mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-18 23:06:06 -05:00
3d89c26d32
* - dnsoverquic, configure --with-libngtcp2 option. * - dnsoverquic, create comm_point for doq and receive cmsg local address. * - dnsoverquic, less obtrusive debug. * - dnsoverquic, log and fix local port number. Neater subroutines and ifdefs. * - dnsoverquic, add testcode/doqclient. * - dnsoverquic, review fixes on doqclient. * - dnsoverquic, fix unit test testbound link. * - dnsoverquic, parse query in doqclient. * - dnsoverquic, link with libngtcp2_crypto_openssl and code for doqclient. * - dnsoverquic, random routine for doqclient and fix ngaddr allocation, and check ub_initstate return. * - dnsoverquic, fix doqclient free of allocated ngaddr addresses. * - dnsoverquic, enable debug output with -v for doqclient. * - dnsoverquic, create and set TLS object and TLS context in doqclient. * - dnsoverquic, work on quic tls context in doqclient. * - dnsoverquic, set default dnsoverquic port to the standardized 853 port. * - dnsoverquic, remove debug comment. * - dnsoverquic, dns-over-quic quic-port: 853 config option. * - dnsoverquic, log type of interface created at start of unbound. * - dnsoverquic, log type of no tls https as https when interface is created. * - dnsoverquic, setup client quic tls methods. * - dnsoverquic, event work in doqclient. * - dnsoverquic, explain in documentation that QUIC uses UDP. * - dnsoverquic, make doqclient exit. * - dnsoverquic, doqclient cleanup run routine. * - dnsoverquic, doqclient code nicer. * - dnsoverquic, doqclient read and timer. * - dnsoverquic, doqclient write work. * - dnsoverquic, review fixes. * - dnsoverquic, detect openssl quic support at configure time. * - dnsoverquic, do not allow QUIC on port 53 to stop confusion of DoQ and DNS. * - dnsoverquic, in doqclient, when idle close is returned, drop the connection without calling ngtcp2_conn_write_connection_close. * - dnsoverquic, in doqclient, log callbacks. * - dnsoverquic, in doqclient add extend_max_local_streams_bidi callback. * - dnsoverquic, in doqclient add client query lists. * - dnsoverquic, in doqclient, code cleaner, log text nicer. * - dnsoverquic, in doqclient, work on write_streams. * - dnsoverquic, in doqclient, use signed int for stream_id, work on the ngtcp2_recv_stream_data callback. * - dnsoverquic, in doqclient, print result and fixes for recv data. * - dnsoverquic, in doqclient, add the event callbacks to fptr wlist. * - dnsoverquic, in doqclient, when already expired, use zero timeout timer. * - dnsoverquic, in doqclient, ignore unused return codes from ngtcp2_conn_writev_stream. * - dnsoverquic, add doqclient event functions to the unbound-dnstap-socket test tool for linking. * - dnsoverquic, in doqclient, fix multiple operands for the commandline. neater dns message output. * - dnsoverquic, in doqclient, store packet when write blocks and try later. * - dnsoverquic, in doqclient, limit number of packets and number of bytes sent. * - dnsoverquic, in doqclient, better size estimate for outgoing packet. * - dnsoverquic, in doqclient, fix that already written next packet is not counted for data length to send. * - dnsoverquic, in doqclient, early data transmission and session resumption. * - dnsoverquic, send version negotiation packet. * - dnsoverquic, send retry and accept the connection. * - dnsoverquic, storage structures. * - dnsoverquic, doq connection setup. * - dnsoverquic, neater code layout for new conn. Fix verbosity of log print. * - dnsoverquic, doq conn callback functions. * - dnsoverquic, doq_fill_rand routine in header file. * - dnsoverquic, keep track of connection ids. * - dnsoverquic, get_new_connection_id callback. * - dnsoverquic, create doq_conid tree. * - dnsoverquic, settings for server connection. * - dnsoverquic, tls context. * - dnsoverquic, sendmsg error handling. * - dnsoverquic, neat code. * - dnsoverquic, track doq connection last error. * - dnsoverquic, neater packet address parameters. * - dnsoverquic, fix uninitialized bytes in msg control in doq sendmsg, and fix tree cleanup of conid tree. * - dnsoverquic, better usage text for doqclient. * - dnsoverquic, neat code. * - dnsoverquic, connection receive packet handling. * - dnsoverquic, debug output. * - dnsoverquic, debug switched meaning of scid and dcid gives ERR_TRANSPORT_PARAM. * - dnsoverquic, remove debug output. * - dnsoverquic, connection delete routine and error from connection read in more detail with less clutter. * - dnsoverquic, write to stream, and receive stream data, log packet. * - dnsoverquic, alpn set up. * - dnsoverquic, connection close. * - dnsoverquic, doq_table and locks. * - dnsoverquic, fix tests. * - dnsoverquic, better locking. * - dnsoverquic, doq_stream. * - dnsoverquic, remove compile warning. * - dnsoverquic, doq_stream receive data. * - dnsoverquic, fixes for locks and keep length bytes allocated. * - dnsoverquic, lock connection on initial insertion. * - dnsoverquic, reply information, and reply buffer. * - dnsoverquic, reply info from cache, local-zone and recursion lookups. * - dnsoverquic, spelling in comment about buffer storage. * - dnsoverquic, stream write list and doqclient fixes to exit and printout. * - dnsoverquic, doqclient -q option for short printout. * - dnsoverquic, unit test with local data reply. * - dnsoverquic, write connection and write event is set. * - dnsoverquic, neater logging for write event connection stream writes. * - dnsoverquic, log remote connection when the streams are written for it. * - dnsoverquic, better threaded use, threads can write to doq connections at the same time. * - dnsoverquic, unit test for the calculation of connection size with a query. * - dnsoverquic, use less memory per connection. * - dnsoverquic, remove unit test output. * - dnsoverquic, add MSG_DONTWAIT so that there is no mistakenly blocking socket operations. * - dnsoverquic, doqclient logs address on connection failures. * - dnsoverquic, compat code for clock get time routine. * - dnsoverquic, use skip_test for doq unit test. * - dnsoverquic, fixes for proxyprotocol, use remote_addr and set proxyprotocol disabled on the doq connection. * - dnsoverquic, doqclient sets log identity to its name, instead of "unbound". * - dnsoverquic, handle blocked udp packet writes. * - dnsoverquic, fix function documentation for verbose_print_addr from services/listen_dnsport.c. * - dnsoverquic, fix doq_conn lock protection. The checklock allows to set the output file name, and doqclient uses that. Print place of lock_protect. * - dnsoverquic, neater buffer clear when write of blocked packet fails, make sure that memory area does not overlap for blocked packet addresses when write of blocked packet fails, and size blocked packet buffer to the pkt buf. * - dnsoverquic, move lock check after the test to test script in doq test. * - dnsoverquic, the doq test uses valgrind when enabled. * - dnsoverquic, git ignore the doqclient test. * - dnsoverquic, limit the buffer for packets to max packet size with some more. * - dnsoverquic, spelling fix. * - dnsoverquic, timer work, structure and adds and deletes. * - dnsoverquic, timer_tree uses table.lock. * - dnsoverquic, fix timer tree remove and spelling in header file comment. * - dnsoverquic, fix testbound for timer compare function linkage. * - dnsoverquic, timer set add debug output. * - dnsoverquic, doq_conn_check_timer function. * - dnsoverquic, doq_done_setup_timer_and_write function. * - dnsoverquic, fix that doq conn is not deleted whilst editing write and timer. * - dnsoverquic, Fix #861 make ERROR netevent.h:1073:32: error: field 'blocked_pkt_pi' has incomplete type * - dnsoverquic, timer element has timeout setup when socket callback complete. * - dnsoverquic, fix unit test compile. * - dnsoverquic, timer callback routine, handle timeout and close and delete the connection if necessary. * - dnsoverquic, timer pickup stops at current time. * - dnsoverquic, timer comparable with the event base time. * - dnsoverquic, erase marked time when timer disabled. * - dnsoverquic, fix timer to set correctly and lock popped write connection early, before it is modified. * - dnsoverquic, fix to unlock connection lock when it is unlinked and deleted. * - dnsoverquic, fix to unlock connection lock when it is deleted because it is a duplicate connection. * - dnsoverquic, fix that doq timer is not disabled when not set. * - dnsoverquic, quic-size: 8m maximum number of bytes for QUIC buffers. * - dnsoverquic, flex and bison. * - dnsoverquic, quic-size turn away new connections when full. * - dnsoverquic, doqclient outputs stream reset information. * - dnsoverquic, detect stream close and reset. * - dnsoverquic, free stream buffers when data is acked and stream is closed. * - dnsoverquic, delete stream when closed. Unlink it. Allow stream_id 4 as first. * - dnsoverquic, stats output for mem.quic and num.query.quic. * - dnsoverquic, review fix. * - dnsoverquic, fix when compiled without ngtcp2. * - dnsoverquic, fix to detect ngtcp2_crypto_quictls for openssl crypto, after change in libngtcp2. * - dnsoverquic, fix for newer ngtcp2 versions. detect ngtcp2_ccerr_default, ngtcp2/ngtcp2_crypto_quictls.h, struct ngtcp2_pkt_hd.tokenlen, struct ngtcp2_settings.tokenlen and struct ngtcp2_version_cid. * - dnsoverquic, fix for newer ngtcp2 version, detect number of arguments for ngtcp2_conn_shutdown_stream. * - dnsoverquic, fix for newer ngtcp2. * - dnsoverquic, use the functions from util/timeval_func.h. * - dnsoverquic, fix in doqclient only write transport parameters once. * - dnsoverquic, debug log output removed. * - dnsoverquic, fix in doqclient to work with renamed NGTCP2_CC_ALGO_BBR_V2 from ngtcp2. * - dnsoverquic, fix to check in doq_server_socket_create that tls-service-key and tls-service-pem have a value. * - dnsoverquic, fix to error when doq_server_socket_create fails. * - dnsoverquic, improve linebreaks in configparser additions. * - dnsoverquic, fix port from interface pickup after main branch change. * Fix getting user data from SSL, fix calloc warning. * Fix fwrite return value check in doqclient * - timeval_substruct from timeval_func.h - lock_protect also for HAVE_NGTCP2_CCERR_DEFAULT - fix doq logging for inet_ntop failures * - memset for consistency - no value returned from msghdr_get_ecn when S_SPLINT_S is defined * - dnsoverquic, rerun autoconf. --------- Co-authored-by: Yorgos Thessalonikefs <yorgos@nlnetlabs.nl>
2841 lines
89 KiB
C
2841 lines
89 KiB
C
/*
|
|
* util/config_file.c - reads and stores the config file for unbound.
|
|
*
|
|
* Copyright (c) 2007, NLnet Labs. All rights reserved.
|
|
*
|
|
* This software is open source.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
*
|
|
* Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
*
|
|
* Neither the name of the NLNET LABS nor the names of its contributors may
|
|
* be used to endorse or promote products derived from this software without
|
|
* specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
|
* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
|
* HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
|
|
* TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
|
|
* PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
|
|
* LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
|
|
* NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
|
|
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
/**
|
|
* \file
|
|
*
|
|
* This file contains functions for the config file.
|
|
*/
|
|
|
|
#include "config.h"
|
|
#include <ctype.h>
|
|
#include <stdarg.h>
|
|
#include <errno.h>
|
|
#ifdef HAVE_TIME_H
|
|
#include <time.h>
|
|
#endif
|
|
#include "util/log.h"
|
|
#include "util/configyyrename.h"
|
|
#include "util/config_file.h"
|
|
#include "util/configparser.h"
|
|
#include "util/net_help.h"
|
|
#include "util/data/msgparse.h"
|
|
#include "util/module.h"
|
|
#include "util/regional.h"
|
|
#include "util/fptr_wlist.h"
|
|
#include "util/data/dname.h"
|
|
#include "util/random.h"
|
|
#include "util/rtt.h"
|
|
#include "services/cache/infra.h"
|
|
#include "sldns/wire2str.h"
|
|
#include "sldns/parseutil.h"
|
|
#include "iterator/iterator.h"
|
|
#ifdef HAVE_GLOB_H
|
|
# include <glob.h>
|
|
#endif
|
|
#ifdef CLIENT_SUBNET
|
|
#include "edns-subnet/edns-subnet.h"
|
|
#endif
|
|
#ifdef HAVE_PWD_H
|
|
#include <pwd.h>
|
|
#endif
|
|
|
|
/** from cfg username, after daemonize setup performed */
|
|
uid_t cfg_uid = (uid_t)-1;
|
|
/** from cfg username, after daemonize setup performed */
|
|
gid_t cfg_gid = (gid_t)-1;
|
|
/** for debug allow small timeout values for fast rollovers */
|
|
int autr_permit_small_holddown = 0;
|
|
/** size (in bytes) of stream wait buffers max */
|
|
size_t stream_wait_max = 4 * 1024 * 1024;
|
|
size_t http2_query_buffer_max = 4 * 1024 * 1024;
|
|
size_t http2_response_buffer_max = 4 * 1024 * 1024;
|
|
|
|
/** global config during parsing */
|
|
struct config_parser_state* cfg_parser = 0;
|
|
|
|
/** init ports possible for use */
|
|
static void init_outgoing_availports(int* array, int num);
|
|
|
|
/** init cookie with random data */
|
|
static void init_cookie_secret(uint8_t* cookie_secret, size_t cookie_secret_len);
|
|
|
|
struct config_file*
|
|
config_create(void)
|
|
{
|
|
struct config_file* cfg;
|
|
cfg = (struct config_file*)calloc(1, sizeof(struct config_file));
|
|
if(!cfg)
|
|
return NULL;
|
|
/* the defaults if no config is present */
|
|
cfg->verbosity = 1;
|
|
cfg->stat_interval = 0;
|
|
cfg->stat_cumulative = 0;
|
|
cfg->stat_extended = 0;
|
|
cfg->stat_inhibit_zero = 1;
|
|
cfg->num_threads = 1;
|
|
cfg->port = UNBOUND_DNS_PORT;
|
|
cfg->do_ip4 = 1;
|
|
cfg->do_ip6 = 1;
|
|
cfg->do_udp = 1;
|
|
cfg->do_tcp = 1;
|
|
cfg->tcp_reuse_timeout = 60 * 1000; /* 60s in milisecs */
|
|
cfg->max_reuse_tcp_queries = 200;
|
|
cfg->tcp_upstream = 0;
|
|
cfg->udp_upstream_without_downstream = 0;
|
|
cfg->tcp_mss = 0;
|
|
cfg->outgoing_tcp_mss = 0;
|
|
cfg->tcp_idle_timeout = 30 * 1000; /* 30s in millisecs */
|
|
cfg->tcp_auth_query_timeout = 3 * 1000; /* 3s in millisecs */
|
|
cfg->do_tcp_keepalive = 0;
|
|
cfg->tcp_keepalive_timeout = 120 * 1000; /* 120s in millisecs */
|
|
cfg->sock_queue_timeout = 0; /* do not check timeout */
|
|
cfg->ssl_service_key = NULL;
|
|
cfg->ssl_service_pem = NULL;
|
|
cfg->ssl_port = UNBOUND_DNS_OVER_TLS_PORT;
|
|
cfg->ssl_upstream = 0;
|
|
