[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs.
Revision 1.37 by pcg, Wed Mar 23 14:33:34 2005 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
		5	This file is part of GVPE.
		6
9	This program is free software; you can redistribute it and/or modify	7	GVPE is free software; you can redistribute it and/or modify
10	it under the terms of the GNU General Public License as published by	8	it under the terms of the GNU General Public License as published by
11	the Free Software Foundation; either version 2 of the License, or	9	the Free Software Foundation; either version 2 of the License, or
12	(at your option) any later version.	10	(at your option) any later version.
13		11
14	This program is distributed in the hope that it will be useful,	12	This program is distributed in the hope that it will be useful,
15	but WITHOUT ANY WARRANTY; without even the implied warranty of	13	but WITHOUT ANY WARRANTY; without even the implied warranty of
16	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the	14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17	GNU General Public License for more details.	15	GNU General Public License for more details.
18		16
19	You should have received a copy of the GNU General Public License	17	You should have received a copy of the GNU General Public License
20	along with this program; if not, write to the Free Software	18	along with gvpe; if not, write to the Free Software
21	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA	19	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22	*/	20	*/
23		21
24	#include "config.h"	22	#include "config.h"
25		23
31	#include <netdb.h>	29	#include <netdb.h>
32	#include <sys/stat.h>	30	#include <sys/stat.h>
33	#include <sys/types.h>	31	#include <sys/types.h>
34	#include <unistd.h>	32	#include <unistd.h>
35		33
36	#include <netinet/in.h>	34	#include "netcompat.h"
37		35
38	#include <openssl/err.h>	36	#include <openssl/err.h>
39	#include <openssl/pem.h>	37	#include <openssl/pem.h>
40	#include <openssl/rsa.h>	38	#include <openssl/rsa.h>
41	#include <openssl/rand.h>	39	#include <openssl/rand.h>
42		40	#include <openssl/bn.h>
43	#include "gettext.h"
44		41
45	#include "conf.h"	42	#include "conf.h"
46	#include "slog.h"	43	#include "slog.h"
47	#include "util.h"	44	#include "util.h"
48		45
49	char *confbase;	46	char *confbase;
50	char *thisnode;	47	char *thisnode;
51	char *identname;	48	char *identname;
52	char *pidfilename;
53		49
54	struct configuration conf;	50	struct configuration conf;
55		51
56	u8 best_protocol (u8 protset)	52	u8 best_protocol (u8 protset)
57	{	53	{
58	if (protset & PROT_IPv4)	54	if (protset & PROT_IPv4 ) return PROT_IPv4;
59	return PROT_IPv4;	55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
		56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
		57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		58	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
60		59
61	return PROT_UDPv4;	60	return 0;
62	}	61	}
63		62
64	const char *strprotocol (u8 protocol)	63	const char *strprotocol (u8 protocol)
65	{	64	{
66	if (protocol & PROT_IPv4 ) return "rawip";	65	if (protocol & PROT_IPv4 ) return "rawip";
		66	if (protocol & PROT_ICMPv4) return "icmp";
67	if (protocol & PROT_UDPv4) return "udp";	67	if (protocol & PROT_UDPv4 ) return "udp";
		68	if (protocol & PROT_TCPv4 ) return "tcp";
		69	if (protocol & PROT_DNSv4 ) return "dns";
68		70
69	return "<unknown>";	71	return "<unknown>";
70	}
71
72	configuration::configuration ()
73	{
74	init ();
75	}
76
77	configuration::~configuration ()
78	{
79	cleanup ();
80	}
81
82	void configuration::init ()
83	{
84	memset (this, 0, sizeof (*this));
85
86	rekey = DEFAULT_REKEY;
87	keepalive = DEFAULT_KEEPALIVE;
88	llevel = L_INFO;
89	ip_proto = IPPROTO_GRE;
90
91	default_node.udp_port = DEFAULT_UDPPORT;
92	default_node.tcp_port = DEFAULT_UDPPORT;
93	default_node.connectmode = conf_node::C_ALWAYS;
94	default_node.compress = true;
95	default_node.protocols = PROT_UDPv4;
96	}
97
98	void configuration::cleanup()
99	{
100	if (rsa_key)
101	RSA_free (rsa_key);
102
103	free (ifname);
104
105	rsa_key = 0;
106	ifname = 0;
107	}
108
109	void
110	configuration::clear_config ()
111	{
112	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
113	delete *i;
114
115	nodes.clear ();
116
117	cleanup ();
118	init ();
119	}
120
121	#define parse_bool(target,name,trueval,falseval) \
122	if (!strcmp (val, "yes")) target = trueval; \
123	else if (!strcmp (val, "no")) target = falseval; \
124	else if (!strcmp (val, "true")) target = trueval; \
