path: root/src/gns/gnunet-service-gns.c

/*
     This file is part of GNUnet.
     (C) 2009, 2010, 2011 Christian Grothoff (and other contributing authors)

     GNUnet is free software; you can redistribute it and/or modify
     it under the terms of the GNU General Public License as published
     by the Free Software Foundation; either version 3, or (at your
     option) any later version.

     GNUnet is distributed in the hope that it will be useful, but
     WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
     General Public License for more details.

     You should have received a copy of the GNU General Public License
     along with GNUnet; see the file COPYING.  If not, write to the
     Free Software Foundation, Inc., 59 Temple Place - Suite 330,
     Boston, MA 02111-1307, USA.
*/

/**
 *
 * TODO:
 *    - Write xquery and block plugin
 *    - The smaller FIXME issues all around
 *
 * @file gns/gnunet-service-gns.c
 * @brief GNUnet GNS service
 * @author Martin Schanzenbach
 */
#include "platform.h"
#include "gnunet_util_lib.h"
#include "gnunet_transport_service.h"
#include "gnunet_dns_service.h"
#include "gnunet_dnsparser_lib.h"
#include "gnunet_dht_service.h"
#include "gnunet_namestore_service.h"
#include "gnunet_gns_service.h"
#include "gns.h"

/* Ignore for now not used anyway and probably never will */
#define GNUNET_MESSAGE_TYPE_GNS_CLIENT_LOOKUP 23
#define GNUNET_MESSAGE_TYPE_GNS_CLIENT_RESULT 24

/**
 * A result list for namestore queries
 */
struct GNUNET_GNS_ResolverHandle
{
  /* The name to resolve */
  char *name;

  /* the request handle to reply to */
  struct GNUNET_DNS_RequestHandle *request_handle;
  
  /* the dns parser packet received */
  struct GNUNET_DNSPARSER_Packet *packet;
  
  /* the query parsed from the packet */

  struct GNUNET_DNSPARSER_Query *query;
  
  /* has this query been answered? how many matches */
  int answered;

  /* the authoritative zone to query */
  GNUNET_HashCode *authority;

  /**
   * we have an authority in namestore that
   * may be able to resolve
   */
  int authority_found;

  /* a handle for dht lookups. should be NULL if no lookups are in progress */
  struct GNUNET_DHT_GetHandle *get_handle;

};


/**
 * Our handle to the DNS handler library
 */
struct GNUNET_DNS_Handle *dns_handle;

/**
 * Our handle to the DHT
 */
struct GNUNET_DHT_Handle *dht_handle;

/**
 * Our zone's private key
 */
struct GNUNET_CRYPTO_RsaPrivateKey *zone_key;

/**
 * Our handle to the namestore service
 * FIXME maybe need a second handle for iteration
 */
struct GNUNET_NAMESTORE_Handle *namestore_handle;

/**
 * Handle to iterate over our authoritative zone in namestore
 */
struct GNUNET_NAMESTORE_ZoneIterator *namestore_iter;

/**
 * The configuration the GNS service is running with
 */
const struct GNUNET_CONFIGURATION_Handle *GNS_cfg;

/**
 * Our notification context.
 */
static struct GNUNET_SERVER_NotificationContext *nc;

/**
 * Our zone hash
 */
GNUNET_HashCode zone_hash;

/**
 * Our tld. Maybe get from config file
 */
const char* gnunet_tld = ".gnunet";

/**
 * Useful for zone update for DHT put
 */
static int num_public_records =  3600;
struct GNUNET_TIME_Relative dht_update_interval;


//Prototypes
void reply_to_dns(struct GNUNET_GNS_ResolverHandle *answer, uint32_t rd_count,
                  const struct GNUNET_NAMESTORE_RecordData *rd);
void resolve_name(struct GNUNET_GNS_ResolverHandle *query,
                  GNUNET_HashCode *zone);

/**
 * Task run during shutdown.
 *
 * @param cls unused
 * @param tc unused
 */
static void
shutdown_task (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
{
  GNUNET_DNS_disconnect(dns_handle);
  GNUNET_NAMESTORE_disconnect(namestore_handle, 0);
  GNUNET_DHT_disconnect(dht_handle);
}

/**
 * Callback when record data is put into namestore
 *
 * @param cls the closure
 * @param success GNUNET_OK on success
 * @param emsg the error message. NULL if SUCCESS==GNUNET_OK
 */
void
on_namestore_record_put_result(void *cls,
                               int32_t success,
                               const char *emsg)
{
  if (GNUNET_NO == success)
  {
    GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "records already in namestore\n");
    return;
  }
  else if (GNUNET_YES == success)
  {
    GNUNET_log(GNUNET_ERROR_TYPE_DEBUG,
               "records successfully put in namestore\n");
    return;
  }

  GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
             "Error putting records into namestore: %s\n", emsg);
}

