src/cache_cf.cc

   1 /*
   2  * $Id$
   3  *
   4  * DEBUG: section 3     Configuration File Parsing
   5  * AUTHOR: Harvest Derived
   6  *
   7  * SQUID Web Proxy Cache          http://www.squid-cache.org/
   8  * ----------------------------------------------------------
   9  *
  10  *  Squid is the result of efforts by numerous individuals from
  11  *  the Internet community; see the CONTRIBUTORS file for full
  12  *  details.   Many organizations have provided support for Squid's
  13  *  development; see the SPONSORS file for full details.  Squid is
  14  *  Copyrighted (C) 2001 by the Regents of the University of
  15  *  California; see the COPYRIGHT file for full details.  Squid
  16  *  incorporates software developed and/or copyrighted by other
  17  *  sources; see the CREDITS file for full details.
  18  *
  19  *  This program is free software; you can redistribute it and/or modify
  20  *  it under the terms of the GNU General Public License as published by
  21  *  the Free Software Foundation; either version 2 of the License, or
  22  *  (at your option) any later version.
  23  *
  24  *  This program is distributed in the hope that it will be useful,
  25  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  26  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  27  *  GNU General Public License for more details.
  28  *
  29  *  You should have received a copy of the GNU General Public License
  30  *  along with this program; if not, write to the Free Software
  31  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
  32  *
  33  */
  34
  35 #include "squid.h"
  36 #include "ProtoPort.h"
  37 #include "HttpRequestMethod.h"
  38 #include "auth/Config.h"
  39 #include "auth/Scheme.h"
  40 #include "CacheManager.h"
  41 #include "Store.h"
  42 #include "SwapDir.h"
  43 #include "ConfigParser.h"
  44 #include "acl/Acl.h"
  45 #include "acl/Gadgets.h"
  46 #include "StoreFileSystem.h"
  47 #include "Parsing.h"
  48 #include "MemBuf.h"
  49 #include "wordlist.h"
  50 #include "ip/IpIntercept.h"
  51
  52 #if HAVE_GLOB_H
  53 #include <glob.h>
  54 #endif
  55
  56 #if SQUID_SNMP
  57 #include "snmp.h"
  58 #endif
  59 #if USE_SQUID_ESI
  60 #include "esi/Parser.h"
  61 #endif
  62
  63 #if USE_ADAPTATION
  64 #include "adaptation/Config.h"
  65
  66 static void parse_adaptation_service_set_type();
  67 static void parse_adaptation_access_type();
  68
  69 #endif
  70
  71 #if ICAP_CLIENT
  72 #include "adaptation/icap/Config.h"
  73
  74 static void parse_icap_service_type(Adaptation::Icap::Config *);
  75 static void dump_icap_service_type(StoreEntry *, const char *, const Adaptation::Icap::Config &);
  76 static void free_icap_service_type(Adaptation::Icap::Config *);
  77 static void parse_icap_class_type();
  78 static void parse_icap_access_type();
  79
  80 #endif
  81
  82 #if USE_ECAP
  83 #include "adaptation/ecap/Config.h"
  84 static void parse_ecap_service_type(Adaptation::Ecap::Config *);
  85 static void dump_ecap_service_type(StoreEntry *, const char *, const Adaptation::Ecap::Config &);
  86 static void free_ecap_service_type(Adaptation::Ecap::Config *);
  87 #endif
  88
  89 CBDATA_TYPE(peer);
  90
  91 static const char *const T_SECOND_STR = "second";
  92 static const char *const T_MINUTE_STR = "minute";
  93 static const char *const T_HOUR_STR = "hour";
  94 static const char *const T_DAY_STR = "day";
  95 static const char *const T_WEEK_STR = "week";
  96 static const char *const T_FORTNIGHT_STR = "fortnight";
  97 static const char *const T_MONTH_STR = "month";
  98 static const char *const T_YEAR_STR = "year";
  99 static const char *const T_DECADE_STR = "decade";
 100
 101 static const char *const B_BYTES_STR = "bytes";
 102 static const char *const B_KBYTES_STR = "KB";
 103 static const char *const B_MBYTES_STR = "MB";
 104 static const char *const B_GBYTES_STR = "GB";
 105
 106 static const char *const list_sep = ", \t\n\r";
 107
 108 static void parse_logformat(logformat ** logformat_definitions);
 109 static void parse_access_log(customlog ** customlog_definitions);
 110 static int check_null_access_log(customlog *customlog_definitions);
 111
 112 static void dump_logformat(StoreEntry * entry, const char *name, logformat * definitions);
 113 static void dump_access_log(StoreEntry * entry, const char *name, customlog * definitions);
 114 static void free_logformat(logformat ** definitions);
 115 static void free_access_log(customlog ** definitions);
 116
 117 static void update_maxobjsize(void);
 118 static void configDoConfigure(void);
 119 static void parse_refreshpattern(refresh_t **);
 120 static int parseTimeUnits(const char *unit);
 121 static void parseTimeLine(time_t * tptr, const char *units);
 122 static void parse_ushort(u_short * var);
 123 static void parse_string(char **);
 124 static void default_all(void);
 125 static void defaults_if_none(void);
 126 static int parse_line(char *);
 127 static void parseBytesLine(size_t * bptr, const char *units);
 128 static size_t parseBytesUnits(const char *unit);
 129 static void free_all(void);
 130 void requirePathnameExists(const char *name, const char *path);
 131 static OBJH dump_config;
 132 #if HTTP_VIOLATIONS
 133 static void dump_http_header_access(StoreEntry * entry, const char *name, header_mangler header[]);
 134 static void parse_http_header_access(header_mangler header[]);
 135 static void free_http_header_access(header_mangler header[]);
 136 static void dump_http_header_replace(StoreEntry * entry, const char *name, header_mangler header[]);
 137 static void parse_http_header_replace(header_mangler * header);
 138 static void free_http_header_replace(header_mangler * header);
 139 #endif
 140 static void parse_denyinfo(acl_deny_info_list ** var);
 141 static void dump_denyinfo(StoreEntry * entry, const char *name, acl_deny_info_list * var);
 142 static void free_denyinfo(acl_deny_info_list ** var);
 143
 144 #if USE_WCCPv2
 145 static void parse_IpAddress_list(IpAddress_list **);
 146 static void dump_IpAddress_list(StoreEntry *, const char *, const IpAddress_list *);
 147 static void free_IpAddress_list(IpAddress_list **);
 148 #if CURRENTLY_UNUSED
 149 static int check_null_IpAddress_list(const IpAddress_list *);
 150 #endif /* CURRENTLY_UNUSED */
 151 #endif /* USE_WCCPv2 */
 152
 153 static void parse_http_port_list(http_port_list **);
 154 static void dump_http_port_list(StoreEntry *, const char *, const http_port_list *);
 155 static void free_http_port_list(http_port_list **);
 156
 157 #if USE_SSL
 158 static void parse_https_port_list(https_port_list **);
 159 static void dump_https_port_list(StoreEntry *, const char *, const https_port_list *);
 160 static void free_https_port_list(https_port_list **);
 161 #if 0
 162 static int check_null_https_port_list(const https_port_list *);
 163 #endif
 164 #endif /* USE_SSL */
 165
 166 static void parse_b_size_t(size_t * var);
 167 static void parse_b_int64_t(int64_t * var);
 168
 169 static int parseOneConfigFile(const char *file_name, unsigned int depth);
 170
 171 /*
 172  * LegacyParser is a parser for legacy code that uses the global
 173  * approach.  This is static so that it is only exposed to cache_cf.
 174  * Other modules needing access to a ConfigParser should have it
 175  * provided to them in their parserFOO methods.
 176  */
 177 static ConfigParser LegacyParser = ConfigParser();
 178
 179 void
 180 self_destruct(void)
 181 {
 182     LegacyParser.destruct();
 183 }
 184
 185 static void
 186 update_maxobjsize(void)
 187 {
 188     int i;
 189     int64_t ms = -1;
 190
 191     for (i = 0; i < Config.cacheSwap.n_configured; i++) {
 192         assert (Config.cacheSwap.swapDirs[i].getRaw());
 193
 194         if (dynamic_cast<SwapDir *>(Config.cacheSwap.swapDirs[i].getRaw())->
 195                 max_objsize > ms)
 196             ms = dynamic_cast<SwapDir *>(Config.cacheSwap.swapDirs[i].getRaw())->max_objsize;
 197     }
 198     store_maxobjsize = ms;
 199 }
 200
 201 static void
 202 SetConfigFilename(char const *file_name, bool is_pipe)
 203 {
 204     cfg_filename = file_name;
 205
 206     char const *token;
 207
 208     if (is_pipe)
 209         cfg_filename = file_name + 1;
 210     else if ((token = strrchr(cfg_filename, '/')))
 211         cfg_filename = token + 1;
 212 }
 213
 214 static const char*
 215 skip_ws(const char* s)
 216 {
 217     while (xisspace(*s))
 218         ++s;
 219
 220     return s;
 221 }
 222
 223 static int
 224 parseManyConfigFiles(char* files, int depth)
 225 {
 226     int error_count = 0;
 227     char* saveptr = NULL;
 228 #if HAVE_GLOB
 229     char *path;
 230     glob_t globbuf;
 231     int i;
 232     memset(&globbuf, 0, sizeof(globbuf));
 233     for (path = strwordtok(files, &saveptr); path; path = strwordtok(NULL, &saveptr)) {
 234         if (glob(path, globbuf.gl_pathc ? GLOB_APPEND : 0, NULL, &globbuf) != 0) {
 235             fatalf("Unable to find configuration file: %s: %s",
 236                    path, xstrerror());
 237         }
 238     }
 239     for (i = 0; i < (int)globbuf.gl_pathc; i++) {
 240         error_count += parseOneConfigFile(globbuf.gl_pathv[i], depth);
 241     }
 242     globfree(&globbuf);
 243 #else
 244     char* file = strwordtok(files, &saveptr);
 245     while (file != NULL) {
 246         error_count += parseOneConfigFile(file, depth);
 247         file = strwordtok(NULL, &saveptr);
 248     }
 249 #endif /* HAVE_GLOB */
 250     return error_count;
 251 }
 252
 253 static int
 254 parseOneConfigFile(const char *file_name, unsigned int depth)
 255 {
 256     FILE *fp = NULL;
 257     const char *orig_cfg_filename = cfg_filename;
 258     const int orig_config_lineno = config_lineno;
 259     char *token = NULL;
 260     char *tmp_line = NULL;
 261     int tmp_line_len = 0;
 262     int err_count = 0;
 263     int is_pipe = 0;
 264
 265     debugs(3, 1, "Processing Configuration File: " << file_name << " (depth " << depth << ")");
 266     if (depth > 16) {
 267         fatalf("WARNING: can't include %s: includes are nested too deeply (>16)!\n", file_name);
 268         return 1;
 269     }
 270
 271     if (file_name[0] == '!' || file_name[0] == '|') {
 272         fp = popen(file_name + 1, "r");
 273         is_pipe = 1;
 274     } else {
 275         fp = fopen(file_name, "r");
 276     }
 277
 278     if (fp == NULL)
 279         fatalf("Unable to open configuration file: %s: %s", file_name, xstrerror());
 280
 281 #ifdef _SQUID_WIN32_
 282
 283     setmode(fileno(fp), O_TEXT);
 284
 285 #endif
 286
 287     SetConfigFilename(file_name, bool(is_pipe));
 288
 289     memset(config_input_line, '\0', BUFSIZ);
 290
 291     config_lineno = 0;
 292
 293     while (fgets(config_input_line, BUFSIZ, fp)) {
 294         config_lineno++;
 295
 296         if ((token = strchr(config_input_line, '\n')))
 297             *token = '\0';
 298
 299         if ((token = strchr(config_input_line, '\r')))
 300             *token = '\0';
 301
 302         if (strncmp(config_input_line, "#line ", 6) == 0) {
 303             static char new_file_name[1024];
 304             static char *file;
 305             static char new_lineno;
 306             token = config_input_line + 6;
 307             new_lineno = strtol(token, &file, 0) - 1;
 308
 309             if (file == token)
 310                 continue;       /* Not a valid #line directive, may be a comment */
 311
 312             while (*file && xisspace((unsigned char) *file))
 313                 file++;
 314
 315             if (*file) {
 316                 if (*file != '"')
 317                     continue;   /* Not a valid #line directive, may be a comment */
 318
 319                 xstrncpy(new_file_name, file + 1, sizeof(new_file_name));
 320
 321                 if ((token = strchr(new_file_name, '"')))
 322                     *token = '\0';
 323
 324                 cfg_filename = new_file_name;
 325             }
 326
 327             config_lineno = new_lineno;
 328         }
 329
 330         if (config_input_line[0] == '#')
 331             continue;
 332
 333         if (config_input_line[0] == '\0')
 334             continue;
 335
 336         const char* append = tmp_line_len ? skip_ws(config_input_line) : config_input_line;
 337
 338         size_t append_len = strlen(append);
 339
 340         tmp_line = (char*)xrealloc(tmp_line, tmp_line_len + append_len + 1);
 341
 342         strcpy(tmp_line + tmp_line_len, append);
 343
 344         tmp_line_len += append_len;
 345
 346         if (tmp_line[tmp_line_len-1] == '\\') {
 347             debugs(3, 5, "parseConfigFile: tmp_line='" << tmp_line << "'");
 348             tmp_line[--tmp_line_len] = '\0';
 349             continue;
 350         }
 351
 352         debugs(3, 5, "Processing: '" << tmp_line << "'");
 353
 354         /* Handle includes here */
 355         if (tmp_line_len >= 9 && strncmp(tmp_line, "include", 7) == 0 && xisspace(tmp_line[7])) {
 356             err_count += parseManyConfigFiles(tmp_line + 8, depth + 1);
 357         } else if (!parse_line(tmp_line)) {
 358             debugs(3, 0, HERE << cfg_filename << ":" << config_lineno << " unrecognized: '" << tmp_line << "'");
 359             err_count++;
 360         }
 361
 362         safe_free(tmp_line);
 363         tmp_line_len = 0;
 364
 365     }
 366
 367     if (is_pipe) {
 368         int ret = pclose(fp);
 369
 370         if (ret != 0)
 371             fatalf("parseConfigFile: '%s' failed with exit code %d\n", file_name, ret);
 372     } else {
 373         fclose(fp);
 374     }
 375
 376     cfg_filename = orig_cfg_filename;
 377     config_lineno = orig_config_lineno;
 378
 379     return err_count;
 380 }
 381
 382 int
 383 parseConfigFile(const char *file_name)
 384 {
 385     int err_count = 0;
 386     CacheManager *manager=CacheManager::GetInstance();
 387
 388     configFreeMemory();
 389
 390     default_all();
 391
 392     err_count = parseOneConfigFile(file_name, 0);
 393
 394     defaults_if_none();
 395
 396     /*
 397      * We must call configDoConfigure() before leave_suid() because
 398      * configDoConfigure() is where we turn username strings into
 399      * uid values.
