[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.20 by pcg, Thu Oct 16 21:57:54 2003 UTC vs.
Revision 1.51 by pcg, Sat Jul 18 05:59:16 2009 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 2003 Marc Lehmann <pcg@goof.com>	3	Copyright (C) 2003-2008 Marc Lehmann <gvpe@schmorp.de>
4		4
		5	This file is part of GVPE.
		6
5	This program is free software; you can redistribute it and/or modify	7	GVPE is free software; you can redistribute it and/or modify it
6	it under the terms of the GNU General Public License as published by	8	under the terms of the GNU General Public License as published by the
7	the Free Software Foundation; either version 2 of the License, or	9	Free Software Foundation; either version 3 of the License, or (at your
8	(at your option) any later version.	10	option) any later version.
9		11
10	This program is distributed in the hope that it will be useful,	12	This program is distributed in the hope that it will be useful, but
11	but WITHOUT ANY WARRANTY; without even the implied warranty of	13	WITHOUT ANY WARRANTY; without even the implied warranty of
12	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the	14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
13	GNU General Public License for more details.	15	Public License for more details.
14		16
15	You should have received a copy of the GNU General Public License	17	You should have received a copy of the GNU General Public License along
16	along with this program; if not, write to the Free Software	18	with this program; if not, see <http://www.gnu.org/licenses/>.
17	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA	19
		20	Additional permission under GNU GPL version 3 section 7
		21
		22	If you modify this Program, or any covered work, by linking or
		23	combining it with the OpenSSL project's OpenSSL library (or a modified
		24	version of that library), containing parts covered by the terms of the
		25	OpenSSL or SSLeay licenses, the licensors of this Program grant you
		26	additional permission to convey the resulting work. Corresponding
		27	Source for a non-source form of such a combination shall include the
		28	source code for the parts of OpenSSL used as well as that of the
		29	covered work.
18	*/	30	*/
19		31
20	#include "config.h"	32	#include "config.h"
21		33
22	#include <cstdio>	34	#include <cstdio>
33		45
34	#include <openssl/err.h>	46	#include <openssl/err.h>
35	#include <openssl/pem.h>	47	#include <openssl/pem.h>
36	#include <openssl/rsa.h>	48	#include <openssl/rsa.h>
37	#include <openssl/rand.h>	49	#include <openssl/rand.h>
38		50	#include <openssl/bn.h>
39	#include "gettext.h"
40		51
41	#include "conf.h"	52	#include "conf.h"
42	#include "slog.h"	53	#include "slog.h"
43	#include "util.h"	54	#include "util.h"
44		55
45	char *confbase;	56	char *confbase;
46	char *thisnode;	57	char *thisnode;
47	char *identname;	58	char *identname;
48	char *pidfilename;
49		59
50	struct configuration conf;	60	struct configuration conf;
51		61
52	u8 best_protocol (u8 protset)	62	u8 best_protocol (u8 protset)
53	{	63	{
54	if (protset & PROT_IPv4 ) return PROT_IPv4;	64	if (protset & PROT_IPv4 ) return PROT_IPv4;
55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;	65	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;	66	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;	67	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		68	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
58		69
59	return 0;	70	return 0;
60	}	71	}
61		72
62	const char *strprotocol (u8 protocol)	73	const char *strprotocol (u8 protocol)
63	{	74	{
64	if (protocol & PROT_IPv4 ) return "rawip";	75	if (protocol & PROT_IPv4 ) return "rawip";
