denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- code documented

Browse Source
This commit is contained in:
Jan Hutter
2005-12-04 15:44:18 +00:00
parent 813ed1cd03
commit b66cb98743
4 changed files with 100 additions and 99 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Source/charon/config/configuration_manager.c
+41 -47
View File
@@ -1,9 +1,7 @@
/** /**
* @file configuration.c * @file configuration_manager.c
* *
* @brief Configuration class used to store IKE_SA-configurations. * @brief Implementation of configuration_manager_t.
*
* Object of this type represents the configuration for all IKE_SA's and their child_sa's.
* *
*/ */
@@ -34,7 +32,7 @@
typedef struct preshared_secret_entry_t preshared_secret_entry_t; typedef struct preshared_secret_entry_t preshared_secret_entry_t;
/** /**
* An preshared secret entry combines an identifier with a * A preshared secret entry combines an identifier and a
* preshared secret. * preshared secret.
*/ */
struct preshared_secret_entry_t { struct preshared_secret_entry_t {
@@ -45,7 +43,7 @@ struct preshared_secret_entry_t {
identification_t *identification; identification_t *identification;
/** /**
* Preshared secret as chunk * Preshared secret as chunk_t. The NULL termination is not included.
*/ */
chunk_t preshared_secret; chunk_t preshared_secret;
}; };
@@ -64,7 +62,7 @@ struct rsa_private_key_entry_t {
identification_t *identification; identification_t *identification;
/** /**
* private key * Private key.
*/ */
rsa_private_key_t* private_key; rsa_private_key_t* private_key;
}; };
@@ -82,7 +80,7 @@ struct rsa_public_key_entry_t {
identification_t *identification; identification_t *identification;
/** /**
* private key * Private key.
*/ */
rsa_public_key_t* public_key; rsa_public_key_t* public_key;
}; };
@@ -91,6 +89,9 @@ typedef struct configuration_entry_t configuration_entry_t;
/* A configuration entry combines a configuration name with a init and sa /* A configuration entry combines a configuration name with a init and sa
* configuration represented as init_config_t and sa_config_t objects. * configuration represented as init_config_t and sa_config_t objects.
*
* @b Constructors:
* - configuration_entry_create()
*/ */
struct configuration_entry_t { struct configuration_entry_t {
@@ -113,12 +114,14 @@ struct configuration_entry_t {
/** /**
* Destroys a configuration_entry_t * Destroys a configuration_entry_t
* *
*
* @param this calling object * @param this calling object
*/ */
void (*destroy) (configuration_entry_t *this); void (*destroy) (configuration_entry_t *this);
}; };
/**
* Implementation of configuration_entry_t.destroy.
*/
static void configuration_entry_destroy (configuration_entry_t *this) static void configuration_entry_destroy (configuration_entry_t *this)
{ {
allocator_free(this->name); allocator_free(this->name);
@@ -126,7 +129,7 @@ static void configuration_entry_destroy (configuration_entry_t *this)
} }
/** /**
* Creates a configuration_entry_t object * @brief Creates a configuration_entry_t object.
* *
* @param name name of the configuration entry (gets copied) * @param name name of the configuration entry (gets copied)
* @param init_config object of type init_config_t * @param init_config object of type init_config_t
@@ -147,16 +150,15 @@ configuration_entry_t * configuration_entry_create(char * name, init_config_t *
return entry; return entry;
} }
typedef struct private_configuration_manager_t private_configuration_manager_t; typedef struct private_configuration_manager_t private_configuration_manager_t;
/** /**
* Private data of an configuration_t object * Private data of an configuration_manager_t object.
*/ */
struct private_configuration_manager_t { struct private_configuration_manager_t {
/** /**
* Public part of configuration manager. * Public part of configuration_manager_t object.
*/ */
configuration_manager_t public; configuration_manager_t public;
@@ -166,38 +168,38 @@ struct private_configuration_manager_t {
linked_list_t *configurations; linked_list_t *configurations;
/** /**
* Holding all init_configs. * Holding all managed init_configs.
*/ */
linked_list_t *init_configs; linked_list_t *init_configs;
/** /**
* Holding all init_configs. * Holding all managed init_configs.
*/ */
linked_list_t *sa_configs; linked_list_t *sa_configs;
/** /**
* Holding all preshared secrets. * Holding all managed preshared secrets.
*/ */
linked_list_t *preshared_secrets; linked_list_t *preshared_secrets;
/** /**
* Holding all private secrets. * Holding all managed private secrets.