cfg->tls_cert_bundle = NULL;
|
|
cfg->tls_win_cert = 0;
|
|
cfg->tls_use_sni = 1;
|
|
cfg->https_port = UNBOUND_DNS_OVER_HTTPS_PORT;
|
|
if(!(cfg->http_endpoint = strdup("/dns-query"))) goto error_exit;
|
|
cfg->http_max_streams = 100;
|
|
cfg->http_query_buffer_size = 4*1024*1024;
|
|
cfg->http_response_buffer_size = 4*1024*1024;
|
|
cfg->http_nodelay = 1;
|
|
cfg->quic_port = UNBOUND_DNS_OVER_QUIC_PORT;
|
|
cfg->quic_size = 8*1024*1024;
|
|
cfg->use_syslog = 1;
|
|
cfg->log_identity = NULL; /* changed later with argv[0] */
|
|
cfg->log_time_ascii = 0;
|
|
cfg->log_time_iso = 0;
|
|
cfg->log_queries = 0;
|
|
cfg->log_replies = 0;
|
|
cfg->log_tag_queryreply = 0;
|
|
cfg->log_local_actions = 0;
|
|
cfg->log_servfail = 0;
|
|
cfg->log_destaddr = 0;
|
|
#ifndef USE_WINSOCK
|
|
# ifdef USE_MINI_EVENT
|
|
/* select max 1024 sockets */
|
|
cfg->outgoing_num_ports = 960;
|
|
cfg->num_queries_per_thread = 512;
|
|
# else
|
|
/* libevent can use many sockets */
|
|
cfg->outgoing_num_ports = 4096;
|
|
cfg->num_queries_per_thread = 1024;
|
|
# endif
|
|
cfg->outgoing_num_tcp = 10;
|
|
cfg->incoming_num_tcp = 10;
|
|
#else
|
|
cfg->outgoing_num_ports = 48; /* windows is limited in num fds */
|
|
cfg->num_queries_per_thread = 24;
|
|
cfg->outgoing_num_tcp = 2; /* leaves 64-52=12 for: 4if,1stop,thread4 */
|
|
cfg->incoming_num_tcp = 2;
|
|
#endif
|
|
cfg->stream_wait_size = 4 * 1024 * 1024;
|
|
cfg->edns_buffer_size = 1232; /* from DNS flagday recommendation */
|
|
cfg->msg_buffer_size = 65552; /* 64 k + a small margin */
|
|
cfg->msg_cache_size = 4 * 1024 * 1024;
|
|
cfg->msg_cache_slabs = 4;
|
|
cfg->jostle_time = 200;
|
|
cfg->rrset_cache_size = 4 * 1024 * 1024;
|
|
cfg->rrset_cache_slabs = 4;
|
|
cfg->host_ttl = 900;
|
|
cfg->bogus_ttl = 60;
|
|
cfg->min_ttl = 0;
|
|
cfg->max_ttl = 3600 * 24;
|
|
cfg->max_negative_ttl = 3600;
|
|
cfg->min_negative_ttl = 0;
|
|
cfg->prefetch = 0;
|
|
cfg->prefetch_key = 0;
|
|
cfg->deny_any = 0;
|
|
cfg->infra_cache_slabs = 4;
|
|
cfg->infra_cache_numhosts = 10000;
|
|
cfg->infra_cache_min_rtt = 50;
|
|
cfg->infra_cache_max_rtt = 120000;
|
|
cfg->infra_keep_probing = 0;
|
|
cfg->delay_close = 0;
|
|
cfg->udp_connect = 1;
|
|
if(!(cfg->outgoing_avail_ports = (int*)calloc(65536, sizeof(int))))
|
|
goto error_exit;
|
|
init_outgoing_availports(cfg->outgoing_avail_ports, 65536);
|
|
if(!(cfg->username = strdup(UB_USERNAME))) goto error_exit;
|
|
#ifdef HAVE_CHROOT
|
|
if(!(cfg->chrootdir = strdup(CHROOT_DIR))) goto error_exit;
|
|
#endif
|
|
if(!(cfg->directory = strdup(RUN_DIR))) goto error_exit;
|
|
if(!(cfg->logfile = strdup(""))) goto error_exit;
|
|
if(!(cfg->pidfile = strdup(PIDFILE))) goto error_exit;
|
|
if(!(cfg->target_fetch_policy = strdup("3 2 1 0 0"))) goto error_exit;
|
|
cfg->fast_server_permil = 0;
|
|
cfg->fast_server_num = 3;
|
|
cfg->donotqueryaddrs = NULL;
|
|
cfg->donotquery_localhost = 1;
|
|
cfg->root_hints = NULL;
|
|
cfg->use_systemd = 0;
|
|
cfg->do_daemonize = 1;
|
|
cfg->if_automatic = 0;
|
|
cfg->if_automatic_ports = NULL;
|
|
cfg->so_rcvbuf = 0;
|
|
cfg->so_sndbuf = 0;
|
|
cfg->so_reuseport = REUSEPORT_DEFAULT;
|
|
cfg->ip_transparent = 0;
|
|
cfg->ip_freebind = 0;
|
|
cfg->ip_dscp = 0;
|
|
cfg->num_ifs = 0;
|
|
cfg->ifs = NULL;
|
|
cfg->num_out_ifs = 0;
|
|
cfg->out_ifs = NULL;
|
|
cfg->stubs = NULL;
|
|
cfg->forwards = NULL;
|
|
cfg->auths = NULL;
|
|
#ifdef CLIENT_SUBNET
|
|
cfg->client_subnet = NULL;
|
|
cfg->client_subnet_zone = NULL;
|
|
cfg->client_subnet_opcode = LDNS_EDNS_CLIENT_SUBNET;
|
|
cfg->client_subnet_always_forward = 0;
|
|
cfg->max_client_subnet_ipv4 = 24;
|
|
cfg->max_client_subnet_ipv6 = 56;
|
|
cfg->min_client_subnet_ipv4 = 0;
|
|
cfg->min_client_subnet_ipv6 = 0;
|
|
cfg->max_ecs_tree_size_ipv4 = 100;
|
|
cfg->max_ecs_tree_size_ipv6 = 100;
|
|
#endif
|
|
cfg->views = NULL;
|
|
cfg->acls = NULL;
|
|
cfg->tcp_connection_limits = NULL;
|
|
cfg->harden_short_bufsize = 1;
|
|
cfg->harden_large_queries = 0;
|
|
cfg->harden_glue = 1;
|
|
cfg->harden_unverified_glue = 0;
|
|
cfg->harden_dnssec_stripped = 1;
|
|
cfg->harden_below_nxdomain = 1;
|
|
cfg->harden_referral_path = 0;
|
|
cfg->harden_algo_downgrade = 0;
|
|
cfg->harden_unknown_additional = 0;
|
|
cfg->use_caps_bits_for_id = 0;
|
|
cfg->caps_whitelist = NULL;
|
|
cfg->private_address = NULL;
|
|
cfg->private_domain = NULL;
|
|
cfg->unwanted_threshold = 0;
|
|
cfg->hide_identity = 0;
|
|
cfg->hide_version = 0;
|
|
cfg->hide_trustanchor = 0;
|
|
cfg->hide_http_user_agent = 0;
|
|
cfg->identity = NULL;
|
|
cfg->version = NULL;
|
|
cfg->http_user_agent = NULL;
|
|
cfg->nsid_cfg_str = NULL;
|
|
cfg->nsid = NULL;
|
|
cfg->nsid_len = 0;
|
|
cfg->auto_trust_anchor_file_list = NULL;
|
|
cfg->trust_anchor_file_list = NULL;
|
|
cfg->trust_anchor_list = NULL;
|
|
cfg->trusted_keys_file_list = NULL;
|
|
cfg->trust_anchor_signaling = 1;
|
|
cfg->root_key_sentinel = 1;
|
|
cfg->domain_insecure = NULL;
|
|
cfg->val_date_override = 0;
|
|
cfg->val_sig_skew_min = 3600; /* at least daylight savings trouble */
|
|
cfg->val_sig_skew_max = 86400; /* at most timezone settings trouble */
|
|
cfg->val_max_restart = 5;
|
|
cfg->val_clean_additional = 1;
|
|
cfg->val_log_level = 0;
|
|
cfg->val_log_squelch = 0;
|
|
cfg->val_permissive_mode = 0;
|
|
cfg->aggressive_nsec = 1;
|
|
cfg->ignore_cd = 0;
|
|
cfg->disable_edns_do = 0;
|
|
cfg->serve_expired = 0;
|
|
cfg->serve_expired_ttl = 0;
|
|
cfg->serve_expired_ttl_reset = 0;
|
|
cfg->serve_expired_reply_ttl = 30;
|
|
cfg->serve_expired_client_timeout = 0;
|
|
cfg->ede_serve_expired = 0;
|
|
cfg->serve_original_ttl = 0;
|
|
cfg->zonemd_permissive_mode = 0;
|
|
cfg->add_holddown = 30*24*3600;
|
|
cfg->del_holddown = 30*24*3600;
|
|
cfg->keep_missing = 366*24*3600; /* one year plus a little leeway */
|
|
cfg->permit_small_holddown = 0;
|
|
cfg->key_cache_size = 4 * 1024 * 1024;
|
|
cfg->key_cache_slabs = 4;
|
|
cfg->neg_cache_size = 1 * 1024 * 1024;
|
|
cfg->local_zones = NULL;
|
|
cfg->local_zones_nodefault = NULL;
|
|
#ifdef USE_IPSET
|
|
cfg->local_zones_ipset = NULL;
|
|
#endif
|
|
cfg->local_zones_disable_default = 0;
|
|
cfg->local_data = NULL;
|
|
cfg->local_zone_overrides = NULL;
|
|
cfg->unblock_lan_zones = 0;
|
|
cfg->insecure_lan_zones = 0;
|
|
cfg->python_script = NULL;
|
|
cfg->dynlib_file = NULL;
|
|
cfg->remote_control_enable = 0;
|
|
cfg->control_ifs.first = NULL;
|
|
cfg->control_ifs.last = NULL;
|
|
cfg->control_port = UNBOUND_CONTROL_PORT;
|
|
cfg->control_use_cert = 1;
|
|
cfg->minimal_responses = 1;
|
|
cfg->rrset_roundrobin = 1;
|
|
cfg->unknown_server_time_limit = 376;
|
|
cfg->discard_timeout = 1900; /* msec */
|
|
cfg->wait_limit = 1000;
|
|
cfg->wait_limit_cookie = 10000;
|
|
cfg->wait_limit_netblock = NULL;
|
|
cfg->wait_limit_cookie_netblock = NULL;
|
|
cfg->max_udp_size = 1232; /* value taken from edns_buffer_size */
|
|
if(!(cfg->server_key_file = strdup(RUN_DIR"/unbound_server.key")))
|
|
goto error_exit;
|
|
if(!(cfg->server_cert_file = strdup(RUN_DIR"/unbound_server.pem")))
|
|
goto error_exit;
|
|
if(!(cfg->control_key_file = strdup(RUN_DIR"/unbound_control.key")))
|
|
goto error_exit;
|
|
if(!(cfg->control_cert_file = strdup(RUN_DIR"/unbound_control.pem")))
|
|
goto error_exit;
|
|
|
|
#ifdef CLIENT_SUBNET
|
|
if(!(cfg->module_conf = strdup("subnetcache validator iterator"))) goto error_exit;
|
|
#else
|
|
if(!(cfg->module_conf = strdup("validator iterator"))) goto error_exit;
|
|
#endif
|
|
if(!(cfg->val_nsec3_key_iterations =
|
|
strdup("1024 150 2048 150 4096 150"))) goto error_exit;
|
|
#if defined(DNSTAP_SOCKET_PATH)
|
|
if(!(cfg->dnstap_socket_path = strdup(DNSTAP_SOCKET_PATH)))
|
|
goto error_exit;
|
|
#endif
|
|
cfg->dnstap_bidirectional = 1;
|
|
cfg->dnstap_tls = 1;
|
|
cfg->disable_dnssec_lame_check = 0;
|
|
cfg->ip_ratelimit_cookie = 0;
|
|
cfg->ip_ratelimit = 0;
|
|
cfg->ratelimit = 0;
|
|
cfg->ip_ratelimit_slabs = 4;
|
|
cfg->ratelimit_slabs = 4;
|
|
cfg->ip_ratelimit_size = 4*1024*1024;
|
|
cfg->ratelimit_size = 4*1024*1024;
|
|
cfg->ratelimit_for_domain = NULL;
|
|
cfg->ratelimit_below_domain = NULL;
|
|
cfg->ip_ratelimit_factor = 10;
|
|
cfg->ratelimit_factor = 10;
|
|
cfg->ip_ratelimit_backoff = 0;
|
|
cfg->ratelimit_backoff = 0;
|
|
cfg->outbound_msg_retry = 5;
|
|
cfg->max_sent_count = 32;
|
|
cfg->max_query_restarts = 11;
|
|
cfg->qname_minimisation = 1;
|
|
cfg->qname_minimisation_strict = 0;
|
|
cfg->shm_enable = 0;
|
|
cfg->shm_key = 11777;
|
|
cfg->edns_client_strings = NULL;
|
|
cfg->edns_client_string_opcode = 65001;
|
|
cfg->dnscrypt = 0;
|
|
cfg->dnscrypt_port = 0;
|
|
cfg->dnscrypt_provider = NULL;
|
|
cfg->dnscrypt_provider_cert = NULL;
|
|
cfg->dnscrypt_provider_cert_rotated = NULL;
|
|
cfg->dnscrypt_secret_key = NULL;
|
|
cfg->dnscrypt_shared_secret_cache_size = 4*1024*1024;
|
|
cfg->dnscrypt_shared_secret_cache_slabs = 4;
|
|
cfg->dnscrypt_nonce_cache_size = 4*1024*1024;
|
|
cfg->dnscrypt_nonce_cache_slabs = 4;
|
|
cfg->pad_responses = 1;
|
|
cfg->pad_responses_block_size = 468; /* from RFC8467 */
|
|
cfg->pad_queries = 1;
|
|
cfg->pad_queries_block_size = 128; /* from RFC8467 */
|
|
#ifdef USE_IPSECMOD
|
|
cfg->ipsecmod_enabled = 1;
|
|
cfg->ipsecmod_ignore_bogus = 0;
|
|
cfg->ipsecmod_hook = NULL;
|
|
cfg->ipsecmod_max_ttl = 3600;
|
|
cfg->ipsecmod_whitelist = NULL;
|
|
cfg->ipsecmod_strict = 0;
|
|
#endif
|
|
cfg->do_answer_cookie = 0;
|
|
memset(cfg->cookie_secret, 0, sizeof(cfg->cookie_secret));
|
|
cfg->cookie_secret_len = 16;
|
|
init_cookie_secret(cfg->cookie_secret, cfg->cookie_secret_len);
|
|
cfg->cookie_secret_file = NULL;
|
|
#ifdef USE_CACHEDB
|
|
if(!(cfg->cachedb_backend = strdup("testframe"))) goto error_exit;
|
|
if(!(cfg->cachedb_secret = strdup("default"))) goto error_exit;
|
|
cfg->cachedb_no_store = 0;
|
|
cfg->cachedb_check_when_serve_expired = 1;
|
|
#ifdef USE_REDIS
|
|
if(!(cfg->redis_server_host = strdup("127.0.0.1"))) goto error_exit;
|
|
cfg->redis_server_path = NULL;
|
|
cfg->redis_server_password = NULL;
|
|
cfg->redis_timeout = 100;
|
|
cfg->redis_command_timeout = 0;
|
|
cfg->redis_connect_timeout = 0;
|
|
cfg->redis_server_port = 6379;
|
|
cfg->redis_expire_records = 0;
|
|
cfg->redis_logical_db = 0;
|
|
#endif /* USE_REDIS */
|
|
#endif /* USE_CACHEDB */
|
|
#ifdef USE_IPSET
|
|
cfg->ipset_name_v4 = NULL;
|
|
cfg->ipset_name_v6 = NULL;
|
|
#endif
|
|
cfg->ede = 0;
|
|
cfg->iter_scrub_ns = 20;
|
|
cfg->iter_scrub_cname = 11;
|
|
cfg->max_global_quota = 128;
|
|
return cfg;
|
|
error_exit:
|
|
config_delete(cfg);
|
|
return NULL;
|
|
}
|
|
|
|
struct config_file* config_create_forlib(void)
|
|
{
|
|
struct config_file* cfg = config_create();
|
|
if(!cfg) return NULL;
|
|
/* modifications for library use, less verbose, less memory */
|
|
free(cfg->chrootdir);
|
|
cfg->chrootdir = NULL;
|
|
cfg->verbosity = 0;
|
|
cfg->outgoing_num_ports = 16; /* in library use, this is 'reasonable'
|
|
and probably within the ulimit(maxfds) of the user */
|
|
cfg->outgoing_num_tcp = 2;
|
|
cfg->msg_cache_size = 1024*1024;
|
|
cfg->msg_cache_slabs = 1;
|
|
cfg->rrset_cache_size = 1024*1024;
|
|
cfg->rrset_cache_slabs = 1;
|
|
cfg->infra_cache_slabs = 1;
|
|
cfg->use_syslog = 0;
|
|
cfg->key_cache_size = 1024*1024;
|
|
cfg->key_cache_slabs = 1;
|
|
cfg->neg_cache_size = 100 * 1024;
|
|
cfg->donotquery_localhost = 0; /* allow, so that you can ask a
|
|
forward nameserver running on localhost */
|
|
cfg->val_log_level = 2; /* to fill why_bogus with */
|
|
cfg->val_log_squelch = 1;
|
|
cfg->minimal_responses = 0;
|
|
cfg->harden_short_bufsize = 1;
|
|
return cfg;
|
|
}
|
|
|
|
/** check that the value passed is >= 0 */
|
|
#define IS_NUMBER_OR_ZERO \
|
|
if(atoi(val) == 0 && strcmp(val, "0") != 0) return 0
|
|
/** check that the value passed is > 0 */
|
|
#define IS_NONZERO_NUMBER \
|
|
if(atoi(val) == 0) return 0
|
|
/** check that the value passed is not 0 and a power of 2 */
|
|
#define IS_POW2_NUMBER \
|
|
if(atoi(val) == 0 || !is_pow2((size_t)atoi(val))) return 0
|
|
/** check that the value passed is yes or no */
|
|
#define IS_YES_OR_NO \
|
|
if(strcmp(val, "yes") != 0 && strcmp(val, "no") != 0) return 0
|
|
/** put integer_or_zero into variable */
|
|
#define S_NUMBER_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \
|
|
{ IS_NUMBER_OR_ZERO; cfg->var = atoi(val); }
|
|
/** put integer_nonzero into variable */
|
|
#define S_NUMBER_NONZERO(str, var) if(strcmp(opt, str) == 0) \
|
|
{ IS_NONZERO_NUMBER; cfg->var = atoi(val); }
|
|
/** put integer_or_zero into unsigned */
|
|
#define S_UNSIGNED_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \
|
|
{ IS_NUMBER_OR_ZERO; cfg->var = (unsigned)atoi(val); }
|
|
/** put integer_or_zero into size_t */
|
|
#define S_SIZET_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \
|
|
{ IS_NUMBER_OR_ZERO; cfg->var = (size_t)atoi(val); }
|
|
/** put integer_nonzero into size_t */
|
|
#define S_SIZET_NONZERO(str, var) if(strcmp(opt, str) == 0) \
|
|
{ IS_NONZERO_NUMBER; cfg->var = (size_t)atoi(val); }
|
|
/** put yesno into variable */
|
|
#define S_YNO(str, var) if(strcmp(opt, str) == 0) \
|
|
{ IS_YES_OR_NO; cfg->var = (strcmp(val, "yes") == 0); }
|
|
/** put memsize into variable */
|
|
#define S_MEMSIZE(str, var) if(strcmp(opt, str)==0) \
|
|
{ return cfg_parse_memsize(val, &cfg->var); }
|
|
/** put pow2 number into variable */
|
|
#define S_POW2(str, var) if(strcmp(opt, str)==0) \
|
|
{ IS_POW2_NUMBER; cfg->var = (size_t)atoi(val); }
|
|
/** put string into variable */
|
|
#define S_STR(str, var) if(strcmp(opt, str)==0) \
|
|
{ free(cfg->var); return (cfg->var = strdup(val)) != NULL; }
|
|
/** put string into strlist */
|
|
#define S_STRLIST(str, var) if(strcmp(opt, str)==0) \
|
|
{ return cfg_strlist_insert(&cfg->var, strdup(val)); }
|
|
/** put string into strlist if not present yet*/
|
|
#define S_STRLIST_UNIQ(str, var) if(strcmp(opt, str)==0) \
|
|
{ if(cfg_strlist_find(cfg->var, val)) { return 0;} \
|
|
return cfg_strlist_insert(&cfg->var, strdup(val)); }
|
|
/** append string to strlist */
|
|
#define S_STRLIST_APPEND(str, var) if(strcmp(opt, str)==0) \
|
|
{ return cfg_strlist_append(&cfg->var, strdup(val)); }
|
|
|
|
int config_set_option(struct config_file* cfg, const char* opt,
|
|
const char* val)
|
|
{
|
|
char buf[64];
|
|
if(!opt) return 0;
|
|
if(opt[strlen(opt)-1] != ':' && strlen(opt)+2<sizeof(buf)) {
|
|
snprintf(buf, sizeof(buf), "%s:", opt);
|
|
opt = buf;
|
|
}
|
|
S_NUMBER_OR_ZERO("verbosity:", verbosity)
|
|
else if(strcmp(opt, "statistics-interval:") == 0) {
