blob: d57d4551dc5bc2203a0944e307b8f90acf9c50fa [file] [log] [blame]
Darren Tucker03b1cdb2007-03-21 20:46:03 +11001/* $OpenBSD: readconf.c,v 1.162 2007/03/20 03:56:12 tedu Exp $ */
Damien Millerd4a8b7e1999-10-27 13:42:43 +10002/*
Damien Miller95def091999-11-25 00:26:21 +11003 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11004 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
5 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11006 * Functions for reading the configuration files.
Damien Miller4af51302000-04-16 11:18:38 +10007 *
Damien Millere4340be2000-09-16 13:29:08 +11008 * As far as I am concerned, the code I have written for this software
9 * can be used freely for any purpose. Any derived versions of this
10 * software must be clearly marked as such, and if the derived work is
11 * incompatible with the protocol description in the RFC file, it must be
12 * called by a name other than "ssh" or "Secure Shell".
Damien Miller95def091999-11-25 00:26:21 +110013 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100014
15#include "includes.h"
Damien Millerf17883e2006-03-15 11:45:54 +110016
17#include <sys/types.h>
18#include <sys/stat.h>
Damien Miller8ec8c3e2006-07-10 20:35:38 +100019#include <sys/socket.h>
20
21#include <netinet/in.h>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100022
Damien Millerc7b06362006-03-15 11:53:45 +110023#include <ctype.h>
Darren Tucker39972492006-07-12 22:22:46 +100024#include <errno.h>
Damien Millerb8fe89c2006-07-24 14:51:00 +100025#include <netdb.h>
Damien Millerd7834352006-08-05 12:39:39 +100026#include <signal.h>
Damien Millerded319c2006-09-01 15:38:36 +100027#include <stdarg.h>
Damien Millera7a73ee2006-08-05 11:37:59 +100028#include <stdio.h>
Damien Millere3476ed2006-07-24 14:13:33 +100029#include <string.h>
Damien Millere6b3b612006-07-24 14:01:23 +100030#include <unistd.h>
Damien Millerc7b06362006-03-15 11:53:45 +110031
Damien Millerd4a8b7e1999-10-27 13:42:43 +100032#include "xmalloc.h"
Damien Millerd7834352006-08-05 12:39:39 +100033#include "ssh.h"
Damien Miller78928792000-04-12 20:17:38 +100034#include "compat.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000035#include "cipher.h"
36#include "pathnames.h"
37#include "log.h"
Damien Millerd7834352006-08-05 12:39:39 +100038#include "key.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000039#include "readconf.h"
40#include "match.h"
41#include "misc.h"
Damien Millerd7834352006-08-05 12:39:39 +100042#include "buffer.h"
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000043#include "kex.h"
44#include "mac.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100045
46/* Format of the configuration file:
47
48 # Configuration data is parsed as follows:
49 # 1. command line options
50 # 2. user-specific file
51 # 3. system-wide file
52 # Any configuration value is only changed the first time it is set.
53 # Thus, host-specific definitions should be at the beginning of the
54 # configuration file, and defaults at the end.
55
56 # Host-specific declarations. These may override anything above. A single
57 # host may match multiple declarations; these are processed in the order
58 # that they are given in.
59
60 Host *.ngs.fi ngs.fi
Ben Lindstrom4daea862002-06-09 20:04:02 +000061 User foo
Damien Millerd4a8b7e1999-10-27 13:42:43 +100062
63 Host fake.com
64 HostName another.host.name.real.org
65 User blaah
66 Port 34289
67 ForwardX11 no
68 ForwardAgent no
69
70 Host books.com
71 RemoteForward 9999 shadows.cs.hut.fi:9999
72 Cipher 3des
73
74 Host fascist.blob.com
75 Port 23123
76 User tylonen
Damien Millerd4a8b7e1999-10-27 13:42:43 +100077 PasswordAuthentication no
78
79 Host puukko.hut.fi
80 User t35124p
81 ProxyCommand ssh-proxy %h %p
82
83 Host *.fr
Ben Lindstrom4daea862002-06-09 20:04:02 +000084 PublicKeyAuthentication no
Damien Millerd4a8b7e1999-10-27 13:42:43 +100085
86 Host *.su
87 Cipher none
88 PasswordAuthentication no
89
Damien Millerd27b9472005-12-13 19:29:02 +110090 Host vpn.fake.com
91 Tunnel yes
92 TunnelDevice 3
93
Damien Millerd4a8b7e1999-10-27 13:42:43 +100094 # Defaults for various options
95 Host *
96 ForwardAgent no
Damien Miller0bc1bd82000-11-13 22:57:25 +110097 ForwardX11 no
Damien Millerd4a8b7e1999-10-27 13:42:43 +100098 PasswordAuthentication yes
99 RSAAuthentication yes
100 RhostsRSAAuthentication yes
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000101 StrictHostKeyChecking yes
Damien Miller12c150e2003-12-17 16:31:10 +1100102 TcpKeepAlive no
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000103 IdentityFile ~/.ssh/identity
104 Port 22
105 EscapeChar ~
106
107*/
108
109/* Keyword tokens. */
110
Damien Miller95def091999-11-25 00:26:21 +1100111typedef enum {
112 oBadOption,
Darren Tucker0a118da2003-10-15 15:54:32 +1000113 oForwardAgent, oForwardX11, oForwardX11Trusted, oGatewayPorts,
Darren Tuckere7d4b192006-07-12 22:17:10 +1000114 oExitOnForwardFailure,
Ben Lindstromcb72e4f2002-06-21 00:41:51 +0000115 oPasswordAuthentication, oRSAAuthentication,
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000116 oChallengeResponseAuthentication, oXAuthLocation,
Damien Miller95def091999-11-25 00:26:21 +1100117 oIdentityFile, oHostName, oPort, oCipher, oRemoteForward, oLocalForward,
118 oUser, oHost, oEscapeChar, oRhostsRSAAuthentication, oProxyCommand,
119 oGlobalKnownHostsFile, oUserKnownHostsFile, oConnectionAttempts,
120 oBatchMode, oCheckHostIP, oStrictHostKeyChecking, oCompression,
Damien Miller12c150e2003-12-17 16:31:10 +1100121 oCompressionLevel, oTCPKeepAlive, oNumberOfPasswordPrompts,
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000122 oUsePrivilegedPort, oLogLevel, oCiphers, oProtocol, oMacs,
Damien Miller0bc1bd82000-11-13 22:57:25 +1100123 oGlobalKnownHostsFile2, oUserKnownHostsFile2, oPubkeyAuthentication,
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000124 oKbdInteractiveAuthentication, oKbdInteractiveDevices, oHostKeyAlias,
Ben Lindstrom982dbbc2001-04-17 18:11:36 +0000125 oDynamicForward, oPreferredAuthentications, oHostbasedAuthentication,
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +0000126 oHostKeyAlgorithms, oBindAddress, oSmartcardDevice,
Ben Lindstrom4daea862002-06-09 20:04:02 +0000127 oClearAllForwardings, oNoHostAuthenticationForLocalhost,
Damien Millerb78d5eb2003-05-16 11:39:04 +1000128 oEnableSSHKeysign, oRekeyLimit, oVerifyHostKeyDNS, oConnectTimeout,
Darren Tucker0efd1552003-08-26 11:49:55 +1000129 oAddressFamily, oGssAuthentication, oGssDelegateCreds,
Damien Millerbd394c32004-03-08 23:12:36 +1100130 oServerAliveInterval, oServerAliveCountMax, oIdentitiesOnly,
Damien Millere1776152005-03-01 21:47:37 +1100131 oSendEnv, oControlPath, oControlMaster, oHashKnownHosts,
Damien Millerd27b9472005-12-13 19:29:02 +1100132 oTunnel, oTunnelDevice, oLocalCommand, oPermitLocalCommand,
Damien Millerf9b3feb2003-05-16 11:38:32 +1000133 oDeprecated, oUnsupported
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000134} OpCodes;
135
136/* Textual representations of the tokens. */
137
Damien Miller95def091999-11-25 00:26:21 +1100138static struct {
139 const char *name;
140 OpCodes opcode;
141} keywords[] = {
142 { "forwardagent", oForwardAgent },
143 { "forwardx11", oForwardX11 },
Darren Tucker0a118da2003-10-15 15:54:32 +1000144 { "forwardx11trusted", oForwardX11Trusted },
Darren Tuckere7d4b192006-07-12 22:17:10 +1000145 { "exitonforwardfailure", oExitOnForwardFailure },
Damien Millerd3a18572000-06-07 19:55:44 +1000146 { "xauthlocation", oXAuthLocation },
Damien Miller95def091999-11-25 00:26:21 +1100147 { "gatewayports", oGatewayPorts },
148 { "useprivilegedport", oUsePrivilegedPort },
Darren Tuckerec960f22003-08-13 20:37:05 +1000149 { "rhostsauthentication", oDeprecated },
Damien Miller95def091999-11-25 00:26:21 +1100150 { "passwordauthentication", oPasswordAuthentication },
Damien Miller874d77b2000-10-14 16:23:11 +1100151 { "kbdinteractiveauthentication", oKbdInteractiveAuthentication },
152 { "kbdinteractivedevices", oKbdInteractiveDevices },
Damien Miller95def091999-11-25 00:26:21 +1100153 { "rsaauthentication", oRSAAuthentication },