*/ */
linked_list_t *rsa_private_keys; linked_list_t *rsa_private_keys;
/** /**
* Holding all public secrets. * Holding all managed public secrets.
*/ */
linked_list_t *rsa_public_keys; linked_list_t *rsa_public_keys;
/** /**
* Assigned logger object. * Assigned logger_t object.
*/ */
logger_t *logger; logger_t *logger;
/** /**
* Max number of retransmitted requests. * Max number of requests to be retransmitted.
* 0 for infinite.
*/ */
u_int32_t max_retransmit_count; u_int32_t max_retransmit_count;
@@ -207,7 +209,7 @@ struct private_configuration_manager_t {
u_int32_t first_retransmit_timeout; u_int32_t first_retransmit_timeout;
/** /**
* Adds a new IKE_SA configuration * Adds a new IKE_SA configuration.
* *
* *
* @param this calling object * @param this calling object
@@ -218,7 +220,7 @@ struct private_configuration_manager_t {
void (*add_new_configuration) (private_configuration_manager_t *this, char *name, init_config_t *init_config, sa_config_t *sa_config); void (*add_new_configuration) (private_configuration_manager_t *this, char *name, init_config_t *init_config, sa_config_t *sa_config);
/** /**
* Adds a new IKE_SA configuration * Adds a new preshared secret.
* *
* *
* @param this calling object * @param this calling object
@@ -229,36 +231,38 @@ struct private_configuration_manager_t {
void (*add_new_preshared_secret) (private_configuration_manager_t *this,id_type_t type, char *id_string, char *preshared_secret); void (*add_new_preshared_secret) (private_configuration_manager_t *this,id_type_t type, char *id_string, char *preshared_secret);
/** /**
* Adds a new IKE_SA configuration * Adds a new rsa private key.
* *
* *
* @param this calling object * @param this calling object
* @param type type of identification * @param type type of identification
* @param id_string identification as string * @param id_string identification as string
* @param preshared_secret preshared secret as string * @param key_pos location of key
* @param key_len length of key
*/ */
void (*add_new_rsa_private_key) (private_configuration_manager_t *this,id_type_t type, char *id_string, u_int8_t *key_pos, size_t key_len); void (*add_new_rsa_private_key) (private_configuration_manager_t *this,id_type_t type, char *id_string, u_int8_t *key_pos, size_t key_len);
/** /**
* Adds a new IKE_SA configuration * Adds a new rsa public key.
* *
* *
* @param this calling object * @param this calling object
* @param type type of identification * @param type type of identification
* @param id_string identification as string * @param id_string identification as string
* @param preshared_secret preshared secret as string * @param key_pos location of key
* @param key_len length of key
*/ */
void (*add_new_rsa_public_key) (private_configuration_manager_t *this,id_type_t type, char *id_string, u_int8_t *key_pos, size_t key_len); void (*add_new_rsa_public_key) (private_configuration_manager_t *this,id_type_t type, char *id_string, u_int8_t *key_pos, size_t key_len);
/** /**
* Load default configuration * Load default configuration.
*
* *
* @param this calling object * @param this calling object
*/ */
void (*load_default_config) (private_configuration_manager_t *this); void (*load_default_config) (private_configuration_manager_t *this);
}; };
u_int8_t public_key_1[]; u_int8_t public_key_1[];
u_int8_t private_key_1[]; u_int8_t private_key_1[];
u_int8_t public_key_2[]; u_int8_t public_key_2[];
@@ -735,16 +739,16 @@ static void destroy(private_configuration_manager_t *this)
{ {
this->logger->log(this->logger,CONTROL | MORE, "Going to destroy configuration manager "); this->logger->log(this->logger,CONTROL | MORE, "Going to destroy configuration manager ");
this->logger->log(this->logger,CONTROL | MOST, "Destroy configuration entries");
while (this->configurations->get_count(this->configurations) > 0) while (this->configurations->get_count(this->configurations) > 0)
{ {
configuration_entry_t *entry; configuration_entry_t *entry;
this->configurations->remove_first(this->configurations,(void **) &entry); this->configurations->remove_first(this->configurations,(void **) &entry);
entry->destroy(entry); entry->destroy(entry);
} }
