[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.48 by pcg, Sun Aug 10 02:49:27 2008 UTC vs.
Revision 1.62 by root, Wed Jul 17 16:40:57 2013 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.C -- configuration code
3	Copyright (C) 2003-2008 Marc Lehmann <gvpe@schmorp.de>	3	Copyright (C) 2003-2008,2011 Marc Lehmann <gvpe@schmorp.de>
4		4
5	This file is part of GVPE.	5	This file is part of GVPE.
6		6
7	GVPE is free software; you can redistribute it and/or modify it	7	GVPE is free software; you can redistribute it and/or modify it
8	under the terms of the GNU General Public License as published by the	8	under the terms of the GNU General Public License as published by the
38	#include <errno.h>	38	#include <errno.h>
39	#include <netdb.h>	39	#include <netdb.h>
40	#include <sys/stat.h>	40	#include <sys/stat.h>
41	#include <sys/types.h>	41	#include <sys/types.h>
42	#include <unistd.h>	42	#include <unistd.h>
		43	#include <pwd.h>
43		44
44	#include "netcompat.h"	45	#include "netcompat.h"
45		46
46	#include <openssl/err.h>	47	#include <openssl/err.h>
47	#include <openssl/pem.h>	48	#include <openssl/pem.h>
…		…
57	char *thisnode;	58	char *thisnode;
58	char *identname;	59	char *identname;
59		60
60	struct configuration conf;	61	struct configuration conf;
61		62
		63	u8
62	u8 best_protocol (u8 protset)	64	best_protocol (u8 protset)
63	{	65	{
64	if (protset & PROT_IPv4 ) return PROT_IPv4;	66	if (protset & PROT_IPv4 ) return PROT_IPv4;
65	if (protset & PROT_ICMPv4) return PROT_ICMPv4;	67	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
66	if (protset & PROT_UDPv4 ) return PROT_UDPv4;	68	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
67	if (protset & PROT_TCPv4 ) return PROT_TCPv4;	69	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
68	if (protset & PROT_DNSv4 ) return PROT_DNSv4;	70	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
69		71
70	return 0;	72	return 0;
71	}	73	}
72		74
		75	const char *
73	const char *strprotocol (u8 protocol)	76	strprotocol (u8 protocol)
74	{	77	{
75	if (protocol & PROT_IPv4 ) return "rawip";	78	if (protocol & PROT_IPv4 ) return "rawip";
76	if (protocol & PROT_ICMPv4) return "icmp";	79	if (protocol & PROT_ICMPv4) return "icmp";
77	if (protocol & PROT_UDPv4 ) return "udp";	80	if (protocol & PROT_UDPv4 ) return "udp";
78	if (protocol & PROT_TCPv4 ) return "tcp";	81	if (protocol & PROT_TCPv4 ) return "tcp";
…		…
103	return false;	106	return false;
104		107
105	return true;	108	return true;
106	}	109	}
107		110
108	void
109	conf_node::print ()
110	{
111	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n",
112	id,
113	id >> 8, id & 0xff,
114	compress ? 'Y' : 'N',
115	connectmode == C_ONDEMAND ? "ondemand"
116	: connectmode == C_NEVER ? "never"
117	: connectmode == C_ALWAYS ? "always"
118	: connectmode == C_DISABLED ? "disabled"
119	: "",
120	nodename,
121	hostname ? hostname : "",
122	hostname ? ":" : "",
123	hostname ? udp_port : 0
124	);
125	}
126
127	conf_node::~conf_node ()	111	conf_node::~conf_node ()
128	{	112	{
129	#if 0	113	#if 0
130	// does not work, because string pointers etc. are shared	114	// does not work, because string pointers etc. are shared
131	// is not called, however	115	// is not called, however
…		…
140	free (dns_hostname);	124	free (dns_hostname);
141	#endif	125	#endif