 400      */
 401     configDoConfigure();
 402
 403     if (!Config.chroot_dir) {
 404         leave_suid();
 405         setUmask(Config.umask);
 406         _db_init(Config.Log.log, Config.debugOptions);
 407         enter_suid();
 408     }
 409
 410     if (opt_send_signal == -1) {
 411         manager->registerAction("config",
 412                                 "Current Squid Configuration",
 413                                 dump_config,
 414                                 1, 1);
 415     }
 416
 417     return err_count;
 418 }
 419
 420
 421 static void
 422 configDoConfigure(void)
 423 {
 424     memset(&Config2, '\0', sizeof(SquidConfig2));
 425     /* init memory as early as possible */
 426     memConfigure();
 427     /* Sanity checks */
 428
 429 #if SIZEOF_OFF_T <= 4
 430     if (Config.Store.maxObjectSize > 0x7FFF0000) {
 431         debugs(3, 0, "WARNING: This Squid binary can not handle files larger than 2GB. Limiting maximum_object_size to just below 2GB");
 432         Config.Store.maxObjectSize = 0x7FFF0000;
 433     }
 434 #endif
 435     if (0 == Store::Root().maxSize())
 436         /* people might want a zero-sized cache on purpose */
 437         (void) 0;
 438     else if (Store::Root().maxSize() < (Config.memMaxSize >> 10))
 439         /* This is bogus. folk with NULL caches will want this */
 440         debugs(3, 0, "WARNING cache_mem is larger than total disk cache space!");
 441
 442     if (Config.Announce.period > 0) {
 443         Config.onoff.announce = 1;
 444     } else if (Config.Announce.period < 1) {
 445         Config.Announce.period = 86400 * 365;   /* one year */
 446         Config.onoff.announce = 0;
 447     }
 448
 449     if (Config.onoff.httpd_suppress_version_string)
 450         visible_appname_string = (char *)appname_string;
 451     else
 452         visible_appname_string = (char const *)APP_FULLNAME;
 453
 454 #if USE_DNSSERVERS
 455
 456     if (Config.dnsChildren < 1)
 457         fatal("No dnsservers allocated");
 458
 459 #endif
 460
 461     if (Config.Program.redirect) {
 462         if (Config.redirectChildren < 1) {
 463             Config.redirectChildren = 0;
 464             wordlistDestroy(&Config.Program.redirect);
 465         }
 466     }
 467
 468     if (Config.appendDomain)
 469         if (*Config.appendDomain != '.')
 470             fatal("append_domain must begin with a '.'");
 471
 472     if (Config.errHtmlText == NULL)
 473         Config.errHtmlText = xstrdup(null_string);
 474
 475     storeConfigure();
 476
 477     snprintf(ThisCache, sizeof(ThisCache), "%s (%s)",
 478              uniqueHostname(),
 479              visible_appname_string);
 480
 481     /*
 482      * the extra space is for loop detection in client_side.c -- we search
 483      * for substrings in the Via header.
 484      */
 485     snprintf(ThisCache2, sizeof(ThisCache), " %s (%s)",
 486              uniqueHostname(),
 487              visible_appname_string);
 488
 489     if (!Config.udpMaxHitObjsz || Config.udpMaxHitObjsz > SQUID_UDP_SO_SNDBUF)
 490         Config.udpMaxHitObjsz = SQUID_UDP_SO_SNDBUF;
 491
 492     if (Config.appendDomain)
 493         Config.appendDomainLen = strlen(Config.appendDomain);
 494     else
 495         Config.appendDomainLen = 0;
 496
 497     safe_free(debug_options)
 498     debug_options = xstrdup(Config.debugOptions);
 499
 500     if (Config.retry.maxtries > 10)
 501         fatal("maximum_single_addr_tries cannot be larger than 10");
 502
 503     if (Config.retry.maxtries < 1) {
 504         debugs(3, 0, "WARNING: resetting 'maximum_single_addr_tries to 1");
 505         Config.retry.maxtries = 1;
 506     }
 507
 508     requirePathnameExists("MIME Config Table", Config.mimeTablePathname);
 509 #if USE_DNSSERVERS
 510
 511     requirePathnameExists("cache_dns_program", Config.Program.dnsserver);
 512 #endif
 513 #if USE_UNLINKD
 514
 515     requirePathnameExists("unlinkd_program", Config.Program.unlinkd);
 516 #endif
 517
 518     if (Config.Program.redirect)
 519         requirePathnameExists("redirect_program", Config.Program.redirect->key);
 520
 521     requirePathnameExists("Icon Directory", Config.icons.directory);
 522
 523     if (Config.errorDirectory)
 524         requirePathnameExists("Error Directory", Config.errorDirectory);
 525
 526 #if HTTP_VIOLATIONS
 527
 528     {
 529         const refresh_t *R;
 530
 531         for (R = Config.Refresh; R; R = R->next) {
 532             if (!R->flags.override_expire)
 533                 continue;
 534
 535             debugs(22, 1, "WARNING: use of 'override-expire' in 'refresh_pattern' violates HTTP");
 536
 537             break;
 538         }
 539
 540         for (R = Config.Refresh; R; R = R->next) {
 541             if (!R->flags.override_lastmod)
 542                 continue;
 543
 544             debugs(22, 1, "WARNING: use of 'override-lastmod' in 'refresh_pattern' violates HTTP");
 545
 546             break;
 547         }
 548
 549         for (R = Config.Refresh; R; R = R->next) {
 550             if (!R->flags.reload_into_ims)
 551                 continue;
 552
 553             debugs(22, 1, "WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP");
 554
 555             break;
 556         }
 557
 558         for (R = Config.Refresh; R; R = R->next) {
 559             if (!R->flags.ignore_reload)
 560                 continue;
 561
 562             debugs(22, 1, "WARNING: use of 'ignore-reload' in 'refresh_pattern' violates HTTP");
 563
 564             break;
 565         }
 566
 567         for (R = Config.Refresh; R; R = R->next) {
 568             if (!R->flags.ignore_no_cache)
 569                 continue;
 570
 571             debugs(22, 1, "WARNING: use of 'ignore-no-cache' in 'refresh_pattern' violates HTTP");
 572
 573             break;
 574         }
 575
 576         for (R = Config.Refresh; R; R = R->next) {
 577             if (!R->flags.ignore_no_store)
 578                 continue;
 579
 580             debugs(22, 1, "WARNING: use of 'ignore-no-store' in 'refresh_pattern' violates HTTP");
 581
 582             break;
 583         }
 584
 585         for (R = Config.Refresh; R; R = R->next) {
 586             if (!R->flags.ignore_private)
 587                 continue;
 588
 589             debugs(22, 1, "WARNING: use of 'ignore-private' in 'refresh_pattern' violates HTTP");
 590
 591             break;
 592         }
 593
 594         for (R = Config.Refresh; R; R = R->next) {
 595             if (!R->flags.ignore_auth)
 596                 continue;
 597
 598             debugs(22, 1, "WARNING: use of 'ignore-auth' in 'refresh_pattern' violates HTTP");
 599
 600             break;
 601         }
 602
 603     }
 604 #endif
 605 #if !HTTP_VIOLATIONS
 606     Config.onoff.via = 1;
 607 #else
 608
 609     if (!Config.onoff.via)
 610         debugs(22, 1, "WARNING: HTTP requires the use of Via");
 611
 612 #endif
 613
 614     if (aclPurgeMethodInUse(Config.accessList.http))
 615         Config2.onoff.enable_purge = 1;
 616
 617     Config2.onoff.mangle_request_headers = httpReqHdrManglersConfigured();
 618
 619     if (geteuid() == 0) {
 620         if (NULL != Config.effectiveUser) {
 621
 622             struct passwd *pwd = getpwnam(Config.effectiveUser);
 623
 624             if (NULL == pwd) {
 625                 /*
 626                  * Andres Kroonmaa <andre@online.ee>:
 627                  * Some getpwnam() implementations (Solaris?) require
 628                  * an available FD < 256 for opening a FILE* to the
 629                  * passwd file.
 630                  * DW:
 631                  * This should be safe at startup, but might still fail
 632                  * during reconfigure.
 633                  */
 634                 fatalf("getpwnam failed to find userid for effective user '%s'",
 635                        Config.effectiveUser);
 636                 return;
 637             }
 638
 639             Config2.effectiveUserID = pwd->pw_uid;
 640
 641             Config2.effectiveGroupID = pwd->pw_gid;
 642
 643 #if HAVE_PUTENV
 644
 645             if (pwd->pw_dir && *pwd->pw_dir) {
 646                 int len;
 647                 char *env_str = (char *)xcalloc((len = strlen(pwd->pw_dir) + 6), 1);
 648                 snprintf(env_str, len, "HOME=%s", pwd->pw_dir);
 649                 putenv(env_str);
 650             }
 651
 652 #endif
 653
 654         }
 655     } else {
 656         Config2.effectiveUserID = geteuid();
 657         Config2.effectiveGroupID = getegid();
 658     }
 659
 660     if (NULL != Config.effectiveGroup) {
 661
 662         struct group *grp = getgrnam(Config.effectiveGroup);
 663
 664         if (NULL == grp) {
 665             fatalf("getgrnam failed to find groupid for effective group '%s'",
 666                    Config.effectiveGroup);
 667             return;
 668         }
 669
 670         Config2.effectiveGroupID = grp->gr_gid;
 671     }
 672
 673     HttpRequestMethod::Configure(Config);
 674 #if USE_SSL
 675
 676     debugs(3, 1, "Initializing https proxy context");
 677
 678     Config.ssl_client.sslContext = sslCreateClientContext(Config.ssl_client.cert, Config.ssl_client.key, Config.ssl_client.version, Config.ssl_client.cipher, Config.ssl_client.options, Config.ssl_client.flags, Config.ssl_client.cafile, Config.ssl_client.capath, Config.ssl_client.crlfile);
 679
 680     {
 681
 682         peer *p;
 683
 684         for (p = Config.peers; p != NULL; p = p->next) {
 685             if (p->use_ssl) {
 686                 debugs(3, 1, "Initializing cache_peer " << p->name << " SSL context");
 687                 p->sslContext = sslCreateClientContext(p->sslcert, p->sslkey, p->sslversion, p->sslcipher, p->ssloptions, p->sslflags, p->sslcafile, p->sslcapath, p->sslcrlfile);
 688             }
 689         }
 690     }
 691
 692     {
 693
 694         http_port_list *s;
 695
 696         for (s = Config.Sockaddr.http; s != NULL; s = (http_port_list *) s->next) {
 697             if (!s->cert && !s->key)
 698                 continue;
 699
 700             debugs(3, 1, "Initializing http_port " << s->http.s << " SSL context");
 701
 702             s->sslContext = sslCreateServerContext(s->cert, s->key, s->version, s->cipher, s->options, s->sslflags, s->clientca, s->cafile, s->capath, s->crlfile, s->dhfile, s->sslcontext);
 703         }
 704     }
 705
 706     {
 707
 708         https_port_list *s;
 709
 710         for (s = Config.Sockaddr.https; s != NULL; s = (https_port_list *) s->http.next) {
 711             debugs(3, 1, "Initializing https_port " << s->http.s << " SSL context");
 712
 713             s->sslContext = sslCreateServerContext(s->cert, s->key, s->version, s->cipher, s->options, s->sslflags, s->clientca, s->cafile, s->capath, s->crlfile, s->dhfile, s->sslcontext);
 714         }
 715     }
 716
 717 #endif
 718 }
 719
 720 /* Parse a time specification from the config file.  Store the
 721  * result in 'tptr', after converting it to 'units' */
 722 static void
 723 parseTimeLine(time_t * tptr, const char *units)
 724 {
 725     char *token;
 726     double d;
 727     time_t m;
 728     time_t u;
 729
 730     if ((u = parseTimeUnits(units)) == 0)
 731         self_destruct();
 732
 733     if ((token = strtok(NULL, w_space)) == NULL)
 734         self_destruct();
 735
 736     d = xatof(token);
 737
 738     m = u;                      /* default to 'units' if none specified */
 739
 740     if (0 == d)
 741         (void) 0;
 742     else if ((token = strtok(NULL, w_space)) == NULL)
 743         debugs(3, 0, "WARNING: No units on '" <<
 744                config_input_line << "', assuming " <<
 745                d << " " << units  );
 746     else if ((m = parseTimeUnits(token)) == 0)
 747         self_destruct();
 748
 749     *tptr = static_cast<time_t> (m * d / u);
