ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/conf.C
(Generate patch)

Comparing gvpe/src/conf.C (file contents):
Revision 1.9 by pcg, Wed Apr 2 05:14:59 2003 UTC vs.
Revision 1.38 by pcg, Wed Mar 23 17:03:58 2005 UTC

1/* 1/*
2 conf.c -- configuration code 2 conf.c -- configuration code
3 Copyright (C) 1998 Robert van der Meulen 3 Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4 1998-2002 Ivo Timmermans <ivo@o2w.nl>
5 2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6 2000 Cris van Pelt <tribbel@arise.dhs.org>
7 2003 Marc Lehmann <pcg@goof.com>
8 4
5 This file is part of GVPE.
6
9 This program is free software; you can redistribute it and/or modify 7 GVPE is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by 8 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or 9 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version. 10 (at your option) any later version.
13 11
14 This program is distributed in the hope that it will be useful, 12 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of 13 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details. 15 GNU General Public License for more details.
18 16
19 You should have received a copy of the GNU General Public License 17 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software 18 along with gvpe; if not, write to the Free Software
21 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 19 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22*/ 20*/
23 21
24#include "config.h" 22#include "config.h"
25 23
… …
31#include <netdb.h> 29#include <netdb.h>
32#include <sys/stat.h> 30#include <sys/stat.h>
33#include <sys/types.h> 31#include <sys/types.h>
34#include <unistd.h> 32#include <unistd.h>
35 33
36#include <netinet/in.h> 34#include "netcompat.h"
37 35
38#include <openssl/err.h> 36#include <openssl/err.h>
39#include <openssl/pem.h> 37#include <openssl/pem.h>
40#include <openssl/rsa.h> 38#include <openssl/rsa.h>
41#include <openssl/rand.h> 39#include <openssl/rand.h>
42 40#include <openssl/bn.h>
43#include "gettext.h"
44 41
45#include "conf.h" 42#include "conf.h"
46#include "slog.h" 43#include "slog.h"
47#include "util.h" 44#include "util.h"
48 45
49char *confbase; 46char *confbase;
50char *thisnode; 47char *thisnode;
51char *identname; 48char *identname;
52char *pidfilename;
53 49
54struct configuration conf; 50struct configuration conf;
55 51
56u8 best_protocol (u8 protset) 52u8 best_protocol (u8 protset)
57{ 53{
58 if (protset & PROT_IPv4 ) return PROT_IPv4; 54 if (protset & PROT_IPv4 ) return PROT_IPv4;
55 if (protset & PROT_ICMPv4) return PROT_ICMPv4;
59 if (protset & PROT_UDPv4) return PROT_UDPv4; 56 if (protset & PROT_UDPv4 ) return PROT_UDPv4;
60 if (protset & PROT_TCPv4) return PROT_TCPv4; 57 if (protset & PROT_TCPv4 ) return PROT_TCPv4;
58 if (protset & PROT_DNSv4 ) return PROT_DNSv4;
61 59
62 return 0; 60 return 0;
63} 61}
64 62
65const char *strprotocol (u8 protocol) 63const char *strprotocol (u8 protocol)
66{ 64{
67 if (protocol & PROT_IPv4 ) return "rawip"; 65 if (protocol & PROT_IPv4 ) return "rawip";
66 if (protocol & PROT_ICMPv4) return "icmp";
68 if (protocol & PROT_UDPv4) return "udp"; 67 if (protocol & PROT_UDPv4 ) return "udp";
68 if (protocol & PROT_TCPv4 ) return "tcp";
69 if (protocol & PROT_DNSv4 ) return "dns";
69 70
70 return "<unknown>"; 71 return "<unknown>";
71}
72
73configuration::configuration ()
74{
75 init ();
76}
77
78configuration::~configuration ()
79{
80 cleanup ();
81}
82
83void configuration::init ()
84{
85 memset (this, 0, sizeof (*this));
86
87 rekey = DEFAULT_REKEY;
88 keepalive = DEFAULT_KEEPALIVE;
89 llevel = L_INFO;
90 ip_proto = IPPROTO_GRE;
91
92 default_node.udp_port = DEFAULT_UDPPORT;
93 default_node.tcp_port = DEFAULT_UDPPORT;
94 default_node.connectmode = conf_node::C_ALWAYS;
95 default_node.compress = true;
96 default_node.protocols = PROT_UDPv4;
97}
98
99void configuration::cleanup()
100{
101 if (rsa_key)
102 RSA_free (rsa_key);
103
104 free (ifname);
105