142	#endif	126	#endif
143	}	127	}
144		128
		129	void
145	void configuration::init ()	130	configuration::init ()
146	{	131	{
147	memset (this, 0, sizeof (*this));	132	memset (this, 0, sizeof (*this));
148		133
149	mtu = DEFAULT_MTU;	134	mtu = DEFAULT_MTU;
		135	nfmark = 0;
150	rekey = DEFAULT_REKEY;	136	rekey = DEFAULT_REKEY;
151	keepalive = DEFAULT_KEEPALIVE;	137	keepalive = DEFAULT_KEEPALIVE;
152	llevel = L_INFO;	138	llevel = L_INFO;
153	ip_proto = IPPROTO_GRE;	139	ip_proto = IPPROTO_GRE;
154	#if ENABLE_ICMP	140	#if ENABLE_ICMP
…		…
166	default_node.if_up_data = strdup ("");	152	default_node.if_up_data = strdup ("");
167		153
168	#if ENABLE_DNS	154	#if ENABLE_DNS
169	default_node.dns_port = 0; // default is 0 == client	155	default_node.dns_port = 0; // default is 0 == client
170		156
		157	dns_case_preserving = true;
171	dns_forw_host = strdup ("127.0.0.1");	158	dns_forw_host = strdup ("127.0.0.1");
172	dns_forw_port = 53;	159	dns_forw_port = 53;
173	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;	160	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
174	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;	161	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
175	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;	162	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
176	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;	163	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
177	#endif	164	#endif
178		165
179	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");	166	pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		167	seed_dev = strdup ("/dev/urandom");
		168	reseed = DEFAULT_RESEED;
180	}	169	}
181		170
		171	void
182	void configuration::cleanup()	172	configuration::cleanup ()
183	{	173	{
184	if (rsa_key)	174	if (rsa_key)
185	RSA_free (rsa_key);	175	RSA_free (rsa_key);
186		176
187	rsa_key = 0;	177	rsa_key = 0;
188		178
		179	free (seed_dev); seed_dev = 0;
189	free (pidfilename); pidfilename = 0;	180	free (pidfilename); pidfilename = 0;
190	free (ifname); ifname = 0;	181	free (ifname); ifname = 0;
191	#if ENABLE_HTTP_PROXY	182	#if ENABLE_HTTP_PROXY
192	free (proxy_host); proxy_host = 0;	183	free (proxy_host); proxy_host = 0;
193	free (proxy_auth); proxy_auth = 0;	184	free (proxy_auth); proxy_auth = 0;
194	#endif	185	#endif
195	#if ENABLE_DNS	186	#if ENABLE_DNS
196	free (dns_forw_host); dns_forw_host = 0;	187	free (dns_forw_host); dns_forw_host = 0;
197	#endif	188	#endif
		189	free (change_root); change_root = 0;
		190	free (script_if_up); script_if_up = 0;
		191	free (script_node_up); script_node_up = 0;
		192	free (script_node_change); script_node_change = 0;
		193	free (script_node_down); script_node_down = 0;
198	}	194	}
199		195
200	void	196	void
201	configuration::clear ()	197	configuration::clear ()
202	{	198	{
…		…
206	nodes.clear ();	202	nodes.clear ();
207		203
208	cleanup ();	204	cleanup ();
209	init ();	205	init ();
210	}	206	}
		207
		208	conf_node *
		209	configuration::find_node (const char *name)
		210	{
		211	for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
		212	if (!strcmp ((*i)->nodename, name))
		213	return *i;
		214
		215	return 0;
		216	}
		217
		218	//static bool
		219	//is_true (const char *name)
		220	//{
		221	//re
		222	//}
211		223
