denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Read actions from test config, delayed execution

Browse Source
This commit is contained in:
Martin Willi
2011-01-05 16:45:41 +01:00
parent 6c2d466b90
commit 73a3013f7c
5 changed files with 391 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/conftest/Makefile.am
+2 -1
View File
@@ -2,7 +2,8 @@ ipsec_PROGRAMS = conftest
AM_CFLAGS = -rdynamic
conftest_SOURCES = conftest.c conftest.h config.c config.h hooks/hook.h
conftest_SOURCES = conftest.c conftest.h config.c config.h hooks/hook.h \
actions.c actions.h
INCLUDES = \
-I$(top_srcdir)/src/libstrongswan \
src/conftest/actions.c
+339
View File
@@ -0,0 +1,339 @@
/*
* Copyright (C) 2010 Martin Willi
* Copyright (C) 2010 revosec AG
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*/
#include "actions.h"
#include "conftest.h"
#include <daemon.h>
#include <processing/jobs/callback_job.h>
#include <processing/jobs/rekey_ike_sa_job.h>
#include <processing/jobs/rekey_child_sa_job.h>
#include <processing/jobs/send_dpd_job.h>
typedef struct private_actions_t private_actions_t;
/**
* Private data of an actions_t object.
*/
struct private_actions_t {
/**
* Public actions_t interface.
*/
actions_t public;
};
/**
* Initiate a CHILD_SA
*/
static job_requeue_t initiate(char *config)
{
peer_cfg_t *peer_cfg;
child_cfg_t *child_cfg = NULL, *current;
enumerator_t *enumerator;
peer_cfg = charon->backends->get_peer_cfg_by_name(charon->backends, config);
if (!peer_cfg)
{
DBG1(DBG_CFG, "initiating '%s' failed, config not found");
return JOB_REQUEUE_NONE;
}
enumerator = peer_cfg->create_child_cfg_enumerator(peer_cfg);
while (enumerator->enumerate(enumerator, &current))
{
if (streq(current->get_name(current), config))
{
child_cfg = current;
child_cfg->get_ref(child_cfg);
break;
}
}
enumerator->destroy(enumerator);
if (child_cfg)
{
DBG1(DBG_CFG, "initiating IKE_SA for CHILD_SA config '%s'", config);
charon->controller->initiate(charon->controller, peer_cfg, child_cfg,
NULL, NULL);
}
else
{
DBG1(DBG_CFG, "initiating '%s' failed, CHILD_SA config not found",
config);
}
return JOB_REQUEUE_NONE;
}
/**
* Rekey an IKE_SA
*/
static job_requeue_t rekey_ike(char *config)
{
enumerator_t *enumerator;
job_t *job = NULL;
ike_sa_t *ike_sa;
enumerator = charon->controller->create_ike_sa_enumerator(charon->controller);
while (enumerator->enumerate(enumerator, &ike_sa))
{
if (strcaseeq(config, ike_sa->get_name(ike_sa)))
{
job = (job_t*)rekey_ike_sa_job_create(ike_sa->get_id(ike_sa), FALSE);
break;
}
}
enumerator->destroy(enumerator);
if (job)
{
DBG1(DBG_CFG, "starting rekey of IKE_SA '%s'", config);
lib->processor->queue_job(lib->processor, job);
}
else
{
DBG1(DBG_CFG, "rekeying '%s' failed, IKE_SA not found", config);
}
return JOB_REQUEUE_NONE;
}
/**
* Rekey an CHILD_SA
*/
static job_requeue_t rekey_child(char *config)
{
enumerator_t *enumerator;
iterator_t *children;
ike_sa_t *ike_sa;
child_sa_t *child_sa;
u_int32_t reqid = 0, spi = 0;
protocol_id_t proto = PROTO_ESP;
enumerator = charon->controller->create_ike_sa_enumerator(charon->controller);
while (enumerator->enumerate(enumerator, &ike_sa))
{
children = ike_sa->create_child_sa_iterator(ike_sa);
while (children->iterate(children, (void**)&child_sa))
{
if (streq(config, child_sa->get_name(child_sa)))
{
reqid = child_sa->get_reqid(child_sa);
proto = child_sa->get_protocol(child_sa);
spi = child_sa->get_spi(child_sa, TRUE);
break;
}
}
children->destroy(children);
}
enumerator->destroy(enumerator);
if (reqid)
{
DBG1(DBG_CFG, "starting rekey of CHILD_SA '%s'", config);
lib->processor->queue_job(lib->processor,
(job_t*)rekey_child_sa_job_create(reqid, proto, spi));
}
else
{
DBG1(DBG_CFG, "rekeying '%s' failed, CHILD_SA not found", config);
}
return JOB_REQUEUE_NONE;
}
/**
* Do a liveness check
*/
static job_requeue_t liveness(char *config)
{
enumerator_t *enumerator;
job_t *job = NULL;
ike_sa_t *ike_sa;
enumerator = charon->controller->create_ike_sa_enumerator(charon->controller);
while (enumerator->enumerate(enumerator, &ike_sa))
{
if (strcaseeq(config, ike_sa->get_name(ike_sa)))
{
job = (job_t*)send_dpd_job_create(ike_sa->get_id(ike_sa));
break;
}
}
enumerator->destroy(enumerator);
if (job)
{
DBG1(DBG_CFG, "starting liveness check of IKE_SA '%s'", config);
lib->processor->queue_job(lib->processor, job);
}
else
{
DBG1(DBG_CFG, "liveness check for '%s' failed, IKE_SA not found", config);
}
return JOB_REQUEUE_NONE;
}
/**
* Close an IKE_SA with all CHILD_SAs
