[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs.
Revision 1.29 by pcg, Tue Mar 1 06:27:20 2005 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2004 Marc Lehmann <pcg@goof.com>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
9	This program is free software; you can redistribute it and/or modify	5	This program is free software; you can redistribute it and/or modify
10	it under the terms of the GNU General Public License as published by	6	it under the terms of the GNU General Public License as published by
11	the Free Software Foundation; either version 2 of the License, or	7	the Free Software Foundation; either version 2 of the License, or
12	(at your option) any later version.	8	(at your option) any later version.
31	#include <netdb.h>	27	#include <netdb.h>
32	#include <sys/stat.h>	28	#include <sys/stat.h>
33	#include <sys/types.h>	29	#include <sys/types.h>
34	#include <unistd.h>	30	#include <unistd.h>
35		31
36	#include <netinet/in.h>	32	#include "netcompat.h"
37		33
38	#include <openssl/err.h>	34	#include <openssl/err.h>
39	#include <openssl/pem.h>	35	#include <openssl/pem.h>
40	#include <openssl/rsa.h>	36	#include <openssl/rsa.h>
41	#include <openssl/rand.h>	37	#include <openssl/rand.h>
		38	#include <openssl/bn.h>
42		39
43	#include "gettext.h"	40	#include "gettext.h"
44		41
45	#include "conf.h"	42	#include "conf.h"
46	#include "slog.h"	43	#include "slog.h"
47	#include "util.h"	44	#include "util.h"
48		45
49	char *confbase;	46	char *confbase;
50	char *thisnode;	47	char *thisnode;
51	char *identname;	48	char *identname;
52	char *pidfilename;
53		49
54	struct configuration conf;	50	struct configuration conf;
55		51
56	u8 best_protocol (u8 protset)	52	u8 best_protocol (u8 protset)
57	{	53	{
58	if (protset & PROT_IPv4)	54	if (protset & PROT_IPv4 ) return PROT_IPv4;
59	return PROT_IPv4;	55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
		56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
		57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		58	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
60		59
61	return PROT_UDPv4;	60	return 0;
62	}	61	}
63		62
64	const char *strprotocol (u8 protocol)	63	const char *strprotocol (u8 protocol)
65	{	64	{
66	if (protocol & PROT_IPv4 ) return "rawip";	65	if (protocol & PROT_IPv4 ) return "rawip";
		66	if (protocol & PROT_ICMPv4) return "icmp";
67	if (protocol & PROT_UDPv4) return "udp";	67	if (protocol & PROT_UDPv4 ) return "udp";
		68	if (protocol & PROT_TCPv4 ) return "tcp";
		69	if (protocol & PROT_DNSv4 ) return "dns";
68		70
69	return "<unknown>";	71	return "<unknown>";
70	}
71
72	configuration::configuration ()
73	{
74	init ();
75	}
76
77	configuration::~configuration ()
78	{
79	cleanup ();
80	}
81
82	void configuration::init ()
83	{
84	memset (this, 0, sizeof (*this));
85
86	rekey = DEFAULT_REKEY;
87	keepalive = DEFAULT_KEEPALIVE;
88	llevel = L_INFO;
89	ip_proto = IPPROTO_GRE;
90
91	default_node.udp_port = DEFAULT_UDPPORT;
92	default_node.tcp_port = DEFAULT_UDPPORT;
93	default_node.connectmode = conf_node::C_ALWAYS;
94	default_node.compress = true;
95	default_node.protocols = PROT_UDPv4;
96	}
97
98	void configuration::cleanup()
99	{
100	if (rsa_key)
101	RSA_free (rsa_key);
102
103	free (ifname);
104
105	rsa_key = 0;
106	ifname = 0;
107	}
108
109	void
110	configuration::clear_config ()
111	{
112	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
113	delete *i;
114
115	nodes.clear ();
116
117	cleanup ();
118	init ();
119	}
120
121	#define parse_bool(target,name,trueval,falseval) \
122	if (!strcmp (val, "yes")) target = trueval; \
123	else if (!strcmp (val, "no")) target = falseval; \
124	else if (!strcmp (val, "true")) target = trueval; \
125	else if (!strcmp (val, "false")) target = falseval; \
126	else if (!strcmp (val, "on")) target = trueval; \
127	else if (!strcmp (val, "off")) target = falseval; \
128	else \
129	slog (L_WARN, \
130	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
131	name, var, fname, lineno);
132
133	void configuration::read_config (bool need_keys)
134	{
135	char *fname;
136	FILE *f;
137
138	clear_config ();
139
