ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/conf.C
(Generate patch)

Comparing gvpe/src/conf.C (file contents):
Revision 1.14 by pcg, Tue Apr 8 03:25:35 2003 UTC vs.
Revision 1.67 by root, Thu Oct 25 04:32:27 2018 UTC

1/* 1/*
2 conf.c -- configuration code 2 conf.C -- configuration code
3 Copyright (C) 1998 Robert van der Meulen 3 Copyright (C) 2003-2008,2011,2018 Marc Lehmann <gvpe@schmorp.de>
4 1998-2002 Ivo Timmermans <ivo@o2w.nl>
5 2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6 2000 Cris van Pelt <tribbel@arise.dhs.org>
7 2003 Marc Lehmann <pcg@goof.com>
8 4
5 This file is part of GVPE.
6
9 This program is free software; you can redistribute it and/or modify 7 GVPE is free software; you can redistribute it and/or modify it
10 it under the terms of the GNU General Public License as published by 8 under the terms of the GNU General Public License as published by the
11 the Free Software Foundation; either version 2 of the License, or 9 Free Software Foundation; either version 3 of the License, or (at your
12 (at your option) any later version. 10 option) any later version.
13 11
14 This program is distributed in the hope that it will be useful, 12 This program is distributed in the hope that it will be useful, but
15 but WITHOUT ANY WARRANTY; without even the implied warranty of 13 WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
17 GNU General Public License for more details. 15 Public License for more details.
18 16
19 You should have received a copy of the GNU General Public License 17 You should have received a copy of the GNU General Public License along
20 along with this program; if not, write to the Free Software 18 with this program; if not, see <http://www.gnu.org/licenses/>.
21 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 19
20 Additional permission under GNU GPL version 3 section 7
21
22 If you modify this Program, or any covered work, by linking or
23 combining it with the OpenSSL project's OpenSSL library (or a modified
24 version of that library), containing parts covered by the terms of the
25 OpenSSL or SSLeay licenses, the licensors of this Program grant you
26 additional permission to convey the resulting work. Corresponding
27 Source for a non-source form of such a combination shall include the
28 source code for the parts of OpenSSL used as well as that of the
29 covered work.
22*/ 30*/
23 31
24#include "config.h" 32#include "config.h"
25 33
26#include <cstdio> 34#include <cstdio>
… …
30#include <errno.h> 38#include <errno.h>
31#include <netdb.h> 39#include <netdb.h>
32#include <sys/stat.h> 40#include <sys/stat.h>
33#include <sys/types.h> 41#include <sys/types.h>
34#include <unistd.h> 42#include <unistd.h>
43#include <pwd.h>
35 44
36#include <netinet/in.h> 45#include "netcompat.h"
37#include <netinet/ip_icmp.h>
38 46
39#include <openssl/err.h> 47#include <openssl/err.h>
40#include <openssl/pem.h> 48#include <openssl/pem.h>
41#include <openssl/rsa.h> 49#include <openssl/rsa.h>
42#include <openssl/rand.h> 50#include <openssl/rand.h>
43 51#include <openssl/bn.h>
44#include "gettext.h"
45 52
46#include "conf.h" 53#include "conf.h"
47#include "slog.h" 54#include "slog.h"
48#include "util.h" 55#include "util.h"
49 56
50char *confbase; 57char *confbase;
51char *thisnode; 58char *thisnode;
52char *identname; 59char *identname;
53char *pidfilename;
54 60
55struct configuration conf; 61struct configuration conf;
56 62
63u8
57u8 best_protocol (u8 protset) 64best_protocol (u8 protset)
58{ 65{
59 if (protset & PROT_IPv4 ) return PROT_IPv4; 66 if (protset & PROT_IPv4 ) return PROT_IPv4;
60 if (protset & PROT_ICMPv4) return PROT_ICMPv4; 67 if (protset & PROT_ICMPv4) return PROT_ICMPv4;
61 if (protset & PROT_UDPv4 ) return PROT_UDPv4; 68 if (protset & PROT_UDPv4 ) return PROT_UDPv4;
62 if (protset & PROT_TCPv4 ) return PROT_TCPv4; 69 if (protset & PROT_TCPv4 ) return PROT_TCPv4;
70 if (protset & PROT_DNSv4 ) return PROT_DNSv4;