/* todo delete all config objects */
this->configurations->destroy(this->configurations); this->configurations->destroy(this->configurations);
this->logger->log(this->logger,CONTROL | MOST, "Destroy sa_config_t objects");
while (this->sa_configs->get_count(this->sa_configs) > 0) while (this->sa_configs->get_count(this->sa_configs) > 0)
{ {
sa_config_t *sa_config; sa_config_t *sa_config;
@@ -754,6 +758,7 @@ static void destroy(private_configuration_manager_t *this)
this->sa_configs->destroy(this->sa_configs); this->sa_configs->destroy(this->sa_configs);
this->logger->log(this->logger,CONTROL | MOST, "Destroy init_config_t objects");
while (this->init_configs->get_count(this->init_configs) > 0) while (this->init_configs->get_count(this->init_configs) > 0)
{ {
init_config_t *init_config; init_config_t *init_config;
@@ -771,7 +776,8 @@ static void destroy(private_configuration_manager_t *this)
allocator_free(entry); allocator_free(entry);
} }
this->preshared_secrets->destroy(this->preshared_secrets); this->preshared_secrets->destroy(this->preshared_secrets);
this->logger->log(this->logger,CONTROL | MOST, "Destroy rsa private keys");
while (this->rsa_private_keys->get_count(this->rsa_private_keys) > 0) while (this->rsa_private_keys->get_count(this->rsa_private_keys) > 0)
{ {
rsa_private_key_entry_t *entry; rsa_private_key_entry_t *entry;
@@ -781,7 +787,8 @@ static void destroy(private_configuration_manager_t *this)
allocator_free(entry); allocator_free(entry);
} }
this->rsa_private_keys->destroy(this->rsa_private_keys); this->rsa_private_keys->destroy(this->rsa_private_keys);
this->logger->log(this->logger,CONTROL | MOST, "Destroy rsa public keys");
while (this->rsa_public_keys->get_count(this->rsa_public_keys) > 0) while (this->rsa_public_keys->get_count(this->rsa_public_keys) > 0)
{ {
rsa_public_key_entry_t *entry; rsa_public_key_entry_t *entry;
@@ -839,19 +846,6 @@ configuration_manager_t *configuration_manager_create(u_int32_t first_retransmit
} }
u_int8_t public_key_1[] = { u_int8_t public_key_1[] = {
0xD4,0x8D,0x40,0x8E,0xBD,0xFC,0x6D,0xE9,0xDB,0x1C,0xD2,0x21,0x19,0x37,0x6B,0xE2, 0xD4,0x8D,0x40,0x8E,0xBD,0xFC,0x6D,0xE9,0xDB,0x1C,0xD2,0x21,0x19,0x37,0x6B,0xE2,
0xDC,0xCE,0x74,0xA2,0x63,0xF6,0xD8,0x8D,0xAF,0x1C,0xC0,0xFF,0x07,0x3F,0xFB,0x52, 0xDC,0xCE,0x74,0xA2,0x63,0xF6,0xD8,0x8D,0xAF,0x1C,0xC0,0xFF,0x07,0x3F,0xFB,0x52,
Source/charon/config/configuration_manager.h
+55 -47
View File
@@ -1,7 +1,7 @@
/** /**
* @file configuration_manager.h * @file configuration_manager.h
* *
* @brief Manages all configuration aspects of the daemon. * @brief Interface of configuration_manager_t.
* *
*/ */
@@ -35,52 +35,59 @@ typedef struct configuration_manager_t configuration_manager_t;
/** /**
* @brief Manages all configuration aspects of the daemon. * @brief Manages all configuration aspects of the daemon.
* *
* @b Constructors:
* - configuration_manager_create()
*
* @ingroup config * @ingroup config
* *
*/ */
struct configuration_manager_t { struct configuration_manager_t {
/** /**
* Get the configuration information needed for IKE_SA_INIT exchange * @brief Returns the configuration information needed for IKE_SA_INIT exchange
* for a specific configuration name. * for a specific configuration name.
* *
* The returned init_config_t object MUST NOT be destroyed cause it's the original one. * The returned init_config_t object MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param name name of the configuration * @param name name of the configuration
* @param[out] init_config the configuration is stored at this place * @param[out] init_config the init_config_t object is stored at this location
* *
* @return * @return
* - NOT_FOUND * - NOT_FOUND
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_init_config_for_name) (configuration_manager_t *this, char *name, init_config_t **init_config); status_t (*get_init_config_for_name) (configuration_manager_t *this, char *name, init_config_t **init_config);
/** /**
* Get the configuration information needed for IKE_SA_INIT exchange * @brief Returns the configuration information needed for IKE_SA_INIT exchange
* for specific host informations. * for specific host informations.