Damien Miller0bc1bd82000-11-13 22:57:25 +1100154 { "pubkeyauthentication", oPubkeyAuthentication },
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000155 { "dsaauthentication", oPubkeyAuthentication }, /* alias */
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000156 { "rhostsrsaauthentication", oRhostsRSAAuthentication },
Ben Lindstromd69dab32001-04-12 23:36:05 +0000157 { "hostbasedauthentication", oHostbasedAuthentication },
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000158 { "challengeresponseauthentication", oChallengeResponseAuthentication },
159 { "skeyauthentication", oChallengeResponseAuthentication }, /* alias */
160 { "tisauthentication", oChallengeResponseAuthentication }, /* alias */
Damien Millerf9b3feb2003-05-16 11:38:32 +1000161 { "kerberosauthentication", oUnsupported },
162 { "kerberostgtpassing", oUnsupported },
Damien Millerf9b3feb2003-05-16 11:38:32 +1000163 { "afstokenpassing", oUnsupported },
Darren Tucker0efd1552003-08-26 11:49:55 +1000164#if defined(GSSAPI)
165 { "gssapiauthentication", oGssAuthentication },
Darren Tucker0efd1552003-08-26 11:49:55 +1000166 { "gssapidelegatecredentials", oGssDelegateCreds },
167#else
168 { "gssapiauthentication", oUnsupported },
169 { "gssapidelegatecredentials", oUnsupported },
170#endif
Ben Lindstrom4daea862002-06-09 20:04:02 +0000171 { "fallbacktorsh", oDeprecated },
172 { "usersh", oDeprecated },
Damien Miller95def091999-11-25 00:26:21 +1100173 { "identityfile", oIdentityFile },
Damien Miller0bc1bd82000-11-13 22:57:25 +1100174 { "identityfile2", oIdentityFile }, /* alias */
Damien Millerbd394c32004-03-08 23:12:36 +1100175 { "identitiesonly", oIdentitiesOnly },
Damien Miller95def091999-11-25 00:26:21 +1100176 { "hostname", oHostName },
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000177 { "hostkeyalias", oHostKeyAlias },
Damien Miller95def091999-11-25 00:26:21 +1100178 { "proxycommand", oProxyCommand },
179 { "port", oPort },
180 { "cipher", oCipher },
Damien Miller78928792000-04-12 20:17:38 +1000181 { "ciphers", oCiphers },
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000182 { "macs", oMacs },
Damien Miller78928792000-04-12 20:17:38 +1000183 { "protocol", oProtocol },
Damien Miller95def091999-11-25 00:26:21 +1100184 { "remoteforward", oRemoteForward },
185 { "localforward", oLocalForward },
186 { "user", oUser },
187 { "host", oHost },
188 { "escapechar", oEscapeChar },
Damien Miller95def091999-11-25 00:26:21 +1100189 { "globalknownhostsfile", oGlobalKnownHostsFile },
Ben Lindstromd6481ea2001-06-25 04:37:41 +0000190 { "userknownhostsfile", oUserKnownHostsFile }, /* obsolete */
Damien Millereba71ba2000-04-29 23:57:08 +1000191 { "globalknownhostsfile2", oGlobalKnownHostsFile2 },
Ben Lindstromd6481ea2001-06-25 04:37:41 +0000192 { "userknownhostsfile2", oUserKnownHostsFile2 }, /* obsolete */
Damien Miller95def091999-11-25 00:26:21 +1100193 { "connectionattempts", oConnectionAttempts },
194 { "batchmode", oBatchMode },
195 { "checkhostip", oCheckHostIP },
196 { "stricthostkeychecking", oStrictHostKeyChecking },
197 { "compression", oCompression },
198 { "compressionlevel", oCompressionLevel },
Damien Miller12c150e2003-12-17 16:31:10 +1100199 { "tcpkeepalive", oTCPKeepAlive },
200 { "keepalive", oTCPKeepAlive }, /* obsolete */
Damien Miller95def091999-11-25 00:26:21 +1100201 { "numberofpasswordprompts", oNumberOfPasswordPrompts },
Damien Miller95def091999-11-25 00:26:21 +1100202 { "loglevel", oLogLevel },
Ben Lindstrom3bb4f9d2001-04-08 18:30:26 +0000203 { "dynamicforward", oDynamicForward },
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000204 { "preferredauthentications", oPreferredAuthentications },
Ben Lindstrom982dbbc2001-04-17 18:11:36 +0000205 { "hostkeyalgorithms", oHostKeyAlgorithms },
Ben Lindstrome0f88042001-04-30 13:06:24 +0000206 { "bindaddress", oBindAddress },
Damien Millerf9b3feb2003-05-16 11:38:32 +1000207#ifdef SMARTCARD
Ben Lindstromae996bf2001-08-06 21:27:53 +0000208 { "smartcarddevice", oSmartcardDevice },
Damien Millerf9b3feb2003-05-16 11:38:32 +1000209#else
210 { "smartcarddevice", oUnsupported },
211#endif
Damien Miller9f0f5c62001-12-21 14:45:46 +1100212 { "clearallforwardings", oClearAllForwardings },
Ben Lindstromb6df73b2002-11-09 15:52:31 +0000213 { "enablesshkeysign", oEnableSSHKeysign },
Damien Miller37876e92003-05-15 10:19:46 +1000214 { "verifyhostkeydns", oVerifyHostKeyDNS },
Damien Miller9f0f5c62001-12-21 14:45:46 +1100215 { "nohostauthenticationforlocalhost", oNoHostAuthenticationForLocalhost },
Damien Millera5539d22003-04-09 20:50:06 +1000216 { "rekeylimit", oRekeyLimit },
Damien Millerb78d5eb2003-05-16 11:39:04 +1000217 { "connecttimeout", oConnectTimeout },
Damien Miller20a8f972003-05-18 20:50:30 +1000218 { "addressfamily", oAddressFamily },
Damien Miller509b0102003-12-17 16:33:10 +1100219 { "serveraliveinterval", oServerAliveInterval },
220 { "serveralivecountmax", oServerAliveCountMax },
Darren Tucker46bc0752004-05-02 22:11:30 +1000221 { "sendenv", oSendEnv },
Damien Miller0e220db2004-06-15 10:34:08 +1000222 { "controlpath", oControlPath },
223 { "controlmaster", oControlMaster },
Damien Millere1776152005-03-01 21:47:37 +1100224 { "hashknownhosts", oHashKnownHosts },
Damien Millerd27b9472005-12-13 19:29:02 +1100225 { "tunnel", oTunnel },
226 { "tunneldevice", oTunnelDevice },
227 { "localcommand", oLocalCommand },
228 { "permitlocalcommand", oPermitLocalCommand },
Ben Lindstrom65366a82001-12-06 16:32:47 +0000229 { NULL, oBadOption }
Damien Miller5ce662a1999-11-11 17:57:39 +1100230};
231
Damien Miller5428f641999-11-25 11:54:57 +1100232/*
233 * Adds a local TCP/IP port forward to options. Never returns if there is an
234 * error.
235 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000236
Damien Miller4af51302000-04-16 11:18:38 +1000237void
Damien Millerf91ee4c2005-03-01 21:24:33 +1100238add_local_forward(Options *options, const Forward *newfwd)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000239{
Damien Miller95def091999-11-25 00:26:21 +1100240 Forward *fwd;
Ben Lindstrom99a4e142002-07-09 14:06:40 +0000241#ifndef NO_IPPORT_RESERVED_CONCEPT
Damien Miller95def091999-11-25 00:26:21 +1100242 extern uid_t original_real_uid;
Damien Millerf91ee4c2005-03-01 21:24:33 +1100243 if (newfwd->listen_port < IPPORT_RESERVED && original_real_uid != 0)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000244 fatal("Privileged ports can only be forwarded by root.");
Damien Millerbac2d8a2000-09-05 16:13:06 +1100245#endif
Damien Miller95def091999-11-25 00:26:21 +1100246 if (options->num_local_forwards >= SSH_MAX_FORWARDS_PER_DIRECTION)
247 fatal("Too many local forwards (max %d).", SSH_MAX_FORWARDS_PER_DIRECTION);
248 fwd = &options->local_forwards[options->num_local_forwards++];
Damien Millerf91ee4c2005-03-01 21:24:33 +1100249
250 fwd->listen_host = (newfwd->listen_host == NULL) ?
251 NULL : xstrdup(newfwd->listen_host);
252 fwd->listen_port = newfwd->listen_port;
253 fwd->connect_host = xstrdup(newfwd->connect_host);
254 fwd->connect_port = newfwd->connect_port;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000255}
256
Damien Miller5428f641999-11-25 11:54:57 +1100257/*
258 * Adds a remote TCP/IP port forward to options. Never returns if there is
259 * an error.
260 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000261
Damien Miller4af51302000-04-16 11:18:38 +1000262void
Damien Millerf91ee4c2005-03-01 21:24:33 +1100263add_remote_forward(Options *options, const Forward *newfwd)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000264{
Damien Miller95def091999-11-25 00:26:21 +1100265 Forward *fwd;
266 if (options->num_remote_forwards >= SSH_MAX_FORWARDS_PER_DIRECTION)
267 fatal("Too many remote forwards (max %d).",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100268 SSH_MAX_FORWARDS_PER_DIRECTION);
Damien Miller95def091999-11-25 00:26:21 +1100269 fwd = &options->remote_forwards[options->num_remote_forwards++];
Damien Millerf91ee4c2005-03-01 21:24:33 +1100270
271 fwd->listen_host = (newfwd->listen_host == NULL) ?
