1b7579f77SDag-Erling Smørgrav /* 2b7579f77SDag-Erling Smørgrav * util/config_file.c - reads and stores the config file for unbound. 3b7579f77SDag-Erling Smørgrav * 4b7579f77SDag-Erling Smørgrav * Copyright (c) 2007, NLnet Labs. All rights reserved. 5b7579f77SDag-Erling Smørgrav * 6b7579f77SDag-Erling Smørgrav * This software is open source. 7b7579f77SDag-Erling Smørgrav * 8b7579f77SDag-Erling Smørgrav * Redistribution and use in source and binary forms, with or without 9b7579f77SDag-Erling Smørgrav * modification, are permitted provided that the following conditions 10b7579f77SDag-Erling Smørgrav * are met: 11b7579f77SDag-Erling Smørgrav * 12b7579f77SDag-Erling Smørgrav * Redistributions of source code must retain the above copyright notice, 13b7579f77SDag-Erling Smørgrav * this list of conditions and the following disclaimer. 14b7579f77SDag-Erling Smørgrav * 15b7579f77SDag-Erling Smørgrav * Redistributions in binary form must reproduce the above copyright notice, 16b7579f77SDag-Erling Smørgrav * this list of conditions and the following disclaimer in the documentation 17b7579f77SDag-Erling Smørgrav * and/or other materials provided with the distribution. 18b7579f77SDag-Erling Smørgrav * 19b7579f77SDag-Erling Smørgrav * Neither the name of the NLNET LABS nor the names of its contributors may 20b7579f77SDag-Erling Smørgrav * be used to endorse or promote products derived from this software without 21b7579f77SDag-Erling Smørgrav * specific prior written permission. 22b7579f77SDag-Erling Smørgrav * 23b7579f77SDag-Erling Smørgrav * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 2417d15b25SDag-Erling Smørgrav * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 2517d15b25SDag-Erling Smørgrav * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 2617d15b25SDag-Erling Smørgrav * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 2717d15b25SDag-Erling Smørgrav * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 2817d15b25SDag-Erling Smørgrav * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 2917d15b25SDag-Erling Smørgrav * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 3017d15b25SDag-Erling Smørgrav * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 3117d15b25SDag-Erling Smørgrav * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 3217d15b25SDag-Erling Smørgrav * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 3317d15b25SDag-Erling Smørgrav * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34b7579f77SDag-Erling Smørgrav */ 35b7579f77SDag-Erling Smørgrav 36b7579f77SDag-Erling Smørgrav /** 37b7579f77SDag-Erling Smørgrav * \file 38b7579f77SDag-Erling Smørgrav * 39b7579f77SDag-Erling Smørgrav * This file contains functions for the config file. 40b7579f77SDag-Erling Smørgrav */ 41b7579f77SDag-Erling Smørgrav 42b7579f77SDag-Erling Smørgrav #include "config.h" 43b7579f77SDag-Erling Smørgrav #include <ctype.h> 4417d15b25SDag-Erling Smørgrav #include <stdarg.h> 4517d15b25SDag-Erling Smørgrav #ifdef HAVE_TIME_H 4617d15b25SDag-Erling Smørgrav #include <time.h> 4717d15b25SDag-Erling Smørgrav #endif 48b7579f77SDag-Erling Smørgrav #include "util/log.h" 49b7579f77SDag-Erling Smørgrav #include "util/configyyrename.h" 50b7579f77SDag-Erling Smørgrav #include "util/config_file.h" 51e8263e18SDag-Erling Smørgrav #include "configparser.h" 52b7579f77SDag-Erling Smørgrav #include "util/net_help.h" 53b7579f77SDag-Erling Smørgrav #include "util/data/msgparse.h" 54b7579f77SDag-Erling Smørgrav #include "util/module.h" 55b7579f77SDag-Erling Smørgrav #include "util/regional.h" 56b7579f77SDag-Erling Smørgrav #include "util/fptr_wlist.h" 57b7579f77SDag-Erling Smørgrav #include "util/data/dname.h" 586480faa8SDag-Erling Smørgrav #include "util/rtt.h" 5909a3aaf3SDag-Erling Smørgrav #include "services/cache/infra.h" 6009a3aaf3SDag-Erling Smørgrav #include "sldns/wire2str.h" 6109a3aaf3SDag-Erling Smørgrav #include "sldns/parseutil.h" 628ed2b524SDag-Erling Smørgrav #ifdef HAVE_GLOB_H 638ed2b524SDag-Erling Smørgrav # include <glob.h> 648ed2b524SDag-Erling Smørgrav #endif 6565b390aaSDag-Erling Smørgrav #ifdef CLIENT_SUBNET 6665b390aaSDag-Erling Smørgrav #include "edns-subnet/edns-subnet.h" 6765b390aaSDag-Erling Smørgrav #endif 6831099b50SDag-Erling Smørgrav #ifdef HAVE_PWD_H 6931099b50SDag-Erling Smørgrav #include <pwd.h> 7031099b50SDag-Erling Smørgrav #endif 718ed2b524SDag-Erling Smørgrav 728a384985SDag-Erling Smørgrav /** from cfg username, after daemonize setup performed */ 736480faa8SDag-Erling Smørgrav uid_t cfg_uid = (uid_t)-1; 748a384985SDag-Erling Smørgrav /** from cfg username, after daemonize setup performed */ 756480faa8SDag-Erling Smørgrav gid_t cfg_gid = (gid_t)-1; 76b75612f8SDag-Erling Smørgrav /** for debug allow small timeout values for fast rollovers */ 77b75612f8SDag-Erling Smørgrav int autr_permit_small_holddown = 0; 786480faa8SDag-Erling Smørgrav 79b7579f77SDag-Erling Smørgrav /** global config during parsing */ 80b7579f77SDag-Erling Smørgrav struct config_parser_state* cfg_parser = 0; 81b7579f77SDag-Erling Smørgrav 82b7579f77SDag-Erling Smørgrav /** init ports possible for use */ 83b7579f77SDag-Erling Smørgrav static void init_outgoing_availports(int* array, int num); 84b7579f77SDag-Erling Smørgrav 85b7579f77SDag-Erling Smørgrav struct config_file* 86b7579f77SDag-Erling Smørgrav config_create(void) 87b7579f77SDag-Erling Smørgrav { 88b7579f77SDag-Erling Smørgrav struct config_file* cfg; 89b7579f77SDag-Erling Smørgrav cfg = (struct config_file*)calloc(1, sizeof(struct config_file)); 90b7579f77SDag-Erling Smørgrav if(!cfg) 91b7579f77SDag-Erling Smørgrav return NULL; 92b7579f77SDag-Erling Smørgrav /* the defaults if no config is present */ 93b7579f77SDag-Erling Smørgrav cfg->verbosity = 1; 94b7579f77SDag-Erling Smørgrav cfg->stat_interval = 0; 95b7579f77SDag-Erling Smørgrav cfg->stat_cumulative = 0; 96b7579f77SDag-Erling Smørgrav cfg->stat_extended = 0; 97b7579f77SDag-Erling Smørgrav cfg->num_threads = 1; 98b7579f77SDag-Erling Smørgrav cfg->port = UNBOUND_DNS_PORT; 99b7579f77SDag-Erling Smørgrav cfg->do_ip4 = 1; 100b7579f77SDag-Erling Smørgrav cfg->do_ip6 = 1; 101b7579f77SDag-Erling Smørgrav cfg->do_udp = 1; 102b7579f77SDag-Erling Smørgrav cfg->do_tcp = 1; 103b7579f77SDag-Erling Smørgrav cfg->tcp_upstream = 0; 1048a384985SDag-Erling Smørgrav cfg->udp_upstream_without_downstream = 0; 105f61ef7f6SDag-Erling Smørgrav cfg->tcp_mss = 0; 106f61ef7f6SDag-Erling Smørgrav cfg->outgoing_tcp_mss = 0; 107b7579f77SDag-Erling Smørgrav cfg->ssl_service_key = NULL; 108b7579f77SDag-Erling Smørgrav cfg->ssl_service_pem = NULL; 1090fb34990SDag-Erling Smørgrav cfg->ssl_port = UNBOUND_DNS_OVER_TLS_PORT; 110b7579f77SDag-Erling Smørgrav cfg->ssl_upstream = 0; 11157bddd21SDag-Erling Smørgrav cfg->tls_cert_bundle = NULL; 112*3bd4df0aSDag-Erling Smørgrav cfg->tls_win_cert = 0; 113b7579f77SDag-Erling Smørgrav cfg->use_syslog = 1; 114bc892140SDag-Erling Smørgrav cfg->log_identity = NULL; /* changed later with argv[0] */ 115b7579f77SDag-Erling Smørgrav cfg->log_time_ascii = 0; 116b7579f77SDag-Erling Smørgrav cfg->log_queries = 0; 1173005e0a3SDag-Erling Smørgrav cfg->log_replies = 0; 118b7579f77SDag-Erling Smørgrav #ifndef USE_WINSOCK 119b7579f77SDag-Erling Smørgrav # ifdef USE_MINI_EVENT 120b7579f77SDag-Erling Smørgrav /* select max 1024 sockets */ 121b7579f77SDag-Erling Smørgrav cfg->outgoing_num_ports = 960; 122b7579f77SDag-Erling Smørgrav cfg->num_queries_per_thread = 512; 123b7579f77SDag-Erling Smørgrav # else 124b7579f77SDag-Erling Smørgrav /* libevent can use many sockets */ 125b7579f77SDag-Erling Smørgrav cfg->outgoing_num_ports = 4096; 126b7579f77SDag-Erling Smørgrav cfg->num_queries_per_thread = 1024; 127b7579f77SDag-Erling Smørgrav # endif 128b7579f77SDag-Erling Smørgrav cfg->outgoing_num_tcp = 10; 129b7579f77SDag-Erling Smørgrav cfg->incoming_num_tcp = 10; 130b7579f77SDag-Erling Smørgrav #else 131b7579f77SDag-Erling Smørgrav cfg->outgoing_num_ports = 48; /* windows is limited in num fds */ 132b7579f77SDag-Erling Smørgrav cfg->num_queries_per_thread = 24; 133b7579f77SDag-Erling Smørgrav cfg->outgoing_num_tcp = 2; /* leaves 64-52=12 for: 4if,1stop,thread4 */ 134b7579f77SDag-Erling Smørgrav cfg->incoming_num_tcp = 2; 135b7579f77SDag-Erling Smørgrav #endif 136b7579f77SDag-Erling Smørgrav cfg->edns_buffer_size = 4096; /* 4k from rfc recommendation */ 137b7579f77SDag-Erling Smørgrav cfg->msg_buffer_size = 65552; /* 64 k + a small margin */ 138b7579f77SDag-Erling Smørgrav cfg->msg_cache_size = 4 * 1024 * 1024; 139b7579f77SDag-Erling Smørgrav cfg->msg_cache_slabs = 4; 140b7579f77SDag-Erling Smørgrav cfg->jostle_time = 200; 141b7579f77SDag-Erling Smørgrav cfg->rrset_cache_size = 4 * 1024 * 1024; 142b7579f77SDag-Erling Smørgrav cfg->rrset_cache_slabs = 4; 143b7579f77SDag-Erling Smørgrav cfg->host_ttl = 900; 144b7579f77SDag-Erling Smørgrav cfg->bogus_ttl = 60; 145b7579f77SDag-Erling Smørgrav cfg->min_ttl = 0; 146b7579f77SDag-Erling Smørgrav cfg->max_ttl = 3600 * 24; 14709a3aaf3SDag-Erling Smørgrav cfg->max_negative_ttl = 3600; 148b7579f77SDag-Erling Smørgrav cfg->prefetch = 0; 149b7579f77SDag-Erling Smørgrav cfg->prefetch_key = 0; 150b7579f77SDag-Erling Smørgrav cfg->infra_cache_slabs = 4; 151b7579f77SDag-Erling Smørgrav cfg->infra_cache_numhosts = 10000; 1526480faa8SDag-Erling Smørgrav cfg->infra_cache_min_rtt = 50; 15317d15b25SDag-Erling Smørgrav cfg->delay_close = 0; 154b7579f77SDag-Erling Smørgrav if(!(cfg->outgoing_avail_ports = (int*)calloc(65536, sizeof(int)))) 155b7579f77SDag-Erling Smørgrav goto error_exit; 156b7579f77SDag-Erling Smørgrav init_outgoing_availports(cfg->outgoing_avail_ports, 65536); 157b7579f77SDag-Erling Smørgrav if(!(cfg->username = strdup(UB_USERNAME))) goto error_exit; 158b7579f77SDag-Erling Smørgrav #ifdef HAVE_CHROOT 159b7579f77SDag-Erling Smørgrav if(!(cfg->chrootdir = strdup(CHROOT_DIR))) goto error_exit; 160b7579f77SDag-Erling Smørgrav #endif 161b7579f77SDag-Erling Smørgrav if(!(cfg->directory = strdup(RUN_DIR))) goto error_exit; 162b7579f77SDag-Erling Smørgrav if(!(cfg->logfile = strdup(""))) goto error_exit; 163b7579f77SDag-Erling Smørgrav if(!(cfg->pidfile = strdup(PIDFILE))) goto error_exit; 164b7579f77SDag-Erling Smørgrav if(!(cfg->target_fetch_policy = strdup("3 2 1 0 0"))) goto error_exit; 165*3bd4df0aSDag-Erling Smørgrav cfg->low_rtt_permil = 0; 1660fb34990SDag-Erling Smørgrav cfg->low_rtt = 45; 167b7579f77SDag-Erling Smørgrav cfg->donotqueryaddrs = NULL; 168b7579f77SDag-Erling Smørgrav cfg->donotquery_localhost = 1; 169b7579f77SDag-Erling Smørgrav cfg->root_hints = NULL; 1703005e0a3SDag-Erling Smørgrav cfg->use_systemd = 0; 171b7579f77SDag-Erling Smørgrav cfg->do_daemonize = 1; 172b7579f77SDag-Erling Smørgrav cfg->if_automatic = 0; 173b7579f77SDag-Erling Smørgrav cfg->so_rcvbuf = 0; 174b7579f77SDag-Erling Smørgrav cfg->so_sndbuf = 0; 17517d15b25SDag-Erling Smørgrav cfg->so_reuseport = 0; 17609a3aaf3SDag-Erling Smørgrav cfg->ip_transparent = 0; 177e2d15004SDag-Erling Smørgrav cfg->ip_freebind = 0; 178b7579f77SDag-Erling Smørgrav cfg->num_ifs = 0; 179b7579f77SDag-Erling Smørgrav cfg->ifs = NULL; 180b7579f77SDag-Erling Smørgrav cfg->num_out_ifs = 0; 181b7579f77SDag-Erling Smørgrav cfg->out_ifs = NULL; 182b7579f77SDag-Erling Smørgrav cfg->stubs = NULL; 183b7579f77SDag-Erling Smørgrav cfg->forwards = NULL; 18457bddd21SDag-Erling Smørgrav cfg->auths = NULL; 18565b390aaSDag-Erling Smørgrav #ifdef CLIENT_SUBNET 18665b390aaSDag-Erling Smørgrav cfg->client_subnet = NULL; 187c7f4d7adSDag-Erling Smørgrav cfg->client_subnet_zone = NULL; 18865b390aaSDag-Erling Smørgrav cfg->client_subnet_opcode = LDNS_EDNS_CLIENT_SUBNET; 18965b390aaSDag-Erling Smørgrav cfg->client_subnet_always_forward = 0; 19065b390aaSDag-Erling Smørgrav cfg->max_client_subnet_ipv4 = 24; 19165b390aaSDag-Erling Smørgrav cfg->max_client_subnet_ipv6 = 56; 19265b390aaSDag-Erling Smørgrav #endif 193bc892140SDag-Erling Smørgrav cfg->views = NULL; 194b7579f77SDag-Erling Smørgrav cfg->acls = NULL; 195b7579f77SDag-Erling Smørgrav cfg->harden_short_bufsize = 0; 196b7579f77SDag-Erling Smørgrav cfg->harden_large_queries = 0; 197b7579f77SDag-Erling Smørgrav cfg->harden_glue = 1; 198b7579f77SDag-Erling Smørgrav cfg->harden_dnssec_stripped = 1; 199b7579f77SDag-Erling Smørgrav cfg->harden_below_nxdomain = 0; 200b7579f77SDag-Erling Smørgrav cfg->harden_referral_path = 0; 201b75612f8SDag-Erling Smørgrav cfg->harden_algo_downgrade = 0; 202b7579f77SDag-Erling Smørgrav cfg->use_caps_bits_for_id = 0; 20309a3aaf3SDag-Erling Smørgrav cfg->caps_whitelist = NULL; 204b7579f77SDag-Erling Smørgrav cfg->private_address = NULL; 205b7579f77SDag-Erling Smørgrav cfg->private_domain = NULL; 206b7579f77SDag-Erling Smørgrav cfg->unwanted_threshold = 0; 207b7579f77SDag-Erling Smørgrav cfg->hide_identity = 0; 208b7579f77SDag-Erling Smørgrav cfg->hide_version = 0; 20965b390aaSDag-Erling Smørgrav cfg->hide_trustanchor = 0; 210b7579f77SDag-Erling Smørgrav cfg->identity = NULL; 211b7579f77SDag-Erling Smørgrav cfg->version = NULL; 212b7579f77SDag-Erling Smørgrav cfg->auto_trust_anchor_file_list = NULL; 213b7579f77SDag-Erling Smørgrav cfg->trust_anchor_file_list = NULL; 214b7579f77SDag-Erling Smørgrav cfg->trust_anchor_list = NULL; 215b7579f77SDag-Erling Smørgrav cfg->trusted_keys_file_list = NULL; 2168a384985SDag-Erling Smørgrav cfg->trust_anchor_signaling = 1; 2170fb34990SDag-Erling Smørgrav cfg->root_key_sentinel = 1; 218b7579f77SDag-Erling Smørgrav cfg->dlv_anchor_file = NULL; 219b7579f77SDag-Erling Smørgrav cfg->dlv_anchor_list = NULL; 220b7579f77SDag-Erling Smørgrav cfg->domain_insecure = NULL; 221b7579f77SDag-Erling Smørgrav cfg->val_date_override = 0; 222b7579f77SDag-Erling Smørgrav cfg->val_sig_skew_min = 3600; /* at least daylight savings trouble */ 223b7579f77SDag-Erling Smørgrav cfg->val_sig_skew_max = 86400; /* at most timezone settings trouble */ 224b7579f77SDag-Erling Smørgrav cfg->val_clean_additional = 1; 225b7579f77SDag-Erling Smørgrav cfg->val_log_level = 0; 226b7579f77SDag-Erling Smørgrav cfg->val_log_squelch = 0; 227b7579f77SDag-Erling Smørgrav cfg->val_permissive_mode = 0; 22857bddd21SDag-Erling Smørgrav cfg->aggressive_nsec = 0; 229b7579f77SDag-Erling Smørgrav cfg->ignore_cd = 0; 230bc892140SDag-Erling Smørgrav cfg->serve_expired = 0; 231b7579f77SDag-Erling Smørgrav cfg->add_holddown = 30*24*3600; 232b7579f77SDag-Erling Smørgrav cfg->del_holddown = 30*24*3600; 233b7579f77SDag-Erling Smørgrav cfg->keep_missing = 366*24*3600; /* one year plus a little leeway */ 234b75612f8SDag-Erling Smørgrav cfg->permit_small_holddown = 0; 235b7579f77SDag-Erling Smørgrav cfg->key_cache_size = 4 * 1024 * 1024; 236b7579f77SDag-Erling Smørgrav cfg->key_cache_slabs = 4; 237b7579f77SDag-Erling Smørgrav cfg->neg_cache_size = 1 * 1024 * 1024; 238b7579f77SDag-Erling Smørgrav cfg->local_zones = NULL; 239b7579f77SDag-Erling Smørgrav cfg->local_zones_nodefault = NULL; 240c7f4d7adSDag-Erling Smørgrav cfg->local_zones_disable_default = 0; 241b7579f77SDag-Erling Smørgrav cfg->local_data = NULL; 242b5663de9SDag-Erling Smørgrav cfg->local_zone_overrides = NULL; 243c536e4dcSDag-Erling Smørgrav cfg->unblock_lan_zones = 0; 2440de4f1bfSDag-Erling Smørgrav cfg->insecure_lan_zones = 0; 245b7579f77SDag-Erling Smørgrav cfg->python_script = NULL; 246b7579f77SDag-Erling Smørgrav cfg->remote_control_enable = 0; 247b7579f77SDag-Erling Smørgrav cfg->control_ifs = NULL; 248b7579f77SDag-Erling Smørgrav cfg->control_port = UNBOUND_CONTROL_PORT; 249748bd829SDag-Erling Smørgrav cfg->remote_control_use_cert = 1; 250b7579f77SDag-Erling Smørgrav cfg->minimal_responses = 0; 251b7579f77SDag-Erling Smørgrav cfg->rrset_roundrobin = 0; 25217d15b25SDag-Erling Smørgrav cfg->max_udp_size = 4096; 253b7579f77SDag-Erling Smørgrav if(!(cfg->server_key_file = strdup(RUN_DIR"/unbound_server.key"))) 254b7579f77SDag-Erling Smørgrav goto error_exit; 255b7579f77SDag-Erling Smørgrav if(!(cfg->server_cert_file = strdup(RUN_DIR"/unbound_server.pem"))) 256b7579f77SDag-Erling Smørgrav goto error_exit; 257b7579f77SDag-Erling Smørgrav if(!(cfg->control_key_file = strdup(RUN_DIR"/unbound_control.key"))) 258b7579f77SDag-Erling Smørgrav goto error_exit; 259b7579f77SDag-Erling Smørgrav if(!(cfg->control_cert_file = strdup(RUN_DIR"/unbound_control.pem"))) 260b7579f77SDag-Erling Smørgrav goto error_exit; 261b7579f77SDag-Erling Smørgrav 26265b390aaSDag-Erling Smørgrav #ifdef CLIENT_SUBNET 26365b390aaSDag-Erling Smørgrav if(!(cfg->module_conf = strdup("subnetcache validator iterator"))) goto error_exit; 26465b390aaSDag-Erling Smørgrav #else 265b7579f77SDag-Erling Smørgrav if(!(cfg->module_conf = strdup("validator iterator"))) goto error_exit; 26665b390aaSDag-Erling Smørgrav #endif 267b7579f77SDag-Erling Smørgrav if(!(cfg->val_nsec3_key_iterations = 268b7579f77SDag-Erling Smørgrav strdup("1024 150 2048 500 4096 2500"))) goto error_exit; 269ff825849SDag-Erling Smørgrav #if defined(DNSTAP_SOCKET_PATH) 270ff825849SDag-Erling Smørgrav if(!