140	asprintf (&fname, "%s/vped.conf", confbase);
141	f = fopen (fname, "r");
142
143	if (f)
144	{
145	char line[16384];
146	int lineno = 0;
147	char var, val;
148	conf_node *node = &default_node;
149
150	while (fgets (line, sizeof (line), f))
151	{
152	lineno++;
153
154	{
155	char *end = line + strlen (line);
156
157	while (*end < ' ' && end >= line)
158	end--;
159
160	*++end = 0;
161	}
162
163	char *tok = line;
164
165	retry:
166	var = strtok (tok, "\t =");
167	tok = 0;
168
169	if (!var \|\| !var[0])
170	continue; /* no tokens on this line */
171
172	if (var[0] == '#')
173	continue; /* comment: ignore */
174
175	val = strtok (NULL, "\t\n\r =");
176
177	if (!val \|\| val[0] == '#')
178	{
179	slog (L_WARN,
180	_("no value for variable `%s', at '%s' line %d"),
181	var, fname, lineno);
182	break;
183	}
184
185	if (!strcmp (var, "on"))
186	{
187	if (!::thisnode
188	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
189	\|\| !strcmp (val, ::thisnode))
190	goto retry;
191
192	continue;
193	}
194
195	// truly global
196	if (!strcmp (var, "loglevel"))
197	{
198	loglevel l = string_to_loglevel (val);
199
200	if (l != L_NONE)
201	llevel = l;
202	else
203	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
204	}
205	else if (!strcmp (var, "ip-proto"))
206	ip_proto = atoi (val);
207
208	// per config
209	else if (!strcmp (var, "node"))
210	{
211	default_node.id++;
212
213	node = new conf_node (default_node);
214
215	nodes.push_back (node);
216
217	node->nodename = strdup (val);
218
219	{
220	char *fname;
221	FILE *f;
222
223	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
224
225	f = fopen (fname, "r");
226	if (f)
227	{
228	node->rsa_key = RSA_new ();
229
230	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
231	{
232	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
233	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
234	exit (1);
235	}
236
237	RSA_blinding_on (node->rsa_key, 0);
238
239	fclose (f);
240	}
241	else
242	{
243	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
244
245	if (need_keys)
246	exit (1);
247	}
248
249	free (fname);
250	}
251
252	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
253	thisnode = node;
254	}
255	else if (!strcmp (var, "private-key"))
256	prikeyfile = strdup (val);
257	else if (!strcmp (var, "ifpersist"))
258	{
259	parse_bool (ifpersist, "ifpersist", true, false);
260	}
261	else if (!strcmp (var, "ifname"))
262	ifname = strdup (val);
263	else if (!strcmp (var, "rekey"))
264	rekey = atoi (val);
265	else if (!strcmp (var, "keepalive"))
266	keepalive = atoi (val);
267	else if (!strcmp (var, "mtu"))
268	mtu = atoi (val);
269	else if (!strcmp (var, "if-up"))
270	script_if_up = strdup (val);
271	else if (!strcmp (var, "node-up"))
272	script_node_up = strdup (val);
273	else if (!strcmp (var, "node-down"))
274	script_node_down = strdup (val);
275
276	/* node-specific, non-defaultable */
277	else if (node != &default_node && !strcmp (var, "hostname"))
278	{
279	free (node->hostname);
280	node->hostname = strdup (val);
281	}
282
283	/* node-specific, defaultable */
284	else if (!strcmp (var, "udp-port"))
285	node->udp_port = atoi (val);
286	else if (!strcmp (var, "tcp-port"))
287	node->tcp_port = atoi (val);
288	else if (!strcmp (var, "router-priority"))
289	node->routerprio = atoi (val);
290	else if (!strcmp (var, "connect"))
291	{
292	if (!strcmp (val, "ondemand"))
293	node->connectmode = conf_node::C_ONDEMAND;
294	else if (!strcmp (val, "never"))
295	node->connectmode = conf_node::C_NEVER;
296	else if (!strcmp (val, "always"))
297	node->connectmode = conf_node::C_ALWAYS;
298	else if (!strcmp (val, "disabled"))
299	node->connectmode = conf_node::C_DISABLED;
300	else
301	slog (L_WARN,
302	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
303	var, fname, lineno);
304	}
305	else if (!strcmp (var, "inherit-tos"))
306	{
307	parse_bool (node->inherit_tos, "inherit-tos", true, false);
308	}
309	else if (!strcmp (var, "compress"))
310	{
311	parse_bool (node->compress, "compress", true, false);
312	}
313	// all these bool options really really cost a lot of executable size!
