Annotation of embedaddon/strongswan/src/libimcv/plugins/imv_swima/imv_swima_state.c, revision 1.1.1.1
1.1 misho 1: /*
2: * Copyright (C) 2017 Andreas Steffen
3: * HSR Hochschule fuer Technik Rapperswil
4: *
5: * This program is free software; you can redistribute it and/or modify it
6: * under the terms of the GNU General Public License as published by the
7: * Free Software Foundation; either version 2 of the License, or (at your
8: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9: *
10: * This program is distributed in the hope that it will be useful, but
11: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13: * for more details.
14: */
15:
16: #include "imv_swima_state.h"
17:
18: #include <imv/imv_lang_string.h>
19: #include <imv/imv_reason_string.h>
20: #include <imv/imv_remediation_string.h>
21:
22: #include <tncif_policy.h>
23:
24: #include <utils/debug.h>
25:
26: typedef struct private_imv_swima_state_t private_imv_swima_state_t;
27:
28: /**
29: * Private data of an imv_swima_state_t object.
30: */
31: struct private_imv_swima_state_t {
32:
33: /**
34: * Public members of imv_swima_state_t
35: */
36: imv_swima_state_t public;
37:
38: /**
39: * TNCCS connection ID
40: */
41: TNC_ConnectionID connection_id;
42:
43: /**
44: * TNCCS connection state
45: */
46: TNC_ConnectionState state;
47:
48: /**
49: * Does the TNCCS connection support long message types?
50: */
51: bool has_long;
52:
53: /**
54: * Does the TNCCS connection support exclusive delivery?
55: */
56: bool has_excl;
57:
58: /**
59: * Maximum PA-TNC message size for this TNCCS connection
60: */
61: uint32_t max_msg_len;
62:
63: /**
64: * Flags set for completed actions
65: */
66: uint32_t action_flags;
67:
68: /**
69: * IMV database session associated with TNCCS connection
70: */
71: imv_session_t *session;
72:
73: /**
74: * PA-TNC attribute segmentation contracts associated with TNCCS connection
75: */
76: seg_contract_manager_t *contracts;
77:
78: /**
79: * IMV action recommendation
80: */
81: TNC_IMV_Action_Recommendation rec;
82:
83: /**
84: * IMV evaluation result
85: */
86: TNC_IMV_Evaluation_Result eval;
87:
88: /**
89: * IMV Scanner handshake state
90: */
91: imv_swima_handshake_state_t handshake_state;
92:
93: /**
94: * TNC Reason String
95: */
96: imv_reason_string_t *reason_string;
97:
98: /**
99: * IETF Remediation Instructions String
100: */
101: imv_remediation_string_t *remediation_string;
102:
103: /**
104: * Has a subscription been established?
105: */
106: bool has_subscription;
107:
108: /**
109: * SWID Tag Request ID
110: */
111: uint32_t request_id;
112:
113: /**
114: * Number of processed Software Identifiers
115: */
116: int sw_id_count;
117:
118: /**
119: * Number of processed SWID Tags
120: */
121: int tag_count;
122:
123: /**
124: * Number of missing Software Identifiers or SWID Tags
125: */
126: uint32_t missing;
127:
128: /**
129: * SWID IMC ID
130: */
131: TNC_UInt32 imc_id;
132:
133: /**
134: * Top level JSON object
135: */
136: json_object *jobj;
137:
138: /**
139: * JSON array containing either a SW [ID] inventory or SW ID events
140: */
141: json_object *jarray;
142:
143: };
144:
145: METHOD(imv_state_t, get_connection_id, TNC_ConnectionID,
146: private_imv_swima_state_t *this)
147: {
148: return this->connection_id;
149: }
150:
151: METHOD(imv_state_t, has_long, bool,
152: private_imv_swima_state_t *this)
153: {
154: return this->has_long;
155: }
156:
157: METHOD(imv_state_t, has_excl, bool,
158: private_imv_swima_state_t *this)
159: {
160: return this->has_excl;
161: }
162:
163: METHOD(imv_state_t, set_flags, void,
164: private_imv_swima_state_t *this, bool has_long, bool has_excl)
165: {
