2 tincd.c -- the main file for tincd
3 Copyright (C) 1998,1999,2000 Ivo Timmermans <itimmermans@bigfoot.com>
4 2000 Guus Sliepen <guus@sliepen.warande.net>
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
20 $Id: tincd.c,v 1.10.4.21 2000/10/29 22:55:15 guus Exp $
30 #include <sys/types.h>
34 #include <openssl/rand.h>
35 #include <openssl/rsa.h>
36 #include <openssl/err.h>
39 #ifdef HAVE_SYS_IOCTL_H
40 # include <sys/ioctl.h>
55 /* The name this program was run with. */
58 /* If nonzero, display usage information and exit. */
61 /* If nonzero, print the version on standard output and exit. */
62 static int show_version;
64 /* If nonzero, it will attempt to kill a running tincd and exit. */
65 static int kill_tincd = 0;
67 /* If zero, don't detach from the terminal. */
68 static int do_detach = 1;
70 /* If nonzero, generate public/private keypair for this host/net. */
71 static int generate_keys = 0;
73 char *identname; /* program name for syslog */
74 char *pidfilename; /* pid file location */
75 static pid_t ppid; /* pid of non-detached part */
76 char **g_argv; /* a copy of the cmdline arguments */
78 void cleanup_and_exit(int);
81 void make_names(void);
82 RETSIGTYPE parent_exit(int a);
83 void setup_signals(void);
84 int write_pidfile(void);
86 static struct option const long_options[] =
88 { "kill", no_argument, NULL, 'k' },
89 { "net", required_argument, NULL, 'n' },
90 { "help", no_argument, &show_help, 1 },
91 { "version", no_argument, &show_version, 1 },
92 { "no-detach", no_argument, &do_detach, 0 },
93 { "keygen", optional_argument, NULL, 'K'},
101 fprintf(stderr, _("Try `%s --help\' for more information.\n"), program_name);
104 printf(_("Usage: %s [option]...\n\n"), program_name);
105 printf(_(" -c, --config=DIR Read configuration options from DIR.\n"
106 " -D, --no-detach Don't fork and detach.\n"
107 " -d Increase debug level.\n"
108 " -k, --kill Attempt to kill a running tincd and exit.\n"
109 " -n, --net=NETNAME Connect to net NETNAME.\n"));
110 printf(_(" -K, --keygen[=BITS] Generate public/private RSA keypair.\n"
111 " --help Display this help and exit.\n"
112 " --version Output version information and exit.\n\n"));
113 printf(_("Report bugs to tinc@nl.linux.org.\n"));
119 parse_options(int argc, char **argv, char **envp)
122 int option_index = 0;
124 while((r = getopt_long(argc, argv, "c:Ddkn:K::", long_options, &option_index)) != EOF)
128 case 0: /* long option */
130 case 'c': /* config file */
131 confbase = xmalloc(strlen(optarg)+1);
132 strcpy(confbase, optarg);
134 case 'D': /* no detach */
137 case 'd': /* inc debug level */
140 case 'k': /* kill old tincds */
143 case 'n': /* net name given */
144 netname = xmalloc(strlen(optarg)+1);
145 strcpy(netname, optarg);
147 case 'K': /* generate public/private keypair */
150 generate_keys = atoi(optarg);
151 if(generate_keys < 512)
153 fprintf(stderr, _("Invalid argument! BITS must be a number equal to or greater than 512.\n"));
156 generate_keys &= ~7; /* Round it to bytes */
159 generate_keys = 1024;
169 /* This function prettyprints the key generation process */
171 void indicator(int a, int b, void *p)
176 fprintf(stderr, ".");
179 fprintf(stderr, "+");
182 fprintf(stderr, "-");
188 fprintf(stderr, " p\n");
191 fprintf(stderr, " q\n");
194 fprintf(stderr, "?");
198 fprintf(stderr, "?");
202 /* Generate a public/private RSA keypair, and possibly store it into the configuration file. */
208 fprintf(stderr, _("Generating %d bits keys:\n"), bits);
209 rsa_key = RSA_generate_key(bits, 0xFFFF, indicator, NULL);
212 fprintf(stderr, _("Error during key generation!"));
216 fprintf(stderr, _("Done.\n"));
218 fprintf(stderr, _("Please copy the private key to tinc.conf and the\npublic key to your host configuration file:\n\n"));
219 printf("PublicKey = %s\n", BN_bn2hex(rsa_key->n));
220 printf("PrivateKey = %s\n", BN_bn2hex(rsa_key->d));
226 void memory_full(int size)
228 syslog(LOG_ERR, _("Memory exhausted (last is %s:%d) (couldn't allocate %d bytes), exiting."), cp_file, cp_line, size);
233 Detach from current terminal, write pidfile, kill parent
244 if((pid = fork()) < 0)
249 if(pid) /* parent process */
251 signal(SIGTERM, parent_exit);
252 sleep(600); /* wait 10 minutes */
262 if((fd = open("/dev/tty", O_RDWR)) >= 0)
264 if(ioctl(fd, TIOCNOTTY, NULL))
278 chdir("/"); /* avoid keeping a mointpoint busy */
280 openlog(identname, LOG_CONS | LOG_PID, LOG_DAEMON);
282 if(debug_lvl > DEBUG_NOTHING)
283 syslog(LOG_NOTICE, _("tincd %s (%s %s) starting, debug level %d"),
