2 conf.c -- configuration code
3 Copyright (C) 1998 Robert van der Meulen
4 1998-2005 Ivo Timmermans
5 2000-2014 Guus Sliepen <guus@tinc-vpn.org>
6 2010-2011 Julien Muchembled <jm@jmuchemb.eu>
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License along
20 with this program; if not, write to the Free Software Foundation, Inc.,
21 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
27 #include "connection.h"
31 #include "netutl.h" /* for str2address */
33 #include "utils.h" /* for cp */
36 avl_tree_t *config_tree;
38 int pinginterval = 0; /* seconds between pings */
39 int pingtimeout = 0; /* seconds to wait for response */
40 char *confbase = NULL; /* directory in which all config files are */
41 char *netname = NULL; /* name of the vpn network */
42 list_t *cmdline_conf = NULL; /* global/host configuration values given at the command line */
45 static int config_compare(const config_t *a, const config_t *b) {
48 result = strcasecmp(a->variable, b->variable);
54 /* give priority to command line options */
55 result = !b->file - !a->file;
61 result = a->line - b->line;
66 return a->file ? strcmp(a->file, b->file) : 0;
70 void init_configuration(avl_tree_t **config_tree) {
71 *config_tree = avl_alloc_tree((avl_compare_t) config_compare, (avl_action_t) free_config);
74 void exit_configuration(avl_tree_t **config_tree) {
75 avl_delete_tree(*config_tree);
79 config_t *new_config(void) {
80 return xmalloc_and_zero(sizeof(config_t));
83 void free_config(config_t *cfg) {
99 void config_add(avl_tree_t *config_tree, config_t *cfg) {
100 avl_insert(config_tree, cfg);
103 config_t *lookup_config(const avl_tree_t *config_tree, char *variable) {
104 config_t cfg, *found;
106 cfg.variable = variable;
110 found = avl_search_closest_greater(config_tree, &cfg);
116 if(strcasecmp(found->variable, variable)) {
123 config_t *lookup_config_next(const avl_tree_t *config_tree, const config_t *cfg) {
127 node = avl_search_node(config_tree, cfg);
131 found = node->next->data;
133 if(!strcasecmp(found->variable, cfg->variable)) {
142 bool get_config_bool(const config_t *cfg, bool *result) {
147 if(!strcasecmp(cfg->value, "yes")) {
150 } else if(!strcasecmp(cfg->value, "no")) {
155 logger(LOG_ERR, "\"yes\" or \"no\" expected for configuration variable %s in %s line %d",
156 cfg->variable, cfg->file, cfg->line);
161 bool get_config_int(const config_t *cfg, int *result) {
166 if(sscanf(cfg->value, "%d", result) == 1) {
170 logger(LOG_ERR, "Integer expected for configuration variable %s in %s line %d",
171 cfg->variable, cfg->file, cfg->line);
176 bool get_config_string(const config_t *cfg, char **result) {
181 *result = xstrdup(cfg->value);
186 bool get_config_address(const config_t *cfg, struct addrinfo **result) {
193 ai = str2addrinfo(cfg->value, NULL, 0);
200 logger(LOG_ERR, "Hostname or IP address expected for configuration variable %s in %s line %d",
201 cfg->variable, cfg->file, cfg->line);
206 bool get_config_subnet(const config_t *cfg, subnet_t **result) {
207 subnet_t subnet = {0};
213 if(!str2net(&subnet, cfg->value)) {
214 logger(LOG_ERR, "Subnet expected for configuration variable %s in %s line %d",
215 cfg->variable, cfg->file, cfg->line);
219 /* Teach newbies what subnets are... */
221 if(((subnet.type == SUBNET_IPV4)
222 && !maskcheck(&subnet.net.ipv4.address, subnet.net.ipv4.prefixlength, sizeof(ipv4_t)))
223 || ((subnet.type == SUBNET_IPV6)
224 && !maskcheck(&subnet.net.ipv6.address, subnet.net.ipv6.prefixlength, sizeof(ipv6_t)))) {
225 logger(LOG_ERR, "Network address and prefix length do not match for configuration variable %s in %s line %d",
226 cfg->variable, cfg->file, cfg->line);
230 *(*result = new_subnet()) = subnet;
