diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2012-07-16 18:08:49 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2012-07-16 18:08:49 +0200 |
| commit | e51c527e68bc59d5df249236ba3ee1b462d5a3e9 (patch) | |
| tree | ac52dfe658643d9093d4f25632193f3303dae64a /src/libimcv/pa_tnc/pa_tnc_msg.c | |
| parent | 358dbe483515981579b25b1bf6503cc84c7907f0 (diff) | |
| download | strongswan-e51c527e68bc59d5df249236ba3ee1b462d5a3e9.tar.bz2 strongswan-e51c527e68bc59d5df249236ba3ee1b462d5a3e9.tar.xz | |
use a nonce for a PA-TNC message identifier
Diffstat (limited to 'src/libimcv/pa_tnc/pa_tnc_msg.c')
| -rw-r--r-- | src/libimcv/pa_tnc/pa_tnc_msg.c | 19 |
1 files changed, 13 insertions, 6 deletions
diff --git a/src/libimcv/pa_tnc/pa_tnc_msg.c b/src/libimcv/pa_tnc/pa_tnc_msg.c index 8f7617dc1..ca755439c 100644 --- a/src/libimcv/pa_tnc/pa_tnc_msg.c +++ b/src/libimcv/pa_tnc/pa_tnc_msg.c @@ -131,7 +131,7 @@ METHOD(pa_tnc_msg_t, add_attribute, bool, return TRUE; } -METHOD(pa_tnc_msg_t, build, void, +METHOD(pa_tnc_msg_t, build, bool, private_pa_tnc_msg_t *this) { bio_writer_t *writer; @@ -142,12 +142,17 @@ METHOD(pa_tnc_msg_t, build, void, u_int32_t type; u_int8_t flags; chunk_t value; - rng_t *rng; + nonce_gen_t *ng; - /* create a random message identifier */ - rng = lib->crypto->create_rng(lib->crypto, RNG_WEAK); - rng->get_bytes(rng, sizeof(this->identifier), (u_int8_t*)&this->identifier); - rng->destroy(rng); + /* generate a nonce as a message identifier */ + ng = lib->crypto->create_nonce_gen(lib->crypto); + if (!ng || !ng->get_nonce(ng, 4, (u_int8_t*)&this->identifier)) + { + DBG1(DBG_TNC, "failed to generate random PA-TNC message identifier"); + DESTROY_IF(ng); + return FALSE; + } + ng->destroy(ng); DBG2(DBG_TNC, "creating PA-TNC message with ID 0x%08x", this->identifier); /* build message header */ @@ -193,6 +198,8 @@ METHOD(pa_tnc_msg_t, build, void, free(this->encoding.ptr); this->encoding = chunk_clone(writer->get_buf(writer)); writer->destroy(writer); + + return TRUE; } METHOD(pa_tnc_msg_t, process, status_t, |