usable prototype of "ipsec pool" tool

This commit is contained in:
Martin Willi
2008-05-09 12:55:41 +00:00
parent 5dc317192a
commit 7051ef4091
+93 -24
View File
@@ -19,6 +19,7 @@
#include <getopt.h> #include <getopt.h>
#include <unistd.h> #include <unistd.h>
#include <stdio.h> #include <stdio.h>
#include <time.h>
#include <debug.h> #include <debug.h>
#include <library.h> #include <library.h>
@@ -29,6 +30,11 @@
*/ */
database_t *db; database_t *db;
/**
* --start/--end addresses of various subcommands
*/
host_t *start = NULL, *end = NULL;
/** /**
* create a host from a blob * create a host from a blob
*/ */
@@ -44,14 +50,14 @@ static void usage()
{ {
printf("\ printf("\
Usage:\n\ Usage:\n\
ipsec pool --status|--add|--del|--resize [options]\n\ ipsec pool --status|--add|--del|--resize|--purge [options]\n\
\n\ \n\
ipsec pool --status\n\ ipsec pool --status\n\
Show a list of installed pools with statistics.\n\ Show a list of installed pools with statistics.\n\
\n\ \n\
ipsec pool --add <name> --start <start> --end <end> --timeout <timeout>\n\ ipsec pool --add <name> --start <start> --end <end> --timeout <timeout>\n\
Add a new pool to the database.\n\ Add a new pool to the database.\n\
name: Name of the pool, as used in ipsec.conf rightsourceip=%%name\n\ name: Name of the pool, as used in ipsec.conf rightsourceip=%%name\n\
start: Start address of the pool\n\ start: Start address of the pool\n\
end: End address of the pool\n\ end: End address of the pool\n\
timeout: Lease time in hours, 0 for static leases\n\ timeout: Lease time in hours, 0 for static leases\n\
@@ -68,7 +74,11 @@ Usage:\n\
ipsec pool --leases <name> --filter <filter>\n\ ipsec pool --leases <name> --filter <filter>\n\
Show lease information using filters:\n\ Show lease information using filters:\n\
name: Name of the pool to show leases from\n\ name: Name of the pool to show leases from\n\
filter: Filter stiring:\n\ filter: Filter string - unimplemented\n\
\n\
ipsec pool --purge <name>\n\
Delete expired leases of a pool:\n\
name: Name of the pool to purge\n\
\n"); \n");
exit(0); exit(0);
} }
@@ -102,16 +112,6 @@ static void status()
start = host_create_from_blob(start_chunk); start = host_create_from_blob(start_chunk);
end = host_create_from_blob(end_chunk); end = host_create_from_blob(end_chunk);
lease = db->query(db, "SELECT COUNT(*) FROM leases "
"WHERE pool = ? AND release = NULL",
DB_UINT, id, DB_INT);
if (lease)
{
lease->enumerate(lease, &online);
lease->destroy(lease);
}
printf("%8s %15H %15H ", name, start, end); printf("%8s %15H %15H ", name, start, end);
if (timeout) if (timeout)
{ {
@@ -121,6 +121,15 @@ static void status()
{ {
printf("%8s ", "static"); printf("%8s ", "static");
} }
lease = db->query(db, "SELECT COUNT(*) FROM leases "
"WHERE pool = ? AND release ISNULL",
DB_UINT, id, DB_INT);
if (lease)
{
lease->enumerate(lease, &online);
lease->destroy(lease);
}
printf("%6d\n", online); printf("%6d\n", online);
DESTROY_IF(start); DESTROY_IF(start);
@@ -215,37 +224,61 @@ static void leases(char *name, char *filter)
enumerator_t *query; enumerator_t *query;
chunk_t address_chunk, identity_chunk; chunk_t address_chunk, identity_chunk;
int identity_type; int identity_type;
u_int acquire, release; u_int acquire, release, timeout;
host_t *address; host_t *address;
identification_t *identity; identification_t *identity;
bool found = FALSE; bool found = FALSE;
query = db->query(db, "SELECT name, address, identities.type, " query = db->query(db, "SELECT name, address, identities.type, "
"identities.data, acquire, release " "identities.data, acquire, release, timeout "
"FROM leases JOIN pools ON leases.pool = pools.id " "FROM leases JOIN pools ON leases.pool = pools.id "
"JOIN identities ON leases.identity = identities.id " "JOIN identities ON leases.identity = identities.id "
"WHERE (? or name = ?)", "WHERE (? or name = ?)",
DB_INT, name == NULL, DB_TEXT, name, DB_INT, name == NULL, DB_TEXT, name,
DB_TEXT, DB_BLOB, DB_INT, DB_BLOB, DB_UINT, DB_UINT); DB_TEXT, DB_BLOB, DB_INT,
DB_BLOB, DB_UINT, DB_UINT, DB_UINT);
if (!query) if (!query)
{ {
