5 files changed, 31 insertions, 0 deletions

diff --git a/doc/tinyrad.conf-example.in b/doc/tinyrad.conf-example.in
index 061e5a6..4078ba1 100644
--- a/doc/tinyrad.conf-example.in
+++ b/doc/tinyrad.conf-example.in
@@ -7,6 +7,7 @@
 
 #URI                 "radius://localhost/secret"
 #BIND_ADDRESS        "::1 127.0.0.1"
+#SECRET              "RaDiUsSeCrEt"
 
 #TIMEOUT             5
 #NETWORK_TIMEOUT     3
diff --git a/include/tinyrad.h b/include/tinyrad.h
index ab77f4a..e869624 100644
--- a/include/tinyrad.h
+++ b/include/tinyrad.h
@@ -222,6 +222,7 @@
 #define TRAD_OPT_DEBUG_SYSLOG          11
 #define TRAD_OPT_SCHEME                12
 #define TRAD_OPT_DICTIONARY            13
+#define TRAD_OPT_SECRET                14
 
 // dictionary get options
 #define TRAD_DICT_OPT_REF_COUNT           1  // used by TinyRadDict, TinyRadDictVendor and TinyRadDictAttr
diff --git a/lib/libtinyrad/lconf.c b/lib/libtinyrad/lconf.c
index 70ce722..5421457 100644
--- a/lib/libtinyrad/lconf.c
+++ b/lib/libtinyrad/lconf.c
@@ -199,6 +199,9 @@ tinyrad_conf_environment(
    if ((value = getenv("TINYRAD_PATHS")) != NULL)
       tinyrad_conf_opt(tr, dict, "paths", value);
 
+   if ((value = getenv("TINYRAD_SECRET")) != NULL)
+      tinyrad_conf_opt(tr, dict, "secret", value);
+
    if ((value = getenv("TINYRAD_TIMEOUT")) != NULL)
       tinyrad_conf_opt(tr, dict, "timeout", value);
 
@@ -334,6 +337,13 @@ tinyrad_conf_opt(
       return(TRAD_SUCCESS);
    };
 
+  if (!(strcasecmp(name, "secret")))
+   {
+      if ( (!(tr)) || ((tr->secret)) || (!(value)) )
+         return(TRAD_SUCCESS);
+      return(tinyrad_set_option(tr, TRAD_OPT_SECRET, value));
+   };
+
    if (!(strcasecmp(name, "timeout")))
    {
       if ( (!(tr)) || (tr->timeout != -1) || (!(value)) )
diff --git a/lib/libtinyrad/libtinyrad.h b/lib/libtinyrad/libtinyrad.h
index 00e61fc..0389a8e 100644
--- a/lib/libtinyrad/libtinyrad.h
+++ b/lib/libtinyrad/libtinyrad.h
@@ -116,6 +116,7 @@ struct _tinyrad
    TinyRadDict *         dict;
    TinyRadURLDesc *      trud;
    TinyRadURLDesc *      trud_cur;
+   char *                secret;
    size_t                trud_pos;
    struct sockaddr_in *  bind_sa;
    struct sockaddr_in6 * bind_sa6;
diff --git a/lib/libtinyrad/lmemory.c b/lib/libtinyrad/lmemory.c
index d329931..de18bff 100644
--- a/lib/libtinyrad/lmemory.c
+++ b/lib/libtinyrad/lmemory.c
@@ -127,6 +127,9 @@ tinyrad_tiyrad_free(
    if ((tr->dict))
       tinyrad_obj_release(&tr->dict->obj);
 
+   if ((tr->secret))
+      free(tr->secret);
+
    if ((tr->trud))
       tinyrad_urldesc_free(tr->trud);
    tr->trud = NULL;
@@ -240,6 +243,13 @@ tinyrad_get_option(
       *((unsigned *)outvalue) = tr->scheme;
       break;
 
+      case TRAD_OPT_SECRET:
+      TinyRadDebug(TRAD_DEBUG_ARGS, "   == %s( tr, TRAD_OPT_SECRET, outvalue )", __func__);
+      TinyRadDebug(TRAD_DEBUG_ARGS, "   <= outvalue: %s", tr->secret);
+      if (((*(char **)outvalue) = tinyrad_strdup(tr->secret)) == NULL)
+         return(TRAD_ENOMEM);
+      break;
+
       case TRAD_OPT_SOCKET_BIND_ADDRESSES:
       TinyRadDebug(TRAD_DEBUG_ARGS, "   == %s( tr, TRAD_OPT_SOCKET_BIND_ADDRESSES, outvalue )", __func__);
       inet_ntop(AF_INET, &tr->bind_sa->sin_addr, bind_buff, sizeof(struct sockaddr_in));
@@ -511,6 +521,14 @@ tinyrad_set_option(
       TinyRadDebug(TRAD_DEBUG_ARGS, "   == %s( tr, TRAD_OPT_SCHEME, invalue )", __func__);
       return(TRAD_EOPTERR);
 
+      case TRAD_OPT_SECRET:
+      TinyRadDebug(TRAD_DEBUG_ARGS, "   == %s( tr, TRAD_OPT_SECRET, \"%s\" )", __func__, (const char *)invalue);
+      if ((tr->secret))
+         free(tr->secret);
+      if ((tr->secret = tinyrad_strdup(invalue)) == NULL)
+         return(TRAD_ENOMEM);
+      break;
+
       case TRAD_OPT_SOCKET_BIND_ADDRESSES:
       TinyRadDebug(TRAD_DEBUG_ARGS, "   == %s( tr, TRAD_OPT_SOCKET_BIND_ADDRESSES, invalue )", __func__);
       if (tr->s != -1)