net/tinc/files/tinc.init

   1 #!/bin/sh /etc/rc.common
   2 # Copyright (C) 2011 OpenWrt.org
   3 # Copyright (C) 2011 Linus Lüssing
   4 #  Based on Jo-Philipp Wich's OpenVPN init script
   5 # This is free software, licensed under the GNU General Public License v2.
   6 # See /LICENSE for more information.
   7
   8 START=42
   9
  10 SERVICE_USE_PID=1
  11
  12 BIN=/usr/sbin/tincd
  13 EXTRA_COMMANDS="up down"
  14
  15 LIST_SEP="
  16 "
  17 TMP_TINC="/tmp/tinc"
  18
  19 append_param() {
  20         local v="$1"
  21         case "$v" in
  22                 *_*_*_*) v=${v%%_*}-${v#*_}; v=${v%%_*}-${v#*_}; v=${v%%_*}-${v#*_} ;;
  23                 *_*_*)   v=${v%%_*}-${v#*_}; v=${v%%_*}-${v#*_} ;;
  24                 *_*)     v=${v%%_*}-${v#*_} ;;
  25         esac
  26         ARGS="$ARGS --$v"
  27         return 0
  28 }
  29
  30 append_conf_bools() {
  31         local p; local v; local s="$1"; local f="$2"; shift; shift
  32         for p in $*; do
  33                 config_get_bool v "$s" "$p"
  34                 [ "$v" == 1 ] && echo "$p = yes" >> "$f"
  35                 [ "$v" == 0 ] && echo "$p = no" >> "$f"
  36         done
  37 }
  38
  39 append_params() {
  40         local p; local v; local s="$1"; shift
  41         for p in $*; do
  42                 config_get v "$s" "$p"
  43                 IFS="$LIST_SEP"
  44                 for v in $v; do
  45                         [ -n "$v" ] && append_param "$p" && ARGS="$ARGS=$v"
  46                 done
  47                 unset IFS
  48         done
  49 }
  50
  51 append_conf_params() {
  52         local p; local v; local s="$1"; local f="$2"; shift; shift
  53         for p in $*; do
  54                 config_get v "$s" "$p"
  55                 IFS="$LIST_SEP"
  56                 for v in $v; do
  57                         # Look up OpenWRT interface names
  58                         [ "$p" = "BindToInterface" ] && {
  59                                 local ifname=$(uci -P /var/state get network.$v.ifname 2>&-)
  60                                 [ -n "$ifname" ] && v="$ifname"
  61                         }
  62
  63                         [ -n "$v" ] && echo "$p = $v" >> "$f"
  64                 done
  65                 unset IFS
  66         done
  67 }
  68
  69 section_enabled() {
  70         config_get_bool enabled "$1" 'enabled' 0
  71         [ $enabled -gt 0 ]
  72 }
  73
  74 prepare_host() {
  75         local s="$1"
  76         local n
  77
  78         # net disabled?
  79         config_get n "$s" net
  80         section_enabled "$n" || return 1
  81
  82         if [ "$#" = "2" ]; then
  83                 [ "$2" != "$n" ] && return 1
  84         fi
  85
  86         # host disabled?
  87         section_enabled "$s" || {
  88                 [ -f "$TMP_TINC/$n/hosts/$s" ] && rm "$TMP_TINC/$n/hosts/$s"
  89                 return 1
  90         }
  91
  92         [ ! -f "/etc/tinc/$n/hosts/$s" ] && {
  93                 echo -n "tinc: Warning, public key for $s for network $n "
  94                 echo -n "missing in /etc/tinc/$n/hosts/$s, "
  95                 echo "skipping configuration of $s"
  96                 return 1
  97         }
  98
  99         # append flags
 100         append_conf_bools "$s" "$TMP_TINC/$n/hosts/$s" \
 101                 ClampMSS IndirectData PMTUDiscovery TCPOnly
 102
 103         # append params
 104         append_conf_params "$s" "$TMP_TINC/$n/hosts/$s" \
 105                 Address Cipher Compression Digest MACLength PMTU \
 106                 Port PublicKey PublicKeyFile Subnet
 107 }
 108
 109 check_gen_own_key() {
 110         local s="$1"; local n; local k
 111
 112         config_get n "$s" Name
 113         config_get_bool k "$s" generate_keys 0
 114         [ "$k" == 0 ] && return 0
 115
 116         ([ -z "$n" ] || [ -f "$TMP_TINC/$s/hosts/$n" ] || [ -f "$TMP_TINC/$s/rsa_key.priv" ]) && \
 117                 return 0
 118         [ ! -d "$TMP_TINC/$s/hosts" ] && mkdir -p "$TMP_TINC/$s/hosts"