 750 }
 751
 752 static int
 753 parseTimeUnits(const char *unit)
 754 {
 755     if (!strncasecmp(unit, T_SECOND_STR, strlen(T_SECOND_STR)))
 756         return 1;
 757
 758     if (!strncasecmp(unit, T_MINUTE_STR, strlen(T_MINUTE_STR)))
 759         return 60;
 760
 761     if (!strncasecmp(unit, T_HOUR_STR, strlen(T_HOUR_STR)))
 762         return 3600;
 763
 764     if (!strncasecmp(unit, T_DAY_STR, strlen(T_DAY_STR)))
 765         return 86400;
 766
 767     if (!strncasecmp(unit, T_WEEK_STR, strlen(T_WEEK_STR)))
 768         return 86400 * 7;
 769
 770     if (!strncasecmp(unit, T_FORTNIGHT_STR, strlen(T_FORTNIGHT_STR)))
 771         return 86400 * 14;
 772
 773     if (!strncasecmp(unit, T_MONTH_STR, strlen(T_MONTH_STR)))
 774         return 86400 * 30;
 775
 776     if (!strncasecmp(unit, T_YEAR_STR, strlen(T_YEAR_STR)))
 777         return static_cast<int>(86400 * 365.2522);
 778
 779     if (!strncasecmp(unit, T_DECADE_STR, strlen(T_DECADE_STR)))
 780         return static_cast<int>(86400 * 365.2522 * 10);
 781
 782     debugs(3, 1, "parseTimeUnits: unknown time unit '" << unit << "'");
 783
 784     return 0;
 785 }
 786
 787 static void
 788 parseBytesLine64(int64_t * bptr, const char *units)
 789 {
 790     char *token;
 791     double d;
 792     int64_t m;
 793     int64_t u;
 794
 795     if ((u = parseBytesUnits(units)) == 0) {
 796         self_destruct();
 797         return;
 798     }
 799
 800     if ((token = strtok(NULL, w_space)) == NULL) {
 801         self_destruct();
 802         return;
 803     }
 804
 805     if (strcmp(token, "none") == 0 || strcmp(token, "-1") == 0) {
 806         *bptr = -1;
 807         return;
 808     }
 809
 810     d = xatof(token);
 811
 812     m = u;                      /* default to 'units' if none specified */
 813
 814     if (0.0 == d)
 815         (void) 0;
 816     else if ((token = strtok(NULL, w_space)) == NULL)
 817         debugs(3, 0, "WARNING: No units on '" <<
 818                config_input_line << "', assuming " <<
 819                d << " " <<  units  );
 820     else if ((m = parseBytesUnits(token)) == 0) {
 821         self_destruct();
 822         return;
 823     }
 824
 825     *bptr = static_cast<int64_t>(m * d / u);
 826
 827     if (static_cast<double>(*bptr) * 2 != m * d / u * 2)
 828         self_destruct();
 829 }
 830
 831
 832 static void
 833 parseBytesLine(size_t * bptr, const char *units)
 834 {
 835     char *token;
 836     double d;
 837     int m;
 838     int u;
 839
 840     if ((u = parseBytesUnits(units)) == 0) {
 841         self_destruct();
 842         return;
 843     }
 844
 845     if ((token = strtok(NULL, w_space)) == NULL) {
 846         self_destruct();
 847         return;
 848     }
 849
 850     if (strcmp(token, "none") == 0 || strcmp(token, "-1") == 0) {
 851         *bptr = static_cast<size_t>(-1);
 852         return;
 853     }
 854
 855     d = xatof(token);
 856
 857     m = u;                      /* default to 'units' if none specified */
 858
 859     if (0.0 == d)
 860         (void) 0;
 861     else if ((token = strtok(NULL, w_space)) == NULL)
 862         debugs(3, 0, "WARNING: No units on '" <<
 863                config_input_line << "', assuming " <<
 864                d << " " <<  units  );
 865     else if ((m = parseBytesUnits(token)) == 0) {
 866         self_destruct();
 867         return;
 868     }
 869
 870     *bptr = static_cast<size_t>(m * d / u);
 871
 872     if (static_cast<double>(*bptr) * 2 != m * d / u * 2)
 873         self_destruct();
 874 }
 875
 876 static size_t
 877 parseBytesUnits(const char *unit)
 878 {
 879     if (!strncasecmp(unit, B_BYTES_STR, strlen(B_BYTES_STR)))
 880         return 1;
 881
 882     if (!strncasecmp(unit, B_KBYTES_STR, strlen(B_KBYTES_STR)))
 883         return 1 << 10;
 884
 885     if (!strncasecmp(unit, B_MBYTES_STR, strlen(B_MBYTES_STR)))
 886         return 1 << 20;
 887
 888     if (!strncasecmp(unit, B_GBYTES_STR, strlen(B_GBYTES_STR)))
 889         return 1 << 30;
 890
 891     debugs(3, DBG_CRITICAL, "WARNING: Unknown bytes unit '" << unit << "'");
 892
 893     return 0;
 894 }
 895
 896 /*****************************************************************************
 897  * Max
 898  *****************************************************************************/
 899
 900 static void
 901 dump_acl(StoreEntry * entry, const char *name, ACL * ae)
 902 {
 903     wordlist *w;
 904     wordlist *v;
 905
 906     while (ae != NULL) {
 907         debugs(3, 3, "dump_acl: " << name << " " << ae->name);
 908         storeAppendPrintf(entry, "%s %s %s ",
 909                           name,
 910                           ae->name,
 911                           ae->typeString());
 912         v = w = ae->dump();
 913
 914         while (v != NULL) {
 915             debugs(3, 3, "dump_acl: " << name << " " << ae->name << " " << v->key);
 916             storeAppendPrintf(entry, "%s ", v->key);
 917             v = v->next;
 918         }
 919
 920         storeAppendPrintf(entry, "\n");
 921         wordlistDestroy(&w);
 922         ae = ae->next;
 923     }
 924 }
 925
 926 static void
 927 parse_acl(ACL ** ae)
 928 {
 929     ACL::ParseAclLine(LegacyParser, ae);
 930 }
 931
 932 static void
 933 free_acl(ACL ** ae)
 934 {
 935     aclDestroyAcls(ae);
 936 }
 937
 938 static void
 939 dump_acl_list(StoreEntry * entry, ACLList * head)
 940 {
 941     ACLList *l;
 942
 943     for (l = head; l; l = l->next) {
 944         storeAppendPrintf(entry, " %s%s",
 945                           l->op ? null_string : "!",
 946                           l->_acl->name);
 947     }
 948 }
 949
 950 void
 951 dump_acl_access(StoreEntry * entry, const char *name, acl_access * head)
 952 {
 953     acl_access *l;
 954
 955     for (l = head; l; l = l->next) {
 956         storeAppendPrintf(entry, "%s %s",
 957                           name,
 958                           l->allow ? "Allow" : "Deny");
 959         dump_acl_list(entry, l->aclList);
 960         storeAppendPrintf(entry, "\n");
 961     }
 962 }
 963
 964 static void
 965 parse_acl_access(acl_access ** head)
 966 {
 967     aclParseAccessLine(LegacyParser, head);
 968 }
 969
 970 static void
 971 free_acl_access(acl_access ** head)
 972 {
 973     aclDestroyAccessList(head);
 974 }
 975
 976 static void
 977 dump_address(StoreEntry * entry, const char *name, IpAddress &addr)
 978 {
 979     char buf[MAX_IPSTRLEN];
 980     storeAppendPrintf(entry, "%s %s\n", name, addr.NtoA(buf,MAX_IPSTRLEN) );
 981 }
 982
 983 static void
 984 parse_address(IpAddress *addr)
 985 {
 986     char *token = strtok(NULL, w_space);
 987
 988     if (!token) {
 989         self_destruct();
 990         return;
 991     }
 992
 993     if (!strcmp(token,"any_addr")) {
 994         addr->SetAnyAddr();
 995         (void) 0;
 996     } else if ( (!strcmp(token,"no_addr")) || (!strcmp(token,"full_mask")) ) {
 997         addr->SetNoAddr();
 998         (void) 0;
 999     } else
1000         *addr = token;
1001 }
1002
1003 static void
1004 free_address(IpAddress *addr)
1005 {
1006     addr->SetEmpty();
1007 }
1008
1009 CBDATA_TYPE(acl_address);
1010
1011 static void
1012 dump_acl_address(StoreEntry * entry, const char *name, acl_address * head)
1013 {
1014     char buf[MAX_IPSTRLEN];
1015     acl_address *l;
1016
1017     for (l = head; l; l = l->next) {
1018         if (!l->addr.IsAnyAddr())
1019             storeAppendPrintf(entry, "%s %s", name, l->addr.NtoA(buf,MAX_IPSTRLEN));
1020         else
1021             storeAppendPrintf(entry, "%s autoselect", name);
1022
1023         dump_acl_list(entry, l->aclList);
1024
1025         storeAppendPrintf(entry, "\n");
1026     }
1027 }
1028
1029 static void
1030 freed_acl_address(void *data)
1031 {
1032     acl_address *l = static_cast<acl_address *>(data);
1033     aclDestroyAclList(&l->aclList);
1034 }
1035
1036 static void
1037 parse_acl_address(acl_address ** head)
1038 {
1039     acl_address *l;
1040     acl_address **tail = head;  /* sane name below */
1041     CBDATA_INIT_TYPE_FREECB(acl_address, freed_acl_address);
1042     l = cbdataAlloc(acl_address);
1043     parse_address(&l->addr);
1044     aclParseAclList(LegacyParser, &l->aclList);
1045
1046     while (*tail)
1047         tail = &(*tail)->next;
1048
1049     *tail = l;
1050 }
1051
1052 static void
1053 free_acl_address(acl_address ** head)
1054 {
1055     while (*head) {
1056         acl_address *l = *head;
1057         *head = l->next;
1058         cbdataFree(l);
1059     }
1060 }
1061
1062 CBDATA_TYPE(acl_tos);
1063
1064 static void
1065 dump_acl_tos(StoreEntry * entry, const char *name, acl_tos * head)
1066 {
1067     acl_tos *l;
1068
1069     for (l = head; l; l = l->next) {
1070         if (l->tos > 0)
1071             storeAppendPrintf(entry, "%s 0x%02X", name, l->tos);
1072         else
1073             storeAppendPrintf(entry, "%s none", name);
1074
1075         dump_acl_list(entry, l->aclList);
1076
1077         storeAppendPrintf(entry, "\n");
1078     }
1079 }
1080
1081 static void
1082 freed_acl_tos(void *data)
1083 {
1084     acl_tos *l = static_cast<acl_tos *>(data);
1085     aclDestroyAclList(&l->aclList);
1086 }
1087
1088 static void
1089 parse_acl_tos(acl_tos ** head)
1090 {
1091     acl_tos *l;
1092     acl_tos **tail = head;      /* sane name below */
1093     int tos;
1094     char junk;
1095     char *token = strtok(NULL, w_space);
1096
1097     if (!token) {
1098         self_destruct();
1099         return;
1100     }
1101
1102     if (sscanf(token, "0x%x%c", &tos, &junk) != 1) {
1103         self_destruct();
1104         return;
1105     }
1106
1107     if (tos < 0 || tos > 255) {
1108         self_destruct();
1109         return;
1110     }
1111
1112     CBDATA_INIT_TYPE_FREECB(acl_tos, freed_acl_tos);
1113
1114     l = cbdataAlloc(acl_tos);
1115
1116     l->tos = tos;
1117
1118     aclParseAclList(LegacyParser, &l->aclList);
1119
1120     while (*tail)
1121         tail = &(*tail)->next;
1122
1123     *tail = l;
1124 }
1125
1126 static void
1127 free_acl_tos(acl_tos ** head)
1128 {
1129     while (*head) {
1130         acl_tos *l = *head;
1131         *head = l->next;
1132         l->next = NULL;
1133         cbdataFree(l);
1134     }
1135 }
1136
1137 CBDATA_TYPE(acl_size_t);
1138
1139 static void
1140 dump_acl_b_size_t(StoreEntry * entry, const char *name, acl_size_t * head)
1141 {
1142     acl_size_t *l;
1143
1144     for (l = head; l; l = l->next) {
1145         if (l->size != -1)
1146             storeAppendPrintf(entry, "%s %d %s\n", name, (int) l->size, B_BYTES_STR);
1147         else
1148             storeAppendPrintf(entry, "%s none", name);
1149
1150         dump_acl_list(entry, l->aclList);
1151
1152         storeAppendPrintf(entry, "\n");
1153     }
1154 }
1155
1156 static void
1157 freed_acl_b_size_t(void *data)
1158 {
1159     acl_size_t *l = static_cast<acl_size_t *>(data);
1160     aclDestroyAclList(&l->aclList);
1161 }
1162
1163 static void
1164 parse_acl_b_size_t(acl_size_t ** head)
1165 {
1166     acl_size_t *l;
1167     acl_size_t **tail = head;   /* sane name below */
1168
1169     CBDATA_INIT_TYPE_FREECB(acl_size_t, freed_acl_b_size_t);
1170
1171     l = cbdataAlloc(acl_size_t);
1172
1173     parse_b_int64_t(&l->size);
1174
1175     aclParseAclList(LegacyParser, &l->aclList);
1176
1177     while (*tail)
1178         tail = &(*tail)->next;
1179
1180     *tail = l;
1181 }
1182
1183 static void
1184 free_acl_b_size_t(acl_size_t ** head)
1185 {
1186     while (*head) {
1187         acl_size_t *l = *head;
1188         *head = l->next;
1189         l->next = NULL;
1190         cbdataFree(l);
1191     }
1192 }
1193
1194 #if DELAY_POOLS
1195
1196 #include "DelayPools.h"
1197 #include "DelayConfig.h"
1198 /* do nothing - free_delay_pool_count is the magic free function.