272 NULL : xstrdup(newfwd->listen_host);
273 fwd->listen_port = newfwd->listen_port;
274 fwd->connect_host = xstrdup(newfwd->connect_host);
275 fwd->connect_port = newfwd->connect_port;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000276}
277
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +0000278static void
279clear_forwardings(Options *options)
280{
281 int i;
282
Damien Millerf91ee4c2005-03-01 21:24:33 +1100283 for (i = 0; i < options->num_local_forwards; i++) {
Darren Tucker1d55ca72005-03-14 22:58:40 +1100284 if (options->local_forwards[i].listen_host != NULL)
285 xfree(options->local_forwards[i].listen_host);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100286 xfree(options->local_forwards[i].connect_host);
287 }
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +0000288 options->num_local_forwards = 0;
Damien Millerf91ee4c2005-03-01 21:24:33 +1100289 for (i = 0; i < options->num_remote_forwards; i++) {
Darren Tucker1d55ca72005-03-14 22:58:40 +1100290 if (options->remote_forwards[i].listen_host != NULL)
291 xfree(options->remote_forwards[i].listen_host);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100292 xfree(options->remote_forwards[i].connect_host);
293 }
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +0000294 options->num_remote_forwards = 0;
Damien Miller7b58e802005-12-13 19:33:19 +1100295 options->tun_open = SSH_TUNMODE_NO;
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +0000296}
297
Damien Miller5428f641999-11-25 11:54:57 +1100298/*
Ben Lindstrom3704c262001-04-02 18:20:03 +0000299 * Returns the number of the token pointed to by cp or oBadOption.
Damien Miller5428f641999-11-25 11:54:57 +1100300 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000301
Damien Miller4af51302000-04-16 11:18:38 +1000302static OpCodes
Damien Miller95def091999-11-25 00:26:21 +1100303parse_token(const char *cp, const char *filename, int linenum)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000304{
Ben Lindstrom46c16222000-12-22 01:43:59 +0000305 u_int i;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000306
Damien Miller95def091999-11-25 00:26:21 +1100307 for (i = 0; keywords[i].name; i++)
Damien Miller5428f641999-11-25 11:54:57 +1100308 if (strcasecmp(cp, keywords[i].name) == 0)
Damien Miller95def091999-11-25 00:26:21 +1100309 return keywords[i].opcode;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000310
Ben Lindstromb5cdc662001-04-16 02:13:26 +0000311 error("%s: line %d: Bad configuration option: %s",
312 filename, linenum, cp);
Damien Miller95def091999-11-25 00:26:21 +1100313 return oBadOption;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000314}
315
Damien Miller5428f641999-11-25 11:54:57 +1100316/*
317 * Processes a single option line as used in the configuration files. This
318 * only sets those values that have not already been set.
319 */
Damien Miller61f08ac2003-02-24 11:56:27 +1100320#define WHITESPACE " \t\r\n"
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000321
Damien Miller2ccf6611999-11-15 15:25:10 +1100322int
323process_config_line(Options *options, const char *host,
Damien Miller95def091999-11-25 00:26:21 +1100324 char *line, const char *filename, int linenum,
325 int *activep)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000326{
Damien Millerf91ee4c2005-03-01 21:24:33 +1100327 char *s, **charptr, *endofnumber, *keyword, *arg, *arg2, fwdarg[256];
Damien Millerb59d4fe2006-03-15 11:30:38 +1100328 int opcode, *intptr, value, value2, scale;
329 long long orig, val64;
Damien Miller61f08ac2003-02-24 11:56:27 +1100330 size_t len;
Damien Millerf91ee4c2005-03-01 21:24:33 +1100331 Forward fwd;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000332
Damien Millerc652cac2003-05-14 13:40:54 +1000333 /* Strip trailing whitespace */
Darren Tucker47eede72005-03-14 23:08:12 +1100334 for (len = strlen(line) - 1; len > 0; len--) {
Damien Millerc652cac2003-05-14 13:40:54 +1000335 if (strchr(WHITESPACE, line[len]) == NULL)
336 break;
337 line[len] = '\0';
338 }
339
Damien Millerbe484b52000-07-15 14:14:16 +1000340 s = line;
341 /* Get the keyword. (Each line is supposed to begin with a keyword). */
Damien Miller928b2362006-03-26 13:53:32 +1100342 if ((keyword = strdelim(&s)) == NULL)
343 return 0;
Damien Millerbe484b52000-07-15 14:14:16 +1000344 /* Ignore leading whitespace. */
345 if (*keyword == '\0')
346 keyword = strdelim(&s);
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000347 if (keyword == NULL || !*keyword || *keyword == '\n' || *keyword == '#')
Damien Miller95def091999-11-25 00:26:21 +1100348 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000349
Damien Miller37023962000-07-11 17:31:38 +1000350 opcode = parse_token(keyword, filename, linenum);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000351
Damien Miller95def091999-11-25 00:26:21 +1100352 switch (opcode) {
353 case oBadOption:
Damien Miller5428f641999-11-25 11:54:57 +1100354 /* don't panic, but count bad options */
355 return -1;
Damien Miller95def091999-11-25 00:26:21 +1100356 /* NOTREACHED */
Damien Millerb78d5eb2003-05-16 11:39:04 +1000357 case oConnectTimeout:
358 intptr = &options->connection_timeout;
Damien Miller509b0102003-12-17 16:33:10 +1100359parse_time:
Damien Millerb78d5eb2003-05-16 11:39:04 +1000360 arg = strdelim(&s);
361 if (!arg || *arg == '\0')
362 fatal("%s line %d: missing time value.",
363 filename, linenum);
364 if ((value = convtime(arg)) == -1)
365 fatal("%s line %d: invalid time value.",
366 filename, linenum);
Darren Tuckera52c5b62007-02-19 22:09:45 +1100367 if (*activep && *intptr == -1)
Damien Millerb78d5eb2003-05-16 11:39:04 +1000368 *intptr = value;
369 break;
370
Damien Miller95def091999-11-25 00:26:21 +1100371 case oForwardAgent:
372 intptr = &options->forward_agent;
373parse_flag:
Damien Millerbe484b52000-07-15 14:14:16 +1000374 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000375 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100376 fatal("%.200s line %d: Missing yes/no argument.", filename, linenum);
377 value = 0; /* To avoid compiler warning... */
Damien Miller37023962000-07-11 17:31:38 +1000378 if (strcmp(arg, "yes") == 0 || strcmp(arg, "true") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100379 value = 1;
Damien Miller37023962000-07-11 17:31:38 +1000380 else if (strcmp(arg, "no") == 0 || strcmp(arg, "false") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100381 value = 0;
382 else
383 fatal("%.200s line %d: Bad yes/no argument.", filename, linenum);
384 if (*activep && *intptr == -1)
385 *intptr = value;
386 break;
387
388 case oForwardX11:
389 intptr = &options->forward_x11;
390 goto parse_flag;
391
Darren Tucker0a118da2003-10-15 15:54:32 +1000392 case oForwardX11Trusted:
393 intptr = &options->forward_x11_trusted;
394 goto parse_flag;
395
Damien Miller95def091999-11-25 00:26:21 +1100396 case oGatewayPorts:
397 intptr = &options->gateway_ports;
398 goto parse_flag;
399
Darren Tuckere7d4b192006-07-12 22:17:10 +1000400 case oExitOnForwardFailure:
401 intptr = &options->exit_on_forward_failure;
402 goto parse_flag;
403
Damien Miller95def091999-11-25 00:26:21 +1100404 case oUsePrivilegedPort:
405 intptr = &options->use_privileged_port;
406 goto parse_flag;
407
Damien Miller95def091999-11-25 00:26:21 +1100408 case oPasswordAuthentication:
409 intptr = &options->password_authentication;
410 goto parse_flag;
411
Damien Miller874d77b2000-10-14 16:23:11 +1100412 case oKbdInteractiveAuthentication:
413 intptr = &options->kbd_interactive_authentication;
414 goto parse_flag;
415
416 case oKbdInteractiveDevices:
417 charptr = &options->kbd_interactive_devices;
418 goto parse_string;
419
Damien Miller0bc1bd82000-11-13 22:57:25 +1100420 case oPubkeyAuthentication:
421 intptr = &options->pubkey_authentication;
Damien Millere247cc42000-05-07 12:03:14 +1000422 goto parse_flag;
423
Damien Miller95def091999-11-25 00:26:21 +1100424 case oRSAAuthentication:
425 intptr = &options->rsa_authentication;
426 goto parse_flag;
427
428 case oRhostsRSAAuthentication:
429 intptr = &options->rhosts_rsa_authentication;
430 goto parse_flag;
431
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000432 case oHostbasedAuthentication:
433 intptr = &options->hostbased_authentication;
434 goto parse_flag;
435
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000436 case oChallengeResponseAuthentication:
Ben Lindstrom551ea372001-06-05 18:56:16 +0000437 intptr = &options->challenge_response_authentication;
Damien Miller95def091999-11-25 00:26:21 +1100438 goto parse_flag;
Damien Miller2aa0ab42003-05-15 12:05:28 +1000439
Darren Tucker0efd1552003-08-26 11:49:55 +1000440 case oGssAuthentication:
441 intptr = &options->gss_authentication;
442 goto parse_flag;
443
444 case oGssDelegateCreds:
445 intptr = &options->gss_deleg_creds;
446 goto parse_flag;
447
Damien Miller95def091999-11-25 00:26:21 +1100448 case oBatchMode:
449 intptr = &options->batch_mode;
450 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000451
