src/options.cpp

   1 /*
   2  *  anytun
   3  *
   4  *  The secure anycast tunneling protocol (satp) defines a protocol used
   5  *  for communication between any combination of unicast and anycast
   6  *  tunnel endpoints.  It has less protocol overhead than IPSec in Tunnel
   7  *  mode and allows tunneling of every ETHER TYPE protocol (e.g.
   8  *  ethernet, ip, arp ...). satp directly includes cryptography and
   9  *  message authentication based on the methodes used by SRTP.  It is
  10  *  intended to deliver a generic, scaleable and secure solution for
  11  *  tunneling and relaying of packets of any protocol.
  12  *
  13  *
  14  *  Copyright (C) 2007-2008 Othmar Gsenger, Erwin Nindl,
  15  *                          Christian Pointner <satp@wirdorange.org>
  16  *
  17  *  This file is part of Anytun.
  18  *
  19  *  Anytun is free software: you can redistribute it and/or modify
  20  *  it under the terms of the GNU General Public License version 3 as
  21  *  published by the Free Software Foundation.
  22  *
  23  *  Anytun is distributed in the hope that it will be useful,
  24  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  25  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  26  *  GNU General Public License for more details.
  27  *
  28  *  You should have received a copy of the GNU General Public License
  29  *  along with anytun.  If not, see <http://www.gnu.org/licenses/>.
  30  */
  31
  32 #include <iostream>
  33 #include <queue>
  34 #include <string>
  35 #include <sstream>
  36
  37 #include "datatypes.h"
  38 #include "options.h"
  39
  40 Options* Options::inst = NULL;
  41 Mutex Options::instMutex;
  42 Options& gOpt = Options::instance();
  43
  44 Options& Options::instance()
  45 {
  46   Lock lock(instMutex);
  47   static instanceCleaner c;
  48   if(!inst)
  49     inst = new Options();
  50
  51   return *inst;
  52 }
  53
  54 Options::Options() : key_(u_int32_t(0)), salt_(u_int32_t(0))
  55 {
  56   progname_ = "anytun";
  57   daemonize_ = true;
  58   chroot_ = false;
  59   username_ = "nobody";
  60   chroot_dir_ = "/var/run/anytun";
  61   pid_file_ = "";
  62   sender_id_ = 0;
  63   local_addr_ = "";
  64   local_port_ = 4444;
  65   local_sync_port_ = 0;
  66   remote_sync_port_ = 0;
  67   remote_sync_addr_ = "";
  68   remote_addr_ = "";
  69   remote_port_ = 4444;
  70   dev_name_ = "";
  71   dev_type_ = "";
  72   ifconfig_param_local_ = "";
  73   ifconfig_param_remote_netmask_ = "";
  74   post_up_script_ = "";
  75   seq_window_size_ = 100;
  76   cipher_ = "aes-ctr";
  77   kd_prf_ = "aes-ctr";
  78   auth_algo_ = "sha1";
  79   mux_ = 0;
  80 }
  81
  82 Options::~Options()
  83 {
  84 }
  85
  86 #define PARSE_BOOL_PARAM(SHORT, LONG, VALUE)             \
  87     else if(str == SHORT || str == LONG)                 \
  88       VALUE = true;
  89
  90 #define PARSE_INVERSE_BOOL_PARAM(SHORT, LONG, VALUE)     \
  91     else if(str == SHORT || str == LONG)                 \
  92       VALUE = false;
  93
  94 #define PARSE_SCALAR_PARAM(SHORT, LONG, VALUE)           \
  95     else if(str == SHORT || str == LONG)                 \
  96     {                                                    \
  97       if(argc < 1 || argv[i+1][0] == '-')                \
  98         return false;                                    \
  99       std::stringstream tmp;                             \
 100       tmp << argv[i+1];                                  \
