ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/conf.C
(Generate patch)

Comparing gvpe/src/conf.C (file contents):
Revision 1.2 by pcg, Thu Mar 6 18:43:07 2003 UTC vs.
Revision 1.37 by pcg, Wed Mar 23 14:33:34 2005 UTC

1/* 1/*
2 conf.c -- configuration code 2 conf.c -- configuration code
3 Copyright (C) 1998 Robert van der Meulen 3 Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4 1998-2002 Ivo Timmermans <ivo@o2w.nl>
5 2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6 2000 Cris van Pelt <tribbel@arise.dhs.org>
7 2003 Marc Lehmann <pcg@goof.com>
8 4
5 This file is part of GVPE.
6
9 This program is free software; you can redistribute it and/or modify 7 GVPE is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by 8 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or 9 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version. 10 (at your option) any later version.
13 11
14 This program is distributed in the hope that it will be useful, 12 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of 13 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details. 15 GNU General Public License for more details.
18 16
19 You should have received a copy of the GNU General Public License 17 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software 18 along with gvpe; if not, write to the Free Software
21 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 19 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22*/ 20*/
23 21
24#include "config.h" 22#include "config.h"
25 23
… …
31#include <netdb.h> 29#include <netdb.h>
32#include <sys/stat.h> 30#include <sys/stat.h>
33#include <sys/types.h> 31#include <sys/types.h>
34#include <unistd.h> 32#include <unistd.h>
35 33
34#include "netcompat.h"
35
36#include <openssl/err.h> 36#include <openssl/err.h>
37#include <openssl/pem.h> 37#include <openssl/pem.h>
38#include <openssl/rsa.h> 38#include <openssl/rsa.h>
39#include <openssl/rand.h> 39#include <openssl/rand.h>
40 40#include <openssl/bn.h>
41#include "gettext.h"
42 41
43#include "conf.h" 42#include "conf.h"
44#include "slog.h" 43#include "slog.h"
45#include "util.h" 44#include "util.h"
46 45
47char *confbase; 46char *confbase;
48char *thisnode; 47char *thisnode;
49char *identname; 48char *identname;
50char *pidfilename;
51 49
52struct configuration conf; 50struct configuration conf;
53 51
54configuration::configuration () 52u8 best_protocol (u8 protset)
55{ 53{
56 init (); 54 if (protset & PROT_IPv4 ) return PROT_IPv4;
57} 55 if (protset & PROT_ICMPv4) return PROT_ICMPv4;
56 if (protset & PROT_UDPv4 ) return PROT_UDPv4;
57 if (protset & PROT_TCPv4 ) return PROT_TCPv4;
58 if (protset & PROT_DNSv4 ) return PROT_DNSv4;
58 59
59configuration::~configuration ()
60{
61 cleanup ();
62}
63
64void configuration::init ()
65{
66 memset (this, 0, sizeof (*this));
67
68 rekey = DEFAULT_REKEY;
69 keepalive = DEFAULT_KEEPALIVE;
70 llevel = L_INFO;
71
72 default_node.port = DEFAULT_PORT;
73 default_node.connectmode = conf_node::C_ALWAYS;
74 default_node.compress = true;
75}
76
77void configuration::cleanup()
78{
79 if (rsa_key)
80 RSA_free (rsa_key);
81
82 free (ifname);
83
84 rsa_key = 0;
85 ifname = 0;
86}
87
88void
89configuration::clear_config ()
90{
91 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
92 delete *i;
93
94 nodes.clear ();
95
96 cleanup ();
97 init ();
98}
99
100void configuration::read_config (bool need_keys)
101{
102 char *fname;
103 FILE *f;
104
105 clear_config ();
106
107 asprintf (&fname, "%s/vped.conf", confbase);
108 f = fopen (fname, "r");
109
110 if (f)
111 {
112 char line[16384];
113 int lineno = 0;