106 rsa_key = 0;
107 ifname = 0;
108}
109
110void
111configuration::clear_config ()
112{
113 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
114 delete *i;
115
116 nodes.clear ();
117
118 cleanup ();
119 init ();
120}
121
122#define parse_bool(target,name,trueval,falseval) \
123 if (!strcmp (val, "yes")) target = trueval; \
124 else if (!strcmp (val, "no")) target = falseval; \
125 else if (!strcmp (val, "true")) target = trueval; \
126 else if (!strcmp (val, "false")) target = falseval; \
127 else if (!strcmp (val, "on")) target = trueval; \
128 else if (!strcmp (val, "off")) target = falseval; \
129 else \
130 slog (L_WARN, \
131 _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
132 name, var, fname, lineno);
133
134void configuration::read_config (bool need_keys)
135{
136 char *fname;
137 FILE *f;
138
139 clear_config ();
140
141 asprintf (&fname, "%s/vped.conf", confbase);
142 f = fopen (fname, "r");
143
144 if (f)
145 {
146 char line[16384];
147 int lineno = 0;
148 char *var, *val;
149 conf_node *node = &default_node;
150
151 while (fgets (line, sizeof (line), f))
152 {
153 lineno++;
154
155 {
156 char *end = line + strlen (line);
157
158 while (*end < ' ' && end >= line)
159 end--;
160
161 *++end = 0;
162 }
163
164 char *tok = line;
165
166retry:
167 var = strtok (tok, "\t =");
168 tok = 0;
169
170 if (!var || !var[0])
171 continue; /* no tokens on this line */
172
173 if (var[0] == '#')
174 continue; /* comment: ignore */
175
176 val = strtok (NULL, "\t\n\r =");
177
178 if (!val || val[0] == '#')
179 {
180 slog (L_WARN,
181 _("no value for variable `%s', at '%s' line %d"),
182 var, fname, lineno);
183 break;
184 }
185
186 if (!strcmp (var, "on"))
187 {
188 if (!::thisnode
189 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
190 || !strcmp (val, ::thisnode))
191 goto retry;
192
193 continue;
194 }
195
196 // truly global
197 if (!strcmp (var, "loglevel"))
198 {
199 loglevel l = string_to_loglevel (val);
200
201 if (l != L_NONE)
202 llevel = l;
203 else
204 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
205 }
206 else if (!strcmp (var, "ip-proto"))
207 ip_proto = atoi (val);
208
209 // per config
210 else if (!strcmp (var, "node"))
211 {
212 default_node.id++;
213
214 node = new conf_node (default_node);
215
216 nodes.push_back (node);
217
218 node->nodename = strdup (val);
219
220 {
221 char *fname;
222 FILE *f;
223
224 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
225
226 f = fopen (fname, "r");
227 if (f)
228 {
229 node->rsa_key = RSA_new ();
230
231 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
232 {
233 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
234 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
235 exit (1);
236 }
237
238 RSA_blinding_on (node->rsa_key, 0);
239
240 fclose (f);
241 }
242 else
243 {
244 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
245
246 if (need_keys)
247 exit (1);
248 }
249
250 free (fname);
251 }
252
253 if (!::thisnode || !strcmp (node->nodename, ::thisnode))
254 thisnode = node;
255 }
256 else if (!strcmp (var, "private-key"))
257 prikeyfile = strdup (val);
258 else if (!strcmp (var, "ifpersist"))
259 {
260 parse_bool (ifpersist, "ifpersist", true, false);
261 }
262 else if (!strcmp (var, "ifname"))
263 ifname = strdup (val);
264 else if (!strcmp (var, "rekey"))
265 rekey = atoi (val);
266 else if (!strcmp (var, "keepalive"))
267 keepalive = atoi (val);
268 else if (!strcmp (var, "mtu"))
269 mtu = atoi (val);
270 else if (!strcmp (var, "if-up"))
271 script_if_up = strdup (val);
272 else if (!strcmp (var, "node-up"))
273 script_node_up = strdup (val);
274 else if (!strcmp (var, "node-down"))
275 script_node_down = strdup (val);
276
277 /* node-specific, non-defaultable */
278 else if (node != &default_node && !strcmp (var, "hostname"))
279 {
280 free (node->hostname);
281 node->hostname = strdup (val);
282 }
283
284 /* node-specific, defaultable */
285 else if (!strcmp (var, "udp-port"))
286 node->udp_port = atoi (val);
