Fix parsing of option type Kint (integer, stored in K). Bug 2348
[exim.git] / src / src / readconf.c
CommitLineData
059ec3d9
PH
1/*************************************************
2* Exim - an Internet mail transport agent *
3*************************************************/
4
f9ba5e22 5/* Copyright (c) University of Cambridge 1995 - 2018 */
059ec3d9
PH
6/* See the file NOTICE for conditions of use and distribution. */
7
8/* Functions for reading the configuration file, and for displaying
9overall configuration values. Thanks to Brian Candler for the original
10implementation of the conditional .ifdef etc. */
11
12#include "exim.h"
13
d185889f 14#ifdef MACRO_PREDEF
5f69a529 15# include "macro_predef.h"
d185889f 16#endif
059ec3d9 17
8442641e
JH
18#define READCONF_DEBUG if (FALSE) /* Change to TRUE to enable */
19
20
d185889f
JH
21static uschar * syslog_facility_str;
22static void fn_smtp_receive_timeout(const uschar *, const uschar *);
059ec3d9
PH
23
24/*************************************************
25* Main configuration options *
26*************************************************/
27
28/* The list of options that can be set in the main configuration file. This
29must be in alphabetic order because it is searched by binary chop. */
30
31static optionlist optionlist_config[] = {
32 { "*set_exim_group", opt_bool|opt_hidden, &exim_gid_set },
33 { "*set_exim_user", opt_bool|opt_hidden, &exim_uid_set },
34 { "*set_system_filter_group", opt_bool|opt_hidden, &system_filter_gid_set },
35 { "*set_system_filter_user", opt_bool|opt_hidden, &system_filter_uid_set },
36 { "accept_8bitmime", opt_bool, &accept_8bitmime },
37 { "acl_not_smtp", opt_stringptr, &acl_not_smtp },
54cdb463
PH
38#ifdef WITH_CONTENT_SCAN
39 { "acl_not_smtp_mime", opt_stringptr, &acl_not_smtp_mime },
40#endif
45b91596 41 { "acl_not_smtp_start", opt_stringptr, &acl_not_smtp_start },
059ec3d9
PH
42 { "acl_smtp_auth", opt_stringptr, &acl_smtp_auth },
43 { "acl_smtp_connect", opt_stringptr, &acl_smtp_connect },
44 { "acl_smtp_data", opt_stringptr, &acl_smtp_data },
8ccd00b1 45#ifndef DISABLE_PRDR
fd98a5c6
JH
46 { "acl_smtp_data_prdr", opt_stringptr, &acl_smtp_data_prdr },
47#endif
80a47a2c
TK
48#ifndef DISABLE_DKIM
49 { "acl_smtp_dkim", opt_stringptr, &acl_smtp_dkim },
50#endif
059ec3d9
PH
51 { "acl_smtp_etrn", opt_stringptr, &acl_smtp_etrn },
52 { "acl_smtp_expn", opt_stringptr, &acl_smtp_expn },
53 { "acl_smtp_helo", opt_stringptr, &acl_smtp_helo },
54 { "acl_smtp_mail", opt_stringptr, &acl_smtp_mail },
55 { "acl_smtp_mailauth", opt_stringptr, &acl_smtp_mailauth },
8523533c
TK
56#ifdef WITH_CONTENT_SCAN
57 { "acl_smtp_mime", opt_stringptr, &acl_smtp_mime },
58#endif
8f128379 59 { "acl_smtp_notquit", opt_stringptr, &acl_smtp_notquit },
059ec3d9
PH
60 { "acl_smtp_predata", opt_stringptr, &acl_smtp_predata },
61 { "acl_smtp_quit", opt_stringptr, &acl_smtp_quit },
62 { "acl_smtp_rcpt", opt_stringptr, &acl_smtp_rcpt },
63#ifdef SUPPORT_TLS
64 { "acl_smtp_starttls", opt_stringptr, &acl_smtp_starttls },
65#endif
66 { "acl_smtp_vrfy", opt_stringptr, &acl_smtp_vrfy },
bc3c7bb7 67 { "add_environment", opt_stringptr, &add_environment },
059ec3d9
PH
68 { "admin_groups", opt_gidlist, &admin_groups },
69 { "allow_domain_literals", opt_bool, &allow_domain_literals },
70 { "allow_mx_to_ip", opt_bool, &allow_mx_to_ip },
71 { "allow_utf8_domains", opt_bool, &allow_utf8_domains },
72 { "auth_advertise_hosts", opt_stringptr, &auth_advertise_hosts },
73 { "auto_thaw", opt_time, &auto_thaw },
8523533c
TK
74#ifdef WITH_CONTENT_SCAN
75 { "av_scanner", opt_stringptr, &av_scanner },
76#endif
059ec3d9 77 { "bi_command", opt_stringptr, &bi_command },
8523533c
TK
78#ifdef EXPERIMENTAL_BRIGHTMAIL
79 { "bmi_config_file", opt_stringptr, &bmi_config_file },
80#endif
059ec3d9
PH
81 { "bounce_message_file", opt_stringptr, &bounce_message_file },
82 { "bounce_message_text", opt_stringptr, &bounce_message_text },
83 { "bounce_return_body", opt_bool, &bounce_return_body },
62b7cd08 84 { "bounce_return_linesize_limit", opt_mkint, &bounce_return_linesize_limit },
059ec3d9
PH
85 { "bounce_return_message", opt_bool, &bounce_return_message },
86 { "bounce_return_size_limit", opt_mkint, &bounce_return_size_limit },
87 { "bounce_sender_authentication",opt_stringptr,&bounce_sender_authentication },
88 { "callout_domain_negative_expire", opt_time, &callout_cache_domain_negative_expire },
89 { "callout_domain_positive_expire", opt_time, &callout_cache_domain_positive_expire },
90 { "callout_negative_expire", opt_time, &callout_cache_negative_expire },
91 { "callout_positive_expire", opt_time, &callout_cache_positive_expire },
92 { "callout_random_local_part",opt_stringptr, &callout_random_local_part },
93 { "check_log_inodes", opt_int, &check_log_inodes },
94 { "check_log_space", opt_Kint, &check_log_space },
a0d6ba8a 95 { "check_rfc2047_length", opt_bool, &check_rfc2047_length },
059ec3d9
PH
96 { "check_spool_inodes", opt_int, &check_spool_inodes },
97 { "check_spool_space", opt_Kint, &check_spool_space },
aa368db3 98 { "chunking_advertise_hosts", opt_stringptr, &chunking_advertise_hosts },
f33875c3 99 { "commandline_checks_require_admin", opt_bool,&commandline_checks_require_admin },
059ec3d9
PH
100 { "daemon_smtp_port", opt_stringptr|opt_hidden, &daemon_smtp_port },
101 { "daemon_smtp_ports", opt_stringptr, &daemon_smtp_port },
4aee0225
PH
102 { "daemon_startup_retries", opt_int, &daemon_startup_retries },
103 { "daemon_startup_sleep", opt_time, &daemon_startup_sleep },
6a8f9482
TK
104#ifdef EXPERIMENTAL_DCC
105 { "dcc_direct_add_header", opt_bool, &dcc_direct_add_header },
106 { "dccifd_address", opt_stringptr, &dccifd_address },
107 { "dccifd_options", opt_stringptr, &dccifd_options },
108#endif
64073d9c 109 { "debug_store", opt_bool, &debug_store },
059ec3d9
PH
110 { "delay_warning", opt_timelist, &delay_warning },
111 { "delay_warning_condition", opt_stringptr, &delay_warning_condition },
112 { "deliver_drop_privilege", opt_bool, &deliver_drop_privilege },
113 { "deliver_queue_load_max", opt_fixed, &deliver_queue_load_max },
114 { "delivery_date_remove", opt_bool, &delivery_date_remove },
54fc8428
PH
115#ifdef ENABLE_DISABLE_FSYNC
116 { "disable_fsync", opt_bool, &disable_fsync },
117#endif
7e66e54d 118 { "disable_ipv6", opt_bool, &disable_ipv6 },
80a47a2c
TK
119#ifndef DISABLE_DKIM
120 { "dkim_verify_signers", opt_stringptr, &dkim_verify_signers },
121#endif
4840604e
TL
122#ifdef EXPERIMENTAL_DMARC
123 { "dmarc_forensic_sender", opt_stringptr, &dmarc_forensic_sender },
124 { "dmarc_history_file", opt_stringptr, &dmarc_history_file },
125 { "dmarc_tld_file", opt_stringptr, &dmarc_tld_file },
126#endif
059ec3d9
PH
127 { "dns_again_means_nonexist", opt_stringptr, &dns_again_means_nonexist },
128 { "dns_check_names_pattern", opt_stringptr, &check_dns_names_pattern },
d8d9f930 129 { "dns_cname_loops", opt_int, &dns_cname_loops },
e5a9dba6
PH
130 { "dns_csa_search_limit", opt_int, &dns_csa_search_limit },
131 { "dns_csa_use_reverse", opt_bool, &dns_csa_use_reverse },
83712b39 132 { "dns_dnssec_ok", opt_int, &dns_dnssec_ok },
059ec3d9
PH
133 { "dns_ipv4_lookup", opt_stringptr, &dns_ipv4_lookup },
134 { "dns_retrans", opt_time, &dns_retrans },
135 { "dns_retry", opt_int, &dns_retry },
9820a77f 136 { "dns_trust_aa", opt_stringptr, &dns_trust_aa },
e97d1f08 137 { "dns_use_edns0", opt_int, &dns_use_edns0 },
4c04137d 138 /* This option is now a no-op, retained for compatibility */
059ec3d9
PH
139 { "drop_cr", opt_bool, &drop_cr },
140/*********************************************************/
6c1c3d1d 141 { "dsn_advertise_hosts", opt_stringptr, &dsn_advertise_hosts },
0e22dfd1 142 { "dsn_from", opt_stringptr, &dsn_from },
059ec3d9
PH
143 { "envelope_to_remove", opt_bool, &envelope_to_remove },
144 { "errors_copy", opt_stringptr, &errors_copy },
145 { "errors_reply_to", opt_stringptr, &errors_reply_to },
0cbf2b82 146#ifndef DISABLE_EVENT
774ef2d7
JH
147 { "event_action", opt_stringptr, &event_action },
148#endif
059ec3d9
PH
149 { "exim_group", opt_gid, &exim_gid },
150 { "exim_path", opt_stringptr, &exim_path },
151 { "exim_user", opt_uid, &exim_uid },
152 { "extra_local_interfaces", opt_stringptr, &extra_local_interfaces },
153 { "extract_addresses_remove_arguments", opt_bool, &extract_addresses_remove_arguments },
154 { "finduser_retries", opt_int, &finduser_retries },
155 { "freeze_tell", opt_stringptr, &freeze_tell },
156 { "gecos_name", opt_stringptr, &gecos_name },
157 { "gecos_pattern", opt_stringptr, &gecos_pattern },
83da1223 158#ifdef SUPPORT_TLS
2519e60d 159 { "gnutls_allow_auto_pkcs11", opt_bool, &gnutls_allow_auto_pkcs11 },
e6060e2c 160 { "gnutls_compat_mode", opt_bool, &gnutls_compat_mode },
83da1223 161#endif
059ec3d9
PH
162 { "header_line_maxsize", opt_int, &header_line_maxsize },
163 { "header_maxsize", opt_int, &header_maxsize },
164 { "headers_charset", opt_stringptr, &headers_charset },
165 { "helo_accept_junk_hosts", opt_stringptr, &helo_accept_junk_hosts },
166 { "helo_allow_chars", opt_stringptr, &helo_allow_chars },
167 { "helo_lookup_domains", opt_stringptr, &helo_lookup_domains },
168 { "helo_try_verify_hosts", opt_stringptr, &helo_try_verify_hosts },
169 { "helo_verify_hosts", opt_stringptr, &helo_verify_hosts },
170 { "hold_domains", opt_stringptr, &hold_domains },
171 { "host_lookup", opt_stringptr, &host_lookup },
172 { "host_lookup_order", opt_stringptr, &host_lookup_order },
173 { "host_reject_connection", opt_stringptr, &host_reject_connection },
174 { "hosts_connection_nolog", opt_stringptr, &hosts_connection_nolog },
cee5f132 175#ifdef SUPPORT_PROXY
7a2fa0bc 176 { "hosts_proxy", opt_stringptr, &hosts_proxy },
cee5f132 177#endif
059ec3d9
PH
178 { "hosts_treat_as_local", opt_stringptr, &hosts_treat_as_local },
179#ifdef LOOKUP_IBASE
180 { "ibase_servers", opt_stringptr, &ibase_servers },
181#endif
182 { "ignore_bounce_errors_after", opt_time, &ignore_bounce_errors_after },
183 { "ignore_fromline_hosts", opt_stringptr, &ignore_fromline_hosts },
184 { "ignore_fromline_local", opt_bool, &ignore_fromline_local },
bc3c7bb7 185 { "keep_environment", opt_stringptr, &keep_environment },
059ec3d9
PH
186 { "keep_malformed", opt_time, &keep_malformed },
187#ifdef LOOKUP_LDAP
bc19a55b
PP
188 { "ldap_ca_cert_dir", opt_stringptr, &eldap_ca_cert_dir },
189 { "ldap_ca_cert_file", opt_stringptr, &eldap_ca_cert_file },
190 { "ldap_cert_file", opt_stringptr, &eldap_cert_file },
191 { "ldap_cert_key", opt_stringptr, &eldap_cert_key },
192 { "ldap_cipher_suite", opt_stringptr, &eldap_cipher_suite },
059ec3d9 193 { "ldap_default_servers", opt_stringptr, &eldap_default_servers },
bc19a55b
PP
194 { "ldap_require_cert", opt_stringptr, &eldap_require_cert },
195 { "ldap_start_tls", opt_bool, &eldap_start_tls },
059ec3d9
PH
196 { "ldap_version", opt_int, &eldap_version },
197#endif
198 { "local_from_check", opt_bool, &local_from_check },
199 { "local_from_prefix", opt_stringptr, &local_from_prefix },
200 { "local_from_suffix", opt_stringptr, &local_from_suffix },
201 { "local_interfaces", opt_stringptr, &local_interfaces },
9723f966 202#ifdef HAVE_LOCAL_SCAN
059ec3d9 203 { "local_scan_timeout", opt_time, &local_scan_timeout },
9723f966 204#endif
059ec3d9
PH
205 { "local_sender_retain", opt_bool, &local_sender_retain },
206 { "localhost_number", opt_stringptr, &host_number_string },
207 { "log_file_path", opt_stringptr, &log_file_path },
208 { "log_selector", opt_stringptr, &log_selector_string },
209 { "log_timezone", opt_bool, &log_timezone },
210 { "lookup_open_max", opt_int, &lookup_open_max },
211 { "max_username_length", opt_int, &max_username_length },
ddea74fa 212 { "message_body_newlines", opt_bool, &message_body_newlines },
059ec3d9
PH
213 { "message_body_visible", opt_mkint, &message_body_visible },
214 { "message_id_header_domain", opt_stringptr, &message_id_domain },
215 { "message_id_header_text", opt_stringptr, &message_id_text },
216 { "message_logs", opt_bool, &message_logs },
217 { "message_size_limit", opt_stringptr, &message_size_limit },
218#ifdef SUPPORT_MOVE_FROZEN_MESSAGES
219 { "move_frozen_messages", opt_bool, &move_frozen_messages },
220#endif
221 { "mua_wrapper", opt_bool, &mua_wrapper },
222#ifdef LOOKUP_MYSQL
223 { "mysql_servers", opt_stringptr, &mysql_servers },
224#endif
225 { "never_users", opt_uidlist, &never_users },
77bb000f
PP
226#ifdef SUPPORT_TLS
227 { "openssl_options", opt_stringptr, &openssl_options },
228#endif
059ec3d9
PH
229#ifdef LOOKUP_ORACLE
230 { "oracle_servers", opt_stringptr, &oracle_servers },
231#endif
232 { "percent_hack_domains", opt_stringptr, &percent_hack_domains },
233#ifdef EXIM_PERL
234 { "perl_at_start", opt_bool, &opt_perl_at_start },
235 { "perl_startup", opt_stringptr, &opt_perl_startup },
2f680c0c 236 { "perl_taintmode", opt_bool, &opt_perl_taintmode },
059ec3d9
PH
237#endif
238#ifdef LOOKUP_PGSQL
239 { "pgsql_servers", opt_stringptr, &pgsql_servers },
240#endif
241 { "pid_file_path", opt_stringptr, &pid_file_path },
242 { "pipelining_advertise_hosts", opt_stringptr, &pipelining_advertise_hosts },
ee8b8090
JH
243#ifdef EXPERIMENTAL_PIPE_CONNECT
244 { "pipelining_connect_advertise_hosts", opt_stringptr,
245 &pipe_connect_advertise_hosts },
246#endif
8ccd00b1 247#ifndef DISABLE_PRDR
fd98a5c6
JH
248 { "prdr_enable", opt_bool, &prdr_enable },
249#endif
059ec3d9
PH
250 { "preserve_message_logs", opt_bool, &preserve_message_logs },
251 { "primary_hostname", opt_stringptr, &primary_hostname },
252 { "print_topbitchars", opt_bool, &print_topbitchars },
253 { "process_log_path", opt_stringptr, &process_log_path },
254 { "prod_requires_admin", opt_bool, &prod_requires_admin },
255 { "qualify_domain", opt_stringptr, &qualify_domain_sender },
256 { "qualify_recipient", opt_stringptr, &qualify_domain_recipient },
257 { "queue_domains", opt_stringptr, &queue_domains },
258 { "queue_list_requires_admin",opt_bool, &queue_list_requires_admin },
259 { "queue_only", opt_bool, &queue_only },
260 { "queue_only_file", opt_stringptr, &queue_only_file },
261 { "queue_only_load", opt_fixed, &queue_only_load },
8669f003 262 { "queue_only_load_latch", opt_bool, &queue_only_load_latch },
059ec3d9
PH
263 { "queue_only_override", opt_bool, &queue_only_override },
264 { "queue_run_in_order", opt_bool, &queue_run_in_order },
0cd5fd23 265 { "queue_run_max", opt_stringptr, &queue_run_max },
059ec3d9
PH
266 { "queue_smtp_domains", opt_stringptr, &queue_smtp_domains },
267 { "receive_timeout", opt_time, &receive_timeout },
268 { "received_header_text", opt_stringptr, &received_header_text },
269 { "received_headers_max", opt_int, &received_headers_max },
270 { "recipient_unqualified_hosts", opt_stringptr, &recipient_unqualified_hosts },
271 { "recipients_max", opt_int, &recipients_max },
272 { "recipients_max_reject", opt_bool, &recipients_max_reject },
de78e2d5 273#ifdef LOOKUP_REDIS
9bdd29ad
TL
274 { "redis_servers", opt_stringptr, &redis_servers },
275#endif
059ec3d9
PH
276 { "remote_max_parallel", opt_int, &remote_max_parallel },
277 { "remote_sort_domains", opt_stringptr, &remote_sort_domains },
278 { "retry_data_expire", opt_time, &retry_data_expire },
279 { "retry_interval_max", opt_time, &retry_interval_max },
280 { "return_path_remove", opt_bool, &return_path_remove },
281 { "return_size_limit", opt_mkint|opt_hidden, &bounce_return_size_limit },
