Annotation of embedaddon/strongswan/src/libcharon/encoding/payloads/notify_payload.c, revision 1.1
1.1 ! misho 1: /*
! 2: * Copyright (C) 2006-2018 Tobias Brunner
! 3: * Copyright (C) 2005-2010 Martin Willi
! 4: * Copyright (C) 2010 revosec AG
! 5: * Copyright (C) 2006 Daniel Roethlisberger
! 6: * Copyright (C) 2005 Jan Hutter
! 7: * HSR Hochschule fuer Technik Rapperswil
! 8: *
! 9: * This program is free software; you can redistribute it and/or modify it
! 10: * under the terms of the GNU General Public License as published by the
! 11: * Free Software Foundation; either version 2 of the License, or (at your
! 12: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
! 13: *
! 14: * This program is distributed in the hope that it will be useful, but
! 15: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
! 16: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
! 17: * for more details.
! 18: */
! 19:
! 20: #include <stddef.h>
! 21:
! 22: #include "notify_payload.h"
! 23:
! 24: #include <daemon.h>
! 25: #include <encoding/payloads/encodings.h>
! 26: #include <crypto/hashers/hasher.h>
! 27:
! 28: ENUM_BEGIN(notify_type_names, UNSUPPORTED_CRITICAL_PAYLOAD, UNSUPPORTED_CRITICAL_PAYLOAD,
! 29: "UNSUPPORTED_CRITICAL_PAYLOAD");
! 30: ENUM_NEXT(notify_type_names, INVALID_IKE_SPI, INVALID_MAJOR_VERSION, UNSUPPORTED_CRITICAL_PAYLOAD,
! 31: "INVALID_IKE_SPI",
! 32: "INVALID_MAJOR_VERSION");
! 33: ENUM_NEXT(notify_type_names, INVALID_SYNTAX, INVALID_SYNTAX, INVALID_MAJOR_VERSION,
! 34: "INVALID_SYNTAX");
! 35: ENUM_NEXT(notify_type_names, INVALID_MESSAGE_ID, INVALID_MESSAGE_ID, INVALID_SYNTAX,
! 36: "INVALID_MESSAGE_ID");
! 37: ENUM_NEXT(notify_type_names, INVALID_SPI, INVALID_SPI, INVALID_MESSAGE_ID,
! 38: "INVALID_SPI");
! 39: ENUM_NEXT(notify_type_names, ATTRIBUTES_NOT_SUPPORTED, NO_PROPOSAL_CHOSEN, INVALID_SPI,
! 40: "ATTRIBUTES_NOT_SUPPORTED",
! 41: "NO_PROPOSAL_CHOSEN");
! 42: ENUM_NEXT(notify_type_names, PAYLOAD_MALFORMED, AUTHENTICATION_FAILED, NO_PROPOSAL_CHOSEN,
! 43: "PAYLOAD_MALFORMED",
! 44: "INVALID_KE_PAYLOAD",
! 45: "INVALID_ID_INFORMATION",
! 46: "INVALID_CERT_ENCODING",
! 47: "INVALID_CERTIFICATE",
! 48: "CERT_TYPE_UNSUPPORTED",
! 49: "INVALID_CERT_AUTHORITY",
! 50: "INVALID_HASH_INFORMATION",
! 51: "AUTHENTICATION_FAILED");
! 52: ENUM_NEXT(notify_type_names, SINGLE_PAIR_REQUIRED, CHILD_SA_NOT_FOUND, AUTHENTICATION_FAILED,
! 53: "SINGLE_PAIR_REQUIRED",
! 54: "NO_ADDITIONAL_SAS",