287 else if (!strcmp (var, "tcp-port"))
288 node->tcp_port = atoi (val);
289 else if (!strcmp (var, "router-priority"))
290 node->routerprio = atoi (val);
291 else if (!strcmp (var, "connect"))
292 {
293 if (!strcmp (val, "ondemand"))
294 node->connectmode = conf_node::C_ONDEMAND;
295 else if (!strcmp (val, "never"))
296 node->connectmode = conf_node::C_NEVER;
297 else if (!strcmp (val, "always"))
298 node->connectmode = conf_node::C_ALWAYS;
299 else if (!strcmp (val, "disabled"))
300 node->connectmode = conf_node::C_DISABLED;
301 else
302 slog (L_WARN,
303 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
304 var, fname, lineno);
305 }
306 else if (!strcmp (var, "inherit-tos"))
307 {
308 parse_bool (node->inherit_tos, "inherit-tos", true, false);
309 }
310 else if (!strcmp (var, "compress"))
311 {
312 parse_bool (node->compress, "compress", true, false);
313 }
314 // all these bool options really really cost a lot of executable size!
315 else if (!strcmp (var, "enable-tcp"))
316 {
317 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
318 }
319 else if (!strcmp (var, "enable-udp"))
320 {
321 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
322 }
323 else if (!strcmp (var, "enable-rawip"))
324 {
325 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
326 }
327
328 // unknown or misplaced
329 else
330 {
331 slog (L_WARN,
332 _("unknown or misplaced variable `%s', at '%s' line %d"),
333 var, fname, lineno);
334 }
335 }
336
337 fclose (f);
338 }
339 else
340 {
341 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
342 exit (1);
343 }
344
345 free (fname);
346
347 fname = config_filename (prikeyfile, "hostkey");
348
349 f = fopen (fname, "r");
350 if (f)
351 {
352 rsa_key = RSA_new ();
353
354 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
355 {
356 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
357 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
358 exit (1);
359 }
360
361 RSA_blinding_on (rsa_key, 0);
362
363 fclose (f);
364 }
365 else
366 {
367 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
368
369 if (need_keys)
370 exit (1);
371 }
372
373 free (fname);
374}
375
376char *configuration::config_filename (const char *name, const char *dflt)
377{
378 char *fname;
379
380 asprintf (&fname, name ? name : dflt, ::thisnode);
381
382 if (!ABSOLUTE_PATH (fname))
383 {
384 char *rname = fname;
385 asprintf (&fname, "%s/%s", confbase, rname);
386 free (rname);
387 }
388
389 return fname;
390}
391
392void
393configuration::print ()
394{
395 printf (_("\nConfiguration\n\n"));
396 printf (_("# of nodes: %d\n"), nodes.size ());
397 printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
398 printf (_("MTU: %d\n"), mtu);
399 printf (_("rekeying interval: %d\n"), rekey);
400 printf (_("keepalive interval: %d\n"), keepalive);
401 printf (_("interface: %s\n"), ifname);
402 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
403 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
404 printf ("\n");
405
406 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
407 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
408
409 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
410 (*i)->print ();
411
412 printf ("\n");
413} 72}
414 73
415void 74void
416conf_node::print () 75conf_node::print ()
417{ 76{
… …
427 hostname ? ":" : "", 86 hostname ? ":" : "",
428 hostname ? udp_port : 0 87 hostname ? udp_port : 0
429 ); 88 );
430} 89}
431 90
91conf_node::~conf_node ()
92{
93 if (rsa_key)
94 RSA_free (rsa_key);
95
96 free (nodename);
97 free (hostname);
98#if ENABLE_DNS
99 free (domain);
100 free (dns_hostname);
101#endif
102}
103
104void configuration::init ()
105{
106 memset (this, 0, sizeof (*this));
107
108 mtu = DEFAULT_MTU;
109 rekey = DEFAULT_REKEY;
110 keepalive = DEFAULT_KEEPALIVE;
111 llevel = L_INFO;
112 ip_proto = IPPROTO_GRE;
113#if ENABLE_ICMP
114 icmp_type = ICMP_ECHOREPLY;
115#endif
116
117 default_node.udp_port = DEFAULT_UDPPORT;
