ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/conf.C
Revision: 1.7
Committed: Fri Mar 28 16:21:09 2003 UTC (21 years, 2 months ago) by pcg
Content type: text/plain
Branch: MAIN
Changes since 1.6: +16 -0 lines
Log Message:
*** empty log message ***

File Contents

# User Rev Content
1 pcg 1.1 /*
2     conf.c -- configuration code
3     Copyright (C) 1998 Robert van der Meulen
4     1998-2002 Ivo Timmermans <ivo@o2w.nl>
5     2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6     2000 Cris van Pelt <tribbel@arise.dhs.org>
7     2003 Marc Lehmann <pcg@goof.com>
8    
9     This program is free software; you can redistribute it and/or modify
10     it under the terms of the GNU General Public License as published by
11     the Free Software Foundation; either version 2 of the License, or
12     (at your option) any later version.
13    
14     This program is distributed in the hope that it will be useful,
15     but WITHOUT ANY WARRANTY; without even the implied warranty of
16     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17     GNU General Public License for more details.
18    
19     You should have received a copy of the GNU General Public License
20     along with this program; if not, write to the Free Software
21     Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22     */
23    
24     #include "config.h"
25    
26     #include <cstdio>
27     #include <cstdlib>
28     #include <cstring>
29    
30     #include <errno.h>
31     #include <netdb.h>
32     #include <sys/stat.h>
33     #include <sys/types.h>
34     #include <unistd.h>
35    
36 pcg 1.5 #include <netinet/in.h>
37    
38 pcg 1.1 #include <openssl/err.h>
39     #include <openssl/pem.h>
40     #include <openssl/rsa.h>
41     #include <openssl/rand.h>
42    
43     #include "gettext.h"
44    
45     #include "conf.h"
46     #include "slog.h"
47     #include "util.h"
48    
49     char *confbase;
50     char *thisnode;
51     char *identname;
52     char *pidfilename;
53    
54     struct configuration conf;
55    
56 pcg 1.7 u8 best_protocol (u8 protset)
57     {
58     if (protset & PROT_IPv4)
59     return PROT_IPv4;
60    
61     return PROT_UDPv4;
62     }
63    
64     const char *strprotocol (u8 protocol)
65     {
66     if (protocol & PROT_IPv4 ) return "rawip";
67     if (protocol & PROT_UDPv4) return "udp";
68    
69     return "<unknown>";
70     }
71    
72 pcg 1.1 configuration::configuration ()
73     {
74     init ();
75     }
76    
77     configuration::~configuration ()
78     {
79     cleanup ();
80     }
81    
82     void configuration::init ()
83     {
84     memset (this, 0, sizeof (*this));
85    
86     rekey = DEFAULT_REKEY;
87     keepalive = DEFAULT_KEEPALIVE;
88 pcg 1.2 llevel = L_INFO;
89 pcg 1.5 ip_proto = IPPROTO_GRE;
90 pcg 1.1
91 pcg 1.5 default_node.udp_port = DEFAULT_UDPPORT;
92 pcg 1.1 default_node.connectmode = conf_node::C_ALWAYS;
93     default_node.compress = true;
94 pcg 1.6 default_node.protocols = PROT_UDPv4;
95 pcg 1.1 }
96    
97     void configuration::cleanup()
98     {
99     if (rsa_key)
100     RSA_free (rsa_key);
101    
102     free (ifname);
103    
104     rsa_key = 0;
105     ifname = 0;
106     }
107    
108     void
109     configuration::clear_config ()
110     {
111     for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
112     delete *i;
113    
114     nodes.clear ();
115    
116     cleanup ();
117     init ();
118     }
119    
120 pcg 1.5 #define parse_bool(target,name,trueval,falseval) \
121     if (!strcmp (val, "yes")) target = trueval; \
122     else if (!strcmp (val, "no")) target = falseval; \
123     else if (!strcmp (val, "true")) target = trueval; \
124     else if (!strcmp (val, "false")) target = falseval; \
125     else if (!strcmp (val, "on")) target = trueval; \
126     else if (!strcmp (val, "off")) target = falseval; \
127     else \
128     slog (L_WARN, \
129     _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
130     name, var, fname, lineno);