63 71
64 return 0; 72 return 0;
65} 73}
66 74
75const char *
67const char *strprotocol (u8 protocol) 76strprotocol (u8 protocol)
68{ 77{
69 if (protocol & PROT_IPv4 ) return "rawip"; 78 if (protocol & PROT_IPv4 ) return "rawip";
70 if (protocol & PROT_ICMPv4) return "icmp"; 79 if (protocol & PROT_ICMPv4) return "icmp";
71 if (protocol & PROT_UDPv4 ) return "udp"; 80 if (protocol & PROT_UDPv4 ) return "udp";
72 if (protocol & PROT_TCPv4 ) return "tcp"; 81 if (protocol & PROT_TCPv4 ) return "tcp";
82 if (protocol & PROT_DNSv4 ) return "dns";
73 83
74 return "<unknown>"; 84 return "<unknown>";
75} 85}
76 86
77void 87static bool
78conf_node::print () 88match_list (const vector<const char *> &list, const char *str)
79{ 89{
80 printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %s%s%d\n", 90 for (vector<const char *>::const_iterator i = list.end (); i-- > list.begin (); )
81 id, 91 if ((*i)[0] == '*' && !(*i)[1])
82 id >> 8, id & 0xff, 92 return true;
83 compress ? 'Y' : 'N', 93 else if (!strcmp (*i, str))
84 connectmode == C_ONDEMAND ? "ondemand" : 94 return true;
85 connectmode == C_NEVER ? "never" : 95
86 connectmode == C_ALWAYS ? "always" : "", 96 return false;
87 nodename, 97}
88 hostname ? hostname : "", 98
89 hostname ? ":" : "", 99bool
90 hostname ? udp_port : 0 100conf_node::may_direct (struct conf_node *other)
91 ); 101{
102 if (match_list (allow_direct, other->nodename))
103 return true;
104
105 if (match_list (deny_direct, other->nodename))
106 return false;
107
108 return true;
92} 109}
93 110
94conf_node::~conf_node () 111conf_node::~conf_node ()
95{ 112{
113#if 0
114 // does not work, because string pointers etc. are shared
115 // is not called, however
96 if (rsa_key) 116 if (rsa_key)
97 RSA_free (rsa_key); 117 RSA_free (rsa_key);
98 118
99 free (nodename); 119 free (nodename);
100 free (hostname); 120 free (hostname);
121 free (if_up_data);
122#if ENABLE_DNS
123 free (domain);
124 free (dns_hostname);
125#endif
126#endif
101} 127}
102 128
129void
103void configuration::init () 130configuration::init ()
104{ 131{
105 memset (this, 0, sizeof (*this)); 132 memset (this, 0, sizeof (*this));
106 133
134 mtu = DEFAULT_MTU;
135 nfmark = 0;
107 rekey = DEFAULT_REKEY; 136 rekey = DEFAULT_REKEY;
108 keepalive = DEFAULT_KEEPALIVE; 137 keepalive = DEFAULT_KEEPALIVE;
109 llevel = L_INFO; 138 llevel = L_INFO;
110 ip_proto = IPPROTO_GRE; 139 ip_proto = IPPROTO_GRE;
140#if ENABLE_ICMP
111 icmp_type = ICMP_ECHOREPLY; 141 icmp_type = ICMP_ECHOREPLY;
142#endif
112 143
113 default_node.udp_port = DEFAULT_UDPPORT; 144 default_node.udp_port = DEFAULT_UDPPORT;
114 default_node.tcp_port = DEFAULT_UDPPORT; 145 default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
115 default_node.connectmode = conf_node::C_ALWAYS; 146 default_node.connectmode = conf_node::C_ALWAYS;
116 default_node.compress = true; 147 default_node.compress = true;
117 default_node.protocols = PROT_UDPv4; 148 default_node.protocols = 0;
118} 149 default_node.max_retry = DEFAULT_MAX_RETRY;
150 default_node.max_ttl = DEFAULT_MAX_TTL;
151 default_node.max_queue = DEFAULT_MAX_QUEUE;
152 default_node.if_up_data = strdup ("");
119 153
154#if ENABLE_DNS
155 default_node.dns_port = 0; // default is 0 == client
156
157 dns_case_preserving = true;
158 dns_forw_host = strdup ("127.0.0.1");
159 dns_forw_port = 53;
160 dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
161 dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
162 dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
163 dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
164#endif
165
166 pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
167 seed_dev = strdup ("/dev/urandom");
168 reseed = DEFAULT_RESEED;
169}
170
171void
120void configuration::cleanup() 172configuration::cleanup ()
121{ 173{
122 if (rsa_key) 174 if (rsa_key)
123 RSA_free (rsa_key); 175 RSA_free (rsa_key);
124 176
125 rsa_key = 0; 177 rsa_key = 0;