/**
 * Function called when we get a result from the dht
 * for our query
 *
 * @param cls the request handle
 * @param exp lifetime
 * @param key the key the record was stored under
 * @param get_path get path
 * @param get_path_length get path length
 * @param put_path put path
 * @param put_path_length put path length
 * @param type the block type
 * @param size the size of the record
 * @param data the record data
 */
void
process_authority_dht_result(void* cls,
                 struct GNUNET_TIME_Absolute exp,
                 const GNUNET_HashCode * key,
                 const struct GNUNET_PeerIdentity *get_path,
                 unsigned int get_path_length,
                 const struct GNUNET_PeerIdentity *put_path,
                 unsigned int put_path_length,
                 enum GNUNET_BLOCK_Type type,
                 size_t size, const void *data)
{
  struct GNUNET_GNS_ResolverHandle *rh;
  uint32_t num_records;
  uint16_t namelen;
  char* name = NULL;
  struct GNUNET_CRYPTO_RsaSignature *signature;
  struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded *public_key;
  int i;
  char* pos;
  GNUNET_HashCode zone, name_hash;

  if (data == NULL)
    return;
  
  //FIXME check expiration?
  rh = (struct GNUNET_GNS_ResolverHandle *)cls;
  pos = (char*)data;
  
  GNUNET_DHT_get_stop (rh->get_handle);
  rh->get_handle = NULL;
  num_records = ntohl(*pos);
  struct GNUNET_NAMESTORE_RecordData rd[num_records];

  pos += sizeof(uint32_t);
  
  for (i=0; i<num_records; i++)
  {
    namelen = ntohs(*pos);
    pos += sizeof(uint16_t);
    
    //name must be 0 terminated
    name = pos;
    pos += namelen;
  
    rd[i].record_type = ntohl(*pos);
    pos += sizeof(uint32_t);
  
    rd[i].data_size = ntohl(*pos);
    pos += sizeof(uint32_t);
  
    rd[i].data = pos;
    pos += rd[i].data_size;

    rd[i].expiration = GNUNET_TIME_absolute_ntoh(
                              *((struct GNUNET_TIME_AbsoluteNBO*)pos));
    pos += sizeof(struct GNUNET_TIME_AbsoluteNBO);

    rd[i].flags = ntohs(*pos);
    pos += sizeof(uint16_t);
    
    if (strcmp(name, rh->query->name) && rd[i].record_type == rh->query->type)
    {
      rh->answered = 1;
    }

  }

  if ((((char*)data)-pos) < 
      (sizeof(struct GNUNET_CRYPTO_RsaSignature) +
       sizeof(struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded)))
  {
    GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
            "Cannot parse signature/key in DHT response. Corrupted or Missing");
    return;
  }

  signature = (struct GNUNET_CRYPTO_RsaSignature*)pos;
  pos += sizeof(struct GNUNET_CRYPTO_RsaSignature);
  
  public_key = (struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded*)pos;
  GNUNET_CRYPTO_hash(name, strlen(name), &name_hash);
  GNUNET_CRYPTO_hash_xor(key, &name_hash, &zone);

  //Save to namestore
  GNUNET_NAMESTORE_record_put (namestore_handle,
                               public_key,
                               name,
                               exp,
                               num_records,
                               rd,
                               signature,
                               &on_namestore_record_put_result, //cont
                               NULL); //cls
  
  if (rh->answered)
  {
    rh->answered = 0;
    memcpy(rh->authority, &zone, sizeof(GNUNET_HashCode));
    resolve_name(rh, rh->authority);
    return;
  }
  GNUNET_log(GNUNET_ERROR_TYPE_INFO, "No authority in records\n");
  reply_to_dns(rh, 0, NULL);
}

/**
 * Start DHT lookup for a name -> PKEY (compare NS) record in
 * query->authority's zone
 *
 * @param rh the pending gns query
 * @param name the name of the PKEY record
 */
void
resolve_authority_dht(struct GNUNET_GNS_ResolverHandle *rh, const char* name)
{
  enum GNUNET_GNS_RecordType rtype = GNUNET_GNS_RECORD_PKEY;
  struct GNUNET_TIME_Relative timeout;
  GNUNET_HashCode name_hash;
  GNUNET_HashCode lookup_key;

  GNUNET_CRYPTO_hash(name, strlen(name), &name_hash);
  GNUNET_CRYPTO_hash_xor(&name_hash, rh->authority, &lookup_key);

  timeout = GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_SECONDS, 20);
  
  //FIXME how long to wait for results?
  rh->get_handle = GNUNET_DHT_get_start(dht_handle, timeout,
                       GNUNET_BLOCK_TYPE_TEST, //FIXME todo
                       &lookup_key,
                       5, //Replication level FIXME
                       GNUNET_DHT_RO_NONE,
                       &rtype, //xquery FIXME this is bad
                       sizeof(GNUNET_GNS_RECORD_PKEY),
                       &process_authority_dht_result,
                       rh);

