[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.16 by pcg, Tue Oct 14 03:22:09 2003 UTC vs.
Revision 1.50 by pcg, Mon Mar 23 15:22:00 2009 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2008 Marc Lehmann <gvpe@schmorp.de>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
		5	This file is part of GVPE.
		6
9	This program is free software; you can redistribute it and/or modify	7	GVPE is free software; you can redistribute it and/or modify it
10	it under the terms of the GNU General Public License as published by	8	under the terms of the GNU General Public License as published by the
11	the Free Software Foundation; either version 2 of the License, or	9	Free Software Foundation; either version 3 of the License, or (at your
12	(at your option) any later version.	10	option) any later version.
13		11
14	This program is distributed in the hope that it will be useful,	12	This program is distributed in the hope that it will be useful, but
15	but WITHOUT ANY WARRANTY; without even the implied warranty of	13	WITHOUT ANY WARRANTY; without even the implied warranty of
16	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the	14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
17	GNU General Public License for more details.	15	Public License for more details.
18		16
19	You should have received a copy of the GNU General Public License	17	You should have received a copy of the GNU General Public License along
20	along with this program; if not, write to the Free Software	18	with this program; if not, see <http://www.gnu.org/licenses/>.
21	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA	19
		20	Additional permission under GNU GPL version 3 section 7
		21
		22	If you modify this Program, or any covered work, by linking or
		23	combining it with the OpenSSL project's OpenSSL library (or a modified
		24	version of that library), containing parts covered by the terms of the
		25	OpenSSL or SSLeay licenses, the licensors of this Program grant you
		26	additional permission to convey the resulting work. Corresponding
		27	Source for a non-source form of such a combination shall include the
		28	source code for the parts of OpenSSL used as well as that of the
		29	covered work.
22	*/	30	*/
23		31
24	#include "config.h"	32	#include "config.h"
25		33
26	#include <cstdio>	34	#include <cstdio>
31	#include <netdb.h>	39	#include <netdb.h>
32	#include <sys/stat.h>	40	#include <sys/stat.h>
33	#include <sys/types.h>	41	#include <sys/types.h>
34	#include <unistd.h>	42	#include <unistd.h>
35		43
36	#include <netinet/in.h>	44	#include "netcompat.h"
37	#include <arpa/inet.h>
38	#ifdef ENABLE_ICMP
39	# ifdef HAVE_NETINET_IN_SYSTM_H
40	# include <netinet/in_systm.h>
41	# endif
42	# ifdef HAVE_NETINET_IP_H
43	# include <netinet/ip.h>
44	# endif
45	# include <netinet/ip_icmp.h>
46	#endif
47		45
48	#include <openssl/err.h>	46	#include <openssl/err.h>
49	#include <openssl/pem.h>	47	#include <openssl/pem.h>
50	#include <openssl/rsa.h>	48	#include <openssl/rsa.h>
51	#include <openssl/rand.h>	49	#include <openssl/rand.h>
52		50	#include <openssl/bn.h>
53	#include "gettext.h"
54		51
55	#include "conf.h"	52	#include "conf.h"
56	#include "slog.h"	53	#include "slog.h"
57	#include "util.h"	54	#include "util.h"
58		55
59	char *confbase;	56	char *confbase;
60	char *thisnode;	57	char *thisnode;
61	char *identname;	58	char *identname;
62	char *pidfilename;
63		59
64	struct configuration conf;	60	struct configuration conf;
65		61
66	u8 best_protocol (u8 protset)	62	u8 best_protocol (u8 protset)
67	{	63	{
68	if (protset & PROT_IPv4 ) return PROT_IPv4;	64	if (protset & PROT_IPv4 ) return PROT_IPv4;
69	if (protset & PROT_ICMPv4) return PROT_ICMPv4;	65	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