Damien Miller95def091999-11-25 00:26:21 +1100452 case oCheckHostIP:
453 intptr = &options->check_host_ip;
454 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000455
Damien Miller37876e92003-05-15 10:19:46 +1000456 case oVerifyHostKeyDNS:
457 intptr = &options->verify_host_key_dns;
Damien Miller150b5572003-11-17 21:19:29 +1100458 goto parse_yesnoask;
Damien Miller37876e92003-05-15 10:19:46 +1000459
Damien Miller95def091999-11-25 00:26:21 +1100460 case oStrictHostKeyChecking:
461 intptr = &options->strict_host_key_checking;
Damien Miller150b5572003-11-17 21:19:29 +1100462parse_yesnoask:
Damien Millerbe484b52000-07-15 14:14:16 +1000463 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000464 if (!arg || *arg == '\0')
Ben Lindstrom5ed8acd2001-01-29 08:00:54 +0000465 fatal("%.200s line %d: Missing yes/no/ask argument.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100466 filename, linenum);
Damien Miller95def091999-11-25 00:26:21 +1100467 value = 0; /* To avoid compiler warning... */
Damien Miller37023962000-07-11 17:31:38 +1000468 if (strcmp(arg, "yes") == 0 || strcmp(arg, "true") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100469 value = 1;
Damien Miller37023962000-07-11 17:31:38 +1000470 else if (strcmp(arg, "no") == 0 || strcmp(arg, "false") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100471 value = 0;
Damien Miller37023962000-07-11 17:31:38 +1000472 else if (strcmp(arg, "ask") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100473 value = 2;
474 else
475 fatal("%.200s line %d: Bad yes/no/ask argument.", filename, linenum);
476 if (*activep && *intptr == -1)
477 *intptr = value;
478 break;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000479
Damien Miller95def091999-11-25 00:26:21 +1100480 case oCompression:
481 intptr = &options->compression;
482 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000483
Damien Miller12c150e2003-12-17 16:31:10 +1100484 case oTCPKeepAlive:
485 intptr = &options->tcp_keep_alive;
Damien Miller95def091999-11-25 00:26:21 +1100486 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000487
Ben Lindstrom3cecc9a2001-10-03 17:39:38 +0000488 case oNoHostAuthenticationForLocalhost:
489 intptr = &options->no_host_authentication_for_localhost;
490 goto parse_flag;
491
Damien Miller95def091999-11-25 00:26:21 +1100492 case oNumberOfPasswordPrompts:
493 intptr = &options->number_of_password_prompts;
494 goto parse_int;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000495
Damien Miller95def091999-11-25 00:26:21 +1100496 case oCompressionLevel:
497 intptr = &options->compression_level;
498 goto parse_int;
499
Damien Millera5539d22003-04-09 20:50:06 +1000500 case oRekeyLimit:
501 intptr = &options->rekey_limit;
502 arg = strdelim(&s);
503 if (!arg || *arg == '\0')
504 fatal("%.200s line %d: Missing argument.", filename, linenum);
505 if (arg[0] < '0' || arg[0] > '9')
506 fatal("%.200s line %d: Bad number.", filename, linenum);
Damien Millerb59d4fe2006-03-15 11:30:38 +1100507 orig = val64 = strtoll(arg, &endofnumber, 10);
Damien Millera5539d22003-04-09 20:50:06 +1000508 if (arg == endofnumber)
509 fatal("%.200s line %d: Bad number.", filename, linenum);
510 switch (toupper(*endofnumber)) {
Damien Millerb59d4fe2006-03-15 11:30:38 +1100511 case '\0':
512 scale = 1;
513 break;
Damien Millera5539d22003-04-09 20:50:06 +1000514 case 'K':
Damien Millerb59d4fe2006-03-15 11:30:38 +1100515 scale = 1<<10;
Damien Millera5539d22003-04-09 20:50:06 +1000516 break;
517 case 'M':
Damien Millerb59d4fe2006-03-15 11:30:38 +1100518 scale = 1<<20;
Damien Millera5539d22003-04-09 20:50:06 +1000519 break;
520 case 'G':
Damien Millerb59d4fe2006-03-15 11:30:38 +1100521 scale = 1<<30;
Damien Millera5539d22003-04-09 20:50:06 +1000522 break;
Damien Millerb59d4fe2006-03-15 11:30:38 +1100523 default:
524 fatal("%.200s line %d: Invalid RekeyLimit suffix",
525 filename, linenum);
Damien Millera5539d22003-04-09 20:50:06 +1000526 }
Damien Millerb59d4fe2006-03-15 11:30:38 +1100527 val64 *= scale;
528 /* detect integer wrap and too-large limits */
529 if ((val64 / scale) != orig || val64 > INT_MAX)
530 fatal("%.200s line %d: RekeyLimit too large",
531 filename, linenum);
532 if (val64 < 16)
533 fatal("%.200s line %d: RekeyLimit too small",
534 filename, linenum);
Damien Millera5539d22003-04-09 20:50:06 +1000535 if (*activep && *intptr == -1)
Damien Millerb59d4fe2006-03-15 11:30:38 +1100536 *intptr = (int)val64;
Damien Millera5539d22003-04-09 20:50:06 +1000537 break;
538
Damien Miller95def091999-11-25 00:26:21 +1100539 case oIdentityFile:
Damien Millerbe484b52000-07-15 14:14:16 +1000540 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000541 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100542 fatal("%.200s line %d: Missing argument.", filename, linenum);
543 if (*activep) {
Damien Miller0bc1bd82000-11-13 22:57:25 +1100544 intptr = &options->num_identity_files;
Damien Millereba71ba2000-04-29 23:57:08 +1000545 if (*intptr >= SSH_MAX_IDENTITY_FILES)
Damien Miller95def091999-11-25 00:26:21 +1100546 fatal("%.200s line %d: Too many identity files specified (max %d).",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100547 filename, linenum, SSH_MAX_IDENTITY_FILES);
Darren Tuckercb0e1752007-02-19 22:12:53 +1100548 charptr = &options->identity_files[*intptr];
Damien Miller37023962000-07-11 17:31:38 +1000549 *charptr = xstrdup(arg);
Damien Millereba71ba2000-04-29 23:57:08 +1000550 *intptr = *intptr + 1;
Damien Miller95def091999-11-25 00:26:21 +1100551 }
552 break;
553
Damien Millerd3a18572000-06-07 19:55:44 +1000554 case oXAuthLocation:
555 charptr=&options->xauth_location;
556 goto parse_string;
557
Damien Miller95def091999-11-25 00:26:21 +1100558 case oUser:
559 charptr = &options->user;
560parse_string:
Damien Millerbe484b52000-07-15 14:14:16 +1000561 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000562 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100563 fatal("%.200s line %d: Missing argument.", filename, linenum);
564 if (*activep && *charptr == NULL)
Damien Miller37023962000-07-11 17:31:38 +1000565 *charptr = xstrdup(arg);
Damien Miller95def091999-11-25 00:26:21 +1100566 break;
567
568 case oGlobalKnownHostsFile:
569 charptr = &options->system_hostfile;
570 goto parse_string;
571
572 case oUserKnownHostsFile:
573 charptr = &options->user_hostfile;
574 goto parse_string;
575
Damien Millereba71ba2000-04-29 23:57:08 +1000576 case oGlobalKnownHostsFile2:
577 charptr = &options->system_hostfile2;
578 goto parse_string;
579
580 case oUserKnownHostsFile2:
581 charptr = &options->user_hostfile2;
582 goto parse_string;
583
Damien Miller95def091999-11-25 00:26:21 +1100584 case oHostName:
585 charptr = &options->hostname;
586 goto parse_string;
587
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000588 case oHostKeyAlias:
589 charptr = &options->host_key_alias;
590 goto parse_string;
591
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000592 case oPreferredAuthentications:
593 charptr = &options->preferred_authentications;
594 goto parse_string;
595
Ben Lindstrome0f88042001-04-30 13:06:24 +0000596 case oBindAddress:
597 charptr = &options->bind_address;
598 goto parse_string;
599
Ben Lindstromae996bf2001-08-06 21:27:53 +0000600 case oSmartcardDevice:
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000601 charptr = &options->smartcard_device;
602 goto parse_string;
Ben Lindstromae996bf2001-08-06 21:27:53 +0000603
Damien Miller95def091999-11-25 00:26:21 +1100604 case oProxyCommand:
Damien Millerd27b9472005-12-13 19:29:02 +1100605 charptr = &options->proxy_command;
606parse_command:
Darren Tuckera99c1b72003-06-28 12:40:12 +1000607 if (s == NULL)
608 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller61f08ac2003-02-24 11:56:27 +1100609 len = strspn(s, WHITESPACE "=");
Damien Miller95def091999-11-25 00:26:21 +1100610 if (*activep && *charptr == NULL)
Damien Miller61f08ac2003-02-24 11:56:27 +1100611 *charptr = xstrdup(s + len);
Damien Miller95def091999-11-25 00:26:21 +1100612 return 0;
613
614 case oPort:
615 intptr = &options->port;
616parse_int:
Damien Millerbe484b52000-07-15 14:14:16 +1000617 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000618 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100619 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000620 if (arg[0] < '0' || arg[0] > '9')
Damien Miller95def091999-11-25 00:26:21 +1100621 fatal("%.200s line %d: Bad number.", filename, linenum);
Damien Miller5428f641999-11-25 11:54:57 +1100622
623 /* Octal, decimal, or hex format? */
Damien Miller37023962000-07-11 17:31:38 +1000624 value = strtol(arg, &endofnumber, 0);
625 if (arg == endofnumber)
Damien Miller5428f641999-11-25 11:54:57 +1100626 fatal("%.200s line %d: Bad number.", filename, linenum);
Damien Miller95def091999-11-25 00:26:21 +1100627 if (*activep && *intptr == -1)
628 *intptr = value;
629 break;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000630
Damien Miller95def091999-11-25 00:26:21 +1100631 case oConnectionAttempts:
632 intptr = &options->connection_attempts;
