[ViewVC] Diff of: cvs/gvpe/src/conf.C

Comparing gvpe/src/conf.C (file contents):
Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs.
Revision 1.40 by pcg, Mon Mar 28 20:39:18 2005 UTC

…		…
1	/*	1	/*
2	conf.c -- configuration code	2	conf.c -- configuration code
3	Copyright (C) 1998 Robert van der Meulen	3	Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de>
4	1998-2002 Ivo Timmermans <ivo@o2w.nl>
5	2000-2002 Guus Sliepen <guus@sliepen.eu.org>
6	2000 Cris van Pelt <tribbel@arise.dhs.org>
7	2003 Marc Lehmann <pcg@goof.com>
8		4
		5	This file is part of GVPE.
		6
9	This program is free software; you can redistribute it and/or modify	7	GVPE is free software; you can redistribute it and/or modify
10	it under the terms of the GNU General Public License as published by	8	it under the terms of the GNU General Public License as published by
11	the Free Software Foundation; either version 2 of the License, or	9	the Free Software Foundation; either version 2 of the License, or
12	(at your option) any later version.	10	(at your option) any later version.
13		11
14	This program is distributed in the hope that it will be useful,	12	This program is distributed in the hope that it will be useful,
15	but WITHOUT ANY WARRANTY; without even the implied warranty of	13	but WITHOUT ANY WARRANTY; without even the implied warranty of
16	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the	14	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17	GNU General Public License for more details.	15	GNU General Public License for more details.
18		16
19	You should have received a copy of the GNU General Public License	17	You should have received a copy of the GNU General Public License
20	along with this program; if not, write to the Free Software	18	along with gvpe; if not, write to the Free Software
21	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA	19	Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22	*/	20	*/
23		21
24	#include "config.h"	22	#include "config.h"
25		23
31	#include <netdb.h>	29	#include <netdb.h>
32	#include <sys/stat.h>	30	#include <sys/stat.h>
33	#include <sys/types.h>	31	#include <sys/types.h>
34	#include <unistd.h>	32	#include <unistd.h>
35		33
36	#include <netinet/in.h>	34	#include "netcompat.h"
37		35
38	#include <openssl/err.h>	36	#include <openssl/err.h>
39	#include <openssl/pem.h>	37	#include <openssl/pem.h>
40	#include <openssl/rsa.h>	38	#include <openssl/rsa.h>
41	#include <openssl/rand.h>	39	#include <openssl/rand.h>
42		40	#include <openssl/bn.h>
43	#include "gettext.h"
44		41
45	#include "conf.h"	42	#include "conf.h"
46	#include "slog.h"	43	#include "slog.h"
47	#include "util.h"	44	#include "util.h"
48		45
49	char *confbase;	46	char *confbase;
50	char *thisnode;	47	char *thisnode;
51	char *identname;	48	char *identname;
52	char *pidfilename;
53		49
54	struct configuration conf;	50	struct configuration conf;
55		51
56	u8 best_protocol (u8 protset)	52	u8 best_protocol (u8 protset)
57	{	53	{
58	if (protset & PROT_IPv4)	54	if (protset & PROT_IPv4 ) return PROT_IPv4;
59	return PROT_IPv4;	55	if (protset & PROT_ICMPv4) return PROT_ICMPv4;
		56	if (protset & PROT_UDPv4 ) return PROT_UDPv4;
		57	if (protset & PROT_TCPv4 ) return PROT_TCPv4;
		58	if (protset & PROT_DNSv4 ) return PROT_DNSv4;
60		59
61	return PROT_UDPv4;	60	return 0;
62	}	61	}
63		62
64	const char *strprotocol (u8 protocol)	63	const char *strprotocol (u8 protocol)
65	{	64	{
66	if (protocol & PROT_IPv4 ) return "rawip";	65	if (protocol & PROT_IPv4 ) return "rawip";
		66	if (protocol & PROT_ICMPv4) return "icmp";