70	if (protset & PROT_UDPv4 ) return PROT_UDPv4;	66	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
71	if (protset & PROT_TCPv4 ) return PROT_TCPv4;	67	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		68	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
72		69
73	return 0;	70	return 0;
74	}	71	}
75		72
76	const char *strprotocol (u8 protocol)	73	const char *strprotocol (u8 protocol)
77	{	74	{
78	if (protocol & PROT_IPv4 ) return "rawip";	75	if (protocol & PROT_IPv4 ) return "rawip";
79	if (protocol & PROT_ICMPv4) return "icmp";	76	if (protocol & PROT_ICMPv4) return "icmp";
80	if (protocol & PROT_UDPv4 ) return "udp";	77	if (protocol & PROT_UDPv4 ) return "udp";
81	if (protocol & PROT_TCPv4 ) return "tcp";	78	if (protocol & PROT_TCPv4 ) return "tcp";
		79	if (protocol & PROT_DNSv4 ) return "dns";
82		80
83	return "<unknown>";	81	return "<unknown>";
		82	}
		83
		84	static bool
		85	match_list (const vector<const char > &list, const char str)
		86	{
		87	for (vector<const char *>::const_iterator i = list.end (); i-- > list.begin (); )
		88	if ((i)[0] == '' && !(*i)[1])
		89	return true;
		90	else if (!strcmp (*i, str))
		91	return true;
		92
		93	return false;
		94	}
		95
		96	bool
		97	conf_node::may_direct (struct conf_node *other)
		98	{
		99	if (match_list (allow_direct, other->nodename))
		100	return true;
		101
		102	if (match_list (deny_direct, other->nodename))
		103	return false;
		104
		105	return true;
84	}	106	}
85		107
86	void	108	void
87	conf_node::print ()	109	conf_node::print ()
88	{	110	{
89	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",	111	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",
90	id,	112	id,
91	id >> 8, id & 0xff,	113	id >> 8, id & 0xff,
92	compress ? 'Y' : 'N',	114	compress ? 'Y' : 'N',
93	connectmode == C_ONDEMAND ? "ondemand" :	115	connectmode == C_ONDEMAND ? "ondemand"
94	connectmode == C_NEVER ? "never" :	116	: connectmode == C_NEVER ? "never"
95	connectmode == C_ALWAYS ? "always" : "",	117	: connectmode == C_ALWAYS ? "always"
		118	: connectmode == C_DISABLED ? "disabled"
		119	: "",
96	nodename,	120	nodename,
97	hostname ? hostname : "",	121	hostname ? hostname : "",
98	hostname ? ":" : "",	122	hostname ? ":" : "",
99	hostname ? udp_port : 0	123	hostname ? udp_port : 0
100	);	124	);
101	}	125	}
102		126
103	conf_node::~conf_node ()	127	conf_node::~conf_node ()
104	{	128	{
		129	#if 0
		130	// does not work, because string pointers etc. are shared
		131	// is not called, however
105	if (rsa_key)	132	if (rsa_key)
106	RSA_free (rsa_key);	133	RSA_free (rsa_key);
107		134
108	free (nodename);	135	free (nodename);
109	free (hostname);	136	free (hostname);
		137	free (if_up_data);
		138	#if ENABLE_DNS
		139	free (domain);
		140	free (dns_hostname);
		141	#endif
		142	#endif
110	}	143	}
111		144
112	void configuration::init ()	145	void configuration::init ()
113	{	146	{
114	memset (this, 0, sizeof (*this));	147	memset (this, 0, sizeof (*this));
115		148
		149	mtu = DEFAULT_MTU;
		150	nfmark = 0;
116	rekey = DEFAULT_REKEY;	151	rekey = DEFAULT_REKEY;
117	keepalive = DEFAULT_KEEPALIVE;	152	keepalive = DEFAULT_KEEPALIVE;
118	llevel = L_INFO;	153	llevel = L_INFO;
119	ip_proto = IPPROTO_GRE;	154	ip_proto = IPPROTO_GRE;
120	#if ENABLE_ICMP	155	#if ENABLE_ICMP
121	icmp_type = ICMP_ECHOREPLY;	156	icmp_type = ICMP_ECHOREPLY;
122	#endif	157	#endif
123		158
124	default_node.udp_port = DEFAULT_UDPPORT;	159	default_node.udp_port = DEFAULT_UDPPORT;
125	default_node.tcp_port = DEFAULT_UDPPORT;	160	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
126	default_node.connectmode = conf_node::C_ALWAYS;	161	default_node.connectmode = conf_node::C_ALWAYS;
127	default_node.compress = true;	162	default_node.compress = true;
128	default_node.protocols = PROT_UDPv4;	163	default_node.protocols = 0;