236 Read exactly one line and strip the trailing newline if any.
238 static char *readline(FILE *fp, char *buf, size_t buflen) {
239 char *newline = NULL;
246 p = fgets(buf, buflen, fp);
252 newline = strchr(p, '\n');
258 *newline = '\0'; /* kill newline */
260 if(newline > p && newline[-1] == '\r') { /* and carriage return if necessary */
267 config_t *parse_config_line(char *line, const char *fname, int lineno) {
270 char *variable, *value, *eol;
271 variable = value = line;
273 eol = line + strlen(line);
275 while(strchr("\t ", *--eol)) {
279 len = strcspn(value, "\t =");
281 value += strspn(value, "\t ");
285 value += strspn(value, "\t ");
288 variable[len] = '\0';
291 const char err[] = "No value for variable";
294 logger(LOG_ERR, "%s `%s' on line %d while reading config file %s",
295 err, variable, lineno, fname);
297 logger(LOG_ERR, "%s `%s' in command line option %d",
298 err, variable, lineno);
304 cfg->variable = xstrdup(variable);
305 cfg->value = xstrdup(value);
306 cfg->file = fname ? xstrdup(fname) : NULL;
313 Parse a configuration file and put the results in the configuration tree
316 bool read_config_file(avl_tree_t *config_tree, const char *fname) {
318 char buffer[MAX_STRING_SIZE];
325 fp = fopen(fname, "r");
328 logger(LOG_ERR, "Cannot open config file %s: %s", fname, strerror(errno));
333 line = readline(fp, buffer, sizeof(buffer));
345 if(!*line || *line == '#') {
350 if(!strncmp(line, "-----END", 8)) {
357 if(!strncmp(line, "-----BEGIN", 10)) {
362 cfg = parse_config_line(line, fname, lineno);
368 config_add(config_tree, cfg);
376 void read_config_options(avl_tree_t *config_tree, const char *prefix) {
377 size_t prefix_len = prefix ? strlen(prefix) : 0;
379 for(const list_node_t *node = cmdline_conf->tail; node; node = node->prev) {
380 const config_t *cfg = node->data;
383 if(strchr(cfg->variable, '.')) {
387 if(strncmp(prefix, cfg->variable, prefix_len) ||
388 cfg->variable[prefix_len] != '.') {
393 config_t *new = new_config();
396 new->variable = xstrdup(cfg->variable + prefix_len + 1);
398 new->variable = xstrdup(cfg->variable);
401 new->value = xstrdup(cfg->value);
403 new->line = cfg->line;
405 config_add(config_tree, new);
409 bool read_server_config(void) {
410 char fname[PATH_MAX];
413 read_config_options(config_tree, NULL);
415 snprintf(fname, sizeof(fname), "%s/tinc.conf", confbase);
417 x = read_config_file(config_tree, fname);
419 // We will try to read the conf files in the "conf.d" dir
421 char dname[PATH_MAX];
422 snprintf(dname, sizeof(dname), "%s/conf.d", confbase);
423 DIR *dir = opendir(dname);
425 // If we can find this dir
429 // We list all the files in it
430 while(x && (ep = readdir(dir))) {
431 size_t l = strlen(ep->d_name);
433 // And we try to read the ones that end with ".conf"
434 if(l > 5 && !strcmp(".conf", & ep->d_name[ l - 5 ])) {
435 if((size_t)snprintf(fname, sizeof(fname), "%s/%s", dname, ep->d_name) >= sizeof(fname)) {
436 logger(LOG_ERR, "Pathname too long: %s/%s", dname, ep->d_name);
440 x = read_config_file(config_tree, fname);
449 logger(LOG_ERR, "Failed to read `%s': %s", fname, strerror(errno));
455 bool read_connection_config(connection_t *c) {
456 char fname[PATH_MAX];
459 read_config_options(c->config_tree, c->name);
461 snprintf(fname, sizeof(fname), "%s/hosts/%s", confbase, c->name);
462 x = read_config_file(c->config_tree, fname);
467 static void disable_old_keys(const char *filename) {
468 char tmpfile[PATH_MAX] = "";
470 bool disabled = false;
473 r = fopen(filename, "r");
479 snprintf(tmpfile, sizeof(tmpfile), "%s.tmp", filename);
481 w = fopen(tmpfile, "w");
483 while(fgets(buf, sizeof(buf), r)) {
484 if(!strncmp(buf, "-----BEGIN RSA", 14)) {
489 } else if(!strncmp(buf, "-----END RSA", 12)) {
496 if(w && fputs(buf, w) < 0) {
509 fprintf(stderr, "Warning: old key(s) found, remove them by hand!\n");
515 // We cannot atomically replace files on Windows.
516 char bakfile[PATH_MAX] = "";
517 snprintf(bakfile, sizeof(bakfile), "%s.bak", filename);
519 if(rename(filename, bakfile) || rename(tmpfile, filename)) {
520 rename(bakfile, filename);
523 if(rename(tmpfile, filename)) {
525 fprintf(stderr, "Warning: old key(s) found, remove them by hand!\n");
530 fprintf(stderr, "Warning: old key(s) found and disabled.\n");
537 FILE *ask_and_open(const char *filename, const char *what) {
539 char directory[PATH_MAX];
541 char abspath[PATH_MAX];
544 /* Check stdin and stdout */
545 if(!isatty(0) || !isatty(1)) {
546 /* Argh, they are running us from a script or something. Write
547 the files to the current directory and let them burn in hell
551 /* Ask for a file and/or directory name. */
552 fprintf(stdout, "Please enter a file to save %s to [%s]: ",
556 fn = readline(stdin, line, sizeof(line));
559 fprintf(stderr, "Error while reading stdin: %s\n",
565 /* User just pressed enter. */
573 if(fn[0] != '\\' && fn[0] != '/' && !strchr(fn, ':')) {
578 /* The directory is a relative path or a filename. */
579 getcwd(directory, sizeof(directory));
581 if((size_t)snprintf(abspath, sizeof(abspath), "%s/%s", directory, fn) >= sizeof(abspath)) {
582 fprintf(stderr, "Pathname too long: %s/%s\n", directory, fn);
589 umask(0077); /* Disallow everything for group and other */
591 disable_old_keys(fn);
593 /* Open it first to keep the inode busy */
598 fprintf(stderr, "Error opening file `%s': %s\n",
599 fn, strerror(errno));