[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.7 by pcg, Fri Mar 28 16:21:09 2003 UTC vs.
Revision 1.41 by pcg, Tue Apr 26 00:55:55 2005 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
		5	This file is part of GVPE.
		6
9	This program is free software; you can redistribute it and/or modify	7	GVPE is free software; you can redistribute it and/or modify
10	it under the terms of the GNU General Public License as published by	8	it under the terms of the GNU General Public License as published by
11	the Free Software Foundation; either version 2 of the License, or	9	the Free Software Foundation; either version 2 of the License, or
12	(at your option) any later version.	10	(at your option) any later version.
13		11
14	This program is distributed in the hope that it will be useful,	12	This program is distributed in the hope that it will be useful,
15	but WITHOUT ANY WARRANTY; without even the implied warranty of	13	but WITHOUT ANY WARRANTY; without even the implied warranty of
16	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the	14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17	GNU General Public License for more details.	15	GNU General Public License for more details.
18		16
19	You should have received a copy of the GNU General Public License	17	You should have received a copy of the GNU General Public License
20	along with this program; if not, write to the Free Software	18	along with gvpe; if not, write to the Free Software
21	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA	19	Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
22	*/	20	*/
23		21
24	#include "config.h"	22	#include "config.h"
25		23
26	#include <cstdio>	24	#include <cstdio>
31	#include <netdb.h>	29	#include <netdb.h>
32	#include <sys/stat.h>	30	#include <sys/stat.h>
33	#include <sys/types.h>	31	#include <sys/types.h>
34	#include <unistd.h>	32	#include <unistd.h>
35		33
36	#include <netinet/in.h>	34	#include "netcompat.h"
37		35
38	#include <openssl/err.h>	36	#include <openssl/err.h>
39	#include <openssl/pem.h>	37	#include <openssl/pem.h>
40	#include <openssl/rsa.h>	38	#include <openssl/rsa.h>
41	#include <openssl/rand.h>	39	#include <openssl/rand.h>
42		40	#include <openssl/bn.h>
43	#include "gettext.h"
44		41
45	#include "conf.h"	42	#include "conf.h"
46	#include "slog.h"	43	#include "slog.h"
47	#include "util.h"	44	#include "util.h"
48		45
49	char *confbase;	46	char *confbase;
50	char *thisnode;	47	char *thisnode;
51	char *identname;	48	char *identname;
52	char *pidfilename;
53		49
54	struct configuration conf;	50	struct configuration conf;
55		51
56	u8 best_protocol (u8 protset)	52	u8 best_protocol (u8 protset)
57	{	53	{
58	if (protset & PROT_IPv4)	54	if (protset & PROT_IPv4 ) return PROT_IPv4;
59	return PROT_IPv4;	55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
		56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
		57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		58	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
60		59
61	return PROT_UDPv4;	60	return 0;
62	}	61	}
63		62
64	const char *strprotocol (u8 protocol)	63	const char *strprotocol (u8 protocol)
65	{	64	{
66	if (protocol & PROT_IPv4 ) return "rawip";	65	if (protocol & PROT_IPv4 ) return "rawip";
		66	if (protocol & PROT_ICMPv4) return "icmp";
67	if (protocol & PROT_UDPv4) return "udp";	67	if (protocol & PROT_UDPv4 ) return "udp";
		68	if (protocol & PROT_TCPv4 ) return "tcp";
		69	if (protocol & PROT_DNSv4 ) return "dns";
68		70
69	return "<unknown>";	71	return "<unknown>";
70	}
71
72	configuration::configuration ()
73	{
74	init ();
75	}
76
77	configuration::~configuration ()