65	if (protocol & PROT_ICMPv4) return "icmp";	76	if (protocol & PROT_ICMPv4) return "icmp";
66	if (protocol & PROT_UDPv4 ) return "udp";	77	if (protocol & PROT_UDPv4 ) return "udp";
67	if (protocol & PROT_TCPv4 ) return "tcp";	78	if (protocol & PROT_TCPv4 ) return "tcp";
		79	if (protocol & PROT_DNSv4 ) return "dns";
68		80
69	return "<unknown>";	81	return "<unknown>";
		82	}
		83
		84	static bool
		85	match_list (const vector<const char > &list, const char str)
		86	{
		87	for (vector<const char *>::const_iterator i = list.end (); i-- > list.begin (); )
		88	if ((i)[0] == '' && !(*i)[1])
		89	return true;
		90	else if (!strcmp (*i, str))
		91	return true;
		92
		93	return false;
		94	}
		95
		96	bool
		97	conf_node::may_direct (struct conf_node *other)
		98	{
		99	if (match_list (allow_direct, other->nodename))
		100	return true;
		101
		102	if (match_list (deny_direct, other->nodename))
		103	return false;
		104
		105	return true;
70	}	106	}
71		107
72	void	108	void
73	conf_node::print ()	109	conf_node::print ()
74	{	110	{
75	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",	111	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",
76	id,	112	id,
77	id >> 8, id & 0xff,	113	id >> 8, id & 0xff,
78	compress ? 'Y' : 'N',	114	compress ? 'Y' : 'N',
79	connectmode == C_ONDEMAND ? "ondemand" :	115	connectmode == C_ONDEMAND ? "ondemand"
80	connectmode == C_NEVER ? "never" :	116	: connectmode == C_NEVER ? "never"
81	connectmode == C_ALWAYS ? "always" : "",	117	: connectmode == C_ALWAYS ? "always"
		118	: connectmode == C_DISABLED ? "disabled"
		119	: "",
82	nodename,	120	nodename,
83	hostname ? hostname : "",	121	hostname ? hostname : "",
84	hostname ? ":" : "",	122	hostname ? ":" : "",
85	hostname ? udp_port : 0	123	hostname ? udp_port : 0
86	);	124	);
87	}	125	}
88		126
89	conf_node::~conf_node ()	127	conf_node::~conf_node ()
90	{	128	{
		129	#if 0
		130	// does not work, because string pointers etc. are shared
		131	// is not called, however
91	if (rsa_key)	132	if (rsa_key)
92	RSA_free (rsa_key);	133	RSA_free (rsa_key);
93		134
94	free (nodename);	135	free (nodename);
95	free (hostname);	136	free (hostname);
		137	free (if_up_data);
		138	#if ENABLE_DNS
		139	free (domain);
		140	free (dns_hostname);
		141	#endif
		142	#endif
96	}	143	}
97		144
98	void configuration::init ()	145	void configuration::init ()
99	{	146	{
100	memset (this, 0, sizeof (*this));	147	memset (this, 0, sizeof (*this));
101		148
102	mtu = DEFAULT_MTU;	149	mtu = DEFAULT_MTU;
		150	nfmark = 0;
103	rekey = DEFAULT_REKEY;	151	rekey = DEFAULT_REKEY;
104	keepalive = DEFAULT_KEEPALIVE;	152	keepalive = DEFAULT_KEEPALIVE;
105	llevel = L_INFO;	153	llevel = L_INFO;
106	ip_proto = IPPROTO_GRE;	154	ip_proto = IPPROTO_GRE;
107	#if ENABLE_ICMP	155	#if ENABLE_ICMP
108	icmp_type = ICMP_ECHOREPLY;	156	icmp_type = ICMP_ECHOREPLY;
109	#endif	157	#endif
110		158
111	default_node.udp_port = DEFAULT_UDPPORT;	159	default_node.udp_port = DEFAULT_UDPPORT;
112	default_node.tcp_port = DEFAULT_UDPPORT;	160	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
113	default_node.connectmode = conf_node::C_ALWAYS;	161	default_node.connectmode = conf_node::C_ALWAYS;
114	default_node.compress = true;	162	default_node.compress = true;
115	default_node.protocols = PROT_UDPv4;	163	default_node.protocols = 0;
		164	default_node.max_retry = DEFAULT_MAX_RETRY;
		165	default_node.max_ttl = DEFAULT_MAX_TTL;
		166	default_node.max_queue = DEFAULT_MAX_QUEUE;
		167	default_node.if_up_data = strdup ("");
		168
		169	#if ENABLE_DNS
		170	default_node.dns_port = 0; // default is 0 == client
		171
		172	dns_forw_host = strdup ("127.0.0.1");
		173	dns_forw_port = 53;
		174	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