131    
132 pcg 1.1 void configuration::read_config (bool need_keys)
133     {
134     char *fname;
135     FILE *f;
136    
137     clear_config ();
138    
139     asprintf (&fname, "%s/vped.conf", confbase);
140     f = fopen (fname, "r");
141    
142     if (f)
143     {
144     char line[16384];
145     int lineno = 0;
146     char *var, *val;
147     conf_node *node = &default_node;
148    
149     while (fgets (line, sizeof (line), f))
150     {
151     lineno++;
152    
153     {
154     char *end = line + strlen (line);
155    
156     while (*end < ' ' && end >= line)
157     end--;
158    
159     *++end = 0;
160     }
161    
162     char *tok = line;
163    
164     retry:
165     var = strtok (tok, "\t =");
166     tok = 0;
167    
168     if (!var || !var[0])
169     continue; /* no tokens on this line */
170    
171     if (var[0] == '#')
172     continue; /* comment: ignore */
173    
174     val = strtok (NULL, "\t\n\r =");
175    
176     if (!val || val[0] == '#')
177     {
178     slog (L_WARN,
179     _("no value for variable `%s', at '%s' line %d"),
180     var, fname, lineno);
181     break;
182     }
183    
184     if (!strcmp (var, "on"))
185     {
186     if (!::thisnode
187     || (val[0] == '!' && strcmp (val + 1, ::thisnode))
188     || !strcmp (val, ::thisnode))
189     goto retry;
190    
191     continue;
192     }
193    
194     // truly global
195     if (!strcmp (var, "loglevel"))
196     {
197     loglevel l = string_to_loglevel (val);
198    
199     if (l != L_NONE)
200 pcg 1.2 llevel = l;
201 pcg 1.1 else
202     slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
203     }
204 pcg 1.5 else if (!strcmp (var, "ip-proto"))
205     ip_proto = atoi (val);
206 pcg 1.1
207     // per config
208     else if (!strcmp (var, "node"))
209     {
210     default_node.id++;
211    
212     node = new conf_node (default_node);
213    
214     nodes.push_back (node);
215    
216     node->nodename = strdup (val);
217    
218     {
219     char *fname;
220     FILE *f;
221    
222     asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
223    
224     f = fopen (fname, "r");
225     if (f)
226     {
227     node->rsa_key = RSA_new ();
228    
229     if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
230     {
231     ERR_load_RSA_strings (); ERR_load_PEM_strings ();
232     slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
233     exit (1);
234     }
235    
236     RSA_blinding_on (node->rsa_key, 0);
237    
238     fclose (f);
239     }
240     else
241     {
242     slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
243    
244     if (need_keys)
245     exit (1);
246     }
247    
248     free (fname);
249     }
250    
251     if (!::thisnode || !strcmp (node->nodename, ::thisnode))
252     thisnode = node;
253     }
254     else if (!strcmp (var, "private-key"))
255     prikeyfile = strdup (val);
256     else if (!strcmp (var, "ifpersist"))
257     {
258 pcg 1.5 parse_bool (ifpersist, "ifpersist", true, false);
259 pcg 1.1 }
260     else if (!strcmp (var, "ifname"))
261     ifname = strdup (val);
262     else if (!strcmp (var, "rekey"))
263     rekey = atoi (val);
264     else if (!strcmp (var, "keepalive"))
265     keepalive = atoi (val);
266     else if (!strcmp (var, "mtu"))
267     mtu = atoi (val);
268     else if (!strcmp (var, "if-up"))
269     script_if_up = strdup (val);
270     else if (!strcmp (var, "node-up"))
271     script_node_up = strdup (val);
272     else if (!strcmp (var, "node-down"))
273     script_node_down = strdup (val);
274    
275     /* node-specific, non-defaultable */
276     else if (node != &default_node && !strcmp (var, "hostname"))
277     {
278     free (node->hostname);
279     node->hostname = strdup (val);
280     }
281    
282     /* node-specific, defaultable */
283 pcg 1.4 else if (!strcmp (var, "udp-port"))
284 pcg 1.5 node->udp_port = atoi (val);
285 pcg 1.1 else if (!strcmp (var, "router-priority"))
286     node->routerprio = atoi (val);
