make AR identities available to IMVs via IF-IMV 1.4 draft
This commit is contained in:
Andreas Steffen
@@ -4,6 +4,7 @@ noinst_LTLIBRARIES = libtncif.la
|
||||
|
||||
libtncif_la_SOURCES = \
|
||||
tncif.h tncifimc.h tncifimv.h tncif_names.h tncif_names.c \
|
||||
tncif_identity.h tncif_identity.c \
|
||||
tncif_pa_subtypes.h tncif_pa_subtypes.c
|
||||
|
||||
EXTRA_DIST = Android.mk
|
||||
|
||||
@@ -0,0 +1,205 @@
|
||||
/*
|
||||
* Copyright (C) 2013 Andreas Steffen
|
||||
* HSR Hochschule fuer Technik Rapperswil
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License as published by the
|
||||
* Free Software Foundation; either version 2 of the License, or (at your
|
||||
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful, but
|
||||
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
||||
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* for more details.
|
||||
*/
|
||||
|
||||
#include "tncif_identity.h"
|
||||
|
||||
#include <bio/bio_writer.h>
|
||||
#include <bio/bio_reader.h>
|
||||
#include <pen/pen.h>
|
||||
#include <utils/debug.h>
|
||||
|
||||
typedef struct private_tncif_identity_t private_tncif_identity_t;
|
||||
|
||||
/**
|
||||
* TNC Identity List Attribute Format (TCG TNC IF-IMV 1.4 Draft)
|
||||
*
|
||||
* 1 2 3
|
||||
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | Identity Count |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | RESERVED | Identity Type Vendor ID |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | Identity Type |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | Identity Value Length |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | |
|
||||
* ~ Identity Value ~
|
||||
* | |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | RESERVED | Subject Type Vendor ID |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | Subject Type |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | RESERVED | Authentication Method Vendor ID |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
* | Authentication Method |
|
||||
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
||||
*/
|
||||
|
||||
/**
|
||||
* Private data of a tncif_identity_t object.
|
||||
*
|
||||
*/
|
||||
struct private_tncif_identity_t {
|
||||
|
||||
/**
|
||||
* Public tncif_identity_t interface.
|
||||
*/
|
||||
tncif_identity_t public;
|
||||
|
||||
/**
|
||||
* Identity Type
|
||||
*/
|
||||
pen_type_t identity_type;
|
||||
|
||||
/**
|
||||
* Identity Value
|
||||
*/
|
||||
chunk_t identity_value;
|
||||
|
||||
/**
|
||||
* Subject Type
|
||||
*/
|
||||
pen_type_t subject_type;
|
||||
|
||||
/**
|
||||
* Authentication Type
|
||||
*/
|
||||
pen_type_t auth_type;
|
||||
};
|
||||
|
||||
METHOD(tncif_identity_t, get_identity_type, pen_type_t,
|
||||
private_tncif_identity_t *this)
|
||||
{
|
||||
return this->identity_type;
|
||||
}
|
||||
|
||||
METHOD(tncif_identity_t, get_identity_value, chunk_t,
|
||||
private_tncif_identity_t *this)
|
||||
{
|
||||
return this->identity_value;
|
||||
}
|
||||
|
||||
METHOD(tncif_identity_t, get_subject_type, pen_type_t,
|
||||
private_tncif_identity_t *this)
|
||||
{
|
||||
return this->subject_type;
|
||||
}
|
||||
|
||||
METHOD(tncif_identity_t, get_auth_type, pen_type_t,
|
||||
private_tncif_identity_t *this)
|
||||
{
|
||||
return this->auth_type;
|
||||
}
|
||||
|
||||
METHOD(tncif_identity_t, build, void,
|
||||
private_tncif_identity_t *this, bio_writer_t *writer)
|
||||
{
|
||||
writer->write_uint32(writer, this->identity_type.vendor_id);
|
||||
writer->write_uint32(writer, this->identity_type.type);
|
||||
writer->write_data32(writer, this->identity_value);
|
||||
writer->write_uint32(writer, this->subject_type.vendor_id);
|
||||
writer->write_uint32(writer, this->subject_type.type);
|
||||
writer->write_uint32(writer, this->auth_type.vendor_id);
|
||||
writer->write_uint32(writer, this->auth_type.type);
|
||||
}
|
||||
|
||||
METHOD(tncif_identity_t, process, bool,
|
||||
private_tncif_identity_t *this, bio_reader_t *reader)
|
||||
{
|
||||
u_int8_t reserved;
|
||||
u_int32_t vendor_id, type;
|
||||
chunk_t identity_value;
|
||||
|
||||
if (reader->remaining(reader) < TNCIF_IDENTITY_MIN_SIZE)
|
||||
{
|
||||
return FALSE;
|
||||
}
|
||||
reader->read_uint8 (reader, &reserved);
|
||||
reader->read_uint24(reader, &vendor_id);
|
||||
reader->read_uint32(reader, &type);
|
||||
this->identity_type = pen_type_create(vendor_id, type);
|
||||
|
||||