}

/**
 * Function called when we get a result from the dht
 * for our query
 *
 * @param cls the request handle
 * @param exp lifetime
 * @param key the key the record was stored under
 * @param get_path get path
 * @param get_path_length get path length
 * @param put_path put path
 * @param put_path_length put path length
 * @param type the block type
 * @param size the size of the record
 * @param data the record data
 */
void
process_name_dht_result(void* cls,
                 struct GNUNET_TIME_Absolute exp,
                 const GNUNET_HashCode * key,
                 const struct GNUNET_PeerIdentity *get_path,
                 unsigned int get_path_length,
                 const struct GNUNET_PeerIdentity *put_path,
                 unsigned int put_path_length,
                 enum GNUNET_BLOCK_Type type,
                 size_t size, const void *data)
{
  struct GNUNET_GNS_ResolverHandle *rh;
  uint32_t num_records;
  uint16_t namelen;
  char* name = NULL;
  struct GNUNET_CRYPTO_RsaSignature *signature;
  struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded *public_key;
  int i;
  char* pos;
  GNUNET_HashCode zone, name_hash;

  if (data == NULL)
    return;

  //FIXME maybe check expiration here
  
  rh = (struct GNUNET_GNS_ResolverHandle *)cls;
  pos = (char*)data;
  

  GNUNET_DHT_get_stop (rh->get_handle);
  rh->get_handle = NULL;
  num_records = ntohl(*pos);
  struct GNUNET_NAMESTORE_RecordData rd[num_records];

  pos += sizeof(uint32_t);
  
  for (i=0; i<num_records; i++)
  {
    namelen = ntohs(*pos);
    pos += sizeof(uint16_t);
    
    //name must be 0 terminated
    name = pos;
    pos += namelen;
  
    rd[i].record_type = ntohl(*pos);
    pos += sizeof(uint32_t);
  
    rd[i].data_size = ntohl(*pos);
    pos += sizeof(uint32_t);
  
    rd[i].data = pos;
    pos += rd[i].data_size;

    rd[i].expiration = GNUNET_TIME_absolute_ntoh(
                              *((struct GNUNET_TIME_AbsoluteNBO*)pos));
    pos += sizeof(struct GNUNET_TIME_AbsoluteNBO);

    rd[i].flags = ntohs(*pos);
    pos += sizeof(uint16_t);
    //FIXME class?
    //
    if (strcmp(name, rh->query->name) && rd[i].record_type == rh->query->type)
    {
      rh->answered++;
    }

  }

  if ((((char*)data)-pos) < 
      (sizeof(struct GNUNET_CRYPTO_RsaSignature) +
       sizeof(struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded)))
  {
    GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
            "Cannot parse signature/key in DHT response. Corrupted or Missing");
    return;
  }

  signature = (struct GNUNET_CRYPTO_RsaSignature*)pos;
  pos += sizeof(struct GNUNET_CRYPTO_RsaSignature);
  
  public_key = (struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded*)pos;

  GNUNET_CRYPTO_hash(name, strlen(name), &name_hash);
  GNUNET_CRYPTO_hash_xor(key, &name_hash, &zone);
  
  //FIXME check pubkey against existing key in namestore?
  //https://gnunet.org/bugs/view.php?id=2179

  //Save to namestore
  GNUNET_NAMESTORE_record_put (namestore_handle,
                               public_key,
                               name,
                               exp,
                               num_records,
                               rd,
                               signature,
                               &on_namestore_record_put_result, //cont
                               NULL); //cls
  
  if (rh->answered)
    reply_to_dns(rh, num_records, rd);
  else
    reply_to_dns(rh, 0, NULL);

}

/**
 * Start DHT lookup for a (name -> query->record_type) record in
 * query->authority's zone
 *
 * @param rh the pending gns query context
 * @param name the name to query record
 */
void
resolve_name_dht(struct GNUNET_GNS_ResolverHandle *rh, const char* name)
{
  struct GNUNET_TIME_Relative timeout;
  GNUNET_HashCode name_hash;
  GNUNET_HashCode lookup_key;

  GNUNET_CRYPTO_hash(name, strlen(name), &name_hash);
  GNUNET_CRYPTO_hash_xor(&name_hash, rh->authority, &lookup_key);

  timeout = GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_SECONDS, 20);
  
  //FIXME how long to wait for results?
  rh->get_handle = GNUNET_DHT_get_start(dht_handle, timeout,
                       GNUNET_BLOCK_TYPE_TEST, //FIXME todo
                       &lookup_key,
                       5, //Replication level FIXME
                       GNUNET_DHT_RO_NONE,
                       &rh->query->type, //xquery
                       sizeof(rh->query->type),
                       &process_name_dht_result,
                       rh);

}

//Prototype
void
resolve_name(struct GNUNET_GNS_ResolverHandle *query, GNUNET_HashCode *zone);

