mirror of
https://gitlab.nic.cz/labs/bird.git
synced 2024-12-23 02:01:55 +00:00
160 lines
3.6 KiB
Plaintext
160 lines
3.6 KiB
Plaintext
/*
|
|
* BIRD -- The Resource Public Key Infrastructure (RPKI) to Router Protocol
|
|
*
|
|
* (c) 2015 CZ.NIC
|
|
*
|
|
* Can be freely distributed and used under the terms of the GNU GPL.
|
|
*/
|
|
|
|
CF_HDR
|
|
|
|
#include "proto/rpki/rpki.h"
|
|
|
|
CF_DEFINES
|
|
|
|
#define RPKI_CFG ((struct rpki_config *) this_proto)
|
|
|
|
static struct rpki_cache *this_rpki_cache;
|
|
|
|
CF_DECLS
|
|
|
|
CF_KEYWORDS(RPKI, CACHE, LIST, PREFERENCE, BIRD, PRIVATE, PUBLIC, KEY, SSH, ENCRYPTION, USER)
|
|
|
|
CF_GRAMMAR
|
|
|
|
CF_ADDTO(proto, rpki_proto)
|
|
|
|
rpki_proto:
|
|
rpki_proto_start proto_name '{' rpki_proto_opts '}' rpki_proto_finish
|
|
;
|
|
|
|
rpki_proto_start:
|
|
proto_start RPKI {
|
|
this_proto = proto_config_new(&proto_rpki, $1);
|
|
init_list(&RPKI_CFG->cache_list);
|
|
}
|
|
;
|
|
|
|
rpki_proto_finish:
|
|
{
|
|
char *rpki_err_buf = rpki_load_rtrlib();
|
|
if (rpki_err_buf != NULL)
|
|
cf_error("Cannot use a RPKI protocol: %s", rpki_err_buf);
|
|
|
|
if (RPKI_CFG->roa_table_cf == NULL)
|
|
cf_error("For the RPKI protocol must be specified a roa table");
|
|
};
|
|
|
|
rpki_proto_opts:
|
|
/* empty */
|
|
| rpki_proto_opts rpki_proto_item ';'
|
|
;
|
|
|
|
rpki_proto_item:
|
|
proto_item
|
|
| CACHE rpki_cache
|
|
| ROA TABLE roa_table_cf { RPKI_CFG->roa_table_cf = $3; }
|
|
;
|
|
|
|
rpki_cache:
|
|
rpki_cache_init rpki_cache_addr rpki_optional_cache_opts rpki_cache_finish {
|
|
add_tail(&RPKI_CFG->cache_list, &this_rpki_cache->n);
|
|
}
|
|
;
|
|
|
|
rpki_cache_finish:
|
|
{
|
|
if (this_rpki_cache->port[0] == 0) /* empty? */
|
|
{
|
|
if (this_rpki_cache->ssh != NULL)
|
|
strcpy(this_rpki_cache->port, RPKI_SSH_PORT);
|
|
else
|
|
strcpy(this_rpki_cache->port, RPKI_PORT);
|
|
}
|
|
}
|
|
;
|
|
|
|
rpki_cache_init:
|
|
{
|
|
this_rpki_cache = rpki_new_cache();
|
|
}
|
|
;
|
|
|
|
rpki_cache_addr:
|
|
text {
|
|
this_rpki_cache = rpki_new_cache();
|
|
this_rpki_cache->host = $1;
|
|
}
|
|
| ipa {
|
|
this_rpki_cache->host = cfg_alloc(sizeof(INET6_ADDRSTRLEN));
|
|
bsnprintf(this_rpki_cache->host, INET6_ADDRSTRLEN, "%I", $1);
|
|
}
|
|
;
|
|
|
|
rpki_optional_cache_opts:
|
|
/* empty */
|
|
| '{' rpki_cache_opts '}'
|
|
;
|
|
|
|
rpki_cache_opts:
|
|
/* empty */
|
|
| rpki_cache_opts rpki_cache_opts_item ';'
|
|
;
|
|
|
|
rpki_cache_opts_item:
|
|
PORT expr {
|
|
check_u16($2);
|
|
bsnprintf(this_rpki_cache->port, RPKI_PORT_MAX_LENGTH_STR, "%u", (u16) $2);
|
|
}
|
|
| PREFERENCE expr {
|
|
check_u8($2);
|
|
this_rpki_cache->preference = $2;
|
|
}
|
|
| SSH ENCRYPTION rpki_transport_ssh_init '{' rpki_transport_ssh_opts '}' rpki_transport_ssh_finish
|
|
;
|
|
|
|
rpki_transport_ssh_init:
|
|
{
|
|
this_rpki_cache->ssh = cfg_allocz(sizeof(struct rpki_ssh_config));
|
|
if (strncmp(this_rpki_cache->port, RPKI_PORT, RPKI_PORT_MAX_LENGTH_STR) == 0)
|
|
strcpy(this_rpki_cache->port, RPKI_SSH_PORT);
|
|
}
|
|
;
|
|
|
|
rpki_transport_ssh_opts:
|
|
/* empty */
|
|
| rpki_transport_ssh_opts rpki_transport_ssh_item ';'
|
|
;
|
|
|
|
rpki_transport_ssh_item:
|
|
BIRD PRIVATE KEY text {
|
|
check_file_readability($4);
|
|
this_rpki_cache->ssh->bird_private_key = $4;
|
|
}
|
|
| CACHE PUBLIC KEY text {
|
|
check_file_readability($4);
|
|
this_rpki_cache->ssh->cache_public_key = $4;
|
|
}
|
|
| USER text {
|
|
this_rpki_cache->ssh->user = $2;
|
|
}
|
|
;
|
|
|
|
rpki_transport_ssh_finish:
|
|
{
|
|
#define RPKI_PARSE_CACHE_MISS_SSH_OPT(what) "Miss '" what ";' option in the %s protocol at cache server %s inside the ssh encryption block"
|
|
|
|
if (!this_rpki_cache->ssh->bird_private_key)
|
|
cf_error(RPKI_PARSE_CACHE_MISS_SSH_OPT("bird private key \"/path/to/ssh_key/id_rsa\""), RPKI_CFG->c.name, this_rpki_cache->host);
|
|
|
|
if (!this_rpki_cache->ssh->cache_public_key)
|
|
cf_error(RPKI_PARSE_CACHE_MISS_SSH_OPT("cache public key \"/path/to/ssh_key/known_hosts\""), RPKI_CFG->c.name, this_rpki_cache->host);
|
|
|
|
if (!this_rpki_cache->ssh->user)
|
|
cf_error(RPKI_PARSE_CACHE_MISS_SSH_OPT("user \"ssh_username\""), RPKI_CFG->c.name, this_rpki_cache->host);
|
|
}
|
|
|
|
CF_CODE
|
|
|
|
CF_END
|