blob: bb2f2c0e0bcac1d9be985f6a9dee413ce67bc581 [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11003 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11005 * Functions for reading the configuration files.
Damien Miller4af51302000-04-16 11:18:38 +10006 *
Damien Millere4340be2000-09-16 13:29:08 +11007 * As far as I am concerned, the code I have written for this software
8 * can be used freely for any purpose. Any derived versions of this
9 * software must be clearly marked as such, and if the derived work is
10 * incompatible with the protocol description in the RFC file, it must be
11 * called by a name other than "ssh" or "Secure Shell".
Damien Miller95def091999-11-25 00:26:21 +110012 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100013
14#include "includes.h"
Ben Lindstrom6b776432001-03-22 01:24:04 +000015RCSID("$OpenBSD: readconf.c,v 1.69 2001/03/20 19:10:16 markus Exp $");
Damien Millerd4a8b7e1999-10-27 13:42:43 +100016
17#include "ssh.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100018#include "xmalloc.h"
Damien Miller78928792000-04-12 20:17:38 +100019#include "compat.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000020#include "cipher.h"
21#include "pathnames.h"
22#include "log.h"
23#include "readconf.h"
24#include "match.h"
25#include "misc.h"
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000026#include "kex.h"
27#include "mac.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100028
29/* Format of the configuration file:
30
31 # Configuration data is parsed as follows:
32 # 1. command line options
33 # 2. user-specific file
34 # 3. system-wide file
35 # Any configuration value is only changed the first time it is set.
36 # Thus, host-specific definitions should be at the beginning of the
37 # configuration file, and defaults at the end.
38
39 # Host-specific declarations. These may override anything above. A single
40 # host may match multiple declarations; these are processed in the order
41 # that they are given in.
42
43 Host *.ngs.fi ngs.fi
44 FallBackToRsh no
45
46 Host fake.com
47 HostName another.host.name.real.org
48 User blaah
49 Port 34289
50 ForwardX11 no
51 ForwardAgent no
52
53 Host books.com
54 RemoteForward 9999 shadows.cs.hut.fi:9999
55 Cipher 3des
56
57 Host fascist.blob.com
58 Port 23123
59 User tylonen
60 RhostsAuthentication no
61 PasswordAuthentication no
62
63 Host puukko.hut.fi
64 User t35124p
65 ProxyCommand ssh-proxy %h %p
66
67 Host *.fr
68 UseRsh yes
69
70 Host *.su
71 Cipher none
72 PasswordAuthentication no
73
74 # Defaults for various options
75 Host *
76 ForwardAgent no
Damien Miller0bc1bd82000-11-13 22:57:25 +110077 ForwardX11 no
Damien Millerd4a8b7e1999-10-27 13:42:43 +100078 RhostsAuthentication yes
79 PasswordAuthentication yes
80 RSAAuthentication yes
81 RhostsRSAAuthentication yes
82 FallBackToRsh no
83 UseRsh no
84 StrictHostKeyChecking yes
85 KeepAlives no
86 IdentityFile ~/.ssh/identity
87 Port 22
88 EscapeChar ~
89
90*/
91
92/* Keyword tokens. */
93
Damien Miller95def091999-11-25 00:26:21 +110094typedef enum {
95 oBadOption,
96 oForwardAgent, oForwardX11, oGatewayPorts, oRhostsAuthentication,
97 oPasswordAuthentication, oRSAAuthentication, oFallBackToRsh, oUseRsh,
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +000098 oChallengeResponseAuthentication, oXAuthLocation,
Damien Millerd4a8b7e1999-10-27 13:42:43 +100099#ifdef KRB4
Damien Miller95def091999-11-25 00:26:21 +1100100 oKerberosAuthentication,
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000101#endif /* KRB4 */
102#ifdef AFS
Damien Miller95def091999-11-25 00:26:21 +1100103 oKerberosTgtPassing, oAFSTokenPassing,
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000104#endif
Damien Miller95def091999-11-25 00:26:21 +1100105 oIdentityFile, oHostName, oPort, oCipher, oRemoteForward, oLocalForward,
106 oUser, oHost, oEscapeChar, oRhostsRSAAuthentication, oProxyCommand,
107 oGlobalKnownHostsFile, oUserKnownHostsFile, oConnectionAttempts,
108 oBatchMode, oCheckHostIP, oStrictHostKeyChecking, oCompression,
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000109 oCompressionLevel, oKeepAlives, oNumberOfPasswordPrompts,
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000110 oUsePrivilegedPort, oLogLevel, oCiphers, oProtocol, oMacs,
Damien Miller0bc1bd82000-11-13 22:57:25 +1100111 oGlobalKnownHostsFile2, oUserKnownHostsFile2, oPubkeyAuthentication,
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000112 oKbdInteractiveAuthentication, oKbdInteractiveDevices, oHostKeyAlias,
113 oPreferredAuthentications
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000114} OpCodes;
115
116/* Textual representations of the tokens. */
117
Damien Miller95def091999-11-25 00:26:21 +1100118static struct {
119 const char *name;
120 OpCodes opcode;
121} keywords[] = {
122 { "forwardagent", oForwardAgent },
123 { "forwardx11", oForwardX11 },
Damien Millerd3a18572000-06-07 19:55:44 +1000124 { "xauthlocation", oXAuthLocation },
Damien Miller95def091999-11-25 00:26:21 +1100125 { "gatewayports", oGatewayPorts },
126 { "useprivilegedport", oUsePrivilegedPort },
127 { "rhostsauthentication", oRhostsAuthentication },
128 { "passwordauthentication", oPasswordAuthentication },
Damien Miller874d77b2000-10-14 16:23:11 +1100129 { "kbdinteractiveauthentication", oKbdInteractiveAuthentication },
130 { "kbdinteractivedevices", oKbdInteractiveDevices },