67	if (protocol & PROT_UDPv4) return "udp";	67	if (protocol & PROT_UDPv4 ) return "udp";
		68	if (protocol & PROT_TCPv4 ) return "tcp";
		69	if (protocol & PROT_DNSv4 ) return "dns";
68		70
69	return "<unknown>";	71	return "<unknown>";
70	}
71
72	configuration::configuration ()
73	{
74	init ();
75	}
76
77	configuration::~configuration ()
78	{
79	cleanup ();
80	}
81
82	void configuration::init ()
83	{
84	memset (this, 0, sizeof (*this));
85
86	rekey = DEFAULT_REKEY;
87	keepalive = DEFAULT_KEEPALIVE;
88	llevel = L_INFO;
89	ip_proto = IPPROTO_GRE;
90
91	default_node.udp_port = DEFAULT_UDPPORT;
92	default_node.tcp_port = DEFAULT_UDPPORT;
93	default_node.connectmode = conf_node::C_ALWAYS;
94	default_node.compress = true;
95	default_node.protocols = PROT_UDPv4;
96	}
97
98	void configuration::cleanup()
99	{
100	if (rsa_key)
101	RSA_free (rsa_key);
102
103	free (ifname);
104
105	rsa_key = 0;
106	ifname = 0;
107	}
108
109	void
110	configuration::clear_config ()
111	{
112	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
113	delete *i;
114
115	nodes.clear ();
116
117	cleanup ();
118	init ();
119	}
120
121	#define parse_bool(target,name,trueval,falseval) \
122	if (!strcmp (val, "yes")) target = trueval; \
123	else if (!strcmp (val, "no")) target = falseval; \
124	else if (!strcmp (val, "true")) target = trueval; \
125	else if (!strcmp (val, "false")) target = falseval; \
126	else if (!strcmp (val, "on")) target = trueval; \
127	else if (!strcmp (val, "off")) target = falseval; \
128	else \
129	slog (L_WARN, \
130	_("illegal value for '%s', only 'yes\|true\|on' or 'no\|false\|off' allowed, at '%s' line %d"), \
131	name, var, fname, lineno);
132
133	void configuration::read_config (bool need_keys)
134	{
135	char *fname;
136	FILE *f;
137
138	clear_config ();
139
140	asprintf (&fname, "%s/vped.conf", confbase);
141	f = fopen (fname, "r");
142
143	if (f)
144	{
145	char line[16384];
146	int lineno = 0;
147	char var, val;
148	conf_node *node = &default_node;
149
150	while (fgets (line, sizeof (line), f))
151	{
152	lineno++;
153
154	{
155	char *end = line + strlen (line);
156
157	while (*end < ' ' && end >= line)
158	end--;
159
160	*++end = 0;
161	}
162
163	char *tok = line;
164
165	retry:
166	var = strtok (tok, "\t =");
167	tok = 0;
168
169	if (!var \|\| !var[0])
170	continue; /* no tokens on this line */
171
172	if (var[0] == '#')
173	continue; /* comment: ignore */
174
175	val = strtok (NULL, "\t\n\r =");
176
177	if (!val \|\| val[0] == '#')
178	{
179	slog (L_WARN,
180	_("no value for variable `%s', at '%s' line %d"),
181	var, fname, lineno);
182	break;
183	}
184
185	if (!strcmp (var, "on"))
186	{
187	if (!::thisnode
188	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
189	\|\| !strcmp (val, ::thisnode))
190	goto retry;
191
192	continue;
193	}
194
195	// truly global
196	if (!strcmp (var, "loglevel"))
197	{
198	loglevel l = string_to_loglevel (val);
199
200	if (l != L_NONE)
201	llevel = l;
202	else
203	slog (L_WARN, "'%s': %s, at '%s' line %d", val, UNKNOWN_LOGLEVEL, fname, line);
204	}
205	else if (!strcmp (var, "ip-proto"))
206	ip_proto = atoi (val);
207
208	// per config
209	else if (!strcmp (var, "node"))
210	{
211	default_node.id++;
212
213	node = new conf_node (default_node);
214
215	nodes.push_back (node);
216
217	node->nodename = strdup (val);
218
219	{
220	char *fname;
221	FILE *f;
222
223	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
224
225	f = fopen (fname, "r");
226	if (f)
227	{
228	node->rsa_key = RSA_new ();
229
230	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
231	{