287     else if (!strcmp (var, "connect"))
288     {
289     if (!strcmp (val, "ondemand"))
290     node->connectmode = conf_node::C_ONDEMAND;
291     else if (!strcmp (val, "never"))
292     node->connectmode = conf_node::C_NEVER;
293     else if (!strcmp (val, "always"))
294     node->connectmode = conf_node::C_ALWAYS;
295 pcg 1.4 else if (!strcmp (val, "disabled"))
296     node->connectmode = conf_node::C_DISABLED;
297 pcg 1.1 else
298     slog (L_WARN,
299 pcg 1.4 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
300 pcg 1.1 var, fname, lineno);
301     }
302 pcg 1.3 else if (!strcmp (var, "inherit-tos"))
303     {
304 pcg 1.5 parse_bool (node->inherit_tos, "inherit-tos", true, false);
305 pcg 1.3 }
306 pcg 1.1 else if (!strcmp (var, "compress"))
307     {
308 pcg 1.5 parse_bool (node->compress, "compress", true, false);
309     }
310     // all these bool options really really cost a lot of executable size!
311 pcg 1.6 else if (!strcmp (var, "enable-udp"))
312 pcg 1.5 {
313 pcg 1.6 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
314 pcg 1.5 }
315 pcg 1.6 else if (!strcmp (var, "enable-rawip"))
316 pcg 1.5 {
317 pcg 1.6 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
318 pcg 1.1 }
319    
320     // unknown or misplaced
321     else
322     {
323     slog (L_WARN,
324     _("unknown or misplaced variable `%s', at '%s' line %d"),
325     var, fname, lineno);
326     }
327     }
328    
329     fclose (f);
330     }
331     else
332     {
333     slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
334     exit (1);
335     }
336    
337     free (fname);
338    
339     fname = config_filename (prikeyfile, "hostkey");
340    
341     f = fopen (fname, "r");
342     if (f)
343     {
344     rsa_key = RSA_new ();
345    
346     if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
347     {
348     ERR_load_RSA_strings (); ERR_load_PEM_strings ();
349     slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
350     exit (1);
351     }
352    
353     RSA_blinding_on (rsa_key, 0);
354    
355     fclose (f);
356     }
357     else
358     {
359     slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
360    
361     if (need_keys)
362     exit (1);
363     }
364    
365     free (fname);
366     }
367    
368     char *configuration::config_filename (const char *name, const char *dflt)
369     {
370     char *fname;
371    
372     asprintf (&fname, name ? name : dflt, ::thisnode);
373    
374     if (!ABSOLUTE_PATH (fname))
375     {
376     char *rname = fname;
377     asprintf (&fname, "%s/%s", confbase, rname);
378     free (rname);
379     }
380    
381     return fname;
382     }
383    
384     void
385     configuration::print ()
386     {
387     printf (_("\nConfiguration\n\n"));
388     printf (_("# of nodes: %d\n"), nodes.size ());
389     printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
390     printf (_("MTU: %d\n"), mtu);
391     printf (_("rekeying interval: %d\n"), rekey);
392     printf (_("keepalive interval: %d\n"), keepalive);
393     printf (_("interface: %s\n"), ifname);
394     printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
395     printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
396     printf ("\n");
397    
398     printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
399     _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
400    
401     for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
402     (*i)->print ();
403    
404     printf ("\n");
405     }
406    
407     void
408     conf_node::print ()
409     {
410     printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",
411     id,
412     id >> 8, id & 0xff,
413     compress ? 'Y' : 'N',
414     connectmode == C_ONDEMAND ? "ondemand" :
415     connectmode == C_NEVER ? "never" :
416     connectmode == C_ALWAYS ? "always" : "",
417     nodename,
418     hostname ? hostname : "",
419     hostname ? ":" : "",
420 pcg 1.5 hostname ? udp_port : 0
421 pcg 1.1 );
422     }
423