284 VERSION, __DATE__, __TIME__, debug_lvl);
286 syslog(LOG_NOTICE, _("tincd %s starting"), VERSION);
288 xalloc_fail_func = memory_full;
294 Close network connections, and terminate neatly
296 void cleanup_and_exit(int c)
298 close_network_connections();
300 if(debug_lvl > DEBUG_NOTHING)
301 syslog(LOG_INFO, _("Total bytes written: tap %d, socket %d; bytes read: tap %d, socket %d"),
302 total_tap_out, total_socket_out, total_tap_in, total_socket_in);
310 check for an existing tinc for this net, and write pid to pidfile
312 int write_pidfile(void)
316 if((pid = check_pid(pidfilename)))
319 fprintf(stderr, _("A tincd is already running for net `%s' with pid %d.\n"),
322 fprintf(stderr, _("A tincd is already running with pid %d.\n"), pid);
326 /* if it's locked, write-protected, or whatever */
327 if(!write_pid(pidfilename))
334 kill older tincd for this net
340 if(!(pid = read_pid(pidfilename)))
343 fprintf(stderr, _("No other tincd is running for net `%s'.\n"), netname);
345 fprintf(stderr, _("No other tincd is running.\n"));
349 errno = 0; /* No error, sometimes errno is only changed on error */
350 /* ESRCH is returned when no process with that pid is found */
351 if(kill(pid, SIGTERM) && errno == ESRCH)
352 fprintf(stderr, _("Removing stale lock file.\n"));
353 remove_pid(pidfilename);
359 Set all files and paths according to netname
361 void make_names(void)
366 asprintf(&pidfilename, "/var/run/tinc.%s.pid", netname);
368 asprintf(&confbase, "%s/tinc/%s", CONFDIR, netname);
370 asprintf(&identname, "tinc.%s", netname);
375 pidfilename = "/var/run/tinc.pid";
377 asprintf(&confbase, "%s/tinc", CONFDIR);
384 main(int argc, char **argv, char **envp)
386 program_name = argv[0];
388 setlocale (LC_ALL, "");
389 bindtextdomain (PACKAGE, LOCALEDIR);
390 textdomain (PACKAGE);
392 /* Do some intl stuff right now */
394 unknown = _("unknown");
396 parse_options(argc, argv, envp);
400 printf(_("%s version %s (built %s %s, protocol %d)\n"), PACKAGE, VERSION, __DATE__, __TIME__, PROT_CURRENT);
401 printf(_("Copyright (C) 1998,1999,2000 Ivo Timmermans, Guus Sliepen and others.\n"
402 "See the AUTHORS file for a complete list.\n\n"
403 "tinc comes with ABSOLUTELY NO WARRANTY. This is free software,\n"
404 "and you are welcome to redistribute it under certain conditions;\n"
405 "see the file COPYING for details.\n"));
415 fprintf(stderr, _("You must be root to run this program. Sorry.\n"));
423 /* Slllluuuuuuurrrrp! */
425 RAND_load_file("/dev/urandom", 1024);
428 exit(keygen(generate_keys));
433 if(read_server_config())
441 if(debug_lvl >= DEBUG_ERROR)
442 ERR_load_crypto_strings();
446 if(!setup_network_connections())
452 syslog(LOG_ERR, _("Unrecoverable error"));
457 syslog(LOG_NOTICE, _("Restarting in %d seconds!"), MAXTIMEOUT);
462 syslog(LOG_ERR, _("Not restarting."));
469 sigterm_handler(int a)
471 if(debug_lvl > DEBUG_NOTHING)
472 syslog(LOG_NOTICE, _("Got TERM signal"));
478 sigquit_handler(int a)
480 if(debug_lvl > DEBUG_NOTHING)
481 syslog(LOG_NOTICE, _("Got QUIT signal"));
486 sigsegv_square(int a)
488 syslog(LOG_ERR, _("Got another SEGV signal: not restarting"));
493 sigsegv_handler(int a)
495 syslog(LOG_ERR, _("Got SEGV signal"));
500 syslog(LOG_NOTICE, _("Trying to re-execute in 5 seconds..."));
501 signal(SIGSEGV, sigsegv_square);
502 close_network_connections();
504 remove_pid(pidfilename);
505 execvp(g_argv[0], g_argv);
509 syslog(LOG_NOTICE, _("Not restarting."));
515 sighup_handler(int a)
517 if(debug_lvl > DEBUG_NOTHING)
518 syslog(LOG_NOTICE, _("Got HUP signal"));
523 sigint_handler(int a)
525 if(debug_lvl > DEBUG_NOTHING)
526 syslog(LOG_NOTICE, _("Got INT signal, exiting"));
531 sigusr1_handler(int a)
537 sigusr2_handler(int a)
540 /* FIXME: reprogram this.
541 if(debug_lvl > DEBUG_NOTHING)
542 syslog(LOG_NOTICE, _("Got USR2 signal, forcing new key generation"));
550 syslog(LOG_WARNING, _("Got unexpected signal %d (%s)"), a, strsignal(a));
562 if(signal(SIGTERM, SIG_IGN) != SIG_ERR)
563 signal(SIGTERM, sigterm_handler);
564 if(signal(SIGQUIT, SIG_IGN) != SIG_ERR)
565 signal(SIGQUIT, sigquit_handler);
566 if(signal(SIGSEGV, SIG_IGN) != SIG_ERR)
567 signal(SIGSEGV, sigsegv_handler);
568 if(signal(SIGHUP, SIG_IGN) != SIG_ERR)
569 signal(SIGHUP, sighup_handler);
570 signal(SIGPIPE, SIG_IGN);
571 if(signal(SIGINT, SIG_IGN) != SIG_ERR)
572 signal(SIGINT, sigint_handler);
573 signal(SIGUSR1, sigusr1_handler);
574 signal(SIGUSR2, sigusr2_handler);
575 signal(SIGCHLD, SIG_IGN);
578 RETSIGTYPE parent_exit(int a)