633 goto parse_int;
Damien Miller5ce662a1999-11-11 17:57:39 +1100634
Damien Miller95def091999-11-25 00:26:21 +1100635 case oCipher:
636 intptr = &options->cipher;
Damien Millerbe484b52000-07-15 14:14:16 +1000637 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000638 if (!arg || *arg == '\0')
Damien Millerb1715dc2000-05-30 13:44:51 +1000639 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000640 value = cipher_number(arg);
Damien Miller95def091999-11-25 00:26:21 +1100641 if (value == -1)
642 fatal("%.200s line %d: Bad cipher '%s'.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100643 filename, linenum, arg ? arg : "<NONE>");
Damien Miller95def091999-11-25 00:26:21 +1100644 if (*activep && *intptr == -1)
645 *intptr = value;
646 break;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000647
Damien Miller78928792000-04-12 20:17:38 +1000648 case oCiphers:
Damien Millerbe484b52000-07-15 14:14:16 +1000649 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000650 if (!arg || *arg == '\0')
Damien Millerb1715dc2000-05-30 13:44:51 +1000651 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000652 if (!ciphers_valid(arg))
Damien Miller30c3d422000-05-09 11:02:59 +1000653 fatal("%.200s line %d: Bad SSH2 cipher spec '%s'.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100654 filename, linenum, arg ? arg : "<NONE>");
Damien Miller78928792000-04-12 20:17:38 +1000655 if (*activep && options->ciphers == NULL)
Damien Miller37023962000-07-11 17:31:38 +1000656 options->ciphers = xstrdup(arg);
Damien Miller78928792000-04-12 20:17:38 +1000657 break;
658
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000659 case oMacs:
660 arg = strdelim(&s);
661 if (!arg || *arg == '\0')
662 fatal("%.200s line %d: Missing argument.", filename, linenum);
663 if (!mac_valid(arg))
664 fatal("%.200s line %d: Bad SSH2 Mac spec '%s'.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100665 filename, linenum, arg ? arg : "<NONE>");
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000666 if (*activep && options->macs == NULL)
667 options->macs = xstrdup(arg);
668 break;
669
Ben Lindstrom982dbbc2001-04-17 18:11:36 +0000670 case oHostKeyAlgorithms:
671 arg = strdelim(&s);
672 if (!arg || *arg == '\0')
673 fatal("%.200s line %d: Missing argument.", filename, linenum);
674 if (!key_names_valid2(arg))
675 fatal("%.200s line %d: Bad protocol 2 host key algorithms '%s'.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100676 filename, linenum, arg ? arg : "<NONE>");
Ben Lindstrom982dbbc2001-04-17 18:11:36 +0000677 if (*activep && options->hostkeyalgorithms == NULL)
678 options->hostkeyalgorithms = xstrdup(arg);
679 break;
680
Damien Miller78928792000-04-12 20:17:38 +1000681 case oProtocol:
682 intptr = &options->protocol;
Damien Millerbe484b52000-07-15 14:14:16 +1000683 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000684 if (!arg || *arg == '\0')
Damien Millerb1715dc2000-05-30 13:44:51 +1000685 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000686 value = proto_spec(arg);
Damien Miller78928792000-04-12 20:17:38 +1000687 if (value == SSH_PROTO_UNKNOWN)
688 fatal("%.200s line %d: Bad protocol spec '%s'.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100689 filename, linenum, arg ? arg : "<NONE>");
Damien Miller78928792000-04-12 20:17:38 +1000690 if (*activep && *intptr == SSH_PROTO_UNKNOWN)
691 *intptr = value;
692 break;
693
Damien Miller95def091999-11-25 00:26:21 +1100694 case oLogLevel:
695 intptr = (int *) &options->log_level;
Damien Millerbe484b52000-07-15 14:14:16 +1000696 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000697 value = log_level_number(arg);
Damien Millerfcd93202002-02-05 12:26:34 +1100698 if (value == SYSLOG_LEVEL_NOT_SET)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000699 fatal("%.200s line %d: unsupported log level '%s'",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100700 filename, linenum, arg ? arg : "<NONE>");
Damien Millerfcd93202002-02-05 12:26:34 +1100701 if (*activep && (LogLevel) *intptr == SYSLOG_LEVEL_NOT_SET)
Damien Miller95def091999-11-25 00:26:21 +1100702 *intptr = (LogLevel) value;
703 break;
704
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000705 case oLocalForward:
Damien Miller95def091999-11-25 00:26:21 +1100706 case oRemoteForward:
Damien Millerbe484b52000-07-15 14:14:16 +1000707 arg = strdelim(&s);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100708 if (arg == NULL || *arg == '\0')
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000709 fatal("%.200s line %d: Missing port argument.",
710 filename, linenum);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100711 arg2 = strdelim(&s);
712 if (arg2 == NULL || *arg2 == '\0')
713 fatal("%.200s line %d: Missing target argument.",
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000714 filename, linenum);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100715
716 /* construct a string for parse_forward */
717 snprintf(fwdarg, sizeof(fwdarg), "%s:%s", arg, arg2);
718
719 if (parse_forward(&fwd, fwdarg) == 0)
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000720 fatal("%.200s line %d: Bad forwarding specification.",
721 filename, linenum);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100722
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000723 if (*activep) {
724 if (opcode == oLocalForward)
Damien Millerf91ee4c2005-03-01 21:24:33 +1100725 add_local_forward(options, &fwd);
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000726 else if (opcode == oRemoteForward)
Damien Millerf91ee4c2005-03-01 21:24:33 +1100727 add_remote_forward(options, &fwd);
Ben Lindstrom62c25a42001-09-12 18:01:59 +0000728 }
Damien Miller95def091999-11-25 00:26:21 +1100729 break;
730
Ben Lindstrom3bb4f9d2001-04-08 18:30:26 +0000731 case oDynamicForward:
732 arg = strdelim(&s);
733 if (!arg || *arg == '\0')
734 fatal("%.200s line %d: Missing port argument.",
735 filename, linenum);
Damien Millerf91ee4c2005-03-01 21:24:33 +1100736 memset(&fwd, '\0', sizeof(fwd));
737 fwd.connect_host = "socks";
738 fwd.listen_host = hpdelim(&arg);
739 if (fwd.listen_host == NULL ||
740 strlen(fwd.listen_host) >= NI_MAXHOST)
741 fatal("%.200s line %d: Bad forwarding specification.",
742 filename, linenum);
743 if (arg) {
744 fwd.listen_port = a2port(arg);
745 fwd.listen_host = cleanhostname(fwd.listen_host);
746 } else {
747 fwd.listen_port = a2port(fwd.listen_host);
Damien Miller43f6db62005-08-12 22:11:18 +1000748 fwd.listen_host = NULL;
Damien Millerf91ee4c2005-03-01 21:24:33 +1100749 }
750 if (fwd.listen_port == 0)
Ben Lindstrom3bb4f9d2001-04-08 18:30:26 +0000751 fatal("%.200s line %d: Badly formatted port number.",
752 filename, linenum);
Ben Lindstrom525a0932001-09-12 17:35:27 +0000753 if (*activep)
Damien Millerf91ee4c2005-03-01 21:24:33 +1100754 add_local_forward(options, &fwd);
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000755 break;
Ben Lindstrom3bb4f9d2001-04-08 18:30:26 +0000756
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +0000757 case oClearAllForwardings:
758 intptr = &options->clear_forwardings;
759 goto parse_flag;
760
Damien Miller95def091999-11-25 00:26:21 +1100761 case oHost:
762 *activep = 0;
Damien Millerbe484b52000-07-15 14:14:16 +1000763 while ((arg = strdelim(&s)) != NULL && *arg != '\0')
Damien Miller37023962000-07-11 17:31:38 +1000764 if (match_pattern(host, arg)) {
765 debug("Applying options for %.100s", arg);
Damien Miller95def091999-11-25 00:26:21 +1100766 *activep = 1;
767 break;
768 }
Damien Millerbe484b52000-07-15 14:14:16 +1000769 /* Avoid garbage check below, as strdelim is done. */
Damien Miller95def091999-11-25 00:26:21 +1100770 return 0;
771
772 case oEscapeChar:
773 intptr = &options->escape_char;
Damien Millerbe484b52000-07-15 14:14:16 +1000774 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000775 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100776 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000777 if (arg[0] == '^' && arg[2] == 0 &&
Ben Lindstrom46c16222000-12-22 01:43:59 +0000778 (u_char) arg[1] >= 64 && (u_char) arg[1] < 128)
779 value = (u_char) arg[1] & 31;
Damien Miller37023962000-07-11 17:31:38 +1000780 else if (strlen(arg) == 1)
Ben Lindstrom46c16222000-12-22 01:43:59 +0000781 value = (u_char) arg[0];
Damien Miller37023962000-07-11 17:31:38 +1000782 else if (strcmp(arg, "none") == 0)
Ben Lindstrom2b1f71b2001-06-05 20:32:21 +0000783 value = SSH_ESCAPECHAR_NONE;
Damien Miller95def091999-11-25 00:26:21 +1100784 else {
785 fatal("%.200s line %d: Bad escape character.",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100786 filename, linenum);
Damien Miller95def091999-11-25 00:26:21 +1100787 /* NOTREACHED */
788 value = 0; /* Avoid compiler warning. */
789 }
790 if (*activep && *intptr == -1)
791 *intptr = value;
792 break;
793
Damien Miller20a8f972003-05-18 20:50:30 +1000794 case oAddressFamily:
795 arg = strdelim(&s);
Damien Miller17b23d82005-05-26 12:11:56 +1000796 if (!arg || *arg == '\0')
797 fatal("%s line %d: missing address family.",