78	{
79	cleanup ();
80	}
81
82	void configuration::init ()
83	{
84	memset (this, 0, sizeof (*this));
85
86	rekey = DEFAULT_REKEY;
87	keepalive = DEFAULT_KEEPALIVE;
88	llevel = L_INFO;
89	ip_proto = IPPROTO_GRE;
90
91	default_node.udp_port = DEFAULT_UDPPORT;
92	default_node.connectmode = conf_node::C_ALWAYS;
93	default_node.compress = true;
94	default_node.protocols = PROT_UDPv4;
95	}
96
97	void configuration::cleanup()
98	{
99	if (rsa_key)
100	RSA_free (rsa_key);
101
102	free (ifname);
103
104	rsa_key = 0;
105	ifname = 0;
106	}
107
108	void
109	configuration::clear_config ()
110	{
111	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
112	delete *i;
113
114	nodes.clear ();
115
116	cleanup ();
117	init ();
118	}
119
120	#define parse_bool(target,name,trueval,falseval) \
121	if (!strcmp (val, "yes")) target = trueval; \
122	else if (!strcmp (val, "no")) target = falseval; \
123	else if (!strcmp (val, "true")) target = trueval; \
124	else if (!strcmp (val, "false")) target = falseval; \
125	else if (!strcmp (val, "on")) target = trueval; \
126	else if (!strcmp (val, "off")) target = falseval; \
127	else \
128	slog (L_WARN, \
129	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
130	name, var, fname, lineno);
131
132	void configuration::read_config (bool need_keys)
133	{
134	char *fname;
135	FILE *f;
136
137	clear_config ();
138
139	asprintf (&fname, "%s/vped.conf", confbase);
140	f = fopen (fname, "r");
141
142	if (f)
143	{
144	char line[16384];
145	int lineno = 0;
146	char var, val;
147	conf_node *node = &default_node;
148
149	while (fgets (line, sizeof (line), f))
150	{
151	lineno++;
152
153	{
154	char *end = line + strlen (line);
155
156	while (*end < ' ' && end >= line)
157	end--;
158
159	*++end = 0;
160	}
161
162	char *tok = line;
163
164	retry:
165	var = strtok (tok, "\t =");
166	tok = 0;
167
168	if (!var \|\| !var[0])
169	continue; /* no tokens on this line */
170
171	if (var[0] == '#')
172	continue; /* comment: ignore */
173
174	val = strtok (NULL, "\t\n\r =");
175
176	if (!val \|\| val[0] == '#')
177	{
178	slog (L_WARN,
179	_("no value for variable `%s', at '%s' line %d"),
180	var, fname, lineno);
181	break;
182	}
183
184	if (!strcmp (var, "on"))
185	{
186	if (!::thisnode
187	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
188	\|\| !strcmp (val, ::thisnode))
189	goto retry;
190
191	continue;
192	}
193
194	// truly global
195	if (!strcmp (var, "loglevel"))
196	{
197	loglevel l = string_to_loglevel (val);
198
199	if (l != L_NONE)
200	llevel = l;
201	else
202	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
203	}
204	else if (!strcmp (var, "ip-proto"))
205	ip_proto = atoi (val);
206
207	// per config
208	else if (!strcmp (var, "node"))
209	{
210	default_node.id++;
211
212	node = new conf_node (default_node);
213
214	nodes.push_back (node);
215
216	node->nodename = strdup (val);
217
218	{
219	char *fname;
220	FILE *f;
221
222	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
223
224	f = fopen (fname, "r");
225	if (f)
226	{
227	node->rsa_key = RSA_new ();
228
229	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
230	{
231	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
232	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
233	exit (1);
234	}
235
236	RSA_blinding_on (node->rsa_key, 0);
237
238	fclose (f);
239	}
240	else
241	{
242	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
243
244	if (need_keys)
245	exit (1);
246	}
247
248	free (fname);
249	}
250
251	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
252	thisnode = node;
253	}
254	else if (!strcmp (var, "private-key"))