		175	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
		176	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
		177	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
		178	#endif
		179
		180	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
116	}	181	}
117		182
118	void configuration::cleanup()	183	void configuration::cleanup()
119	{	184	{
120	if (rsa_key)	185	if (rsa_key)
121	RSA_free (rsa_key);	186	RSA_free (rsa_key);
122		187
123	rsa_key = 0;	188	rsa_key = 0;
124		189
125	free (ifname); ifname = 0;	190	free (pidfilename); pidfilename = 0;
126	#if ENABLE_HTTP_PROXY	191	free (ifname); ifname = 0;
		192	#if ENABLE_HTTP_PROXY
127	free (proxy_host); proxy_host = 0;	193	free (proxy_host); proxy_host = 0;
128	free (proxy_auth); proxy_auth = 0;	194	free (proxy_auth); proxy_auth = 0;
		195	#endif
		196	#if ENABLE_DNS
		197	free (dns_forw_host); dns_forw_host = 0;
129	#endif	198	#endif
		199	free (script_if_up); script_if_up = 0;
		200	free (script_node_up); script_node_up = 0;
		201	free (script_node_change); script_node_change = 0;
		202	free (script_node_down); script_node_down = 0;
130	}	203	}
131		204
132	void	205	void
133	configuration::clear_config ()	206	configuration::clear ()
134	{	207	{
135	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)	208	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
136	delete *i;	209	delete *i;
137		210
138	nodes.clear ();	211	nodes.clear ();
139		212
140	cleanup ();	213	cleanup ();
141	init ();	214	init ();
142	}	215	}
143		216
144	#define parse_bool(target,name,trueval,falseval) \	217	#define parse_bool(target,name,trueval,falseval) do { \
145	if (!strcmp (val, "yes")) target = trueval; \	218	if (!strcmp (val, "yes")) target = trueval; \
146	else if (!strcmp (val, "no")) target = falseval; \	219	else if (!strcmp (val, "no")) target = falseval; \
147	else if (!strcmp (val, "true")) target = trueval; \	220	else if (!strcmp (val, "true")) target = trueval; \
148	else if (!strcmp (val, "false")) target = falseval; \	221	else if (!strcmp (val, "false")) target = falseval; \
149	else if (!strcmp (val, "on")) target = trueval; \	222	else if (!strcmp (val, "on")) target = trueval; \
150	else if (!strcmp (val, "off")) target = falseval; \	223	else if (!strcmp (val, "off")) target = falseval; \
151	else \	224	else \
152	slog (L_WARN, \	225	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed. (ignored)"); \
153	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \	226	} while (0)
154	name, var, fname, lineno);
155		227
156	void configuration::read_config (bool need_keys)	228	const char *
		229	configuration_parser::parse_line (char *line)
		230	{
		231	{
		232	char *end = line + strlen (line);
		233
		234	while (*end < ' ' && end >= line)
		235	end--;
		236
		237	*++end = 0;
		238	}
		239
		240	char *tok = line;
		241	const char *var = strtok (tok, "\t =");
		242	tok = 0;
		243
		244	if (!var \|\| !var[0])
		245	return 0; /* no tokens on this line */
		246
		247	if (var[0] == '#')
		248	return 0; /* comment: ignore */
		249
		250	char *val = strtok (NULL, "\t\n\r =");
		251
		252	if (!val \|\| val[0] == '#')
		253	return _("no value given for variable. (ignored)");
		254
		255	if (!strcmp (var, "on"))
		256	{
		257	if (!::thisnode
		258	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		259	\|\| !strcmp (val, ::thisnode))
		260	return parse_line (strtok (NULL, "\n\r"));
		261	else
		262	return 0;
		263	}
		264
		265	// truly global
		266	if (!strcmp (var, "loglevel"))
		267	{
		268	loglevel l = string_to_loglevel (val);
		269
		270	if (l == L_NONE)
		271	return _("unknown loglevel. (skipping)");
		272	}
		273	else if (!strcmp (var, "ip-proto"))
		274	conf.ip_proto = atoi (val);
		275	else if (!strcmp (var, "icmp-type"))