1199  * this is why delay_pool_count isn't just marked TYPE: ushort
1200  */
1201 #define free_delay_pool_class(X)
1202 #define free_delay_pool_access(X)
1203 #define free_delay_pool_rates(X)
1204 #define dump_delay_pool_class(X, Y, Z)
1205 #define dump_delay_pool_access(X, Y, Z)
1206 #define dump_delay_pool_rates(X, Y, Z)
1207
1208 static void
1209 free_delay_pool_count(DelayConfig * cfg)
1210 {
1211     cfg->freePoolCount();
1212 }
1213
1214 static void
1215 dump_delay_pool_count(StoreEntry * entry, const char *name, DelayConfig &cfg)
1216 {
1217     cfg.dumpPoolCount (entry, name);
1218 }
1219
1220 static void
1221 parse_delay_pool_count(DelayConfig * cfg)
1222 {
1223     cfg->parsePoolCount();
1224 }
1225
1226 static void
1227 parse_delay_pool_class(DelayConfig * cfg)
1228 {
1229     cfg->parsePoolClass();
1230 }
1231
1232 static void
1233 parse_delay_pool_rates(DelayConfig * cfg)
1234 {
1235     cfg->parsePoolRates();
1236 }
1237
1238 static void
1239 parse_delay_pool_access(DelayConfig * cfg)
1240 {
1241     cfg->parsePoolAccess(LegacyParser);
1242 }
1243
1244 #endif
1245
1246 #if HTTP_VIOLATIONS
1247 static void
1248 dump_http_header_access(StoreEntry * entry, const char *name, header_mangler header[])
1249 {
1250     int i;
1251
1252     for (i = 0; i < HDR_ENUM_END; i++) {
1253         if (header[i].access_list != NULL) {
1254             storeAppendPrintf(entry, "%s ", name);
1255             dump_acl_access(entry, httpHeaderNameById(i),
1256                             header[i].access_list);
1257         }
1258     }
1259 }
1260
1261 static void
1262 parse_http_header_access(header_mangler header[])
1263 {
1264     int id, i;
1265     char *t = NULL;
1266
1267     if ((t = strtok(NULL, w_space)) == NULL) {
1268         debugs(3, 0, "" << cfg_filename << " line " << config_lineno << ": " << config_input_line);
1269         debugs(3, 0, "parse_http_header_access: missing header name.");
1270         return;
1271     }
1272
1273     /* Now lookup index of header. */
1274     id = httpHeaderIdByNameDef(t, strlen(t));
1275
1276     if (strcmp(t, "All") == 0)
1277         id = HDR_ENUM_END;
1278     else if (strcmp(t, "Other") == 0)
1279         id = HDR_OTHER;
1280     else if (id == -1) {
1281         debugs(3, 0, "" << cfg_filename << " line " << config_lineno << ": " << config_input_line);
1282         debugs(3, 0, "parse_http_header_access: unknown header name '" << t << "'");
1283         return;
1284     }
1285
1286     if (id != HDR_ENUM_END) {
1287         parse_acl_access(&header[id].access_list);
1288     } else {
1289         char *next_string = t + strlen(t) - 1;
1290         *next_string = 'A';
1291         *(next_string + 1) = ' ';
1292
1293         for (i = 0; i < HDR_ENUM_END; i++) {
1294             char *new_string = xstrdup(next_string);
1295             strtok(new_string, w_space);
1296             parse_acl_access(&header[i].access_list);
1297             safe_free(new_string);
1298         }
1299     }
1300 }
1301
1302 static void
1303 free_http_header_access(header_mangler header[])
1304 {
1305     int i;
1306
1307     for (i = 0; i < HDR_ENUM_END; i++) {
1308         free_acl_access(&header[i].access_list);
1309     }
1310 }
1311
1312 static void
1313 dump_http_header_replace(StoreEntry * entry, const char *name, header_mangler
1314                          header[])
1315 {
1316     int i;
1317
1318     for (i = 0; i < HDR_ENUM_END; i++) {
1319         if (NULL == header[i].replacement)
1320             continue;
1321
1322         storeAppendPrintf(entry, "%s %s %s\n", name, httpHeaderNameById(i),
1323                           header[i].replacement);
1324     }
1325 }
1326
1327 static void
1328 parse_http_header_replace(header_mangler header[])
1329 {
1330     int id, i;
1331     char *t = NULL;
1332
1333     if ((t = strtok(NULL, w_space)) == NULL) {
1334         debugs(3, 0, "" << cfg_filename << " line " << config_lineno << ": " << config_input_line);
1335         debugs(3, 0, "parse_http_header_replace: missing header name.");
1336         return;
1337     }
1338
1339     /* Now lookup index of header. */
1340     id = httpHeaderIdByNameDef(t, strlen(t));
1341
1342     if (strcmp(t, "All") == 0)
1343         id = HDR_ENUM_END;
1344     else if (strcmp(t, "Other") == 0)
1345         id = HDR_OTHER;
1346     else if (id == -1) {
1347         debugs(3, 0, "" << cfg_filename << " line " << config_lineno << ": " << config_input_line);
1348         debugs(3, 0, "parse_http_header_replace: unknown header name " << t << ".");
1349
1350         return;
1351     }
1352
1353     if (id != HDR_ENUM_END) {
1354         if (header[id].replacement != NULL)
1355             safe_free(header[id].replacement);
1356
1357         header[id].replacement = xstrdup(t + strlen(t) + 1);
1358     } else {
1359         for (i = 0; i < HDR_ENUM_END; i++) {
1360             if (header[i].replacement != NULL)
1361                 safe_free(header[i].replacement);
1362
1363             header[i].replacement = xstrdup(t + strlen(t) + 1);
1364         }
1365     }
1366 }
1367
1368 static void
1369 free_http_header_replace(header_mangler header[])
1370 {
1371     int i;
1372
1373     for (i = 0; i < HDR_ENUM_END; i++) {
1374         if (header[i].replacement != NULL)
1375             safe_free(header[i].replacement);
1376     }
1377 }
1378
1379 #endif
1380
1381 static void
1382 dump_cachedir(StoreEntry * entry, const char *name, SquidConfig::_cacheSwap swap)
1383 {
1384     SwapDir *s;
1385     int i;
1386     assert (entry);
1387
1388     for (i = 0; i < swap.n_configured; i++) {
1389         s = dynamic_cast<SwapDir *>(swap.swapDirs[i].getRaw());
1390         if (!s) continue;
1391         storeAppendPrintf(entry, "%s %s %s", name, s->type(), s->path);
1392         s->dump(*entry);
1393         storeAppendPrintf(entry, "\n");
1394     }
1395 }
1396
1397 static int
1398 check_null_string(char *s)
1399 {
1400     return s == NULL;
1401 }
1402
1403 static void
1404 parse_authparam(authConfig * config)
1405 {
1406     char *type_str;
1407     char *param_str;
1408
1409     if ((type_str = strtok(NULL, w_space)) == NULL)
1410         self_destruct();
1411
1412     if ((param_str = strtok(NULL, w_space)) == NULL)
1413         self_destruct();
1414
1415     /* find a configuration for the scheme */
1416     AuthConfig *scheme = AuthConfig::Find (type_str);
1417
1418     if (scheme == NULL) {
1419         /* Create a configuration */
1420         AuthScheme *theScheme;
1421
1422         if ((theScheme = AuthScheme::Find(type_str)) == NULL) {
1423             debugs(3, 0, "Parsing Config File: Unknown authentication scheme '" << type_str << "'.");
1424             return;
1425         }
1426
1427         config->push_back(theScheme->createConfig());
1428         scheme = config->back();
1429         assert (scheme);
1430     }
1431
1432     scheme->parse(scheme, config->size(), param_str);
1433 }
1434
1435 static void
1436 free_authparam(authConfig * cfg)
1437 {
1438     AuthConfig *scheme;
1439     /* DON'T FREE THESE FOR RECONFIGURE */
1440
1441     if (reconfiguring)
1442         return;
1443
1444     while (cfg->size()) {
1445         scheme = cfg->pop_back();
1446         scheme->done();
1447     }
1448 }
1449
1450 static void
1451 dump_authparam(StoreEntry * entry, const char *name, authConfig cfg)
1452 {
1453     for (authConfig::iterator  i = cfg.begin(); i != cfg.end(); ++i)
1454         (*i)->dump(entry, name, (*i));
1455 }
1456
1457 /* TODO: just return the object, the # is irrelevant */
1458 static int
1459 find_fstype(char *type)
1460 {
1461     for (size_t i = 0; i < StoreFileSystem::FileSystems().size(); ++i)
1462         if (strcasecmp(type, StoreFileSystem::FileSystems().items[i]->type()) == 0)
1463             return (int)i;
1464
1465     return (-1);
1466 }
1467
1468 static void
1469 parse_cachedir(SquidConfig::_cacheSwap * swap)
1470 {
1471     char *type_str;
1472     char *path_str;
1473     RefCount<SwapDir> sd;
1474     int i;
1475     int fs;
1476
1477     if ((type_str = strtok(NULL, w_space)) == NULL)
1478         self_destruct();
1479
1480     if ((path_str = strtok(NULL, w_space)) == NULL)
1481         self_destruct();
1482
1483     fs = find_fstype(type_str);
1484
1485     if (fs < 0)
1486         self_destruct();
1487
1488     /* reconfigure existing dir */
1489
1490     for (i = 0; i < swap->n_configured; i++) {
1491         assert (swap->swapDirs[i].getRaw());
1492
1493         if ((strcasecmp(path_str, dynamic_cast<SwapDir *>(swap->swapDirs[i].getRaw())->path)) == 0) {
1494             /* this is specific to on-fs Stores. The right
1495              * way to handle this is probably to have a mapping
1496              * from paths to stores, and have on-fs stores
1497              * register with that, and lookip in that in their
1498              * own setup logic. RBC 20041225. TODO.
1499              */
1500
1501             sd = dynamic_cast<SwapDir *>(swap->swapDirs[i].getRaw());
1502
1503             if (sd->type() != StoreFileSystem::FileSystems().items[fs]->type()) {
1504                 debugs(3, 0, "ERROR: Can't change type of existing cache_dir " <<
1505                        sd->type() << " " << sd->path << " to " << type_str << ". Restart required");
1506                 return;
1507             }
1508
1509             sd->reconfigure (i, path_str);
1510
1511             update_maxobjsize();
1512
1513             return;
1514         }
1515     }
1516
1517     /* new cache_dir */
1518     if (swap->n_configured > 63) {
1519         /* 7 bits, signed */
1520         debugs(3, DBG_CRITICAL, "WARNING: There is a fixed maximum of 63 cache_dir entries Squid can handle.");
1521         debugs(3, DBG_CRITICAL, "WARNING: '" << path_str << "' is one to many.");
1522         self_destruct();
1523         return;
1524     }
1525
1526     allocate_new_swapdir(swap);
1527
1528     swap->swapDirs[swap->n_configured] = StoreFileSystem::FileSystems().items[fs]->createSwapDir();
1529
1530     sd = dynamic_cast<SwapDir *>(swap->swapDirs[swap->n_configured].getRaw());
1531
1532     /* parse the FS parameters and options */
1533     sd->parse(swap->n_configured, path_str);
1534
1535     ++swap->n_configured;
1536
1537     /* Update the max object size */
1538     update_maxobjsize();
1539 }
1540
1541 static const char *
1542 peer_type_str(const peer_t type)
1543 {
1544     const char * result;
1545
1546     switch (type) {
1547
1548     case PEER_PARENT:
1549         result = "parent";
1550         break;
1551
1552     case PEER_SIBLING:
1553         result = "sibling";
1554         break;
1555
1556     case PEER_MULTICAST:
1557         result = "multicast";
1558         break;
1559
1560     default:
1561         result = "unknown";
1562         break;
1563     }
1564
1565     return result;
1566 }
1567
1568 static void
1569 dump_peer(StoreEntry * entry, const char *name, peer * p)
1570 {
1571     domain_ping *d;
1572     domain_type *t;
1573     LOCAL_ARRAY(char, xname, 128);
1574
1575     while (p != NULL) {
1576         storeAppendPrintf(entry, "%s %s %s %d %d",
1577                           name,
1578                           p->host,
1579                           neighborTypeStr(p),
1580                           p->http_port,
1581                           p->icp.port);
1582         dump_peer_options(entry, p);
1583
1584         for (d = p->peer_domain; d; d = d->next) {
1585             storeAppendPrintf(entry, "cache_peer_domain %s %s%s\n",
1586                               p->host,
1587                               d->do_ping ? null_string : "!",
1588                               d->domain);
1589         }
1590
1591         if (p->access) {
1592             snprintf(xname, 128, "cache_peer_access %s", p->name);
1593             dump_acl_access(entry, xname, p->access);
1594         }
1595
1596         for (t = p->typelist; t; t = t->next) {
1597             storeAppendPrintf(entry, "neighbor_type_domain %s %s %s\n",
1598                               p->host,
1599                               peer_type_str(t->type),
1600                               t->domain);
1601         }
1602
1603         p = p->next;
1604     }
1605 }
1606
1607 /**
1608  \param proto   'tcp' or 'udp' for protocol
1609  \returns       Port the named service is supposed to be listening on.
1610  */
1611 static u_short
1612 GetService(const char *proto)
1613 {
1614     struct servent *port = NULL;
1615     /** Parses a port number or service name from the squid.conf */
1616     char *token = strtok(NULL, w_space);
1617     if (token == NULL) {
1618         self_destruct();
1619         return 0; /* NEVER REACHED */
1620     }
1621     /** Returns either the service port number from /etc/services */
1622     port = getservbyname(token, proto);
1623     if (port != NULL) {
1624         return ntohs((u_short)port->s_port);
1625     }
1626     /** Or a numeric translation of the config text. */
1627     return xatos(token);
1628 }
1629
1630 /**
1631  \returns       Port the named TCP service is supposed to be listening on.
1632  \copydoc GetService(const char *proto)
1633  */
1634 inline u_short
1635 GetTcpService(void)
1636 {
1637     return GetService("tcp");
1638 }
1639
1640 /**
1641  \returns       Port the named UDP service is supposed to be listening on.
