gvpe/src/conf.C

/*
    conf.c -- configuration code
    Copyright (C) 1998 Robert van der Meulen
                  1998-2002 Ivo Timmermans <ivo@o2w.nl>
                  2000-2002 Guus Sliepen <guus@sliepen.eu.org>
                  2000 Cris van Pelt <tribbel@arise.dhs.org>
                  2003 Marc Lehmann <pcg@goof.com>
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.
 
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
 
    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/

#include "config.h"

#include <cstdio>
#include <cstdlib>
#include <cstring>

#include <errno.h>
#include <netdb.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <unistd.h>

#include <netinet/in.h>
#include <arpa/inet.h>
#ifdef ENABLE_ICMP
# ifdef HAVE_NETINET_IN_SYSTM_H
#  include <netinet/in_systm.h>
# endif
# ifdef HAVE_NETINET_IP_H
#  include <netinet/ip.h>
# endif
# include <netinet/ip_icmp.h>
#endif

#include <openssl/err.h>
#include <openssl/pem.h>
#include <openssl/rsa.h>
#include <openssl/rand.h>

#include "gettext.h"

#include "conf.h"
#include "slog.h"
#include "util.h"

char *confbase;
char *thisnode;
char *identname;
char *pidfilename;

struct configuration conf;

u8 best_protocol (u8 protset)
{
  if (protset & PROT_IPv4  ) return PROT_IPv4;
  if (protset & PROT_ICMPv4) return PROT_ICMPv4;
  if (protset & PROT_UDPv4 ) return PROT_UDPv4;
  if (protset & PROT_TCPv4 ) return PROT_TCPv4;

  return 0;
}

const char *strprotocol (u8 protocol)
{
  if (protocol & PROT_IPv4  ) return "rawip";
  if (protocol & PROT_ICMPv4) return "icmp";
  if (protocol & PROT_UDPv4 ) return "udp";
  if (protocol & PROT_TCPv4 ) return "tcp";

  return "<unknown>";
}

void
conf_node::print ()
{
  printf ("%4d  fe:fd:80:00:0%1x:%02x  %c  %-8.8s  %-10.10s  %s%s%d\n",
          id,
          id >> 8, id & 0xff,
          compress ? 'Y' : 'N',
          connectmode   == C_ONDEMAND ? "ondemand" :
            connectmode == C_NEVER    ? "never" :
            connectmode == C_ALWAYS   ? "always" : "",
          nodename,
          hostname ? hostname : "",
          hostname ? ":" : "",
          hostname ? udp_port : 0
          );
}

conf_node::~conf_node ()
{
  if (rsa_key)
    RSA_free (rsa_key);

  free (nodename);
  free (hostname);
}

void configuration::init ()
{
  memset (this, 0, sizeof (*this));

  rekey     = DEFAULT_REKEY;
  keepalive = DEFAULT_KEEPALIVE;
  llevel    = L_INFO;
  ip_proto  = IPPROTO_GRE;
#if ENABLE_ICMP
  icmp_type = ICMP_ECHOREPLY;
#endif

  default_node.udp_port    = DEFAULT_UDPPORT;
  default_node.tcp_port    = DEFAULT_UDPPORT;
  default_node.connectmode = conf_node::C_ALWAYS;
  default_node.compress    = true;
  default_node.protocols   = PROT_UDPv4;
}

void configuration::cleanup()
{
  if (rsa_key)
    RSA_free (rsa_key);

  rsa_key = 0;

  free (ifname);     ifname     = 0;
#if ENABLE_HTTP_PROXY
  free (proxy_host); proxy_host = 0;
  free (proxy_auth); proxy_auth = 0;
#endif
}

void
configuration::clear_config ()
{
  for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
    delete *i;

  nodes.clear ();

  cleanup ();
  init ();
}

#define parse_bool(target,name,trueval,falseval)                \
  if (!strcmp (val, "yes"))             target = trueval;       \
  else if (!strcmp (val, "no"))         target = falseval;      \
  else if (!strcmp (val, "true"))       target = trueval;       \
  else if (!strcmp (val, "false"))      target = falseval;      \
  else if (!strcmp (val, "on"))         target = trueval;       \
  else if (!strcmp (val, "off"))        target = falseval;      \
  else                                                          \
    slog (L_WARN,                                               \
            _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
            name, var, fname, lineno);

void configuration::read_config (bool need_keys)
{
  char *fname;
  FILE *f;

  clear_config ();

  asprintf (&fname, "%s/vped.conf", confbase);
  f = fopen (fname, "r");

  if (f)
    {
      char line[16384];
      int lineno = 0;
      char *var, *val;
      conf_node *node = &default_node;

      while (fgets (line, sizeof (line), f))
        {
          lineno++;