126 178
179 free (seed_dev); seed_dev = 0;
127 free (ifname); ifname = 0; 180 free (pidfilename); pidfilename = 0;
181 free (ifname); ifname = 0;
128#if ENABLE_HTTP_PROXY 182#if ENABLE_HTTP_PROXY
129 free (proxy_host); proxy_host = 0; 183 free (proxy_host); proxy_host = 0;
130 free (proxy_auth); proxy_auth = 0; 184 free (proxy_auth); proxy_auth = 0;
131#endif 185#endif
186#if ENABLE_DNS
187 free (dns_forw_host); dns_forw_host = 0;
188#endif
189 free (change_root); change_root = 0;
190 free (script_if_up); script_if_up = 0;
191 free (script_node_up); script_node_up = 0;
192 free (script_node_change); script_node_change = 0;
193 free (script_node_down); script_node_down = 0;
132} 194}
133 195
134void 196void
135configuration::clear_config () 197configuration::clear ()
136{ 198{
137 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i) 199 for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
138 delete *i; 200 delete *i;
139 201
140 nodes.clear (); 202 nodes.clear ();
141 203
142 cleanup (); 204 cleanup ();
143 init (); 205 init ();
144} 206}
145 207
208conf_node *
209configuration::find_node (const char *name)
210{
211 for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
212 if (!strcmp ((*i)->nodename, name))
213 return *i;
214
215 return 0;
216}
217
218//static bool
219//is_true (const char *name)
220//{
221 //re
222//}
223
146#define parse_bool(target,name,trueval,falseval) \ 224#define parse_bool(target,name,trueval,falseval) do { \
147 if (!strcmp (val, "yes")) target = trueval; \ 225 if (!strcmp (val, "yes")) target = trueval; \
148 else if (!strcmp (val, "no")) target = falseval; \ 226 else if (!strcmp (val, "no")) target = falseval; \
149 else if (!strcmp (val, "true")) target = trueval; \ 227 else if (!strcmp (val, "true")) target = trueval; \
150 else if (!strcmp (val, "false")) target = falseval; \ 228 else if (!strcmp (val, "false")) target = falseval; \
151 else if (!strcmp (val, "on")) target = trueval; \ 229 else if (!strcmp (val, "on")) target = trueval; \
152 else if (!strcmp (val, "off")) target = falseval; \ 230 else if (!strcmp (val, "off")) target = falseval; \
153 else \ 231 else \
154 slog (L_WARN, \
155 _("illegal value for '%s', only 'yes|true|on' or 'no|false|off' allowed, at '%s' line %d"), \ 232 return _("illegal boolean value, only 'yes|true|on' or 'no|false|off' allowed, ignored"); \
156 name, var, fname, lineno); 233} while (0)
157 234
158void configuration::read_config (bool need_keys) 235const char *
236configuration_parser::parse_line (char *line)
159{ 237{
160 char *fname; 238 {
161 FILE *f; 239 char *end = line + strlen (line);
162 240
163 clear_config (); 241 while (end >= line && *end < ' ')
242 end--;
164 243
165 asprintf (&fname, "%s/vped.conf", confbase); 244 *++end = 0;
166 f = fopen (fname, "r"); 245 }
167 246
168 if (f) 247 char *tok = line;
248 const char *var = strtok (tok, "\t =");
249 tok = 0;
250
251 if (!var || !var[0])
252 return 0; /* no tokens on this line */
253
254 if (var[0] == '#')
255 return 0; /* comment: ignore */
256
257 if (!strcmp (var, "global"))
258 {
259 node = &conf.default_node;
260 return 0;
169 { 261 }
262
263 char *val = strtok (NULL, "\t\n\r =");
264
265 if (!val || val[0] == '#')
266 return _("no value given for variable, ignored");
267
268 else if (!strcmp (var, "on"))
269 {
270 if (::thisnode
271 && ((val[0] == '!' && strcmp (val + 1, ::thisnode))
272 || !strcmp (val, ::thisnode)))
273 return parse_line (strtok (NULL, "\n\r"));
274 }
275
276 else if (!strcmp (var, "include"))
277 {
278 char *fname = conf.config_filename (val);
279 parse_file (fname);
280 free (fname);
281 }
282
283 // truly global
284 else if (!strcmp (var, "loglevel"))
285 {
286 loglevel l = string_to_loglevel (val);
287
288 if (l == L_NONE)
289 return _("unknown loglevel, ignored");
290 }
291 else if (!strcmp (var, "serial"))
292 strncpy (conf.serial, val, sizeof (conf.serial));