|
|
if(strcmp(val, "0") == 0 || strcmp(val, "") == 0)
|
|
cfg->stat_interval = 0;
|
|
else if(atoi(val) == 0)
|
|
return 0;
|
|
else cfg->stat_interval = atoi(val);
|
|
} else if(strcmp(opt, "num-threads:") == 0) {
|
|
/* not supported, library must have 1 thread in bgworker */
|
|
return 0;
|
|
} else if(strcmp(opt, "outgoing-port-permit:") == 0) {
|
|
return cfg_mark_ports(val, 1,
|
|
cfg->outgoing_avail_ports, 65536);
|
|
} else if(strcmp(opt, "outgoing-port-avoid:") == 0) {
|
|
return cfg_mark_ports(val, 0,
|
|
cfg->outgoing_avail_ports, 65536);
|
|
} else if(strcmp(opt, "local-zone:") == 0) {
|
|
return cfg_parse_local_zone(cfg, val);
|
|
} else if(strcmp(opt, "val-override-date:") == 0) {
|
|
if(strcmp(val, "") == 0 || strcmp(val, "0") == 0) {
|
|
cfg->val_date_override = 0;
|
|
} else if(strlen(val) == 14) {
|
|
cfg->val_date_override = cfg_convert_timeval(val);
|
|
return cfg->val_date_override != 0;
|
|
} else {
|
|
if(atoi(val) == 0) return 0;
|
|
cfg->val_date_override = (uint32_t)atoi(val);
|
|
}
|
|
} else if(strcmp(opt, "local-data-ptr:") == 0) {
|
|
char* ptr = cfg_ptr_reverse((char*)opt);
|
|
return cfg_strlist_insert(&cfg->local_data, ptr);
|
|
} else if(strcmp(opt, "logfile:") == 0) {
|
|
cfg->use_syslog = 0;
|
|
free(cfg->logfile);
|
|
return (cfg->logfile = strdup(val)) != NULL;
|
|
}
|
|
else if(strcmp(opt, "log-time-ascii:") == 0)
|
|
{ IS_YES_OR_NO; cfg->log_time_ascii = (strcmp(val, "yes") == 0);
|
|
log_set_time_asc(cfg->log_time_ascii); }
|
|
else if(strcmp(opt, "log-time-iso:") == 0)
|
|
{ IS_YES_OR_NO; cfg->log_time_iso = (strcmp(val, "yes") == 0);
|
|
log_set_time_iso(cfg->log_time_iso); }
|
|
else S_SIZET_NONZERO("max-udp-size:", max_udp_size)
|
|
else S_YNO("use-syslog:", use_syslog)
|
|
else S_STR("log-identity:", log_identity)
|
|
else S_YNO("extended-statistics:", stat_extended)
|
|
else S_YNO("statistics-inhibit-zero:", stat_inhibit_zero)
|
|
else S_YNO("statistics-cumulative:", stat_cumulative)
|
|
else S_YNO("shm-enable:", shm_enable)
|
|
else S_NUMBER_OR_ZERO("shm-key:", shm_key)
|
|
else S_YNO("do-ip4:", do_ip4)
|
|
else S_YNO("do-ip6:", do_ip6)
|
|
else S_YNO("do-udp:", do_udp)
|
|
else S_YNO("do-tcp:", do_tcp)
|
|
else S_YNO("prefer-ip4:", prefer_ip4)
|
|
else S_YNO("prefer-ip6:", prefer_ip6)
|
|
else S_YNO("tcp-upstream:", tcp_upstream)
|
|
else S_YNO("udp-upstream-without-downstream:",
|
|
udp_upstream_without_downstream)
|
|
else S_NUMBER_NONZERO("tcp-mss:", tcp_mss)
|
|
else S_NUMBER_NONZERO("outgoing-tcp-mss:", outgoing_tcp_mss)
|
|
else S_NUMBER_NONZERO("tcp-auth-query-timeout:", tcp_auth_query_timeout)
|
|
else S_NUMBER_NONZERO("tcp-idle-timeout:", tcp_idle_timeout)
|
|
else S_NUMBER_NONZERO("max-reuse-tcp-queries:", max_reuse_tcp_queries)
|
|
else S_NUMBER_NONZERO("tcp-reuse-timeout:", tcp_reuse_timeout)
|
|
else S_YNO("edns-tcp-keepalive:", do_tcp_keepalive)
|
|
else S_NUMBER_NONZERO("edns-tcp-keepalive-timeout:", tcp_keepalive_timeout)
|
|
else S_NUMBER_OR_ZERO("sock-queue-timeout:", sock_queue_timeout)
|
|
else S_YNO("ssl-upstream:", ssl_upstream)
|
|
else S_YNO("tls-upstream:", ssl_upstream)
|
|
else S_STR("ssl-service-key:", ssl_service_key)
|
|
else S_STR("tls-service-key:", ssl_service_key)
|
|
else S_STR("ssl-service-pem:", ssl_service_pem)
|
|
else S_STR("tls-service-pem:", ssl_service_pem)
|
|
else S_NUMBER_NONZERO("ssl-port:", ssl_port)
|
|
else S_NUMBER_NONZERO("tls-port:", ssl_port)
|
|
else S_STR("ssl-cert-bundle:", tls_cert_bundle)
|
|
else S_STR("tls-cert-bundle:", tls_cert_bundle)
|
|
else S_YNO("tls-win-cert:", tls_win_cert)
|
|
else S_YNO("tls-system-cert:", tls_win_cert)
|
|
else S_STRLIST("additional-ssl-port:", tls_additional_port)
|
|
else S_STRLIST("additional-tls-port:", tls_additional_port)
|
|
else S_STRLIST("tls-additional-ports:", tls_additional_port)
|
|
else S_STRLIST("tls-additional-port:", tls_additional_port)
|
|
else S_STRLIST_APPEND("tls-session-ticket-keys:", tls_session_ticket_keys)
|
|
else S_STR("tls-ciphers:", tls_ciphers)
|
|
else S_STR("tls-ciphersuites:", tls_ciphersuites)
|
|
else S_YNO("tls-use-sni:", tls_use_sni)
|
|
else S_NUMBER_NONZERO("https-port:", https_port)
|
|
else S_STR("http-endpoint:", http_endpoint)
|
|
else S_NUMBER_NONZERO("http-max-streams:", http_max_streams)
|
|
else S_MEMSIZE("http-query-buffer-size:", http_query_buffer_size)
|
|
else S_MEMSIZE("http-response-buffer-size:", http_response_buffer_size)
|
|
else S_YNO("http-nodelay:", http_nodelay)
|
|
else S_YNO("http-notls-downstream:", http_notls_downstream)
|
|
else S_NUMBER_NONZERO("quic-port:", quic_port)
|
|
else S_MEMSIZE("quic-size:", quic_size)
|
|
else S_YNO("interface-automatic:", if_automatic)
|
|
else S_STR("interface-automatic-ports:", if_automatic_ports)
|
|
else S_YNO("use-systemd:", use_systemd)
|
|
else S_YNO("do-daemonize:", do_daemonize)
|
|
else S_NUMBER_NONZERO("port:", port)
|
|
else S_NUMBER_NONZERO("outgoing-range:", outgoing_num_ports)
|
|
else S_SIZET_OR_ZERO("outgoing-num-tcp:", outgoing_num_tcp)
|
|
else S_SIZET_OR_ZERO("incoming-num-tcp:", incoming_num_tcp)
|
|
else S_MEMSIZE("stream-wait-size:", stream_wait_size)
|
|
else S_SIZET_NONZERO("edns-buffer-size:", edns_buffer_size)
|
|
else S_SIZET_NONZERO("msg-buffer-size:", msg_buffer_size)
|
|
else S_MEMSIZE("msg-cache-size:", msg_cache_size)
|
|
else S_POW2("msg-cache-slabs:", msg_cache_slabs)
|
|
else S_SIZET_NONZERO("num-queries-per-thread:",num_queries_per_thread)
|
|
else S_SIZET_OR_ZERO("jostle-timeout:", jostle_time)
|
|
else S_MEMSIZE("so-rcvbuf:", so_rcvbuf)
|
|
else S_MEMSIZE("so-sndbuf:", so_sndbuf)
|
|
else S_YNO("so-reuseport:", so_reuseport)
|
|
else S_YNO("ip-transparent:", ip_transparent)
|
|
else S_YNO("ip-freebind:", ip_freebind)
|
|
else S_NUMBER_OR_ZERO("ip-dscp:", ip_dscp)
|
|
else S_MEMSIZE("rrset-cache-size:", rrset_cache_size)
|
|
else S_POW2("rrset-cache-slabs:", rrset_cache_slabs)
|
|
else S_YNO("prefetch:", prefetch)
|
|
else S_YNO("prefetch-key:", prefetch_key)
|
|
else S_YNO("deny-any:", deny_any)
|
|
else if(strcmp(opt, "cache-max-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->max_ttl = atoi(val); MAX_TTL=(time_t)cfg->max_ttl;}
|
|
else if(strcmp(opt, "cache-max-negative-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->max_negative_ttl = atoi(val); MAX_NEG_TTL=(time_t)cfg->max_negative_ttl;}
|
|
else if(strcmp(opt, "cache-min-negative-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->min_negative_ttl = atoi(val); MIN_NEG_TTL=(time_t)cfg->min_negative_ttl;}
|
|
else if(strcmp(opt, "cache-min-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->min_ttl = atoi(val); MIN_TTL=(time_t)cfg->min_ttl;}
|
|
else if(strcmp(opt, "infra-cache-min-rtt:") == 0) {
|
|
IS_NUMBER_OR_ZERO; cfg->infra_cache_min_rtt = atoi(val);
|
|
RTT_MIN_TIMEOUT=cfg->infra_cache_min_rtt;
|
|
}
|
|
else if(strcmp(opt, "infra-cache-max-rtt:") == 0) {
|
|
IS_NUMBER_OR_ZERO; cfg->infra_cache_max_rtt = atoi(val);
|
|
RTT_MAX_TIMEOUT=cfg->infra_cache_max_rtt;
|
|
USEFUL_SERVER_TOP_TIMEOUT = RTT_MAX_TIMEOUT;
|
|
BLACKLIST_PENALTY = USEFUL_SERVER_TOP_TIMEOUT*4;
|
|
}
|
|
else S_YNO("infra-keep-probing:", infra_keep_probing)
|
|
else S_NUMBER_OR_ZERO("infra-host-ttl:", host_ttl)
|
|
else S_POW2("infra-cache-slabs:", infra_cache_slabs)
|
|
else S_SIZET_NONZERO("infra-cache-numhosts:", infra_cache_numhosts)
|
|
else S_NUMBER_OR_ZERO("delay-close:", delay_close)
|
|
else S_YNO("udp-connect:", udp_connect)
|
|
else S_STR("chroot:", chrootdir)
|
|
else S_STR("username:", username)
|
|
else S_STR("directory:", directory)
|
|
else S_STR("pidfile:", pidfile)
|
|
else S_YNO("hide-identity:", hide_identity)
|
|
else S_YNO("hide-version:", hide_version)
|
|
else S_YNO("hide-trustanchor:", hide_trustanchor)
|
|
else S_YNO("hide-http-user-agent:", hide_http_user_agent)
|
|
else S_STR("identity:", identity)
|
|
else S_STR("version:", version)
|
|
else S_STR("http-user-agent:", http_user_agent)
|
|
else if(strcmp(opt, "nsid:") == 0) {
|
|
free(cfg->nsid_cfg_str);
|
|
if (!(cfg->nsid_cfg_str = strdup(val)))
|
|
return 0;
|
|
/* Empty string is just validly unsetting nsid */
|
|
if (*val == 0) {
|
|
free(cfg->nsid);
|
|
cfg->nsid = NULL;
|
|
cfg->nsid_len = 0;
|
|
return 1;
|
|
}
|
|
cfg->nsid = cfg_parse_nsid(val, &cfg->nsid_len);
|
|
return cfg->nsid != NULL;
|
|
}
|
|
else S_STRLIST("root-hints:", root_hints)
|
|
else S_STR("target-fetch-policy:", target_fetch_policy)
|
|
else S_YNO("harden-glue:", harden_glue)
|
|
else S_YNO("harden-unverified-glue:", harden_unverified_glue)
|
|
else S_YNO("harden-short-bufsize:", harden_short_bufsize)
|
|
else S_YNO("harden-large-queries:", harden_large_queries)
|
|
else S_YNO("harden-dnssec-stripped:", harden_dnssec_stripped)
|
|
else S_YNO("harden-below-nxdomain:", harden_below_nxdomain)
|
|
else S_YNO("harden-referral-path:", harden_referral_path)
|
|
else S_YNO("harden-algo-downgrade:", harden_algo_downgrade)
|
|
else S_YNO("harden-unknown-additional:", harden_unknown_additional)
|
|
else S_YNO("use-caps-for-id:", use_caps_bits_for_id)
|
|
else S_STRLIST("caps-whitelist:", caps_whitelist)
|
|
else S_SIZET_OR_ZERO("unwanted-reply-threshold:", unwanted_threshold)
|
|
else S_STRLIST("private-address:", private_address)
|
|
else S_STRLIST("private-domain:", private_domain)
|
|
else S_YNO("do-not-query-localhost:", donotquery_localhost)
|
|
else S_STRLIST("do-not-query-address:", donotqueryaddrs)
|
|
else S_STRLIST("auto-trust-anchor-file:", auto_trust_anchor_file_list)
|
|
else S_STRLIST("trust-anchor-file:", trust_anchor_file_list)
|
|
else S_STRLIST("trust-anchor:", trust_anchor_list)
|
|
else S_STRLIST("trusted-keys-file:", trusted_keys_file_list)
|
|
else S_YNO("trust-anchor-signaling:", trust_anchor_signaling)
|
|
else S_YNO("root-key-sentinel:", root_key_sentinel)
|
|
else S_STRLIST("domain-insecure:", domain_insecure)
|
|
else S_NUMBER_OR_ZERO("val-bogus-ttl:", bogus_ttl)
|
|
else S_YNO("val-clean-additional:", val_clean_additional)
|
|
else S_NUMBER_OR_ZERO("val-log-level:", val_log_level)
|
|
else S_YNO("val-log-squelch:", val_log_squelch)
|
|
else S_YNO("log-queries:", log_queries)
|
|
else S_YNO("log-replies:", log_replies)
|
|
else S_YNO("log-tag-queryreply:", log_tag_queryreply)
|
|
else S_YNO("log-local-actions:", log_local_actions)
|
|
else S_YNO("log-servfail:", log_servfail)
|
|
else S_YNO("log-destaddr:", log_destaddr)
|
|
else S_YNO("val-permissive-mode:", val_permissive_mode)
|
|
else S_YNO("aggressive-nsec:", aggressive_nsec)
|
|
else S_YNO("ignore-cd-flag:", ignore_cd)
|
|
else S_YNO("disable-edns-do:", disable_edns_do)
|
|
else if(strcmp(opt, "serve-expired:") == 0)
|
|
{ IS_YES_OR_NO; cfg->serve_expired = (strcmp(val, "yes") == 0);
|
|
SERVE_EXPIRED = cfg->serve_expired; }
|
|
else if(strcmp(opt, "serve-expired-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->serve_expired_ttl = atoi(val); SERVE_EXPIRED_TTL=(time_t)cfg->serve_expired_ttl;}
|
|
else if(strcmp(opt, "serve-expired-ttl-reset:") == 0)
|
|
{ IS_YES_OR_NO; cfg->serve_expired_ttl_reset = (strcmp(val, "yes") == 0);
|
|
SERVE_EXPIRED_TTL_RESET = cfg->serve_expired_ttl_reset; }
|
|
else if(strcmp(opt, "serve-expired-reply-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->serve_expired_reply_ttl = atoi(val); SERVE_EXPIRED_REPLY_TTL=(time_t)cfg->serve_expired_reply_ttl;}
|
|
else S_NUMBER_OR_ZERO("serve-expired-client-timeout:", serve_expired_client_timeout)
|
|
else S_YNO("ede:", ede)
|
|
else S_YNO("ede-serve-expired:", ede_serve_expired)
|
|
else S_NUMBER_OR_ZERO("iter-scrub-ns:", iter_scrub_ns)
|
|
else S_NUMBER_OR_ZERO("iter-scrub-cname:", iter_scrub_cname)
|
|
else S_NUMBER_OR_ZERO("max-global-quota:", max_global_quota)
|
|
else S_YNO("serve-original-ttl:", serve_original_ttl)
|
|
else S_STR("val-nsec3-keysize-iterations:", val_nsec3_key_iterations)
|
|
else S_YNO("zonemd-permissive-mode:", zonemd_permissive_mode)
|
|
else S_UNSIGNED_OR_ZERO("add-holddown:", add_holddown)
|
|
else S_UNSIGNED_OR_ZERO("del-holddown:", del_holddown)
|
|
else S_UNSIGNED_OR_ZERO("keep-missing:", keep_missing)
|
|
else if(strcmp(opt, "permit-small-holddown:") == 0)
|
|
{ IS_YES_OR_NO; cfg->permit_small_holddown = (strcmp(val, "yes") == 0);
|
|
autr_permit_small_holddown = cfg->permit_small_holddown; }
|
|
else S_MEMSIZE("key-cache-size:", key_cache_size)
|
|
else S_POW2("key-cache-slabs:", key_cache_slabs)
|
|
else S_MEMSIZE("neg-cache-size:", neg_cache_size)
|
|
else S_YNO("minimal-responses:", minimal_responses)
|
|
else S_YNO("rrset-roundrobin:", rrset_roundrobin)
|
|
else S_NUMBER_OR_ZERO("unknown-server-time-limit:", unknown_server_time_limit)
|
|
else S_NUMBER_OR_ZERO("discard-timeout:", discard_timeout)
|
|
else S_NUMBER_OR_ZERO("wait-limit:", wait_limit)
|
|
else S_NUMBER_OR_ZERO("wait-limit-cookie:", wait_limit_cookie)
|
|
else S_STRLIST("local-data:", local_data)
|
|
else S_YNO("unblock-lan-zones:", unblock_lan_zones)
|
|
else S_YNO("insecure-lan-zones:", insecure_lan_zones)
|
|
else S_YNO("control-enable:", remote_control_enable)
|
|
else S_STRLIST_APPEND("control-interface:", control_ifs)
|
|
else S_NUMBER_NONZERO("control-port:", control_port)
|
|
else S_STR("server-key-file:", server_key_file)
|
|
else S_STR("server-cert-file:", server_cert_file)
|
|
else S_STR("control-key-file:", control_key_file)
|
|
else S_STR("control-cert-file:", control_cert_file)
|
|
else S_STR("module-config:", module_conf)
|
|
else S_STRLIST("python-script:", python_script)
|
|
else S_STRLIST("dynlib-file:", dynlib_file)
|
|
else S_YNO("disable-dnssec-lame-check:", disable_dnssec_lame_check)
|
|
#ifdef CLIENT_SUBNET
|
|
/* Can't set max subnet prefix here, since that value is used when
|
|
* generating the address tree. */
|
|
/* No client-subnet-always-forward here, module registration depends on
|
|
* this option. */
|
|
#endif
|
|
#ifdef USE_DNSTAP
|
|
else S_YNO("dnstap-enable:", dnstap)
|
|
else S_YNO("dnstap-bidirectional:", dnstap_bidirectional)
|
|
else S_STR("dnstap-socket-path:", dnstap_socket_path)
|
|
else S_STR("dnstap-ip:", dnstap_ip)
|
|
else S_YNO("dnstap-tls:", dnstap_tls)
|
|
else S_STR("dnstap-tls-server-name:", dnstap_tls_server_name)
|
|
else S_STR("dnstap-tls-cert-bundle:", dnstap_tls_cert_bundle)
|
|
else S_STR("dnstap-tls-client-key-file:", dnstap_tls_client_key_file)
|
|
else S_STR("dnstap-tls-client-cert-file:",
|
|
dnstap_tls_client_cert_file)
|
|
else S_YNO("dnstap-send-identity:", dnstap_send_identity)
|
|
else S_YNO("dnstap-send-version:", dnstap_send_version)
|
|