 101       tmp >> VALUE;                                      \
 102       argc--;                                            \
 103       i++;                                               \
 104     }
 105
 106 #define PARSE_SCALAR_PARAM2(SHORT, LONG, VALUE1, VALUE2) \
 107     else if(str == SHORT || str == LONG)                 \
 108     {                                                    \
 109       if(argc < 2 ||                                     \
 110          argv[i+1][0] == '-' || argv[i+2][0] == '-')     \
 111         return false;                                    \
 112       std::stringstream tmp;                             \
 113       tmp << argv[i+1] << " " << argv[i+2];              \
 114       tmp >> VALUE1;                                     \
 115       tmp >> VALUE2;                                     \
 116       argc-=2;                                           \
 117       i+=2;                                              \
 118     }
 119
 120 #define PARSE_HEXSTRING_PARAM_SEC(SHORT, LONG, VALUE)    \
 121     else if(str == SHORT || str == LONG)                 \
 122     {                                                    \
 123       if(argc < 1 || argv[i+1][0] == '-')                \
 124         return false;                                    \
 125       VALUE = Buffer(std::string(argv[i+1]));            \
 126       for(size_t j=0; j < strlen(argv[i+1]); ++j)        \
 127         argv[i+1][j] = '#';                              \
 128       argc--;                                            \
 129       i++;                                               \
 130     }
 131
 132 #define PARSE_CSLIST_PARAM(SHORT, LONG, LIST)            \
 133     else if(str == SHORT || str == LONG)                 \
 134     {                                                    \
 135       if(argc < 1 || argv[i+1][0] == '-')                \
 136         return false;                                    \
 137       std::stringstream tmp(argv[i+1]);                  \
 138                         while (tmp.good())                                 \
 139                         {                                                  \
 140                                 std::string tmp_line;                            \
 141                                 getline(tmp,tmp_line,',');                       \
 142                                 LIST.push(tmp_line);                             \
 143                         }                                                  \
 144       argc--;                                            \
 145       i++;                                               \
 146     }
 147
 148 bool Options::parse(int argc, char* argv[])
 149 {
 150   Lock lock(mutex);
 151
 152   progname_ = argv[0];
 153   argc--;
 154   std::queue<std::string> host_port_queue;
 155   for(int i=1; argc > 0; ++i)
 156   {
 157     std::string str(argv[i]);
 158     argc--;
 159
 160     if(str == "-h" || str == "--help")
 161       return false;
 162     PARSE_INVERSE_BOOL_PARAM("-D","--nodaemonize", daemonize_)
 163     PARSE_BOOL_PARAM("-C","--chroot", chroot_)
 164     PARSE_SCALAR_PARAM("-u","--username", username_)
 165     PARSE_SCALAR_PARAM("-H","--chroot-dir", chroot_dir_)
 166     PARSE_SCALAR_PARAM("-P","--write-pid", pid_file_)
 167     PARSE_SCALAR_PARAM("-s","--sender-id", sender_id_)
 168     PARSE_SCALAR_PARAM("-i","--interface", local_addr_)
 169     PARSE_SCALAR_PARAM("-p","--port", local_port_)