! 55: "INTERNAL_ADDRESS_FAILURE",
! 56: "FAILED_CP_REQUIRED",
! 57: "TS_UNACCEPTABLE",
! 58: "INVALID_SELECTORS",
! 59: "UNACCEPTABLE_ADDRESSES",
! 60: "UNEXPECTED_NAT_DETECTED",
! 61: "USE_ASSIGNED_HoA",
! 62: "TEMPORARY_FAILURE",
! 63: "CHILD_SA_NOT_FOUND");
! 64: ENUM_NEXT(notify_type_names, ME_CONNECT_FAILED, ME_CONNECT_FAILED, CHILD_SA_NOT_FOUND,
! 65: "ME_CONNECT_FAILED");
! 66: ENUM_NEXT(notify_type_names, MS_NOTIFY_STATUS, MS_NOTIFY_STATUS, ME_CONNECT_FAILED,
! 67: "MS_NOTIFY_STATUS");
! 68: ENUM_NEXT(notify_type_names, INITIAL_CONTACT, SIGNATURE_HASH_ALGORITHMS, MS_NOTIFY_STATUS,
! 69: "INITIAL_CONTACT",
! 70: "SET_WINDOW_SIZE",
! 71: "ADDITIONAL_TS_POSSIBLE",
! 72: "IPCOMP_SUPPORTED",
! 73: "NAT_DETECTION_SOURCE_IP",
! 74: "NAT_DETECTION_DESTINATION_IP",
! 75: "COOKIE",
! 76: "USE_TRANSPORT_MODE",
! 77: "HTTP_CERT_LOOKUP_SUPPORTED",
! 78: "REKEY_SA",
! 79: "ESP_TFC_PADDING_NOT_SUPPORTED",
! 80: "NON_FIRST_FRAGMENTS_ALSO",
! 81: "MOBIKE_SUPPORTED",
! 82: "ADDITIONAL_IP4_ADDRESS",
! 83: "ADDITIONAL_IP6_ADDRESS",
! 84: "NO_ADDITIONAL_ADDRESSES",
! 85: "UPDATE_SA_ADDRESSES",
! 86: "COOKIE2",
! 87: "NO_NATS_ALLOWED",
! 88: "AUTH_LIFETIME",
! 89: "MULTIPLE_AUTH_SUPPORTED",
! 90: "ANOTHER_AUTH_FOLLOWS",
! 91: "REDIRECT_SUPPORTED",
! 92: "REDIRECT",
! 93: "REDIRECTED_FROM",
! 94: "TICKET_LT_OPAQUE",
! 95: "TICKET_REQUEST",
! 96: "TICKET_ACK",
! 97: "TICKET_NACK",
! 98: "TICKET_OPAQUE",
! 99: "LINK_ID",
! 100: "USE_WESP_MODE",
! 101: "ROHC_SUPPORTED",
! 102: "EAP_ONLY_AUTHENTICATION",
! 103: "CHILDLESS_IKEV2_SUPPORTED",
! 104: "QUICK_CRASH_DETECTION",
! 105: "IKEV2_MESSAGE_ID_SYNC_SUPPORTED",
! 106: "IKEV2_REPLAY_COUNTER_SYNC_SUPPORTED",
! 107: "IKEV2_MESSAGE_ID_SYNC",
! 108: "IPSEC_REPLAY_COUNTER_SYNC",
! 109: "SECURE PASSWORD_METHOD",
! 110: "PSK_PERSIST",
! 111: "PSK_CONFIRM",
! 112: "ERX_SUPPORTED",
! 113: "IFOM_CAPABILITY",
! 114: "SENDER_REQUEST_ID",
! 115: "FRAGMENTATION_SUPPORTED",
! 116: "SIGNATURE_HASH_ALGORITHMS");
! 117: ENUM_NEXT(notify_type_names, USE_PPK, NO_PPK_AUTH, SIGNATURE_HASH_ALGORITHMS,
! 118: "USE_PPK",
! 119: "PPK_IDENTITY",
! 120: "NO_PPK_AUTH");
! 121: ENUM_NEXT(notify_type_names, INITIAL_CONTACT_IKEV1, INITIAL_CONTACT_IKEV1, NO_PPK_AUTH,
! 122: "INITIAL_CONTACT");
! 123: ENUM_NEXT(notify_type_names, DPD_R_U_THERE, DPD_R_U_THERE_ACK, INITIAL_CONTACT_IKEV1,
! 124: "DPD_R_U_THERE",
! 125: "DPD_R_U_THERE_ACK");
! 126: ENUM_NEXT(notify_type_names, UNITY_LOAD_BALANCE, UNITY_LOAD_BALANCE, DPD_R_U_THERE_ACK,