232	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
233	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
234	exit (1);
235	}
236
237	RSA_blinding_on (node->rsa_key, 0);
238
239	fclose (f);
240	}
241	else
242	{
243	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
244
245	if (need_keys)
246	exit (1);
247	}
248
249	free (fname);
250	}
251
252	if (!::thisnode \|\| !strcmp (node->nodename, ::thisnode))
253	thisnode = node;
254	}
255	else if (!strcmp (var, "private-key"))
256	prikeyfile = strdup (val);
257	else if (!strcmp (var, "ifpersist"))
258	{
259	parse_bool (ifpersist, "ifpersist", true, false);
260	}
261	else if (!strcmp (var, "ifname"))
262	ifname = strdup (val);
263	else if (!strcmp (var, "rekey"))
264	rekey = atoi (val);
265	else if (!strcmp (var, "keepalive"))
266	keepalive = atoi (val);
267	else if (!strcmp (var, "mtu"))
268	mtu = atoi (val);
269	else if (!strcmp (var, "if-up"))
270	script_if_up = strdup (val);
271	else if (!strcmp (var, "node-up"))
272	script_node_up = strdup (val);
273	else if (!strcmp (var, "node-down"))
274	script_node_down = strdup (val);
275
276	/* node-specific, non-defaultable */
277	else if (node != &default_node && !strcmp (var, "hostname"))
278	{
279	free (node->hostname);
280	node->hostname = strdup (val);
281	}
282
283	/* node-specific, defaultable */
284	else if (!strcmp (var, "udp-port"))
285	node->udp_port = atoi (val);
286	else if (!strcmp (var, "tcp-port"))
287	node->tcp_port = atoi (val);
288	else if (!strcmp (var, "router-priority"))
289	node->routerprio = atoi (val);
290	else if (!strcmp (var, "connect"))
291	{
292	if (!strcmp (val, "ondemand"))
293	node->connectmode = conf_node::C_ONDEMAND;
294	else if (!strcmp (val, "never"))
295	node->connectmode = conf_node::C_NEVER;
296	else if (!strcmp (val, "always"))
297	node->connectmode = conf_node::C_ALWAYS;
298	else if (!strcmp (val, "disabled"))
299	node->connectmode = conf_node::C_DISABLED;
300	else
301	slog (L_WARN,
302	_("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled', at '%s' line %d"),
303	var, fname, lineno);
304	}
305	else if (!strcmp (var, "inherit-tos"))
306	{
307	parse_bool (node->inherit_tos, "inherit-tos", true, false);
308	}
309	else if (!strcmp (var, "compress"))
310	{
311	parse_bool (node->compress, "compress", true, false);
312	}
313	// all these bool options really really cost a lot of executable size!
314	else if (!strcmp (var, "enable-tcp"))
315	{
316	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
317	}
318	else if (!strcmp (var, "enable-udp"))
319	{
320	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
321	}
322	else if (!strcmp (var, "enable-rawip"))
323	{
324	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
325	}
326
327	// unknown or misplaced
328	else
329	{
330	slog (L_WARN,
331	_("unknown or misplaced variable `%s', at '%s' line %d"),
332	var, fname, lineno);
333	}
334	}
335
336	fclose (f);
337	}
338	else
339	{
340	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
341	exit (1);
342	}
343
344	free (fname);
345
346	fname = config_filename (prikeyfile, "hostkey");
347
348	f = fopen (fname, "r");
349	if (f)
350	{
351	rsa_key = RSA_new ();
352
353	if (!PEM_read_RSAPrivateKey (f, &rsa_key, NULL, NULL))
354	{
355	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
356	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
357	exit (1);
358	}
359
360	RSA_blinding_on (rsa_key, 0);
361
362	fclose (f);
363	}
364	else
365	{
366	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
367
368	if (need_keys)
369	exit (1);
370	}
371
372	free (fname);