282 { "rfc1413_hosts", opt_stringptr, &rfc1413_hosts },
283 { "rfc1413_query_timeout", opt_time, &rfc1413_query_timeout },
284 { "sender_unqualified_hosts", opt_stringptr, &sender_unqualified_hosts },
846430d9 285 { "slow_lookup_log", opt_int, &slow_lookup_log },
059ec3d9
PH
286 { "smtp_accept_keepalive", opt_bool, &smtp_accept_keepalive },
287 { "smtp_accept_max", opt_int, &smtp_accept_max },
288 { "smtp_accept_max_nonmail", opt_int, &smtp_accept_max_nonmail },
289 { "smtp_accept_max_nonmail_hosts", opt_stringptr, &smtp_accept_max_nonmail_hosts },
290 { "smtp_accept_max_per_connection", opt_int, &smtp_accept_max_per_connection },
291 { "smtp_accept_max_per_host", opt_stringptr, &smtp_accept_max_per_host },
292 { "smtp_accept_queue", opt_int, &smtp_accept_queue },
293 { "smtp_accept_queue_per_connection", opt_int, &smtp_accept_queue_per_connection },
294 { "smtp_accept_reserve", opt_int, &smtp_accept_reserve },
295 { "smtp_active_hostname", opt_stringptr, &raw_active_hostname },
296 { "smtp_banner", opt_stringptr, &smtp_banner },
297 { "smtp_check_spool_space", opt_bool, &smtp_check_spool_space },
298 { "smtp_connect_backlog", opt_int, &smtp_connect_backlog },
299 { "smtp_enforce_sync", opt_bool, &smtp_enforce_sync },
300 { "smtp_etrn_command", opt_stringptr, &smtp_etrn_command },
301 { "smtp_etrn_serialize", opt_bool, &smtp_etrn_serialize },
302 { "smtp_load_reserve", opt_fixed, &smtp_load_reserve },
303 { "smtp_max_synprot_errors", opt_int, &smtp_max_synprot_errors },
304 { "smtp_max_unknown_commands",opt_int, &smtp_max_unknown_commands },
305 { "smtp_ratelimit_hosts", opt_stringptr, &smtp_ratelimit_hosts },
306 { "smtp_ratelimit_mail", opt_stringptr, &smtp_ratelimit_mail },
307 { "smtp_ratelimit_rcpt", opt_stringptr, &smtp_ratelimit_rcpt },
1ad6489e 308 { "smtp_receive_timeout", opt_func, &fn_smtp_receive_timeout },
059ec3d9
PH
309 { "smtp_reserve_hosts", opt_stringptr, &smtp_reserve_hosts },
310 { "smtp_return_error_details",opt_bool, &smtp_return_error_details },
8c5d388a 311#ifdef SUPPORT_I18N
3d1451ea
JH
312 { "smtputf8_advertise_hosts", opt_stringptr, &smtputf8_advertise_hosts },
313#endif
8523533c
TK
314#ifdef WITH_CONTENT_SCAN
315 { "spamd_address", opt_stringptr, &spamd_address },
316#endif
7952eef9 317#ifdef SUPPORT_SPF
65a7d8c3
NM
318 { "spf_guess", opt_stringptr, &spf_guess },
319#endif
059ec3d9
PH
320 { "split_spool_directory", opt_bool, &split_spool_directory },
321 { "spool_directory", opt_stringptr, &spool_directory },
328c5688 322 { "spool_wireformat", opt_bool, &spool_wireformat },
31480e42
PH
323#ifdef LOOKUP_SQLITE
324 { "sqlite_lock_timeout", opt_int, &sqlite_lock_timeout },
325#endif
8523533c
TK
326#ifdef EXPERIMENTAL_SRS
327 { "srs_config", opt_stringptr, &srs_config },
384152a6
TK
328 { "srs_hashlength", opt_int, &srs_hashlength },
329 { "srs_hashmin", opt_int, &srs_hashmin },
330 { "srs_maxage", opt_int, &srs_maxage },
331 { "srs_secrets", opt_stringptr, &srs_secrets },
332 { "srs_usehash", opt_bool, &srs_usehash },
333 { "srs_usetimestamp", opt_bool, &srs_usetimestamp },
8523533c 334#endif
38a0a95f 335 { "strict_acl_vars", opt_bool, &strict_acl_vars },
059ec3d9
PH
336 { "strip_excess_angle_brackets", opt_bool, &strip_excess_angle_brackets },
337 { "strip_trailing_dot", opt_bool, &strip_trailing_dot },
338 { "syslog_duplication", opt_bool, &syslog_duplication },
339 { "syslog_facility", opt_stringptr, &syslog_facility_str },
2333e06f 340 { "syslog_pid", opt_bool, &syslog_pid },
059ec3d9
PH
341 { "syslog_processname", opt_stringptr, &syslog_processname },
342 { "syslog_timestamp", opt_bool, &syslog_timestamp },
343 { "system_filter", opt_stringptr, &system_filter },
344 { "system_filter_directory_transport", opt_stringptr,&system_filter_directory_transport },
345 { "system_filter_file_transport",opt_stringptr,&system_filter_file_transport },
346 { "system_filter_group", opt_gid, &system_filter_gid },
347 { "system_filter_pipe_transport",opt_stringptr,&system_filter_pipe_transport },
348 { "system_filter_reply_transport",opt_stringptr,&system_filter_reply_transport },
349 { "system_filter_user", opt_uid, &system_filter_uid },
350 { "tcp_nodelay", opt_bool, &tcp_nodelay },
5dc43717
JJ
351#ifdef USE_TCP_WRAPPERS
352 { "tcp_wrappers_daemon_name", opt_stringptr, &tcp_wrappers_daemon_name },
353#endif
059ec3d9
PH
354 { "timeout_frozen_after", opt_time, &timeout_frozen_after },
355 { "timezone", opt_stringptr, &timezone_string },
059ec3d9 356 { "tls_advertise_hosts", opt_stringptr, &tls_advertise_hosts },
23f3dc67 357#ifdef SUPPORT_TLS
8ac90765
JH
358# ifdef EXPERIMENTAL_REQUIRETLS
359 { "tls_advertise_requiretls", opt_stringptr, &tls_advertise_requiretls },
360# endif
059ec3d9
PH
361 { "tls_certificate", opt_stringptr, &tls_certificate },
362 { "tls_crl", opt_stringptr, &tls_crl },
3375e053 363 { "tls_dh_max_bits", opt_int, &tls_dh_max_bits },
059ec3d9 364 { "tls_dhparam", opt_stringptr, &tls_dhparam },
10ca4f1c 365 { "tls_eccurve", opt_stringptr, &tls_eccurve },
f2de3a33 366# ifndef DISABLE_OCSP
3f7eeb86 367 { "tls_ocsp_file", opt_stringptr, &tls_ocsp_file },
817d9f57
JH
368# endif
369 { "tls_on_connect_ports", opt_stringptr, &tls_in.on_connect_ports },
059ec3d9
PH
370 { "tls_privatekey", opt_stringptr, &tls_privatekey },
371 { "tls_remember_esmtp", opt_bool, &tls_remember_esmtp },
372 { "tls_require_ciphers", opt_stringptr, &tls_require_ciphers },
373 { "tls_try_verify_hosts", opt_stringptr, &tls_try_verify_hosts },
374 { "tls_verify_certificates", opt_stringptr, &tls_verify_certificates },
375 { "tls_verify_hosts", opt_stringptr, &tls_verify_hosts },
376#endif
377 { "trusted_groups", opt_gidlist, &trusted_groups },
378 { "trusted_users", opt_uidlist, &trusted_users },
379 { "unknown_login", opt_stringptr, &unknown_login },
380 { "unknown_username", opt_stringptr, &unknown_username },
381 { "untrusted_set_sender", opt_stringptr, &untrusted_set_sender },
382 { "uucp_from_pattern", opt_stringptr, &uucp_from_pattern },
383 { "uucp_from_sender", opt_stringptr, &uucp_from_sender },
384 { "warn_message_file", opt_stringptr, &warn_message_file },
385 { "write_rejectlog", opt_bool, &write_rejectlog }
386};
387
cab0c277 388#ifndef MACRO_PREDEF
d7bed771 389static int optionlist_config_size = nelem(optionlist_config);
cab0c277 390#endif
059ec3d9
PH
391
392
d185889f
JH
393#ifdef MACRO_PREDEF
394
395static void fn_smtp_receive_timeout(const uschar * name, const uschar * str) {/*Dummy*/}
396
397void
398options_main(void)
399{
400options_from_list(optionlist_config, nelem(optionlist_config), US"MAIN", NULL);
401}
402
403void
404options_auths(void)
405{
406struct auth_info * ai;
407uschar buf[64];
408
409options_from_list(optionlist_auths, optionlist_auths_size, US"AUTHENTICATORS", NULL);
410
411for (ai = auths_available; ai->driver_name[0]; ai++)
412 {
cab0c277 413 spf(buf, sizeof(buf), US"_DRIVER_AUTHENTICATOR_%T", ai->driver_name);
d185889f
JH
414 builtin_macro_create(buf);
415 options_from_list(ai->options, (unsigned)*ai->options_count, US"AUTHENTICATOR", ai->driver_name);
416 }
417}
418
12263aa8
JH
419void
420options_logging(void)
421{
422bit_table * bp;
423uschar buf[64];
424
425for (bp = log_options; bp < log_options + log_options_count; bp++)
426 {
427 spf(buf, sizeof(buf), US"_LOG_%T", bp->name);
428 builtin_macro_create(buf);
429 }
430}
431
d185889f
JH
432
433#else /*!MACRO_PREDEF*/
434
435extern char **environ;
436
437static void save_config_line(const uschar* line);
438static void save_config_position(const uschar *file, int line);
439static void print_config(BOOL admin, BOOL terse);
440
441
442#define CSTATE_STACK_SIZE 10
443
444const uschar *config_directory = NULL;
445
446
447/* Structure for chain (stack) of .included files */
448
449typedef struct config_file_item {
450 struct config_file_item *next;
451 const uschar *filename;
452 const uschar *directory;
453 FILE *file;
454 int lineno;
455} config_file_item;
456
457/* Structure for chain of configuration lines (-bP config) */
458
459typedef struct config_line_item {
460 struct config_line_item *next;
461 uschar *line;
462} config_line_item;
463
464static config_line_item* config_lines;
465
466/* Structure of table of conditional words and their state transitions */
467
468typedef struct cond_item {
469 uschar *name;
470 int namelen;
471 int action1;
472 int action2;
473 int pushpop;
474} cond_item;
475
476/* Structure of table of syslog facility names and values */
477
478typedef struct syslog_fac_item {
479 uschar *name;
480 int value;
481} syslog_fac_item;
482
483/* constants */
484static const char * const hidden = "<value not displayable>";
485
486/* Static variables */
487
488static config_file_item *config_file_stack = NULL; /* For includes */
489
490static uschar *syslog_facility_str = NULL;
491static uschar next_section[24];
492static uschar time_buffer[24];
493
494/* State variables for conditional loading (.ifdef / .else / .endif) */
495
496static int cstate = 0;
497static int cstate_stack_ptr = -1;
498static int cstate_stack[CSTATE_STACK_SIZE];
499
500/* Table of state transitions for handling conditional inclusions. There are
501four possible state transitions:
502
503 .ifdef true
504 .ifdef false
505 .elifdef true (or .else)
506 .elifdef false
507
508.endif just causes the previous cstate to be popped off the stack */
509
510static int next_cstate[3][4] =
511 {
512 /* State 0: reading from file, or reading until next .else or .endif */
513 { 0, 1, 2, 2 },
514 /* State 1: condition failed, skipping until next .else or .endif */
515 { 2, 2, 0, 1 },
516 /* State 2: skipping until .endif */
517 { 2, 2, 2, 2 },
518 };
519
520/* Table of conditionals and the states to set. For each name, there are four
521values: the length of the name (to save computing it each time), the state to
522set if a macro was found in the line, the state to set if a macro was not found
523in the line, and a stack manipulation setting which is:
524
525 -1 pull state value off the stack
526 0 don't alter the stack
527 +1 push value onto stack, before setting new state
528*/
529
530static cond_item cond_list[] = {
531 { US"ifdef", 5, 0, 1, 1 },
532 { US"ifndef", 6, 1, 0, 1 },
533 { US"elifdef", 7, 2, 3, 0 },
534 { US"elifndef", 8, 3, 2, 0 },
535 { US"else", 4, 2, 2, 0 },
536 { US"endif", 5, 0, 0, -1 }
537};
538
539static int cond_list_size = sizeof(cond_list)/sizeof(cond_item);
540
541/* Table of syslog facility names and their values */
542
543static syslog_fac_item syslog_list[] = {
544 { US"mail", LOG_MAIL },
545 { US"user", LOG_USER },
546 { US"news", LOG_NEWS },
547 { US"uucp", LOG_UUCP },
548 { US"local0", LOG_LOCAL0 },
549 { US"local1", LOG_LOCAL1 },
550 { US"local2", LOG_LOCAL2 },
551 { US"local3", LOG_LOCAL3 },
552 { US"local4", LOG_LOCAL4 },
553 { US"local5", LOG_LOCAL5 },
554 { US"local6", LOG_LOCAL6 },
555 { US"local7", LOG_LOCAL7 },
556 { US"daemon", LOG_DAEMON }
557};
558
559static int syslog_list_size = sizeof(syslog_list)/sizeof(syslog_fac_item);
560
561
562
059ec3d9
PH
563
564/*************************************************
565* Find the name of an option *
566*************************************************/
567
568/* This function is to aid debugging. Various functions take arguments that are
569pointer variables in the options table or in option tables for various drivers.
570For debugging output, it is useful to be able to find the name of the option
571which is currently being processed. This function finds it, if it exists, by
572searching the table(s).
573
574Arguments: a value that is presumed to be in the table above
575Returns: the option name, or an empty string
576*/
577
578uschar *
579readconf_find_option(void *p)
580{
581int i;
582router_instance *r;
583transport_instance *t;
584
c0b9d3e8 585for (i = 0; i < nelem(optionlist_config); i++)
059ec3d9
PH
586 if (p == optionlist_config[i].value) return US optionlist_config[i].name;
587
d7bed771 588for (r = routers; r; r = r->next)
059ec3d9
PH
589 {
590 router_info *ri = r->info;
c4b738a9 591 for (i = 0; i < *ri->options_count; i++)
059ec3d9
PH
592 {
593 if ((ri->options[i].type & opt_mask) != opt_stringptr) continue;
5903c6ff 594 if (p == CS (r->options_block) + (long int)(ri->options[i].value))
059ec3d9
PH
595 return US ri->options[i].name;
596 }
597 }
598
d7bed771 599for (t = transports; t; t = t->next)
059ec3d9
PH
600 {
601 transport_info *ti = t->info;
c4b738a9 602 for (i = 0; i < *ti->options_count; i++)
059ec3d9 603 {
c4b738a9
JH
604 optionlist * op = &ti->options[i];
605 if ((op->type & opt_mask) != opt_stringptr) continue;
606 if (p == ( op->type & opt_public
5903c6ff
JH
607 ? CS t
608 : CS t->options_block
c4b738a9
JH
609 )
610 + (long int)op->value)
611 return US op->name;
059ec3d9
PH
612 }
613 }
614
615return US"";
616}
617
618
619
620
1a7c9a48
JH
621/*************************************************
622* Deal with an assignment to a macro *
623*************************************************/
624
625/* We have a new definition; append to the list.
626
627Args:
85e03244
JH
628 name Name of the macro; will be copied
629 val Expansion result for the macro; will be copied
1a7c9a48
JH
630*/
631
632macro_item *
633macro_create(const uschar * name, const uschar * val, BOOL command_line)
634{
635macro_item * m = store_get(sizeof(macro_item));
636
8442641e 637READCONF_DEBUG fprintf(stderr, "%s: '%s' '%s'\n", __FUNCTION__, name, val);
1a7c9a48
JH
638m->next = NULL;
639m->command_line = command_line;
640m->namelen = Ustrlen(name);
641m->replen = Ustrlen(val);
85e03244
JH
642m->name = string_copy(name);
643m->replacement = string_copy(val);
1a7c9a48
JH
644if (mlast)
645 mlast->next = m;
646else
647 macros = m;
648mlast = m;
85e03244
JH
649if (!macros_user)
650 macros_user = m;
1a7c9a48
JH
651return m;
652}
653
654
cf00dad6
PH
655/* This function is called when a line that starts with an upper case letter is
656encountered. The argument "line" should contain a complete logical line, and
657start with the first letter of the macro name. The macro name and the
658replacement text are extracted and stored. Redefinition of existing,
659non-command line, macros is permitted using '==' instead of '='.
660
661Arguments:
662 s points to the start of the logical line
663
9650d98a 664Returns: FALSE iff fatal error
cf00dad6
PH
665*/
666
9650d98a
JH
667BOOL
668macro_read_assignment(uschar *s)
cf00dad6
PH
669{
670uschar name[64];
671int namelen = 0;
672BOOL redef = FALSE;
673macro_item *m;
cf00dad6
PH
674
675while (isalnum(*s) || *s == '_')
676 {
677 if (namelen >= sizeof(name) - 1)
9650d98a
JH
678 {
679 log_write(0, LOG_PANIC|LOG_CONFIG_IN,
ef840681 680 "macro name too long (maximum is " SIZE_T_FMT " characters)", sizeof(name) - 1);
9650d98a
JH
681 return FALSE;
682 }
cf00dad6
PH
683 name[namelen++] = *s++;
684 }
685name[namelen] = 0;
686
687while (isspace(*s)) s++;
688if (*s++ != '=')
9650d98a
JH
689 {
690 log_write(0, LOG_PANIC|LOG_CONFIG_IN, "malformed macro definition");
691 return FALSE;
692 }
cf00dad6
PH
693
694if (*s == '=')
695 {
696 redef = TRUE;
697 s++;
698 }
699while (isspace(*s)) s++;
700
701/* If an existing macro of the same name was defined on the command line, we
702just skip this definition. It's an error to attempt to redefine a macro without
703redef set to TRUE, or to redefine a macro when it hasn't been defined earlier.
