Differential D27764 Diff 76989 vpn/l2tp/l2tpipsecwidget.cpp

Changeset View

Standalone View

View Options

vpn/l2tp/l2tpipsecwidget.cpp

1/* 1​/*
2 Copyright 2013 Jan Grulich <jgrulich@redhat.com> 2​ Copyright 2013 Jan Grulich <jgrulich@redhat.com>
3​ Copyright 2020 Douglas Kosovic <doug@uq.edu.au>
3 4​
4 This library is free software; you can redistribute it and/or 5​ This library is free software; you can redistribute it and/or
5 modify it under the terms of the GNU Lesser General Public 6​ modify it under the terms of the GNU Lesser General Public
6 License as published by the Free Software Foundation; either 7​ License as published by the Free Software Foundation; either
7 version 2.1 of the License, or (at your option) version 3, or any 8​ version 2.1 of the License, or (at your option) version 3, or any
8 later version accepted by the membership of KDE e.V. (or its 9​ later version accepted by the membership of KDE e.V. (or its
9 successor approved by the membership of KDE e.V.), which shall 10​ successor approved by the membership of KDE e.V.), which shall
10 act as a proxy defined in Section 6 of version 3 of the license. 11​ act as a proxy defined in Section 6 of version 3 of the license.
11 12​
12 This library is distributed in the hope that it will be useful, 13​ This library is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of 14​ but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 15​ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 Lesser General Public License for more details. 16​ Lesser General Public License for more details.
16 17​
17 You should have received a copy of the GNU Lesser General Public 18​ You should have received a copy of the GNU Lesser General Public
18 License along with this library. If not, see <http://www.gnu.org/licenses/>. 19​ License along with this library. If not, see <http://www.gnu.org/licenses/>.
19*/ 20​*/
20 21​
22​#include <QProcess>
23​#include <QStandardPaths>
21#include "l2tpipsecwidget.h" 24​#include "l2tpipsecwidget.h"
22#include "ui_l2tpipsec.h" 25​#include "ui_l2tpipsec.h"
23#include "nm-l2tp-service.h" 26​#include "nm-l2tp-service.h"
24 27​
25#include <KLocalizedString> 28​#include <KLocalizedString>
26#include <KAcceleratorManager> 29​#include <KAcceleratorManager>
27 30​
31​#define DEFAULT_IPSEC_STRONGSWAN_IKELIFETIME_HOURS 3
32​#define DEFAULT_IPSEC_STRONGSWAN_LIFETIME_HOURS 1
33​
34​#define DEFAULT_IPSEC_LIBRESWAN_IKELIFETIME_HOURS 1
35​#define DEFAULT_IPSEC_LIBRESWAN_SALIFETIME_HOURS 8
36​
28L2tpIpsecWidget::L2tpIpsecWidget(const NetworkManager::VpnSetting::Ptr &setting, QWidget *parent) 37​L2tpIpsecWidget::L2tpIpsecWidget(const NetworkManager::VpnSetting::Ptr &setting, QWidget *parent)
29 : QDialog(parent) 38​ : QDialog(parent)
30 , m_ui(new Ui::L2tpIpsecWidget) 39​ , m_ui(new Ui::L2tpIpsecWidget)
31{ 40​{
32 m_ui->setupUi(this); 41​ m_ui->setupUi(this);
42​ m_ui->machineKeyPassword->setPasswordOptionsEnabled(true);
43​ m_ui->machineKeyPassword->setPasswordNotRequiredEnabled(true);
44​
45​ // use requesters' urlSelected signals to set other requester's startDirs to save clicking
46​ // around the filesystem, also if it is a .p12 file, set the other URLs to that .p12 file.
47​ QList<const KUrlRequester *> requesters;
48​ requesters << m_ui->machineCA << m_ui->machineCert << m_ui->machineKey;
49​ for (const KUrlRequester *requester : requesters) {
50​ connect(requester, &KUrlRequester::urlSelected, this, &L2tpIpsecWidget::updateStartDirUrl);
51​ }
52​
53​ connect(m_ui->cbIkelifetime, &QCheckBox::toggled, this, &L2tpIpsecWidget::setDefaultIkelifetime);
54​ connect(m_ui->cbSalifetime, &QCheckBox::toggled, this, &L2tpIpsecWidget::setDefaultSalifetime);
55​ connect(m_ui->cmbAuthType, QOverload<int>::of(&QComboBox::currentIndexChanged), this, &L2tpIpsecWidget::resizeStackedWidget);
33 56​
34 setWindowTitle(i18n("L2TP IPsec Options")); 57​ setWindowTitle(i18n("L2TP IPsec Options"));