166: this->has_long = has_long;
167: this->has_excl = has_excl;
168: }
169:
170: METHOD(imv_state_t, set_max_msg_len, void,
171: private_imv_swima_state_t *this, uint32_t max_msg_len)
172: {
173: this->max_msg_len = max_msg_len;
174: }
175:
176: METHOD(imv_state_t, get_max_msg_len, uint32_t,
177: private_imv_swima_state_t *this)
178: {
179: return this->max_msg_len;
180: }
181:
182: METHOD(imv_state_t, set_action_flags, void,
183: private_imv_swima_state_t *this, uint32_t flags)
184: {
185: this->action_flags |= flags;
186: }
187:
188: METHOD(imv_state_t, get_action_flags, uint32_t,
189: private_imv_swima_state_t *this)
190: {
191: return this->action_flags;
192: }
193:
194: METHOD(imv_state_t, set_session, void,
195: private_imv_swima_state_t *this, imv_session_t *session)
196: {
197: this->session = session;
198: }
199:
200: METHOD(imv_state_t, get_session, imv_session_t*,
201: private_imv_swima_state_t *this)
202: {
203: return this->session;
204: }
205:
206: METHOD(imv_state_t, get_contracts, seg_contract_manager_t*,
207: private_imv_swima_state_t *this)
208: {
209: return this->contracts;
210: }
211:
212: METHOD(imv_state_t, change_state, TNC_ConnectionState,
213: private_imv_swima_state_t *this, TNC_ConnectionState new_state)
214: {
215: TNC_ConnectionState old_state;
216:
217: old_state = this->state;
218: this->state = new_state;
219: return old_state;
220: }
221:
222: METHOD(imv_state_t, get_recommendation, void,
223: private_imv_swima_state_t *this, TNC_IMV_Action_Recommendation *rec,
224: TNC_IMV_Evaluation_Result *eval)
225: {
226: *rec = this->rec;
227: *eval = this->eval;
228: }
229:
230: METHOD(imv_state_t, set_recommendation, void,
231: private_imv_swima_state_t *this, TNC_IMV_Action_Recommendation rec,
232: TNC_IMV_Evaluation_Result eval)
233: {
234: this->rec = rec;
235: this->eval = eval;
236: }
237:
238: METHOD(imv_state_t, update_recommendation, void,
239: private_imv_swima_state_t *this, TNC_IMV_Action_Recommendation rec,
240: TNC_IMV_Evaluation_Result eval)
241: {
242: this->rec = tncif_policy_update_recommendation(this->rec, rec);
243: this->eval = tncif_policy_update_evaluation(this->eval, eval);
244: }
245:
246: METHOD(imv_state_t, get_reason_string, bool,
247: private_imv_swima_state_t *this, enumerator_t *language_enumerator,
248: chunk_t *reason_string, char **reason_language)
249: {
250: return FALSE;
251: }
252:
253: METHOD(imv_state_t, get_remediation_instructions, bool,
254: private_imv_swima_state_t *this, enumerator_t *language_enumerator,
255: chunk_t *string, char **lang_code, char **uri)
256: {
257: return FALSE;
258: }
259:
260: METHOD(imv_state_t, reset, void,
261: private_imv_swima_state_t *this)
262: {
263: this->rec = TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION;
264: this->eval = TNC_IMV_EVALUATION_RESULT_DONT_KNOW;
265:
266: this->action_flags = 0;
267:
268: this->handshake_state = IMV_SWIMA_STATE_INIT;
269: this->sw_id_count = 0;
270: this->tag_count = 0;
271: this->missing = 0;
272:
273: json_object_put(this->jobj);
274: this->jobj = json_object_new_object();
275: }
276:
277: METHOD(imv_state_t, destroy, void,
278: private_imv_swima_state_t *this)
279: {
280: json_object_put(this->jobj);
281: DESTROY_IF(this->session);
282: this->contracts->destroy(this->contracts);
283: free(this);
284: }
285:
286: METHOD(imv_swima_state_t, set_handshake_state, void,
287: private_imv_swima_state_t *this, imv_swima_handshake_state_t new_state)
288: {
289: this->handshake_state = new_state;
290: }
291:
292: METHOD(imv_swima_state_t, get_handshake_state, imv_swima_handshake_state_t,
293: private_imv_swima_state_t *this)
294: {
295: return this->handshake_state;