Damien Miller95def091999-11-25 00:26:21 +1100131 { "rsaauthentication", oRSAAuthentication },
Damien Miller0bc1bd82000-11-13 22:57:25 +1100132 { "pubkeyauthentication", oPubkeyAuthentication },
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000133 { "dsaauthentication", oPubkeyAuthentication }, /* alias */
134 { "challengeresponseauthentication", oChallengeResponseAuthentication },
135 { "skeyauthentication", oChallengeResponseAuthentication }, /* alias */
136 { "tisauthentication", oChallengeResponseAuthentication }, /* alias */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000137#ifdef KRB4
Damien Miller95def091999-11-25 00:26:21 +1100138 { "kerberosauthentication", oKerberosAuthentication },
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000139#endif /* KRB4 */
140#ifdef AFS
Damien Miller95def091999-11-25 00:26:21 +1100141 { "kerberostgtpassing", oKerberosTgtPassing },
142 { "afstokenpassing", oAFSTokenPassing },
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000143#endif
Damien Miller95def091999-11-25 00:26:21 +1100144 { "fallbacktorsh", oFallBackToRsh },
145 { "usersh", oUseRsh },
146 { "identityfile", oIdentityFile },
Damien Miller0bc1bd82000-11-13 22:57:25 +1100147 { "identityfile2", oIdentityFile }, /* alias */
Damien Miller95def091999-11-25 00:26:21 +1100148 { "hostname", oHostName },
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000149 { "hostkeyalias", oHostKeyAlias },
Damien Miller95def091999-11-25 00:26:21 +1100150 { "proxycommand", oProxyCommand },
151 { "port", oPort },
152 { "cipher", oCipher },
Damien Miller78928792000-04-12 20:17:38 +1000153 { "ciphers", oCiphers },
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000154 { "macs", oMacs },
Damien Miller78928792000-04-12 20:17:38 +1000155 { "protocol", oProtocol },
Damien Miller95def091999-11-25 00:26:21 +1100156 { "remoteforward", oRemoteForward },
157 { "localforward", oLocalForward },
158 { "user", oUser },
159 { "host", oHost },
160 { "escapechar", oEscapeChar },
161 { "rhostsrsaauthentication", oRhostsRSAAuthentication },
162 { "globalknownhostsfile", oGlobalKnownHostsFile },
163 { "userknownhostsfile", oUserKnownHostsFile },
Damien Millereba71ba2000-04-29 23:57:08 +1000164 { "globalknownhostsfile2", oGlobalKnownHostsFile2 },
165 { "userknownhostsfile2", oUserKnownHostsFile2 },
Damien Miller95def091999-11-25 00:26:21 +1100166 { "connectionattempts", oConnectionAttempts },
167 { "batchmode", oBatchMode },
168 { "checkhostip", oCheckHostIP },
169 { "stricthostkeychecking", oStrictHostKeyChecking },
170 { "compression", oCompression },
171 { "compressionlevel", oCompressionLevel },
172 { "keepalive", oKeepAlives },
173 { "numberofpasswordprompts", oNumberOfPasswordPrompts },
Damien Miller95def091999-11-25 00:26:21 +1100174 { "loglevel", oLogLevel },
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000175 { "preferredauthentications", oPreferredAuthentications },
Damien Miller95def091999-11-25 00:26:21 +1100176 { NULL, 0 }
Damien Miller5ce662a1999-11-11 17:57:39 +1100177};
178
Damien Miller5428f641999-11-25 11:54:57 +1100179/*
180 * Adds a local TCP/IP port forward to options. Never returns if there is an
181 * error.
182 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000183
Damien Miller4af51302000-04-16 11:18:38 +1000184void
Damien Milleraae6c611999-12-06 11:47:28 +1100185add_local_forward(Options *options, u_short port, const char *host,
186 u_short host_port)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000187{
Damien Miller95def091999-11-25 00:26:21 +1100188 Forward *fwd;
Damien Millerbac2d8a2000-09-05 16:13:06 +1100189#ifndef HAVE_CYGWIN
Damien Miller95def091999-11-25 00:26:21 +1100190 extern uid_t original_real_uid;
Damien Miller95def091999-11-25 00:26:21 +1100191 if (port < IPPORT_RESERVED && original_real_uid != 0)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000192 fatal("Privileged ports can only be forwarded by root.");
Damien Millerbac2d8a2000-09-05 16:13:06 +1100193#endif
Damien Miller95def091999-11-25 00:26:21 +1100194 if (options->num_local_forwards >= SSH_MAX_FORWARDS_PER_DIRECTION)
195 fatal("Too many local forwards (max %d).", SSH_MAX_FORWARDS_PER_DIRECTION);
196 fwd = &options->local_forwards[options->num_local_forwards++];
197 fwd->port = port;
198 fwd->host = xstrdup(host);
199 fwd->host_port = host_port;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000200}
201
Damien Miller5428f641999-11-25 11:54:57 +1100202/*
203 * Adds a remote TCP/IP port forward to options. Never returns if there is
204 * an error.
205 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000206
Damien Miller4af51302000-04-16 11:18:38 +1000207void
Damien Milleraae6c611999-12-06 11:47:28 +1100208add_remote_forward(Options *options, u_short port, const char *host,
209 u_short host_port)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000210{
Damien Miller95def091999-11-25 00:26:21 +1100211 Forward *fwd;
212 if (options->num_remote_forwards >= SSH_MAX_FORWARDS_PER_DIRECTION)
213 fatal("Too many remote forwards (max %d).",
214 SSH_MAX_FORWARDS_PER_DIRECTION);
215 fwd = &options->remote_forwards[options->num_remote_forwards++];
216 fwd->port = port;
217 fwd->host = xstrdup(host);
218 fwd->host_port = host_port;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000219}
220
Damien Miller5428f641999-11-25 11:54:57 +1100221/*
222 * Returns the number of the token pointed to by cp of length len. Never
223 * returns if the token is not known.
224 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000225
Damien Miller4af51302000-04-16 11:18:38 +1000226static OpCodes
Damien Miller95def091999-11-25 00:26:21 +1100227parse_token(const char *cp, const char *filename, int linenum)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000228{
Ben Lindstrom46c16222000-12-22 01:43:59 +0000229 u_int i;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000230
Damien Miller95def091999-11-25 00:26:21 +1100231 for (i = 0; keywords[i].name; i++)
Damien Miller5428f641999-11-25 11:54:57 +1100232 if (strcasecmp(cp, keywords[i].name) == 0)
Damien Miller95def091999-11-25 00:26:21 +1100233 return keywords[i].opcode;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000234
Damien Miller95def091999-11-25 00:26:21 +1100235 fprintf(stderr, "%s: line %d: Bad configuration option: %s\n",
236 filename, linenum, cp);
237 return oBadOption;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000238}
239
Damien Miller5428f641999-11-25 11:54:57 +1100240/*
241 * Processes a single option line as used in the configuration files. This
242 * only sets those values that have not already been set.
243 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000244
Damien Miller2ccf6611999-11-15 15:25:10 +1100245int
246process_config_line(Options *options, const char *host,
Damien Miller95def091999-11-25 00:26:21 +1100247 char *line, const char *filename, int linenum,
248 int *activep)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000249{
Damien Miller37023962000-07-11 17:31:38 +1000250 char buf[256], *s, *string, **charptr, *endofnumber, *keyword, *arg;
Damien Milleraae6c611999-12-06 11:47:28 +1100251 int opcode, *intptr, value;
252 u_short fwd_port, fwd_host_port;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000253
Damien Millerbe484b52000-07-15 14:14:16 +1000254 s = line;
255 /* Get the keyword. (Each line is supposed to begin with a keyword). */
256 keyword = strdelim(&s);
257 /* Ignore leading whitespace. */
258 if (*keyword == '\0')
259 keyword = strdelim(&s);
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000260 if (keyword == NULL || !*keyword || *keyword == '\n' || *keyword == '#')
Damien Miller95def091999-11-25 00:26:21 +1100261 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000262
Damien Miller37023962000-07-11 17:31:38 +1000263 opcode = parse_token(keyword, filename, linenum);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000264
Damien Miller95def091999-11-25 00:26:21 +1100265 switch (opcode) {
266 case oBadOption:
Damien Miller5428f641999-11-25 11:54:57 +1100267 /* don't panic, but count bad options */
268 return -1;
Damien Miller95def091999-11-25 00:26:21 +1100269 /* NOTREACHED */
270 case oForwardAgent:
271 intptr = &options->forward_agent;
272parse_flag:
Damien Millerbe484b52000-07-15 14:14:16 +1000273 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000274 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100275 fatal("%.200s line %d: Missing yes/no argument.", filename, linenum);
276 value = 0; /* To avoid compiler warning... */
Damien Miller37023962000-07-11 17:31:38 +1000277 if (strcmp(arg, "yes") == 0 || strcmp(arg, "true") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100278 value = 1;
Damien Miller37023962000-07-11 17:31:38 +1000279 else if (strcmp(arg, "no") == 0 || strcmp(arg, "false") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100280 value = 0;
281 else
282 fatal("%.200s line %d: Bad yes/no argument.", filename, linenum);
283 if (*activep && *intptr == -1)
284 *intptr = value;
285 break;
286
287 case oForwardX11:
288 intptr = &options->forward_x11;
289 goto parse_flag;
290
291 case oGatewayPorts:
292 intptr = &options->gateway_ports;
293 goto parse_flag;
294
295 case oUsePrivilegedPort:
296 intptr = &options->use_privileged_port;
297 goto parse_flag;
298
299 case oRhostsAuthentication:
300 intptr = &options->rhosts_authentication;
301 goto parse_flag;
302
303 case oPasswordAuthentication:
304 intptr = &options->password_authentication;
305 goto parse_flag;
306
Damien Miller874d77b2000-10-14 16:23:11 +1100307 case oKbdInteractiveAuthentication:
308 intptr = &options->kbd_interactive_authentication;
309 goto parse_flag;
310
311 case oKbdInteractiveDevices:
312 charptr = &options->kbd_interactive_devices;
313 goto parse_string;
314
Damien Miller0bc1bd82000-11-13 22:57:25 +1100315 case oPubkeyAuthentication:
316 intptr = &options->pubkey_authentication;
Damien Millere247cc42000-05-07 12:03:14 +1000317 goto parse_flag;
318
Damien Miller95def091999-11-25 00:26:21 +1100319 case oRSAAuthentication:
320 intptr = &options->rsa_authentication;
321 goto parse_flag;
322
323 case oRhostsRSAAuthentication:
324 intptr = &options->rhosts_rsa_authentication;
325 goto parse_flag;
326
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000327 case oChallengeResponseAuthentication:
328 intptr = &options->challenge_reponse_authentication;
Damien Miller95def091999-11-25 00:26:21 +1100329 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000330
331#ifdef KRB4
Damien Miller95def091999-11-25 00:26:21 +1100332 case oKerberosAuthentication:
333 intptr = &options->kerberos_authentication;
334 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000335#endif /* KRB4 */
336
337#ifdef AFS
Damien Miller95def091999-11-25 00:26:21 +1100338 case oKerberosTgtPassing:
339 intptr = &options->kerberos_tgt_passing;
340 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000341
Damien Miller95def091999-11-25 00:26:21 +1100342 case oAFSTokenPassing:
343 intptr = &options->afs_token_passing;
344 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000345#endif
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000346
Damien Miller95def091999-11-25 00:26:21 +1100347 case oFallBackToRsh:
348 intptr = &options->fallback_to_rsh;
349 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000350
Damien Miller95def091999-11-25 00:26:21 +1100351 case oUseRsh:
352 intptr = &options->use_rsh;
353 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000354
Damien Miller95def091999-11-25 00:26:21 +1100355 case oBatchMode:
356 intptr = &options->batch_mode;
357 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000358
Damien Miller95def091999-11-25 00:26:21 +1100359 case oCheckHostIP:
360 intptr = &options->check_host_ip;
361 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000362
Damien Miller95def091999-11-25 00:26:21 +1100363 case oStrictHostKeyChecking:
364 intptr = &options->strict_host_key_checking;
Damien Millerbe484b52000-07-15 14:14:16 +1000365 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000366 if (!arg || *arg == '\0')
Ben Lindstrom5ed8acd2001-01-29 08:00:54 +0000367 fatal("%.200s line %d: Missing yes/no/ask argument.",
Damien Miller95def091999-11-25 00:26:21 +1100368 filename, linenum);
369 value = 0; /* To avoid compiler warning... */
Damien Miller37023962000-07-11 17:31:38 +1000370 if (strcmp(arg, "yes") == 0 || strcmp(arg, "true") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100371 value = 1;
Damien Miller37023962000-07-11 17:31:38 +1000372 else if (strcmp(arg, "no") == 0 || strcmp(arg, "false") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100373 value = 0;
Damien Miller37023962000-07-11 17:31:38 +1000374 else if (strcmp(arg, "ask") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100375 value = 2;
376 else
377 fatal("%.200s line %d: Bad yes/no/ask argument.", filename, linenum);
378 if (*activep && *intptr == -1)
379 *intptr = value;
380 break;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000381
Damien Miller95def091999-11-25 00:26:21 +1100382 case oCompression:
383 intptr = &options->compression;
384 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000385
Damien Miller95def091999-11-25 00:26:21 +1100386 case oKeepAlives:
387 intptr = &options->keepalives;
388 goto parse_flag;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000389
Damien Miller95def091999-11-25 00:26:21 +1100390 case oNumberOfPasswordPrompts:
391 intptr = &options->number_of_password_prompts;
392 goto parse_int;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000393
Damien Miller95def091999-11-25 00:26:21 +1100394 case oCompressionLevel:
395 intptr = &options->compression_level;
396 goto parse_int;
397
398 case oIdentityFile:
Damien Millerbe484b52000-07-15 14:14:16 +1000399 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000400 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100401 fatal("%.200s line %d: Missing argument.", filename, linenum);
402 if (*activep) {
Damien Miller0bc1bd82000-11-13 22:57:25 +1100403 intptr = &options->num_identity_files;
Damien Millereba71ba2000-04-29 23:57:08 +1000404 if (*intptr >= SSH_MAX_IDENTITY_FILES)
Damien Miller95def091999-11-25 00:26:21 +1100405 fatal("%.200s line %d: Too many identity files specified (max %d).",
406 filename, linenum, SSH_MAX_IDENTITY_FILES);
Damien Miller0bc1bd82000-11-13 22:57:25 +1100407 charptr = &options->identity_files[*intptr];
Damien Miller37023962000-07-11 17:31:38 +1000408 *charptr = xstrdup(arg);
Damien Millereba71ba2000-04-29 23:57:08 +1000409 *intptr = *intptr + 1;
Damien Miller95def091999-11-25 00:26:21 +1100410 }
411 break;
412
Damien Millerd3a18572000-06-07 19:55:44 +1000413 case oXAuthLocation:
414 charptr=&options->xauth_location;
415 goto parse_string;
416
Damien Miller95def091999-11-25 00:26:21 +1100417 case oUser:
418 charptr = &options->user;
419parse_string:
Damien Millerbe484b52000-07-15 14:14:16 +1000420 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000421 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100422 fatal("%.200s line %d: Missing argument.", filename, linenum);
423 if (*activep && *charptr == NULL)
Damien Miller37023962000-07-11 17:31:38 +1000424 *charptr = xstrdup(arg);
Damien Miller95def091999-11-25 00:26:21 +1100425 break;
426
427 case oGlobalKnownHostsFile:
428 charptr = &options->system_hostfile;
429 goto parse_string;
430
431 case oUserKnownHostsFile:
432 charptr = &options->user_hostfile;
433 goto parse_string;
434
Damien Millereba71ba2000-04-29 23:57:08 +1000435 case oGlobalKnownHostsFile2:
436 charptr = &options->system_hostfile2;
437 goto parse_string;
438
439 case oUserKnownHostsFile2:
440 charptr = &options->user_hostfile2;
441 goto parse_string;
442
Damien Miller95def091999-11-25 00:26:21 +1100443 case oHostName:
444 charptr = &options->hostname;
445 goto parse_string;
446
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000447 case oHostKeyAlias:
448 charptr = &options->host_key_alias;
449 goto parse_string;
450
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000451 case oPreferredAuthentications:
452 charptr = &options->preferred_authentications;
453 goto parse_string;
454
Damien Miller95def091999-11-25 00:26:21 +1100455 case oProxyCommand:
456 charptr = &options->proxy_command;
457 string = xstrdup("");
Damien Millerbe484b52000-07-15 14:14:16 +1000458 while ((arg = strdelim(&s)) != NULL && *arg != '\0') {
Damien Miller37023962000-07-11 17:31:38 +1000459 string = xrealloc(string, strlen(string) + strlen(arg) + 2);
Damien Miller95def091999-11-25 00:26:21 +1100460 strcat(string, " ");
Damien Miller37023962000-07-11 17:31:38 +1000461 strcat(string, arg);
Damien Miller95def091999-11-25 00:26:21 +1100462 }
463 if (*activep && *charptr == NULL)
464 *charptr = string;
465 else
466 xfree(string);
467 return 0;
468
469 case oPort:
470 intptr = &options->port;
471parse_int:
Damien Millerbe484b52000-07-15 14:14:16 +1000472 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000473 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100474 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000475 if (arg[0] < '0' || arg[0] > '9')
Damien Miller95def091999-11-25 00:26:21 +1100476 fatal("%.200s line %d: Bad number.", filename, linenum);
Damien Miller5428f641999-11-25 11:54:57 +1100477
478 /* Octal, decimal, or hex format? */
Damien Miller37023962000-07-11 17:31:38 +1000479 value = strtol(arg, &endofnumber, 0);
480 if (arg == endofnumber)
Damien Miller5428f641999-11-25 11:54:57 +1100481 fatal("%.200s line %d: Bad number.", filename, linenum);
Damien Miller95def091999-11-25 00:26:21 +1100482 if (*activep && *intptr == -1)
483 *intptr = value;
484 break;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000485
Damien Miller95def091999-11-25 00:26:21 +1100486 case oConnectionAttempts:
487 intptr = &options->connection_attempts;
488 goto parse_int;
Damien Miller5ce662a1999-11-11 17:57:39 +1100489
Damien Miller95def091999-11-25 00:26:21 +1100490 case oCipher:
491 intptr = &options->cipher;
Damien Millerbe484b52000-07-15 14:14:16 +1000492 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000493 if (!arg || *arg == '\0')
Damien Millerb1715dc2000-05-30 13:44:51 +1000494 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000495 value = cipher_number(arg);
Damien Miller95def091999-11-25 00:26:21 +1100496 if (value == -1)
497 fatal("%.200s line %d: Bad cipher '%s'.",
Damien Miller37023962000-07-11 17:31:38 +1000498 filename, linenum, arg ? arg : "<NONE>");
Damien Miller95def091999-11-25 00:26:21 +1100499 if (*activep && *intptr == -1)
500 *intptr = value;
501 break;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000502
Damien Miller78928792000-04-12 20:17:38 +1000503 case oCiphers:
Damien Millerbe484b52000-07-15 14:14:16 +1000504 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000505 if (!arg || *arg == '\0')
Damien Millerb1715dc2000-05-30 13:44:51 +1000506 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000507 if (!ciphers_valid(arg))
Damien Miller30c3d422000-05-09 11:02:59 +1000508 fatal("%.200s line %d: Bad SSH2 cipher spec '%s'.",
Damien Miller37023962000-07-11 17:31:38 +1000509 filename, linenum, arg ? arg : "<NONE>");
Damien Miller78928792000-04-12 20:17:38 +1000510 if (*activep && options->ciphers == NULL)
Damien Miller37023962000-07-11 17:31:38 +1000511 options->ciphers = xstrdup(arg);
Damien Miller78928792000-04-12 20:17:38 +1000512 break;
513
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000514 case oMacs:
515 arg = strdelim(&s);
516 if (!arg || *arg == '\0')
517 fatal("%.200s line %d: Missing argument.", filename, linenum);
518 if (!mac_valid(arg))
519 fatal("%.200s line %d: Bad SSH2 Mac spec '%s'.",
520 filename, linenum, arg ? arg : "<NONE>");
521 if (*activep && options->macs == NULL)
522 options->macs = xstrdup(arg);
523 break;
524
Damien Miller78928792000-04-12 20:17:38 +1000525 case oProtocol:
526 intptr = &options->protocol;
Damien Millerbe484b52000-07-15 14:14:16 +1000527 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000528 if (!arg || *arg == '\0')
Damien Millerb1715dc2000-05-30 13:44:51 +1000529 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000530 value = proto_spec(arg);
Damien Miller78928792000-04-12 20:17:38 +1000531 if (value == SSH_PROTO_UNKNOWN)
532 fatal("%.200s line %d: Bad protocol spec '%s'.",
Damien Miller37023962000-07-11 17:31:38 +1000533 filename, linenum, arg ? arg : "<NONE>");
Damien Miller78928792000-04-12 20:17:38 +1000534 if (*activep && *intptr == SSH_PROTO_UNKNOWN)
535 *intptr = value;
536 break;
537
Damien Miller95def091999-11-25 00:26:21 +1100538 case oLogLevel:
539 intptr = (int *) &options->log_level;
Damien Millerbe484b52000-07-15 14:14:16 +1000540 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000541 value = log_level_number(arg);
Damien Miller95def091999-11-25 00:26:21 +1100542 if (value == (LogLevel) - 1)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000543 fatal("%.200s line %d: unsupported log level '%s'",
Damien Miller37023962000-07-11 17:31:38 +1000544 filename, linenum, arg ? arg : "<NONE>");
Damien Miller95def091999-11-25 00:26:21 +1100545 if (*activep && (LogLevel) * intptr == -1)
546 *intptr = (LogLevel) value;
547 break;
548
549 case oRemoteForward:
Damien Millerbe484b52000-07-15 14:14:16 +1000550 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000551 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100552 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000553 if (arg[0] < '0' || arg[0] > '9')
Damien Miller95def091999-11-25 00:26:21 +1100554 fatal("%.200s line %d: Badly formatted port number.",
555 filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000556 fwd_port = atoi(arg);
Damien Millerbe484b52000-07-15 14:14:16 +1000557 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000558 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100559 fatal("%.200s line %d: Missing second argument.",
560 filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000561 if (sscanf(arg, "%255[^:]:%hu", buf, &fwd_host_port) != 2)
Damien Miller95def091999-11-25 00:26:21 +1100562 fatal("%.200s line %d: Badly formatted host:port.",
563 filename, linenum);
564 if (*activep)
565 add_remote_forward(options, fwd_port, buf, fwd_host_port);
566 break;
567
568 case oLocalForward:
Damien Millerbe484b52000-07-15 14:14:16 +1000569 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000570 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100571 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000572 if (arg[0] < '0' || arg[0] > '9')
Damien Miller95def091999-11-25 00:26:21 +1100573 fatal("%.200s line %d: Badly formatted port number.",
574 filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000575 fwd_port = atoi(arg);
Damien Millerbe484b52000-07-15 14:14:16 +1000576 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000577 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100578 fatal("%.200s line %d: Missing second argument.",
579 filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000580 if (sscanf(arg, "%255[^:]:%hu", buf, &fwd_host_port) != 2)
Damien Miller95def091999-11-25 00:26:21 +1100581 fatal("%.200s line %d: Badly formatted host:port.",
582 filename, linenum);
583 if (*activep)
584 add_local_forward(options, fwd_port, buf, fwd_host_port);
585 break;
586
587 case oHost:
588 *activep = 0;
Damien Millerbe484b52000-07-15 14:14:16 +1000589 while ((arg = strdelim(&s)) != NULL && *arg != '\0')
Damien Miller37023962000-07-11 17:31:38 +1000590 if (match_pattern(host, arg)) {
591 debug("Applying options for %.100s", arg);
Damien Miller95def091999-11-25 00:26:21 +1100592 *activep = 1;
593 break;
594 }
Damien Millerbe484b52000-07-15 14:14:16 +1000595 /* Avoid garbage check below, as strdelim is done. */
Damien Miller95def091999-11-25 00:26:21 +1100596 return 0;
597
598 case oEscapeChar:
599 intptr = &options->escape_char;
Damien Millerbe484b52000-07-15 14:14:16 +1000600 arg = strdelim(&s);
Damien Miller37023962000-07-11 17:31:38 +1000601 if (!arg || *arg == '\0')
Damien Miller95def091999-11-25 00:26:21 +1100602 fatal("%.200s line %d: Missing argument.", filename, linenum);
Damien Miller37023962000-07-11 17:31:38 +1000603 if (arg[0] == '^' && arg[2] == 0 &&
Ben Lindstrom46c16222000-12-22 01:43:59 +0000604 (u_char) arg[1] >= 64 && (u_char) arg[1] < 128)
605 value = (u_char) arg[1] & 31;
Damien Miller37023962000-07-11 17:31:38 +1000606 else if (strlen(arg) == 1)
Ben Lindstrom46c16222000-12-22 01:43:59 +0000607 value = (u_char) arg[0];
Damien Miller37023962000-07-11 17:31:38 +1000608 else if (strcmp(arg, "none") == 0)
Damien Miller95def091999-11-25 00:26:21 +1100609 value = -2;
610 else {
611 fatal("%.200s line %d: Bad escape character.",
612 filename, linenum);
613 /* NOTREACHED */
614 value = 0; /* Avoid compiler warning. */
615 }
616 if (*activep && *intptr == -1)
617 *intptr = value;
618 break;
619
620 default:
621 fatal("process_config_line: Unimplemented opcode %d", opcode);
622 }
623
624 /* Check that there is no garbage at end of line. */
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000625 if ((arg = strdelim(&s)) != NULL && *arg != '\0') {
Damien Miller37023962000-07-11 17:31:38 +1000626 fatal("%.200s line %d: garbage at end of line; \"%.200s\".",
627 filename, linenum, arg);
628 }
Damien Miller95def091999-11-25 00:26:21 +1100629 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000630}
631
632
Damien Miller5428f641999-11-25 11:54:57 +1100633/*
634 * Reads the config file and modifies the options accordingly. Options
635 * should already be initialized before this call. This never returns if
636 * there is an error. If the file does not exist, this returns immediately.
637 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000638
Damien Miller4af51302000-04-16 11:18:38 +1000639void
Damien Miller95def091999-11-25 00:26:21 +1100640read_config_file(const char *filename, const char *host, Options *options)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000641{
Damien Miller95def091999-11-25 00:26:21 +1100642 FILE *f;
643 char line[1024];
644 int active, linenum;
645 int bad_options = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000646
Damien Miller95def091999-11-25 00:26:21 +1100647 /* Open the file. */
648 f = fopen(filename, "r");
649 if (!f)
650 return;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000651
Damien Miller95def091999-11-25 00:26:21 +1100652 debug("Reading configuration data %.200s", filename);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000653
Damien Miller5428f641999-11-25 11:54:57 +1100654 /*
655 * Mark that we are now processing the options. This flag is turned
656 * on/off by Host specifications.
657 */
Damien Miller95def091999-11-25 00:26:21 +1100658 active = 1;
659 linenum = 0;
660 while (fgets(line, sizeof(line), f)) {
661 /* Update line number counter. */
662 linenum++;
663 if (process_config_line(options, host, line, filename, linenum, &active) != 0)
664 bad_options++;
665 }
666 fclose(f);
667 if (bad_options > 0)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000668 fatal("%s: terminating, %d bad configuration options",
Damien Miller95def091999-11-25 00:26:21 +1100669 filename, bad_options);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000670}
671
Damien Miller5428f641999-11-25 11:54:57 +1100672/*
673 * Initializes options to special values that indicate that they have not yet
674 * been set. Read_config_file will only set options with this value. Options
675 * are processed in the following order: command line, user config file,
676 * system config file. Last, fill_default_options is called.
677 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000678
Damien Miller4af51302000-04-16 11:18:38 +1000679void
Damien Miller95def091999-11-25 00:26:21 +1100680initialize_options(Options * options)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000681{
Damien Miller95def091999-11-25 00:26:21 +1100682 memset(options, 'X', sizeof(*options));
683 options->forward_agent = -1;
684 options->forward_x11 = -1;
Damien Millerd3a18572000-06-07 19:55:44 +1000685 options->xauth_location = NULL;
Damien Miller95def091999-11-25 00:26:21 +1100686 options->gateway_ports = -1;
687 options->use_privileged_port = -1;
688 options->rhosts_authentication = -1;
689 options->rsa_authentication = -1;
Damien Miller0bc1bd82000-11-13 22:57:25 +1100690 options->pubkey_authentication = -1;
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000691 options->challenge_reponse_authentication = -1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000692#ifdef KRB4
Damien Miller95def091999-11-25 00:26:21 +1100693 options->kerberos_authentication = -1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000694#endif
695#ifdef AFS
Damien Miller95def091999-11-25 00:26:21 +1100696 options->kerberos_tgt_passing = -1;
697 options->afs_token_passing = -1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000698#endif
Damien Miller95def091999-11-25 00:26:21 +1100699 options->password_authentication = -1;
Damien Miller874d77b2000-10-14 16:23:11 +1100700 options->kbd_interactive_authentication = -1;
701 options->kbd_interactive_devices = NULL;
Damien Miller95def091999-11-25 00:26:21 +1100702 options->rhosts_rsa_authentication = -1;
703 options->fallback_to_rsh = -1;
704 options->use_rsh = -1;
705 options->batch_mode = -1;
706 options->check_host_ip = -1;
707 options->strict_host_key_checking = -1;
708 options->compression = -1;
709 options->keepalives = -1;
710 options->compression_level = -1;
711 options->port = -1;
712 options->connection_attempts = -1;
713 options->number_of_password_prompts = -1;
714 options->cipher = -1;
Damien Miller78928792000-04-12 20:17:38 +1000715 options->ciphers = NULL;
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000716 options->macs = NULL;
Damien Miller78928792000-04-12 20:17:38 +1000717 options->protocol = SSH_PROTO_UNKNOWN;
Damien Miller95def091999-11-25 00:26:21 +1100718 options->num_identity_files = 0;
719 options->hostname = NULL;
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000720 options->host_key_alias = NULL;
Damien Miller95def091999-11-25 00:26:21 +1100721 options->proxy_command = NULL;
722 options->user = NULL;
723 options->escape_char = -1;
724 options->system_hostfile = NULL;
725 options->user_hostfile = NULL;
Damien Millereba71ba2000-04-29 23:57:08 +1000726 options->system_hostfile2 = NULL;
727 options->user_hostfile2 = NULL;
Damien Miller95def091999-11-25 00:26:21 +1100728 options->num_local_forwards = 0;
729 options->num_remote_forwards = 0;
730 options->log_level = (LogLevel) - 1;
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000731 options->preferred_authentications = NULL;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000732}
733
Damien Miller5428f641999-11-25 11:54:57 +1100734/*
735 * Called after processing other sources of option data, this fills those
736 * options for which no value has been specified with their default values.
737 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000738
Damien Miller4af51302000-04-16 11:18:38 +1000739void
Damien Miller95def091999-11-25 00:26:21 +1100740fill_default_options(Options * options)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000741{
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +0000742 int len;
743
Damien Miller95def091999-11-25 00:26:21 +1100744 if (options->forward_agent == -1)
Damien Millerb1715dc2000-05-30 13:44:51 +1000745 options->forward_agent = 0;
Damien Miller95def091999-11-25 00:26:21 +1100746 if (options->forward_x11 == -1)
Damien Miller98c7ad62000-03-09 21:27:49 +1100747 options->forward_x11 = 0;
Damien Millerd3a18572000-06-07 19:55:44 +1000748#ifdef XAUTH_PATH
749 if (options->xauth_location == NULL)
750 options->xauth_location = XAUTH_PATH;
751#endif /* XAUTH_PATH */
Damien Miller95def091999-11-25 00:26:21 +1100752 if (options->gateway_ports == -1)
753 options->gateway_ports = 0;
754 if (options->use_privileged_port == -1)
Ben Lindstromcebc8582001-03-08 03:39:10 +0000755 options->use_privileged_port = 0;
Damien Miller95def091999-11-25 00:26:21 +1100756 if (options->rhosts_authentication == -1)
757 options->rhosts_authentication = 1;
758 if (options->rsa_authentication == -1)
759 options->rsa_authentication = 1;
Damien Miller0bc1bd82000-11-13 22:57:25 +1100760 if (options->pubkey_authentication == -1)
761 options->pubkey_authentication = 1;
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000762 if (options->challenge_reponse_authentication == -1)
763 options->challenge_reponse_authentication = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000764#ifdef KRB4
Damien Miller95def091999-11-25 00:26:21 +1100765 if (options->kerberos_authentication == -1)
766 options->kerberos_authentication = 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000767#endif /* KRB4 */
768#ifdef AFS
Damien Miller95def091999-11-25 00:26:21 +1100769 if (options->kerberos_tgt_passing == -1)
770 options->kerberos_tgt_passing = 1;
771 if (options->afs_token_passing == -1)
772 options->afs_token_passing = 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000773#endif /* AFS */
Damien Miller95def091999-11-25 00:26:21 +1100774 if (options->password_authentication == -1)
775 options->password_authentication = 1;
Damien Miller874d77b2000-10-14 16:23:11 +1100776 if (options->kbd_interactive_authentication == -1)
Ben Lindstrom95fb2dd2001-01-23 03:12:10 +0000777 options->kbd_interactive_authentication = 1;
Damien Miller95def091999-11-25 00:26:21 +1100778 if (options->rhosts_rsa_authentication == -1)
779 options->rhosts_rsa_authentication = 1;
780 if (options->fallback_to_rsh == -1)
Damien Miller182ee6e2000-07-12 09:45:27 +1000781 options->fallback_to_rsh = 0;
Damien Miller95def091999-11-25 00:26:21 +1100782 if (options->use_rsh == -1)
783 options->use_rsh = 0;
784 if (options->batch_mode == -1)
785 options->batch_mode = 0;
786 if (options->check_host_ip == -1)
787 options->check_host_ip = 1;
788 if (options->strict_host_key_checking == -1)
789 options->strict_host_key_checking = 2; /* 2 is default */
790 if (options->compression == -1)
791 options->compression = 0;
792 if (options->keepalives == -1)
793 options->keepalives = 1;
794 if (options->compression_level == -1)
795 options->compression_level = 6;
796 if (options->port == -1)
797 options->port = 0; /* Filled in ssh_connect. */
798 if (options->connection_attempts == -1)
799 options->connection_attempts = 4;
800 if (options->number_of_password_prompts == -1)
801 options->number_of_password_prompts = 3;
802 /* Selected in ssh_login(). */
803 if (options->cipher == -1)
804 options->cipher = SSH_CIPHER_NOT_SET;
Damien Miller30c3d422000-05-09 11:02:59 +1000805 /* options->ciphers, default set in myproposals.h */
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000806 /* options->macs, default set in myproposals.h */
Damien Miller78928792000-04-12 20:17:38 +1000807 if (options->protocol == SSH_PROTO_UNKNOWN)
Ben Lindstrom6b776432001-03-22 01:24:04 +0000808 options->protocol = SSH_PROTO_1|SSH_PROTO_2;
Damien Miller95def091999-11-25 00:26:21 +1100809 if (options->num_identity_files == 0) {
Damien Miller0bc1bd82000-11-13 22:57:25 +1100810 if (options->protocol & SSH_PROTO_1) {
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +0000811 len = 2 + strlen(_PATH_SSH_CLIENT_IDENTITY) + 1;
Damien Miller0bc1bd82000-11-13 22:57:25 +1100812 options->identity_files[options->num_identity_files] =
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +0000813 xmalloc(len);
814 snprintf(options->identity_files[options->num_identity_files++],
815 len, "~/%.100s", _PATH_SSH_CLIENT_IDENTITY);
Damien Miller0bc1bd82000-11-13 22:57:25 +1100816 }
817 if (options->protocol & SSH_PROTO_2) {
Ben Lindstromb00d4fb2001-03-05 06:03:03 +0000818 len = 2 + strlen(_PATH_SSH_CLIENT_ID_RSA) + 1;
819 options->identity_files[options->num_identity_files] =
820 xmalloc(len);
821 snprintf(options->identity_files[options->num_identity_files++],
822 len, "~/%.100s", _PATH_SSH_CLIENT_ID_RSA);
823
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +0000824 len = 2 + strlen(_PATH_SSH_CLIENT_ID_DSA) + 1;
Damien Miller0bc1bd82000-11-13 22:57:25 +1100825 options->identity_files[options->num_identity_files] =
Ben Lindstrom4f7a64a2001-02-10 22:50:09 +0000826 xmalloc(len);
827 snprintf(options->identity_files[options->num_identity_files++],
828 len, "~/%.100s", _PATH_SSH_CLIENT_ID_DSA);
Damien Miller0bc1bd82000-11-13 22:57:25 +1100829 }
Damien Millereba71ba2000-04-29 23:57:08 +1000830 }
Damien Miller95def091999-11-25 00:26:21 +1100831 if (options->escape_char == -1)
832 options->escape_char = '~';
833 if (options->system_hostfile == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000834 options->system_hostfile = _PATH_SSH_SYSTEM_HOSTFILE;
Damien Miller95def091999-11-25 00:26:21 +1100835 if (options->user_hostfile == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000836 options->user_hostfile = _PATH_SSH_USER_HOSTFILE;
Damien Millereba71ba2000-04-29 23:57:08 +1000837 if (options->system_hostfile2 == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000838 options->system_hostfile2 = _PATH_SSH_SYSTEM_HOSTFILE2;
Damien Millereba71ba2000-04-29 23:57:08 +1000839 if (options->user_hostfile2 == NULL)
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000840 options->user_hostfile2 = _PATH_SSH_USER_HOSTFILE2;
Damien Miller95def091999-11-25 00:26:21 +1100841 if (options->log_level == (LogLevel) - 1)
Ben Lindstromdb65e8f2001-01-19 04:26:52 +0000842 options->log_level = SYSLOG_LEVEL_INFO;
Damien Miller95def091999-11-25 00:26:21 +1100843 /* options->proxy_command should not be set by default */
844 /* options->user will be set in the main program if appropriate */
845 /* options->hostname will be set in the main program if appropriate */
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000846 /* options->host_key_alias should not be set by default */
Ben Lindstromb9be60a2001-03-11 01:49:19 +0000847 /* options->preferred_authentications will be set in ssh */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000848}