ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/conf.C
(Generate patch)

Comparing gvpe/src/conf.C (file contents):
Revision 1.48 by pcg, Sun Aug 10 02:49:27 2008 UTC vs.
Revision 1.56 by root, Sun Mar 6 21:01:36 2011 UTC

1/* 1/*
2 conf.c -- configuration code 2 conf.C -- configuration code
3 Copyright (C) 2003-2008 Marc Lehmann <gvpe@schmorp.de> 3 Copyright (C) 2003-2008,2011 Marc Lehmann <gvpe@schmorp.de>
4 4
5 This file is part of GVPE. 5 This file is part of GVPE.
6 6
7 GVPE is free software; you can redistribute it and/or modify it 7 GVPE is free software; you can redistribute it and/or modify it
8 under the terms of the GNU General Public License as published by the 8 under the terms of the GNU General Public License as published by the
57char *thisnode; 57char *thisnode;
58char *identname; 58char *identname;
59 59
60struct configuration conf; 60struct configuration conf;
61 61
62u8
62u8 best_protocol (u8 protset) 63best_protocol (u8 protset)
63{ 64{
64 if (protset & PROT_IPv4 ) return PROT_IPv4; 65 if (protset & PROT_IPv4 ) return PROT_IPv4;
65 if (protset & PROT_ICMPv4) return PROT_ICMPv4; 66 if (protset & PROT_ICMPv4) return PROT_ICMPv4;
66 if (protset & PROT_UDPv4 ) return PROT_UDPv4; 67 if (protset & PROT_UDPv4 ) return PROT_UDPv4;
67 if (protset & PROT_TCPv4 ) return PROT_TCPv4; 68 if (protset & PROT_TCPv4 ) return PROT_TCPv4;
68 if (protset & PROT_DNSv4 ) return PROT_DNSv4; 69 if (protset & PROT_DNSv4 ) return PROT_DNSv4;
69 70
70 return 0; 71 return 0;
71} 72}
72 73
74const char *
73const char *strprotocol (u8 protocol) 75strprotocol (u8 protocol)
74{ 76{
75 if (protocol & PROT_IPv4 ) return "rawip"; 77 if (protocol & PROT_IPv4 ) return "rawip";
76 if (protocol & PROT_ICMPv4) return "icmp"; 78 if (protocol & PROT_ICMPv4) return "icmp";
77 if (protocol & PROT_UDPv4 ) return "udp"; 79 if (protocol & PROT_UDPv4 ) return "udp";
78 if (protocol & PROT_TCPv4 ) return "tcp"; 80 if (protocol & PROT_TCPv4 ) return "tcp";
103 return false; 105 return false;
104 106
105 return true; 107 return true;
106} 108}
107 109
108void
109conf_node::print ()
110{
111 printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",
112 id,
113 id >> 8, id & 0xff,
114 compress ? 'Y' : 'N',
115 connectmode == C_ONDEMAND ? "ondemand"
116 : connectmode == C_NEVER ? "never"
117 : connectmode == C_ALWAYS ? "always"
118 : connectmode == C_DISABLED ? "disabled"
119 : "",
120 nodename,
121 hostname ? hostname : "",
122 hostname ? ":" : "",
123 hostname ? udp_port : 0
124 );
125}
126
127conf_node::~conf_node () 110conf_node::~conf_node ()
128{ 111{
129#if 0 112#if 0
130 // does not work, because string pointers etc. are shared 113 // does not work, because string pointers etc. are shared
131 // is not called, however 114 // is not called, however
140 free (dns_hostname); 123 free (dns_hostname);
141#endif 124#endif
142#endif 125#endif
143} 126}
144 127
128void
145void configuration::init () 129configuration::init ()
146{ 130{
147 memset (this, 0, sizeof (*this)); 131 memset (this, 0, sizeof (*this));
148 132
149 mtu = DEFAULT_MTU; 133 mtu = DEFAULT_MTU;
134 nfmark = 0;
150 rekey = DEFAULT_REKEY; 135 rekey = DEFAULT_REKEY;
151 keepalive = DEFAULT_KEEPALIVE; 136 keepalive = DEFAULT_KEEPALIVE;
152 llevel = L_INFO; 137 llevel = L_INFO;
153 ip_proto = IPPROTO_GRE; 138 ip_proto = IPPROTO_GRE;
154#if ENABLE_ICMP 139#if ENABLE_ICMP
166 default_node.if_up_data = strdup (""); 151 default_node.if_up_data = strdup ("");
167 152
168#if ENABLE_DNS 153#if ENABLE_DNS
169 default_node.dns_port = 0; // default is 0 == client 154 default_node.dns_port = 0; // default is 0 == client
170 155