373	}
374
375	char configuration::config_filename (const char name, const char *dflt)
376	{
377	char *fname;
378
379	asprintf (&fname, name ? name : dflt, ::thisnode);
380
381	if (!ABSOLUTE_PATH (fname))
382	{
383	char *rname = fname;
384	asprintf (&fname, "%s/%s", confbase, rname);
385	free (rname);
386	}
387
388	return fname;
389	}
390
391	void
392	configuration::print ()
393	{
394	printf (_("\nConfiguration\n\n"));
395	printf (_("# of nodes: %d\n"), nodes.size ());
396	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
397	printf (_("MTU: %d\n"), mtu);
398	printf (_("rekeying interval: %d\n"), rekey);
399	printf (_("keepalive interval: %d\n"), keepalive);
400	printf (_("interface: %s\n"), ifname);
401	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
402	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) : -1);
403	printf ("\n");
404
405	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
406	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
407
408	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
409	(*i)->print ();
410
411	printf ("\n");
412	}	72	}
413		73
414	void	74	void
415	conf_node::print ()	75	conf_node::print ()
416	{	76	{
…		…
426	hostname ? ":" : "",	86	hostname ? ":" : "",
427	hostname ? udp_port : 0	87	hostname ? udp_port : 0
428	);	88	);
429	}	89	}
430		90
		91	conf_node::~conf_node ()
		92	{
		93	#if 0
		94	// does not work, because string pointers etc. are shared
		95	// is not called, however
		96	if (rsa_key)
		97	RSA_free (rsa_key);
		98
		99	free (nodename);
		100	free (hostname);
		101	free (if_up_data);
		102	#if ENABLE_DNS
		103	free (domain);
		104	free (dns_hostname);
		105	#endif
		106	#endif
		107	}
		108
		109	void configuration::init ()
		110	{
		111	memset (this, 0, sizeof (*this));
		112
		113	mtu = DEFAULT_MTU;
		114	rekey = DEFAULT_REKEY;
		115	keepalive = DEFAULT_KEEPALIVE;
		116	llevel = L_INFO;
		117	ip_proto = IPPROTO_GRE;
		118	#if ENABLE_ICMP
		119	icmp_type = ICMP_ECHOREPLY;
		120	#endif
		121
		122	default_node.udp_port = DEFAULT_UDPPORT;
		123	default_node.tcp_port = DEFAULT_UDPPORT; // ehrm
		124	default_node.connectmode = conf_node::C_ALWAYS;
		125	default_node.compress = true;
		126	default_node.protocols = 0;
		127	default_node.max_retry = DEFAULT_MAX_RETRY;
		128	default_node.if_up_data = strdup ("");
		129
		130	#if ENABLE_DNS
		131	default_node.dns_port = 0; // default is 0 == client
		132
		133	dns_forw_host = strdup ("127.0.0.1");
		134	dns_forw_port = 53;
		135	dns_timeout_factor = DEFAULT_DNS_TIMEOUT_FACTOR;
		136	dns_send_interval = DEFAULT_DNS_SEND_INTERVAL;
		137	dns_overlap_factor = DEFAULT_DNS_OVERLAP_FACTOR;
		138	dns_max_outstanding = DEFAULT_DNS_MAX_OUTSTANDING;
		139	#endif
		140
		141	conf.pidfilename = strdup (LOCALSTATEDIR "/run/gvpe.pid");
		142	}
		143
		144	void configuration::cleanup()
		145	{
		146	if (rsa_key)
		147	RSA_free (rsa_key);
		148
		149	rsa_key = 0;
		150
		151	free (pidfilename); pidfilename = 0;
		152	free (ifname); ifname = 0;
		153	#if ENABLE_HTTP_PROXY
		154	free (proxy_host); proxy_host = 0;
		155	free (proxy_auth); proxy_auth = 0;
		156	#endif
		157	#if ENABLE_DNS
		158	free (dns_forw_host); dns_forw_host = 0;
		159	#endif
		160	}
		161
		162	void
		163	configuration::clear ()
		164	{
		165	for (configuration::node_vector::iterator i = nodes.begin(); i != nodes.end(); ++i)
		166	delete *i;
		167
		168	nodes.clear ();
		169
		170	cleanup ();
		171	init ();
		172	}
		173
		174	#define parse_bool(target,name,trueval,falseval) do { \
		175	if (!strcmp (val, "yes")) target = trueval; \
