implemented the RFC 5792 PA-TNC protocol and an example IMC/IMV pair

2011-05-30 21:30:09 +02:00
parent 61420db66c
commit 510f37abd4
27 changed files with 3089 additions and 1 deletions
@@ -0,0 +1,184 @@
+/*
+ * Copyright (C) 2011 Andreas Steffen, HSR Hochschule fuer Technik Rapperswil
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the
+ * Free Software Foundation; either version 2 of the License, or (at your
+ * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+ * for more details.
+ */
+
+/**
+ *
+ * @defgroup imv_agent_t imv_agent
+ * @{ @ingroup imv_agent
+ */
+
+#ifndef IMV_AGENT_H_
+#define IMV_AGENT_H_
+
+#include "imv_state.h"
+
+#include <tnc/tncifimv.h>
+#include <tnc/pen/pen.h>
+#include <library.h>
+
+typedef struct imv_agent_t imv_agent_t;
+
+/**
+ * Core functions of an Integrity Measurement Verifier (IMV)
+ */
+struct imv_agent_t {
+
+	/**
+	 * Ask a TNCS to retry an Integrity Check Handshake
+	 *
+	 * @param imv_id			IMV ID assigned by TNCS
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @param reason			IMV retry reason
+	 * @return					TNC result code
+	 */
+	TNC_Result (*request_handshake_retry)(TNC_IMVID imv_id,
+										  TNC_ConnectionID connection_id,
+										  TNC_RetryReason reason);
+
+	/**
+	 * Get the value of an attribute associated with a connection
+	 * or with the TNCS as a whole.
+	 *
+	 * @param imv_id			IMV ID assigned by TNCS
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @param attribute_id		attribute ID
+	 * @param buffer_len		length of buffer in bytes
+	 * @param buffer			buffer
+	 * @param out_value_len		size in bytes of attribute stored in buffer
+	 * @return					TNC result code
+	 */
+	TNC_Result (*get_attribute)(TNC_IMVID imv_id,
+								TNC_ConnectionID connection_id,
+								TNC_AttributeID attribute_id,
+								TNC_UInt32 buffer_len,
+								TNC_BufferReference buffer,
+								TNC_UInt32 *out_value_len);
+
+	/**
+	 * Set the value of an attribute associated with a connection
+	 * or with the TNCS as a whole.
+	 *
+	 * @param imv_id			IMV ID assigned by TNCS
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @param attribute_id		attribute ID
+	 * @param buffer_len		length of buffer in bytes
+	 * @param buffer			buffer
+	 * @return					TNC result code
+	 */
+	TNC_Result (*set_attribute)(TNC_IMVID imv_id,
+								TNC_ConnectionID connection_id,
+								TNC_AttributeID attribute_id,
+								TNC_UInt32 buffer_len,
+								TNC_BufferReference buffer);
+	
+	/**
+	 * Bind TNCS functions
+	 *
+	 * @param bind_function		function offered by the TNCS
+	 * @return					TNC result code
+	 */
+	TNC_Result (*bind_functions)(imv_agent_t *this,
+								 TNC_TNCS_BindFunctionPointer bind_function);
+
+	/**
+	 * Create the IMV state for a TNCCS connection instance
+	 *
+	 * @param state				internal IMV state instance
+	 * @return					TNC result code
+	 */
+	TNC_Result (*create_state)(imv_agent_t *this, imv_state_t *state);
+
+	/**
+	 * Delete the IMV state for a TNCCS connection instance
+	 *
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @return					TNC result code
+	 */
+	TNC_Result (*delete_state)(imv_agent_t *this,
+							   TNC_ConnectionID connection_id);
+
+	/**
+	 * Change the current state of a TNCCS connection
+	 *
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @param new_state			new state of TNCCS connection
+	 * @return					TNC result code
+	 */
+	TNC_Result (*change_state)(imv_agent_t *this,
+							   TNC_ConnectionID connection_id,
+							   TNC_ConnectionState new_state);
+
+	/**
+	 * Get the IMV state for a TNCCS connection instance
+	 *
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @param state				internal IMV state instance
+	 * @return					TRUE if the state was found
+	 */
+	bool (*get_state)(imv_agent_t *this,
+					  TNC_ConnectionID connection_id, imv_state_t **state);
+
+	/**
+	 * Call when an IMV-IMC message is to be sent
+	 *
+	 * @param connection_id		network connection ID assigned by TNCS
+	 * @param msg				message to send
+	 * @return					TNC result code
+	 */
+	TNC_Result (*send_message)(imv_agent_t *this,
+							   TNC_ConnectionID connection_id, chunk_t msg);
+
+	/**
+	 * Set Action Recommendation and Evaluation Result in the IMV state
+	 *
+	 # @param connection_id		network connection ID assigned by TNCS
+	 * @param rec				IMV action recommendation
+	 * @param eval				IMV evaluation result
+	 * @return					TNC result code
+	 */
+	TNC_Result (*set_recommendation)(imv_agent_t *this,
+									 TNC_ConnectionID connection_id,
+									 TNC_IMV_Action_Recommendation rec,
+									 TNC_IMV_Evaluation_Result eval);
+
+	/**
+	 * Deliver IMV Action Recommendation and IMV Evaluation Result to the TNCS
+	 *
+	 # @param connection_id		network connection ID assigned by TNCS
+	 * @return					TNC result code
+	 */
+	TNC_Result (*provide_recommendation)(imv_agent_t *this,
+										 TNC_ConnectionID connection_id);
+
+	/**
+	 * Destroys an imv_agent_t object
+	 */
+	void (*destroy)(imv_agent_t *this);
+};
+
+/**
+ * Create an imv_agent_t object
+ *
+ * @param name				name of the IMV
+ * @param vendor_id			vendor ID of the IMV
+ * @param subtype			message subtype of the IMV
+ * @param id				ID of the IMV as assigned by the TNCS
+ * @param actual_version	actual version of the IF-IMV API
+ *
+ */
+imv_agent_t *imv_agent_create(const char *name,
+							  pen_t vendor_id, u_int32_t subtype,
+							  TNC_IMVID id, TNC_Version *actual_version);
+
+#endif /** IMV_AGENT_H_ @}*/