212	#define parse_bool(target,name,trueval,falseval) do { \	224	#define parse_bool(target,name,trueval,falseval) do { \
213	if (!strcmp (val, "yes")) target = trueval; \	225	if (!strcmp (val, "yes")) target = trueval; \
214	else if (!strcmp (val, "no")) target = falseval; \	226	else if (!strcmp (val, "no")) target = falseval; \
215	else if (!strcmp (val, "true")) target = trueval; \	227	else if (!strcmp (val, "true")) target = trueval; \
216	else if (!strcmp (val, "false")) target = falseval; \	228	else if (!strcmp (val, "false")) target = falseval; \
217	else if (!strcmp (val, "on")) target = trueval; \	229	else if (!strcmp (val, "on")) target = trueval; \
218	else if (!strcmp (val, "off")) target = falseval; \	230	else if (!strcmp (val, "off")) target = falseval; \
219	else \	231	else \
220	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed. (ignored)"); \	232	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed, ignored"); \
221	} while (0)	233	} while (0)
222		234
223	const char *	235	const char *
224	configuration_parser::parse_line (char *line)	236	configuration_parser::parse_line (char *line)
225	{	237	{
…		…
243	return 0; /* comment: ignore */	255	return 0; /* comment: ignore */
244		256
245	char *val = strtok (NULL, "\t\n\r =");	257	char *val = strtok (NULL, "\t\n\r =");
246		258
247	if (!val \|\| val[0] == '#')	259	if (!val \|\| val[0] == '#')
248	return _("no value given for variable. (ignored)");	260	return _("no value given for variable, ignored");
249		261
250	if (!strcmp (var, "on"))	262	else if (!strcmp (var, "on"))
251	{	263	{
252	if (!::thisnode	264	if (::thisnode
253	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))	265	&& ((val[0] == '!' && strcmp (val + 1, ::thisnode))
254	\|\| !strcmp (val, ::thisnode))	266	\|\| !strcmp (val, ::thisnode)))
255	return parse_line (strtok (NULL, "\n\r"));	267	return parse_line (strtok (NULL, "\n\r"));
256	else	268	}
257	return 0;	269
		270	else if (!strcmp (var, "include"))
		271	{
		272	char *fname = conf.config_filename (val);
		273	parse_file (fname);
		274	free (fname);
258	}	275	}
259		276
260	// truly global	277	// truly global
261	if (!strcmp (var, "loglevel"))	278	else if (!strcmp (var, "loglevel"))
262	{	279	{
263	loglevel l = string_to_loglevel (val);	280	loglevel l = string_to_loglevel (val);
264		281
265	if (l == L_NONE)	282	if (l == L_NONE)
266	return _("unknown loglevel. (skipping)");	283	return _("unknown loglevel, ignored");
267	}	284	}
268	else if (!strcmp (var, "ip-proto"))	285	else if (!strcmp (var, "ip-proto"))
269	conf.ip_proto = atoi (val);	286	conf.ip_proto = atoi (val);
270	else if (!strcmp (var, "icmp-type"))	287	else if (!strcmp (var, "icmp-type"))
271	{	288	{
272	#if ENABLE_ICMP	289	#if ENABLE_ICMP
273	conf.icmp_type = atoi (val);	290	conf.icmp_type = atoi (val);
274	#endif	291	#endif
275	}	292	}
		293	else if (!strcmp (var, "chuser"))
		294	{
		295	struct passwd *pw = getpwnam (val);
		296	if (!pw)
		297	return _("user specified for chuser not found");
276		298
277	// per config	299	conf.change_uid = pw->pw_uid;
		300	conf.change_gid = pw->pw_gid;
		301	}
		302	else if (!strcmp (var, "chuid"))
		303	conf.change_uid = atoi (val);
		304	else if (!strcmp (var, "chgid"))
		305	conf.change_gid = atoi (val);
		306	else if (!strcmp (var, "chroot"))
