[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.6 by pcg, Fri Mar 28 16:14:40 2003 UTC vs.
Revision 1.28 by pcg, Tue Mar 1 04:38:21 2005 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2004 Marc Lehmann <pcg@goof.com>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
9	This program is free software; you can redistribute it and/or modify	5	This program is free software; you can redistribute it and/or modify
10	it under the terms of the GNU General Public License as published by	6	it under the terms of the GNU General Public License as published by
11	the Free Software Foundation; either version 2 of the License, or	7	the Free Software Foundation; either version 2 of the License, or
12	(at your option) any later version.	8	(at your option) any later version.
31	#include <netdb.h>	27	#include <netdb.h>
32	#include <sys/stat.h>	28	#include <sys/stat.h>
33	#include <sys/types.h>	29	#include <sys/types.h>
34	#include <unistd.h>	30	#include <unistd.h>
35		31
36	#include <netinet/in.h>	32	#include "netcompat.h"
37		33
38	#include <openssl/err.h>	34	#include <openssl/err.h>
39	#include <openssl/pem.h>	35	#include <openssl/pem.h>
40	#include <openssl/rsa.h>	36	#include <openssl/rsa.h>
41	#include <openssl/rand.h>	37	#include <openssl/rand.h>
		38	#include <openssl/bn.h>
42		39
43	#include "gettext.h"	40	#include "gettext.h"
44		41
45	#include "conf.h"	42	#include "conf.h"
46	#include "slog.h"	43	#include "slog.h"
47	#include "util.h"	44	#include "util.h"
48		45
49	char *confbase;	46	char *confbase;
50	char *thisnode;	47	char *thisnode;
51	char *identname;	48	char *identname;
52	char *pidfilename;
53		49
54	struct configuration conf;	50	struct configuration conf;
55		51
56	configuration::configuration ()	52	u8 best_protocol (u8 protset)
57	{	53	{
58	init ();	54	if (protset & PROT_IPv4 ) return PROT_IPv4;
59	}	55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
		56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
		57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		58	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
60		59
61	configuration::~configuration ()
62	{
63	cleanup ();
64	}
65
66	void configuration::init ()
67	{
68	memset (this, 0, sizeof (*this));
69
70	rekey = DEFAULT_REKEY;
71	keepalive = DEFAULT_KEEPALIVE;
72	llevel = L_INFO;
73	ip_proto = IPPROTO_GRE;
74
75	default_node.udp_port = DEFAULT_UDPPORT;
76	default_node.connectmode = conf_node::C_ALWAYS;
77	default_node.compress = true;
78	default_node.protocols = PROT_UDPv4;
79	}
80
81	void configuration::cleanup()
82	{
83	if (rsa_key)
84	RSA_free (rsa_key);
85
86	free (ifname);
87
88	rsa_key = 0;
89	ifname = 0;
90	}
91
92	void
93	configuration::clear_config ()
94	{
95	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
96	delete *i;
97
98	nodes.clear ();
99
100	cleanup ();
101	init ();
102	}
103
104	#define parse_bool(target,name,trueval,falseval) \
105	if (!strcmp (val, "yes")) target = trueval; \
106	else if (!strcmp (val, "no")) target = falseval; \
107	else if (!strcmp (val, "true")) target = trueval; \
108	else if (!strcmp (val, "false")) target = falseval; \
109	else if (!strcmp (val, "on")) target = trueval; \
110	else if (!strcmp (val, "off")) target = falseval; \
111	else \
112	slog (L_WARN, \
113	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
114	name, var, fname, lineno);
115
116	void configuration::read_config (bool need_keys)
117	{
118	char *fname;
119	FILE *f;
120
121	clear_config ();
122
123	asprintf (&fname, "%s/vped.conf", confbase);
124	f = fopen (fname, "r");
125
126	if (f)
127	{
128	char line[16384];
129	int lineno = 0;
130	char var, val;
131	conf_node *node = &default_node;
132
133	while (fgets (line, sizeof (line), f))
134	{
135	lineno++;
136
137	{