798 filename, linenum);
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000799 intptr = &options->address_family;
Damien Miller20a8f972003-05-18 20:50:30 +1000800 if (strcasecmp(arg, "inet") == 0)
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000801 value = AF_INET;
Damien Miller20a8f972003-05-18 20:50:30 +1000802 else if (strcasecmp(arg, "inet6") == 0)
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000803 value = AF_INET6;
Damien Miller20a8f972003-05-18 20:50:30 +1000804 else if (strcasecmp(arg, "any") == 0)
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000805 value = AF_UNSPEC;
Damien Miller20a8f972003-05-18 20:50:30 +1000806 else
807 fatal("Unsupported AddressFamily \"%s\"", arg);
Darren Tucker0a4f04b2003-07-03 20:37:47 +1000808 if (*activep && *intptr == -1)
809 *intptr = value;
Damien Miller20a8f972003-05-18 20:50:30 +1000810 break;
811
Ben Lindstromb6df73b2002-11-09 15:52:31 +0000812 case oEnableSSHKeysign:
813 intptr = &options->enable_ssh_keysign;
814 goto parse_flag;
815
Damien Millerbd394c32004-03-08 23:12:36 +1100816 case oIdentitiesOnly:
817 intptr = &options->identities_only;
818 goto parse_flag;
819
Damien Miller509b0102003-12-17 16:33:10 +1100820 case oServerAliveInterval:
821 intptr = &options->server_alive_interval;
822 goto parse_time;
823
824 case oServerAliveCountMax:
825 intptr = &options->server_alive_count_max;
826 goto parse_int;
827
Darren Tucker46bc0752004-05-02 22:11:30 +1000828 case oSendEnv:
829 while ((arg = strdelim(&s)) != NULL && *arg != '\0') {
830 if (strchr(arg, '=') != NULL)
831 fatal("%s line %d: Invalid environment name.",
832 filename, linenum);
Damien Millerf8e7acc2005-03-05 11:22:50 +1100833 if (!*activep)
834 continue;
Darren Tucker46bc0752004-05-02 22:11:30 +1000835 if (options->num_send_env >= MAX_SEND_ENV)
836 fatal("%s line %d: too many send env.",
837 filename, linenum);
838 options->send_env[options->num_send_env++] =
839 xstrdup(arg);
840 }
841 break;
842
Damien Miller0e220db2004-06-15 10:34:08 +1000843 case oControlPath:
844 charptr = &options->control_path;
845 goto parse_string;
846
847 case oControlMaster:
848 intptr = &options->control_master;
Damien Millerd14b1e72005-06-16 13:19:41 +1000849 arg = strdelim(&s);
850 if (!arg || *arg == '\0')
851 fatal("%.200s line %d: Missing ControlMaster argument.",
852 filename, linenum);
853 value = 0; /* To avoid compiler warning... */
854 if (strcmp(arg, "yes") == 0 || strcmp(arg, "true") == 0)
855 value = SSHCTL_MASTER_YES;
856 else if (strcmp(arg, "no") == 0 || strcmp(arg, "false") == 0)
857 value = SSHCTL_MASTER_NO;
858 else if (strcmp(arg, "auto") == 0)
859 value = SSHCTL_MASTER_AUTO;
860 else if (strcmp(arg, "ask") == 0)
861 value = SSHCTL_MASTER_ASK;
862 else if (strcmp(arg, "autoask") == 0)
863 value = SSHCTL_MASTER_AUTO_ASK;
864 else
865 fatal("%.200s line %d: Bad ControlMaster argument.",
866 filename, linenum);
867 if (*activep && *intptr == -1)
868 *intptr = value;
869 break;
Damien Miller0e220db2004-06-15 10:34:08 +1000870
Damien Millere1776152005-03-01 21:47:37 +1100871 case oHashKnownHosts:
872 intptr = &options->hash_known_hosts;
873 goto parse_flag;
874
Damien Millerd27b9472005-12-13 19:29:02 +1100875 case oTunnel:
876 intptr = &options->tun_open;
Damien Miller7b58e802005-12-13 19:33:19 +1100877 arg = strdelim(&s);
878 if (!arg || *arg == '\0')
879 fatal("%s line %d: Missing yes/point-to-point/"
880 "ethernet/no argument.", filename, linenum);
881 value = 0; /* silence compiler */
882 if (strcasecmp(arg, "ethernet") == 0)
883 value = SSH_TUNMODE_ETHERNET;
884 else if (strcasecmp(arg, "point-to-point") == 0)
885 value = SSH_TUNMODE_POINTOPOINT;
886 else if (strcasecmp(arg, "yes") == 0)
887 value = SSH_TUNMODE_DEFAULT;
888 else if (strcasecmp(arg, "no") == 0)
889 value = SSH_TUNMODE_NO;
890 else
891 fatal("%s line %d: Bad yes/point-to-point/ethernet/"
892 "no argument: %s", filename, linenum, arg);
893 if (*activep)
894 *intptr = value;
895 break;
Damien Millerd27b9472005-12-13 19:29:02 +1100896
897 case oTunnelDevice:
898 arg = strdelim(&s);
899 if (!arg || *arg == '\0')
900 fatal("%.200s line %d: Missing argument.", filename, linenum);
901 value = a2tun(arg, &value2);
Damien Miller7b58e802005-12-13 19:33:19 +1100902 if (value == SSH_TUNID_ERR)
Damien Millerd27b9472005-12-13 19:29:02 +1100903 fatal("%.200s line %d: Bad tun device.", filename, linenum);
904 if (*activep) {
905 options->tun_local = value;
906 options->tun_remote = value2;
907 }
908 break;
909
910 case oLocalCommand:
911 charptr = &options->local_command;
912 goto parse_command;
913
914 case oPermitLocalCommand:
915 intptr = &options->permit_local_command;
916 goto parse_flag;
917
Ben Lindstrom4daea862002-06-09 20:04:02 +0000918 case oDeprecated:
Ben Lindstrom2e17b082002-06-09 20:13:27 +0000919 debug("%s line %d: Deprecated option \"%s\"",
Ben Lindstrom4daea862002-06-09 20:04:02 +0000920 filename, linenum, keyword);
Ben Lindstrom2e17b082002-06-09 20:13:27 +0000921 return 0;
Ben Lindstrom4daea862002-06-09 20:04:02 +0000922
Damien Millerf9b3feb2003-05-16 11:38:32 +1000923 case oUnsupported:
924 error("%s line %d: Unsupported option \"%s\"",
925 filename, linenum, keyword);
926 return 0;
927
Damien Miller95def091999-11-25 00:26:21 +1100928 default:
929 fatal("process_config_line: Unimplemented opcode %d", opcode);
930 }
931
932 /* Check that there is no garbage at end of line. */
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000933 if ((arg = strdelim(&s)) != NULL && *arg != '\0') {
Damien Miller37023962000-07-11 17:31:38 +1000934 fatal("%.200s line %d: garbage at end of line; \"%.200s\".",
Damien Miller0dc1bef2005-07-17 17:22:45 +1000935 filename, linenum, arg);
Damien Miller37023962000-07-11 17:31:38 +1000936 }
Damien Miller95def091999-11-25 00:26:21 +1100937 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000938}
939
940
Damien Miller5428f641999-11-25 11:54:57 +1100941/*
942 * Reads the config file and modifies the options accordingly. Options
943 * should already be initialized before this call. This never returns if
Ben Lindstromedc0cf22001-09-12 18:32:20 +0000944 * there is an error. If the file does not exist, this returns 0.
Damien Miller5428f641999-11-25 11:54:57 +1100945 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000946
Ben Lindstromedc0cf22001-09-12 18:32:20 +0000947int
Darren Tuckerfc959702004-07-17 16:12:08 +1000948read_config_file(const char *filename, const char *host, Options *options,
Damien Miller57a44762004-04-20 20:11:57 +1000949 int checkperm)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000950{
Damien Miller95def091999-11-25 00:26:21 +1100951 FILE *f;
952 char line[1024];
953 int active, linenum;
954 int bad_options = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000955
Damien Miller95def091999-11-25 00:26:21 +1100956 /* Open the file. */
Damien Miller57a44762004-04-20 20:11:57 +1000957 if ((f = fopen(filename, "r")) == NULL)
Ben Lindstromedc0cf22001-09-12 18:32:20 +0000958 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000959
Damien Miller57a44762004-04-20 20:11:57 +1000960 if (checkperm) {
961 struct stat sb;
Darren Tuckerfc959702004-07-17 16:12:08 +1000962
Damien Miller33793852004-06-15 10:27:55 +1000963 if (fstat(fileno(f), &sb) == -1)
Damien Miller57a44762004-04-20 20:11:57 +1000964 fatal("fstat %s: %s", filename, strerror(errno));
Damien Miller57a44762004-04-20 20:11:57 +1000965 if (((sb.st_uid != 0 && sb.st_uid != getuid()) ||
Damien Miller33793852004-06-15 10:27:55 +1000966 (sb.st_mode & 022) != 0))
Damien Miller57a44762004-04-20 20:11:57 +1000967 fatal("Bad owner or permissions on %s", filename);
Damien Miller57a44762004-04-20 20:11:57 +1000968 }
969
Damien Miller95def091999-11-25 00:26:21 +1100970 debug("Reading configuration data %.200s", filename);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000971
Damien Miller5428f641999-11-25 11:54:57 +1100972 /*
973 * Mark that we are now processing the options. This flag is turned
974 * on/off by Host specifications.
975 */
Damien Miller95def091999-11-25 00:26:21 +1100976 active = 1;
977 linenum = 0;
978 while (fgets(line, sizeof(line), f)) {
979 /* Update line number counter. */
980 linenum++;
981 if (process_config_line(options, host, line, filename, linenum, &active) != 0)
982 bad_options++;
983 }
984 fclose(f);
985 if (bad_options > 0)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000986 fatal("%s: terminating, %d bad configuration options",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100987 filename, bad_options);
Ben Lindstromedc0cf22001-09-12 18:32:20 +0000988 return 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000989}
990
Damien Miller5428f641999-11-25 11:54:57 +1100991/*
992 * Initializes options to special values that indicate that they have not yet
993 * been set. Read_config_file will only set options with this value. Options
994 * are processed in the following order: command line, user config file,
995 * system config file. Last, fill_default_options is called.