156 dns_case_preserving = true;
171 dns_forw_host = strdup ("127.0.0.1"); 157 dns_forw_host = strdup ("127.0.0.1");
172 dns_forw_port = 53; 158 dns_forw_port = 53;
173 dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR; 159 dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
174 dns_send_interval = DEFAULT_DNS_SEND_INTERVAL; 160 dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
175 dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR; 161 dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
177#endif 163#endif
178 164
179 conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid"); 165 conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
180} 166}
181 167
168void
182void configuration::cleanup() 169configuration::cleanup ()
183{ 170{
184 if (rsa_key) 171 if (rsa_key)
185 RSA_free (rsa_key); 172 RSA_free (rsa_key);
186 173
187 rsa_key = 0; 174 rsa_key = 0;
188 175
189 free (pidfilename); pidfilename = 0; 176 free (pidfilename); pidfilename = 0;
190 free (ifname); ifname = 0; 177 free (ifname); ifname = 0;
191#if ENABLE_HTTP_PROXY 178#if ENABLE_HTTP_PROXY
192 free (proxy_host); proxy_host = 0; 179 free (proxy_host); proxy_host = 0;
193 free (proxy_auth); proxy_auth = 0; 180 free (proxy_auth); proxy_auth = 0;
194#endif 181#endif
195#if ENABLE_DNS 182#if ENABLE_DNS
196 free (dns_forw_host); dns_forw_host = 0; 183 free (dns_forw_host); dns_forw_host = 0;
197#endif 184#endif
185 free (script_if_up); script_if_up = 0;
186 free (script_node_up); script_node_up = 0;
187 free (script_node_change); script_node_change = 0;
188 free (script_node_down); script_node_down = 0;
198} 189}
199 190
200void 191void
201configuration::clear () 192configuration::clear ()
202{ 193{
206 nodes.clear (); 197 nodes.clear ();
207 198
208 cleanup (); 199 cleanup ();
209 init (); 200 init ();
210} 201}
202
203//static bool
204//is_true (const char *name)
205//{
206 //re
207//}
211 208
212#define parse_bool(target,name,trueval,falseval) do { \ 209#define parse_bool(target,name,trueval,falseval) do { \
213 if (!strcmp (val, "yes")) target = trueval; \ 210 if (!strcmp (val, "yes")) target = trueval; \
214 else if (!strcmp (val, "no")) target = falseval; \ 211 else if (!strcmp (val, "no")) target = falseval; \
215 else if (!strcmp (val, "true")) target = trueval; \ 212 else if (!strcmp (val, "true")) target = trueval; \
216 else if (!strcmp (val, "false")) target = falseval; \ 213 else if (!strcmp (val, "false")) target = falseval; \
217 else if (!strcmp (val, "on")) target = trueval; \ 214 else if (!strcmp (val, "on")) target = trueval; \
218 else if (!strcmp (val, "off")) target = falseval; \ 215 else if (!strcmp (val, "off")) target = falseval; \
219 else \ 216 else \
220 return _("illegal boolean value, only 'yes|true|on' or 'no|false|off' allowed. (ignored)"); \ 217 return _("illegal boolean value, only 'yes|true|on' or 'no|false|off' allowed, ignored"); \
221} while (0) 218} while (0)
222 219
223const char * 220const char *
224configuration_parser::parse_line (char *line) 221configuration_parser::parse_line (char *line)
225{ 222{
243 return 0; /* comment: ignore */ 240 return 0; /* comment: ignore */
244 241
245 char *val = strtok (NULL, "\t\n\r ="); 242 char *val = strtok (NULL, "\t\n\r =");
246 243
247 if (!val || val[0] == '#') 244 if (!val || val[0] == '#')
248 return _("no value given for variable. (ignored)"); 245 return _("no value given for variable, ignored");
249 246
250 if (!strcmp (var, "on")) 247 else if (!strcmp (var, "on"))
251 { 248 {
252 if (!::thisnode 249 if (::thisnode
253 || (val[0] == '!' && strcmp (val + 1, ::thisnode)) 250 && ((val[0] == '!' && strcmp (val + 1, ::thisnode))