(cfg->dnstap_socket_path = strdup(DNSTAP_SOCKET_PATH))) 271ff825849SDag-Erling Smørgrav goto error_exit; 272ff825849SDag-Erling Smørgrav #endif 273e2d15004SDag-Erling Smørgrav cfg->disable_dnssec_lame_check = 0; 2743005e0a3SDag-Erling Smørgrav cfg->ip_ratelimit = 0; 27509a3aaf3SDag-Erling Smørgrav cfg->ratelimit = 0; 2763005e0a3SDag-Erling Smørgrav cfg->ip_ratelimit_slabs = 4; 27709a3aaf3SDag-Erling Smørgrav cfg->ratelimit_slabs = 4; 2783005e0a3SDag-Erling Smørgrav cfg->ip_ratelimit_size = 4*1024*1024; 27909a3aaf3SDag-Erling Smørgrav cfg->ratelimit_size = 4*1024*1024; 28009a3aaf3SDag-Erling Smørgrav cfg->ratelimit_for_domain = NULL; 28109a3aaf3SDag-Erling Smørgrav cfg->ratelimit_below_domain = NULL; 2823005e0a3SDag-Erling Smørgrav cfg->ip_ratelimit_factor = 10; 28309a3aaf3SDag-Erling Smørgrav cfg->ratelimit_factor = 10; 284*3bd4df0aSDag-Erling Smørgrav cfg->qname_minimisation = 1; 285bc892140SDag-Erling Smørgrav cfg->qname_minimisation_strict = 0; 28665b390aaSDag-Erling Smørgrav cfg->shm_enable = 0; 28765b390aaSDag-Erling Smørgrav cfg->shm_key = 11777; 28865b390aaSDag-Erling Smørgrav cfg->dnscrypt = 0; 28965b390aaSDag-Erling Smørgrav cfg->dnscrypt_port = 0; 29065b390aaSDag-Erling Smørgrav cfg->dnscrypt_provider = NULL; 29165b390aaSDag-Erling Smørgrav cfg->dnscrypt_provider_cert = NULL; 29257bddd21SDag-Erling Smørgrav cfg->dnscrypt_provider_cert_rotated = NULL; 29365b390aaSDag-Erling Smørgrav cfg->dnscrypt_secret_key = NULL; 294971980c3SDag-Erling Smørgrav cfg->dnscrypt_shared_secret_cache_size = 4*1024*1024; 295971980c3SDag-Erling Smørgrav cfg->dnscrypt_shared_secret_cache_slabs = 4; 2968a384985SDag-Erling Smørgrav cfg->dnscrypt_nonce_cache_size = 4*1024*1024; 2978a384985SDag-Erling Smørgrav cfg->dnscrypt_nonce_cache_slabs = 4; 298c7f4d7adSDag-Erling Smørgrav #ifdef USE_IPSECMOD 299c7f4d7adSDag-Erling Smørgrav cfg->ipsecmod_enabled = 1; 300c7f4d7adSDag-Erling Smørgrav cfg->ipsecmod_ignore_bogus = 0; 301c7f4d7adSDag-Erling Smørgrav cfg->ipsecmod_hook = NULL; 302c7f4d7adSDag-Erling Smørgrav cfg->ipsecmod_max_ttl = 3600; 303c7f4d7adSDag-Erling Smørgrav cfg->ipsecmod_whitelist = NULL; 304c7f4d7adSDag-Erling Smørgrav cfg->ipsecmod_strict = 0; 305c7f4d7adSDag-Erling Smørgrav #endif 306971980c3SDag-Erling Smørgrav #ifdef USE_CACHEDB 307971980c3SDag-Erling Smørgrav cfg->cachedb_backend = NULL; 308971980c3SDag-Erling Smørgrav cfg->cachedb_secret = NULL; 309971980c3SDag-Erling Smørgrav #endif 310b7579f77SDag-Erling Smørgrav return cfg; 311b7579f77SDag-Erling Smørgrav error_exit: 312b7579f77SDag-Erling Smørgrav config_delete(cfg); 313b7579f77SDag-Erling Smørgrav return NULL; 314b7579f77SDag-Erling Smørgrav } 315b7579f77SDag-Erling Smørgrav 316b7579f77SDag-Erling Smørgrav struct config_file* config_create_forlib(void) 317b7579f77SDag-Erling Smørgrav { 318b7579f77SDag-Erling Smørgrav struct config_file* cfg = config_create(); 319b7579f77SDag-Erling Smørgrav if(!cfg) return NULL; 320b7579f77SDag-Erling Smørgrav /* modifications for library use, less verbose, less memory */ 321b7579f77SDag-Erling Smørgrav free(cfg->chrootdir); 322b7579f77SDag-Erling Smørgrav cfg->chrootdir = NULL; 323b7579f77SDag-Erling Smørgrav cfg->verbosity = 0; 324b7579f77SDag-Erling Smørgrav cfg->outgoing_num_ports = 16; /* in library use, this is 'reasonable' 325b7579f77SDag-Erling Smørgrav and probably within the ulimit(maxfds) of the user */ 326b7579f77SDag-Erling Smørgrav cfg->outgoing_num_tcp = 2; 327b7579f77SDag-Erling Smørgrav cfg->msg_cache_size = 1024*1024; 328b7579f77SDag-Erling Smørgrav cfg->msg_cache_slabs = 1; 329b7579f77SDag-Erling Smørgrav cfg->rrset_cache_size = 1024*1024; 330b7579f77SDag-Erling Smørgrav cfg->rrset_cache_slabs = 1; 331b7579f77SDag-Erling Smørgrav cfg->infra_cache_slabs = 1; 332b7579f77SDag-Erling Smørgrav cfg->use_syslog = 0; 333b7579f77SDag-Erling Smørgrav cfg->key_cache_size = 1024*1024; 334b7579f77SDag-Erling Smørgrav cfg->key_cache_slabs = 1; 335b7579f77SDag-Erling Smørgrav cfg->neg_cache_size = 100 * 1024; 336b7579f77SDag-Erling Smørgrav cfg->donotquery_localhost = 0; /* allow, so that you can ask a 337b7579f77SDag-Erling Smørgrav forward nameserver running on localhost */ 338b7579f77SDag-Erling Smørgrav cfg->val_log_level = 2; /* to fill why_bogus with */ 339b7579f77SDag-Erling Smørgrav cfg->val_log_squelch = 1; 340b7579f77SDag-Erling Smørgrav return cfg; 341b7579f77SDag-Erling Smørgrav } 342b7579f77SDag-Erling Smørgrav 343b7579f77SDag-Erling Smørgrav /** check that the value passed is >= 0 */ 344b7579f77SDag-Erling Smørgrav #define IS_NUMBER_OR_ZERO \ 345b7579f77SDag-Erling Smørgrav if(atoi(val) == 0 && strcmp(val, "0") != 0) return 0 346b7579f77SDag-Erling Smørgrav /** check that the value passed is > 0 */ 347b7579f77SDag-Erling Smørgrav #define IS_NONZERO_NUMBER \ 348b7579f77SDag-Erling Smørgrav if(atoi(val) == 0) return 0 349b7579f77SDag-Erling Smørgrav /** check that the value passed is not 0 and a power of 2 */ 350b7579f77SDag-Erling Smørgrav #define IS_POW2_NUMBER \ 351b7579f77SDag-Erling Smørgrav if(atoi(val) == 0 || !is_pow2((size_t)atoi(val))) return 0 352b7579f77SDag-Erling Smørgrav /** check that the value passed is yes or no */ 353b7579f77SDag-Erling Smørgrav #define IS_YES_OR_NO \ 354b7579f77SDag-Erling Smørgrav if(strcmp(val, "yes") != 0 && strcmp(val, "no") != 0) return 0 355b7579f77SDag-Erling Smørgrav /** put integer_or_zero into variable */ 356b7579f77SDag-Erling Smørgrav #define S_NUMBER_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \ 357b7579f77SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->var = atoi(val); } 358b7579f77SDag-Erling Smørgrav /** put integer_nonzero into variable */ 359b7579f77SDag-Erling Smørgrav #define S_NUMBER_NONZERO(str, var) if(strcmp(opt, str) == 0) \ 360b7579f77SDag-Erling Smørgrav { IS_NONZERO_NUMBER; cfg->var = atoi(val); } 361b7579f77SDag-Erling Smørgrav /** put integer_or_zero into unsigned */ 362b7579f77SDag-Erling Smørgrav #define S_UNSIGNED_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \ 363b7579f77SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->var = (unsigned)atoi(val); } 364b7579f77SDag-Erling Smørgrav /** put integer_or_zero into size_t */ 365b7579f77SDag-Erling Smørgrav #define S_SIZET_OR_ZERO(str, var) if(strcmp(opt, str) == 0) \ 366b7579f77SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->var = (size_t)atoi(val); } 367b7579f77SDag-Erling Smørgrav /** put integer_nonzero into size_t */ 368b7579f77SDag-Erling Smørgrav #define S_SIZET_NONZERO(str, var) if(strcmp(opt, str) == 0) \ 369b7579f77SDag-Erling Smørgrav { IS_NONZERO_NUMBER; cfg->var = (size_t)atoi(val); } 370b7579f77SDag-Erling Smørgrav /** put yesno into variable */ 371b7579f77SDag-Erling Smørgrav #define S_YNO(str, var) if(strcmp(opt, str) == 0) \ 372b7579f77SDag-Erling Smørgrav { IS_YES_OR_NO; cfg->var = (strcmp(val, "yes") == 0); } 373b7579f77SDag-Erling Smørgrav /** put memsize into variable */ 374b7579f77SDag-Erling Smørgrav #define S_MEMSIZE(str, var) if(strcmp(opt, str)==0) \ 375b7579f77SDag-Erling Smørgrav { return cfg_parse_memsize(val, &cfg->var); } 376b7579f77SDag-Erling Smørgrav /** put pow2 number into variable */ 377b7579f77SDag-Erling Smørgrav #define S_POW2(str, var) if(strcmp(opt, str)==0) \ 378b7579f77SDag-Erling Smørgrav { IS_POW2_NUMBER; cfg->var = (size_t)atoi(val); } 379b7579f77SDag-Erling Smørgrav /** put string into variable */ 380b7579f77SDag-Erling Smørgrav #define S_STR(str, var) if(strcmp(opt, str)==0) \ 381b7579f77SDag-Erling Smørgrav { free(cfg->var); return (cfg->var = strdup(val)) != NULL; } 382b7579f77SDag-Erling Smørgrav /** put string into strlist */ 383b7579f77SDag-Erling Smørgrav #define S_STRLIST(str, var) if(strcmp(opt, str)==0) \ 384b7579f77SDag-Erling Smørgrav { return cfg_strlist_insert(&cfg->var, strdup(val)); } 38557bddd21SDag-Erling Smørgrav /** put string into strlist if not present yet*/ 38657bddd21SDag-Erling Smørgrav #define S_STRLIST_UNIQ(str, var) if(strcmp(opt, str)==0) \ 38757bddd21SDag-Erling Smørgrav { if(cfg_strlist_find(cfg->var, val)) { return 0;} \ 38857bddd21SDag-Erling Smørgrav return cfg_strlist_insert(&cfg->var, strdup(val)); } 389b7579f77SDag-Erling Smørgrav 390b7579f77SDag-Erling Smørgrav int config_set_option(struct config_file* cfg, const char* opt, 391b7579f77SDag-Erling Smørgrav const char* val) 392b7579f77SDag-Erling Smørgrav { 3930fb34990SDag-Erling Smørgrav char buf[64]; 3940fb34990SDag-Erling Smørgrav if(!opt) return 0; 3950fb34990SDag-Erling Smørgrav if(opt[strlen(opt)-1] != ':' && strlen(opt)+2<sizeof(buf)) { 3960fb34990SDag-Erling Smørgrav snprintf(buf, sizeof(buf), "%s:", opt); 3970fb34990SDag-Erling Smørgrav opt = buf; 3980fb34990SDag-Erling Smørgrav } 399b7579f77SDag-Erling Smørgrav S_NUMBER_OR_ZERO("verbosity:", verbosity) 400b7579f77SDag-Erling Smørgrav else if(strcmp(opt, "statistics-interval:") == 0) { 401b7579f77SDag-Erling Smørgrav if(strcmp(val, "0") == 0 || strcmp(val, "") == 0) 402b7579f77SDag-Erling Smørgrav cfg->stat_interval = 0; 403b7579f77SDag-Erling Smørgrav else if(atoi(val) == 0) 404b7579f77SDag-Erling Smørgrav return 0; 405b7579f77SDag-Erling Smørgrav else cfg->stat_interval = atoi(val); 406b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "num_threads:") == 0) { 407b7579f77SDag-Erling Smørgrav /* not supported, library must have 1 thread in bgworker */ 408b7579f77SDag-Erling Smørgrav return 0; 409b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "outgoing-port-permit:") == 0) { 410b7579f77SDag-Erling Smørgrav return cfg_mark_ports(val, 1, 411b7579f77SDag-Erling Smørgrav cfg->outgoing_avail_ports, 65536); 412b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "outgoing-port-avoid:") == 0) { 413b7579f77SDag-Erling Smørgrav return cfg_mark_ports(val, 0, 414b7579f77SDag-Erling Smørgrav cfg->outgoing_avail_ports, 65536); 415b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "local-zone:") == 0) { 416b7579f77SDag-Erling Smørgrav return cfg_parse_local_zone(cfg, val); 417b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "val-override-date:") == 0) { 418b7579f77SDag-Erling Smørgrav if(strcmp(val, "") == 0 || strcmp(val, "0") == 0) { 419b7579f77SDag-Erling Smørgrav cfg->val_date_override = 0; 420b7579f77SDag-Erling Smørgrav } else if(strlen(val) == 14) { 421b7579f77SDag-Erling Smørgrav cfg->val_date_override = cfg_convert_timeval(val); 422b7579f77SDag-Erling Smørgrav return cfg->val_date_override != 0; 423b7579f77SDag-Erling Smørgrav } else { 424b7579f77SDag-Erling Smørgrav if(atoi(val) == 0) return 0; 425b7579f77SDag-Erling Smørgrav cfg->val_date_override = (uint32_t)atoi(val); 426b7579f77SDag-Erling Smørgrav } 427b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "local-data-ptr:") == 0) { 428b7579f77SDag-Erling Smørgrav char* ptr = cfg_ptr_reverse((char*)opt); 429b7579f77SDag-Erling Smørgrav return cfg_strlist_insert(&cfg->local_data, ptr); 430b7579f77SDag-Erling Smørgrav } else if(strcmp(opt, "logfile:") == 0) { 431b7579f77SDag-Erling Smørgrav cfg->use_syslog = 0; 432b7579f77SDag-Erling Smørgrav free(cfg->logfile); 433b7579f77SDag-Erling Smørgrav return (cfg->logfile = strdup(val)) != NULL; 434b7579f77SDag-Erling Smørgrav } 43517d15b25SDag-Erling Smørgrav else if(strcmp(opt, "log-time-ascii:") == 0) 43617d15b25SDag-Erling Smørgrav { IS_YES_OR_NO; cfg->log_time_ascii = (strcmp(val, "yes") == 0); 43717d15b25SDag-Erling Smørgrav log_set_time_asc(cfg->log_time_ascii); } 43817d15b25SDag-Erling Smørgrav else S_SIZET_NONZERO("max-udp-size:", max_udp_size) 439b7579f77SDag-Erling Smørgrav else S_YNO("use-syslog:", use_syslog) 440bc892140SDag-Erling Smørgrav else S_STR("log-identity:", log_identity) 441b7579f77SDag-Erling Smørgrav else S_YNO("extended-statistics:", stat_extended) 442b7579f77SDag-Erling Smørgrav else S_YNO("statistics-cumulative:", stat_cumulative) 44365b390aaSDag-Erling Smørgrav else S_YNO("shm-enable:", shm_enable) 44465b390aaSDag-Erling Smørgrav else S_NUMBER_OR_ZERO("shm-key:", shm_key) 445b7579f77SDag-Erling Smørgrav else S_YNO("do-ip4:", do_ip4) 446b7579f77SDag-Erling Smørgrav else S_YNO("do-ip6:", do_ip6) 447b7579f77SDag-Erling Smørgrav else S_YNO("do-udp:", do_udp) 448b7579f77SDag-Erling Smørgrav else S_YNO("do-tcp:", do_tcp) 449b7579f77SDag-Erling Smørgrav else S_YNO("tcp-upstream:", tcp_upstream) 4508a384985SDag-Erling Smørgrav else S_YNO("udp-upstream-without-downstream:", 4518a384985SDag-Erling Smørgrav udp_upstream_without_downstream) 452f61ef7f6SDag-Erling Smørgrav else S_NUMBER_NONZERO("tcp-mss:", tcp_mss) 453f61ef7f6SDag-Erling Smørgrav else S_NUMBER_NONZERO("outgoing-tcp-mss:", outgoing_tcp_mss) 454b7579f77SDag-Erling Smørgrav else S_YNO("ssl-upstream:", ssl_upstream) 455b7579f77SDag-Erling Smørgrav else S_STR("ssl-service-key:", ssl_service_key) 456b7579f77SDag-Erling Smørgrav else S_STR("ssl-service-pem:", ssl_service_pem) 457b7579f77SDag-Erling Smørgrav else S_NUMBER_NONZERO("ssl-port:", ssl_port) 45857bddd21SDag-Erling Smørgrav else S_STR("tls-cert-bundle:", tls_cert_bundle) 459*3bd4df0aSDag-Erling Smørgrav else S_YNO("tls-win-cert:", tls_win_cert) 460*3bd4df0aSDag-Erling Smørgrav else S_STRLIST("additional-tls-port:", tls_additional_ports) 461*3bd4df0aSDag-Erling Smørgrav else S_STRLIST("tls-additional-ports:", tls_additional_ports) 462b7579f77SDag-Erling Smørgrav else S_YNO("interface-automatic:", if_automatic) 4633005e0a3SDag-Erling Smørgrav else S_YNO("use-systemd:", use_systemd) 464b7579f77SDag-Erling Smørgrav else S_YNO("do-daemonize:", do_daemonize) 465b7579f77SDag-Erling Smørgrav else S_NUMBER_NONZERO("port:", port) 466b7579f77SDag-Erling Smørgrav else S_NUMBER_NONZERO("outgoing-range:", outgoing_num_ports) 467b7579f77SDag-Erling Smørgrav else S_SIZET_OR_ZERO("outgoing-num-tcp:", outgoing_num_tcp) 468b7579f77SDag-Erling Smørgrav else S_SIZET_OR_ZERO("incoming-num-tcp:", incoming_num_tcp) 469b7579f77SDag-Erling Smørgrav else S_SIZET_NONZERO("edns-buffer-size:", edns_buffer_size) 470b7579f77SDag-Erling Smørgrav else S_SIZET_NONZERO("msg-buffer-size:", msg_buffer_size) 471b7579f77SDag-Erling Smørgrav else S_MEMSIZE("msg-cache-size:", msg_cache_size) 472b7579f77SDag-Erling Smørgrav else S_POW2("msg-cache-slabs:", msg_cache_slabs) 473b7579f77SDag-Erling Smørgrav else S_SIZET_NONZERO("num-queries-per-thread:",num_queries_per_thread) 474b7579f77SDag-Erling Smørgrav else S_SIZET_OR_ZERO("jostle-timeout:", jostle_time) 475b7579f77SDag-Erling Smørgrav else S_MEMSIZE("so-rcvbuf:", so_rcvbuf) 476b7579f77SDag-Erling Smørgrav else S_MEMSIZE("so-sndbuf:", so_sndbuf) 47717d15b25SDag-Erling Smørgrav else S_YNO("so-reuseport:", so_reuseport) 47809a3aaf3SDag-Erling Smørgrav else S_YNO("ip-transparent:", ip_transparent) 479e2d15004SDag-Erling Smørgrav else S_YNO("ip-freebind:", ip_freebind) 480b7579f77SDag-Erling Smørgrav else S_MEMSIZE("rrset-cache-size:", rrset_cache_size) 481b7579f77SDag-Erling Smørgrav else S_POW2("rrset-cache-slabs:", rrset_cache_slabs) 482b7579f77SDag-Erling Smørgrav else S_YNO("prefetch:", prefetch) 483b7579f77SDag-Erling Smørgrav else S_YNO("prefetch-key:", prefetch_key) 48417d15b25SDag-Erling Smørgrav else if(strcmp(opt, "cache-max-ttl:") == 0) 48517d15b25SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->max_ttl = atoi(val); MAX_TTL=(time_t)cfg->max_ttl;} 48609a3aaf3SDag-Erling Smørgrav else if(strcmp(opt, "cache-max-negative-ttl:") == 0) 48709a3aaf3SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->max_negative_ttl = atoi(val); MAX_NEG_TTL=(time_t)cfg->max_negative_ttl;} 48817d15b25SDag-Erling Smørgrav else if(strcmp(opt, "cache-min-ttl:") == 0) 48917d15b25SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->min_ttl = atoi(val); MIN_TTL=(time_t)cfg->min_ttl;} 4906480faa8SDag-Erling Smørgrav else if(strcmp(opt, "infra-cache-min-rtt:") == 0) { 4916480faa8SDag-Erling Smørgrav IS_NUMBER_OR_ZERO; cfg->infra_cache_min_rtt = atoi(val); 4926480faa8SDag-Erling Smørgrav RTT_MIN_TIMEOUT=cfg->infra_cache_min_rtt; 4936480faa8SDag-Erling Smørgrav } 494b7579f77SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("infra-host-ttl:", host_ttl) 495b7579f77SDag-Erling Smørgrav else S_POW2("infra-cache-slabs:", infra_cache_slabs) 496b7579f77SDag-Erling Smørgrav else S_SIZET_NONZERO("infra-cache-numhosts:", infra_cache_numhosts) 49717d15b25SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("delay-close:", delay_close) 498b7579f77SDag-Erling Smørgrav else S_STR("chroot:", chrootdir) 499b7579f77SDag-Erling Smørgrav else S_STR("username:", username) 500b7579f77SDag-Erling Smørgrav else S_STR("directory:", directory) 501b7579f77SDag-Erling Smørgrav else S_STR("pidfile:", pidfile) 502b7579f77SDag-Erling Smørgrav else S_YNO("hide-identity:", hide_identity) 503b7579f77SDag-Erling Smørgrav else S_YNO("hide-version:", hide_version) 50465b390aaSDag-Erling Smørgrav else S_YNO("hide-trustanchor:", hide_trustanchor) 505b7579f77SDag-Erling Smørgrav else S_STR("identity:", identity) 506b7579f77SDag-Erling Smørgrav else S_STR("version:", version) 507b7579f77SDag-Erling Smørgrav else S_STRLIST("root-hints:", root_hints) 508b7579f77SDag-Erling Smørgrav else S_STR("target-fetch-policy:", target_fetch_policy) 509b7579f77SDag-Erling Smørgrav else S_YNO("harden-glue:", harden_glue) 510b7579f77SDag-Erling Smørgrav else S_YNO("harden-short-bufsize:", harden_short_bufsize) 511b7579f77SDag-Erling Smørgrav else S_YNO("harden-large-queries:", harden_large_queries) 512b7579f77SDag-Erling Smørgrav else S_YNO("harden-dnssec-stripped:", harden_dnssec_stripped) 513b7579f77SDag-Erling Smørgrav else S_YNO("harden-below-nxdomain:", harden_below_nxdomain) 514b7579f77SDag-Erling Smørgrav else S_YNO("harden-referral-path:", harden_referral_path) 51509a3aaf3SDag-Erling Smørgrav else S_YNO("harden-algo-downgrade:", harden_algo_downgrade) 5160fb34990SDag-Erling Smørgrav else S_YNO("use-caps-for-id:", use_caps_bits_for_id) 51709a3aaf3SDag-Erling Smørgrav else S_STRLIST("caps-whitelist:", caps_whitelist) 518b7579f77SDag-Erling Smørgrav else S_SIZET_OR_ZERO("unwanted-reply-threshold:", unwanted_threshold) 519b7579f77SDag-Erling Smørgrav else S_STRLIST("private-address:", private_address) 520b7579f77SDag-Erling Smørgrav else S_STRLIST("private-domain:", private_domain) 521b7579f77SDag-Erling Smørgrav else