if (!reader->read_data32(reader, &identity_value) ||
|
||||
reader->remaining(reader) < 16)
|
||||
{
|
||||
return FALSE;
|
||||
}
|
||||
this->identity_value = chunk_clone(identity_value);
|
||||
|
||||
reader->read_uint8 (reader, &reserved);
|
||||
reader->read_uint24(reader, &vendor_id);
|
||||
reader->read_uint32(reader, &type);
|
||||
this->subject_type = pen_type_create(vendor_id, type);
|
||||
|
||||
reader->read_uint8 (reader, &reserved);
|
||||
reader->read_uint24(reader, &vendor_id);
|
||||
reader->read_uint32(reader, &type);
|
||||
this->auth_type = pen_type_create(vendor_id, type);
|
||||
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
METHOD(tncif_identity_t, destroy, void,
|
||||
private_tncif_identity_t *this)
|
||||
{
|
||||
free(this->identity_value.ptr);
|
||||
free(this);
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* See header
|
||||
*/
|
||||
tncif_identity_t *tncif_identity_create_empty(void)
|
||||
{
|
||||
private_tncif_identity_t *this;
|
||||
|
||||
INIT(this,
|
||||
.public = {
|
||||
.get_identity_type = _get_identity_type,
|
||||
.get_identity_value = _get_identity_value,
|
||||
.get_subject_type = _get_subject_type,
|
||||
.get_auth_type = _get_auth_type,
|
||||
.build = _build,
|
||||
.process = _process,
|
||||
.destroy = _destroy,
|
||||
},
|
||||
);
|
||||
|
||||
return &this->public;
|
||||
}
|
||||
|
||||
/**
|
||||
* See header
|
||||
*/
|
||||
tncif_identity_t *tncif_identity_create(pen_type_t identity_type,
|
||||
chunk_t identity_value,
|
||||
pen_type_t subject_type,
|
||||
pen_type_t auth_type)
|
||||
{
|
||||
private_tncif_identity_t *this;
|
||||
|
||||
this = (private_tncif_identity_t*)tncif_identity_create_empty();
|
||||
this->identity_type = identity_type;
|
||||
this->identity_value = chunk_clone(identity_value);
|
||||
this->subject_type = subject_type;
|
||||
this->auth_type = auth_type;
|
||||
|
||||
return &this->public;
|
||||
}
|
||||
|
||||
@@ -0,0 +1,112 @@
|
||||
/*
|
||||
* Copyright (C) 2013 Andreas Steffen
|
||||
* HSR Hochschule fuer Technik Rapperswil
|
||||
*
|
||||
* This program is free software; you can redistribute it and/or modify it
|
||||
* under the terms of the GNU General Public License as published by the
|
||||
* Free Software Foundation; either version 2 of the License, or (at your
|
||||
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful, but
|
||||
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
||||
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
* for more details.
|
||||
*/
|
||||
|
||||
/**
|
||||
* @defgroup libtncif libtncif
|
||||
*
|
||||
* @addtogroup libtncif
|
||||
* TNC interface definitions
|
||||
*
|
||||
* @defgroup tnc_identities tnc_identities
|
||||
* @{ @ingroup libtncif
|
||||
*/
|
||||
|
||||
#ifndef TNCIF_IDENTITY_H_
|
||||
#define TNCIF_IDENTITY_H_
|
||||
|
||||
#include <library.h>
|
||||
|
||||
#include <pen/pen.h>
|
||||
#include <bio/bio_reader.h>
|
||||
#include <bio/bio_writer.h>
|
||||
|
||||
#define TNCIF_IDENTITY_MIN_SIZE 28
|
||||
|
||||
typedef struct tncif_identity_t tncif_identity_t;
|
||||
|
||||
/**
|
||||
* Public interface of a TNC Identity object
|
||||
*/
|
||||
struct tncif_identity_t {
|
||||
|
||||
/**
|
||||
* Get the TNC Identity Type
|
||||
*
|
||||
* @return TNC Identity Type
|
||||
*/
|
||||
pen_type_t (*get_identity_type)(tncif_identity_t *this);
|
||||
|
||||
/**
|
||||
* Get the TNC Identity Value
|
||||
*
|
||||
* @return TNC Identity Value
|
||||
*/
|
||||
chunk_t (*get_identity_value)(tncif_identity_t *this);
|
||||
|
||||
/**
|
||||
* Get the TNC Subject Type
|
||||
*
|
||||
* @return TNC Subject Type
|
||||
*/
|
||||
pen_type_t (*get_subject_type)(tncif_identity_t *this);
|
||||
|
||||
/**
|
||||
* Get the TNC Authentication Type
|
||||
*
|
||||
* @return TNC Authentication Type
|
||||
*/
|
||||
pen_type_t (*get_auth_type)(tncif_identity_t *this);
|
||||
|
||||
/**
|
||||
* Build the IF-IMV TNC Identity attribute encoding
|
||||
*
|
||||
* @param writer writer to write encoded data to
|
||||
*/
|
||||
void (*build)(tncif_identity_t *this, bio_writer_t *writer);
|
||||
|
||||
/**
|
||||
* Process the IF-IMV TNC Identity attribute encoding
|
||||
*
|
||||
* @param reader reader to read encoded data from
|
||||
* @return TRUE if successful
|
||||
*/
|
||||
bool (*process)(tncif_identity_t *this, bio_reader_t *reader);
|
||||
|
||||
/**
|
||||
* Destroys a tncif_identity_t object.