          {
            char *end = line + strlen (line);

            while (*end < ' ' && end >= line)
              end--;

            *++end = 0;
          }

          char *tok = line;

retry:
          var = strtok (tok, "\t =");
          tok = 0;

          if (!var || !var[0])
            continue;           /* no tokens on this line */

          if (var[0] == '#')
            continue;           /* comment: ignore */

          val = strtok (NULL, "\t\n\r =");

          if (!val || val[0] == '#')
            {
              slog (L_WARN,
                      _("no value for variable `%s', at '%s' line %d"),
                      var, fname, lineno);
              break;
            }

          if (!strcmp (var, "on"))
            {
              if (!::thisnode
                  || (val[0] == '!' && strcmp (val + 1, ::thisnode))
                  || !strcmp (val, ::thisnode))
                goto retry;

              continue;
            }

          // truly global
          if (!strcmp (var, "loglevel"))
            {
              loglevel l = string_to_loglevel (val);

              if (l != L_NONE)
                llevel = l;
              else
                slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
            }
          else if (!strcmp (var, "ip-proto"))
            ip_proto = atoi (val);
#if ENABLE_ICMP
          //TODO: error message
          else if (!strcmp (var, "icmp-type"))
            icmp_type = atoi (val);
#endif

          // per config
          else if (!strcmp (var, "node"))
            {
              default_node.id++;

              node = new conf_node (default_node);

              nodes.push_back (node);

              node->nodename = strdup (val);

              {
                char *fname;
                FILE *f;

                asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);

                f = fopen (fname, "r");
                if (f)
                  {
                    node->rsa_key = RSA_new ();

                    if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
                      {
                        ERR_load_RSA_strings (); ERR_load_PEM_strings ();
                        slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
                        exit (1);
                      }

                    RSA_blinding_on (node->rsa_key, 0);

                    fclose (f);
                  }
                else
                  {
                    slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));

                    if (need_keys)
                      exit (1);
                  }

                free (fname);
              }

              if (!::thisnode || !strcmp (node->nodename, ::thisnode))
                thisnode = node;
            }
          else if (!strcmp (var, "private-key"))
            prikeyfile = strdup (val);
          else if (!strcmp (var, "ifpersist"))
            {
              parse_bool (ifpersist, "ifpersist", true, false);
            }
          else if (!strcmp (var, "ifname"))
            ifname = strdup (val);
          else if (!strcmp (var, "rekey"))
            rekey = atoi (val);
          else if (!strcmp (var, "keepalive"))
            keepalive = atoi (val);
          else if (!strcmp (var, "mtu"))
            mtu = atoi (val);
          else if (!strcmp (var, "if-up"))
            script_if_up = strdup (val);
          else if (!strcmp (var, "node-up"))
            script_node_up = strdup (val);
          else if (!strcmp (var, "node-down"))
            script_node_down = strdup (val);
#if ENABLE_HTTP_PROXY
          else if (!strcmp (var, "http-proxy-host"))
            proxy_host = strdup (val);
          else if (!strcmp (var, "http-proxy-port"))
            proxy_port = atoi (val);
          else if (!strcmp (var, "http-proxy-auth"))
            proxy_auth = (char *)base64_encode ((const u8 *)val, strlen (val));
#endif

          /* node-specific, non-defaultable */
          else if (node != &default_node && !strcmp (var, "hostname"))
            {
              free (node->hostname);
              node->hostname = strdup (val);
            }