138	char *end = line + strlen (line);
139
140	while (*end < ' ' && end >= line)
141	end--;
142
143	*++end = 0;
144	}
145
146	char *tok = line;
147
148	retry:
149	var = strtok (tok, "\t =");
150	tok = 0;
151
152	if (!var \|\| !var[0])
153	continue; /* no tokens on this line */
154
155	if (var[0] == '#')
156	continue; /* comment: ignore */
157
158	val = strtok (NULL, "\t\n\r =");
159
160	if (!val \|\| val[0] == '#')
161	{
162	slog (L_WARN,
163	_("no value for variable `%s', at '%s' line %d"),
164	var, fname, lineno);
165	break;
166	}
167
168	if (!strcmp (var, "on"))
169	{
170	if (!::thisnode
171	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
172	\|\| !strcmp (val, ::thisnode))
173	goto retry;
174
175	continue;
176	}
177
178	// truly global
179	if (!strcmp (var, "loglevel"))
180	{
181	loglevel l = string_to_loglevel (val);
182
183	if (l != L_NONE)
184	llevel = l;
185	else
186	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
187	}
188	else if (!strcmp (var, "ip-proto"))
189	ip_proto = atoi (val);
190
191	// per config
192	else if (!strcmp (var, "node"))
193	{
194	default_node.id++;
195
196	node = new conf_node (default_node);
197
198	nodes.push_back (node);
199
200	node->nodename = strdup (val);
201
202	{
203	char *fname;
204	FILE *f;
205
206	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
207
208	f = fopen (fname, "r");
209	if (f)
210	{
211	node->rsa_key = RSA_new ();
212
213	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
214	{
215	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
216	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
217	exit (1);
218	}
219
220	RSA_blinding_on (node->rsa_key, 0);
221
222	fclose (f);
223	}
224	else
225	{
226	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
227
228	if (need_keys)
229	exit (1);
230	}
231
232	free (fname);
233	}
234
235	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
236	thisnode = node;
237	}
238	else if (!strcmp (var, "private-key"))
239	prikeyfile = strdup (val);
240	else if (!strcmp (var, "ifpersist"))
241	{
242	parse_bool (ifpersist, "ifpersist", true, false);
243	}
244	else if (!strcmp (var, "ifname"))
245	ifname = strdup (val);
246	else if (!strcmp (var, "rekey"))
247	rekey = atoi (val);
248	else if (!strcmp (var, "keepalive"))
249	keepalive = atoi (val);
250	else if (!strcmp (var, "mtu"))
251	mtu = atoi (val);
252	else if (!strcmp (var, "if-up"))
253	script_if_up = strdup (val);
254	else if (!strcmp (var, "node-up"))
255	script_node_up = strdup (val);
256	else if (!strcmp (var, "node-down"))
257	script_node_down = strdup (val);
258
259	/* node-specific, non-defaultable */
260	else if (node != &default_node && !strcmp (var, "hostname"))
261	{
262	free (node->hostname);
263	node->hostname = strdup (val);
264	}
265
266	/* node-specific, defaultable */
267	else if (!strcmp (var, "udp-port"))
268	node->udp_port = atoi (val);
269	else if (!strcmp (var, "router-priority"))
270	node->routerprio = atoi (val);
271	else if (!strcmp (var, "connect"))
272	{
273	if (!strcmp (val, "ondemand"))
274	node->connectmode = conf_node::C_ONDEMAND;
275	else if (!strcmp (val, "never"))
276	node->connectmode = conf_node::C_NEVER;
277	else if (!strcmp (val, "always"))
278	node->connectmode = conf_node::C_ALWAYS;
279	else if (!strcmp (val, "disabled"))
280	node->connectmode = conf_node::C_DISABLED;
281	else
282	slog (L_WARN,
283	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
284	var, fname, lineno);
285	}
286	else if (!strcmp (var, "inherit-tos"))
287	{
288	parse_bool (node->inherit_tos, "inherit-tos", true, false);
289	}
290	else if (!strcmp (var, "compress"))
291	{
292	parse_bool (node->compress, "compress", true, false);
293	}
294	// all these bool options really really cost a lot of executable size!