255	prikeyfile = strdup (val);
256	else if (!strcmp (var, "ifpersist"))
257	{
258	parse_bool (ifpersist, "ifpersist", true, false);
259	}
260	else if (!strcmp (var, "ifname"))
261	ifname = strdup (val);
262	else if (!strcmp (var, "rekey"))
263	rekey = atoi (val);
264	else if (!strcmp (var, "keepalive"))
265	keepalive = atoi (val);
266	else if (!strcmp (var, "mtu"))
267	mtu = atoi (val);
268	else if (!strcmp (var, "if-up"))
269	script_if_up = strdup (val);
270	else if (!strcmp (var, "node-up"))
271	script_node_up = strdup (val);
272	else if (!strcmp (var, "node-down"))
273	script_node_down = strdup (val);
274
275	/* node-specific, non-defaultable */
276	else if (node != &default_node && !strcmp (var, "hostname"))
277	{
278	free (node->hostname);
279	node->hostname = strdup (val);
280	}
281
282	/* node-specific, defaultable */
283	else if (!strcmp (var, "udp-port"))
284	node->udp_port = atoi (val);
285	else if (!strcmp (var, "router-priority"))
286	node->routerprio = atoi (val);
287	else if (!strcmp (var, "connect"))
288	{
289	if (!strcmp (val, "ondemand"))
290	node->connectmode = conf_node::C_ONDEMAND;
291	else if (!strcmp (val, "never"))
292	node->connectmode = conf_node::C_NEVER;
293	else if (!strcmp (val, "always"))
294	node->connectmode = conf_node::C_ALWAYS;
295	else if (!strcmp (val, "disabled"))
296	node->connectmode = conf_node::C_DISABLED;
297	else
298	slog (L_WARN,
299	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
300	var, fname, lineno);
301	}
302	else if (!strcmp (var, "inherit-tos"))
303	{
304	parse_bool (node->inherit_tos, "inherit-tos", true, false);
305	}
306	else if (!strcmp (var, "compress"))
307	{
308	parse_bool (node->compress, "compress", true, false);
309	}
310	// all these bool options really really cost a lot of executable size!
311	else if (!strcmp (var, "enable-udp"))
312	{
313	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
314	}
315	else if (!strcmp (var, "enable-rawip"))
316	{
317	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
318	}
319
320	// unknown or misplaced
321	else
322	{
323	slog (L_WARN,
324	_("unknown or misplaced variable `%s', at '%s' line %d"),
325	var, fname, lineno);
326	}
327	}
328
329	fclose (f);
330	}
331	else
332	{
333	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
334	exit (1);
335	}
336
337	free (fname);
338
339	fname = config_filename (prikeyfile, "hostkey");
340
341	f = fopen (fname, "r");
342	if (f)
343	{
344	rsa_key = RSA_new ();
345
346	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
347	{
348	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
349	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
350	exit (1);
351	}
352
353	RSA_blinding_on (rsa_key, 0);
354
355	fclose (f);
356	}
357	else
358	{
359	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
360
361	if (need_keys)
362	exit (1);
363	}
364
365	free (fname);
366	}
367
368	char configuration::config_filename (const char name, const char *dflt)
369	{
370	char *fname;
371
372	asprintf (&fname, name ? name : dflt, ::thisnode);
373
374	if (!ABSOLUTE_PATH (fname))
375	{
376	char *rname = fname;
377	asprintf (&fname, "%s/%s", confbase, rname);
378	free (rname);
379	}
380
381	return fname;
382	}
383
384	void
385	configuration::print ()
386	{
387	printf (_("\nConfiguration\n\n"));
388	printf (_("# of nodes: %d\n"), nodes.size ());
389	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
390	printf (_("MTU: %d\n"), mtu);
391	printf (_("rekeying interval: %d\n"), rekey);
392	printf (_("keepalive interval: %d\n"), keepalive);
393	printf (_("interface: %s\n"), ifname);
394	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
