openvpn.init 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160
  1. #!/bin/sh /etc/rc.common
  2. # Copyright (C) 2008-2013 OpenWrt.org
  3. # Copyright (C) 2008 Jo-Philipp Wich
  4. # This is free software, licensed under the GNU General Public License v2.
  5. # See /LICENSE for more information.
  6. START=90
  7. STOP=10
  8. USE_PROCD=1
  9. PROG=/usr/sbin/openvpn
  10. LIST_SEP="
  11. "
  12. UCI_STARTED=
  13. UCI_DISABLED=
  14. append_param() {
  15. local s="$1"
  16. local v="$2"
  17. case "$v" in
  18. *_*_*_*) v=${v%%_*}-${v#*_}; v=${v%%_*}-${v#*_}; v=${v%%_*}-${v#*_} ;;
  19. *_*_*) v=${v%%_*}-${v#*_}; v=${v%%_*}-${v#*_} ;;
  20. *_*) v=${v%%_*}-${v#*_} ;;
  21. esac
  22. echo -n "$v" >> "/var/etc/openvpn-$s.conf"
  23. return 0
  24. }
  25. append_bools() {
  26. local p; local v; local s="$1"; shift
  27. for p in $*; do
  28. config_get_bool v "$s" "$p"
  29. [ "$v" = 1 ] && append_param "$s" "$p" && echo >> "/var/etc/openvpn-$s.conf"
  30. done
  31. }
  32. append_params() {
  33. local p; local v; local s="$1"; shift
  34. for p in $*; do
  35. config_get v "$s" "$p"
  36. IFS="$LIST_SEP"
  37. for v in $v; do
  38. [ -n "$v" ] && [ "$p" != "push" ] && append_param "$s" "$p" && echo " $v" >> "/var/etc/openvpn-$s.conf"
  39. [ -n "$v" ] && [ "$p" == "push" ] && append_param "$s" "$p" && echo " \"$v\"" >> "/var/etc/openvpn-$s.conf"
  40. done
  41. unset IFS
  42. done
  43. }
  44. section_enabled() {
  45. config_get_bool enable "$1" 'enable' 0
  46. config_get_bool enabled "$1" 'enabled' 0
  47. [ $enable -gt 0 ] || [ $enabled -gt 0 ]
  48. }
  49. openvpn_add_instance() {
  50. local name="$1"
  51. local dir="$2"
  52. local conf="$3"
  53. procd_open_instance
  54. procd_set_param command "$PROG" \
  55. --syslog "openvpn($name)" \
  56. --status "/var/run/openvpn.$name.status" \
  57. --cd "$dir" \
  58. --config "$conf"
  59. procd_set_param file "$dir/$conf"
  60. procd_set_param respawn
  61. procd_close_instance
  62. }
  63. start_instance() {
  64. local s="$1"
  65. config_get config "$s" config
  66. config="${config:+$(readlink -f "$config")}"
  67. section_enabled "$s" || {
  68. append UCI_DISABLED "$config" "$LIST_SEP"
  69. return 1
  70. }
  71. [ ! -d "/var/run" ] && mkdir -p "/var/run"
  72. if [ ! -z "$config" ]; then
  73. append UCI_STARTED "$config" "$LIST_SEP"
  74. openvpn_add_instance "$s" "${config%/*}" "$config"
  75. return
  76. fi
  77. [ ! -d "/var/etc" ] && mkdir -p "/var/etc"
  78. [ -f "/var/etc/openvpn-$s.conf" ] && rm "/var/etc/openvpn-$s.conf"
  79. # append flags
  80. append_bools "$s" \
  81. auth_nocache auth_user_pass_optional bind ccd_exclusive client client_cert_not_required \
  82. client_to_client comp_noadapt disable \
  83. disable_occ down_pre duplicate_cn fast_io float http_proxy_retry \
  84. ifconfig_noexec ifconfig_nowarn ifconfig_pool_linear management_forget_disconnect management_hold \
  85. management_query_passwords management_signal mktun mlock mtu_test multihome mute_replay_warnings \
  86. nobind no_iv no_name_remapping no_replay opt_verify passtos persist_key persist_local_ip \
  87. persist_remote_ip persist_tun ping_timer_rem pull push_reset \
  88. remote_random rmtun route_noexec route_nopull single_session socks_proxy_retry \
  89. suppress_timestamps tcp_nodelay test_crypto tls_client tls_exit tls_server \
  90. tun_ipv6 up_delay up_restart username_as_common_name
  91. # append params
  92. append_params "$s" \
  93. cd askpass auth auth_retry auth_user_pass auth_user_pass_verify bcast_buffers ca cert capath \
  94. chroot cipher client_config_dir client_connect client_disconnect comp_lzo connect_freq \
  95. connect_retry connect_timeout connect_retry_max crl_verify dev dev_node dev_type dh \
  96. echo engine explicit_exit_notify fragment group hand_window hash_size \
  97. http_proxy http_proxy_option http_proxy_timeout ifconfig ifconfig_pool \
  98. ifconfig_pool_persist ifconfig_push inactive ipchange iroute keepalive \
  99. key key_method keysize learn_address link_mtu lladdr local log log_append \
  100. lport management management_log_cache max_clients \
  101. max_routes_per_client mode mssfix mtu_disc mute nice ns_cert_type ping \
  102. ping_exit ping_restart pkcs12 plugin port port_share prng proto rcvbuf \
  103. redirect_gateway remap_usr1 remote remote_cert_eku remote_cert_ku remote_cert_tls \
  104. reneg_bytes reneg_pkts reneg_sec \
  105. replay_persist replay_window resolv_retry route route_delay route_gateway \
  106. route_metric route_pre_down route_up rport script_security secret server server_bridge setenv shaper sndbuf \
  107. socks_proxy status status_version syslog tcp_queue_limit tls_auth tls_version_min \
  108. tls_cipher tls_remote tls_timeout tls_verify tmp_dir topology tran_window \
  109. tun_mtu tun_mtu_extra txqueuelen user verb down push up \
  110. verify_x509_name x509_username_field \
  111. ifconfig_ipv6 route_ipv6 server_ipv6 ifconfig_ipv6_pool ifconfig_ipv6_push iroute_ipv6
  112. openvpn_add_instance "$s" "/var/etc" "openvpn-$s.conf"
  113. }
  114. start_service() {
  115. config_load 'openvpn'
  116. config_foreach start_instance 'openvpn'
  117. local path name
  118. for path in /etc/openvpn/*.conf; do
  119. if [ -f "$path" ]; then
  120. name="${path##*/}"; name="${name%.conf}"
  121. # don't start configs again that are already started by uci
  122. if echo "$UCI_STARTED" | grep -qxF "$path"; then
  123. continue
  124. # don't start configs which are set to disabled in uci
  125. elif echo "$UCI_DISABLED" | grep -qxF "$path"; then
  126. logger -t openvpn "$name.conf is disabled in /etc/config/openvpn"
  127. continue
  128. fi
  129. openvpn_add_instance "$name" "${path%/*}" "$path"
  130. fi
  131. done
  132. }
  133. service_triggers() {
  134. procd_add_reload_trigger openvpn
  135. }