S_YNO("do-not-query-localhost:", donotquery_localhost) 522b7579f77SDag-Erling Smørgrav else S_STRLIST("do-not-query-address:", donotqueryaddrs) 523b7579f77SDag-Erling Smørgrav else S_STRLIST("auto-trust-anchor-file:", auto_trust_anchor_file_list) 524b7579f77SDag-Erling Smørgrav else S_STRLIST("trust-anchor-file:", trust_anchor_file_list) 525b7579f77SDag-Erling Smørgrav else S_STRLIST("trust-anchor:", trust_anchor_list) 526b7579f77SDag-Erling Smørgrav else S_STRLIST("trusted-keys-file:", trusted_keys_file_list) 527c7f4d7adSDag-Erling Smørgrav else S_YNO("trust-anchor-signaling:", trust_anchor_signaling) 5280fb34990SDag-Erling Smørgrav else S_YNO("root-key-sentinel:", root_key_sentinel) 529b7579f77SDag-Erling Smørgrav else S_STR("dlv-anchor-file:", dlv_anchor_file) 530b7579f77SDag-Erling Smørgrav else S_STRLIST("dlv-anchor:", dlv_anchor_list) 531b7579f77SDag-Erling Smørgrav else S_STRLIST("domain-insecure:", domain_insecure) 532b7579f77SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("val-bogus-ttl:", bogus_ttl) 533b7579f77SDag-Erling Smørgrav else S_YNO("val-clean-additional:", val_clean_additional) 534b7579f77SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("val-log-level:", val_log_level) 535b7579f77SDag-Erling Smørgrav else S_YNO("val-log-squelch:", val_log_squelch) 536b7579f77SDag-Erling Smørgrav else S_YNO("log-queries:", log_queries) 5373005e0a3SDag-Erling Smørgrav else S_YNO("log-replies:", log_replies) 538b7579f77SDag-Erling Smørgrav else S_YNO("val-permissive-mode:", val_permissive_mode) 53957bddd21SDag-Erling Smørgrav else S_YNO("aggressive-nsec:", aggressive_nsec) 540b7579f77SDag-Erling Smørgrav else S_YNO("ignore-cd-flag:", ignore_cd) 541bc892140SDag-Erling Smørgrav else S_YNO("serve-expired:", serve_expired) 542b7579f77SDag-Erling Smørgrav else S_STR("val-nsec3-keysize-iterations:", val_nsec3_key_iterations) 543b7579f77SDag-Erling Smørgrav else S_UNSIGNED_OR_ZERO("add-holddown:", add_holddown) 544b7579f77SDag-Erling Smørgrav else S_UNSIGNED_OR_ZERO("del-holddown:", del_holddown) 545b7579f77SDag-Erling Smørgrav else S_UNSIGNED_OR_ZERO("keep-missing:", keep_missing) 546b75612f8SDag-Erling Smørgrav else if(strcmp(opt, "permit-small-holddown:") == 0) 547b75612f8SDag-Erling Smørgrav { IS_YES_OR_NO; cfg->permit_small_holddown = (strcmp(val, "yes") == 0); 548b75612f8SDag-Erling Smørgrav autr_permit_small_holddown = cfg->permit_small_holddown; } 549b7579f77SDag-Erling Smørgrav else S_MEMSIZE("key-cache-size:", key_cache_size) 550b7579f77SDag-Erling Smørgrav else S_POW2("key-cache-slabs:", key_cache_slabs) 551b7579f77SDag-Erling Smørgrav else S_MEMSIZE("neg-cache-size:", neg_cache_size) 552b7579f77SDag-Erling Smørgrav else S_YNO("minimal-responses:", minimal_responses) 553b7579f77SDag-Erling Smørgrav else S_YNO("rrset-roundrobin:", rrset_roundrobin) 554b7579f77SDag-Erling Smørgrav else S_STRLIST("local-data:", local_data) 555c536e4dcSDag-Erling Smørgrav else S_YNO("unblock-lan-zones:", unblock_lan_zones) 5560de4f1bfSDag-Erling Smørgrav else S_YNO("insecure-lan-zones:", insecure_lan_zones) 557b7579f77SDag-Erling Smørgrav else S_YNO("control-enable:", remote_control_enable) 558b7579f77SDag-Erling Smørgrav else S_STRLIST("control-interface:", control_ifs) 559b7579f77SDag-Erling Smørgrav else S_NUMBER_NONZERO("control-port:", control_port) 560b7579f77SDag-Erling Smørgrav else S_STR("server-key-file:", server_key_file) 561b7579f77SDag-Erling Smørgrav else S_STR("server-cert-file:", server_cert_file) 562b7579f77SDag-Erling Smørgrav else S_STR("control-key-file:", control_key_file) 563b7579f77SDag-Erling Smørgrav else S_STR("control-cert-file:", control_cert_file) 564b7579f77SDag-Erling Smørgrav else S_STR("module-config:", module_conf) 565b7579f77SDag-Erling Smørgrav else S_STR("python-script:", python_script) 566e2d15004SDag-Erling Smørgrav else S_YNO("disable-dnssec-lame-check:", disable_dnssec_lame_check) 56765b390aaSDag-Erling Smørgrav #ifdef CLIENT_SUBNET 56865b390aaSDag-Erling Smørgrav /* Can't set max subnet prefix here, since that value is used when 56965b390aaSDag-Erling Smørgrav * generating the address tree. */ 57065b390aaSDag-Erling Smørgrav /* No client-subnet-always-forward here, module registration depends on 57165b390aaSDag-Erling Smørgrav * this option. */ 57265b390aaSDag-Erling Smørgrav #endif 573c7f4d7adSDag-Erling Smørgrav #ifdef USE_DNSTAP 574c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-enable:", dnstap) 575c7f4d7adSDag-Erling Smørgrav else S_STR("dnstap-socket-path:", dnstap_socket_path) 576c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-send-identity:", dnstap_send_identity) 577c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-send-version:", dnstap_send_version) 578c7f4d7adSDag-Erling Smørgrav else S_STR("dnstap-identity:", dnstap_identity) 579c7f4d7adSDag-Erling Smørgrav else S_STR("dnstap-version:", dnstap_version) 580c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-log-resolver-query-messages:", 581c7f4d7adSDag-Erling Smørgrav dnstap_log_resolver_query_messages) 582c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-log-resolver-response-messages:", 583c7f4d7adSDag-Erling Smørgrav dnstap_log_resolver_response_messages) 584c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-log-client-query-messages:", 585c7f4d7adSDag-Erling Smørgrav dnstap_log_client_query_messages) 586c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-log-client-response-messages:", 587c7f4d7adSDag-Erling Smørgrav dnstap_log_client_response_messages) 588c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-log-forwarder-query-messages:", 589c7f4d7adSDag-Erling Smørgrav dnstap_log_forwarder_query_messages) 590c7f4d7adSDag-Erling Smørgrav else S_YNO("dnstap-log-forwarder-response-messages:", 591c7f4d7adSDag-Erling Smørgrav dnstap_log_forwarder_response_messages) 592c7f4d7adSDag-Erling Smørgrav #endif 593c7f4d7adSDag-Erling Smørgrav #ifdef USE_DNSCRYPT 594c7f4d7adSDag-Erling Smørgrav else S_YNO("dnscrypt-enable:", dnscrypt) 595c7f4d7adSDag-Erling Smørgrav else S_NUMBER_NONZERO("dnscrypt-port:", dnscrypt_port) 596c7f4d7adSDag-Erling Smørgrav else S_STR("dnscrypt-provider:", dnscrypt_provider) 59757bddd21SDag-Erling Smørgrav else S_STRLIST_UNIQ("dnscrypt-provider-cert:", dnscrypt_provider_cert) 59857bddd21SDag-Erling Smørgrav else S_STRLIST("dnscrypt-provider-cert-rotated:", dnscrypt_provider_cert_rotated) 59957bddd21SDag-Erling Smørgrav else S_STRLIST_UNIQ("dnscrypt-secret-key:", dnscrypt_secret_key) 600971980c3SDag-Erling Smørgrav else S_MEMSIZE("dnscrypt-shared-secret-cache-size:", 601971980c3SDag-Erling Smørgrav dnscrypt_shared_secret_cache_size) 602971980c3SDag-Erling Smørgrav else S_POW2("dnscrypt-shared-secret-cache-slabs:", 603971980c3SDag-Erling Smørgrav dnscrypt_shared_secret_cache_slabs) 6048a384985SDag-Erling Smørgrav else S_MEMSIZE("dnscrypt-nonce-cache-size:", 6058a384985SDag-Erling Smørgrav dnscrypt_nonce_cache_size) 6068a384985SDag-Erling Smørgrav else S_POW2("dnscrypt-nonce-cache-slabs:", 6078a384985SDag-Erling Smørgrav dnscrypt_nonce_cache_slabs) 608c7f4d7adSDag-Erling Smørgrav #endif 6093005e0a3SDag-Erling Smørgrav else if(strcmp(opt, "ip-ratelimit:") == 0) { 6103005e0a3SDag-Erling Smørgrav IS_NUMBER_OR_ZERO; cfg->ip_ratelimit = atoi(val); 6113005e0a3SDag-Erling Smørgrav infra_ip_ratelimit=cfg->ip_ratelimit; 6123005e0a3SDag-Erling Smørgrav } 61309a3aaf3SDag-Erling Smørgrav else if(strcmp(opt, "ratelimit:") == 0) { 61409a3aaf3SDag-Erling Smørgrav IS_NUMBER_OR_ZERO; cfg->ratelimit = atoi(val); 61509a3aaf3SDag-Erling Smørgrav infra_dp_ratelimit=cfg->ratelimit; 61609a3aaf3SDag-Erling Smørgrav } 6173005e0a3SDag-Erling Smørgrav else S_MEMSIZE("ip-ratelimit-size:", ip_ratelimit_size) 61809a3aaf3SDag-Erling Smørgrav else S_MEMSIZE("ratelimit-size:", ratelimit_size) 6193005e0a3SDag-Erling Smørgrav else S_POW2("ip-ratelimit-slabs:", ip_ratelimit_slabs) 62009a3aaf3SDag-Erling Smørgrav else S_POW2("ratelimit-slabs:", ratelimit_slabs) 6213005e0a3SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("ip-ratelimit-factor:", ip_ratelimit_factor) 62209a3aaf3SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("ratelimit-factor:", ratelimit_factor) 6230fb34990SDag-Erling Smørgrav else S_NUMBER_OR_ZERO("low-rtt:", low_rtt) 624*3bd4df0aSDag-Erling Smørgrav else S_NUMBER_OR_ZERO("low-rtt-pct:", low_rtt_permil) 625*3bd4df0aSDag-Erling Smørgrav else S_NUMBER_OR_ZERO("low-rtt-permil:", low_rtt_permil) 62605ab2901SDag-Erling Smørgrav else S_YNO("qname-minimisation:", qname_minimisation) 627bc892140SDag-Erling Smørgrav else S_YNO("qname-minimisation-strict:", qname_minimisation_strict) 628c7f4d7adSDag-Erling Smørgrav #ifdef USE_IPSECMOD 629c7f4d7adSDag-Erling Smørgrav else S_YNO("ipsecmod-enabled:", ipsecmod_enabled) 630c7f4d7adSDag-Erling Smørgrav else S_YNO("ipsecmod-ignore-bogus:", ipsecmod_ignore_bogus) 631c7f4d7adSDag-Erling Smørgrav else if(strcmp(opt, "ipsecmod-max-ttl:") == 0) 632c7f4d7adSDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->ipsecmod_max_ttl = atoi(val); } 633c7f4d7adSDag-Erling Smørgrav else S_YNO("ipsecmod-strict:", ipsecmod_strict) 634c7f4d7adSDag-Erling Smørgrav #endif 635e2d15004SDag-Erling Smørgrav else if(strcmp(opt, "define-tag:") ==0) { 636e2d15004SDag-Erling Smørgrav return config_add_tag(cfg, val); 63717d15b25SDag-Erling Smørgrav /* val_sig_skew_min and max are copied into val_env during init, 63817d15b25SDag-Erling Smørgrav * so this does not update val_env with set_option */ 639e2d15004SDag-Erling Smørgrav } else if(strcmp(opt, "val-sig-skew-min:") == 0) 64017d15b25SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->val_sig_skew_min = (int32_t)atoi(val); } 64117d15b25SDag-Erling Smørgrav else if(strcmp(opt, "val-sig-skew-max:") == 0) 64217d15b25SDag-Erling Smørgrav { IS_NUMBER_OR_ZERO; cfg->val_sig_skew_max = (int32_t)atoi(val); } 643b7579f77SDag-Erling Smørgrav else if (strcmp(opt, "outgoing-interface:") == 0) { 644b7579f77SDag-Erling Smørgrav char* d = strdup(val); 64509a3aaf3SDag-Erling Smørgrav char** oi = 64609a3aaf3SDag-Erling Smørgrav (char**)reallocarray(NULL, (size_t)cfg->num_out_ifs+1, sizeof(char*)); 647b7579f77SDag-Erling Smørgrav if(!d || !oi) { free(d); free(oi); return -1; } 648b7579f77SDag-Erling Smørgrav if(cfg->out_ifs && cfg->num_out_ifs) { 649b7579f77SDag-Erling Smørgrav memmove(oi, cfg->out_ifs, cfg->num_out_ifs*sizeof(char*)); 650b7579f77SDag-Erling Smørgrav free(cfg->out_ifs); 651b7579f77SDag-Erling Smørgrav } 652b7579f77SDag-Erling Smørgrav oi[cfg->num_out_ifs++] = d; 653b7579f77SDag-Erling Smørgrav cfg->out_ifs = oi; 654b7579f77SDag-Erling Smørgrav } else { 655b7579f77SDag-Erling Smørgrav /* unknown or unsupported (from the set_option interface): 656b7579f77SDag-Erling Smørgrav * interface, outgoing-interface, access-control, 657b7579f77SDag-Erling Smørgrav * stub-zone, name, stub-addr, stub-host, stub-prime 658bc892140SDag-Erling Smørgrav * forward-first, stub-first, forward-ssl-upstream, 65957bddd21SDag-Erling Smørgrav * stub-ssl-upstream, forward-zone, auth-zone 660bc892140SDag-Erling Smørgrav * name, forward-addr, forward-host, 661e2d15004SDag-Erling Smørgrav * ratelimit-for-domain, ratelimit-below-domain, 662c7f4d7adSDag-Erling Smørgrav * local-zone-tag, access-control-view, 663c7f4d7adSDag-Erling Smørgrav * send-client-subnet, client-subnet-always-forward, 664c7f4d7adSDag-Erling Smørgrav * max-client-subnet-ipv4, max-client-subnet-ipv6, ipsecmod_hook, 665c7f4d7adSDag-Erling Smørgrav * ipsecmod_whitelist. */ 666b7579f77SDag-Erling Smørgrav return 0; 667b7579f77SDag-Erling Smørgrav } 668b7579f77SDag-Erling Smørgrav return 1; 669b7579f77SDag-Erling Smørgrav } 670b7579f77SDag-Erling Smørgrav 671b7579f77SDag-Erling Smørgrav void config_print_func(char* line, void* arg) 672b7579f77SDag-Erling Smørgrav { 673b7579f77SDag-Erling Smørgrav FILE* f = (FILE*)arg; 674b7579f77SDag-Erling Smørgrav (void)fprintf(f, "%s\n", line); 675b7579f77SDag-Erling Smørgrav } 676b7579f77SDag-Erling Smørgrav 677b7579f77SDag-Erling Smørgrav /** collate func arg */ 678b7579f77SDag-Erling Smørgrav struct config_collate_arg { 679b7579f77SDag-Erling Smørgrav /** list of result items */ 680b7579f77SDag-Erling Smørgrav struct config_strlist_head list; 681b7579f77SDag-Erling Smørgrav /** if a malloc error occurred, 0 is OK */ 682b7579f77SDag-Erling Smørgrav int status; 683b7579f77SDag-Erling Smørgrav }; 684b7579f77SDag-Erling Smørgrav 685b7579f77SDag-Erling Smørgrav void config_collate_func(char* line, void* arg) 686b7579f77SDag-Erling Smørgrav { 687b7579f77SDag-Erling Smørgrav struct config_collate_arg* m = (struct config_collate_arg*)arg; 688b7579f77SDag-Erling Smørgrav if(m->status) 689b7579f77SDag-Erling Smørgrav return; 690b7579f77SDag-Erling Smørgrav if(!cfg_strlist_append(&m->list, strdup(line))) 691b7579f77SDag-Erling Smørgrav m->status = 1; 692b7579f77SDag-Erling Smørgrav } 693b7579f77SDag-Erling Smørgrav 694b7579f77SDag-Erling Smørgrav int config_get_option_list(struct config_file* cfg, const char* opt, 695b7579f77SDag-Erling Smørgrav struct config_strlist** list) 696b7579f77SDag-Erling Smørgrav { 697b7579f77SDag-Erling Smørgrav struct config_collate_arg m; 698b7579f77SDag-Erling Smørgrav memset(&m, 0, sizeof(m)); 699b7579f77SDag-Erling Smørgrav *list = NULL; 700b7579f77SDag-Erling Smørgrav if(!config_get_option(cfg, opt, config_collate_func, &m)) 701b7579f77SDag-Erling Smørgrav return 1; 702b7579f77SDag-Erling Smørgrav if(m.status) { 703b7579f77SDag-Erling Smørgrav config_delstrlist(m.list.first); 704b7579f77SDag-Erling Smørgrav return 2; 705b7579f77SDag-Erling Smørgrav } 706b7579f77SDag-Erling Smørgrav *list = m.list.first; 707b7579f77SDag-Erling Smørgrav return 0; 708b7579f77SDag-Erling Smørgrav } 709b7579f77SDag-Erling Smørgrav 710b7579f77SDag-Erling Smørgrav int 711b7579f77SDag-Erling Smørgrav config_get_option_collate(struct config_file* cfg, const char* opt, char** str) 712b7579f77SDag-Erling Smørgrav { 713b7579f77SDag-Erling Smørgrav struct config_strlist* list = NULL; 714b7579f77SDag-Erling Smørgrav int r; 715b7579f77SDag-Erling Smørgrav *str = NULL; 716b7579f77SDag-Erling Smørgrav if((r = config_get_option_list(cfg, opt, &list)) != 0) 717b7579f77SDag-Erling Smørgrav return r; 718b7579f77SDag-Erling Smørgrav *str = config_collate_cat(list); 719b7579f77SDag-Erling Smørgrav config_delstrlist(list); 720b7579f77SDag-Erling Smørgrav if(!*str) return 2; 721b7579f77SDag-Erling Smørgrav return 0; 722b7579f77SDag-Erling Smørgrav } 723b7579f77SDag-Erling Smørgrav 724b7579f77SDag-Erling Smørgrav char* 725b7579f77SDag-Erling Smørgrav config_collate_cat(struct config_strlist* list) 726b7579f77SDag-Erling Smørgrav { 727b7579f77SDag-Erling Smørgrav size_t total = 0, left; 728b7579f77SDag-Erling Smørgrav struct config_strlist* s; 729b7579f77SDag-Erling Smørgrav char *r, *w; 730b7579f77SDag-Erling Smørgrav if(!list) /* no elements */ 731b7579f77SDag-Erling Smørgrav return strdup(""); 732b7579f77SDag-Erling Smørgrav if(list->next == NULL) /* one element , no newline at end. */ 733b7579f77SDag-Erling Smørgrav return strdup(list->str); 734b7579f77SDag-Erling Smørgrav /* count total length */ 735b7579f77SDag-Erling Smørgrav for(s=list; s; s=s->next) 736b7579f77SDag-Erling Smørgrav total += strlen(s->str) + 1; /* len + newline */ 737b7579f77SDag-Erling Smørgrav left = total+1; /* one extra for nul at end */ 738b7579f77SDag-Erling Smørgrav r = malloc(left); 739b7579f77SDag-Erling Smørgrav if(!r) 740b7579f77SDag-Erling Smørgrav return NULL; 741b7579f77SDag-Erling Smørgrav w = r; 742b7579f77SDag-Erling Smørgrav for(s=list; s; s=s->next) { 743b7579f77SDag-Erling Smørgrav size_t this = strlen(s->str); 744b7579f77SDag-Erling Smørgrav if(this+2 > left) { /* sanity check */ 745b7579f77SDag-Erling Smørgrav free(r); 746b7579f77SDag-Erling Smørgrav return NULL; 747b7579f77SDag-Erling Smørgrav } 748b7579f77SDag-Erling Smørgrav snprintf(w, left, "%s\n", s->str); 74917d15b25SDag-Erling Smørgrav this = strlen(w); 75017d15b25SDag-Erling Smørgrav w += this; 75117d15b25SDag-Erling Smørgrav left -= this; 752b7579f77SDag-Erling Smørgrav } 753b7579f77SDag-Erling Smørgrav return r; 754b7579f77SDag-Erling Smørgrav } 755b7579f77SDag-Erling Smørgrav 756b7579f77SDag-Erling Smørgrav /** compare and print decimal option */ 757b7579f77SDag-Erling Smørgrav #define O_DEC(opt, str, var) if(strcmp(opt, str)==0) \ 758b7579f77SDag-Erling Smørgrav {snprintf(buf, len, "%d", (int)cfg->var); \ 759b7579f77SDag-Erling Smørgrav func(buf, arg);} 760b7579f77SDag-Erling Smørgrav /** compare and print unsigned option */ 761b7579f77SDag-Erling Smørgrav #define O_UNS(opt, str, var) if(strcmp(opt, str)==0) \ 762b7579f77SDag-Erling Smørgrav {snprintf(buf, len, "%u", (unsigned)cfg->var); \ 763b7579f77SDag-Erling Smørgrav func(buf, arg);} 764b7579f77SDag-Erling Smørgrav /** compare and print yesno option */ 765b7579f77SDag-Erling Smørgrav #define O_YNO(opt, str, var) if(strcmp(opt, str)==0) \ 766b7579f77SDag-Erling Smørgrav {func(cfg->var?"yes":"no", arg);} 767b7579f77SDag-Erling Smørgrav /** compare and print string option */ 768b7579f77SDag-Erling Smørgrav #define O_STR(opt, str, var) if(strcmp(opt, str)==0) \ 769b7579f77SDag-Erling Smørgrav {func(cfg->var?cfg->var:"", arg);} 770b7579f77SDag-Erling Smørgrav /** compare and print array option */ 771b7579f77SDag-Erling Smørgrav #define O_IFC(opt, str, num, arr) if(strcmp(opt, str)==0) \ 772b7579f77SDag-Erling Smørgrav {int i; for(i=0; i<cfg->num; i++) func(cfg->arr[i], arg);} 773b7579f77SDag-Erling Smørgrav /** compare and print memorysize option */ 774b7579f77SDag-Erling Smørgrav #define O_MEM(opt, str, var) if(strcmp(opt, str)==0) { \ 775b7579f77SDag-Erling Smørgrav if(cfg->var > 1024*1024*1024) { \ 776b7579f77SDag-Erling Smørgrav size_t f=cfg->var/(size_t)1000000, b=cfg->var%(size_t)1000000; \ 77709a3aaf3SDag-Erling Smørgrav snprintf(buf, len, "%u%6.6u", (unsigned)f, (unsigned)b); \ 77809a3aaf3SDag-Erling Smørgrav } else snprintf(buf, len, "%u", (unsigned)cfg->var); \ 779b7579f77SDag-Erling Smørgrav func(buf, arg);} 780b7579f77SDag-Erling Smørgrav /** compare and print list option */ 781b7579f77SDag-Erling Smørgrav #define O_LST(opt, name, lst) if(strcmp(opt, name)==0) { \ 782b7579f77SDag-Erling Smørgrav struct config_strlist* p = cfg->lst; \ 783b7579f77SDag-Erling Smørgrav for(p = cfg->lst; p; p = p->next) \ 784b7579f77SDag-Erling Smørgrav func(p->str, arg); \ 785b7579f77SDag-Erling Smørgrav } 786b7579f77SDag-Erling Smørgrav /** compare and print list option */ 787b7579f77SDag-Erling Smørgrav #define O_LS2(opt, name, lst) if(strcmp(opt, name)==0) { \ 788b7579f77SDag-Erling Smørgrav struct config_str2list* p = cfg->lst; \ 789e2d15004SDag-Erling Smørgrav for(p = cfg->lst; p; p = p->next) { \ 790e2d15004SDag-Erling Smørgrav snprintf(buf, len, "%s %s", p->str, p->str2); \ 791b7579f77SDag-Erling Smørgrav func(buf, arg); \ 792e2d15004SDag-Erling Smørgrav } \ 793e2d15004SDag-Erling Smørgrav } 794b5663de9SDag-Erling Smørgrav /** compare and print list option */ 795b5663de9SDag-Erling Smørgrav #define O_LS3(opt, name, lst) if(strcmp(opt, name)==0) { \ 796b5663de9SDag-Erling Smørgrav struct config_str3list* p = cfg->lst; \ 797b5663de9SDag-Erling Smørgrav for(p = cfg->lst; p; p = p->next) { \ 798b5663de9SDag-Erling Smørgrav snprintf(buf, len, "%s %s %s", p->str, p->str2, p->str3); \ 799b5663de9SDag-Erling Smørgrav func(buf, arg); \ 800b5663de9SDag-Erling Smørgrav } \ 801b5663de9SDag-Erling Smørgrav } 802e2d15004SDag-Erling Smørgrav /** compare and print taglist option */ 803e2d15004SDag-Erling Smørgrav #define O_LTG(opt, name, lst) if(strcmp(opt, name)==0) { \ 804e2d15004SDag-Erling Smørgrav char* tmpstr = NULL; \ 805e2d15004SDag-Erling Smørgrav struct config_strbytelist *p = cfg->lst; \ 806e2d15004SDag-Erling Smørgrav for(p = cfg->lst; p; p = p->next) {\ 807e2d15004SDag-Erling Smørgrav tmpstr = config_taglist2str(cfg, p->str2, p->str2len); \ 808e2d15004SDag-Erling Smørgrav if(tmpstr) {\ 809e2d15004SDag-Erling Smørgrav snprintf(buf, len, "%s %s", p->str, tmpstr); \ 810e2d15004SDag-Erling Smørgrav func(buf, arg); \ 811e2d15004SDag-Erling Smørgrav free(tmpstr); \ 812e2d15004SDag-Erling Smørgrav } \ 813e2d15004SDag-Erling Smørgrav } \ 814b7579f77SDag-Erling Smørgrav } 815b7579f77SDag-Erling Smørgrav 816b7579f77SDag-Erling Smørgrav int 817b7579f77SDag-Erling Smørgrav config_get_option(struct config_file* cfg, const char* opt, 818b7579f77SDag-Erling Smørgrav void (*func)(char*,void*), void* arg) 819b7579f77SDag-Erling Smørgrav { 8200fb34990SDag-Erling Smørgrav char buf[1024], nopt[64]; 821b7579f77SDag-Erling Smørgrav size_t len = sizeof(buf); 8220fb34990SDag-Erling Smørgrav if(opt && opt[strlen(opt)-1] == ':' && strlen(opt)<sizeof(nopt)) { 8230fb34990SDag-Erling Smørgrav memmove(nopt, opt, strlen(opt)); 8240fb34990SDag-Erling Smørgrav nopt[strlen(opt)-1] = 0; 8250fb34990SDag-Erling Smørgrav opt = nopt; 8260fb34990SDag-Erling Smørgrav } 827b7579f77SDag-Erling Smørgrav fptr_ok(fptr_whitelist_print_func(func)); 828b7579f77SDag-Erling Smørgrav O_DEC(opt, "verbosity", verbosity) 829b7579f77SDag-Erling Smørgrav else O_DEC(opt, "statistics-interval", stat_interval) 830b7579f77SDag-Erling Smørgrav else O_YNO(opt, "statistics-cumulative", stat_cumulative) 831b7579f77SDag-Erling Smørgrav else O_YNO(opt, "extended-statistics", stat_extended) 83265b390aaSDag-Erling Smørgrav else O_YNO(opt, "shm-enable", shm_enable) 83365b390aaSDag-Erling Smørgrav else O_DEC(opt, "shm-key", shm_key) 834b7579f77SDag-Erling Smørgrav else O_YNO(opt, "use-syslog", use_syslog) 835bc892140SDag-Erling Smørgrav else O_STR(opt, "log-identity", log_identity) 83617d15b25SDag-Erling Smørgrav else O_YNO(opt, "log-time-ascii", log_time_ascii) 837b7579f77SDag-Erling Smørgrav else O_DEC(opt, "num-threads", num_threads) 838b7579f77SDag-Erling Smørgrav else O_IFC(opt, "interface", num_ifs, ifs) 839b7579f77SDag-Erling Smørgrav else O_IFC(opt, "outgoing-interface", num_out_ifs, out_ifs) 840b7579f77SDag-Erling Smørgrav else O_YNO(opt, "interface-automatic", if_automatic) 841b7579f77SDag-Erling Smørgrav else O_DEC(opt, "port", port) 842b7579f77SDag-Erling Smørgrav else O_DEC(opt, "outgoing-range", outgoing_num_ports) 843b7579f77SDag-Erling Smørgrav else O_DEC(opt, "outgoing-num-tcp", outgoing_num_tcp) 844b7579f77SDag-Erling Smørgrav else O_DEC(opt, "incoming-num-tcp", incoming_num_tcp) 845b7579f77SDag-Erling Smørgrav else O_DEC(opt, "edns-buffer-size", edns_buffer_size) 846b7579f77SDag-Erling Smørgrav else O_DEC(opt, "msg-buffer-size", msg_buffer_size) 847b7579f77SDag-Erling Smørgrav else O_MEM(opt, "msg-cache-size", msg_cache_size) 848b7579f77SDag-Erling Smørgrav else O_DEC(opt, "msg-cache-slabs", msg_cache_slabs) 849b7579f77SDag-Erling Smørgrav else O_DEC(opt, "num-queries-per-thread", num_queries_per_thread) 850b7579f77SDag-Erling Smørgrav else O_UNS(opt, "jostle-timeout", jostle_time) 851b7579f77SDag-Erling Smørgrav else O_MEM(opt, "so-rcvbuf", so_rcvbuf) 852b7579f77SDag-Erling Smørgrav else O_MEM(opt, "so-sndbuf", so_sndbuf) 85317d15b25SDag-Erling Smørgrav else O_YNO(opt, "so-reuseport", so_reuseport) 85409a3aaf3SDag-Erling Smørgrav else O_YNO(opt, "ip-transparent", ip_transparent) 855e2d15004SDag-Erling Smørgrav else O_YNO(opt, "ip-freebind", ip_freebind) 856b7579f77SDag-Erling Smørgrav else O_MEM(opt, "rrset-cache-size", rrset_cache_size) 857b7579f77SDag-Erling Smørgrav else O_DEC(opt, "rrset-cache-slabs", rrset_cache_slabs) 858b7579f77SDag-Erling Smørgrav else O_YNO(opt, "prefetch-key", prefetch_key) 859b7579f77SDag-Erling Smørgrav else O_YNO(opt, "prefetch", prefetch) 860b7579f77SDag-Erling Smørgrav else O_DEC(opt, "cache-max-ttl", max_ttl) 86109a3aaf3SDag-Erling Smørgrav else O_DEC(opt, "cache-max-negative-ttl", max_negative_ttl) 86217d15b25SDag-Erling Smørgrav else O_DEC(opt, "cache-min-ttl", min_ttl) 863b7579f77SDag-Erling Smørgrav else O_DEC(opt, "infra-host-ttl", host_ttl) 864b7579f77SDag-Erling Smørgrav else O_DEC(opt, "infra-cache-slabs", infra_cache_slabs) 8656480faa8SDag-Erling Smørgrav else O_DEC(opt, "infra-cache-min-rtt", infra_cache_min_rtt) 866b7579f77SDag-Erling Smørgrav else O_MEM(opt, "infra-cache-numhosts", infra_cache_numhosts) 86717d15b25SDag-Erling Smørgrav else O_UNS(opt, "delay-close", delay_close) 868b7579f77SDag-Erling Smørgrav else O_YNO(opt, "do-ip4", do_ip4) 869b7579f77SDag-Erling Smørgrav else O_YNO(opt, "do-ip6", do_ip6) 870b7579f77SDag-Erling Smørgrav else O_YNO(opt, "do-udp", do_udp) 871b7579f77SDag-Erling Smørgrav else O_YNO(opt, "do-tcp", do_tcp) 872b7579f77SDag-Erling Smørgrav else O_YNO(opt, "tcp-upstream", tcp_upstream) 8738a384985SDag-Erling Smørgrav else O_YNO(opt, "udp-upstream-without-downstream", udp_upstream_without_downstream) 874f61ef7f6SDag-Erling Smørgrav else O_DEC(opt, "tcp-mss", tcp_mss) 875f61ef7f6SDag-Erling Smørgrav else O_DEC(opt, "outgoing-tcp-mss", outgoing_tcp_mss) 876b7579f77SDag-Erling Smørgrav else O_YNO(opt, "ssl-upstream", ssl_upstream) 877b7579f77SDag-Erling Smørgrav else O_STR(opt, "ssl-service-key", ssl_service_key) 878b7579f77SDag-Erling Smørgrav else O_STR(opt, "ssl-service-pem", ssl_service_pem) 879b7579f77SDag-Erling Smørgrav else O_DEC(opt, "ssl-port", ssl_port) 88057bddd21SDag-Erling Smørgrav else O_STR(opt, "tls-cert-bundle", tls_cert_bundle) 881*3bd4df0aSDag-Erling Smørgrav else O_YNO(opt, "tls-win-cert", tls_win_cert) 882*3bd4df0aSDag-Erling Smørgrav else O_LST(opt, "tls-additional-ports", tls_additional_ports) 8833005e0a3SDag-Erling Smørgrav else O_YNO(opt, "use-systemd", use_systemd) 884b7579f77SDag-Erling Smørgrav else O_YNO(opt, "do-daemonize", do_daemonize) 885b7579f77SDag-Erling Smørgrav else O_STR(opt, "chroot", chrootdir) 886b7579f77SDag-Erling Smørgrav else O_STR(opt, "username", username) 887b7579f77SDag-Erling Smørgrav else O_STR(opt, "directory", directory) 888b7579f77SDag-Erling Smørgrav else O_STR(opt, "logfile", logfile) 889b7579f77SDag-Erling Smørgrav else O_YNO(opt, "log-queries", log_queries) 8903005e0a3SDag-Erling Smørgrav else O_YNO(opt, "log-replies", log_replies) 891b7579f77SDag-Erling Smørgrav else O_STR(opt, "pidfile", pidfile) 892b7579f77SDag-Erling Smørgrav else O_YNO(opt, "hide-identity", hide_identity) 893b7579f77SDag-Erling Smørgrav else O_YNO(opt, "hide-version", hide_version) 89465b390aaSDag-Erling Smørgrav else O_YNO(opt, "hide-trustanchor", hide_trustanchor) 895b7579f77SDag-Erling Smørgrav else O_STR(opt, "identity", identity) 896b7579f77SDag-Erling Smørgrav else O_STR(opt, "version", version) 897b7579f77SDag-Erling Smørgrav else O_STR(opt, "target-fetch-policy", target_fetch_policy) 898b7579f77SDag-Erling Smørgrav else O_YNO(opt, "harden-short-bufsize", harden_short_bufsize) 899b7579f77SDag-Erling Smørgrav else O_YNO(opt, "harden-large-queries", harden_large_queries) 900b7579f77SDag-Erling Smørgrav else O_YNO(opt, "harden-glue", harden_glue) 901b7579f77SDag-Erling Smørgrav else O_YNO(opt, "harden-dnssec-stripped", harden_dnssec_stripped) 902b7579f77SDag-Erling Smørgrav else O_YNO(opt, "harden-below-nxdomain", harden_below_nxdomain) 903b7579f77SDag-Erling Smørgrav else O_YNO(opt, "harden-referral-path", harden_referral_path) 90409a3aaf3SDag-Erling Smørgrav else O_YNO(opt, "harden-algo-downgrade", harden_algo_downgrade) 905b7579f77SDag-Erling Smørgrav else O_YNO(opt, "use-caps-for-id", use_caps_bits_for_id) 90609a3aaf3SDag-Erling Smørgrav else O_LST(opt, "caps-whitelist", caps_whitelist) 907b7579f77SDag-Erling Smørgrav else O_DEC(opt, "unwanted-reply-threshold", unwanted_threshold) 908b7579f77SDag-Erling Smørgrav else O_YNO(opt, "do-not-query-localhost", donotquery_localhost) 909b7579f77SDag-Erling Smørgrav else O_STR(opt, "module-config", module_conf) 910b7579f77SDag-Erling Smørgrav else O_STR(opt, "dlv-anchor-file", dlv_anchor_file) 911b7579f77SDag-Erling Smørgrav else O_DEC(opt, "val-bogus-ttl", bogus_ttl) 912b7579f77SDag-Erling Smørgrav else O_YNO(opt, "val-clean-additional", val_clean_additional) 913b7579f77SDag-Erling Smørgrav else O_DEC(opt, "val-log-level", val_log_level) 914b7579f77SDag-Erling Smørgrav else O_YNO(opt, "val-permissive-mode", val_permissive_mode) 9150fb34990SDag-Erling Smørgrav else O_YNO(opt, "aggressive-nsec", aggressive_nsec) 916b7579f77SDag-Erling Smørgrav else O_YNO(opt, "ignore-cd-flag", ignore_cd) 917bc892140SDag-Erling Smørgrav else O_YNO(opt, "serve-expired", serve_expired) 918b7579f77SDag-Erling Smørgrav else O_STR(opt, "val-nsec3-keysize-iterations",val_nsec3_key_iterations) 919b7579f77SDag-Erling Smørgrav else O_UNS(opt, "add-holddown", add_holddown) 920b7579f77SDag-Erling Smørgrav else O_UNS(opt, "del-holddown", del_holddown) 921b7579f77SDag-Erling Smørgrav else O_UNS(opt, "keep-missing", keep_missing) 922b75612f8SDag-Erling Smørgrav else O_YNO(opt, "permit-small-holddown", permit_small_holddown) 923b7579f77SDag-Erling Smørgrav else O_MEM(opt, "key-cache-size", key_cache_size) 924b7579f77SDag-Erling Smørgrav else O_DEC(opt, "key-cache-slabs", key_cache_slabs) 925b7579f77SDag-Erling Smørgrav else O_MEM(opt, "neg-cache-size", neg_cache_size) 926b7579f77SDag-Erling Smørgrav else O_YNO(opt, "control-enable", remote_control_enable) 927b7579f77SDag-Erling Smørgrav else O_DEC(opt, "control-port", control_port) 928b7579f77SDag-Erling Smørgrav else O_STR(opt, "server-key-file", server_key_file) 929b7579f77SDag-Erling Smørgrav else O_STR(opt, "server-cert-file", server_cert_file) 930b7579f77SDag-Erling Smørgrav else O_STR(opt, "control-key-file", control_key_file) 931b7579f77SDag-Erling Smørgrav else O_STR(opt, "control-cert-file", control_cert_file) 932b7579f77SDag-Erling Smørgrav else O_LST(opt, "root-hints", root_hints) 933b7579f77SDag-Erling Smørgrav else O_LS2(opt, "access-control", acls) 934b7579f77SDag-Erling Smørgrav else O_LST(opt, "do-not-query-address", donotqueryaddrs) 935b7579f77SDag-Erling Smørgrav else O_LST(opt, "private-address", private_address) 936b7579f77SDag-Erling Smørgrav else O_LST(opt, "private-domain", private_domain) 937b7579f77SDag-Erling Smørgrav else O_LST(opt, "auto-trust-anchor-file", auto_trust_anchor_file_list) 938b7579f77SDag-Erling Smørgrav else O_LST(opt, "trust-anchor-file", trust_anchor_file_list) 939b7579f77SDag-Erling Smørgrav else O_LST(opt, "trust-anchor", trust_anchor_list) 940b7579f77SDag-Erling Smørgrav else O_LST(opt, "trusted-keys-file", trusted_keys_file_list) 941c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "trust-anchor-signaling", trust_anchor_signaling) 9420fb34990SDag-Erling Smørgrav else O_YNO(opt, "root-key-sentinel", root_key_sentinel) 943b7579f77SDag-Erling Smørgrav else O_LST(opt, "dlv-anchor", dlv_anchor_list) 944b7579f77SDag-Erling Smørgrav else O_LST(opt, "control-interface", control_ifs) 945b7579f77SDag-Erling Smørgrav else O_LST(opt, "domain-insecure", domain_insecure) 946b7579f77SDag-Erling Smørgrav else O_UNS(opt, "val-override-date", val_date_override) 947b7579f77SDag-Erling Smørgrav else O_YNO(opt, "minimal-responses", minimal_responses) 948b7579f77SDag-Erling Smørgrav else O_YNO(opt, "rrset-roundrobin", rrset_roundrobin) 94965b390aaSDag-Erling Smørgrav #ifdef CLIENT_SUBNET 95065b390aaSDag-Erling Smørgrav else O_LST(opt, "send-client-subnet", client_subnet) 951c7f4d7adSDag-Erling Smørgrav else O_LST(opt, "client-subnet-zone", client_subnet_zone) 95265b390aaSDag-Erling Smørgrav else O_DEC(opt, "max-client-subnet-ipv4", max_client_subnet_ipv4) 95365b390aaSDag-Erling Smørgrav else O_DEC(opt, "max-client-subnet-ipv6", max_client_subnet_ipv6) 95465b390aaSDag-Erling Smørgrav else O_YNO(opt, "client-subnet-always-forward:", 95565b390aaSDag-Erling Smørgrav client_subnet_always_forward) 95665b390aaSDag-Erling Smørgrav #endif 957c7f4d7adSDag-Erling Smørgrav #ifdef USE_DNSTAP 958c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-enable", dnstap) 959c7f4d7adSDag-Erling Smørgrav else O_STR(opt, "dnstap-socket-path", dnstap_socket_path) 960c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-send-identity", dnstap_send_identity) 961c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-send-version", dnstap_send_version) 962c7f4d7adSDag-Erling Smørgrav else O_STR(opt, "dnstap-identity", dnstap_identity) 963c7f4d7adSDag-Erling Smørgrav else O_STR(opt, "dnstap-version", dnstap_version) 964c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-log-resolver-query-messages", 965c7f4d7adSDag-Erling Smørgrav dnstap_log_resolver_query_messages) 966c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-log-resolver-response-messages", 967c7f4d7adSDag-Erling Smørgrav dnstap_log_resolver_response_messages) 968c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-log-client-query-messages", 969c7f4d7adSDag-Erling Smørgrav dnstap_log_client_query_messages) 970c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-log-client-response-messages", 971c7f4d7adSDag-Erling Smørgrav dnstap_log_client_response_messages) 972c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-log-forwarder-query-messages", 973c7f4d7adSDag-Erling Smørgrav dnstap_log_forwarder_query_messages) 974c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnstap-log-forwarder-response-messages", 975c7f4d7adSDag-Erling Smørgrav dnstap_log_forwarder_response_messages) 976c7f4d7adSDag-Erling Smørgrav #endif 977c7f4d7adSDag-Erling Smørgrav #ifdef USE_DNSCRYPT 978c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "dnscrypt-enable", dnscrypt) 979c7f4d7adSDag-Erling Smørgrav else O_DEC(opt, "dnscrypt-port", dnscrypt_port) 980c7f4d7adSDag-Erling Smørgrav else O_STR(opt, "dnscrypt-provider", dnscrypt_provider) 981c7f4d7adSDag-Erling Smørgrav else O_LST(opt, "dnscrypt-provider-cert", dnscrypt_provider_cert) 98257bddd21SDag-Erling Smørgrav else O_LST(opt, "dnscrypt-provider-cert-rotated", dnscrypt_provider_cert_rotated) 983c7f4d7adSDag-Erling Smørgrav else O_LST(opt, "dnscrypt-secret-key", dnscrypt_secret_key) 984971980c3SDag-Erling Smørgrav else O_MEM(opt, "dnscrypt-shared-secret-cache-size", 985971980c3SDag-Erling Smørgrav dnscrypt_shared_secret_cache_size) 986971980c3SDag-Erling Smørgrav else O_DEC(opt, "dnscrypt-shared-secret-cache-slabs", 987971980c3SDag-Erling Smørgrav dnscrypt_shared_secret_cache_slabs) 9888a384985SDag-Erling Smørgrav else O_MEM(opt, "dnscrypt-nonce-cache-size", 9898a384985SDag-Erling Smørgrav dnscrypt_nonce_cache_size) 9908a384985SDag-Erling Smørgrav else O_DEC(opt, "dnscrypt-nonce-cache-slabs", 9918a384985SDag-Erling Smørgrav dnscrypt_nonce_cache_slabs) 992c7f4d7adSDag-Erling Smørgrav #endif 993c536e4dcSDag-Erling Smørgrav else O_YNO(opt, "unblock-lan-zones", unblock_lan_zones) 9940de4f1bfSDag-Erling Smørgrav else O_YNO(opt, "insecure-lan-zones", insecure_lan_zones) 99517d15b25SDag-Erling Smørgrav else O_DEC(opt, "max-udp-size", max_udp_size) 99617d15b25SDag-Erling Smørgrav else O_STR(opt, "python-script", python_script) 997e2d15004SDag-Erling Smørgrav else O_YNO(opt, "disable-dnssec-lame-check", disable_dnssec_lame_check) 9983005e0a3SDag-Erling Smørgrav else O_DEC(opt, "ip-ratelimit", ip_ratelimit) 99909a3aaf3SDag-Erling Smørgrav else O_DEC(opt, "ratelimit", ratelimit) 10003005e0a3SDag-Erling Smørgrav else O_MEM(opt, "ip-ratelimit-size", ip_ratelimit_size) 100109a3aaf3SDag-Erling Smørgrav else