struct starter_config *confread_load(const char *file,
err_t *perr,
bool resolvip,
const char *ctlbase,
bool setuponly)
{
struct starter_config *cfg = NULL;
struct config_parsed *cfgp;
struct section_list *sconn;
bool err = FALSE;
bool connerr;
#ifdef DNSSEC
struct ub_ctx *dnsctx = ub_ctx_create();
unbound_init(dnsctx);
#else
struct ub_ctx *dnsctx = NULL;
#endif
/**
* Load file
*/
cfgp = parser_load_conf(file, perr);
if (!cfgp)
return NULL;
cfg = (struct starter_config *)alloc_bytes(sizeof(struct starter_config),"starter_config cfg");
/**
* Set default values
*/
ipsecconf_default_values(cfg);
if (ctlbase) {
pfree(cfg->ctlbase);
cfg->ctlbase = clone_str(ctlbase, "control socket");
}
/**
* Load setup
*/
err |= load_setup(cfg, cfgp);
if (err) {
parser_free_conf(cfgp);
confread_free(cfg);
return NULL;
}
if (!setuponly) {
/**
* Find %default and %oedefault conn
*
*/
for (sconn = cfgp->sections.tqh_first; (!err) && sconn != NULL;
sconn = sconn->link.tqe_next) {
if (streq(sconn->name, "%default")) {
starter_log(LOG_LEVEL_DEBUG,
"Loading default conn");
err |= load_conn(dnsctx,
&cfg->conn_default,
cfgp, sconn, FALSE,
/*default conn*/ TRUE,
resolvip, perr);
}
if (streq(sconn->name, "%oedefault")) {
starter_log(LOG_LEVEL_DEBUG,
"Loading oedefault conn");
err |= load_conn(dnsctx,
&cfg->conn_oedefault,
cfgp, sconn, FALSE,
/*default conn*/ TRUE,
resolvip, perr);
if (!err)
cfg->got_oedefault = TRUE;
}
}
/**
* Load other conns
*/
for (sconn = cfgp->sections.tqh_first; sconn != NULL;
sconn = sconn->link.tqe_next) {
if (streq(sconn->name, "%default"))
continue;
if (streq(sconn->name, "%oedefault"))
continue;
connerr = init_load_conn(dnsctx, cfg, cfgp, sconn,
FALSE,
resolvip, perr);
#if 0 /* ??? the following condition can never be true */
if (connerr == -1) {
parser_free_conf(cfgp);
confread_free(cfg);
return NULL;
}
#endif
err |= connerr;
}
/* if we have OE on, then create any missing OE conns! */
if (cfg->setup.options[KBF_OPPOENCRYPT]) {
starter_log(LOG_LEVEL_DEBUG, "Enabling OE conns");
add_any_oeconns(cfg, cfgp);
}
}
parser_free_conf(cfgp);
return cfg;
}
/*
* load and parse an IPsec configuration file
*/
starter_config_t* confread_load(const char *file)
{
starter_config_t *cfg = NULL;
config_parsed_t *cfgp;
section_list_t *sconn, *sca;
starter_conn_t *conn;
starter_ca_t *ca;
u_int total_err;
u_int visit = 0;
/* load IPSec configuration file */
cfgp = parser_load_conf(file);
if (!cfgp)
{
return NULL;
}
cfg = malloc_thing(starter_config_t);
/* set default values */
default_values(cfg);
/* load config setup section */
load_setup(cfg, cfgp);
/* in the first round parse also statements */
cfg->parse_also = TRUE;
/* find %default ca section */
for (sca = cfgp->ca_first; sca; sca = sca->next)
{
if (streq(sca->name, "%default"))
{
DBG2(DBG_APP, "Loading ca %%default");
load_ca(&cfg->ca_default, sca->kw, cfg);
}
}
/* parameters defined in ca %default sections can be overloads */
cfg->ca_default.seen = SEEN_NONE;
/* load other ca sections */
for (sca = cfgp->ca_first; sca; sca = sca->next)
{
u_int previous_err;
