Annotation of embedaddon/strongswan/src/libcharon/sa/ikev2/tasks/ike_vendor.c, revision 1.1.1.1
1.1 misho 1: /*
2: * Copyright (C) 2009 Martin Willi
3: * HSR Hochschule fuer Technik Rapperswil
4: *
5: * This program is free software; you can redistribute it and/or modify it
6: * under the terms of the GNU General Public License as published by the
7: * Free Software Foundation; either version 2 of the License, or (at your
8: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9: *
10: * This program is distributed in the hope that it will be useful, but
11: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13: * for more details.
14: */
15:
16: /*
17: * Copyright (C) 2016 secunet Security Networks AG
18: * Copyright (C) 2016 Thomas Egerer
19: *
20: * Permission is hereby granted, free of charge, to any person obtaining a copy
21: * of this software and associated documentation files (the "Software"), to deal
22: * in the Software without restriction, including without limitation the rights
23: * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
24: * copies of the Software, and to permit persons to whom the Software is
25: * furnished to do so, subject to the following conditions:
26: *
27: * The above copyright notice and this permission notice shall be included in
28: * all copies or substantial portions of the Software.
29: *
30: * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
31: * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
32: * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
33: * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
34: * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
35: * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
36: * THE SOFTWARE.
37: */
38:
39: #include "ike_vendor.h"
40:
41: #include <daemon.h>
42: #include <encoding/payloads/vendor_id_payload.h>
43:
44: typedef struct private_ike_vendor_t private_ike_vendor_t;
45:
46: /**
47: * Private data of an ike_vendor_t object.
48: */
49: struct private_ike_vendor_t {
50:
51: /**
52: * Public ike_vendor_t interface.
53: */
54: ike_vendor_t public;
55:
56: /**
57: * Associated IKE_SA
58: */
59: ike_sa_t *ike_sa;
60:
61: /**
62: * Are we the initiator of this task
63: */
64: bool initiator;
65: };
66:
67: /**
68: * Vendor ID database entry
69: */
70: typedef struct {
71: /* Description */
72: char *desc;
73: /* extension flag negotiated with vendor ID, if any */
74: ike_extension_t extension;
75: /* Value from strongswan.conf, whether to send vendor ID */
76: char *setting;
77: /* length of vendor ID string, 0 for NULL terminated */
78: int len;
79: /* vendor ID string */
80: char *id;
81: } vid_data_t;
82:
83: /**
84: * Get the data of a vendor ID as a chunk
85: */
86: static chunk_t get_vid_data(vid_data_t *data)
87: {
88: return chunk_create(data->id, data->len ?: strlen(data->id));
89: }
90:
91: /**
92: * IKEv2 Vendor ID database entry
93: */
94: static vid_data_t vids[] = {
95: /* strongSwan MD5("strongSwan") */
96: { "strongSwan", EXT_STRONGSWAN, "send_vendor_id", 16,
97: "\x88\x2f\xe5\x6d\x6f\xd2\x0d\xbc\x22\x51\x61\x3b\x2e\xbe\x5b\xeb"},
98: { "Cisco Delete Reason", 0, NULL, 0,
99: "CISCO-DELETE-REASON" },
100: { "Cisco FlexVPN Supported", 0, NULL, 0,
101: "FLEXVPN-SUPPORTED" },
102: { "Cisco Copyright (c) 2009", 0, NULL, 0,
103: "CISCO(COPYRIGHT)&Copyright (c) 2009 Cisco Systems, Inc." },
104: { "FRAGMENTATION", 0, NULL, 16,