35 58​
36 KAcceleratorManager::manage(this); 59​ KAcceleratorManager::manage(this);
37 60​
38 loadConfig(setting); 61​ loadConfig(setting);
62​
63​ resizeStackedWidget(m_ui->cmbAuthType->currentIndex());
39} 64​}
40 65​
41L2tpIpsecWidget::~L2tpIpsecWidget() 66​L2tpIpsecWidget::~L2tpIpsecWidget()
42{ 67​{
43 delete m_ui; 68​ delete m_ui;
44} 69​}
45 70​
46void L2tpIpsecWidget::loadConfig(const NetworkManager::VpnSetting::Ptr &setting) 71​void L2tpIpsecWidget::loadConfig(const NetworkManager::VpnSetting::Ptr &setting)
47{ 72​{
48 if (setting->data().value(NM_L2TP_KEY_IPSEC_ENABLE) == "yes") { 73​ const QString yesString = QLatin1String("yes");
49 m_ui->cbEnableTunnelToHost->setChecked(true); 74​ const QString noString = QLatin1String("no");
50 m_ui->gatewayId->setText(setting->data().value(NM_L2TP_KEY_IPSEC_GATEWAY_ID)); 75​
51 m_ui->presharedKey->setText(setting->data().value(NM_L2TP_KEY_IPSEC_PSK)); 76​ // General settings
52 m_ui->ike->setText(setting->data().value(NM_L2TP_KEY_IPSEC_IKE)); 77​ const NMStringMap dataMap = setting->data();
53 m_ui->esp->setText(setting->data().value(NM_L2TP_KEY_IPSEC_ESP)); 78​
54 if (setting->data().value(NM_L2TP_KEY_IPSEC_FORCEENCAPS) == "yes" ) { 79​ if (!hasIpsecDaemon()) {
55 m_ui->cbForceEncaps->setChecked(true); 80​ m_ui->gbEnableTunnelToHost->setChecked(false);
81​ m_ui->gbEnableTunnelToHost->setDisabled(true);
82​ } else if (dataMap[NM_L2TP_KEY_IPSEC_ENABLE] == yesString) {
83​ m_ui->gbEnableTunnelToHost->setChecked(true);
84​
85​ if (dataMap[NM_L2TP_KEY_MACHINE_AUTH_TYPE].isEmpty()
86​ || dataMap[NM_L2TP_KEY_MACHINE_AUTH_TYPE] == QLatin1String(NM_L2TP_AUTHTYPE_PSK)) {
87​ m_ui->cmbAuthType->setCurrentIndex(AuthType::PSK);
88​ m_ui->stackedWidget->setCurrentIndex(AuthType::PSK);
89​
90​ // *SWAN support Base64 encoded PSKs that are prefixed with "0s"
91​ QString psk = dataMap[NM_L2TP_KEY_IPSEC_PSK];
92​ if (psk.length() > 2 && psk.startsWith(QLatin1String("0s"))) {
93​ m_ui->presharedKey->setText(QByteArray::fromBase64(psk.mid(2).toUtf8()));
94​ } else {
95​ m_ui->presharedKey->setText(psk);
96​ }
97​
98​ } else { // NM_L2TP_AUTHTYPE_TLS
99​ m_ui->cmbAuthType->setCurrentIndex(AuthType::TLS);
100​ m_ui->stackedWidget->setCurrentIndex(AuthType::TLS);
101​
102​ m_ui->machineCA->setUrl(QUrl::fromLocalFile(dataMap[NM_L2TP_KEY_MACHINE_CA]));
103​ m_ui->machineCert->setUrl(QUrl::fromLocalFile(dataMap[NM_L2TP_KEY_MACHINE_CERT]));
104​ m_ui->machineKey->setUrl(QUrl::fromLocalFile(dataMap[NM_L2TP_KEY_MACHINE_KEY]));
105​
106​ const NetworkManager::Setting::SecretFlags machineKeyPassType = static_cast<NetworkManager::Setting::SecretFlags>(dataMap[NM_L2TP_KEY_MACHINE_CERTPASS"-flags"].toInt());
107​ if (machineKeyPassType.testFlag(NetworkManager::Setting::None)) {
108​ m_ui->machineKeyPassword->setPasswordOption(PasswordField::StoreForAllUsers);
109​ } else if (machineKeyPassType.testFlag(NetworkManager::Setting::AgentOwned)) {
110​ m_ui->machineKeyPassword->setPasswordOption(PasswordField::StoreForUser);
111​ } else if (machineKeyPassType.testFlag(NetworkManager::Setting::NotSaved)) {
112​ m_ui->machineKeyPassword->setPasswordOption(PasswordField::AlwaysAsk);
113​ } else if (machineKeyPassType.testFlag(NetworkManager::Setting::NotRequired)) {
114​ m_ui->machineKeyPassword->setPasswordOption(PasswordField::NotRequired);
115​ }
116​ }
117​
118​ if (!dataMap[NM_L2TP_KEY_IPSEC_GATEWAY_ID].isEmpty()) {
119​ m_ui->remoteId->setText(dataMap[NM_L2TP_KEY_IPSEC_GATEWAY_ID]);
120​ } else {
121​ m_ui->remoteId->setText(dataMap[NM_L2TP_KEY_IPSEC_REMOTE_ID]);
122​ }
123​ m_ui->ike->setText(dataMap[NM_L2TP_KEY_IPSEC_IKE]);
124​ m_ui->esp->setText(dataMap[NM_L2TP_KEY_IPSEC_ESP]);
125​
126​ if (!dataMap[NM_L2TP_KEY_IPSEC_IKELIFETIME].isEmpty()) {
127​ const int totalSeconds = dataMap[NM_L2TP_KEY_IPSEC_IKELIFETIME].toInt();
jgrulichUnsubmitted
Not Done