* *
* The returned init_config_t object MUST NOT be destroyed cause it's the original one. * The returned init_config_t object MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param my_host my host informations * @param my_host my host informations
* @param other_host other host informations * @param other_host other host informations
* @param[out] init_config the configuration is stored at this place * @param[out] init_config the init_config_t object is stored at this location
* *
* @return * @return
* - NOT_FOUND * - NOT_FOUND
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_init_config_for_host) (configuration_manager_t *this, host_t *my_host, host_t *other_host,init_config_t **init_config); status_t (*get_init_config_for_host) (configuration_manager_t *this, host_t *my_host, host_t *other_host,init_config_t **init_config);
/** /**
* Get the configuration information needed after IKE_SA_INIT exchange. * @brief Returns the configuration information needed after IKE_SA_INIT exchange
* for a specific configuration name.
* *
* The returned sa_config_t object MUST not be destroyed cause it's the original one. * The returned sa_config_t object MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param name name of the configuration * @param name name of the configuration
* @param[out] sa_config the configuration is stored at this place * @param[out] sa_config the sa_config_t object is stored at this location
* *
* @return * @return
* - NOT_FOUND * - NOT_FOUND
@@ -89,103 +96,104 @@ struct configuration_manager_t {
status_t (*get_sa_config_for_name) (configuration_manager_t *this, char *name, sa_config_t **sa_config); status_t (*get_sa_config_for_name) (configuration_manager_t *this, char *name, sa_config_t **sa_config);
/** /**
* Get the configuration information needed after IKE_SA_INIT exchange * @brief Returns the configuration information needed after IKE_SA_INIT exchange
* for specific init_config_t and ID data. * for specific init_config_t and ID data.
* *
* The returned sa_config_t object MUST NOT be destroyed cause it's the original one. * The returned sa_config_t object MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param init_config init_config_t object * @param init_config init_config_t object
* @param other_id identification of other one * @param other_id identification of other one
* @param my_id my identification (can be NULL) * @param my_id my identification (can be NULL)
* @param[out] sa_config the configuration is stored at this place * @param[out] sa_config the sa_config_t object is stored at this location
* *
* @return * @return
* - NOT_FOUND * - NOT_FOUND
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_sa_config_for_init_config_and_id) (configuration_manager_t *this, init_config_t *init_config, identification_t *other_id, identification_t *my_id,sa_config_t **sa_config); status_t (*get_sa_config_for_init_config_and_id) (configuration_manager_t *this, init_config_t *init_config, identification_t *other_id, identification_t *my_id,sa_config_t **sa_config);
/** /**
* Get the retransmit timeout. * @brief Returns the retransmit timeout.
* *
* The timeout values are managed by the configuration manager. * The timeout values are managed by the configuration manager.
* *
* @param this calling object * @param this calling object
* @param retransmit_count number of times a message was allready retransmitted * @param retransmit_count number of times a message was retransmitted so far
* @param[out] timeout the new retransmit timeout in milliseconds * @param[out] timeout the new retransmit timeout in milliseconds
* *
* @return * @return
* - FAILED, if the message should not be resent again * - FAILED, if the message should not be retransmitted
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_retransmit_timeout) (configuration_manager_t *this, u_int32_t retransmit_count, u_int32_t *timeout); status_t (*get_retransmit_timeout) (configuration_manager_t *this, u_int32_t retransmit_count, u_int32_t *timeout);
/** /**
* Get the preshared secret of a specific ID. * @brief Returns the preshared secret of a specific ID.
* *
* The preshared secret gets not cloned. * The returned preshared secret MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param identification identification_t object identifiying the ID. * @param identification identification_t object identifiying the ID.
* @param[out] preshared_secret the preshared secret will be written there * @param[out] preshared_secret the preshared secret will be written there.
* *
* @return * @return
* - NOT_FOUND if no preshared secrets is configured for specific id * - NOT_FOUND if no preshared secrets for specific ID could be found
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_shared_secret) (configuration_manager_t *this, identification_t *identification, chunk_t *preshared_secret); status_t (*get_shared_secret) (configuration_manager_t *this, identification_t *identification, chunk_t *preshared_secret);
/** /**
* Get the RSA public key of a specific ID. * @brief Returns the RSA public key of a specific ID.
* *
* Object is not cloned and shuld not be destroyed. * The returned rsa_public_key_t object MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param identification identification_t object identifiying the ID. * @param identification identification_t object identifiying the ID.
* @param[out] public_key the public key will be written there * @param[out] public_key the public key will be written there
* *
* @return * @return
* - NOT_FOUND if no key is configured for specific id * - NOT_FOUND if no key is configured for specific id
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_rsa_public_key) (configuration_manager_t *this, identification_t *identification, rsa_public_key_t **public_key); status_t (*get_rsa_public_key) (configuration_manager_t *this, identification_t *identification, rsa_public_key_t **public_key);
/** /**
* Get the RSA public key of a specific ID. * @brief Returns the RSA private key of a specific ID.
* *
* Object is not cloned and shuld not be destroyed. * The returned rsa_private_key_t object MUST NOT be destroyed cause it's managed by
* this configuration_manager_t object.
* *
* @param this calling object * @param this calling object
* @param identification identification_t object identifiying the ID. * @param identification identification_t object identifiying the ID.
* @param[out] private_key the private key will be written there * @param[out] private_key the private key will be written there
* *
* @return * @return
* - NOT_FOUND if no key is configured for specific id * - NOT_FOUND if no key is configured for specific id
* - SUCCESS * - SUCCESS
*/ */
status_t (*get_rsa_private_key) (configuration_manager_t *this, identification_t *identification, rsa_private_key_t **private_key); status_t (*get_rsa_private_key) (configuration_manager_t *this, identification_t *identification, rsa_private_key_t **private_key);
/** /**
* Destroys configuration manager * Destroys a configuration_manager_t object.
* *
* * @param this calling object
* @param this calling object
* @return * @return
* - SUCCESS * - SUCCESS
*/ */
void (*destroy) (configuration_manager_t *this); void (*destroy) (configuration_manager_t *this);
}; };
/** /**
* Creates the mighty configuration manager * @brief Creates the mighty configuration manager.
* *
* @param first_retransmit_timeout first retransmit timeout in milliseconds * @param first_retransmit_timeout first retransmit timeout in milliseconds
* @param max_retransmit_count max number of retransmitted requests (0 for infinite) * @param max_retransmit_count max number of tries to retransmitted a requests (0 for infinite)
* @return * @return
* - pointer to created manager object if succeeded * - pointer to created configuration_manager_t object
* - NULL if memory allocation failed
*
* @ingroup config * @ingroup config
*/ */
configuration_manager_t *configuration_manager_create(u_int32_t first_retransmit_timeout,u_int32_t max_retransmit_count); configuration_manager_t *configuration_manager_create(u_int32_t first_retransmit_timeout,u_int32_t max_retransmit_count);
Source/charon/transforms/rsa/rsa_private_key.h
+3 -4
View File
@@ -1,7 +1,7 @@
/** /**
* @file rsa_private_key.h * @file rsa_private_key.h
* *
* @brief Interface rsa_private_key_t. * @brief Interface of rsa_private_key_t.
* *
*/ */
@@ -25,7 +25,6 @@
#include <types.h> #include <types.h>
#include <definitions.h> #include <definitions.h>
#include <transforms/rsa/rsa_public_key.h> #include <transforms/rsa/rsa_public_key.h>
#include <transforms/hashers/hasher.h> #include <transforms/hashers/hasher.h>
@@ -37,7 +36,7 @@ typedef struct rsa_private_key_t rsa_private_key_t;
* *
* Currently only supports signing using EMSA encoding. * Currently only supports signing using EMSA encoding.
* *
* @todo Implement proper key set/get load/save * @TODO Implement proper key set/get load/save
* methods using ASN1. * methods using ASN1.
* *
* @b Constructors: * @b Constructors:
@@ -52,7 +51,7 @@ struct rsa_private_key_t {
/** /**
* @bief Build a signature over a chunk using EMSA-PKCS1 encoding. * @bief Build a signature over a chunk using EMSA-PKCS1 encoding.
* *
* This signature creates a hash using the specied hash algorithm, concatenates * This signature creates a hash using the specified hash algorithm, concatenates
* it with an ASN1-OID of the hash algorithm and runs the RSASP1 function * it with an ASN1-OID of the hash algorithm and runs the RSASP1 function
* on it. * on it.
* *
Source/charon/transforms/rsa/rsa_public_key.h
+1 -1
View File
@@ -1,7 +1,7 @@
/** /**
* @file rsa_public_key.h * @file rsa_public_key.h
* *
* @brief Interface rsa_public_key_t. * @brief Interface of rsa_public_key_t.
* *
*/ */