 170     PARSE_SCALAR_PARAM("-S","--sync-port", local_sync_port_)
 171     PARSE_SCALAR_PARAM("-I","--sync-interface", local_sync_addr_)
 172     PARSE_SCALAR_PARAM("-R","--remote-sync-host", remote_sync_addr_)
 173     PARSE_SCALAR_PARAM("-O","--remote-sync-port", remote_sync_port_)
 174     PARSE_SCALAR_PARAM("-r","--remote-host", remote_addr_)
 175     PARSE_SCALAR_PARAM("-o","--remote-port", remote_port_)
 176     PARSE_SCALAR_PARAM("-d","--dev", dev_name_)
 177     PARSE_SCALAR_PARAM("-t","--type", dev_type_)
 178     PARSE_SCALAR_PARAM2("-n","--ifconfig", ifconfig_param_local_, ifconfig_param_remote_netmask_)
 179     PARSE_SCALAR_PARAM("-x","--post-up-script", post_up_script_)
 180     PARSE_SCALAR_PARAM("-w","--window-size", seq_window_size_)
 181     PARSE_SCALAR_PARAM("-m","--mux", mux_)
 182     PARSE_SCALAR_PARAM("-c","--cipher", cipher_)
 183     PARSE_HEXSTRING_PARAM_SEC("-K","--key", key_)
 184     PARSE_HEXSTRING_PARAM_SEC("-A","--salt", salt_)
 185     PARSE_SCALAR_PARAM("-k","--kd-prf", kd_prf_)
 186     PARSE_SCALAR_PARAM("-a","--auth-algo", auth_algo_)
 187                 PARSE_CSLIST_PARAM("-M","--sync-hosts", host_port_queue)
 188                 PARSE_CSLIST_PARAM("-X","--control-host", host_port_queue)
 189     else
 190       return false;
 191   }
 192
 193   if(cipher_ == "null" && auth_algo_ == "null")
 194     kd_prf_ = "null";
 195   if((cipher_ != "null" || auth_algo_ != "null") && kd_prf_ == "null")
 196     kd_prf_ = "aes-ctr";
 197
 198   if(dev_name_ == "" && dev_type_ == "")
 199     dev_type_ = "tun";
 200
 201         while(!host_port_queue.empty())
 202         {
 203                 std::stringstream tmp_stream(host_port_queue.front());
 204                 OptionConnectTo oct;
 205                 getline(tmp_stream,oct.host,':');
 206                 if(!tmp_stream.good())
 207                         return false;
 208                 tmp_stream >> oct.port;
 209                 host_port_queue.pop();
 210                 connect_to_.push_back(oct);
 211         }
 212   return true;
 213 }
 214
 215 void Options::printUsage()
 216 {
 217   std::cout << "USAGE:" << std::endl;
 218   std::cout << "anytun [-h|--help]                         prints this..." << std::endl;
 219 //  std::cout << "       [-f|--config] <file>                the config file" << std::endl;
 220   std::cout << "       [-D|--nodaemonize]                  don't run in background" << std::endl;
 221   std::cout << "       [-C|--chroot]                       chroot and drop privileges" << std::endl;
 222   std::cout << "       [-u|--username] <username>          if chroot change to this user" << std::endl;
 223   std::cout << "       [-H|--chroot-dir] <path>            chroot to this directory" << std::endl;
 224   std::cout << "       [-P|--write-pid] <path>             write pid to this file" << std::endl;
 225   std::cout << "       [-s|--sender-id ] <sender id>       the sender id to use" << std::endl;
 226   std::cout << "       [-i|--interface] <ip-address>       local anycast ip address to bind to" << std::endl;
 227   std::cout << "       [-p|--port] <port>                  local anycast(data) port to bind to" << std::endl;
 228   std::cout << "       [-I|--sync-interface] <ip-address>  local unicast(sync) ip address to bind to" << std::endl;
 229   std::cout << "       [-S|--sync-port] <port>             local unicast(sync) port to bind to" << std::endl;