296: }
297:
298: METHOD(imv_swima_state_t, set_request_id, void,
299: private_imv_swima_state_t *this, uint32_t request_id)
300: {
301: this->request_id = request_id;
302: }
303:
304: METHOD(imv_swima_state_t, get_request_id, uint32_t,
305: private_imv_swima_state_t *this)
306: {
307: return this->request_id;
308: }
309:
310: METHOD(imv_swima_state_t, set_inventory, void,
311: private_imv_swima_state_t *this, swima_inventory_t *inventory)
312: {
313: chunk_t sw_id, sw_locator;
314: uint32_t record_id;
315: char *sw_id_str;
316: json_object *jstring;
317: swima_record_t *sw_record;
318: enumerator_t *enumerator;
319:
320: if (this->sw_id_count == 0)
321: {
322: this->jarray = json_object_new_array();
323: json_object_object_add(this->jobj, "data", this->jarray);
324: }
325:
326: enumerator = inventory->create_enumerator(inventory);
327: while (enumerator->enumerate(enumerator, &sw_record))
328: {
329: record_id = sw_record->get_record_id(sw_record);
330: sw_id = sw_record->get_sw_id(sw_record, &sw_locator);
331: sw_id_str = strndup(sw_id.ptr, sw_id.len);
332: if (sw_locator.len)
333: {
334: DBG3(DBG_IMV, "%6u: %s @ %.*s", record_id, sw_id_str,
335: sw_locator.len, sw_locator.ptr);
336: }
337: else
338: {
339: DBG3(DBG_IMV, "%6u: %s", record_id, sw_id_str);
340: }
341:
342: /* Add software identity to JSON array */
343: jstring = json_object_new_string(sw_id_str);
344: json_object_array_add(this->jarray, jstring);
345: free(sw_id_str);
346: }
347: enumerator->destroy(enumerator);
348: }
349:
350: METHOD(imv_swima_state_t, set_events, void,
351: private_imv_swima_state_t *this, swima_events_t *events)
352: {
353: chunk_t sw_id, timestamp;
354: uint32_t record_id, eid, last_eid, epoch, source_id, action;
355: char *sw_id_str, *timestamp_str;
356: json_object *jevent, *jvalue, *jstring;
357: swima_event_t *sw_event;
358: swima_record_t *sw_record;
359: enumerator_t *enumerator;
360:
361: if (this->sw_id_count == 0)
362: {
363: last_eid = events->get_eid(events, &epoch, NULL);
364: jvalue = json_object_new_int(epoch);
365: json_object_object_add(this->jobj, "epoch", jvalue);
366: jvalue = json_object_new_int(last_eid);
367: json_object_object_add(this->jobj, "lastEid", jvalue);
368: this->jarray = json_object_new_array();
369: json_object_object_add(this->jobj, "events", this->jarray);
370: }
371:
372: enumerator = events->create_enumerator(events);
373: while (enumerator->enumerate(enumerator, &sw_event))
374: {
375: eid = sw_event->get_eid(sw_event, ×tamp);
376: timestamp_str = strndup(timestamp.ptr, timestamp.len);
377: action = sw_event->get_action(sw_event);
378: sw_record = sw_event->get_sw_record(sw_event);
379: record_id = sw_record->get_record_id(sw_record);
380: source_id = sw_record->get_source_id(sw_record);
381: sw_id = sw_record->get_sw_id(sw_record, NULL);
382: sw_id_str = strndup(sw_id.ptr, sw_id.len);
383: DBG3(DBG_IMV, "%3u %.*s %u %5u: %s", eid, timestamp.len, timestamp.ptr,
384: action, record_id, sw_id_str);
385:
386: /* Add software event to JSON array */
387: jevent = json_object_new_object();
388: jvalue = json_object_new_int(eid);
389: json_object_object_add(jevent, "eid", jvalue);
390: jstring = json_object_new_string(timestamp_str);
391: json_object_object_add(jevent, "timestamp", jstring);
392: jvalue = json_object_new_int(record_id);
393: json_object_object_add(jevent, "recordId", jvalue);
394: jvalue = json_object_new_int(source_id);
395: json_object_object_add(jevent, "sourceId", jvalue);
396: jvalue = json_object_new_int(action);
397: json_object_object_add(jevent, "action", jvalue);
398: jstring = json_object_new_string(sw_id_str);
399: json_object_object_add(jevent, "softwareId", jstring);
