[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.11 by pcg, Wed Apr 2 21:43:44 2003 UTC vs.
Revision 1.40 by pcg, Mon Mar 28 20:39:18 2005 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
		5	This file is part of GVPE.
		6
9	This program is free software; you can redistribute it and/or modify	7	GVPE is free software; you can redistribute it and/or modify
10	it under the terms of the GNU General Public License as published by	8	it under the terms of the GNU General Public License as published by
11	the Free Software Foundation; either version 2 of the License, or	9	the Free Software Foundation; either version 2 of the License, or
12	(at your option) any later version.	10	(at your option) any later version.
13		11
14	This program is distributed in the hope that it will be useful,	12	This program is distributed in the hope that it will be useful,
15	but WITHOUT ANY WARRANTY; without even the implied warranty of	13	but WITHOUT ANY WARRANTY; without even the implied warranty of
16	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the	14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17	GNU General Public License for more details.	15	GNU General Public License for more details.
18		16
19	You should have received a copy of the GNU General Public License	17	You should have received a copy of the GNU General Public License
20	along with this program; if not, write to the Free Software	18	along with gvpe; if not, write to the Free Software
21	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA	19	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22	*/	20	*/
23		21
24	#include "config.h"	22	#include "config.h"
25		23
31	#include <netdb.h>	29	#include <netdb.h>
32	#include <sys/stat.h>	30	#include <sys/stat.h>
33	#include <sys/types.h>	31	#include <sys/types.h>
34	#include <unistd.h>	32	#include <unistd.h>
35		33
36	#include <netinet/in.h>	34	#include "netcompat.h"
37		35
38	#include <openssl/err.h>	36	#include <openssl/err.h>
39	#include <openssl/pem.h>	37	#include <openssl/pem.h>
40	#include <openssl/rsa.h>	38	#include <openssl/rsa.h>
41	#include <openssl/rand.h>	39	#include <openssl/rand.h>
42		40	#include <openssl/bn.h>
43	#include "gettext.h"
44		41
45	#include "conf.h"	42	#include "conf.h"
46	#include "slog.h"	43	#include "slog.h"
47	#include "util.h"	44	#include "util.h"
48		45
49	char *confbase;	46	char *confbase;
50	char *thisnode;	47	char *thisnode;
51	char *identname;	48	char *identname;
52	char *pidfilename;
53		49
54	struct configuration conf;	50	struct configuration conf;
55		51
56	u8 best_protocol (u8 protset)	52	u8 best_protocol (u8 protset)
57	{	53	{
58	if (protset & PROT_IPv4 ) return PROT_IPv4;	54	if (protset & PROT_IPv4 ) return PROT_IPv4;
		55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
59	if (protset & PROT_UDPv4) return PROT_UDPv4;	56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
60	if (protset & PROT_TCPv4) return PROT_TCPv4;	57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		58	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
61		59
62	return 0;	60	return 0;
63	}	61	}
64		62
65	const char *strprotocol (u8 protocol)	63	const char *strprotocol (u8 protocol)
66	{	64	{
67	if (protocol & PROT_IPv4 ) return "rawip";	65	if (protocol & PROT_IPv4 ) return "rawip";
		66	if (protocol & PROT_ICMPv4) return "icmp";
68	if (protocol & PROT_UDPv4) return "udp";	67	if (protocol & PROT_UDPv4 ) return "udp";
69	if (protocol & PROT_TCPv4) return "tcp";	68	if (protocol & PROT_TCPv4 ) return "tcp";
		69	if (protocol & PROT_DNSv4 ) return "dns";
70		70
71	return "<unknown>";	71	return "<unknown>";
72	}
73
74	configuration::configuration ()
75	{
76	init ();