O_MEM(opt, "ratelimit-size", ratelimit_size) 10023005e0a3SDag-Erling Smørgrav else O_DEC(opt, "ip-ratelimit-slabs", ip_ratelimit_slabs) 100309a3aaf3SDag-Erling Smørgrav else O_DEC(opt, "ratelimit-slabs", ratelimit_slabs) 100409a3aaf3SDag-Erling Smørgrav else O_LS2(opt, "ratelimit-for-domain", ratelimit_for_domain) 100509a3aaf3SDag-Erling Smørgrav else O_LS2(opt, "ratelimit-below-domain", ratelimit_below_domain) 10063005e0a3SDag-Erling Smørgrav else O_DEC(opt, "ip-ratelimit-factor", ip_ratelimit_factor) 100709a3aaf3SDag-Erling Smørgrav else O_DEC(opt, "ratelimit-factor", ratelimit_factor) 10080fb34990SDag-Erling Smørgrav else O_DEC(opt, "low-rtt", low_rtt) 1009*3bd4df0aSDag-Erling Smørgrav else O_DEC(opt, "low-rtt-pct", low_rtt_permil) 1010*3bd4df0aSDag-Erling Smørgrav else O_DEC(opt, "low-rtt-permil", low_rtt_permil) 101117d15b25SDag-Erling Smørgrav else O_DEC(opt, "val-sig-skew-min", val_sig_skew_min) 101217d15b25SDag-Erling Smørgrav else O_DEC(opt, "val-sig-skew-max", val_sig_skew_max) 101305ab2901SDag-Erling Smørgrav else O_YNO(opt, "qname-minimisation", qname_minimisation) 1014bc892140SDag-Erling Smørgrav else O_YNO(opt, "qname-minimisation-strict", qname_minimisation_strict) 1015e2d15004SDag-Erling Smørgrav else O_IFC(opt, "define-tag", num_tags, tagname) 1016e2d15004SDag-Erling Smørgrav else O_LTG(opt, "local-zone-tag", local_zone_tags) 1017b5663de9SDag-Erling Smørgrav else O_LTG(opt, "access-control-tag", acl_tags) 101865b390aaSDag-Erling Smørgrav else O_LTG(opt, "response-ip-tag", respip_tags) 1019b5663de9SDag-Erling Smørgrav else O_LS3(opt, "local-zone-override", local_zone_overrides) 1020b5663de9SDag-Erling Smørgrav else O_LS3(opt, "access-control-tag-action", acl_tag_actions) 1021b5663de9SDag-Erling Smørgrav else O_LS3(opt, "access-control-tag-data", acl_tag_datas) 1022bc892140SDag-Erling Smørgrav else O_LS2(opt, "access-control-view", acl_view) 1023c7f4d7adSDag-Erling Smørgrav #ifdef USE_IPSECMOD 1024c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "ipsecmod-enabled", ipsecmod_enabled) 1025c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "ipsecmod-ignore-bogus", ipsecmod_ignore_bogus) 1026c7f4d7adSDag-Erling Smørgrav else O_STR(opt, "ipsecmod-hook", ipsecmod_hook) 1027c7f4d7adSDag-Erling Smørgrav else O_DEC(opt, "ipsecmod-max-ttl", ipsecmod_max_ttl) 1028c7f4d7adSDag-Erling Smørgrav else O_LST(opt, "ipsecmod-whitelist", ipsecmod_whitelist) 1029c7f4d7adSDag-Erling Smørgrav else O_YNO(opt, "ipsecmod-strict", ipsecmod_strict) 1030c7f4d7adSDag-Erling Smørgrav #endif 1031971980c3SDag-Erling Smørgrav #ifdef USE_CACHEDB 1032971980c3SDag-Erling Smørgrav else O_STR(opt, "backend", cachedb_backend) 1033971980c3SDag-Erling Smørgrav else O_STR(opt, "secret-seed", cachedb_secret) 1034971980c3SDag-Erling Smørgrav #endif 1035b7579f77SDag-Erling Smørgrav /* not here: 1036b7579f77SDag-Erling Smørgrav * outgoing-permit, outgoing-avoid - have list of ports 1037b7579f77SDag-Erling Smørgrav * local-zone - zones and nodefault variables 1038b7579f77SDag-Erling Smørgrav * local-data - see below 1039b7579f77SDag-Erling Smørgrav * local-data-ptr - converted to local-data entries 1040b7579f77SDag-Erling Smørgrav * stub-zone, name, stub-addr, stub-host, stub-prime 1041b7579f77SDag-Erling Smørgrav * forward-zone, name, forward-addr, forward-host 1042b7579f77SDag-Erling Smørgrav */ 1043b7579f77SDag-Erling Smørgrav else return 0; 1044b7579f77SDag-Erling Smørgrav return 1; 1045b7579f77SDag-Erling Smørgrav } 1046b7579f77SDag-Erling Smørgrav 1047b7579f77SDag-Erling Smørgrav /** initialize the global cfg_parser object */ 1048b7579f77SDag-Erling Smørgrav static void 1049b7579f77SDag-Erling Smørgrav create_cfg_parser(struct config_file* cfg, char* filename, const char* chroot) 1050b7579f77SDag-Erling Smørgrav { 1051b7579f77SDag-Erling Smørgrav static struct config_parser_state st; 1052b7579f77SDag-Erling Smørgrav cfg_parser = &st; 1053b7579f77SDag-Erling Smørgrav cfg_parser->filename = filename; 1054b7579f77SDag-Erling Smørgrav cfg_parser->line = 1; 1055b7579f77SDag-Erling Smørgrav cfg_parser->errors = 0; 1056b7579f77SDag-Erling Smørgrav cfg_parser->cfg = cfg; 1057b7579f77SDag-Erling Smørgrav cfg_parser->chroot = chroot; 105817d15b25SDag-Erling Smørgrav init_cfg_parse(); 1059b7579f77SDag-Erling Smørgrav } 1060b7579f77SDag-Erling Smørgrav 1061b7579f77SDag-Erling Smørgrav int 1062b7579f77SDag-Erling Smørgrav config_read(struct config_file* cfg, const char* filename, const char* chroot) 1063b7579f77SDag-Erling Smørgrav { 1064b7579f77SDag-Erling Smørgrav FILE *in; 1065b7579f77SDag-Erling Smørgrav char *fname = (char*)filename; 10668ed2b524SDag-Erling Smørgrav #ifdef HAVE_GLOB 10678ed2b524SDag-Erling Smørgrav glob_t g; 10688ed2b524SDag-Erling Smørgrav size_t i; 10698ed2b524SDag-Erling Smørgrav int r, flags; 10708ed2b524SDag-Erling Smørgrav #endif 1071b7579f77SDag-Erling Smørgrav if(!fname) 1072b7579f77SDag-Erling Smørgrav return 1; 10738ed2b524SDag-Erling Smørgrav 10748ed2b524SDag-Erling Smørgrav /* check for wildcards */ 10758ed2b524SDag-Erling Smørgrav #ifdef HAVE_GLOB 10768ed2b524SDag-Erling Smørgrav if(!(!strchr(fname, '*') && !strchr(fname, '?') && !strchr(fname, '[') && 10778ed2b524SDag-Erling Smørgrav !strchr(fname, '{') && !strchr(fname, '~'))) { 10788ed2b524SDag-Erling Smørgrav verbose(VERB_QUERY, "wildcard found, processing %s", fname); 10798ed2b524SDag-Erling Smørgrav flags = 0 10808ed2b524SDag-Erling Smørgrav #ifdef GLOB_ERR 10818ed2b524SDag-Erling Smørgrav | GLOB_ERR 10828ed2b524SDag-Erling Smørgrav #endif 10838ed2b524SDag-Erling Smørgrav #ifdef GLOB_NOSORT 10848ed2b524SDag-Erling Smørgrav | GLOB_NOSORT 10858ed2b524SDag-Erling Smørgrav #endif 10868ed2b524SDag-Erling Smørgrav #ifdef GLOB_BRACE 10878ed2b524SDag-Erling Smørgrav | GLOB_BRACE 10888ed2b524SDag-Erling Smørgrav #endif 10898ed2b524SDag-Erling Smørgrav #ifdef GLOB_TILDE 10908ed2b524SDag-Erling Smørgrav | GLOB_TILDE 10918ed2b524SDag-Erling Smørgrav #endif 10928ed2b524SDag-Erling Smørgrav ; 10938ed2b524SDag-Erling Smørgrav memset(&g, 0, sizeof(g)); 10948ed2b524SDag-Erling Smørgrav r = glob(fname, flags, NULL, &g); 10958ed2b524SDag-Erling Smørgrav if(r) { 10968ed2b524SDag-Erling Smørgrav /* some error */ 10978ed2b524SDag-Erling Smørgrav globfree(&g); 10988ed2b524SDag-Erling Smørgrav if(r == GLOB_NOMATCH) { 10998ed2b524SDag-Erling Smørgrav verbose(VERB_QUERY, "include: " 11008ed2b524SDag-Erling Smørgrav "no matches for %s", fname); 11018ed2b524SDag-Erling Smørgrav return 1; 11028ed2b524SDag-Erling Smørgrav } else if(r == GLOB_NOSPACE) { 11038ed2b524SDag-Erling Smørgrav log_err("include: %s: " 11048ed2b524SDag-Erling Smørgrav "fnametern out of memory", fname); 11058ed2b524SDag-Erling Smørgrav } else if(r == GLOB_ABORTED) { 11068ed2b524SDag-Erling Smørgrav log_err("wildcard include: %s: expansion " 11078ed2b524SDag-Erling Smørgrav "aborted (%s)", fname, strerror(errno)); 11088ed2b524SDag-Erling Smørgrav } else { 11098ed2b524SDag-Erling Smørgrav log_err("wildcard include: %s: expansion " 11108ed2b524SDag-Erling Smørgrav "failed (%s)", fname, strerror(errno)); 11118ed2b524SDag-Erling Smørgrav } 11128ed2b524SDag-Erling Smørgrav /* ignore globs that yield no files */ 11138ed2b524SDag-Erling Smørgrav return 1; 11148ed2b524SDag-Erling Smørgrav } 11158ed2b524SDag-Erling Smørgrav /* process files found, if any */ 11168ed2b524SDag-Erling Smørgrav for(i=0; i<(size_t)g.gl_pathc; i++) { 11178ed2b524SDag-Erling Smørgrav if(!config_read(cfg, g.gl_pathv[i], chroot)) { 11188ed2b524SDag-Erling Smørgrav log_err("error reading wildcard " 11198ed2b524SDag-Erling Smørgrav "include: %s", g.gl_pathv[i]); 11208ed2b524SDag-Erling Smørgrav globfree(&g); 11218ed2b524SDag-Erling Smørgrav return 0; 11228ed2b524SDag-Erling Smørgrav } 11238ed2b524SDag-Erling Smørgrav } 11248ed2b524SDag-Erling Smørgrav globfree(&g); 11258ed2b524SDag-Erling Smørgrav return 1; 11268ed2b524SDag-Erling Smørgrav } 11278ed2b524SDag-Erling Smørgrav #endif /* HAVE_GLOB */ 11288ed2b524SDag-Erling Smørgrav 1129b7579f77SDag-Erling Smørgrav in = fopen(fname, "r"); 1130b7579f77SDag-Erling Smørgrav if(!in) { 1131b7579f77SDag-Erling Smørgrav log_err("Could not open %s: %s", fname, strerror(errno)); 1132b7579f77SDag-Erling Smørgrav return 0; 1133b7579f77SDag-Erling Smørgrav } 1134b7579f77SDag-Erling Smørgrav create_cfg_parser(cfg, fname, chroot); 1135b7579f77SDag-Erling Smørgrav ub_c_in = in; 1136b7579f77SDag-Erling Smørgrav ub_c_parse(); 1137b7579f77SDag-Erling Smørgrav fclose(in); 1138b7579f77SDag-Erling Smørgrav 113965b390aaSDag-Erling Smørgrav if(!cfg->dnscrypt) cfg->dnscrypt_port = 0; 114065b390aaSDag-Erling Smørgrav 1141b7579f77SDag-Erling Smørgrav if(cfg_parser->errors != 0) { 1142b7579f77SDag-Erling Smørgrav fprintf(stderr, "read %s failed: %d errors in configuration file\n", 1143ff825849SDag-Erling Smørgrav fname, cfg_parser->errors); 1144b7579f77SDag-Erling Smørgrav errno=EINVAL; 1145b7579f77SDag-Erling Smørgrav return 0; 1146b7579f77SDag-Erling Smørgrav } 114731099b50SDag-Erling Smørgrav 1148b7579f77SDag-Erling Smørgrav return 1; 1149b7579f77SDag-Erling Smørgrav } 1150b7579f77SDag-Erling Smørgrav 1151f61ef7f6SDag-Erling Smørgrav struct config_stub* cfg_stub_find(struct config_stub*** pp, const char* nm) 1152f61ef7f6SDag-Erling Smørgrav { 1153f61ef7f6SDag-Erling Smørgrav struct config_stub* p = *(*pp); 1154f61ef7f6SDag-Erling Smørgrav while(p) { 1155f61ef7f6SDag-Erling Smørgrav if(strcmp(p->name, nm) == 0) 1156f61ef7f6SDag-Erling Smørgrav return p; 1157f61ef7f6SDag-Erling Smørgrav (*pp) = &p->next; 1158f61ef7f6SDag-Erling Smørgrav p = p->next; 1159f61ef7f6SDag-Erling Smørgrav } 1160f61ef7f6SDag-Erling Smørgrav return NULL; 1161f61ef7f6SDag-Erling Smørgrav } 1162f61ef7f6SDag-Erling Smørgrav 1163b7579f77SDag-Erling Smørgrav void 1164b7579f77SDag-Erling Smørgrav config_delstrlist(struct config_strlist* p) 1165b7579f77SDag-Erling Smørgrav { 1166b7579f77SDag-Erling Smørgrav struct config_strlist *np; 1167b7579f77SDag-Erling Smørgrav while(p) { 1168b7579f77SDag-Erling Smørgrav np = p->next; 1169b7579f77SDag-Erling Smørgrav free(p->str); 1170b7579f77SDag-Erling Smørgrav free(p); 1171b7579f77SDag-Erling Smørgrav p = np; 1172b7579f77SDag-Erling Smørgrav } 1173b7579f77SDag-Erling Smørgrav } 1174b7579f77SDag-Erling Smørgrav 1175b7579f77SDag-Erling Smørgrav void 1176b7579f77SDag-Erling Smørgrav config_deldblstrlist(struct config_str2list* p) 1177b7579f77SDag-Erling Smørgrav { 1178b7579f77SDag-Erling Smørgrav struct config_str2list *np; 1179b7579f77SDag-Erling Smørgrav while(p) { 1180b7579f77SDag-Erling Smørgrav np = p->next; 1181b7579f77SDag-Erling Smørgrav free(p->str); 1182b7579f77SDag-Erling Smørgrav free(p->str2); 1183b7579f77SDag-Erling Smørgrav free(p); 1184b7579f77SDag-Erling Smørgrav p = np; 1185b7579f77SDag-Erling Smørgrav } 1186b7579f77SDag-Erling Smørgrav } 1187b7579f77SDag-Erling Smørgrav 1188b7579f77SDag-Erling Smørgrav void 1189b5663de9SDag-Erling Smørgrav config_deltrplstrlist(struct config_str3list* p) 1190b5663de9SDag-Erling Smørgrav { 1191b5663de9SDag-Erling Smørgrav struct config_str3list *np; 1192b5663de9SDag-Erling Smørgrav while(p) { 1193b5663de9SDag-Erling Smørgrav np = p->next; 1194b5663de9SDag-Erling Smørgrav free(p->str); 1195b5663de9SDag-Erling Smørgrav free(p->str2); 1196b5663de9SDag-Erling Smørgrav free(p->str3); 1197b5663de9SDag-Erling Smørgrav free(p); 1198b5663de9SDag-Erling Smørgrav p = np; 1199b5663de9SDag-Erling Smørgrav } 1200b5663de9SDag-Erling Smørgrav } 1201b5663de9SDag-Erling Smørgrav 1202b5663de9SDag-Erling Smørgrav void 120357bddd21SDag-Erling Smørgrav config_delauth(struct config_auth* p) 120457bddd21SDag-Erling Smørgrav { 120557bddd21SDag-Erling Smørgrav if(!p) return; 120657bddd21SDag-Erling Smørgrav free(p->name); 120757bddd21SDag-Erling Smørgrav config_delstrlist(p->masters); 120857bddd21SDag-Erling Smørgrav config_delstrlist(p->urls); 12090fb34990SDag-Erling Smørgrav config_delstrlist(p->allow_notify); 121057bddd21SDag-Erling Smørgrav free(p->zonefile); 121157bddd21SDag-Erling Smørgrav free(p); 121257bddd21SDag-Erling Smørgrav } 121357bddd21SDag-Erling Smørgrav 121457bddd21SDag-Erling Smørgrav void 121557bddd21SDag-Erling Smørgrav config_delauths(struct config_auth* p) 121657bddd21SDag-Erling Smørgrav { 121757bddd21SDag-Erling Smørgrav struct config_auth* np; 121857bddd21SDag-Erling Smørgrav while(p) { 121957bddd21SDag-Erling Smørgrav np = p->next; 122057bddd21SDag-Erling Smørgrav config_delauth(p); 122157bddd21SDag-Erling Smørgrav p = np; 122257bddd21SDag-Erling Smørgrav } 122357bddd21SDag-Erling Smørgrav } 122457bddd21SDag-Erling Smørgrav 122557bddd21SDag-Erling Smørgrav void 1226f61ef7f6SDag-Erling Smørgrav config_delstub(struct config_stub* p) 1227f61ef7f6SDag-Erling Smørgrav { 1228f61ef7f6SDag-Erling Smørgrav if(!p) return; 1229f61ef7f6SDag-Erling Smørgrav free(p->name); 1230f61ef7f6SDag-Erling Smørgrav config_delstrlist(p->hosts); 1231f61ef7f6SDag-Erling Smørgrav config_delstrlist(p->addrs); 1232f61ef7f6SDag-Erling Smørgrav free(p); 1233f61ef7f6SDag-Erling Smørgrav } 1234f61ef7f6SDag-Erling Smørgrav 1235f61ef7f6SDag-Erling Smørgrav void 1236b7579f77SDag-Erling Smørgrav config_delstubs(struct config_stub* p) 1237b7579f77SDag-Erling Smørgrav { 1238b7579f77SDag-Erling Smørgrav struct config_stub* np; 1239b7579f77SDag-Erling Smørgrav while(p) { 1240b7579f77SDag-Erling Smørgrav np = p->next; 1241f61ef7f6SDag-Erling Smørgrav config_delstub(p); 1242b7579f77SDag-Erling Smørgrav p = np; 1243b7579f77SDag-Erling Smørgrav } 1244b7579f77SDag-Erling Smørgrav } 1245b7579f77SDag-Erling Smørgrav 1246bc892140SDag-Erling Smørgrav void 1247bc892140SDag-Erling Smørgrav config_delview(struct config_view* p) 1248bc892140SDag-Erling Smørgrav { 1249bc892140SDag-Erling Smørgrav if(!p) return; 1250bc892140SDag-Erling Smørgrav free(p->name); 1251bc892140SDag-Erling Smørgrav config_deldblstrlist(p->local_zones); 1252bc892140SDag-Erling Smørgrav config_delstrlist(p->local_zones_nodefault); 1253bc892140SDag-Erling Smørgrav config_delstrlist(p->local_data); 1254bc892140SDag-Erling Smørgrav free(p); 1255bc892140SDag-Erling Smørgrav } 1256bc892140SDag-Erling Smørgrav 1257bc892140SDag-Erling Smørgrav void 1258bc892140SDag-Erling Smørgrav config_delviews(struct config_view* p) 1259bc892140SDag-Erling Smørgrav { 1260bc892140SDag-Erling Smørgrav struct config_view* np; 1261bc892140SDag-Erling Smørgrav while(p) { 1262bc892140SDag-Erling Smørgrav np = p->next; 1263bc892140SDag-Erling Smørgrav config_delview(p); 1264bc892140SDag-Erling Smørgrav p = np; 1265bc892140SDag-Erling Smørgrav } 1266bc892140SDag-Erling Smørgrav } 1267e2d15004SDag-Erling Smørgrav /** delete string array */ 1268e2d15004SDag-Erling Smørgrav static void 1269e2d15004SDag-Erling Smørgrav config_del_strarray(char** array, int num) 1270e2d15004SDag-Erling Smørgrav { 1271e2d15004SDag-Erling Smørgrav int i; 1272e2d15004SDag-Erling Smørgrav if(!array) 1273e2d15004SDag-Erling Smørgrav return; 1274e2d15004SDag-Erling Smørgrav for(i=0; i<num; i++) { 1275e2d15004SDag-Erling Smørgrav free(array[i]); 1276e2d15004SDag-Erling Smørgrav } 1277e2d15004SDag-Erling Smørgrav free(array); 1278e2d15004SDag-Erling Smørgrav } 1279e2d15004SDag-Erling Smørgrav 1280b5663de9SDag-Erling Smørgrav void 1281e2d15004SDag-Erling Smørgrav config_del_strbytelist(struct config_strbytelist* p) 1282e2d15004SDag-Erling Smørgrav { 1283e2d15004SDag-Erling Smørgrav struct config_strbytelist* np; 1284e2d15004SDag-Erling Smørgrav while(p) { 1285e2d15004SDag-Erling Smørgrav np = p->next; 1286e2d15004SDag-Erling Smørgrav free(p->str); 1287e2d15004SDag-Erling Smørgrav free(p->str2); 1288e2d15004SDag-Erling Smørgrav free(p); 1289e2d15004SDag-Erling Smørgrav p = np; 1290e2d15004SDag-Erling Smørgrav } 1291e2d15004SDag-Erling Smørgrav } 1292e2d15004SDag-Erling Smørgrav 1293b7579f77SDag-Erling Smørgrav void 1294b7579f77SDag-Erling Smørgrav config_delete(struct config_file* cfg) 1295b7579f77SDag-Erling Smørgrav { 1296b7579f77SDag-Erling Smørgrav if(!cfg) return; 1297b7579f77SDag-Erling Smørgrav free(cfg->username); 1298b7579f77SDag-Erling Smørgrav free(cfg->chrootdir); 1299b7579f77SDag-Erling Smørgrav free(cfg->directory); 1300b7579f77SDag-Erling Smørgrav free(cfg->logfile); 1301b7579f77SDag-Erling Smørgrav free(cfg->pidfile); 1302b7579f77SDag-Erling Smørgrav free(cfg->target_fetch_policy); 1303b7579f77SDag-Erling Smørgrav free(cfg->ssl_service_key); 1304b7579f77SDag-Erling Smørgrav free(cfg->ssl_service_pem); 130557bddd21SDag-Erling Smørgrav free(cfg->tls_cert_bundle); 1306*3bd4df0aSDag-Erling Smørgrav config_delstrlist(cfg->tls_additional_ports); 1307bc892140SDag-Erling Smørgrav free(cfg->log_identity); 1308e2d15004SDag-Erling Smørgrav config_del_strarray(cfg->ifs, cfg->num_ifs); 1309e2d15004SDag-Erling Smørgrav config_del_strarray(cfg->out_ifs, cfg->num_out_ifs); 1310b7579f77SDag-Erling Smørgrav config_delstubs(cfg->stubs); 1311b7579f77SDag-Erling Smørgrav config_delstubs(cfg->forwards); 131257bddd21SDag-Erling Smørgrav config_delauths(cfg->auths); 1313bc892140SDag-Erling Smørgrav config_delviews(cfg->views); 1314b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->donotqueryaddrs); 1315b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->root_hints); 131665b390aaSDag-Erling Smørgrav #ifdef CLIENT_SUBNET 131765b390aaSDag-Erling Smørgrav config_delstrlist(cfg->client_subnet); 1318c7f4d7adSDag-Erling Smørgrav config_delstrlist(cfg->client_subnet_zone); 131965b390aaSDag-Erling Smørgrav #endif 1320b7579f77SDag-Erling Smørgrav free(cfg->identity); 1321b7579f77SDag-Erling Smørgrav free(cfg->version); 1322b7579f77SDag-Erling