1 #!/bin/sh /etc/rc.common
8 config_get port
$1 port
"4443"
9 config_get max_clients
$1 max_clients
"8"
10 config_get max_same
$1 max_same
"2"
11 config_get dpd
$1 dpd
"120"
12 config_get predictable_ips
$1 predictable_ips
"1"
13 config_get udp
$1 udp
"1"
14 config_get auth
$1 auth
"plain"
15 config_get cisco_compat
$1 cisco_compat
"1"
16 config_get ipaddr
$1 ipaddr
"192.168.100.0"
17 config_get netmask
$1 netmask
"255.255.255.0"
18 config_get ip6addr
$1 ip6addr
""
20 test $predictable_ips = "0" && predictable_ips
="false"
21 test $predictable_ips = "1" && predictable_ips
="true"
22 test $cisco_compat = "0" && cisco_compat
="false"
23 test $cisco_compat = "1" && cisco_compat
="true"
24 test $udp = "0" && udp
="#"
25 test $udp = "1" && udp
=""
26 test -z $ip6addr && enable_ipv6
="#"
28 ipv6_addr
=`echo $ip6addr|cut -d '/' -f 1`
29 ipv6_prefix
=`echo $ip6addr|cut -d '/' -f 2`
31 test $auth = "plain" && authsuffix
="\[/var/etc/ocpasswd\]"
34 hostname
=`uci show ddns|grep domain|head -1|cut -d '=' -f 2`
35 [ -n "$hostname" ] && dyndns
="true"
38 sed -e "s/|PORT|/$port/g" \
39 -e "s/|MAX_CLIENTS|/$max_clients/g" \
40 -e "s/|MAX_SAME|/$max_same/g" \
42 -e "s#|AUTH|#$auth$authsuffix#g" \
43 -e "s#|DYNDNS|#$dyndns#g" \
44 -e "s/|PREDICTABLE_IPS|/$predictable_ips/g" \
45 -e "s/|CISCO_COMPAT|/$cisco_compat/g" \
47 -e "s/|IPV4ADDR|/$ipaddr/g" \
48 -e "s/|NETMASK|/$netmask/g" \
49 -e "s/|IPV6ADDR|/$ipv6_addr/g" \
50 -e "s/|IPV6PREFIX|/$ipv6_prefix/g" \
51 -e "s/|ENABLE_IPV6|/$enable_ipv6/g" \
52 /etc
/ocserv
/ocserv.conf.template
> /var
/etc
/ocserv.conf
60 config_get name
$1 name
61 config_get group
$1 group
62 config_get password
$1 password
64 [ -z "$group" ] && group
='*'
65 [ -z "$name" -o -z "$password" ] && return
67 echo "$name:$group:$password" >> /var
/etc
/ocpasswd
74 config_get netmask
$1 netmask
76 [ -z "$ip" -o -z "$netmask" ] && return
78 echo "route = $ip/$netmask" >> /var
/etc
/ocserv.conf
86 [ -z "$ip" ] && return
88 echo "dns = $ip" >> /var
/etc
/ocserv.conf
94 hostname
=`uci show ddns|grep domain|head -1|cut -d '=' -f 2`
95 [ -z "$hostname" ] && hostname
=`uci get system.@system[0].hostname`
97 [ ! -f /etc
/ocserv
/ca-key.pem
] && [ -x /usr
/bin
/certtool
] && {
98 logger
-t ocserv
"Generating CA certificate..."
99 mkdir
-p /etc
/ocserv
/pki
/
100 certtool
--bits 2048 --generate-privkey --outfile /etc
/ocserv
/ca-key.pem
>/dev
/null
2>&1
101 echo "cn=$hostname CA" >/etc
/ocserv
/pki
/ca.tmpl
102 echo "expiration_days=-1" >>/etc
/ocserv
/pki
/ca.tmpl
103 echo "serial=1" >>/etc
/ocserv
/pki
/ca.tmpl
104 echo "ca" >>/etc
/ocserv
/pki
/ca.tmpl
105 echo "cert_signing_key" >>/etc
/ocserv
/pki
/ca.tmpl
107 certtool
--template /etc
/ocserv
/pki
/ca.tmpl \
108 --generate-self-signed --load-privkey /etc
/ocserv
/ca-key.pem \
109 --outfile /etc
/ocserv
/ca.pem
>/dev
/null
2>&1
112 #generate server certificate/key
113 [ ! -f /etc
/ocserv
/server-key.pem
] && [ -x /usr
/bin
/certtool
] && {
114 logger
-t ocserv
"Generating server certificate..."
115 mkdir
-p /etc
/ocserv
/pki
/
116 certtool
--bits 2048 --generate-privkey --outfile /etc
/ocserv
/server-key.pem
>/dev
/null
2>&1
117 echo "cn=$hostname" >/etc
/ocserv
/pki
/server.tmpl
118 echo "serial=2" >>/etc
/ocserv
/pki
/server.tmpl
119 echo "expiration_days=-1" >>/etc
/ocserv
/pki
/server.tmpl
120 echo "signing_key" >>/etc
/ocserv
/pki
/server.tmpl
121 echo "encryption_key" >>/etc
/ocserv
/pki
/server.tmpl
122 certtool
--template /etc
/ocserv
/pki
/server.tmpl \
123 --generate-certificate --load-privkey /etc
/ocserv
/server-key.pem \
124 --load-ca-certificate /etc
/ocserv
/ca.pem
--load-ca-privkey \
125 /etc
/ocserv
/ca-key.pem
--outfile /etc
/ocserv
/server-cert.pem
>/dev
/null
2>&1
128 [ -f /var
/run
/ocserv.pid
] ||
{
129 touch /var
/run
/ocserv.pid
130 chown ocserv
:ocserv
/var
/run
/ocserv.pid
132 [ -d /var
/lib
/ocserv
] ||
{
133 mkdir
-m 0755 -p /var
/lib
/ocserv
134 chmod 0700 /var
/lib
/ocserv
135 chown ocserv
:ocserv
/var
/lib
/ocserv
140 rm -f /var
/etc
/ocserv.conf
141 touch /var
/etc
/ocserv.conf
143 config_foreach setup_routes routes
144 config_foreach setup_dns dns
146 rm -f /var
/etc
/ocpasswd
147 touch /var
/etc
/ocpasswd
148 chmod 600 /var
/etc
/ocpasswd
149 config_foreach setup_users ocservusers
151 service_start
/usr
/sbin
/ocserv
-c /var
/etc
/ocserv.conf
155 service_stop
/usr
/sbin
/ocserv
159 rm -f /var
/etc
/ocpasswd
160 touch /var
/etc
/ocpasswd
161 chmod 600 /var
/etc
/ocpasswd
162 config_foreach setup_users ocservusers
164 /usr
/bin
/occtl show status
>/dev
/null
2>&1
168 /usr
/bin
/occtl reload