77	}
78
79	configuration::~configuration ()
80	{
81	cleanup ();
82	}
83
84	void configuration::init ()
85	{
86	memset (this, 0, sizeof (*this));
87
88	rekey = DEFAULT_REKEY;
89	keepalive = DEFAULT_KEEPALIVE;
90	llevel = L_INFO;
91	ip_proto = IPPROTO_GRE;
92
93	default_node.udp_port = DEFAULT_UDPPORT;
94	default_node.tcp_port = DEFAULT_UDPPORT;
95	default_node.connectmode = conf_node::C_ALWAYS;
96	default_node.compress = true;
97	default_node.protocols = PROT_UDPv4;
98	}
99
100	void configuration::cleanup()
101	{
102	if (rsa_key)
103	RSA_free (rsa_key);
104
105	free (ifname);
106
107	rsa_key = 0;
108	ifname = 0;
109	}
110
111	void
112	configuration::clear_config ()
113	{
114	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
115	delete *i;
116
117	nodes.clear ();
118
119	cleanup ();
120	init ();
121	}
122
123	#define parse_bool(target,name,trueval,falseval) \
124	if (!strcmp (val, "yes")) target = trueval; \
125	else if (!strcmp (val, "no")) target = falseval; \
126	else if (!strcmp (val, "true")) target = trueval; \
127	else if (!strcmp (val, "false")) target = falseval; \
128	else if (!strcmp (val, "on")) target = trueval; \
129	else if (!strcmp (val, "off")) target = falseval; \
130	else \
131	slog (L_WARN, \
132	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
133	name, var, fname, lineno);
134
135	void configuration::read_config (bool need_keys)
136	{
137	char *fname;
138	FILE *f;
139
140	clear_config ();
141
142	asprintf (&fname, "%s/vped.conf", confbase);
143	f = fopen (fname, "r");
144
145	if (f)
146	{
147	char line[16384];
148	int lineno = 0;
149	char var, val;
150	conf_node *node = &default_node;
151
152	while (fgets (line, sizeof (line), f))
153	{
154	lineno++;
155
156	{
157	char *end = line + strlen (line);
158
159	while (*end < ' ' && end >= line)
160	end--;
161
162	*++end = 0;
163	}
164
165	char *tok = line;
166
167	retry:
168	var = strtok (tok, "\t =");
169	tok = 0;
170
171	if (!var \|\| !var[0])
172	continue; /* no tokens on this line */
173
174	if (var[0] == '#')
175	continue; /* comment: ignore */
176
177	val = strtok (NULL, "\t\n\r =");
178
179	if (!val \|\| val[0] == '#')
180	{
181	slog (L_WARN,
182	_("no value for variable `%s', at '%s' line %d"),
183	var, fname, lineno);
184	break;
185	}
186
187	if (!strcmp (var, "on"))
188	{
189	if (!::thisnode
190	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
191	\|\| !strcmp (val, ::thisnode))
192	goto retry;
193
194	continue;
195	}
196
197	// truly global
198	if (!strcmp (var, "loglevel"))
199	{
200	loglevel l = string_to_loglevel (val);
201
202	if (l != L_NONE)
203	llevel = l;
204	else
205	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
206	}
207	else if (!strcmp (var, "ip-proto"))
208	ip_proto = atoi (val);
209
210	// per config
211	else if (!strcmp (var, "node"))
212	{
213	default_node.id++;
214
215	node = new conf_node (default_node);
216
217	nodes.push_back (node);
218
219	node->nodename = strdup (val);
220
221	{
222	char *fname;
223	FILE *f;
224
225	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
226
227	f = fopen (fname, "r");
228	if (f)
229	{
230	node->rsa_key = RSA_new ();
231
232	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
233	{
234	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
235	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
236	exit (1);
237	}
238
239	RSA_blinding_on (node->rsa_key, 0);
240
241	fclose (f);
242	}
243	else
244	{
245	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
246
247	if (need_keys)
248	exit (1);
249	}
250
251	free (fname);
252	}
253
254	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
255	thisnode = node;
256	}
257	else if (!strcmp (var, "private-key"))