293 else if (!strcmp (var, "ip-proto"))
294 conf.ip_proto = atoi (val);
295 else if (!strcmp (var, "icmp-type"))
296 {
297#if ENABLE_ICMP
298 conf.icmp_type = atoi (val);
299#endif
300 }
301 else if (!strcmp (var, "chuser"))
302 {
303 struct passwd *pw = getpwnam (val);
304 if (!pw)
305 return _("user specified for chuser not found");
306
307 conf.change_uid = pw->pw_uid;
308 conf.change_gid = pw->pw_gid;
309 }
310 else if (!strcmp (var, "chuid"))
311 conf.change_uid = atoi (val);
312 else if (!strcmp (var, "chgid"))
313 conf.change_gid = atoi (val);
314 else if (!strcmp (var, "chroot"))
315 free (conf.change_root), conf.change_root = strdup (val);
316
317 // per node
318 else if (!strcmp (var, "node"))
319 {
320 node = conf.find_node (val);
321
322 if (!node)
323 {
324 conf.default_node.id++;
325 node = new conf_node (conf.default_node);
326 conf.nodes.push_back (node);
327 node->nodename = strdup (val);
328 }
329 }
330 else if (!strcmp (var, "private-key"))
331 free (conf.prikeyfile), conf.prikeyfile = strdup (val);
332 else if (!strcmp (var, "ifpersist"))
333 parse_bool (conf.ifpersist, "ifpersist", true, false);
334 else if (!strcmp (var, "ifname"))
335 free (conf.ifname), conf.ifname = strdup (val);
336 else if (!strcmp (var, "rekey"))
337 conf.rekey = atoi (val);
338 else if (!strcmp (var, "keepalive"))
339 conf.keepalive = atoi (val);
340 else if (!strcmp (var, "mtu"))
341 conf.mtu = atoi (val);
342 else if (!strcmp (var, "nfmark"))
343 conf.nfmark = atoi (val);
344 else if (!strcmp (var, "seed-device"))
345 free (conf.seed_dev), conf.seed_dev = strdup (val);
346 else if (!strcmp (var, "seed-interval"))
347 conf.reseed = atoi (val);
348 else if (!strcmp (var, "if-up"))
349 free (conf.script_if_up), conf.script_if_up = strdup (val);
350 else if (!strcmp (var, "node-up"))
351 free (conf.script_node_up), conf.script_node_up = strdup (val);
352 else if (!strcmp (var, "node-change"))
353 free (conf.script_node_change), conf.script_node_change = strdup (val);
354 else if (!strcmp (var, "node-down"))
355 free (conf.script_node_down), conf.script_node_down = strdup (val);
356 else if (!strcmp (var, "pid-file"))
357 free (conf.pidfilename), conf.pidfilename = strdup (val);
358 else if (!strcmp (var, "dns-forw-host"))
359 {
360#if ENABLE_DNS
361 free (conf.dns_forw_host), conf.dns_forw_host = strdup (val);
362#endif
363 }
364 else if (!strcmp (var, "dns-forw-port"))
365 {
366#if ENABLE_DNS
367 conf.dns_forw_port = atoi (val);
368#endif
369 }
370 else if (!strcmp (var, "dns-timeout-factor"))
371 {
372#if ENABLE_DNS
373 conf.dns_timeout_factor = atof (val);
374#endif
375 }
376 else if (!strcmp (var, "dns-send-interval"))
377 {
378#if ENABLE_DNS
379 conf.dns_send_interval = atoi (val);
380#endif
381 }
382 else if (!strcmp (var, "dns-overlap-factor"))
383 {
384#if ENABLE_DNS
385 conf.dns_overlap_factor = atof (val);
386#endif
387 }
388 else if (!strcmp (var, "dns-max-outstanding"))
389 {
390#if ENABLE_DNS
391 conf.dns_max_outstanding = atoi (val);
392#endif
393 }
394 else if (!strcmp (var, "dns-case-preserving"))
395 {
396#if ENABLE_DNS
397 parse_bool (conf.dns_case_preserving, "dns-case-preserving", true, false);
398#endif
399 }
400 else if (!strcmp (var, "http-proxy-host"))
401 {
402#if ENABLE_HTTP_PROXY
403 free (conf.proxy_host), conf.proxy_host = strdup (val);
404#endif
405 }
406 else if (!strcmp (var, "http-proxy-port"))
407 {
408#if ENABLE_HTTP_PROXY
409 conf.proxy_port = atoi (val);
410#endif
411 }
412 else if (!strcmp (var, "http-proxy-auth"))
413 {
414#if ENABLE_HTTP_PROXY
415 conf.proxy_auth = (char *)base64_encode ((const u8 *)val, strlen (val));
416#endif
417 }
418
419 /* node-specific, non-defaultable */
420 else if (node != &conf.default_node && !strcmp (var, "hostname"))
421 free (node->hostname), node->hostname = strdup (val);
422
423 /* node-specific, defaultable */
424 else if (!strcmp (var, "udp-port"))
425 node->udp_port = atoi (val);
426 else if (!strcmp (var, "tcp-port"))