1642  \copydoc GetService(const char *proto)
1643  */
1644 inline u_short
1645 GetUdpService(void)
1646 {
1647     return GetService("udp");
1648 }
1649
1650 static void
1651 parse_peer(peer ** head)
1652 {
1653     char *token = NULL;
1654     peer *p;
1655     CBDATA_INIT_TYPE_FREECB(peer, peerDestroy);
1656     p = cbdataAlloc(peer);
1657     p->http_port = CACHE_HTTP_PORT;
1658     p->icp.port = CACHE_ICP_PORT;
1659     p->weight = 1;
1660     p->basetime = 0;
1661     p->stats.logged_state = PEER_ALIVE;
1662
1663     if ((token = strtok(NULL, w_space)) == NULL)
1664         self_destruct();
1665
1666     p->host = xstrdup(token);
1667
1668     p->name = xstrdup(token);
1669
1670     if ((token = strtok(NULL, w_space)) == NULL)
1671         self_destruct();
1672
1673     p->type = parseNeighborType(token);
1674
1675     if (p->type == PEER_MULTICAST) {
1676         p->options.no_digest = 1;
1677         p->options.no_netdb_exchange = 1;
1678     }
1679
1680     p->http_port = GetTcpService();
1681
1682     if (!p->http_port)
1683         self_destruct();
1684
1685     p->icp.port = GetUdpService();
1686     p->connection_auth = 2;    /* auto */
1687
1688     while ((token = strtok(NULL, w_space))) {
1689         if (!strcasecmp(token, "proxy-only")) {
1690             p->options.proxy_only = 1;
1691         } else if (!strcasecmp(token, "no-query")) {
1692             p->options.no_query = 1;
1693         } else if (!strcasecmp(token, "background-ping")) {
1694             p->options.background_ping = 1;
1695         } else if (!strcasecmp(token, "no-digest")) {
1696             p->options.no_digest = 1;
1697         } else if (!strcasecmp(token, "multicast-responder")) {
1698             p->options.mcast_responder = 1;
1699         } else if (!strncasecmp(token, "weight=", 7)) {
1700             p->weight = xatoi(token + 7);
1701         } else if (!strncasecmp(token, "basetime=", 9)) {
1702             p->basetime = xatoi(token + 9);
1703         } else if (!strcasecmp(token, "closest-only")) {
1704             p->options.closest_only = 1;
1705         } else if (!strncasecmp(token, "ttl=", 4)) {
1706             p->mcast.ttl = xatoi(token + 4);
1707
1708             if (p->mcast.ttl < 0)
1709                 p->mcast.ttl = 0;
1710
1711             if (p->mcast.ttl > 128)
1712                 p->mcast.ttl = 128;
1713         } else if (!strcasecmp(token, "default")) {
1714             p->options.default_parent = 1;
1715         } else if (!strcasecmp(token, "round-robin")) {
1716             p->options.roundrobin = 1;
1717         } else if (!strcasecmp(token, "weighted-round-robin")) {
1718             p->options.weighted_roundrobin = 1;
1719 #if USE_HTCP
1720
1721         } else if (!strcasecmp(token, "htcp")) {
1722             p->options.htcp = 1;
1723         } else if (!strcasecmp(token, "htcp-oldsquid")) {
1724             p->options.htcp = 1;
1725             p->options.htcp_oldsquid = 1;
1726         } else if (!strcasecmp(token, "htcp-no-clr")) {
1727             if (p->options.htcp_only_clr)
1728                 fatalf("parse_peer: can't set htcp-no-clr and htcp-only-clr simultaneously");
1729             p->options.htcp = 1;
1730             p->options.htcp_no_clr = 1;
1731         } else if (!strcasecmp(token, "htcp-no-purge-clr")) {
1732             p->options.htcp = 1;
1733             p->options.htcp_no_purge_clr = 1;
1734         } else if (!strcasecmp(token, "htcp-only-clr")) {
1735             if (p->options.htcp_no_clr)
1736                 fatalf("parse_peer: can't set htcp-no-clr and htcp-only-clr simultaneously");
1737             p->options.htcp = 1;
1738             p->options.htcp_only_clr = 1;
1739         } else if (!strcasecmp(token, "htcp-forward-clr")) {
1740             p->options.htcp = 1;
1741             p->options.htcp_forward_clr = 1;
1742 #endif
1743
1744         } else if (!strcasecmp(token, "no-netdb-exchange")) {
1745             p->options.no_netdb_exchange = 1;
1746
1747         } else if (!strcasecmp(token, "carp")) {
1748             if (p->type != PEER_PARENT)
1749                 fatalf("parse_peer: non-parent carp peer %s/%d\n", p->host, p->http_port);
1750
1751             p->options.carp = 1;
1752
1753         } else if (!strcasecmp(token, "userhash")) {
1754             if (p->type != PEER_PARENT)
1755                 fatalf("parse_peer: non-parent userhash peer %s/%d\n", p->host, p->http_port);
1756
1757             p->options.userhash = 1;
1758
1759         } else if (!strcasecmp(token, "sourcehash")) {
1760             if (p->type != PEER_PARENT)
1761                 fatalf("parse_peer: non-parent sourcehash peer %s/%d\n", p->host, p->http_port);
1762
1763             p->options.sourcehash = 1;
1764
1765 #if DELAY_POOLS
1766
1767         } else if (!strcasecmp(token, "no-delay")) {
1768             p->options.no_delay = 1;
1769 #endif
1770
1771         } else if (!strncasecmp(token, "login=", 6)) {
1772             p->login = xstrdup(token + 6);
1773             rfc1738_unescape(p->login);
1774         } else if (!strncasecmp(token, "connect-timeout=", 16)) {
1775             p->connect_timeout = xatoi(token + 16);
1776 #if USE_CACHE_DIGESTS
1777
1778         } else if (!strncasecmp(token, "digest-url=", 11)) {
1779             p->digest_url = xstrdup(token + 11);
1780 #endif
1781
1782         } else if (!strcasecmp(token, "allow-miss")) {
1783             p->options.allow_miss = 1;
1784         } else if (!strncasecmp(token, "max-conn=", 9)) {
1785             p->max_conn = xatoi(token + 9);
1786         } else if (!strcasecmp(token, "originserver")) {
1787             p->options.originserver = 1;
1788         } else if (!strncasecmp(token, "name=", 5)) {
1789             safe_free(p->name);
1790
1791             if (token[5])
1792                 p->name = xstrdup(token + 5);
1793         } else if (!strncasecmp(token, "forceddomain=", 13)) {
1794             safe_free(p->domain);
1795
1796             if (token[13])
1797                 p->domain = xstrdup(token + 13);
1798
1799 #if USE_SSL
1800
1801         } else if (strcmp(token, "ssl") == 0) {
1802             p->use_ssl = 1;
1803         } else if (strncmp(token, "sslcert=", 8) == 0) {
1804             safe_free(p->sslcert);
1805             p->sslcert = xstrdup(token + 8);
1806         } else if (strncmp(token, "sslkey=", 7) == 0) {
1807             safe_free(p->sslkey);
1808             p->sslkey = xstrdup(token + 7);
1809         } else if (strncmp(token, "sslversion=", 11) == 0) {
1810             p->sslversion = atoi(token + 11);
1811         } else if (strncmp(token, "ssloptions=", 11) == 0) {
1812             safe_free(p->ssloptions);
1813             p->ssloptions = xstrdup(token + 11);
1814         } else if (strncmp(token, "sslcipher=", 10) == 0) {
1815             safe_free(p->sslcipher);
1816             p->sslcipher = xstrdup(token + 10);
1817         } else if (strncmp(token, "sslcafile=", 10) == 0) {
1818             safe_free(p->sslcafile);
1819             p->sslcafile = xstrdup(token + 10);
1820         } else if (strncmp(token, "sslcapath=", 10) == 0) {
1821             safe_free(p->sslcapath);
1822             p->sslcapath = xstrdup(token + 10);
1823         } else if (strncmp(token, "sslcrlfile=", 11) == 0) {
1824             safe_free(p->sslcrlfile);
1825             p->sslcapath = xstrdup(token + 10);
1826         } else if (strncmp(token, "sslflags=", 9) == 0) {
1827             safe_free(p->sslflags);
1828             p->sslflags = xstrdup(token + 9);
1829         } else if (strncmp(token, "ssldomain=", 10) == 0) {
1830             safe_free(p->ssldomain);
1831             p->ssldomain = xstrdup(token + 10);
1832 #endif
1833
1834         } else if (strcmp(token, "front-end-https") == 0) {
1835             p->front_end_https = 1;
1836         } else if (strcmp(token, "front-end-https=on") == 0) {
1837             p->front_end_https = 1;
1838         } else if (strcmp(token, "front-end-https=auto") == 0) {
1839             p->front_end_https = 2;
1840         } else if (strcmp(token, "connection-auth=off") == 0) {
1841             p->connection_auth = 0;
1842         } else if (strcmp(token, "connection-auth") == 0) {
1843             p->connection_auth = 1;
1844         } else if (strcmp(token, "connection-auth=on") == 0) {
1845             p->connection_auth = 1;
1846         } else if (strcmp(token, "connection-auth=auto") == 0) {
1847             p->connection_auth = 2;
1848         } else {
1849             debugs(3, 0, "parse_peer: token='" << token << "'");
1850             self_destruct();
1851         }
1852     }
1853
1854     if (peerFindByName(p->name))
1855         fatalf("ERROR: cache_peer %s specified twice\n", p->name);
1856
1857     if (p->weight < 1)
1858         p->weight = 1;
1859
1860     p->icp.version = ICP_VERSION_CURRENT;
1861
1862     p->test_fd = -1;
1863
1864 #if USE_CACHE_DIGESTS
1865
1866     if (!p->options.no_digest) {
1867         /* XXX This looks odd.. who has the original pointer
1868          * then?
1869          */
1870         PeerDigest *pd = peerDigestCreate(p);
1871         p->digest = cbdataReference(pd);
1872     }
1873
1874 #endif
1875
1876     p->index =  ++Config.npeers;
1877
1878     while (*head != NULL)
1879         head = &(*head)->next;
1880
1881     *head = p;
1882
1883     peerClearRRStart();
1884 }
1885
1886 static void
1887 free_peer(peer ** P)
1888 {
1889     peer *p;
1890
1891     while ((p = *P) != NULL) {
1892         *P = p->next;
1893 #if USE_CACHE_DIGESTS
1894
1895         cbdataReferenceDone(p->digest);
1896 #endif
1897
1898         cbdataFree(p);
1899     }
1900
1901     Config.npeers = 0;
1902 }
1903
1904 static void
1905 dump_cachemgrpasswd(StoreEntry * entry, const char *name, cachemgr_passwd * list)
1906 {
1907     wordlist *w;
1908
1909     while (list != NULL) {
1910         if (strcmp(list->passwd, "none") && strcmp(list->passwd, "disable"))
1911             storeAppendPrintf(entry, "%s XXXXXXXXXX", name);
1912         else
1913             storeAppendPrintf(entry, "%s %s", name, list->passwd);
1914
1915         for (w = list->actions; w != NULL; w = w->next) {
1916             storeAppendPrintf(entry, " %s", w->key);
1917         }
1918
1919         storeAppendPrintf(entry, "\n");
1920         list = list->next;
1921     }
1922 }
1923
1924 static void
1925 parse_cachemgrpasswd(cachemgr_passwd ** head)
1926 {
1927     char *passwd = NULL;
1928     wordlist *actions = NULL;
1929     cachemgr_passwd *p;
1930     cachemgr_passwd **P;
1931     parse_string(&passwd);
1932     parse_wordlist(&actions);
1933     p = static_cast<cachemgr_passwd *>(xcalloc(1, sizeof(cachemgr_passwd)));
1934     p->passwd = passwd;
1935     p->actions = actions;
1936
1937     for (P = head; *P; P = &(*P)->next) {
1938         /*
1939          * See if any of the actions from this line already have a
1940          * password from previous lines.  The password checking
1941          * routines in cache_manager.c take the the password from
1942          * the first cachemgr_passwd struct that contains the
1943          * requested action.  Thus, we should warn users who might
1944          * think they can have two passwords for the same action.
1945          */
1946         wordlist *w;
1947         wordlist *u;
1948
1949         for (w = (*P)->actions; w; w = w->next) {
1950             for (u = actions; u; u = u->next) {
1951                 if (strcmp(w->key, u->key))
1952                     continue;
1953
1954                 debugs(0, 0, "WARNING: action '" << u->key << "' (line " << config_lineno << ") already has a password");
1955             }
1956         }
1957     }
1958
1959     *P = p;
1960 }
1961
1962 static void
1963 free_cachemgrpasswd(cachemgr_passwd ** head)
1964 {
1965     cachemgr_passwd *p;
1966
1967     while ((p = *head) != NULL) {
1968         *head = p->next;
1969         xfree(p->passwd);
1970         wordlistDestroy(&p->actions);
1971         xfree(p);
1972     }
1973 }
1974
1975 static void
1976 dump_denyinfo(StoreEntry * entry, const char *name, acl_deny_info_list * var)
1977 {
1978     acl_name_list *a;
1979
1980     while (var != NULL) {
1981         storeAppendPrintf(entry, "%s %s", name, var->err_page_name);
1982
1983         for (a = var->acl_list; a != NULL; a = a->next)
1984             storeAppendPrintf(entry, " %s", a->name);
1985
1986         storeAppendPrintf(entry, "\n");
1987
1988         var = var->next;
1989     }
1990 }
1991
1992 static void
1993 parse_denyinfo(acl_deny_info_list ** var)
1994 {
1995     aclParseDenyInfoLine(var);
1996 }
1997
1998 void
1999 free_denyinfo(acl_deny_info_list ** list)
2000 {
2001     acl_deny_info_list *a = NULL;
2002     acl_deny_info_list *a_next = NULL;
2003     acl_name_list *l = NULL;
2004     acl_name_list *l_next = NULL;
2005
2006     for (a = *list; a; a = a_next) {
2007         for (l = a->acl_list; l; l = l_next) {
2008             l_next = l->next;
2009             memFree(l, MEM_ACL_NAME_LIST);
2010             l = NULL;
2011         }
2012
2013         a_next = a->next;
2014         memFree(a, MEM_ACL_DENY_INFO_LIST);
2015         a = NULL;
2016     }
2017
2018     *list = NULL;
2019 }
2020
2021 static void
2022 parse_peer_access(void)
2023 {
2024     char *host = NULL;
2025     peer *p;
2026
2027     if (!(host = strtok(NULL, w_space)))
2028         self_destruct();
2029
2030     if ((p = peerFindByName(host)) == NULL) {
2031         debugs(15, 0, "" << cfg_filename << ", line " << config_lineno << ": No cache_peer '" << host << "'");
2032         return;
2033     }
2034
2035     aclParseAccessLine(LegacyParser, &p->access);
2036 }
2037
2038 static void
2039 parse_hostdomain(void)
2040 {
2041     char *host = NULL;
2042     char *domain = NULL;
2043
2044     if (!(host = strtok(NULL, w_space)))
2045         self_destruct();
2046
2047     while ((domain = strtok(NULL, list_sep))) {
2048         domain_ping *l = NULL;
2049         domain_ping **L = NULL;
2050         peer *p;
2051
2052         if ((p = peerFindByName(host)) == NULL) {
2053             debugs(15, 0, "" << cfg_filename << ", line " << config_lineno << ": No cache_peer '" << host << "'");
2054             continue;
2055         }
2056