295	else if (!strcmp (var, "enable-udp"))
296	{
297	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
298	}
299	else if (!strcmp (var, "enable-rawip"))
300	{
301	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
302	}
303
304	// unknown or misplaced
305	else
306	{
307	slog (L_WARN,
308	_("unknown or misplaced variable `%s', at '%s' line %d"),
309	var, fname, lineno);
310	}
311	}
312
313	fclose (f);
314	}
315	else
316	{
317	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
318	exit (1);
319	}
320
321	free (fname);
322
323	fname = config_filename (prikeyfile, "hostkey");
324
325	f = fopen (fname, "r");
326	if (f)
327	{
328	rsa_key = RSA_new ();
329
330	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
331	{
332	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
333	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
334	exit (1);
335	}
336
337	RSA_blinding_on (rsa_key, 0);
338
339	fclose (f);
340	}
341	else
342	{
343	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
344
345	if (need_keys)
346	exit (1);
347	}
348
349	free (fname);
350	}
351
352	char configuration::config_filename (const char name, const char *dflt)
353	{
354	char *fname;
355
356	asprintf (&fname, name ? name : dflt, ::thisnode);
357
358	if (!ABSOLUTE_PATH (fname))
359	{
360	char *rname = fname;
361	asprintf (&fname, "%s/%s", confbase, rname);
362	free (rname);
363	}
364
365	return fname;	60	return 0;
366	}	61	}
367		62
368	void	63	const char *strprotocol (u8 protocol)
369	configuration::print ()
370	{	64	{
371	printf (_("\nConfiguration\n\n"));	65	if (protocol & PROT_IPv4 ) return "rawip";
372	printf (_("# of nodes: %d\n"), nodes.size ());	66	if (protocol & PROT_ICMPv4) return "icmp";
373	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");	67	if (protocol & PROT_UDPv4 ) return "udp";
374	printf (_("MTU: %d\n"), mtu);	68	if (protocol & PROT_TCPv4 ) return "tcp";
375	printf (_("rekeying interval: %d\n"), rekey);	69	if (protocol & PROT_DNSv4 ) return "dns";
376	printf (_("keepalive interval: %d\n"), keepalive);
377	printf (_("interface: %s\n"), ifname);
378	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
379	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
380	printf ("\n");
381		70
382	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",	71	return "<unknown>";
383	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
384
385	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
386	(*i)->print ();
387
388	printf ("\n");
389	}	72	}
390		73
391	void	74	void
392	conf_node::print ()	75	conf_node::print ()
393	{	76	{
…		…
403	hostname ? ":" : "",	86	hostname ? ":" : "",
404	hostname ? udp_port : 0	87	hostname ? udp_port : 0
405	);	88	);
406	}	89	}
407		90
		91	conf_node::~conf_node ()
		92	{
		93	if (rsa_key)
		94	RSA_free (rsa_key);
		95
		96	free (nodename);
		97	free (hostname);
		98	free (domain);
		99	}
		100
		101	void configuration::init ()
		102	{
		103	memset (this, 0, sizeof (*this));
		104
		105	mtu = DEFAULT_MTU;
		106	rekey = DEFAULT_REKEY;
		107	keepalive = DEFAULT_KEEPALIVE;
		108	llevel = L_INFO;
		109	ip_proto = IPPROTO_GRE;
		110	#if ENABLE_ICMP
		111	icmp_type = ICMP_ECHOREPLY;
		112	#endif
		113
		114	default_node.udp_port = DEFAULT_UDPPORT;
		115	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
		116	default_node.connectmode = conf_node::C_ALWAYS;
		117	default_node.compress = true;
		118	default_node.protocols = PROT_UDPv4;
		119	default_node.max_retry = DEFAULT_MAX_RETRY;
		120
		121	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		122	}
		123
		124	void configuration::cleanup()