/* skip %default ca section */
if (streq(sca->name, "%default"))
continue;
DBG2(DBG_APP, "Loading ca '%s'", sca->name);
ca = malloc_thing(starter_ca_t);
ca_default(sca->name, ca, &cfg->ca_default);
ca->kw = sca->kw;
ca->next = NULL;
previous_err = cfg->err;
load_ca(ca, ca->kw, cfg);
if (cfg->err > previous_err)
{
/* errors occurred - free the ca */
confread_free_ca(ca);
cfg->non_fatal_err += cfg->err - previous_err;
cfg->err = previous_err;
}
else
{
/* success - insert the ca into the chained list */
if (cfg->ca_last)
cfg->ca_last->next = ca;
cfg->ca_last = ca;
if (!cfg->ca_first)
cfg->ca_first = ca;
}
}
for (ca = cfg->ca_first; ca; ca = ca->next)
{
also_t *also = ca->also;
while (also != NULL)
{
kw_list_t *kw = find_also_ca(also->name, cfg->ca_first, cfg);
load_ca(ca, kw, cfg);
also = also->next;
}
if (ca->startup != STARTUP_NO)
ca->state = STATE_TO_ADD;
}
/* find %default conn sections */
for (sconn = cfgp->conn_first; sconn; sconn = sconn->next)
{
if (streq(sconn->name, "%default"))
{
DBG2(DBG_APP, "Loading conn %%default");
load_conn(&cfg->conn_default, sconn->kw, cfg);
}
}
/* parameters defined in conn %default sections can be overloaded */
cfg->conn_default.seen = SEEN_NONE;
cfg->conn_default.right.seen = SEEN_NONE;
cfg->conn_default.left.seen = SEEN_NONE;
/* load other conn sections */
for (sconn = cfgp->conn_first; sconn; sconn = sconn->next)
{
u_int previous_err;
/* skip %default conn section */
if (streq(sconn->name, "%default"))
continue;
DBG2(DBG_APP, "Loading conn '%s'", sconn->name);
conn = malloc_thing(starter_conn_t);
conn_default(sconn->name, conn, &cfg->conn_default);
conn->kw = sconn->kw;
conn->next = NULL;
previous_err = cfg->err;
load_conn(conn, conn->kw, cfg);
if (cfg->err > previous_err)
{
/* error occurred - free the conn */
confread_free_conn(conn);
cfg->non_fatal_err += cfg->err - previous_err;
cfg->err = previous_err;
}
else
{
/* success - insert the conn into the chained list */
if (cfg->conn_last)
cfg->conn_last->next = conn;
cfg->conn_last = conn;
if (!cfg->conn_first)
cfg->conn_first = conn;
}
}
/* in the second round do not parse also statements */
cfg->parse_also = FALSE;
for (ca = cfg->ca_first; ca; ca = ca->next)
{
ca->visit = ++visit;
load_also_cas(ca, ca->also, cfg);
if (ca->startup != STARTUP_NO)
ca->state = STATE_TO_ADD;
}
for (conn = cfg->conn_first; conn; conn = conn->next)
{
conn->visit = ++visit;
load_also_conns(conn, conn->also, cfg);
if (conn->startup != STARTUP_NO)
conn->state = STATE_TO_ADD;
}
parser_free_conf(cfgp);
total_err = cfg->err + cfg->non_fatal_err;
if (total_err > 0)
{
DBG1(DBG_APP, "### %d parsing error%s (%d fatal) ###",
total_err, (total_err > 1)?"s":"", cfg->err);
}
return cfg;
}
struct starter_config *confread_load(const char *file
, err_t *perr
, bool resolvip
, char *ctlbase
, bool setuponly)
{
struct starter_config *cfg = NULL;
struct config_parsed *cfgp;
struct section_list *sconn;
unsigned int err = 0, connerr;
/**
* Load file
*/
cfgp = parser_load_conf(file, perr);
if (!cfgp) return NULL;