125	else if (!strcmp (val, "false")) target = falseval; \
126	else if (!strcmp (val, "on")) target = trueval; \
127	else if (!strcmp (val, "off")) target = falseval; \
128	else \
129	slog (L_WARN, \
130	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
131	name, var, fname, lineno);
132
133	void configuration::read_config (bool need_keys)
134	{
135	char *fname;
136	FILE *f;
137
138	clear_config ();
139
140	asprintf (&fname, "%s/vped.conf", confbase);
141	f = fopen (fname, "r");
142
143	if (f)
144	{
145	char line[16384];
146	int lineno = 0;
147	char var, val;
148	conf_node *node = &default_node;
149
150	while (fgets (line, sizeof (line), f))
151	{
152	lineno++;
153
154	{
155	char *end = line + strlen (line);
156
157	while (*end < ' ' && end >= line)
158	end--;
159
160	*++end = 0;
161	}
162
163	char *tok = line;
164
165	retry:
166	var = strtok (tok, "\t =");
167	tok = 0;
168
169	if (!var \|\| !var[0])
170	continue; /* no tokens on this line */
171
172	if (var[0] == '#')
173	continue; /* comment: ignore */
174
175	val = strtok (NULL, "\t\n\r =");
176
177	if (!val \|\| val[0] == '#')
178	{
179	slog (L_WARN,
180	_("no value for variable `%s', at '%s' line %d"),
181	var, fname, lineno);
182	break;
183	}
184
185	if (!strcmp (var, "on"))
186	{
187	if (!::thisnode
188	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
189	\|\| !strcmp (val, ::thisnode))
190	goto retry;
191
192	continue;
193	}
194
195	// truly global
196	if (!strcmp (var, "loglevel"))
197	{
198	loglevel l = string_to_loglevel (val);
199
200	if (l != L_NONE)
201	llevel = l;
202	else
203	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
204	}
205	else if (!strcmp (var, "ip-proto"))
206	ip_proto = atoi (val);
207
208	// per config
209	else if (!strcmp (var, "node"))
210	{
211	default_node.id++;
212
213	node = new conf_node (default_node);
214
215	nodes.push_back (node);
216
217	node->nodename = strdup (val);
218
219	{
220	char *fname;
221	FILE *f;
222
223	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
224
225	f = fopen (fname, "r");
226	if (f)
227	{
228	node->rsa_key = RSA_new ();
229
230	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
231	{
232	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
233	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
234	exit (1);
235	}
236
237	RSA_blinding_on (node->rsa_key, 0);
238
239	fclose (f);
240	}
241	else
242	{
243	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
244
245	if (need_keys)
246	exit (1);
247	}
248
249	free (fname);
250	}
251
252	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
253	thisnode = node;
254	}
255	else if (!strcmp (var, "private-key"))
256	prikeyfile = strdup (val);
257	else if (!strcmp (var, "ifpersist"))
258	{
259	parse_bool (ifpersist, "ifpersist", true, false);
260	}
261	else if (!strcmp (var, "ifname"))
262	ifname = strdup (val);
263	else if (!strcmp (var, "rekey"))
264	rekey = atoi (val);
265	else if (!strcmp (var, "keepalive"))
266	keepalive = atoi (val);
267	else if (!strcmp (var, "mtu"))
268	mtu = atoi (val);
269	else if (!strcmp (var, "if-up"))
270	script_if_up = strdup (val);
271	else if (!strcmp (var, "node-up"))
272	script_node_up = strdup (val);
273	else if (!strcmp (var, "node-down"))
274	script_node_down = strdup (val);
275
276	/* node-specific, non-defaultable */
277	else if (node != &default_node && !strcmp (var, "hostname"))
278	{
279	free (node->hostname);
280	node->hostname = strdup (val);
281	}
282
283	/* node-specific, defaultable */
284	else if (!strcmp (var, "udp-port"))
285	node->udp_port = atoi (val);
286	else if (!strcmp (var, "tcp-port"))
287	node->tcp_port = atoi (val);
288	else if (!strcmp (var, "router-priority"))
289	node->routerprio = atoi (val);
290	else if (!strcmp (var, "connect"))
291	{
292	if (!strcmp (val, "ondemand"))
293	node->connectmode = conf_node::C_ONDEMAND;
294	else if (!strcmp (val, "never"))
295	node->connectmode = conf_node::C_NEVER;
296	else if (!strcmp (val, "always"))
297	node->connectmode = conf_node::C_ALWAYS;
298	else if (!strcmp (val, "disabled"))
299	node->connectmode = conf_node::C_DISABLED;
300	else
301	slog (L_WARN,
302	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
303	var, fname, lineno);
304	}
305	else if (!strcmp (var, "inherit-tos"))
306	{
307	parse_bool (node->inherit_tos, "inherit-tos", true, false);
308	}
309	else if (!strcmp (var, "compress"))
310	{
311	parse_bool (node->compress, "compress", true, false);
312	}
313	// all these bool options really really cost a lot of executable size!
