denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Send RADIUS DAE Disconnect-ACK/NAK on Disconnect-Request

Browse Source
This commit is contained in:
Martin Willi
2012-03-05 18:06:14 +01:00
parent 392618d4ec
commit 9756c143f0
1 changed files with 45 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_radius/eap_radius_dae.c
+45 -5
View File
@@ -72,6 +72,29 @@ struct private_eap_radius_dae_t {
signer_t *signer;
};
/**
* Send an ACK/NAK response for a request
*/
static void send_response(private_eap_radius_dae_t *this,
radius_message_t *request, radius_message_code_t code,
struct sockaddr* addr, socklen_t addr_len)
{
radius_message_t *response;
chunk_t data;
response = radius_message_create(code);
response->set_identifier(response, request->get_identifier(request));
response->sign(response, request->get_authenticator(request),
this->secret, this->hasher, this->signer, NULL);
data = response->get_encoding(response);
if (sendto(this->fd, data.ptr, data.len, 0, addr, addr_len) != data.len)
{
DBG1(DBG_CFG, "sending RADIUS DAE response failed: %s", strerror(errno));
}
response->destroy(response);
}
/**
* Process a DAE disconnect request, send response
*/
@@ -115,13 +138,30 @@ static void process_disconnect(private_eap_radius_dae_t *this,
enumerator->destroy(enumerator);
DESTROY_IF(host);
enumerator = ids->create_enumerator(ids);
while (enumerator->enumerate(enumerator, &id))
if (ids->get_count(ids))
{
charon->controller->terminate_ike(charon->controller, id, NULL, NULL, 0);
}
enumerator->destroy(enumerator);
DBG1(DBG_CFG, "closing %d IKE_SA%s matching %N, sending %N",
ids->get_count(ids), ids->get_count(ids) > 1 ? "s" : "",
radius_message_code_names, RMC_DISCONNECT_REQUEST,
radius_message_code_names, RMC_DISCONNECT_ACK);
enumerator = ids->create_enumerator(ids);
while (enumerator->enumerate(enumerator, &id))
{
charon->controller->terminate_ike(charon->controller,
id, NULL, NULL, 0);
}
enumerator->destroy(enumerator);
send_response(this, request, RMC_DISCONNECT_ACK, addr, addr_len);
}
else
{
DBG1(DBG_CFG, "no IKE_SA matches %N, sending %N",
radius_message_code_names, RMC_DISCONNECT_REQUEST,
radius_message_code_names, RMC_DISCONNECT_NAK);
send_response(this, request, RMC_DISCONNECT_NAK, addr, addr_len);
}
ids->destroy(ids);
}