114 char *var, *val;
115 conf_node *node = &default_node;
116
117 while (fgets (line, sizeof (line), f))
118 {
119 lineno++;
120
121 {
122 char *end = line + strlen (line);
123
124 while (*end < ' ' && end >= line)
125 end--;
126
127 *++end = 0;
128 }
129
130 char *tok = line;
131
132retry:
133 var = strtok (tok, "\t =");
134 tok = 0;
135
136 if (!var || !var[0])
137 continue; /* no tokens on this line */
138
139 if (var[0] == '#')
140 continue; /* comment: ignore */
141
142 val = strtok (NULL, "\t\n\r =");
143
144 if (!val || val[0] == '#')
145 {
146 slog (L_WARN,
147 _("no value for variable `%s', at '%s' line %d"),
148 var, fname, lineno);
149 break;
150 }
151
152 if (!strcmp (var, "on"))
153 {
154 if (!::thisnode
155 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
156 || !strcmp (val, ::thisnode))
157 goto retry;
158
159 continue;
160 }
161
162 // truly global
163 if (!strcmp (var, "loglevel"))
164 {
165 loglevel l = string_to_loglevel (val);
166
167 if (l != L_NONE)
168 llevel = l;
169 else
170 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
171 }
172
173 // per config
174 else if (!strcmp (var, "node"))
175 {
176 default_node.id++;
177
178 node = new conf_node (default_node);
179
180 nodes.push_back (node);
181
182 node->nodename = strdup (val);
183
184 {
185 char *fname;
186 FILE *f;
187
188 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
189
190 f = fopen (fname, "r");
191 if (f)
192 {
193 node->rsa_key = RSA_new ();
194
195 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
196 {
197 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
198 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
199 exit (1);
200 }
201
202 RSA_blinding_on (node->rsa_key, 0);
203
204 fclose (f);
205 }
206 else
207 {
208 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
209
210 if (need_keys)
211 exit (1);
212 }
213
214 free (fname);
215 }
216
217 if (!::thisnode || !strcmp (node->nodename, ::thisnode))
218 thisnode = node;
219 }
220 else if (!strcmp (var, "private-key"))
221 prikeyfile = strdup (val);
222 else if (!strcmp (var, "ifpersist"))
223 {
224 if (!strcmp (val, "yes"))
225 ifpersist = true;
226 else if (!strcmp (val, "no"))
227 ifpersist = false;
228 else
229 slog (L_WARN,
230 _("illegal value for 'ifpersist', only 'yes' or 'no' allowed, at '%s' line %d"),
231 var, fname, lineno);
232 }
233 else if (!strcmp (var, "ifname"))
234 ifname = strdup (val);
235 else if (!strcmp (var, "rekey"))
236 rekey = atoi (val);
237 else if (!strcmp (var, "keepalive"))
238 keepalive = atoi (val);
239 else if (!strcmp (var, "mtu"))
240 mtu = atoi (val);
241 else if (!strcmp (var, "if-up"))
242 script_if_up = strdup (val);
243 else if (!strcmp (var, "node-up"))
244 script_node_up = strdup (val);
245 else if (!strcmp (var, "node-down"))
246 script_node_down = strdup (val);
247
248 /* node-specific, non-defaultable */
249 else if (node != &default_node && !strcmp (var, "hostname"))
250 {
251 free (node->hostname);
252 node->hostname = strdup (val);
253 }
254
255 /* node-specific, defaultable */
256 else if (!strcmp (var, "port"))
257 node->port = atoi (val);
258 else if (!strcmp (var, "router-priority"))
259 node->routerprio = atoi (val);
260 else if (!strcmp (var, "connect"))
261 {
262 if (!strcmp (val, "ondemand"))
263 node->connectmode = conf_node::C_ONDEMAND;
264 else if (!strcmp (val, "never"))
265 node->connectmode = conf_node::C_NEVER;
266 else if (!strcmp (val, "always"))
267 node->connectmode = conf_node::C_ALWAYS;
268 else
269 slog (L_WARN,
270 _("illegal value for 'connectmode', use one of 'ondemand', 'never' or 'always', at '%s' line %d"),