996 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000997
Damien Miller4af51302000-04-16 11:18:38 +1000998void
Damien Miller95def091999-11-25 00:26:21 +1100999initialize_options(Options * options)
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001000{
Damien Miller95def091999-11-25 00:26:21 +11001001 memset(options, 'X', sizeof(*options));
1002 options->forward_agent = -1;
1003 options->forward_x11 = -1;
Darren Tucker0a118da2003-10-15 15:54:32 +10001004 options->forward_x11_trusted = -1;
Darren Tuckere7d4b192006-07-12 22:17:10 +10001005 options->exit_on_forward_failure = -1;
Damien Millerd3a18572000-06-07 19:55:44 +10001006 options->xauth_location = NULL;
Damien Miller95def091999-11-25 00:26:21 +11001007 options->gateway_ports = -1;
1008 options->use_privileged_port = -1;
Damien Miller95def091999-11-25 00:26:21 +11001009 options->rsa_authentication = -1;
Damien Miller0bc1bd82000-11-13 22:57:25 +11001010 options->pubkey_authentication = -1;
Ben Lindstrom551ea372001-06-05 18:56:16 +00001011 options->challenge_response_authentication = -1;
Darren Tucker0efd1552003-08-26 11:49:55 +10001012 options->gss_authentication = -1;
1013 options->gss_deleg_creds = -1;
Damien Miller95def091999-11-25 00:26:21 +11001014 options->password_authentication = -1;
Damien Miller874d77b2000-10-14 16:23:11 +11001015 options->kbd_interactive_authentication = -1;
1016 options->kbd_interactive_devices = NULL;
Damien Miller95def091999-11-25 00:26:21 +11001017 options->rhosts_rsa_authentication = -1;
Ben Lindstrom5eabda32001-04-12 23:34:34 +00001018 options->hostbased_authentication = -1;
Damien Miller95def091999-11-25 00:26:21 +11001019 options->batch_mode = -1;
1020 options->check_host_ip = -1;
1021 options->strict_host_key_checking = -1;
1022 options->compression = -1;
Damien Miller12c150e2003-12-17 16:31:10 +11001023 options->tcp_keep_alive = -1;
Damien Miller95def091999-11-25 00:26:21 +11001024 options->compression_level = -1;
1025 options->port = -1;
Darren Tucker0a4f04b2003-07-03 20:37:47 +10001026 options->address_family = -1;
Damien Miller95def091999-11-25 00:26:21 +11001027 options->connection_attempts = -1;
Damien Millerb78d5eb2003-05-16 11:39:04 +10001028 options->connection_timeout = -1;
Damien Miller95def091999-11-25 00:26:21 +11001029 options->number_of_password_prompts = -1;
1030 options->cipher = -1;
Damien Miller78928792000-04-12 20:17:38 +10001031 options->ciphers = NULL;
Ben Lindstrom06b33aa2001-02-15 03:01:59 +00001032 options->macs = NULL;
Ben Lindstrom982dbbc2001-04-17 18:11:36 +00001033 options->hostkeyalgorithms = NULL;
Damien Miller78928792000-04-12 20:17:38 +10001034 options->protocol = SSH_PROTO_UNKNOWN;
Damien Miller95def091999-11-25 00:26:21 +11001035 options->num_identity_files = 0;
1036 options->hostname = NULL;
Ben Lindstrom4dccfa52000-12-28 16:40:05 +00001037 options->host_key_alias = NULL;
Damien Miller95def091999-11-25 00:26:21 +11001038 options->proxy_command = NULL;
1039 options->user = NULL;
1040 options->escape_char = -1;
1041 options->system_hostfile = NULL;
1042 options->user_hostfile = NULL;
Damien Millereba71ba2000-04-29 23:57:08 +10001043 options->system_hostfile2 = NULL;
1044 options->user_hostfile2 = NULL;
Damien Miller95def091999-11-25 00:26:21 +11001045 options->num_local_forwards = 0;
1046 options->num_remote_forwards = 0;
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +00001047 options->clear_forwardings = -1;
Damien Millerfcd93202002-02-05 12:26:34 +11001048 options->log_level = SYSLOG_LEVEL_NOT_SET;
Ben Lindstromb9be60a2001-03-11 01:49:19 +00001049 options->preferred_authentications = NULL;
Ben Lindstrome0f88042001-04-30 13:06:24 +00001050 options->bind_address = NULL;
Ben Lindstromf7db3bb2001-08-06 21:35:51 +00001051 options->smartcard_device = NULL;
Ben Lindstromb6df73b2002-11-09 15:52:31 +00001052 options->enable_ssh_keysign = - 1;
Ben Lindstrom3cecc9a2001-10-03 17:39:38 +00001053 options->no_host_authentication_for_localhost = - 1;
Damien Millerbd394c32004-03-08 23:12:36 +11001054 options->identities_only = - 1;
Damien Millera5539d22003-04-09 20:50:06 +10001055 options->rekey_limit = - 1;
Damien Miller37876e92003-05-15 10:19:46 +10001056 options->verify_host_key_dns = -1;
Damien Miller509b0102003-12-17 16:33:10 +11001057 options->server_alive_interval = -1;
1058 options->server_alive_count_max = -1;
Darren Tucker46bc0752004-05-02 22:11:30 +10001059 options->num_send_env = 0;
Damien Miller0e220db2004-06-15 10:34:08 +10001060 options->control_path = NULL;
1061 options->control_master = -1;
Damien Millere1776152005-03-01 21:47:37 +11001062 options->hash_known_hosts = -1;
Damien Millerd27b9472005-12-13 19:29:02 +11001063 options->tun_open = -1;
1064 options->tun_local = -1;
1065 options->tun_remote = -1;
1066 options->local_command = NULL;
1067 options->permit_local_command = -1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001068}
1069
Damien Miller5428f641999-11-25 11:54:57 +11001070/*
1071 * Called after processing other sources of option data, this fills those
1072 * options for which no value has been specified with their default values.
1073 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001074
Damien Miller4af51302000-04-16 11:18:38 +10001075void
Damien Miller95def091999-11-25 00:26:21 +11001076fill_default_options(Options * options)
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001077{
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +00001078 int len;
1079
Damien Miller95def091999-11-25 00:26:21 +11001080 if (options->forward_agent == -1)
Damien Millerb1715dc2000-05-30 13:44:51 +10001081 options->forward_agent = 0;
Damien Miller95def091999-11-25 00:26:21 +11001082 if (options->forward_x11 == -1)
Damien Miller98c7ad62000-03-09 21:27:49 +11001083 options->forward_x11 = 0;
Darren Tucker0a118da2003-10-15 15:54:32 +10001084 if (options->forward_x11_trusted == -1)
1085 options->forward_x11_trusted = 0;
Darren Tuckere7d4b192006-07-12 22:17:10 +10001086 if (options->exit_on_forward_failure == -1)
1087 options->exit_on_forward_failure = 0;
Damien Millerd3a18572000-06-07 19:55:44 +10001088 if (options->xauth_location == NULL)
Ben Lindstrom1bf11f62001-06-09 01:48:01 +00001089 options->xauth_location = _PATH_XAUTH;
Damien Miller95def091999-11-25 00:26:21 +11001090 if (options->gateway_ports == -1)
1091 options->gateway_ports = 0;
1092 if (options->use_privileged_port == -1)
Ben Lindstromcebc8582001-03-08 03:39:10 +00001093 options->use_privileged_port = 0;
Damien Miller95def091999-11-25 00:26:21 +11001094 if (options->rsa_authentication == -1)
1095 options->rsa_authentication = 1;
Damien Miller0bc1bd82000-11-13 22:57:25 +11001096 if (options->pubkey_authentication == -1)
1097 options->pubkey_authentication = 1;
Ben Lindstrom551ea372001-06-05 18:56:16 +00001098 if (options->challenge_response_authentication == -1)
Ben Lindstrom0076d752001-08-06 20:53:26 +00001099 options->challenge_response_authentication = 1;
Darren Tucker0efd1552003-08-26 11:49:55 +10001100 if (options->gss_authentication == -1)
Darren Tuckera044f472003-10-15 15:52:03 +10001101 options->gss_authentication = 0;
Darren Tucker0efd1552003-08-26 11:49:55 +10001102 if (options->gss_deleg_creds == -1)
1103 options->gss_deleg_creds = 0;
Damien Miller95def091999-11-25 00:26:21 +11001104 if (options->password_authentication == -1)
1105 options->password_authentication = 1;
Damien Miller874d77b2000-10-14 16:23:11 +11001106 if (options->kbd_interactive_authentication == -1)
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +00001107 options->kbd_interactive_authentication = 1;
Damien Miller95def091999-11-25 00:26:21 +11001108 if (options->rhosts_rsa_authentication == -1)
Ben Lindstrom2bf82762002-06-11 15:53:05 +00001109 options->rhosts_rsa_authentication = 0;
Ben Lindstrom5eabda32001-04-12 23:34:34 +00001110 if (options->hostbased_authentication == -1)
1111 options->hostbased_authentication = 0;
Damien Miller95def091999-11-25 00:26:21 +11001112 if (options->batch_mode == -1)
1113 options->batch_mode = 0;
1114 if (options->check_host_ip == -1)
1115 options->check_host_ip = 1;
1116 if (options->strict_host_key_checking == -1)