cfg = (struct starter_config *)alloc_bytes(sizeof(struct starter_config),"starter_config cfg");
zero(cfg);
/**
* Set default values
*/
ipsecconf_default_values(cfg);
if(ctlbase) {
pfree(cfg->ctlbase);
cfg->ctlbase = clone_str(ctlbase, "control socket");
}
starter_whack_init_cfg(cfg); /* set default sender to send to socket */
/**
* Load setup
*/
err += load_setup(cfg, cfgp);
if(err) {
parser_free_conf(cfgp);
confread_free(cfg);
return NULL;
}
if(!setuponly) {
/**
* Find %default and %oedefault conn
*
*/
for(sconn = cfgp->sections.tqh_first; (!err) && sconn != NULL; sconn = sconn->link.tqe_next)
{
if (strcmp(sconn->name,"%default")==0) {
starter_log(LOG_LEVEL_DEBUG, "Loading default conn");
err += load_conn (cfg, &cfg->conn_default,
cfgp, sconn, FALSE,
/*default conn*/TRUE,
resolvip, perr);
}
if (strcmp(sconn->name,"%oedefault")==0) {
starter_log(LOG_LEVEL_DEBUG, "Loading oedefault conn");
err += load_conn (cfg, &cfg->conn_oedefault,
cfgp, sconn, FALSE,
/*default conn*/TRUE,
resolvip, perr);
if(err == 0) {
cfg->got_oedefault=TRUE;
}
}
}
/**
* Load other conns
*/
for(sconn = cfgp->sections.tqh_first; sconn != NULL; sconn = sconn->link.tqe_next)
{
if (strcmp(sconn->name,"%default")==0) continue;
if (strcmp(sconn->name,"%oedefault")==0) continue;
connerr = init_load_conn(cfg, cfgp, sconn, TRUE, FALSE,
resolvip, perr);
if(connerr == -1) {
parser_free_conf(cfgp);
confread_free(cfg);
return NULL;
}
err += connerr;
}
/* if we have OE on, then create any missing OE conns! */
if(cfg->setup.options[KBF_OPPOENCRYPT]) {
starter_log(LOG_LEVEL_DEBUG, "Enabling OE conns\n");
add_any_oeconns(cfg, cfgp);
}
}
parser_free_conf(cfgp);
return cfg;
}
struct starter_config *confread_load(const char *file,
err_t *perr,
bool resolvip,
const char *ctlbase,
bool setuponly)
{
bool err = FALSE;
/**
* Load file
*/
struct config_parsed *cfgp = parser_load_conf(file, perr);
if (cfgp == NULL)
return NULL;
struct starter_config *cfg = alloc_thing(struct starter_config, "starter_config cfg");
/**
* Set default values
*/
ipsecconf_default_values(cfg);
if (ctlbase != NULL) {
pfree(cfg->ctlbase);
cfg->ctlbase = clone_str(ctlbase, "control socket");
}
/**
* Load setup
*/
err |= load_setup(cfg, cfgp);
if (err) {
parser_free_conf(cfgp);
confread_free(cfg);
return NULL;
}
#ifdef DNSSEC
struct ub_ctx *dnsctx = unbound_init();
if (dnsctx == NULL)
return NULL;
#endif
if (!setuponly) {
/**
* Find %default
*
*/
struct section_list *sconn;
for (sconn = cfgp->sections.tqh_first; (!err) && sconn != NULL;
sconn = sconn->link.tqe_next) {
if (streq(sconn->name, "%default")) {
starter_log(LOG_LEVEL_DEBUG,
"Loading default conn");
err |= load_conn(
#ifdef DNSSEC
dnsctx,
#endif
&cfg->conn_default,
cfgp, sconn, FALSE,
/*default conn*/ TRUE,
resolvip, perr);
}
}
/**
* Load other conns
*/
for (sconn = cfgp->sections.tqh_first; sconn != NULL;
sconn = sconn->link.tqe_next) {
if (streq(sconn->name, "%default"))
continue;
err |= init_load_conn(
#ifdef DNSSEC
dnsctx,
#endif
cfg, cfgp, sconn,
FALSE,
resolvip, perr);
}
}
parser_free_conf(cfgp);
#ifdef DNSSEC
ub_ctx_delete(dnsctx);
#endif
return cfg;
}