		125	{
		126	if (rsa_key)
		127	RSA_free (rsa_key);
		128
		129	rsa_key = 0;
		130
		131	free (pidfilename); pidfilename = 0;
		132	free (ifname); ifname = 0;
		133	#if ENABLE_HTTP_PROXY
		134	free (proxy_host); proxy_host = 0;
		135	free (proxy_auth); proxy_auth = 0;
		136	#endif
		137	#if ENABLE_DNS
		138	free (dns_forw_host); dns_forw_host = 0;
		139	#endif
		140	}
		141
		142	void
		143	configuration::clear_config ()
		144	{
		145	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
		146	delete *i;
		147
		148	nodes.clear ();
		149
		150	cleanup ();
		151	init ();
		152	}
		153
		154	#define parse_bool(target,name,trueval,falseval) \
		155	if (!strcmp (val, "yes")) target = trueval; \
		156	else if (!strcmp (val, "no")) target = falseval; \
		157	else if (!strcmp (val, "true")) target = trueval; \
		158	else if (!strcmp (val, "false")) target = falseval; \
		159	else if (!strcmp (val, "on")) target = trueval; \
		160	else if (!strcmp (val, "off")) target = falseval; \
		161	else \
		162	slog (L_WARN, \
		163	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
		164	name, var, fname, lineno);
		165
		166	void configuration::read_config (bool need_keys)
		167	{
		168	char *fname;
		169	FILE *f;
		170
		171	clear_config ();
		172
		173	asprintf (&fname, "%s/gvpe.conf", confbase);
		174	f = fopen (fname, "r");
		175
		176	if (f)
		177	{
		178	char line[16384];
		179	int lineno = 0;
		180	char var, val;
		181	conf_node *node = &default_node;
		182
		183	while (fgets (line, sizeof (line), f))
		184	{
		185	lineno++;
		186
		187	{
		188	char *end = line + strlen (line);
		189
		190	while (*end < ' ' && end >= line)
		191	end--;
		192
		193	*++end = 0;
		194	}
		195
		196	char *tok = line;
		197
		198	retry:
		199	var = strtok (tok, "\t =");
		200	tok = 0;
		201
		202	if (!var \|\| !var[0])
		203	continue; /* no tokens on this line */
		204
		205	if (var[0] == '#')
		206	continue; /* comment: ignore */
		207
		208	val = strtok (NULL, "\t\n\r =");
		209
		210	if (!val \|\| val[0] == '#')
		211	{
		212	slog (L_WARN,
		213	_("no value for variable `%s', at '%s' line %d"),
		214	var, fname, lineno);
		215	break;
		216	}
		217
		218	if (!strcmp (var, "on"))
		219	{
		220	if (!::thisnode
		221	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		222	\|\| !strcmp (val, ::thisnode))
		223	goto retry;
		224
		225	continue;
		226	}
		227
		228	// truly global
		229	if (!strcmp (var, "loglevel"))
		230	{
		231	loglevel l = string_to_loglevel (val);
		232
		233	if (l != L_NONE)
		234	llevel = l;
		235	else
		236	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
		237	}
		238	else if (!strcmp (var, "ip-proto"))
		239	ip_proto = atoi (val);
		240	else if (!strcmp (var, "icmp-type"))
		241	{
		242	#if ENABLE_ICMP
		243	icmp_type = atoi (val);
		244	#endif
		245	}
		246
		247	// per config
		248	else if (!strcmp (var, "node"))
		249	{
		250	default_node.id++;
		251
		252	node = new conf_node (default_node);
		253
		254	nodes.push_back (node);
		255
		256	node->nodename = strdup (val);
		257
		258	{
		259	char *fname;
		260	FILE *f;
		261
		262	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		263
		264	f = fopen (fname, "r");
		265	if (f)
		266	{
		267	node->rsa_key = RSA_new ();
		268
		269	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		270	{
		271	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		272	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		273	exit (EXIT_FAILURE);
		274	}
		275
		276	require (RSA_blinding_on (node->rsa_key, 0));
		277
		278	fclose (f);
		279	}
		280	else