		276	{
		277	#if ENABLE_ICMP
		278	conf.icmp_type = atoi (val);
		279	#endif
		280	}
		281
		282	// per config
		283	else if (!strcmp (var, "node"))
		284	{
		285	parse_argv ();
		286
		287	conf.default_node.id++;
		288	node = new conf_node (conf.default_node);
		289	conf.nodes.push_back (node);
		290	node->nodename = strdup (val);
		291
		292	{
		293	char *fname;
		294	FILE *f;
		295
		296	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		297
		298	f = fopen (fname, "r");
		299	if (f)
		300	{
		301	node->rsa_key = RSA_new ();
		302
		303	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		304	{
		305	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		306	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		307	exit (EXIT_FAILURE);
		308	}
		309
		310	require (RSA_blinding_on (node->rsa_key, 0));
		311
		312	fclose (f);
		313	}
		314	else
		315	{
		316	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		317
		318	if (need_keys)
		319	exit (EXIT_FAILURE);
		320	}
		321
		322	free (fname);
		323	}
		324
		325	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		326	conf.thisnode = node;
		327	}
		328	else if (!strcmp (var, "private-key"))
		329	free (conf.prikeyfile), conf.prikeyfile = strdup (val);
		330	else if (!strcmp (var, "ifpersist"))
		331	parse_bool (conf.ifpersist, "ifpersist", true, false);
		332	else if (!strcmp (var, "ifname"))
		333	free (conf.ifname), conf.ifname = strdup (val);
		334	else if (!strcmp (var, "rekey"))
		335	conf.rekey = atoi (val);
		336	else if (!strcmp (var, "keepalive"))
		337	conf.keepalive = atoi (val);
		338	else if (!strcmp (var, "mtu"))
		339	conf.mtu = atoi (val);
		340	else if (!strcmp (var, "nfmark"))
		341	conf.nfmark = atoi (val);
		342	else if (!strcmp (var, "if-up"))
		343	free (conf.script_if_up), conf.script_if_up = strdup (val);
		344	else if (!strcmp (var, "node-up"))
		345	free (conf.script_node_up), conf.script_node_up = strdup (val);
		346	else if (!strcmp (var, "node-change"))
		347	free (conf.script_node_change), conf.script_node_change = strdup (val);
		348	else if (!strcmp (var, "node-down"))
		349	free (conf.script_node_down), conf.script_node_down = strdup (val);
		350	else if (!strcmp (var, "pid-file"))
		351	free (conf.pidfilename), conf.pidfilename = strdup (val);
		352	else if (!strcmp (var, "dns-forw-host"))
		353	{
		354	#if ENABLE_DNS
		355	free (conf.dns_forw_host), conf.dns_forw_host = strdup (val);
		356	#endif
		357	}
		358	else if (!strcmp (var, "dns-forw-port"))
		359	{
		360	#if ENABLE_DNS
		361	conf.dns_forw_port = atoi (val);
		362	#endif
		363	}
		364	else if (!strcmp (var, "dns-timeout-factor"))
		365	{
		366	#if ENABLE_DNS
		367	conf.dns_timeout_factor = atof (val);
		368	#endif
		369	}
		370	else if (!strcmp (var, "dns-send-interval"))
		371	{
		372	#if ENABLE_DNS
		373	conf.dns_send_interval = atoi (val);
		374	#endif
		375	}
		376	else if (!strcmp (var, "dns-overlap-factor"))
		377	{
		378	#if ENABLE_DNS
		379	conf.dns_overlap_factor = atof (val);
		380	#endif
		381	}
		382	else if (!strcmp (var, "dns-max-outstanding"))
		383	{
		384	#if ENABLE_DNS
		385	conf.dns_max_outstanding = atoi (val);
		386	#endif
		387	}
		388	else if (!strcmp (var, "http-proxy-host"))
		389	{
		390	#if ENABLE_HTTP_PROXY
		391	free (conf.proxy_host), conf.proxy_host = strdup (val);
		392	#endif
		393	}
		394	else if (!strcmp (var, "http-proxy-port"))
		395	{
		396	#if ENABLE_HTTP_PROXY
		397	conf.proxy_port = atoi (val);
		398	#endif
		399	}
		400	else if (!strcmp (var, "http-proxy-auth"))
		401	{
		402	#if ENABLE_HTTP_PROXY
		403	conf.proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		404	#endif
		405	}
		406
		407	/* node-specific, non-defaultable */