/**
 * This is a callback function that should give us only PKEY
 * records. Used to query the namestore for the authority (PKEY)
 * for 'name'
 *
 * @param cls the pending query
 * @param key the key of the zone we did the lookup
 * @param expiration expiration date of the record data set in the namestore
 * @param name the name for which we need an authority
 * @param rd_count the number of records with 'name'
 * @param rd the record data
 * @param signature the signature of the authority for the record data
 */
void
process_authority_lookup(void* cls,
                   const struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded *key,
                   struct GNUNET_TIME_Absolute expiration,
                   const char *name,
                   unsigned int rd_count,
                   const struct GNUNET_NAMESTORE_RecordData *rd,
                   const struct GNUNET_CRYPTO_RsaSignature *signature)
{
  struct GNUNET_GNS_ResolverHandle *rh;
  struct GNUNET_TIME_Relative remaining_time;
  GNUNET_HashCode zone;

  rh = (struct GNUNET_GNS_ResolverHandle *)cls;
  GNUNET_CRYPTO_hash(key, GNUNET_CRYPTO_RSA_KEY_LENGTH, &zone);
  remaining_time = GNUNET_TIME_absolute_get_remaining (expiration);
  
  /**
   * No authority found in namestore.
   */
  if (rd_count == 0)
  {
    /**
     * We did not find an authority in the namestore
     * _IF_ the current authoritative zone is us we cannot resolve
     * _ELSE_ we can still check the _expired_ dht
     */
    if (0 != GNUNET_CRYPTO_hash_cmp(&zone, &zone_hash) &&
        (remaining_time.rel_value == 0))
    {
      resolve_authority_dht(rh, name);
      return;
    }
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Authority unknown\n");
    reply_to_dns(rh, 0, NULL);
    return;
  }

  //Note only 1 pkey should have been returned.. anything else would be strange
  /**
   * We found an authority that may be able to help us
   * move on with query
   */
  int i;
  for (i=0; i<rd_count;i++)
  {
  
    if (strcmp(name, rh->query->name) && rd[i].record_type
        != GNUNET_GNS_RECORD_PKEY)
      continue;
    
      if ((GNUNET_TIME_absolute_get_remaining (rd[i].expiration)).rel_value
          == 0)
      {
        GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "This pkey is expired.\n");
        if (remaining_time.rel_value == 0)
        {
          GNUNET_log(GNUNET_ERROR_TYPE_DEBUG,
                     "This dht entry is expired. Refreshing\n");
          resolve_authority_dht(rh, name);
        }

        continue;
      }

      GNUNET_assert(rd[i].record_type == GNUNET_GNS_RECORD_PKEY);
      GNUNET_HashCode *pkey_hash = GNUNET_malloc(sizeof(GNUNET_HashCode));
      GNUNET_CRYPTO_hash(rd[i].data, GNUNET_CRYPTO_RSA_KEY_LENGTH, pkey_hash);
      GNUNET_free_non_null(rh->authority);
      rh->authority = pkey_hash;
      resolve_name(rh, rh->authority);
      return;
      
  }
    
  /**
   * no answers found
   */
  
  GNUNET_log(GNUNET_ERROR_TYPE_INFO,
             "Authority lookup successful but no PKEY... never get here?\n");
  reply_to_dns(rh, 0, NULL);
}


/**
 * Reply to client with the result from our lookup.
 *
 * @param rh the request handle of the lookup
 * @param rd_count the number of records to return
 * @param rd the record data
 */
void
reply_to_dns(struct GNUNET_GNS_ResolverHandle *rh, uint32_t rd_count,
             const struct GNUNET_NAMESTORE_RecordData *rd)
{
  int i;
  size_t len;
  int ret;
  char *buf;
  struct GNUNET_DNSPARSER_Packet *packet = rh->packet;
  struct GNUNET_DNSPARSER_Record answer_records[rh->answered];
  struct GNUNET_DNSPARSER_Record additional_records[rd_count-(rh->answered)];
  packet->answers = answer_records;
  packet->additional_records = additional_records;
  
  len = sizeof(struct GNUNET_DNSPARSER_Record*);
  for (i=0; i < rd_count; i++)
  {
    GNUNET_log(GNUNET_ERROR_TYPE_INFO,
               "Adding type %d to DNS response\n", rd[i].record_type);
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Name: %s\n", rh->name);
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "QName: %s\n", rh->query->name);
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Record %d/%d\n", i+1, rd_count);
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Record len %d\n", rd[i].data_size);
    if (rd[i].record_type == rh->query->type)
    {
      answer_records[i].name = rh->query->name;
      answer_records[i].type = rd[i].record_type;
      answer_records[i].data.raw.data_len = rd[i].data_size;
      answer_records[i].data.raw.data = (char*)rd[i].data;
      answer_records[i].expiration_time = rd[i].expiration;
      answer_records[i].class = GNUNET_DNSPARSER_CLASS_INTERNET;//hmmn
    }
    else
    {
      additional_records[i].name = rh->query->name;
      additional_records[i].type = rd[i].record_type;
      additional_records[i].data.raw.data_len = rd[i].data_size;
      additional_records[i].data.raw.data = (char*)rd[i].data;
      additional_records[i].expiration_time = rd[i].expiration;
      additional_records[i].class = GNUNET_DNSPARSER_CLASS_INTERNET;//hmmn
    }
    //GNUNET_free(i->record); DO this later!
  }
  