		164	default_node.max_retry = DEFAULT_MAX_RETRY;
		165	default_node.max_ttl = DEFAULT_MAX_TTL;
		166	default_node.max_queue = DEFAULT_MAX_QUEUE;
		167	default_node.if_up_data = strdup ("");
		168
		169	#if ENABLE_DNS
		170	default_node.dns_port = 0; // default is 0 == client
		171
		172	dns_forw_host = strdup ("127.0.0.1");
		173	dns_forw_port = 53;
		174	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
		175	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
		176	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
		177	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
		178	#endif
		179
		180	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
129	}	181	}
130		182
131	void configuration::cleanup()	183	void configuration::cleanup()
132	{	184	{
133	if (rsa_key)	185	if (rsa_key)
134	RSA_free (rsa_key);	186	RSA_free (rsa_key);
135		187
136	rsa_key = 0;	188	rsa_key = 0;
137		189
		190	free (pidfilename); pidfilename = 0;
138	free (ifname); ifname = 0;	191	free (ifname); ifname = 0;
139	#if ENABLE_HTTP_PROXY	192	#if ENABLE_HTTP_PROXY
140	free (proxy_host); proxy_host = 0;	193	free (proxy_host); proxy_host = 0;
141	free (proxy_auth); proxy_auth = 0;	194	free (proxy_auth); proxy_auth = 0;
		195	#endif
		196	#if ENABLE_DNS
		197	free (dns_forw_host); dns_forw_host = 0;
142	#endif	198	#endif
143	}	199	}
144		200
145	void	201	void
146	configuration::clear_config ()	202	configuration::clear ()
147	{	203	{
148	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)	204	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
149	delete *i;	205	delete *i;
150		206
151	nodes.clear ();	207	nodes.clear ();
152		208
153	cleanup ();	209	cleanup ();
154	init ();	210	init ();
155	}	211	}
156		212
157	#define parse_bool(target,name,trueval,falseval) \	213	#define parse_bool(target,name,trueval,falseval) do { \
158	if (!strcmp (val, "yes")) target = trueval; \	214	if (!strcmp (val, "yes")) target = trueval; \
159	else if (!strcmp (val, "no")) target = falseval; \	215	else if (!strcmp (val, "no")) target = falseval; \
160	else if (!strcmp (val, "true")) target = trueval; \	216	else if (!strcmp (val, "true")) target = trueval; \
161	else if (!strcmp (val, "false")) target = falseval; \	217	else if (!strcmp (val, "false")) target = falseval; \
162	else if (!strcmp (val, "on")) target = trueval; \	218	else if (!strcmp (val, "on")) target = trueval; \
163	else if (!strcmp (val, "off")) target = falseval; \	219	else if (!strcmp (val, "off")) target = falseval; \
164	else \	220	else \
165	slog (L_WARN, \	221	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed. (ignored)"); \
166	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \	222	} while (0)
167	name, var, fname, lineno);
168		223
169	void configuration::read_config (bool need_keys)	224	const char *
		225	configuration_parser::parse_line (char *line)
		226	{
		227	{
		228	char *end = line + strlen (line);
		229
		230	while (*end < ' ' && end >= line)
		231	end--;
		232
		233	*++end = 0;
		234	}
		235
		236	char *tok = line;
		237	const char *var = strtok (tok, "\t =");
		238	tok = 0;
		239
		240	if (!var \|\| !var[0])
		241	return 0; /* no tokens on this line */
		242
		243	if (var[0] == '#')
		244	return 0; /* comment: ignore */
		245
		246	char *val = strtok (NULL, "\t\n\r =");
		247
		248	if (!val \|\| val[0] == '#')
		249	return _("no value given for variable. (ignored)");
		250
		251	if (!strcmp (var, "on"))
		252	{
		253	if (!::thisnode
		254	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		255	\|\| !strcmp (val, ::thisnode))
		256	return parse_line (strtok (NULL, "\n\r"));
		257	else
		258	return 0;
		259	}
		260
		261	// truly global
		262	if (!strcmp (var, "loglevel"))
		263	{
