denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactored IMV policy management

Browse Source
This commit is contained in:
Andreas Steffen
2013-06-21 23:25:22 +02:00
parent 4f9aabbfd7
commit a6266485be
23 changed files with 889 additions and 600 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libimcv/imcv.c
+26 -2
View File
@@ -22,13 +22,21 @@
#include <syslog.h>
#define IMCV_DEBUG_LEVEL 1
#define IMCV_DEBUG_LEVEL 1
#define IMCV_DEFAULT_DATABASE_URI "sqlite:///etc/pts/config.db"
#define IMCV_DEFAULT_POLICY_SCRIPT "ipsec _imv_policy"
/**
* PA-TNC attribute manager
*/
pa_tnc_attr_manager_t *imcv_pa_tnc_attributes;
/**
* Global IMV database
*/
imv_database_t *imcv_db;
/**
* Reference count for libimcv
*/
@@ -88,7 +96,7 @@ static void imcv_dbg(debug_t group, level_t level, char *fmt, ...)
/**
* Described in header.
*/
bool libimcv_init(void)
bool libimcv_init(bool is_imv)
{
/* initialize libstrongswan library only once */
if (lib)
@@ -129,12 +137,27 @@ bool libimcv_init(void)
if (libimcv_ref == 0)
{
char *uri, *script;
/* initialize the PA-TNC attribute manager */
imcv_pa_tnc_attributes = pa_tnc_attr_manager_create();
imcv_pa_tnc_attributes->add_vendor(imcv_pa_tnc_attributes, PEN_IETF,
ietf_attr_create_from_data, ietf_attr_names);
imcv_pa_tnc_attributes->add_vendor(imcv_pa_tnc_attributes, PEN_ITA,
ita_attr_create_from_data, ita_attr_names);
/* attach global IMV database */
if (is_imv)
{
uri = lib->settings->get_str(lib->settings,
"libimcv.database", IMCV_DEFAULT_DATABASE_URI);
script = lib->settings->get_str(lib->settings,
"libimcv.policy_script", IMCV_DEFAULT_POLICY_SCRIPT);
if (uri)
{
imcv_db = imv_database_create(uri, script);
}
}
DBG1(DBG_LIB, "libimcv initialized");
}
ref_get(&libimcv_ref);
@@ -152,6 +175,7 @@ void libimcv_deinit(void)
imcv_pa_tnc_attributes->remove_vendor(imcv_pa_tnc_attributes, PEN_IETF);
imcv_pa_tnc_attributes->remove_vendor(imcv_pa_tnc_attributes, PEN_ITA);
DESTROY_IF(imcv_pa_tnc_attributes);
DESTROY_IF(imcv_db);
DBG1(DBG_LIB, "libimcv terminated");
}
if (ref_put(&libstrongswan_ref))