 230   std::cout << "       [-M|--sync-hosts] <hostname|ip>:<port>[,<hostname|ip>:<port>[...]]"<< std::endl;
 231         std::cout << "                                           remote hosts to sync with" << std::endl;
 232   std::cout << "       [-X|--control-host] <hostname|ip>:<port>"<< std::endl;
 233         std::cout << "                                           fetch the config from this host" << std::endl;
 234   std::cout << "       [-r|--remote-host] <hostname|ip>    remote host" << std::endl;
 235   std::cout << "       [-o|--remote-port] <port>           remote port" << std::endl;
 236   std::cout << "       [-d|--dev] <name>                   device name" << std::endl;
 237   std::cout << "       [-t|--type] <tun|tap>               device type" << std::endl;
 238   std::cout << "       [-n|--ifconfig] <local>             the local address for the tun/tap device" << std::endl
 239             << "                       <remote|netmask>    the remote address(tun) or netmask(tap)" << std::endl;
 240   std::cout << "       [-x|--post-up-script] <script>      script gets called after interface is created" << std::endl;
 241   std::cout << "       [-w|--window-size] <window size>    seqence number window size" << std::endl;
 242   std::cout << "       [-m|--mux] <mux-id>                 the multiplex id to use" << std::endl;
 243   std::cout << "       [-c|--cipher] <cipher type>         payload encryption algorithm" << std::endl;
 244   std::cout << "       [-K|--key] <master key>             master key to use for encryption" << std::endl;
 245   std::cout << "       [-A|--salt] <master salt>           master salt to use for encryption" << std::endl;
 246 //  std::cout << "       [-k|--kd-prf] <kd-prf type>         key derivation pseudo random function" << std::endl;
 247   std::cout << "       [-a|--auth-algo] <algo type>        message authentication algorithm" << std::endl;
 248 }
 249
 250 void Options::printOptions()
 251 {
 252   Lock lock(mutex);
 253   std::cout << "Options:" << std::endl;
 254   std::cout << "daemonize=" << daemonize_ << std::endl;
 255   std::cout << "chroot=" << chroot_ << std::endl;
 256   std::cout << "username='" << username_ << "'" << std::endl;
 257   std::cout << "chroot_dir='" << chroot_dir_ << "'" << std::endl;
 258   std::cout << "pid_file='" << pid_file_ << "'" << std::endl;
 259   std::cout << "sender_id='" << sender_id_ << "'" << std::endl;
 260   std::cout << "local_addr='" << local_addr_ << "'" << std::endl;
 261   std::cout << "local_port='" << local_port_ << "'" << std::endl;
 262   std::cout << "local_sync_addr='" << local_sync_addr_ << "'" << std::endl;
 263   std::cout << "local_sync_port='" << local_sync_port_ << "'" << std::endl;
 264   std::cout << "remote_addr='" << remote_addr_ << "'" << std::endl;
 265   std::cout << "remote_port='" << remote_port_ << "'" << std::endl;
 266   std::cout << "dev_name='" << dev_name_ << "'" << std::endl;
 267   std::cout << "dev_type='" << dev_type_ << "'" << std::endl;
 268   std::cout << "ifconfig_param_local='" << ifconfig_param_local_ << "'" << std::endl;
 269   std::cout << "ifconfig_param_remote_netmask='" << ifconfig_param_remote_netmask_ << "'" << std::endl;
 270   std::cout << "post_up_script='" << post_up_script_ << "'" << std::endl;
 271   std::cout << "seq_window_size='" << seq_window_size_ << "'" << std::endl;
 272   std::cout << "mux_id='" << mux_ << "'" << std::endl;
 273   std::cout << "cipher='" << cipher_ << "'" << std::endl;