          /* node-specific, defaultable */
          else if (!strcmp (var, "udp-port"))
            node->udp_port = atoi (val);
          else if (!strcmp (var, "tcp-port"))
            node->tcp_port = atoi (val);
          else if (!strcmp (var, "router-priority"))
            node->routerprio = atoi (val);
          else if (!strcmp (var, "connect"))
            {
              if (!strcmp (val, "ondemand"))
                node->connectmode = conf_node::C_ONDEMAND;
              else if (!strcmp (val, "never"))
                node->connectmode = conf_node::C_NEVER;
              else if (!strcmp (val, "always"))
                node->connectmode = conf_node::C_ALWAYS;
              else if (!strcmp (val, "disabled"))
                node->connectmode = conf_node::C_DISABLED;
              else
                slog (L_WARN,
                        _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
                        var, fname, lineno);
            }
          else if (!strcmp (var, "inherit-tos"))
            {
              parse_bool (node->inherit_tos, "inherit-tos", true, false);
            }
          else if (!strcmp (var, "compress"))
            {
              parse_bool (node->compress, "compress", true, false);
            }
          // all these bool options really really cost a lot of executable size!
          else if (!strcmp (var, "enable-tcp"))
            {
#if ENABLE_TCP
              u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
#endif
            }
          else if (!strcmp (var, "enable-icmp"))
            {
#if ENABLE_ICMP
              u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) | v;
#endif
            }
          else if (!strcmp (var, "enable-udp"))
            {
              u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
            }
          else if (!strcmp (var, "enable-rawip"))
            {
              u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
            }

          // unknown or misplaced
          else
            slog (L_WARN,
                    _("unknown or misplaced variable `%s', at '%s' line %d"),
                    var, fname, lineno);
        }

      fclose (f);
    }
  else
    {
      slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
      exit (1);
    }

  free (fname);

  fname = config_filename (prikeyfile, "hostkey");

  f = fopen (fname, "r");
  if (f)
    {
      rsa_key = RSA_new ();

      if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
        {
          ERR_load_RSA_strings (); ERR_load_PEM_strings ();
          slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
          exit (1);
        }

      RSA_blinding_on (rsa_key, 0);

      fclose (f);
    }
  else
    {
      slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));

      if (need_keys)
        exit (1);
    }

  free (fname);
}

char *configuration::config_filename (const char *name, const char *dflt)
{
  char *fname;

  asprintf (&fname, name ? name : dflt, ::thisnode);

  if (!ABSOLUTE_PATH (fname))
    {
      char *rname = fname;
      asprintf (&fname, "%s/%s", confbase, rname);
      free (rname);
    }

  return fname;
}

void
configuration::print ()
{
  printf (_("\nConfiguration\n\n"));
  printf (_("# of nodes:         %d\n"), nodes.size ());
  printf (_("this node:          %s\n"), thisnode ? thisnode->nodename : "<unset>");
  printf (_("MTU:                %d\n"), mtu);
  printf (_("rekeying interval:  %d\n"), rekey);
  printf (_("keepalive interval: %d\n"), keepalive);
  printf (_("interface:          %s\n"), ifname);
  printf (_("primary rsa key:    %s\n"), prikeyfile ? prikeyfile : "<default>");
  printf (_("rsa key size:       %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
  printf ("\n");

  printf ("%4s  %-17s %s %-8.8s  %-10.10s  %s\n",
          _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));

  for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
    (*i)->print ();

