nmstate 2.2.26

Library for networking management in a declarative manner
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

// SPDX-License-Identifier: Apache-2.0

use std::collections::HashMap;

use crate::nm::nm_dbus::{NmConnection, NmSettingVpn};
use crate::{IpsecInterface, NetworkState};

pub(crate) fn gen_nm_ipsec_vpn_setting(
    iface: &IpsecInterface,
    nm_conn: &mut NmConnection,
) {
    if let Some(conf) = iface.libreswan.as_ref() {
        let mut vpn_data: HashMap<String, String> = HashMap::new();
        vpn_data.insert("right".into(), conf.right.to_string());
        if let Some(v) = conf.rightid.as_deref() {
            vpn_data.insert("rightid".into(), v.to_string());
        }
        if let Some(v) = conf.rightrsasigkey.as_deref() {
            vpn_data.insert("rightrsasigkey".into(), v.to_string());
        }
        if let Some(v) = conf.left.as_deref() {
            vpn_data.insert("left".into(), v.to_string());
        }
        if let Some(v) = conf.leftid.as_deref() {
            vpn_data.insert("leftid".into(), v.to_string());
        }
        if let Some(v) = conf.leftrsasigkey.as_deref() {
            vpn_data.insert("leftrsasigkey".into(), v.to_string());
        }
        if let Some(v) = conf.leftcert.as_deref() {
            vpn_data.insert("leftcert".into(), v.to_string());
        }
        if let Some(v) = conf.ikev2.as_deref() {
            vpn_data.insert("ikev2".into(), v.to_string());
        }
        if let Some(v) = conf.ikelifetime.as_deref() {
            vpn_data.insert("ikelifetime".into(), v.to_string());
        }
        if let Some(v) = conf.salifetime.as_deref() {
            vpn_data.insert("salifetime".into(), v.to_string());
        }
        if let Some(v) = conf.ike.as_deref() {
            vpn_data.insert("ike".into(), v.to_string());
        }
        if let Some(v) = conf.esp.as_deref() {
            vpn_data.insert("esp".into(), v.to_string());
        }
        if let Some(v) = conf.dpddelay {
            vpn_data.insert("dpddelay".into(), v.to_string());
        }
        if let Some(v) = conf.dpdtimeout {
            vpn_data.insert("dpdtimeout".into(), v.to_string());
        }
        if let Some(v) = conf.dpdaction.as_deref() {
            vpn_data.insert("dpdaction".into(), v.to_string());
        }
        if let Some(v) = conf.ipsec_interface.as_deref() {
            vpn_data.insert("ipsec-interface".into(), v.to_string());
        }
        if let Some(v) = conf.authby.as_deref() {
            vpn_data.insert("authby".into(), v.to_string());
        }
        if let Some(v) = conf.leftmodecfgclient {
            vpn_data.insert(
                "leftmodecfgclient".into(),
                if v {
                    "yes".to_string()
                } else {
                    "no".to_string()
                },
            );
        }
        if let Some(v) = conf.rightsubnet.as_deref() {
            vpn_data.insert("rightsubnet".into(), v.to_string());
        }
        if let Some(v) = conf.kind {
            vpn_data.insert("type".into(), v.to_string());
        }
        if let Some(v) = conf.clientaddrfamily {
            vpn_data.insert("clientaddrfamily".into(), v.to_string());
        }
        if let Some(v) = conf.hostaddrfamily {
            vpn_data.insert("hostaddrfamily".into(), v.to_string());
        }

        let mut nm_vpn_set = NmSettingVpn::default();
        nm_vpn_set.data = Some(vpn_data);
        nm_vpn_set.service_type =
            Some(NmSettingVpn::SERVICE_TYPE_LIBRESWAN.to_string());
        if let Some(v) = conf.psk.as_deref() {
            if v == NetworkState::PASSWORD_HID_BY_NMSTATE {
                nm_vpn_set.secrets = nm_conn
                    .vpn
                    .as_ref()
                    .and_then(|c| c.secrets.as_ref())
                    .cloned();
            } else {
                nm_vpn_set
                    .secrets
                    .get_or_insert(HashMap::new())
                    .insert("pskvalue".to_string(), v.to_string());
            }
        }
        nm_conn.vpn = Some(nm_vpn_set);
    }
}