  packet->num_answers = rh->answered; //answer->num_records;
  packet->num_additional_records = rd_count-(rh->answered);
  
  if (NULL == rh->authority)
    packet->flags.authoritative_answer = 1;
  else
   packet->flags.authoritative_answer = 0;

  if (rd == NULL)
    packet->flags.return_code = GNUNET_DNSPARSER_RETURN_CODE_NAME_ERROR;
  else
    packet->flags.return_code = GNUNET_DNSPARSER_RETURN_CODE_NO_ERROR;
  
  packet->flags.query_or_response = 1;

  //FIXME this is silently discarded
  GNUNET_log(GNUNET_ERROR_TYPE_INFO,
             "Building DNS response\n");
  ret = GNUNET_DNSPARSER_pack (packet,
                               1024, /* FIXME magic from dns redirector */
                               &buf,
                               &len);
  GNUNET_log(GNUNET_ERROR_TYPE_INFO,
             "Built DNS response! (ret=%d,len=%d)\n", ret, len);
  if (ret == GNUNET_OK)
  {
    GNUNET_log(GNUNET_ERROR_TYPE_INFO,
               "Answering DNS request\n");
    GNUNET_DNS_request_answer(rh->request_handle,
                              len,
                              buf);
    //GNUNET_free(answer);
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Answered DNS request\n");
    //FIXME return code, free datastructures
  }
  else
  {
    GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
               "Error building DNS response! (ret=%d)", ret);
  }

  //FIXME into free_resolver(rh)
  //GNUNET_DNSPARSER_free_packet(rh->packet);
  //GNUNET_free(rh->name);
  //GNUNET_free(rh);
}


/**
 * Namestore calls this function if we have an entry for this name.
 * (or data=null to indicate the lookup has finished
 *
 * @param cls the pending query
 * @param key the key of the zone we did the lookup
 * @param expiration expiration date of the namestore entry
 * @param name the name for which we need an authority
 * @param rd_count the number of records with 'name'
 * @param rd the record data
 * @param signature the signature of the authority for the record data
 */
static void
process_authoritative_result(void* cls,
                  const struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded *key,
                  struct GNUNET_TIME_Absolute expiration,
                  const char *name, unsigned int rd_count,
                  const struct GNUNET_NAMESTORE_RecordData *rd,
                  const struct GNUNET_CRYPTO_RsaSignature *signature)
{
  struct GNUNET_GNS_ResolverHandle *rh;
  struct GNUNET_TIME_Relative remaining_time;
  GNUNET_HashCode zone;

  rh = (struct GNUNET_GNS_ResolverHandle *) cls;
  GNUNET_CRYPTO_hash(key, GNUNET_CRYPTO_RSA_KEY_LENGTH, &zone);
  remaining_time = GNUNET_TIME_absolute_get_remaining (expiration);

  //FIXME Handle results in rd

  if (rd_count == 0)
  {
    /**
     * Lookup terminated and no results
     * -> DHT Phase unless data is recent
     */
    GNUNET_log(GNUNET_ERROR_TYPE_INFO,
               "Namestore lookup for %s terminated without results\n", name);
    
    /**
     * if this is not our zone we cannot rely on the namestore to be
     * complete. -> Query DHT
     */
    if (!GNUNET_CRYPTO_hash_cmp(&zone, &zone_hash))
    {
      if (remaining_time.rel_value == 0)
      {
        resolve_name_dht(rh, name);
        return;
      }
      else
      {
        GNUNET_log(GNUNET_ERROR_TYPE_DEBUG,
                   "Record is still recent. No DHT lookup\n");
      }
    }

    /**
     * Our zone and no result? Cannot resolve TT
     */
    GNUNET_assert(rh->answered == 0);
    reply_to_dns(rh, 0, NULL); //answered should be 0
    return;

  }
  else
  {
    
    GNUNET_log(GNUNET_ERROR_TYPE_INFO,
               "Processing additional result %s from namestore\n", name);
    int i;
    for (i=0; i<rd_count;i++)
    {
      
      if (strcmp(name, rh->query->name) && rd[i].record_type != rh->query->type)
        continue;
      
      if ((GNUNET_TIME_absolute_get_remaining (rd[i].expiration)).rel_value
          == 0)
      {
        //FIXME there is a catch here...
        GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, "This record is expired. Skipping\n");
        continue;
      }
      
      rh->answered++;
      