! 127: "UNITY_LOAD_BALANCE");
! 128: ENUM_NEXT(notify_type_names, USE_BEET_MODE, USE_BEET_MODE, UNITY_LOAD_BALANCE,
! 129: "USE_BEET_MODE");
! 130: ENUM_NEXT(notify_type_names, ME_MEDIATION, RADIUS_ATTRIBUTE, USE_BEET_MODE,
! 131: "ME_MEDIATION",
! 132: "ME_ENDPOINT",
! 133: "ME_CALLBACK",
! 134: "ME_CONNECTID",
! 135: "ME_CONNECTKEY",
! 136: "ME_CONNECTAUTH",
! 137: "ME_RESPONSE",
! 138: "RADIUS_ATTRIBUTE");
! 139: ENUM_END(notify_type_names, RADIUS_ATTRIBUTE);
! 140:
! 141:
! 142: ENUM_BEGIN(notify_type_short_names, UNSUPPORTED_CRITICAL_PAYLOAD, UNSUPPORTED_CRITICAL_PAYLOAD,
! 143: "CRIT");
! 144: ENUM_NEXT(notify_type_short_names, INVALID_IKE_SPI, INVALID_MAJOR_VERSION, UNSUPPORTED_CRITICAL_PAYLOAD,
! 145: "INVAL_IKE_SPI",
! 146: "INVAL_MAJOR");
! 147: ENUM_NEXT(notify_type_short_names, INVALID_SYNTAX, INVALID_SYNTAX, INVALID_MAJOR_VERSION,
! 148: "INVAL_SYN");
! 149: ENUM_NEXT(notify_type_short_names, INVALID_MESSAGE_ID, INVALID_MESSAGE_ID, INVALID_SYNTAX,
! 150: "INVAL_MID");
! 151: ENUM_NEXT(notify_type_short_names, INVALID_SPI, INVALID_SPI, INVALID_MESSAGE_ID,
! 152: "INVAL_SPI");
! 153: ENUM_NEXT(notify_type_short_names, ATTRIBUTES_NOT_SUPPORTED, NO_PROPOSAL_CHOSEN, INVALID_SPI,
! 154: "ATTR_UNSUP",
! 155: "NO_PROP");
! 156: ENUM_NEXT(notify_type_short_names, PAYLOAD_MALFORMED, AUTHENTICATION_FAILED, NO_PROPOSAL_CHOSEN,
! 157: "PLD_MAL",
! 158: "INVAL_KE",
! 159: "INVAL_ID",
! 160: "INVAL_CERTEN",
! 161: "INVAL_CERT",
! 162: "CERT_UNSUP",
! 163: "INVAL_CA",
! 164: "INVAL_HASH",
! 165: "AUTH_FAILED");
! 166: ENUM_NEXT(notify_type_short_names, SINGLE_PAIR_REQUIRED, CHILD_SA_NOT_FOUND, AUTHENTICATION_FAILED,
! 167: "SINGLE_PAIR",
! 168: "NO_ADD_SAS",
! 169: "INT_ADDR_FAIL",
! 170: "FAIL_CP_REQ",
! 171: "TS_UNACCEPT",
! 172: "INVAL_SEL",
! 173: "UNACCEPT_ADDR",
! 174: "UNEXPECT_NAT",
! 175: "ASSIGNED_HoA",
! 176: "TEMP_FAIL",
! 177: "NO_CHILD_SA");
! 178: ENUM_NEXT(notify_type_short_names, ME_CONNECT_FAILED, ME_CONNECT_FAILED, CHILD_SA_NOT_FOUND,
! 179: "ME_CONN_FAIL");
! 180: ENUM_NEXT(notify_type_short_names, MS_NOTIFY_STATUS, MS_NOTIFY_STATUS, ME_CONNECT_FAILED,
! 181: "MS_STATUS");
! 182: ENUM_NEXT(notify_type_short_names, INITIAL_CONTACT, SIGNATURE_HASH_ALGORITHMS, MS_NOTIFY_STATUS,
! 183: "INIT_CONTACT",
! 184: "SET_WINSIZE",
! 185: "ADD_TS_POSS",
! 186: "IPCOMP_SUP",
! 187: "NATD_S_IP",
! 188: "NATD_D_IP",
! 189: "COOKIE",
! 190: "USE_TRANSP",