  printf ("\n");
}

configuration::configuration ()
{
  init ();
}

configuration::~configuration ()
{
  cleanup ();
}


Revision:	1.16
Committed:	Tue Oct 14 03:22:09 2003 UTC (20 years, 7 months ago) by pcg
Content type:	text/plain
Branch:	MAIN
Changes since 1.15:	+15 -1 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	pcg	1.1	/*
2			conf.c -- configuration code
3			Copyright (C) 1998 Robert van der Meulen
4			1998-2002 Ivo Timmermans <ivo@o2w.nl>
5			2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6			2000 Cris van Pelt <tribbel@arise.dhs.org>
7			2003 Marc Lehmann <pcg@goof.com>
8
9			This program is free software; you can redistribute it and/or modify
10			it under the terms of the GNU General Public License as published by
11			the Free Software Foundation; either version 2 of the License, or
12			(at your option) any later version.
13
14			This program is distributed in the hope that it will be useful,
15			but WITHOUT ANY WARRANTY; without even the implied warranty of
16			MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17			GNU General Public License for more details.
18
19			You should have received a copy of the GNU General Public License
20			along with this program; if not, write to the Free Software
21			Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22			*/
23
24			#include "config.h"
25
26			#include <cstdio>
27			#include <cstdlib>
28			#include <cstring>
29
30			#include <errno.h>
31			#include <netdb.h>
32			#include <sys/stat.h>
33			#include <sys/types.h>
34			#include <unistd.h>
35
36	pcg	1.5	#include <netinet/in.h>
37	pcg	1.16	#include <arpa/inet.h>
38			#ifdef ENABLE_ICMP
39			# ifdef HAVE_NETINET_IN_SYSTM_H
40			# include <netinet/in_systm.h>
41			# endif
42			# ifdef HAVE_NETINET_IP_H
43			# include <netinet/ip.h>
44			# endif
45			# include <netinet/ip_icmp.h>
46			#endif
47	pcg	1.5
48	pcg	1.1	#include <openssl/err.h>
49			#include <openssl/pem.h>
50			#include <openssl/rsa.h>
51			#include <openssl/rand.h>
52
53			#include "gettext.h"
54
55			#include "conf.h"
56			#include "slog.h"
57			#include "util.h"
58
59			char *confbase;
60			char *thisnode;
61			char *identname;
62			char *pidfilename;
63
64			struct configuration conf;
65
66	pcg	1.7	u8 best_protocol (u8 protset)
67			{
68	pcg	1.13	if (protset & PROT_IPv4 ) return PROT_IPv4;
69			if (protset & PROT_ICMPv4) return PROT_ICMPv4;
70			if (protset & PROT_UDPv4 ) return PROT_UDPv4;
71			if (protset & PROT_TCPv4 ) return PROT_TCPv4;
72	pcg	1.7
73	pcg	1.9	return 0;
74	pcg	1.7	}
75
76			const char *strprotocol (u8 protocol)
77			{
78	pcg	1.13	if (protocol & PROT_IPv4 ) return "rawip";
79			if (protocol & PROT_ICMPv4) return "icmp";
80			if (protocol & PROT_UDPv4 ) return "udp";
81			if (protocol & PROT_TCPv4 ) return "tcp";
82	pcg	1.7
83			return "<unknown>";
84			}
85
86	pcg	1.12	void
87			conf_node::print ()
88	pcg	1.1	{
89	pcg	1.12	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",
90			id,
91			id >> 8, id & 0xff,
92			compress ? 'Y' : 'N',
93			connectmode == C_ONDEMAND ? "ondemand" :
94			connectmode == C_NEVER ? "never" :
95			connectmode == C_ALWAYS ? "always" : "",
96			nodename,
97			hostname ? hostname : "",
98			hostname ? ":" : "",
99			hostname ? udp_port : 0
100			);
101	pcg	1.1	}
102
103	pcg	1.12	conf_node::~conf_node ()
104	pcg	1.1	{
105	pcg	1.12	if (rsa_key)
106			RSA_free (rsa_key);
107
108			free (nodename);
109			free (hostname);
110	pcg	1.1	}
111
112			void configuration::init ()
113			{
114			memset (this, 0, sizeof (*this));
115
116			rekey = DEFAULT_REKEY;
117			keepalive = DEFAULT_KEEPALIVE;
118	pcg	1.2	llevel = L_INFO;
119	pcg	1.5	ip_proto = IPPROTO_GRE;
120	pcg	1.16	#if ENABLE_ICMP
121	pcg	1.13	icmp_type = ICMP_ECHOREPLY;
122	pcg	1.16	#endif
123	pcg	1.1
124	pcg	1.5	default_node.udp_port = DEFAULT_UDPPORT;
125	pcg	1.8	default_node.tcp_port = DEFAULT_UDPPORT;
126	pcg	1.1	default_node.connectmode = conf_node::C_ALWAYS;
127			default_node.compress = true;
128	pcg	1.6	default_node.protocols = PROT_UDPv4;
129	pcg	1.1	}
130
131			void configuration::cleanup()
132			{
133			if (rsa_key)
134			RSA_free (rsa_key);
135
136	pcg	1.12	rsa_key = 0;
137	pcg	1.1
138	pcg	1.12	free (ifname); ifname = 0;
139			#if ENABLE_HTTP_PROXY
140			free (proxy_host); proxy_host = 0;
141			free (proxy_auth); proxy_auth = 0;
142			#endif
143	pcg	1.1	}
144
145			void
146			configuration::clear_config ()