Smørgrav free(cfg->module_conf); 1323b7579f77SDag-Erling Smørgrav free(cfg->outgoing_avail_ports); 1324c7f4d7adSDag-Erling Smørgrav free(cfg->python_script); 132509a3aaf3SDag-Erling Smørgrav config_delstrlist(cfg->caps_whitelist); 1326b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->private_address); 1327b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->private_domain); 1328b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->auto_trust_anchor_file_list); 1329b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->trust_anchor_file_list); 1330b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->trusted_keys_file_list); 1331b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->trust_anchor_list); 1332b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->domain_insecure); 1333b7579f77SDag-Erling Smørgrav free(cfg->dlv_anchor_file); 1334b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->dlv_anchor_list); 1335b7579f77SDag-Erling Smørgrav config_deldblstrlist(cfg->acls); 1336b7579f77SDag-Erling Smørgrav free(cfg->val_nsec3_key_iterations); 1337b7579f77SDag-Erling Smørgrav config_deldblstrlist(cfg->local_zones); 1338b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->local_zones_nodefault); 1339b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->local_data); 1340b5663de9SDag-Erling Smørgrav config_deltrplstrlist(cfg->local_zone_overrides); 1341e2d15004SDag-Erling Smørgrav config_del_strarray(cfg->tagname, cfg->num_tags); 1342e2d15004SDag-Erling Smørgrav config_del_strbytelist(cfg->local_zone_tags); 1343b5663de9SDag-Erling Smørgrav config_del_strbytelist(cfg->acl_tags); 134465b390aaSDag-Erling Smørgrav config_del_strbytelist(cfg->respip_tags); 1345b5663de9SDag-Erling Smørgrav config_deltrplstrlist(cfg->acl_tag_actions); 1346b5663de9SDag-Erling Smørgrav config_deltrplstrlist(cfg->acl_tag_datas); 1347b7579f77SDag-Erling Smørgrav config_delstrlist(cfg->control_ifs); 1348b7579f77SDag-Erling Smørgrav free(cfg->server_key_file); 1349b7579f77SDag-Erling Smørgrav free(cfg->server_cert_file); 1350b7579f77SDag-Erling Smørgrav free(cfg->control_key_file); 1351b7579f77SDag-Erling Smørgrav free(cfg->control_cert_file); 135209a3aaf3SDag-Erling Smørgrav free(cfg->dns64_prefix); 1353ff825849SDag-Erling Smørgrav free(cfg->dnstap_socket_path); 1354ff825849SDag-Erling Smørgrav free(cfg->dnstap_identity); 1355ff825849SDag-Erling Smørgrav free(cfg->dnstap_version); 135609a3aaf3SDag-Erling Smørgrav config_deldblstrlist(cfg->ratelimit_for_domain); 135709a3aaf3SDag-Erling Smørgrav config_deldblstrlist(cfg->ratelimit_below_domain); 1358c7f4d7adSDag-Erling Smørgrav #ifdef USE_IPSECMOD 1359c7f4d7adSDag-Erling Smørgrav free(cfg->ipsecmod_hook); 1360c7f4d7adSDag-Erling Smørgrav config_delstrlist(cfg->ipsecmod_whitelist); 1361c7f4d7adSDag-Erling Smørgrav #endif 1362971980c3SDag-Erling Smørgrav #ifdef USE_CACHEDB 1363971980c3SDag-Erling Smørgrav free(cfg->cachedb_backend); 1364971980c3SDag-Erling Smørgrav free(cfg->cachedb_secret); 1365971980c3SDag-Erling Smørgrav #endif 1366b7579f77SDag-Erling Smørgrav free(cfg); 1367b7579f77SDag-Erling Smørgrav } 1368b7579f77SDag-Erling Smørgrav 1369b7579f77SDag-Erling Smørgrav static void 1370b7579f77SDag-Erling Smørgrav init_outgoing_availports(int* a, int num) 1371b7579f77SDag-Erling Smørgrav { 1372b7579f77SDag-Erling Smørgrav /* generated with make iana_update */ 1373b7579f77SDag-Erling Smørgrav const int iana_assigned[] = { 1374b7579f77SDag-Erling Smørgrav #include "util/iana_ports.inc" 1375b7579f77SDag-Erling Smørgrav -1 }; /* end marker to put behind trailing comma */ 1376b7579f77SDag-Erling Smørgrav 1377b7579f77SDag-Erling Smørgrav int i; 1378b7579f77SDag-Erling Smørgrav /* do not use <1024, that could be trouble with the system, privs */ 1379b7579f77SDag-Erling Smørgrav for(i=1024; i<num; i++) { 1380b7579f77SDag-Erling Smørgrav a[i] = i; 1381b7579f77SDag-Erling Smørgrav } 1382b7579f77SDag-Erling Smørgrav /* create empty spot at 49152 to keep ephemeral ports available 1383b7579f77SDag-Erling Smørgrav * to other programs */ 1384b7579f77SDag-Erling Smørgrav for(i=49152; i<49152+256; i++) 1385b7579f77SDag-Erling Smørgrav a[i] = 0; 1386b7579f77SDag-Erling Smørgrav /* pick out all the IANA assigned ports */ 1387b7579f77SDag-Erling Smørgrav for(i=0; iana_assigned[i]!=-1; i++) { 1388b7579f77SDag-Erling Smørgrav if(iana_assigned[i] < num) 1389b7579f77SDag-Erling Smørgrav a[iana_assigned[i]] = 0; 1390b7579f77SDag-Erling Smørgrav } 1391b7579f77SDag-Erling Smørgrav } 1392b7579f77SDag-Erling Smørgrav 1393b7579f77SDag-Erling Smørgrav int 1394b7579f77SDag-Erling Smørgrav cfg_mark_ports(const char* str, int allow, int* avail, int num) 1395b7579f77SDag-Erling Smørgrav { 1396b7579f77SDag-Erling Smørgrav char* mid = strchr(str, '-'); 1397b7579f77SDag-Erling Smørgrav if(!mid) { 1398b7579f77SDag-Erling Smørgrav int port = atoi(str); 1399b7579f77SDag-Erling Smørgrav if(port == 0 && strcmp(str, "0") != 0) { 1400b7579f77SDag-Erling Smørgrav log_err("cannot parse port number '%s'", str); 1401b7579f77SDag-Erling Smørgrav return 0; 1402b7579f77SDag-Erling Smørgrav } 1403b7579f77SDag-Erling Smørgrav if(port < num) 1404b7579f77SDag-Erling Smørgrav avail[port] = (allow?port:0); 1405b7579f77SDag-Erling Smørgrav } else { 1406b7579f77SDag-Erling Smørgrav int i, low, high = atoi(mid+1); 1407b7579f77SDag-Erling Smørgrav char buf[16]; 1408b7579f77SDag-Erling Smørgrav if(high == 0 && strcmp(mid+1, "0") != 0) { 1409b7579f77SDag-Erling Smørgrav log_err("cannot parse port number '%s'", mid+1); 1410b7579f77SDag-Erling Smørgrav return 0; 1411b7579f77SDag-Erling Smørgrav } 1412b7579f77SDag-Erling Smørgrav if( (int)(mid-str)+1 >= (int)sizeof(buf) ) { 1413b7579f77SDag-Erling Smørgrav log_err("cannot parse port number '%s'", str); 1414b7579f77SDag-Erling Smørgrav return 0; 1415b7579f77SDag-Erling Smørgrav } 1416b7579f77SDag-Erling Smørgrav if(mid > str) 1417b7579f77SDag-Erling Smørgrav memcpy(buf, str, (size_t)(mid-str)); 1418b7579f77SDag-Erling Smørgrav buf[mid-str] = 0; 1419b7579f77SDag-Erling Smørgrav low = atoi(buf); 1420b7579f77SDag-Erling Smørgrav if(low == 0 && strcmp(buf, "0") != 0) { 1421b7579f77SDag-Erling Smørgrav log_err("cannot parse port number '%s'", buf); 1422b7579f77SDag-Erling Smørgrav return 0; 1423b7579f77SDag-Erling Smørgrav } 1424b7579f77SDag-Erling Smørgrav for(i=low; i<=high; i++) { 1425b7579f77SDag-Erling Smørgrav if(i < num) 1426b7579f77SDag-Erling Smørgrav avail[i] = (allow?i:0); 1427b7579f77SDag-Erling Smørgrav } 1428b7579f77SDag-Erling Smørgrav return 1; 1429b7579f77SDag-Erling Smørgrav } 1430b7579f77SDag-Erling Smørgrav return 1; 1431b7579f77SDag-Erling Smørgrav } 1432b7579f77SDag-Erling Smørgrav 1433b7579f77SDag-Erling Smørgrav int 1434b7579f77SDag-Erling Smørgrav cfg_scan_ports(int* avail, int num) 1435b7579f77SDag-Erling Smørgrav { 1436b7579f77SDag-Erling Smørgrav int i; 1437b7579f77SDag-Erling Smørgrav int count = 0; 1438b7579f77SDag-Erling Smørgrav for(i=0; i<num; i++) { 1439b7579f77SDag-Erling Smørgrav if(avail[i]) 1440b7579f77SDag-Erling Smørgrav count++; 1441b7579f77SDag-Erling Smørgrav } 1442b7579f77SDag-Erling Smørgrav return count; 1443b7579f77SDag-Erling Smørgrav } 1444b7579f77SDag-Erling Smørgrav 1445b7579f77SDag-Erling Smørgrav int cfg_condense_ports(struct config_file* cfg, int** avail) 1446b7579f77SDag-Erling Smørgrav { 1447b7579f77SDag-Erling Smørgrav int num = cfg_scan_ports(cfg->outgoing_avail_ports, 65536); 1448b7579f77SDag-Erling Smørgrav int i, at = 0; 1449b7579f77SDag-Erling Smørgrav *avail = NULL; 1450b7579f77SDag-Erling Smørgrav if(num == 0) 1451b7579f77SDag-Erling Smørgrav return 0; 145209a3aaf3SDag-Erling Smørgrav *avail = (int*)reallocarray(NULL, (size_t)num, sizeof(int)); 1453b7579f77SDag-Erling Smørgrav if(!*avail) 1454b7579f77SDag-Erling Smørgrav return 0; 1455b7579f77SDag-Erling Smørgrav for(i=0; i<65536; i++) { 1456b7579f77SDag-Erling Smørgrav if(cfg->outgoing_avail_ports[i]) 1457b7579f77SDag-Erling Smørgrav (*avail)[at++] = cfg->outgoing_avail_ports[i]; 1458b7579f77SDag-Erling Smørgrav } 1459b7579f77SDag-Erling Smørgrav log_assert(at == num); 1460b7579f77SDag-Erling Smørgrav return num; 1461b7579f77SDag-Erling Smørgrav } 1462b7579f77SDag-Erling Smørgrav 1463b7579f77SDag-Erling Smørgrav /** print error with file and line number */ 1464b7579f77SDag-Erling Smørgrav static void ub_c_error_va_list(const char *fmt, va_list args) 1465b7579f77SDag-Erling Smørgrav { 1466b7579f77SDag-Erling Smørgrav cfg_parser->errors++; 1467b7579f77SDag-Erling Smørgrav fprintf(stderr, "%s:%d: error: ", cfg_parser->filename, 1468b7579f77SDag-Erling Smørgrav cfg_parser->line); 1469b7579f77SDag-Erling Smørgrav vfprintf(stderr, fmt, args); 1470b7579f77SDag-Erling Smørgrav fprintf(stderr, "\n"); 1471b7579f77SDag-Erling Smørgrav } 1472b7579f77SDag-Erling Smørgrav 1473b7579f77SDag-Erling Smørgrav /** print error with file and line number */ 1474b7579f77SDag-Erling Smørgrav void ub_c_error_msg(const char* fmt, ...) 1475b7579f77SDag-Erling Smørgrav { 1476b7579f77SDag-Erling Smørgrav va_list args; 1477b7579f77SDag-Erling Smørgrav va_start(args, fmt); 1478b7579f77SDag-Erling Smørgrav ub_c_error_va_list(fmt, args); 1479b7579f77SDag-Erling Smørgrav va_end(args); 1480b7579f77SDag-Erling Smørgrav } 1481b7579f77SDag-Erling Smørgrav 1482b7579f77SDag-Erling Smørgrav void ub_c_error(const char *str) 1483b7579f77SDag-Erling Smørgrav { 1484b7579f77SDag-Erling Smørgrav cfg_parser->errors++; 1485b7579f77SDag-Erling Smørgrav fprintf(stderr, "%s:%d: error: %s\n", cfg_parser->filename, 1486b7579f77SDag-Erling Smørgrav cfg_parser->line, str); 1487b7579f77SDag-Erling Smørgrav } 1488b7579f77SDag-Erling Smørgrav 1489b7579f77SDag-Erling Smørgrav int ub_c_wrap(void) 1490b7579f77SDag-Erling Smørgrav { 1491b7579f77SDag-Erling Smørgrav return 1; 1492b7579f77SDag-Erling Smørgrav } 1493b7579f77SDag-Erling Smørgrav 1494b7579f77SDag-Erling Smørgrav int cfg_strlist_append(struct config_strlist_head* list, char* item) 1495b7579f77SDag-Erling Smørgrav { 1496b7579f77SDag-Erling Smørgrav struct config_strlist *s; 1497b7579f77SDag-Erling Smørgrav if(!item || !list) 1498b7579f77SDag-Erling Smørgrav return 0; 1499b7579f77SDag-Erling Smørgrav s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist)); 1500b7579f77SDag-Erling Smørgrav if(!s) 1501b7579f77SDag-Erling Smørgrav return 0; 1502b7579f77SDag-Erling Smørgrav s->str = item; 1503b7579f77SDag-Erling Smørgrav s->next = NULL; 1504b7579f77SDag-Erling Smørgrav if(list->last) 1505b7579f77SDag-Erling Smørgrav list->last->next = s; 1506b7579f77SDag-Erling Smørgrav else 1507b7579f77SDag-Erling Smørgrav list->first = s; 1508b7579f77SDag-Erling Smørgrav list->last = s; 1509b7579f77SDag-Erling Smørgrav return 1; 1510b7579f77SDag-Erling Smørgrav } 1511b7579f77SDag-Erling Smørgrav 1512b7579f77SDag-Erling Smørgrav int 1513b5663de9SDag-Erling Smørgrav cfg_region_strlist_insert(struct regional* region, 1514b5663de9SDag-Erling Smørgrav struct config_strlist** head, char* item) 1515b5663de9SDag-Erling Smørgrav { 1516b5663de9SDag-Erling Smørgrav struct config_strlist *s; 1517b5663de9SDag-Erling Smørgrav if(!item || !head) 1518b5663de9SDag-Erling Smørgrav return 0; 1519b5663de9SDag-Erling Smørgrav s = (struct config_strlist*)regional_alloc_zero(region, 1520b5663de9SDag-Erling Smørgrav sizeof(struct config_strlist)); 1521b5663de9SDag-Erling Smørgrav if(!s) 1522b5663de9SDag-Erling Smørgrav return 0; 1523b5663de9SDag-Erling Smørgrav s->str = item; 1524b5663de9SDag-Erling Smørgrav s->next = *head; 1525b5663de9SDag-Erling Smørgrav *head = s; 1526b5663de9SDag-Erling Smørgrav return 1; 1527b5663de9SDag-Erling Smørgrav } 1528b5663de9SDag-Erling Smørgrav 152957bddd21SDag-Erling Smørgrav struct config_strlist* 153057bddd21SDag-Erling Smørgrav cfg_strlist_find(struct config_strlist* head, const char *item) 153157bddd21SDag-Erling Smørgrav { 153257bddd21SDag-Erling Smørgrav struct config_strlist *s = head; 153357bddd21SDag-Erling Smørgrav if(!head){ 153457bddd21SDag-Erling Smørgrav return NULL; 153557bddd21SDag-Erling Smørgrav } 153657bddd21SDag-Erling Smørgrav while(s) { 153757bddd21SDag-Erling Smørgrav if(strcmp(s->str, item) == 0) { 153857bddd21SDag-Erling Smørgrav return s; 153957bddd21SDag-Erling Smørgrav } 154057bddd21SDag-Erling Smørgrav s = s->next; 154157bddd21SDag-Erling Smørgrav } 154257bddd21SDag-Erling Smørgrav return NULL; 154357bddd21SDag-Erling Smørgrav } 154457bddd21SDag-Erling Smørgrav 1545b5663de9SDag-Erling Smørgrav int 1546b7579f77SDag-Erling Smørgrav cfg_strlist_insert(struct config_strlist** head, char* item) 1547b7579f77SDag-Erling Smørgrav { 1548b7579f77SDag-Erling Smørgrav struct config_strlist *s; 1549b7579f77SDag-Erling Smørgrav if(!item || !head) 1550b7579f77SDag-Erling Smørgrav return 0; 1551b7579f77SDag-Erling Smørgrav s = (struct config_strlist*)calloc(1, sizeof(struct config_strlist)); 1552b7579f77SDag-Erling Smørgrav if(!s) 1553b7579f77SDag-Erling Smørgrav return 0; 1554b7579f77SDag-Erling Smørgrav s->str = item; 1555b7579f77SDag-Erling Smørgrav s->next = *head; 1556b7579f77SDag-Erling Smørgrav *head = s; 1557b7579f77SDag-Erling Smørgrav return 1; 1558b7579f77SDag-Erling Smørgrav } 1559b7579f77SDag-Erling Smørgrav 1560b7579f77SDag-Erling Smørgrav int 1561b7579f77SDag-Erling Smørgrav cfg_str2list_insert(struct config_str2list** head, char* item, char* i2) 1562b7579f77SDag-Erling Smørgrav { 1563b7579f77SDag-Erling Smørgrav struct config_str2list *s; 1564b7579f77SDag-Erling Smørgrav if(!item || !i2 || !head) 1565b7579f77SDag-Erling Smørgrav return 0; 1566b7579f77SDag-Erling Smørgrav s = (struct config_str2list*)calloc(1, sizeof(struct config_str2list)); 1567b7579f77SDag-Erling Smørgrav if(!s) 1568b7579f77SDag-Erling Smørgrav return 0; 1569b7579f77SDag-Erling Smørgrav s->str = item; 1570b7579f77SDag-Erling Smørgrav s->str2 = i2; 1571b7579f77SDag-Erling Smørgrav s->next = *head; 1572b7579f77SDag-Erling Smørgrav *head = s; 1573b7579f77SDag-Erling Smørgrav return 1; 1574b7579f77SDag-Erling Smørgrav } 1575b7579f77SDag-Erling Smørgrav 1576e2d15004SDag-Erling Smørgrav int 1577b5663de9SDag-Erling Smørgrav cfg_str3list_insert(struct config_str3list** head, char* item, char* i2, 1578b5663de9SDag-Erling Smørgrav char* i3) 1579b5663de9SDag-Erling Smørgrav { 1580b5663de9SDag-Erling Smørgrav struct config_str3list *s; 1581b5663de9SDag-Erling Smørgrav if(!item || !i2 || !i3 || !head) 1582b5663de9SDag-Erling Smørgrav return 0; 1583b5663de9SDag-Erling Smørgrav s = (struct config_str3list*)calloc(1, sizeof(struct config_str3list)); 1584b5663de9SDag-Erling Smørgrav if(!s) 1585b5663de9SDag-Erling Smørgrav return 0; 1586b5663de9SDag-Erling Smørgrav s->str = item; 1587b5663de9SDag-Erling Smørgrav s->str2 = i2; 1588b5663de9SDag-Erling Smørgrav s->str3 = i3; 1589b5663de9SDag-Erling Smørgrav s->next = *head; 1590b5663de9SDag-Erling Smørgrav *head = s; 1591b5663de9SDag-Erling Smørgrav return 1; 1592b5663de9SDag-Erling Smørgrav } 1593b5663de9SDag-Erling Smørgrav 1594b5663de9SDag-Erling Smørgrav int 1595e2d15004SDag-Erling Smørgrav cfg_strbytelist_insert(struct config_strbytelist** head, char* item, 1596e2d15004SDag-Erling Smørgrav uint8_t* i2, size_t i2len) 1597e2d15004SDag-Erling Smørgrav { 1598e2d15004SDag-Erling Smørgrav struct config_strbytelist* s; 1599e2d15004SDag-Erling Smørgrav if(!item || !i2 || !head) 1600e2d15004SDag-Erling Smørgrav return 0; 1601e2d15004SDag-Erling Smørgrav s = (struct config_strbytelist*)calloc(1, sizeof(*s)); 1602e2d15004SDag-Erling Smørgrav if(!s) 1603e2d15004SDag-Erling Smørgrav return 0; 1604e2d15004SDag-Erling Smørgrav s->str = item; 1605e2d15004SDag-Erling Smørgrav s->str2 = i2; 1606e2d15004SDag-Erling Smørgrav s->str2len = i2len; 1607e2d15004SDag-Erling Smørgrav s->next = *head; 1608e2d15004SDag-Erling Smørgrav *head = s; 1609e2d15004SDag-Erling Smørgrav return 1; 1610e2d15004SDag-Erling Smørgrav } 1611e2d15004SDag-Erling Smørgrav 161217d15b25SDag-Erling Smørgrav time_t 1613b7579f77SDag-Erling Smørgrav cfg_convert_timeval(const char* str) 1614b7579f77SDag-Erling Smørgrav { 161517d15b25SDag-Erling Smørgrav time_t t; 1616b7579f77SDag-Erling Smørgrav struct tm tm; 1617b7579f77SDag-Erling Smørgrav memset(&tm, 0, sizeof(tm)); 1618b7579f77SDag-Erling Smørgrav if(strlen(str) < 14) 1619b7579f77SDag-Erling Smørgrav return 0; 1620b7579f77SDag-Erling Smørgrav if(sscanf(str, "%4d%2d%2d%2d%2d%2d", &tm.tm_year, &tm.tm_mon, 1621b7579f77SDag-Erling Smørgrav &tm.tm_mday, &tm.tm_hour, &tm.tm_min, &tm.tm_sec) != 6) 1622b7579f77SDag-Erling Smørgrav return 0; 1623b7579f77SDag-Erling Smørgrav tm.tm_year -= 1900; 1624b7579f77SDag-Erling Smørgrav tm.tm_mon--; 1625b7579f77SDag-Erling Smørgrav /* Check values */ 1626b7579f77SDag-Erling Smørgrav if (tm.tm_year < 70) return 0; 1627b7579f77SDag-Erling Smørgrav if (tm.tm_mon < 0 || tm.tm_mon > 11) return 0; 1628b7579f77SDag-Erling Smørgrav if (tm.tm_mday < 1 || tm.tm_mday > 31) return 0; 1629b7579f77SDag-Erling Smørgrav if (tm.tm_hour < 0 || tm.tm_hour > 23) return 0; 1630b7579f77SDag-Erling Smørgrav if (tm.tm_min < 0 || tm.tm_min > 59) return 0; 1631b7579f77SDag-Erling Smørgrav if (tm.tm_sec < 0 || tm.tm_sec > 59) return 0; 1632b7579f77SDag-Erling Smørgrav /* call ldns conversion function */ 163317d15b25SDag-Erling Smørgrav t = sldns_mktime_from_utc(&tm); 1634b7579f77SDag-Erling Smørgrav return t; 1635b7579f77SDag-Erling Smørgrav } 1636b7579f77SDag-Erling Smørgrav 1637b7579f77SDag-Erling Smørgrav int 1638b7579f77SDag-Erling Smørgrav cfg_count_numbers(const char* s) 1639b7579f77SDag-Erling Smørgrav { 1640b7579f77SDag-Erling Smørgrav /* format ::= (sp num)+ sp */ 1641b7579f77SDag-Erling Smørgrav /* num ::= [-](0-9)+ */ 1642b7579f77SDag-Erling Smørgrav /* sp ::= (space|tab)* */ 1643b7579f77SDag-Erling Smørgrav int num = 0; 1644b7579f77SDag-Erling Smørgrav while(*s) { 1645ff825849SDag-Erling Smørgrav while(*s && isspace((unsigned char)*s)) 1646b7579f77SDag-Erling Smørgrav s++; 1647b7579f77SDag-Erling Smørgrav if(!