1117 options->strict_host_key_checking = 2; /* 2 is default */
1118 if (options->compression == -1)
1119 options->compression = 0;
Damien Miller12c150e2003-12-17 16:31:10 +11001120 if (options->tcp_keep_alive == -1)
1121 options->tcp_keep_alive = 1;
Damien Miller95def091999-11-25 00:26:21 +11001122 if (options->compression_level == -1)
1123 options->compression_level = 6;
1124 if (options->port == -1)
1125 options->port = 0; /* Filled in ssh_connect. */
Darren Tucker0a4f04b2003-07-03 20:37:47 +10001126 if (options->address_family == -1)
1127 options->address_family = AF_UNSPEC;
Damien Miller95def091999-11-25 00:26:21 +11001128 if (options->connection_attempts == -1)
Ben Lindstromf9cedb92001-08-06 21:07:11 +00001129 options->connection_attempts = 1;
Damien Miller95def091999-11-25 00:26:21 +11001130 if (options->number_of_password_prompts == -1)
1131 options->number_of_password_prompts = 3;
1132 /* Selected in ssh_login(). */
1133 if (options->cipher == -1)
1134 options->cipher = SSH_CIPHER_NOT_SET;
Damien Miller30c3d422000-05-09 11:02:59 +10001135 /* options->ciphers, default set in myproposals.h */
Ben Lindstrom06b33aa2001-02-15 03:01:59 +00001136 /* options->macs, default set in myproposals.h */
Ben Lindstrom982dbbc2001-04-17 18:11:36 +00001137 /* options->hostkeyalgorithms, default set in myproposals.h */
Damien Miller78928792000-04-12 20:17:38 +10001138 if (options->protocol == SSH_PROTO_UNKNOWN)
Ben Lindstrom6b776432001-03-22 01:24:04 +00001139 options->protocol = SSH_PROTO_1|SSH_PROTO_2;
Damien Miller95def091999-11-25 00:26:21 +11001140 if (options->num_identity_files == 0) {
Damien Miller0bc1bd82000-11-13 22:57:25 +11001141 if (options->protocol & SSH_PROTO_1) {
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +00001142 len = 2 + strlen(_PATH_SSH_CLIENT_IDENTITY) + 1;
Damien Miller0bc1bd82000-11-13 22:57:25 +11001143 options->identity_files[options->num_identity_files] =
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +00001144 xmalloc(len);
1145 snprintf(options->identity_files[options->num_identity_files++],
1146 len, "~/%.100s", _PATH_SSH_CLIENT_IDENTITY);
Damien Miller0bc1bd82000-11-13 22:57:25 +11001147 }
1148 if (options->protocol & SSH_PROTO_2) {
Ben Lindstromb00d4fb2001-03-05 06:03:03 +00001149 len = 2 + strlen(_PATH_SSH_CLIENT_ID_RSA) + 1;
1150 options->identity_files[options->num_identity_files] =
1151 xmalloc(len);
1152 snprintf(options->identity_files[options->num_identity_files++],
1153 len, "~/%.100s", _PATH_SSH_CLIENT_ID_RSA);
1154
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +00001155 len = 2 + strlen(_PATH_SSH_CLIENT_ID_DSA) + 1;
Damien Miller0bc1bd82000-11-13 22:57:25 +11001156 options->identity_files[options->num_identity_files] =
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +00001157 xmalloc(len);
1158 snprintf(options->identity_files[options->num_identity_files++],
1159 len, "~/%.100s", _PATH_SSH_CLIENT_ID_DSA);
Damien Miller0bc1bd82000-11-13 22:57:25 +11001160 }
Damien Millereba71ba2000-04-29 23:57:08 +10001161 }
Damien Miller95def091999-11-25 00:26:21 +11001162 if (options->escape_char == -1)
1163 options->escape_char = '~';
1164 if (options->system_hostfile == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +00001165 options->system_hostfile = _PATH_SSH_SYSTEM_HOSTFILE;
Damien Miller95def091999-11-25 00:26:21 +11001166 if (options->user_hostfile == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +00001167 options->user_hostfile = _PATH_SSH_USER_HOSTFILE;
Damien Millereba71ba2000-04-29 23:57:08 +10001168 if (options->system_hostfile2 == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +00001169 options->system_hostfile2 = _PATH_SSH_SYSTEM_HOSTFILE2;
Damien Millereba71ba2000-04-29 23:57:08 +10001170 if (options->user_hostfile2 == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +00001171 options->user_hostfile2 = _PATH_SSH_USER_HOSTFILE2;
Damien Millerfcd93202002-02-05 12:26:34 +11001172 if (options->log_level == SYSLOG_LEVEL_NOT_SET)
Ben Lindstromdb65e8f2001-01-19 04:26:52 +00001173 options->log_level = SYSLOG_LEVEL_INFO;
Ben Lindstrom2b7a0e92001-09-20 00:57:55 +00001174 if (options->clear_forwardings == 1)
1175 clear_forwardings(options);
Ben Lindstrom3cecc9a2001-10-03 17:39:38 +00001176 if (options->no_host_authentication_for_localhost == - 1)
1177 options->no_host_authentication_for_localhost = 0;
Damien Millerbd394c32004-03-08 23:12:36 +11001178 if (options->identities_only == -1)
1179 options->identities_only = 0;
Ben Lindstromb6df73b2002-11-09 15:52:31 +00001180 if (options->enable_ssh_keysign == -1)
1181 options->enable_ssh_keysign = 0;
Damien Millera5539d22003-04-09 20:50:06 +10001182 if (options->rekey_limit == -1)
1183 options->rekey_limit = 0;
Damien Miller37876e92003-05-15 10:19:46 +10001184 if (options->verify_host_key_dns == -1)
1185 options->verify_host_key_dns = 0;
Damien Miller509b0102003-12-17 16:33:10 +11001186 if (options->server_alive_interval == -1)
1187 options->server_alive_interval = 0;
1188 if (options->server_alive_count_max == -1)
1189 options->server_alive_count_max = 3;
Damien Miller0e220db2004-06-15 10:34:08 +10001190 if (options->control_master == -1)
1191 options->control_master = 0;
Damien Millere1776152005-03-01 21:47:37 +11001192 if (options->hash_known_hosts == -1)
1193 options->hash_known_hosts = 0;
Damien Millerd27b9472005-12-13 19:29:02 +11001194 if (options->tun_open == -1)
Damien Miller7b58e802005-12-13 19:33:19 +11001195 options->tun_open = SSH_TUNMODE_NO;
1196 if (options->tun_local == -1)
1197 options->tun_local = SSH_TUNID_ANY;
1198 if (options->tun_remote == -1)
1199 options->tun_remote = SSH_TUNID_ANY;
Damien Millerd27b9472005-12-13 19:29:02 +11001200 if (options->permit_local_command == -1)
1201 options->permit_local_command = 0;
1202 /* options->local_command should not be set by default */
Damien Miller95def091999-11-25 00:26:21 +11001203 /* options->proxy_command should not be set by default */
1204 /* options->user will be set in the main program if appropriate */
1205 /* options->hostname will be set in the main program if appropriate */
Ben Lindstrom4dccfa52000-12-28 16:40:05 +00001206 /* options->host_key_alias should not be set by default */
Ben Lindstromb9be60a2001-03-11 01:49:19 +00001207 /* options->preferred_authentications will be set in ssh */
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001208}
Damien Millerf91ee4c2005-03-01 21:24:33 +11001209
1210/*
1211 * parse_forward
1212 * parses a string containing a port forwarding specification of the form:
1213 * [listenhost:]listenport:connecthost:connectport
1214 * returns number of arguments parsed or zero on error
1215 */
1216int
1217parse_forward(Forward *fwd, const char *fwdspec)
1218{
1219 int i;
1220 char *p, *cp, *fwdarg[4];
1221
1222 memset(fwd, '\0', sizeof(*fwd));
1223
1224 cp = p = xstrdup(fwdspec);
1225
1226 /* skip leading spaces */
Darren Tucker03b1cdb2007-03-21 20:46:03 +11001227 while (isspace(*cp))
Damien Millerf91ee4c2005-03-01 21:24:33 +11001228 cp++;
1229
1230 for (i = 0; i < 4; ++i)
1231 if ((fwdarg[i] = hpdelim(&cp)) == NULL)
1232 break;
1233
1234 /* Check for trailing garbage in 4-arg case*/
1235 if (cp != NULL)
1236 i = 0; /* failure */
1237
1238 switch (i) {
1239 case 3:
1240 fwd->listen_host = NULL;
1241 fwd->listen_port = a2port(fwdarg[0]);
1242 fwd->connect_host = xstrdup(cleanhostname(fwdarg[1]));
1243 fwd->connect_port = a2port(fwdarg[2]);
1244 break;
1245
1246 case 4:
1247 fwd->listen_host = xstrdup(cleanhostname(fwdarg[0]));
1248 fwd->listen_port = a2port(fwdarg[1]);
1249 fwd->connect_host = xstrdup(cleanhostname(fwdarg[2]));
1250 fwd->connect_port = a2port(fwdarg[3]);
1251 break;
1252 default:
1253 i = 0; /* failure */
1254 }
1255
1256 xfree(p);
1257
1258 if (fwd->listen_port == 0 && fwd->connect_port == 0)
1259 goto fail_free;
1260
1261 if (fwd->connect_host != NULL &&
1262 strlen(fwd->connect_host) >= NI_MAXHOST)
1263 goto fail_free;
1264
1265 return (i);
1266
1267 fail_free:
1268 if (fwd->connect_host != NULL)
1269 xfree(fwd->connect_host);
1270 if (fwd->listen_host != NULL)
1271 xfree(fwd->listen_host);
1272 return (0);
1273}