395	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
396	printf ("\n");
397
398	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
399	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
400
401	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
402	(*i)->print ();
403
404	printf ("\n");
405	}	72	}
406		73
407	void	74	void
408	conf_node::print ()	75	conf_node::print ()
409	{	76	{
…		…
419	hostname ? ":" : "",	86	hostname ? ":" : "",
420	hostname ? udp_port : 0	87	hostname ? udp_port : 0
421	);	88	);
422	}	89	}
423		90
		91	conf_node::~conf_node ()
		92	{
		93	#if 0
		94	// does not work, because string pointers etc. are shared
		95	// is not called, however
		96	if (rsa_key)
		97	RSA_free (rsa_key);
		98
		99	free (nodename);
		100	free (hostname);
		101	free (if_up_data);
		102	#if ENABLE_DNS
		103	free (domain);
		104	free (dns_hostname);
		105	#endif
		106	#endif
		107	}
		108
		109	void configuration::init ()
		110	{
		111	memset (this, 0, sizeof (*this));
		112
		113	mtu = DEFAULT_MTU;
		114	rekey = DEFAULT_REKEY;
		115	keepalive = DEFAULT_KEEPALIVE;
		116	llevel = L_INFO;
		117	ip_proto = IPPROTO_GRE;
		118	#if ENABLE_ICMP
		119	icmp_type = ICMP_ECHOREPLY;
		120	#endif
		121
		122	default_node.udp_port = DEFAULT_UDPPORT;
		123	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
		124	default_node.connectmode = conf_node::C_ALWAYS;
		125	default_node.compress = true;
		126	default_node.protocols = 0;
		127	default_node.max_retry = DEFAULT_MAX_RETRY;
		128	default_node.if_up_data = strdup ("");
		129
		130	#if ENABLE_DNS
		131	default_node.dns_port = 0; // default is 0 == client
		132
		133	dns_forw_host = strdup ("127.0.0.1");
		134	dns_forw_port = 53;
		135	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
		136	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
		137	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
		138	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
		139	#endif
		140
		141	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		142	}
		143
		144	void configuration::cleanup()
		145	{
		146	if (rsa_key)
		147	RSA_free (rsa_key);
		148
		149	rsa_key = 0;
		150
		151	free (pidfilename); pidfilename = 0;
		152	free (ifname); ifname = 0;
		153	#if ENABLE_HTTP_PROXY
		154	free (proxy_host); proxy_host = 0;
		155	free (proxy_auth); proxy_auth = 0;
		156	#endif
		157	#if ENABLE_DNS
		158	free (dns_forw_host); dns_forw_host = 0;
		159	#endif
		160	}
		161
		162	void
		163	configuration::clear ()
		164	{
		165	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
		166	delete *i;
		167
		168	nodes.clear ();
		169
		170	cleanup ();
		171	init ();
		172	}
		173
		174	#define parse_bool(target,name,trueval,falseval) do { \
		175	if (!strcmp (val, "yes")) target = trueval; \
		176	else if (!strcmp (val, "no")) target = falseval; \
		177	else if (!strcmp (val, "true")) target = trueval; \
		178	else if (!strcmp (val, "false")) target = falseval; \
		179	else if (!strcmp (val, "on")) target = trueval; \
		180	else if (!strcmp (val, "off")) target = falseval; \
		181	else \
		182	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed. (ignored)"); \
		183	} while (0)
		184
		185	const char *
		186	configuration_parser::parse_line (char *line)
		187	{
		188	{
		189	char *end = line + strlen (line);
		190
		191	while (*end < ' ' && end >= line)
		192	end--;
		193
		194	*++end = 0;
		195	}
		196
		197	char *tok = line;
		198	const char *var = strtok (tok, "\t =");
		199	tok = 0;
		200
		201	if (!var \|\| !var[0])
		202	return 0; /* no tokens on this line */
		203
		204	if (var[0] == '#')