		176	else if (!strcmp (val, "no")) target = falseval; \
		177	else if (!strcmp (val, "true")) target = trueval; \
		178	else if (!strcmp (val, "false")) target = falseval; \
		179	else if (!strcmp (val, "on")) target = trueval; \
		180	else if (!strcmp (val, "off")) target = falseval; \
		181	else \
		182	return _("illegal boolean value, only 'yes\|true\|on' or 'no\|false\|off' allowed. (ignored)"); \
		183	} while (0)
		184
		185	const char *
		186	configuration_parser::parse_line (char *line)
		187	{
		188	{
		189	char *end = line + strlen (line);
		190
		191	while (*end < ' ' && end >= line)
		192	end--;
		193
		194	*++end = 0;
		195	}
		196
		197	char *tok = line;
		198	const char *var = strtok (tok, "\t =");
		199	tok = 0;
		200
		201	if (!var \|\| !var[0])
		202	return 0; /* no tokens on this line */
		203
		204	if (var[0] == '#')
		205	return 0; /* comment: ignore */
		206
		207	char *val = strtok (NULL, "\t\n\r =");
		208
		209	if (!val \|\| val[0] == '#')
		210	return _("no value given for variable. (ignored)");
		211
		212	if (!strcmp (var, "on"))
		213	{
		214	if (!::thisnode
		215	\|\| (val[0] == '!' && strcmp (val + 1, ::thisnode))
		216	\|\| !strcmp (val, ::thisnode))
		217	return parse_line (strtok (NULL, "\n\r"));
		218	else
		219	return 0;
		220	}
		221
		222	// truly global
		223	if (!strcmp (var, "loglevel"))
		224	{
		225	loglevel l = string_to_loglevel (val);
		226
		227	if (l == L_NONE)
		228	return _("unknown loglevel. (skipping)");
		229	}
		230	else if (!strcmp (var, "ip-proto"))
		231	conf.ip_proto = atoi (val);
		232	else if (!strcmp (var, "icmp-type"))
		233	{
		234	#if ENABLE_ICMP
		235	conf.icmp_type = atoi (val);
		236	#endif
		237	}
		238
		239	// per config
		240	else if (!strcmp (var, "node"))
		241	{
		242	parse_argv ();
		243
		244	conf.default_node.id++;
		245	node = new conf_node (conf.default_node);
		246	conf.nodes.push_back (node);
		247	node->nodename = strdup (val);
		248
		249	{
		250	char *fname;
		251	FILE *f;
		252
		253	asprintf (&fname, "%s/pubkey/%s", confbase, node->nodename);
		254
		255	f = fopen (fname, "r");
		256	if (f)
		257	{
		258	node->rsa_key = RSA_new ();
		259
		260	if (!PEM_read_RSAPublicKey(f, &node->rsa_key, NULL, NULL))
		261	{
		262	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		263	slog (L_ERR, _("unable to open public rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		264	exit (EXIT_FAILURE);
		265	}
		266
		267	require (RSA_blinding_on (node->rsa_key, 0));
		268
		269	fclose (f);
		270	}
		271	else
		272	{
		273	slog (need_keys ? L_ERR : L_NOTICE, _("unable to read public rsa key file '%s': %s"), fname, strerror (errno));
		274
		275	if (need_keys)
		276	exit (EXIT_FAILURE);
		277	}
		278
		279	free (fname);
		280	}
		281
		282	if (::thisnode && !strcmp (node->nodename, ::thisnode))
		283	conf.thisnode = node;
		284	}
		285	else if (!strcmp (var, "private-key"))
		286	free (conf.prikeyfile), conf.prikeyfile = strdup (val);
		287	else if (!strcmp (var, "ifpersist"))
		288	parse_bool (conf.ifpersist, "ifpersist", true, false);
		289	else if (!strcmp (var, "ifname"))
		290	free (conf.ifname), conf.ifname = strdup (val);
		291	else if (!strcmp (var, "rekey"))
		292	conf.rekey = atoi (val);
		293	else if (!strcmp (var, "keepalive"))
		294	conf.keepalive = atoi (val);
		295	else if (!strcmp (var, "mtu"))
		296	conf.mtu = atoi (val);
		297	else if (!strcmp (var, "if-up"))
		298	free (conf.script_if_up), conf.script_if_up = strdup (val);
		299	else if (!strcmp (var, "node-up"))