else S_STR("dnstap-identity:", dnstap_identity)
|
|
else S_STR("dnstap-version:", dnstap_version)
|
|
else S_NUMBER_OR_ZERO("dnstap-sample-rate:", dnstap_sample_rate)
|
|
else S_YNO("dnstap-log-resolver-query-messages:",
|
|
dnstap_log_resolver_query_messages)
|
|
else S_YNO("dnstap-log-resolver-response-messages:",
|
|
dnstap_log_resolver_response_messages)
|
|
else S_YNO("dnstap-log-client-query-messages:",
|
|
dnstap_log_client_query_messages)
|
|
else S_YNO("dnstap-log-client-response-messages:",
|
|
dnstap_log_client_response_messages)
|
|
else S_YNO("dnstap-log-forwarder-query-messages:",
|
|
dnstap_log_forwarder_query_messages)
|
|
else S_YNO("dnstap-log-forwarder-response-messages:",
|
|
dnstap_log_forwarder_response_messages)
|
|
#endif
|
|
#ifdef USE_DNSCRYPT
|
|
else S_YNO("dnscrypt-enable:", dnscrypt)
|
|
else S_NUMBER_NONZERO("dnscrypt-port:", dnscrypt_port)
|
|
else S_STR("dnscrypt-provider:", dnscrypt_provider)
|
|
else S_STRLIST_UNIQ("dnscrypt-provider-cert:", dnscrypt_provider_cert)
|
|
else S_STRLIST("dnscrypt-provider-cert-rotated:", dnscrypt_provider_cert_rotated)
|
|
else S_STRLIST_UNIQ("dnscrypt-secret-key:", dnscrypt_secret_key)
|
|
else S_MEMSIZE("dnscrypt-shared-secret-cache-size:",
|
|
dnscrypt_shared_secret_cache_size)
|
|
else S_POW2("dnscrypt-shared-secret-cache-slabs:",
|
|
dnscrypt_shared_secret_cache_slabs)
|
|
else S_MEMSIZE("dnscrypt-nonce-cache-size:",
|
|
dnscrypt_nonce_cache_size)
|
|
else S_POW2("dnscrypt-nonce-cache-slabs:",
|
|
dnscrypt_nonce_cache_slabs)
|
|
#endif
|
|
else if(strcmp(opt, "ip-ratelimit-cookie:") == 0) {
|
|
IS_NUMBER_OR_ZERO; cfg->ip_ratelimit_cookie = atoi(val);
|
|
infra_ip_ratelimit_cookie=cfg->ip_ratelimit_cookie;
|
|
}
|
|
else if(strcmp(opt, "ip-ratelimit:") == 0) {
|
|
IS_NUMBER_OR_ZERO; cfg->ip_ratelimit = atoi(val);
|
|
infra_ip_ratelimit=cfg->ip_ratelimit;
|
|
}
|
|
else if(strcmp(opt, "ratelimit:") == 0) {
|
|
IS_NUMBER_OR_ZERO; cfg->ratelimit = atoi(val);
|
|
infra_dp_ratelimit=cfg->ratelimit;
|
|
}
|
|
else S_MEMSIZE("ip-ratelimit-size:", ip_ratelimit_size)
|
|
else S_MEMSIZE("ratelimit-size:", ratelimit_size)
|
|
else S_POW2("ip-ratelimit-slabs:", ip_ratelimit_slabs)
|
|
else S_POW2("ratelimit-slabs:", ratelimit_slabs)
|
|
else S_NUMBER_OR_ZERO("ip-ratelimit-factor:", ip_ratelimit_factor)
|
|
else S_NUMBER_OR_ZERO("ratelimit-factor:", ratelimit_factor)
|
|
else S_YNO("ip-ratelimit-backoff:", ip_ratelimit_backoff)
|
|
else S_YNO("ratelimit-backoff:", ratelimit_backoff)
|
|
else S_NUMBER_NONZERO("outbound-msg-retry:", outbound_msg_retry)
|
|
else S_NUMBER_NONZERO("max-sent-count:", max_sent_count)
|
|
else S_NUMBER_NONZERO("max-query-restarts:", max_query_restarts)
|
|
else S_SIZET_NONZERO("fast-server-num:", fast_server_num)
|
|
else S_NUMBER_OR_ZERO("fast-server-permil:", fast_server_permil)
|
|
else S_YNO("qname-minimisation:", qname_minimisation)
|
|
else S_YNO("qname-minimisation-strict:", qname_minimisation_strict)
|
|
else S_YNO("pad-responses:", pad_responses)
|
|
else S_SIZET_NONZERO("pad-responses-block-size:", pad_responses_block_size)
|
|
else S_YNO("pad-queries:", pad_queries)
|
|
else S_SIZET_NONZERO("pad-queries-block-size:", pad_queries_block_size)
|
|
else S_STRLIST("proxy-protocol-port:", proxy_protocol_port)
|
|
#ifdef USE_IPSECMOD
|
|
else S_YNO("ipsecmod-enabled:", ipsecmod_enabled)
|
|
else S_YNO("ipsecmod-ignore-bogus:", ipsecmod_ignore_bogus)
|
|
else if(strcmp(opt, "ipsecmod-max-ttl:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->ipsecmod_max_ttl = atoi(val); }
|
|
else S_YNO("ipsecmod-strict:", ipsecmod_strict)
|
|
#endif
|
|
else S_YNO("answer-cookie:", do_answer_cookie)
|
|
else S_STR("cookie-secret-file:", cookie_secret_file)
|
|
#ifdef USE_CACHEDB
|
|
else S_YNO("cachedb-no-store:", cachedb_no_store)
|
|
else S_YNO("cachedb-check-when-serve-expired:", cachedb_check_when_serve_expired)
|
|
#endif /* USE_CACHEDB */
|
|
else if(strcmp(opt, "define-tag:") ==0) {
|
|
return config_add_tag(cfg, val);
|
|
/* val_sig_skew_min, max and val_max_restart are copied into val_env
|
|
* during init so this does not update val_env with set_option */
|
|
} else if(strcmp(opt, "val-sig-skew-min:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->val_sig_skew_min = (int32_t)atoi(val); }
|
|
else if(strcmp(opt, "val-sig-skew-max:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->val_sig_skew_max = (int32_t)atoi(val); }
|
|
else if(strcmp(opt, "val-max-restart:") == 0)
|
|
{ IS_NUMBER_OR_ZERO; cfg->val_max_restart = (int32_t)atoi(val); }
|
|
else if (strcmp(opt, "outgoing-interface:") == 0) {
|
|
char* d = strdup(val);
|
|
char** oi =
|
|
(char**)reallocarray(NULL, (size_t)cfg->num_out_ifs+1, sizeof(char*));
|
|
if(!d || !oi) { free(d); free(oi); return -1; }
|
|
if(cfg->out_ifs && cfg->num_out_ifs) {
|
|
memmove(oi, cfg->out_ifs, cfg->num_out_ifs*sizeof(char*));
|
|
free(cfg->out_ifs);
|
|
}
|
|
oi[cfg->num_out_ifs++] = d;
|
|
cfg->out_ifs = oi;
|
|
} else {
|
|
/* unknown or unsupported (from the set_option interface):
|
|
* interface, outgoing-interface, access-control,
|
|
* stub-zone, name, stub-addr, stub-host, stub-prime
|
|
* forward-first, stub-first, forward-ssl-upstream,
|
|
* stub-ssl-upstream, forward-zone, auth-zone
|
|
* name, forward-addr, forward-host,
|
|
* ratelimit-for-domain, ratelimit-below-domain,
|
|
* local-zone-tag, access-control-view, interface-*,
|
|
* send-client-subnet, client-subnet-always-forward,
|
|
* max-client-subnet-ipv4, max-client-subnet-ipv6,
|
|
* min-client-subnet-ipv4, min-client-subnet-ipv6,
|
|
* max-ecs-tree-size-ipv4, max-ecs-tree-size-ipv6, ipsecmod_hook,
|
|
* ipsecmod_whitelist. */
|
|
return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
void config_print_func(char* line, void* arg)
|
|
{
|
|
FILE* f = (FILE*)arg;
|
|
(void)fprintf(f, "%s\n", line);
|
|
}
|
|
|
|
/** collate func arg */
|
|
struct config_collate_arg {
|
|
/** list of result items */
|
|
struct config_strlist_head list;
|
|
/** if a malloc error occurred, 0 is OK */
|
|
int status;
|
|
};
|
|
|
|
void config_collate_func(char* line, void* arg)
|
|
{
|
|
struct config_collate_arg* m = (struct config_collate_arg*)arg;
|
|
if(m->status)
|
|
return;
|
|
if(!cfg_strlist_append(&m->list, strdup(line)))
|
|
m->status = 1;
|
|
}
|
|
|
|
int config_get_option_list(struct config_file* cfg, const char* opt,
|
|
struct config_strlist** list)
|
|
{
|
|
struct config_collate_arg m;
|
|
memset(&m, 0, sizeof(m));
|
|
*list = NULL;
|
|
if(!config_get_option(cfg, opt, config_collate_func, &m))
|
|
return 1;
|
|
if(m.status) {
|
|
config_delstrlist(m.list.first);
|
|
return 2;
|
|
}
|
|
*list = m.list.first;
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
config_get_option_collate(struct config_file* cfg, const char* opt, char** str)
|
|
{
|
|
struct config_strlist* list = NULL;
|
|
int r;
|
|
*str = NULL;
|
|
if((r = config_get_option_list(cfg, opt, &list)) != 0)
|
|
return r;
|
|
*str = config_collate_cat(list);
|
|
config_delstrlist(list);
|
|
if(!*str) return 2;
|
|
return 0;
|
|
}
|
|
|
|
char*
|
|
config_collate_cat(struct config_strlist* list)
|
|
{
|
|
size_t total = 0, left;
|
|
struct config_strlist* s;
|
|
char *r, *w;
|
|
if(!list) /* no elements */
|
|
return strdup("");
|
|
if(list->next == NULL) /* one element , no newline at end. */
|
|
return strdup(list->str);
|
|
/* count total length */
|
|
for(s=list; s; s=s->next)
|
|
total += strlen(s->str) + 1; /* len + newline */
|
|
left = total+1; /* one extra for nul at end */
|
|
r = malloc(left);
|
|
if(!r)
|
|
return NULL;
|
|
w = r;
|
|
for(s=list; s; s=s->next) {
|
|
size_t this = strlen(s->str);
|
|
if(this+2 > left) { /* sanity check */
|
|
free(r);
|
|
return NULL;
|
|
}
|
|
snprintf(w, left, "%s\n", s->str);
|
|
this = strlen(w);
|
|
w += this;
|
|
left -= this;
|
|
}
|
|
return r;
|
|
}
|
|
|
|
/** compare and print decimal option */
|
|
#define O_DEC(opt, str, var) if(strcmp(opt, str)==0) \
|
|
{snprintf(buf, len, "%d", (int)cfg->var); \
|
|
func(buf, arg);}
|
|
/** compare and print unsigned option */
|
|
#define O_UNS(opt, str, var) if(strcmp(opt, str)==0) \
|
|
{snprintf(buf, len, "%u", (unsigned)cfg->var); \
|
|
func(buf, arg);}
|
|
/** compare and print yesno option */
|
|
#define O_YNO(opt, str, var) if(strcmp(opt, str)==0) \
|
|
{func(cfg->var?"yes":"no", arg);}
|
|
/** compare and print string option */
|
|
#define O_STR(opt, str, var) if(strcmp(opt, str)==0) \
|
|
{func(cfg->var?cfg->var:"", arg);}
|
|
/** compare and print array option */
|
|
#define O_IFC(opt, str, num, arr) if(strcmp(opt, str)==0) \
|
|
{int i; for(i=0; i<cfg->num; i++) func(cfg->arr[i], arg);}
|
|
/** compare and print memorysize option */
|
|
#define O_MEM(opt, str, var) if(strcmp(opt, str)==0) { \
|
|
if(cfg->var > 1024*1024*1024) { \
|
|
size_t f=cfg->var/(size_t)1000000, b=cfg->var%(size_t)1000000; \
|
|
snprintf(buf, len, "%u%6.6u", (unsigned)f, (unsigned)b); \
|
|
} else snprintf(buf, len, "%u", (unsigned)cfg->var); \
|
|
func(buf, arg);}
|
|
/** compare and print list option */
|
|
#define O_LST(opt, name, lst) if(strcmp(opt, name)==0) { \
|
|
struct config_strlist* p = cfg->lst; \
|
|
for(p = cfg->lst; p; p = p->next) \
|
|
func(p->str, arg); \
|
|
}
|
|
/** compare and print list option */
|
|
#define O_LS2(opt, name, lst) if(strcmp(opt, name)==0) { \
|
|
struct config_str2list* p = cfg->lst; \
|
|
for(p = cfg->lst; p; p = p->next) { \
|
|
snprintf(buf, len, "%s %s", p->str, p->str2); \
|
|
func(buf, arg); \
|
|
} \
|
|
}
|
|
/** compare and print list option */
|
|
#define O_LS3(opt, name, lst) if(strcmp(opt, name)==0) { \
|
|
struct config_str3list* p = cfg->lst; \
|
|
for(p = cfg->lst; p; p = p->next) { \
|
|
snprintf(buf, len, "%s %s %s", p->str, p->str2, p->str3); \
|
|
func(buf, arg); \
|
|
} \
|
|
}
|
|
/** compare and print taglist option */
|
|
#define O_LTG(opt, name, lst) if(strcmp(opt, name)==0) { \
|
|
char* tmpstr = NULL; \
|
|
struct config_strbytelist *p = cfg->lst; \
|
|
for(p = cfg->lst; p; p = p->next) {\
|
|
tmpstr = config_taglist2str(cfg, p->str2, p->str2len); \
|
|
if(tmpstr) {\
|
|
snprintf(buf, len, "%s %s", p->str, tmpstr); \
|
|
func(buf, arg); \
|
|
free(tmpstr); \
|
|
} \
|
|
} \
|
|
}
|
|
|
|
int
|
|
config_get_option(struct config_file* cfg, const char* opt,
|
|
void (*func)(char*,void*), void* arg)
|
|
{
|
|
char buf[1024], nopt[64];
|
|
size_t len = sizeof(buf);
|
|
if(!opt) return 0;
|
|
if(opt && opt[strlen(opt)-1] == ':' && strlen(opt)<sizeof(nopt)) {
|
|
memmove(nopt, opt, strlen(opt));
|
|
nopt[strlen(opt)-1] = 0;
|
|
opt = nopt;
|
|
}
|
|
fptr_ok(fptr_whitelist_print_func(func));
|
|
O_DEC(opt, "verbosity", verbosity)
|
|
else O_DEC(opt, "statistics-interval", stat_interval)
|
|
else O_YNO(opt, "statistics-cumulative", stat_cumulative)
|
|
else O_YNO(opt, "extended-statistics", stat_extended)
|
|
else O_YNO(opt, "statistics-inhibit-zero", stat_inhibit_zero)
|
|
else O_YNO(opt, "shm-enable", shm_enable)
|
|
else O_DEC(opt, "shm-key", shm_key)
|
|
else O_YNO(opt, "use-syslog", use_syslog)
|
|
else O_STR(opt, "log-identity", log_identity)
|
|
else O_YNO(opt, "log-time-ascii", log_time_ascii)
|
|
else O_YNO(opt, "log-time-iso", log_time_iso)
|
|
else O_DEC(opt, "num-threads", num_threads)
|
|
else O_IFC(opt, "interface", num_ifs, ifs)
|
|
else O_IFC(opt, "outgoing-interface", num_out_ifs, out_ifs)
|
|
else O_YNO(opt, "interface-automatic", if_automatic)
|
|
else O_STR(opt, "interface-automatic-ports", if_automatic_ports)
|
|
else O_DEC(opt, "port", port)
|
|
else O_DEC(opt, "outgoing-range", outgoing_num_ports)
|
|
else O_DEC(opt, "outgoing-num-tcp", outgoing_num_tcp)
|
|
else O_DEC(opt, "incoming-num-tcp", incoming_num_tcp)
|
|
else O_MEM(opt, "stream-wait-size", stream_wait_size)
|
|
else O_DEC(opt, "edns-buffer-size", edns_buffer_size)
|
|
else O_DEC(opt, "msg-buffer-size", msg_buffer_size)
|
|
else O_MEM(opt, "msg-cache-size", msg_cache_size)
|
|
else O_DEC(opt, "msg-cache-slabs", msg_cache_slabs)
|
|
else O_DEC(opt, "num-queries-per-thread", num_queries_per_thread)
|
|
else O_UNS(opt, "jostle-timeout", jostle_time)
|
|
else O_MEM(opt, "so-rcvbuf", so_rcvbuf)
|
|
else O_MEM(opt, "so-sndbuf", so_sndbuf)
|
|
else O_YNO(opt, "so-reuseport", so_reuseport)
|
|
else O_YNO(opt, "ip-transparent", ip_transparent)
|
|
else O_YNO(opt, "ip-freebind", ip_freebind)
|
|
else O_DEC(opt, "ip-dscp", ip_dscp)
|
|
else O_MEM(opt, "rrset-cache-size", rrset_cache_size)
|
|
else O_DEC(opt, "rrset-cache-slabs", rrset_cache_slabs)
|
|
else O_YNO(opt, "prefetch-key", prefetch_key)
|
|
else O_YNO(opt, "prefetch", prefetch)
|
|
else O_YNO(opt, "deny-any", deny_any)
|
|
else O_DEC(opt, "cache-max-ttl", max_ttl)
|
|
else O_DEC(opt, "cache-max-negative-ttl", max_negative_ttl)
|
|
else O_DEC(opt, "cache-min-negative-ttl", min_negative_ttl)
|
|
else O_DEC(opt, "cache-min-ttl", min_ttl)
|
|
else O_DEC(opt, "infra-host-ttl", host_ttl)
|
|
else O_DEC(opt, "infra-cache-slabs", infra_cache_slabs)
|
|
else O_DEC(opt, "infra-cache-min-rtt", infra_cache_min_rtt)
|
|
else O_UNS(opt, "infra-cache-max-rtt", infra_cache_max_rtt)
|
|
else O_YNO(opt, "infra-keep-probing", infra_keep_probing)
|
|
else O_MEM(opt, "infra-cache-numhosts", infra_cache_numhosts)
|
|
else O_UNS(opt, "delay-close", delay_close)
|
|
else O_YNO(opt, "udp-connect", udp_connect)
|
|
else O_YNO(opt, "do-ip4", do_ip4)
|
|
else O_YNO(opt, "do-ip6", do_ip6)
|
|
else O_YNO(opt, "do-udp", do_udp)
|
|
else O_YNO(opt, "do-tcp", do_tcp)
|
|
else O_YNO(opt, "prefer-ip4", prefer_ip4)
|
|
else O_YNO(opt, "prefer-ip6", prefer_ip6)
|
|
else O_YNO(opt, "tcp-upstream", tcp_upstream)
|
|
else O_YNO(opt, "udp-upstream-without-downstream", udp_upstream_without_downstream)
|
|
else O_DEC(opt, "tcp-mss", tcp_mss)
|
|
else O_DEC(opt, "outgoing-tcp-mss", outgoing_tcp_mss)
|
|
else O_DEC(opt, "tcp-auth-query-timeout", tcp_auth_query_timeout)
|
|
else O_DEC(opt, "tcp-idle-timeout", tcp_idle_timeout)
|
|
else O_DEC(opt, "max-reuse-tcp-queries", max_reuse_tcp_queries)
|
|
else O_DEC(opt, "tcp-reuse-timeout", tcp_reuse_timeout)
|
|
else O_YNO(opt, "edns-tcp-keepalive", do_tcp_keepalive)
|
|
else O_DEC(opt, "edns-tcp-keepalive-timeout", tcp_keepalive_timeout)
|
|
else O_DEC(opt, "sock-queue-timeout", sock_queue_timeout)
|
|
else O_YNO(opt, "ssl-upstream", ssl_upstream)
|
|
else O_YNO(opt, "tls-upstream", ssl_upstream)
|
|
else O_STR(opt, "ssl-service-key", ssl_service_key)
|
|
else O_STR(opt, "tls-service-key", ssl_service_key)
|
|