271 var, fname, lineno);
272 }
273 else if (!strcmp (var, "compress"))
274 {
275 if (!strcmp (val, "yes"))
276 node->compress = true;
277 else if (!strcmp (val, "no"))
278 node->compress = false;
279 else
280 slog (L_WARN,
281 _("illegal value for 'compress', only 'yes' or 'no' allowed, at '%s' line %d"),
282 var, fname, lineno);
283 }
284
285 // unknown or misplaced
286 else
287 {
288 slog (L_WARN,
289 _("unknown or misplaced variable `%s', at '%s' line %d"),
290 var, fname, lineno);
291 }
292 }
293
294 fclose (f);
295 }
296 else
297 {
298 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
299 exit (1);
300 }
301
302 free (fname);
303
304 fname = config_filename (prikeyfile, "hostkey");
305
306 f = fopen (fname, "r");
307 if (f)
308 {
309 rsa_key = RSA_new ();
310
311 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
312 {
313 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
314 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
315 exit (1);
316 }
317
318 RSA_blinding_on (rsa_key, 0);
319
320 fclose (f);
321 }
322 else
323 {
324 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
325
326 if (need_keys)
327 exit (1);
328 }
329
330 free (fname);
331}
332
333char *configuration::config_filename (const char *name, const char *dflt)
334{
335 char *fname;
336
337 asprintf (&fname, name ? name : dflt, ::thisnode);
338
339 if (!ABSOLUTE_PATH (fname))
340 {
341 char *rname = fname;
342 asprintf (&fname, "%s/%s", confbase, rname);
343 free (rname);
344 }
345
346 return fname; 60 return 0;
347} 61}
348 62
349void 63const char *strprotocol (u8 protocol)
350configuration::print ()
351{ 64{
352 printf (_("\nConfiguration\n\n")); 65 if (protocol & PROT_IPv4 ) return "rawip";
353 printf (_("# of nodes: %d\n"), nodes.size ()); 66 if (protocol & PROT_ICMPv4) return "icmp";
354 printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>"); 67 if (protocol & PROT_UDPv4 ) return "udp";
355 printf (_("MTU: %d\n"), mtu); 68 if (protocol & PROT_TCPv4 ) return "tcp";
356 printf (_("rekeying interval: %d\n"), rekey); 69 if (protocol & PROT_DNSv4 ) return "dns";
357 printf (_("keepalive interval: %d\n"), keepalive);
358 printf (_("interface: %s\n"), ifname);
359 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
360 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
361 printf ("\n");
362 70
363 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n", 71 return "<unknown>";
364 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
365
366 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
367 (*i)->print ();
368
369 printf ("\n");
370} 72}
371 73
372void 74void
373conf_node::print () 75conf_node::print ()
374{ 76{
… …
380 connectmode == C_NEVER ? "never" : 82 connectmode == C_NEVER ? "never" :
381 connectmode == C_ALWAYS ? "always" : "", 83 connectmode == C_ALWAYS ? "always" : "",
382 nodename, 84 nodename,
383 hostname ? hostname : "", 85 hostname ? hostname : "",
384 hostname ? ":" : "", 86 hostname ? ":" : "",
385 hostname ? port : 0 87 hostname ? udp_port : 0
386 ); 88 );
387} 89}
388 90
91conf_node::~conf_node ()
92{
93 if (rsa_key)
94 RSA_free (rsa_key);
95
96 free (nodename);
97 free (hostname);
98#if ENABLE_DNS
99 free (domain);
100 free (dns_hostname);
101#endif
102}
103
104void configuration::init ()
105{
106 memset (this, 0, sizeof (*this));
107
108 mtu = DEFAULT_MTU;
109 rekey = DEFAULT_REKEY;
110 keepalive = DEFAULT_KEEPALIVE;
111 llevel = L_INFO;
112 ip_proto = IPPROTO_GRE;
113#if ENABLE_ICMP
114 icmp_type = ICMP_ECHOREPLY;
115#endif
116
117 default_node.udp_port = DEFAULT_UDPPORT;