427 node->tcp_port = atoi (val);
428 else if (!strcmp (var, "dns-hostname"))
429 {
430#if ENABLE_DNS
431 free (node->dns_hostname), node->dns_hostname = strdup (val);
432#endif
433 }
434 else if (!strcmp (var, "dns-port"))
435 {
436#if ENABLE_DNS
437 node->dns_port = atoi (val);
438#endif
439 }
440 else if (!strcmp (var, "dns-domain"))
441 {
442#if ENABLE_DNS
443 free (node->domain), node->domain = strdup (val);
444#endif
445 }
446 else if (!strcmp (var, "if-up-data"))
447 free (node->if_up_data), node->if_up_data = strdup (val);
448 else if (!strcmp (var, "router-priority"))
449 node->routerprio = atoi (val);
450 else if (!strcmp (var, "max-retry"))
451 node->max_retry = atoi (val);
452 else if (!strcmp (var, "connect"))
453 {
454 if (!strcmp (val, "ondemand"))
455 node->connectmode = conf_node::C_ONDEMAND;
456 else if (!strcmp (val, "never"))
457 node->connectmode = conf_node::C_NEVER;
458 else if (!strcmp (val, "always"))
459 node->connectmode = conf_node::C_ALWAYS;
460 else if (!strcmp (val, "disabled"))
461 node->connectmode = conf_node::C_DISABLED;
462 else
463 return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', ignored");
464 }
465 else if (!strcmp (var, "inherit-tos"))
466 parse_bool (node->inherit_tos, "inherit-tos", true, false);
467 else if (!strcmp (var, "compress"))
468 parse_bool (node->compress, "compress", true, false);
469 else if (!strcmp (var, "low-power"))
470 parse_bool (node->low_power, "low-power", true, false);
471 // all these bool options really really cost a lot of executable size!
472 else if (!strcmp (var, "enable-tcp"))
473 {
474#if ENABLE_TCP
475 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
476#endif
477 }
478 else if (!strcmp (var, "enable-icmp"))
479 {
480#if ENABLE_ICMP
481 u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) | v;
482#endif
483 }
484 else if (!strcmp (var, "enable-dns"))
485 {
486#if ENABLE_DNS
487 u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) | v;
488#endif
489 }
490 else if (!strcmp (var, "enable-udp"))
491 {
492 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
493 }
494 else if (!strcmp (var, "enable-rawip"))
495 {
496 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
497 }
498 else if (!strcmp (var, "allow-direct"))
499 node->allow_direct.push_back (strdup (val));
500 else if (!strcmp (var, "deny-direct"))
501 node->deny_direct.push_back (strdup (val));
502 else if (!strcmp (var, "max-ttl"))
503 node->max_ttl = atof (val);
504 else if (!strcmp (var, "max-queue"))
505 node->max_queue = atoi (val);
506
507 // unknown or misplaced
508 else
509 return _("unknown configuration directive - ignored");
510
511 return 0;
512}
513
514void
515conf_node::finalise ()
516{
517 if (max_queue < 1)
518 {
519 slog (L_WARN, _("%s: max-queue value invalid, setting it to 1."), nodename);
520 max_queue = 1;
521 }
522
523 if (routerprio > 1 && (connectmode != C_ALWAYS && connectmode != C_DISABLED))
524 {
525 //slog (L_WARN, _("%s: has non-zero router-priority but either 'never' or 'ondemand' as connectmode, setting it to 'always'."), nodename);
526 connectmode = C_ALWAYS;
527 }
528}
529
530void
531configuration_parser::parse_file (const char *fname)
532{
533 if (FILE *f = fopen (fname, "r"))
534 {
170 char line[16384]; 535 char line [2048];
171 int lineno = 0; 536 int lineno = 0;
172 char *var, *val;
173 conf_node *node = &default_node;
174 537
175 while (fgets (line, sizeof (line), f)) 538 while (fgets (line, sizeof (line), f))
176 { 539 {
177 lineno++; 540 lineno++;
178 541
179 { 542 const char *warn = parse_line (line);
180 char *end = line + strlen (line);
181 543
182 while (*end < ' ' && end >= line) 544 if (warn)
183 end--; 545 slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
184
185 *++end = 0;
186 }
187
188 char *tok = line;
189
190retry:
191 var = strtok (tok, "\t =");
192 tok = 0;
193
194 if (!var || !var[0])
195 continue; /* no tokens on this line */