		300	free (conf.script_node_up), conf.script_node_up = strdup (val);
		301	else if (!strcmp (var, "node-down"))
		302	free (conf.script_node_down), conf.script_node_down = strdup (val);
		303	else if (!strcmp (var, "pid-file"))
		304	free (conf.pidfilename), conf.pidfilename = strdup (val);
		305	else if (!strcmp (var, "dns-forw-host"))
		306	{
		307	#if ENABLE_DNS
		308	free (conf.dns_forw_host), conf.dns_forw_host = strdup (val);
		309	#endif
		310	}
		311	else if (!strcmp (var, "dns-forw-port"))
		312	{
		313	#if ENABLE_DNS
		314	conf.dns_forw_port = atoi (val);
		315	#endif
		316	}
		317	else if (!strcmp (var, "dns-timeout-factor"))
		318	{
		319	#if ENABLE_DNS
		320	conf.dns_timeout_factor = atof (val);
		321	#endif
		322	}
		323	else if (!strcmp (var, "dns-send-interval"))
		324	{
		325	#if ENABLE_DNS
		326	conf.dns_send_interval = atoi (val);
		327	#endif
		328	}
		329	else if (!strcmp (var, "dns-overlap-factor"))
		330	{
		331	#if ENABLE_DNS
		332	conf.dns_overlap_factor = atof (val);
		333	#endif
		334	}
		335	else if (!strcmp (var, "dns-max-outstanding"))
		336	{
		337	#if ENABLE_DNS
		338	conf.dns_max_outstanding = atoi (val);
		339	#endif
		340	}
		341	else if (!strcmp (var, "http-proxy-host"))
		342	{
		343	#if ENABLE_HTTP_PROXY
		344	free (conf.proxy_host), conf.proxy_host = strdup (val);
		345	#endif
		346	}
		347	else if (!strcmp (var, "http-proxy-port"))
		348	{
		349	#if ENABLE_HTTP_PROXY
		350	conf.proxy_port = atoi (val);
		351	#endif
		352	}
		353	else if (!strcmp (var, "http-proxy-auth"))
		354	{
		355	#if ENABLE_HTTP_PROXY
		356	conf.proxy_auth = (char )base64_encode ((const u8 )val, strlen (val));
		357	#endif
		358	}
		359
		360	/* node-specific, non-defaultable */
		361	else if (node != &conf.default_node && !strcmp (var, "hostname"))
		362	free (node->hostname), node->hostname = strdup (val);
		363
		364	/* node-specific, defaultable */
		365	else if (!strcmp (var, "udp-port"))
		366	node->udp_port = atoi (val);
		367	else if (!strcmp (var, "tcp-port"))
		368	node->tcp_port = atoi (val);
		369	else if (!strcmp (var, "dns-hostname"))
		370	{
		371	#if ENABLE_DNS
		372	free (node->dns_hostname), node->dns_hostname = strdup (val);
		373	#endif
		374	}
		375	else if (!strcmp (var, "dns-port"))
		376	{
		377	#if ENABLE_DNS
		378	node->dns_port = atoi (val);
		379	#endif
		380	}
		381	else if (!strcmp (var, "dns-domain"))
		382	{
		383	#if ENABLE_DNS
		384	free (node->domain), node->domain = strdup (val);
		385	#endif
		386	}
		387	else if (!strcmp (var, "if-up-data"))
		388	free (node->if_up_data), node->if_up_data = strdup (val);
		389	else if (!strcmp (var, "router-priority"))
		390	node->routerprio = atoi (val);
		391	else if (!strcmp (var, "max-retry"))
		392	node->max_retry = atoi (val);
		393	else if (!strcmp (var, "connect"))
		394	{
		395	if (!strcmp (val, "ondemand"))
		396	node->connectmode = conf_node::C_ONDEMAND;
		397	else if (!strcmp (val, "never"))
		398	node->connectmode = conf_node::C_NEVER;
		399	else if (!strcmp (val, "always"))
		400	node->connectmode = conf_node::C_ALWAYS;
		401	else if (!strcmp (val, "disabled"))
		402	node->connectmode = conf_node::C_DISABLED;
		403	else
		404	return _("illegal value for 'connectmode', use one of 'ondemand', 'never', 'always' or 'disabled'. (ignored)");
		405	}
		406	else if (!strcmp (var, "inherit-tos"))
		407	parse_bool (node->inherit_tos, "inherit-tos", true, false);
		408	else if (!strcmp (var, "compress"))
		409	parse_bool (node->compress, "compress", true, false);
		410	// all these bool options really really cost a lot of executable size!
