><?=$pgtitle?></p>
159
<?php if ($input_errors) print_input_errors($input_errors); ?>
160
<?php if ($savemsg) print_info_box($savemsg); ?>
161
<?php if ($fwinfo <> "") print_info_box($fwinfo); ?>
162
<?php if ($sig_warning && !$input_errors): ?>
163
<form action="system_firmware.php" method="post">
164
<?php
165
$sig_warning = "<strong>" . $sig_warning . "</strong><br>This means that the image you uploaded " .
166
	"is not an official/supported image and may lead to unexpected behavior or security " .
167
	"compromises. Only install images that come from sources that you trust, and make sure ".
168
	"that the image has not been tampered with.<br><br>".
169
	"Do you want to install this image anyway (on your own risk)?";
170
print_info_box($sig_warning);
171
if(stristr($_FILES['ulfile']['name'],"nanobsd"))
172
	echo "<input type='hidden' name='isnano' id='isnano' value='yes'>\n";
173
?>
174
<input name="sig_override" type="submit" class="formbtn" id="sig_override" value=" Yes ">
175
<input name="sig_no" type="submit" class="formbtn" id="sig_no" value=" No ">
176
</form>
177
<?php else: ?>
178
            <?php if (!file_exists($d_firmwarelock_path)): ?>
179
<form action="system_firmware.php" method="post" enctype="multipart/form-data">
180
	<table width="100%" border="0" cellpadding="0" cellspacing="0">
181
	<tr>
182
		<td>
183
<?php
184
	$tab_array = array();
185
	$tab_array[0] = array("Manual Update", true, "system_firmware.php");
186
	$tab_array[1] = array("Auto Update", false, "system_firmware_check.php");
187
	$tab_array[2] = array("Updater Settings", false, "system_firmware_settings.php");
188
	display_top_tabs($tab_array);
189
?>
190
		</td>
191
	</tr>
192
  <tr>
193
    <td>
194
	<div id="mainarea">
195
              <table class="tabcont" width="100%" border="0" cellpadding="6" cellspacing="0">
196
                <tr>
197
		 <td colspan="2" class="listtopic">Invoke <?=$g['product_name']?> Manual Upgrade</td>
198
		</tr>
199
		  <td width="22%" valign="baseline" class="vncell">&nbsp;</td>
200
                  <td width="78%" class="vtable">
201
            <p>Click &quot;Enable firmware
202
              upload&quot; below, then choose the image file (<?=$g['firmware_update_text'];?>)
203
			  to be uploaded.<br>Click &quot;Upgrade firmware&quot;
204
              to start the upgrade process.</p>
205
                    <?php if (!file_exists($d_sysrebootreqd_path)): ?>
206
                    <?php if (!file_exists($d_fwupenabled_path)): ?>
207
                    <input name="Submit" type="submit" class="formbtn" value="Enable firmware upload">
208
				  <?php else: ?>
209
				   <input name="Submit" type="submit" class="formbtn" value="Disable firmware upload">
210
                    <br><br>
211
					<strong>Firmware image file: </strong>&nbsp;
212
					<input name="ulfile" type="file" class="formfld">
213
                    <br><br>
214
					  <?php
215
				  		if(!file_exists("/boot/kernel/pfsense_kernel.txt")) {
216
				  			if($g['platform'] == "pfSense") { 
217
								echo "Please select kernel type: ";
218
								echo "<select name='kerneltype'>";
219
								echo "<option value='SMP'>Multiprocessor kernel</option>";
220
								echo "<option value='single'>Uniprocessor kernel</option>";
221
								echo "<option value='wrap'>Embedded kernel</option>";
222
								echo "<option value='Developers'>Developers kernel</option>";
223
								echo "</select>";
224
								echo "<br><br>";
225
							}
226
						}
227
					  ?>
228
		    <input name="Submit" type="submit" class="formbtn" value="Upgrade firmware">
229
				  <?php endif; else: ?>
230
				    <strong>You must reboot the system before you can upgrade the firmware.</strong>
231
				  <?php endif; ?>
232
                  </td>
233
		</td>
234
                </tr>
235
                <tr>
236
                  <td width="22%" valign="top">&nbsp;</td>
237
                  <td width="78%"><span class="vexpl"><span class="red"><strong>Warning:<br>
238
                    </strong></span>DO NOT abort the firmware upgrade once it
239
                    has started. The firewall will reboot automatically after
240
                    storing the new firmware. The configuration will be maintained.</span></td>
241
              </table>
242
		</div>
243
		</tr>
244
		</td>
245
</table>
246

    
247
</form>
248
<?php endif; endif; ?>
249
<?php include("fend.inc"); ?>
250
</body>
251
</html>
(141-141/175)