*s) /* end of string */ 1648b7579f77SDag-Erling Smørgrav break; 1649b7579f77SDag-Erling Smørgrav if(*s == '-') 1650b7579f77SDag-Erling Smørgrav s++; 1651b7579f77SDag-Erling Smørgrav if(!*s) /* only - not allowed */ 1652b7579f77SDag-Erling Smørgrav return 0; 1653ff825849SDag-Erling Smørgrav if(!isdigit((unsigned char)*s)) /* bad character */ 1654b7579f77SDag-Erling Smørgrav return 0; 1655ff825849SDag-Erling Smørgrav while(*s && isdigit((unsigned char)*s)) 1656b7579f77SDag-Erling Smørgrav s++; 1657b7579f77SDag-Erling Smørgrav num++; 1658b7579f77SDag-Erling Smørgrav } 1659b7579f77SDag-Erling Smørgrav return num; 1660b7579f77SDag-Erling Smørgrav } 1661b7579f77SDag-Erling Smørgrav 1662b7579f77SDag-Erling Smørgrav /** all digit number */ 1663b7579f77SDag-Erling Smørgrav static int isalldigit(const char* str, size_t l) 1664b7579f77SDag-Erling Smørgrav { 1665b7579f77SDag-Erling Smørgrav size_t i; 1666b7579f77SDag-Erling Smørgrav for(i=0; i<l; i++) 1667ff825849SDag-Erling Smørgrav if(!isdigit((unsigned char)str[i])) 1668b7579f77SDag-Erling Smørgrav return 0; 1669b7579f77SDag-Erling Smørgrav return 1; 1670b7579f77SDag-Erling Smørgrav } 1671b7579f77SDag-Erling Smørgrav 1672b7579f77SDag-Erling Smørgrav int 1673b7579f77SDag-Erling Smørgrav cfg_parse_memsize(const char* str, size_t* res) 1674b7579f77SDag-Erling Smørgrav { 16758ed2b524SDag-Erling Smørgrav size_t len; 1676b7579f77SDag-Erling Smørgrav size_t mult = 1; 16778ed2b524SDag-Erling Smørgrav if(!str || (len=(size_t)strlen(str)) == 0) { 1678b7579f77SDag-Erling Smørgrav log_err("not a size: '%s'", str); 1679b7579f77SDag-Erling Smørgrav return 0; 1680b7579f77SDag-Erling Smørgrav } 1681b7579f77SDag-Erling Smørgrav if(isalldigit(str, len)) { 1682b7579f77SDag-Erling Smørgrav *res = (size_t)atol(str); 1683b7579f77SDag-Erling Smørgrav return 1; 1684b7579f77SDag-Erling Smørgrav } 1685b7579f77SDag-Erling Smørgrav /* check appended num */ 1686b7579f77SDag-Erling Smørgrav while(len>0 && str[len-1]==' ') 1687b7579f77SDag-Erling Smørgrav len--; 1688b7579f77SDag-Erling Smørgrav if(len > 1 && str[len-1] == 'b') 1689b7579f77SDag-Erling Smørgrav len--; 1690b7579f77SDag-Erling Smørgrav else if(len > 1 && str[len-1] == 'B') 1691b7579f77SDag-Erling Smørgrav len--; 1692b7579f77SDag-Erling Smørgrav 1693ff825849SDag-Erling Smørgrav if(len > 1 && tolower((unsigned char)str[len-1]) == 'g') 1694b7579f77SDag-Erling Smørgrav mult = 1024*1024*1024; 1695ff825849SDag-Erling Smørgrav else if(len > 1 && tolower((unsigned char)str[len-1]) == 'm') 1696b7579f77SDag-Erling Smørgrav mult = 1024*1024; 1697ff825849SDag-Erling Smørgrav else if(len > 1 && tolower((unsigned char)str[len-1]) == 'k') 1698b7579f77SDag-Erling Smørgrav mult = 1024; 1699ff825849SDag-Erling Smørgrav else if(len > 0 && isdigit((unsigned char)str[len-1])) 1700b7579f77SDag-Erling Smørgrav mult = 1; 1701b7579f77SDag-Erling Smørgrav else { 1702b7579f77SDag-Erling Smørgrav log_err("unknown size specifier: '%s'", str); 1703b7579f77SDag-Erling Smørgrav return 0; 1704b7579f77SDag-Erling Smørgrav } 1705b7579f77SDag-Erling Smørgrav while(len>1 && str[len-2]==' ') 1706b7579f77SDag-Erling Smørgrav len--; 1707b7579f77SDag-Erling Smørgrav 1708b7579f77SDag-Erling Smørgrav if(!isalldigit(str, len-1)) { 1709b7579f77SDag-Erling Smørgrav log_err("unknown size specifier: '%s'", str); 1710b7579f77SDag-Erling Smørgrav return 0; 1711b7579f77SDag-Erling Smørgrav } 1712b7579f77SDag-Erling Smørgrav *res = ((size_t)atol(str)) * mult; 1713b7579f77SDag-Erling Smørgrav return 1; 1714b7579f77SDag-Erling Smørgrav } 1715b7579f77SDag-Erling Smørgrav 1716e2d15004SDag-Erling Smørgrav int 1717e2d15004SDag-Erling Smørgrav find_tag_id(struct config_file* cfg, const char* tag) 1718e2d15004SDag-Erling Smørgrav { 1719e2d15004SDag-Erling Smørgrav int i; 1720e2d15004SDag-Erling Smørgrav for(i=0; i<cfg->num_tags; i++) { 1721e2d15004SDag-Erling Smørgrav if(strcmp(cfg->tagname[i], tag) == 0) 1722e2d15004SDag-Erling Smørgrav return i; 1723e2d15004SDag-Erling Smørgrav } 1724e2d15004SDag-Erling Smørgrav return -1; 1725e2d15004SDag-Erling Smørgrav } 1726e2d15004SDag-Erling Smørgrav 1727e2d15004SDag-Erling Smørgrav int 1728e2d15004SDag-Erling Smørgrav config_add_tag(struct config_file* cfg, const char* tag) 1729e2d15004SDag-Erling Smørgrav { 1730e2d15004SDag-Erling Smørgrav char** newarray; 1731e2d15004SDag-Erling Smørgrav char* newtag; 1732e2d15004SDag-Erling Smørgrav if(find_tag_id(cfg, tag) != -1) 1733e2d15004SDag-Erling Smørgrav return 1; /* nothing to do */ 1734e2d15004SDag-Erling Smørgrav newarray = (char**)malloc(sizeof(char*)*(cfg->num_tags+1)); 1735e2d15004SDag-Erling Smørgrav if(!newarray) 1736e2d15004SDag-Erling Smørgrav return 0; 1737e2d15004SDag-Erling Smørgrav newtag = strdup(tag); 1738e2d15004SDag-Erling Smørgrav if(!newtag) { 1739e2d15004SDag-Erling Smørgrav free(newarray); 1740e2d15004SDag-Erling Smørgrav return 0; 1741e2d15004SDag-Erling Smørgrav } 1742e2d15004SDag-Erling Smørgrav if(cfg->tagname) { 1743e2d15004SDag-Erling Smørgrav memcpy(newarray, cfg->tagname, sizeof(char*)*cfg->num_tags); 1744e2d15004SDag-Erling Smørgrav free(cfg->tagname); 1745e2d15004SDag-Erling Smørgrav } 1746e2d15004SDag-Erling Smørgrav newarray[cfg->num_tags++] = newtag; 1747e2d15004SDag-Erling Smørgrav cfg->tagname = newarray; 1748e2d15004SDag-Erling Smørgrav return 1; 1749e2d15004SDag-Erling Smørgrav } 1750e2d15004SDag-Erling Smørgrav 1751e2d15004SDag-Erling Smørgrav /** set a bit in a bit array */ 1752e2d15004SDag-Erling Smørgrav static void 1753e2d15004SDag-Erling Smørgrav cfg_set_bit(uint8_t* bitlist, size_t len, int id) 1754e2d15004SDag-Erling Smørgrav { 1755e2d15004SDag-Erling Smørgrav int pos = id/8; 1756e2d15004SDag-Erling Smørgrav log_assert((size_t)pos < len); 1757b5663de9SDag-Erling Smørgrav (void)len; 1758e2d15004SDag-Erling Smørgrav bitlist[pos] |= 1<<(id%8); 1759e2d15004SDag-Erling Smørgrav } 1760e2d15004SDag-Erling Smørgrav 1761e2d15004SDag-Erling Smørgrav uint8_t* config_parse_taglist(struct config_file* cfg, char* str, 1762e2d15004SDag-Erling Smørgrav size_t* listlen) 1763e2d15004SDag-Erling Smørgrav { 1764e2d15004SDag-Erling Smørgrav uint8_t* taglist = NULL; 1765e2d15004SDag-Erling Smørgrav size_t len = 0; 1766e2d15004SDag-Erling Smørgrav char* p, *s; 1767e2d15004SDag-Erling Smørgrav 1768e2d15004SDag-Erling Smørgrav /* allocate */ 1769e2d15004SDag-Erling Smørgrav if(cfg->num_tags == 0) { 1770e2d15004SDag-Erling Smørgrav log_err("parse taglist, but no tags defined"); 1771e2d15004SDag-Erling Smørgrav return 0; 1772e2d15004SDag-Erling Smørgrav } 1773e2d15004SDag-Erling Smørgrav len = (size_t)(cfg->num_tags+7)/8; 1774e2d15004SDag-Erling Smørgrav taglist = calloc(1, len); 1775e2d15004SDag-Erling Smørgrav if(!taglist) { 1776e2d15004SDag-Erling Smørgrav log_err("out of memory"); 1777e2d15004SDag-Erling Smørgrav return 0; 1778e2d15004SDag-Erling Smørgrav } 1779e2d15004SDag-Erling Smørgrav 1780e2d15004SDag-Erling Smørgrav /* parse */ 1781e2d15004SDag-Erling Smørgrav s = str; 1782e2d15004SDag-Erling Smørgrav while((p=strsep(&s, " \t\n")) != NULL) { 1783e2d15004SDag-Erling Smørgrav if(*p) { 1784e2d15004SDag-Erling Smørgrav int id = find_tag_id(cfg, p); 1785e2d15004SDag-Erling Smørgrav /* set this bit in the bitlist */ 1786e2d15004SDag-Erling Smørgrav if(id == -1) { 1787e2d15004SDag-Erling Smørgrav log_err("unknown tag: %s", p); 1788e2d15004SDag-Erling Smørgrav free(taglist); 1789e2d15004SDag-Erling Smørgrav return 0; 1790e2d15004SDag-Erling Smørgrav } 1791e2d15004SDag-Erling Smørgrav cfg_set_bit(taglist, len, id); 1792e2d15004SDag-Erling Smørgrav } 1793e2d15004SDag-Erling Smørgrav } 1794e2d15004SDag-Erling Smørgrav 1795e2d15004SDag-Erling Smørgrav *listlen = len; 1796e2d15004SDag-Erling Smørgrav return taglist; 1797e2d15004SDag-Erling Smørgrav } 1798e2d15004SDag-Erling Smørgrav 1799e2d15004SDag-Erling Smørgrav char* config_taglist2str(struct config_file* cfg, uint8_t* taglist, 1800e2d15004SDag-Erling Smørgrav size_t taglen) 1801e2d15004SDag-Erling Smørgrav { 1802e2d15004SDag-Erling Smørgrav char buf[10240]; 1803e2d15004SDag-Erling Smørgrav size_t i, j, len = 0; 1804e2d15004SDag-Erling Smørgrav buf[0] = 0; 1805e2d15004SDag-Erling Smørgrav for(i=0; i<taglen; i++) { 1806e2d15004SDag-Erling Smørgrav if(taglist[i] == 0) 1807e2d15004SDag-Erling Smørgrav continue; 1808e2d15004SDag-Erling Smørgrav for(j=0; j<8; j++) { 1809e2d15004SDag-Erling Smørgrav if((taglist[i] & (1<<j)) != 0) { 1810e2d15004SDag-Erling Smørgrav size_t id = i*8 + j; 1811e2d15004SDag-Erling Smørgrav snprintf(buf+len, sizeof(buf)-len, "%s%s", 1812e2d15004SDag-Erling Smørgrav (len==0?"":" "), cfg->tagname[id]); 1813e2d15004SDag-Erling Smørgrav len += strlen(buf+len); 1814e2d15004SDag-Erling Smørgrav } 1815e2d15004SDag-Erling Smørgrav } 1816e2d15004SDag-Erling Smørgrav } 1817e2d15004SDag-Erling Smørgrav return strdup(buf); 1818e2d15004SDag-Erling Smørgrav } 1819e2d15004SDag-Erling Smørgrav 1820e2d15004SDag-Erling Smørgrav int taglist_intersect(uint8_t* list1, size_t list1len, uint8_t* list2, 1821e2d15004SDag-Erling Smørgrav size_t list2len) 1822e2d15004SDag-Erling Smørgrav { 1823e2d15004SDag-Erling Smørgrav size_t i; 1824e2d15004SDag-Erling Smørgrav if(!list1 || !list2) 1825e2d15004SDag-Erling Smørgrav return 0; 1826e2d15004SDag-Erling Smørgrav for(i=0; i<list1len && i<list2len; i++) { 1827e2d15004SDag-Erling Smørgrav if((list1[i] & list2[i]) != 0) 1828e2d15004SDag-Erling Smørgrav return 1; 1829e2d15004SDag-Erling Smørgrav } 1830e2d15004SDag-Erling Smørgrav return 0; 1831e2d15004SDag-Erling Smørgrav } 1832e2d15004SDag-Erling Smørgrav 1833b7579f77SDag-Erling Smørgrav void 1834b7579f77SDag-Erling Smørgrav config_apply(struct config_file* config) 1835b7579f77SDag-Erling Smørgrav { 183617d15b25SDag-Erling Smørgrav MAX_TTL = (time_t)config->max_ttl; 183717d15b25SDag-Erling Smørgrav MIN_TTL = (time_t)config->min_ttl; 183809a3aaf3SDag-Erling Smørgrav MAX_NEG_TTL = (time_t)config->max_negative_ttl; 18396480faa8SDag-Erling Smørgrav RTT_MIN_TIMEOUT = config->infra_cache_min_rtt; 1840b7579f77SDag-Erling Smørgrav EDNS_ADVERTISED_SIZE = (uint16_t)config->edns_buffer_size; 1841b7579f77SDag-Erling Smørgrav MINIMAL_RESPONSES = config->minimal_responses; 1842b7579f77SDag-Erling Smørgrav RRSET_ROUNDROBIN = config->rrset_roundrobin; 1843b7579f77SDag-Erling Smørgrav log_set_time_asc(config->log_time_ascii); 1844b75612f8SDag-Erling Smørgrav autr_permit_small_holddown = config->permit_small_holddown; 1845b7579f77SDag-Erling Smørgrav } 1846b7579f77SDag-Erling Smørgrav 1847748bd829SDag-Erling Smørgrav void config_lookup_uid(struct config_file* cfg) 1848748bd829SDag-Erling Smørgrav { 1849748bd829SDag-Erling Smørgrav #ifdef HAVE_GETPWNAM 1850748bd829SDag-Erling Smørgrav /* translate username into uid and gid */ 1851748bd829SDag-Erling Smørgrav if(cfg->username && cfg->username[0]) { 1852748bd829SDag-Erling Smørgrav struct passwd *pwd; 18536480faa8SDag-Erling Smørgrav if((pwd = getpwnam(cfg->username)) != NULL) { 18546480faa8SDag-Erling Smørgrav cfg_uid = pwd->pw_uid; 18556480faa8SDag-Erling Smørgrav cfg_gid = pwd->pw_gid; 1856748bd829SDag-Erling Smørgrav } 18576480faa8SDag-Erling Smørgrav } 18586480faa8SDag-Erling Smørgrav #else 18596480faa8SDag-Erling Smørgrav (void)cfg; 1860748bd829SDag-Erling Smørgrav #endif 1861748bd829SDag-Erling Smørgrav } 1862748bd829SDag-Erling Smørgrav 1863b7579f77SDag-Erling Smørgrav /** 1864b7579f77SDag-Erling Smørgrav * Calculate string length of full pathname in original filesys 1865b7579f77SDag-Erling Smørgrav * @param fname: the path name to convert. 1866b7579f77SDag-Erling Smørgrav * Must not be null or empty. 1867b7579f77SDag-Erling Smørgrav * @param cfg: config struct for chroot and chdir (if set). 1868b7579f77SDag-Erling Smørgrav * @param use_chdir: if false, only chroot is applied. 1869b7579f77SDag-Erling Smørgrav * @return length of string. 1870b7579f77SDag-Erling Smørgrav * remember to allocate one more for 0 at end in mallocs. 1871b7579f77SDag-Erling Smørgrav */ 1872b7579f77SDag-Erling Smørgrav static size_t 1873b7579f77SDag-Erling Smørgrav strlen_after_chroot(const char* fname, struct config_file* cfg, int use_chdir) 1874b7579f77SDag-Erling Smørgrav { 1875b7579f77SDag-Erling Smørgrav size_t len = 0; 1876b7579f77SDag-Erling Smørgrav int slashit = 0; 1877b7579f77SDag-Erling Smørgrav if(cfg->chrootdir && cfg->chrootdir[0] && 1878b7579f77SDag-Erling Smørgrav strncmp(cfg->chrootdir, fname, strlen(cfg->chrootdir)) == 0) { 1879b7579f77SDag-Erling Smørgrav /* already full pathname, return it */ 1880b7579f77SDag-Erling Smørgrav return strlen(fname); 1881b7579f77SDag-Erling Smørgrav } 1882b7579f77SDag-Erling Smørgrav /* chroot */ 1883b7579f77SDag-Erling Smørgrav if(cfg->chrootdir && cfg->chrootdir[0]) { 1884b7579f77SDag-Erling Smørgrav /* start with chrootdir */ 1885b7579f77SDag-Erling Smørgrav len += strlen(cfg->chrootdir); 1886b7579f77SDag-Erling Smørgrav slashit = 1; 1887b7579f77SDag-Erling Smørgrav } 1888b7579f77SDag-Erling Smørgrav /* chdir */ 1889b7579f77SDag-Erling Smørgrav #ifdef UB_ON_WINDOWS 1890b7579f77SDag-Erling Smørgrav if(fname[0] != 0 && fname[1] == ':') { 1891b7579f77SDag-Erling Smørgrav /* full path, no chdir */ 1892b7579f77SDag-Erling Smørgrav } else 1893b7579f77SDag-Erling Smørgrav #endif 1894b7579f77SDag-Erling Smørgrav if(fname[0] == '/' || !use_chdir) { 1895b7579f77SDag-Erling Smørgrav /* full path, no chdir */ 1896b7579f77SDag-Erling Smørgrav } else if(cfg->directory && cfg->directory[0]) { 1897b7579f77SDag-Erling Smørgrav /* prepend chdir */ 1898b7579f77SDag-Erling Smørgrav if(slashit && cfg->directory[0] != '/') 1899b7579f77SDag-Erling Smørgrav len++; 1900b7579f77SDag-Erling Smørgrav if(cfg->chrootdir && cfg->chrootdir[0] && 1901b7579f77SDag-Erling Smørgrav strncmp(cfg->chrootdir, cfg->directory, 1902b7579f77SDag-Erling Smørgrav strlen(cfg->chrootdir)) == 0) 1903b7579f77SDag-Erling Smørgrav len += strlen(cfg->directory)-strlen(cfg->chrootdir); 1904b7579f77SDag-Erling Smørgrav else len += strlen(cfg->directory); 1905b7579f77SDag-Erling Smørgrav slashit = 1; 1906b7579f77SDag-Erling Smørgrav } 1907b7579f77SDag-Erling Smørgrav /* fname */ 1908b7579f77SDag-Erling Smørgrav if(slashit && fname[0] != '/') 1909b7579f77SDag-Erling Smørgrav len++; 1910b7579f77SDag-Erling Smørgrav len += strlen(fname); 1911b7579f77SDag-Erling Smørgrav return len; 1912b7579f77SDag-Erling Smørgrav } 1913b7579f77SDag-Erling Smørgrav 1914b7579f77SDag-Erling Smørgrav char* 1915b7579f77SDag-Erling Smørgrav fname_after_chroot(const char* fname, struct config_file* cfg, int use_chdir) 1916b7579f77SDag-Erling Smørgrav { 191717d15b25SDag-Erling Smørgrav size_t len = strlen_after_chroot(fname, cfg, use_chdir)+1; 1918b7579f77SDag-Erling Smørgrav int slashit = 0; 191917d15b25SDag-Erling Smørgrav char* buf = (char*)malloc(len); 1920b7579f77SDag-Erling Smørgrav if(!buf) 1921b7579f77SDag-Erling Smørgrav return NULL; 1922b7579f77SDag-Erling Smørgrav buf[0] = 0; 1923b7579f77SDag-Erling Smørgrav /* is fname already in chroot ? */ 1924b7579f77SDag-Erling Smørgrav if(cfg->chrootdir && cfg->chrootdir[0] && 1925b7579f77SDag-Erling Smørgrav strncmp(cfg->chrootdir, fname, strlen(cfg->chrootdir)) == 0) { 1926b7579f77SDag-Erling Smørgrav /* already full pathname, return it */ 192717d15b25SDag-Erling Smørgrav (void)strlcpy(buf, fname, len); 192817d15b25SDag-Erling Smørgrav buf[len-1] = 0; 1929b7579f77SDag-Erling Smørgrav return buf; 1930b7579f77SDag-Erling Smørgrav } 1931b7579f77SDag-Erling Smørgrav /* chroot */ 1932b7579f77SDag-Erling Smørgrav if(cfg->chrootdir && cfg->chrootdir[0]) { 1933b7579f77SDag-Erling Smørgrav /* start with chrootdir */ 193417d15b25SDag-Erling Smørgrav (void)strlcpy(buf, cfg->chrootdir, len); 1935b7579f77SDag-Erling Smørgrav slashit = 1; 1936b7579f77SDag-Erling Smørgrav } 1937b7579f77SDag-Erling Smørgrav #ifdef UB_ON_WINDOWS 1938b7579f77SDag-Erling Smørgrav if(fname[0] != 0 && fname[1] == ':') { 1939b7579f77SDag-Erling Smørgrav /* full path, no chdir */ 1940b7579f77SDag-Erling Smørgrav } else 1941b7579f77SDag-Erling Smørgrav #endif 1942b7579f77SDag-Erling Smørgrav /* chdir */ 1943b7579f77SDag-Erling Smørgrav if(fname[0] == '/' || !use_chdir) { 1944b7579f77SDag-Erling Smørgrav /* full path, no chdir */ 1945b7579f77SDag-Erling Smørgrav } else if(cfg->directory && cfg->directory[0]) { 1946b7579f77SDag-Erling Smørgrav /* prepend chdir */ 1947b7579f77SDag-Erling Smørgrav if(slashit && cfg->directory[0] != '/') 194817d15b25SDag-Erling Smørgrav (void)strlcat(buf, "/", len); 1949b7579f77SDag-Erling Smørgrav /* is the directory already in the chroot? */ 1950b7579f77SDag-Erling Smørgrav if(cfg->chrootdir && cfg->chrootdir[0] && 1951b7579f77SDag-Erling Smørgrav strncmp(cfg->chrootdir, cfg->directory, 1952b7579f77SDag-Erling Smørgrav strlen(cfg->chrootdir)) == 0) 195317d15b25SDag-Erling Smørgrav (void)strlcat(buf, cfg->directory+strlen(cfg->chrootdir), 195417d15b25SDag-Erling Smørgrav len); 195517d15b25SDag-Erling Smørgrav else (void)strlcat(buf, cfg->directory, len); 1956b7579f77SDag-Erling Smørgrav slashit = 1; 1957b7579f77SDag-Erling Smørgrav } 1958b7579f77SDag-Erling Smørgrav /* fname */ 1959b7579f77SDag-Erling Smørgrav if(slashit && fname[0] != '/') 196017d15b25SDag-Erling Smørgrav (void)strlcat(buf, "/", len); 196117d15b25SDag-Erling Smørgrav (void)strlcat(buf, fname, len); 196217d15b25SDag-Erling Smørgrav buf[len-1] = 0; 1963b7579f77SDag-Erling Smørgrav return buf; 1964b7579f77SDag-Erling Smørgrav } 1965b7579f77SDag-Erling Smørgrav 1966b7579f77SDag-Erling Smørgrav /** return next space character in string */ 1967b7579f77SDag-Erling Smørgrav static char* next_space_pos(const char* str) 1968b7579f77SDag-Erling Smørgrav { 1969b7579f77SDag-Erling Smørgrav char* sp = strchr(str, ' '); 1970b7579f77SDag-Erling Smørgrav char* tab = strchr(str, '\t'); 1971b7579f77SDag-Erling Smørgrav if(!tab && !sp) 1972b7579f77SDag-Erling Smørgrav return NULL; 1973b7579f77SDag-Erling Smørgrav if(!sp) return tab; 1974b7579f77SDag-Erling Smørgrav if(!tab) return sp; 1975b7579f77SDag-Erling Smørgrav return (sp<tab)?sp:tab; 1976b7579f77SDag-Erling Smørgrav } 1977b7579f77SDag-Erling Smørgrav 1978b7579f77SDag-Erling Smørgrav /** return last space character in string */ 1979b7579f77SDag-Erling Smørgrav static char* last_space_pos(const char* str) 1980b7579f77SDag-Erling Smørgrav { 1981b7579f77SDag-Erling Smørgrav char* sp = strrchr(str, ' '); 1982b7579f77SDag-Erling Smørgrav char* tab = strrchr(str, '\t'); 1983b7579f77SDag-Erling Smørgrav if(!tab && !sp) 1984b7579f77SDag-Erling Smørgrav return NULL; 1985b7579f77SDag-Erling Smørgrav if(!sp) return tab; 1986b7579f77SDag-Erling Smørgrav if(!tab) return sp; 1987b7579f77SDag-Erling Smørgrav return (sp>tab)?sp:tab; 1988b7579f77SDag-Erling Smørgrav } 1989b7579f77SDag-Erling Smørgrav 1990b7579f77SDag-Erling Smørgrav int 1991b7579f77SDag-Erling Smørgrav cfg_parse_local_zone(struct config_file* cfg, const char* val) 1992b7579f77SDag-Erling Smørgrav { 1993b7579f77SDag-Erling Smørgrav const char *type, *name_end, *name; 1994b7579f77SDag-Erling Smørgrav char buf[256]; 1995b7579f77SDag-Erling Smørgrav 1996b7579f77SDag-Erling Smørgrav /* parse it as: [zone_name] [between stuff] [zone_type] */ 1997b7579f77SDag-Erling Smørgrav name = val; 1998ff825849SDag-Erling Smørgrav while(*name && isspace((unsigned char)*name)) 1999b7579f77SDag-Erling Smørgrav name++; 2000b7579f77SDag-Erling Smørgrav if(!