! 191: "HTTP_CERT_LOOK",
! 192: "REKEY_SA",
! 193: "ESP_TFC_PAD_N",
! 194: "NON_FIRST_FRAG",
! 195: "MOBIKE_SUP",
! 196: "ADD_4_ADDR",
! 197: "ADD_6_ADDR",
! 198: "NO_ADD_ADDR",
! 199: "UPD_SA_ADDR",
! 200: "COOKIE2",
! 201: "NO_NATS",
! 202: "AUTH_LFT",
! 203: "MULT_AUTH",
! 204: "AUTH_FOLLOWS",
! 205: "REDIR_SUP",
! 206: "REDIR",
! 207: "REDIR_FROM",
! 208: "TKT_LT_OPAK",
! 209: "TKT_REQ",
! 210: "TKT_ACK",
! 211: "TKT_NACK",
! 212: "TKT_OPAK",
! 213: "LINK_ID",
! 214: "WESP_MODE",
! 215: "ROHC_SUP",
! 216: "EAP_ONLY",
! 217: "CHDLESS_SUP",
! 218: "CRASH_DET",
! 219: "MSG_ID_SYN_SUP",
! 220: "RPL_CTR_SYN_SUP",
! 221: "MSG_ID_SYN",
! 222: "RPL_CTR_SYN",
! 223: "SEC_PASSWD",
! 224: "PSK_PST",
! 225: "PSK_CFM",
! 226: "ERX_SUP",
! 227: "IFOM_CAP",
! 228: "SENDER_REQ_ID",
! 229: "FRAG_SUP",
! 230: "HASH_ALG");
! 231: ENUM_NEXT(notify_type_short_names, USE_PPK, NO_PPK_AUTH, SIGNATURE_HASH_ALGORITHMS,
! 232: "USE_PPK",
! 233: "PPK_ID",
! 234: "NO_PPK");
! 235: ENUM_NEXT(notify_type_short_names, INITIAL_CONTACT_IKEV1, INITIAL_CONTACT_IKEV1, NO_PPK_AUTH,
! 236: "INITIAL_CONTACT");
! 237: ENUM_NEXT(notify_type_short_names, DPD_R_U_THERE, DPD_R_U_THERE_ACK, INITIAL_CONTACT_IKEV1,
! 238: "DPD",
! 239: "DPD_ACK");
! 240: ENUM_NEXT(notify_type_short_names, UNITY_LOAD_BALANCE, UNITY_LOAD_BALANCE, DPD_R_U_THERE_ACK,
! 241: "UNITY_LB");
! 242: ENUM_NEXT(notify_type_short_names, USE_BEET_MODE, USE_BEET_MODE, UNITY_LOAD_BALANCE,
! 243: "BEET_MODE");
! 244: ENUM_NEXT(notify_type_short_names, ME_MEDIATION, RADIUS_ATTRIBUTE, USE_BEET_MODE,
! 245: "ME_MED",
! 246: "ME_EP",
! 247: "ME_CB",
! 248: "ME_CID",
! 249: "ME_CKEY",
! 250: "ME_CAUTH",
! 251: "ME_R",
! 252: "RADIUS");
! 253: ENUM_END(notify_type_short_names, RADIUS_ATTRIBUTE);
! 254:
! 255:
! 256: typedef struct private_notify_payload_t private_notify_payload_t;
! 257:
! 258: /**
! 259: * Private data of an notify_payload_t object.
! 260: */
! 261: struct private_notify_payload_t {
! 262:
! 263: /**
! 264: * Public notify_payload_t interface.
! 265: */
! 266: notify_payload_t public;
! 267:
! 268: /**
! 269: * Next payload type.
! 270: */
! 271: uint8_t next_payload;
! 272:
! 273: /**
! 274: * Critical flag.
! 275: */
! 276: bool critical;
! 277:
! 278: /**
! 279: * reserved bits
! 280: */
! 281: bool reserved[8];
! 282:
! 283: /**
! 284: * Length of this payload.
! 285: */
! 286: uint16_t payload_length;
! 287:
! 288: /**
! 289: * Domain of interpretation, IKEv1 only.