118 default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
119 default_node.connectmode = conf_node::C_ALWAYS;
120 default_node.compress = true;
121 default_node.protocols = 0;
122 default_node.max_retry = DEFAULT_MAX_RETRY;
123
124#if ENABLE_DNS
125 default_node.dns_port = 0; // default is 0 == client
126 dns_forw_host = strdup ("127.0.0.1");
127 dns_forw_port = 53;
128#endif
129
130 conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
131}
132
133void configuration::cleanup()
134{
135 if (rsa_key)
136 RSA_free (rsa_key);
137
138 rsa_key = 0;
139
140 free (pidfilename); pidfilename = 0;
141 free (ifname); ifname = 0;
142#if ENABLE_HTTP_PROXY
143 free (proxy_host); proxy_host = 0;
144 free (proxy_auth); proxy_auth = 0;
145#endif
146#if ENABLE_DNS
147 free (dns_forw_host); dns_forw_host = 0;
148#endif
149}
150
151void
152configuration::clear_config ()
153{
154 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
155 delete *i;
156
157 nodes.clear ();
158
159 cleanup ();
160 init ();
161}
162
163#define parse_bool(target,name,trueval,falseval) do { \
164 if (!strcmp (val, "yes")) target = trueval; \
165 else if (!strcmp (val, "no")) target = falseval; \
166 else if (!strcmp (val, "true")) target = trueval; \
167 else if (!strcmp (val, "false")) target = falseval; \
168 else if (!strcmp (val, "on")) target = trueval; \
169 else if (!strcmp (val, "off")) target = falseval; \
170 else \
171 slog (L_WARN, \
172 _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \
173 name, var, fname, lineno); \
174} while (0)
175
176void configuration::read_config (bool need_keys)
177{
178 char *fname;
179 FILE *f;
180
181 clear_config ();
182
183 asprintf (&fname, "%s/gvpe.conf", confbase);
184 f = fopen (fname, "r");
185
186 if (f)
187 {
188 char line[16384];
189 int lineno = 0;
190 char *var, *val;
191 conf_node *node = &default_node;
192
193 while (fgets (line, sizeof (line), f))
194 {
195 lineno++;
196
197 {
198 char *end = line + strlen (line);
199
200 while (*end < ' ' && end >= line)
201 end--;
202
203 *++end = 0;
204 }
205
206 char *tok = line;
207
208retry:
209 var = strtok (tok, "\t =");
210 tok = 0;
211
212 if (!var || !var[0])
213 continue; /* no tokens on this line */
214
215 if (var[0] == '#')
216 continue; /* comment: ignore */
217
218 val = strtok (NULL, "\t\n\r =");
219
220 if (!val || val[0] == '#')
221 {
222 slog (L_WARN,
223 _("no value for variable `%s', at '%s' line %d, skipping."),
224 var, fname, lineno);
225 continue;
226 }
227
228 if (!strcmp (var, "on"))
229 {
230 if (!::thisnode
231 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
232 || !strcmp (val, ::thisnode))
233 goto retry;
234
235 continue;
236 }
237
238 // truly global
239 if (!strcmp (var, "loglevel"))
240 {
241 loglevel l = string_to_loglevel (val);
242
243 if (l != L_NONE)
244 llevel = l;
245 else
246 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
247 }
248 else if (!strcmp (var, "ip-proto"))
249 ip_proto = atoi (val);
250 else if (!strcmp (var, "icmp-type"))
251 {
252#if ENABLE_ICMP
253 icmp_type = atoi (val);
254#endif
255 }
256
257 // per config
258 else if (!strcmp (var, "node"))
259 {
260 default_node.id++;
261
262 node = new conf_node (default_node);
263
264 nodes.push_back (node);
265
266 node->nodename = strdup (val);
267
268 {
269 char *fname;
270 FILE *f;
271
272 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
273
274 f = fopen (fname, "r");
275 if (f)
276 {
277 node->rsa_key = RSA_new ();
278
279 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
280 {
281 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
282 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