314	else if (!strcmp (var, "enable-tcp"))
315	{
316	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
317	}
318	else if (!strcmp (var, "enable-udp"))
319	{
320	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
321	}
322	else if (!strcmp (var, "enable-rawip"))
323	{
324	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
325	}
326
327	// unknown or misplaced
328	else
329	{
330	slog (L_WARN,
331	_("unknown or misplaced variable `%s', at '%s' line %d"),
332	var, fname, lineno);
333	}
334	}
335
336	fclose (f);
337	}
338	else
339	{
340	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
341	exit (1);
342	}
343
344	free (fname);
345
346	fname = config_filename (prikeyfile, "hostkey");
347
348	f = fopen (fname, "r");
349	if (f)
350	{
351	rsa_key = RSA_new ();
352
353	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
354	{
355	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
356	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
357	exit (1);
358	}
359
360	RSA_blinding_on (rsa_key, 0);
361
362	fclose (f);
363	}
364	else
365	{
366	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
367
368	if (need_keys)
369	exit (1);
370	}
371
372	free (fname);
373	}
374
375	char configuration::config_filename (const char name, const char *dflt)
376	{
377	char *fname;
378
379	asprintf (&fname, name ? name : dflt, ::thisnode);
380
381	if (!ABSOLUTE_PATH (fname))
382	{
383	char *rname = fname;
384	asprintf (&fname, "%s/%s", confbase, rname);
385	free (rname);
386	}
387
388	return fname;
389	}
390
391	void
392	configuration::print ()
393	{
394	printf (_("\nConfiguration\n\n"));
395	printf (_("# of nodes: %d\n"), nodes.size ());
396	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
397	printf (_("MTU: %d\n"), mtu);
398	printf (_("rekeying interval: %d\n"), rekey);
399	printf (_("keepalive interval: %d\n"), keepalive);
400	printf (_("interface: %s\n"), ifname);
401	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
402	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
403	printf ("\n");
404
405	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
406	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
407
408	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
409	(*i)->print ();
410
411	printf ("\n");
412	}	72	}
413		73
414	void	74	void
415	conf_node::print ()	75	conf_node::print ()
416	{	76	{
…		…
426	hostname ? ":" : "",	86	hostname ? ":" : "",
427	hostname ? udp_port : 0	87	hostname ? udp_port : 0
428	);	88	);
429	}	89	}
430		90
		91	conf_node::~conf_node ()
		92	{
		93	if (rsa_key)
		94	RSA_free (rsa_key);
		95
		96	free (nodename);
		97	free (hostname);
		98	#if ENABLE_DNS
		99	free (domain);
		100	free (dns_hostname);
		101	#endif
		102	}
		103
		104	void configuration::init ()
		105	{
		106	memset (this, 0, sizeof (*this));
		107
		108	mtu = DEFAULT_MTU;
		109	rekey = DEFAULT_REKEY;
		110	keepalive = DEFAULT_KEEPALIVE;
		111	llevel = L_INFO;
		112	ip_proto = IPPROTO_GRE;
		113	#if ENABLE_ICMP
		114	icmp_type = ICMP_ECHOREPLY;
		115	#endif
		116
		117	default_node.udp_port = DEFAULT_UDPPORT;
		118	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
		119	default_node.connectmode = conf_node::C_ALWAYS;
		120	default_node.compress = true;
		121	default_node.protocols = 0;
		122	default_node.max_retry = DEFAULT_MAX_RETRY;
		123
		124	#if ENABLE_DNS
		125	default_node.dns_port = 0; // default is 0 == client
		126	dns_forw_host = strdup ("127.0.0.1");
		127	dns_forw_port = 53;
		128	#endif
		129
		130	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		131	}
		132
		133	void configuration::cleanup()
		134	{
		135	if (rsa_key)
		136	RSA_free (rsa_key);