! 290: */
! 291: uint32_t doi;
! 292:
! 293: /**
! 294: * Protocol id.
! 295: */
! 296: uint8_t protocol_id;
! 297:
! 298: /**
! 299: * Spi size.
! 300: */
! 301: uint8_t spi_size;
! 302:
! 303: /**
! 304: * Notify message type.
! 305: */
! 306: uint16_t notify_type;
! 307:
! 308: /**
! 309: * Security parameter index (spi).
! 310: */
! 311: chunk_t spi;
! 312:
! 313: /**
! 314: * Notification data.
! 315: */
! 316: chunk_t notify_data;
! 317:
! 318: /**
! 319: * Type of payload, PLV2_NOTIFY or PLV1_NOTIFY
! 320: */
! 321: payload_type_t type;
! 322: };
! 323:
! 324: /**
! 325: * Encoding rules for an IKEv2 notification payload
! 326: */
! 327: static encoding_rule_t encodings_v2[] = {
! 328: /* 1 Byte next payload type, stored in the field next_payload */
! 329: { U_INT_8, offsetof(private_notify_payload_t, next_payload) },
! 330: /* the critical bit */
! 331: { FLAG, offsetof(private_notify_payload_t, critical) },
! 332: /* 7 Bit reserved bits, nowhere stored */
! 333: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[0]) },
! 334: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[1]) },
! 335: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[2]) },
! 336: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[3]) },
! 337: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[4]) },
! 338: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[5]) },
! 339: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[6]) },
! 340: /* Length of the whole payload*/
! 341: { PAYLOAD_LENGTH, offsetof(private_notify_payload_t, payload_length) },
! 342: /* Protocol ID as 8 bit field*/
! 343: { U_INT_8, offsetof(private_notify_payload_t, protocol_id) },
! 344: /* SPI Size as 8 bit field*/
! 345: { SPI_SIZE, offsetof(private_notify_payload_t, spi_size) },
! 346: /* Notify message type as 16 bit field*/
! 347: { U_INT_16, offsetof(private_notify_payload_t, notify_type) },
! 348: /* SPI as variable length field*/
! 349: { SPI, offsetof(private_notify_payload_t, spi) },
! 350: /* Key Exchange Data is from variable size */
! 351: { CHUNK_DATA, offsetof(private_notify_payload_t, notify_data) },
! 352: };
! 353:
! 354: /*
! 355: 1 2 3
! 356: 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
! 357: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 358: ! Next Payload !C! RESERVED ! Payload Length !
! 359: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 360: ! Protocol ID ! SPI Size ! Notify Message Type !
! 361: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 362: ! !
! 363: ~ Security Parameter Index (SPI) ~
! 364: ! !
! 365: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 366: ! !
! 367: ~ Notification Data ~
! 368: ! !
! 369: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 370: */
! 371: /**
! 372: * Encoding rules for an IKEv1 notification payload
! 373: */
! 374: static encoding_rule_t encodings_v1[] = {
! 375: /* 1 Byte next payload type, stored in the field next_payload */
! 376: { U_INT_8, offsetof(private_notify_payload_t, next_payload) },
! 377: /* 8 reserved bits */
! 378: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[0]) },
! 379: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[1]) },
! 380: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[2]) },
! 381: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[3]) },
! 382: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[4]) },
! 383: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[5]) },
! 384: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[6]) },
! 385: { RESERVED_BIT, offsetof(private_notify_payload_t, reserved[7]) },
! 386: /* Length of the whole payload*/
! 387: { PAYLOAD_LENGTH, offsetof(private_notify_payload_t, payload_length) },
! 388: /* DOI as 32 bit field*/
! 389: { U_INT_32, offsetof(private_notify_payload_t, doi) },
! 390: /* Protocol ID as 8 bit field*/
! 391: { U_INT_8, offsetof(private_notify_payload_t, protocol_id) },
! 392: /* SPI Size as 8 bit field*/
! 393: { SPI_SIZE, offsetof(private_notify_payload_t, spi_size) },
! 394: /* Notify message type as 16 bit field*/
! 395: { U_INT_16, offsetof(private_notify_payload_t, notify_type) },
! 396: /* SPI as variable length field*/
! 397: { SPI, offsetof(private_notify_payload_t, spi) },
! 398: /* Key Exchange Data is from variable size */
! 399: { CHUNK_DATA, offsetof(private_notify_payload_t, notify_data) },
! 400: };
! 401:
! 402: /*
! 403: 1 2 3
! 404: 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
! 405: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 406: ! Next Payload ! RESERVED ! Payload Length !