		264	loglevel l = string_to_loglevel (val);
		265
		266	if (l == L_NONE)
		267	return _("unknown loglevel. (skipping)");
		268	}
		269	else if (!strcmp (var, "ip-proto"))
		270	conf.ip_proto = atoi (val);
		271	else if (!strcmp (var, "icmp-type"))
		272	{
		273	#if ENABLE_ICMP
		274	conf.icmp_type = atoi (val);
		275	#endif
		276	}
		277
		278	// per config
		279	else if (!strcmp (var, "node"))
		280	{
		281	parse_argv ();
		282
		283	conf.default_node.id++;
		284	node = new conf_node (conf.default_node);
		285	conf.nodes.push_back (node);
		286	node->nodename = strdup (val);
		287
		288	{
		289	char *fname;
		290	FILE *f;
		291
		292	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		293
		294	f = fopen (fname, "r");
		295	if (f)
		296	{
		297	node->rsa_key = RSA_new ();
		298
		299	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		300	{
		301	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		302	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		303	exit (EXIT_FAILURE);
		304	}
		305
		306	require (RSA_blinding_on (node->rsa_key, 0));
		307
		308	fclose (f);
		309	}
		310	else
		311	{
		312	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		313
		314	if (need_keys)
		315	exit (EXIT_FAILURE);
		316	}
		317
		318	free (fname);
		319	}
		320
		321	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		322	conf.thisnode = node;
		323	}
		324	else if (!strcmp (var, "private-key"))
		325	free (conf.prikeyfile), conf.prikeyfile = strdup (val);
		326	else if (!strcmp (var, "ifpersist"))
		327	parse_bool (conf.ifpersist, "ifpersist", true, false);
		328	else if (!strcmp (var, "ifname"))
		329	free (conf.ifname), conf.ifname = strdup (val);
		330	else if (!strcmp (var, "rekey"))
		331	conf.rekey = atoi (val);
		332	else if (!strcmp (var, "keepalive"))
		333	conf.keepalive = atoi (val);
		334	else if (!strcmp (var, "mtu"))
		335	conf.mtu = atoi (val);
		336	else if (!strcmp (var, "nfmark"))
		337	conf.nfmark = atoi (val);
		338	else if (!strcmp (var, "if-up"))
		339	free (conf.script_if_up), conf.script_if_up = strdup (val);
		340	else if (!strcmp (var, "node-up"))
		341	free (conf.script_node_up), conf.script_node_up = strdup (val);
		342	else if (!strcmp (var, "node-down"))
		343	free (conf.script_node_down), conf.script_node_down = strdup (val);
		344	else if (!strcmp (var, "pid-file"))
		345	free (conf.pidfilename), conf.pidfilename = strdup (val);
		346	else if (!strcmp (var, "dns-forw-host"))
		347	{
		348	#if ENABLE_DNS
		349	free (conf.dns_forw_host), conf.dns_forw_host = strdup (val);
		350	#endif
		351	}
		352	else if (!strcmp (var, "dns-forw-port"))
		353	{
		354	#if ENABLE_DNS
		355	conf.dns_forw_port = atoi (val);
		356	#endif
		357	}
		358	else if (!strcmp (var, "dns-timeout-factor"))
		359	{
		360	#if ENABLE_DNS
		361	conf.dns_timeout_factor = atof (val);
		362	#endif
		363	}
		364	else if (!strcmp (var, "dns-send-interval"))
		365	{
		366	#if ENABLE_DNS
		367	conf.dns_send_interval = atoi (val);
		368	#endif
		369	}
		370	else if (!strcmp (var, "dns-overlap-factor"))
		371	{
		372	#if ENABLE_DNS
		373	conf.dns_overlap_factor = atof (val);
		374	#endif
		375	}
		376	else if (!strcmp (var, "dns-max-outstanding"))
		377	{
		378	#if ENABLE_DNS
		379	conf.dns_max_outstanding = atoi (val);
		380	#endif
		381	}
		382	else if (!strcmp (var, "http-proxy-host"))
		383	{
		384	#if ENABLE_HTTP_PROXY
		385	free (conf.proxy_host), conf.proxy_host = strdup (val);
		386	#endif
		387	}
		388	else if (!strcmp (var, "http-proxy-port"))
		389	{
		390	#if ENABLE_HTTP_PROXY
		391	conf.proxy_port = atoi (val);
		392	#endif
		393	}
		394	else if (!strcmp (var, "http-proxy-auth"))
		395	{
		396	#if ENABLE_HTTP_PROXY
		397	conf.proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		398	#endif
		399	}