		137
		138	rsa_key = 0;
		139
		140	free (pidfilename); pidfilename = 0;
		141	free (ifname); ifname = 0;
		142	#if ENABLE_HTTP_PROXY
		143	free (proxy_host); proxy_host = 0;
		144	free (proxy_auth); proxy_auth = 0;
		145	#endif
		146	#if ENABLE_DNS
		147	free (dns_forw_host); dns_forw_host = 0;
		148	#endif
		149	}
		150
		151	void
		152	configuration::clear_config ()
		153	{
		154	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
		155	delete *i;
		156
		157	nodes.clear ();
		158
		159	cleanup ();
		160	init ();
		161	}
		162
		163	#define parse_bool(target,name,trueval,falseval) do { \
		164	if (!strcmp (val, "yes")) target = trueval; \
		165	else if (!strcmp (val, "no")) target = falseval; \
		166	else if (!strcmp (val, "true")) target = trueval; \
		167	else if (!strcmp (val, "false")) target = falseval; \
		168	else if (!strcmp (val, "on")) target = trueval; \
		169	else if (!strcmp (val, "off")) target = falseval; \
		170	else \
		171	slog (L_WARN, \
		172	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
		173	name, var, fname, lineno); \
		174	} while (0)
		175
		176	void configuration::read_config (bool need_keys)
		177	{
		178	char *fname;
		179	FILE *f;
		180
		181	clear_config ();
		182
		183	asprintf (&fname, "%s/gvpe.conf", confbase);
		184	f = fopen (fname, "r");
		185
		186	if (f)
		187	{
		188	char line[16384];
		189	int lineno = 0;
		190	char var, val;
		191	conf_node *node = &default_node;
		192
		193	while (fgets (line, sizeof (line), f))
		194	{
		195	lineno++;
		196
		197	{
		198	char *end = line + strlen (line);
		199
		200	while (*end < ' ' && end >= line)
		201	end--;
		202
		203	*++end = 0;
		204	}
		205
		206	char *tok = line;
		207
		208	retry:
		209	var = strtok (tok, "\t =");
		210	tok = 0;
		211
		212	if (!var \|\| !var[0])
		213	continue; /* no tokens on this line */
		214
		215	if (var[0] == '#')
		216	continue; /* comment: ignore */
		217
		218	val = strtok (NULL, "\t\n\r =");
		219
		220	if (!val \|\| val[0] == '#')
		221	{
		222	slog (L_WARN,
		223	_("no value for variable `%s', at '%s' line %d, skipping."),
		224	var, fname, lineno);
		225	continue;
		226	}
		227
		228	if (!strcmp (var, "on"))
		229	{
		230	if (!::thisnode
		231	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		232	\|\| !strcmp (val, ::thisnode))
		233	goto retry;
		234
		235	continue;
		236	}
		237
		238	// truly global
		239	if (!strcmp (var, "loglevel"))
		240	{
		241	loglevel l = string_to_loglevel (val);
		242
		243	if (l != L_NONE)
		244	llevel = l;
		245	else
		246	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
		247	}
		248	else if (!strcmp (var, "ip-proto"))
		249	ip_proto = atoi (val);
		250	else if (!strcmp (var, "icmp-type"))
		251	{
		252	#if ENABLE_ICMP
		253	icmp_type = atoi (val);
		254	#endif
		255	}
		256
		257	// per config
		258	else if (!strcmp (var, "node"))
		259	{
		260	default_node.id++;
		261
		262	node = new conf_node (default_node);
		263
		264	nodes.push_back (node);
		265
		266	node->nodename = strdup (val);
		267
		268	{
		269	char *fname;
		270	FILE *f;
		271
		272	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		273
		274	f = fopen (fname, "r");
		275	if (f)
		276	{
		277	node->rsa_key = RSA_new ();
		278
		279	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		280	{
		281	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		282	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		283	exit (EXIT_FAILURE);
		284	}
		285
		286	require (RSA_blinding_on (node->rsa_key, 0));
		287
		288	fclose (f);
		289	}
		290	else
		291	{
		292	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		293