! 407: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 408: ! DOI !
! 409: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 410: ! Protocol ID ! SPI Size ! Notify Message Type !
! 411: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 412: ! !
! 413: ~ Security Parameter Index (SPI) ~
! 414: ! !
! 415: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 416: ! !
! 417: ~ Notification Data ~
! 418: ! !
! 419: +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
! 420: */
! 421:
! 422:
! 423: METHOD(payload_t, verify, status_t,
! 424: private_notify_payload_t *this)
! 425: {
! 426: bool bad_length = FALSE;
! 427:
! 428: switch (this->protocol_id)
! 429: {
! 430: case PROTO_NONE:
! 431: case PROTO_IKE:
! 432: case PROTO_AH:
! 433: case PROTO_ESP:
! 434: break;
! 435: default:
! 436: DBG1(DBG_ENC, "Unknown protocol (%d)", this->protocol_id);
! 437: return FAILED;
! 438: }
! 439:
! 440: switch (this->notify_type)
! 441: {
! 442: case INVALID_KE_PAYLOAD:
! 443: {
! 444: if (this->type == PLV2_NOTIFY && this->notify_data.len != 2)
! 445: {
! 446: bad_length = TRUE;
! 447: }
! 448: break;
! 449: }
! 450: case NAT_DETECTION_SOURCE_IP:
! 451: case NAT_DETECTION_DESTINATION_IP:
! 452: case ME_CONNECTAUTH:
! 453: {
! 454: if (this->notify_data.len != HASH_SIZE_SHA1)
! 455: {
! 456: bad_length = TRUE;
! 457: }
! 458: break;
! 459: }
! 460: case INVALID_SYNTAX:
! 461: case INVALID_MAJOR_VERSION:
! 462: case NO_PROPOSAL_CHOSEN:
! 463: {
! 464: if (this->type == PLV2_NOTIFY && this->notify_data.len != 0)
! 465: {
! 466: bad_length = TRUE;
! 467: }
! 468: break;
! 469: }
! 470: case COOKIE:
! 471: {
! 472: if (this->notify_data.len < 1 || this->notify_data.len > 64)
! 473: {
! 474: bad_length = TRUE;
! 475: }
! 476: break;
! 477: }
! 478: case ADDITIONAL_IP4_ADDRESS:
! 479: {
! 480: if (this->notify_data.len != 4)
! 481: {
! 482: bad_length = TRUE;
! 483: }
! 484: break;
! 485: }
! 486: case ADDITIONAL_IP6_ADDRESS:
! 487: {
! 488: if (this->notify_data.len != 16)
! 489: {
! 490: bad_length = TRUE;
! 491: }
! 492: break;
! 493: }
! 494: case SIGNATURE_HASH_ALGORITHMS:
! 495: {
! 496: if (this->notify_data.len % 2)
! 497: {
! 498: bad_length = TRUE;
! 499: }
! 500: break;
! 501: }
! 502: case AUTH_LIFETIME:
! 503: {
! 504: if (this->notify_data.len != 4)
! 505: {
! 506: bad_length = TRUE;
! 507: }
! 508: break;
! 509: }
! 510: case IPCOMP_SUPPORTED:
! 511: {
! 512: if (this->notify_data.len != 3)
! 513: {
! 514: bad_length = TRUE;
! 515: }
! 516: break;
! 517: }
! 518: case ME_ENDPOINT:
! 519: if (this->notify_data.len != 8 &&
! 520: this->notify_data.len != 12 &&
! 521: this->notify_data.len != 24)
! 522: {
! 523: bad_length = TRUE;
! 524: }
! 525: break;
! 526: case ME_CONNECTID:
! 527: if (this->notify_data.len < 4 ||
! 528: this->notify_data.len > 16)
! 529: {
! 530: bad_length = TRUE;
! 531: }
! 532: break;
! 533: case ME_CONNECTKEY:
! 534: if (this->notify_data.len < 16 ||
! 535: this->notify_data.len > 32)
! 536: {
! 537: bad_length = TRUE;
! 538: }
! 539: break;
! 540: case DPD_R_U_THERE:
! 541: case DPD_R_U_THERE_ACK:
! 542: if (this->notify_data.len != 4)
! 543: {
