aredn/files/www/cgi-bin/vpn

#!/usr/bin/perl
$debug = 1;
BEGIN {push @INC, '/www/cgi-bin'};
use perlfunc;
use ucifunc;
use tunfunc;

$VPNVER="1.0";
$config = nvram_get("config");
$node = nvram_get("node");
$node = "NOCALL" if $node eq "";
$unode = uc $node;   # UPPER CASE NODENAME
#$vpncfile = "/etc/vpnclients";
#$tmpdir = "/tmp/web/vpn";
#$tmpvtundsconf = "${tmpdir}/vtundsrv.conf.tmp";
#$tmpconnfile = "${tmpdir}/vpnclients";
#$tsfile = "/etc/tunnel.server";
#$tmptsfile = "${tmpdir}/tunnel.server.tmp";

read_postdata();

#################
# page checks
#################
if($parms{button_reboot})
{
    system "/sbin/reboot";
} 

if($parms{button_install})
{
    install_vtun();
} 

reboot_required() if($config eq "" or -e "/tmp/reboot-required");
vpn_setup_required() unless(-e "/usr/sbin/vtund" );
get_active_tun();

#################
# If RESET, revert the UCI file
#################
if($parms{button_reset})
{
    ($rc,$res)=&uci_revert("vtun");
    # ($rc,$res)=&uci_delete_sectiontype("vtun","network");
    # $rc=&uci_commit("vtun");
}

#################
# get vtun network address
#################
@netw = ();
@netw = get_server_network_address();

#################
# If RESET or FIRST TIME, load clients/servers from file into parms
#################
if($parms{button_reset} or not $parms{reload})
{
    # load clients from UCI
    &get_client_info();

    $parms{server_net1}=@netw[2];
    $parms{server_net2}=@netw[3];
    
    # initialize the "add" entries to clear them
    foreach $var (qw(client_add_enabled client_add_name client_add_passwd))
    {
        $parms{$var} = "";
        $parms{$var} = "0" if($var eq 'client_add_enabled');
    }
}


#################
# load clients from FORM and validate
#################
for($i =0 , @list = (); $i < $parms{client_num}; $i++) { push @list, $i }
push @list, "_add";
$client_num = 0;

foreach $val (@list)
{
    foreach $var (qw(enabled name passwd))
    {
        $varname = "client${val}_$var";
        $parms{$varname} = "0" if($val eq "enabled" and $parms{$varname} eq "");
        $parms{$varname} = "" unless $parms{$varname};
        $parms{$varname} =~ s/^\s+//;
        $parms{$varname} =~ s/\s+$//;
        if($val ne "_add")
        {
            if($parms{$varname} eq "" and ($var eq "enabled"))
            {
                $parms{$varname} = "0"; 
            }
        }
        eval sprintf("\$%s = \$parms{%s}", $var, $varname);
    }


    # Validate ADDed values    
    if($val eq "_add")
    {
        # skip any null values on add or save
        next unless ($enabled or $name or $passwd) and ($parms{client_add} or $parms{button_save});
    }   # no delete capabilities as net renumbering is not allowed


    if($val eq "_add" and $parm{button_save})
    {
        push @cli_err, "$val this client must be added or cleared out before saving changes";
        next;
    }

    push @cli_err, "A client name is required" if($name eq "");
    push @cli_err, "A client password is required" if($passwd eq "");

    next if $val eq "_add" and @cli_err and $cli_err[-1] =~ /^$val /;


    $parms{"client${client_num}_enabled"} = $enabled;
    $parms{"client${client_num}_name"} = uc $name;
    $parms{"client${client_num}_passwd"} = $passwd;

    # Commit the data for this client
    $client_num++;
    
    # Clear out the ADD values
    if($val eq "_add")
    {
        foreach $var (qw(net enabled name passwd))
            {
                $parms{"client_add_${var}"} = "";
            }   
    }
}

#################
# SAVE the clients into the TMP file --- CHANGE TO UCI
#################
system "rm -f $tmpconnfile";
open(FILE, ">$tmpconnfile");
for($i = 1; $i <= $client_num; $i++)
{
    printf FILE "%d|%s|%s\n",
        $parms{"client${i}_enable"},
        $parms{"client${i}_name"},
        $parms{"client${i}_pass"}
}
close(FILE);

#################
# SAVE the server network numbers into the TMP file --- CHANGE UCI
#################
#if(($parms{server_net1} ~~ [0..252]) and ($parms{server_net2} ~~ [0..252]))
#{
    system "rm -f $tmptsfile";
    open(FILE, ">$tmptsfile");
    printf FILE "%d.%d.%d.%d",172,31,$parms{server_net1},$parms{server_net2};
    close(FILE);
    $netw[2]=$parms{server_net1};
    $netw[3]=$parms{server_net2};
#}
#else
#{
#    push @cli_err, "The server net values must be between 0-254!";
#    $parms{server_net1}=$netw[2];
#    $parms{server_net2}=$netw[3];
#}


$parms{client_num} = $client_num;


#################
# save configuration  --- CHANGE UCI
#################
if($parms{button_save} and not (@cli_err or @serv_err))
{
    # save the tunnel.server ip address to file
    #system "cp -f $tmptsfile $tsfile";
    #system "cp -f $tmpconnfile $vpncfile";
    push(@errors,"Problem committing UCI vtun") if &uci_commit("vtun");
    
    # RESTART VTUNDSRV  /etc/init.d/vtundsrv restart
    # ./vtundsrv stop
    # ./vtundsrv start

    unless($debug == 3)
    {
        push(@errors,"problem with vtundsrv") if system "/etc/init.d/vtundsrv restart > /dev/null 2>&1";
    }
}


######################################################################################
# generate the page
######################################################################################
http_header() unless $debug == 2;
html_header("$node setup", 1);

print "<body><center>\n";
print "<form method=post action=/cgi-bin/vpn enctype='multipart/form-data'>\n" unless $debug == 2;
print "<form method=post action=test>\n" if $debug == 2;
print "<table width=790>\n";

#################
# Navigation bar
#################
print "<tr><td>\n";
navbar("vpn");
print "</td></tr>\n";

#################
# control buttons
#################
print "<tr><td align=center>";
print "<a href='/help.html#vpn' target='_blank'>Help</a>";
print "&nbsp;&nbsp;&nbsp;\n";
print "<input type=submit name=button_save value='Save Changes' title='Save and use these settings now (takes about 20 seconds)'>&nbsp;\n";
print "<input type=submit name=button_reset value='Reset Values' title='Revert to the last saved settings'>&nbsp;\n";
print "<input type=submit name=button_refresh value='Refresh' title='Refresh this page'>&nbsp;\n";
print "<tr><td>&nbsp;</td></tr>\n";
push @hidden, "<input type=hidden name=reload value=1></td></tr>";

#################
# messages
#################
if(@cli_err)
{
    print "<tr><td align=center><b>ERROR:<br>";
    foreach(@cli_err) { print "$_<br>" }
    print "</b></td></tr>\n";
}

if($parms{button_save})
{
    if(@cli_err)
    {
	print "<tr><td align=center><b>Configuration NOT saved!</b></td></tr>\n";
    }
    elsif(@errors)
    {
	print "<tr><td align=center><b>Configuration saved, however:<br>";
	foreach(@errors) { print "$_<br>" }
	print "</b></td></tr>\n";
    }
    else
    {
	print "<tr><td align=center><b>Configuration saved and is now active.</b></td></tr>\n";
    }

    print "<tr><td>&nbsp;</td></tr>\n";
}

#################
# everything else
#################
if($config eq "mesh")
{  
    print "<tr><td align=center valign=top>\n";
    &print_vpn_clients();
    print "</td></tr>\n";   
    print "<tr><td><hr></td></tr>\n";
}
print "</table>\n";
print "<p style='font-size:8px'>Tunnel v${VPNVER}</p>";
push @hidden, "<input type=hidden name=client_num value=$parms{client_num}>";

#################
# add hidden form fields
#################
foreach(@hidden) { print "$_\n" }

#################
# close the form
#################
print "</form></center>\n";
show_debug_info();

#################
# close the html
#################
print "</body></html>\n";
exit;


##################
# page subsections
##################

######################################################
# List the clients allowed to connect to this server # - CHANGE TO UCI
######################################################
sub print_vpn_clients()
{
    print "<table class=tun_client_table cellpadding=0 cellspacing=0>";
    
    print "<br /><tr class=tun_network_row><td colspan=6 align=center valign=top>Tunnel Server Network: ";   
    printf("%d.%d.",@netw[0],@netw[1]);
    print "<input type='text' name='server_net1' size='3' maxlen='3' value='@netw[2]' onChange='form.submit()' >";
    print ".";
    print "<input type='text' name='server_net2' size='3' maxlen='3' value='@netw[3]' onChange='form.submit()'>";
    print " (must be between 0 and 254)</td></tr>";
    print "<tr><th colspan=6><hr></th></tr>\n";
    print "<tr><th colspan=6>Allow the following clients to connect to this server:</th></tr>\n";
    print "<tr><th>Enabled?</th><th>Client</th><th>Pwd</th><th>Net</th><th>Active&nbsp;</td><th>Action</th></tr>\n";
    
    for($i = 0, @list = (); $i < $parms{client_num}; ++$i) { push @list, $i };

    push @list, "_add" unless($parms{client_num} > 9);

    $cnum=0;
    foreach $val (@list)
    {
        foreach $var (qw(enabled name passwd))
        {
            eval sprintf("\$%s = \$parms{client%s_%s}", $var, $val, $var);
        }

        print "<tr class=tun_client_add_row><td height=10></td></tr>\n" if $val eq "_add" and scalar(@list) > 1;
        print "<tr class=tun_client_row>";
        print "<td>";

        # Required to be first, so, if the checkbox is cleared, a value will still POST
        print "<input type='hidden' name='client${val}_enabled' value='0'>" unless($val eq "_add");
        print "<input type='checkbox' name='client${val}_enabled' value='1'";
        print " onChange='form.submit()'" unless $val eq "_add";
        print " checked='checked'" if $enabled;
        print " title='enable this client'></td>";
 
        print "<td><input type=text size=25 name=client${val}_name value='$name'";
		print " onChange='form.submit()'" unless $val eq "_add";
        # print " disabled" unless $val eq "_add";
		print " title='client name'></td>";

        print "<td>&nbsp;&nbsp;<input type=text size=20 name=client${val}_passwd value='$passwd' ";
        print " onChange='form.submit()'" unless $val eq "_add";
        print " title='client password'";
        #print " disabled" unless $val eq "_add";
        print "></td>";

        # handle rollover of netw[3]
        if(@netw[3]+($cnum * 4) > 252) {
            @netw[2]++;
            $netw[3] = 0;
            $net=0;
            $cnum=0;
        } else {
            $net=$cnum;
        }
        
        if($val eq "_add") { $lastnet=@netw[3]+(($net) * 4); }
        else { $lastnet=@netw[3]+($net * 4); }
        $fullnet=sprintf("%d.%d.%d.%d",@netw[0],@netw[1],@netw[2],$lastnet);
        
        print "<td>&nbsp;$fullnet</td>";       
        print "<td>&nbsp;"; 
        print "<img class='tun_client_active_img' src='/dot.png'/>" if((&is_tunnel_active($name)) && ($val ne "_add"));
        print "</td>";
        print "<td><input type=submit name=client_add value=Add title='Add this client'>" if($val eq "_add");
        print "</td>";
        print "<td class='tun_client_mailto'><a href='mailto:?subject=AREDN%20Tunnel%20Connection&body=Your%20connection%20details:%0D%0AName:%20$name%0D%0APassword:%20$pass%0D%0ANetwork:%20$fullnet%0D%0AServer%20address:%20<your%20server%20dns%20name>'>Email</a></td>" unless($val eq "_add");
        print "</tr>\n";

        # display any errors
        while(@cli_err and $cli_err[0] =~ /^$val /)
        {
            $err = shift @cli_err;
            $err =~ s/^\S+ //;
            print "<tr class=tun_client_error_row><th colspan=4>$err</th></tr>\n";
        }

        #push @hidden, "<input type='hidden' name='client${val}_enable' value='0'>" unless($val eq "_add");
        
        print "<tr><td colspan=4 height=4></td></tr>\n";
		$cnum++;
    }
    print "</table>\n";
}

#################################
# load client info from UCI
#################################
sub get_client_info()
{
    my @clients=&uci_get_all_by_sectiontype("vtun","client");
    foreach $c (0..@clients-1)
    {
        foreach $var (qw(enabled name passwd))
        {
            $parms{"client${c}_$var"} = @clients[$c]->{$var};
            $parms{"client${c}_$var"} = "0" if($parms{"client${c}_$var"} eq "");
        }
    }

    $parms{client_num} = scalar(@clients);
}

sub DEBUGEXIT()
{
    my ($text) = @_;
    http_header();
    html_header("$node setup", 1);
    print "DEBUG-";
    print $text;
    print "</body>";
    exit;
}