const? Same for variables below.

jgrulich: const? Same for variables below.
128​ const int hours = totalSeconds / 3600;
129​ const int minutes = (totalSeconds % 3600) / 60;
130​ const int seconds = totalSeconds % 60;
131​ const QTime lifetime = QTime(hours, minutes, seconds);
132​
133​ m_ui->ikelifetime->setTime(lifetime);
jgrulichUnsubmitted
Not Done

Missing indentation.

jgrulich: Missing indentation.
134​ m_ui->ikelifetime->setEnabled(true);
135​ m_ui->cbIkelifetime->setChecked(true);
136​ } else {
137​ setDefaultIkelifetime(false);
138​ m_ui->ikelifetime->setEnabled(false);
139​ m_ui->cbIkelifetime->setChecked(false);
140​ }
141​
142​ if (!dataMap[NM_L2TP_KEY_IPSEC_SALIFETIME].isEmpty()) {
143​ const int totalSeconds = dataMap[NM_L2TP_KEY_IPSEC_SALIFETIME].toInt();
jgrulichUnsubmitted
Not Done

const? Same for variables below.

jgrulich: const? Same for variables below.
144​ const int hours = totalSeconds / 3600;
145​ const int minutes = (totalSeconds % 3600) / 60;
146​ const int seconds = totalSeconds % 60;
147​ const QTime lifetime = QTime(hours, minutes, seconds);
148​
149​ m_ui->salifetime->setTime(lifetime);
150​ m_ui->salifetime->setEnabled(true);
151​ m_ui->cbSalifetime->setChecked(true);
152​ } else {
153​ setDefaultSalifetime(false);
154​ m_ui->salifetime->setEnabled(false);
155​ m_ui->cbSalifetime->setChecked(false);
156​ }
157​
158​ m_ui->cbForceEncaps->setChecked(dataMap[NM_L2TP_KEY_IPSEC_FORCEENCAPS] == yesString);
159​ m_ui->cbIPComp->setChecked(dataMap[NM_L2TP_KEY_IPSEC_IPCOMP] == yesString);
160​
161​ if (m_ipsecDaemonType == IpsecDaemonType::Libreswan) {
162​ m_ui->cbPFS->setChecked(dataMap[NM_L2TP_KEY_IPSEC_PFS] == noString);
56 } else { 163​ } else {
57 m_ui->cbForceEncaps->setChecked(false); 164​ m_ui->cbPFS->setChecked(false);
165​ m_ui->cbPFS->setDisabled(true);
166​ m_ui->cbPFS->setToolTip("");
58 } 167​ }
59 } else { 168​ } else {
60 m_ui->cbEnableTunnelToHost->setChecked(false); 169​ m_ui->gbEnableTunnelToHost->setChecked(false);
170​ setDefaultIkelifetime(false);
jgrulichUnsubmitted
Not Done