314	else if (!strcmp (var, "enable-tcp"))
315	{
316	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
317	}
318	else if (!strcmp (var, "enable-udp"))
319	{
320	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
321	}
322	else if (!strcmp (var, "enable-rawip"))
323	{
324	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
325	}
326
327	// unknown or misplaced
328	else
329	{
330	slog (L_WARN,
331	_("unknown or misplaced variable `%s', at '%s' line %d"),
332	var, fname, lineno);
333	}
334	}
335
336	fclose (f);
337	}
338	else
339	{
340	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
341	exit (1);
342	}
343
344	free (fname);
345
346	fname = config_filename (prikeyfile, "hostkey");
347
348	f = fopen (fname, "r");
349	if (f)
350	{
351	rsa_key = RSA_new ();
352
353	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
354	{
355	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
356	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
357	exit (1);
358	}
359
360	RSA_blinding_on (rsa_key, 0);
361
362	fclose (f);
363	}
364	else
365	{
366	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
367
368	if (need_keys)
369	exit (1);
370	}
371
372	free (fname);
373	}
374
375	char configuration::config_filename (const char name, const char *dflt)
376	{
377	char *fname;
378
379	asprintf (&fname, name ? name : dflt, ::thisnode);
380
381	if (!ABSOLUTE_PATH (fname))
382	{
383	char *rname = fname;
384	asprintf (&fname, "%s/%s", confbase, rname);
385	free (rname);
386	}
387
388	return fname;
389	}
390
391	void
392	configuration::print ()
393	{
394	printf (_("\nConfiguration\n\n"));
395	printf (_("# of nodes: %d\n"), nodes.size ());
396	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
397	printf (_("MTU: %d\n"), mtu);
398	printf (_("rekeying interval: %d\n"), rekey);
399	printf (_("keepalive interval: %d\n"), keepalive);
400	printf (_("interface: %s\n"), ifname);
401	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
402	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
403	printf ("\n");
404
405	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
406	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
407
408	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
409	(*i)->print ();
410
411	printf ("\n");
412	}	72	}
413		73
414	void	74	void
415	conf_node::print ()	75	conf_node::print ()
416	{	76	{
…		…
426	hostname ? ":" : "",	86	hostname ? ":" : "",
427	hostname ? udp_port : 0	87	hostname ? udp_port : 0
428	);	88	);
429	}	89	}
430		90
		91	conf_node::~conf_node ()
		92	{
		93	if (rsa_key)
		94	RSA_free (rsa_key);
		95
		96	free (nodename);
		97	free (hostname);
		98	free (domain);
		99	}
		100
		101	void configuration::init ()
		102	{
		103	memset (this, 0, sizeof (*this));
		104
		105	mtu = DEFAULT_MTU;
		106	rekey = DEFAULT_REKEY;
		107	keepalive = DEFAULT_KEEPALIVE;
		108	llevel = L_INFO;
		109	ip_proto = IPPROTO_GRE;
		110	#if ENABLE_ICMP
		111	icmp_type = ICMP_ECHOREPLY;
		112	#endif
		113
		114	default_node.udp_port = DEFAULT_UDPPORT;
		115	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
		116	default_node.connectmode = conf_node::C_ALWAYS;
		117	default_node.compress = true;
		118	default_node.protocols = 0;
		119	default_node.max_retry = DEFAULT_MAX_RETRY;
		120
		121	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		122	}
		123
		124	void configuration::cleanup()
		125	{
		126	if (rsa_key)
		127	RSA_free (rsa_key);
		128
		129	rsa_key = 0;
		130
		131	free (pidfilename); pidfilename = 0;