! 544: bad_length = TRUE;
! 545: }
! 546: break;
! 547: default:
! 548: /* TODO: verify */
! 549: break;
! 550: }
! 551: if (bad_length)
! 552: {
! 553: DBG1(DBG_ENC, "invalid notify data length for %N (%d)",
! 554: notify_type_names, this->notify_type,
! 555: this->notify_data.len);
! 556: return FAILED;
! 557: }
! 558: return SUCCESS;
! 559: }
! 560:
! 561: METHOD(payload_t, get_encoding_rules, int,
! 562: private_notify_payload_t *this, encoding_rule_t **rules)
! 563: {
! 564: if (this->type == PLV2_NOTIFY)
! 565: {
! 566: *rules = encodings_v2;
! 567: return countof(encodings_v2);
! 568: }
! 569: *rules = encodings_v1;
! 570: return countof(encodings_v1);
! 571: }
! 572:
! 573: METHOD(payload_t, get_header_length, int,
! 574: private_notify_payload_t *this)
! 575: {
! 576: if (this->type == PLV2_NOTIFY)
! 577: {
! 578: return 8 + this->spi_size;
! 579: }
! 580: return 12 + this->spi_size;
! 581: }
! 582:
! 583: METHOD(payload_t, get_type, payload_type_t,
! 584: private_notify_payload_t *this)
! 585: {
! 586: return this->type;
! 587: }
! 588:
! 589: METHOD(payload_t, get_next_type, payload_type_t,
! 590: private_notify_payload_t *this)
! 591: {
! 592: return this->next_payload;
! 593: }
! 594:
! 595: METHOD(payload_t, set_next_type, void,
! 596: private_notify_payload_t *this, payload_type_t type)
! 597: {
! 598: this->next_payload = type;
! 599: }
! 600:
! 601: /**
! 602: * recompute the payloads length.
! 603: */
! 604: static void compute_length(private_notify_payload_t *this)
! 605: {
! 606: this->payload_length = get_header_length(this) + this->notify_data.len;
! 607: }
! 608:
! 609: METHOD(payload_t, get_length, size_t,
! 610: private_notify_payload_t *this)
! 611: {
! 612: return this->payload_length;
! 613: }
! 614:
! 615: METHOD(notify_payload_t, get_protocol_id, uint8_t,
! 616: private_notify_payload_t *this)
! 617: {
! 618: return this->protocol_id;
! 619: }
! 620:
! 621: METHOD(notify_payload_t, set_protocol_id, void,
! 622: private_notify_payload_t *this, uint8_t protocol_id)
! 623: {
! 624: this->protocol_id = protocol_id;
! 625: }
! 626:
! 627: METHOD(notify_payload_t, get_notify_type, notify_type_t,
! 628: private_notify_payload_t *this)
! 629: {
! 630: return this->notify_type;
! 631: }
! 632:
! 633: METHOD(notify_payload_t, set_notify_type, void,
! 634: private_notify_payload_t *this, notify_type_t notify_type)
! 635: {
! 636: this->notify_type = notify_type;
! 637: }
! 638:
! 639: METHOD(notify_payload_t, get_spi, uint32_t,
! 640: private_notify_payload_t *this)
! 641: {
! 642: switch (this->protocol_id)
! 643: {
! 644: case PROTO_AH:
! 645: case PROTO_ESP:
! 646: if (this->spi.len == 4)
! 647: {
! 648: return *((uint32_t*)this->spi.ptr);
! 649: }
! 650: default:
! 651: break;
! 652: }
! 653: return 0;
! 654: }
! 655:
! 656: METHOD(notify_payload_t, set_spi, void,
! 657: private_notify_payload_t *this, uint32_t spi)
! 658: {
! 659: chunk_free(&this->spi);
! 660: switch (this->protocol_id)
! 661: {
! 662: case PROTO_AH:
! 663: case PROTO_ESP:
! 664: this->spi = chunk_alloc(4);
! 665: *((uint32_t*)this->spi.ptr) = spi;
! 666: break;
! 667: default:
! 668: break;
