ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/conf.C
(Generate patch)

Comparing gvpe/src/conf.C (file contents):
Revision 1.10 by pcg, Wed Apr 2 21:02:25 2003 UTC vs.
Revision 1.37 by pcg, Wed Mar 23 14:33:34 2005 UTC

1/* 1/*
2 conf.c -- configuration code 2 conf.c -- configuration code
3 Copyright (C) 1998 Robert van der Meulen 3 Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4 1998-2002 Ivo Timmermans <ivo@o2w.nl>
5 2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6 2000 Cris van Pelt <tribbel@arise.dhs.org>
7 2003 Marc Lehmann <pcg@goof.com>
8 4
5 This file is part of GVPE.
6
9 This program is free software; you can redistribute it and/or modify 7 GVPE is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by 8 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or 9 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version. 10 (at your option) any later version.
13 11
14 This program is distributed in the hope that it will be useful, 12 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of 13 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details. 15 GNU General Public License for more details.
18 16
19 You should have received a copy of the GNU General Public License 17 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software 18 along with gvpe; if not, write to the Free Software
21 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 19 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22*/ 20*/
23 21
24#include "config.h" 22#include "config.h"
25 23
… …
31#include <netdb.h> 29#include <netdb.h>
32#include <sys/stat.h> 30#include <sys/stat.h>
33#include <sys/types.h> 31#include <sys/types.h>
34#include <unistd.h> 32#include <unistd.h>
35 33
36#include <netinet/in.h> 34#include "netcompat.h"
37 35
38#include <openssl/err.h> 36#include <openssl/err.h>
39#include <openssl/pem.h> 37#include <openssl/pem.h>
40#include <openssl/rsa.h> 38#include <openssl/rsa.h>
41#include <openssl/rand.h> 39#include <openssl/rand.h>
42 40#include <openssl/bn.h>
43#include "gettext.h"
44 41
45#include "conf.h" 42#include "conf.h"
46#include "slog.h" 43#include "slog.h"
47#include "util.h" 44#include "util.h"
48 45
49char *confbase; 46char *confbase;
50char *thisnode; 47char *thisnode;
51char *identname; 48char *identname;
52char *pidfilename;
53 49
54struct configuration conf; 50struct configuration conf;
55 51
56u8 best_protocol (u8 protset) 52u8 best_protocol (u8 protset)
57{ 53{
58 if (protset & PROT_IPv4 ) return PROT_IPv4; 54 if (protset & PROT_IPv4 ) return PROT_IPv4;
55 if (protset & PROT_ICMPv4) return PROT_ICMPv4;
59 if (protset & PROT_UDPv4) return PROT_UDPv4; 56 if (protset & PROT_UDPv4 ) return PROT_UDPv4;
60 if (protset & PROT_TCPv4) return PROT_TCPv4; 57 if (protset & PROT_TCPv4 ) return PROT_TCPv4;
58 if (protset & PROT_DNSv4 ) return PROT_DNSv4;
61 59
62 return 0; 60 return 0;
63} 61}
64 62
65const char *strprotocol (u8 protocol) 63const char *strprotocol (u8 protocol)
66{ 64{
67 if (protocol & PROT_IPv4 ) return "rawip"; 65 if (protocol & PROT_IPv4 ) return "rawip";
66 if (protocol & PROT_ICMPv4) return "icmp";
68 if (protocol & PROT_UDPv4) return "udp"; 67 if (protocol & PROT_UDPv4 ) return "udp";
69 if (protocol & PROT_TCPv4) return "tcp"; 68 if (protocol & PROT_TCPv4 ) return "tcp";
69 if (protocol & PROT_DNSv4 ) return "dns";
70 70
71 return "<unknown>"; 71 return "<unknown>";
72}
73
74configuration::configuration ()
75{
76 init ();
77}
78
79configuration::~configuration ()
80{
81 cleanup ();
82}
83
84void configuration::init ()
85{
86 memset (this, 0, sizeof (*this));
87
88 rekey = DEFAULT_REKEY;
89 keepalive = DEFAULT_KEEPALIVE;
90 llevel = L_INFO;
91 ip_proto = IPPROTO_GRE;
92
93 default_node.udp_port = DEFAULT_UDPPORT;
94 default_node.tcp_port = DEFAULT_UDPPORT;
95 default_node.connectmode = conf_node::C_ALWAYS;