This can be simplified using:

m_ui->cbIPComp->setChecked(dataMap[NM_L2TP_KEY_IPSEC_IPCOMP] == yesString)

Same above.

jgrulich: This can be simplified using: ``` m_ui->cbIPComp->setChecked(dataMap[NM_L2TP_KEY_IPSEC_IPCOMP]…
171​ setDefaultSalifetime(false);
172​ if (m_ipsecDaemonType == IpsecDaemonType::Strongswan) {
173​ m_ui->cbPFS->setDisabled(true);
174​ m_ui->cbPFS->setToolTip("");
175​ }
61 } 176​ }
62} 177​}
63 178​
64NMStringMap L2tpIpsecWidget::setting() const 179​NMStringMap L2tpIpsecWidget::setting() const
65{ 180​{
66 NMStringMap result; 181​ NMStringMap result;
182​ const QString yesString = QLatin1String("yes");
183​ const QString noString = QLatin1String("no");
67 184​
68 if (m_ui->cbEnableTunnelToHost->isChecked()) { 185​ if (m_ui->gbEnableTunnelToHost->isChecked()) {
69 result.insert(NM_L2TP_KEY_IPSEC_ENABLE, "yes"); 186​ result.insert(NM_L2TP_KEY_IPSEC_ENABLE, yesString);
70 ​
71 if (!m_ui->gatewayId->text().isEmpty()) { ​
72 result.insert(NM_L2TP_KEY_IPSEC_GATEWAY_ID, m_ui->gatewayId->text()); ​
73 } ​
74 187​
188​ if (m_ui->cmbAuthType->currentIndex() == AuthType::PSK) {
189​ // NetworkManager-l2tp < 1.2.12 does not support Base64 PSK
190​ // For backwards compatibilty don't use Base64 PSK for now.
75 if (!m_ui->presharedKey->text().isEmpty()) { 191​ if (!m_ui->presharedKey->text().isEmpty()) {
76 result.insert(NM_L2TP_KEY_IPSEC_PSK, m_ui->presharedKey->text()); 192​ result.insert(NM_L2TP_KEY_IPSEC_PSK, m_ui->presharedKey->text());
193​ // *SWAN support Base64 encoded PSKs that are prefixed with "0s"
194​ /*
195​ QString psk = QLatin1String("0s");
196​ psk.append(m_ui->presharedKey->text().toUtf8().toBase64());
197​ result.insert(NM_L2TP_KEY_IPSEC_PSK, psk);
198​ */
199​ }
200​ } else { // AuthType::TLS
201​
202​ result.insert(NM_L2TP_KEY_MACHINE_AUTH_TYPE, NM_L2TP_AUTHTYPE_TLS);
203​
204​ result.insert(NM_L2TP_KEY_MACHINE_CA, m_ui->machineCA->url().toLocalFile());
205​ result.insert(NM_L2TP_KEY_MACHINE_CERT, m_ui->machineCert->url().toLocalFile());
206​ result.insert(NM_L2TP_KEY_MACHINE_KEY, m_ui->machineKey->url().toLocalFile());
207​
208​ switch (m_ui->machineKeyPassword->passwordOption()) {
209​ case PasswordField::StoreForAllUsers:
210​ result.insert(NM_L2TP_KEY_MACHINE_CERTPASS"-flags",
211​ QString::number(NetworkManager::Setting::None));
212​ break;
213​ case PasswordField::StoreForUser:
214​ result.insert(NM_L2TP_KEY_MACHINE_CERTPASS"-flags",
215​ QString::number(NetworkManager::Setting::AgentOwned));
216​ break;
217​ case PasswordField::AlwaysAsk:
218​ result.insert(NM_L2TP_KEY_MACHINE_CERTPASS"-flags",
219​ QString::number(NetworkManager::Setting::NotSaved));
220​ break;
221​ case PasswordField::NotRequired:
222​ result.insert(NM_L2TP_KEY_MACHINE_CERTPASS"-flags",
223​ QString::number(NetworkManager::Setting::NotRequired));
224​ break;
225​ };
226​ }
227​
228​ // NetworkManager-l2tp 1.2.12 recommends NM_L2TP_KEY_IPSEC_REMOTE_ID
229​ // instead of deprecated NM_L2TP_KEY_IPSEC_GATEWAY_ID
230​ // For backwards compatibilty use NM_L2TP_KEY_IPSEC_GATEWAY_ID for now.
231​ if (!m_ui->remoteId->text().isEmpty()) {
232​ result.insert(NM_L2TP_KEY_IPSEC_GATEWAY_ID, m_ui->remoteId->text());
77 } 233​ }
78 234​
79 if (!m_ui->ike->text().isEmpty()) { 235​ if (!m_ui->ike->text().isEmpty()) {
80 result.insert(NM_L2TP_KEY_IPSEC_IKE, m_ui->ike->text()); 236​ result.insert(NM_L2TP_KEY_IPSEC_IKE, m_ui->ike->text());
81 } 237​ }
82 238​
83 if (!m_ui->esp->text().isEmpty()) { 239​ if (!m_ui->esp->text().isEmpty()) {
84 result.insert(NM_L2TP_KEY_IPSEC_ESP, m_ui->esp->text()); 240​ result.insert(NM_L2TP_KEY_IPSEC_ESP, m_ui->esp->text());
85 } 241​ }
86 242​
87 if (m_ui->cbForceEncaps->isChecked()) { 243​ if (m_ui->cbForceEncaps->isChecked()) {
88 result.insert(NM_L2TP_KEY_IPSEC_FORCEENCAPS, "yes"); 244​ result.insert(NM_L2TP_KEY_IPSEC_FORCEENCAPS, yesString);
245​ }
246​
247​ if (m_ui->cbIkelifetime->isChecked()) {
248​ const int totalSeconds = m_ui->ikelifetime->time().hour() * 3600 + m_ui->ikelifetime->time().minute() * 60 + m_ui->ikelifetime->time().second();
249​
250​ result.insert(NM_L2TP_KEY_IPSEC_IKELIFETIME, QString::number(totalSeconds));
251​ }
252​
253​ if (m_ui->cbSalifetime->isChecked()) {
254​ const int totalSeconds = m_ui->salifetime->time().hour() * 3600 + m_ui->salifetime->time().minute() * 60 + m_ui->salifetime->time().second();
255​
256​ result.insert(NM_L2TP_KEY_IPSEC_SALIFETIME, QString::number(totalSeconds));
257​ }
258​
259​ if (m_ui->cbIPComp->isChecked()) {
jgrulichUnsubmitted
Not Done