2057         l = static_cast<domain_ping *>(xcalloc(1, sizeof(domain_ping)));
2058         l->do_ping = 1;
2059
2060         if (*domain == '!') {   /* check for !.edu */
2061             l->do_ping = 0;
2062             domain++;
2063         }
2064
2065         l->domain = xstrdup(domain);
2066
2067         for (L = &(p->peer_domain); *L; L = &((*L)->next));
2068         *L = l;
2069     }
2070 }
2071
2072 static void
2073 parse_hostdomaintype(void)
2074 {
2075     char *host = NULL;
2076     char *type = NULL;
2077     char *domain = NULL;
2078
2079     if (!(host = strtok(NULL, w_space)))
2080         self_destruct();
2081
2082     if (!(type = strtok(NULL, w_space)))
2083         self_destruct();
2084
2085     while ((domain = strtok(NULL, list_sep))) {
2086         domain_type *l = NULL;
2087         domain_type **L = NULL;
2088         peer *p;
2089
2090         if ((p = peerFindByName(host)) == NULL) {
2091             debugs(15, 0, "" << cfg_filename << ", line " << config_lineno << ": No cache_peer '" << host << "'");
2092             return;
2093         }
2094
2095         l = static_cast<domain_type *>(xcalloc(1, sizeof(domain_type)));
2096         l->type = parseNeighborType(type);
2097         l->domain = xstrdup(domain);
2098
2099         for (L = &(p->typelist); *L; L = &((*L)->next));
2100         *L = l;
2101     }
2102 }
2103
2104 static void
2105 dump_int(StoreEntry * entry, const char *name, int var)
2106 {
2107     storeAppendPrintf(entry, "%s %d\n", name, var);
2108 }
2109
2110 void
2111 parse_int(int *var)
2112 {
2113     int i;
2114     i = GetInteger();
2115     *var = i;
2116 }
2117
2118 static void
2119 free_int(int *var)
2120 {
2121     *var = 0;
2122 }
2123
2124 static void
2125 dump_onoff(StoreEntry * entry, const char *name, int var)
2126 {
2127     storeAppendPrintf(entry, "%s %s\n", name, var ? "on" : "off");
2128 }
2129
2130 void
2131 parse_onoff(int *var)
2132 {
2133     char *token = strtok(NULL, w_space);
2134
2135     if (token == NULL)
2136         self_destruct();
2137
2138     if (!strcasecmp(token, "on") || !strcasecmp(token, "enable"))
2139         *var = 1;
2140     else
2141         *var = 0;
2142 }
2143
2144 #define free_onoff free_int
2145
2146 static void
2147 dump_tristate(StoreEntry * entry, const char *name, int var)
2148 {
2149     const char *state;
2150
2151     if (var > 0)
2152         state = "on";
2153     else if (var < 0)
2154         state = "warn";
2155     else
2156         state = "off";
2157
2158     storeAppendPrintf(entry, "%s %s\n", name, state);
2159 }
2160
2161 static void
2162 parse_tristate(int *var)
2163 {
2164     char *token = strtok(NULL, w_space);
2165
2166     if (token == NULL)
2167         self_destruct();
2168
2169     if (!strcasecmp(token, "on") || !strcasecmp(token, "enable"))
2170         *var = 1;
2171     else if (!strcasecmp(token, "warn"))
2172         *var = -1;
2173     else
2174         *var = 0;
2175 }
2176
2177 #define free_tristate free_int
2178
2179 static void
2180 dump_refreshpattern(StoreEntry * entry, const char *name, refresh_t * head)
2181 {
2182     while (head != NULL) {
2183         storeAppendPrintf(entry, "%s%s %s %d %d%% %d\n",
2184                           name,
2185                           head->flags.icase ? " -i" : null_string,
2186                           head->pattern,
2187                           (int) head->min / 60,
2188                           (int) (100.0 * head->pct + 0.5),
2189                           (int) head->max / 60);
2190
2191         if (head->flags.refresh_ims)
2192             storeAppendPrintf(entry, " refresh-ims");
2193
2194 #if HTTP_VIOLATIONS
2195
2196         if (head->flags.override_expire)
2197             storeAppendPrintf(entry, " override-expire");
2198
2199         if (head->flags.override_lastmod)
2200             storeAppendPrintf(entry, " override-lastmod");
2201
2202         if (head->flags.reload_into_ims)
2203             storeAppendPrintf(entry, " reload-into-ims");
2204
2205         if (head->flags.ignore_reload)
2206             storeAppendPrintf(entry, " ignore-reload");
2207
2208         if (head->flags.ignore_no_cache)
2209             storeAppendPrintf(entry, " ignore-no-cache");
2210
2211         if (head->flags.ignore_no_store)
2212             storeAppendPrintf(entry, " ignore-no-store");
2213
2214         if (head->flags.ignore_private)
2215             storeAppendPrintf(entry, " ignore-private");
2216
2217         if (head->flags.ignore_auth)
2218             storeAppendPrintf(entry, " ignore-auth");
2219
2220 #endif
2221
2222         storeAppendPrintf(entry, "\n");
2223
2224         head = head->next;
2225     }
2226 }
2227
2228 static void
2229 parse_refreshpattern(refresh_t ** head)
2230 {
2231     char *token;
2232     char *pattern;
2233     time_t min = 0;
2234     double pct = 0.0;
2235     time_t max = 0;
2236     int refresh_ims = 0;
2237 #if HTTP_VIOLATIONS
2238
2239     int override_expire = 0;
2240     int override_lastmod = 0;
2241     int reload_into_ims = 0;
2242     int ignore_reload = 0;
2243     int ignore_no_cache = 0;
2244     int ignore_no_store = 0;
2245     int ignore_private = 0;
2246     int ignore_auth = 0;
2247 #endif
2248
2249     int i;
2250     refresh_t *t;
2251     regex_t comp;
2252     int errcode;
2253     int flags = REG_EXTENDED | REG_NOSUB;
2254
2255     if ((token = strtok(NULL, w_space)) == NULL) {
2256         self_destruct();
2257         return;
2258     }
2259
2260     if (strcmp(token, "-i") == 0) {
2261         flags |= REG_ICASE;
2262         token = strtok(NULL, w_space);
2263     } else if (strcmp(token, "+i") == 0) {
2264         flags &= ~REG_ICASE;
2265         token = strtok(NULL, w_space);
2266     }
2267
2268     if (token == NULL) {
2269         self_destruct();
2270         return;
2271     }
2272
2273     pattern = xstrdup(token);
2274
2275     i = GetInteger();           /* token: min */
2276
2277     min = (time_t) (i * 60);    /* convert minutes to seconds */
2278
2279     i = GetInteger();           /* token: pct */
2280
2281     pct = (double) i / 100.0;
2282
2283     i = GetInteger();           /* token: max */
2284
2285     max = (time_t) (i * 60);    /* convert minutes to seconds */
2286
2287     /* Options */
2288     while ((token = strtok(NULL, w_space)) != NULL) {
2289         if (!strcmp(token, "refresh-ims")) {
2290             refresh_ims = 1;
2291 #if HTTP_VIOLATIONS
2292
2293         } else if (!strcmp(token, "override-expire"))
2294             override_expire = 1;
2295         else if (!strcmp(token, "override-lastmod"))
2296             override_lastmod = 1;
2297         else if (!strcmp(token, "ignore-no-cache"))
2298             ignore_no_cache = 1;
2299         else if (!strcmp(token, "ignore-no-store"))
2300             ignore_no_store = 1;
2301         else if (!strcmp(token, "ignore-private"))
2302             ignore_private = 1;
2303         else if (!strcmp(token, "ignore-auth"))
2304             ignore_auth = 1;
2305         else if (!strcmp(token, "reload-into-ims")) {
2306             reload_into_ims = 1;
2307             refresh_nocache_hack = 1;
2308             /* tell client_side.c that this is used */
2309         } else if (!strcmp(token, "ignore-reload")) {
2310             ignore_reload = 1;
2311             refresh_nocache_hack = 1;
2312             /* tell client_side.c that this is used */
2313 #endif
2314
2315         } else
2316             debugs(22, 0, "redreshAddToList: Unknown option '" << pattern << "': " << token);
2317     }
2318
2319     if ((errcode = regcomp(&comp, pattern, flags)) != 0) {
2320         char errbuf[256];
2321         regerror(errcode, &comp, errbuf, sizeof errbuf);
2322         debugs(22, 0, "" << cfg_filename << " line " << config_lineno << ": " << config_input_line);
2323         debugs(22, 0, "refreshAddToList: Invalid regular expression '" << pattern << "': " << errbuf);
2324         return;
2325     }
2326
2327     pct = pct < 0.0 ? 0.0 : pct;
2328     max = max < 0 ? 0 : max;
2329     t = static_cast<refresh_t *>(xcalloc(1, sizeof(refresh_t)));
2330     t->pattern = (char *) xstrdup(pattern);
2331     t->compiled_pattern = comp;
2332     t->min = min;
2333     t->pct = pct;
2334     t->max = max;
2335
2336     if (flags & REG_ICASE)
2337         t->flags.icase = 1;
2338
2339     if (refresh_ims)
2340         t->flags.refresh_ims = 1;
2341
2342 #if HTTP_VIOLATIONS
2343
2344     if (override_expire)
2345         t->flags.override_expire = 1;
2346
2347     if (override_lastmod)
2348         t->flags.override_lastmod = 1;
2349
2350     if (reload_into_ims)
2351         t->flags.reload_into_ims = 1;
2352
2353     if (ignore_reload)
2354         t->flags.ignore_reload = 1;
2355
2356     if (ignore_no_cache)
2357         t->flags.ignore_no_cache = 1;
2358
2359     if (ignore_no_store)
2360         t->flags.ignore_no_store = 1;
2361
2362     if (ignore_private)
2363         t->flags.ignore_private = 1;
2364
2365     if (ignore_auth)
2366         t->flags.ignore_auth = 1;
2367
2368 #endif
2369
2370     t->next = NULL;
2371
2372     while (*head)
2373         head = &(*head)->next;
2374
2375     *head = t;
2376
2377     safe_free(pattern);
2378 }
2379
2380 static void
2381 free_refreshpattern(refresh_t ** head)
2382 {
2383     refresh_t *t;
2384
2385     while ((t = *head) != NULL) {
2386         *head = t->next;
2387         safe_free(t->pattern);
2388         regfree(&t->compiled_pattern);
2389         safe_free(t);
2390     }
2391
2392 #if HTTP_VIOLATIONS
2393     refresh_nocache_hack = 0;
2394
2395 #endif
2396 }
2397
2398 static void
2399 dump_string(StoreEntry * entry, const char *name, char *var)
2400 {
2401     if (var != NULL)
2402         storeAppendPrintf(entry, "%s %s\n", name, var);
2403 }
2404
2405 static void
2406 parse_string(char **var)
2407 {
2408     char *token = strtok(NULL, w_space);
2409     safe_free(*var);
2410
2411     if (token == NULL)
2412         self_destruct();
2413
2414     *var = xstrdup(token);
2415 }
2416
2417 void
2418 ConfigParser::ParseString(char **var)
2419 {
2420     parse_string(var);
2421 }
2422
2423 void
2424 ConfigParser::ParseString(String *var)
2425 {
2426     char *token = strtok(NULL, w_space);
2427
2428     if (token == NULL)
2429         self_destruct();
2430
2431     var->reset(token);
2432 }
2433
2434 static void
2435 free_string(char **var)
2436 {
2437     safe_free(*var);
2438 }
2439
2440 void
2441 parse_eol(char *volatile *var)
2442 {
2443     unsigned char *token = (unsigned char *) strtok(NULL, null_string);
2444     safe_free(*var);
2445
2446     if (!token) {
2447         self_destruct();
2448         return;
2449     }
2450
2451     while (*token && xisspace(*token))
2452         token++;
2453
2454     if (!*token) {
2455         self_destruct();
2456         return;
2457     }
2458
2459     *var = xstrdup((char *) token);
2460 }
2461
2462 #define dump_eol dump_string
2463 #define free_eol free_string
2464
2465 static void
2466 dump_time_t(StoreEntry * entry, const char *name, time_t var)
2467 {
2468     storeAppendPrintf(entry, "%s %d seconds\n", name, (int) var);
2469 }
2470
2471 void
2472 parse_time_t(time_t * var)
2473 {
2474     parseTimeLine(var, T_SECOND_STR);
2475 }
2476
2477 static void
2478 free_time_t(time_t * var)
2479 {
2480     *var = 0;
2481 }
2482
2483 static void
2484 dump_size_t(StoreEntry * entry, const char *name, size_t var)
2485 {
2486     storeAppendPrintf(entry, "%s %d\n", name, (int) var);
2487 }
2488
2489 static void
2490 dump_b_size_t(StoreEntry * entry, const char *name, size_t var)
2491 {
2492     storeAppendPrintf(entry, "%s %d %s\n", name, (int) var, B_BYTES_STR);
2493 }
2494
2495 #if UNUSED_CODE
2496 static void
2497 dump_kb_size_t(StoreEntry * entry, const char *name, size_t var)
2498 {
2499     storeAppendPrintf(entry, "%s %d %s\n", name, (int) var, B_KBYTES_STR);
2500 }
2501 #endif
2502
2503 static void
2504 dump_b_int64_t(StoreEntry * entry, const char *name, int64_t var)
2505 {
2506     storeAppendPrintf(entry, "%s %"PRId64" %s\n", name, var, B_BYTES_STR);
2507 }
2508
2509 static void
2510 dump_kb_int64_t(StoreEntry * entry, const char *name, int64_t var)
2511 {
2512     storeAppendPrintf(entry, "%s %"PRId64" %s\n", name, var, B_KBYTES_STR);
2513 }
2514
2515 static void
2516 parse_size_t(size_t * var)
2517 {
2518     int i;
2519     i = GetInteger();
2520     *var = (size_t) i;
2521 }
2522
2523 static void
2524 parse_b_size_t(size_t * var)
2525 {
2526     parseBytesLine(var, B_BYTES_STR);
2527 }
2528
2529 #if UNUSED_CODE
2530 static void
2531 parse_kb_size_t(size_t * var)
2532 {
2533     parseBytesLine(var, B_KBYTES_STR);
2534 }
2535 #endif
2536
2537 static void
2538 parse_b_int64_t(int64_t * var)
2539 {
2540     parseBytesLine64(var, B_BYTES_STR);
2541 }
2542
2543 static void
2544 parse_kb_int64_t(int64_t * var)
2545 {
2546     parseBytesLine64(var, B_KBYTES_STR);
2547 }
2548
2549 static void
2550 free_size_t(size_t * var)
2551 {
2552     *var = 0;
2553 }
2554
2555 static void
2556 free_b_int64_t(int64_t * var)
2557 {
2558     *var = 0;
2559 }
2560
2561 #define free_b_size_t free_size_t
2562 #define free_kb_size_t free_size_t
2563 #define free_mb_size_t free_size_t
2564 #define free_gb_size_t free_size_t
2565 #define free_kb_int64_t free_b_int64_t
2566
2567 static void
2568 dump_ushort(StoreEntry * entry, const char *name, u_short var)
2569 {
2570     storeAppendPrintf(entry, "%s %d\n", name, var);
2571 }
2572
2573 static void
2574 free_ushort(u_short * u)
2575 {
2576     *u = 0;
2577 }
2578
2579 static void
2580 parse_ushort(u_short * var)
2581 {
2582     ConfigParser::ParseUShort(var);
2583 }
2584
2585 void
2586 ConfigParser::ParseUShort(u_short *var)
2587 {
2588     *var = GetShort();
2589 }
2590
2591 void
2592 ConfigParser::ParseBool(bool *var)
2593 {
2594     int i = GetInteger();
2595
2596     if (0 == i)
2597         *var = false;
2598     else if (1 == i)
2599         *var = true;
2600     else
2601         self_destruct();
2602 }
2603
2604 static void
2605 dump_wordlist(StoreEntry * entry, const char *name, wordlist * list)
2606 {
2607     while (list != NULL) {
2608         storeAppendPrintf(entry, "%s %s\n", name, list->key);
2609         list = list->next;
2610     }