704It is also an error to define a macro whose name begins with the name of a
1a7c9a48
JH
705previously defined macro. This is the requirement that make using a tree
706for macros hard; we must check all macros for the substring. Perhaps a
707sorted list, and a bsearch, would work?
c193398d 708Note: it is documented that the other way round works. */
cf00dad6 709
1a7c9a48 710for (m = macros; m; m = m->next)
cf00dad6 711 {
1a7c9a48 712 if (Ustrcmp(m->name, name) == 0)
9650d98a 713 {
1a7c9a48
JH
714 if (!m->command_line && !redef)
715 {
716 log_write(0, LOG_CONFIG|LOG_PANIC, "macro \"%s\" is already "
f04f9047 717 "defined (use \"==\" if you want to redefine it)", name);
1a7c9a48
JH
718 return FALSE;
719 }
720 break;
165acdd1 721 }
1a7c9a48
JH
722
723 if (m->namelen < namelen && Ustrstr(name, m->name) != NULL)
165acdd1 724 {
1a7c9a48
JH
725 log_write(0, LOG_CONFIG|LOG_PANIC, "\"%s\" cannot be defined as "
726 "a macro because previously defined macro \"%s\" is a substring",
727 name, m->name);
9650d98a
JH
728 return FALSE;
729 }
cf00dad6 730
1a7c9a48
JH
731 /* We cannot have this test, because it is documented that a substring
732 macro is permitted (there is even an example).
733 *
734 * if (m->namelen > namelen && Ustrstr(m->name, name) != NULL)
735 * log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "\"%s\" cannot be defined as "
736 * "a macro because it is a substring of previously defined macro \"%s\"",
737 * name, m->name);
738 */
cf00dad6
PH
739 }
740
1a7c9a48
JH
741/* Check for an overriding command-line definition. */
742
743if (m && m->command_line) return TRUE;
744
cf00dad6
PH
745/* Redefinition must refer to an existing macro. */
746
747if (redef)
c193398d 748 if (m)
b8f899cf
JH
749 {
750 m->replen = Ustrlen(s);
1a7c9a48 751 m->replacement = string_copy(s);
b8f899cf 752 }
c193398d 753 else
9650d98a
JH
754 {
755 log_write(0, LOG_CONFIG|LOG_PANIC, "can't redefine an undefined macro "
cf00dad6 756 "\"%s\"", name);
9650d98a
JH
757 return FALSE;
758 }
cf00dad6 759
c193398d 760/* We have a new definition. */
cf00dad6 761else
85e03244 762 (void) macro_create(name, s, FALSE);
9650d98a 763return TRUE;
8e6c4db1
JH
764}
765
766
cf00dad6
PH
767
768
059ec3d9 769
9650d98a
JH
770/* Process line for macros. The line is in big_buffer starting at offset len.
771Expand big_buffer if needed. Handle definitions of new macros, and
85e03244 772macro expansions, rewriting the line in the buffer.
9650d98a
JH
773
774Arguments:
775 len Offset in buffer of start of line
776 newlen Pointer to offset of end of line, updated on return
777 macro_found Pointer to return that a macro was expanded
778
779Return: pointer to first nonblank char in line
780*/
781
782uschar *
783macros_expand(int len, int * newlen, BOOL * macro_found)
784{
785uschar * ss = big_buffer + len;
786uschar * s;
1a7c9a48 787macro_item * m;
9650d98a
JH
788
789/* Find the true start of the physical line - leading spaces are always
790ignored. */
791
792while (isspace(*ss)) ss++;
793
794/* Process the physical line for macros. If this is the start of the logical
795line, skip over initial text at the start of the line if it starts with an
796upper case character followed by a sequence of name characters and an equals
797sign, because that is the definition of a new macro, and we don't do
798replacement therein. */
799
800s = ss;
801if (len == 0 && isupper(*s))
802 {
803 while (isalnum(*s) || *s == '_') s++;
804 while (isspace(*s)) s++;
805 if (*s != '=') s = ss; /* Not a macro definition */
806 }
807
1a7c9a48
JH
808/* Skip leading chars which cannot start a macro name, to avoid multiple
809pointless rescans in Ustrstr calls. */
810
85e03244 811while (*s && !isupper(*s) && !(*s == '_' && isupper(s[1]))) s++;
1a7c9a48
JH
812
813/* For each defined macro, scan the line (from after XXX= if present),
814replacing all occurrences of the macro. */
9650d98a
JH
815
816*macro_found = FALSE;
85e03244 817if (*s) for (m = *s == '_' ? macros : macros_user; m; m = m->next)
9650d98a 818 {
1a7c9a48 819 uschar * p, *pp;
85e03244
JH
820 uschar * t;
821
822 while (*s && !isupper(*s) && !(*s == '_' && isupper(s[1]))) s++;
823 if (!*s) break;
9650d98a 824
85e03244 825 t = s;
1a7c9a48
JH
826 while ((p = Ustrstr(t, m->name)) != NULL)
827 {
828 int moveby;
9650d98a 829
ea97267c 830 READCONF_DEBUG fprintf(stderr, "%s: matched '%s' in '%.*s'\n", __FUNCTION__,
1e1d5443 831 m->name, (int) Ustrlen(ss)-1, ss);
1a7c9a48 832 /* Expand the buffer if necessary */
9650d98a 833
1a7c9a48
JH
834 while (*newlen - m->namelen + m->replen + 1 > big_buffer_size)
835 {
836 int newsize = big_buffer_size + BIG_BUFFER_SIZE;
837 uschar *newbuffer = store_malloc(newsize);
838 memcpy(newbuffer, big_buffer, *newlen + 1);
839 p = newbuffer + (p - big_buffer);
840 s = newbuffer + (s - big_buffer);
841 ss = newbuffer + (ss - big_buffer);
842 t = newbuffer + (t - big_buffer);
843 big_buffer_size = newsize;
844 store_free(big_buffer);
845 big_buffer = newbuffer;
846 }
165acdd1 847
1a7c9a48
JH
848 /* Shuffle the remaining characters up or down in the buffer before
849 copying in the replacement text. Don't rescan the replacement for this
850 same macro. */
165acdd1 851
1a7c9a48
JH
852 pp = p + m->namelen;
853 if ((moveby = m->replen - m->namelen) != 0)
854 {
855 memmove(p + m->replen, pp, (big_buffer + *newlen) - pp + 1);
856 *newlen += moveby;
9650d98a 857 }
1a7c9a48
JH
858 Ustrncpy(p, m->replacement, m->replen);
859 t = p + m->replen;
85e03244 860 while (*t && !isupper(*t) && !(*t == '_' && isupper(t[1]))) t++;
1a7c9a48 861 *macro_found = TRUE;
9650d98a
JH
862 }
863 }
864
865/* An empty macro replacement at the start of a line could mean that ss no
866longer points to the first non-blank character. */
867
868while (isspace(*ss)) ss++;
869return ss;
870}
871
059ec3d9
PH
872/*************************************************
873* Read configuration line *
874*************************************************/
875
876/* A logical line of text is read from the configuration file into the big
877buffer, taking account of macros, .includes, and continuations. The size of
878big_buffer is increased if necessary. The count of configuration lines is
879maintained. Physical input lines starting with # (ignoring leading white space,
880and after macro replacement) and empty logical lines are always ignored.
881Leading and trailing spaces are removed.
882
883If we hit a line of the form "begin xxxx", the xxxx is placed in the
884next_section vector, and the function returns NULL, indicating the end of a
885configuration section. On end-of-file, NULL is returned with next_section
886empty.
887
888Arguments: none
889
890Returns: a pointer to the first non-blank in the line,
891 or NULL if eof or end of section is reached
892*/
893
894static uschar *
895get_config_line(void)
896{
897int startoffset = 0; /* To first non-blank char in logical line */
898int len = 0; /* Of logical line so far */
899int newlen;
900uschar *s, *ss;
059ec3d9
PH
901BOOL macro_found;
902
903/* Loop for handling continuation lines, skipping comments, and dealing with
904.include files. */
905
906for (;;)
907 {
908 if (Ufgets(big_buffer+len, big_buffer_size-len, config_file) == NULL)
909 {
910 if (config_file_stack != NULL) /* EOF inside .include */
911 {
f1e894f3 912 (void)fclose(config_file);
059ec3d9
PH
913 config_file = config_file_stack->file;
914 config_filename = config_file_stack->filename;
29f67888 915 config_directory = config_file_stack->directory;
059ec3d9
PH
916 config_lineno = config_file_stack->lineno;
917 config_file_stack = config_file_stack->next;
bf3c2c6b
HSHR
918 if (config_lines)
919 save_config_position(config_filename, config_lineno);
059ec3d9
PH
920 continue;
921 }
922
923 /* EOF at top level */
924
925 if (cstate_stack_ptr >= 0)
926 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
927 "Unexpected end of configuration file: .endif missing");
928
929 if (len != 0) break; /* EOF after continuation */
930 next_section[0] = 0; /* EOF at start of logical line */
931 return NULL;
932 }
933
934 config_lineno++;
935 newlen = len + Ustrlen(big_buffer + len);
936
bf3c2c6b
HSHR
937 if (config_lines && config_lineno == 1)
938 save_config_position(config_filename, config_lineno);
939
059ec3d9
PH
940 /* Handle pathologically long physical lines - yes, it did happen - by
941 extending big_buffer at this point. The code also copes with very long
942 logical lines. */
943
944 while (newlen == big_buffer_size - 1 && big_buffer[newlen - 1] != '\n')
945 {
946 uschar *newbuffer;
947 big_buffer_size += BIG_BUFFER_SIZE;
948 newbuffer = store_malloc(big_buffer_size);
949
950 /* This use of strcpy is OK because we know that the string in the old
951 buffer is shorter than the new buffer. */
952
953 Ustrcpy(newbuffer, big_buffer);
954 store_free(big_buffer);
955 big_buffer = newbuffer;
956 if (Ufgets(big_buffer+newlen, big_buffer_size-newlen, config_file) == NULL)
957 break;
958 newlen += Ustrlen(big_buffer + newlen);
959 }
960
9650d98a 961 ss = macros_expand(len, &newlen, &macro_found);
059ec3d9
PH
962
963 /* Check for comment lines - these are physical lines. */
964
965 if (*ss == '#') continue;
966
967 /* Handle conditionals, which are also applied to physical lines. Conditions
968 are of the form ".ifdef ANYTEXT" and are treated as true if any macro
969 expansion occured on the rest of the line. A preliminary test for the leading
970 '.' saves effort on most lines. */
971
972 if (*ss == '.')
973 {
974 int i;
975
976 /* Search the list of conditional directives */
977
978 for (i = 0; i < cond_list_size; i++)
979 {
980 int n;
981 cond_item *c = cond_list+i;
982 if (Ustrncmp(ss+1, c->name, c->namelen) != 0) continue;
983
984 /* The following character must be white space or end of string */
985
986 n = ss[1 + c->namelen];
987 if (n != ' ' && n != 't' && n != '\n' && n != 0) break;
988
989 /* .ifdef and .ifndef push the current state onto the stack, then set
990 a new one from the table. Stack overflow is an error */
991
992 if (c->pushpop > 0)
993 {
994 if (cstate_stack_ptr >= CSTATE_STACK_SIZE - 1)
995 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
996 ".%s nested too deeply", c->name);
997 cstate_stack[++cstate_stack_ptr] = cstate;
998 cstate = next_cstate[cstate][macro_found? c->action1 : c->action2];
999 }
1000
1001 /* For any of the others, stack underflow is an error. The next state
1002 comes either from the stack (.endif) or from the table. */
1003
1004 else
1005 {
1006 if (cstate_stack_ptr < 0)
1007 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1008 ".%s without matching .ifdef", c->name);
1009 cstate = (c->pushpop < 0)? cstate_stack[cstate_stack_ptr--] :
1010 next_cstate[cstate][macro_found? c->action1 : c->action2];
1011 }
1012
1013 /* Having dealt with a directive, break the loop */
1014
1015 break;
1016 }
1017
1018 /* If we have handled a conditional directive, continue with the next
1019 physical line. Otherwise, fall through. */
1020
1021 if (i < cond_list_size) continue;
1022 }
1023
1024 /* If the conditional state is not 0 (actively using these lines), ignore
1025 this input line. */
1026
1027 if (cstate != 0) continue; /* Conditional skip */
1028
1029 /* Handle .include lines - these are also physical lines. */
1030
1031 if (Ustrncmp(ss, ".include", 8) == 0 &&
1032 (isspace(ss[8]) ||
1033 (Ustrncmp(ss+8, "_if_exists", 10) == 0 && isspace(ss[18]))))
1034 {
1035 uschar *t;
1036 int include_if_exists = isspace(ss[8])? 0 : 10;
1037 config_file_item *save;
1038 struct stat statbuf;
1039
1040 ss += 9 + include_if_exists;
1041 while (isspace(*ss)) ss++;
1042 t = ss + Ustrlen(ss);
1043 while (t > ss && isspace(t[-1])) t--;
1044 if (*ss == '\"' && t[-1] == '\"')
1045 {
1046 ss++;
1047 t--;
1048 }
1049 *t = 0;
1050
29f67888
HSHR
1051 /* We allow relative file names. For security reasons currently
1052 relative names not allowed with .include_if_exists. For .include_if_exists
1053 we need to check the permissions/ownership of the containing folder */
145396a6 1054 if (*ss != '/')
29f67888
HSHR
1055 if (include_if_exists) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, ".include specifies a non-"
1056 "absolute path \"%s\"", ss);
1057 else
1058 {
acec9514
JH
1059 gstring * g = string_append(NULL, 3, config_directory, "/", ss);
1060 ss = string_from_gstring(g);
29f67888 1061 }
145396a6 1062
059ec3d9
PH
1063 if (include_if_exists != 0 && (Ustat(ss, &statbuf) != 0)) continue;
1064
bf3c2c6b
HSHR
1065 if (config_lines)
1066 save_config_position(config_filename, config_lineno);
059ec3d9
PH
1067 save = store_get(sizeof(config_file_item));
1068 save->next = config_file_stack;
1069 config_file_stack = save;
1070 save->file = config_file;
1071 save->filename = config_filename;
29f67888 1072 save->directory = config_directory;
059ec3d9
PH
1073 save->lineno = config_lineno;
1074
10c50704 1075 if (!(config_file = Ufopen(ss, "rb")))
059ec3d9
PH
1076 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to open included "
1077 "configuration file %s", ss);
10c50704 1078
059ec3d9 1079 config_filename = string_copy(ss);
863bd541 1080 config_directory = string_copyn(ss, CUstrrchr(ss, '/') - ss);
059ec3d9
PH
1081 config_lineno = 0;
1082 continue;
1083 }
1084
1085 /* If this is the start of the logical line, remember where the non-blank
1086 data starts. Otherwise shuffle down continuation lines to remove leading
1087 white space. */
1088
1089 if (len == 0)
1090 startoffset = ss - big_buffer;
1091 else
1092 {
1093 s = big_buffer + len;
1094 if (ss > s)
1095 {
1096 memmove(s, ss, (newlen - len) - (ss - s) + 1);
1097 newlen -= ss - s;
1098 }
1099 }
1100
1101 /* Accept the new addition to the line. Remove trailing white space. */
1102
1103 len = newlen;
1104 while (len > 0 && isspace(big_buffer[len-1])) len--;
1105 big_buffer[len] = 0;
1106
1107 /* We are done if the line does not end in backslash and contains some data.
1108 Empty logical lines are ignored. For continuations, remove the backslash and
1109 go round the loop to read the continuation line. */
1110
1111 if (len > 0)
1112 {
1113 if (big_buffer[len-1] != '\\') break; /* End of logical line */
1114 big_buffer[--len] = 0; /* Remove backslash */
1115 }
1116 } /* Loop for reading multiple physical lines */
1117
1118/* We now have a logical line. Test for the end of a configuration section (or,
1119more accurately, for the start of the next section). Place the name of the next
1120section in next_section, and return NULL. If the name given is longer than
1121next_section, truncate it. It will be unrecognized later, because all the known
1122section names do fit. Leave space for pluralizing. */
1123
1124s = big_buffer + startoffset; /* First non-space character */
bf3c2c6b
HSHR
1125
1126if (config_lines)
1127 save_config_line(s);
1128
059ec3d9
PH
1129if (strncmpic(s, US"begin ", 6) == 0)
1130 {
1131 s += 6;
1132 while (isspace(*s)) s++;
1133 if (big_buffer + len - s > sizeof(next_section) - 2)
1134 s[sizeof(next_section) - 2] = 0;
1135 Ustrcpy(next_section, s);
1136 return NULL;
1137 }
1138
1139/* Return the first non-blank character. */
1140
1141return s;
1142}
1143
1144
1145
1146/*************************************************
1147* Read a name *
1148*************************************************/
1149
1150/* The yield is the pointer to the next uschar. Names longer than the
1151output space are silently truncated. This function is also used from acl.c when
1152parsing ACLs.
1153
1154Arguments:
1155 name where to put the name
1156 len length of name
1157 s input pointer
1158
1159Returns: new input pointer
1160*/
1161
1162uschar *
1163readconf_readname(uschar *name, int len, uschar *s)
1164{
1165int p = 0;
1166while (isspace(*s)) s++;
1167if (isalpha(*s))
1168 {
1169 while (isalnum(*s) || *s == '_')
1170 {
1171 if (p < len-1) name[p++] = *s;
1172 s++;
1173 }
1174 }
1175name[p] = 0;
1176while (isspace(*s)) s++;
1177return s;
1178}
1179
1180
1181
1182
1183/*************************************************
1184* Read a time value *
1185*************************************************/
1186
1187/* This function is also called from outside, to read argument
1188time values. The format of a time value is:
1189
1190 [<n>w][<n>d][<n>h][<n>m][<n>s]
1191
1192as long as at least one is present. If a format error is encountered,
1193return a negative value. The value must be terminated by the given
1194terminator.
1195
1196Arguments:
1197 s input pointer
1198 terminator required terminating character
1199 return_msec if TRUE, allow fractional seconds and return milliseconds
1200
1201Returns: the time value, or -1 on syntax error
1202 value is seconds if return_msec is FALSE
1203 value is milliseconds if return_msec is TRUE
1204*/
1205
1206int
1ad6489e 1207readconf_readtime(const uschar *s, int terminator, BOOL return_msec)
059ec3d9
PH
1208{
1209int yield = 0;
1210for (;;)
1211 {
1212 int value, count;
1213 double fraction;
1214
1215 if (!isdigit(*s)) return -1;
1ad6489e 1216 (void)sscanf(CCS s, "%d%n", &value, &count);
059ec3d9
PH
1217 s += count;
1218
1219 switch (*s)
1220 {
1221 case 'w': value *= 7;
1222 case 'd': value *= 24;
1223 case 'h': value *= 60;
1224 case 'm': value *= 60;
1225 case 's': s++;
1226 break;
1227
1228 case '.':
1229 if (!return_msec) return -1;
1ad6489e 1230 (void)sscanf(CCS s, "%lf%n", &fraction, &count);
059ec3d9
PH
1231 s += count;
1232 if (*s++ != 's') return -1;
1233 yield += (int)(fraction * 1000.0);
1234 break;
1235
1236 default: return -1;
1237 }
1238
1239 if (return_msec) value *= 1000;
1240 yield += value;
1241 if (*s == terminator) return yield;
1242 }
1243/* Control never reaches here. */
1244}
1245
1246
1247
1248/*************************************************
1249* Read a fixed point value *
1250*************************************************/
1251
1252/* The value is returned *1000
1253
1254Arguments:
1255 s input pointer
1256 terminator required terminator
1257
1258Returns: the value, or -1 on error
1259*/
1260
1261static int
55414b25 1262readconf_readfixed(const uschar *s, int terminator)
059ec3d9
PH
1263{
1264int yield = 0;
1265int value, count;
1266if (!isdigit(*s)) return -1;
1267(void)sscanf(CS s, "%d%n", &value, &count);
1268s += count;
1269yield = value * 1000;
1270if (*s == '.')
1271 {
1272 int m = 100;
1273 while (isdigit((*(++s))))
1274 {
1275 yield += (*s - '0') * m;
1276 m /= 10;
1277 }
1278 }
1279
1280return (*s == terminator)? yield : (-1);
1281}
1282
1283
1284
1285/*************************************************
1286* Find option in list *
1287*************************************************/
1288
1289/* The lists are always in order, so binary chop can be used.
1290
1291Arguments:
1292 name the option name to search for
1293 ol the first entry in the option list
1294 last one more than the offset of the last entry in the option list
1295
1296Returns: pointer to an option entry, or NULL if not found
1297*/
1298
1299static optionlist *
1300find_option(uschar *name, optionlist *ol, int last)
1301{
1302int first = 0;
1303while (last > first)
1304 {
1305 int middle = (first + last)/2;
1306 int c = Ustrcmp(name, ol[middle].name);
d7bed771 1307
059ec3d9 1308 if (c == 0) return ol + middle;
d7bed771
JH
1309 else if (c > 0) first = middle + 1;
1310 else last = middle;
059ec3d9
PH
1311 }
1312return NULL;
1313}
1314
1315
1316
1317/*************************************************
1318* Find a set flag in option list *
1319*************************************************/
1320
1321/* Because some versions of Unix make no restrictions on the values of uids and
1322gids (even negative ones), we cannot represent "unset" by a special value.
1323There is therefore a separate boolean variable for each one indicating whether
1324a value is set or not. This function returns a pointer to the boolean, given
1325the original option name. It is a major disaster if the flag cannot be found.
1326
1327Arguments:
1328 name the name of the uid or gid option
1329 oltop points to the start of the relevant option list
1330 last one more than the offset of the last item in the option list
1331 data_block NULL when reading main options => data values in the option
1332 list are absolute addresses; otherwise they are byte offsets
1333 in data_block (used for driver options)
1334
1335Returns: a pointer to the boolean flag.
1336*/
1337
1338static BOOL *
1339get_set_flag(uschar *name, optionlist *oltop, int last, void *data_block)
1340{
1341optionlist *ol;
1342uschar name2[64];
1343sprintf(CS name2, "*set_%.50s", name);
1344ol = find_option(name2, oltop, last);
1345if (ol == NULL) log_write(0, LOG_MAIN|LOG_PANIC_DIE,
1346 "Exim internal error: missing set flag for %s", name);
1347return (data_block == NULL)? (BOOL *)(ol->value) :
5903c6ff 1348 (BOOL *)(US data_block + (long int)(ol->value));
059ec3d9
PH
1349}
1350
1351
1352
1353
1354/*************************************************
1355* Output extra characters message and die *
1356*************************************************/
1357
1358/* Called when an option line has junk on the end. Sometimes this is because
1359the sysadmin thinks comments are permitted.
1360
1361Arguments:
1362 s points to the extra characters
1363 t1..t3 strings to insert in the log message
1364
1365Returns: doesn't return; dies
1366*/
1367
1368static void
55414b25 1369extra_chars_error(const uschar *s, const uschar *t1, const uschar *t2, const uschar *t3)
059ec3d9
PH
1370{
1371uschar *comment = US"";
1372if (*s == '#') comment = US" (# is comment only at line start)";
1373log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1374 "extra characters follow %s%s%s%s", t1, t2, t3, comment);
1375}
1376
1377
1378
1379/*************************************************
1380* Read rewrite information *
1381*************************************************/
1382
1383/* Each line of rewrite information contains:
1384
1385. A complete address in the form user@domain, possibly with
1386 leading * for each part; or alternatively, a regex.
1387
1388. A replacement string (which will be expanded).
1389
1390. An optional sequence of one-letter flags, indicating which
1391 headers etc. to apply this rule to.
1392
1393All this is decoded and placed into a control block. The OR of the flags is
1394maintained in a common word.
1395
1396Arguments:
1397 p points to the string that makes up the rule
1398 existflags points to the overall flag word
1399 isglobal TRUE if reading global rewrite rules
1400
1401Returns: the control block for the parsed rule.
1402*/
1403
1404static rewrite_rule *
55414b25 1405readconf_one_rewrite(const uschar *p, int *existflags, BOOL isglobal)
059ec3d9
PH
1406{
1407rewrite_rule *next = store_get(sizeof(rewrite_rule));
1408
1409next->next = NULL;
1410next->key = string_dequote(&p);
1411
1412while (isspace(*p)) p++;
1413if (*p == 0)
1414 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1415 "missing rewrite replacement string");
1416
1417next->flags = 0;
1418next->replacement = string_dequote(&p);
1419
1420while (*p != 0) switch (*p++)
1421 {
1422 case ' ': case '\t': break;
1423
1424 case 'q': next->flags |= rewrite_quit; break;
1425 case 'w': next->flags |= rewrite_whole; break;
1426
1427 case 'h': next->flags |= rewrite_all_headers; break;
1428 case 's': next->flags |= rewrite_sender; break;
1429 case 'f': next->flags |= rewrite_from; break;
1430 case 't': next->flags |= rewrite_to; break;
1431 case 'c': next->flags |= rewrite_cc; break;
1432 case 'b': next->flags |= rewrite_bcc; break;
1433 case 'r': next->flags |= rewrite_replyto; break;
1434
1435 case 'E': next->flags |= rewrite_all_envelope; break;
1436 case 'F': next->flags |= rewrite_envfrom; break;
1437 case 'T': next->flags |= rewrite_envto; break;
1438
1439 case 'Q': next->flags |= rewrite_qualify; break;
1440 case 'R': next->flags |= rewrite_repeat; break;
1441
1442 case 'S':
1443 next->flags |= rewrite_smtp;
1444 if (next->key[0] != '^' && Ustrncmp(next->key, "\\N^", 3) != 0)
1445 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1446 "rewrite rule has the S flag but is not a regular expression");
1447 break;
1448
1449 default:
1450 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1451 "unknown rewrite flag character '%c' "
1452 "(could be missing quotes round replacement item)", p[-1]);
1453 break;
1454 }
1455
1456/* If no action flags are set, set all the "normal" rewrites. */
1457
1458if ((next->flags & (rewrite_all | rewrite_smtp)) == 0)
1459 next->flags |= isglobal? rewrite_all : rewrite_all_headers;
1460
1461/* Remember which exist, for optimization, and return the rule */
1462
1463*existflags |= next->flags;
1464return next;
1465}
1466
1467
1468
1469
1470/*************************************************
1471* Read global rewrite information *
1472*************************************************/
1473
1474/* Each line is a single rewrite rule; it is parsed into a control block
1475by readconf_one_rewrite(), and its flags are ORed into the global flag
1476word rewrite_existflags. */
1477
1478void
1479readconf_rewrites(void)
1480{
1481rewrite_rule **chain = &global_rewrite_rules;
1482uschar *p;
1483
1484while ((p = get_config_line()) != NULL)
1485 {
1486 rewrite_rule *next = readconf_one_rewrite(p, &rewrite_existflags, TRUE);
1487 *chain = next;
1488 chain = &(next->next);
1489 }
1490}
1491
1492
1493
1494/*************************************************
1495* Read a string *
1496*************************************************/
1497
1498/* Strings are read into the normal store pool. As long we aren't too
1499near the end of the current block, the string will just use what is necessary
1500on the top of the stacking pool, because string_cat() uses the extension
1501mechanism.
1502
1503Argument:
1504 s the rest of the input line
1505 name the option name (for errors)
1506
1507Returns: pointer to the string
1508*/
1509
1510static uschar *
55414b25 1511read_string(const uschar *s, const uschar *name)
059ec3d9
PH
1512{
1513uschar *yield;
55414b25 1514const uschar *ss;
059ec3d9
PH
1515
1516if (*s != '\"') return string_copy(s);
1517
1518ss = s;
1519yield = string_dequote(&s);
1520
1521if (s == ss+1 || s[-1] != '\"')
1522 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1523 "missing quote at end of string value for %s", name);
1524
1525if (*s != 0) extra_chars_error(s, US"string value for ", name, US"");
1526
1527return yield;
1528}
1529
1530
1531/*************************************************
1ad6489e
JH
1532* Custom-handler options *
1533*************************************************/
1534static void
1535fn_smtp_receive_timeout(const uschar * name, const uschar * str)
1536{
1ad6489e
JH
1537if (*str == '$')
1538 smtp_receive_timeout_s = string_copy(str);
1539else
1540 {
1541 /* "smtp_receive_timeout", opt_time, &smtp_receive_timeout */
1542 smtp_receive_timeout = readconf_readtime(str, 0, FALSE);
1543 if (smtp_receive_timeout < 0)
1544 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
1545 name);
1546 }
1547}
1548
1549/*************************************************
059ec3d9
PH
1550* Handle option line *
1551*************************************************/
1552
1553/* This function is called from several places to process a line containing the
1554setting of an option. The first argument is the line to be decoded; it has been
1555checked not to be empty and not to start with '#'. Trailing newlines and white
1556space have been removed. The second argument is a pointer to the list of
1557variable names that are to be recognized, together with their types and
1558locations, and the third argument gives the number of entries in the list.
1559
1560The fourth argument is a pointer to a data block. If it is NULL, then the data
1561values in the options list are absolute addresses. Otherwise, they are byte
1562offsets in the data block.
1563
1564String option data may continue onto several lines; this function reads further
1565data from config_file if necessary.
1566
1567The yield of this function is normally zero. If a string continues onto
1568multiple lines, then the data value is permitted to be followed by a comma
1569or a semicolon (for use in drivers) and the yield is that character.
1570
1571Arguments:
1572 buffer contains the configuration line to be handled
1573 oltop points to the start of the relevant option list
1574 last one more than the offset of the last item in the option list
1575 data_block NULL when reading main options => data values in the option
1576 list are absolute addresses; otherwise they are byte offsets
1577 in data_block when they have opt_public set; otherwise
1578 they are byte offsets in data_block->options_block.
1579 unknown_txt format string to use in panic message for unknown option;
1580 must contain %s for option name
1581 if given as NULL, don't panic on unknown option
1582
1583Returns: TRUE if an option was read successfully,
1584 FALSE false for an unknown option if unknown_txt == NULL,
1585 otherwise panic and die on an unknown option
1586*/
1587
1588static BOOL
1589readconf_handle_option(uschar *buffer, optionlist *oltop, int last,
1590 void *data_block, uschar *unknown_txt)
1591{
1592int ptr = 0;
1593int offset = 0;
1594int n, count, type, value;
1595int issecure = 0;
1596uid_t uid;
1597gid_t gid;
1598BOOL boolvalue = TRUE;
1599BOOL freesptr = TRUE;
1600optionlist *ol, *ol2;
1601struct passwd *pw;
1602void *reset_point;
1603int intbase = 0;
1604uschar *inttype = US"";
1605uschar *sptr;
1606uschar *s = buffer;
532be449 1607uschar **str_target;
059ec3d9
PH
1608uschar name[64];
1609uschar name2[64];
1610
1611/* There may be leading spaces; thereafter, we expect an option name starting
1612with a letter. */
1613
1614while (isspace(*s)) s++;
1615if (!isalpha(*s))
1616 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "option setting expected: %s", s);
1617
1618/* Read the name of the option, and skip any subsequent white space. If
1619it turns out that what we read was "hide", set the flag indicating that
1620this is a secure option, and loop to read the next word. */
1621
1622for (n = 0; n < 2; n++)
1623 {
1624 while (isalnum(*s) || *s == '_')
1625 {
1626 if (ptr < sizeof(name)-1) name[ptr++] = *s;
1627 s++;
1628 }
1629 name[ptr] = 0;
1630 while (isspace(*s)) s++;
1631 if (Ustrcmp(name, "hide") != 0) break;
1632 issecure = opt_secure;
1633 ptr = 0;
1634 }
1635
1636/* Deal with "no_" or "not_" here for booleans */
1637
1638if (Ustrncmp(name, "no_", 3) == 0)
1639 {
1640 boolvalue = FALSE;
1641 offset = 3;
1642 }
1643
1644if (Ustrncmp(name, "not_", 4) == 0)
1645 {
1646 boolvalue = FALSE;
1647 offset = 4;
1648 }
1649
1650/* Search the list for the given name. A non-existent name, or an option that
1651is set twice, is a disaster. */
1652
d7bed771 1653if (!(ol = find_option(name + offset, oltop, last)))
059ec3d9
PH
1654 {
1655 if (unknown_txt == NULL) return FALSE;
1656 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, CS unknown_txt, name);
1657 }
1658
846726c5
JH
1659if ((ol->type & opt_set) && !(ol->type & (opt_rep_con | opt_rep_str)))
1660 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1661 "\"%s\" option set for the second time", name);
059ec3d9
PH
1662
1663ol->type |= opt_set | issecure;
1664type = ol->type & opt_mask;
1665
1666/* Types with data values must be followed by '='; the "no[t]_" prefix
1667applies only to boolean values. */
1668
1669if (type < opt_bool || type > opt_bool_last)
1670 {
1671 if (offset != 0)
1672 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1673 "negation prefix applied to a non-boolean option");
1674 if (*s == 0)
1675 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1676 "unexpected end of line (data missing) after %s", name);
1677 if (*s != '=')
1678 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "missing \"=\" after %s", name);
1679 }
1680
1681/* If a boolean wasn't preceded by "no[t]_" it can be followed by = and
9c695f6d 1682true/false/yes/no, or, in the case of opt_expand_bool, a general string that
059ec3d9
PH
1683ultimately expands to one of those values. */
1684
1685else if (*s != 0 && (offset != 0 || *s != '='))
1686 extra_chars_error(s, US"boolean option ", name, US"");
1687
1688/* Skip white space after = */
1689
1690if (*s == '=') while (isspace((*(++s))));
1691
1692/* If there is a data block and the opt_public flag is not set, change
1693the data block pointer to the private options block. */
1694
1695if (data_block != NULL && (ol->type & opt_public) == 0)
1696 data_block = (void *)(((driver_instance *)data_block)->options_block);
1697
1698/* Now get the data according to the type. */
1699
1700switch (type)
1701 {
1702 /* If a string value is not enclosed in quotes, it consists of
1703 the rest of the current line, verbatim. Otherwise, string escapes
1704 are processed.
1705
1706 A transport is specified as a string, which is then looked up in the
1707 list of transports. A search type is specified as one of a number of
1708 known strings.
1709
1710 A set or rewrite rules for a driver is specified as a string, which is
1711 then parsed into a suitable chain of control blocks.
1712
1713 Uids and gids are specified as strings which are then looked up in the
1714 passwd file. Lists of uids and gids are similarly specified as colon-
1715 separated strings. */
1716
1717 case opt_stringptr:
1718 case opt_uid:
1719 case opt_gid:
1720 case opt_expand_uid:
1721 case opt_expand_gid:
1722 case opt_uidlist:
1723 case opt_gidlist:
1724 case opt_rewrite:
1725
1726 reset_point = sptr = read_string(s, name);
1727
1728 /* Having read a string, we now have several different ways of using it,
1729 depending on the data type, so do another switch. If keeping the actual
1730 string is not required (because it is interpreted), freesptr is set TRUE,
1731 and at the end we reset the pool. */
1732
1733 switch (type)
1734 {
1735 /* If this was a string, set the variable to point to the new string,
1736 and set the flag so its store isn't reclaimed. If it was a list of rewrite
1737 rules, we still keep the string (for printing), and parse the rules into a
1738 control block and flags word. */
1739
1740 case opt_stringptr:
adaa0e2c
JH
1741 str_target = data_block ? USS (US data_block + (long int)(ol->value))
1742 : USS (ol->value);
846726c5 1743 if (ol->type & opt_rep_con)
532be449 1744 {
adaa0e2c 1745 uschar * saved_condition;
6a8de854
PP
1746 /* We already have a condition, we're conducting a crude hack to let
1747 multiple condition rules be chained together, despite storing them in
1748 text form. */
adaa0e2c
JH
1749 *str_target = string_copy_malloc( (saved_condition = *str_target)
1750 ? string_sprintf("${if and{{bool_lax{%s}}{bool_lax{%s}}}}",
1751 saved_condition, sptr)
1752 : sptr);
846726c5
JH
1753 /* TODO(pdp): there is a memory leak here and just below
1754 when we set 3 or more conditions; I still don't
1755 understand the store mechanism enough to know
1756 what's the safe way to free content from an earlier store.