 274   std::cout << "key=" << key_.getHexDumpOneLine() << std::endl;
 275   std::cout << "salt=" << salt_.getHexDumpOneLine() << std::endl;
 276   std::cout << "kd_prf='" << kd_prf_ << "'" << std::endl;
 277   std::cout << "auth_algo='" << auth_algo_ << "'" << std::endl;
 278 }
 279
 280 std::string Options::getProgname()
 281 {
 282   Lock lock(mutex);
 283   return progname_;
 284 }
 285
 286
 287 Options& Options::setProgname(std::string p)
 288 {
 289   Lock lock(mutex);
 290   progname_ = p;
 291   return *this;
 292 }
 293
 294 bool Options::getDaemonize()
 295 {
 296   return daemonize_;
 297 }
 298
 299 Options& Options::setDaemonize(bool d)
 300 {
 301   daemonize_ = d;
 302   return *this;
 303 }
 304
 305 bool Options::getChroot()
 306 {
 307   return chroot_;
 308 }
 309
 310 Options& Options::setChroot(bool c)
 311 {
 312   chroot_ = c;
 313   return *this;
 314 }
 315
 316 std::string Options::getUsername()
 317 {
 318   Lock lock(mutex);
 319   return username_;
 320 }
 321
 322 Options& Options::setUsername(std::string u)
 323 {
 324   Lock lock(mutex);
 325   username_ = u;
 326   return *this;
 327 }
 328
 329 std::string Options::getChrootDir()
 330 {
 331   Lock lock(mutex);
 332   return chroot_dir_;
 333 }
 334
 335 Options& Options::setChrootDir(std::string c)
 336 {
 337   Lock lock(mutex);
 338   chroot_dir_ = c;
 339   return *this;
 340 }
 341
 342 std::string Options::getPidFile()
 343 {
 344   Lock lock(mutex);
 345   return pid_file_;
 346 }
 347
 348 Options& Options::setPidFile(std::string p)
 349 {
 350   Lock lock(mutex);
 351   pid_file_ = p;
 352   return *this;
 353 }
 354
 355 ConnectToList Options::getConnectTo()
 356 {
 357   Lock lock(mutex);
 358         return connect_to_;
 359 }
 360
 361 sender_id_t Options::getSenderId()
 362 {
 363   return sender_id_;
 364 }
 365
 366 Options& Options::setSenderId(sender_id_t s)
 367 {
 368   sender_id_ = s;
 369   return *this;
 370 }
 371
 372 std::string Options::getLocalAddr()
 373 {
 374   Lock lock(mutex);
 375   return local_addr_;
 376 }
 377
 378 Options& Options::setLocalAddr(std::string l)
 379 {
 380   Lock lock(mutex);
 381   local_addr_ = l;
 382   return *this;
 383 }
 384
 385 std::string Options::getLocalSyncAddr()
 386 {
 387   Lock lock(mutex);
 388   return local_sync_addr_;
 389 }
 390
 391 Options& Options::setLocalSyncAddr(std::string l)
 392 {
 393   Lock lock(mutex);
 394   local_sync_addr_ = l;
 395   return *this;
 396 }
 397
 398 u_int16_t Options::getLocalPort()
 399 {
 400   return local_port_;
 401 }
 402
 403 Options& Options::setLocalPort(u_int16_t l)
 404 {
 405   local_port_ = l;
 406   return *this;
 407 }
 408
 409 u_int16_t Options::getLocalSyncPort()
 410 {
 411   return local_sync_port_;
 412 }
 413
 414 Options& Options::setLocalSyncPort(u_int16_t l)
 415 {
 416   local_sync_port_ = l;
 417   return *this;
 418 }
 419
 420 u_int16_t Options::getRemoteSyncPort()
 421 {
 422   return remote_sync_port_;
 423 }
 424
 425 Options& Options::setRemoteSyncPort(u_int16_t l)
 426 {
 427   remote_sync_port_ = l;
 428   return *this;
 429 }
 430
 431 std::string Options::getRemoteSyncAddr()
 432 {
 433   Lock lock(mutex);
 434   return remote_sync_addr_;
 435 }
 436
 437 Options& Options::setRemoteSyncAddr(std::string r)
 438 {
 439   Lock lock(mutex);
 440   remote_sync_addr_ = r;
 441   return *this;
 442 }
 443
 444 std::string Options::getRemoteAddr()
 445 {
 446   Lock lock(mutex);
 447   return remote_addr_;
 448 }
 449