		307	free (conf.change_root), conf.change_root = strdup (val);
		308
		309	// per node
		310	else if (!strcmp (var, "global"))
		311	node = &conf.default_node;
278	else if (!strcmp (var, "node"))	312	else if (!strcmp (var, "node"))
279	{	313	{
280	parse_argv ();	314	node = conf.find_node (val);
281		315
		316	if (!node)
		317	{
282	conf.default_node.id++;	318	conf.default_node.id++;
283	node = new conf_node (conf.default_node);	319	node = new conf_node (conf.default_node);
284	conf.nodes.push_back (node);	320	conf.nodes.push_back (node);
285	node->nodename = strdup (val);	321	node->nodename = strdup (val);
286
287	{
288	char *fname;
289	FILE *f;
290
291	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
292
293	f = fopen (fname, "r");
294	if (f)
295	{
296	node->rsa_key = RSA_new ();
297
298	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
299	{
300	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
301	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
302	exit (EXIT_FAILURE);
303	}
304
305	require (RSA_blinding_on (node->rsa_key, 0));
306
307	fclose (f);
308	}	322	}
309	else
310	{
311	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
312
313	if (need_keys)
314	exit (EXIT_FAILURE);
315	}
316
317	free (fname);
318	}
319
320	if (::thisnode && !strcmp (node->nodename, ::thisnode))
321	conf.thisnode = node;
322	}	323	}
323	else if (!strcmp (var, "private-key"))	324	else if (!strcmp (var, "private-key"))
324	free (conf.prikeyfile), conf.prikeyfile = strdup (val);	325	free (conf.prikeyfile), conf.prikeyfile = strdup (val);
325	else if (!strcmp (var, "ifpersist"))	326	else if (!strcmp (var, "ifpersist"))
326	parse_bool (conf.ifpersist, "ifpersist", true, false);	327	parse_bool (conf.ifpersist, "ifpersist", true, false);
…		…
330	conf.rekey = atoi (val);	331	conf.rekey = atoi (val);
331	else if (!strcmp (var, "keepalive"))	332	else if (!strcmp (var, "keepalive"))
332	conf.keepalive = atoi (val);	333	conf.keepalive = atoi (val);
333	else if (!strcmp (var, "mtu"))	334	else if (!strcmp (var, "mtu"))
334	conf.mtu = atoi (val);	335	conf.mtu = atoi (val);
		336	else if (!strcmp (var, "nfmark"))
		337	conf.nfmark = atoi (val);
		338	else if (!strcmp (var, "seed-device"))
		339	free (conf.seed_dev), conf.seed_dev = strdup (val);
		340	else if (!strcmp (var, "seed-interval"))
		341	conf.reseed = atoi (val);
335	else if (!strcmp (var, "if-up"))	342	else if (!strcmp (var, "if-up"))
336	free (conf.script_if_up), conf.script_if_up = strdup (val);	343	free (conf.script_if_up), conf.script_if_up = strdup (val);
337	else if (!strcmp (var, "node-up"))	344	else if (!strcmp (var, "node-up"))
338	free (conf.script_node_up), conf.script_node_up = strdup (val);	345	free (conf.script_node_up), conf.script_node_up = strdup (val);
		346	else if (!strcmp (var, "node-change"))
		347	free (conf.script_node_change), conf.script_node_change = strdup (val);
339	else if (!strcmp (var, "node-down"))	348	else if (!strcmp (var, "node-down"))
340	free (conf.script_node_down), conf.script_node_down = strdup (val);	349	free (conf.script_node_down), conf.script_node_down = strdup (val);
341	else if (!strcmp (var, "pid-file"))	350	else if (!strcmp (var, "pid-file"))
342	free (conf.pidfilename), conf.pidfilename = strdup (val);	351	free (conf.pidfilename), conf.pidfilename = strdup (val);