196
197 if (var[0] == '#')
198 continue; /* comment: ignore */
199
200 val = strtok (NULL, "\t\n\r =");
201
202 if (!val || val[0] == '#')
203 {
204 slog (L_WARN,
205 _("no value for variable `%s', at '%s' line %d"),
206 var, fname, lineno);
207 break;
208 }
209
210 if (!strcmp (var, "on"))
211 {
212 if (!::thisnode
213 || (val[0] == '!' && strcmp (val + 1, ::thisnode))
214 || !strcmp (val, ::thisnode))
215 goto retry;
216
217 continue;
218 }
219
220 // truly global
221 if (!strcmp (var, "loglevel"))
222 {
223 loglevel l = string_to_loglevel (val);
224
225 if (l != L_NONE)
226 llevel = l;
227 else
228 slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
229 }
230 else if (!strcmp (var, "ip-proto"))
231 ip_proto = atoi (val);
232 else if (!strcmp (var, "icmp-type"))
233 icmp_type = atoi (val);
234
235 // per config
236 else if (!strcmp (var, "node"))
237 {
238 default_node.id++;
239
240 node = new conf_node (default_node);
241
242 nodes.push_back (node);
243
244 node->nodename = strdup (val);
245
246 {
247 char *fname;
248 FILE *f;
249
250 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
251
252 f = fopen (fname, "r");
253 if (f)
254 {
255 node->rsa_key = RSA_new ();
256
257 if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
258 {
259 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
260 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
261 exit (1);
262 }
263
264 RSA_blinding_on (node->rsa_key, 0);
265
266 fclose (f);
267 }
268 else
269 {
270 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
271
272 if (need_keys)
273 exit (1);
274 }
275
276 free (fname);
277 }
278
279 if (!::thisnode || !strcmp (node->nodename, ::thisnode))
280 thisnode = node;
281 }
282 else if (!strcmp (var, "private-key"))
283 prikeyfile = strdup (val);
284 else if (!strcmp (var, "ifpersist"))
285 {
286 parse_bool (ifpersist, "ifpersist", true, false);
287 }
288 else if (!strcmp (var, "ifname"))
289 ifname = strdup (val);
290 else if (!strcmp (var, "rekey"))
291 rekey = atoi (val);
292 else if (!strcmp (var, "keepalive"))
293 keepalive = atoi (val);
294 else if (!strcmp (var, "mtu"))
295 mtu = atoi (val);
296 else if (!strcmp (var, "if-up"))
297 script_if_up = strdup (val);
298 else if (!strcmp (var, "node-up"))
299 script_node_up = strdup (val);
300 else if (!strcmp (var, "node-down"))
301 script_node_down = strdup (val);
302#if ENABLE_HTTP_PROXY
303 else if (!strcmp (var, "http-proxy-host"))
304 proxy_host = strdup (val);
305 else if (!strcmp (var, "http-proxy-port"))
306 proxy_port = atoi (val);
307 else if (!strcmp (var, "http-proxy-auth"))
308 proxy_auth = (char *)base64_encode ((const u8 *)val, strlen (val));
309#endif
310
311 /* node-specific, non-defaultable */
312 else if (node != &default_node && !strcmp (var, "hostname"))
313 {
314 free (node->hostname);
315 node->hostname = strdup (val);
316 }
317
318 /* node-specific, defaultable */
319 else if (!strcmp (var, "udp-port"))
320 node->udp_port = atoi (val);
321 else if (!strcmp (var, "tcp-port"))
322 node->tcp_port = atoi (val);
323 else if (!strcmp (var, "router-priority"))
324 node->routerprio = atoi (val);
325 else if (!strcmp (var, "connect"))
326 {
327 if (!strcmp (val, "ondemand"))
328 node->connectmode = conf_node::C_ONDEMAND;
329 else if (!strcmp (val, "never"))
330 node->connectmode = conf_node::C_NEVER;
331 else if (!strcmp (val, "always"))
332 node->connectmode = conf_node::C_ALWAYS;
333 else if (!strcmp (val, "disabled"))
334 node->connectmode = conf_node::C_DISABLED;
335 else
336 slog (L_WARN,
337 _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
338 var, fname, lineno);
339 }
340 else if (!strcmp (var, "inherit-tos"))
341 {
342 parse_bool (node->inherit_tos, "inherit-tos", true, false);
343 }
344 else if (!strcmp (var, "compress"))
345 {
346 parse_bool (node->compress, "compress", true, false);
347 }
348 // all these bool options really really cost a lot of executable size!
349 else if (!strcmp (var, "enable-tcp"))
350 {
351#if ENABLE_TCP
352 u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) | v;
353#endif
354 }
355 else if (!strcmp (var, "enable-icmp"))
356 {
357#if ENABLE_ICMP
358 u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) | v;
359#endif
360 }
361 else if (!strcmp (var, "enable-udp"))
362 {
363 u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) | v;
364 }
365 else if (!strcmp (var, "enable-rawip"))
366 {
367 u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) | v;
368 }
369
370 // unknown or misplaced
371 else
372 slog (L_WARN,
373 _("unknown or misplaced variable `%s', at '%s' line %d"),
374 var, fname, lineno);
375 } 546 }
376 547
377 fclose (f); 548 fclose (f);
378 } 549 }
379 else 550 else
380 { 551 {
381 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno)); 552 slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
382 exit (1); 553 exit (EXIT_FAILURE);
383 } 554 }
555}
384 556
557configuration_parser::configuration_parser (configuration &conf,
558 bool need_keys,
559 int argc,
560 char **argv)
561: conf (conf), need_keys (need_keys), argc (argc), argv (argv)
562{
563 char *fname;
564
565 conf.clear ();
566 node = &conf.default_node;
567
568 asprintf (&fname, "%s/gvpe.conf", confbase);
569 parse_file (fname);
385 free (fname); 570 free (fname);
386 571
387 fname = config_filename (prikeyfile, "hostkey"); 572 fname = conf.config_filename (conf.prikeyfile, "hostkey");
388 573
389 f = fopen (fname, "r"); 574 if (FILE *f = fopen (fname, "r"))
390 if (f)
391 { 575 {
392 rsa_key = RSA_new (); 576 conf.rsa_key = RSA_new ();
393 577
394 if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL)) 578 if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
395 { 579 {
396 ERR_load_RSA_strings (); ERR_load_PEM_strings (); 580 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
397 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0)); 581 slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
398 exit (1); 582 exit (EXIT_FAILURE);
399 } 583 }
400 584
401 RSA_blinding_on (rsa_key, 0); 585 require (RSA_blinding_on (conf.rsa_key, 0));
402 586
403 fclose (f); 587 fclose (f);
404 } 588 }
405 else 589 else
406 { 590 {
407 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
408
409 if (need_keys) 591 if (need_keys)
410 exit (1); 592 {
593 slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
594 exit (EXIT_FAILURE);
595 }
411 } 596 }
412 597
413 free (fname); 598 free (fname);
414}
415 599
600 fname = conf.config_filename (conf.pidfilename);
601 free (conf.pidfilename); conf.pidfilename = fname;
602
603 for (configuration::node_vector::iterator i = conf.nodes.begin(); i != conf.nodes.end(); ++i)
604 {
605 conf_node *node = *i;
606 char *fname;
607 FILE *f;
608
609 asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
610
611 f = fopen (fname, "r");
612 if (f)
613 {
614 node->rsa_key = RSA_new ();
615
616 if (!PEM_read_RSAPublicKey (f, &node->rsa_key, NULL, NULL))
617 {
618 ERR_load_RSA_strings (); ERR_load_PEM_strings ();
619 slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
620 exit (EXIT_FAILURE);
621 }
622
623 require (RSA_blinding_on (node->rsa_key, 0));
624
625 fclose (f);
626 }
627 else
628 {
629 slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
630
631 if (need_keys)
632 exit (EXIT_FAILURE);
633 }
634
635 free (fname);
636
637 (*i)->finalise ();
638 }
639
640 if (::thisnode)
641 {
642 conf.thisnode = conf.find_node (::thisnode);
643
644 if (need_keys)
645 {
646 if (!conf.thisnode)
647 {
648 slog (L_NOTICE, _("local node ('%s') not found in config file, aborting."), ::thisnode);
649 exit (EXIT_FAILURE);
650 }
651
652 if (conf.rsa_key && conf.thisnode->rsa_key)
653 {
654 const BIGNUM *conf_n, *conf_e, *thisnode_n, *thisnode_e;
655
656#if OPENSSL_VERSION_NUMBER >= 0x10100000 && !LIBRESSL_VERSION_NUMBER
657 RSA_get0_key (conf.rsa_key, &conf_n, &conf_e, 0);
658 RSA_get0_key (conf.thisnode->rsa_key, &thisnode_n, &thisnode_e, 0);
659#else
660 conf_n = conf.thisnode->rsa_key->n;
661 conf_e = conf.thisnode->rsa_key->e;
662 thisnode_n = conf.rsa_key->n;
663 thisnode_e = conf.rsa_key->e;
664#endif
665 if (BN_cmp (conf_n, thisnode_n) != 0 || BN_cmp (conf_e, thisnode_e) != 0)
666 {
667 slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
668 exit (EXIT_FAILURE);
669 }
670 }
671 }
672 }
673
674 parse_argv ();
675}
676
677void
678configuration_parser::parse_argv ()
679{
680 for (int i = 0; i < argc; ++i)
681 {
682 char *v = argv [i];
683
684 if (!*v)
685 continue;
686
687 char *enode = v;
688
689 while (*enode != '.' && *enode > ' ' && *enode != '=' && *enode)
690 enode++;
691
692 if (*enode != '.')
693 enode = 0;
694
695 if (enode)
696 {
697 char *val = strdup (v);
698 val [enode - v] = 0;
699 node = conf.find_node (val);
700 free (val);
701
702 if (!node)
703 {
704 slog (L_WARN, _("command line option '%s' refers to unknown node, ignoring."), v);
705 continue;
706 }
707 }
708 else
709 node = &conf.default_node;
710
711 const char *warn = parse_line (enode ? enode + 1 : v);
712
713 if (warn)
714 slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
715 }
716}
717
718char *
416char *configuration::config_filename (const char *name, const char *dflt) 719configuration::config_filename (const char *name, const char *dflt)
417{ 720{
418 char *fname; 721 char *fname;
419 722
420 asprintf (&fname, name ? name : dflt, ::thisnode); 723 asprintf (&fname, name ? name : dflt, ::thisnode ? ::thisnode : "<unset>");
421 724
422 if (!ABSOLUTE_PATH (fname)) 725 if (!ABSOLUTE_PATH (fname))
423 { 726 {
424 char *rname = fname; 727 char *rname = fname;
425 asprintf (&fname, "%s/%s", confbase, rname); 728 asprintf (&fname, "%s/%s", confbase, rname);
426 free (rname); 729 free (rname);
427 } 730 }
428 731
429 return fname; 732 return fname;
733}
734
735void
736conf_node::print ()
737{
738 printf ("%4d fe:fd:80:00:0%1x:%02x %c %-8.8s %-10.10s %02x %s%s%d\n",
739 id,
740 id >> 8, id & 0xff,
741 compress ? 'Y' : 'N',
742 connectmode == C_ONDEMAND ? "ondemand"
743 : connectmode == C_NEVER ? "never"
744 : connectmode == C_ALWAYS ? "always"
745 : connectmode == C_DISABLED ? "disabled"
746 : "",
747 nodename,
748 protocols,
749 hostname ? hostname : "",
750 hostname ? ":" : "",
751 hostname ? udp_port : 0
752 );
430} 753}
431 754
432void 755void
433configuration::print () 756configuration::print ()
434{ 757{
… …
438 printf (_("MTU: %d\n"), mtu); 761 printf (_("MTU: %d\n"), mtu);
439 printf (_("rekeying interval: %d\n"), rekey); 762 printf (_("rekeying interval: %d\n"), rekey);
440 printf (_("keepalive interval: %d\n"), keepalive); 763 printf (_("keepalive interval: %d\n"), keepalive);
441 printf (_("interface: %s\n"), ifname); 764 printf (_("interface: %s\n"), ifname);
442 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>"); 765 printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
443 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1); 766 printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
444 printf ("\n"); 767 printf ("\n");
445 768
446 printf ("%4s %-17s %s %-8.8s %-10.10s %s\n", 769 printf ("%4s %-17s %s %-8.8s %-10.10s %04s %s\n",
447 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port")); 770 _("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Prot"), _("Host:Port"));
448 771
449 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i) 772 for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
450 (*i)->print (); 773 (*i)->print ();
451 774
452 printf ("\n"); 775 printf ("\n");
453} 776}
454 777
455configuration::configuration () 778configuration::configuration ()
456{ 779{
780 asprintf (&confbase, "%s/gvpe", CONFDIR);
781
457 init (); 782 init ();
458} 783}
459 784
460configuration::~configuration () 785configuration::~configuration ()
461{ 786{
462 cleanup (); 787 cleanup ();
463} 788}
464 789
465

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines