lib: All settings use configured namespace
This commit is contained in:
@@ -194,8 +194,8 @@ plugin_t *gcrypt_plugin_create()
|
||||
|
||||
/* we currently do not use secure memory */
|
||||
gcry_control(GCRYCTL_DISABLE_SECMEM, 0);
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.gcrypt.quick_random", FALSE))
|
||||
if (lib->settings->get_bool(lib->settings, "%s.plugins.gcrypt.quick_random",
|
||||
FALSE, lib->ns))
|
||||
{
|
||||
gcry_control(GCRYCTL_ENABLE_QUICK_RANDOM, 0);
|
||||
}
|
||||
|
||||
@@ -230,8 +230,8 @@ ntru_drbg_t *ntru_drbg_create(u_int32_t strength, chunk_t pers_str,
|
||||
}
|
||||
|
||||
max_requests = lib->settings->get_int(lib->settings,
|
||||
"libstrongswan.plugins.ntru.max_drbg_requests",
|
||||
MAX_DRBG_REQUESTS);
|
||||
"%s.plugins.ntru.max_drbg_requests",
|
||||
MAX_DRBG_REQUESTS, lib->ns);
|
||||
|
||||
INIT(this,
|
||||
.public = {
|
||||
|
||||
@@ -316,7 +316,7 @@ ntru_ke_t *ntru_ke_create(diffie_hellman_group_t group, chunk_t g, chunk_t p)
|
||||
u_int32_t strength;
|
||||
|
||||
parameter_set = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.ntru.parameter_set", "optimum");
|
||||
"%s.plugins.ntru.parameter_set", "optimum", lib->ns);
|
||||
|
||||
if (streq(parameter_set, "x9_98_speed"))
|
||||
{
|
||||
|
||||
@@ -471,7 +471,7 @@ static bool parse_extensions(private_openssl_crl_t *this)
|
||||
default:
|
||||
ok = X509_EXTENSION_get_critical(ext) == 0 ||
|
||||
!lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.x509.enforce_critical", TRUE);
|
||||
"%s.x509.enforce_critical", TRUE, lib->ns);
|
||||
if (!ok)
|
||||
{
|
||||
DBG1(DBG_LIB, "found unsupported critical X.509 "
|
||||
|
||||
@@ -201,7 +201,7 @@ static bool compute_shared_key(private_openssl_ec_diffie_hellman_t *this,
|
||||
* http://www.rfc-editor.org/errata_search.php?eid=9
|
||||
*/
|
||||
x_coordinate_only = lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.ecp_x_coordinate_only", TRUE);
|
||||
"%s.ecp_x_coordinate_only", TRUE, lib->ns);
|
||||
if (!ecp2chunk(this->ec_group, secret, shared_secret, x_coordinate_only))
|
||||
{
|
||||
goto error;
|
||||
|
||||
@@ -522,7 +522,7 @@ plugin_t *openssl_plugin_create()
|
||||
int fips_mode;
|
||||
|
||||
fips_mode = lib->settings->get_int(lib->settings,
|
||||
"libstrongswan.plugins.openssl.fips_mode", FIPS_MODE);
|
||||
"%s.plugins.openssl.fips_mode", FIPS_MODE, lib->ns);
|
||||
#ifdef OPENSSL_FIPS
|
||||
if (fips_mode)
|
||||
{
|
||||
|
||||
@@ -558,7 +558,7 @@ openssl_rsa_private_key_t *openssl_rsa_private_key_connect(key_type_t type,
|
||||
if (!engine_id)
|
||||
{
|
||||
engine_id = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.openssl.engine_id", "pkcs11");
|
||||
"%s.plugins.openssl.engine_id", "pkcs11", lib->ns);
|
||||
}
|
||||
engine = ENGINE_by_id(engine_id);
|
||||
if (!engine)
|
||||
|
||||
@@ -1012,7 +1012,7 @@ static bool parse_extensions(private_openssl_x509_t *this)
|
||||
default:
|
||||
ok = X509_EXTENSION_get_critical(ext) == 0 ||
|
||||
!lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.x509.enforce_critical", TRUE);
|
||||
"%s.x509.enforce_critical", TRUE, lib->ns);
|
||||
if (!ok)
|
||||
{
|
||||
char buf[80] = "";
|
||||
|
||||
@@ -135,7 +135,7 @@ METHOD(diffie_hellman_t, set_other_public_value, void,
|
||||
};
|
||||
|
||||
if (!lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.ecp_x_coordinate_only", TRUE))
|
||||
"%s.ecp_x_coordinate_only", TRUE, lib->ns))
|
||||
{ /* we only get the x coordinate back */
|
||||
return;
|
||||
}
|
||||
|
||||
@@ -338,7 +338,7 @@ pkcs11_manager_t *pkcs11_manager_create(pkcs11_manager_token_event_t cb,
|
||||
);
|
||||
|
||||
enumerator = lib->settings->create_section_enumerator(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.modules");
|
||||
"%s.plugins.pkcs11.modules", lib->ns);
|
||||
while (enumerator->enumerate(enumerator, &module))
|
||||
{
|
||||
INIT(entry,
|
||||
@@ -346,7 +346,7 @@ pkcs11_manager_t *pkcs11_manager_create(pkcs11_manager_token_event_t cb,
|
||||
);
|
||||
|
||||
entry->path = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.modules.%s.path", NULL, module);
|
||||
"%s.plugins.pkcs11.modules.%s.path", NULL, lib->ns, module);
|
||||
if (!entry->path)
|
||||
{
|
||||
DBG1(DBG_CFG, "PKCS11 module '%s' lacks library path", module);
|
||||
@@ -355,8 +355,8 @@ pkcs11_manager_t *pkcs11_manager_create(pkcs11_manager_token_event_t cb,
|
||||
}
|
||||
entry->lib = pkcs11_library_create(module, entry->path,
|
||||
lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.modules.%s.os_locking",
|
||||
FALSE, module));
|
||||
"%s.plugins.pkcs11.modules.%s.os_locking",
|
||||
FALSE, lib->ns, module));
|
||||
if (!entry->lib)
|
||||
{
|
||||
free(entry);
|
||||
|
||||
@@ -83,8 +83,8 @@ static void token_event_cb(private_pkcs11_plugin_t *this, pkcs11_library_t *p11,
|
||||
if (add && this->handle_events)
|
||||
{
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.modules.%s.load_certs",
|
||||
TRUE, p11->get_name(p11)))
|
||||
"%s.plugins.pkcs11.modules.%s.load_certs",
|
||||
TRUE, lib->ns, p11->get_name(p11)))
|
||||
{
|
||||
creds = pkcs11_creds_create(p11, slot);
|
||||
if (creds)
|
||||
@@ -174,8 +174,8 @@ static bool handle_certs(private_pkcs11_plugin_t *this,
|
||||
METHOD(plugin_t, reload, bool,
|
||||
private_pkcs11_plugin_t *this)
|
||||
{
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.reload_certs", FALSE))
|
||||
if (lib->settings->get_bool(lib->settings, "%s.plugins.pkcs11.reload_certs",
|
||||
FALSE, lib->ns))
|
||||
{
|
||||
DBG1(DBG_CFG, "reloading certificates from PKCS#11 tokens");
|
||||
handle_certs(this, NULL, FALSE, NULL);
|
||||
@@ -247,28 +247,28 @@ METHOD(plugin_t, get_features, int,
|
||||
if (!count)
|
||||
{ /* initialize only once */
|
||||
bool use_ecc = lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.use_ecc", FALSE);
|
||||
"%s.plugins.pkcs11.use_ecc", FALSE, lib->ns);
|
||||
plugin_features_add(f, f_manager, countof(f_manager), &count);
|
||||
/* private key handling for EC keys is not disabled by use_ecc */
|
||||
plugin_features_add(f, f_privkey, countof(f_privkey), &count);
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.use_pubkey", FALSE))
|
||||
"%s.plugins.pkcs11.use_pubkey", FALSE, lib->ns))
|
||||
{
|
||||
plugin_features_add(f, f_pubkey, countof(f_pubkey) - (use_ecc ? 0 : 1),
|
||||
&count);
|
||||
}
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.use_hasher", FALSE))
|
||||
"%s.plugins.pkcs11.use_hasher", FALSE, lib->ns))
|
||||
{
|
||||
plugin_features_add(f, f_hash, countof(f_hash), &count);
|
||||
}
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.use_rng", FALSE))
|
||||
"%s.plugins.pkcs11.use_rng", FALSE, lib->ns))
|
||||
{
|
||||
plugin_features_add(f, f_rng, countof(f_rng), &count);
|
||||
}
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.pkcs11.use_dh", FALSE))
|
||||
"%s.plugins.pkcs11.use_dh", FALSE, lib->ns))
|
||||
{
|
||||
plugin_features_add(f, f_dh, countof(f_dh), &count);
|
||||
if (use_ecc)
|
||||
|
||||
@@ -143,11 +143,11 @@ plugin_t *random_plugin_create()
|
||||
);
|
||||
|
||||
strong_equals_true = lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.plugins.random.strong_equals_true", FALSE);
|
||||
"%s.plugins.random.strong_equals_true", FALSE, lib->ns);
|
||||
urandom_file = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.random.urandom", DEV_URANDOM);
|
||||
"%s.plugins.random.urandom", DEV_URANDOM, lib->ns);
|
||||
random_file = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.random.random", DEV_RANDOM);
|
||||
"%s.plugins.random.random", DEV_RANDOM, lib->ns);
|
||||
if (!open_dev(urandom_file, &dev_urandom) ||
|
||||
!open_dev(random_file, &dev_random))
|
||||
{
|
||||
|
||||
@@ -97,14 +97,14 @@ resolver_t *unbound_resolver_create(void)
|
||||
char *resolv_conf, *trust_anchors, *dlv_anchors;
|
||||
|
||||
resolv_conf = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.unbound.resolv_conf",
|
||||
RESOLV_CONF_FILE);
|
||||
"%s.plugins.unbound.resolv_conf",
|
||||
RESOLV_CONF_FILE, lib->ns);
|
||||
trust_anchors = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.unbound.trust_anchors",
|
||||
TRUST_ANCHOR_FILE);
|
||||
"%s.plugins.unbound.trust_anchors",
|
||||
TRUST_ANCHOR_FILE, lib->ns);
|
||||
dlv_anchors = lib->settings->get_str(lib->settings,
|
||||
"libstrongswan.plugins.unbound.dlv_anchors",
|
||||
NULL);
|
||||
"%s.plugins.unbound.dlv_anchors",
|
||||
NULL, lib->ns);
|
||||
|
||||
INIT(this,
|
||||
.public = {
|
||||
|
||||
@@ -1446,7 +1446,7 @@ static bool parse_certificate(private_x509_cert_t *this)
|
||||
break;
|
||||
default:
|
||||
if (critical && lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.x509.enforce_critical", TRUE))
|
||||
"%s.x509.enforce_critical", TRUE, lib->ns))
|
||||
{
|
||||
DBG1(DBG_ASN, "critical '%s' extension not supported",
|
||||
(extn_oid == OID_UNKNOWN) ? "unknown" :
|
||||
|
||||
@@ -325,7 +325,7 @@ static bool parse(private_x509_crl_t *this)
|
||||
break;
|
||||
default:
|
||||
if (critical && lib->settings->get_bool(lib->settings,
|
||||
"libstrongswan.x509.enforce_critical", TRUE))
|
||||
"%s.x509.enforce_critical", TRUE, lib->ns))
|
||||
{
|
||||
DBG1(DBG_ASN, "critical '%s' extension not supported",
|
||||
(extn_oid == OID_UNKNOWN) ? "unknown" :
|
||||
|
||||
Reference in New Issue
Block a user