		408	else if (node != &conf.default_node && !strcmp (var, "hostname"))
		409	free (node->hostname), node->hostname = strdup (val);
		410
		411	/* node-specific, defaultable */
		412	else if (!strcmp (var, "udp-port"))
		413	node->udp_port = atoi (val);
		414	else if (!strcmp (var, "tcp-port"))
		415	node->tcp_port = atoi (val);
		416	else if (!strcmp (var, "dns-hostname"))
		417	{
		418	#if ENABLE_DNS
		419	free (node->dns_hostname), node->dns_hostname = strdup (val);
		420	#endif
		421	}
		422	else if (!strcmp (var, "dns-port"))
		423	{
		424	#if ENABLE_DNS
		425	node->dns_port = atoi (val);
		426	#endif
		427	}
		428	else if (!strcmp (var, "dns-domain"))
		429	{
		430	#if ENABLE_DNS
		431	free (node->domain), node->domain = strdup (val);
		432	#endif
		433	}
		434	else if (!strcmp (var, "if-up-data"))
		435	free (node->if_up_data), node->if_up_data = strdup (val);
		436	else if (!strcmp (var, "router-priority"))
		437	node->routerprio = atoi (val);
		438	else if (!strcmp (var, "max-retry"))
		439	node->max_retry = atoi (val);
		440	else if (!strcmp (var, "connect"))
		441	{
		442	if (!strcmp (val, "ondemand"))
		443	node->connectmode = conf_node::C_ONDEMAND;
		444	else if (!strcmp (val, "never"))
		445	node->connectmode = conf_node::C_NEVER;
		446	else if (!strcmp (val, "always"))
		447	node->connectmode = conf_node::C_ALWAYS;
		448	else if (!strcmp (val, "disabled"))
		449	node->connectmode = conf_node::C_DISABLED;
		450	else
		451	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)");
		452	}
		453	else if (!strcmp (var, "inherit-tos"))
		454	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		455	else if (!strcmp (var, "compress"))
		456	parse_bool (node->compress, "compress", true, false);
		457	// all these bool options really really cost a lot of executable size!
		458	else if (!strcmp (var, "enable-tcp"))
		459	{
		460	#if ENABLE_TCP
		461	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		462	#endif
		463	}
		464	else if (!strcmp (var, "enable-icmp"))
		465	{
		466	#if ENABLE_ICMP
		467	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		468	#endif
		469	}
		470	else if (!strcmp (var, "enable-dns"))
		471	{
		472	#if ENABLE_DNS
		473	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		474	#endif
		475	}
		476	else if (!strcmp (var, "enable-udp"))
		477	{
		478	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		479	}
		480	else if (!strcmp (var, "enable-rawip"))
		481	{
		482	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		483	}
		484	else if (!strcmp (var, "allow-direct"))
		485	node->allow_direct.push_back (strdup (val));
		486	else if (!strcmp (var, "deny-direct"))
		487	node->deny_direct.push_back (strdup (val));
		488	else if (!strcmp (var, "max-ttl"))
		489	node->max_ttl = atof (val);
		490	else if (!strcmp (var, "max-queue"))
		491	node->max_queue = atoi (val);
		492
		493	// unknown or misplaced
		494	else
		495	return _("unknown configuration directive. (ignored)");
		496
		497	return 0;
		498	}
		499
		500	void conf_node::finalise ()
		501	{
		502	if (max_queue < 1)
		503	{
		504	slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename);
		505	max_queue = 1;
		506	}
		507
		508	if (routerprio > 1 && (connectmode != C_ALWAYS && connectmode != C_DISABLED))
		509	{
		510	//slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename);
		511	connectmode = C_ALWAYS;
		512	}
		513	}
		514
		515	void configuration_parser::parse_argv ()
		516	{
		517	for (int i = 0; i < argc; ++i)
		518	{
		519	char *v = argv [i];
		520
		521	if (!*v)
		522	continue;
		523
		524	char *enode = v;
		525
		526	while (enode != '.' && enode > ' ' && enode != '=' && enode)
		527	enode++;
		528
		529	if (*enode != '.')