fprintf(stderr, "querying leases failed.\n"); fprintf(stderr, "querying leases failed.\n");
exit(-1); exit(-1);
} }
while (query->enumerate(query, &name, &address_chunk, while (query->enumerate(query, &name, &address_chunk, &identity_type,
&identity_type, &identity_chunk, &acquire, &release)) &identity_chunk, &acquire, &release, &timeout))
{ {
if (!found) if (!found)
{ {
found = TRUE; found = TRUE;
printf("%8s %15s %20s %16s %16s %7s\n", printf("%-8s %15s %-33s %-25s %-25s %-7s\n",
"name", "address", "identity", "start", "end", "status"); "name", "address", "identity", "start", "end", "status");
} }
address = host_create_from_blob(address_chunk); address = host_create_from_blob(address_chunk);
identity = identification_create_from_encoding(identity_type, identity_chunk); identity = identification_create_from_encoding(identity_type, identity_chunk);
printf("%8s %15H %20D %16d %16d, %7s\n", printf("%-8s %15H %-32D %T ", name, address, identity, &acquire);
name, address, identity, acquire, release, "hum"); if (release)
{
printf("%T ", &release);
}
else
{
printf(" ");
}
if (release == 0)
{
printf("%-7s\n", "online");
}
else if (timeout == 0)
{
printf("%-7s\n", "static");
}
else if (release >= time(NULL) - timeout)
{
printf("%-7s\n", "valid");
}
else
{
printf("%-7s\n", "expired");
}
DESTROY_IF(address); DESTROY_IF(address);
identity->destroy(identity); identity->destroy(identity);
} }
@@ -258,12 +291,40 @@ static void leases(char *name, char *filter)
exit(0); exit(0);
} }
/**
* ipsec pool --purge - delete expired leases
*/
static void purge(char *name)
{
enumerator_t *query;
u_int id, timeout, purged = 0;
query = db->query(db, "SELECT id, timeout FROM pools WHERE name = ?",
DB_TEXT, name, DB_UINT, DB_UINT);
if (!query)
{
fprintf(stderr, "purging pool failed.\n");
exit(-1);
}
if (query->enumerate(query, &id, &timeout))
{
purged = db->execute(db, NULL,
"DELETE FROM leases WHERE pool = ? "
"AND release NOTNULL AND release < ?",
DB_UINT, id, DB_UINT, time(NULL) - timeout);
}
query->destroy(query);
fprintf(stderr, "purged %d leases in pool '%s'.\n", purged, name);
exit(0);
}
/** /**
* atexit handler to close db on shutdown * atexit handler to close db on shutdown
*/ */
static void close_database(void) static void cleanup(void)
{ {
db->destroy(db); db->destroy(db);
DESTROY_IF(start);
DESTROY_IF(end);
} }
/** /**
@@ -286,7 +347,6 @@ int main(int argc, char *argv[])
{ {
char *uri, *name = "", *filter = ""; char *uri, *name = "", *filter = "";
int timeout = 0; int timeout = 0;
host_t *start = NULL, *end = NULL;
enum { enum {
OP_USAGE, OP_USAGE,
OP_STATUS, OP_STATUS,
@@ -294,6 +354,7 @@ int main(int argc, char *argv[])
OP_DEL, OP_DEL,
OP_RESIZE, OP_RESIZE,
OP_LEASES, OP_LEASES,
OP_PURGE,
} operation = OP_USAGE; } operation = OP_USAGE;
dbg = dbg_stderr; dbg = dbg_stderr;
@@ -314,7 +375,7 @@ int main(int argc, char *argv[])
fprintf(stderr, "opening database failed.\n"); fprintf(stderr, "opening database failed.\n");
exit(-1); exit(-1);
} }
atexit(close_database); atexit(cleanup);
while (TRUE) while (TRUE)
{ {
@@ -328,6 +389,7 @@ int main(int argc, char *argv[])
{ "del", required_argument, NULL, 'd' }, { "del", required_argument, NULL, 'd' },
{ "resize", required_argument, NULL, 'r' }, { "resize", required_argument, NULL, 'r' },
{ "leases", optional_argument, NULL, 'l' }, { "leases", optional_argument, NULL, 'l' },
{ "purge", required_argument, NULL, 'p' },
{ "start", required_argument, NULL, 's' }, { "start", required_argument, NULL, 's' },
{ "end", required_argument, NULL, 'e' }, { "end", required_argument, NULL, 'e' },
@@ -362,6 +424,10 @@ int main(int argc, char *argv[])
operation = OP_LEASES; operation = OP_LEASES;
name = optarg; name = optarg;
continue; continue;
case 'p':
operation = OP_PURGE;
name = optarg;
continue;
case 's': case 's':
start = host_create_from_string(optarg, 0); start = host_create_from_string(optarg, 0);
if (start == NULL) if (start == NULL)
@@ -429,6 +495,9 @@ int main(int argc, char *argv[])
case OP_LEASES: case OP_LEASES:
leases(name, filter); leases(name, filter);
break; break;
case OP_PURGE:
purge(name);
break;
} }
exit(0); exit(0);
} }