		411	else if (!strcmp (var, "enable-tcp"))
		412	{
		413	#if ENABLE_TCP
		414	u8 v; parse_bool (v, "enable-tcp" , PROT_TCPv4, 0); node->protocols = (node->protocols & ~PROT_TCPv4) \| v;
		415	#endif
		416	}
		417	else if (!strcmp (var, "enable-icmp"))
		418	{
		419	#if ENABLE_ICMP
		420	u8 v; parse_bool (v, "enable-icmp" , PROT_ICMPv4, 0); node->protocols = (node->protocols & ~PROT_ICMPv4) \| v;
		421	#endif
		422	}
		423	else if (!strcmp (var, "enable-dns"))
		424	{
		425	#if ENABLE_DNS
		426	u8 v; parse_bool (v, "enable-dns" , PROT_DNSv4, 0); node->protocols = (node->protocols & ~PROT_DNSv4) \| v;
		427	#endif
		428	}
		429	else if (!strcmp (var, "enable-udp"))
		430	{
		431	u8 v; parse_bool (v, "enable-udp" , PROT_UDPv4, 0); node->protocols = (node->protocols & ~PROT_UDPv4) \| v;
		432	}
		433	else if (!strcmp (var, "enable-rawip"))
		434	{
		435	u8 v; parse_bool (v, "enable-rawip", PROT_IPv4, 0); node->protocols = (node->protocols & ~PROT_IPv4 ) \| v;
		436	}
		437
		438	// unknown or misplaced
		439	else
		440	return _("unknown configuration directive. (ignored)");
		441
		442	return 0;
		443	}
		444
		445	void configuration_parser::parse_argv ()
		446	{
		447	for (int i = 0; i < argc; ++i)
		448	{
		449	char *v = argv [i];
		450
		451	if (!*v)
		452	continue;
		453
		454	char *enode = v;
		455
		456	while (enode != '.' && enode > ' ' && enode != '=' && enode)
		457	enode++;
		458
		459	if (*enode != '.')
		460	enode = 0;
		461
		462	char *wnode = node == &conf.default_node
		463	? 0
		464	: node->nodename;
		465
		466	if ((!wnode && !enode)
		467	\|\| (wnode && enode && !strncmp (wnode, v, enode - v)))
		468	{
		469	const char *warn = parse_line (enode ? enode + 1 : v);
		470
		471	if (warn)
		472	slog (L_WARN, _("%s, while parsing command line option '%s'."), warn, v);
		473
		474	*v = 0;
		475	}
		476	}
		477	}
		478
		479	configuration_parser::configuration_parser (configuration &conf,
		480	bool need_keys,
		481	int argc,
		482	char **argv)
		483	: conf (conf),need_keys (need_keys), argc (argc), argv (argv)
		484	{
		485	char *fname;
		486	FILE *f;
		487
		488	conf.clear ();
		489
		490	asprintf (&fname, "%s/gvpe.conf", confbase);
		491	f = fopen (fname, "r");
		492
		493	if (f)
		494	{
		495	char line[16384];
		496	int lineno = 0;
		497	node = &conf.default_node;
		498
		499	while (fgets (line, sizeof (line), f))
		500	{
		501	lineno++;
		502
		503	const char *warn = parse_line (line);
		504
		505	if (warn)
		506	slog (L_WARN, _("%s, at '%s', line %d."), warn, fname, lineno);
		507	}
		508
		509	fclose (f);
		510
		511	parse_argv ();
		512	}
		513	else
		514	{
		515	slog (L_ERR, _("unable to read config file '%s': %s"), fname, strerror (errno));
		516	exit (EXIT_FAILURE);
		517	}
		518
		519	free (fname);
		520
		521	fname = conf.config_filename (conf.prikeyfile, "hostkey");
		522
		523	f = fopen (fname, "r");
		524	if (f)
		525	{