*name) { 2001b7579f77SDag-Erling Smørgrav log_err("syntax error: too short: %s", val); 2002b7579f77SDag-Erling Smørgrav return 0; 2003b7579f77SDag-Erling Smørgrav } 2004b7579f77SDag-Erling Smørgrav name_end = next_space_pos(name); 2005b7579f77SDag-Erling Smørgrav if(!name_end || !*name_end) { 2006b7579f77SDag-Erling Smørgrav log_err("syntax error: expected zone type: %s", val); 2007b7579f77SDag-Erling Smørgrav return 0; 2008b7579f77SDag-Erling Smørgrav } 2009b7579f77SDag-Erling Smørgrav if (name_end - name > 255) { 2010b7579f77SDag-Erling Smørgrav log_err("syntax error: bad zone name: %s", val); 2011b7579f77SDag-Erling Smørgrav return 0; 2012b7579f77SDag-Erling Smørgrav } 201317d15b25SDag-Erling Smørgrav (void)strlcpy(buf, name, sizeof(buf)); 2014b7579f77SDag-Erling Smørgrav buf[name_end-name] = '\0'; 2015b7579f77SDag-Erling Smørgrav 2016b7579f77SDag-Erling Smørgrav type = last_space_pos(name_end); 2017ff825849SDag-Erling Smørgrav while(type && *type && isspace((unsigned char)*type)) 2018b7579f77SDag-Erling Smørgrav type++; 2019b7579f77SDag-Erling Smørgrav if(!type || !*type) { 2020b7579f77SDag-Erling Smørgrav log_err("syntax error: expected zone type: %s", val); 2021b7579f77SDag-Erling Smørgrav return 0; 2022b7579f77SDag-Erling Smørgrav } 2023b7579f77SDag-Erling Smørgrav 2024b7579f77SDag-Erling Smørgrav if(strcmp(type, "nodefault")==0) { 2025b7579f77SDag-Erling Smørgrav return cfg_strlist_insert(&cfg->local_zones_nodefault, 2026b7579f77SDag-Erling Smørgrav strdup(name)); 2027b7579f77SDag-Erling Smørgrav } else { 2028b7579f77SDag-Erling Smørgrav return cfg_str2list_insert(&cfg->local_zones, strdup(buf), 2029b7579f77SDag-Erling Smørgrav strdup(type)); 2030b7579f77SDag-Erling Smørgrav } 2031b7579f77SDag-Erling Smørgrav } 2032b7579f77SDag-Erling Smørgrav 2033b7579f77SDag-Erling Smørgrav char* cfg_ptr_reverse(char* str) 2034b7579f77SDag-Erling Smørgrav { 2035b7579f77SDag-Erling Smørgrav char* ip, *ip_end; 2036b7579f77SDag-Erling Smørgrav char* name; 2037b7579f77SDag-Erling Smørgrav char* result; 2038b7579f77SDag-Erling Smørgrav char buf[1024]; 2039b7579f77SDag-Erling Smørgrav struct sockaddr_storage addr; 2040b7579f77SDag-Erling Smørgrav socklen_t addrlen; 2041b7579f77SDag-Erling Smørgrav 2042b7579f77SDag-Erling Smørgrav /* parse it as: [IP] [between stuff] [name] */ 2043b7579f77SDag-Erling Smørgrav ip = str; 2044ff825849SDag-Erling Smørgrav while(*ip && isspace((unsigned char)*ip)) 2045b7579f77SDag-Erling Smørgrav ip++; 2046b7579f77SDag-Erling Smørgrav if(!*ip) { 2047b7579f77SDag-Erling Smørgrav log_err("syntax error: too short: %s", str); 2048b7579f77SDag-Erling Smørgrav return NULL; 2049b7579f77SDag-Erling Smørgrav } 2050b7579f77SDag-Erling Smørgrav ip_end = next_space_pos(ip); 2051b7579f77SDag-Erling Smørgrav if(!ip_end || !*ip_end) { 2052b7579f77SDag-Erling Smørgrav log_err("syntax error: expected name: %s", str); 2053b7579f77SDag-Erling Smørgrav return NULL; 2054b7579f77SDag-Erling Smørgrav } 2055b7579f77SDag-Erling Smørgrav 2056b7579f77SDag-Erling Smørgrav name = last_space_pos(ip_end); 2057b7579f77SDag-Erling Smørgrav if(!name || !*name) { 2058b7579f77SDag-Erling Smørgrav log_err("syntax error: expected name: %s", str); 2059b7579f77SDag-Erling Smørgrav return NULL; 2060b7579f77SDag-Erling Smørgrav } 2061b7579f77SDag-Erling Smørgrav 2062b7579f77SDag-Erling Smørgrav sscanf(ip, "%100s", buf); 2063b7579f77SDag-Erling Smørgrav buf[sizeof(buf)-1]=0; 2064b7579f77SDag-Erling Smørgrav 2065b7579f77SDag-Erling Smørgrav if(!ipstrtoaddr(buf, UNBOUND_DNS_PORT, &addr, &addrlen)) { 2066b7579f77SDag-Erling Smørgrav log_err("syntax error: cannot parse address: %s", str); 2067b7579f77SDag-Erling Smørgrav return NULL; 2068b7579f77SDag-Erling Smørgrav } 2069b7579f77SDag-Erling Smørgrav 2070b7579f77SDag-Erling Smørgrav /* reverse IPv4: 2071b7579f77SDag-Erling Smørgrav * ddd.ddd.ddd.ddd.in-addr-arpa. 2072b7579f77SDag-Erling Smørgrav * IPv6: (h.){32}.ip6.arpa. */ 2073b7579f77SDag-Erling Smørgrav 2074b7579f77SDag-Erling Smørgrav if(addr_is_ip6(&addr, addrlen)) { 2075b7579f77SDag-Erling Smørgrav uint8_t ad[16]; 2076b7579f77SDag-Erling Smørgrav const char* hex = "0123456789abcdef"; 2077b7579f77SDag-Erling Smørgrav char *p = buf; 2078b7579f77SDag-Erling Smørgrav int i; 2079b7579f77SDag-Erling Smørgrav memmove(ad, &((struct sockaddr_in6*)&addr)->sin6_addr, 2080b7579f77SDag-Erling Smørgrav sizeof(ad)); 2081b7579f77SDag-Erling Smørgrav for(i=15; i>=0; i--) { 2082b7579f77SDag-Erling Smørgrav uint8_t b = ad[i]; 2083b7579f77SDag-Erling Smørgrav *p++ = hex[ (b&0x0f) ]; 2084b7579f77SDag-Erling Smørgrav *p++ = '.'; 2085b7579f77SDag-Erling Smørgrav *p++ = hex[ (b&0xf0) >> 4 ]; 2086b7579f77SDag-Erling Smørgrav *p++ = '.'; 2087b7579f77SDag-Erling Smørgrav } 2088b7579f77SDag-Erling Smørgrav snprintf(buf+16*4, sizeof(buf)-16*4, "ip6.arpa. "); 2089b7579f77SDag-Erling Smørgrav } else { 2090b7579f77SDag-Erling Smørgrav uint8_t ad[4]; 2091b7579f77SDag-Erling Smørgrav memmove(ad, &((struct sockaddr_in*)&addr)->sin_addr, 2092b7579f77SDag-Erling Smørgrav sizeof(ad)); 2093b7579f77SDag-Erling Smørgrav snprintf(buf, sizeof(buf), "%u.%u.%u.%u.in-addr.arpa. ", 2094b7579f77SDag-Erling Smørgrav (unsigned)ad[3], (unsigned)ad[2], 2095b7579f77SDag-Erling Smørgrav (unsigned)ad[1], (unsigned)ad[0]); 2096b7579f77SDag-Erling Smørgrav } 2097b7579f77SDag-Erling Smørgrav 2098b7579f77SDag-Erling Smørgrav /* printed the reverse address, now the between goop and name on end */ 2099ff825849SDag-Erling Smørgrav while(*ip_end && isspace((unsigned char)*ip_end)) 2100b7579f77SDag-Erling Smørgrav ip_end++; 2101b7579f77SDag-Erling Smørgrav if(name>ip_end) { 2102b7579f77SDag-Erling Smørgrav snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), "%.*s", 2103b7579f77SDag-Erling Smørgrav (int)(name-ip_end), ip_end); 2104b7579f77SDag-Erling Smørgrav } 2105b7579f77SDag-Erling Smørgrav snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), " PTR %s", name); 2106b7579f77SDag-Erling Smørgrav 2107b7579f77SDag-Erling Smørgrav result = strdup(buf); 2108b7579f77SDag-Erling Smørgrav if(!result) { 2109b7579f77SDag-Erling Smørgrav log_err("out of memory parsing %s", str); 2110b7579f77SDag-Erling Smørgrav return NULL; 2111b7579f77SDag-Erling Smørgrav } 2112b7579f77SDag-Erling Smørgrav return result; 2113b7579f77SDag-Erling Smørgrav } 2114b7579f77SDag-Erling Smørgrav 2115b7579f77SDag-Erling Smørgrav #ifdef UB_ON_WINDOWS 2116b7579f77SDag-Erling Smørgrav char* 2117b7579f77SDag-Erling Smørgrav w_lookup_reg_str(const char* key, const char* name) 2118b7579f77SDag-Erling Smørgrav { 2119b7579f77SDag-Erling Smørgrav HKEY hk = NULL; 2120b7579f77SDag-Erling Smørgrav DWORD type = 0; 2121b7579f77SDag-Erling Smørgrav BYTE buf[1024]; 2122b7579f77SDag-Erling Smørgrav DWORD len = (DWORD)sizeof(buf); 2123b7579f77SDag-Erling Smørgrav LONG ret; 2124b7579f77SDag-Erling Smørgrav char* result = NULL; 2125b7579f77SDag-Erling Smørgrav ret = RegOpenKeyEx(HKEY_LOCAL_MACHINE, key, 0, KEY_READ, &hk); 2126b7579f77SDag-Erling Smørgrav if(ret == ERROR_FILE_NOT_FOUND) 2127b7579f77SDag-Erling Smørgrav return NULL; /* key does not exist */ 2128b7579f77SDag-Erling Smørgrav else if(ret != ERROR_SUCCESS) { 2129b7579f77SDag-Erling Smørgrav log_err("RegOpenKeyEx failed"); 2130b7579f77SDag-Erling Smørgrav return NULL; 2131b7579f77SDag-Erling Smørgrav } 2132b7579f77SDag-Erling Smørgrav ret = RegQueryValueEx(hk, (LPCTSTR)name, 0, &type, buf, &len); 2133b7579f77SDag-Erling Smørgrav if(RegCloseKey(hk)) 2134b7579f77SDag-Erling Smørgrav log_err("RegCloseKey"); 2135b7579f77SDag-Erling Smørgrav if(ret == ERROR_FILE_NOT_FOUND) 2136b7579f77SDag-Erling Smørgrav return NULL; /* name does not exist */ 2137b7579f77SDag-Erling Smørgrav else if(ret != ERROR_SUCCESS) { 2138b7579f77SDag-Erling Smørgrav log_err("RegQueryValueEx failed"); 2139b7579f77SDag-Erling Smørgrav return NULL; 2140b7579f77SDag-Erling Smørgrav } 2141b7579f77SDag-Erling Smørgrav if(type == REG_SZ || type == REG_MULTI_SZ || type == REG_EXPAND_SZ) { 2142b7579f77SDag-Erling Smørgrav buf[sizeof(buf)-1] = 0; 2143b7579f77SDag-Erling Smørgrav buf[sizeof(buf)-2] = 0; /* for multi_sz */ 2144b7579f77SDag-Erling Smørgrav result = strdup((char*)buf); 2145b7579f77SDag-Erling Smørgrav if(!result) log_err("out of memory"); 2146b7579f77SDag-Erling Smørgrav } 2147b7579f77SDag-Erling Smørgrav return result; 2148b7579f77SDag-Erling Smørgrav } 214905ab2901SDag-Erling Smørgrav 215005ab2901SDag-Erling Smørgrav void w_config_adjust_directory(struct config_file* cfg) 215105ab2901SDag-Erling Smørgrav { 215205ab2901SDag-Erling Smørgrav if(cfg->directory && cfg->directory[0]) { 215305ab2901SDag-Erling Smørgrav TCHAR dirbuf[2*MAX_PATH+4]; 215405ab2901SDag-Erling Smørgrav if(strcmp(cfg->directory, "%EXECUTABLE%") == 0) { 215505ab2901SDag-Erling Smørgrav /* get executable path, and if that contains 215605ab2901SDag-Erling Smørgrav * directories, snip off the filename part */ 215705ab2901SDag-Erling Smørgrav dirbuf[0] = 0; 215805ab2901SDag-Erling Smørgrav if(!GetModuleFileName(NULL, dirbuf, MAX_PATH)) 215905ab2901SDag-Erling Smørgrav log_err("could not GetModuleFileName"); 216005ab2901SDag-Erling Smørgrav if(strrchr(dirbuf, '\\')) { 216105ab2901SDag-Erling Smørgrav (strrchr(dirbuf, '\\'))[0] = 0; 216205ab2901SDag-Erling Smørgrav } else log_err("GetModuleFileName had no path"); 216305ab2901SDag-Erling Smørgrav if(dirbuf[0]) { 216405ab2901SDag-Erling Smørgrav /* adjust directory for later lookups to work*/ 216505ab2901SDag-Erling Smørgrav free(cfg->directory); 216605ab2901SDag-Erling Smørgrav cfg->directory = memdup(dirbuf, strlen(dirbuf)+1); 216705ab2901SDag-Erling Smørgrav } 216805ab2901SDag-Erling Smørgrav } 216905ab2901SDag-Erling Smørgrav } 217005ab2901SDag-Erling Smørgrav } 2171b7579f77SDag-Erling Smørgrav #endif /* UB_ON_WINDOWS */ 2172b7579f77SDag-Erling Smørgrav 2173b7579f77SDag-Erling Smørgrav void errinf(struct module_qstate* qstate, const char* str) 2174b7579f77SDag-Erling Smørgrav { 2175b7579f77SDag-Erling Smørgrav struct config_strlist* p; 2176b7579f77SDag-Erling Smørgrav if(qstate->env->cfg->val_log_level < 2 || !str) 2177b7579f77SDag-Erling Smørgrav return; 2178b7579f77SDag-Erling Smørgrav p = (struct config_strlist*)regional_alloc(qstate->region, sizeof(*p)); 2179b7579f77SDag-Erling Smørgrav if(!p) { 2180b7579f77SDag-Erling Smørgrav log_err("malloc failure in validator-error-info string"); 2181b7579f77SDag-Erling Smørgrav return; 2182b7579f77SDag-Erling Smørgrav } 2183b7579f77SDag-Erling Smørgrav p->next = NULL; 2184b7579f77SDag-Erling Smørgrav p->str = regional_strdup(qstate->region, str); 2185b7579f77SDag-Erling Smørgrav if(!p->str) { 2186b7579f77SDag-Erling Smørgrav log_err("malloc failure in validator-error-info string"); 2187b7579f77SDag-Erling Smørgrav return; 2188b7579f77SDag-Erling Smørgrav } 2189b7579f77SDag-Erling Smørgrav /* add at end */ 2190b7579f77SDag-Erling Smørgrav if(qstate->errinf) { 2191b7579f77SDag-Erling Smørgrav struct config_strlist* q = qstate->errinf; 2192b7579f77SDag-Erling Smørgrav while(q->next) 2193b7579f77SDag-Erling Smørgrav q = q->next; 2194b7579f77SDag-Erling Smørgrav q->next = p; 2195b7579f77SDag-Erling Smørgrav } else qstate->errinf = p; 2196b7579f77SDag-Erling Smørgrav } 2197b7579f77SDag-Erling Smørgrav 2198b7579f77SDag-Erling Smørgrav void errinf_origin(struct module_qstate* qstate, struct sock_list *origin) 2199b7579f77SDag-Erling Smørgrav { 2200b7579f77SDag-Erling Smørgrav struct sock_list* p; 2201b7579f77SDag-Erling Smørgrav if(qstate->env->cfg->val_log_level < 2) 2202b7579f77SDag-Erling Smørgrav return; 2203b7579f77SDag-Erling Smørgrav for(p=origin; p; p=p->next) { 2204b7579f77SDag-Erling Smørgrav char buf[256]; 2205b7579f77SDag-Erling Smørgrav if(p == origin) 2206b7579f77SDag-Erling Smørgrav snprintf(buf, sizeof(buf), "from "); 2207b7579f77SDag-Erling Smørgrav else snprintf(buf, sizeof(buf), "and "); 2208b7579f77SDag-Erling Smørgrav if(p->len == 0) 2209b7579f77SDag-Erling Smørgrav snprintf(buf+strlen(buf), sizeof(buf)-strlen(buf), 2210b7579f77SDag-Erling Smørgrav "cache"); 2211b7579f77SDag-Erling Smørgrav else 2212b7579f77SDag-Erling Smørgrav addr_to_str(&p->addr, p->len, buf+strlen(buf), 2213b7579f77SDag-Erling Smørgrav sizeof(buf)-strlen(buf)); 2214b7579f77SDag-Erling Smørgrav errinf(qstate, buf); 2215b7579f77SDag-Erling Smørgrav } 2216b7579f77SDag-Erling Smørgrav } 2217b7579f77SDag-Erling Smørgrav 2218b7579f77SDag-Erling Smørgrav char* errinf_to_str(struct module_qstate* qstate) 2219b7579f77SDag-Erling Smørgrav { 2220b7579f77SDag-Erling Smørgrav char buf[20480]; 2221b7579f77SDag-Erling Smørgrav char* p = buf; 2222b7579f77SDag-Erling Smørgrav size_t left = sizeof(buf); 2223b7579f77SDag-Erling Smørgrav struct config_strlist* s; 2224b7579f77SDag-Erling Smørgrav char dname[LDNS_MAX_DOMAINLEN+1]; 222517d15b25SDag-Erling Smørgrav char t[16], c[16]; 222617d15b25SDag-Erling Smørgrav sldns_wire2str_type_buf(qstate->qinfo.qtype, t, sizeof(t)); 222717d15b25SDag-Erling Smørgrav sldns_wire2str_class_buf(qstate->qinfo.qclass, c, sizeof(c)); 2228b7579f77SDag-Erling Smørgrav dname_str(qstate->qinfo.qname, dname); 2229b7579f77SDag-Erling Smørgrav snprintf(p, left, "validation failure <%s %s %s>:", dname, t, c); 2230b7579f77SDag-Erling Smørgrav left -= strlen(p); p += strlen(p); 2231b7579f77SDag-Erling Smørgrav if(!qstate->errinf) 2232b7579f77SDag-Erling Smørgrav snprintf(p, left, " misc failure"); 2233b7579f77SDag-Erling Smørgrav else for(s=qstate->errinf; s; s=s->next) { 2234b7579f77SDag-Erling Smørgrav snprintf(p, left, " %s", s->str); 2235b7579f77SDag-Erling Smørgrav left -= strlen(p); p += strlen(p); 2236b7579f77SDag-Erling Smørgrav } 2237b7579f77SDag-Erling Smørgrav p = strdup(buf); 2238b7579f77SDag-Erling Smørgrav if(!p) 2239b7579f77SDag-Erling Smørgrav log_err("malloc failure in errinf_to_str"); 2240b7579f77SDag-Erling Smørgrav return p; 2241b7579f77SDag-Erling Smørgrav } 2242b7579f77SDag-Erling Smørgrav 2243b7579f77SDag-Erling Smørgrav void errinf_rrset(struct module_qstate* qstate, struct ub_packed_rrset_key *rr) 2244b7579f77SDag-Erling Smørgrav { 2245b7579f77SDag-Erling Smørgrav char buf[1024]; 2246b7579f77SDag-Erling Smørgrav char dname[LDNS_MAX_DOMAINLEN+1]; 224717d15b25SDag-Erling Smørgrav char t[16], c[16]; 2248b7579f77SDag-Erling Smørgrav if(qstate->env->cfg->val_log_level < 2 || !rr) 2249b7579f77SDag-Erling Smørgrav return; 225017d15b25SDag-Erling Smørgrav sldns_wire2str_type_buf(ntohs(rr->rk.type), t, sizeof(t)); 225117d15b25SDag-Erling Smørgrav sldns_wire2str_class_buf(ntohs(rr->rk.rrset_class), c, sizeof(c)); 2252b7579f77SDag-Erling Smørgrav dname_str(rr->rk.dname, dname); 2253b7579f77SDag-Erling Smørgrav snprintf(buf, sizeof(buf), "for <%s %s %s>", dname, t, c); 2254b7579f77SDag-Erling Smørgrav errinf(qstate, buf); 2255b7579f77SDag-Erling Smørgrav } 2256b7579f77SDag-Erling Smørgrav 2257b7579f77SDag-Erling Smørgrav void errinf_dname(struct module_qstate* qstate, const char* str, uint8_t* dname) 2258b7579f77SDag-Erling Smørgrav { 2259b7579f77SDag-Erling Smørgrav char b[1024]; 2260b7579f77SDag-Erling Smørgrav char buf[LDNS_MAX_DOMAINLEN+1]; 2261b7579f77SDag-Erling Smørgrav if(qstate->env->cfg->val_log_level < 2 || !str || !dname) 2262b7579f77SDag-Erling Smørgrav return; 2263b7579f77SDag-Erling Smørgrav dname_str(dname, buf); 2264b7579f77SDag-Erling Smørgrav snprintf(b, sizeof(b), "%s %s", str, buf); 2265b7579f77SDag-Erling Smørgrav errinf(qstate, b); 2266b7579f77SDag-Erling Smørgrav } 2267