		281	{
		282	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		283
		284	if (need_keys)
		285	exit (EXIT_FAILURE);
		286	}
		287
		288	free (fname);
		289	}
		290
		291	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		292	thisnode = node;
		293	}
		294	else if (!strcmp (var, "private-key"))
		295	free (prikeyfile), prikeyfile = strdup (val);
		296	else if (!strcmp (var, "ifpersist"))
		297	{
		298	parse_bool (ifpersist, "ifpersist", true, false);
		299	}
		300	else if (!strcmp (var, "ifname"))
		301	free (ifname), ifname = strdup (val);
		302	else if (!strcmp (var, "rekey"))
		303	rekey = atoi (val);
		304	else if (!strcmp (var, "keepalive"))
		305	keepalive = atoi (val);
		306	else if (!strcmp (var, "mtu"))
		307	mtu = atoi (val);
		308	else if (!strcmp (var, "if-up"))
		309	free (script_if_up), script_if_up = strdup (val);
		310	else if (!strcmp (var, "node-up"))
		311	free (script_node_up), script_node_up = strdup (val);
		312	else if (!strcmp (var, "node-down"))
		313	free (script_node_down), script_node_down = strdup (val);
		314	else if (!strcmp (var, "pid-file"))
		315	free (pidfilename), pidfilename = strdup (val);
		316	else if (!strcmp (var, "dns-forwarder-host"))
		317	{
		318	#if ENABLE_DNS
		319	free (dns_forw_host), dns_forw_host = strdup (val);
		320	#endif
		321	}
		322	else if (!strcmp (var, "dns-forwarder-port"))
		323	{
		324	#if ENABLE_DNS
		325	dns_forw_port = atoi (val);
		326	#endif
		327	}
		328	else if (!strcmp (var, "http-proxy-host"))
		329	{
		330	#if ENABLE_HTTP_PROXY
		331	free (proxy_host), proxy_host = strdup (val);
		332	#endif
		333	}
		334	else if (!strcmp (var, "http-proxy-port"))
		335	{
		336	#if ENABLE_HTTP_PROXY
		337	proxy_port = atoi (val);
		338	#endif
		339	}
		340	else if (!strcmp (var, "http-proxy-auth"))
		341	{
		342	#if ENABLE_HTTP_PROXY
		343	proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		344	#endif
		345	}
		346
		347	/* node-specific, non-defaultable */
		348	else if (node != &default_node && !strcmp (var, "hostname"))
		349	free (node->hostname), node->hostname = strdup (val);
		350
		351	/* node-specific, defaultable */
		352	else if (!strcmp (var, "udp-port"))
		353	node->udp_port = atoi (val);
		354	else if (!strcmp (var, "tcp-port"))
		355	node->tcp_port = atoi (val);
		356	else if (!strcmp (var, "dns-port"))
		357	{
		358	#if ENABLE_DNS
		359	node->dns_port = atoi (val);
		360	#endif
		361	}
		362	else if (!strcmp (var, "dns-domain"))
		363	{
		364	#if ENABLE_DNS
		365	free (node->domain), node->domain = strdup (val);
		366	#endif
		367	}
		368	else if (!strcmp (var, "router-priority"))
		369	node->routerprio = atoi (val);
		370	else if (!strcmp (var, "max-retry"))
		371	node->max_retry = atoi (val);
		372	else if (!strcmp (var, "connect"))
		373	{
		374	if (!strcmp (val, "ondemand"))
		375	node->connectmode = conf_node::C_ONDEMAND;
		376	else if (!strcmp (val, "never"))
		377	node->connectmode = conf_node::C_NEVER;
		378	else if (!strcmp (val, "always"))
		379	node->connectmode = conf_node::C_ALWAYS;
		380	else if (!strcmp (val, "disabled"))
		381	node->connectmode = conf_node::C_DISABLED;
		382	else
		383	slog (L_WARN,
		384	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
		385	var, fname, lineno);
		386	}
		387	else if (!strcmp (var, "inherit-tos"))
		388	{
		389	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		390	}
		391	else if (!strcmp (var, "compress"))
		392	{
		393	parse_bool (node->compress, "compress", true, false);
		394	}
		395	// all these bool options really really cost a lot of executable size!