258	prikeyfile = strdup (val);
259	else if (!strcmp (var, "ifpersist"))
260	{
261	parse_bool (ifpersist, "ifpersist", true, false);
262	}
263	else if (!strcmp (var, "ifname"))
264	ifname = strdup (val);
265	else if (!strcmp (var, "rekey"))
266	rekey = atoi (val);
267	else if (!strcmp (var, "keepalive"))
268	keepalive = atoi (val);
269	else if (!strcmp (var, "mtu"))
270	mtu = atoi (val);
271	else if (!strcmp (var, "if-up"))
272	script_if_up = strdup (val);
273	else if (!strcmp (var, "node-up"))
274	script_node_up = strdup (val);
275	else if (!strcmp (var, "node-down"))
276	script_node_down = strdup (val);
277
278	/* node-specific, non-defaultable */
279	else if (node != &default_node && !strcmp (var, "hostname"))
280	{
281	free (node->hostname);
282	node->hostname = strdup (val);
283	}
284
285	/* node-specific, defaultable */
286	else if (!strcmp (var, "udp-port"))
287	node->udp_port = atoi (val);
288	else if (!strcmp (var, "tcp-port"))
289	node->tcp_port = atoi (val);
290	else if (!strcmp (var, "router-priority"))
291	node->routerprio = atoi (val);
292	else if (!strcmp (var, "connect"))
293	{
294	if (!strcmp (val, "ondemand"))
295	node->connectmode = conf_node::C_ONDEMAND;
296	else if (!strcmp (val, "never"))
297	node->connectmode = conf_node::C_NEVER;
298	else if (!strcmp (val, "always"))
299	node->connectmode = conf_node::C_ALWAYS;
300	else if (!strcmp (val, "disabled"))
301	node->connectmode = conf_node::C_DISABLED;
302	else
303	slog (L_WARN,
304	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
305	var, fname, lineno);
306	}
307	else if (!strcmp (var, "inherit-tos"))
308	{
309	parse_bool (node->inherit_tos, "inherit-tos", true, false);
310	}
311	else if (!strcmp (var, "compress"))
312	{
313	parse_bool (node->compress, "compress", true, false);
314	}
315	// all these bool options really really cost a lot of executable size!
316	else if (!strcmp (var, "enable-tcp"))
317	{
318	#if ENABLE_TCP
319	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
320	#endif
321	}
322	else if (!strcmp (var, "enable-udp"))
323	{
324	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
325	}
326	else if (!strcmp (var, "enable-rawip"))
327	{
328	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
329	}
330
331	// unknown or misplaced
332	else
333	{
334	slog (L_WARN,
335	_("unknown or misplaced variable `%s', at '%s' line %d"),
336	var, fname, lineno);
337	}
338	}
339
340	fclose (f);
341	}
342	else
343	{
344	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
345	exit (1);
346	}
347
348	free (fname);
349
350	fname = config_filename (prikeyfile, "hostkey");
351
352	f = fopen (fname, "r");
353	if (f)
354	{
355	rsa_key = RSA_new ();
356
357	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
358	{
359	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
360	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
361	exit (1);
362	}
363
364	RSA_blinding_on (rsa_key, 0);
365
366	fclose (f);
367	}
368	else
369	{
370	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
371
372	if (need_keys)
373	exit (1);
374	}
375
376	free (fname);
377	}
378
379	char configuration::config_filename (const char name, const char *dflt)
380	{
381	char *fname;
382
383	asprintf (&fname, name ? name : dflt, ::thisnode);
384
385	if (!ABSOLUTE_PATH (fname))
386	{
387	char *rname = fname;
388	asprintf (&fname, "%s/%s", confbase, rname);
389	free (rname);
390	}
391
392	return fname;
393	}
394
395	void
396	configuration::print ()
397	{
398	printf (_("\nConfiguration\n\n"));
399	printf (_("# of nodes: %d\n"), nodes.size ());
400	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
401	printf (_("MTU: %d\n"), mtu);
