backend-manager: Add enumerator over all matching IKE configs

This commit is contained in:
Tobias Brunner
2018-06-28 16:53:35 +02:00
parent 82e237c04e
commit aa4f0c44ee
2 changed files with 131 additions and 18 deletions
+116 -18
View File
@@ -130,15 +130,77 @@ static ike_cfg_match_t get_ike_match(ike_cfg_t *cand, host_t *me, host_t *other,
return match; return match;
} }
METHOD(backend_manager_t, get_ike_cfg, ike_cfg_t*, /**
private_backend_manager_t *this, host_t *me, host_t *other, * list element to help sorting
ike_version_t version) */
typedef struct {
ike_cfg_match_t match;
ike_cfg_t *cfg;
} ike_match_entry_t;
CALLBACK(ike_enum_filter, bool,
linked_list_t *configs, enumerator_t *orig, va_list args)
{ {
ike_cfg_t *current, *found = NULL; ike_match_entry_t *entry;
ike_cfg_t **out;
VA_ARGS_VGET(args, out);
if (orig->enumerate(orig, &entry))
{
*out = entry->cfg;
return TRUE;
}
return FALSE;
}
CALLBACK(ike_match_entry_list_destroy, void,
linked_list_t *configs)
{
ike_match_entry_t *entry;
while (configs->remove_last(configs, (void**)&entry) == SUCCESS)
{
entry->cfg->destroy(entry->cfg);
free(entry);
}
configs->destroy(configs);
}
/**
* Insert entry into match-sorted list
*/
static void insert_sorted_ike(ike_match_entry_t *entry, linked_list_t *list)
{
enumerator_t *enumerator;
ike_match_entry_t *current;
enumerator = list->create_enumerator(list);
while (enumerator->enumerate(enumerator, &current))
{
if (entry->match > current->match)
{
break;
}
}
list->insert_before(list, enumerator, entry);
enumerator->destroy(enumerator);
}
/**
* Create a sorted list of all matching IKE configs
*/
static linked_list_t *get_matching_ike_cfgs(private_backend_manager_t *this,
host_t *me, host_t *other,
ike_version_t version)
{
ike_cfg_t *current;
char *my_addr, *other_addr; char *my_addr, *other_addr;
enumerator_t *enumerator; enumerator_t *enumerator;
ike_cfg_match_t match, best = MATCH_ANY;
ike_data_t *data; ike_data_t *data;
linked_list_t *configs;
ike_cfg_match_t match;
ike_match_entry_t *entry;
INIT(data, INIT(data,
.this = this, .this = this,
@@ -146,44 +208,80 @@ METHOD(backend_manager_t, get_ike_cfg, ike_cfg_t*,
.other = other, .other = other,
); );
DBG2(DBG_CFG, "looking for an ike config for %H...%H", me, other); configs = linked_list_create();
this->lock->read_lock(this->lock); this->lock->read_lock(this->lock);
enumerator = enumerator_create_nested( enumerator = enumerator_create_nested(
this->backends->create_enumerator(this->backends), this->backends->create_enumerator(this->backends),
(void*)ike_enum_create, data, (void*)free); (void*)ike_enum_create, data, (void*)free);
while (enumerator->enumerate(enumerator, (void**)&current))
while (enumerator->enumerate(enumerator, &current))
{ {
match = get_ike_match(current, me, other, version); match = get_ike_match(current, me, other, version);
DBG3(DBG_CFG, "ike config match: %d (%H %H %N)", DBG3(DBG_CFG, "ike config match: %d (%H %H %N)",
match, me, other, ike_version_names, version); match, me, other, ike_version_names, version);
if (match) if (match)
{ {
my_addr = current->get_my_addr(current); my_addr = current->get_my_addr(current);
other_addr = current->get_other_addr(current); other_addr = current->get_other_addr(current);
DBG2(DBG_CFG, " candidate: %s...%s, prio %d", DBG2(DBG_CFG, " candidate: %s...%s, prio %d",
my_addr, other_addr, match); my_addr, other_addr, match);
if (match > best)
{ INIT(entry,
DESTROY_IF(found); .match = match,
found = current; .cfg = current->get_ref(current),
found->get_ref(found); );
best = match; insert_sorted_ike(entry, configs);
}
} }
} }
enumerator->destroy(enumerator); enumerator->destroy(enumerator);
this->lock->unlock(this->lock); this->lock->unlock(this->lock);
if (found)
return configs;
}
METHOD(backend_manager_t, get_ike_cfg, ike_cfg_t*,
private_backend_manager_t *this, host_t *me, host_t *other,
ike_version_t version)
{
linked_list_t *configs;
ike_match_entry_t *entry;
ike_cfg_t *found = NULL;
char *my_addr, *other_addr;
DBG2(DBG_CFG, "looking for an ike config for %H...%H", me, other);
configs = get_matching_ike_cfgs(this, me, other, version);
if (configs->get_first(configs, (void**)&entry) == SUCCESS)
{ {
found = entry->cfg->get_ref(entry->cfg);
my_addr = found->get_my_addr(found); my_addr = found->get_my_addr(found);
other_addr = found->get_other_addr(found); other_addr = found->get_other_addr(found);
DBG2(DBG_CFG, "found matching ike config: %s...%s with prio %d", DBG2(DBG_CFG, "found matching ike config: %s...%s with prio %d",
my_addr, other_addr, best); my_addr, other_addr, entry->match);
} }
ike_match_entry_list_destroy(configs);
return found; return found;
} }
METHOD(backend_manager_t, create_ike_cfg_enumerator, enumerator_t*,
private_backend_manager_t *this, host_t *me, host_t *other,
ike_version_t version)
{
linked_list_t *configs;
DBG2(DBG_CFG, "looking for ike configs for %H...%H", me, other);
configs = get_matching_ike_cfgs(this, me, other, version);
return enumerator_create_filter(configs->create_enumerator(configs),
ike_enum_filter, configs,
ike_match_entry_list_destroy);
}
/** /**
* Get the best ID match in one of the configs auth_cfg * Get the best ID match in one of the configs auth_cfg
*/ */
@@ -420,8 +518,7 @@ METHOD(backend_manager_t, destroy, void,
} }
/* /*
* Described in header-file * Described in header
*/ */
backend_manager_t *backend_manager_create() backend_manager_t *backend_manager_create()
{ {
@@ -430,6 +527,7 @@ backend_manager_t *backend_manager_create()
INIT(this, INIT(this,
.public = { .public = {
.get_ike_cfg = _get_ike_cfg, .get_ike_cfg = _get_ike_cfg,
.create_ike_cfg_enumerator = _create_ike_cfg_enumerator,
.get_peer_cfg_by_name = _get_peer_cfg_by_name, .get_peer_cfg_by_name = _get_peer_cfg_by_name,
.create_peer_cfg_enumerator = _create_peer_cfg_enumerator, .create_peer_cfg_enumerator = _create_peer_cfg_enumerator,
.add_backend = _add_backend, .add_backend = _add_backend,
+15
View File
@@ -1,4 +1,5 @@
/* /*
* Copyright (C) 2018 Tobias Brunner
* Copyright (C) 2007 Martin Willi * Copyright (C) 2007 Martin Willi
* HSR Hochschule fuer Technik Rapperswil * HSR Hochschule fuer Technik Rapperswil
* *
@@ -63,6 +64,20 @@ struct backend_manager_t {
host_t *my_host, host_t *other_host, host_t *my_host, host_t *other_host,
ike_version_t version); ike_version_t version);
/**
* Create an enumerator over all matching IKE configs.
*
* Pass NULL as parameters to match any. The enumerator enumerates over
* ike_cfgs, ordered by priority (best match first).
*
* @param me local address
* @param other remote address
* @param version IKE version to get a config for
* @return enumerator over ike_cfg
*/
enumerator_t* (*create_ike_cfg_enumerator)(backend_manager_t *this,
host_t *me, host_t *other, ike_version_t version);
/** /**
* Get a peer_config identified by it's name. * Get a peer_config identified by it's name.
* *