else O_STR(opt, "ssl-service-pem", ssl_service_pem)
|
|
else O_STR(opt, "tls-service-pem", ssl_service_pem)
|
|
else O_DEC(opt, "ssl-port", ssl_port)
|
|
else O_DEC(opt, "tls-port", ssl_port)
|
|
else O_STR(opt, "ssl-cert-bundle", tls_cert_bundle)
|
|
else O_STR(opt, "tls-cert-bundle", tls_cert_bundle)
|
|
else O_YNO(opt, "tls-win-cert", tls_win_cert)
|
|
else O_YNO(opt, "tls-system-cert", tls_win_cert)
|
|
else O_LST(opt, "additional-ssl-port", tls_additional_port)
|
|
else O_LST(opt, "additional-tls-port", tls_additional_port)
|
|
else O_LST(opt, "tls-additional-ports", tls_additional_port)
|
|
else O_LST(opt, "tls-additional-port", tls_additional_port)
|
|
else O_LST(opt, "tls-session-ticket-keys", tls_session_ticket_keys.first)
|
|
else O_STR(opt, "tls-ciphers", tls_ciphers)
|
|
else O_STR(opt, "tls-ciphersuites", tls_ciphersuites)
|
|
else O_YNO(opt, "tls-use-sni", tls_use_sni)
|
|
else O_DEC(opt, "https-port", https_port)
|
|
else O_STR(opt, "http-endpoint", http_endpoint)
|
|
else O_UNS(opt, "http-max-streams", http_max_streams)
|
|
else O_MEM(opt, "http-query-buffer-size", http_query_buffer_size)
|
|
else O_MEM(opt, "http-response-buffer-size", http_response_buffer_size)
|
|
else O_YNO(opt, "http-nodelay", http_nodelay)
|
|
else O_YNO(opt, "http-notls-downstream", http_notls_downstream)
|
|
else O_DEC(opt, "quic-port", quic_port)
|
|
else O_MEM(opt, "quic-size", quic_size)
|
|
else O_YNO(opt, "use-systemd", use_systemd)
|
|
else O_YNO(opt, "do-daemonize", do_daemonize)
|
|
else O_STR(opt, "chroot", chrootdir)
|
|
else O_STR(opt, "username", username)
|
|
else O_STR(opt, "directory", directory)
|
|
else O_STR(opt, "logfile", logfile)
|
|
else O_YNO(opt, "log-queries", log_queries)
|
|
else O_YNO(opt, "log-replies", log_replies)
|
|
else O_YNO(opt, "log-tag-queryreply", log_tag_queryreply)
|
|
else O_YNO(opt, "log-local-actions", log_local_actions)
|
|
else O_YNO(opt, "log-servfail", log_servfail)
|
|
else O_YNO(opt, "log-destaddr", log_destaddr)
|
|
else O_STR(opt, "pidfile", pidfile)
|
|
else O_YNO(opt, "hide-identity", hide_identity)
|
|
else O_YNO(opt, "hide-version", hide_version)
|
|
else O_YNO(opt, "hide-trustanchor", hide_trustanchor)
|
|
else O_YNO(opt, "hide-http-user-agent", hide_http_user_agent)
|
|
else O_STR(opt, "identity", identity)
|
|
else O_STR(opt, "version", version)
|
|
else O_STR(opt, "http-user-agent", http_user_agent)
|
|
else O_STR(opt, "nsid", nsid_cfg_str)
|
|
else O_STR(opt, "target-fetch-policy", target_fetch_policy)
|
|
else O_YNO(opt, "harden-short-bufsize", harden_short_bufsize)
|
|
else O_YNO(opt, "harden-large-queries", harden_large_queries)
|
|
else O_YNO(opt, "harden-glue", harden_glue)
|
|
else O_YNO(opt, "harden-unverified-glue", harden_unverified_glue)
|
|
else O_YNO(opt, "harden-dnssec-stripped", harden_dnssec_stripped)
|
|
else O_YNO(opt, "harden-below-nxdomain", harden_below_nxdomain)
|
|
else O_YNO(opt, "harden-referral-path", harden_referral_path)
|
|
else O_YNO(opt, "harden-algo-downgrade", harden_algo_downgrade)
|
|
else O_YNO(opt, "harden-unknown-additional", harden_unknown_additional)
|
|
else O_YNO(opt, "use-caps-for-id", use_caps_bits_for_id)
|
|
else O_LST(opt, "caps-whitelist", caps_whitelist)
|
|
else O_DEC(opt, "unwanted-reply-threshold", unwanted_threshold)
|
|
else O_YNO(opt, "do-not-query-localhost", donotquery_localhost)
|
|
else O_STR(opt, "module-config", module_conf)
|
|
else O_DEC(opt, "val-bogus-ttl", bogus_ttl)
|
|
else O_YNO(opt, "val-clean-additional", val_clean_additional)
|
|
else O_DEC(opt, "val-log-level", val_log_level)
|
|
else O_YNO(opt, "val-permissive-mode", val_permissive_mode)
|
|
else O_YNO(opt, "aggressive-nsec", aggressive_nsec)
|
|
else O_YNO(opt, "ignore-cd-flag", ignore_cd)
|
|
else O_YNO(opt, "disable-edns-do", disable_edns_do)
|
|
else O_YNO(opt, "serve-expired", serve_expired)
|
|
else O_DEC(opt, "serve-expired-ttl", serve_expired_ttl)
|
|
else O_YNO(opt, "serve-expired-ttl-reset", serve_expired_ttl_reset)
|
|
else O_DEC(opt, "serve-expired-reply-ttl", serve_expired_reply_ttl)
|
|
else O_DEC(opt, "serve-expired-client-timeout", serve_expired_client_timeout)
|
|
else O_YNO(opt, "ede", ede)
|
|
else O_YNO(opt, "ede-serve-expired", ede_serve_expired)
|
|
else O_DEC(opt, "iter-scrub-ns", iter_scrub_ns)
|
|
else O_DEC(opt, "iter-scrub-cname", iter_scrub_cname)
|
|
else O_DEC(opt, "max-global-quota", max_global_quota)
|
|
else O_YNO(opt, "serve-original-ttl", serve_original_ttl)
|
|
else O_STR(opt, "val-nsec3-keysize-iterations",val_nsec3_key_iterations)
|
|
else O_YNO(opt, "zonemd-permissive-mode", zonemd_permissive_mode)
|
|
else O_UNS(opt, "add-holddown", add_holddown)
|
|
else O_UNS(opt, "del-holddown", del_holddown)
|
|
else O_UNS(opt, "keep-missing", keep_missing)
|
|
else O_YNO(opt, "permit-small-holddown", permit_small_holddown)
|
|
else O_MEM(opt, "key-cache-size", key_cache_size)
|
|
else O_DEC(opt, "key-cache-slabs", key_cache_slabs)
|
|
else O_MEM(opt, "neg-cache-size", neg_cache_size)
|
|
else O_YNO(opt, "control-enable", remote_control_enable)
|
|
else O_DEC(opt, "control-port", control_port)
|
|
else O_STR(opt, "server-key-file", server_key_file)
|
|
else O_STR(opt, "server-cert-file", server_cert_file)
|
|
else O_STR(opt, "control-key-file", control_key_file)
|
|
else O_STR(opt, "control-cert-file", control_cert_file)
|
|
else O_LST(opt, "root-hints", root_hints)
|
|
else O_LS2(opt, "access-control", acls)
|
|
else O_LS2(opt, "tcp-connection-limit", tcp_connection_limits)
|
|
else O_LST(opt, "do-not-query-address", donotqueryaddrs)
|
|
else O_LST(opt, "private-address", private_address)
|
|
else O_LST(opt, "private-domain", private_domain)
|
|
else O_LST(opt, "auto-trust-anchor-file", auto_trust_anchor_file_list)
|
|
else O_LST(opt, "trust-anchor-file", trust_anchor_file_list)
|
|
else O_LST(opt, "trust-anchor", trust_anchor_list)
|
|
else O_LST(opt, "trusted-keys-file", trusted_keys_file_list)
|
|
else O_YNO(opt, "trust-anchor-signaling", trust_anchor_signaling)
|
|
else O_YNO(opt, "root-key-sentinel", root_key_sentinel)
|
|
else O_LST(opt, "control-interface", control_ifs.first)
|
|
else O_LST(opt, "domain-insecure", domain_insecure)
|
|
else O_UNS(opt, "val-override-date", val_date_override)
|
|
else O_YNO(opt, "minimal-responses", minimal_responses)
|
|
else O_YNO(opt, "rrset-roundrobin", rrset_roundrobin)
|
|
else O_DEC(opt, "unknown-server-time-limit", unknown_server_time_limit)
|
|
else O_DEC(opt, "discard-timeout", discard_timeout)
|
|
else O_DEC(opt, "wait-limit", wait_limit)
|
|
else O_DEC(opt, "wait-limit-cookie", wait_limit_cookie)
|
|
else O_LS2(opt, "wait-limit-netblock", wait_limit_netblock)
|
|
else O_LS2(opt, "wait-limit-cookie-netblock", wait_limit_cookie_netblock)
|
|
#ifdef CLIENT_SUBNET
|
|
else O_LST(opt, "send-client-subnet", client_subnet)
|
|
else O_LST(opt, "client-subnet-zone", client_subnet_zone)
|
|
else O_DEC(opt, "max-client-subnet-ipv4", max_client_subnet_ipv4)
|
|
else O_DEC(opt, "max-client-subnet-ipv6", max_client_subnet_ipv6)
|
|
else O_DEC(opt, "min-client-subnet-ipv4", min_client_subnet_ipv4)
|
|
else O_DEC(opt, "min-client-subnet-ipv6", min_client_subnet_ipv6)
|
|
else O_DEC(opt, "max-ecs-tree-size-ipv4", max_ecs_tree_size_ipv4)
|
|
else O_DEC(opt, "max-ecs-tree-size-ipv6", max_ecs_tree_size_ipv6)
|
|
else O_YNO(opt, "client-subnet-always-forward:",
|
|
client_subnet_always_forward)
|
|
#endif
|
|
#ifdef USE_DNSTAP
|
|
else O_YNO(opt, "dnstap-enable", dnstap)
|
|
else O_YNO(opt, "dnstap-bidirectional", dnstap_bidirectional)
|
|
else O_STR(opt, "dnstap-socket-path", dnstap_socket_path)
|
|
else O_STR(opt, "dnstap-ip", dnstap_ip)
|
|
else O_YNO(opt, "dnstap-tls", dnstap_tls)
|
|
else O_STR(opt, "dnstap-tls-server-name", dnstap_tls_server_name)
|
|
else O_STR(opt, "dnstap-tls-cert-bundle", dnstap_tls_cert_bundle)
|
|
else O_STR(opt, "dnstap-tls-client-key-file",
|
|
dnstap_tls_client_key_file)
|
|
else O_STR(opt, "dnstap-tls-client-cert-file",
|
|
dnstap_tls_client_cert_file)
|
|
else O_YNO(opt, "dnstap-send-identity", dnstap_send_identity)
|
|
else O_YNO(opt, "dnstap-send-version", dnstap_send_version)
|
|
else O_STR(opt, "dnstap-identity", dnstap_identity)
|
|
else O_STR(opt, "dnstap-version", dnstap_version)
|
|
else O_UNS(opt, "dnstap-sample-rate", dnstap_sample_rate)
|
|
else O_YNO(opt, "dnstap-log-resolver-query-messages",
|
|
dnstap_log_resolver_query_messages)
|
|
else O_YNO(opt, "dnstap-log-resolver-response-messages",
|
|
dnstap_log_resolver_response_messages)
|
|
else O_YNO(opt, "dnstap-log-client-query-messages",
|
|
dnstap_log_client_query_messages)
|
|
else O_YNO(opt, "dnstap-log-client-response-messages",
|
|
dnstap_log_client_response_messages)
|
|
else O_YNO(opt, "dnstap-log-forwarder-query-messages",
|
|
dnstap_log_forwarder_query_messages)
|
|
else O_YNO(opt, "dnstap-log-forwarder-response-messages",
|
|
dnstap_log_forwarder_response_messages)
|
|
#endif
|
|
#ifdef USE_DNSCRYPT
|
|
else O_YNO(opt, "dnscrypt-enable", dnscrypt)
|
|
else O_DEC(opt, "dnscrypt-port", dnscrypt_port)
|
|
else O_STR(opt, "dnscrypt-provider", dnscrypt_provider)
|
|
else O_LST(opt, "dnscrypt-provider-cert", dnscrypt_provider_cert)
|
|
else O_LST(opt, "dnscrypt-provider-cert-rotated", dnscrypt_provider_cert_rotated)
|
|
else O_LST(opt, "dnscrypt-secret-key", dnscrypt_secret_key)
|
|
else O_MEM(opt, "dnscrypt-shared-secret-cache-size",
|
|
dnscrypt_shared_secret_cache_size)
|
|
else O_DEC(opt, "dnscrypt-shared-secret-cache-slabs",
|
|
dnscrypt_shared_secret_cache_slabs)
|
|
else O_MEM(opt, "dnscrypt-nonce-cache-size",
|
|
dnscrypt_nonce_cache_size)
|
|
else O_DEC(opt, "dnscrypt-nonce-cache-slabs",
|
|
dnscrypt_nonce_cache_slabs)
|
|
#endif
|
|
else O_YNO(opt, "unblock-lan-zones", unblock_lan_zones)
|
|
else O_YNO(opt, "insecure-lan-zones", insecure_lan_zones)
|
|
else O_DEC(opt, "max-udp-size", max_udp_size)
|
|
else O_LST(opt, "python-script", python_script)
|
|
else O_LST(opt, "dynlib-file", dynlib_file)
|
|
else O_YNO(opt, "disable-dnssec-lame-check", disable_dnssec_lame_check)
|
|
else O_DEC(opt, "ip-ratelimit-cookie", ip_ratelimit_cookie)
|
|
else O_DEC(opt, "ip-ratelimit", ip_ratelimit)
|
|
else O_DEC(opt, "ratelimit", ratelimit)
|
|
else O_MEM(opt, "ip-ratelimit-size", ip_ratelimit_size)
|
|
else O_MEM(opt, "ratelimit-size", ratelimit_size)
|
|
else O_DEC(opt, "ip-ratelimit-slabs", ip_ratelimit_slabs)
|
|
else O_DEC(opt, "ratelimit-slabs", ratelimit_slabs)
|
|
else O_LS2(opt, "ratelimit-for-domain", ratelimit_for_domain)
|
|
else O_LS2(opt, "ratelimit-below-domain", ratelimit_below_domain)
|
|
else O_DEC(opt, "ip-ratelimit-factor", ip_ratelimit_factor)
|
|
else O_DEC(opt, "ratelimit-factor", ratelimit_factor)
|
|
else O_YNO(opt, "ip-ratelimit-backoff", ip_ratelimit_backoff)
|
|
else O_YNO(opt, "ratelimit-backoff", ratelimit_backoff)
|
|
else O_UNS(opt, "outbound-msg-retry", outbound_msg_retry)
|
|
else O_UNS(opt, "max-sent-count", max_sent_count)
|
|
else O_UNS(opt, "max-query-restarts", max_query_restarts)
|
|
else O_DEC(opt, "fast-server-num", fast_server_num)
|
|
else O_DEC(opt, "fast-server-permil", fast_server_permil)
|
|
else O_DEC(opt, "val-sig-skew-min", val_sig_skew_min)
|
|
else O_DEC(opt, "val-sig-skew-max", val_sig_skew_max)
|
|
else O_DEC(opt, "val-max-restart", val_max_restart)
|
|
else O_YNO(opt, "qname-minimisation", qname_minimisation)
|
|
else O_YNO(opt, "qname-minimisation-strict", qname_minimisation_strict)
|
|
else O_IFC(opt, "define-tag", num_tags, tagname)
|
|
else O_LTG(opt, "local-zone-tag", local_zone_tags)
|
|
else O_LTG(opt, "access-control-tag", acl_tags)
|
|
else O_LTG(opt, "response-ip-tag", respip_tags)
|
|
else O_LS3(opt, "local-zone-override", local_zone_overrides)
|
|
else O_LS3(opt, "access-control-tag-action", acl_tag_actions)
|
|
else O_LS3(opt, "access-control-tag-data", acl_tag_datas)
|
|
else O_LS2(opt, "access-control-view", acl_view)
|
|
else O_LS2(opt, "interface-action", interface_actions)
|
|
else O_LTG(opt, "interface-tag", interface_tags)
|
|
else O_LS3(opt, "interface-tag-action", interface_tag_actions)
|
|
else O_LS3(opt, "interface-tag-data", interface_tag_datas)
|
|
else O_LS2(opt, "interface-view", interface_view)
|
|
else O_YNO(opt, "pad-responses", pad_responses)
|
|
else O_DEC(opt, "pad-responses-block-size", pad_responses_block_size)
|
|
else O_YNO(opt, "pad-queries", pad_queries)
|
|
else O_DEC(opt, "pad-queries-block-size", pad_queries_block_size)
|
|
else O_LS2(opt, "edns-client-strings", edns_client_strings)
|
|
else O_LST(opt, "proxy-protocol-port", proxy_protocol_port)
|
|
#ifdef USE_IPSECMOD
|
|
else O_YNO(opt, "ipsecmod-enabled", ipsecmod_enabled)
|
|
else O_YNO(opt, "ipsecmod-ignore-bogus", ipsecmod_ignore_bogus)
|
|
else O_STR(opt, "ipsecmod-hook", ipsecmod_hook)
|
|
else O_DEC(opt, "ipsecmod-max-ttl", ipsecmod_max_ttl)
|
|
else O_LST(opt, "ipsecmod-whitelist", ipsecmod_whitelist)
|
|
else O_YNO(opt, "ipsecmod-strict", ipsecmod_strict)
|
|
#endif
|
|
else O_YNO(opt, "answer-cookie", do_answer_cookie)
|
|
else O_STR(opt, "cookie-secret-file", cookie_secret_file)
|
|
#ifdef USE_CACHEDB
|
|
else O_STR(opt, "backend", cachedb_backend)
|
|
else O_STR(opt, "secret-seed", cachedb_secret)
|
|
else O_YNO(opt, "cachedb-no-store", cachedb_no_store)
|
|
else O_YNO(opt, "cachedb-check-when-serve-expired", cachedb_check_when_serve_expired)
|
|
#ifdef USE_REDIS
|
|
else O_STR(opt, "redis-server-host", redis_server_host)
|
|
else O_DEC(opt, "redis-server-port", redis_server_port)
|
|
else O_STR(opt, "redis-server-path", redis_server_path)
|
|
else O_STR(opt, "redis-server-password", redis_server_password)
|
|
else O_DEC(opt, "redis-timeout", redis_timeout)
|
|
else O_DEC(opt, "redis-command-timeout", redis_command_timeout)
|
|
else O_DEC(opt, "redis-connect-timeout", redis_connect_timeout)
|
|
else O_YNO(opt, "redis-expire-records", redis_expire_records)
|
|
else O_DEC(opt, "redis-logical-db", redis_logical_db)
|
|
#endif /* USE_REDIS */
|
|
#endif /* USE_CACHEDB */
|
|
#ifdef USE_IPSET
|
|
else O_STR(opt, "name-v4", ipset_name_v4)
|
|
else O_STR(opt, "name-v6", ipset_name_v6)
|
|
#endif
|
|
/* not here:
|
|
* outgoing-permit, outgoing-avoid - have list of ports
|
|
* local-zone - zones and nodefault variables
|
|
* local-data - see below
|
|
* local-data-ptr - converted to local-data entries
|
|
* stub-zone, name, stub-addr, stub-host, stub-prime
|
|
* forward-zone, name, forward-addr, forward-host
|
|
*/
|
|
else return 0;
|
|
return 1;
|
|
}
|
|
|
|