96 default_node.compress = true;
97 default_node.protocols = PROT_UDPv4;
98}
99
100void configuration::cleanup()
101{
102 if (rsa_key)
103 RSA_free (rsa_key);
104
105 free (ifname);
106
107 rsa_key = 0;
108 ifname = 0;
109}
110
111void
112configuration::clear_config ()
113{
114 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
115 delete *i;
116
117 nodes.clear ();
118
119 cleanup ();
120 init ();
121}
122
123#define parse_bool(target,name,trueval,falseval) \
124 if (!strcmp (val, "yes")) target = trueval; \
125 else if (!strcmp (val, "no")) target = falseval; \
126 else if (!strcmp (val, "true")) target = trueval; \
127 else if (!strcmp (val, "false")) target = falseval; \
128 else if (!strcmp (val, "on")) target = trueval; \
129 else if (!strcmp (val, "off")) target = falseval; \
130 else \
131 slog (L_WARN, \
132 _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
133 name, var, fname, lineno);
134
135void configuration::read_config (bool need_keys)
136{
137 char *fname;
138 FILE *f;
139
140 clear_config ();
141
142 asprintf (&fname, "%s/vped.conf", confbase);
143 f = fopen (fname, "r");
144
145 if (f)
146 {
147 char line[16384];
148 int lineno = 0;
149 char *var, *val;
150 conf_node *node = &default_node;
151
152 while (fgets (line, sizeof (line), f))
153 {
154 lineno++;
155
156 {
157 char *end = line + strlen (line);
158
159 while (*end < ' ' && end >= line)
160 end--;
161
162 *++end = 0;
163 }
164
165 char *tok = line;
166
167retry:
168 var = strtok (tok, "\t =");
169 tok = 0;
170
171 if (!var || !var[0])
172 continue; /* no tokens on this line */
173
174 if (var[0] == '#')
175 continue; /* comment: ignore */
176
177 val = strtok (NULL, "\t\n\r =");
178
179 if (!val || val[0] == '#')
180 {
181 slog (L_WARN,
182 _("no value for variable `%s', at '%s' line %d"),
183 var, fname, lineno);
184 break;
185 }
186
187 if (!strcmp (var, "on"))
188 {
189 if (!::thisnode
190 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
191 || !strcmp (val, ::thisnode))
192 goto retry;
193
194 continue;
195 }
196
197 // truly global
198 if (!strcmp (var, "loglevel"))
199 {
200 loglevel l = string_to_loglevel (val);
201
202 if (l != L_NONE)
203 llevel = l;
204 else
205 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
206 }
207 else if (!strcmp (var, "ip-proto"))
208 ip_proto = atoi (val);
209
210 // per config
211 else if (!strcmp (var, "node"))
212 {
213 default_node.id++;
214
215 node = new conf_node (default_node);
216
217 nodes.push_back (node);
218
219 node->nodename = strdup (val);
220
221 {
222 char *fname;
223 FILE *f;
224
225 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
226
227 f = fopen (fname, "r");
228 if (f)
229 {
230 node->rsa_key = RSA_new ();
231
232 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
233 {
234 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
235 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
236 exit (1);
237 }
238
239 RSA_blinding_on (node->rsa_key, 0);
240
241 fclose (f);
242 }
243 else
244 {
245 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
246
247 if (need_keys)
248 exit (1);
249 }
250
251 free (fname);
252 }
253
254 if (!::thisnode || !strcmp (node->nodename, ::thisnode))
255 thisnode = node;
256 }
257 else if (!strcmp (var, "private-key"))
258 prikeyfile = strdup (val);
259 else if (!strcmp (var, "ifpersist"))
260 {
261 parse_bool (ifpersist, "ifpersist", true, false);
262 }
263 else if (!strcmp (var, "ifname"))
264 ifname = strdup (val);
265 else if (!strcmp (var, "rekey"))
266 rekey = atoi (val);
267 else if (!strcmp (var, "keepalive"))
268 keepalive = atoi (val);
269 else if (!strcmp (var, "mtu"))
270 mtu = atoi (val);
271 else if (!strcmp (var, "if-up"))
272 script_if_up = strdup (val);
273 else if (!strcmp (var, "node-up"))
274 script_node_up = strdup (val);
275 else if (!strcmp (var, "node-down"))