! 669: }
! 670: this->spi_size = this->spi.len;
! 671: compute_length(this);
! 672: }
! 673:
! 674: METHOD(notify_payload_t, get_spi_data, chunk_t,
! 675: private_notify_payload_t *this)
! 676: {
! 677: switch (this->protocol_id)
! 678: {
! 679: case PROTO_IKE:
! 680: if (this->spi.len == 16)
! 681: {
! 682: return this->spi;
! 683: }
! 684: default:
! 685: break;
! 686: }
! 687: return chunk_empty;
! 688: }
! 689:
! 690: METHOD(notify_payload_t, set_spi_data, void,
! 691: private_notify_payload_t *this, chunk_t spi)
! 692: {
! 693: chunk_free(&this->spi);
! 694: switch (this->protocol_id)
! 695: {
! 696: case PROTO_IKE:
! 697: this->spi = chunk_clone(spi);
! 698: default:
! 699: break;
! 700: }
! 701: this->spi_size = this->spi.len;
! 702: compute_length(this);
! 703: }
! 704:
! 705: METHOD(notify_payload_t, get_notification_data, chunk_t,
! 706: private_notify_payload_t *this)
! 707: {
! 708: return this->notify_data;
! 709: }
! 710:
! 711: METHOD(notify_payload_t, set_notification_data, void,
! 712: private_notify_payload_t *this, chunk_t data)
! 713: {
! 714: free(this->notify_data.ptr);
! 715: this->notify_data = chunk_clone(data);
! 716: compute_length(this);
! 717: }
! 718:
! 719: METHOD2(payload_t, notify_payload_t, destroy, void,
! 720: private_notify_payload_t *this)
! 721: {
! 722: free(this->notify_data.ptr);
! 723: free(this->spi.ptr);
! 724: free(this);
! 725: }
! 726:
! 727: /*
! 728: * Described in header
! 729: */
! 730: notify_payload_t *notify_payload_create(payload_type_t type)
! 731: {
! 732: private_notify_payload_t *this;
! 733:
! 734: INIT(this,
! 735: .public = {
! 736: .payload_interface = {
! 737: .verify = _verify,
! 738: .get_encoding_rules = _get_encoding_rules,
! 739: .get_header_length = _get_header_length,
! 740: .get_length = _get_length,
! 741: .get_next_type = _get_next_type,
! 742: .set_next_type = _set_next_type,
! 743: .get_type = _get_type,
! 744: .destroy = _destroy,
! 745: },
! 746: .get_protocol_id = _get_protocol_id,
! 747: .set_protocol_id = _set_protocol_id,
! 748: .get_notify_type = _get_notify_type,
! 749: .set_notify_type = _set_notify_type,
! 750: .get_spi = _get_spi,
! 751: .set_spi = _set_spi,
! 752: .get_spi_data = _get_spi_data,
! 753: .set_spi_data = _set_spi_data,
! 754: .get_notification_data = _get_notification_data,
! 755: .set_notification_data = _set_notification_data,
! 756: .destroy = _destroy,
! 757: },
! 758: .doi = IKEV1_DOI_IPSEC,
! 759: .next_payload = PL_NONE,
! 760: .type = type,
! 761: );
! 762: compute_length(this);
! 763: return &this->public;
! 764: }
! 765:
! 766: /*
! 767: * Described in header.
! 768: */
! 769: notify_payload_t *notify_payload_create_from_protocol_and_type(
! 770: payload_type_t type, protocol_id_t protocol, notify_type_t notify)
! 771: {
! 772: notify_payload_t *this = notify_payload_create(type);
! 773:
! 774: this->set_notify_type(this, notify);
! 775: this->set_protocol_id(this, protocol);
! 776:
! 777: return this;
! 778: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to notify_payload.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libcharon / encoding / payloads