 450 Options& Options::setRemoteAddr(std::string r)
 451 {
 452   Lock lock(mutex);
 453   remote_addr_ = r;
 454   return *this;
 455 }
 456
 457 u_int16_t Options::getRemotePort()
 458 {
 459   return remote_port_;
 460 }
 461
 462 Options& Options::setRemotePort(u_int16_t r)
 463 {
 464   remote_port_ = r;
 465   return *this;
 466 }
 467
 468 Options& Options::setRemoteAddrPort(std::string addr, u_int16_t port)
 469 {
 470   Lock lock(mutex);
 471   remote_addr_ = addr;
 472   remote_port_ = port;
 473   return *this;
 474 }
 475
 476 std::string Options::getDevName()
 477 {
 478   Lock lock(mutex);
 479   return dev_name_;
 480 }
 481
 482 std::string Options::getDevType()
 483 {
 484   Lock lock(mutex);
 485   return dev_type_;
 486 }
 487
 488 Options& Options::setDevName(std::string d)
 489 {
 490   Lock lock(mutex);
 491   dev_name_ = d;
 492   return *this;
 493 }
 494
 495 Options& Options::setDevType(std::string d)
 496 {
 497   Lock lock(mutex);
 498   dev_type_ = d;
 499   return *this;
 500 }
 501
 502 std::string Options::getIfconfigParamLocal()
 503 {
 504   Lock lock(mutex);
 505   return ifconfig_param_local_;
 506 }
 507
 508 Options& Options::setIfconfigParamLocal(std::string i)
 509 {
 510   Lock lock(mutex);
 511   ifconfig_param_local_ = i;
 512   return *this;
 513 }
 514
 515 std::string Options::getIfconfigParamRemoteNetmask()
 516 {
 517   Lock lock(mutex);
 518   return ifconfig_param_remote_netmask_;
 519 }
 520
 521 Options& Options::setIfconfigParamRemoteNetmask(std::string i)
 522 {
 523   Lock lock(mutex);
 524   ifconfig_param_remote_netmask_ = i;
 525   return *this;
 526 }
 527
 528 std::string Options::getPostUpScript()
 529 {
 530   Lock lock(mutex);
 531   return post_up_script_;
 532 }
 533
 534 Options& Options::setPostUpScript(std::string p)
 535 {
 536   Lock lock(mutex);
 537   post_up_script_ = p;
 538   return *this;
 539 }
 540
 541 window_size_t Options::getSeqWindowSize()
 542 {
 543   return seq_window_size_;
 544 }
 545
 546 Options& Options::setSeqWindowSize(window_size_t s)
 547 {
 548   seq_window_size_ = s;
 549   return *this;
 550 }
 551
 552 std::string Options::getCipher()
 553 {
 554   Lock lock(mutex);
 555   return cipher_;
 556 }
 557
 558 Options& Options::setCipher(std::string c)
 559 {
 560   Lock lock(mutex);
 561   cipher_ = c;
 562   return *this;
 563 }
 564
 565 std::string Options::getKdPrf()
 566 {
 567   Lock lock(mutex);
 568   return kd_prf_;
 569 }
 570
 571 Options& Options::setKdPrf(std::string k)
 572 {
 573   Lock lock(mutex);
 574   kd_prf_ = k;
 575   return *this;
 576 }
 577
 578 std::string Options::getAuthAlgo()
 579 {
 580   Lock lock(mutex);
 581   return auth_algo_;
 582 }
 583
 584 Options& Options::setAuthAlgo(std::string a)
 585 {
 586   Lock lock(mutex);
 587   auth_algo_ = a;
 588   return *this;
 589 }
 590
 591 u_int16_t Options::getMux()
 592 {
 593   Lock lock(mutex);
 594   return mux_;
 595 }
 596
 597 Options& Options::setMux(u_int16_t m)
 598 {
 599   Lock lock(mutex);
 600   mux_ = m;
 601   return *this;
 602 }
 603
 604 Buffer Options::getKey()
 605 {
 606   Lock lock(mutex);
 607   return key_;
 608 }
 609
 610 Options& Options::setKey(std::string k)
 611 {
 612   Lock lock(mutex);
 613   key_ = k;
 614   return *this;
 615 }
 616
 617 Buffer Options::getSalt()
 618 {
 619   Lock lock(mutex);
 620   return salt_;
 621 }
 622
 623 Options& Options::setSalt(std::string s)
 624 {
 625   Lock lock(mutex);
 626   salt_ = s;
 627   return *this;
 628 }