		400
		401	/* node-specific, non-defaultable */
		402	else if (node != &conf.default_node && !strcmp (var, "hostname"))
		403	free (node->hostname), node->hostname = strdup (val);
		404
		405	/* node-specific, defaultable */
		406	else if (!strcmp (var, "udp-port"))
		407	node->udp_port = atoi (val);
		408	else if (!strcmp (var, "tcp-port"))
		409	node->tcp_port = atoi (val);
		410	else if (!strcmp (var, "dns-hostname"))
		411	{
		412	#if ENABLE_DNS
		413	free (node->dns_hostname), node->dns_hostname = strdup (val);
		414	#endif
		415	}
		416	else if (!strcmp (var, "dns-port"))
		417	{
		418	#if ENABLE_DNS
		419	node->dns_port = atoi (val);
		420	#endif
		421	}
		422	else if (!strcmp (var, "dns-domain"))
		423	{
		424	#if ENABLE_DNS
		425	free (node->domain), node->domain = strdup (val);
		426	#endif
		427	}
		428	else if (!strcmp (var, "if-up-data"))
		429	free (node->if_up_data), node->if_up_data = strdup (val);
		430	else if (!strcmp (var, "router-priority"))
		431	node->routerprio = atoi (val);
		432	else if (!strcmp (var, "max-retry"))
		433	node->max_retry = atoi (val);
		434	else if (!strcmp (var, "connect"))
		435	{
		436	if (!strcmp (val, "ondemand"))
		437	node->connectmode = conf_node::C_ONDEMAND;
		438	else if (!strcmp (val, "never"))
		439	node->connectmode = conf_node::C_NEVER;
		440	else if (!strcmp (val, "always"))
		441	node->connectmode = conf_node::C_ALWAYS;
		442	else if (!strcmp (val, "disabled"))
		443	node->connectmode = conf_node::C_DISABLED;
		444	else
		445	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)");
		446	}
		447	else if (!strcmp (var, "inherit-tos"))
		448	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		449	else if (!strcmp (var, "compress"))
		450	parse_bool (node->compress, "compress", true, false);
		451	// all these bool options really really cost a lot of executable size!
		452	else if (!strcmp (var, "enable-tcp"))
		453	{
		454	#if ENABLE_TCP
		455	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		456	#endif
		457	}
		458	else if (!strcmp (var, "enable-icmp"))
		459	{
		460	#if ENABLE_ICMP
		461	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		462	#endif
		463	}
		464	else if (!strcmp (var, "enable-dns"))
		465	{
		466	#if ENABLE_DNS
		467	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		468	#endif
		469	}
		470	else if (!strcmp (var, "enable-udp"))
		471	{
		472	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		473	}
		474	else if (!strcmp (var, "enable-rawip"))
		475	{
		476	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		477	}
		478	else if (!strcmp (var, "allow-direct"))
		479	node->allow_direct.push_back (strdup (val));
		480	else if (!strcmp (var, "deny-direct"))
		481	node->deny_direct.push_back (strdup (val));
		482	else if (!strcmp (var, "max-ttl"))
		483	node->max_ttl = atof (val);
		484	else if (!strcmp (var, "max-queue"))
		485	node->max_queue = atoi (val);
		486
		487	// unknown or misplaced
		488	else
		489	return _("unknown configuration directive. (ignored)");
		490
		491	return 0;
		492	}
		493
		494	void conf_node::finalise ()
		495	{
		496	if (max_queue < 1)
		497	{
		498	slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename);
		499	max_queue = 1;
		500	}
		501
		502	if (routerprio > 1 && (connectmode != C_ALWAYS && connectmode != C_DISABLED))
		503	{
		504	//slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename);
		505	connectmode = C_ALWAYS;
		506	}
		507	}
		508
		509	void configuration_parser::parse_argv ()
		510	{
		511	for (int i = 0; i < argc; ++i)
		512	{
		513	char *v = argv [i];
		514
		515	if (!*v)
		516	continue;
		517
		518	char *enode = v;
		519
		520	while (enode != '.' && enode > ' ' && enode != '=' && enode)
		521	enode++;
		522
		523	if (*enode != '.')