276 script_node_down = strdup (val);
277
278 /* node-specific, non-defaultable */
279 else if (node != &default_node && !strcmp (var, "hostname"))
280 {
281 free (node->hostname);
282 node->hostname = strdup (val);
283 }
284
285 /* node-specific, defaultable */
286 else if (!strcmp (var, "udp-port"))
287 node->udp_port = atoi (val);
288 else if (!strcmp (var, "tcp-port"))
289 node->tcp_port = atoi (val);
290 else if (!strcmp (var, "router-priority"))
291 node->routerprio = atoi (val);
292 else if (!strcmp (var, "connect"))
293 {
294 if (!strcmp (val, "ondemand"))
295 node->connectmode = conf_node::C_ONDEMAND;
296 else if (!strcmp (val, "never"))
297 node->connectmode = conf_node::C_NEVER;
298 else if (!strcmp (val, "always"))
299 node->connectmode = conf_node::C_ALWAYS;
300 else if (!strcmp (val, "disabled"))
301 node->connectmode = conf_node::C_DISABLED;
302 else
303 slog (L_WARN,
304 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
305 var, fname, lineno);
306 }
307 else if (!strcmp (var, "inherit-tos"))
308 {
309 parse_bool (node->inherit_tos, "inherit-tos", true, false);
310 }
311 else if (!strcmp (var, "compress"))
312 {
313 parse_bool (node->compress, "compress", true, false);
314 }
315 // all these bool options really really cost a lot of executable size!
316 else if (!strcmp (var, "enable-tcp"))
317 {
318 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
319 }
320 else if (!strcmp (var, "enable-udp"))
321 {
322 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
323 }
324 else if (!strcmp (var, "enable-rawip"))
325 {
326 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
327 }
328
329 // unknown or misplaced
330 else
331 {
332 slog (L_WARN,
333 _("unknown or misplaced variable `%s', at '%s' line %d"),
334 var, fname, lineno);
335 }
336 }
337
338 fclose (f);
339 }
340 else
341 {
342 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
343 exit (1);
344 }
345
346 free (fname);
347
348 fname = config_filename (prikeyfile, "hostkey");
349
350 f = fopen (fname, "r");
351 if (f)
352 {
353 rsa_key = RSA_new ();
354
355 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
356 {
357 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
358 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
359 exit (1);
360 }
361
362 RSA_blinding_on (rsa_key, 0);
363
364 fclose (f);
365 }
366 else
367 {
368 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
369
370 if (need_keys)
371 exit (1);
372 }
373
374 free (fname);
375}
376
377char *configuration::config_filename (const char *name, const char *dflt)
378{
379 char *fname;
380
381 asprintf (&fname, name ? name : dflt, ::thisnode);
382
383 if (!ABSOLUTE_PATH (fname))
384 {
385 char *rname = fname;
386 asprintf (&fname, "%s/%s", confbase, rname);
387 free (rname);
388 }
389
390 return fname;
391}
392
393void
394configuration::print ()
395{
396 printf (_("\nConfiguration\n\n"));
397 printf (_("# of nodes: %d\n"), nodes.size ());
398 printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
399 printf (_("MTU: %d\n"), mtu);
400 printf (_("rekeying interval: %d\n"), rekey);
401 printf (_("keepalive interval: %d\n"), keepalive);
402 printf (_("interface: %s\n"), ifname);
403 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
404 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
405 printf ("\n");
406
407 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
408 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
409
410 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
411 (*i)->print ();
412
413 printf ("\n");
414} 72}
415 73
416void 74void
417conf_node::print () 75conf_node::print ()
418{ 76{
… …
428 hostname ? ":" : "", 86 hostname ? ":" : "",
429 hostname ? udp_port : 0 87 hostname ? udp_port : 0
430 ); 88 );
431} 89}
432 90
91conf_node::~conf_node ()
92{
93 if (rsa_key)
94 RSA_free (rsa_key);
95