283 exit (EXIT_FAILURE);
284 }
285
286 require (RSA_blinding_on (node->rsa_key, 0));
287
288 fclose (f);
289 }
290 else
291 {
292 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
293
294 if (need_keys)
295 exit (EXIT_FAILURE);
296 }
297
298 free (fname);
299 }
300
301 if (::thisnode && !strcmp (node->nodename, ::thisnode))
302 thisnode = node;
303 }
304 else if (!strcmp (var, "private-key"))
305 free (prikeyfile), prikeyfile = strdup (val);
306 else if (!strcmp (var, "ifpersist"))
307 parse_bool (ifpersist, "ifpersist", true, false);
308 else if (!strcmp (var, "ifname"))
309 free (ifname), ifname = strdup (val);
310 else if (!strcmp (var, "rekey"))
311 rekey = atoi (val);
312 else if (!strcmp (var, "keepalive"))
313 keepalive = atoi (val);
314 else if (!strcmp (var, "mtu"))
315 mtu = atoi (val);
316 else if (!strcmp (var, "if-up"))
317 free (script_if_up), script_if_up = strdup (val);
318 else if (!strcmp (var, "node-up"))
319 free (script_node_up), script_node_up = strdup (val);
320 else if (!strcmp (var, "node-down"))
321 free (script_node_down), script_node_down = strdup (val);
322 else if (!strcmp (var, "pid-file"))
323 free (pidfilename), pidfilename = strdup (val);
324 else if (!strcmp (var, "dns-forw-host"))
325 {
326#if ENABLE_DNS
327 free (dns_forw_host), dns_forw_host = strdup (val);
328#endif
329 }
330 else if (!strcmp (var, "dns-forw-port"))
331 {
332#if ENABLE_DNS
333 dns_forw_port = atoi (val);
334#endif
335 }
336 else if (!strcmp (var, "http-proxy-host"))
337 {
338#if ENABLE_HTTP_PROXY
339 free (proxy_host), proxy_host = strdup (val);
340#endif
341 }
342 else if (!strcmp (var, "http-proxy-port"))
343 {
344#if ENABLE_HTTP_PROXY
345 proxy_port = atoi (val);
346#endif
347 }
348 else if (!strcmp (var, "http-proxy-auth"))
349 {
350#if ENABLE_HTTP_PROXY
351 proxy_auth = (char *)base64_encode ((const u8 *)val, strlen (val));
352#endif
353 }
354
355 /* node-specific, non-defaultable */
356 else if (node != &default_node && !strcmp (var, "hostname"))
357 free (node->hostname), node->hostname = strdup (val);
358
359 /* node-specific, defaultable */
360 else if (!strcmp (var, "udp-port"))
361 node->udp_port = atoi (val);
362 else if (!strcmp (var, "tcp-port"))
363 node->tcp_port = atoi (val);
364 else if (!strcmp (var, "dns-hostname"))
365 {
366#if ENABLE_DNS
367 free (node->dns_hostname), node->dns_hostname = strdup (val);
368#endif
369 }
370 else if (!strcmp (var, "dns-port"))
371 {
372#if ENABLE_DNS
373 node->dns_port = atoi (val);
374#endif
375 }
376 else if (!strcmp (var, "dns-domain"))
377 {
378#if ENABLE_DNS
379 free (node->domain), node->domain = strdup (val);
380#endif
381 }
382 else if (!strcmp (var, "router-priority"))
383 node->routerprio = atoi (val);
384 else if (!strcmp (var, "max-retry"))
385 node->max_retry = atoi (val);
386 else if (!strcmp (var, "connect"))
387 {
388 if (!strcmp (val, "ondemand"))
389 node->connectmode = conf_node::C_ONDEMAND;
390 else if (!strcmp (val, "never"))
391 node->connectmode = conf_node::C_NEVER;
392 else if (!strcmp (val, "always"))
393 node->connectmode = conf_node::C_ALWAYS;
394 else if (!strcmp (val, "disabled"))
395 node->connectmode = conf_node::C_DISABLED;
396 else
397 slog (L_WARN,
398 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d, ignoring."),
399 var, fname, lineno);
400 }
401 else if (!strcmp (var, "inherit-tos"))
402 parse_bool (node->inherit_tos, "inherit-tos", true, false);
403 else if (!strcmp (var, "compress"))
404 parse_bool (node->compress, "compress", true, false);
405 // all these bool options really really cost a lot of executable size!