		396	else if (!strcmp (var, "enable-tcp"))
		397	{
		398	#if ENABLE_TCP
		399	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		400	#endif
		401	}
		402	else if (!strcmp (var, "enable-icmp"))
		403	{
		404	#if ENABLE_ICMP
		405	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		406	#endif
		407	}
		408	else if (!strcmp (var, "enable-dns"))
		409	{
		410	#if ENABLE_DNS
		411	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		412	#endif
		413	}
		414	else if (!strcmp (var, "enable-udp"))
		415	{
		416	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		417	}
		418	else if (!strcmp (var, "enable-rawip"))
		419	{
		420	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		421	}
		422
		423	// unknown or misplaced
		424	else
		425	slog (L_WARN,
		426	_("unknown or misplaced variable `%s', at '%s' line %d"),
		427	var, fname, lineno);
		428	}
		429
		430	fclose (f);
		431	}
		432	else
		433	{
		434	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		435	exit (EXIT_FAILURE);
		436	}
		437
		438	free (fname);
		439
		440	fname = config_filename (prikeyfile, "hostkey");
		441
		442	f = fopen (fname, "r");
		443	if (f)
		444	{
		445	rsa_key = RSA_new ();
		446
		447	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
		448	{
		449	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		450	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		451	exit (EXIT_FAILURE);
		452	}
		453
		454	require (RSA_blinding_on (rsa_key, 0));
		455
		456	fclose (f);
		457	}
		458	else
		459	{
		460	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
		461
		462	if (need_keys)
		463	exit (EXIT_FAILURE);
		464	}
		465
		466	if (need_keys && ::thisnode
		467	&& rsa_key && thisnode && thisnode->rsa_key)
		468	if (BN_cmp (rsa_key->n, thisnode->rsa_key->n) != 0
		469	\|\| BN_cmp (rsa_key->e, thisnode->rsa_key->e) != 0)
		470	{
		471	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		472	exit (EXIT_FAILURE);
		473	}
		474
		475	free (fname);
		476	}
		477
		478	char configuration::config_filename (const char name, const char *dflt)
		479	{
		480	char *fname;
		481
		482	asprintf (&fname, name ? name : dflt, ::thisnode);
		483
		484	if (!ABSOLUTE_PATH (fname))
		485	{
		486	char *rname = fname;
		487	asprintf (&fname, "%s/%s", confbase, rname);
		488	free (rname);
		489	}
		490
		491	return fname;
		492	}
		493
		494	void
		495	configuration::print ()
		496	{
		497	printf (_("\nConfiguration\n\n"));
		498	printf (_("# of nodes: %d\n"), nodes.size ());
		499	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
		500	printf (_("MTU: %d\n"), mtu);
		501	printf (_("rekeying interval: %d\n"), rekey);
		502	printf (_("keepalive interval: %d\n"), keepalive);
		503	printf (_("interface: %s\n"), ifname);
		504	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
		505	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
		506	printf ("\n");
		507
		508	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
		509	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
		510
		511	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
		512	(*i)->print ();
		513
		514	printf ("\n");
		515	}
		516
		517	configuration::configuration ()
		518	{
		519	asprintf (&confbase, "%s/gvpe", CONFDIR);
		520
		521	init ();
		522	}
		523
		524	configuration::~configuration ()
		525	{
		526	cleanup ();
		527	}
		528
		529

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.6 by pcg, Fri Mar 28 16:14:40 2003 UTC vs. Revision 1.28 by pcg, Tue Mar 1 04:38:21 2005 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.6 by pcg, Fri Mar 28 16:14:40 2003 UTC vs.
Revision 1.28 by pcg, Tue Mar 1 04:38:21 2005 UTC