147			{
148			for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
149			delete *i;
150
151			nodes.clear ();
152
153			cleanup ();
154			init ();
155			}
156
157	pcg	1.5	#define parse_bool(target,name,trueval,falseval) \
158			if (!strcmp (val, "yes")) target = trueval; \
159			else if (!strcmp (val, "no")) target = falseval; \
160			else if (!strcmp (val, "true")) target = trueval; \
161			else if (!strcmp (val, "false")) target = falseval; \
162			else if (!strcmp (val, "on")) target = trueval; \
163			else if (!strcmp (val, "off")) target = falseval; \
164			else \
165			slog (L_WARN, \
166			_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
167			name, var, fname, lineno);
168
169	pcg	1.1	void configuration::read_config (bool need_keys)
170			{
171			char *fname;
172			FILE *f;
173
174			clear_config ();
175
176			asprintf (&fname, "%s/vped.conf", confbase);
177			f = fopen (fname, "r");
178
179			if (f)
180			{
181			char line[16384];
182			int lineno = 0;
183			char var, val;
184			conf_node *node = &default_node;
185
186			while (fgets (line, sizeof (line), f))
187			{
188			lineno++;
189
190			{
191			char *end = line + strlen (line);
192
193			while (*end < ' ' && end >= line)
194			end--;
195
196			*++end = 0;
197			}
198
199			char *tok = line;
200
201			retry:
202			var = strtok (tok, "\t =");
203			tok = 0;
204
205			if (!var \|\| !var[0])
206			continue; /* no tokens on this line */
207
208			if (var[0] == '#')
209			continue; /* comment: ignore */
210
211			val = strtok (NULL, "\t\n\r =");
212
213			if (!val \|\| val[0] == '#')
214			{
215			slog (L_WARN,
216			_("no value for variable `%s', at '%s' line %d"),
217			var, fname, lineno);
218			break;
219			}
220
221			if (!strcmp (var, "on"))
222			{
223			if (!::thisnode
224			\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
225			\|\| !strcmp (val, ::thisnode))
226			goto retry;
227
228			continue;
229			}
230
231			// truly global
232			if (!strcmp (var, "loglevel"))
233			{
234			loglevel l = string_to_loglevel (val);
235
236			if (l != L_NONE)
237	pcg	1.2	llevel = l;
238	pcg	1.1	else
239			slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
240			}
241	pcg	1.5	else if (!strcmp (var, "ip-proto"))
242			ip_proto = atoi (val);
243	pcg	1.16	#if ENABLE_ICMP
244			//TODO: error message
245	pcg	1.13	else if (!strcmp (var, "icmp-type"))
246			icmp_type = atoi (val);
247	pcg	1.16	#endif
248	pcg	1.1
249			// per config
250			else if (!strcmp (var, "node"))
251			{
252			default_node.id++;
253
254			node = new conf_node (default_node);
255
256			nodes.push_back (node);
257
258			node->nodename = strdup (val);
259
260			{
261			char *fname;
262			FILE *f;
263
264			asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
265
266			f = fopen (fname, "r");
267			if (f)
268			{
269			node->rsa_key = RSA_new ();
270
271			if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
272			{
273			ERR_load_RSA_strings (); ERR_load_PEM_strings ();
274			slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
275			exit (1);
276			}
277
278			RSA_blinding_on (node->rsa_key, 0);
279
280			fclose (f);
281			}
282			else
283			{
284			slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
285
286			if (need_keys)
287			exit (1);
288			}
289
290			free (fname);
291			}
292
293			if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
294			thisnode = node;
295			}
296			else if (!strcmp (var, "private-key"))
297			prikeyfile = strdup (val);
298			else if (!strcmp (var, "ifpersist"))
299			{
300	pcg	1.5	parse_bool (ifpersist, "ifpersist", true, false);
301	pcg	1.1	}
302			else if (!strcmp (var, "ifname"))
303			ifname = strdup (val);
304			else if (!strcmp (var, "rekey"))
305			rekey = atoi (val);
306			else if (!strcmp (var, "keepalive"))
307			keepalive = atoi (val);
308			else if (!strcmp (var, "mtu"))
309			mtu = atoi (val);
310			else if (!strcmp (var, "if-up"))
311			script_if_up = strdup (val);
312			else if (!strcmp (var, "node-up"))
313			script_node_up = strdup (val);
314			else if (!strcmp (var, "node-down"))
315			script_node_down = strdup (val);
316	pcg	1.12	#if ENABLE_HTTP_PROXY
317			else if (!strcmp (var, "http-proxy-host"))
318			proxy_host = strdup (val);
319			else if (!strcmp (var, "http-proxy-port"))
320			proxy_port = atoi (val);
321			else if (!strcmp (var, "http-proxy-auth"))
322			proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