254 || !strcmp (val, ::thisnode)) 251 || !strcmp (val, ::thisnode)))
255 return parse_line (strtok (NULL, "\n\r")); 252 return parse_line (strtok (NULL, "\n\r"));
256 else 253 }
257 return 0; 254
255 else if (!strcmp (var, "include"))
256 {
257 char *fname = conf.config_filename (val);
258 parse_file (fname);
259 free (fname);
258 } 260 }
259 261
260 // truly global 262 // truly global
261 if (!strcmp (var, "loglevel")) 263 else if (!strcmp (var, "loglevel"))
262 { 264 {
263 loglevel l = string_to_loglevel (val); 265 loglevel l = string_to_loglevel (val);
264 266
265 if (l == L_NONE) 267 if (l == L_NONE)
266 return _("unknown loglevel. (skipping)"); 268 return _("unknown loglevel, ignored");
267 } 269 }
268 else if (!strcmp (var, "ip-proto")) 270 else if (!strcmp (var, "ip-proto"))
269 conf.ip_proto = atoi (val); 271 conf.ip_proto = atoi (val);
270 else if (!strcmp (var, "icmp-type")) 272 else if (!strcmp (var, "icmp-type"))
271 { 273 {
330 conf.rekey = atoi (val); 332 conf.rekey = atoi (val);
331 else if (!strcmp (var, "keepalive")) 333 else if (!strcmp (var, "keepalive"))
332 conf.keepalive = atoi (val); 334 conf.keepalive = atoi (val);
333 else if (!strcmp (var, "mtu")) 335 else if (!strcmp (var, "mtu"))
334 conf.mtu = atoi (val); 336 conf.mtu = atoi (val);
337 else if (!strcmp (var, "nfmark"))
338 conf.nfmark = atoi (val);
335 else if (!strcmp (var, "if-up")) 339 else if (!strcmp (var, "if-up"))
336 free (conf.script_if_up), conf.script_if_up = strdup (val); 340 free (conf.script_if_up), conf.script_if_up = strdup (val);
337 else if (!strcmp (var, "node-up")) 341 else if (!strcmp (var, "node-up"))
338 free (conf.script_node_up), conf.script_node_up = strdup (val); 342 free (conf.script_node_up), conf.script_node_up = strdup (val);
343 else if (!strcmp (var, "node-change"))
344 free (conf.script_node_change), conf.script_node_change = strdup (val);
339 else if (!strcmp (var, "node-down")) 345 else if (!strcmp (var, "node-down"))
340 free (conf.script_node_down), conf.script_node_down = strdup (val); 346 free (conf.script_node_down), conf.script_node_down = strdup (val);
341 else if (!strcmp (var, "pid-file")) 347 else if (!strcmp (var, "pid-file"))
342 free (conf.pidfilename), conf.pidfilename = strdup (val); 348 free (conf.pidfilename), conf.pidfilename = strdup (val);
343 else if (!strcmp (var, "dns-forw-host")) 349 else if (!strcmp (var, "dns-forw-host"))
372 } 378 }
373 else if (!strcmp (var, "dns-max-outstanding")) 379 else if (!strcmp (var, "dns-max-outstanding"))
374 { 380 {
375#if ENABLE_DNS 381#if ENABLE_DNS
376 conf.dns_max_outstanding = atoi (val); 382 conf.dns_max_outstanding = atoi (val);
383#endif
384 }
385 else if (!strcmp (var, "dns-case-preserving"))
386 {
387#if ENABLE_DNS
388 parse_bool (conf.dns_case_preserving, "dns-case-preserving", true, false);
377#endif 389#endif
378 } 390 }
379 else if (!strcmp (var, "http-proxy-host")) 391 else if (!strcmp (var, "http-proxy-host"))
380 { 392 {
381#if ENABLE_HTTP_PROXY 393#if ENABLE_HTTP_PROXY
437 else if (!strcmp (val, "always")) 449 else if (!strcmp (val, "always"))
438 node->connectmode = conf_node::C_ALWAYS; 450 node->connectmode = conf_node::C_ALWAYS;
439 else if (!strcmp (val, "disabled")) 451 else if (!strcmp (val, "disabled"))
440 node->connectmode = conf_node::C_DISABLED; 452 node->connectmode = conf_node::C_DISABLED;
441 else 453 else
442 return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)"); 454 return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', ignored");
443 } 455 }
444 else if (!strcmp (var, "inherit-tos")) 456 else if (!strcmp (var, "inherit-tos"))