const?

jgrulich: const?
260​ result.insert(NM_L2TP_KEY_IPSEC_IPCOMP, yesString);
261​ }
262​
263​ if (m_ipsecDaemonType == IpsecDaemonType::Libreswan) {
264​ if (m_ui->cbPFS->isChecked()) {
265​ result.insert(NM_L2TP_KEY_IPSEC_PFS, noString);
jgrulichUnsubmitted
Not Done

const?

jgrulich: const?
266​ }
89 } 267​ }
90 } 268​ }
91 269​
92 return result; 270​ return result;
93} 271​}
272​
273​NMStringMap L2tpIpsecWidget::secrets() const
274​{
275​ NMStringMap result;
276​
277​ if (m_ui->gbEnableTunnelToHost->isChecked()) {
278​ if (m_ui->cmbAuthType->currentIndex() == AuthType::TLS) {
279​
280​ // private key password
281​ if (!m_ui->machineKeyPassword->text().isEmpty()) {
282​ result.insert(NM_L2TP_KEY_MACHINE_CERTPASS, m_ui->machineKeyPassword->text());
283​ }
284​ }
285​ }
286​
287​ return result;
288​}
289​
290​void L2tpIpsecWidget::updateStartDirUrl(const QUrl &url)
291​{
292​ QList<KUrlRequester *> requesters;
293​ requesters << m_ui->machineCA << m_ui->machineCert << m_ui->machineKey;
294​ const bool isP12 = url.toString().endsWith(QLatin1String(".p12"));
295​
296​ for (KUrlRequester *requester : requesters) {
297​ requester->setStartDir(url.adjusted(QUrl::RemoveFilename | QUrl::StripTrailingSlash));
298​ if (isP12) {
299​ requester->setUrl(url);
300​ }
301​ }
302​}
303​
304​void L2tpIpsecWidget::setDefaultIkelifetime(bool isChecked)
jgrulichUnsubmitted
Not Done

const?