323			#endif
324	pcg	1.1
325			/* node-specific, non-defaultable */
326			else if (node != &default_node && !strcmp (var, "hostname"))
327			{
328			free (node->hostname);
329			node->hostname = strdup (val);
330			}
331
332			/* node-specific, defaultable */
333	pcg	1.4	else if (!strcmp (var, "udp-port"))
334	pcg	1.5	node->udp_port = atoi (val);
335	pcg	1.8	else if (!strcmp (var, "tcp-port"))
336			node->tcp_port = atoi (val);
337	pcg	1.1	else if (!strcmp (var, "router-priority"))
338			node->routerprio = atoi (val);
339			else if (!strcmp (var, "connect"))
340			{
341			if (!strcmp (val, "ondemand"))
342			node->connectmode = conf_node::C_ONDEMAND;
343			else if (!strcmp (val, "never"))
344			node->connectmode = conf_node::C_NEVER;
345			else if (!strcmp (val, "always"))
346			node->connectmode = conf_node::C_ALWAYS;
347	pcg	1.4	else if (!strcmp (val, "disabled"))
348			node->connectmode = conf_node::C_DISABLED;
349	pcg	1.1	else
350			slog (L_WARN,
351	pcg	1.4	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
352	pcg	1.1	var, fname, lineno);
353			}
354	pcg	1.3	else if (!strcmp (var, "inherit-tos"))
355			{
356	pcg	1.5	parse_bool (node->inherit_tos, "inherit-tos", true, false);
357	pcg	1.3	}
358	pcg	1.1	else if (!strcmp (var, "compress"))
359			{
360	pcg	1.5	parse_bool (node->compress, "compress", true, false);
361			}
362			// all these bool options really really cost a lot of executable size!
363	pcg	1.8	else if (!strcmp (var, "enable-tcp"))
364			{
365	pcg	1.11	#if ENABLE_TCP
366	pcg	1.8	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
367	pcg	1.13	#endif
368			}
369			else if (!strcmp (var, "enable-icmp"))
370			{
371			#if ENABLE_ICMP
372			u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
373	pcg	1.11	#endif
374	pcg	1.8	}
375	pcg	1.6	else if (!strcmp (var, "enable-udp"))
376	pcg	1.5	{
377	pcg	1.6	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
378	pcg	1.5	}
379	pcg	1.6	else if (!strcmp (var, "enable-rawip"))
380	pcg	1.5	{
381	pcg	1.6	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
382	pcg	1.1	}
383
384			// unknown or misplaced
385			else
386	pcg	1.12	slog (L_WARN,
387			_("unknown or misplaced variable `%s', at '%s' line %d"),
388			var, fname, lineno);
389	pcg	1.1	}
390
391			fclose (f);
392			}
393			else
394			{
395			slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
396			exit (1);
397			}
398
399			free (fname);
400
401			fname = config_filename (prikeyfile, "hostkey");
402
403			f = fopen (fname, "r");
404			if (f)
405			{
406			rsa_key = RSA_new ();
407
408			if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
409			{
410			ERR_load_RSA_strings (); ERR_load_PEM_strings ();
411			slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
412			exit (1);
413			}
414
415			RSA_blinding_on (rsa_key, 0);
416
417			fclose (f);
418			}
419			else
420			{
421			slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
422
423			if (need_keys)
424			exit (1);
425			}
426
427			free (fname);
428			}
429
430			char configuration::config_filename (const char name, const char *dflt)
431			{
432			char *fname;
433
434			asprintf (&fname, name ? name : dflt, ::thisnode);
435
436			if (!ABSOLUTE_PATH (fname))
437			{
438			char *rname = fname;
439			asprintf (&fname, "%s/%s", confbase, rname);
440			free (rname);
441			}
442
443			return fname;
444			}
445
446			void
447			configuration::print ()
448			{
449			printf (_("\nConfiguration\n\n"));
450			printf (_("# of nodes: %d\n"), nodes.size ());
451			printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
452			printf (_("MTU: %d\n"), mtu);
453			printf (_("rekeying interval: %d\n"), rekey);
454			printf (_("keepalive interval: %d\n"), keepalive);
455			printf (_("interface: %s\n"), ifname);
456			printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
457	pcg	1.15	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
458	pcg	1.1	printf ("\n");
459
460			printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
461			_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
462
463			for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
464			(*i)->print ();
465
466			printf ("\n");
467			}
468
469	pcg	1.12	configuration::configuration ()
470			{
471			init ();
472			}
473
474			configuration::~configuration ()
475	pcg	1.1	{
476	pcg	1.12	cleanup ();
477	pcg	1.1	}
478	pcg	1.12
479	pcg	1.1