402	printf (_("rekeying interval: %d\n"), rekey);
403	printf (_("keepalive interval: %d\n"), keepalive);
404	printf (_("interface: %s\n"), ifname);
405	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
406	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
407	printf ("\n");
408
409	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
410	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
411
412	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
413	(*i)->print ();
414
415	printf ("\n");
416	}	72	}
417		73
418	void	74	void
419	conf_node::print ()	75	conf_node::print ()
420	{	76	{
…		…
430	hostname ? ":" : "",	86	hostname ? ":" : "",
431	hostname ? udp_port : 0	87	hostname ? udp_port : 0
432	);	88	);
433	}	89	}
434		90
		91	conf_node::~conf_node ()
		92	{
		93	#if 0
		94	// does not work, because string pointers etc. are shared
		95	// is not called, however
		96	if (rsa_key)
		97	RSA_free (rsa_key);
		98
		99	free (nodename);
		100	free (hostname);
		101	free (if_up_data);
		102	#if ENABLE_DNS
		103	free (domain);
		104	free (dns_hostname);
		105	#endif
		106	#endif
		107	}
		108
		109	void configuration::init ()
		110	{
		111	memset (this, 0, sizeof (*this));
		112
		113	mtu = DEFAULT_MTU;
		114	rekey = DEFAULT_REKEY;
		115	keepalive = DEFAULT_KEEPALIVE;
		116	llevel = L_INFO;
		117	ip_proto = IPPROTO_GRE;
		118	#if ENABLE_ICMP
		119	icmp_type = ICMP_ECHOREPLY;
		120	#endif
		121
		122	default_node.udp_port = DEFAULT_UDPPORT;
		123	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
		124	default_node.connectmode = conf_node::C_ALWAYS;
		125	default_node.compress = true;
		126	default_node.protocols = 0;
		127	default_node.max_retry = DEFAULT_MAX_RETRY;
		128	default_node.if_up_data = strdup ("");
		129
		130	#if ENABLE_DNS
		131	default_node.dns_port = 0; // default is 0 == client
		132
		133	dns_forw_host = strdup ("127.0.0.1");
		134	dns_forw_port = 53;
		135	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
		136	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
		137	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
		138	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
		139	#endif
		140
		141	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		142	}
		143
		144	void configuration::cleanup()
		145	{
		146	if (rsa_key)
		147	RSA_free (rsa_key);
		148
		149	rsa_key = 0;
		150
		151	free (pidfilename); pidfilename = 0;
		152	free (ifname); ifname = 0;
		153	#if ENABLE_HTTP_PROXY
		154	free (proxy_host); proxy_host = 0;
		155	free (proxy_auth); proxy_auth = 0;
		156	#endif
		157	#if ENABLE_DNS
		158	free (dns_forw_host); dns_forw_host = 0;
		159	#endif
		160	}
		161
		162	void
		163	configuration::clear ()
		164	{
		165	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
		166	delete *i;
		167
		168	nodes.clear ();
		169
		170	cleanup ();
		171	init ();
		172	}
		173
		174	#define parse_bool(target,name,trueval,falseval) do { \
		175	if (!strcmp (val, "yes")) target = trueval; \
		176	else if (!strcmp (val, "no")) target = falseval; \
		177	else if (!strcmp (val, "true")) target = trueval; \
		178	else if (!strcmp (val, "false")) target = falseval; \
		179	else if (!strcmp (val, "on")) target = trueval; \
		180	else if (!strcmp (val, "off")) target = falseval; \
		181	else \
		182	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed. (ignored)"); \
		183	} while (0)
		184
		185	const char *
		186	configuration_parser::parse_line (char *line)
		187	{
		188	{
		189	char *end = line + strlen (line);
		190
		191	while (*end < ' ' && end >= line)
		192	end--;
		193
		194	*++end = 0;
		195	}
		196
		197	char *tok = line;
		198	const char *var = strtok (tok, "\t =");
		199	tok = 0;
		200