*/
static job_requeue_t close_ike(char *config)
{
enumerator_t *enumerator;
ike_sa_t *ike_sa;
int id = 0;
enumerator = charon->controller->create_ike_sa_enumerator(charon->controller);
while (enumerator->enumerate(enumerator, &ike_sa))
{
if (strcaseeq(config, ike_sa->get_name(ike_sa)))
{
id = ike_sa->get_unique_id(ike_sa);
break;
}
}
enumerator->destroy(enumerator);
if (id)
{
DBG1(DBG_CFG, "closing IKE_SA '%s'", config);
charon->controller->terminate_ike(charon->controller, id, NULL, NULL);
}
else
{
DBG1(DBG_CFG, "unable to close IKE_SA '%s', not found", config);
}
return JOB_REQUEUE_NONE;
}
/**
* Close a CHILD_SAs
*/
static job_requeue_t close_child(char *config)
{
enumerator_t *enumerator;
iterator_t *children;
ike_sa_t *ike_sa;
child_sa_t *child_sa;
int id = 0;
enumerator = charon->controller->create_ike_sa_enumerator(charon->controller);
while (enumerator->enumerate(enumerator, &ike_sa))
{
children = ike_sa->create_child_sa_iterator(ike_sa);
while (children->iterate(children, (void**)&child_sa))
{
if (streq(config, child_sa->get_name(child_sa)))
{
id = child_sa->get_reqid(child_sa);
break;
}
}
children->destroy(children);
}
enumerator->destroy(enumerator);
if (id)
{
DBG1(DBG_CFG, "closing CHILD_SA '%s'", config);
charon->controller->terminate_child(charon->controller, id, NULL, NULL);
}
else
{
DBG1(DBG_CFG, "unable to close CHILD_SA '%s', not found", config);
}
return JOB_REQUEUE_NONE;
}
/**
* Load a single action
*/
static void load_action(settings_t *settings, char *action)
{
static struct {
char *name;
callback_job_cb_t cb;
} actions[] = {
{"initiate", (void*)initiate},
{"rekey_ike", (void*)rekey_ike},
{"rekey_child", (void*)rekey_child},
{"liveness", (void*)liveness},
{"close_ike", (void*)close_ike},
{"close_child", (void*)close_child},
};
bool found = FALSE;
int i;
for (i = 0; i < countof(actions); i++)
{
if (strcaseeq(actions[i].name, action))
{
int delay;
char *config;
found = TRUE;
delay = settings->get_int(settings, "actions.%s.delay", 0, action);
config = settings->get_str(settings, "actions.%s.config",
NULL, action);
if (!config)
{
DBG1(DBG_CFG, "no config defined for action '%s'", action);
break;
}
lib->scheduler->schedule_job(lib->scheduler,
(job_t*)callback_job_create(actions[i].cb, config, NULL, NULL),
delay);
}
}
if (!found)
{
DBG1(DBG_CFG, "unknown action '%s', skipped", action);
}
}
/**
* Load configured actions
*/
static void load_actions(settings_t *settings)
{
enumerator_t *enumerator;
char *action;
enumerator = settings->create_section_enumerator(settings, "actions");
while (enumerator->enumerate(enumerator, &action))
{
load_action(settings, action);
}
enumerator->destroy(enumerator);
}
METHOD(actions_t, destroy, void,
private_actions_t *this)
{
free(this);
}
/**
* See header
*/
actions_t *actions_create()
{
private_actions_t *this;
INIT(this,
.public = {
.destroy = _destroy,
},
);
load_actions(conftest->test);
return &this->public;
}
src/conftest/actions.h
+42
View File
@@ -0,0 +1,42 @@
/*
* Copyright (C) 2010 Martin Willi
* Copyright (C) 2010 revosec AG
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*/
/**
* @defgroup actions actions
* @{ @ingroup conftest
*/
#ifndef ACTIONS_H_
#define ACTIONS_H_
typedef struct actions_t actions_t;
/**
* actionss to trigger based on configuration.
*/
struct actions_t {
/**
* Destroy a actions_t.
*/
void (*destroy)(actions_t *this);
};
/**
* Create a actions instance.
*/
actions_t *actions_create();
#endif /** ACTIONS_H_ @}*/
src/conftest/conftest.c
+2
View File
@@ -255,6 +255,7 @@ static void cleanup()
DESTROY_IF(conftest->test);
lib->credmgr->remove_set(lib->credmgr, &conftest->creds->set);
conftest->creds->destroy(conftest->creds);
DESTROY_IF(conftest->actions);
while (conftest->hooks->remove_last(conftest->hooks,
(void**)&hook) == SUCCESS)
{
@@ -378,6 +379,7 @@ int main(int argc, char *argv[])
charon->backends->add_backend(charon->backends, &conftest->config->backend);
conftest->config->load(conftest->config, conftest->suite);
conftest->config->load(conftest->config, conftest->test);
conftest->actions = actions_create();
/* set up thread specific handlers */
action.sa_handler = segv_handler;
src/conftest/conftest.h
+6
View File
@@ -26,6 +26,7 @@
#include <credentials/sets/mem_cred.h>
#include "config.h"
#include "actions.h"
typedef struct conftest_t conftest_t;
@@ -68,6 +69,11 @@ struct conftest_t {
* Loaded hooks
*/
linked_list_t *hooks;
/**
* Action handling
*/
actions_t *actions;
};
/**