		526	conf.rsa_key = RSA_new ();
		527
		528	if (!PEM_read_RSAPrivateKey (f, &conf.rsa_key, NULL, NULL))
		529	{
		530	ERR_load_RSA_strings (); ERR_load_PEM_strings ();
		531	slog (L_ERR, _("unable to read private rsa key file '%s': %s"), fname, ERR_error_string (ERR_get_error (), 0));
		532	exit (EXIT_FAILURE);
		533	}
		534
		535	require (RSA_blinding_on (conf.rsa_key, 0));
		536
		537	fclose (f);
		538	}
		539	else
		540	{
		541	slog (need_keys ? L_ERR : L_NOTICE, _("unable to open private rsa key file '%s': %s"), fname, strerror (errno));
		542
		543	if (need_keys)
		544	exit (EXIT_FAILURE);
		545	}
		546
		547	if (need_keys && ::thisnode
		548	&& conf.rsa_key && conf.thisnode && conf.thisnode->rsa_key)
		549	if (BN_cmp (conf.rsa_key->n, conf.thisnode->rsa_key->n) != 0
		550	\|\| BN_cmp (conf.rsa_key->e, conf.thisnode->rsa_key->e) != 0)
		551	{
		552	slog (L_NOTICE, _("private hostkey and public node key mismatch: is '%s' the correct node?"), ::thisnode);
		553	exit (EXIT_FAILURE);
		554	}
		555
		556	free (fname);
		557	}
		558
		559	char configuration::config_filename (const char name, const char *dflt)
		560	{
		561	char *fname;
		562
		563	asprintf (&fname, name ? name : dflt, ::thisnode);
		564
		565	if (!ABSOLUTE_PATH (fname))
		566	{
		567	char *rname = fname;
		568	asprintf (&fname, "%s/%s", confbase, rname);
		569	free (rname);
		570	}
		571
		572	return fname;
		573	}
		574
		575	void
		576	configuration::print ()
		577	{
		578	printf (_("\nConfiguration\n\n"));
		579	printf (_("# of nodes: %d\n"), nodes.size ());
		580	printf (_("this node: %s\n"), thisnode ? thisnode->nodename : "<unset>");
		581	printf (_("MTU: %d\n"), mtu);
		582	printf (_("rekeying interval: %d\n"), rekey);
		583	printf (_("keepalive interval: %d\n"), keepalive);
		584	printf (_("interface: %s\n"), ifname);
		585	printf (_("primary rsa key: %s\n"), prikeyfile ? prikeyfile : "<default>");
		586	printf (_("rsa key size: %d\n"), rsa_key ? RSA_size (rsa_key) * 8 : -1);
		587	printf ("\n");
		588
		589	printf ("%4s %-17s %s %-8.8s %-10.10s %s\n",
		590	_("ID#"), _("MAC"), _("Com"), _("Conmode"), _("Node"), _("Host:Port"));
		591
		592	for (node_vector::iterator i = nodes.begin (); i != nodes.end (); ++i)
		593	(*i)->print ();
		594
		595	printf ("\n");
		596	}
		597
		598	configuration::configuration ()
		599	{
		600	asprintf (&confbase, "%s/gvpe", CONFDIR);
		601
		602	init ();
		603	}
		604
		605	configuration::~configuration ()
		606	{
		607	cleanup ();
		608	}
		609
		610

Diff Legend

-–
+Removed lines
-+
+Added lines
-<
+Changed lines
->
+Changed lines

Comparing gvpe/src/conf.C (file contents): Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs. Revision 1.40 by pcg, Mon Mar 28 20:39:18 2005 UTC

Diff Legend

Comparing gvpe/src/conf.C (file contents):
Revision 1.8 by pcg, Wed Apr 2 03:25:17 2003 UTC vs.
Revision 1.40 by pcg, Mon Mar 28 20:39:18 2005 UTC