		294	if (need_keys)
		295	exit (EXIT_FAILURE);
		296	}
		297
		298	free (fname);
		299	}
		300
		301	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		302	thisnode = node;
		303	}
		304	else if (!strcmp (var, "private-key"))
		305	free (prikeyfile), prikeyfile = strdup (val);
		306	else if (!strcmp (var, "ifpersist"))
		307	parse_bool (ifpersist, "ifpersist", true, false);
		308	else if (!strcmp (var, "ifname"))
		309	free (ifname), ifname = strdup (val);
		310	else if (!strcmp (var, "rekey"))
		311	rekey = atoi (val);
		312	else if (!strcmp (var, "keepalive"))
		313	keepalive = atoi (val);
		314	else if (!strcmp (var, "mtu"))
		315	mtu = atoi (val);
		316	else if (!strcmp (var, "if-up"))
		317	free (script_if_up), script_if_up = strdup (val);
		318	else if (!strcmp (var, "node-up"))
		319	free (script_node_up), script_node_up = strdup (val);
		320	else if (!strcmp (var, "node-down"))
		321	free (script_node_down), script_node_down = strdup (val);
		322	else if (!strcmp (var, "pid-file"))
		323	free (pidfilename), pidfilename = strdup (val);
		324	else if (!strcmp (var, "dns-forw-host"))
		325	{
		326	#if ENABLE_DNS
		327	free (dns_forw_host), dns_forw_host = strdup (val);
		328	#endif
		329	}
		330	else if (!strcmp (var, "dns-forw-port"))
		331	{
		332	#if ENABLE_DNS
		333	dns_forw_port = atoi (val);
		334	#endif
		335	}
		336	else if (!strcmp (var, "http-proxy-host"))
		337	{
		338	#if ENABLE_HTTP_PROXY
		339	free (proxy_host), proxy_host = strdup (val);
		340	#endif
		341	}
		342	else if (!strcmp (var, "http-proxy-port"))
		343	{
		344	#if ENABLE_HTTP_PROXY
		345	proxy_port = atoi (val);
		346	#endif
		347	}
		348	else if (!strcmp (var, "http-proxy-auth"))
		349	{
		350	#if ENABLE_HTTP_PROXY
		351	proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		352	#endif
		353	}
		354
		355	/* node-specific, non-defaultable */
		356	else if (node != &default_node && !strcmp (var, "hostname"))
		357	free (node->hostname), node->hostname = strdup (val);
		358
		359	/* node-specific, defaultable */
		360	else if (!strcmp (var, "udp-port"))
		361	node->udp_port = atoi (val);
		362	else if (!strcmp (var, "tcp-port"))
		363	node->tcp_port = atoi (val);
		364	else if (!strcmp (var, "dns-hostname"))
		365	{
		366	#if ENABLE_DNS
		367	free (node->dns_hostname), node->dns_hostname = strdup (val);
		368	#endif
		369	}
		370	else if (!strcmp (var, "dns-port"))
		371	{
		372	#if ENABLE_DNS
		373	node->dns_port = atoi (val);
		374	#endif
		375	}
		376	else if (!strcmp (var, "dns-domain"))
		377	{
		378	#if ENABLE_DNS
		379	free (node->domain), node->domain = strdup (val);
		380	#endif
		381	}
		382	else if (!strcmp (var, "router-priority"))
		383	node->routerprio = atoi (val);
		384	else if (!strcmp (var, "max-retry"))
		385	node->max_retry = atoi (val);
		386	else if (!strcmp (var, "connect"))
		387	{
		388	if (!strcmp (val, "ondemand"))
		389	node->connectmode = conf_node::C_ONDEMAND;
		390	else if (!strcmp (val, "never"))
		391	node->connectmode = conf_node::C_NEVER;
		392	else if (!strcmp (val, "always"))
		393	node->connectmode = conf_node::C_ALWAYS;
		394	else if (!strcmp (val, "disabled"))
		395	node->connectmode = conf_node::C_DISABLED;
		396	else
		397	slog (L_WARN,
		398	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d, ignoring."),
		399	var, fname, lineno);
		400	}
		401	else if (!strcmp (var, "inherit-tos"))
		402	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		403	else if (!strcmp (var, "compress"))
		404	parse_bool (node->compress, "compress", true, false);
		405	// all these bool options really really cost a lot of executable size!