		205	return 0; /* comment: ignore */
		206
		207	char *val = strtok (NULL, "\t\n\r =");
		208
		209	if (!val \|\| val[0] == '#')
		210	return _("no value given for variable. (ignored)");
		211
		212	if (!strcmp (var, "on"))
		213	{
		214	if (!::thisnode
		215	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		216	\|\| !strcmp (val, ::thisnode))
		217	return parse_line (strtok (NULL, "\n\r"));
		218	else
		219	return 0;
		220	}
		221
		222	// truly global
		223	if (!strcmp (var, "loglevel"))
		224	{
		225	loglevel l = string_to_loglevel (val);
		226
		227	if (l == L_NONE)
		228	return _("unknown loglevel. (skipping)");
		229	}
		230	else if (!strcmp (var, "ip-proto"))
		231	conf.ip_proto = atoi (val);
		232	else if (!strcmp (var, "icmp-type"))
		233	{
		234	#if ENABLE_ICMP
		235	conf.icmp_type = atoi (val);
		236	#endif
		237	}
		238
		239	// per config
		240	else if (!strcmp (var, "node"))
		241	{
		242	parse_argv ();
		243
		244	conf.default_node.id++;
		245	node = new conf_node (conf.default_node);
		246	conf.nodes.push_back (node);
		247	node->nodename = strdup (val);
		248
		249	{
		250	char *fname;
		251	FILE *f;
		252
		253	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		254
		255	f = fopen (fname, "r");
		256	if (f)
		257	{
		258	node->rsa_key = RSA_new ();
		259
		260	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		261	{
		262	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		263	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		264	exit (EXIT_FAILURE);
		265	}
		266
		267	require (RSA_blinding_on (node->rsa_key, 0));
		268
		269	fclose (f);
		270	}
		271	else
		272	{
		273	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		274
		275	if (need_keys)
		276	exit (EXIT_FAILURE);
		277	}
		278
		279	free (fname);
		280	}
		281
		282	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		283	conf.thisnode = node;
		284	}
		285	else if (!strcmp (var, "private-key"))
		286	free (conf.prikeyfile), conf.prikeyfile = strdup (val);
		287	else if (!strcmp (var, "ifpersist"))
		288	parse_bool (conf.ifpersist, "ifpersist", true, false);
		289	else if (!strcmp (var, "ifname"))
		290	free (conf.ifname), conf.ifname = strdup (val);
		291	else if (!strcmp (var, "rekey"))
		292	conf.rekey = atoi (val);
		293	else if (!strcmp (var, "keepalive"))
		294	conf.keepalive = atoi (val);
		295	else if (!strcmp (var, "mtu"))
		296	conf.mtu = atoi (val);
		297	else if (!strcmp (var, "if-up"))
		298	free (conf.script_if_up), conf.script_if_up = strdup (val);
		299	else if (!strcmp (var, "node-up"))
		300	free (conf.script_node_up), conf.script_node_up = strdup (val);
		301	else if (!strcmp (var, "node-down"))
		302	free (conf.script_node_down), conf.script_node_down = strdup (val);
		303	else if (!strcmp (var, "pid-file"))
		304	free (conf.pidfilename), conf.pidfilename = strdup (val);
		305	else if (!strcmp (var, "dns-forw-host"))
		306	{
		307	#if ENABLE_DNS
		308	free (conf.dns_forw_host), conf.dns_forw_host = strdup (val);
		309	#endif
		310	}
		311	else if (!strcmp (var, "dns-forw-port"))
		312	{
		313	#if ENABLE_DNS
		314	conf.dns_forw_port = atoi (val);
		315	#endif
		316	}
		317	else if (!strcmp (var, "dns-timeout-factor"))
		318	{
		319	#if ENABLE_DNS
		320	conf.dns_timeout_factor = atof (val);
		321	#endif
		322	}
		323	else if (!strcmp (var, "dns-send-interval"))
		324	{
		325	#if ENABLE_DNS
		326	conf.dns_send_interval = atoi (val);
		327	#endif
		328	}
		329	else if (!strcmp (var, "dns-overlap-factor"))
		330	{
		331	#if ENABLE_DNS
		332	conf.dns_overlap_factor = atof (val);
		333	#endif
		334	}
		335	else if (!strcmp (var, "dns-max-outstanding"))