343	else if (!strcmp (var, "dns-forw-host"))	352	else if (!strcmp (var, "dns-forw-host"))
…		…
372	}	381	}
373	else if (!strcmp (var, "dns-max-outstanding"))	382	else if (!strcmp (var, "dns-max-outstanding"))
374	{	383	{
375	#if ENABLE_DNS	384	#if ENABLE_DNS
376	conf.dns_max_outstanding = atoi (val);	385	conf.dns_max_outstanding = atoi (val);
		386	#endif
		387	}
		388	else if (!strcmp (var, "dns-case-preserving"))
		389	{
		390	#if ENABLE_DNS
		391	parse_bool (conf.dns_case_preserving, "dns-case-preserving", true, false);
377	#endif	392	#endif
378	}	393	}
379	else if (!strcmp (var, "http-proxy-host"))	394	else if (!strcmp (var, "http-proxy-host"))
380	{	395	{
381	#if ENABLE_HTTP_PROXY	396	#if ENABLE_HTTP_PROXY
…		…
437	else if (!strcmp (val, "always"))	452	else if (!strcmp (val, "always"))
438	node->connectmode = conf_node::C_ALWAYS;	453	node->connectmode = conf_node::C_ALWAYS;
439	else if (!strcmp (val, "disabled"))	454	else if (!strcmp (val, "disabled"))
440	node->connectmode = conf_node::C_DISABLED;	455	node->connectmode = conf_node::C_DISABLED;
441	else	456	else
442	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)");	457	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', ignored");
443	}	458	}
444	else if (!strcmp (var, "inherit-tos"))	459	else if (!strcmp (var, "inherit-tos"))
445	parse_bool (node->inherit_tos, "inherit-tos", true, false);	460	parse_bool (node->inherit_tos, "inherit-tos", true, false);
446	else if (!strcmp (var, "compress"))	461	else if (!strcmp (var, "compress"))
447	parse_bool (node->compress, "compress", true, false);	462	parse_bool (node->compress, "compress", true, false);
…		…
481	else if (!strcmp (var, "max-queue"))	496	else if (!strcmp (var, "max-queue"))
482	node->max_queue = atoi (val);	497	node->max_queue = atoi (val);
483		498
484	// unknown or misplaced	499	// unknown or misplaced
485	else	500	else
486	return _("unknown configuration directive. (ignored)");	501	return _("unknown configuration directive - ignored");
487		502
488	return 0;	503	return 0;
489	}	504	}
490		505
		506	void
491	void conf_node::finalise ()	507	conf_node::finalise ()
492	{	508	{
493	if (max_queue < 1)	509	if (max_queue < 1)
494	{	510	{
495	slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename);	511	slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename);
496	max_queue = 1;	512	max_queue = 1;
497	}	513	}
498		514
499	if (routerprio && (connectmode != C_ALWAYS && connectmode != C_DISABLED))	515	if (routerprio > 1 && (connectmode != C_ALWAYS && connectmode != C_DISABLED))
500	{	516	{
501	//slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename);	517	//slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename);
502	connectmode = C_ALWAYS;	518	connectmode = C_ALWAYS;
503	}	519	}
504	}	520	}
505		521
506	void configuration_parser::parse_argv ()	522	void
		523	configuration_parser::parse_file (const char *fname)
507	{	524	{
508	for (int i = 0; i < argc; ++i)	525	if (FILE *f = fopen (fname, "r"))
509	{	526	{
510	char *v = argv [i];	527	char line [2048];
		528	int lineno = 0;
511		529
512	if (!*v)	530	while (fgets (line, sizeof (line), f))
513	continue;
514
515	char *enode = v;
516
517	while (enode != '.' && enode > ' ' && enode != '=' && enode)
518	enode++;
519
520	if (*enode != '.')
