/* * Copyright (C) 2005-2010 Martin Willi * Copyright (C) 2010 revosec AG * Copyright (C) 2005 Jan Hutter * Hochschule fuer Technik Rapperswil * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License as published by the * Free Software Foundation; either version 2 of the License, or (at your * option) any later version. See . * * This program is distributed in the hope that it will be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * for more details. */ #include #include #include "transform_attribute.h" #include #include ENUM(tattr_ph1_names, TATTR_PH1_ENCRYPTION_ALGORITHM, TATTR_PH1_GROUP_ORDER, "ENCRYPTION_ALGORITHM", "HASH_ALGORITHM", "AUTH_METHOD", "GROUP", "GROUP_TYPE", "GROUP_PRIME", "GROUP_GENONE", "GROUP_GENTWO", "GROUP_CURVE_A", "GROUP_CURVE_B", "LIFE_TYPE", "LIFE_DURATION", "PRF", "KEY_LENGTH", "FIELD_SIZE", "GROUP_ORDER", ); ENUM(tattr_ph2_names, TATTR_PH2_SA_LIFE_TYPE, TATTR_PH2_EXT_SEQ_NUMBER, "SA_LIFE_TYPE", "SA_LIFE_DURATION", "GROUP", "ENCAP_MODE", "AUTH_ALGORITHM", "KEY_LENGTH", "KEY_ROUNDS", "COMP_DICT_SIZE", "COMP_PRIV_ALGORITHM", "ECN_TUNNEL", "EXT_SEQ_NUMBER", ); ENUM(tattr_ikev2_names, TATTR_IKEV2_KEY_LENGTH, TATTR_IKEV2_KEY_LENGTH, "KEY_LENGTH", ); typedef struct private_transform_attribute_t private_transform_attribute_t; /** * Private data of an transform_attribute_t object. */ struct private_transform_attribute_t { /** * Public transform_attribute_t interface. */ transform_attribute_t public; /** * Attribute Format Flag. * * - TRUE means value is stored in attribute_length_or_value * - FALSE means value is stored in attribute_value */ bool attribute_format; /** * Type of the attribute. */ u_int16_t attribute_type; /** * Attribute Length if attribute_format is 0, attribute Value otherwise. */ u_int16_t attribute_length_or_value; /** * Attribute value as chunk if attribute_format is 0 (FALSE). */ chunk_t attribute_value; /** * Payload type, TRANSFORM_ATTRIBUTE or TRANSFORM_ATTRIBUTE_V1 */ payload_type_t type; }; /** * Encoding rules for IKEv1/IKEv2 transform attributes */ static encoding_rule_t encodings[] = { /* Flag defining the format of this payload */ { ATTRIBUTE_FORMAT, offsetof(private_transform_attribute_t, attribute_format) }, /* type of the attribute as 15 bit unsigned integer */ { ATTRIBUTE_TYPE, offsetof(private_transform_attribute_t, attribute_type) }, /* Length or value, depending on the attribute format flag */ { ATTRIBUTE_LENGTH_OR_VALUE,offsetof(private_transform_attribute_t, attribute_length_or_value) }, /* Value of attribute if attribute format flag is zero */ { ATTRIBUTE_VALUE, offsetof(private_transform_attribute_t, attribute_value) } }; /* 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ !A! Attribute Type ! AF=0 Attribute Length ! !F! ! AF=1 Attribute Value ! +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ! AF=0 Attribute Value ! ! AF=1 Not Transmitted ! +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ */ METHOD(payload_t, verify, status_t, private_transform_attribute_t *this) { return SUCCESS; } METHOD(payload_t, get_encoding_rules, int, private_transform_attribute_t *this, encoding_rule_t **rules) { *rules = encodings; return countof(encodings); } METHOD(payload_t, get_header_length, int, private_transform_attribute_t *this) { return 0; } METHOD(payload_t, get_type, payload_type_t, private_transform_attribute_t *this) { return this->type; } METHOD(payload_t, get_next_type, payload_type_t, private_transform_attribute_t *this) { return NO_PAYLOAD; } METHOD(payload_t, set_next_type, void, private_transform_attribute_t *this, payload_type_t type) { } METHOD(payload_t, get_length, size_t, private_transform_attribute_t *this) { if (this->attribute_format) { return 4; } return this->attribute_length_or_value + 4; } METHOD(transform_attribute_t, set_value_chunk, void, private_transform_attribute_t *this, chunk_t value) { chunk_free(&this->attribute_value); if (value.len != 2) { this->attribute_value = chunk_clone(value); this->attribute_length_or_value = value.len; this->attribute_format = FALSE; } else { memcpy(&this->attribute_length_or_value, value.ptr, value.len); } } METHOD(transform_attribute_t, set_value, void, private_transform_attribute_t *this, u_int16_t value) { chunk_free(&this->attribute_value); this->attribute_length_or_value = value; this->attribute_format = TRUE; } METHOD(transform_attribute_t, get_value_chunk, chunk_t, private_transform_attribute_t *this) { if (this->attribute_format) { return chunk_from_thing(this->attribute_length_or_value); } return this->attribute_value; } METHOD(transform_attribute_t, get_value, u_int16_t, private_transform_attribute_t *this) { return this->attribute_length_or_value; } METHOD(transform_attribute_t, set_attribute_type, void, private_transform_attribute_t *this, u_int16_t type) { this->attribute_type = type & 0x7FFF; } METHOD(transform_attribute_t, get_attribute_type, u_int16_t, private_transform_attribute_t *this) { return this->attribute_type; } METHOD(transform_attribute_t, clone_, transform_attribute_t*, private_transform_attribute_t *this) { private_transform_attribute_t *new; new = (private_transform_attribute_t*)transform_attribute_create(this->type); new->attribute_format = this->attribute_format; new->attribute_type = this->attribute_type; new->attribute_length_or_value = this->attribute_length_or_value; if (!new->attribute_format) { new->attribute_value = chunk_clone(this->attribute_value); } return &new->public; } METHOD2(payload_t, transform_attribute_t, destroy, void, private_transform_attribute_t *this) { free(this->attribute_value.ptr); free(this); } /* * Described in header. */ transform_attribute_t *transform_attribute_create(payload_type_t type) { private_transform_attribute_t *this; INIT(this, .public = { .payload_interface = { .verify = _verify, .get_encoding_rules = _get_encoding_rules, .get_header_length = _get_header_length, .get_length = _get_length, .get_next_type = _get_next_type, .set_next_type = _set_next_type, .get_type = _get_type, .destroy = _destroy, }, .set_value_chunk = _set_value_chunk, .set_value = _set_value, .get_value_chunk = _get_value_chunk, .get_value = _get_value, .set_attribute_type = _set_attribute_type, .get_attribute_type = _get_attribute_type, .clone = _clone_, .destroy = _destroy, }, .attribute_format = TRUE, .type = type, ); return &this->public; } /* * Described in header. */ transform_attribute_t *transform_attribute_create_value(payload_type_t type, transform_attribute_type_t kind, u_int16_t value) { transform_attribute_t *attribute; attribute = transform_attribute_create(type); attribute->set_attribute_type(attribute, kind); attribute->set_value(attribute, value); return attribute; }