2611 }
2612
2613 void
2614 ConfigParser::ParseWordList(wordlist ** list)
2615 {
2616     parse_wordlist(list);
2617 }
2618
2619 void
2620 parse_wordlist(wordlist ** list)
2621 {
2622     char *token;
2623     char *t = strtok(NULL, "");
2624
2625     while ((token = strwordtok(NULL, &t)))
2626         wordlistAdd(list, token);
2627 }
2628
2629 #if 0 /* now unused */
2630 static int
2631 check_null_wordlist(wordlist * w)
2632 {
2633     return w == NULL;
2634 }
2635 #endif
2636
2637 static int
2638 check_null_acl_access(acl_access * a)
2639 {
2640     return a == NULL;
2641 }
2642
2643 #define free_wordlist wordlistDestroy
2644
2645 #define free_uri_whitespace free_int
2646
2647 static void
2648 parse_uri_whitespace(int *var)
2649 {
2650     char *token = strtok(NULL, w_space);
2651
2652     if (token == NULL)
2653         self_destruct();
2654
2655     if (!strcasecmp(token, "strip"))
2656         *var = URI_WHITESPACE_STRIP;
2657     else if (!strcasecmp(token, "deny"))
2658         *var = URI_WHITESPACE_DENY;
2659     else if (!strcasecmp(token, "allow"))
2660         *var = URI_WHITESPACE_ALLOW;
2661     else if (!strcasecmp(token, "encode"))
2662         *var = URI_WHITESPACE_ENCODE;
2663     else if (!strcasecmp(token, "chop"))
2664         *var = URI_WHITESPACE_CHOP;
2665     else
2666         self_destruct();
2667 }
2668
2669 static void
2670 dump_uri_whitespace(StoreEntry * entry, const char *name, int var)
2671 {
2672     const char *s;
2673
2674     if (var == URI_WHITESPACE_ALLOW)
2675         s = "allow";
2676     else if (var == URI_WHITESPACE_ENCODE)
2677         s = "encode";
2678     else if (var == URI_WHITESPACE_CHOP)
2679         s = "chop";
2680     else if (var == URI_WHITESPACE_DENY)
2681         s = "deny";
2682     else
2683         s = "strip";
2684
2685     storeAppendPrintf(entry, "%s %s\n", name, s);
2686 }
2687
2688 static void
2689 free_removalpolicy(RemovalPolicySettings ** settings)
2690 {
2691     if (!*settings)
2692         return;
2693
2694     free_string(&(*settings)->type);
2695
2696     free_wordlist(&(*settings)->args);
2697
2698     delete *settings;
2699
2700     *settings = NULL;
2701 }
2702
2703 static void
2704 parse_removalpolicy(RemovalPolicySettings ** settings)
2705 {
2706     if (*settings)
2707         free_removalpolicy(settings);
2708
2709     *settings = new RemovalPolicySettings;
2710
2711     parse_string(&(*settings)->type);
2712
2713     parse_wordlist(&(*settings)->args);
2714 }
2715
2716 static void
2717 dump_removalpolicy(StoreEntry * entry, const char *name, RemovalPolicySettings * settings)
2718 {
2719     wordlist *args;
2720     storeAppendPrintf(entry, "%s %s", name, settings->type);
2721     args = settings->args;
2722
2723     while (args) {
2724         storeAppendPrintf(entry, " %s", args->key);
2725         args = args->next;
2726     }
2727
2728     storeAppendPrintf(entry, "\n");
2729 }
2730
2731 #include "cf_parser.h"
2732
2733 peer_t
2734 parseNeighborType(const char *s)
2735 {
2736     if (!strcasecmp(s, "parent"))
2737         return PEER_PARENT;
2738
2739     if (!strcasecmp(s, "neighbor"))
2740         return PEER_SIBLING;
2741
2742     if (!strcasecmp(s, "neighbour"))
2743         return PEER_SIBLING;
2744
2745     if (!strcasecmp(s, "sibling"))
2746         return PEER_SIBLING;
2747
2748     if (!strcasecmp(s, "multicast"))
2749         return PEER_MULTICAST;
2750
2751     debugs(15, 0, "WARNING: Unknown neighbor type: " << s);
2752
2753     return PEER_SIBLING;
2754 }
2755
2756 #if USE_WCCPv2
2757 void
2758 parse_IpAddress_list_token(IpAddress_list ** head, char *token)
2759 {
2760     char *t;
2761     char *host;
2762     char *tmp;
2763
2764     IpAddress ipa;
2765     unsigned short port;
2766     IpAddress_list *s;
2767
2768     host = NULL;
2769     port = 0;
2770
2771 #if USE_IPV6
2772     if (*token == '[') {
2773         /* [host]:port */
2774         host = token + 1;
2775         t = strchr(host, ']');
2776         if (!t)
2777             self_destruct();
2778         *t++ = '\0';
2779         if (*t != ':')
2780             self_destruct();
2781         port = xatos(t + 1);
2782     } else
2783 #endif
2784         if ((t = strchr(token, ':'))) {
2785             /* host:port */
2786             host = token;
2787             *t = '\0';
2788             port = xatos(t + 1);
2789
2790             if (0 == port)
2791                 self_destruct();
2792         } else if ((port = strtol(token, &tmp, 10)), !*tmp) {
2793             /* port */
2794         } else {
2795             host = token;
2796             port = 0;
2797         }
2798
2799     if (NULL == host)
2800         ipa.SetAnyAddr();
2801     else if ( ipa.GetHostByName(host) ) /* dont use ipcache. Accept either FQDN or IPA. */
2802         (void) 0;
2803     else
2804         self_destruct();
2805
2806     /* port MUST be set after the IPA lookup/conversion is perofrmed. */
2807     ipa.SetPort(port);
2808
2809     while (*head)
2810         head = &(*head)->next;
2811
2812     s = static_cast<IpAddress_list *>(xcalloc(1, sizeof(*s)));
2813     s->s = ipa;
2814
2815     *head = s;
2816 }
2817
2818 static void
2819 parse_IpAddress_list(IpAddress_list ** head)
2820 {
2821     char *token;
2822
2823     while ((token = strtok(NULL, w_space))) {
2824         parse_IpAddress_list_token(head, token);
2825     }
2826 }
2827
2828 static void
2829 dump_IpAddress_list(StoreEntry * e, const char *n, const IpAddress_list * s)
2830 {
2831     char ntoabuf[MAX_IPSTRLEN];
2832
2833     while (s) {
2834         storeAppendPrintf(e, "%s %s\n",
2835                           n,
2836                           s->s.NtoA(ntoabuf,MAX_IPSTRLEN));
2837         s = s->next;
2838     }
2839 }
2840
2841 static void
2842 free_IpAddress_list(IpAddress_list ** head)
2843 {
2844     if (*head) delete *head;
2845     *head = NULL;
2846 }
2847
2848 #if CURRENTLY_UNUSED
2849 /* This code was previously used by http_port. Left as it really should
2850  * be used by icp_port and htcp_port
2851  */
2852 static int
2853 check_null_IpAddress_list(const IpAddress_list * s)
2854 {
2855     return NULL == s;
2856 }
2857
2858 #endif /* CURRENTLY_UNUSED */
2859 #endif /* USE_WCCPv2 */
2860
2861 CBDATA_CLASS_INIT(http_port_list);
2862
2863 static void
2864 parse_http_port_specification(http_port_list * s, char *token)
2865 {
2866     char *host = NULL;
2867     unsigned short port = 0;
2868     char *t = NULL;
2869     char *junk = NULL;
2870
2871     s->disable_pmtu_discovery = DISABLE_PMTU_OFF;
2872     s->name = xstrdup(token);
2873     s->connection_auth_disabled = false;
2874
2875 #if USE_IPV6
2876     if (*token == '[') {
2877         /* [ipv6]:port */
2878         host = token + 1;
2879         t = strchr(host, ']');
2880         if (!t) {
2881             debugs(3, 0, "http(s)_port: missing ']' on IPv6 address: " << token);
2882             self_destruct();
2883         }
2884         *t++ = '\0';
2885         if (*t != ':') {
2886             debugs(3, 0, "http(s)_port: missing Port in: " << token);
2887             self_destruct();
2888         }
2889         port = xatos(t + 1);
2890     } else
2891 #endif
2892         if ((t = strchr(token, ':'))) {
2893             /* host:port */
2894             /* ipv4:port */
2895             host = token;
2896             *t = '\0';
2897             port = xatos(t + 1);
2898
2899         } else if ((port = strtol(token, &junk, 10)), !*junk) {
2900             /* port */
2901             debugs(3, 3, "http(s)_port: found Listen on Port: " << port);
2902         } else {
2903             debugs(3, 0, "http(s)_port: missing Port: " << token);
2904             self_destruct();
2905         }
2906
2907     if (port == 0) {
2908         debugs(3, 0, "http(s)_port: Port cannot be 0: " << token);
2909         self_destruct();
2910     }
2911
2912     if (NULL == host) {
2913         s->s.SetAnyAddr();
2914         s->s.SetPort(port);
2915         debugs(3, 3, "http(s)_port: found Listen on wildcard address: " << s->s);
2916     } else if ( s->s = host ) { /* check/parse numeric IPA */
2917         s->s.SetPort(port);
2918         debugs(3, 3, "http(s)_port: Listen on Host/IP: " << host << " --> " << s->s);
2919     } else if ( s->s.GetHostByName(host) ) { /* check/parse for FQDN */
2920         /* dont use ipcache */
2921         s->defaultsite = xstrdup(host);
2922         s->s.SetPort(port);
2923         debugs(3, 3, "http(s)_port: found Listen as Host " << s->defaultsite << " on IP: " << s->s);
2924     } else {
2925         debugs(3, 0, "http(s)_port: failed to resolve Host/IP: " << host);
2926         self_destruct();
2927     }
2928 }
2929
2930 static void
2931 parse_http_port_option(http_port_list * s, char *token)
2932 {
2933     if (strncmp(token, "defaultsite=", 12) == 0) {
2934         safe_free(s->defaultsite);
2935         s->defaultsite = xstrdup(token + 12);
2936         s->accel = 1;
2937     } else if (strncmp(token, "name=", 5) == 0) {
2938         safe_free(s->name);
2939         s->name = xstrdup(token + 5);
2940     } else if (strcmp(token, "vhost") == 0) {
2941         s->vhost = 1;
2942         s->accel = 1;
2943     } else if (strcmp(token, "vport") == 0) {
2944         s->vport = -1;
2945         s->accel = 1;
2946     } else if (strncmp(token, "vport=", 6) == 0) {
2947         s->vport = xatos(token + 6);
2948         s->accel = 1;
2949     } else if (strncmp(token, "protocol=", 9) == 0) {
2950         s->protocol = xstrdup(token + 9);
2951         s->accel = 1;
2952     } else if (strcmp(token, "accel") == 0) {
2953         s->accel = 1;
2954     } else if (strcmp(token, "no-connection-auth") == 0) {
2955         s->connection_auth_disabled = true;
2956     } else if (strcmp(token, "connection-auth=off") == 0) {
2957         s->connection_auth_disabled = true;
2958     } else if (strcmp(token, "connection-auth") == 0) {
2959         s->connection_auth_disabled = false;
2960     } else if (strcmp(token, "connection-auth=on") == 0) {
2961         s->connection_auth_disabled = false;
2962     } else if (strncmp(token, "disable-pmtu-discovery=", 23) == 0) {
2963         if (!strcasecmp(token + 23, "off"))
2964             s->disable_pmtu_discovery = DISABLE_PMTU_OFF;
2965         else if (!strcasecmp(token + 23, "transparent"))
2966             s->disable_pmtu_discovery = DISABLE_PMTU_TRANSPARENT;
2967         else if (!strcasecmp(token + 23, "always"))
2968             s->disable_pmtu_discovery = DISABLE_PMTU_ALWAYS;
2969         else
2970             self_destruct();
2971
2972     } else if (strcmp(token, "transparent") == 0 || strcmp(token, "intercept") == 0) {
2973         s->intercepted = 1;
2974         IpInterceptor.StartInterception();
2975         /* Log information regarding the port modes under interception. */
2976         debugs(3, DBG_IMPORTANT, "Starting Authentication on port " << s->s);
2977         debugs(3, DBG_IMPORTANT, "Disabling Authentication on port " << s->s << " (interception enabled)");
2978
2979 #if USE_IPV6
2980         /* INET6: until transparent REDIRECT works on IPv6 SOCKET, force wildcard to IPv4 */
2981         debugs(3, DBG_IMPORTANT, "Disabling IPv6 on port " << s->s << " (interception enabled)");
2982         if ( !s->s.SetIPv4() ) {
2983             debugs(3, DBG_CRITICAL, "http(s)_port: IPv6 addresses cannot be transparent (protocol does not provide NAT)" << s->s );
2984             self_destruct();
2985         }
2986 #endif
2987     } else if (strcmp(token, "tproxy") == 0) {
2988         if (s->intercepted || s->accel) {
2989             debugs(3,DBG_CRITICAL, "http(s)_port: TPROXY option requires its own interception port. It cannot be shared.");
2990             self_destruct();
2991         }
2992         s->spoof_client_ip = 1;
2993         IpInterceptor.StartTransparency();
2994         /* Log information regarding the port modes under transparency. */
2995         debugs(3, DBG_IMPORTANT, "Starting IP Spoofing on port " << s->s);
2996         debugs(3, DBG_IMPORTANT, "Disabling Authentication on port " << s->s << " (Ip spoofing enabled)");
2997
2998 #if USE_IPV6
2999         /* INET6: until target TPROXY is known to work on IPv6 SOCKET, force wildcard to IPv4 */
3000         debugs(3, DBG_IMPORTANT, "Disabling IPv6 on port " << s->s << " (interception enabled)");
3001         if ( s->s.IsIPv6() && !s->s.SetIPv4() ) {
3002             debugs(3, DBG_CRITICAL, "http(s)_port: IPv6 addresses cannot be transparent (protocol does not provide NAT)" << s->s );
3003             self_destruct();
3004         }
3005 #endif
3006
3007     } else if (strcmp(token, "ipv4") == 0) {
3008 #if USE_IPV6
3009         if ( !s->s.SetIPv4() ) {
3010             debugs(3, 0, "http(s)_port: IPv6 addresses cannot be used a IPv4-Only." << s->s );
3011             self_destruct();
3012         }
3013 #endif
3014     } else if (strcmp(token, "tcpkeepalive") == 0) {
3015         s->tcp_keepalive.enabled = 1;
3016     } else if (strncmp(token, "tcpkeepalive=", 13) == 0) {
3017         char *t = token + 13;
3018         s->tcp_keepalive.enabled = 1;
3019         s->tcp_keepalive.idle = atoi(t);
3020         t = strchr(t, ',');
3021         if (t) {
3022             t++;
3023             s->tcp_keepalive.interval = atoi(t);
3024             t = strchr(t, ',');
3025         }
3026         if (t) {
3027             t++;
3028             s->tcp_keepalive.timeout = atoi(t);
3029             t = strchr(t, ',');
3030         }
3031 #if USE_SSL
3032     } else if (strncmp(token, "cert=", 5) == 0) {
3033         safe_free(s->cert);
3034         s->cert = xstrdup(token + 5);
3035     } else if (strncmp(token, "key=", 4) == 0) {
3036         safe_free(s->key);
3037         s->key = xstrdup(token + 4);
3038     } else if (strncmp(token, "version=", 8) == 0) {
3039         s->version = xatoi(token + 8);
3040
3041         if (s->version < 1 || s->version > 4)
3042             self_destruct();
3043     } else if (strncmp(token, "options=", 8) == 0) {
3044         safe_free(s->options);
3045         s->options = xstrdup(token + 8);
3046     } else if (strncmp(token, "cipher=", 7) == 0) {
3047         safe_free(s->cipher);
3048         s->cipher = xstrdup(token + 7);
3049     } else if (strncmp(token, "clientca=", 9) == 0) {
3050         safe_free(s->clientca);
3051         s->clientca = xstrdup(token + 9);
3052     } else if (strncmp(token, "cafile=", 7) == 0) {
3053         safe_free(s->cafile);
3054         s->cafile = xstrdup(token + 7);
3055     } else if (strncmp(token, "capath=", 7) == 0) {
3056         safe_free(s->capath);
3057         s->capath = xstrdup(token + 7);
3058     } else if (strncmp(token, "crlfile=", 8) == 0) {
3059         safe_free(s->crlfile);
3060         s->crlfile = xstrdup(token + 8);
3061     } else if (strncmp(token, "dhparams=", 9) == 0) {
3062         safe_free(s->dhfile);
3063         s->dhfile = xstrdup(token + 9);
3064     } else if (strncmp(token, "sslflags=", 9) == 0) {
3065         safe_free(s->sslflags);
3066         s->sslflags = xstrdup(token + 9);
3067     } else if (strncmp(token, "sslcontext=", 11) == 0) {
3068         safe_free(s->sslcontext);
3069         s->sslcontext = xstrdup(token + 11);
3070     } else if (strcmp(token, "sslBump") == 0) {
3071         s->sslBump = 1; // accelerated when bumped, otherwise not
3072 #endif
3073     } else {
3074         self_destruct();
3075     }
3076
3077     if ( s->spoof_client_ip && (s->intercepted || s->accel) ) {
3078         debugs(3,DBG_CRITICAL, "http(s)_port: TPROXY option requires its own interception port. It cannot be shared.");
3079         self_destruct();
3080     }
3081 }
3082
3083 static http_port_list *
3084 create_http_port(char *portspec)
3085 {
3086     http_port_list *s = new http_port_list("http");
3087     parse_http_port_specification(s, portspec);
3088     return s;
3089 }
3090
3091 void
3092 add_http_port(char *portspec)
3093 {
3094     http_port_list *s = create_http_port(portspec);
3095     s->next = Config.Sockaddr.http;
3096     Config.Sockaddr.http = s;
3097 }
3098
3099 static void
3100 parse_http_port_list(http_port_list ** head)
3101 {
3102     char *token = strtok(NULL, w_space);
3103
3104     if (!token) {
3105         self_destruct();
3106         return;
3107     }
3108
3109     http_port_list *s = create_http_port(token);
3110
3111     /* parse options ... */
3112     while ((token = strtok(NULL, w_space))) {
3113         parse_http_port_option(s, token);
3114     }
3115
3116     while (*head)
3117         head = &(*head)->next;
3118
3119     *head = s;
3120 }
3121
3122 static void
3123 dump_generic_http_port(StoreEntry * e, const char *n, const http_port_list * s)
3124 {
3125     char buf[MAX_IPSTRLEN];
3126
3127     storeAppendPrintf(e, "%s %s",
3128                       n,
3129                       s->s.ToURL(buf,MAX_IPSTRLEN));
3130
3131     if (s->defaultsite)
3132         storeAppendPrintf(e, " defaultsite=%s", s->defaultsite);
3133
3134     if (s->intercepted)
3135         storeAppendPrintf(e, " intercept");
3136
3137     if (s->vhost)
3138         storeAppendPrintf(e, " vhost");
3139
3140     if (s->vport)
3141         storeAppendPrintf(e, " vport");
3142
3143     if (s->connection_auth_disabled)
3144         storeAppendPrintf(e, " connection-auth=off");
3145     else
3146         storeAppendPrintf(e, " connection-auth=on");
3147
3148     if (s->disable_pmtu_discovery != DISABLE_PMTU_OFF) {
3149         const char *pmtu;
3150
3151         if (s->disable_pmtu_discovery == DISABLE_PMTU_ALWAYS)
3152             pmtu = "always";
3153         else
3154             pmtu = "transparent";
3155
3156         storeAppendPrintf(e, " disable-pmtu-discovery=%s", pmtu);
3157     }
3158
3159     if (s->tcp_keepalive.enabled) {
3160         if (s->tcp_keepalive.idle || s->tcp_keepalive.interval || s->tcp_keepalive.timeout) {
3161             storeAppendPrintf(e, " tcp_keepalive=%d,%d,%d", s->tcp_keepalive.idle, s->tcp_keepalive.interval, s->tcp_keepalive.timeout);
3162         } else {
3163             storeAppendPrintf(e, " tcp_keepalive");
3164         }
3165     }
3166
3167 #if USE_SSL
3168     if (s->cert)
3169         storeAppendPrintf(e, " cert=%s", s->cert);
3170
3171     if (s->key)
3172         storeAppendPrintf(e, " key=%s", s->key);
3173
3174     if (s->version)
3175         storeAppendPrintf(e, " version=%d", s->version);
3176
3177     if (s->options)
3178         storeAppendPrintf(e, " options=%s", s->options);
3179
3180     if (s->cipher)
3181         storeAppendPrintf(e, " cipher=%s", s->cipher);
3182
3183     if (s->cafile)
3184         storeAppendPrintf(e, " cafile=%s", s->cafile);
3185
3186     if (s->capath)
3187         storeAppendPrintf(e, " capath=%s", s->capath);
3188
3189     if (s->crlfile)
3190         storeAppendPrintf(e, " crlfile=%s", s->crlfile);
3191
3192     if (s->dhfile)
3193         storeAppendPrintf(e, " dhparams=%s", s->dhfile);
3194
3195     if (s->sslflags)
3196         storeAppendPrintf(e, " sslflags=%s", s->sslflags);
3197
3198     if (s->sslcontext)
3199         storeAppendPrintf(e, " sslcontext=%s", s->sslcontext);
3200
3201     if (s->sslBump)
3202         storeAppendPrintf(e, " sslBump");
3203 #endif
3204 }
3205
3206 static void
3207 dump_http_port_list(StoreEntry * e, const char *n, const http_port_list * s)
3208 {
3209     while (s) {
3210         dump_generic_http_port(e, n, s);
3211         storeAppendPrintf(e, "\n");
3212         s = s->next;
3213     }
3214 }
3215
3216 static void
3217 free_http_port_list(http_port_list ** head)
3218 {
3219     http_port_list *s;
3220
3221     while ((s = *head) != NULL) {
3222         *head = s->next;
3223         delete s;
3224     }
3225 }
3226
3227 #if USE_SSL
3228
3229 // TODO: merge better with parse_http_port_list
3230 static void
3231 parse_https_port_list(https_port_list ** head)
3232 {
3233     char *token;
3234     https_port_list *s;
3235
3236     token = strtok(NULL, w_space);
3237
3238     if (!token)
3239         self_destruct();
3240
3241     s = new https_port_list;
3242     parse_http_port_specification(&s->http, token);
3243
3244     /* parse options ... */
3245     while ((token = strtok(NULL, w_space))) {
3246         parse_http_port_option(s, token);
3247     }
3248
3249     while (*head) {
3250         http_port_list ** headTmp = &(*head)->http.next;
3251         head = (https_port_list **)headTmp;
3252     }
3253
3254     *head = s;
3255 }
3256
3257 static void
3258 dump_https_port_list(StoreEntry * e, const char *n, const https_port_list * s)
3259 {
3260     dump_http_port_list(e, n, s);
3261 }
3262
3263 static void
3264 free_https_port_list(https_port_list ** head)
3265 {
3266     free_http_port_list((http_port_list**)head);
3267 }
3268
3269 #if 0
3270 static int
3271 check_null_https_port_list(const https_port_list * s)
3272 {
3273     return NULL == s;
3274 }
3275
3276 #endif
3277
3278 #endif /* USE_SSL */
3279
3280 void
3281 configFreeMemory(void)
3282 {
3283     free_all();
3284 }
3285
3286 void
3287 requirePathnameExists(const char *name, const char *path)
3288 {
3289
3290     struct stat sb;
3291     char pathbuf[BUFSIZ];
3292     assert(path != NULL);
3293
3294     if (Config.chroot_dir && (geteuid() == 0)) {
3295         snprintf(pathbuf, BUFSIZ, "%s/%s", Config.chroot_dir, path);
3296         path = pathbuf;
3297     }
3298
3299     if (stat(path, &sb) < 0) {
3300         if (opt_send_signal == -1 || opt_send_signal == SIGHUP)
3301             fatalf("%s %s: %s", name, path, xstrerror());
3302         else
3303             fprintf(stderr, "WARNING: %s %s: %s\n", name, path, xstrerror());
3304     }
3305 }
3306
3307 char *
3308 strtokFile(void)
3309 {
3310     return ConfigParser::strtokFile();
3311 }
3312
3313 #include "AccessLogEntry.h"
3314 /* TODO: split out parsing somehow ...*/
3315 static void
3316 parse_logformat(logformat ** logformat_definitions)
3317 {
3318     logformat *nlf;
3319     char *name, *def;
3320
3321     if ((name = strtok(NULL, w_space)) == NULL)
3322         self_destruct();
3323
3324     if ((def = strtok(NULL, "\r\n")) == NULL) {
3325         self_destruct();
3326         return;
3327     }
3328
3329     debugs(3, 2, "Logformat for '" << name << "' is '" << def << "'");
3330
3331     nlf = (logformat *)xcalloc(1, sizeof(logformat));
3332
3333     nlf->name = xstrdup(name);
3334
3335     if (!accessLogParseLogFormat(&nlf->format, def)) {
3336         self_destruct();
3337         return;
3338     }
3339
3340     nlf->next = *logformat_definitions;
3341
3342     *logformat_definitions = nlf;
3343 }
3344
3345 static void
3346 parse_access_log(customlog ** logs)
3347 {
3348     const char *filename, *logdef_name;
3349     customlog *cl;
3350     logformat *lf;
3351
3352     cl = (customlog *)xcalloc(1, sizeof(*cl));
3353
3354     if ((filename = strtok(NULL, w_space)) == NULL) {
3355         self_destruct();
3356         return;
3357     }
3358
3359     if (strcmp(filename, "none") == 0) {
3360         cl->type = CLF_NONE;
3361         goto done;
3362     }
3363
3364     if ((logdef_name = strtok(NULL, w_space)) == NULL)
3365         logdef_name = "auto";
3366
3367     debugs(3, 9, "Log definition name '" << logdef_name << "' file '" << filename << "'");
3368
3369     cl->filename = xstrdup(filename);
3370
3371     /* look for the definition pointer corresponding to this name */
3372     lf = Config.Log.logformats;
3373
3374     while (lf != NULL) {
3375         debugs(3, 9, "Comparing against '" << lf->name << "'");
3376
3377         if (strcmp(lf->name, logdef_name) == 0)
3378             break;
3379
3380         lf = lf->next;
3381     }
3382
3383     if (lf != NULL) {
3384         cl->type = CLF_CUSTOM;
3385         cl->logFormat = lf;
3386     } else if (strcmp(logdef_name, "auto") == 0) {
3387         cl->type = CLF_AUTO;
3388     } else if (strcmp(logdef_name, "squid") == 0) {
3389         cl->type = CLF_SQUID;
3390     } else if (strcmp(logdef_name, "common") == 0) {
3391         cl->type = CLF_COMMON;
3392     } else {
3393         debugs(3, 0, "Log format '" << logdef_name << "' is not defined");
3394         self_destruct();
3395         return;
3396     }
3397
3398 done:
3399     aclParseAclList(LegacyParser, &cl->aclList);
3400
3401     while (*logs)
3402         logs = &(*logs)->next;
3403
3404     *logs = cl;
3405 }
3406
3407 static int
3408 check_null_access_log(customlog *customlog_definitions)
3409 {
3410     return customlog_definitions == NULL;
3411 }
3412
3413 static void
3414 dump_logformat(StoreEntry * entry, const char *name, logformat * definitions)
3415 {
3416     accessLogDumpLogFormat(entry, name, definitions);
3417 }
3418
3419 static void
3420 dump_access_log(StoreEntry * entry, const char *name, customlog * logs)
3421 {
3422     customlog *log;
3423
3424     for (log = logs; log; log = log->next) {
3425         storeAppendPrintf(entry, "%s ", name);
3426
3427         switch (log->type) {
3428
3429         case CLF_CUSTOM:
3430             storeAppendPrintf(entry, "%s %s", log->filename, log->logFormat->name);
3431             break;
3432
3433         case CLF_NONE:
3434             storeAppendPrintf(entry, "none");
3435             break;
3436
3437         case CLF_SQUID:
3438             storeAppendPrintf(entry, "%s squid", log->filename);
3439             break;
3440
3441         case CLF_COMMON:
3442             storeAppendPrintf(entry, "%s squid", log->filename);
3443             break;
3444
3445         case CLF_AUTO:
3446
3447             if (log->aclList)
3448                 storeAppendPrintf(entry, "%s auto", log->filename);
3449             else
3450                 storeAppendPrintf(entry, "%s", log->filename);
3451
3452             break;
3453
3454         case CLF_UNKNOWN:
3455             break;
3456         }
3457
3458         if (log->aclList)
3459             dump_acl_list(entry, log->aclList);
3460
3461         storeAppendPrintf(entry, "\n");
3462     }
3463 }
3464
3465 static void
3466 free_logformat(logformat ** definitions)
3467 {
3468     while (*definitions) {
3469         logformat *format = *definitions;
3470         *definitions = format->next;
3471         safe_free(format->name);
3472         accessLogFreeLogFormat(&format->format);
3473         xfree(format);
3474     }
3475 }
3476
3477 static void
3478 free_access_log(customlog ** definitions)
3479 {
3480     while (*definitions) {
3481         customlog *log = *definitions;
3482         *definitions = log->next;
3483
3484         log->logFormat = NULL;
3485         log->type = CLF_UNKNOWN;
3486
3487         if (log->aclList)
3488             aclDestroyAclList(&log->aclList);
3489
3490         safe_free(log->filename);
3491
3492         xfree(log);
3493     }
3494 }
3495
3496 #if USE_ADAPTATION
3497
3498 static void
3499 parse_adaptation_service_set_type()
3500 {
3501     Adaptation::Config::ParseServiceSet();
3502 }
3503
3504 static void
3505 parse_adaptation_access_type()
3506 {
3507     Adaptation::Config::ParseAccess(LegacyParser);
3508 }
3509
3510 #endif /* USE_ADAPTATION */
3511
3512
3513 #if ICAP_CLIENT
3514
3515 static void
3516 parse_icap_service_type(Adaptation::Icap::Config * cfg)
3517 {
3518     cfg->parseService();
3519 }
3520
3521 static void
3522 free_icap_service_type(Adaptation::Icap::Config * cfg)
3523 {
3524     cfg->freeService();
3525 }
3526
3527 static void
3528 dump_icap_service_type(StoreEntry * entry, const char *name, const Adaptation::Icap::Config &cfg)
3529 {
3530     cfg.dumpService(entry, name);
3531 }
3532
3533 static void
3534 parse_icap_class_type()
3535 {
3536     debugs(93, 0, "WARNING: 'icap_class' is depricated. " <<
3537            "Use 'adaptation_service_set' instead");
3538     Adaptation::Config::ParseServiceSet();
3539 }
3540
3541 static void
3542 parse_icap_access_type()
3543 {
3544     debugs(93, 0, "WARNING: 'icap_access' is depricated. " <<
3545            "Use 'adaptation_access' instead");
3546     Adaptation::Config::ParseAccess(LegacyParser);
3547 }
3548
3549 #endif
3550
3551
3552 #if USE_ECAP
3553
3554 static void
3555 parse_ecap_service_type(Adaptation::Ecap::Config * cfg)
3556 {
3557     cfg->parseService();
3558 }
3559
3560 static void
3561 free_ecap_service_type(Adaptation::Ecap::Config * cfg)
3562 {
3563     cfg->freeService();
3564 }
3565
3566 static void
3567 dump_ecap_service_type(StoreEntry * entry, const char *name, const Adaptation::Ecap::Config &cfg)
3568 {
3569     cfg.dumpService(entry, name);
3570 }
3571
3572 #endif /* USE_ECAP */