		524	enode = 0;
		525
		526	char *wnode = node == &conf.default_node
		527	? 0
		528	: node->nodename;
		529
		530	if ((!wnode && !enode)
		531	\|\| (wnode && enode && !strncmp (wnode, v, enode - v)))
		532	{
		533	const char *warn = parse_line (enode ? enode + 1 : v);
		534
		535	if (warn)
		536	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
		537
		538	*v = 0;
		539	}
		540	}
		541	}
		542
		543	configuration_parser::configuration_parser (configuration &conf,
		544	bool need_keys,
		545	int argc,
		546	char **argv)
		547	: conf (conf),need_keys (need_keys), argc (argc), argv (argv)
170	{	548	{
171	char *fname;	549	char *fname;
172	FILE *f;	550	FILE *f;
173		551
174	clear_config ();	552	conf.clear ();
175		553
176	asprintf (&fname, "%s/vped.conf", confbase);	554	asprintf (&fname, "%s/gvpe.conf", confbase);
177	f = fopen (fname, "r");	555	f = fopen (fname, "r");
178		556
179	if (f)	557	if (f)
180	{	558	{
181	char line[16384];	559	char line[16384];
182	int lineno = 0;	560	int lineno = 0;
183	char var, val;	561	node = &conf.default_node;
184	conf_node *node = &default_node;
185		562
186	while (fgets (line, sizeof (line), f))	563	while (fgets (line, sizeof (line), f))
187	{	564	{
188	lineno++;	565	lineno++;
189		566
190	{	567	const char *warn = parse_line (line);
191	char *end = line + strlen (line);
192		568
193	while (*end < ' ' && end >= line)	569	if (warn)
194	end--;	570	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
195
196	*++end = 0;
197	}
198
199	char *tok = line;
200
201	retry:
202	var = strtok (tok, "\t =");
203	tok = 0;
204
205	if (!var \|\| !var[0])
206	continue; /* no tokens on this line */
207
208	if (var[0] == '#')
209	continue; /* comment: ignore */
210
211	val = strtok (NULL, "\t\n\r =");
212
213	if (!val \|\| val[0] == '#')
214	{
215	slog (L_WARN,
216	_("no value for variable `%s', at '%s' line %d"),
217	var, fname, lineno);
218	break;
219	}
220
221	if (!strcmp (var, "on"))
222	{
223	if (!::thisnode
224	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
225	\|\| !strcmp (val, ::thisnode))
226	goto retry;
227
228	continue;
229	}
230
231	// truly global
232	if (!strcmp (var, "loglevel"))
233	{
234	loglevel l = string_to_loglevel (val);
235
236	if (l != L_NONE)
237	llevel = l;
238	else
239	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
240	}
241	else if (!strcmp (var, "ip-proto"))
242	ip_proto = atoi (val);
243	#if ENABLE_ICMP
244	//TODO: error message
245	else if (!strcmp (var, "icmp-type"))
246	icmp_type = atoi (val);
247	#endif
248
249	// per config
250	else if (!strcmp (var, "node"))
251	{
252	default_node.id++;
253
254	node = new conf_node (default_node);
255
256	nodes.push_back (node);
257
258	node->nodename = strdup (val);
259
260	{
261	char *fname;
262	FILE *f;
263
264	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
265
266	f = fopen (fname, "r");
267	if (f)
268	{
269	node->rsa_key = RSA_new ();
270
271	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
272	{
273	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
274	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
275	exit (1);
276	}
277
278	RSA_blinding_on (node->rsa_key, 0);
279
280	fclose (f);
281	}
282	else
283	{
284	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
285
286	if (need_keys)
287	exit (1);
288	}
289
290	free (fname);
291	}
292
293	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
294	thisnode = node;
295	}
296	else if (!strcmp (var, "private-key"))
297	prikeyfile = strdup (val);
298	else if (!strcmp (var, "ifpersist"))
299	{
300	parse_bool (ifpersist, "ifpersist", true, false);
301	}
302	else if (!strcmp (var, "ifname"))
303	ifname = strdup (val);
304	else if (!strcmp (var, "rekey"))
305	rekey = atoi (val);
306	else if (!strcmp (var, "keepalive"))
307	keepalive = atoi (val);
308	else if (!strcmp (var, "mtu"))
309	mtu = atoi (val);
310	else if (!strcmp (var, "if-up"))
311	script_if_up = strdup (val);
312	else if (!strcmp (var, "node-up"))
313	script_node_up = strdup (val);
314	else if (!strcmp (var, "node-down"))
315	script_node_down = strdup (val);
316	#if ENABLE_HTTP_PROXY
317	else if (!strcmp (var, "http-proxy-host"))
318	proxy_host = strdup (val);
319	else if (!strcmp (var, "http-proxy-port"))
320	proxy_port = atoi (val);
321	else if (!strcmp (var, "http-proxy-auth"))
322	proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
323	#endif
324
325	/* node-specific, non-defaultable */
326	else if (node != &default_node && !strcmp (var, "hostname"))
327	{
328	free (node->hostname);
329	node->hostname = strdup (val);
330	}
331
332	/* node-specific, defaultable */
333	else if (!strcmp (var, "udp-port"))
334	node->udp_port = atoi (val);
335	else if (!strcmp (var, "tcp-port"))
336	node->tcp_port = atoi (val);
337	else if (!strcmp (var, "router-priority"))
338	node->routerprio = atoi (val);
339	else if (!strcmp (var, "connect"))
340	{
341	if (!strcmp (val, "ondemand"))
342	node->connectmode = conf_node::C_ONDEMAND;
343	else if (!strcmp (val, "never"))
344	node->connectmode = conf_node::C_NEVER;
345	else if (!strcmp (val, "always"))
346	node->connectmode = conf_node::C_ALWAYS;
347	else if (!strcmp (val, "disabled"))
348	node->connectmode = conf_node::C_DISABLED;
349	else
350	slog (L_WARN,
351	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
352	var, fname, lineno);
353	}
354	else if (!strcmp (var, "inherit-tos"))
355	{
356	parse_bool (node->inherit_tos, "inherit-tos", true, false);
357	}
358	else if (!strcmp (var, "compress"))
359	{
360	parse_bool (node->compress, "compress", true, false);
361	}
362	// all these bool options really really cost a lot of executable size!