		201	if (!var \|\| !var[0])
		202	return 0; /* no tokens on this line */
		203
		204	if (var[0] == '#')
		205	return 0; /* comment: ignore */
		206
		207	char *val = strtok (NULL, "\t\n\r =");
		208
		209	if (!val \|\| val[0] == '#')
		210	return _("no value given for variable. (ignored)");
		211
		212	if (!strcmp (var, "on"))
		213	{
		214	if (!::thisnode
		215	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		216	\|\| !strcmp (val, ::thisnode))
		217	return parse_line (strtok (NULL, "\n\r"));
		218	else
		219	return 0;
		220	}
		221
		222	// truly global
		223	if (!strcmp (var, "loglevel"))
		224	{
		225	loglevel l = string_to_loglevel (val);
		226
		227	if (l == L_NONE)
		228	return _("unknown loglevel. (skipping)");
		229	}
		230	else if (!strcmp (var, "ip-proto"))
		231	conf.ip_proto = atoi (val);
		232	else if (!strcmp (var, "icmp-type"))
		233	{
		234	#if ENABLE_ICMP
		235	conf.icmp_type = atoi (val);
		236	#endif
		237	}
		238
		239	// per config
		240	else if (!strcmp (var, "node"))
		241	{
		242	parse_argv ();
		243
		244	conf.default_node.id++;
		245	node = new conf_node (conf.default_node);
		246	conf.nodes.push_back (node);
		247	node->nodename = strdup (val);
		248
		249	{
		250	char *fname;
		251	FILE *f;
		252
		253	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		254
		255	f = fopen (fname, "r");
		256	if (f)
		257	{
		258	node->rsa_key = RSA_new ();
		259
		260	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		261	{
		262	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		263	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		264	exit (EXIT_FAILURE);
		265	}
		266
		267	require (RSA_blinding_on (node->rsa_key, 0));
		268
		269	fclose (f);
		270	}
		271	else
		272	{
		273	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		274
		275	if (need_keys)
		276	exit (EXIT_FAILURE);
		277	}
		278
		279	free (fname);
		280	}
		281
		282	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		283	conf.thisnode = node;
		284	}
		285	else if (!strcmp (var, "private-key"))
		286	free (conf.prikeyfile), conf.prikeyfile = strdup (val);
		287	else if (!strcmp (var, "ifpersist"))
		288	parse_bool (conf.ifpersist, "ifpersist", true, false);
		289	else if (!strcmp (var, "ifname"))
		290	free (conf.ifname), conf.ifname = strdup (val);
		291	else if (!strcmp (var, "rekey"))
		292	conf.rekey = atoi (val);
		293	else if (!strcmp (var, "keepalive"))
		294	conf.keepalive = atoi (val);
		295	else if (!strcmp (var, "mtu"))
		296	conf.mtu = atoi (val);
		297	else if (!strcmp (var, "if-up"))
		298	free (conf.script_if_up), conf.script_if_up = strdup (val);
		299	else if (!strcmp (var, "node-up"))
		300	free (conf.script_node_up), conf.script_node_up = strdup (val);
		301	else if (!strcmp (var, "node-down"))
		302	free (conf.script_node_down), conf.script_node_down = strdup (val);
		303	else if (!strcmp (var, "pid-file"))
		304	free (conf.pidfilename), conf.pidfilename = strdup (val);
		305	else if (!strcmp (var, "dns-forw-host"))
		306	{
		307	#if ENABLE_DNS
		308	free (conf.dns_forw_host), conf.dns_forw_host = strdup (val);
		309	#endif
		310	}
		311	else if (!strcmp (var, "dns-forw-port"))
		312	{
		313	#if ENABLE_DNS
		314	conf.dns_forw_port = atoi (val);
		315	#endif
		316	}
		317	else if (!strcmp (var, "dns-timeout-factor"))
		318	{
		319	#if ENABLE_DNS
		320	conf.dns_timeout_factor = atof (val);
		321	#endif
		322	}
		323	else if (!strcmp (var, "dns-send-interval"))
		324	{
		325	#if ENABLE_DNS
		326	conf.dns_send_interval = atoi (val);
		327	#endif
		328	}
		329	else if (!strcmp (var, "dns-overlap-factor"))
		330	{
		331	#if ENABLE_DNS
		332	conf.dns_overlap_factor = atof (val);