 119
 120         config_get k "$s" key_size
 121         if [ -z "$k" ]; then
 122                 $BIN -c "$TMP_TINC/$s" --generate-keys </dev/null
 123         else
 124                 $BIN -c "$TMP_TINC/$s" "--generate-keys=$k" </dev/null
 125         fi
 126
 127         [ ! -d "/etc/tinc/$s/hosts" ] && mkdir -p "/etc/tinc/$s/hosts"
 128         cp "$TMP_TINC/$s/rsa_key.priv" "/etc/tinc/$s/"
 129         [ -n "$n" ] && cp "$TMP_TINC/$s/hosts/$n" "/etc/tinc/$s/hosts/"
 130 }
 131
 132 prepare_net() {
 133         local s="$1"
 134         local n
 135
 136         section_enabled "$s" || return 1
 137
 138         # rm old config
 139         rm -rf "$TMP_TINC/$s/"
 140
 141         [ ! -d "$TMP_TINC/$s" ] && mkdir -p "$TMP_TINC/$s"
 142         [ -d "/etc/tinc/$s" ] && cp -r "/etc/tinc/$s" "$TMP_TINC/"
 143
 144         # append flags
 145         append_conf_bools "$s" "$TMP_TINC/$s/tinc.conf" \
 146                 DecrementTTL DirectOnly Hostnames IffOneQueue \
 147                 LocalDiscovery PriorityInheritance StrictSubnets TunnelServer \
 148                 ClampMSS IndirectData PMTUDiscovery TCPOnly
 149
 150         # append params
 151         append_conf_params "$s" "$TMP_TINC/$s/tinc.conf" \
 152                 AddressFamily BindToAddress ConnectTo BindToInterface \
 153                 Broadcast Device DeviceType Forwarding \
 154                 GraphDumpFile Interface KeyExpire MACExpire \
 155                 MaxTimeout Mode Name PingInterval PingTimeout \
 156                 PrivateKey PrivateKeyFile ProcessPriority ReplayWindow \
 157                 UDPRcvBuf UDPSndBuf \
 158                 Address Cipher Compression Digest MACLength PMTU \
 159                 Port PublicKey PublicKeyFile Subnet
 160
 161         check_gen_own_key "$s" && return 0
 162 }
 163
 164 start_instance() {
 165         local s="$1"
 166
 167         section_enabled "$s" || return 1
 168
 169         ARGS=""
 170
 171         # append params
 172         append_params "$s" logfile debug
 173
 174         SERVICE_PID_FILE="/var/run/tinc.$s.pid"
 175         service_start $BIN -c "$TMP_TINC/$s" -n $s $ARGS --pidfile="$SERVICE_PID_FILE"
 176 }
 177
 178 stop_instance() {
 179         local s="$1"
 180
 181         section_enabled "$s" || return 1
 182
 183         SERVICE_PID_FILE="/var/run/tinc.$s.pid"
 184         service_stop $BIN
 185         # rm old config
 186         rm -rf "$TMP_TINC/$s/"
 187 }
 188
 189 reload_instance() {
 190         local s="$1"
 191
 192         section_enabled "$s" || return 1
 193
 194         SERVICE_PID_FILE="/var/run/tinc.$s.pid"
 195         service_reload $BIN
 196 }
 197
 198 start() {
 199         config_load 'tinc'
 200
 201         config_foreach prepare_net 'tinc-net'
 202         config_foreach prepare_host 'tinc-host'
 203
 204         config_foreach start_instance 'tinc-net'
 205 }
 206
 207 stop() {
 208         config_load 'tinc'
 209         config_foreach stop_instance 'tinc-net'
 210 }
 211
 212 reload() {
 213         config_load 'tinc'
 214         config_foreach reload_instance 'tinc-net'
 215 }
 216
 217 up() {
 218         local exists
 219         local instance
 220         config_load 'tinc'
 221         for instance in "$@"; do
 222                 config_get exists "$instance" 'TYPE'
 223                 if [ "$exists" == "tinc-net" ]; then
 224                         prepare_net "$instance"
 225                         config_foreach prepare_host 'tinc-host' "$instance"
 226                         start_instance "$instance"
 227                 fi
 228         done
 229 }
 230
 231 down() {
 232         local exists
 233         local instance
 234         config_load 'tinc'
 235         for instance in "$@"; do
 236                 config_get exists "$instance" 'TYPE'
 237                 if [ "$exists" == "tinc-net" ]; then
 238                         stop_instance "$instance"
 239                 fi
 240         done
 241 }