96 free (nodename);
97 free (hostname);
98#if ENABLE_DNS
99 free (domain);
100 free (dns_hostname);
101#endif
102}
103
104void configuration::init ()
105{
106 memset (this, 0, sizeof (*this));
107
108 mtu = DEFAULT_MTU;
109 rekey = DEFAULT_REKEY;
110 keepalive = DEFAULT_KEEPALIVE;
111 llevel = L_INFO;
112 ip_proto = IPPROTO_GRE;
113#if ENABLE_ICMP
114 icmp_type = ICMP_ECHOREPLY;
115#endif
116
117 default_node.udp_port = DEFAULT_UDPPORT;
118 default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
119 default_node.connectmode = conf_node::C_ALWAYS;
120 default_node.compress = true;
121 default_node.protocols = 0;
122 default_node.max_retry = DEFAULT_MAX_RETRY;
123
124#if ENABLE_DNS
125 default_node.dns_port = 0; // default is 0 == client
126 dns_forw_host = strdup ("127.0.0.1");
127 dns_forw_port = 53;
128#endif
129
130 conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
131}
132
133void configuration::cleanup()
134{
135 if (rsa_key)
136 RSA_free (rsa_key);
137
138 rsa_key = 0;
139
140 free (pidfilename); pidfilename = 0;
141 free (ifname); ifname = 0;
142#if ENABLE_HTTP_PROXY
143 free (proxy_host); proxy_host = 0;
144 free (proxy_auth); proxy_auth = 0;
145#endif
146#if ENABLE_DNS
147 free (dns_forw_host); dns_forw_host = 0;
148#endif
149}
150
151void
152configuration::clear_config ()
153{
154 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
155 delete *i;
156
157 nodes.clear ();
158
159 cleanup ();
160 init ();
161}
162
163#define parse_bool(target,name,trueval,falseval) do { \
164 if (!strcmp (val, "yes")) target = trueval; \
165 else if (!strcmp (val, "no")) target = falseval; \
166 else if (!strcmp (val, "true")) target = trueval; \
167 else if (!strcmp (val, "false")) target = falseval; \
168 else if (!strcmp (val, "on")) target = trueval; \
169 else if (!strcmp (val, "off")) target = falseval; \
170 else \
171 slog (L_WARN, \
172 _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
173 name, var, fname, lineno); \
174} while (0)
175
176void configuration::read_config (bool need_keys)
177{
178 char *fname;
179 FILE *f;
180
181 clear_config ();
182
183 asprintf (&fname, "%s/gvpe.conf", confbase);
184 f = fopen (fname, "r");
185
186 if (f)
187 {
188 char line[16384];
189 int lineno = 0;
190 char *var, *val;
191 conf_node *node = &default_node;
192
193 while (fgets (line, sizeof (line), f))
194 {
195 lineno++;
196
197 {
198 char *end = line + strlen (line);
199
200 while (*end < ' ' && end >= line)
201 end--;
202
203 *++end = 0;
204 }
205
206 char *tok = line;
207
208retry:
209 var = strtok (tok, "\t =");
210 tok = 0;
211
212 if (!var || !var[0])
213 continue; /* no tokens on this line */
214
215 if (var[0] == '#')
216 continue; /* comment: ignore */
217
218 val = strtok (NULL, "\t\n\r =");
219
220 if (!val || val[0] == '#')
221 {
222 slog (L_WARN,
223 _("no value for variable `%s', at '%s' line %d, skipping."),
224 var, fname, lineno);
225 continue;
226 }
227
228 if (!strcmp (var, "on"))
229 {
230 if (!::thisnode
231 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
232 || !strcmp (val, ::thisnode))
233 goto retry;
234
235 continue;
236 }
237
238 // truly global
239 if (!strcmp (var, "loglevel"))
240 {
241 loglevel l = string_to_loglevel (val);
242
243 if (l != L_NONE)
244 llevel = l;
245 else
246 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
247 }
248 else if (!strcmp (var, "ip-proto"))
249 ip_proto = atoi (val);
250 else if (!strcmp (var, "icmp-type"))
251 {
252#if ENABLE_ICMP
253 icmp_type = atoi (val);
254#endif
255 }
256
257 // per config
258 else if (!strcmp (var, "node"))
259 {
260 default_node.id++;
261
262 node = new conf_node (default_node);
263
264 nodes.push_back (node);
265
266 node->nodename = strdup (val);
267
268 {
269 char *fname;
270 FILE *f;
271
272 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
273