		132	free (ifname); ifname = 0;
		133	#if ENABLE_HTTP_PROXY
		134	free (proxy_host); proxy_host = 0;
		135	free (proxy_auth); proxy_auth = 0;
		136	#endif
		137	#if ENABLE_DNS
		138	free (dns_forw_host); dns_forw_host = 0;
		139	#endif
		140	}
		141
		142	void
		143	configuration::clear_config ()
		144	{
		145	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
		146	delete *i;
		147
		148	nodes.clear ();
		149
		150	cleanup ();
		151	init ();
		152	}
		153
		154	#define parse_bool(target,name,trueval,falseval) \
		155	if (!strcmp (val, "yes")) target = trueval; \
		156	else if (!strcmp (val, "no")) target = falseval; \
		157	else if (!strcmp (val, "true")) target = trueval; \
		158	else if (!strcmp (val, "false")) target = falseval; \
		159	else if (!strcmp (val, "on")) target = trueval; \
		160	else if (!strcmp (val, "off")) target = falseval; \
		161	else \
		162	slog (L_WARN, \
		163	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
		164	name, var, fname, lineno);
		165
		166	void configuration::read_config (bool need_keys)
		167	{
		168	char *fname;
		169	FILE *f;
		170
		171	clear_config ();
		172
		173	asprintf (&fname, "%s/gvpe.conf", confbase);
		174	f = fopen (fname, "r");
		175
		176	if (f)
		177	{
		178	char line[16384];
		179	int lineno = 0;
		180	char var, val;
		181	conf_node *node = &default_node;
		182
		183	while (fgets (line, sizeof (line), f))
		184	{
		185	lineno++;
		186
		187	{
		188	char *end = line + strlen (line);
		189
		190	while (*end < ' ' && end >= line)
		191	end--;
		192
		193	*++end = 0;
		194	}
		195
		196	char *tok = line;
		197
		198	retry:
		199	var = strtok (tok, "\t =");
		200	tok = 0;
		201
		202	if (!var \|\| !var[0])
		203	continue; /* no tokens on this line */
		204
		205	if (var[0] == '#')
		206	continue; /* comment: ignore */
		207
		208	val = strtok (NULL, "\t\n\r =");
		209
		210	if (!val \|\| val[0] == '#')
		211	{
		212	slog (L_WARN,
		213	_("no value for variable `%s', at '%s' line %d"),
		214	var, fname, lineno);
		215	break;
		216	}
		217
		218	if (!strcmp (var, "on"))
		219	{
		220	if (!::thisnode
		221	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		222	\|\| !strcmp (val, ::thisnode))
		223	goto retry;
		224
		225	continue;
		226	}
		227
		228	// truly global
		229	if (!strcmp (var, "loglevel"))
		230	{
		231	loglevel l = string_to_loglevel (val);
		232
		233	if (l != L_NONE)
		234	llevel = l;
		235	else
		236	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
		237	}
		238	else if (!strcmp (var, "ip-proto"))
		239	ip_proto = atoi (val);
		240	else if (!strcmp (var, "icmp-type"))
		241	{
		242	#if ENABLE_ICMP
		243	icmp_type = atoi (val);
		244	#endif
		245	}
		246
		247	// per config
		248	else if (!strcmp (var, "node"))
		249	{
		250	default_node.id++;
		251
		252	node = new conf_node (default_node);
		253
		254	nodes.push_back (node);
		255
		256	node->nodename = strdup (val);
		257
		258	{
		259	char *fname;
		260	FILE *f;
		261
		262	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		263
		264	f = fopen (fname, "r");
		265	if (f)
		266	{
		267	node->rsa_key = RSA_new ();
		268
		269	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		270	{
		271	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		272	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		273	exit (EXIT_FAILURE);
		274	}
		275
		276	require (RSA_blinding_on (node->rsa_key, 0));
		277
		278	fclose (f);
		279	}
		280	else
		281	{
		282	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		283