|
||||
*/
|
||||
void (*destroy)(tncif_identity_t *this);
|
||||
|
||||
};
|
||||
|
||||
/**
|
||||
* Create an empty TNC Identity object
|
||||
*/
|
||||
tncif_identity_t* tncif_identity_create_empty(void);
|
||||
|
||||
/**
|
||||
* Create an TNC Identity object from its components
|
||||
*
|
||||
* @param identity_type TNC Identity Type
|
||||
* @param identity_value TNC Identity Value
|
||||
* @param subject_type TNC Subject Type
|
||||
* @param auth_type TNC Authentication Type
|
||||
*/
|
||||
tncif_identity_t* tncif_identity_create(pen_type_t identity_type,
|
||||
chunk_t identity_value,
|
||||
pen_type_t subject_type,
|
||||
pen_type_t auth_type);
|
||||
|
||||
#endif /** TNCIF_IDENTITY_H_ @}*/
|
||||
@@ -45,3 +45,20 @@ ENUM(TNC_IMV_Evaluation_Result_names,
|
||||
"error",
|
||||
"don't know"
|
||||
);
|
||||
|
||||
ENUM(TNC_Subject_names,
|
||||
TNC_SUBJECT_UNKNOWN,
|
||||
TNC_SUBJECT_USER,
|
||||
"unknown",
|
||||
"machine",
|
||||
"user"
|
||||
);
|
||||
|
||||
ENUM(TNC_Authentication_names,
|
||||
TNC_AUTH_UNKNOWN,
|
||||
TNC_AUTH_SIM,
|
||||
"unknown method",
|
||||
"certificate",
|
||||
"password",
|
||||
"SIM card"
|
||||
);
|
||||
|
||||
@@ -30,5 +30,7 @@
|
||||
extern enum_name_t *TNC_Connection_State_names;
|
||||
extern enum_name_t *TNC_IMV_Action_Recommendation_names;
|
||||
extern enum_name_t *TNC_IMV_Evaluation_Result_names;
|
||||
extern enum_name_t *TNC_Subject_names;
|
||||
extern enum_name_t *TNC_Authentication_names;
|
||||
|
||||
#endif /** TNCIF_NAME_H_ @}*/
|
||||
|
||||
@@ -209,6 +209,31 @@ typedef TNC_Result (*TNC_IMV_ProvideBindFunctionPointer)(
|
||||
#define TNC_ATTRIBUTEID_SOH ((TNC_AttributeID) 0x00559706)
|
||||
#define TNC_ATTRIBUTEID_SSOH ((TNC_AttributeID) 0x00559707)
|
||||
#define TNC_ATTRIBUTEID_PRIMARY_IMV_ID ((TNC_AttributeID) 0x00559710)
|
||||
#define TNC_ATTRIBUTEID_AR_IDENTITIES ((TNC_AttributeID) 0x00559712)
|
||||
|
||||
/* TNC Identity Types */
|
||||
|
||||
#define TNC_ID_UNKNOWN 0
|
||||
#define TNC_ID_IPV4_ADDR 1
|
||||
#define TNC_ID_IPV6_ADDR 2
|
||||
#define TNC_ID_FQDN 3
|
||||
#define TNC_ID_RFC822_ADDR 4
|
||||
#define TNC_ID_USER_NAME 5
|
||||
#define TNC_ID_DER_ASN1_DN 6
|
||||
#define TNC_ID_DER_ASN1_GN 7
|
||||
|
||||
/* TNC Subject Types */
|
||||
|
||||
#define TNC_SUBJECT_UNKNOWN 0
|
||||
#define TNC_SUBJECT_MACHINE 1
|
||||
#define TNC_SUBJECT_USER 2
|
||||
|
||||
/* TNC Authentication Types */
|
||||
|
||||
#define TNC_AUTH_UNKNOWN 0
|
||||
#define TNC_AUTH_CERT 1
|
||||
#define TNC_AUTH_PASSWORD 2
|
||||
#define TNC_AUTH_SIM 3
|
||||
|
||||
/* IMV Functions */
|
||||
|
||||
|
||||
Reference in New Issue
Block a user