jgrulich: const?
305​{
306​ if (!isChecked) {
307​ QTime lifetime;
308​ if (m_ipsecDaemonType == IpsecDaemonType::Libreswan) {
309​ lifetime = QTime(DEFAULT_IPSEC_LIBRESWAN_IKELIFETIME_HOURS, 0, 0);
310​ } else {
311​ lifetime = QTime(DEFAULT_IPSEC_STRONGSWAN_IKELIFETIME_HOURS, 0, 0);
312​ }
313​ m_ui->ikelifetime->setTime(lifetime);
314​ }
315​}
316​
317​void L2tpIpsecWidget::setDefaultSalifetime(bool isChecked)
318​{
319​ if (!isChecked) {
320​ QTime lifetime;
321​ if (m_ipsecDaemonType == IpsecDaemonType::Libreswan) {
322​ lifetime = QTime(DEFAULT_IPSEC_LIBRESWAN_SALIFETIME_HOURS, 0, 0);
323​ } else {
324​ lifetime = QTime(DEFAULT_IPSEC_STRONGSWAN_LIFETIME_HOURS, 0, 0);
325​ }
326​ m_ui->salifetime->setTime(lifetime);
327​ }
328​}
329​
330​void L2tpIpsecWidget::resizeStackedWidget(int currentIndex)
331​{
332​ m_ui->stackedWidget->setCurrentIndex(currentIndex);
333​ for (int i = 0; i < m_ui->stackedWidget->count(); ++i) {
334​ QSizePolicy::Policy policy;
335​
336​ if (i == currentIndex) {
337​ policy = QSizePolicy::Preferred;
338​ } else {
339​ policy = QSizePolicy::Ignored;
340​ }
341​ m_ui->stackedWidget->widget(i)->setSizePolicy(QSizePolicy::Preferred, policy);
342​ }
343​ QApplication::processEvents(QEventLoop::ExcludeUserInputEvents);
344​ resize(width(), sizeHint().height());
345​}
346​
347​L2tpIpsecWidget::IpsecDaemonType L2tpIpsecWidget::m_ipsecDaemonType = IpsecDaemonType::NoIpsecDaemon;
348​
349​bool L2tpIpsecWidget::hasIpsecDaemon()
350​{
351​ // NetworkManager-l2tp currently only supports libreswan and strongswan
352​ if (m_ipsecDaemonType == IpsecDaemonType::Libreswan
353​ || m_ipsecDaemonType == IpsecDaemonType::Strongswan) {
354​ return true;
355​ }
356​
357​ QString ipsecBinary = QStandardPaths::findExecutable("ipsec",
358​ QStringList() << "/sbin" << "/usr/sbin");
359​
360​ // On some Linux distributions, ipsec executable has been renamed strongswan
361​ if (ipsecBinary.isEmpty()) {
362​ ipsecBinary = QStandardPaths::findExecutable("strongswan",
363​ QStringList() << "/sbin" << "/usr/sbin");
364​ }
365​
366​ if (ipsecBinary.isEmpty()) {
367​ m_ipsecDaemonType = IpsecDaemonType::NoIpsecDaemon;
368​ return false;
369​ }
370​
371​ QProcess ipsecVersionProcess;
372​ ipsecVersionProcess.setProgram(ipsecBinary);
373​ ipsecVersionProcess.setArguments(QStringList() << "--version");
374​ ipsecVersionProcess.start();
375​ ipsecVersionProcess.waitForFinished(-1);
376​
377​ if (ipsecVersionProcess.exitStatus() == QProcess::NormalExit) {
378​ QString ipsecStdout = ipsecVersionProcess.readAllStandardOutput();
379​
380​ if (ipsecStdout.contains(" strongSwan ", Qt::CaseSensitive)) {
381​ L2tpIpsecWidget::m_ipsecDaemonType = IpsecDaemonType::Strongswan;
382​ } else if (ipsecStdout.contains(" Libreswan ", Qt::CaseSensitive)) {
383​ L2tpIpsecWidget::m_ipsecDaemonType = IpsecDaemonType::Libreswan;
384​ } else if (ipsecStdout.contains(" Openswan ", Qt::CaseSensitive)) {
385​ L2tpIpsecWidget::m_ipsecDaemonType = IpsecDaemonType::Openswan;
386​ } else {
387​ L2tpIpsecWidget::m_ipsecDaemonType = IpsecDaemonType::UnknownIpsecDaemon;
388​ }
389​ }
390​
391​ if (m_ipsecDaemonType == IpsecDaemonType::Libreswan
392​ || m_ipsecDaemonType == IpsecDaemonType::Strongswan) {
393​ return true;
394​ }
395​ return false;
396​}