		336	{
		337	#if ENABLE_DNS
		338	conf.dns_max_outstanding = atoi (val);
		339	#endif
		340	}
		341	else if (!strcmp (var, "http-proxy-host"))
		342	{
		343	#if ENABLE_HTTP_PROXY
		344	free (conf.proxy_host), conf.proxy_host = strdup (val);
		345	#endif
		346	}
		347	else if (!strcmp (var, "http-proxy-port"))
		348	{
		349	#if ENABLE_HTTP_PROXY
		350	conf.proxy_port = atoi (val);
		351	#endif
		352	}
		353	else if (!strcmp (var, "http-proxy-auth"))
		354	{
		355	#if ENABLE_HTTP_PROXY
		356	conf.proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		357	#endif
		358	}
		359
		360	/* node-specific, non-defaultable */
		361	else if (node != &conf.default_node && !strcmp (var, "hostname"))
		362	free (node->hostname), node->hostname = strdup (val);
		363
		364	/* node-specific, defaultable */
		365	else if (!strcmp (var, "udp-port"))
		366	node->udp_port = atoi (val);
		367	else if (!strcmp (var, "tcp-port"))
		368	node->tcp_port = atoi (val);
		369	else if (!strcmp (var, "dns-hostname"))
		370	{
		371	#if ENABLE_DNS
		372	free (node->dns_hostname), node->dns_hostname = strdup (val);
		373	#endif
		374	}
		375	else if (!strcmp (var, "dns-port"))
		376	{
		377	#if ENABLE_DNS
		378	node->dns_port = atoi (val);
		379	#endif
		380	}
		381	else if (!strcmp (var, "dns-domain"))
		382	{
		383	#if ENABLE_DNS
		384	free (node->domain), node->domain = strdup (val);
		385	#endif
		386	}
		387	else if (!strcmp (var, "if-up-data"))
		388	free (node->if_up_data), node->if_up_data = strdup (val);
		389	else if (!strcmp (var, "router-priority"))
		390	node->routerprio = atoi (val);
		391	else if (!strcmp (var, "max-retry"))
		392	node->max_retry = atoi (val);
		393	else if (!strcmp (var, "connect"))
		394	{
		395	if (!strcmp (val, "ondemand"))
		396	node->connectmode = conf_node::C_ONDEMAND;
		397	else if (!strcmp (val, "never"))
		398	node->connectmode = conf_node::C_NEVER;
		399	else if (!strcmp (val, "always"))
		400	node->connectmode = conf_node::C_ALWAYS;
		401	else if (!strcmp (val, "disabled"))
		402	node->connectmode = conf_node::C_DISABLED;
		403	else
		404	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)");
		405	}
		406	else if (!strcmp (var, "inherit-tos"))
		407	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		408	else if (!strcmp (var, "compress"))
		409	parse_bool (node->compress, "compress", true, false);
		410	// all these bool options really really cost a lot of executable size!
		411	else if (!strcmp (var, "enable-tcp"))
		412	{
		413	#if ENABLE_TCP
		414	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		415	#endif
		416	}
		417	else if (!strcmp (var, "enable-icmp"))
		418	{
		419	#if ENABLE_ICMP
		420	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		421	#endif
		422	}
		423	else if (!strcmp (var, "enable-dns"))
		424	{
		425	#if ENABLE_DNS
		426	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		427	#endif
		428	}
		429	else if (!strcmp (var, "enable-udp"))
		430	{
		431	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		432	}
		433	else if (!strcmp (var, "enable-rawip"))
		434	{
		435	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		436	}
		437
		438	// unknown or misplaced
		439	else
		440	return _("unknown configuration directive. (ignored)");
		441
		442	return 0;
		443	}
		444
		445	void configuration_parser::parse_argv ()
		446	{
		447	for (int i = 0; i < argc; ++i)
		448	{
		449	char *v = argv [i];
		450
		451	if (!*v)
		452	continue;
		453
		454	char *enode = v;
		455
		456	while (enode != '.' && enode > ' ' && enode != '=' && enode)
		457	enode++;
		458
		459	if (*enode != '.')