		530	enode = 0;
		531
		532	char *wnode = node == &conf.default_node
		533	? 0
		534	: node->nodename;
		535
		536	if ((!wnode && !enode)
		537	\|\| (wnode && enode && !strncmp (wnode, v, enode - v)))
		538	{
		539	const char *warn = parse_line (enode ? enode + 1 : v);
		540
		541	if (warn)
		542	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
		543
		544	*v = 0;
		545	}
		546	}
		547	}
		548
		549	configuration_parser::configuration_parser (configuration &conf,
		550	bool need_keys,
		551	int argc,
		552	char **argv)
		553	: conf (conf),need_keys (need_keys), argc (argc), argv (argv)
157	{	554	{
158	char *fname;	555	char *fname;
159	FILE *f;	556	FILE *f;
160		557
161	clear_config ();	558	conf.clear ();
162		559
163	asprintf (&fname, "%s/vped.conf", confbase);	560	asprintf (&fname, "%s/gvpe.conf", confbase);
164	f = fopen (fname, "r");	561	f = fopen (fname, "r");
165		562
166	if (f)	563	if (f)
167	{	564	{
168	char line[16384];	565	char line[16384];
169	int lineno = 0;	566	int lineno = 0;
170	char var, val;	567	node = &conf.default_node;
171	conf_node *node = &default_node;
172		568
173	while (fgets (line, sizeof (line), f))	569	while (fgets (line, sizeof (line), f))
174	{	570	{
175	lineno++;	571	lineno++;
176		572
177	{	573	const char *warn = parse_line (line);
178	char *end = line + strlen (line);
179		574
180	while (*end < ' ' && end >= line)	575	if (warn)
181	end--;	576	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
182
183	*++end = 0;
184	}
185
186	char *tok = line;
187
188	retry:
189	var = strtok (tok, "\t =");
190	tok = 0;
191
192	if (!var \|\| !var[0])
193	continue; /* no tokens on this line */
194
195	if (var[0] == '#')
196	continue; /* comment: ignore */
197
198	val = strtok (NULL, "\t\n\r =");
199
200	if (!val \|\| val[0] == '#')
201	{
202	slog (L_WARN,
203	_("no value for variable `%s', at '%s' line %d"),
204	var, fname, lineno);
205	break;
206	}
207
208	if (!strcmp (var, "on"))
209	{
210	if (!::thisnode
211	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
212	\|\| !strcmp (val, ::thisnode))
213	goto retry;
214
215	continue;
216	}
217
218	// truly global
219	if (!strcmp (var, "loglevel"))
220	{
221	loglevel l = string_to_loglevel (val);
222
223	if (l != L_NONE)
224	llevel = l;
225	else
226	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
227	}
228	else if (!strcmp (var, "ip-proto"))
229	ip_proto = atoi (val);
230	else if (!strcmp (var, "icmp-type"))
231	{
232	#if ENABLE_ICMP
233	icmp_type = atoi (val);
234	#endif
235	}
236
237	// per config
238	else if (!strcmp (var, "node"))
239	{
240	default_node.id++;
241
242	node = new conf_node (default_node);
243
244	nodes.push_back (node);
245
246	node->nodename = strdup (val);
247
248	{
249	char *fname;
250	FILE *f;
251
252	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
253
254	f = fopen (fname, "r");
255	if (f)
256	{
257	node->rsa_key = RSA_new ();
258
259	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
260	{
261	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
262	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
263	exit (1);
264	}
265
266	RSA_blinding_on (node->rsa_key, 0);
267
268	fclose (f);
269	}
270	else
271	{
272	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
273
274	if (need_keys)
275	exit (1);
276	}
277
278	free (fname);
279	}
280
281	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
282	thisnode = node;
283	}
284	else if (!strcmp (var, "private-key"))
285	prikeyfile = strdup (val);
286	else if (!strcmp (var, "ifpersist"))
287	{
288	parse_bool (ifpersist, "ifpersist", true, false);
289	}
290	else if (!strcmp (var, "ifname"))
291	ifname = strdup (val);
292	else if (!strcmp (var, "rekey"))
293	rekey = atoi (val);
294	else if (!strcmp (var, "keepalive"))
295	keepalive = atoi (val);
296	else if (!strcmp (var, "mtu"))
297	mtu = atoi (val);
298	else if (!strcmp (var, "if-up"))
299	script_if_up = strdup (val);
300	else if (!strcmp (var, "node-up"))
301	script_node_up = strdup (val);
302	else if (!strcmp (var, "node-down"))
303	script_node_down = strdup (val);
304	else if (!strcmp (var, "http-proxy-host"))
305	{
306	#if ENABLE_HTTP_PROXY
307	proxy_host = strdup (val);
308	#endif
309	}
310	else if (!strcmp (var, "http-proxy-port"))
311	{
312	#if ENABLE_HTTP_PROXY
313	proxy_port = atoi (val);
314	#endif
315	}
316	else if (!strcmp (var, "http-proxy-auth"))
317	{
318	#if ENABLE_HTTP_PROXY
319	proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
320	#endif
321	}
322
323	/* node-specific, non-defaultable */
324	else if (node != &default_node && !strcmp (var, "hostname"))
325	{
326	free (node->hostname);
327	node->hostname = strdup (val);
328	}
329
330	/* node-specific, defaultable */
331	else if (!strcmp (var, "udp-port"))
332	node->udp_port = atoi (val);
333	else if (!strcmp (var, "tcp-port"))
334	node->tcp_port = atoi (val);
335	else if (!strcmp (var, "router-priority"))
336	node->routerprio = atoi (val);
337	else if (!strcmp (var, "connect"))
338	{
339	if (!strcmp (val, "ondemand"))
340	node->connectmode = conf_node::C_ONDEMAND;
341	else if (!strcmp (val, "never"))
342	node->connectmode = conf_node::C_NEVER;
343	else if (!strcmp (val, "always"))
344	node->connectmode = conf_node::C_ALWAYS;
345	else if (!strcmp (val, "disabled"))
346	node->connectmode = conf_node::C_DISABLED;
347	else
348	slog (L_WARN,
349	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
350	var, fname, lineno);
351	}
352	else if (!strcmp (var, "inherit-tos"))
353	{
354	parse_bool (node->inherit_tos, "inherit-tos", true, false);
355	}
356	else if (!strcmp (var, "compress"))
357	{
358	parse_bool (node->compress, "compress", true, false);
359	}
360	// all these bool options really really cost a lot of executable size!
