job management:

moved job code from thread_pool to job, jobs have an "execute" method now added two new jobs: delete_child_sa & rekey_child_sa kernel interface: listens now for ACQUIRE & EXPIRE supports hard and soft lifetimes fires jobs for delete and rekey child sa ike sa manager: can checkout IKE SAs by requid of owned CHILD SAs we have now the infrastructure to do the rekeying... :-)
2006-05-31 14:23:15 +00:00
parent 6f2aba1322
commit 32b6500fbf
31 changed files with 930 additions and 739 deletions
@@ -23,7 +23,7 @@

 #include "incoming_packet_job.h"

-
+#include <daemon.h>

 typedef struct private_incoming_packet_job_t private_incoming_packet_job_t;

@@ -40,6 +40,11 @@ struct private_incoming_packet_job_t {
 	 * Assigned packet
 	 */
 	packet_t *packet;
+	
+	/**
+	 * logger
+	 */
+	logger_t *logger;
 };

 /**
@@ -50,32 +55,133 @@ static job_type_t get_type(private_incoming_packet_job_t *this)
 	return INCOMING_PACKET;
 }

+/**
+ * Implementation of job_t.execute.
+ */
+static status_t execute(private_incoming_packet_job_t *this)
+{
+	message_t *message;
+	ike_sa_t *ike_sa;
+	ike_sa_id_t *ike_sa_id;
+	status_t status;
+	packet_t *packet;
+	
+	message = message_create_from_packet(this->packet->clone(this->packet));
+	status = message->parse_header(message);
+	if (status != SUCCESS)
+	{
+		this->logger->log(this->logger, ERROR, "Message header could not be verified!");
+		message->destroy(message);
+		return DESTROY_ME;
+	}
+	
+	this->logger->log(this->logger, CONTROL|LEVEL2, "Message is a %s %s", 
+					  mapping_find(exchange_type_m, message->get_exchange_type(message)),
+					  message->get_request(message) ? "request" : "reply");
+	
+	if ((message->get_major_version(message) != IKE_MAJOR_VERSION) ||
+		(message->get_minor_version(message) != IKE_MINOR_VERSION))
+	{
+		this->logger->log(this->logger, ERROR | LEVEL2,
+						  "IKE version %d.%d not supported",
+						  message->get_major_version(message),
+						  message->get_minor_version(message));
+		if ((message->get_exchange_type(message) == IKE_SA_INIT) && (message->get_request(message)))
+		{
+			message_t *response;
+			message->get_ike_sa_id(message, &ike_sa_id);
+			ike_sa_id->switch_initiator(ike_sa_id);
+			response = message_create_notify_reply(message->get_destination(message),
+					message->get_source(message),
+					IKE_SA_INIT, FALSE, ike_sa_id,
+					INVALID_MAJOR_VERSION);
+			message->destroy(message);
+			ike_sa_id->destroy(ike_sa_id);
+			status = response->generate(response, NULL, NULL, &packet);
+			if (status != SUCCESS)
+			{
+				this->logger->log(this->logger, ERROR, "Could not generate packet from message");
+				response->destroy(response);
+				return DESTROY_ME;
+			}
+			this->logger->log(this->logger, ERROR, "Send notify reply of type INVALID_MAJOR_VERSION"); 
+			charon->send_queue->add(charon->send_queue, packet);
+			response->destroy(response);
+			return DESTROY_ME;
+		}
+		message->destroy(message);
+		return DESTROY_ME;
+	}
+	
+	message->get_ike_sa_id(message, &ike_sa_id);
+	ike_sa_id->switch_initiator(ike_sa_id);
+	this->logger->log(this->logger, CONTROL|LEVEL3, "Checking out IKE SA %lld:%lld, role %s", 
+					  ike_sa_id->get_initiator_spi(ike_sa_id),
+					  ike_sa_id->get_responder_spi(ike_sa_id),
+					  ike_sa_id->is_initiator(ike_sa_id) ? "initiator" : "responder");
+	
+	status = charon->ike_sa_manager->checkout(charon->ike_sa_manager, ike_sa_id, &ike_sa);
+	if ((status != SUCCESS) && (status != CREATED))
+	{
+		this->logger->log(this->logger, ERROR, "IKE SA could not be checked out");
+		ike_sa_id->destroy(ike_sa_id);	
+		message->destroy(message);
+		
+		/* TODO: send notify reply of type INVALID_IKE_SPI if SPI could not be found ? */
+		return DESTROY_ME;
+	}
+
+	if (status == CREATED)
+	{
+		job_t *delete_job;
+		this->logger->log(this->logger, CONTROL|LEVEL3, 
+						  "Create Job to delete half open IKE_SA.");
+		
+		delete_job = (job_t *) delete_half_open_ike_sa_job_create(ike_sa_id);
+		charon->event_queue->add_relative(charon->event_queue, delete_job, 
+										  charon->configuration->get_half_open_ike_sa_timeout(charon->configuration));
+	}
+	
+	status = ike_sa->process_message(ike_sa, message);
+	
+	this->logger->log(this->logger, CONTROL|LEVEL3, "%s IKE SA %lld:%lld, role %s", 
+					  status == DESTROY_ME ? "Checkin and delete" : "Checkin",
+					  ike_sa_id->get_initiator_spi(ike_sa_id),
+					  ike_sa_id->get_responder_spi(ike_sa_id),
+					  ike_sa_id->is_initiator(ike_sa_id) ? "initiator" : "responder");
+	ike_sa_id->destroy(ike_sa_id);
+	
+	if (status == DESTROY_ME)
+	{
+		status = charon->ike_sa_manager->checkin_and_destroy(charon->ike_sa_manager, ike_sa);
+	}
+	else
+	{
+		status = charon->ike_sa_manager->checkin(charon->ike_sa_manager, ike_sa);
+	}
+	
+	if (status != SUCCESS)
+	{
+		this->logger->log(this->logger, ERROR, "Checkin of IKE SA failed!");
+	}
+	message->destroy(message);
+	return DESTROY_ME;
+}
+
 /**
 * Implements incoming_packet_job_t.get_packet.
 */
-static packet_t *get_packet(private_incoming_packet_job_t *this)
+static packet_t* get_packet(private_incoming_packet_job_t *this)
 {
 	return this->packet;
 }

-/**
- * Implements job_t.destroy_all.
- */
-static void destroy_all(private_incoming_packet_job_t *this)
-{
-	if (this->packet != NULL)
-	{
-		this->packet->destroy(this->packet);
-	}
-	free(this);
-}
-
 /**
 * Implements job_t.destroy.
 */
-static void destroy(job_t *job)
+static void destroy(private_incoming_packet_job_t *this)
 {
-	private_incoming_packet_job_t *this = (private_incoming_packet_job_t *) job;
+	this->packet->destroy(this->packet);
 	free(this);
 }

@@ -88,15 +194,14 @@ incoming_packet_job_t *incoming_packet_job_create(packet_t *packet)

 	/* interface functions */
 	this->public.job_interface.get_type = (job_type_t (*) (job_t *)) get_type;
-	this->public.job_interface.destroy_all = (void (*) (job_t *)) destroy_all;
-	this->public.job_interface.destroy = destroy;
+	this->public.job_interface.execute = (status_t (*) (job_t *)) execute;
+	this->public.job_interface.destroy = (void(*)(job_t*))destroy;
 	
-	/* public functions */
-	this->public.get_packet = (packet_t * (*)(incoming_packet_job_t *)) get_packet;
-	this->public.destroy = (void (*)(incoming_packet_job_t *)) destroy;
+	this->public.get_packet = (packet_t*(*)(incoming_packet_job_t*)) get_packet;
 	
 	/* private variables */
 	this->packet = packet;
+	this->logger = logger_manager->get_logger(logger_manager, WORKER);
 	
 	return &(this->public);
 }