445 parse_bool (node->inherit_tos, "inherit-tos", true, false); 457 parse_bool (node->inherit_tos, "inherit-tos", true, false);
446 else if (!strcmp (var, "compress")) 458 else if (!strcmp (var, "compress"))
447 parse_bool (node->compress, "compress", true, false); 459 parse_bool (node->compress, "compress", true, false);
481 else if (!strcmp (var, "max-queue")) 493 else if (!strcmp (var, "max-queue"))
482 node->max_queue = atoi (val); 494 node->max_queue = atoi (val);
483 495
484 // unknown or misplaced 496 // unknown or misplaced
485 else 497 else
486 return _("unknown configuration directive. (ignored)"); 498 return _("unknown configuration directive - ignored");
487 499
488 return 0; 500 return 0;
489} 501}
490 502
503void
491void conf_node::finalise () 504conf_node::finalise ()
492{ 505{
493 if (max_queue < 1) 506 if (max_queue < 1)
494 { 507 {
495 slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename); 508 slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename);
496 max_queue = 1; 509 max_queue = 1;
497 } 510 }
498 511
499 if (routerprio && (connectmode != C_ALWAYS && connectmode != C_DISABLED)) 512 if (routerprio > 1 && (connectmode != C_ALWAYS && connectmode != C_DISABLED))
500 { 513 {
501 //slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename); 514 //slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename);
502 connectmode = C_ALWAYS; 515 connectmode = C_ALWAYS;
503 } 516 }
504} 517}
505 518
519void
506void configuration_parser::parse_argv () 520configuration_parser::parse_argv ()
507{ 521{
508 for (int i = 0; i < argc; ++i) 522 for (int i = 0; i < argc; ++i)
509 { 523 {
510 char *v = argv [i]; 524 char *v = argv [i];
511 525
532 if (warn) 546 if (warn)
533 slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v); 547 slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
534 548
535 *v = 0; 549 *v = 0;
536 } 550 }
551 }
552}
553
554void
555configuration_parser::parse_file (const char *fname)
556{
557 if (FILE *f = fopen (fname, "r"))
558 {
559 char line [2048];
560 int lineno = 0;
561
562 while (fgets (line, sizeof (line), f))
563 {
564 lineno++;
565
566 const char *warn = parse_line (line);
567
568 if (warn)
569 slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
570 }
571
572 fclose (f);
573
574 parse_argv ();
575 }
576 else
577 {
578 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
579 exit (EXIT_FAILURE);
537 } 580 }
538} 581}
539 582
540configuration_parser::configuration_parser (configuration &conf, 583configuration_parser::configuration_parser (configuration &conf,
541 bool need_keys, 584 bool need_keys,
542 int argc, 585 int argc,
543 char **argv) 586 char **argv)
544: conf (conf),need_keys (need_keys), argc (argc), argv (argv) 587: conf (conf),need_keys (need_keys), argc (argc), argv (argv)
545{ 588{
546 char *fname; 589 char *fname;
547 FILE *f;
548 590
549 conf.clear (); 591 conf.clear ();
592 node = &conf.default_node;
550 593
551 asprintf (&fname, "%s/gvpe.conf", confbase); 594 asprintf (&fname, "%s/gvpe.conf", confbase);
552 f = fopen (fname, "r"); 595 parse_file (fname);
553
554 if (f)
555 {
556 char line[16384];
557 int lineno = 0;
558 node = &conf.default_node;
559
560 while (fgets (line, sizeof (line), f))
561 {
562 lineno++;
563
564 const char *warn = parse_line (line);
565
566 if (warn)
567 slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
568 }
569
570 fclose (f);
571
572 parse_argv ();
573 }
574 else
575 {
576 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
577 exit (EXIT_FAILURE);
578 }
579
580 free (fname); 596 free (fname);
581 597