118 default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
119 default_node.connectmode = conf_node::C_ALWAYS;
120 default_node.compress = true;
121 default_node.protocols = 0;
122 default_node.max_retry = DEFAULT_MAX_RETRY;
123
124#if ENABLE_DNS
125 default_node.dns_port = 0; // default is 0 == client
126
127 dns_forw_host = strdup ("127.0.0.1");
128 dns_forw_port = 53;
129 dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
130 dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
131 dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
132 dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
133#endif
134
135 conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
136}
137
138void configuration::cleanup()
139{
140 if (rsa_key)
141 RSA_free (rsa_key);
142
143 rsa_key = 0;
144
145 free (pidfilename); pidfilename = 0;
146 free (ifname); ifname = 0;
147#if ENABLE_HTTP_PROXY
148 free (proxy_host); proxy_host = 0;
149 free (proxy_auth); proxy_auth = 0;
150#endif
151#if ENABLE_DNS
152 free (dns_forw_host); dns_forw_host = 0;
153#endif
154}
155
156void
157configuration::clear_config ()
158{
159 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
160 delete *i;
161
162 nodes.clear ();
163
164 cleanup ();
165 init ();
166}
167
168#define parse_bool(target,name,trueval,falseval) do { \
169 if (!strcmp (val, "yes")) target = trueval; \
170 else if (!strcmp (val, "no")) target = falseval; \
171 else if (!strcmp (val, "true")) target = trueval; \
172 else if (!strcmp (val, "false")) target = falseval; \
173 else if (!strcmp (val, "on")) target = trueval; \
174 else if (!strcmp (val, "off")) target = falseval; \
175 else \
176 slog (L_WARN, \
177 _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
178 name, var, fname, lineno); \
179} while (0)
180
181void configuration::read_config (bool need_keys)
182{
183 char *fname;
184 FILE *f;
185
186 clear_config ();
187
188 asprintf (&fname, "%s/gvpe.conf", confbase);
189 f = fopen (fname, "r");
190
191 if (f)
192 {
193 char line[16384];
194 int lineno = 0;
195 char *var, *val;
196 conf_node *node = &default_node;
197
198 while (fgets (line, sizeof (line), f))
199 {
200 lineno++;
201
202 {
203 char *end = line + strlen (line);
204
205 while (*end < ' ' && end >= line)
206 end--;
207
208 *++end = 0;
209 }
210
211 char *tok = line;
212
213retry:
214 var = strtok (tok, "\t =");
215 tok = 0;
216
217 if (!var || !var[0])
218 continue; /* no tokens on this line */
219
220 if (var[0] == '#')
221 continue; /* comment: ignore */
222
223 val = strtok (NULL, "\t\n\r =");
224
225 if (!val || val[0] == '#')
226 {
227 slog (L_WARN,
228 _("no value for variable `%s', at '%s' line %d, skipping."),
229 var, fname, lineno);
230 continue;
231 }
232
233 if (!strcmp (var, "on"))
234 {
235 if (!::thisnode
236 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
237 || !strcmp (val, ::thisnode))
238 goto retry;
239
240 continue;
241 }
242
243 // truly global
244 if (!strcmp (var, "loglevel"))
245 {
246 loglevel l = string_to_loglevel (val);
247
248 if (l != L_NONE)
249 llevel = l;
250 else
251 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
252 }
253 else if (!strcmp (var, "ip-proto"))
254 ip_proto = atoi (val);
255 else if (!strcmp (var, "icmp-type"))
256 {
257#if ENABLE_ICMP
258 icmp_type = atoi (val);
259#endif
260 }
261
262 // per config
263 else if (!strcmp (var, "node"))
264 {
265 default_node.id++;
266
267 node = new conf_node (default_node);
268
269 nodes.push_back (node);
270
271 node->nodename = strdup (val);
272
273 {
274 char *fname;
275 FILE *f;
276
277 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
278
279 f = fopen (fname, "r");
280 if (f)
281 {
282 node->rsa_key = RSA_new ();
283
284 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
285 {
286 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
287 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
288 exit (EXIT_FAILURE);
289 }
290
291 require (RSA_blinding_on (node->rsa_key, 0));
292
293 fclose (f);
294 }
295 else