406 else if (!strcmp (var, "enable-tcp"))
407 {
408#if ENABLE_TCP
409 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
410#endif
411 }
412 else if (!strcmp (var, "enable-icmp"))
413 {
414#if ENABLE_ICMP
415 u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) | v;
416#endif
417 }
418 else if (!strcmp (var, "enable-dns"))
419 {
420#if ENABLE_DNS
421 u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) | v;
422#endif
423 }
424 else if (!strcmp (var, "enable-udp"))
425 {
426 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
427 }
428 else if (!strcmp (var, "enable-rawip"))
429 {
430 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
431 }
432
433 // unknown or misplaced
434 else
435 slog (L_WARN,
436 _("unknown or misplaced variable `%s', at '%s' line %d, skipping."),
437 var, fname, lineno);
438 }
439
440 fclose (f);
441 }
442 else
443 {
444 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
445 exit (EXIT_FAILURE);
446 }
447
448 free (fname);
449
450 fname = config_filename (prikeyfile, "hostkey");
451
452 f = fopen (fname, "r");
453 if (f)
454 {
455 rsa_key = RSA_new ();
456
457 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
458 {
459 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
460 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
461 exit (EXIT_FAILURE);
462 }
463
464 require (RSA_blinding_on (rsa_key, 0));
465
466 fclose (f);
467 }
468 else
469 {
470 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
471
472 if (need_keys)
473 exit (EXIT_FAILURE);
474 }
475
476 if (need_keys && ::thisnode
477 && rsa_key && thisnode && thisnode->rsa_key)
478 if (BN_cmp (rsa_key->n, thisnode->rsa_key->n) != 0
479 || BN_cmp (rsa_key->e, thisnode->rsa_key->e) != 0)
480 {
481 slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
482 exit (EXIT_FAILURE);
483 }
484
485 free (fname);
486}
487
488char *configuration::config_filename (const char *name, const char *dflt)
489{
490 char *fname;
491
492 asprintf (&fname, name ? name : dflt, ::thisnode);
493
494 if (!ABSOLUTE_PATH (fname))
495 {
496 char *rname = fname;
497 asprintf (&fname, "%s/%s", confbase, rname);
498 free (rname);
499 }
500
501 return fname;
502}
503
504void
505configuration::print ()
506{
507 printf (_("\nConfiguration\n\n"));
508 printf (_("# of nodes: %d\n"), nodes.size ());
509 printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
510 printf (_("MTU: %d\n"), mtu);
511 printf (_("rekeying interval: %d\n"), rekey);
512 printf (_("keepalive interval: %d\n"), keepalive);
513 printf (_("interface: %s\n"), ifname);
514 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
515 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
516 printf ("\n");
517
518 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
519 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
520
521 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
522 (*i)->print ();
523
524 printf ("\n");
525}
526
527configuration::configuration ()
528{
529 asprintf (&confbase, "%s/gvpe", CONFDIR);
530
531 init ();
532}
533
534configuration::~configuration ()
535{
536 cleanup ();
537}
538
539

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines