/* * OpenVPN-GUI -- A Windows GUI for OpenVPN. * * Copyright (C) 2004 Mathias Sundman * 2010 Heiko Hund * 2016 Selva Nair * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program (see the file COPYING included with this * distribution); if not, write to the Free Software Foundation, Inc., * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA */ #ifdef HAVE_CONFIG_H #include #endif #include #include "main.h" #include "openvpn-gui-res.h" #include "options.h" #include "localization.h" #include "save_pass.h" #include "misc.h" #include "passphrase.h" typedef enum { match_false, match_file, match_dir } match_t; extern options_t o; static match_t match(const WIN32_FIND_DATA *find, const TCHAR *ext) { size_t ext_len = _tcslen(ext); int i; if (find->dwFileAttributes & FILE_ATTRIBUTE_DIRECTORY) return match_dir; if (ext_len == 0) return match_file; i = _tcslen(find->cFileName) - ext_len - 1; if (i > 0 && find->cFileName[i] == '.' && _tcsicmp(find->cFileName + i + 1, ext) == 0) return match_file; return match_false; } static bool CheckReadAccess (const TCHAR *dir, const TCHAR *file) { TCHAR path[MAX_PATH]; _sntprintf_0 (path, _T("%s\\%s"), dir, file); return CheckFileAccess (path, GENERIC_READ); } static int ConfigAlreadyExists(TCHAR *newconfig) { int i; for (i = 0; i < o.num_configs; ++i) { if (_tcsicmp(o.conn[i].config_file, newconfig) == 0) return true; } return false; } static void AddConfigFileToList(int config, const TCHAR *filename, const TCHAR *config_dir) { connection_t *c = &o.conn[config]; int i; memset(c, 0, sizeof(*c)); _tcsncpy(c->config_file, filename, _countof(c->config_file) - 1); _tcsncpy(c->config_dir, config_dir, _countof(c->config_dir) - 1); _tcsncpy(c->config_name, c->config_file, _countof(c->config_name) - 1); c->config_name[_tcslen(c->config_name) - _tcslen(o.ext_string) - 1] = _T('\0'); _sntprintf_0(c->log_path, _T("%s\\%s.log"), o.log_dir, c->config_name); c->manage.sk = INVALID_SOCKET; c->manage.skaddr.sin_family = AF_INET; c->manage.skaddr.sin_addr.s_addr = inet_addr("127.0.0.1"); c->manage.skaddr.sin_port = htons(25340 + config); #ifndef DISABLE_CHANGE_PASSWORD if (CheckKeyFileWriteAccess (c)) c->flags |= FLAG_ALLOW_CHANGE_PASSPHRASE; #endif /* Check if connection should be autostarted */ for (i = 0; i < o.num_auto_connect; ++i) { if (_tcsicmp(c->config_file, o.auto_connect[i]) == 0 || _tcsicmp(c->config_name, o.auto_connect[i]) == 0) { c->auto_connect = true; break; } } /* check whether passwords are saved */ if (o.disable_save_passwords) { DisableSavePasswords(c); } else { if (IsAuthPassSaved(c->config_name)) c->flags |= FLAG_SAVE_AUTH_PASS; if (IsKeyPassSaved(c->config_name)) c->flags |= FLAG_SAVE_KEY_PASS; } } #define FLAG_WARN_DUPLICATES (0x1) #define FLAG_WARN_MAX_CONFIGS (0x2) #define FLAG_ADD_CONFIG_GROUPS (0x4) /* * Create a new group with the given name as a child of the * specified parent group id and returns the id of the new group. * If FLAG_ADD_CONFIG_GROUPS is not enabled, returns the * parent itself. */ static int NewConfigGroup(const wchar_t *name, int parent, int flags) { if (!(flags & FLAG_ADD_CONFIG_GROUPS)) { return parent; } if (!o.groups || o.num_groups == o.max_groups) { o.max_groups += 10; void *tmp = realloc(o.groups, sizeof(*o.groups)*o.max_groups); if (!tmp) { o.max_groups -= 10; ErrorExit(1, L"Out of memory while grouping configs"); } o.groups = tmp; } config_group_t *cg = &o.groups[o.num_groups]; memset(cg, 0, sizeof(*cg)); _sntprintf_0(cg->name, L"%s", name); cg->id = o.num_groups++; cg->parent = parent; cg->active = false; /* activated later if not empty */ return cg->id; } /* * All groups that link at least one config to the root are * enabled. Dangling entries with no terminal configs will stay * disabled and are not displayed in the menu tree. * Also groups with single configs are squashed if the group * and config names match --- this improves the display. */ static void ActivateConfigGroups(void) { /* the root group is always active */ o.groups[0].active = true; /* children is a counter re-used for activation, menu indexing etc. -- reset before use */ for (int i = 0; i < o.num_groups; i++) o.groups[i].children = 0; /* count children of each group -- this includes groups * and configs which have it as parent */ for (int i = 0; i < o.num_configs; i++) { CONFIG_GROUP(&o.conn[i])->children++; } for (int i = 1; i < o.num_groups; i++) { config_group_t *this = &o.groups[i]; config_group_t *parent = PARENT_GROUP(this); if (parent) /* should be true as i = 0 is omitted */ parent->children++; /* unless activated below the group stays inactive */ this->active = false; } /* Squash single config directories with name matching the config * one depth up. This is done so that automatically imported configs * which are added as a single config per directory are handled * as if its in the parent directory. This encourages the * practice of keeping each config and its dependencies (certs, * script etc.) in a separate directory, without making the menu structure * too deeply nested. */ for (int i = 0; i < o.num_configs; i++) { config_group_t *cg = CONFIG_GROUP(&o.conn[i]); /* if not root and has only this config as child -- squash it */ if (PARENT_GROUP(cg) && cg->children == 1 && !wcscmp(cg->name, o.conn[i].config_name)) { cg->children--; o.conn[i].group = cg->parent; } } /* activate all groups that connect a config to the root */ for (int i = 0; i < o.num_configs; i++) { config_group_t *cg = CONFIG_GROUP(&o.conn[i]); while (cg) { cg->active = true; cg = PARENT_GROUP(cg); } } } /* Scan for configs in config_dir recursing down up to recurse_depth. * Input: config_dir -- root of the directory to scan from * group -- the group into which add the configs to * flags -- enable warnings, use directory based * grouping of configs etc. * Currently configs in a directory are grouped together and group is * the id of the current group in the global group array |o.groups| * This may be recursively called until depth becomes 1 and each time * the group is changed to that of the directory being recursed into. */ static void BuildFileList0(const TCHAR *config_dir, int recurse_depth, int group, int flags) { WIN32_FIND_DATA find_obj; HANDLE find_handle; TCHAR find_string[MAX_PATH]; TCHAR subdir_name[MAX_PATH]; _sntprintf_0(find_string, _T("%s\\*"), config_dir); find_handle = FindFirstFile(find_string, &find_obj); if (find_handle == INVALID_HANDLE_VALUE) return; /* Loop over each config file in config dir */ do { if (!o.conn || o.num_configs == o.max_configs) { o.max_configs += 50; void *tmp = realloc(o.conn, sizeof(*o.conn)*o.max_configs); if (!tmp) { o.max_configs -= 50; FindClose(find_handle); ErrorExit(1, L"Out of memory while scanning configs"); } o.conn = tmp; } match_t match_type = match(&find_obj, o.ext_string); if (match_type == match_file) { if (ConfigAlreadyExists(find_obj.cFileName)) { if (flags & FLAG_WARN_DUPLICATES) ShowLocalizedMsg(IDS_ERR_CONFIG_EXIST, find_obj.cFileName); continue; } if (CheckReadAccess (config_dir, find_obj.cFileName)) { AddConfigFileToList(o.num_configs, find_obj.cFileName, config_dir); o.conn[o.num_configs++].group = group; } } } while (FindNextFile(find_handle, &find_obj)); FindClose(find_handle); /* optionally loop over each subdir */ if (recurse_depth <= 1) return; find_handle = FindFirstFile (find_string, &find_obj); if (find_handle == INVALID_HANDLE_VALUE) return; do { match_t match_type = match(&find_obj, o.ext_string); if (match_type == match_dir) { if (wcscmp(find_obj.cFileName, _T(".")) && wcscmp(find_obj.cFileName, _T(".."))) { /* recurse into subdirectory */ _sntprintf_0(subdir_name, _T("%s\\%s"), config_dir, find_obj.cFileName); int sub_group = NewConfigGroup(find_obj.cFileName, group, flags); BuildFileList0(subdir_name, recurse_depth - 1, sub_group, flags); } } } while (FindNextFile(find_handle, &find_obj)); FindClose(find_handle); } void BuildFileList() { static bool issue_warnings = true; int recurse_depth = 4; /* read config_dir and 3 levels of sub-directories */ int flags = 0; int root = 0; if (o.silent_connection) issue_warnings = false; /* * If no connections are active reset num_configs and rescan * to make a new list. Else we keep all current configs and * rescan to add any new one's found */ if (!o.num_groups || CountConnState(disconnected) == o.num_configs) { o.num_configs = 0; o.num_groups = 0; flags |= FLAG_ADD_CONFIG_GROUPS; root = NewConfigGroup(L"ROOT", -1, flags); /* -1 indicates no parent */ } else root = 0; if (issue_warnings) { flags |= FLAG_WARN_DUPLICATES | FLAG_WARN_MAX_CONFIGS; } BuildFileList0 (o.config_dir, recurse_depth, root, flags); root = NewConfigGroup(L"System Profiles", root, flags); if (_tcscmp (o.global_config_dir, o.config_dir)) BuildFileList0 (o.global_config_dir, recurse_depth, root, flags); if (o.num_configs == 0 && issue_warnings) ShowLocalizedMsg(IDS_NFO_NO_CONFIGS, o.config_dir, o.global_config_dir); /* More than MAX_CONFIGS are ignored in the menu listing */ if (o.num_configs > MAX_CONFIGS) { if (issue_warnings) ShowLocalizedMsg(IDS_ERR_MANY_CONFIGS, o.num_configs); o.num_configs = MAX_CONFIGS; /* menus don't work with more -- ignore the rest */ } /* if adding groups, activate non-empty ones */ if (flags &FLAG_ADD_CONFIG_GROUPS) { ActivateConfigGroups(); } issue_warnings = false; }