296 {
297 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
298
299 if (need_keys)
300 exit (EXIT_FAILURE);
301 }
302
303 free (fname);
304 }
305
306 if (::thisnode && !strcmp (node->nodename, ::thisnode))
307 thisnode = node;
308 }
309 else if (!strcmp (var, "private-key"))
310 free (prikeyfile), prikeyfile = strdup (val);
311 else if (!strcmp (var, "ifpersist"))
312 parse_bool (ifpersist, "ifpersist", true, false);
313 else if (!strcmp (var, "ifname"))
314 free (ifname), ifname = strdup (val);
315 else if (!strcmp (var, "rekey"))
316 rekey = atoi (val);
317 else if (!strcmp (var, "keepalive"))
318 keepalive = atoi (val);
319 else if (!strcmp (var, "mtu"))
320 mtu = atoi (val);
321 else if (!strcmp (var, "if-up"))
322 free (script_if_up), script_if_up = strdup (val);
323 else if (!strcmp (var, "node-up"))
324 free (script_node_up), script_node_up = strdup (val);
325 else if (!strcmp (var, "node-down"))
326 free (script_node_down), script_node_down = strdup (val);
327 else if (!strcmp (var, "pid-file"))
328 free (pidfilename), pidfilename = strdup (val);
329 else if (!strcmp (var, "dns-forw-host"))
330 {
331#if ENABLE_DNS
332 free (dns_forw_host), dns_forw_host = strdup (val);
333#endif
334 }
335 else if (!strcmp (var, "dns-forw-port"))
336 {
337#if ENABLE_DNS
338 dns_forw_port = atoi (val);
339#endif
340 }
341 else if (!strcmp (var, "dns-timeout-factor"))
342 {
343#if ENABLE_DNS
344 dns_timeout_factor = atof (val);
345#endif
346 }
347 else if (!strcmp (var, "dns-send-interval"))
348 {
349#if ENABLE_DNS
350 dns_send_interval = atoi (val);
351#endif
352 }
353 else if (!strcmp (var, "dns-overlap-factor"))
354 {
355#if ENABLE_DNS
356 dns_overlap_factor = atof (val);
357#endif
358 }
359 else if (!strcmp (var, "dns-max-outstanding"))
360 {
361#if ENABLE_DNS
362 dns_max_outstanding = atoi (val);
363#endif
364 }
365 else if (!strcmp (var, "http-proxy-host"))
366 {
367#if ENABLE_HTTP_PROXY
368 free (proxy_host), proxy_host = strdup (val);
369#endif
370 }
371 else if (!strcmp (var, "http-proxy-port"))
372 {
373#if ENABLE_HTTP_PROXY
374 proxy_port = atoi (val);
375#endif
376 }
377 else if (!strcmp (var, "http-proxy-auth"))
378 {
379#if ENABLE_HTTP_PROXY
380 proxy_auth = (char *)base64_encode ((const u8 *)val, strlen (val));
381#endif
382 }
383
384 /* node-specific, non-defaultable */
385 else if (node != &default_node && !strcmp (var, "hostname"))
386 free (node->hostname), node->hostname = strdup (val);
387
388 /* node-specific, defaultable */
389 else if (!strcmp (var, "udp-port"))
390 node->udp_port = atoi (val);
391 else if (!strcmp (var, "tcp-port"))
392 node->tcp_port = atoi (val);
393 else if (!strcmp (var, "dns-hostname"))
394 {
395#if ENABLE_DNS
396 free (node->dns_hostname), node->dns_hostname = strdup (val);
397#endif
398 }
399 else if (!strcmp (var, "dns-port"))
400 {
401#if ENABLE_DNS
402 node->dns_port = atoi (val);
403#endif
404 }
405 else if (!strcmp (var, "dns-domain"))
406 {
407#if ENABLE_DNS
408 free (node->domain), node->domain = strdup (val);
409#endif
410 }
411 else if (!strcmp (var, "router-priority"))
412 node->routerprio = atoi (val);
413 else if (!strcmp (var, "max-retry"))
414 node->max_retry = atoi (val);
415 else if (!strcmp (var, "connect"))
416 {
417 if (!strcmp (val, "ondemand"))
418 node->connectmode = conf_node::C_ONDEMAND;
419 else if (!strcmp (val, "never"))
420 node->connectmode = conf_node::C_NEVER;
421 else if (!strcmp (val, "always"))
422 node->connectmode = conf_node::C_ALWAYS;
423 else if (!strcmp (val, "disabled"))
424 node->connectmode = conf_node::C_DISABLED;
425 else
426 slog (L_WARN,
427 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d, ignoring."),
428 var, fname, lineno);
429 }
430 else if (!strcmp (var, "inherit-tos"))
431 parse_bool (node->inherit_tos, "inherit-tos", true, false);
432 else if (!strcmp (var, "compress"))
433 parse_bool (node->compress, "compress", true, false);
434 // all these bool options really really cost a lot of executable size!
435 else if (!strcmp (var, "enable-tcp"))
436 {
437#if ENABLE_TCP
438 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
439#endif
440 }
441 else if (!strcmp (var, "enable-icmp"))
442 {
443#if ENABLE_ICMP
444 u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) | v;
445#endif
446 }
447 else if (!strcmp (var, "enable-dns"))
448 {
449#if ENABLE_DNS
450 u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) | v;
451#endif
452 }
453 else if (!strcmp (var, "enable-udp"))
454 {
455 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
456 }
457 else if (!strcmp (var, "enable-rawip"))
458 {
459 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
460 }
461
462 // unknown or misplaced
463 else
464 slog (L_WARN,
465 _("unknown or misplaced variable `%s', at '%s' line %d, skipping."),
466 var, fname, lineno);
467 }
468
469 fclose (f);
470 }
471 else
472 {
473 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
474 exit (EXIT_FAILURE);
475 }
476
477 free (fname);
478
479 fname = config_filename (prikeyfile, "hostkey");
480
481 f = fopen (fname, "r");
482 if (f)
483 {
484 rsa_key = RSA_new ();
485
486 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
487 {
488 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
489 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
490 exit (EXIT_FAILURE);
491 }
492
493 require (RSA_blinding_on (rsa_key, 0));
494
495 fclose (f);
496 }
497 else
498 {
499 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
500
501 if (need_keys)
502 exit (EXIT_FAILURE);
503 }
504
505 if (need_keys && ::thisnode
506 && rsa_key && thisnode && thisnode->rsa_key)
507 if (BN_cmp (rsa_key->n, thisnode->rsa_key->n) != 0
508 || BN_cmp (rsa_key->e, thisnode->rsa_key->e) != 0)
509 {
510 slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
511 exit (EXIT_FAILURE);
512 }
513
514 free (fname);
515}
516
517char *configuration::config_filename (const char *name, const char *dflt)
518{
519 char *fname;
520
521 asprintf (&fname, name ? name : dflt, ::thisnode);
522
523 if (!ABSOLUTE_PATH (fname))
524 {
525 char *rname = fname;
526 asprintf (&fname, "%s/%s", confbase, rname);
527 free (rname);
528 }
529
530 return fname;
531}
532
533void
534configuration::print ()
535{
536 printf (_("\nConfiguration\n\n"));
537 printf (_("# of nodes: %d\n"), nodes.size ());
538 printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
539 printf (_("MTU: %d\n"), mtu);
540 printf (_("rekeying interval: %d\n"), rekey);
541 printf (_("keepalive interval: %d\n"), keepalive);
542 printf (_("interface: %s\n"), ifname);
543 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
544 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
545 printf ("\n");
546
547 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
548 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
549
550 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
551 (*i)->print ();
552
553 printf ("\n");
554}
555
556configuration::configuration ()
557{
558 asprintf (&confbase, "%s/gvpe", CONFDIR);
559
560 init ();
561}
562
563configuration::~configuration ()
564{
565 cleanup ();
566}
567
568

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines