Moved credential manager to libstrongswan
This commit is contained in:
@@ -62,7 +62,7 @@ METHOD(plugin_t, destroy, void,
|
||||
{
|
||||
hydra->attributes->remove_handler(hydra->attributes,
|
||||
&this->handler->handler);
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds->set);
|
||||
charon->bus->remove_listener(charon->bus, &this->logger->listener);
|
||||
this->creds->destroy(this->creds);
|
||||
this->handler->destroy(this->handler);
|
||||
@@ -88,7 +88,7 @@ plugin_t *android_plugin_create()
|
||||
);
|
||||
|
||||
charon->bus->add_listener(charon->bus, &this->logger->listener);
|
||||
charon->credentials->add_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds->set);
|
||||
hydra->attributes->add_handler(hydra->attributes, &this->handler->handler);
|
||||
|
||||
this->service = android_service_create(this->creds);
|
||||
|
||||
@@ -52,8 +52,7 @@ bool eap_aka_3gpp2_get_k(identification_t *id, char k[AKA_K_LEN])
|
||||
shared_key_t *shared;
|
||||
chunk_t key;
|
||||
|
||||
shared = charon->credentials->get_shared(charon->credentials,
|
||||
SHARED_EAP, id, NULL);
|
||||
shared = lib->credmgr->get_shared(lib->credmgr, SHARED_EAP, id, NULL);
|
||||
if (shared == NULL)
|
||||
{
|
||||
return FALSE;
|
||||
|
||||
@@ -168,8 +168,8 @@ static status_t process_peer(private_eap_gtc_t *this,
|
||||
chunk_t key;
|
||||
size_t len;
|
||||
|
||||
shared = charon->credentials->get_shared(charon->credentials, SHARED_EAP,
|
||||
this->peer, this->server);
|
||||
shared = lib->credmgr->get_shared(lib->credmgr, SHARED_EAP,
|
||||
this->peer, this->server);
|
||||
if (shared == NULL)
|
||||
{
|
||||
DBG1(DBG_IKE, "no EAP key found for '%Y' - '%Y'",
|
||||
|
||||
@@ -85,8 +85,7 @@ static status_t hash_challenge(private_eap_md5_t *this, chunk_t *response,
|
||||
chunk_t concat;
|
||||
hasher_t *hasher;
|
||||
|
||||
shared = charon->credentials->get_shared(charon->credentials, SHARED_EAP,
|
||||
me, other);
|
||||
shared = lib->credmgr->get_shared(lib->credmgr, SHARED_EAP, me, other);
|
||||
if (shared == NULL)
|
||||
{
|
||||
DBG1(DBG_IKE, "no EAP key found for hosts '%Y' - '%Y'", me, other);
|
||||
|
||||
@@ -614,8 +614,7 @@ static bool get_nt_hash(private_eap_mschapv2_t *this, identification_t *me,
|
||||
chunk_t password;
|
||||
|
||||
/* try to find a stored NT_HASH first */
|
||||
shared = charon->credentials->get_shared(charon->credentials,
|
||||
SHARED_NT_HASH, me, other);
|
||||
shared = lib->credmgr->get_shared(lib->credmgr, SHARED_NT_HASH, me, other);
|
||||
if (shared )
|
||||
{
|
||||
*nt_hash = chunk_clone(shared->get_key(shared));
|
||||
@@ -624,8 +623,7 @@ static bool get_nt_hash(private_eap_mschapv2_t *this, identification_t *me,
|
||||
}
|
||||
|
||||
/* fallback to plaintext password */
|
||||
shared = charon->credentials->get_shared(charon->credentials,
|
||||
SHARED_EAP, me, other);
|
||||
shared = lib->credmgr->get_shared(lib->credmgr, SHARED_EAP, me, other);
|
||||
if (shared)
|
||||
{
|
||||
password = ascii_to_unicode(shared->get_key(shared));
|
||||
|
||||
@@ -211,7 +211,7 @@ static void setup_tunnel(private_ha_tunnel_t *this,
|
||||
this->creds.public.create_cdp_enumerator = (void*)return_null;
|
||||
this->creds.public.cache_cert = (void*)nop;
|
||||
|
||||
charon->credentials->add_set(charon->credentials, &this->creds.public);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds.public);
|
||||
|
||||
/* create config and backend */
|
||||
ike_cfg = ike_cfg_create(FALSE, FALSE, local, IKEV2_UDP_PORT,
|
||||
@@ -270,7 +270,7 @@ static void destroy(private_ha_tunnel_t *this)
|
||||
}
|
||||
if (this->creds.key)
|
||||
{
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds.public);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds.public);
|
||||
this->creds.key->destroy(this->creds.key);
|
||||
}
|
||||
this->creds.local->destroy(this->creds.local);
|
||||
|
||||
@@ -158,7 +158,7 @@ static void destroy(private_load_tester_plugin_t *this)
|
||||
charon->kernel_interface->remove_ipsec_interface(charon->kernel_interface,
|
||||
(kernel_ipsec_constructor_t)load_tester_ipsec_create);
|
||||
charon->backends->remove_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds->credential_set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds->credential_set);
|
||||
charon->bus->remove_listener(charon->bus, &this->listener->listener);
|
||||
this->config->destroy(this->config);
|
||||
this->creds->destroy(this->creds);
|
||||
@@ -209,7 +209,7 @@ plugin_t *load_tester_plugin_create()
|
||||
this->creds = load_tester_creds_create();
|
||||
this->listener = load_tester_listener_create(shutdown_on);
|
||||
charon->backends->add_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->add_set(charon->credentials, &this->creds->credential_set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds->credential_set);
|
||||
charon->bus->add_listener(charon->bus, &this->listener->listener);
|
||||
|
||||
if (lib->settings->get_bool(lib->settings,
|
||||
|
||||
@@ -61,7 +61,7 @@ static void destroy(private_medcli_plugin_t *this)
|
||||
{
|
||||
charon->bus->remove_listener(charon->bus, &this->listener->listener);
|
||||
charon->backends->remove_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds->set);
|
||||
this->listener->destroy(this->listener);
|
||||
this->config->destroy(this->config);
|
||||
this->creds->destroy(this->creds);
|
||||
@@ -100,7 +100,7 @@ plugin_t *medcli_plugin_create()
|
||||
this->config = medcli_config_create(this->db);
|
||||
this->listener = medcli_listener_create(this->db);
|
||||
|
||||
charon->credentials->add_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds->set);
|
||||
charon->backends->add_backend(charon->backends, &this->config->backend);
|
||||
charon->bus->add_listener(charon->bus, &this->listener->listener);
|
||||
|
||||
|
||||
@@ -54,7 +54,7 @@ struct private_medsrv_plugin_t {
|
||||
static void destroy(private_medsrv_plugin_t *this)
|
||||
{
|
||||
charon->backends->remove_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds->set);
|
||||
this->config->destroy(this->config);
|
||||
this->creds->destroy(this->creds);
|
||||
this->db->destroy(this->db);
|
||||
@@ -91,7 +91,7 @@ plugin_t *medsrv_plugin_create()
|
||||
this->creds = medsrv_creds_create(this->db);
|
||||
this->config = medsrv_config_create(this->db);
|
||||
|
||||
charon->credentials->add_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds->set);
|
||||
charon->backends->add_backend(charon->backends, &this->config->backend);
|
||||
|
||||
return &this->public.plugin;
|
||||
|
||||
@@ -84,7 +84,7 @@ static void destroy(private_nm_plugin_t *this)
|
||||
{
|
||||
g_object_unref(this->plugin);
|
||||
}
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds->set);
|
||||
hydra->attributes->remove_handler(hydra->attributes, &this->handler->handler);
|
||||
this->creds->destroy(this->creds);
|
||||
this->handler->destroy(this->handler);
|
||||
@@ -110,7 +110,7 @@ plugin_t *nm_plugin_create()
|
||||
this->creds = nm_creds_create();
|
||||
this->handler = nm_handler_create();
|
||||
hydra->attributes->add_handler(hydra->attributes, &this->handler->handler);
|
||||
charon->credentials->add_set(charon->credentials, &this->creds->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds->set);
|
||||
this->plugin = nm_strongswan_plugin_new(this->creds, this->handler);
|
||||
if (!this->plugin)
|
||||
{
|
||||
|
||||
@@ -59,7 +59,7 @@ struct private_sql_plugin_t {
|
||||
static void destroy(private_sql_plugin_t *this)
|
||||
{
|
||||
charon->backends->remove_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->remove_set(charon->credentials, &this->cred->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->cred->set);
|
||||
charon->bus->remove_listener(charon->bus, &this->logger->listener);
|
||||
this->config->destroy(this->config);
|
||||
this->cred->destroy(this->cred);
|
||||
@@ -99,7 +99,7 @@ plugin_t *sql_plugin_create()
|
||||
this->logger = sql_logger_create(this->db);
|
||||
|
||||
charon->backends->add_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->add_set(charon->credentials, &this->cred->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->cred->set);
|
||||
charon->bus->add_listener(charon->bus, &this->logger->listener);
|
||||
|
||||
return &this->public.plugin;
|
||||
|
||||
@@ -307,7 +307,7 @@ static void del(private_stroke_ca_t *this, stroke_msg_t *msg)
|
||||
}
|
||||
ca_section_destroy(ca);
|
||||
|
||||
charon->credentials->flush_cache(charon->credentials, CERT_ANY);
|
||||
lib->credmgr->flush_cache(lib->credmgr, CERT_ANY);
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
@@ -399,8 +399,8 @@ static auth_cfg_t *build_auth_cfg(private_stroke_config_t *this,
|
||||
if (ca)
|
||||
{
|
||||
identity = identification_create_from_string(ca);
|
||||
certificate = charon->credentials->get_cert(charon->credentials,
|
||||
CERT_X509, KEY_ANY, identity, TRUE);
|
||||
certificate = lib->credmgr->get_cert(lib->credmgr, CERT_X509,
|
||||
KEY_ANY, identity, TRUE);
|
||||
identity->destroy(identity);
|
||||
if (certificate)
|
||||
{
|
||||
|
||||
@@ -576,9 +576,8 @@ static void status(private_stroke_list_t *this, stroke_msg_t *msg, FILE *out, bo
|
||||
static linked_list_t* create_unique_cert_list(certificate_type_t type)
|
||||
{
|
||||
linked_list_t *list = linked_list_create();
|
||||
enumerator_t *enumerator = charon->credentials->create_cert_enumerator(
|
||||
charon->credentials, type, KEY_ANY,
|
||||
NULL, FALSE);
|
||||
enumerator_t *enumerator = lib->credmgr->create_cert_enumerator(
|
||||
lib->credmgr, type, KEY_ANY, NULL, FALSE);
|
||||
certificate_t *cert;
|
||||
|
||||
while (enumerator->enumerate(enumerator, (void**)&cert))
|
||||
@@ -631,7 +630,7 @@ static void list_public_key(public_key_t *public, FILE *out)
|
||||
{
|
||||
id = identification_create_from_encoding(ID_KEY_ID, keyid);
|
||||
auth = auth_cfg_create();
|
||||
private = charon->credentials->get_private(charon->credentials,
|
||||
private = lib->credmgr->get_private(lib->credmgr,
|
||||
public->get_type(public), id, auth);
|
||||
auth->destroy(auth);
|
||||
id->destroy(id);
|
||||
|
||||
@@ -344,8 +344,7 @@ static void stroke_purge(private_stroke_socket_t *this,
|
||||
{
|
||||
if (msg->purge.flags & PURGE_OCSP)
|
||||
{
|
||||
charon->credentials->flush_cache(charon->credentials,
|
||||
CERT_X509_OCSP_RESPONSE);
|
||||
lib->credmgr->flush_cache(lib->credmgr, CERT_X509_OCSP_RESPONSE);
|
||||
}
|
||||
if (msg->purge.flags & PURGE_IKE)
|
||||
{
|
||||
@@ -622,8 +621,8 @@ static bool open_socket(private_stroke_socket_t *this)
|
||||
static void destroy(private_stroke_socket_t *this)
|
||||
{
|
||||
this->job->cancel(this->job);
|
||||
charon->credentials->remove_set(charon->credentials, &this->ca->set);
|
||||
charon->credentials->remove_set(charon->credentials, &this->cred->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->ca->set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->cred->set);
|
||||
charon->backends->remove_backend(charon->backends, &this->config->backend);
|
||||
hydra->attributes->remove_provider(hydra->attributes, &this->attribute->provider);
|
||||
this->cred->destroy(this->cred);
|
||||
@@ -657,8 +656,8 @@ stroke_socket_t *stroke_socket_create()
|
||||
this->control = stroke_control_create();
|
||||
this->list = stroke_list_create(this->attribute);
|
||||
|
||||
charon->credentials->add_set(charon->credentials, &this->ca->set);
|
||||
charon->credentials->add_set(charon->credentials, &this->cred->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->ca->set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->cred->set);
|
||||
charon->backends->add_backend(charon->backends, &this->config->backend);
|
||||
hydra->attributes->add_provider(hydra->attributes, &this->attribute->provider);
|
||||
|
||||
|
||||
@@ -64,7 +64,7 @@ struct private_uci_plugin_t {
|
||||
static void destroy(private_uci_plugin_t *this)
|
||||
{
|
||||
charon->backends->remove_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->remove_set(charon->credentials, &this->creds->credential_set);
|
||||
lib->credmgr->remove_set(lib->credmgr, &this->creds->credential_set);
|
||||
this->config->destroy(this->config);
|
||||
this->creds->destroy(this->creds);
|
||||
this->parser->destroy(this->parser);
|
||||
@@ -86,7 +86,7 @@ plugin_t *uci_plugin_create()
|
||||
this->creds = uci_creds_create(this->parser);
|
||||
this->control = uci_control_create();
|
||||
charon->backends->add_backend(charon->backends, &this->config->backend);
|
||||
charon->credentials->add_set(charon->credentials, &this->creds->credential_set);
|
||||
lib->credmgr->add_set(lib->credmgr, &this->creds->credential_set);
|
||||
|
||||
return &this->public.plugin;
|
||||
}
|
||||
|
||||
@@ -15,7 +15,7 @@
|
||||
|
||||
#include <daemon.h>
|
||||
#include <library.h>
|
||||
#include <config/auth_cfg.h>
|
||||
#include <credentials/auth_cfg.h>
|
||||
|
||||
|
||||
static chunk_t certchunk = chunk_from_chars(
|
||||
|
||||
@@ -37,8 +37,8 @@ bool test_med_db()
|
||||
bool good = FALSE;
|
||||
|
||||
id = identification_create_from_encoding(ID_KEY_ID, keyid);
|
||||
enumerator = charon->credentials->create_public_enumerator(
|
||||
charon->credentials, KEY_ANY, id, NULL);
|
||||
enumerator = lib->credmgr->create_public_enumerator(lib->credmgr,
|
||||
KEY_ANY, id, NULL);
|
||||
while (enumerator->enumerate(enumerator, &public, &auth))
|
||||
{
|
||||
good = public->get_fingerprint(public, KEY_ID_PUBKEY_SHA1, &found);
|
||||
|
||||
Reference in New Issue
Block a user