521	enode = 0;
522
523	char *wnode = node == &conf.default_node
524	? 0
525	: node->nodename;
526
527	if ((!wnode && !enode)
528	\|\| (wnode && enode && !strncmp (wnode, v, enode - v)))
529	{	531	{
		532	lineno++;
		533
530	const char *warn = parse_line (enode ? enode + 1 : v);	534	const char *warn = parse_line (line);
531		535
532	if (warn)	536	if (warn)
533	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);	537	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
534
535	*v = 0;
536	}	538	}
		539
		540	fclose (f);
		541	}
		542	else
		543	{
		544	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		545	exit (EXIT_FAILURE);
537	}	546	}
538	}	547	}
539		548
540	configuration_parser::configuration_parser (configuration &conf,	549	configuration_parser::configuration_parser (configuration &conf,
541	bool need_keys,	550	bool need_keys,
542	int argc,	551	int argc,
543	char **argv)	552	char **argv)
544	: conf (conf),need_keys (need_keys), argc (argc), argv (argv)	553	: conf (conf), need_keys (need_keys), argc (argc), argv (argv)
545	{	554	{
546	char *fname;	555	char *fname;
547	FILE *f;
548		556
549	conf.clear ();	557	conf.clear ();
		558	node = &conf.default_node;
550		559
551	asprintf (&fname, "%s/gvpe.conf", confbase);	560	asprintf (&fname, "%s/gvpe.conf", confbase);
552	f = fopen (fname, "r");	561	parse_file (fname);
553
554	if (f)
555	{
556	char line[16384];
557	int lineno = 0;
558	node = &conf.default_node;
559
560	while (fgets (line, sizeof (line), f))
561	{
562	lineno++;
563
564	const char *warn = parse_line (line);
565
566	if (warn)
567	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
568	}
569
570	fclose (f);
571
572	parse_argv ();
573	}
574	else
575	{
576	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
577	exit (EXIT_FAILURE);
578	}
579
580	free (fname);	562	free (fname);
581		563
582	fname = conf.config_filename (conf.prikeyfile, "hostkey");	564	fname = conf.config_filename (conf.prikeyfile, "hostkey");
583		565
584	f = fopen (fname, "r");	566	if (FILE *f = fopen (fname, "r"))
585	if (f)
586	{	567	{
587	conf.rsa_key = RSA_new ();	568	conf.rsa_key = RSA_new ();
588		569
589	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))	570	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
590	{	571	{
…		…
597		578
598	fclose (f);	579	fclose (f);
599	}	580	}
600	else	581	else
601	{	582	{
602	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
603
604	if (need_keys)	583	if (need_keys)
		584	{
		585	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
605	exit (EXIT_FAILURE);	586	exit (EXIT_FAILURE);
606	}
607
608	if (need_keys && ::thisnode
609	&& conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
610	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
611	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
612	{
613	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
614	exit (EXIT_FAILURE);
615	}	587	}
		588	}
616		589
617	free (fname);	590	free (fname);
618		591
		592	fname = conf.config_filename (conf.pidfilename);
		593	free (conf.pidfilename); conf.pidfilename = fname;
		594
619	for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)	595	for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
		596	{
		597	conf_node node = i;
		598	char *fname;
		599	FILE *f;
		600
		601	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		602
		603	f = fopen (fname, "r");
		604	if (f)
		605	{
		606	node->rsa_key = RSA_new ();
		607
		608	if (!PEM_read_RSAPublicKey (f, &node->rsa_key, NULL, NULL))
		609	{
		610	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		611	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		612	exit (EXIT_FAILURE);
		613	}
		614
		615	require (RSA_blinding_on (node->rsa_key, 0));
		616
		617	fclose (f);
		618	}
		619	else
		620	{
		621	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		622
		623	if (need_keys)
		624	exit (EXIT_FAILURE);
		625	}
		626
		627	free (fname);
		628
620	(*i)->finalise ();	629	(*i)->finalise ();
621	}	630	}
622		631
		632	if (::thisnode)
		633	{
		634	conf.thisnode = conf.find_node (::thisnode);
		635
		636	if (need_keys)
		637	{
		638	if (!conf.thisnode)
		639	{
		640	slog (L_NOTICE, _("local node ('%s') not found in config file, aborting."), ::thisnode);
		641	exit (EXIT_FAILURE);
		642	}
		643
		644	if (conf.rsa_key && conf.thisnode->rsa_key)
		645	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
		646	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
		647	{
		648	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		649	exit (EXIT_FAILURE);
		650	}
		651	}
		652	}
		653
		654	parse_argv ();
		655	}
		656
		657	void
		658	configuration_parser::parse_argv ()
		659	{
		660	for (int i = 0; i < argc; ++i)
		661	{
		662	char *v = argv [i];
		663
		664	if (!*v)
		665	continue;
		666
		667	char *enode = v;
		668
		669	while (enode != '.' && enode > ' ' && enode != '=' && enode)
		670	enode++;
		671
		672	if (*enode != '.')