/** initialize the global cfg_parser object */
|
|
static void
|
|
create_cfg_parser(struct config_file* cfg, char* filename, const char* chroot)
|
|
{
|
|
static struct config_parser_state st;
|
|
cfg_parser = &st;
|
|
cfg_parser->filename = filename;
|
|
cfg_parser->line = 1;
|
|
cfg_parser->errors = 0;
|
|
cfg_parser->cfg = cfg;
|
|
cfg_parser->chroot = chroot;
|
|
cfg_parser->started_toplevel = 0;
|
|
init_cfg_parse();
|
|
}
|
|
|
|
int
|
|
config_read(struct config_file* cfg, const char* filename, const char* chroot)
|
|
{
|
|
FILE *in;
|
|
char *fname = (char*)filename;
|
|
#ifdef HAVE_GLOB
|
|
glob_t g;
|
|
size_t i;
|
|
int r, flags;
|
|
#endif
|
|
if(!fname)
|
|
return 1;
|
|
|
|
/* check for wildcards */
|
|
#ifdef HAVE_GLOB
|
|
if(!(!strchr(fname, '*') && !strchr(fname, '?') && !strchr(fname, '[') &&
|
|
!strchr(fname, '{') && !strchr(fname, '~'))) {
|
|
verbose(VERB_QUERY, "wildcard found, processing %s", fname);
|
|
flags = 0
|
|
#ifdef GLOB_ERR
|
|
| GLOB_ERR
|
|
#endif
|
|
#ifdef GLOB_NOSORT
|
|
| GLOB_NOSORT
|
|
#endif
|
|
#ifdef GLOB_BRACE
|
|
| GLOB_BRACE
|
|
#endif
|
|
#ifdef GLOB_TILDE
|
|
| GLOB_TILDE
|
|
#endif
|
|
;
|
|
memset(&g, 0, sizeof(g));
|
|
r = glob(fname, flags, NULL, &g);
|
|
if(r) {
|
|
/* some error */
|
|
globfree(&g);
|
|
if(r == GLOB_NOMATCH) {
|
|
verbose(VERB_QUERY, "include: "
|
|
"no matches for %s", fname);
|
|
return 1;
|
|
} else if(r == GLOB_NOSPACE) {
|
|
log_err("include: %s: "
|
|
"fnametern out of memory", fname);
|
|
} else if(r == GLOB_ABORTED) {
|
|
log_err("wildcard include: %s: expansion "
|
|
"aborted (%s)", fname, strerror(errno));
|
|
} else {
|
|
log_err("wildcard include: %s: expansion "
|
|
"failed (%s)", fname, strerror(errno));
|
|
}
|
|
/* ignore globs that yield no files */
|
|
return 1;
|
|
}
|
|
/* process files found, if any */
|
|
for(i=0; i<(size_t)g.gl_pathc; i++) {
|
|
if(!config_read(cfg, g.gl_pathv[i], chroot)) {
|
|
log_err("error reading wildcard "
|
|
"include: %s", g.gl_pathv[i]);
|
|
globfree(&g);
|
|
return 0;
|
|
}
|
|
}
|
|
globfree(&g);
|
|
return 1;
|
|
}
|
|
#endif /* HAVE_GLOB */
|
|
|
|
in = fopen(fname, "r");
|
|
if(!in) {
|
|
log_err("Could not open %s: %s", fname, strerror(errno));
|
|
return 0;
|
|
}
|
|
create_cfg_parser(cfg, fname, chroot);
|
|
ub_c_in = in;
|
|
ub_c_parse();
|
|
fclose(in);
|
|
|
|
if(!cfg->dnscrypt) cfg->dnscrypt_port = 0;
|
|
|
|
if(cfg_parser->errors != 0) {
|
|
fprintf(stderr, "read %s failed: %d errors in configuration file\n",
|
|
fname, cfg_parser->errors);
|
|
errno=EINVAL;
|
|
return 0;
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
struct config_stub* cfg_stub_find(struct config_stub*** pp, const char* nm)
|
|
{
|
|
struct config_stub* p = *(*pp);
|
|
while(p) {
|
|
if(strcmp(p->name, nm) == 0)
|
|
return p;
|
|
(*pp) = &p->next;
|
|
p = p->next;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
void
|
|
config_delstrlist(struct config_strlist* p)
|
|
{
|
|
struct config_strlist *np;
|
|
while(p) {
|
|
np = p->next;
|
|
free(p->str);
|
|
free(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_deldblstrlist(struct config_str2list* p)
|
|
{
|
|
struct config_str2list *np;
|
|
while(p) {
|
|
np = p->next;
|
|
free(p->str);
|
|
free(p->str2);
|
|
free(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_deltrplstrlist(struct config_str3list* p)
|
|
{
|
|
struct config_str3list *np;
|
|
while(p) {
|
|
np = p->next;
|
|
free(p->str);
|
|
free(p->str2);
|
|
free(p->str3);
|
|
free(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_delauth(struct config_auth* p)
|
|
{
|
|
if(!p) return;
|
|
free(p->name);
|
|
config_delstrlist(p->masters);
|
|
config_delstrlist(p->urls);
|
|
config_delstrlist(p->allow_notify);
|
|
free(p->zonefile);
|
|
free(p->rpz_taglist);
|
|
free(p->rpz_action_override);
|
|
free(p->rpz_cname);
|
|
free(p->rpz_log_name);
|
|
free(p);
|
|
}
|
|
|
|
void
|
|
config_delauths(struct config_auth* p)
|
|
{
|
|
struct config_auth* np;
|
|
while(p) {
|
|
np = p->next;
|
|
config_delauth(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_delstub(struct config_stub* p)
|
|
{
|
|
if(!p) return;
|
|
free(p->name);
|
|
config_delstrlist(p->hosts);
|
|
config_delstrlist(p->addrs);
|
|
free(p);
|
|
}
|
|
|
|
void
|
|
config_delstubs(struct config_stub* p)
|
|
{
|
|
struct config_stub* np;
|
|
while(p) {
|
|
np = p->next;
|
|
config_delstub(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_delview(struct config_view* p)
|
|
{
|
|
if(!p) return;
|
|
free(p->name);
|
|
config_deldblstrlist(p->local_zones);
|
|
config_delstrlist(p->local_zones_nodefault);
|
|
#ifdef USE_IPSET
|
|
config_delstrlist(p->local_zones_ipset);
|
|
#endif
|
|
config_delstrlist(p->local_data);
|
|
free(p);
|
|
}
|
|
|
|
void
|
|
config_delviews(struct config_view* p)
|
|
{
|
|
struct config_view* np;
|
|
while(p) {
|
|
np = p->next;
|
|
config_delview(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_del_strarray(char** array, int num)
|
|
{
|
|
int i;
|
|
if(!array)
|
|
return;
|
|
for(i=0; i<num; i++) {
|
|
free(array[i]);
|
|
}
|
|
free(array);
|
|
}
|
|
|
|
void
|
|
config_del_strbytelist(struct config_strbytelist* p)
|
|
{
|
|
struct config_strbytelist* np;
|
|
while(p) {
|
|
np = p->next;
|
|
free(p->str);
|
|
free(p->str2);
|
|
free(p);
|
|
p = np;
|
|
}
|
|
}
|
|
|
|
void
|
|
config_delete(struct config_file* cfg)
|
|
{
|
|
if(!cfg) return;
|
|
free(cfg->username);
|
|
free(cfg->chrootdir);
|
|
free(cfg->directory);
|
|
free(cfg->logfile);
|
|
free(cfg->pidfile);
|
|
free(cfg->if_automatic_ports);
|
|
free(cfg->target_fetch_policy);
|
|
free(cfg->ssl_service_key);
|
|
free(cfg->ssl_service_pem);
|
|
free(cfg->tls_cert_bundle);
|
|
config_delstrlist(cfg->tls_additional_port);
|
|
config_delstrlist(cfg->tls_session_ticket_keys.first);
|
|
free(cfg->tls_ciphers);
|
|
free(cfg->tls_ciphersuites);
|
|
free(cfg->http_endpoint);
|
|
if(cfg->log_identity) {
|
|
log_ident_revert_to_default();
|
|
free(cfg->log_identity);
|
|
}
|
|
config_del_strarray(cfg->ifs, cfg->num_ifs);
|
|
config_del_strarray(cfg->out_ifs, cfg->num_out_ifs);
|
|
config_delstubs(cfg->stubs);
|
|
config_delstubs(cfg->forwards);
|
|
config_delauths(cfg->auths);
|
|
config_delviews(cfg->views);
|
|
config_delstrlist(cfg->donotqueryaddrs);
|
|
config_delstrlist(cfg->root_hints);
|
|
#ifdef CLIENT_SUBNET
|
|
config_delstrlist(cfg->client_subnet);
|
|
config_delstrlist(cfg->client_subnet_zone);
|
|
#endif
|
|
free(cfg->identity);
|
|
free(cfg->version);
|
|
free(cfg->http_user_agent);
|
|
free(cfg->nsid_cfg_str);
|
|
free(cfg->nsid);
|
|
free(cfg->module_conf);
|
|
free(cfg->outgoing_avail_ports);
|
|
config_delstrlist(cfg->caps_whitelist);
|
|
config_delstrlist(cfg->private_address);
|
|
config_delstrlist(cfg->private_domain);
|
|
config_delstrlist(cfg->auto_trust_anchor_file_list);
|
|
config_delstrlist(cfg->trust_anchor_file_list);
|
|
config_delstrlist(cfg->trusted_keys_file_list);
|
|
config_delstrlist(cfg->trust_anchor_list);
|
|
config_delstrlist(cfg->domain_insecure);
|
|
config_deldblstrlist(cfg->acls);
|
|
config_deldblstrlist(cfg->tcp_connection_limits);
|
|
free(cfg->val_nsec3_key_iterations);
|
|
config_deldblstrlist(cfg->local_zones);
|
|
config_delstrlist(cfg->local_zones_nodefault);
|
|
#ifdef USE_IPSET
|
|
config_delstrlist(cfg->local_zones_ipset);
|
|
#endif
|
|
config_delstrlist(cfg->local_data);
|
|
config_deltrplstrlist(cfg->local_zone_overrides);
|
|
config_del_strarray(cfg->tagname, cfg->num_tags);
|
|
config_del_strbytelist(cfg->local_zone_tags);
|
|
config_del_strbytelist(cfg->respip_tags);
|
|
config_deldblstrlist(cfg->acl_view);
|
|
config_del_strbytelist(cfg->acl_tags);
|
|
config_deltrplstrlist(cfg->acl_tag_actions);
|
|
config_deltrplstrlist(cfg->acl_tag_datas);
|
|
config_deldblstrlist(cfg->interface_actions);
|
|
config_deldblstrlist(cfg->interface_view);
|
|
config_del_strbytelist(cfg->interface_tags);
|
|
config_deltrplstrlist(cfg->interface_tag_actions);
|
|
config_deltrplstrlist(cfg->interface_tag_datas);
|
|
config_delstrlist(cfg->control_ifs.first);
|
|
config_deldblstrlist(cfg->wait_limit_netblock);
|
|
config_deldblstrlist(cfg->wait_limit_cookie_netblock);
|
|
free(cfg->server_key_file);
|
|
free(cfg->server_cert_file);
|
|
free(cfg->control_key_file);
|
|
free(cfg->control_cert_file);
|
|
free(cfg->nat64_prefix);
|
|
free(cfg->dns64_prefix);
|
|
config_delstrlist(cfg->dns64_ignore_aaaa);
|
|
free(cfg->dnstap_socket_path);
|
|
free(cfg->dnstap_ip);
|
|
free(cfg->dnstap_tls_server_name);
|
|
free(cfg->dnstap_tls_cert_bundle);
|
|
free(cfg->dnstap_tls_client_key_file);
|
|
free(cfg->dnstap_tls_client_cert_file);
|
|
free(cfg->dnstap_identity);
|
|
free(cfg->dnstap_version);
|
|
config_deldblstrlist(cfg->ratelimit_for_domain);
|
|
config_deldblstrlist(cfg->ratelimit_below_domain);
|
|
config_delstrlist(cfg->python_script);
|
|
config_delstrlist(cfg->dynlib_file);
|
|
config_deldblstrlist(cfg->edns_client_strings);
|
|
config_delstrlist(cfg->proxy_protocol_port);
|
|
#ifdef USE_IPSECMOD
|
|
free(cfg->ipsecmod_hook);
|
|
config_delstrlist(cfg->ipsecmod_whitelist);
|
|
#endif
|
|
free(cfg->cookie_secret_file);
|
|
#ifdef USE_CACHEDB
|
|
free(cfg->cachedb_backend);
|
|
free(cfg->cachedb_secret);
|
|
#ifdef USE_REDIS
|
|
free(cfg->redis_server_host);
|
|
free(cfg->redis_server_path);
|
|
free(cfg->redis_server_password);
|
|
#endif /* USE_REDIS */
|
|
#endif /* USE_CACHEDB */
|
|
#ifdef USE_IPSET
|
|
free(cfg->ipset_name_v4);
|
|
free(cfg->ipset_name_v6);
|
|
#endif
|
|
free(cfg);
|
|
}
|
|
|
|
static void
|
|
init_cookie_secret(uint8_t* cookie_secret, size_t cookie_secret_len)
|
|
{
|
|
struct ub_randstate *rand = ub_initstate(NULL);
|
|
|
|
if (!rand)
|
|
fatal_exit("could not init random generator");
|
|
while (cookie_secret_len) {
|
|
*cookie_secret++ = (uint8_t)ub_random(rand);
|
|
cookie_secret_len--;
|
|
}
|
|
ub_randfree(rand);
|
|
}
|
|
|
|
static void
|
|
init_outgoing_availports(int* a, int num)
|
|
{
|
|
/* generated with make iana_update */
|
|
const int iana_assigned[] = {
|
|
#include "util/iana_ports.inc"
|
|
-1 }; /* end marker to put behind trailing comma */
|
|
|
|
int i;
|
|
/* do not use <1024, that could be trouble with the system, privs */
|
|
for(i=1024; i<num; i++) {
|
|
a[i] = i;
|
|
}
|
|
/* create empty spot at 49152 to keep ephemeral ports available
|
|
* to other programs */
|
|
for(i=49152; i<49152+256; i++)
|
|
a[i] = 0;
|
|
/* pick out all the IANA assigned ports */
|
|
for(i=0; iana_assigned[i]!=-1; i++) {
|
|
if(iana_assigned[i] < num)
|
|
a[iana_assigned[i]] = 0;
|
|
}
|
|
}
|
|
|
|
static int
|
|
extract_port_from_str(const char* str, int max_port) {
|
|
char* endptr;
|
|
long int value;
|
|
if (str == NULL || *str == '\0') {
|
|
log_err("str: '%s' is invalid", (str?str:"NULL"));
|
|
return -1;
|
|
}
|
|
|
|
value = strtol(str, &endptr, 10);
|
|
if ((endptr == str) || (*endptr != '\0')) {
|
|
log_err("cannot parse port number '%s'", str);
|
|
return -1;
|
|
}
|
|
|
|
if (errno == ERANGE) {
|
|
log_err("overflow occurred when parsing '%s'", str);
|
|
return -1;
|
|
}
|
|
|
|
if (value == 0 && strcmp(str, "0") != 0) {
|
|
log_err("cannot parse port number '%s'", str);
|
|
return -1;
|
|
}
|
|
|
|
if (value < 0 || value >= max_port) {
|
|
log_err(" '%s' is out of bounds [0, %d)", str, max_port);
|
|
return -1;
|
|
}
|
|
|
|
return (int)value;
|
|
}
|
|
|
|
int
|
|
cfg_mark_ports(const char* str, int allow, int* avail, int num)
|
|
{
|
|
char* mid = strchr(str, '-');
|
|
#ifdef DISABLE_EXPLICIT_PORT_RANDOMISATION
|
|
log_warn("Explicit port randomisation disabled, ignoring "
|
|
"outgoing-port-permit and outgoing-port-avoid configuration "
|
|
"options");
|
|
#endif
|
|
if(!mid) {
|
|
int port = extract_port_from_str(str, num);
|
|
if (port < 0) {
|
|
log_err("Failed to parse the port number");
|
|
return 0;
|
|
}
|
|
if(port < num)
|
|
avail[port] = (allow?port:0);
|
|
} else {
|
|
char buf[16];
|
|
int i, low;
|
|
int high = extract_port_from_str(mid+1, num);
|
|
if (high < 0) {
|
|
log_err("Failed to parse the port number");
|
|
return 0;
|
|
}
|
|
|
|
if( (int)(mid-str)+1 >= (int)sizeof(buf) ) {
|
|
log_err("cannot parse port number '%s'", str);
|
|
return 0;
|
|
}
|
|
|
|
if(mid > str)
|
|
memcpy(buf, str, (size_t)(mid-str));
|
|
buf[mid-str] = 0;
|
|
low = extract_port_from_str(buf, num);
|
|
if (low < 0) {
|
|
log_err("Failed to parse the port number");
|
|
return 0;
|
|
}
|
|
|
|
if (low > high) {
|
|
log_err("Low value is greater than high value");
|
|
return 0;
|
|
}
|
|
|
|
for(i=low; i<=high; i++) {
|
|
if(i < num)
|
|
avail[i] = (allow?i:0);
|
|
}
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_scan_ports(int* avail, int num)
|
|
{
|
|
int i;
|
|
int count = 0;
|
|
for(i=0; i<num; i++) {
|
|
if(avail[i])
|
|
count++;
|
|
}
|
|
return count;
|
|
}
|
|
|
|
int cfg_condense_ports(struct config_file* cfg, int** avail)
|
|
{
|
|
int num = cfg_scan_ports(cfg->outgoing_avail_ports, 65536);
|
|
int i, at = 0;
|
|
*avail = NULL;
|
|
if(num == 0)
|
|
return 0;
|
|
*avail = (int*)reallocarray(NULL, (size_t)num, sizeof(int));
|
|
if(!*avail)
|
|
return 0;
|
|
for(i=0; i<65536; i++) {
|
|
if(cfg->outgoing_avail_ports[i])
|
|
(*avail)[at++] = cfg->outgoing_avail_ports[i];
|
|
}
|
|
log_assert(at == num);
|
|
return num;
|
|
}
|
|
|
|
void cfg_apply_local_port_policy(struct config_file* cfg, int num) {
|
|
(void)cfg;
|
|
(void)num;
|
|
#ifdef USE_LINUX_IP_LOCAL_PORT_RANGE
|
|
{
|
|
int i = 0;
|
|
FILE* range_fd;
|
|
if ((range_fd = fopen(LINUX_IP_LOCAL_PORT_RANGE_PATH, "r")) != NULL) {
|
|
int min_port = 0;
|
|
int max_port = num - 1;
|
|
if (fscanf(range_fd, "%d %d", &min_port, &max_port) == 2) {
|
|
for(i=0; i<min_port; i++) {
|
|
cfg->outgoing_avail_ports[i] = 0;
|
|
}
|
|
for(i=max_port+1; i<num; i++) {
|
|
cfg->outgoing_avail_ports[i] = 0;
|
|
}
|
|
} else {
|
|
log_err("unexpected port range in %s",
|
|
LINUX_IP_LOCAL_PORT_RANGE_PATH);
|
|
}
|
|
fclose(range_fd);
|
|
} else {
|
|
log_err("failed to read from file: %s (%s)",
|
|
LINUX_IP_LOCAL_PORT_RANGE_PATH,
|
|
strerror(errno));
|
|
}
|
|
}
|
|
#endif
|
|
}
|
|
|
|
/** print error with file and line number */
|
|
static void ub_c_error_va_list(const char *fmt, va_list args)
|
|
{
|
|
cfg_parser->errors++;
|
|
fprintf(stderr, "%s:%d: error: ", cfg_parser->filename,
|
|
cfg_parser->line);
|
|
vfprintf(stderr, fmt, args);
|
|
fprintf(stderr, "\n");
|
|
}
|
|
|
|
/** print error with file and line number */
|
|
void ub_c_error_msg(const char* fmt, ...)
|
|
{
|
|
va_list args;
|
|
va_start(args, fmt);
|
|
ub_c_error_va_list(fmt, args);
|
|
va_end(args);
|
|
}
|
|
|
|
void ub_c_error(const char *str)
|
|
{
|
|
cfg_parser->errors++;
|
|
if(strcmp(str, "syntax error")==0 && cfg_parser->started_toplevel ==0)
|
|
str = "syntax error, is there no section start after an "
|
|
"include-toplevel directive perhaps.";
|
|
fprintf(stderr, "%s:%d: error: %s\n", cfg_parser->filename,
|
|
cfg_parser->line, str);
|
|
}
|
|
|
|
int ub_c_wrap(void)
|
|
{
|
|
return 1;
|
|
}
|
|
|
|
int cfg_strlist_append(struct config_strlist_head* list, char* item)
|
|
{
|
|
struct config_strlist *s;
|
|
if(!item || !list) {
|
|
free(item);
|
|
return 0;
|
|
}
|
|
s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist));
|
|
if(!s) {
|
|
free(item);
|
|
return 0;
|
|
}
|
|
s->str = item;
|
|
s->next = NULL;
|
|
if(list->last)
|
|
list->last->next = s;
|
|
else
|
|
list->first = s;
|
|
list->last = s;
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_region_strlist_insert(struct regional* region,
|
|
struct config_strlist** head, char* item)
|
|
{
|
|
struct config_strlist *s;
|
|
if(!item || !head)
|
|
return 0;
|
|
s = (struct config_strlist*)regional_alloc_zero(region,
|
|
sizeof(struct config_strlist));
|
|
if(!s)
|
|
return 0;
|
|
s->str = item;
|
|
s->next = *head;
|
|
*head = s;
|
|
return 1;
|
|
}
|
|
|
|
struct config_strlist*
|
|
cfg_strlist_find(struct config_strlist* head, const char *item)
|
|
{
|
|
struct config_strlist *s = head;
|
|
if(!head){
|
|
return NULL;
|
|
}
|
|
while(s) {
|
|
if(strcmp(s->str, item) == 0) {
|
|
return s;
|
|
}
|
|
s = s->next;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
int
|
|
cfg_strlist_insert(struct config_strlist** head, char* item)
|
|
{
|
|
struct config_strlist *s;
|
|
if(!item || !head) {
|
|
free(item);
|
|
return 0;
|
|
}
|
|
s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist));
|
|
if(!s) {
|
|
free(item);
|
|
return 0;
|
|
}
|
|
s->str = item;
|
|
s->next = *head;
|
|
*head = s;
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_strlist_append_ex(struct config_strlist** head, char* item)
|
|
{
|
|
struct config_strlist *s;
|
|
if(!item || !head)
|
|
return 0;
|
|
s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist));
|
|
if(!s)
|
|
return 0;
|
|
s->str = item;
|
|
s->next = NULL;
|
|
|
|
if (*head==NULL) {
|
|
*head = s;
|
|
} else {
|
|
struct config_strlist *last = *head;
|
|
while (last->next!=NULL) {
|
|
last = last->next;
|
|
}
|
|
last->next = s;
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_str2list_insert(struct config_str2list** head, char* item, char* i2)
|
|
{
|
|
struct config_str2list *s;
|
|
if(!item || !i2 || !head) {
|
|
free(item);
|
|
free(i2);
|
|
return 0;
|
|
}
|
|
s = (struct config_str2list*)calloc(1, sizeof(struct config_str2list));
|
|
if(!s) {
|
|
free(item);
|
|
free(i2);
|
|
return 0;
|
|
}
|
|
s->str = item;
|
|
s->str2 = i2;
|
|
s->next = *head;
|
|
*head = s;
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_str3list_insert(struct config_str3list** head, char* item, char* i2,
|
|
char* i3)
|
|
{
|
|
struct config_str3list *s;
|
|
if(!item || !i2 || !i3 || !head)
|
|
return 0;
|
|
s = (struct config_str3list*)calloc(1, sizeof(struct config_str3list));
|
|
if(!s)
|
|
return 0;
|
|
s->str = item;
|
|
s->str2 = i2;
|
|
s->str3 = i3;
|
|
s->next = *head;
|
|
*head = s;
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_strbytelist_insert(struct config_strbytelist** head, char* item,
|
|
uint8_t* i2, size_t i2len)
|
|
{
|
|
struct config_strbytelist* s;
|
|
if(!item || !i2 || !head)
|
|
return 0;
|
|
s = (struct config_strbytelist*)calloc(1, sizeof(*s));
|
|
if(!s)
|
|
return 0;
|
|
s->str = item;
|
|
s->str2 = i2;
|
|
s->str2len = i2len;
|
|
s->next = *head;
|
|
*head = s;
|
|
return 1;
|
|
}
|
|
|
|
time_t
|
|
cfg_convert_timeval(const char* str)
|
|
{
|
|
time_t t;
|
|
struct tm tm;
|
|
memset(&tm, 0, sizeof(tm));
|
|
if(strlen(str) < 14)
|
|
return 0;
|
|
if(sscanf(str, "%4d%2d%2d%2d%2d%2d", &tm.tm_year, &tm.tm_mon,
|
|
&tm.tm_mday, &tm.tm_hour, &tm.tm_min, &tm.tm_sec) != 6)
|
|
return 0;
|
|
tm.tm_year -= 1900;
|
|
tm.tm_mon--;
|
|
/* Check values */
|
|
if (tm.tm_year < 70) return 0;
|
|
if (tm.tm_mon < 0 || tm.tm_mon > 11) return 0;
|
|
if (tm.tm_mday < 1 || tm.tm_mday > 31) return 0;
|
|
if (tm.tm_hour < 0 || tm.tm_hour > 23) return 0;
|
|
if (tm.tm_min < 0 || tm.tm_min > 59) return 0;
|
|
if (tm.tm_sec < 0 || tm.tm_sec > 59) return 0;
|
|
/* call ldns conversion function */
|
|
t = sldns_mktime_from_utc(&tm);
|
|
return t;
|
|
}
|
|
|
|
int
|
|
cfg_count_numbers(const char* s)
|
|
{
|
|
/* format ::= (sp num)+ sp */
|
|
/* num ::= [-](0-9)+ */
|
|
/* sp ::= (space|tab)* */
|
|
int num = 0;
|
|
while(*s) {
|
|
while(*s && isspace((unsigned char)*s))
|
|
s++;
|
|
if(!*s) /* end of string */
|
|
break;
|
|
if(*s == '-')
|
|
s++;
|
|
if(!*s) /* only - not allowed */
|
|
return 0;
|
|
if(!isdigit((unsigned char)*s)) /* bad character */
|
|
return 0;
|
|
while(*s && isdigit((unsigned char)*s))
|
|
s++;
|
|
num++;
|
|
}
|
|
return num;
|
|
}
|
|
|
|
/** all digit number */
|
|
static int isalldigit(const char* str, size_t l)
|
|
{
|
|
size_t i;
|
|
for(i=0; i<l; i++)
|
|
if(!isdigit((unsigned char)str[i]))
|
|
return 0;
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
cfg_parse_memsize(const char* str, size_t* res)
|
|
{
|
|
size_t len;
|
|
size_t mult = 1;
|
|
if(!str || (len=(size_t)strlen(str)) == 0) {
|
|
log_err("not a size: '%s'", str);
|
|
return 0;
|
|
}
|
|
if(isalldigit(str, len)) {
|
|
*res = (size_t)atol(str);
|
|
return 1;
|
|
}
|
|
/* check appended num */
|
|
while(len>0 && str[len-1]==' ')
|
|
len--;
|
|
if(len > 1 && str[len-1] == 'b')
|
|
len--;
|
|
else if(len > 1 && str[len-1] == 'B')
|
|
len--;
|
|
|
|
if(len > 1 && tolower((unsigned char)str[len-1]) == 'g')
|
|
mult = 1024*1024*1024;
|
|
else if(len > 1 && tolower((unsigned char)str[len-1]) == 'm')
|
|
mult = 1024*1024;
|
|
else if(len > 1 && tolower((unsigned char)str[len-1]) == 'k')
|
|
mult = 1024;
|
|
else if(len > 0 && isdigit((unsigned char)str[len-1]))
|
|
mult = 1;
|
|
else {
|
|
log_err("unknown size specifier: '%s'", str);
|
|
return 0;
|
|
}
|
|
while(len>1 && str[len-2]==' ')
|
|
len--;
|
|
|
|
if(!isalldigit(str, len-1)) {
|
|
log_err("unknown size specifier: '%s'", str);
|
|
return 0;
|
|
}
|
|
*res = ((size_t)atol(str)) * mult;
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
find_tag_id(struct config_file* cfg, const char* tag)
|
|
{
|
|
int i;
|
|
for(i=0; i<cfg->num_tags; i++) {
|
|
if(strcmp(cfg->tagname[i], tag) == 0)
|
|
return i;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
int
|
|
config_add_tag(struct config_file* cfg, const char* tag)
|
|
{
|
|
char** newarray;
|
|
char* newtag;
|
|
if(find_tag_id(cfg, tag) != -1)
|
|
return 1; /* nothing to do */
|
|
newarray = (char**)malloc(sizeof(char*)*(cfg->num_tags+1));
|
|
if(!newarray)
|
|
return 0;
|
|
newtag = strdup(tag);
|
|
if(!newtag) {
|
|
free(newarray);
|
|
return 0;
|
|
}
|
|
if(cfg->tagname) {
|
|
memcpy(newarray, cfg->tagname, sizeof(char*)*cfg->num_tags);
|
|
free(cfg->tagname);
|
|
}
|
|
newarray[cfg->num_tags++] = newtag;
|
|
cfg->tagname = newarray;
|
|
return 1;
|
|
}
|
|
|
|
/** set a bit in a bit array */
|
|
static void
|
|
cfg_set_bit(uint8_t* bitlist, size_t len, int id)
|
|
{
|
|
int pos = id/8;
|
|
log_assert((size_t)pos < len);
|
|
(void)len;
|
|
bitlist[pos] |= 1<<(id%8);
|
|
}
|
|
|
|
uint8_t* config_parse_taglist(struct config_file* cfg, char* str,
|
|
size_t* listlen)
|
|
{
|
|
uint8_t* taglist = NULL;
|
|
size_t len = 0;
|
|
char* p, *s;
|
|
|
|
/* allocate */
|
|
if(cfg->num_tags == 0) {
|
|
log_err("parse taglist, but no tags defined");
|
|
return 0;
|
|
}
|
|
len = (size_t)(cfg->num_tags+7)/8;
|
|
taglist = calloc(1, len);
|
|
if(!taglist) {
|
|
log_err("out of memory");
|
|
return 0;
|
|
}
|
|
|
|
/* parse */
|
|
s = str;
|
|
while((p=strsep(&s, " \t\n")) != NULL) {
|
|
if(*p) {
|
|
int id = find_tag_id(cfg, p);
|
|
/* set this bit in the bitlist */
|
|
if(id == -1) {
|
|
log_err("unknown tag: %s", p);
|
|
free(taglist);
|
|
return 0;
|
|
}
|
|
cfg_set_bit(taglist, len, id);
|
|
}
|
|
}
|
|
|
|
*listlen = len;
|
|
return taglist;
|
|
}
|
|
|
|
uint8_t* cfg_parse_nsid(const char* str, uint16_t* nsid_len)
|
|
{
|
|
uint8_t* nsid = NULL;
|
|
|
|
if (strncasecmp(str, "ascii_", 6) == 0) {
|
|
if ((nsid = (uint8_t *)strdup(str + 6)))
|
|
*nsid_len = strlen(str + 6);
|
|
|
|
} else if (strlen(str) % 2) {
|
|
; /* hex string has even number of characters */
|
|
}
|
|
|
|
else if (*str && (nsid = calloc(1, strlen(str) / 2))) {
|
|
const char *ch;
|
|
uint8_t *dp;
|
|
|
|
for ( ch = str, dp = nsid
|
|
; isxdigit((unsigned char)ch[0]) && isxdigit((unsigned char)ch[1])
|
|
; ch += 2, dp++) {
|
|
*dp = (uint8_t)sldns_hexdigit_to_int(ch[0]) * 16;
|
|
*dp += (uint8_t)sldns_hexdigit_to_int(ch[1]);
|
|
}
|
|
if (*ch) {
|
|
free(nsid);
|
|
nsid = NULL;
|
|
} else
|
|
*nsid_len = strlen(str) / 2;
|
|
}
|
|
return nsid;
|
|
}
|
|
|
|
|
|
char* config_taglist2str(struct config_file* cfg, uint8_t* taglist,
|
|
size_t taglen)
|
|
{
|
|
char buf[10240];
|
|
size_t i, j, len = 0;
|
|
buf[0] = 0;
|
|
for(i=0; i<taglen; i++) {
|
|
if(taglist[i] == 0)
|
|
continue;
|
|
for(j=0; j<8; j++) {
|
|
if((taglist[i] & (1<<j)) != 0) {
|
|
size_t id = i*8 + j;
|
|
snprintf(buf+len, sizeof(buf)-len, "%s%s",
|
|
(len==0?"":" "), cfg->tagname[id]);
|
|
len += strlen(buf+len);
|
|
}
|
|
}
|
|
}
|
|
return strdup(buf);
|
|
}
|
|
|
|
int taglist_intersect(uint8_t* list1, size_t list1len, const uint8_t* list2,
|
|
size_t list2len)
|
|
{
|
|
size_t i;
|
|
if(!list1 || !list2)
|
|
return 0;
|
|
for(i=0; i<list1len && i<list2len; i++) {
|
|
if((list1[i] & list2[i]) != 0)
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
void
|
|
config_apply(struct config_file* config)
|
|
{
|
|
MAX_TTL = (time_t)config->max_ttl;
|
|
MIN_TTL = (time_t)config->min_ttl;
|
|
SERVE_EXPIRED = config->serve_expired;
|
|
SERVE_EXPIRED_TTL = (time_t)config->serve_expired_ttl;
|
|
SERVE_EXPIRED_TTL_RESET = config->serve_expired_ttl_reset;
|
|
SERVE_EXPIRED_REPLY_TTL = (time_t)config->serve_expired_reply_ttl;
|
|
SERVE_ORIGINAL_TTL = config->serve_original_ttl;
|
|
MAX_NEG_TTL = (time_t)config->max_negative_ttl;
|
|
MIN_NEG_TTL = (time_t)config->min_negative_ttl;
|
|
RTT_MIN_TIMEOUT = config->infra_cache_min_rtt;
|
|
RTT_MAX_TIMEOUT = config->infra_cache_max_rtt;
|
|
EDNS_ADVERTISED_SIZE = (uint16_t)config->edns_buffer_size;
|
|
MINIMAL_RESPONSES = config->minimal_responses;
|
|
RRSET_ROUNDROBIN = config->rrset_roundrobin;
|
|
LOG_TAG_QUERYREPLY = config->log_tag_queryreply;
|
|
MAX_GLOBAL_QUOTA = config->max_global_quota;
|
|
UNKNOWN_SERVER_NICENESS = config->unknown_server_time_limit;
|
|
USEFUL_SERVER_TOP_TIMEOUT = RTT_MAX_TIMEOUT;
|
|
BLACKLIST_PENALTY = USEFUL_SERVER_TOP_TIMEOUT*4;
|
|
log_set_time_asc(config->log_time_ascii);
|
|
log_set_time_iso(config->log_time_iso);
|
|
autr_permit_small_holddown = config->permit_small_holddown;
|
|
stream_wait_max = config->stream_wait_size;
|
|
http2_query_buffer_max = config->http_query_buffer_size;
|
|
http2_response_buffer_max = config->http_response_buffer_size;
|
|
}
|
|
|
|
void config_lookup_uid(struct config_file* cfg)
|
|
{
|
|
#ifdef HAVE_GETPWNAM
|
|
/* translate username into uid and gid */
|
|
if(cfg->username && cfg->username[0]) {
|
|
struct passwd *pwd;
|
|
if((pwd = getpwnam(cfg->username)) != NULL) {
|
|
cfg_uid = pwd->pw_uid;
|
|
cfg_gid = pwd->pw_gid;
|
|
}
|
|
}
|
|
#else
|
|
(void)cfg;
|
|
#endif
|
|
}
|
|
|
|
/**
|
|
* Calculate string length of full pathname in original filesys
|
|
* @param fname: the path name to convert.
|
|
* Must not be null or empty.
|
|
* @param cfg: config struct for chroot and chdir (if set).
|
|
* @param use_chdir: if false, only chroot is applied.
|
|
* @return length of string.
|
|
* remember to allocate one more for 0 at end in mallocs.
|
|
*/
|
|
static size_t
|
|
strlen_after_chroot(const char* fname, struct config_file* cfg, int use_chdir)
|
|
{
|
|
size_t len = 0;
|
|
int slashit = 0;
|
|
if(cfg->chrootdir && cfg->chrootdir[0] &&
|
|
strncmp(cfg->chrootdir, fname, strlen(cfg->chrootdir)) == 0) {
|
|
/* already full pathname, return it */
|
|
return strlen(fname);
|
|
}
|
|
/* chroot */
|
|
if(cfg->chrootdir && cfg->chrootdir[0]) {
|
|
/* start with chrootdir */
|
|
len += strlen(cfg->chrootdir);
|
|
slashit = 1;
|
|
}
|
|
/* chdir */
|
|
#ifdef UB_ON_WINDOWS
|
|
if(fname[0] != 0 && fname[1] == ':') {
|
|
/* full path, no chdir */
|
|
} else
|
|
#endif
|
|
if(fname[0] == '/' || !use_chdir) {
|
|
/* full path, no chdir */
|
|
} else if(cfg->directory && cfg->directory[0]) {
|
|
/* prepend chdir */
|
|
if(slashit && cfg->directory[0] != '/')
|
|
len++;
|
|
if(cfg->chrootdir && cfg->chrootdir[0] &&
|
|
strncmp(cfg->chrootdir, cfg->directory,
|
|
strlen(cfg->chrootdir)) == 0)
|
|
len += strlen(cfg->directory)-strlen(cfg->chrootdir);
|
|
else len += strlen(cfg->directory);
|
|
slashit = 1;
|
|
}
|
|
/* fname */
|
|
if(slashit && fname[0] != '/')
|
|
len++;
|
|
len += strlen(fname);
|
|
return len;
|
|
}
|
|
|
|
char*
|
|
fname_after_chroot(const char* fname, struct config_file* cfg, int use_chdir)
|
|
{
|
|
size_t len = strlen_after_chroot(fname, cfg, use_chdir)+1;
|
|
int slashit = 0;
|
|
char* buf = (char*)malloc(len);
|
|
if(!buf)
|
|
return NULL;
|
|
buf[0] = 0;
|
|
/* is fname already in chroot ? */
|
|
if(cfg->chrootdir && cfg->chrootdir[0] &&
|
|
strncmp(cfg->chrootdir, fname, strlen(cfg->chrootdir)) == 0) {
|
|
/* already full pathname, return it */
|
|
(void)strlcpy(buf, fname, len);
|
|
buf[len-1] = 0;
|
|
return buf;
|
|
}
|
|
/* chroot */
|
|
if(cfg->chrootdir && cfg->chrootdir[0]) {
|
|
/* start with chrootdir */
|
|
(void)strlcpy(buf, cfg->chrootdir, len);
|
|
slashit = 1;
|
|
}
|
|
#ifdef UB_ON_WINDOWS
|
|
if(fname[0] != 0 && fname[1] == ':') {
|
|
/* full path, no chdir */
|
|
} else
|
|
#endif
|
|
/* chdir */
|
|
if(fname[0] == '/' || !use_chdir) {
|
|
/* full path, no chdir */
|
|
} else if(cfg->directory && cfg->directory[0]) {
|
|
/* prepend chdir */
|
|
if(slashit && cfg->directory[0] != '/')
|
|
(void)strlcat(buf, "/", len);
|
|
/* is the directory already in the chroot? */
|
|
if(cfg->chrootdir && cfg->chrootdir[0] &&
|
|
strncmp(cfg->chrootdir, cfg->directory,
|
|
strlen(cfg->chrootdir)) == 0)
|
|
(void)strlcat(buf, cfg->directory+strlen(cfg->chrootdir),
|
|
len);
|
|
else (void)strlcat(buf, cfg->directory, len);
|
|
slashit = 1;
|
|
}
|
|
/* fname */
|
|
if(slashit && fname[0] != '/')
|
|
(void)strlcat(buf, "/", len);
|
|
(void)strlcat(buf, fname, len);
|
|
buf[len-1] = 0;
|
|
return buf;
|
|
}
|
|
|
|
/** return next space character in string */
|
|
static char* next_space_pos(const char* str)
|
|
{
|
|
char* sp = strchr(str, ' ');
|
|
char* tab = strchr(str, '\t');
|
|
if(!tab && !sp)
|
|
return NULL;
|
|
if(!sp) return tab;
|
|
if(!tab) return sp;
|
|
return (sp<tab)?sp:tab;
|
|
}
|
|
|
|
/** return last space character in string */
|
|
static char* last_space_pos(const char* str)
|
|
{
|
|
char* sp = strrchr(str, ' ');
|
|
char* tab = strrchr(str, '\t');
|
|
if(!tab && !sp)
|
|
return NULL;
|
|
if(!sp) return tab;
|
|
if(!tab) return sp;
|
|
return (sp>tab)?sp:tab;
|
|
}
|
|
|
|
int
|
|
cfg_parse_local_zone(struct config_file* cfg, const char* val)
|
|
{
|
|
const char *type, *name_end, *name;
|
|
char buf[256];
|
|
|
|
/* parse it as: [zone_name] [between stuff] [zone_type] */
|
|
name = val;
|
|
while(*name && isspace((unsigned char)*name))
|
|
name++;
|
|
if(!*name) {
|
|
log_err("syntax error: too short: %s", val);
|
|
return 0;
|
|
}
|
|
name_end = next_space_pos(name);
|
|
if(!name_end || !*name_end) {
|
|
log_err("syntax error: expected zone type: %s", val);
|
|
return 0;
|
|
}
|
|
if (name_end - name > 255) {
|
|
log_err("syntax error: bad zone name: %s", val);
|
|
return 0;
|
|
}
|
|
(void)strlcpy(buf, name, sizeof(buf));
|
|
buf[name_end-name] = '\0';
|
|
|
|
type = last_space_pos(name_end);
|
|
while(type && *type && isspace((unsigned char)*type))
|
|
type++;
|
|
if(!type || !*type) {
|
|
log_err("syntax error: expected zone type: %s", val);
|
|
return 0;
|
|
}
|
|
|
|
if(strcmp(type, "nodefault")==0) {
|
|
return cfg_strlist_insert(&cfg->local_zones_nodefault,
|
|
strdup(name));
|
|
#ifdef USE_IPSET
|
|
} else if(strcmp(type, "ipset")==0) {
|
|
return cfg_strlist_insert(&cfg->local_zones_ipset,
|
|
strdup(name));
|
|
#endif
|
|
} else {
|
|
return cfg_str2list_insert(&cfg->local_zones, strdup(buf),
|
|
strdup(type));
|
|
}
|
|
}
|
|
|
|
char* cfg_ptr_reverse(char* str)
|
|
{
|
|
char* ip, *ip_end;
|
|
char* name;
|
|
char* result;
|
|
char buf[1024];
|
|
struct sockaddr_storage addr;
|
|
socklen_t addrlen;
|
|
|
|
/* parse it as: [IP] [between stuff] [name] */
|
|
ip = str;
|
|
while(*ip && isspace((unsigned char)*ip))
|
|
ip++;
|
|
if(!*ip) {
|
|
log_err("syntax error: too short: %s", str);
|
|
return NULL;
|
|
}
|
|
ip_end = next_space_pos(ip);
|
|
if(!ip_end || !*ip_end) {
|
|
log_err("syntax error: expected name: %s", str);
|
|
return NULL;
|
|
}
|
|
|
|
name = last_space_pos(ip_end);
|
|
if(!name || !*name) {
|
|
log_err("syntax error: expected name: %s", str);
|
|
return NULL;
|
|
}
|
|
|
|
sscanf(ip, "%100s", buf);
|
|
buf[sizeof(buf)-1]=0;
|
|
|
|
if(!ipstrtoaddr(buf, UNBOUND_DNS_PORT, &addr, &addrlen)) {
|
|
log_err("syntax error: cannot parse address: %s", str);
|
|
return NULL;
|
|
}
|
|
|
|
/* reverse IPv4:
|
|
* ddd.ddd.ddd.ddd.in-addr-arpa.
|
|
* IPv6: (h.){32}.ip6.arpa. */
|
|
|
|
if(addr_is_ip6(&addr, addrlen)) {
|
|
uint8_t ad[16];
|
|
const char* hex = "0123456789abcdef";
|
|
char *p = buf;
|
|
int i;
|
|
memmove(ad, &((struct sockaddr_in6*)&addr)->sin6_addr,
|
|
sizeof(ad));
|
|
for(i=15; i>=0; i--) {
|
|
uint8_t b = ad[i];
|
|
*p++ = hex[ (b&0x0f) ];
|
|
*p++ = '.';
|
|
*p++ = hex[ (b&0xf0) >> 4 ];
|
|
*p++ = '.';
|
|
}
|
|
snprintf(buf+16*4, sizeof(buf)-16*4, "ip6.arpa. ");
|
|
} else {
|
|
uint8_t ad[4];
|
|
memmove(ad, &((struct sockaddr_in*)&addr)->sin_addr,
|
|
sizeof(ad));
|
|
snprintf(buf, sizeof(buf), "%u.%u.%u.%u.in-addr.arpa. ",
|
|
(unsigned)ad[3], (unsigned)ad[2],
|
|
(unsigned)ad[1], (unsigned)ad[0]);
|
|
}
|
|
|
|
/* printed the reverse address, now the between goop and name on end */
|
|
while(*ip_end && isspace((unsigned char)*ip_end))
|
|
ip_end++;
|
|
if(name>ip_end) {
|
|
snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), "%.*s",
|
|
(int)(name-ip_end), ip_end);
|
|
}
|
|
snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), " PTR %s", name);
|
|
|
|
result = strdup(buf);
|
|
if(!result) {
|
|
log_err("out of memory parsing %s", str);
|
|
return NULL;
|
|
}
|
|
return result;
|
|
}
|
|
|
|
#ifdef UB_ON_WINDOWS
|
|
char*
|
|
w_lookup_reg_str(const char* key, const char* name)
|
|
{
|
|
HKEY hk = NULL;
|
|
DWORD type = 0;
|
|
BYTE buf[1024];
|
|
DWORD len = (DWORD)sizeof(buf);
|
|
LONG ret;
|
|
char* result = NULL;
|
|
ret = RegOpenKeyEx(HKEY_LOCAL_MACHINE, key, 0, KEY_READ, &hk);
|
|
if(ret == ERROR_FILE_NOT_FOUND)
|
|
return NULL; /* key does not exist */
|
|
else if(ret != ERROR_SUCCESS) {
|
|
log_err("RegOpenKeyEx failed");
|
|
return NULL;
|
|
}
|
|
ret = RegQueryValueEx(hk, (LPCTSTR)name, 0, &type, buf, &len);
|
|
if(RegCloseKey(hk))
|
|
log_err("RegCloseKey");
|
|
if(ret == ERROR_FILE_NOT_FOUND)
|
|
return NULL; /* name does not exist */
|
|
else if(ret != ERROR_SUCCESS) {
|
|
log_err("RegQueryValueEx failed");
|
|
return NULL;
|
|
}
|
|
if(type == REG_SZ || type == REG_MULTI_SZ || type == REG_EXPAND_SZ) {
|
|
buf[sizeof(buf)-1] = 0;
|
|
buf[sizeof(buf)-2] = 0; /* for multi_sz */
|
|
result = strdup((char*)buf);
|
|
if(!result) log_err("out of memory");
|
|
}
|
|
return result;
|
|
}
|
|
|
|
void w_config_adjust_directory(struct config_file* cfg)
|
|
{
|
|
if(cfg->directory && cfg->directory[0]) {
|
|
TCHAR dirbuf[2*MAX_PATH+4];
|
|
if(strcmp(cfg->directory, "%EXECUTABLE%") == 0) {
|
|
/* get executable path, and if that contains
|
|
* directories, snip off the filename part */
|
|
dirbuf[0] = 0;
|
|
if(!GetModuleFileName(NULL, dirbuf, MAX_PATH))
|
|
log_err("could not GetModuleFileName");
|
|
if(strrchr(dirbuf, '\\')) {
|
|
(strrchr(dirbuf, '\\'))[0] = 0;
|
|
} else log_err("GetModuleFileName had no path");
|
|
if(dirbuf[0]) {
|
|
/* adjust directory for later lookups to work*/
|
|
free(cfg->directory);
|
|
cfg->directory = memdup(dirbuf, strlen(dirbuf)+1);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
#endif /* UB_ON_WINDOWS */
|
|
|
|
int options_remote_is_address(struct config_file* cfg)
|
|
{
|
|
if(!cfg->remote_control_enable) return 0;
|
|
if(!cfg->control_ifs.first) return 1;
|
|
if(!cfg->control_ifs.first->str) return 1;
|
|
if(cfg->control_ifs.first->str[0] == 0) return 1;
|
|
return (cfg->control_ifs.first->str[0] != '/');
|
|
}
|
|
|
|
/** see if interface is https, its port number == the https port number */
|
|
int
|
|
if_is_https(const char* ifname, const char* port, int https_port)
|
|
{
|
|
char* p = strchr(ifname, '@');
|
|
if(!p && atoi(port) == https_port)
|
|
return 1;
|
|
if(p && atoi(p+1) == https_port)
|
|
return 1;
|
|
return 0;
|
|
}
|
|
|
|
/** see if config contains https turned on */
|
|
int cfg_has_https(struct config_file* cfg)
|
|
{
|
|
int i;
|
|
char portbuf[32];
|
|
snprintf(portbuf, sizeof(portbuf), "%d", cfg->port);
|
|
for(i = 0; i<cfg->num_ifs; i++) {
|
|
if(if_is_https(cfg->ifs[i], portbuf, cfg->https_port))
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
/** see if interface is PROXYv2, its port number == the proxy port number */
|
|
int
|
|
if_is_pp2(const char* ifname, const char* port,
|
|
struct config_strlist* proxy_protocol_port)
|
|
{
|
|
struct config_strlist* s;
|
|
char* p = strchr(ifname, '@');
|
|
for(s = proxy_protocol_port; s; s = s->next) {
|
|
if(p && atoi(p+1) == atoi(s->str))
|
|
return 1;
|
|
if(!p && atoi(port) == atoi(s->str))
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
/** see if interface is DNSCRYPT, its port number == the dnscrypt port number */
|
|
int
|
|
if_is_dnscrypt(const char* ifname, const char* port, int dnscrypt_port)
|
|
{
|
|
#ifdef USE_DNSCRYPT
|
|
return ((strchr(ifname, '@') &&
|
|
atoi(strchr(ifname, '@')+1) == dnscrypt_port) ||
|
|
(!strchr(ifname, '@') && atoi(port) == dnscrypt_port));
|
|
#else
|
|
(void)ifname;
|
|
(void)port;
|
|
(void)dnscrypt_port;
|
|
return 0;
|
|
#endif
|
|
}
|
|
|
|
/** see if interface is quic, its port number == the quic port number */
|
|
int
|
|
if_is_quic(const char* ifname, const char* port, int quic_port)
|
|
{
|
|
char* p = strchr(ifname, '@');
|
|
if(!p && atoi(port) == quic_port)
|
|
return 1;
|
|
if(p && atoi(p+1) == quic_port)
|
|
return 1;
|
|
return 0;
|
|
}
|