6a8de854
PP
1757 AFAICT, stores stack, so freeing an early stored item also stores
1758 all data alloc'd after it. If we knew conditions were adjacent,
1759 we could survive that, but we don't. So I *think* we need to take
1760 another bit from opt_type to indicate "malloced"; this seems like
1761 quite a hack, especially for this one case. It also means that
1762 we can't ever reclaim the store from the *first* condition.
1763
1764 Because we only do this once, near process start-up, I'm prepared to
1765 let this slide for the time being, even though it rankles. */
532be449 1766 }
76146973
JH
1767 else if (ol->type & opt_rep_str)
1768 {
2ad78978
JH
1769 uschar sep_o = Ustrncmp(name, "headers_add", 11)==0 ? '\n' : ':';
1770 int sep_i = -(int)sep_o;
55414b25 1771 const uschar * list = sptr;
2ad78978 1772 uschar * s;
acec9514 1773 gstring * list_o = NULL;
4226691b 1774
acec9514
JH
1775 if (*str_target)
1776 {
1777 list_o = string_get(Ustrlen(*str_target) + Ustrlen(sptr));
1778 list_o = string_cat(list_o, *str_target);
1779 }
2ad78978
JH
1780
1781 while ((s = string_nextinlist(&list, &sep_i, NULL, 0)))
acec9514
JH
1782 list_o = string_append_listele(list_o, sep_o, s);
1783
2ad78978 1784 if (list_o)
acec9514 1785 *str_target = string_copy_malloc(string_from_gstring(list_o));
76146973 1786 }
532be449
PP
1787 else
1788 {
1789 *str_target = sptr;
1790 freesptr = FALSE;
1791 }
1792 break;
1793
059ec3d9 1794 case opt_rewrite:
adaa0e2c
JH
1795 if (data_block)
1796 *USS (US data_block + (long int)(ol->value)) = sptr;
059ec3d9 1797 else
adaa0e2c 1798 *USS (ol->value) = sptr;
059ec3d9
PH
1799 freesptr = FALSE;
1800 if (type == opt_rewrite)
1801 {
1802 int sep = 0;
1803 int *flagptr;
1804 uschar *p = sptr;
1805 rewrite_rule **chain;
1806 optionlist *ol3;
1807
1808 sprintf(CS name2, "*%.50s_rules", name);
1809 ol2 = find_option(name2, oltop, last);
1810 sprintf(CS name2, "*%.50s_flags", name);
1811 ol3 = find_option(name2, oltop, last);
1812
1813 if (ol2 == NULL || ol3 == NULL)
1814 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1815 "rewrite rules not available for driver");
1816
1817 if (data_block == NULL)
1818 {
1819 chain = (rewrite_rule **)(ol2->value);
1820 flagptr = (int *)(ol3->value);
1821 }
1822 else
1823 {
5903c6ff
JH
1824 chain = (rewrite_rule **)(US data_block + (long int)(ol2->value));
1825 flagptr = (int *)(US data_block + (long int)(ol3->value));
059ec3d9
PH
1826 }
1827
55414b25 1828 while ((p = string_nextinlist(CUSS &sptr, &sep, big_buffer, BIG_BUFFER_SIZE)))
059ec3d9
PH
1829 {
1830 rewrite_rule *next = readconf_one_rewrite(p, flagptr, FALSE);
1831 *chain = next;
1832 chain = &(next->next);
1833 }
1834
1835 if ((*flagptr & (rewrite_all_envelope | rewrite_smtp)) != 0)
1836 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "rewrite rule specifies a "
1837 "non-header rewrite - not allowed at transport time -");
1838 }
1839 break;
1840
1841 /* If it was an expanded uid, see if there is any expansion to be
1842 done by checking for the presence of a $ character. If there is, save it
1843 in the corresponding *expand_user option field. Otherwise, fall through
1844 to treat it as a fixed uid. Ensure mutual exclusivity of the two kinds
1845 of data. */
1846
1847 case opt_expand_uid:
1848 sprintf(CS name2, "*expand_%.50s", name);
1849 ol2 = find_option(name2, oltop, last);
1850 if (ol2 != NULL)
1851 {
1852 uschar *ss = (Ustrchr(sptr, '$') != NULL)? sptr : NULL;
1853
1854 if (data_block == NULL)
1855 *((uschar **)(ol2->value)) = ss;
1856 else
5903c6ff 1857 *((uschar **)(US data_block + (long int)(ol2->value))) = ss;
059ec3d9
PH
1858
1859 if (ss != NULL)
1860 {
1861 *(get_set_flag(name, oltop, last, data_block)) = FALSE;
1862 freesptr = FALSE;
1863 break;
1864 }
1865 }
1866
1867 /* Look up a fixed uid, and also make use of the corresponding gid
1868 if a passwd entry is returned and the gid has not been set. */
1869
1870 case opt_uid:
1871 if (!route_finduser(sptr, &pw, &uid))
1872 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "user %s was not found", sptr);
1873 if (data_block == NULL)
1874 *((uid_t *)(ol->value)) = uid;
1875 else
5903c6ff 1876 *((uid_t *)(US data_block + (long int)(ol->value))) = uid;
059ec3d9
PH
1877
1878 /* Set the flag indicating a fixed value is set */
1879
1880 *(get_set_flag(name, oltop, last, data_block)) = TRUE;
1881
1882 /* Handle matching gid if we have a passwd entry: done by finding the
1883 same name with terminating "user" changed to "group"; if not found,
1884 ignore. Also ignore if the value is already set. */
1885
1886 if (pw == NULL) break;
1887 Ustrcpy(name+Ustrlen(name)-4, "group");
1888 ol2 = find_option(name, oltop, last);
1889 if (ol2 != NULL && ((ol2->type & opt_mask) == opt_gid ||
1890 (ol2->type & opt_mask) == opt_expand_gid))
1891 {
1892 BOOL *set_flag = get_set_flag(name, oltop, last, data_block);
1893 if (! *set_flag)
1894 {
1895 if (data_block == NULL)
1896 *((gid_t *)(ol2->value)) = pw->pw_gid;
1897 else
5903c6ff 1898 *((gid_t *)(US data_block + (long int)(ol2->value))) = pw->pw_gid;
059ec3d9
PH
1899 *set_flag = TRUE;
1900 }
1901 }
1902 break;
1903
1904 /* If it was an expanded gid, see if there is any expansion to be
1905 done by checking for the presence of a $ character. If there is, save it
1906 in the corresponding *expand_user option field. Otherwise, fall through
1907 to treat it as a fixed gid. Ensure mutual exclusivity of the two kinds
1908 of data. */
1909
1910 case opt_expand_gid:
1911 sprintf(CS name2, "*expand_%.50s", name);
1912 ol2 = find_option(name2, oltop, last);
1913 if (ol2 != NULL)
1914 {
1915 uschar *ss = (Ustrchr(sptr, '$') != NULL)? sptr : NULL;
1916
1917 if (data_block == NULL)
1918 *((uschar **)(ol2->value)) = ss;
1919 else
5903c6ff 1920 *((uschar **)(US data_block + (long int)(ol2->value))) = ss;
059ec3d9
PH
1921
1922 if (ss != NULL)
1923 {
1924 *(get_set_flag(name, oltop, last, data_block)) = FALSE;
1925 freesptr = FALSE;
1926 break;
1927 }
1928 }
1929
1930 /* Handle freestanding gid */
1931
1932 case opt_gid:
1933 if (!route_findgroup(sptr, &gid))
1934 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "group %s was not found", sptr);
1935 if (data_block == NULL)
1936 *((gid_t *)(ol->value)) = gid;
1937 else
5903c6ff 1938 *((gid_t *)(US data_block + (long int)(ol->value))) = gid;
059ec3d9
PH
1939 *(get_set_flag(name, oltop, last, data_block)) = TRUE;
1940 break;
1941
1942 /* If it was a uid list, look up each individual entry, and build
1943 a vector of uids, with a count in the first element. Put the vector
1944 in malloc store so we can free the string. (We are reading into
1945 permanent store already.) */
1946
1947 case opt_uidlist:
1948 {
1949 int count = 1;
1950 uid_t *list;
1951 int ptr = 0;
55414b25
JH
1952 const uschar *p;
1953 const uschar *op = expand_string (sptr);
0925ede6
PH
1954
1955 if (op == NULL)
1956 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to expand %s: %s",
1957 name, expand_string_message);
059ec3d9 1958
0925ede6 1959 p = op;
059ec3d9 1960 if (*p != 0) count++;
0925ede6 1961 while (*p != 0) if (*p++ == ':' && *p != 0) count++;
059ec3d9
PH
1962 list = store_malloc(count*sizeof(uid_t));
1963 list[ptr++] = (uid_t)(count - 1);
1964
1965 if (data_block == NULL)
1966 *((uid_t **)(ol->value)) = list;
1967 else
5903c6ff 1968 *((uid_t **)(US data_block + (long int)(ol->value))) = list;
059ec3d9 1969
0925ede6 1970 p = op;
059ec3d9
PH
1971 while (count-- > 1)
1972 {
1973 int sep = 0;
1974 (void)string_nextinlist(&p, &sep, big_buffer, BIG_BUFFER_SIZE);
1975 if (!route_finduser(big_buffer, NULL, &uid))
1976 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "user %s was not found",
1977 big_buffer);
1978 list[ptr++] = uid;
1979 }
1980 }
1981 break;
1982
1983 /* If it was a gid list, look up each individual entry, and build
1984 a vector of gids, with a count in the first element. Put the vector
1985 in malloc store so we can free the string. (We are reading into permanent
1986 store already.) */
1987
1988 case opt_gidlist:
1989 {
1990 int count = 1;
1991 gid_t *list;
1992 int ptr = 0;
55414b25
JH
1993 const uschar *p;
1994 const uschar *op = expand_string (sptr);
0925ede6
PH
1995
1996 if (op == NULL)
1997 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to expand %s: %s",
1998 name, expand_string_message);
059ec3d9 1999
0925ede6 2000 p = op;
059ec3d9 2001 if (*p != 0) count++;
0925ede6 2002 while (*p != 0) if (*p++ == ':' && *p != 0) count++;
059ec3d9
PH
2003 list = store_malloc(count*sizeof(gid_t));
2004 list[ptr++] = (gid_t)(count - 1);
2005
2006 if (data_block == NULL)
2007 *((gid_t **)(ol->value)) = list;
2008 else
5903c6ff 2009 *((gid_t **)(US data_block + (long int)(ol->value))) = list;
059ec3d9 2010
0925ede6 2011 p = op;
059ec3d9
PH
2012 while (count-- > 1)
2013 {
2014 int sep = 0;
2015 (void)string_nextinlist(&p, &sep, big_buffer, BIG_BUFFER_SIZE);
2016 if (!route_findgroup(big_buffer, &gid))
2017 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "group %s was not found",
2018 big_buffer);
2019 list[ptr++] = gid;
2020 }
2021 }
2022 break;
2023 }
2024
2025 /* Release store if the value of the string doesn't need to be kept. */
2026
2027 if (freesptr) store_reset(reset_point);
2028 break;
2029
2030 /* Expanded boolean: if no characters follow, or if there are no dollar
2031 characters, this is a fixed-valued boolean, and we fall through. Otherwise,
2032 save the string for later expansion in the alternate place. */
2033
2034 case opt_expand_bool:
2035 if (*s != 0 && Ustrchr(s, '$') != 0)
2036 {
2037 sprintf(CS name2, "*expand_%.50s", name);
2038 ol2 = find_option(name2, oltop, last);
2039 if (ol2 != NULL)
2040 {
2041 reset_point = sptr = read_string(s, name);
2042 if (data_block == NULL)
2043 *((uschar **)(ol2->value)) = sptr;
2044 else
5903c6ff 2045 *((uschar **)(US data_block + (long int)(ol2->value))) = sptr;
059ec3d9
PH
2046 freesptr = FALSE;
2047 break;
2048 }
2049 }
2050 /* Fall through */
2051
2052 /* Boolean: if no characters follow, the value is boolvalue. Otherwise
2053 look for yes/not/true/false. Some booleans are stored in a single bit in
2054 a single int. There's a special fudge for verify settings; without a suffix
2055 they set both xx_sender and xx_recipient. The table points to the sender
2056 value; search subsequently for the recipient. There's another special case:
2057 opt_bool_set also notes when a boolean has been set. */
2058
2059 case opt_bool:
2060 case opt_bit:
2061 case opt_bool_verify:
2062 case opt_bool_set:
2063 if (*s != 0)
2064 {
2065 s = readconf_readname(name2, 64, s);
2066 if (strcmpic(name2, US"true") == 0 || strcmpic(name2, US"yes") == 0)
2067 boolvalue = TRUE;
2068 else if (strcmpic(name2, US"false") == 0 || strcmpic(name2, US"no") == 0)
2069 boolvalue = FALSE;
2070 else log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2071 "\"%s\" is not a valid value for the \"%s\" option", name2, name);
2072 if (*s != 0) extra_chars_error(s, string_sprintf("\"%s\" ", name2),
2073 US"for boolean option ", name);
2074 }
2075
2076 /* Handle single-bit type. */
2077
2078 if (type == opt_bit)
2079 {
2080 int bit = 1 << ((ol->type >> 16) & 31);
2081 int *ptr = (data_block == NULL)?
2082 (int *)(ol->value) :
5903c6ff 2083 (int *)(US data_block + (long int)ol->value);
059ec3d9
PH
2084 if (boolvalue) *ptr |= bit; else *ptr &= ~bit;
2085 break;
2086 }
2087
2088 /* Handle full BOOL types */
2089
2090 if (data_block == NULL)
2091 *((BOOL *)(ol->value)) = boolvalue;
2092 else
5903c6ff 2093 *((BOOL *)(US data_block + (long int)(ol->value))) = boolvalue;
059ec3d9
PH
2094
2095 /* Verify fudge */
2096
2097 if (type == opt_bool_verify)
2098 {
2099 sprintf(CS name2, "%.50s_recipient", name + offset);
2100 ol2 = find_option(name2, oltop, last);
2101 if (ol2 != NULL)
2102 {
2103 if (data_block == NULL)
2104 *((BOOL *)(ol2->value)) = boolvalue;
2105 else
5903c6ff 2106 *((BOOL *)(US data_block + (long int)(ol2->value))) = boolvalue;
059ec3d9
PH
2107 }
2108 }
2109
2110 /* Note that opt_bool_set type is set, if there is somewhere to do so */
2111
2112 else if (type == opt_bool_set)
2113 {
2114 sprintf(CS name2, "*set_%.50s", name + offset);
2115 ol2 = find_option(name2, oltop, last);
2116 if (ol2 != NULL)
2117 {
2118 if (data_block == NULL)
2119 *((BOOL *)(ol2->value)) = TRUE;
2120 else
5903c6ff 2121 *((BOOL *)(US data_block + (long int)(ol2->value))) = TRUE;
059ec3d9
PH
2122 }
2123 }
2124 break;
2125
2126 /* Octal integer */
2127
2128 case opt_octint:
2129 intbase = 8;
2130 inttype = US"octal ";
2131
2132 /* Integer: a simple(ish) case; allow octal and hex formats, and
fa792e2c 2133 suffixes K, M, G, and T. The different types affect output, not input. */
059ec3d9
PH
2134
2135 case opt_mkint:
2136 case opt_int:
2137 {
2138 uschar *endptr;
7e8d92ba
PH
2139 long int lvalue;
2140
059ec3d9 2141 errno = 0;
7e8d92ba 2142 lvalue = strtol(CS s, CSS &endptr, intbase);
059ec3d9
PH
2143
2144 if (endptr == s)
2145 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%sinteger expected for %s",
2146 inttype, name);
2147
a45431fa
JH
2148 if (errno != ERANGE && *endptr)
2149 {
fa792e2c 2150 uschar * mp = US"TtGgMmKk\0"; /* YyZzEePpTtGgMmKk */
a45431fa
JH
2151
2152 if ((mp = Ustrchr(mp, *endptr)))
2153 {
2154 endptr++;
2155 do
2156 {
2157 if (lvalue > INT_MAX/1024 || lvalue < INT_MIN/1024)
2158 {
2159 errno = ERANGE;
2160 break;
2161 }
2162 lvalue *= 1024;
2163 }
2164 while (*(mp += 2));
2165 }
2166 }
059ec3d9 2167
7e8d92ba
PH
2168 if (errno == ERANGE || lvalue > INT_MAX || lvalue < INT_MIN)
2169 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2170 "absolute value of integer \"%s\" is too large (overflow)", s);
059ec3d9
PH
2171
2172 while (isspace(*endptr)) endptr++;
a45431fa 2173 if (*endptr)
059ec3d9 2174 extra_chars_error(endptr, inttype, US"integer value for ", name);
7e8d92ba
PH
2175
2176 value = (int)lvalue;
059ec3d9
PH
2177 }
2178
a45431fa
JH
2179 if (data_block)
2180 *(int *)(US data_block + (long int)ol->value) = value;
059ec3d9 2181 else
a45431fa 2182 *(int *)ol->value = value;
059ec3d9
PH
2183 break;
2184
fa792e2c 2185 /* Integer held in K: again, allow formats and suffixes as above. */
059ec3d9
PH
2186
2187 case opt_Kint:
2188 {
2189 uschar *endptr;
2190 errno = 0;
a45431fa 2191 int_eximarith_t lvalue = strtol(CS s, CSS &endptr, intbase);
059ec3d9
PH
2192
2193 if (endptr == s)
2194 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%sinteger expected for %s",
2195 inttype, name);
2196
a45431fa
JH
2197 if (errno != ERANGE && *endptr)
2198 {
fa792e2c 2199 uschar * mp = US"ZzEePpTtGgMmKk\0"; /* YyZzEePpTtGgMmKk */
a45431fa
JH
2200
2201 if ((mp = Ustrchr(mp, *endptr)))
2202 {
2203 endptr++;
fa792e2c 2204 while (*(mp += 2))
a45431fa
JH
2205 {
2206 if (lvalue > EXIM_ARITH_MAX/1024 || lvalue < EXIM_ARITH_MIN/1024)
2207 {
2208 errno = ERANGE;
2209 break;
2210 }
2211 lvalue *= 1024;
2212 }
a45431fa 2213 }
059ec3d9 2214 else
a45431fa
JH
2215 lvalue = (lvalue + 512)/1024;
2216 }
059ec3d9
PH
2217
2218 if (errno == ERANGE) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2219 "absolute value of integer \"%s\" is too large (overflow)", s);
2220
2221 while (isspace(*endptr)) endptr++;
2222 if (*endptr != 0)
2223 extra_chars_error(endptr, inttype, US"integer value for ", name);
059ec3d9 2224
a45431fa
JH
2225 if (data_block)
2226 *(int_eximarith_t *)(US data_block + (long int)ol->value) = lvalue;
2227 else
2228 *(int_eximarith_t *)ol->value = lvalue;
2229 break;
2230 }
059ec3d9
PH
2231
2232 /* Fixed-point number: held to 3 decimal places. */
2233
2234 case opt_fixed:
2235 if (sscanf(CS s, "%d%n", &value, &count) != 1)
2236 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2237 "fixed-point number expected for %s", name);
2238
2239 if (value < 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2240 "integer \"%s\" is too large (overflow)", s);
2241
2242 value *= 1000;
2243
2244 if (value < 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2245 "integer \"%s\" is too large (overflow)", s);
2246
76ac1b5b
JH
2247 /* We get a coverity error here for using count, as it derived
2248 from the tainted buffer pointed to by s, as parsed by sscanf().
4c04137d 2249 By the definition of sscanf we must be accessing between start
76ac1b5b
JH
2250 and end of s (assuming it is nul-terminated...) so ignore the error. */
2251 /* coverity[tainted_data] */
059ec3d9
PH
2252 if (s[count] == '.')
2253 {
2254 int d = 100;
2255 while (isdigit(s[++count]))
2256 {
2257 value += (s[count] - '0') * d;
2258 d /= 10;
2259 }
2260 }
2261
2262 while (isspace(s[count])) count++;
2263
2264 if (s[count] != 0)
2265 extra_chars_error(s+count, US"fixed-point value for ", name, US"");
2266
2267 if (data_block == NULL)
2268 *((int *)(ol->value)) = value;
2269 else
5903c6ff 2270 *((int *)(US data_block + (long int)(ol->value))) = value;
059ec3d9
PH
2271 break;
2272
2273 /* There's a special routine to read time values. */
2274
2275 case opt_time:
2276 value = readconf_readtime(s, 0, FALSE);
2277 if (value < 0)
2278 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
2279 name);
2280 if (data_block == NULL)
2281 *((int *)(ol->value)) = value;
2282 else
5903c6ff 2283 *((int *)(US data_block + (long int)(ol->value))) = value;
059ec3d9
PH
2284 break;
2285
2286 /* A time list is a list of colon-separated times, with the first
2287 element holding the size of the list and the second the number of
2288 entries used. */
2289
2290 case opt_timelist:
2291 {
2292 int count = 0;
2293 int *list = (data_block == NULL)?
2294 (int *)(ol->value) :
5903c6ff 2295 (int *)(US data_block + (long int)(ol->value));
059ec3d9
PH
2296
2297 if (*s != 0) for (count = 1; count <= list[0] - 2; count++)
2298 {
2299 int terminator = 0;
2300 uschar *snext = Ustrchr(s, ':');
2301 if (snext != NULL)
2302 {
2303 uschar *ss = snext;
2304 while (ss > s && isspace(ss[-1])) ss--;
2305 terminator = *ss;
2306 }
2307 value = readconf_readtime(s, terminator, FALSE);
2308 if (value < 0)
2309 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
2310 name);
2311 if (count > 1 && value <= list[count])
2312 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2313 "time value out of order for %s", name);
2314 list[count+1] = value;
2315 if (snext == NULL) break;
2316 s = snext + 1;
2317 while (isspace(*s)) s++;
2318 }
2319
2320 if (count > list[0] - 2)
2321 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "too many time values for %s",
2322 name);
2323 if (count > 0 && list[2] == 0) count = 0;
2324 list[1] = count;
1ad6489e 2325 break;
059ec3d9
PH
2326 }
2327
1ad6489e
JH
2328 case opt_func:
2329 {
2330 void (*fn)() = ol->value;
2331 fn(name, s);
2332 break;
2333 }
059ec3d9
PH
2334 }
2335
2336return TRUE;
2337}
2338
2339
2340
2341/*************************************************
2342* Print a time value *
2343*************************************************/
2344
2345/*
2346Argument: a time value in seconds
2347Returns: pointer to a fixed buffer containing the time as a string,
2348 in readconf_readtime() format
2349*/
2350
2351uschar *
2352readconf_printtime(int t)
2353{
2354int s, m, h, d, w;
2355uschar *p = time_buffer;
2356
ea49d0e1
PH
2357if (t < 0)
2358 {
2359 *p++ = '-';
2360 t = -t;
2361 }
2362
059ec3d9
PH
2363s = t % 60;
2364t /= 60;
2365m = t % 60;
2366t /= 60;
2367h = t % 24;
2368t /= 24;
2369d = t % 7;
2370w = t/7;
2371
32dfdf8b
JH
2372if (w > 0) p += sprintf(CS p, "%dw", w);
2373if (d > 0) p += sprintf(CS p, "%dd", d);
2374if (h > 0) p += sprintf(CS p, "%dh", h);
2375if (m > 0) p += sprintf(CS p, "%dm", m);
059ec3d9
PH
2376if (s > 0 || p == time_buffer) sprintf(CS p, "%ds", s);
2377
2378return time_buffer;
2379}
2380
2381
2382
2383/*************************************************
2384* Print an individual option value *
2385*************************************************/
2386
2387/* This is used by the -bP option, so prints to the standard output.
2388The entire options list is passed in as an argument, because some options come
2389in pairs - typically uid/gid settings, which can either be explicit numerical
2390values, or strings to be expanded later. If the numerical value is unset,
2391search for "*expand_<name>" to see if there is a string equivalent.
2392
2393Arguments:
2394 ol option entry, or NULL for an unknown option
2395 name option name
2396 options_block NULL for main configuration options; otherwise points to
2397 a driver block; if the option doesn't have opt_public
2398 set, then options_block->options_block is where the item
2399 resides.
2400 oltop points to the option list in which ol exists
2401 last one more than the offset of the last entry in optop
12f69989 2402 no_labels do not show "foo = " at the start.
059ec3d9 2403
2be324ee 2404Returns: boolean success
059ec3d9
PH
2405*/
2406
2be324ee 2407static BOOL
059ec3d9 2408print_ol(optionlist *ol, uschar *name, void *options_block,
12f69989 2409 optionlist *oltop, int last, BOOL no_labels)
059ec3d9
PH
2410{
2411struct passwd *pw;
2412struct group *gr;
2413optionlist *ol2;
2414void *value;
2415uid_t *uidlist;
2416gid_t *gidlist;
2417uschar *s;
2418uschar name2[64];
2419
2be324ee 2420if (!ol)
059ec3d9
PH
2421 {
2422 printf("%s is not a known option\n", name);
2be324ee 2423 return FALSE;
059ec3d9
PH
2424 }
2425
2426/* Non-admin callers cannot see options that have been flagged secure by the
2427"hide" prefix. */
2428
8768d548 2429if (!f.admin_user && ol->type & opt_secure)
059ec3d9 2430 {
12f69989
PP
2431 if (no_labels)
2432 printf("%s\n", hidden);
2433 else
2434 printf("%s = %s\n", name, hidden);
2be324ee 2435 return TRUE;
059ec3d9
PH
2436 }
2437
2438/* Else show the value of the option */
2439
2440value = ol->value;
2be324ee 2441if (options_block)
059ec3d9 2442 {
2be324ee 2443 if (!(ol->type & opt_public))
059ec3d9 2444 options_block = (void *)(((driver_instance *)options_block)->options_block);
5903c6ff 2445 value = (void *)(US options_block + (long int)value);
059ec3d9
PH
2446 }
2447
2448switch(ol->type & opt_mask)
2449 {
2450 case opt_stringptr:
2451 case opt_rewrite: /* Show the text value */
2be324ee
JH
2452 s = *(USS value);
2453 if (!no_labels) printf("%s = ", name);
2454 printf("%s\n", s ? string_printing2(s, FALSE) : US"");
2455 break;
059ec3d9
PH
2456
2457 case opt_int:
2be324ee
JH
2458 if (!no_labels) printf("%s = ", name);
2459 printf("%d\n", *((int *)value));
2460 break;
059ec3d9
PH
2461
2462 case opt_mkint:
2463 {
2464 int x = *((int *)value);
2465 if (x != 0 && (x & 1023) == 0)
2466 {
2467 int c = 'K';
2468 x >>= 10;
2469 if ((x & 1023) == 0)
2470 {
2471 c = 'M';
2472 x >>= 10;
2473 }
12f69989
PP
2474 if (!no_labels) printf("%s = ", name);
2475 printf("%d%c\n", x, c);
2476 }
2477 else
2478 {
2479 if (!no_labels) printf("%s = ", name);
2480 printf("%d\n", x);
059ec3d9 2481 }
059ec3d9 2482 }
2be324ee 2483 break;
059ec3d9
PH
2484
2485 case opt_Kint:
2486 {
a45431fa 2487 int_eximarith_t x = *((int_eximarith_t *)value);
12f69989
PP
2488 if (!no_labels) printf("%s = ", name);
2489 if (x == 0) printf("0\n");
fa792e2c 2490 else if ((x & ((1<<30)-1)) == 0) printf(PR_EXIM_ARITH "T\n", x >> 30);
a45431fa
JH
2491 else if ((x & ((1<<20)-1)) == 0) printf(PR_EXIM_ARITH "G\n", x >> 20);
2492 else if ((x & ((1<<10)-1)) == 0) printf(PR_EXIM_ARITH "M\n", x >> 10);
2493 else printf(PR_EXIM_ARITH "K\n", x);
059ec3d9 2494 }
2be324ee 2495 break;
059ec3d9
PH
2496
2497 case opt_octint:
2be324ee
JH
2498 if (!no_labels) printf("%s = ", name);
2499 printf("%#o\n", *((int *)value));
2500 break;
059ec3d9
PH
2501
2502 /* Can be negative only when "unset", in which case integer */
2503
2504 case opt_fixed:
2505 {
2506 int x = *((int *)value);
2507 int f = x % 1000;
2508 int d = 100;
2509 if (x < 0) printf("%s =\n", name); else
2510 {
12f69989
PP
2511 if (!no_labels) printf("%s = ", name);
2512 printf("%d.", x/1000);
059ec3d9
PH
2513 do
2514 {
2515 printf("%d", f/d);
2516 f %= d;
2517 d /= 10;
2518 }
2519 while (f != 0);
2520 printf("\n");
2521 }
2522 }
2be324ee 2523 break;
059ec3d9
PH
2524
2525 /* If the numerical value is unset, try for the string value */
2526
2527 case opt_expand_uid:
2be324ee 2528 if (! *get_set_flag(name, oltop, last, options_block))
059ec3d9 2529 {
2be324ee
JH
2530 sprintf(CS name2, "*expand_%.50s", name);
2531 if ((ol2 = find_option(name2, oltop, last)))
2532 {
2533 void *value2 = ol2->value;
2534 if (options_block)
2535 value2 = (void *)(US options_block + (long int)value2);
2536 s = *(USS value2);
2537 if (!no_labels) printf("%s = ", name);
2538 printf("%s\n", s ? string_printing(s) : US"");
2539 break;
2540 }
059ec3d9 2541 }
059ec3d9 2542
2be324ee 2543 /* Else fall through */
059ec3d9
PH
2544
2545 case opt_uid:
2be324ee
JH
2546 if (!no_labels) printf("%s = ", name);
2547 if (! *get_set_flag(name, oltop, last, options_block))
2548 printf("\n");
2549 else
2550 if ((pw = getpwuid(*((uid_t *)value))))
2551 printf("%s\n", pw->pw_name);
2552 else
2553 printf("%ld\n", (long int)(*((uid_t *)value)));
2554 break;
059ec3d9
PH
2555
2556 /* If the numerical value is unset, try for the string value */
2557
2558 case opt_expand_gid:
2be324ee 2559 if (! *get_set_flag(name, oltop, last, options_block))
059ec3d9 2560 {
2be324ee
JH
2561 sprintf(CS name2, "*expand_%.50s", name);
2562 if ( (ol2 = find_option(name2, oltop, last))
2563 && (ol2->type & opt_mask) == opt_stringptr)
2564 {
2565 void *value2 = ol2->value;
2566 if (options_block)
2567 value2 = (void *)(US options_block + (long int)value2);
2568 s = *(USS value2);
2569 if (!no_labels) printf("%s = ", name);
2570 printf("%s\n", s ? string_printing(s) : US"");
2571 break;
2572 }
059ec3d9 2573 }
059ec3d9 2574
2be324ee 2575 /* Else fall through */
059ec3d9
PH
2576
2577 case opt_gid:
2be324ee
JH
2578 if (!no_labels) printf("%s = ", name);
2579 if (! *get_set_flag(name, oltop, last, options_block))
2580 printf("\n");
2581 else
2582 if ((gr = getgrgid(*((int *)value))))
2583 printf("%s\n", gr->gr_name);
2584 else
2585 printf("%ld\n", (long int)(*((int *)value)));
2586 break;
059ec3d9
PH
2587
2588 case opt_uidlist:
2be324ee
JH
2589 uidlist = *((uid_t **)value);
2590 if (!no_labels) printf("%s =", name);
2591 if (uidlist)
059ec3d9 2592 {
2be324ee
JH
2593 int i;
2594 uschar sep = no_labels ? '\0' : ' ';
2595 for (i = 1; i <= (int)(uidlist[0]); i++)
2596 {
2597 uschar *name = NULL;
2598 if ((pw = getpwuid(uidlist[i]))) name = US pw->pw_name;
2599 if (sep != '\0') printf("%c", sep);
2600 if (name) printf("%s", name);
2601 else printf("%ld", (long int)(uidlist[i]));
2602 sep = ':';
2603 }
059ec3d9 2604 }
2be324ee
JH
2605 printf("\n");
2606 break;
059ec3d9
PH
2607
2608 case opt_gidlist:
2be324ee
JH
2609 gidlist = *((gid_t **)value);
2610 if (!no_labels) printf("%s =", name);
2611 if (gidlist)
059ec3d9 2612 {
2be324ee
JH
2613 int i;
2614 uschar sep = no_labels ? '\0' : ' ';
2615 for (i = 1; i <= (int)(gidlist[0]); i++)
2616 {
2617 uschar *name = NULL;
2618 if ((gr = getgrgid(gidlist[i]))) name = US gr->gr_name;
2619 if (sep != '\0') printf("%c", sep);
2620 if (name) printf("%s", name);
2621 else printf("%ld", (long int)(gidlist[i]));
2622 sep = ':';
2623 }
059ec3d9 2624 }
2be324ee
JH
2625 printf("\n");
2626 break;
059ec3d9
PH
2627
2628 case opt_time:
2be324ee
JH
2629 if (!no_labels) printf("%s = ", name);
2630 printf("%s\n", readconf_printtime(*((int *)value)));
2631 break;
059ec3d9
PH
2632
2633 case opt_timelist:
2634 {
2635 int i;
2636 int *list = (int *)value;
12f69989 2637 if (!no_labels) printf("%s = ", name);
059ec3d9 2638 for (i = 0; i < list[1]; i++)
2be324ee 2639 printf("%s%s", i == 0 ? "" : ":", readconf_printtime(list[i+2]));
059ec3d9
PH
2640 printf("\n");
2641 }
2be324ee 2642 break;
059ec3d9
PH
2643
2644 case opt_bit:
2be324ee
JH
2645 printf("%s%s\n", ((*((int *)value)) & (1 << ((ol->type >> 16) & 31)))?
2646 "" : "no_", name);
2647 break;
059ec3d9
PH
2648
2649 case opt_expand_bool:
2be324ee
JH
2650 sprintf(CS name2, "*expand_%.50s", name);
2651 if ((ol2 = find_option(name2, oltop, last)) && ol2->value)
059ec3d9 2652 {
2be324ee
JH
2653 void *value2 = ol2->value;
2654 if (options_block)
2655 value2 = (void *)(US options_block + (long int)value2);
2656 s = *(USS value2);
2657 if (s)
2658 {
2659 if (!no_labels) printf("%s = ", name);
2660 printf("%s\n", string_printing(s));
2661 break;
2662 }
2663 /* s == NULL => string not set; fall through */
059ec3d9 2664 }
059ec3d9 2665
2be324ee 2666 /* Fall through */
059ec3d9
PH
2667
2668 case opt_bool:
2669 case opt_bool_verify:
2670 case opt_bool_set:
2be324ee
JH
2671 printf("%s%s\n", (*((BOOL *)value))? "" : "no_", name);
2672 break;
059ec3d9 2673 }
2be324ee 2674return TRUE;
059ec3d9
PH
2675}
2676
2677
2678
2679/*************************************************
2680* Print value from main configuration *
2681*************************************************/
2682
2683/* This function, called as a result of encountering the -bP option,
2684causes the value of any main configuration variable to be output if the
2685second argument is NULL. There are some special values:
2686
2687 all print all main configuration options
44f6c01d
HSHR
2688 config_file print the name of the configuration file
2689 (configure_file will still work, for backward
2690 compatibility)
059ec3d9
PH
2691 routers print the routers' configurations
2692 transports print the transports' configuration
2693 authenticators print the authenticators' configuration
5d9c27ec 2694 macros print the macros' configuration
059ec3d9
PH
2695 router_list print a list of router names
2696 transport_list print a list of transport names
2697 authenticator_list print a list of authentication mechanism names
5d9c27ec 2698 macro_list print a list of macro names
059ec3d9
PH
2699 +name print a named list item
2700 local_scan print the local_scan options
bf3c2c6b 2701 config print the configuration as it is parsed
bc3c7bb7 2702 environment print the used execution environment
059ec3d9 2703
5d9c27ec
TK
2704If the second argument is not NULL, it must be one of "router", "transport",
2705"authenticator" or "macro" in which case the first argument identifies the
2706driver whose options are to be printed.
059ec3d9
PH
2707
2708Arguments:
2709 name option name if type == NULL; else driver name
2710 type NULL or driver type name, as described above
12f69989 2711 no_labels avoid the "foo = " at the start of an item
059ec3d9 2712
2be324ee 2713Returns: Boolean success
059ec3d9
PH
2714*/
2715
2be324ee 2716BOOL
12f69989 2717readconf_print(uschar *name, uschar *type, BOOL no_labels)
059ec3d9
PH
2718{
2719BOOL names_only = FALSE;
2720optionlist *ol;
2721optionlist *ol2 = NULL;
2722driver_instance *d = NULL;
5d9c27ec 2723macro_item *m;
059ec3d9
PH
2724int size = 0;
2725
2be324ee 2726if (!type)
059ec3d9
PH
2727 {
2728 if (*name == '+')
2729 {
2730 int i;
2731 tree_node *t;
2732 BOOL found = FALSE;
2733 static uschar *types[] = { US"address", US"domain", US"host",
2734 US"localpart" };
2735 static tree_node **anchors[] = { &addresslist_anchor, &domainlist_anchor,
2736 &hostlist_anchor, &localpartlist_anchor };
2737
2738 for (i = 0; i < 4; i++)
2be324ee 2739 if ((t = tree_search(*(anchors[i]), name+1)))
059ec3d9
PH
2740 {
2741 found = TRUE;
12f69989
PP
2742 if (no_labels)
2743 printf("%s\n", ((namedlist_block *)(t->data.ptr))->string);
2744 else
2745 printf("%slist %s = %s\n", types[i], name+1,
2746 ((namedlist_block *)(t->data.ptr))->string);
059ec3d9 2747 }
059ec3d9
PH
2748
2749 if (!found)
2750 printf("no address, domain, host, or local part list called \"%s\" "
2751 "exists\n", name+1);
2752
2be324ee 2753 return found;
059ec3d9
PH
2754 }
2755
d7bed771
JH
2756 if ( Ustrcmp(name, "configure_file") == 0
2757 || Ustrcmp(name, "config_file") == 0)
059ec3d9
PH
2758 {
2759 printf("%s\n", CS config_main_filename);
2be324ee 2760 return TRUE;
059ec3d9
PH
2761 }
2762
2763 if (Ustrcmp(name, "all") == 0)
2764 {
2765 for (ol = optionlist_config;
c0b9d3e8 2766 ol < optionlist_config + nelem(optionlist_config); ol++)
2be324ee
JH
2767 if (!(ol->type & opt_hidden))
2768 (void) print_ol(ol, US ol->name, NULL,
2769 optionlist_config, nelem(optionlist_config),
2770 no_labels);
2771 return TRUE;
059ec3d9
PH
2772 }
2773
2774 if (Ustrcmp(name, "local_scan") == 0)
2775 {
2be324ee 2776#ifndef LOCAL_SCAN_HAS_OPTIONS
059ec3d9 2777 printf("local_scan() options are not supported\n");
2be324ee
JH
2778 return FALSE;
2779#else
059ec3d9
PH
2780 for (ol = local_scan_options;
2781 ol < local_scan_options + local_scan_options_count; ol++)
2be324ee
JH
2782 (void) print_ol(ol, US ol->name, NULL, local_scan_options,
2783 local_scan_options_count, no_labels);
2784 return TRUE;
2785#endif
059ec3d9
PH
2786 }
2787
bf3c2c6b
HSHR
2788 if (Ustrcmp(name, "config") == 0)
2789 {
8768d548 2790 print_config(f.admin_user, no_labels);
2be324ee 2791 return TRUE;
bf3c2c6b
HSHR
2792 }
2793
059ec3d9
PH
2794 if (Ustrcmp(name, "routers") == 0)
2795 {
2796 type = US"router";
2797 name = NULL;
2798 }
2799 else if (Ustrcmp(name, "transports") == 0)
2800 {
2801 type = US"transport";
2802 name = NULL;
2803 }
059ec3d9
PH
2804 else if (Ustrcmp(name, "authenticators") == 0)
2805 {
2806 type = US"authenticator";
2807 name = NULL;
2808 }
5d9c27ec 2809 else if (Ustrcmp(name, "macros") == 0)
059ec3d9 2810 {
5d9c27ec 2811 type = US"macro";
059ec3d9 2812 name = NULL;
059ec3d9 2813 }
059ec3d9
PH
2814 else if (Ustrcmp(name, "router_list") == 0)
2815 {
2816 type = US"router";
2817 name = NULL;
2818 names_only = TRUE;
2819 }
2820 else if (Ustrcmp(name, "transport_list") == 0)
2821 {
2822 type = US"transport";
2823 name = NULL;
2824 names_only = TRUE;
2825 }
5d9c27ec
TK
2826 else if (Ustrcmp(name, "authenticator_list") == 0)
2827 {
2828 type = US"authenticator";
2829 name = NULL;
2830 names_only = TRUE;
2831 }
5d9c27ec
TK
2832 else if (Ustrcmp(name, "macro_list") == 0)
2833 {
2834 type = US"macro";
2835 name = NULL;
2836 names_only = TRUE;
2837 }
bc3c7bb7
HSHR
2838 else if (Ustrcmp(name, "environment") == 0)
2839 {
2840 if (environ)
2841 {
77560253 2842 uschar ** p;
bc3c7bb7 2843 for (p = USS environ; *p; p++) ;
84bbb4d8 2844 qsort(environ, p - USS environ, sizeof(*p), string_compare_by_pointer);
bc3c7bb7
HSHR
2845
2846 for (p = USS environ; *p; p++)
2847 {
77560253
JH
2848 uschar * q;
2849 if (no_labels && (q = Ustrchr(*p, '='))) *q = '\0';
f2cb6292 2850 puts(CS *p);
bc3c7bb7
HSHR
2851 }
2852 }
2be324ee 2853 return TRUE;
bc3c7bb7
HSHR
2854 }
2855
059ec3d9 2856 else
2be324ee
JH
2857 return print_ol(find_option(name,
2858 optionlist_config, nelem(optionlist_config)),
c0b9d3e8 2859 name, NULL, optionlist_config, nelem(optionlist_config), no_labels);
059ec3d9
PH
2860 }
2861
2862/* Handle the options for a router or transport. Skip options that are flagged
2863as hidden. Some of these are options with names starting with '*', used for
2864internal alternative representations of other options (which the printing
2865function will sort out). Others are synonyms kept for backward compatibility.
2866*/
2867
2868if (Ustrcmp(type, "router") == 0)
2869 {
2870 d = (driver_instance *)routers;
2871 ol2 = optionlist_routers;
2872 size = optionlist_routers_size;
2873 }
2874else if (Ustrcmp(type, "transport") == 0)
2875 {
2876 d = (driver_instance *)transports;
2877 ol2 = optionlist_transports;
2878 size = optionlist_transports_size;
2879 }
2880else if (Ustrcmp(type, "authenticator") == 0)
2881 {
2882 d = (driver_instance *)auths;
2883 ol2 = optionlist_auths;
2884 size = optionlist_auths_size;
2885 }
2886
5d9c27ec
TK
2887else if (Ustrcmp(type, "macro") == 0)
2888 {
2889 /* People store passwords in macros and they were previously not available
2890 for printing. So we have an admin_users restriction. */
8768d548 2891 if (!f.admin_user)
5d9c27ec
TK
2892 {
2893 fprintf(stderr, "exim: permission denied\n");
2be324ee 2894 return FALSE;
5d9c27ec 2895 }
1a7c9a48
JH
2896 for (m = macros; m; m = m->next)
2897 if (!name || Ustrcmp(name, m->name) == 0)
2be324ee 2898 {
1a7c9a48
JH
2899 if (names_only)
2900 printf("%s\n", CS m->name);
1bca4f5f
PP
2901 else if (no_labels)
2902 printf("%s\n", CS m->replacement);
1a7c9a48
JH
2903 else
2904 printf("%s=%s\n", CS m->name, CS m->replacement);
2905 if (name)
2906 return TRUE;
2be324ee 2907 }
1a7c9a48 2908 if (!name) return TRUE;
165acdd1 2909
1a7c9a48
JH
2910 printf("%s %s not found\n", type, name);
2911 return FALSE;
5d9c27ec
TK
2912 }
2913
059ec3d9
PH
2914if (names_only)
2915 {
165acdd1 2916 for (; d; d = d->next) printf("%s\n", CS d->name);
1a7c9a48 2917 return TRUE;
059ec3d9
PH
2918 }
2919
2920/* Either search for a given driver, or print all of them */
2921
165acdd1 2922for (; d; d = d->next)
059ec3d9 2923 {
2be324ee 2924 BOOL rc = FALSE;
165acdd1 2925 if (!name)
059ec3d9 2926 printf("\n%s %s:\n", d->name, type);
1a7c9a48 2927 else if (Ustrcmp(d->name, name) != 0) continue;
059ec3d9
PH
2928
2929 for (ol = ol2; ol < ol2 + size; ol++)
2be324ee
JH
2930 if (!(ol->type & opt_hidden))
2931 rc |= print_ol(ol, US ol->name, d, ol2, size, no_labels);
059ec3d9
PH
2932
2933 for (ol = d->info->options;
2934 ol < d->info->options + *(d->info->options_count); ol++)
2be324ee
JH
2935 if (!(ol->type & opt_hidden))
2936 rc |= print_ol(ol, US ol->name, d, d->info->options,
2937 *d->info->options_count, no_labels);
165acdd1 2938
2be324ee 2939 if (name) return rc;
059ec3d9 2940 }
2be324ee
JH
2941if (!name) return TRUE;
2942
2943printf("%s %s not found\n", type, name);
2944return FALSE;
059ec3d9
PH
2945}
2946
2947
2948
2949/*************************************************
2950* Read a named list item *
2951*************************************************/
2952
2953/* This function reads a name and a list (i.e. string). The name is used to
2954save the list in a tree, sorted by its name. Each entry also has a number,
2955which can be used for caching tests, but if the string contains any expansion
2956items other than $key, the number is set negative to inhibit caching. This
2957mechanism is used for domain, host, and address lists that are referenced by
2958the "+name" syntax.
2959
2960Arguments:
2961 anchorp points to the tree anchor
2962 numberp points to the current number for this tree
2963 max the maximum number permitted
2964 s the text of the option line, starting immediately after the name
2965 of the list type
2966 tname the name of the list type, for messages
2967
2968Returns: nothing
2969*/
2970
2971static void
2972read_named_list(tree_node **anchorp, int *numberp, int max, uschar *s,
2973 uschar *tname)
2974{
2975BOOL forcecache = FALSE;
2976uschar *ss;
2977tree_node *t;
2978namedlist_block *nb = store_get(sizeof(namedlist_block));
2979
2980if (Ustrncmp(s, "_cache", 6) == 0)
2981 {
2982 forcecache = TRUE;
2983 s += 6;
2984 }
2985
2986if (!isspace(*s))
2987 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "unrecognized configuration line");
2988
2989if (*numberp >= max)
2990 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "too many named %ss (max is %d)\n",
2991 tname, max);
2992
2993while (isspace(*s)) s++;
2994ss = s;
2995while (isalnum(*s) || *s == '_') s++;
2996t = store_get(sizeof(tree_node) + s-ss);
2997Ustrncpy(t->name, ss, s-ss);
2998t->name[s-ss] = 0;
2999while (isspace(*s)) s++;
3000
3001if (!tree_insertnode(anchorp, t))
3002 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3003 "duplicate name \"%s\" for a named %s", t->name, tname);
3004
3005t->data.ptr = nb;
3006nb->number = *numberp;
3007*numberp += 1;
3008
3009if (*s++ != '=') log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3010 "missing '=' after \"%s\"", t->name);
3011while (isspace(*s)) s++;
3012nb->string = read_string(s, t->name);
3013nb->cache_data = NULL;
3014
3015/* Check the string for any expansions; if any are found, mark this list
3016uncacheable unless the user has explicited forced caching. */
3017
3018if (!forcecache && Ustrchr(nb->string, '$') != NULL) nb->number = -1;
3019}
3020
3021
3022
3023
3024/*************************************************
3025* Unpick data for a rate limit *
3026*************************************************/
3027
3028/* This function is called to unpick smtp_ratelimit_{mail,rcpt} into four
3029separate values.
3030
3031Arguments:
3032 s string, in the form t,b,f,l
3033 where t is the threshold (integer)
3034 b is the initial delay (time)
3035 f is the multiplicative factor (fixed point)
3036 k is the maximum time (time)
3037 threshold where to store threshold
3038 base where to store base in milliseconds
3039 factor where to store factor in milliseconds
3040 limit where to store limit
3041
3042Returns: nothing (panics on error)
3043*/
3044
3045static void
3046unpick_ratelimit(uschar *s, int *threshold, int *base, double *factor,
3047 int *limit)
3048{
3049uschar bstring[16], lstring[16];
3050
3051if (sscanf(CS s, "%d, %15[0123456789smhdw.], %lf, %15s", threshold, bstring,
3052 factor, lstring) == 4)
3053 {
3054 *base = readconf_readtime(bstring, 0, TRUE);
3055 *limit = readconf_readtime(lstring, 0, TRUE);
3056 if (*base >= 0 && *limit >= 0) return;
3057 }
3058log_write(0, LOG_MAIN|LOG_PANIC_DIE, "malformed ratelimit data: %s", s);
3059}
3060
3061
3062
3063
3064/*************************************************
3375e053
PP
3065* Drop privs for checking TLS config *
3066*************************************************/
3067
3068/* We want to validate TLS options during readconf, but do not want to be
3069root when we call into the TLS library, in case of library linkage errors
3070which cause segfaults; before this check, those were always done as the Exim
3071runtime user and it makes sense to continue with that.
3072
3073Assumes: tls_require_ciphers has been set, if it will be
3074 exim_user has been set, if it will be
3075 exim_group has been set, if it will be
3076
3077Returns: bool for "okay"; false will cause caller to immediately exit.
3078*/
3079
3080#ifdef SUPPORT_TLS
3081static BOOL
34e86e20 3082tls_dropprivs_validate_require_cipher(BOOL nowarn)
3375e053
PP
3083{
3084const uschar *errmsg;
3085pid_t pid;
3086int rc, status;
3087void (*oldsignal)(int);
3088
23f3dc67
JH
3089/* If TLS will never be used, no point checking ciphers */
3090
3091if ( !tls_advertise_hosts
3092 || !*tls_advertise_hosts
3093 || Ustrcmp(tls_advertise_hosts, ":") == 0
3094 )
3095 return TRUE;
34e86e20 3096else if (!nowarn && !tls_certificate)
23bb6982
JH
3097 log_write(0, LOG_MAIN,
3098 "Warning: No server certificate defined; will use a selfsigned one.\n"
23f3dc67
JH
3099 " Suggested action: either install a certificate or change tls_advertise_hosts option");
3100
3375e053
PP
3101oldsignal = signal(SIGCHLD, SIG_DFL);
3102
3103fflush(NULL);
3104if ((pid = fork()) < 0)
3105 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "fork failed for TLS check");
3106
3107if (pid == 0)
3108 {
1d7a353e
PP
3109 /* in some modes, will have dropped privilege already */
3110 if (!geteuid())
3111 exim_setugid(exim_uid, exim_gid, FALSE,
3112 US"calling tls_validate_require_cipher");
3375e053 3113
cf0c6164 3114 if ((errmsg = tls_validate_require_cipher()))
3375e053
PP
3115 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3116 "tls_require_ciphers invalid: %s", errmsg);
3375e053
PP
3117 fflush(NULL);
3118 _exit(0);
3119 }
3120
3121do {
3122 rc = waitpid(pid, &status, 0);
3123} while (rc < 0 && errno == EINTR);
3124
9d26b8c0 3125DEBUG(D_tls)
3375e053
PP
3126 debug_printf("tls_validate_require_cipher child %d ended: status=0x%x\n",
3127 (int)pid, status);
3128
3129signal(SIGCHLD, oldsignal);
3130
3131return status == 0;
3132}
3133#endif /* SUPPORT_TLS */
3134
3135
3136
3137
3138/*************************************************
059ec3d9
PH
3139* Read main configuration options *
3140*************************************************/
3141
3142/* This function is the first to be called for configuration reading. It
3143opens the configuration file and reads general configuration settings until
3144it reaches the end of the configuration section. The file is then left open so
3145that the remaining configuration data can subsequently be read if needed for
3146this run of Exim.
3147
3148The configuration file must be owned either by root or exim, and be writeable
3149only by root or uid/gid exim. The values for Exim's uid and gid can be changed
3150in the config file, so the test is done on the compiled in values. A slight
3151anomaly, to be carefully documented.
3152
3153The name of the configuration file is taken from a list that is included in the
3154binary of Exim. It can be altered from the command line, but if that is done,
3155root privilege is immediately withdrawn unless the caller is root or exim.
3156The first file on the list that exists is used.
3157
3158For use on multiple systems that share file systems, first look for a
3159configuration file whose name has the current node name on the end. If that is
3160not found, try the generic name. For really contorted configurations, that run
3161multiple Exims with different uid settings, first try adding the effective uid
3162before the node name. These complications are going to waste resources on most
3163systems. Therefore they are available only when requested by compile-time
3164options. */
3165
3166void
34e86e20 3167readconf_main(BOOL nowarn)
059ec3d9
PH
3168{
3169int sep = 0;
3170struct stat statbuf;
3171uschar *s, *filename;
55414b25 3172const uschar *list = config_main_filelist;
059ec3d9
PH
3173
3174/* Loop through the possible file names */
3175
8e6c4db1 3176while((filename = string_nextinlist(&list, &sep, big_buffer, big_buffer_size)))
059ec3d9 3177 {
bc3c7bb7 3178
059ec3d9
PH
3179 /* Cut out all the fancy processing unless specifically wanted */
3180
3181 #if defined(CONFIGURE_FILE_USE_NODE) || defined(CONFIGURE_FILE_USE_EUID)
3182 uschar *suffix = filename + Ustrlen(filename);
3183
3184 /* Try for the node-specific file if a node name exists */
3185
3186 #ifdef CONFIGURE_FILE_USE_NODE
3187 struct utsname uts;
3188 if (uname(&uts) >= 0)
3189 {
3190 #ifdef CONFIGURE_FILE_USE_EUID
3191 sprintf(CS suffix, ".%ld.%.256s", (long int)original_euid, uts.nodename);
3192 config_file = Ufopen(filename, "rb");
3193 if (config_file == NULL)
3194 #endif /* CONFIGURE_FILE_USE_EUID */
3195 {
3196 sprintf(CS suffix, ".%.256s", uts.nodename);
3197 config_file = Ufopen(filename, "rb");
3198 }
3199 }
3200 #endif /* CONFIGURE_FILE_USE_NODE */
3201
3202 /* Otherwise, try the generic name, possibly with the euid added */
3203
3204 #ifdef CONFIGURE_FILE_USE_EUID
3205 if (config_file == NULL)
3206 {
3207 sprintf(CS suffix, ".%ld", (long int)original_euid);
3208 config_file = Ufopen(filename, "rb");
3209 }
3210 #endif /* CONFIGURE_FILE_USE_EUID */
3211
3212 /* Finally, try the unadorned name */
3213
3214 if (config_file == NULL)
3215 {
3216 *suffix = 0;
3217 config_file = Ufopen(filename, "rb");
3218 }
3219 #else /* if neither defined */
3220
3221 /* This is the common case when the fancy processing is not included. */
3222
3223 config_file = Ufopen(filename, "rb");
3224 #endif
3225
3226 /* If the file does not exist, continue to try any others. For any other
3227 error, break out (and die). */
3228
3229 if (config_file != NULL || errno != ENOENT) break;
3230 }
3231
3232/* On success, save the name for verification; config_filename is used when
3233logging configuration errors (it changes for .included files) whereas
3234config_main_filename is the name shown by -bP. Failure to open a configuration
3235file is a serious disaster. */
3236
8e7e1357 3237if (config_file)
059ec3d9 3238 {
8e7e1357 3239 uschar *last_slash = Ustrrchr(filename, '/');
059ec3d9 3240 config_filename = config_main_filename = string_copy(filename);
98b8312f 3241
8e7e1357
HSHR
3242 /* The config_main_directory we need for the $config_dir expansion.
3243 config_main_filename we need for $config_file expansion.
29f67888
HSHR
3244 And config_dir is the directory of the current configuration, used for
3245 relative .includes. We do need to know it's name, as we change our working
3246 directory later. */
3247
3248 if (filename[0] == '/')
8e7e1357 3249 config_main_directory = last_slash == filename ? US"/" : string_copyn(filename, last_slash - filename);
29f67888
HSHR
3250 else
3251 {
3252 /* relative configuration file name: working dir + / + basename(filename) */
3253
863bd541 3254 uschar buf[PATH_MAX];
acec9514 3255 gstring * g;
29f67888 3256
863bd541 3257 if (os_getcwd(buf, PATH_MAX) == NULL)
29f67888
HSHR
3258 {
3259 perror("exim: getcwd");
3260 exit(EXIT_FAILURE);
3261 }
acec9514 3262 g = string_cat(NULL, buf);
29f67888
HSHR
3263
3264 /* If the dir does not end with a "/", append one */
acec9514
JH
3265 if (g->s[g->ptr-1] != '/')
3266 g = string_catn(g, US"/", 1);
29f67888
HSHR
3267
3268 /* If the config file contains a "/", extract the directory part */
8e7e1357 3269 if (last_slash)
acec9514 3270 g = string_catn(g, filename, last_slash - filename);
8e7e1357 3271
acec9514 3272 config_main_directory = string_from_gstring(g);
29f67888
HSHR
3273 }
3274 config_directory = config_main_directory;
059ec3d9
PH
3275 }
3276else
3277 {
3278 if (filename == NULL)
3279 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "non-existent configuration file(s): "
3280 "%s", config_main_filelist);
3281 else
3282 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "%s", string_open_failed(errno,
3283 "configuration file %s", filename));
3284 }
3285
29f67888
HSHR
3286/* Now, once we found and opened our configuration file, we change the directory
3287to a safe place. Later we change to $spool_directory. */
3288
3289if (Uchdir("/") < 0)
3290 {
3291 perror("exim: chdir `/': ");
3292 exit(EXIT_FAILURE);
3293 }
3294
e2f5dc15 3295/* Check the status of the file we have opened, if we have retained root
fea24b2e 3296privileges and the file isn't /dev/null (which *should* be 0666). */
059ec3d9 3297
8768d548 3298if (f.trusted_config && Ustrcmp(filename, US"/dev/null"))
059ec3d9
PH
3299 {
3300 if (fstat(fileno(config_file), &statbuf) != 0)
3301 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to stat configuration file %s",
3302 big_buffer);
3303
c1d94452 3304 if ((statbuf.st_uid != root_uid /* owner not root */
059ec3d9
PH
3305 #ifdef CONFIGURE_OWNER
3306 && statbuf.st_uid != config_uid /* owner not the special one */
3307 #endif
3308 ) || /* or */
c1d94452 3309 (statbuf.st_gid != root_gid /* group not root & */
35edf2ff
PH
3310 #ifdef CONFIGURE_GROUP
3311 && statbuf.st_gid != config_gid /* group not the special one */
8e669ac1 3312 #endif
35edf2ff 3313 && (statbuf.st_mode & 020) != 0) || /* group writeable */
059ec3d9
PH
3314 /* or */
3315 ((statbuf.st_mode & 2) != 0)) /* world writeable */
3316
3317 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "Exim configuration file %s has the "
3318 "wrong owner, group, or mode", big_buffer);
3319 }
3320
3321/* Process the main configuration settings. They all begin with a lower case
3322letter. If we see something starting with an upper case letter, it is taken as
3323a macro definition. */
3324
5bfe3b35 3325while ((s = get_config_line()))
059ec3d9 3326 {
af542dcf
HSHR
3327 if (config_lineno == 1 && Ustrstr(s, "\xef\xbb\xbf") == s)
3328 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3329 "found unexpected BOM (Byte Order Mark)");
3330
9650d98a
JH
3331 if (isupper(s[0]))
3332 { if (!macro_read_assignment(s)) exim_exit(EXIT_FAILURE, US""); }
059ec3d9
PH
3333
3334 else if (Ustrncmp(s, "domainlist", 10) == 0)
3335 read_named_list(&domainlist_anchor, &domainlist_count,
3336 MAX_NAMED_LIST, s+10, US"domain list");
3337
3338 else if (Ustrncmp(s, "hostlist", 8) == 0)
3339 read_named_list(&hostlist_anchor, &hostlist_count,
3340 MAX_NAMED_LIST, s+8, US"host list");
3341
3342 else if (Ustrncmp(s, US"addresslist", 11) == 0)
3343 read_named_list(&addresslist_anchor, &addresslist_count,
3344 MAX_NAMED_LIST, s+11, US"address list");
3345
3346 else if (Ustrncmp(s, US"localpartlist", 13) == 0)
3347 read_named_list(&localpartlist_anchor, &localpartlist_count,
3348 MAX_NAMED_LIST, s+13, US"local part list");
3349
3350 else
3351 (void) readconf_handle_option(s, optionlist_config, optionlist_config_size,
3352 NULL, US"main option \"%s\" unknown");
3353 }
3354
3355
3356/* If local_sender_retain is set, local_from_check must be unset. */
3357
3358if (local_sender_retain && local_from_check)
3359 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "both local_from_check and "
3360 "local_sender_retain are set; this combination is not allowed");
3361
3362/* If the timezone string is empty, set it to NULL, implying no TZ variable
3363wanted. */
3364
3365if (timezone_string != NULL && *timezone_string == 0) timezone_string = NULL;
3366
944a9c55
PH
3367/* The max retry interval must not be greater than 24 hours. */
3368
3369if (retry_interval_max > 24*60*60) retry_interval_max = 24*60*60;
3370
059ec3d9
PH
3371/* remote_max_parallel must be > 0 */
3372
3373if (remote_max_parallel <= 0) remote_max_parallel = 1;
3374
6a3f1455
PH
3375/* Save the configured setting of freeze_tell, so we can re-instate it at the
3376start of a new SMTP message. */
3377
3378freeze_tell_config = freeze_tell;
3379
059ec3d9
PH
3380/* The primary host name may be required for expansion of spool_directory
3381and log_file_path, so make sure it is set asap. It is obtained from uname(),
3382but if that yields an unqualified value, make a FQDN by using gethostbyname to
3383canonize it. Some people like upper case letters in their host names, so we
3384don't force the case. */
3385
3386if (primary_hostname == NULL)
3387 {
55414b25 3388 const uschar *hostname;
059ec3d9
PH
3389 struct utsname uts;
3390 if (uname(&uts) < 0)
3391 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "uname() failed to yield host name");
3392 hostname = US uts.nodename;
3393
3394 if (Ustrchr(hostname, '.') == NULL)
3395 {
3396 int af = AF_INET;
3397 struct hostent *hostdata;
3398
3399 #if HAVE_IPV6
7e66e54d 3400 if (!disable_ipv6 && (dns_ipv4_lookup == NULL ||
55414b25
JH
3401 match_isinlist(hostname, CUSS &dns_ipv4_lookup, 0, NULL, NULL,
3402 MCL_DOMAIN, TRUE, NULL) != OK))
059ec3d9
PH
3403 af = AF_INET6;
3404 #else
3405 af = AF_INET;
3406 #endif
3407
3408 for (;;)
3409 {
3410 #if HAVE_IPV6
3411 #if HAVE_GETIPNODEBYNAME
3412 int error_num;
3413 hostdata = getipnodebyname(CS hostname, af, 0, &error_num);
3414 #else
3415 hostdata = gethostbyname2(CS hostname, af);
3416 #endif
3417 #else
3418 hostdata = gethostbyname(CS hostname);
3419 #endif
3420
3421 if (hostdata != NULL)
3422 {
3423 hostname = US hostdata->h_name;
3424 break;
3425 }
3426
3427 if (af == AF_INET) break;
3428 af = AF_INET;
3429 }
3430 }
3431
3432 primary_hostname = string_copy(hostname);
3433 }
3434
3435/* Set up default value for smtp_active_hostname */
3436
3437smtp_active_hostname = primary_hostname;
3438
3439/* If spool_directory wasn't set in the build-time configuration, it must have
3440got set above. Of course, writing to the log may not work if log_file_path is
3441not set, but it will at least get to syslog or somewhere, with any luck. */
3442
3443if (*spool_directory == 0)
3444 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "spool_directory undefined: cannot "
3445 "proceed");
3446
3447/* Expand the spool directory name; it may, for example, contain the primary
3448host name. Same comment about failure. */
3449
3450s = expand_string(spool_directory);
3451if (s == NULL)
3452 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand spool_directory "
3453 "\"%s\": %s", spool_directory, expand_string_message);
3454spool_directory = s;
3455
3456/* Expand log_file_path, which must contain "%s" in any component that isn't
f1e5fef5
PP
3457the null string or "syslog". It is also allowed to contain one instance of %D
3458or %M. However, it must NOT contain % followed by anything else. */
059ec3d9
PH
3459
3460if (*log_file_path != 0)
3461 {
55414b25 3462 const uschar *ss, *sss;
059ec3d9
PH
3463 int sep = ':'; /* Fixed for log file path */
3464 s = expand_string(log_file_path);
3465 if (s == NULL)
3466 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand log_file_path "
3467 "\"%s\": %s", log_file_path, expand_string_message);
3468
3469 ss = s;
3470 while ((sss = string_nextinlist(&ss,&sep,big_buffer,big_buffer_size)) != NULL)
3471 {
3472 uschar *t;
3473 if (sss[0] == 0 || Ustrcmp(sss, "syslog") == 0) continue;
3474 t = Ustrstr(sss, "%s");
3475 if (t == NULL)
3476 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "log_file_path \"%s\" does not "
3477 "contain \"%%s\"", sss);
3478 *t = 'X';
3479 t = Ustrchr(sss, '%');
3480 if (t != NULL)
3481 {
f1e5fef5 3482 if ((t[1] != 'D' && t[1] != 'M') || Ustrchr(t+2, '%') != NULL)
059ec3d9
PH
3483 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "log_file_path \"%s\" contains "
3484 "unexpected \"%%\" character", s);
3485 }
3486 }
3487
3488 log_file_path = s;
3489 }
3490
3491/* Interpret syslog_facility into an integer argument for 'ident' param to
3492openlog(). Default is LOG_MAIL set in globals.c. Allow the user to omit the
3493leading "log_". */
3494
5bfe3b35 3495if (syslog_facility_str)
059ec3d9
PH
3496 {
3497 int i;
3498 uschar *s = syslog_facility_str;
3499
3500 if ((Ustrlen(syslog_facility_str) >= 4) &&
3501 (strncmpic(syslog_facility_str, US"log_", 4) == 0))
3502 s += 4;
3503
3504 for (i = 0; i < syslog_list_size; i++)
059ec3d9
PH
3505 if (strcmpic(s, syslog_list[i].name) == 0)
3506 {
3507 syslog_facility = syslog_list[i].value;
3508 break;
3509 }
059ec3d9
PH
3510
3511 if (i >= syslog_list_size)
059ec3d9
PH
3512 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3513 "failed to interpret syslog_facility \"%s\"", syslog_facility_str);
059ec3d9
PH
3514 }
3515
3516/* Expand pid_file_path */
3517
3518if (*pid_file_path != 0)
3519 {
5bfe3b35 3520 if (!(s = expand_string(pid_file_path)))
059ec3d9
PH
3521 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand pid_file_path "
3522 "\"%s\": %s", pid_file_path, expand_string_message);
3523 pid_file_path = s;
3524 }
3525
921b12ca
TF
3526/* Set default value of process_log_path */
3527
5bfe3b35 3528if (!process_log_path || *process_log_path =='\0')
921b12ca
TF
3529 process_log_path = string_sprintf("%s/exim-process.info", spool_directory);
3530
059ec3d9
PH
3531/* Compile the regex for matching a UUCP-style "From_" line in an incoming
3532message. */
3533
3534regex_From = regex_must_compile(uucp_from_pattern, FALSE, TRUE);
3535
3536/* Unpick the SMTP rate limiting options, if set */
3537
5bfe3b35 3538if (smtp_ratelimit_mail)
059ec3d9
PH
3539 unpick_ratelimit(smtp_ratelimit_mail, &smtp_rlm_threshold,
3540 &smtp_rlm_base, &smtp_rlm_factor, &smtp_rlm_limit);
059ec3d9 3541
5bfe3b35 3542if (smtp_ratelimit_rcpt)
059ec3d9
PH
3543 unpick_ratelimit(smtp_ratelimit_rcpt, &smtp_rlr_threshold,
3544 &smtp_rlr_base, &smtp_rlr_factor, &smtp_rlr_limit);
059ec3d9
PH
3545
3546/* The qualify domains default to the primary host name */
3547
5bfe3b35 3548if (!qualify_domain_sender)
059ec3d9 3549 qualify_domain_sender = primary_hostname;
5bfe3b35 3550if (!qualify_domain_recipient)
059ec3d9
PH
3551 qualify_domain_recipient = qualify_domain_sender;
3552
3553/* Setting system_filter_user in the configuration sets the gid as well if a
3554name is given, but a numerical value does not. */
3555
3556if (system_filter_uid_set && !system_filter_gid_set)
3557 {
3558 struct passwd *pw = getpwuid(system_filter_uid);
5bfe3b35 3559 if (!pw)
059ec3d9
PH
3560 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "Failed to look up uid %ld",
3561 (long int)system_filter_uid);
3562 system_filter_gid = pw->pw_gid;
3563 system_filter_gid_set = TRUE;
3564 }
3565
3566/* If the errors_reply_to field is set, check that it is syntactically valid
3567and ensure it contains a domain. */
3568
5bfe3b35 3569if (errors_reply_to)
059ec3d9
PH
3570 {
3571 uschar *errmess;
3572 int start, end, domain;
3573 uschar *recipient = parse_extract_address(errors_reply_to, &errmess,
3574 &start, &end, &domain, FALSE);
3575
5bfe3b35 3576 if (!recipient)
059ec3d9
PH
3577 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3578 "error in errors_reply_to (%s): %s", errors_reply_to, errmess);
3579
3580 if (domain == 0)
3581 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3582 "errors_reply_to (%s) does not contain a domain", errors_reply_to);
3583 }
3584
3585/* If smtp_accept_queue or smtp_accept_max_per_host is set, then
3586smtp_accept_max must also be set. */
3587
3588if (smtp_accept_max == 0 &&
3589 (smtp_accept_queue > 0 || smtp_accept_max_per_host != NULL))
3590 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3591 "smtp_accept_max must be set if smtp_accept_queue or "
3592 "smtp_accept_max_per_host is set");
3593
3594/* Set up the host number if anything is specified. It is an expanded string
3595so that it can be computed from the host name, for example. We do this last
3596so as to ensure that everything else is set up before the expansion. */
3597
5bfe3b35 3598if (host_number_string)
059ec3d9 3599 {
ef840681 3600 long int n;
059ec3d9
PH
3601 uschar *end;
3602 uschar *s = expand_string(host_number_string);
5bfe3b35
JH
3603
3604 if (!s)
ef840681
PP
3605 log_write(0, LOG_MAIN|LOG_PANIC_DIE,
3606 "failed to expand localhost_number \"%s\": %s",
3607 host_number_string, expand_string_message);
3608 n = Ustrtol(s, &end, 0);
059ec3d9
PH
3609 while (isspace(*end)) end++;
3610 if (*end != 0)
3611 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3612 "localhost_number value is not a number: %s", s);
3613 if (n > LOCALHOST_MAX)
3614 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3615 "localhost_number is greater than the maximum allowed value (%d)",
3616 LOCALHOST_MAX);
3617 host_number = n;
3618 }
3619
3620#ifdef SUPPORT_TLS
3621/* If tls_verify_hosts is set, tls_verify_certificates must also be set */
3622
5bfe3b35 3623if ((tls_verify_hosts || tls_try_verify_hosts) && !tls_verify_certificates)
059ec3d9
PH
3624 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3625 "tls_%sverify_hosts is set, but tls_verify_certificates is not set",
5bfe3b35 3626 tls_verify_hosts ? "" : "try_");
77bb000f 3627
3375e053
PP
3628/* This also checks that the library linkage is working and we can call
3629routines in it, so call even if tls_require_ciphers is unset */
34e86e20 3630if (!tls_dropprivs_validate_require_cipher(nowarn))
3375e053
PP
3631 exit(1);
3632
3633/* Magic number: at time of writing, 1024 has been the long-standing value
3634used by so many clients, and what Exim used to use always, that it makes
3635sense to just min-clamp this max-clamp at that. */
3636if (tls_dh_max_bits < 1024)
3637 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3638 "tls_dh_max_bits is too small, must be at least 1024 for interop");
3639
77bb000f 3640/* If openssl_options is set, validate it */
7006ee24 3641if (openssl_options)
77bb000f
PP
3642 {
3643# ifdef USE_GNUTLS
3644 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
a053d125 3645 "openssl_options is set but we're using GnuTLS");
77bb000f
PP