		673	enode = 0;
		674
		675	if (enode)
		676	{
		677	char *val = strdup (v);
		678	val [enode - v] = 0;
		679	node = conf.find_node (val);
		680	free (val);
		681
		682	if (!node)
		683	{
		684	slog (L_WARN, _("command line option '%s' refers to unknown node, ignoring."), v);
		685	continue;
		686	}
		687	}
		688	else
		689	node = &conf.default_node;
		690
		691	const char *warn = parse_line (enode ? enode + 1 : v);
		692
		693	if (warn)
		694	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
		695	}
		696	}
		697
		698	char *
623	char configuration::config_filename (const char name, const char *dflt)	699	configuration::config_filename (const char name, const char dflt)
624	{	700	{
625	char *fname;	701	char *fname;
626		702
627	asprintf (&fname, name ? name : dflt, ::thisnode);	703	asprintf (&fname, name ? name : dflt, ::thisnode ? ::thisnode : "<unset>");
628		704
629	if (!ABSOLUTE_PATH (fname))	705	if (!ABSOLUTE_PATH (fname))
630	{	706	{
631	char *rname = fname;	707	char *rname = fname;
632	asprintf (&fname, "%s/%s", confbase, rname);	708	asprintf (&fname, "%s/%s", confbase, rname);
633	free (rname);	709	free (rname);
634	}	710	}
635		711
636	return fname;	712	return fname;
		713	}
		714
		715	void
		716	conf_node::print ()
		717	{
		718	printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %02x %s%s%d\n",
		719	id,
		720	id >> 8, id & 0xff,
		721	compress ? 'Y' : 'N',
		722	connectmode == C_ONDEMAND ? "ondemand"
		723	: connectmode == C_NEVER ? "never"
		724	: connectmode == C_ALWAYS ? "always"
		725	: connectmode == C_DISABLED ? "disabled"
		726	: "",
		727	nodename,
		728	protocols,
		729	hostname ? hostname : "",
		730	hostname ? ":" : "",
		731	hostname ? udp_port : 0
		732	);
637	}	733	}
638		734
639	void	735	void
640	configuration::print ()	736	configuration::print ()
641	{	737	{
…		…
648	printf (_("interface: %s\n"), ifname);	744	printf (_("interface: %s\n"), ifname);
649	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");	745	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
650	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);	746	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
651	printf ("\n");	747	printf ("\n");
652		748
653	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",	749	printf ("%4s %-17s %s %-8.8s %-10.10s %04s %s\n",
654	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));	750	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Prot"), _("Host:Port"));
655		751
656	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)	752	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
657	(*i)->print ();	753	(*i)->print ();
658		754
659	printf ("\n");	755	printf ("\n");
…		…
669	configuration::~configuration ()	765	configuration::~configuration ()
670	{	766	{
671	cleanup ();	767	cleanup ();
672	}	768	}
673		769
674

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.48 by pcg, Sun Aug 10 02:49:27 2008 UTC vs. Revision 1.62 by root, Wed Jul 17 16:40:57 2013 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.48 by pcg, Sun Aug 10 02:49:27 2008 UTC vs.
Revision 1.62 by root, Wed Jul 17 16:40:57 2013 UTC