		284	if (need_keys)
		285	exit (EXIT_FAILURE);
		286	}
		287
		288	free (fname);
		289	}
		290
		291	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		292	thisnode = node;
		293	}
		294	else if (!strcmp (var, "private-key"))
		295	free (prikeyfile), prikeyfile = strdup (val);
		296	else if (!strcmp (var, "ifpersist"))
		297	{
		298	parse_bool (ifpersist, "ifpersist", true, false);
		299	}
		300	else if (!strcmp (var, "ifname"))
		301	free (ifname), ifname = strdup (val);
		302	else if (!strcmp (var, "rekey"))
		303	rekey = atoi (val);
		304	else if (!strcmp (var, "keepalive"))
		305	keepalive = atoi (val);
		306	else if (!strcmp (var, "mtu"))
		307	mtu = atoi (val);
		308	else if (!strcmp (var, "if-up"))
		309	free (script_if_up), script_if_up = strdup (val);
		310	else if (!strcmp (var, "node-up"))
		311	free (script_node_up), script_node_up = strdup (val);
		312	else if (!strcmp (var, "node-down"))
		313	free (script_node_down), script_node_down = strdup (val);
		314	else if (!strcmp (var, "pid-file"))
		315	free (pidfilename), pidfilename = strdup (val);
		316	else if (!strcmp (var, "dns-forw-host"))
		317	{
		318	#if ENABLE_DNS
		319	free (dns_forw_host), dns_forw_host = strdup (val);
		320	#endif
		321	}
		322	else if (!strcmp (var, "dns-forw-port"))
		323	{
		324	#if ENABLE_DNS
		325	dns_forw_port = atoi (val);
		326	#endif
		327	}
		328	else if (!strcmp (var, "http-proxy-host"))
		329	{
		330	#if ENABLE_HTTP_PROXY
		331	free (proxy_host), proxy_host = strdup (val);
		332	#endif
		333	}
		334	else if (!strcmp (var, "http-proxy-port"))
		335	{
		336	#if ENABLE_HTTP_PROXY
		337	proxy_port = atoi (val);
		338	#endif
		339	}
		340	else if (!strcmp (var, "http-proxy-auth"))
		341	{
		342	#if ENABLE_HTTP_PROXY
		343	proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		344	#endif
		345	}
		346
		347	/* node-specific, non-defaultable */
		348	else if (node != &default_node && !strcmp (var, "hostname"))
		349	free (node->hostname), node->hostname = strdup (val);
		350
		351	/* node-specific, defaultable */
		352	else if (!strcmp (var, "udp-port"))
		353	node->udp_port = atoi (val);
		354	else if (!strcmp (var, "tcp-port"))
		355	node->tcp_port = atoi (val);
		356	else if (!strcmp (var, "dns-port"))
		357	{
		358	#if ENABLE_DNS
		359	node->dns_port = atoi (val);
		360	#endif
		361	}
		362	else if (!strcmp (var, "dns-domain"))
		363	{
		364	#if ENABLE_DNS
		365	free (node->domain), node->domain = strdup (val);
		366	#endif
		367	}
		368	else if (!strcmp (var, "router-priority"))
		369	node->routerprio = atoi (val);
		370	else if (!strcmp (var, "max-retry"))
		371	node->max_retry = atoi (val);
		372	else if (!strcmp (var, "connect"))
		373	{
		374	if (!strcmp (val, "ondemand"))
		375	node->connectmode = conf_node::C_ONDEMAND;
		376	else if (!strcmp (val, "never"))
		377	node->connectmode = conf_node::C_NEVER;
		378	else if (!strcmp (val, "always"))
		379	node->connectmode = conf_node::C_ALWAYS;
		380	else if (!strcmp (val, "disabled"))
		381	node->connectmode = conf_node::C_DISABLED;
		382	else
		383	slog (L_WARN,
		384	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
		385	var, fname, lineno);
		386	}
		387	else if (!strcmp (var, "inherit-tos"))
		388	{
		389	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		390	}
		391	else if (!strcmp (var, "compress"))
		392	{
		393	parse_bool (node->compress, "compress", true, false);
		394	}
		395	// all these bool options really really cost a lot of executable size!