363	else if (!strcmp (var, "enable-tcp"))
364	{
365	#if ENABLE_TCP
366	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
367	#endif
368	}
369	else if (!strcmp (var, "enable-icmp"))
370	{
371	#if ENABLE_ICMP
372	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
373	#endif
374	}
375	else if (!strcmp (var, "enable-udp"))
376	{
377	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
378	}
379	else if (!strcmp (var, "enable-rawip"))
380	{
381	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
382	}
383
384	// unknown or misplaced
385	else
386	slog (L_WARN,
387	_("unknown or misplaced variable `%s', at '%s' line %d"),
388	var, fname, lineno);
389	}	571	}
390		572
391	fclose (f);	573	fclose (f);
		574
		575	parse_argv ();
392	}	576	}
393	else	577	else
394	{	578	{
395	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));	579	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
396	exit (1);	580	exit (EXIT_FAILURE);
397	}	581	}
398		582
399	free (fname);	583	free (fname);
400		584
401	fname = config_filename (prikeyfile, "hostkey");	585	fname = conf.config_filename (conf.prikeyfile, "hostkey");
402		586
403	f = fopen (fname, "r");	587	f = fopen (fname, "r");
404	if (f)	588	if (f)
405	{	589	{
406	rsa_key = RSA_new ();	590	conf.rsa_key = RSA_new ();
407		591
408	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))	592	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
409	{	593	{
410	ERR_load_RSA_strings (); ERR_load_PEM_strings ();	594	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
411	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));	595	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
412	exit (1);	596	exit (EXIT_FAILURE);
413	}	597	}
414		598
415	RSA_blinding_on (rsa_key, 0);	599	require (RSA_blinding_on (conf.rsa_key, 0));
416		600
417	fclose (f);	601	fclose (f);
418	}	602	}
419	else	603	else
420	{	604	{
421	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));	605	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
422		606
423	if (need_keys)	607	if (need_keys)
424	exit (1);	608	exit (EXIT_FAILURE);
		609	}
		610
		611	if (need_keys && ::thisnode
		612	&& conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
		613	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
		614	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
		615	{
		616	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		617	exit (EXIT_FAILURE);
425	}	618	}
426		619
427	free (fname);	620	free (fname);
		621
		622	for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
		623	(*i)->finalise ();
428	}	624	}
429		625
430	char configuration::config_filename (const char name, const char *dflt)	626	char configuration::config_filename (const char name, const char *dflt)
431	{	627	{
432	char *fname;	628	char *fname;
…		…
466	printf ("\n");	662	printf ("\n");
467	}	663	}
468		664
469	configuration::configuration ()	665	configuration::configuration ()
470	{	666	{
		667	asprintf (&confbase, "%s/gvpe", CONFDIR);
		668
471	init ();	669	init ();
472	}	670	}
473		671
474	configuration::~configuration ()	672	configuration::~configuration ()
475	{	673	{

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.16 by pcg, Tue Oct 14 03:22:09 2003 UTC vs. Revision 1.50 by pcg, Mon Mar 23 15:22:00 2009 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.16 by pcg, Tue Oct 14 03:22:09 2003 UTC vs.
Revision 1.50 by pcg, Mon Mar 23 15:22:00 2009 UTC