		333	#endif
		334	}
		335	else if (!strcmp (var, "dns-max-outstanding"))
		336	{
		337	#if ENABLE_DNS
		338	conf.dns_max_outstanding = atoi (val);
		339	#endif
		340	}
		341	else if (!strcmp (var, "http-proxy-host"))
		342	{
		343	#if ENABLE_HTTP_PROXY
		344	free (conf.proxy_host), conf.proxy_host = strdup (val);
		345	#endif
		346	}
		347	else if (!strcmp (var, "http-proxy-port"))
		348	{
		349	#if ENABLE_HTTP_PROXY
		350	conf.proxy_port = atoi (val);
		351	#endif
		352	}
		353	else if (!strcmp (var, "http-proxy-auth"))
		354	{
		355	#if ENABLE_HTTP_PROXY
		356	conf.proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		357	#endif
		358	}
		359
		360	/* node-specific, non-defaultable */
		361	else if (node != &conf.default_node && !strcmp (var, "hostname"))
		362	free (node->hostname), node->hostname = strdup (val);
		363
		364	/* node-specific, defaultable */
		365	else if (!strcmp (var, "udp-port"))
		366	node->udp_port = atoi (val);
		367	else if (!strcmp (var, "tcp-port"))
		368	node->tcp_port = atoi (val);
		369	else if (!strcmp (var, "dns-hostname"))
		370	{
		371	#if ENABLE_DNS
		372	free (node->dns_hostname), node->dns_hostname = strdup (val);
		373	#endif
		374	}
		375	else if (!strcmp (var, "dns-port"))
		376	{
		377	#if ENABLE_DNS
		378	node->dns_port = atoi (val);
		379	#endif
		380	}
		381	else if (!strcmp (var, "dns-domain"))
		382	{
		383	#if ENABLE_DNS
		384	free (node->domain), node->domain = strdup (val);
		385	#endif
		386	}
		387	else if (!strcmp (var, "if-up-data"))
		388	free (node->if_up_data), node->if_up_data = strdup (val);
		389	else if (!strcmp (var, "router-priority"))
		390	node->routerprio = atoi (val);
		391	else if (!strcmp (var, "max-retry"))
		392	node->max_retry = atoi (val);
		393	else if (!strcmp (var, "connect"))
		394	{
		395	if (!strcmp (val, "ondemand"))
		396	node->connectmode = conf_node::C_ONDEMAND;
		397	else if (!strcmp (val, "never"))
		398	node->connectmode = conf_node::C_NEVER;
		399	else if (!strcmp (val, "always"))
		400	node->connectmode = conf_node::C_ALWAYS;
		401	else if (!strcmp (val, "disabled"))
		402	node->connectmode = conf_node::C_DISABLED;
		403	else
		404	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)");
		405	}
		406	else if (!strcmp (var, "inherit-tos"))
		407	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		408	else if (!strcmp (var, "compress"))
		409	parse_bool (node->compress, "compress", true, false);
		410	// all these bool options really really cost a lot of executable size!
		411	else if (!strcmp (var, "enable-tcp"))
		412	{
		413	#if ENABLE_TCP
		414	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		415	#endif
		416	}
		417	else if (!strcmp (var, "enable-icmp"))
		418	{
		419	#if ENABLE_ICMP
		420	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		421	#endif
		422	}
		423	else if (!strcmp (var, "enable-dns"))
		424	{
		425	#if ENABLE_DNS
		426	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		427	#endif
		428	}
		429	else if (!strcmp (var, "enable-udp"))
		430	{
		431	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		432	}
		433	else if (!strcmp (var, "enable-rawip"))
		434	{
		435	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		436	}
		437
		438	// unknown or misplaced
		439	else
		440	return _("unknown configuration directive. (ignored)");
		441
		442	return 0;
		443	}
		444
		445	void configuration_parser::parse_argv ()
		446	{
		447	for (int i = 0; i < argc; ++i)
		448	{
		449	char *v = argv [i];
		450
		451	if (!*v)
		452	continue;
		453
		454	char *enode = v;
		455
		456	while (enode != '.' && enode > ' ' && enode != '=' && enode)
		457	enode++;
		458
		459	if (*enode != '.')