105: "\x40\x48\xb7\xd5\x6e\xbc\xe8\x85\x25\xe7\xde\x7f\x00\xd6\xc2\xd3"},
106: { "MS NT5 ISAKMPOAKLEY v7", 0, NULL, 20,
107: "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x07"},
108: { "MS NT5 ISAKMPOAKLEY v8", 0, NULL, 20,
109: "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x08"},
110: { "MS NT5 ISAKMPOAKLEY v9", 0, NULL, 20,
111: "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x09"},
112: { "MS-Negotiation Discovery Capable", 0, NULL, 16,
113: "\xfb\x1d\xe3\xcd\xf3\x41\xb7\xea\x16\xb7\xe5\xbe\x08\x55\xf1\x20"},
114: { "Vid-Initial-Contact", 0, NULL, 16,
115: "\x26\x24\x4d\x38\xed\xdb\x61\xb3\x17\x2a\x36\xe3\xd0\xcf\xb8\x19"},
116: };
117:
118: METHOD(task_t, build, status_t,
119: private_ike_vendor_t *this, message_t *message)
120: {
121: vendor_id_payload_t *vid;
122: bool send_vid;
123: int i;
124:
125: for (i = 0; i < countof(vids); i++)
126: {
127: send_vid = FALSE;
128:
129: if (vids[i].setting)
130: {
131: send_vid = lib->settings->get_bool(lib->settings, "%s.%s", send_vid,
132: lib->ns, vids[i].setting);
133: }
134: if (send_vid)
135: {
136: DBG2(DBG_IKE, "sending %s vendor ID", vids[i].desc);
137: vid = vendor_id_payload_create_data(PLV2_VENDOR_ID,
138: chunk_clone(get_vid_data(&vids[i])));
139: message->add_payload(message, &vid->payload_interface);
140: }
141: }
142:
143: return this->initiator ? NEED_MORE : SUCCESS;
144: }
145:
146: METHOD(task_t, process, status_t,
147: private_ike_vendor_t *this, message_t *message)
148: {
149: enumerator_t *enumerator;
150: payload_t *payload;
151: int i;
152:
153: enumerator = message->create_payload_enumerator(message);
154: while (enumerator->enumerate(enumerator, &payload))
155: {
156: if (payload->get_type(payload) == PLV2_VENDOR_ID)
157: {
158: vendor_id_payload_t *vid;
159: chunk_t data;
160: bool found = FALSE;
161:
162: vid = (vendor_id_payload_t*)payload;
163: data = vid->get_data(vid);
164:
165: for (i = 0; i < countof(vids); i++)
166: {
167: if (chunk_equals(get_vid_data(&vids[i]), data))
168: {
169: DBG1(DBG_IKE, "received %s vendor ID", vids[i].desc);
170: if (vids[i].extension)
171: {
172: this->ike_sa->enable_extension(this->ike_sa,
173: vids[i].extension);
174: }
175: found = TRUE;
176: break;
177: }
178: }
179: if (!found)
180: {
181: DBG1(DBG_ENC, "received unknown vendor ID: %#B", &data);
182: }
183: }
184: }
185: enumerator->destroy(enumerator);
186:
187: return this->initiator ? SUCCESS : NEED_MORE;
188: }
189:
190: METHOD(task_t, migrate, void,
191: private_ike_vendor_t *this, ike_sa_t *ike_sa)
192: {
193: this->ike_sa = ike_sa;
194: }
195:
196: METHOD(task_t, get_type, task_type_t,
197: private_ike_vendor_t *this)
198: {
199: return TASK_IKE_VENDOR;
200: }
201:
202: METHOD(task_t, destroy, void,
203: private_ike_vendor_t *this)
204: {
205: free(this);
206: }
207:
208: /**
209: * See header
210: */
211: ike_vendor_t *ike_vendor_create(ike_sa_t *ike_sa, bool initiator)
212: {
213: private_ike_vendor_t *this;
214:
215: INIT(this,
216: .public = {
217: .task = {
218: .build = _build,
219: .process = _process,
220: .migrate = _migrate,
221: .get_type = _get_type,
222: .destroy = _destroy,
223: },
224: },
225: .initiator = initiator,
226: .ike_sa = ike_sa,
227: );
228:
229: return &this->public;
230: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to ike_vendor.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libcharon / sa / ikev2 / tasks