400: json_object_array_add(this->jarray, jevent);
401: free(timestamp_str);
402: free(sw_id_str);
403: }
404: enumerator->destroy(enumerator);
405: }
406:
407: METHOD(imv_swima_state_t, get_jrequest, json_object*,
408: private_imv_swima_state_t *this)
409: {
410: return this->jobj;
411: }
412:
413: METHOD(imv_swima_state_t, set_missing, void,
414: private_imv_swima_state_t *this, uint32_t count)
415: {
416: this->missing = count;
417: }
418:
419: METHOD(imv_swima_state_t, get_missing, uint32_t,
420: private_imv_swima_state_t *this)
421: {
422: return this->missing;
423: }
424:
425: METHOD(imv_swima_state_t, set_count, void,
426: private_imv_swima_state_t *this, int sw_id_count, int tag_count,
427: TNC_UInt32 imc_id)
428: {
429: this->sw_id_count += sw_id_count;
430: this->tag_count += tag_count;
431: this->imc_id = imc_id;
432: }
433:
434: METHOD(imv_swima_state_t, get_count, void,
435: private_imv_swima_state_t *this, int *sw_id_count, int *tag_count)
436: {
437: if (sw_id_count)
438: {
439: *sw_id_count = this->sw_id_count;
440: }
441: if (tag_count)
442: {
443: *tag_count = this->tag_count;
444: }
445: }
446:
447: METHOD(imv_swima_state_t, get_imc_id, TNC_UInt32,
448: private_imv_swima_state_t *this)
449: {
450: return this->imc_id;
451: }
452:
453: METHOD(imv_swima_state_t, set_subscription, void,
454: private_imv_swima_state_t *this, bool set)
455: {
456: this->has_subscription = set;
457: }
458:
459: METHOD(imv_swima_state_t, get_subscription, bool,
460: private_imv_swima_state_t *this)
461: {
462: return this->has_subscription;
463: }
464:
465: /**
466: * Described in header.
467: */
468: imv_state_t *imv_swima_state_create(TNC_ConnectionID connection_id)
469: {
470: private_imv_swima_state_t *this;
471:
472: INIT(this,
473: .public = {
474: .interface = {
475: .get_connection_id = _get_connection_id,
476: .has_long = _has_long,
477: .has_excl = _has_excl,
478: .set_flags = _set_flags,
479: .set_max_msg_len = _set_max_msg_len,
480: .get_max_msg_len = _get_max_msg_len,
481: .set_action_flags = _set_action_flags,
482: .get_action_flags = _get_action_flags,
483: .set_session = _set_session,
484: .get_session= _get_session,
485: .get_contracts = _get_contracts,
486: .change_state = _change_state,
487: .get_recommendation = _get_recommendation,
488: .set_recommendation = _set_recommendation,
489: .update_recommendation = _update_recommendation,
490: .get_reason_string = _get_reason_string,
491: .get_remediation_instructions = _get_remediation_instructions,
492: .reset = _reset,
493: .destroy = _destroy,
494: },
495: .set_handshake_state = _set_handshake_state,
496: .get_handshake_state = _get_handshake_state,
497: .set_request_id = _set_request_id,
498: .get_request_id = _get_request_id,
499: .set_inventory = _set_inventory,
500: .set_events = _set_events,
501: .get_jrequest = _get_jrequest,
502: .set_missing = _set_missing,
503: .get_missing = _get_missing,
504: .set_count = _set_count,
505: .get_count = _get_count,
506: .get_imc_id = _get_imc_id,
507: .set_subscription = _set_subscription,
508: .get_subscription = _get_subscription,
509: },
510: .state = TNC_CONNECTION_STATE_CREATE,
511: .rec = TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION,
512: .eval = TNC_IMV_EVALUATION_RESULT_DONT_KNOW,
513: .connection_id = connection_id,
514: .contracts = seg_contract_manager_create(),
515: .imc_id = TNC_IMCID_ANY,
516: .jobj = json_object_new_object(),
517: );
518:
519: return &this->public.interface;
520: }
521:
522:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to imv_swima_state.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libimcv / plugins / imv_swima