		406	else if (!strcmp (var, "enable-tcp"))
		407	{
		408	#if ENABLE_TCP
		409	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		410	#endif
		411	}
		412	else if (!strcmp (var, "enable-icmp"))
		413	{
		414	#if ENABLE_ICMP
		415	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		416	#endif
		417	}
		418	else if (!strcmp (var, "enable-dns"))
		419	{
		420	#if ENABLE_DNS
		421	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		422	#endif
		423	}
		424	else if (!strcmp (var, "enable-udp"))
		425	{
		426	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		427	}
		428	else if (!strcmp (var, "enable-rawip"))
		429	{
		430	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		431	}
		432
		433	// unknown or misplaced
		434	else
		435	slog (L_WARN,
		436	_("unknown or misplaced variable `%s', at '%s' line %d, skipping."),
		437	var, fname, lineno);
		438	}
		439
		440	fclose (f);
		441	}
		442	else
		443	{
		444	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		445	exit (EXIT_FAILURE);
		446	}
		447
		448	free (fname);
		449
		450	fname = config_filename (prikeyfile, "hostkey");
		451
		452	f = fopen (fname, "r");
		453	if (f)
		454	{
		455	rsa_key = RSA_new ();
		456
		457	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
		458	{
		459	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		460	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		461	exit (EXIT_FAILURE);
		462	}
		463
		464	require (RSA_blinding_on (rsa_key, 0));
		465
		466	fclose (f);
		467	}
		468	else
		469	{
		470	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
		471
		472	if (need_keys)
		473	exit (EXIT_FAILURE);
		474	}
		475
		476	if (need_keys && ::thisnode
		477	&& rsa_key && thisnode && thisnode->rsa_key)
		478	if (BN_cmp (rsa_key->n, thisnode->rsa_key->n) != 0
		479	\|\| BN_cmp (rsa_key->e, thisnode->rsa_key->e) != 0)
		480	{
		481	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		482	exit (EXIT_FAILURE);
		483	}
		484
		485	free (fname);
		486	}
		487
		488	char configuration::config_filename (const char name, const char *dflt)
		489	{
		490	char *fname;
		491
		492	asprintf (&fname, name ? name : dflt, ::thisnode);
		493
		494	if (!ABSOLUTE_PATH (fname))
		495	{
		496	char *rname = fname;
		497	asprintf (&fname, "%s/%s", confbase, rname);
		498	free (rname);
		499	}
		500
		501	return fname;
		502	}
		503
		504	void
		505	configuration::print ()
		506	{
		507	printf (_("\nConfiguration\n\n"));
		508	printf (_("# of nodes: %d\n"), nodes.size ());
		509	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
		510	printf (_("MTU: %d\n"), mtu);
		511	printf (_("rekeying interval: %d\n"), rekey);
		512	printf (_("keepalive interval: %d\n"), keepalive);
		513	printf (_("interface: %s\n"), ifname);
		514	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
		515	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
		516	printf ("\n");
		517
		518	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
		519	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
		520
		521	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
		522	(*i)->print ();
		523
		524	printf ("\n");
		525	}
		526
		527	configuration::configuration ()
		528	{
		529	asprintf (&confbase, "%s/gvpe", CONFDIR);
		530
		531	init ();
		532	}
		533
		534	configuration::~configuration ()
		535	{
		536	cleanup ();
		537	}
		538
		539

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs. Revision 1.37 by pcg, Wed Mar 23 14:33:34 2005 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs.
Revision 1.37 by pcg, Wed Mar 23 14:33:34 2005 UTC