		396	else if (!strcmp (var, "enable-tcp"))
		397	{
		398	#if ENABLE_TCP
		399	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		400	#endif
		401	}
		402	else if (!strcmp (var, "enable-icmp"))
		403	{
		404	#if ENABLE_ICMP
		405	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		406	#endif
		407	}
		408	else if (!strcmp (var, "enable-dns"))
		409	{
		410	#if ENABLE_DNS
		411	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		412	#endif
		413	}
		414	else if (!strcmp (var, "enable-udp"))
		415	{
		416	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		417	}
		418	else if (!strcmp (var, "enable-rawip"))
		419	{
		420	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		421	}
		422
		423	// unknown or misplaced
		424	else
		425	slog (L_WARN,
		426	_("unknown or misplaced variable `%s', at '%s' line %d"),
		427	var, fname, lineno);
		428	}
		429
		430	fclose (f);
		431	}
		432	else
		433	{
		434	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		435	exit (EXIT_FAILURE);
		436	}
		437
		438	free (fname);
		439
		440	fname = config_filename (prikeyfile, "hostkey");
		441
		442	f = fopen (fname, "r");
		443	if (f)
		444	{
		445	rsa_key = RSA_new ();
		446
		447	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
		448	{
		449	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		450	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		451	exit (EXIT_FAILURE);
		452	}
		453
		454	require (RSA_blinding_on (rsa_key, 0));
		455
		456	fclose (f);
		457	}
		458	else
		459	{
		460	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
		461
		462	if (need_keys)
		463	exit (EXIT_FAILURE);
		464	}
		465
		466	if (need_keys && ::thisnode
		467	&& rsa_key && thisnode && thisnode->rsa_key)
		468	if (BN_cmp (rsa_key->n, thisnode->rsa_key->n) != 0
		469	\|\| BN_cmp (rsa_key->e, thisnode->rsa_key->e) != 0)
		470	{
		471	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		472	exit (EXIT_FAILURE);
		473	}
		474
		475	free (fname);
		476	}
		477
		478	char configuration::config_filename (const char name, const char *dflt)
		479	{
		480	char *fname;
		481
		482	asprintf (&fname, name ? name : dflt, ::thisnode);
		483
		484	if (!ABSOLUTE_PATH (fname))
		485	{
		486	char *rname = fname;
		487	asprintf (&fname, "%s/%s", confbase, rname);
		488	free (rname);
		489	}
		490
		491	return fname;
		492	}
		493
		494	void
		495	configuration::print ()
		496	{
		497	printf (_("\nConfiguration\n\n"));
		498	printf (_("# of nodes: %d\n"), nodes.size ());
		499	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
		500	printf (_("MTU: %d\n"), mtu);
		501	printf (_("rekeying interval: %d\n"), rekey);
		502	printf (_("keepalive interval: %d\n"), keepalive);
		503	printf (_("interface: %s\n"), ifname);
		504	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
		505	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
		506	printf ("\n");
		507
		508	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
		509	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
		510
		511	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
		512	(*i)->print ();
		513
		514	printf ("\n");
		515	}
		516
		517	configuration::configuration ()
		518	{
		519	asprintf (&confbase, "%s/gvpe", CONFDIR);
		520
		521	init ();
		522	}
		523
		524	configuration::~configuration ()
		525	{
		526	cleanup ();
		527	}
		528
		529

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs. Revision 1.29 by pcg, Tue Mar 1 06:27:20 2005 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs.
Revision 1.29 by pcg, Tue Mar 1 06:27:20 2005 UTC