    }
    
    /**
     * no answers found
     * consult dht if expired
     */
    if ((remaining_time.rel_value == 0) && (rh->answered == 0))
    {
      GNUNET_log(GNUNET_ERROR_TYPE_DEBUG, 
                 "This dht entry is old. Refreshing.\n");
      resolve_name_dht(rh, name);
      return;
    }
    
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Found %d answer(s) to query!\n",
               rh->answered);

    reply_to_dns(rh, rd_count, rd);
  }
}

/**
 * Determine if this name is canonical.
 * i.e.
 * a.b.gnunet  = not canonical
 * a           = canonical
 *
 * @param name the name to test
 * @return 1 if canonical
 */
int
is_canonical(char* name)
{
  uint32_t len = strlen(name);
  int i;

  for (i=0; i<len; i++)
  {
    if (*(name+i) == '.')
      return 0;
  }
  return 1;
}

/**
 * Move one level up in the domain hierarchy and return the
 * passed top level domain.
 *
 * @param name the domain
 * @return the tld
 */
char* pop_tld(char* name)
{
  uint32_t len;

  if (is_canonical(name))
    return NULL;

  for (len = strlen(name); len > 0; len--)
  {
    if (*(name+len) == '.')
      break;
  }

  if (len == 0)
    return NULL; //Error

  name[len] = '\0'; //terminate string

  return (name+len+1);
}


/**
 * The first phase of resolution.
 * First check if the name is canonical.
 * If it is then try to resolve directly.
 * If not then first have to resolve the authoritative entities.
 *
 * @param rh the pending lookup
 * @param zone the zone we are currently resolving in
 */
void
resolve_name(struct GNUNET_GNS_ResolverHandle *rh, GNUNET_HashCode *zone)
{
  if (is_canonical(rh->name))
  {
    //We only need to check this zone's ns
    GNUNET_NAMESTORE_lookup_record(namestore_handle,
                               zone,
                               rh->name,
                               rh->query->type,
                               &process_authoritative_result,
                               rh);
  }
  else
  {
    //We have to resolve the authoritative entity
    char *new_authority = pop_tld(rh->name);
    GNUNET_NAMESTORE_lookup_record(namestore_handle,
                                 zone,
                                 new_authority,
                                 GNUNET_GNS_RECORD_PKEY,
                                 &process_authority_lookup,
                                 rh);
  }
}

/**
 * Entry point for name resolution
 * Lookup local namestore of our zone.
 *
 * Setup a new query and try to resolve
 *
 * @param request the request handle of the DNS request from a client
 * @param p the DNS query packet we received
 * @param q the DNS query we received parsed from p
 */
void
start_resolution(struct GNUNET_DNS_RequestHandle *request,
                 struct GNUNET_DNSPARSER_Packet *p,
                 struct GNUNET_DNSPARSER_Query *q)
{
  struct GNUNET_GNS_ResolverHandle *rh;
  
  GNUNET_log (GNUNET_ERROR_TYPE_INFO, "Starting resolution for (%s)!\n",
              q->name);
  
  rh = GNUNET_malloc(sizeof (struct GNUNET_GNS_ResolverHandle));
  rh->packet = p;
  rh->query = q;
  rh->authority = NULL;
  
  //FIXME do not forget to free!!
  rh->name = GNUNET_malloc(strlen(q->name)
                              - strlen(gnunet_tld) + 1);
  memset(rh->name, 0,
         strlen(q->name)-strlen(gnunet_tld) + 1);
  memcpy(rh->name, q->name,
         strlen(q->name)-strlen(gnunet_tld));

  rh->request_handle = request;

  //Start resolution in our zone
  resolve_name(rh, &zone_hash);
}

/**
 * The DNS request handler
 * Called for every incoming DNS request.
 *
 * @param cls closure
 * @param rh request handle to user for reply
 * @param request_length number of bytes in request
 * @param request udp payload of the DNS request
 */
void
handle_dns_request(void *cls,
                   struct GNUNET_DNS_RequestHandle *rh,
                   size_t request_length,
                   const char *request)
{
  struct GNUNET_DNSPARSER_Packet *p;
  char *tldoffset;

  GNUNET_log (GNUNET_ERROR_TYPE_INFO, "Hijacked a DNS request...processing\n");
  p = GNUNET_DNSPARSER_parse (request, request_length);
  
  if (NULL == p)
  {
    GNUNET_log (GNUNET_ERROR_TYPE_ERROR,
                "Received malformed DNS packet, leaving it untouched\n");
    GNUNET_DNS_request_forward (rh);
    return;
  }
  
  /**
   * Check tld and decide if we or
   * legacy dns is responsible
   *
   * FIXME now in theory there could be more than 1 query in the request
   * but if this is case we get into trouble:
   * either we query the GNS or the DNS. We cannot do both!
   * So I suggest to either only allow a single query per request or
   * only allow GNS or DNS requests.
   * The way it is implemented here now is buggy and will lead to erratic
   * behaviour (if multiple queries are present).
   */
  if (p->num_queries == 0)
  {
    GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
                "No Queries in DNS packet... forwarding\n");
    GNUNET_DNS_request_forward (rh);
  }

  if (p->num_queries > 1)
  {
    //Note: We could also look for .gnunet
    GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
                ">1 queriy in DNS packet... odd. We only process #1\n");
  }


  tldoffset = p->queries[0].name + strlen(p->queries[0].name);

  while ((*tldoffset) != '.')
    tldoffset--;
  
  if (0 == strcmp(tldoffset, gnunet_tld))
  {
    start_resolution(rh, p, p->queries);
  }
  else
  {
    /**
     * This request does not concern us. Forward to real DNS.
     */
    GNUNET_log(GNUNET_ERROR_TYPE_INFO,
               "Request for %s is forwarded to DNS\n", p->queries[0].name);
    GNUNET_DNS_request_forward (rh);
  }

}

/**
 * test function that stores some data in the namestore
 */
void
put_some_records(void)
{
  GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Populating namestore\n");
  /* put a few records into namestore */
  char* ipA = "1.2.3.4";
  char* ipB = "5.6.7.8";
  struct GNUNET_CRYPTO_RsaPrivateKey *bob_key = GNUNET_CRYPTO_rsa_key_create ();  struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded *bob;
  bob = GNUNET_malloc(sizeof(struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded));

  GNUNET_CRYPTO_rsa_key_get_public (bob_key, bob);

  GNUNET_HashCode *bob_zone = GNUNET_malloc(sizeof(GNUNET_HashCode));

  GNUNET_CRYPTO_hash(bob, GNUNET_CRYPTO_RSA_KEY_LENGTH, bob_zone);

  struct in_addr *alice = GNUNET_malloc(sizeof(struct in_addr));
  struct in_addr *bob_web = GNUNET_malloc(sizeof(struct in_addr));
  struct GNUNET_NAMESTORE_RecordData rda;
  struct GNUNET_NAMESTORE_RecordData rdb;
  struct GNUNET_NAMESTORE_RecordData rdb_web;

  GNUNET_assert(1 == inet_pton (AF_INET, ipA, alice));
  GNUNET_assert(1 == inet_pton (AF_INET, ipB, bob_web));

  rda.data_size = sizeof(struct in_addr);
  rdb_web.data_size = sizeof(struct in_addr);
  rdb.data_size = sizeof(struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded);
  rda.data = alice;
  rdb.data = bob;
  rdb_web.data = bob_web;
  rda.record_type = GNUNET_GNS_RECORD_TYPE_A;
  rdb_web.record_type = GNUNET_GNS_RECORD_TYPE_A;
  rdb.record_type = GNUNET_GNS_RECORD_PKEY;
  rdb_web.expiration = GNUNET_TIME_absolute_get_forever ();
  rda.expiration = GNUNET_TIME_absolute_get_forever ();
  rdb.expiration = GNUNET_TIME_absolute_get_forever ();
  
  //alice.gnunet A IN 1.2.3.4
  GNUNET_NAMESTORE_record_create (namestore_handle,
                               zone_key,
                               "alice",
                               &rda,
                               NULL,
                               NULL);

  //www.bob.gnunet A IN 5.6.7.8
  GNUNET_NAMESTORE_record_create (namestore_handle,
                               zone_key,
                               "bob",
                               &rdb,
                               NULL,
                               NULL);
  GNUNET_NAMESTORE_record_put(namestore_handle,
                              bob,
                              "www",
                              GNUNET_TIME_absolute_get_forever (),
                              1,
                              &rdb_web,
                              NULL, //Signature
                              NULL, //Cont
                              NULL); //cls
}

void
update_zone_dht_next(void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
{
  GNUNET_NAMESTORE_zone_iterator_next(namestore_iter);
}

/* prototype */
static void
update_zone_dht_start(void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc);

/**
 * Function used to put all records successively into the DHT.
 * FIXME bug here
 *
 * @param cls the closure (NULL)
 * @param key the public key of the authority (ours)
 * @param expiration lifetime of the namestore entry
 * @param name the name of the records
 * @param rd_count the number of records in data
 * @param rd the record data
 * @param signature the signature for the record data
 */
void
put_gns_record(void *cls,
                const const struct GNUNET_CRYPTO_RsaPublicKeyBinaryEncoded *key,
                struct GNUNET_TIME_Absolute expiration,
                const char *name,
                unsigned int rd_count,
                const struct GNUNET_NAMESTORE_RecordData *rd,
                const struct GNUNET_CRYPTO_RsaSignature *signature)
{
  GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Putting records into the DHT\n");
  struct GNUNET_TIME_Relative timeout;
  GNUNET_HashCode name_hash;
  GNUNET_HashCode xor_hash;

  if (NULL == name) //We're done
  {
    GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Zone iteration finished\n");
    GNUNET_NAMESTORE_zone_iteration_stop (namestore_iter);
    GNUNET_SCHEDULER_add_now (&update_zone_dht_start, NULL);
    return;
  }
  /**
   * FIXME magic number 20 move to config file
   */
  timeout = GNUNET_TIME_relative_multiply (GNUNET_TIME_UNIT_SECONDS, 20);
  GNUNET_CRYPTO_hash(name, strlen(name), &name_hash);
  GNUNET_CRYPTO_hash_xor(&zone_hash, &name_hash, &xor_hash);
  GNUNET_DHT_put (dht_handle, &xor_hash,
                  5, //replication level
                  GNUNET_DHT_RO_NONE,
                  GNUNET_BLOCK_TYPE_TEST, //FIXME todo block plugin
                  rd->data_size,
                  rd->data,
                  expiration,
                  timeout,
                  NULL, //FIXME continuation needed? success check? yes ofc
                  NULL); //cls for cont
  
  num_public_records++;

  /**
   * Reschedule periodic put
   */
  GNUNET_SCHEDULER_add_delayed (dht_update_interval,
                                &update_zone_dht_next,
                                NULL);

}

/**
 * Periodically iterate over our zone and store everything in dht
 *
 * @param cls NULL
 * @param tc task context
 */
static void
update_zone_dht_start(void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
{
  GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Update zone!\n");
  if (0 == num_public_records)
  {
    dht_update_interval = GNUNET_TIME_relative_multiply(
                                                      GNUNET_TIME_UNIT_SECONDS,
                                                      1);
  }
  else
  {
    dht_update_interval = GNUNET_TIME_relative_multiply(
                                                      GNUNET_TIME_UNIT_SECONDS,
                                                     (3600/num_public_records));
  }
  num_public_records = 0; //start counting again
  namestore_iter = GNUNET_NAMESTORE_zone_iteration_start (namestore_handle,
                                                          &zone_hash,
                                                          GNUNET_NAMESTORE_RF_AUTHORITY,
                                                          GNUNET_NAMESTORE_RF_PRIVATE,
                                                          &put_gns_record,
                                                          NULL);
}

/**
 * Process GNS requests.
 *
 * @param cls closure
 * @param server the initialized server
 * @param c configuration to use
 */
static void
run (void *cls, struct GNUNET_SERVER_Handle *server,
     const struct GNUNET_CONFIGURATION_Handle *c)
{
  
  GNUNET_log(GNUNET_ERROR_TYPE_INFO, "Init GNS\n");
  zone_key = GNUNET_CRYPTO_rsa_key_create ();

  GNUNET_CRYPTO_hash(zone_key, GNUNET_CRYPTO_RSA_KEY_LENGTH,//FIXME is this ok?
                     &zone_hash);
  nc = GNUNET_SERVER_notification_context_create (server, 1);

  /* FIXME - do some config parsing 
   *       - Maybe only hijack dns if option is set (HIJACK_DNS=1)
   */

  GNUNET_SCHEDULER_add_delayed (GNUNET_TIME_UNIT_FOREVER_REL, &shutdown_task,
                                NULL);
  /**
   * Do gnunet dns init here
   */
  dns_handle = GNUNET_DNS_connect(c,
                                  GNUNET_DNS_FLAG_PRE_RESOLUTION,
                                  &handle_dns_request, /* rh */
                                  NULL); /* Closure */

  if (NULL == dns_handle)
  {
    GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
               "Failed to connect to the dnsservice!\n");
  }

  /**
   * handle to our local namestore
   */
  namestore_handle = GNUNET_NAMESTORE_connect(c);

  if (NULL == namestore_handle)
  {
    //FIXME do error handling;
    GNUNET_log(GNUNET_ERROR_TYPE_ERROR,
               "Failed to connect to the namestore!\n");
  }

  /**
   * handle to the dht
   */
  dht_handle = GNUNET_DHT_connect(c, 1); //FIXME get ht_len from cfg

  if (NULL == dht_handle)
  {
    GNUNET_log(GNUNET_ERROR_TYPE_ERROR, "Could not connect to DHT!\n");
  }

  put_some_records(); //FIXME for testing
  
  /**
   * Schedule periodic put
   * for our records
   * We have roughly an hour for all records;
   */
  dht_update_interval = GNUNET_TIME_relative_multiply(GNUNET_TIME_UNIT_SECONDS,
                                                      1); //FIXME from cfg
  GNUNET_SCHEDULER_add_now (&update_zone_dht_start, NULL);
  GNUNET_log(GNUNET_ERROR_TYPE_INFO, "GNS Init done!\n");

}


/**
 * The main function for the GNS service.
 *
 * @param argc number of arguments from the command line
 * @param argv command line arguments
 * @return 0 ok, 1 on error
 */
int
main (int argc, char *const *argv)
{
  int ret;

  ret =
      (GNUNET_OK ==
       GNUNET_SERVICE_run (argc, argv, "gns", GNUNET_SERVICE_OPTION_NONE, &run,
                           NULL)) ? 0 : 1;
  return ret;
}

/* end of gnunet-service-gns.c */