		460	enode = 0;
		461
		462	char *wnode = node == &conf.default_node
		463	? 0
		464	: node->nodename;
		465
		466	if ((!wnode && !enode)
		467	\|\| (wnode && enode && !strncmp (wnode, v, enode - v)))
		468	{
		469	const char *warn = parse_line (enode ? enode + 1 : v);
		470
		471	if (warn)
		472	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
		473
		474	*v = 0;
		475	}
		476	}
		477	}
		478
		479	configuration_parser::configuration_parser (configuration &conf,
		480	bool need_keys,
		481	int argc,
		482	char **argv)
		483	: conf (conf),need_keys (need_keys), argc (argc), argv (argv)
		484	{
		485	char *fname;
		486	FILE *f;
		487
		488	conf.clear ();
		489
		490	asprintf (&fname, "%s/gvpe.conf", confbase);
		491	f = fopen (fname, "r");
		492
		493	if (f)
		494	{
		495	char line[16384];
		496	int lineno = 0;
		497	node = &conf.default_node;
		498
		499	while (fgets (line, sizeof (line), f))
		500	{
		501	lineno++;
		502
		503	const char *warn = parse_line (line);
		504
		505	if (warn)
		506	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
		507	}
		508
		509	fclose (f);
		510
		511	parse_argv ();
		512	}
		513	else
		514	{
		515	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		516	exit (EXIT_FAILURE);
		517	}
		518
		519	free (fname);
		520
		521	fname = conf.config_filename (conf.prikeyfile, "hostkey");
		522
		523	f = fopen (fname, "r");
		524	if (f)
		525	{
		526	conf.rsa_key = RSA_new ();
		527
		528	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
		529	{
		530	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		531	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		532	exit (EXIT_FAILURE);
		533	}
		534
		535	require (RSA_blinding_on (conf.rsa_key, 0));
		536
		537	fclose (f);
		538	}
		539	else
		540	{
		541	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
		542
		543	if (need_keys)
		544	exit (EXIT_FAILURE);
		545	}
		546
		547	if (need_keys && ::thisnode
		548	&& conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
		549	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
		550	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
		551	{
		552	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		553	exit (EXIT_FAILURE);
		554	}
		555
		556	free (fname);
		557	}
		558
		559	char configuration::config_filename (const char name, const char *dflt)
		560	{
		561	char *fname;
		562
		563	asprintf (&fname, name ? name : dflt, ::thisnode);
		564
		565	if (!ABSOLUTE_PATH (fname))
		566	{
		567	char *rname = fname;
		568	asprintf (&fname, "%s/%s", confbase, rname);
		569	free (rname);
		570	}
		571
		572	return fname;
		573	}
		574
		575	void
		576	configuration::print ()
		577	{
		578	printf (_("\nConfiguration\n\n"));
		579	printf (_("# of nodes: %d\n"), nodes.size ());
		580	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
		581	printf (_("MTU: %d\n"), mtu);
		582	printf (_("rekeying interval: %d\n"), rekey);
		583	printf (_("keepalive interval: %d\n"), keepalive);
		584	printf (_("interface: %s\n"), ifname);
		585	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
		586	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
		587	printf ("\n");
		588
		589	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
		590	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
		591
		592	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
		593	(*i)->print ();
		594
		595	printf ("\n");
		596	}
		597
		598	configuration::configuration ()
		599	{
		600	asprintf (&confbase, "%s/gvpe", CONFDIR);
		601
		602	init ();
		603	}
		604
		605	configuration::~configuration ()
		606	{
		607	cleanup ();
		608	}
		609
		610

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.11 by pcg, Wed Apr 2 21:43:44 2003 UTC vs. Revision 1.40 by pcg, Mon Mar 28 20:39:18 2005 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.11 by pcg, Wed Apr 2 21:43:44 2003 UTC vs.
Revision 1.40 by pcg, Mon Mar 28 20:39:18 2005 UTC