274 f = fopen (fname, "r");
275 if (f)
276 {
277 node->rsa_key = RSA_new ();
278
279 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
280 {
281 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
282 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
283 exit (EXIT_FAILURE);
284 }
285
286 require (RSA_blinding_on (node->rsa_key, 0));
287
288 fclose (f);
289 }
290 else
291 {
292 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
293
294 if (need_keys)
295 exit (EXIT_FAILURE);
296 }
297
298 free (fname);
299 }
300
301 if (::thisnode && !strcmp (node->nodename, ::thisnode))
302 thisnode = node;
303 }
304 else if (!strcmp (var, "private-key"))
305 free (prikeyfile), prikeyfile = strdup (val);
306 else if (!strcmp (var, "ifpersist"))
307 parse_bool (ifpersist, "ifpersist", true, false);
308 else if (!strcmp (var, "ifname"))
309 free (ifname), ifname = strdup (val);
310 else if (!strcmp (var, "rekey"))
311 rekey = atoi (val);
312 else if (!strcmp (var, "keepalive"))
313 keepalive = atoi (val);
314 else if (!strcmp (var, "mtu"))
315 mtu = atoi (val);
316 else if (!strcmp (var, "if-up"))
317 free (script_if_up), script_if_up = strdup (val);
318 else if (!strcmp (var, "node-up"))
319 free (script_node_up), script_node_up = strdup (val);
320 else if (!strcmp (var, "node-down"))
321 free (script_node_down), script_node_down = strdup (val);
322 else if (!strcmp (var, "pid-file"))
323 free (pidfilename), pidfilename = strdup (val);
324 else if (!strcmp (var, "dns-forw-host"))
325 {
326#if ENABLE_DNS
327 free (dns_forw_host), dns_forw_host = strdup (val);
328#endif
329 }
330 else if (!strcmp (var, "dns-forw-port"))
331 {
332#if ENABLE_DNS
333 dns_forw_port = atoi (val);
334#endif
335 }
336 else if (!strcmp (var, "http-proxy-host"))
337 {
338#if ENABLE_HTTP_PROXY
339 free (proxy_host), proxy_host = strdup (val);
340#endif
341 }
342 else if (!strcmp (var, "http-proxy-port"))
343 {
344#if ENABLE_HTTP_PROXY
345 proxy_port = atoi (val);
346#endif
347 }
348 else if (!strcmp (var, "http-proxy-auth"))
349 {
350#if ENABLE_HTTP_PROXY
351 proxy_auth = (char *)base64_encode ((const u8 *)val, strlen (val));
352#endif
353 }
354
355 /* node-specific, non-defaultable */
356 else if (node != &default_node && !strcmp (var, "hostname"))
357 free (node->hostname), node->hostname = strdup (val);
358
359 /* node-specific, defaultable */
360 else if (!strcmp (var, "udp-port"))
361 node->udp_port = atoi (val);
362 else if (!strcmp (var, "tcp-port"))
363 node->tcp_port = atoi (val);
364 else if (!strcmp (var, "dns-hostname"))
365 {
366#if ENABLE_DNS
367 free (node->dns_hostname), node->dns_hostname = strdup (val);
368#endif
369 }
370 else if (!strcmp (var, "dns-port"))
371 {
372#if ENABLE_DNS
373 node->dns_port = atoi (val);
374#endif
375 }
376 else if (!strcmp (var, "dns-domain"))
377 {
378#if ENABLE_DNS
379 free (node->domain), node->domain = strdup (val);
380#endif
381 }
382 else if (!strcmp (var, "router-priority"))
383 node->routerprio = atoi (val);
384 else if (!strcmp (var, "max-retry"))
385 node->max_retry = atoi (val);
386 else if (!strcmp (var, "connect"))
387 {
388 if (!strcmp (val, "ondemand"))
389 node->connectmode = conf_node::C_ONDEMAND;
390 else if (!strcmp (val, "never"))
391 node->connectmode = conf_node::C_NEVER;
392 else if (!strcmp (val, "always"))
393 node->connectmode = conf_node::C_ALWAYS;
394 else if (!strcmp (val, "disabled"))
395 node->connectmode = conf_node::C_DISABLED;
396 else
397 slog (L_WARN,
398 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d, ignoring."),
399 var, fname, lineno);
400 }
401 else if (!strcmp (var, "inherit-tos"))
402 parse_bool (node->inherit_tos, "inherit-tos", true, false);
403 else if (!strcmp (var, "compress"))
404 parse_bool (node->compress, "compress", true, false);
405 // all these bool options really really cost a lot of executable size!
406 else if (!strcmp (var, "enable-tcp"))
407 {
408#if ENABLE_TCP
409 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
410#endif
411 }
412 else if (!strcmp (var, "enable-icmp"))
413 {
414#if ENABLE_ICMP
415 u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) | v;
416#endif
417 }
418 else if (!strcmp (var, "enable-dns"))
419 {
420#if ENABLE_DNS
421 u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) | v;
422#endif
423 }
424 else if (!strcmp (var, "enable-udp"))
425 {
426 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
427 }
428 else if (!strcmp (var, "enable-rawip"))
429 {
430 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
431 }
432
433 // unknown or misplaced
434 else
435 slog (L_WARN,
436 _("unknown or misplaced variable `%s', at '%s' line %d, skipping."),
437 var, fname, lineno);
438 }
439
440 fclose (f);
441 }
442 else
443 {
444 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
445 exit (EXIT_FAILURE);
446 }
447
448 free (fname);
449
450 fname = config_filename (prikeyfile, "hostkey");
451
452 f = fopen (fname, "r");
453 if (f)
454 {
455 rsa_key = RSA_new ();
456
457 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
458 {
459 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
460 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
461 exit (EXIT_FAILURE);
462 }
463
464 require (RSA_blinding_on (rsa_key, 0));
465
466 fclose (f);
467 }
468 else
469 {
470 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
471
472 if (need_keys)
473 exit (EXIT_FAILURE);
474 }
475
476 if (need_keys && ::thisnode
477 && rsa_key && thisnode && thisnode->rsa_key)
478 if (BN_cmp (rsa_key->n, thisnode->rsa_key->n) != 0
479 || BN_cmp (rsa_key->e, thisnode->rsa_key->e) != 0)
480 {
481 slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
482 exit (EXIT_FAILURE);
483 }
484
485 free (fname);
486}
487
488char *configuration::config_filename (const char *name, const char *dflt)
489{
490 char *fname;
491
492 asprintf (&fname, name ? name : dflt, ::thisnode);
493
494 if (!ABSOLUTE_PATH (fname))
495 {
496 char *rname = fname;
497 asprintf (&fname, "%s/%s", confbase, rname);
498 free (rname);
499 }
500
501 return fname;
502}
503
504void
505configuration::print ()
506{
507 printf (_("\nConfiguration\n\n"));
508 printf (_("# of nodes: %d\n"), nodes.size ());
509 printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
510 printf (_("MTU: %d\n"), mtu);
511 printf (_("rekeying interval: %d\n"), rekey);
512 printf (_("keepalive interval: %d\n"), keepalive);
513 printf (_("interface: %s\n"), ifname);
514 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
515 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
516 printf ("\n");
517
518 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
519 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
520
521 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
522 (*i)->print ();
523
524 printf ("\n");
525}
526
527configuration::configuration ()
528{
529 asprintf (&confbase, "%s/gvpe", CONFDIR);
530
531 init ();
532}
533
534configuration::~configuration ()
535{
536 cleanup ();
537}
538
539

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines