Martin Willi
8ff8c33d1d
- removed gmp-helper: chunk_to_mpz is now done with gmp functions, prime generation in prime-pool - added prime-pool (needs priority fix) - proof of concept RSA authentication - mpz uses LEAK_DETECTIVE - configuration-manager supports rsa keys
194 lines
6.2 KiB
C
194 lines
6.2 KiB
C
/**
|
|
* @file configuration_manager.h
|
|
*
|
|
* @brief Manages all configuration aspects of the daemon.
|
|
*
|
|
*/
|
|
|
|
/*
|
|
* Copyright (C) 2005 Jan Hutter, Martin Willi
|
|
* Hochschule fuer Technik Rapperswil
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
#ifndef CONFIGURATION_MANAGER_H_
|
|
#define CONFIGURATION_MANAGER_H_
|
|
|
|
#include <types.h>
|
|
#include <config/init_config.h>
|
|
#include <config/sa_config.h>
|
|
#include <transforms/rsa/rsa_private_key.h>
|
|
#include <transforms/rsa/rsa_public_key.h>
|
|
|
|
|
|
typedef struct configuration_manager_t configuration_manager_t;
|
|
|
|
/**
|
|
* @brief Manages all configuration aspects of the daemon.
|
|
*
|
|
* @ingroup config
|
|
*
|
|
*/
|
|
struct configuration_manager_t {
|
|
|
|
/**
|
|
* Get the configuration information needed for IKE_SA_INIT exchange
|
|
* for a specific configuration name.
|
|
*
|
|
* The returned init_config_t object MUST NOT be destroyed cause it's the original one.
|
|
*
|
|
* @param this calling object
|
|
* @param name name of the configuration
|
|
* @param[out] init_config the configuration is stored at this place
|
|
*
|
|
* @return
|
|
* - NOT_FOUND
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_init_config_for_name) (configuration_manager_t *this, char *name, init_config_t **init_config);
|
|
|
|
/**
|
|
* Get the configuration information needed for IKE_SA_INIT exchange
|
|
* for specific host informations.
|
|
*
|
|
* The returned init_config_t object MUST NOT be destroyed cause it's the original one.
|
|
*
|
|
* @param this calling object
|
|
* @param my_host my host informations
|
|
* @param other_host other host informations
|
|
* @param[out] init_config the configuration is stored at this place
|
|
*
|
|
* @return
|
|
* - NOT_FOUND
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_init_config_for_host) (configuration_manager_t *this, host_t *my_host, host_t *other_host,init_config_t **init_config);
|
|
|
|
/**
|
|
* Get the configuration information needed after IKE_SA_INIT exchange.
|
|
*
|
|
* The returned sa_config_t object MUST not be destroyed cause it's the original one.
|
|
*
|
|
* @param this calling object
|
|
* @param name name of the configuration
|
|
* @param[out] sa_config the configuration is stored at this place
|
|
*
|
|
* @return
|
|
* - NOT_FOUND
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_sa_config_for_name) (configuration_manager_t *this, char *name, sa_config_t **sa_config);
|
|
|
|
/**
|
|
* Get the configuration information needed after IKE_SA_INIT exchange
|
|
* for specific init_config_t and ID data.
|
|
*
|
|
* The returned sa_config_t object MUST NOT be destroyed cause it's the original one.
|
|
*
|
|
* @param this calling object
|
|
* @param init_config init_config_t object
|
|
* @param other_id identification of other one
|
|
* @param my_id my identification (can be NULL)
|
|
* @param[out] sa_config the configuration is stored at this place
|
|
*
|
|
* @return
|
|
* - NOT_FOUND
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_sa_config_for_init_config_and_id) (configuration_manager_t *this, init_config_t *init_config, identification_t *other_id, identification_t *my_id,sa_config_t **sa_config);
|
|
|
|
/**
|
|
* Get the retransmit timeout.
|
|
*
|
|
* The timeout values are managed by the configuration manager.
|
|
*
|
|
* @param this calling object
|
|
* @param retransmit_count number of times a message was allready retransmitted
|
|
* @param[out] timeout the new retransmit timeout in milliseconds
|
|
*
|
|
* @return
|
|
* - FAILED, if the message should not be resent again
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_retransmit_timeout) (configuration_manager_t *this, u_int32_t retransmit_count, u_int32_t *timeout);
|
|
|
|
/**
|
|
* Get the preshared secret of a specific ID.
|
|
*
|
|
* The preshared secret gets not cloned.
|
|
*
|
|
* @param this calling object
|
|
* @param identification identification_t object identifiying the ID.
|
|
* @param[out] preshared_secret the preshared secret will be written there
|
|
*
|
|
* @return
|
|
* - NOT_FOUND if no preshared secrets is configured for specific id
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_shared_secret) (configuration_manager_t *this, identification_t *identification, chunk_t *preshared_secret);
|
|
|
|
/**
|
|
* Get the RSA public key of a specific ID.
|
|
*
|
|
* Object is not cloned and shuld not be destroyed.
|
|
*
|
|
* @param this calling object
|
|
* @param identification identification_t object identifiying the ID.
|
|
* @param[out] public_key the public key will be written there
|
|
*
|
|
* @return
|
|
* - NOT_FOUND if no key is configured for specific id
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_rsa_public_key) (configuration_manager_t *this, identification_t *identification, rsa_public_key_t **public_key);
|
|
|
|
/**
|
|
* Get the RSA public key of a specific ID.
|
|
*
|
|
* Object is not cloned and shuld not be destroyed.
|
|
*
|
|
* @param this calling object
|
|
* @param identification identification_t object identifiying the ID.
|
|
* @param[out] private_key the private key will be written there
|
|
*
|
|
* @return
|
|
* - NOT_FOUND if no key is configured for specific id
|
|
* - SUCCESS
|
|
*/
|
|
status_t (*get_rsa_private_key) (configuration_manager_t *this, identification_t *identification, rsa_private_key_t **private_key);
|
|
|
|
/**
|
|
* Destroys configuration manager
|
|
*
|
|
*
|
|
* @param this calling object
|
|
* @return
|
|
* - SUCCESS
|
|
*/
|
|
void (*destroy) (configuration_manager_t *this);
|
|
};
|
|
|
|
/**
|
|
* Creates the mighty configuration manager
|
|
*
|
|
* @param first_retransmit_timeout first retransmit timeout in milliseconds
|
|
* @param max_retransmit_count max number of retransmitted requests (0 for infinite)
|
|
* @return
|
|
* - pointer to created manager object if succeeded
|
|
* - NULL if memory allocation failed
|
|
*
|
|
* @ingroup config
|
|
*/
|
|
configuration_manager_t *configuration_manager_create(u_int32_t first_retransmit_timeout,u_int32_t max_retransmit_count);
|
|
|
|
#endif /*CONFIGURATION_MANAGER_H_*/
|