582 fname = conf.config_filename (conf.prikeyfile, "hostkey"); 598 fname = conf.config_filename (conf.prikeyfile, "hostkey");
583 599
584 f = fopen (fname, "r"); 600 if (FILE *f = fopen (fname, "r"))
585 if (f)
586 { 601 {
587 conf.rsa_key = RSA_new (); 602 conf.rsa_key = RSA_new ();
588 603
589 if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL)) 604 if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
590 { 605 {
602 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno)); 617 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
603 618
604 if (need_keys) 619 if (need_keys)
605 exit (EXIT_FAILURE); 620 exit (EXIT_FAILURE);
606 } 621 }
622
623 free (fname);
607 624
608 if (need_keys && ::thisnode 625 if (need_keys && ::thisnode
609 && conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key) 626 && conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
610 if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0 627 if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
611 || BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0) 628 || BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
612 { 629 {
613 slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode); 630 slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
614 exit (EXIT_FAILURE); 631 exit (EXIT_FAILURE);
615 } 632 }
616 633
617 free (fname);
618
619 for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i) 634 for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
620 (*i)->finalise (); 635 (*i)->finalise ();
621} 636}
622 637
638char *
623char *configuration::config_filename (const char *name, const char *dflt) 639configuration::config_filename (const char *name, const char *dflt)
624{ 640{
625 char *fname; 641 char *fname;
626 642
627 asprintf (&fname, name ? name : dflt, ::thisnode); 643 asprintf (&fname, name ? name : dflt, ::thisnode);
628 644
632 asprintf (&fname, "%s/%s", confbase, rname); 648 asprintf (&fname, "%s/%s", confbase, rname);
633 free (rname); 649 free (rname);
634 } 650 }
635 651
636 return fname; 652 return fname;
653}
654
655void
656conf_node::print ()
657{
658 printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %02x %s%s%d\n",
659 id,
660 id >> 8, id & 0xff,
661 compress ? 'Y' : 'N',
662 connectmode == C_ONDEMAND ? "ondemand"
663 : connectmode == C_NEVER ? "never"
664 : connectmode == C_ALWAYS ? "always"
665 : connectmode == C_DISABLED ? "disabled"
666 : "",
667 nodename,
668 protocols,
669 hostname ? hostname : "",
670 hostname ? ":" : "",
671 hostname ? udp_port : 0
672 );
637} 673}
638 674
639void 675void
640configuration::print () 676configuration::print ()
641{ 677{
648 printf (_("interface: %s\n"), ifname); 684 printf (_("interface: %s\n"), ifname);
649 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>"); 685 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
650 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1); 686 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
651 printf ("\n"); 687 printf ("\n");
652 688
653 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n", 689 printf ("%4s %-17s %s %-8.8s %-10.10s %04s %s\n",
654 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port")); 690 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Prot"), _("Host:Port"));
655 691
656 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i) 692 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
657 (*i)->print (); 693 (*i)->print ();
658 694
659 printf ("\n"); 695 printf ("\n");
669configuration::~configuration () 705configuration::~configuration ()
670{ 706{
671 cleanup (); 707 cleanup ();
672} 708}
673 709
674

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines