parseconfig.h

/*
 * Copyright (c) 2018, 2019 Tim Kuijsten
 *
 * Permission to use, copy, modify, and distribute this software for any purpose
 * with or without fee is hereby granted, provided that the above copyright
 * notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 * AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
 * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.
 */

#ifndef PARSECONFIG_H
#define PARSECONFIG_H

#include <sys/socket.h>

#include <stddef.h>
#include <unistd.h>

#include "wireprot.h"
#include "wiresep.h"

#define DFLUSER "_wiresep"
#define MAXIFNDESC 65
#define MAXPEERNAME 8

int yyparse(void);
int yyd;

/*
 * Simple configuration entry.
 *
 * Each entry consists of zero or more strings and zero or more nested entries.
 * There is always at least one string or at least one nested entry.
 */
struct scfge {
	char **strv;	/* list of strings */
	size_t strvsize;
	struct scfge **entryv;	/* list of entries */
	size_t entryvsize;
};

/* Root entry. */
struct scfge *scfg;

void scfg_printr(void);
int scfg_clear(void);

/* these are used by the other modules as well */
int background, verbose;

struct cfgcidraddr {
	struct sockaddr_storage addr;
	size_t prefixlen;
};

struct cfgpeer {
	char *pskfile;
	wskey psk;
	wskey pubkey;
	wskey mac1key;
	struct sockaddr_storage fsa;	/* rename to endpoint */
	struct cfgcidraddr **allowedips;
	size_t allowedipssize;
	char name[MAXPEERNAME + 1];
};

/*
 * psk	= optional symmetric pre-shared secret, Q
 * pubkey	= Spubm
 * pubkeyhash	= Hash(Hash(Hash(Construction) || Identifier) || Spubm)
 * mac1key	= Hash(Label-Mac1 || Spubm)
 * cookiekey	= Hash(Label-Cookie || Spubm)
 */
struct cfgifn {
	struct scfge *scfge;	/* original user config data */
	int ifnwithmast;	/* Read/write descriptor the ifn process uses
				 * for communication with the master process.
				 */
	int mastwithifn;	/* Read/write descriptor the master process uses
				 * for communication with the ifn.
				 */
	int ifnwithencl;
	int enclwithifn;
	int ifnwithprox;
	int proxwithifn;
	char *ifname; /* nul terminated name of the interface */
	char *ifdesc; /* nul terminated label for the interface */
	struct cfgcidraddr **ifaddrs;
	size_t ifaddrssize;
	struct sockaddr_in6 *laddrs6;
	size_t laddrs6count;
	struct sockaddr_in *laddrs4;
	size_t laddrs4count;
	char *pskfile;
	char *privkeyfile;
	wskey psk;
	wskey privkey;
	wskey pubkey;
	wskey pubkeyhash;
	wskey mac1key;
	wskey cookiekey;
	struct cfgpeer **peers;
	size_t peerssize;
	uid_t uid;
	gid_t gid;
};

union smsg {
	struct sinit init;
	struct sifn ifn;
	struct speer peer;
	struct scidraddr cidraddr;
	struct seos eos;
};

/*
 * Create a list of interfaces.
 *
 * yyparse creates a tree of scfg entries.
 *
 * In a first pass determine all global settings and in a second pass
 * create interfaces with peer specific settings.
 *
 * Exit on error.
 */

int parseconfigfd(int, struct cfgifn ***, size_t *, uid_t *, gid_t *, char **);

/* wrapper around xparseconfigfd */
void xparseconfigfile(const char *, struct cfgifn ***, size_t *, uid_t *, gid_t *,
    char **);

/*
 * Load private keys of all interfaces, determine public key and mac1key.
 */
void processconfig(void);

void sendconfig_proxy(union smsg, int, int);
void sendconfig_ifn(union smsg, int);
void sendconfig_enclave(union smsg, int, int);
void signal_eos(union smsg, int);

#endif /* PARSECONFIG_H */