361	else if (!strcmp (var, "enable-tcp"))
362	{
363	#if ENABLE_TCP
364	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
365	#endif
366	}
367	else if (!strcmp (var, "enable-icmp"))
368	{
369	#if ENABLE_ICMP
370	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
371	#endif
372	}
373	else if (!strcmp (var, "enable-udp"))
374	{
375	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
376	}
377	else if (!strcmp (var, "enable-rawip"))
378	{
379	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
380	}
381
382	// unknown or misplaced
383	else
384	slog (L_WARN,
385	_("unknown or misplaced variable `%s', at '%s' line %d"),
386	var, fname, lineno);
387	}	577	}
388		578
389	fclose (f);	579	fclose (f);
		580
		581	parse_argv ();
390	}	582	}
391	else	583	else
392	{	584	{
393	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));	585	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
394	exit (1);	586	exit (EXIT_FAILURE);
395	}	587	}
396		588
397	free (fname);	589	free (fname);
398		590
399	fname = config_filename (prikeyfile, "hostkey");	591	fname = conf.config_filename (conf.prikeyfile, "hostkey");
400		592
401	f = fopen (fname, "r");	593	f = fopen (fname, "r");
402	if (f)	594	if (f)
403	{	595	{
404	rsa_key = RSA_new ();	596	conf.rsa_key = RSA_new ();
405		597
406	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))	598	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
407	{	599	{
408	ERR_load_RSA_strings (); ERR_load_PEM_strings ();	600	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
409	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));	601	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
410	exit (1);	602	exit (EXIT_FAILURE);
411	}	603	}
412		604
413	RSA_blinding_on (rsa_key, 0);	605	require (RSA_blinding_on (conf.rsa_key, 0));
414		606
415	fclose (f);	607	fclose (f);
416	}	608	}
417	else	609	else
418	{	610	{
419	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));	611	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
420		612
421	if (need_keys)	613	if (need_keys)
422	exit (1);	614	exit (EXIT_FAILURE);
		615	}
		616
		617	if (need_keys && ::thisnode
		618	&& conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
		619	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
		620	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
		621	{
		622	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		623	exit (EXIT_FAILURE);
423	}	624	}
424		625
425	free (fname);	626	free (fname);
		627
		628	for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
		629	(*i)->finalise ();
426	}	630	}
427		631
428	char configuration::config_filename (const char name, const char *dflt)	632	char configuration::config_filename (const char name, const char *dflt)
429	{	633	{
430	char *fname;	634	char *fname;
…		…
464	printf ("\n");	668	printf ("\n");
465	}	669	}
466		670
467	configuration::configuration ()	671	configuration::configuration ()
468	{	672	{
		673	asprintf (&confbase, "%s/gvpe", CONFDIR);
		674
469	init ();	675	init ();
470	}	676	}
471		677
472	configuration::~configuration ()	678	configuration::~configuration ()
473	{	679	{

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.20 by pcg, Thu Oct 16 21:57:54 2003 UTC vs. Revision 1.51 by pcg, Sat Jul 18 05:59:16 2009 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.20 by pcg, Thu Oct 16 21:57:54 2003 UTC vs.
Revision 1.51 by pcg, Sat Jul 18 05:59:16 2009 UTC