		460	enode = 0;
		461
		462	char *wnode = node == &conf.default_node
		463	? 0
		464	: node->nodename;
		465
		466	if ((!wnode && !enode)
		467	\|\| (wnode && enode && !strncmp (wnode, v, enode - v)))
		468	{
		469	const char *warn = parse_line (enode ? enode + 1 : v);
		470
		471	if (warn)
		472	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
		473
		474	*v = 0;
		475	}
		476	}
		477	}
		478
		479	configuration_parser::configuration_parser (configuration &conf,
		480	bool need_keys,
		481	int argc,
		482	char **argv)
		483	: conf (conf),need_keys (need_keys), argc (argc), argv (argv)
		484	{
		485	char *fname;
		486	FILE *f;
		487
		488	conf.clear ();
		489
		490	asprintf (&fname, "%s/gvpe.conf", confbase);
		491	f = fopen (fname, "r");
		492
		493	if (f)
		494	{
		495	char line[16384];
		496	int lineno = 0;
		497	node = &conf.default_node;
		498
		499	while (fgets (line, sizeof (line), f))
		500	{
		501	lineno++;
		502
		503	const char *warn = parse_line (line);
		504
		505	if (warn)
		506	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
		507	}
		508
		509	fclose (f);
		510
		511	parse_argv ();
		512	}
		513	else
		514	{
		515	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		516	exit (EXIT_FAILURE);
		517	}
		518
		519	free (fname);
		520
		521	fname = conf.config_filename (conf.prikeyfile, "hostkey");
		522
		523	f = fopen (fname, "r");
		524	if (f)
		525	{
		526	conf.rsa_key = RSA_new ();
		527
		528	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
		529	{
		530	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		531	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		532	exit (EXIT_FAILURE);
		533	}
		534
		535	require (RSA_blinding_on (conf.rsa_key, 0));
		536
		537	fclose (f);
		538	}
		539	else
		540	{
		541	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
		542
		543	if (need_keys)
		544	exit (EXIT_FAILURE);
		545	}
		546
		547	if (need_keys && ::thisnode
		548	&& conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
		549	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
		550	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
		551	{
		552	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		553	exit (EXIT_FAILURE);
		554	}
		555
		556	free (fname);
		557	}
		558
		559	char configuration::config_filename (const char name, const char *dflt)
		560	{
		561	char *fname;
		562
		563	asprintf (&fname, name ? name : dflt, ::thisnode);
		564
		565	if (!ABSOLUTE_PATH (fname))
		566	{
		567	char *rname = fname;
		568	asprintf (&fname, "%s/%s", confbase, rname);
		569	free (rname);
		570	}
		571
		572	return fname;
		573	}
		574
		575	void
		576	configuration::print ()
		577	{
		578	printf (_("\nConfiguration\n\n"));
		579	printf (_("# of nodes: %d\n"), nodes.size ());
		580	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
		581	printf (_("MTU: %d\n"), mtu);
		582	printf (_("rekeying interval: %d\n"), rekey);
		583	printf (_("keepalive interval: %d\n"), keepalive);
		584	printf (_("interface: %s\n"), ifname);
		585	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
		586	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
		587	printf ("\n");
		588
		589	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
		590	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
		591
		592	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
		593	(*i)->print ();
		594
		595	printf ("\n");
		596	}
		597
		598	configuration::configuration ()
		599	{
		600	asprintf (&confbase, "%s/gvpe", CONFDIR);
		601
		602	init ();
		603	}
		604
		605	configuration::~configuration ()
		606	{
		607	cleanup ();
		608	}
		609
		610

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.7 by pcg, Fri Mar 28 16:21:09 2003 UTC vs. Revision 1.41 by pcg, Tue Apr 26 00:55:55 2005 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.7 by pcg, Fri Mar 28 16:21:09 2003 UTC vs.
Revision 1.41 by pcg, Tue Apr 26 00:55:55 2005 UTC