Source/charon/config/configuration_manager.c

   1 /**
   2  * @file configuration_manager.c
   3  *
   4  * @brief Implementation of configuration_manager_t.
   5  *
   6  */
   7
   8 /*
   9  * Copyright (C) 2005 Jan Hutter, Martin Willi
  10  * Hochschule fuer Technik Rapperswil
  11  *
  12  * This program is free software; you can redistribute it and/or modify it
  13  * under the terms of the GNU General Public License as published by the
  14  * Free Software Foundation; either version 2 of the License, or (at your
  15  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
  16  *
  17  * This program is distributed in the hope that it will be useful, but
  18  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  19  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  20  * for more details.
  21  */
  22
  23 #include <stdlib.h>
  24
  25 #include "configuration_manager.h"
  26
  27 #include <types.h>
  28 #include <daemon.h>
  29 #include <utils/allocator.h>
  30
  31
  32 typedef struct preshared_secret_entry_t preshared_secret_entry_t;
  33
  34 /**
  35  * A preshared secret entry combines an identifier and a
  36  * preshared secret.
  37  */
  38 struct preshared_secret_entry_t {
  39
  40         /**
  41          * Identification.
  42          */
  43         identification_t *identification;
  44
  45         /**
  46          * Preshared secret as chunk_t. The NULL termination is not included.
  47          */
  48         chunk_t preshared_secret;
  49 };
  50
  51
  52 typedef struct rsa_private_key_entry_t rsa_private_key_entry_t;
  53
  54 /**
  55  * Entry for a rsa private key.
  56  */
  57 struct rsa_private_key_entry_t {
  58
  59         /**
  60          * Identification.
  61          */
  62         identification_t *identification;
  63
  64         /**
  65          * Private key.
  66          */
  67         rsa_private_key_t* private_key;
  68 };
  69
  70 typedef struct rsa_public_key_entry_t rsa_public_key_entry_t;
  71
  72 /**
  73  * Entry for a rsa private key.
  74  */
  75 struct rsa_public_key_entry_t {
  76
  77         /**
  78          * Identification.
  79          */
  80         identification_t *identification;
  81
  82         /**
  83          * Private key.
  84          */
  85         rsa_public_key_t* public_key;
  86 };
  87
  88 typedef struct configuration_entry_t configuration_entry_t;
  89
  90 /* A configuration entry combines a configuration name with a init and sa
  91  * configuration represented as init_config_t and sa_config_t objects.
  92  *
  93  * @b Constructors:
  94  *  - configuration_entry_create()
  95  */
  96 struct configuration_entry_t {
  97
  98         /**
  99          * Configuration name.
 100          *
 101          */
 102         char *name;
 103
 104         /**
 105          * Configuration for IKE_SA_INIT exchange.
 106          */
 107         init_config_t *init_config;
 108
 109         /**
 110          * Configuration for all phases after IKE_SA_INIT exchange.
 111          */
 112         sa_config_t *sa_config;
 113
 114         /**
 115          * Destroys a configuration_entry_t
 116          *
 117          * @param this                          calling object
 118          */
 119         void (*destroy) (configuration_entry_t *this);
 120 };
 121
 122 /**
 123  * Implementation of configuration_entry_t.destroy.
 124  */
 125 static void configuration_entry_destroy (configuration_entry_t *this)
 126 {
 127         allocator_free(this->name);
 128         allocator_free(this);
 129 }
 130
 131 /**
 132  * @brief Creates a configuration_entry_t object.
 133  *
 134  * @param name                  name of the configuration entry (gets copied)
 135  * @param init_config   object of type init_config_t
 136  * @param sa_config             object of type sa_config_t
 137  */
 138 configuration_entry_t * configuration_entry_create(char * name, init_config_t * init_config, sa_config_t * sa_config)
 139 {
 140         configuration_entry_t *entry = allocator_alloc_thing(configuration_entry_t);
 141
 142         /* functions */
 143         entry->destroy = configuration_entry_destroy;
 144
 145         /* private data */
 146         entry->init_config = init_config;
 147         entry->sa_config = sa_config;
 148         entry->name = allocator_alloc(strlen(name) + 1);
 149         strcpy(entry->name,name);
 150         return entry;
 151 }
 152
 153 typedef struct private_configuration_manager_t private_configuration_manager_t;
 154
 155 /**
 156  * Private data of an configuration_manager_t object.
 157  */
 158 struct private_configuration_manager_t {
 159
 160         /**
 161          * Public part of configuration_manager_t object.
 162          */
 163         configuration_manager_t public;
 164
 165         /**
 166          * Holding all configurations.
 167          */
 168         linked_list_t *configurations;
 169
 170         /**
 171          * Holding all managed init_configs.
 172          */
 173         linked_list_t *init_configs;
 174
 175         /**
 176          * Holding all managed init_configs.
 177          */
 178         linked_list_t *sa_configs;
 179
 180         /**
 181          * Holding all managed preshared secrets.
 182          */
 183         linked_list_t *preshared_secrets;
 184
 185         /**
 186          * Holding all managed private secrets.
 187          */
 188         linked_list_t *rsa_private_keys;
 189
 190         /**
 191          * Holding all managed public secrets.
 192          */
 193         linked_list_t *rsa_public_keys;
 194
 195         /**
 196          * Assigned logger_t object.
 197          */
 198         logger_t *logger;
 199
 200         /**
 201          * Max number of requests to be retransmitted.
 202          * 0 for infinite.
 203          */
 204         u_int32_t max_retransmit_count;
 205
 206         /**
 207          * First retransmit timeout in ms.
 208          */
 209         u_int32_t first_retransmit_timeout;
 210
 211         /**
 212          * Adds a new IKE_SA configuration.
 213          *
 214          *
 215          * @param this                          calling object
 216          * @param name                          name for the configuration
 217          * @param init_config           init_config_t object
 218          * @param sa_config                     sa_config_t object
 219          */
 220         void (*add_new_configuration) (private_configuration_manager_t *this, char *name, init_config_t *init_config, sa_config_t *sa_config);
 221
 222         /**
 223          * Adds a new preshared secret.
 224          *
 225          *
 226          * @param this                          calling object
 227          * @param type                          type of identification
 228          * @param id_string                     identification as string
 229          * @param preshared_secret      preshared secret as string
 230          */
 231         void (*add_new_preshared_secret) (private_configuration_manager_t *this,id_type_t type, char *id_string, char *preshared_secret);
 232
 233         /**
 234          * Adds a new rsa private key.
 235          *
 236          *
 237          * @param this                          calling object
 238          * @param type                          type of identification
 239          * @param id_string                     identification as string
 240          * @param key_pos                       location of key
 241          * @param key_len                       length of key
 242          */
 243         void (*add_new_rsa_private_key) (private_configuration_manager_t *this,id_type_t type, char *id_string, u_int8_t *key_pos, size_t key_len);
 244
 245         /**
 246          * Adds a new rsa public key.
 247          *
 248          *
 249          * @param this                          calling object
 250          * @param type                          type of identification
 251          * @param id_string                     identification as string
 252          * @param key_pos                       location of key
 253          * @param key_len                       length of key
 254          */
 255         void (*add_new_rsa_public_key) (private_configuration_manager_t *this,id_type_t type, char *id_string, u_int8_t *key_pos, size_t key_len);
 256
 257         /**
 258          * Load default configuration.
 259          *
 260          * @param this                          calling object
 261          */
 262         void (*load_default_config) (private_configuration_manager_t *this);
 263 };
 264
 265
 266 u_int8_t public_key_1[];
 267 u_int8_t private_key_1[];
 268 u_int8_t public_key_2[];
 269 u_int8_t private_key_2[];
 270
 271 /**
 272  * Implementation of private_configuration_manager_t.load_default_config.
 273  */
 274 static void load_default_config (private_configuration_manager_t *this)
 275 {
 276         init_config_t *init_config1, *init_config2, *init_config3;
 277         ike_proposal_t proposals[2];
 278         child_proposal_t child_proposals[1];
 279         sa_config_t *sa_config1, *sa_config2, *sa_config3;
 280         traffic_selector_t *ts;
 281
 282         init_config1 = init_config_create("0.0.0.0","152.96.193.131",IKEV2_UDP_PORT,IKEV2_UDP_PORT);
 283         init_config2 = init_config_create("0.0.0.0","152.96.193.130",IKEV2_UDP_PORT,IKEV2_UDP_PORT);
 284         init_config3 = init_config_create("0.0.0.0","127.0.0.1",IKEV2_UDP_PORT,IKEV2_UDP_PORT);
 285         ts = traffic_selector_create_from_string(1, TS_IPV4_ADDR_RANGE, "0.0.0.0", 0, "255.255.255.255", 65535);
 286
 287
 288         proposals[0].encryption_algorithm = ENCR_AES_CBC;
 289         proposals[0].encryption_algorithm_key_length = 16;
 290         proposals[0].integrity_algorithm = AUTH_HMAC_MD5_96;
 291         proposals[0].integrity_algorithm_key_length = 16;
 292         proposals[0].pseudo_random_function = PRF_HMAC_MD5;
 293         proposals[0].pseudo_random_function_key_length = 16;
 294         proposals[0].diffie_hellman_group = MODP_1024_BIT;
 295
 296         proposals[1] = proposals[0];
 297         proposals[1].integrity_algorithm = AUTH_HMAC_SHA1_96;
 298         proposals[1].integrity_algorithm_key_length = 20;
 299         proposals[1].pseudo_random_function = PRF_HMAC_SHA1;
 300         proposals[1].pseudo_random_function_key_length = 20;
 301
 302         init_config1->add_proposal(init_config1,1,proposals[0]);
 303         init_config1->add_proposal(init_config1,1,proposals[1]);
 304         init_config2->add_proposal(init_config2,1,proposals[0]);
 305         init_config2->add_proposal(init_config2,1,proposals[1]);
 306         init_config3->add_proposal(init_config3,1,proposals[0]);
 307         init_config3->add_proposal(init_config3,1,proposals[1]);
 308
 309         sa_config1 = sa_config_create(ID_IPV4_ADDR, "152.96.193.130",
 310                                                                   ID_IPV4_ADDR, "152.96.193.131",
 311                                                                   SHARED_KEY_MESSAGE_INTEGRITY_CODE);
 312
 313         sa_config1->add_traffic_selector_initiator(sa_config1,ts);
 314         sa_config1->add_traffic_selector_responder(sa_config1,ts);
 315
 316         sa_config2 = sa_config_create(ID_IPV4_ADDR, "152.96.193.131",
 317                                                                   ID_IPV4_ADDR, "152.96.193.130",
 318                                                                   SHARED_KEY_MESSAGE_INTEGRITY_CODE);
 319
 320         sa_config2->add_traffic_selector_initiator(sa_config2,ts);
 321         sa_config2->add_traffic_selector_responder(sa_config2,ts);
 322
 323         sa_config3 = sa_config_create(ID_IPV4_ADDR, "127.0.0.1",
 324                                                                   ID_IPV4_ADDR, "127.0.0.1",
 325                                                                   RSA_DIGITAL_SIGNATURE);
 326
 327         sa_config3->add_traffic_selector_initiator(sa_config3,ts);
 328         sa_config3->add_traffic_selector_responder(sa_config3,ts);
 329
 330         ts->destroy(ts);
 331
 332         /* ah and esp prop */
 333         child_proposals[0].ah.is_set = TRUE;
 334         child_proposals[0].ah.integrity_algorithm = AUTH_HMAC_MD5_96;
 335         child_proposals[0].ah.integrity_algorithm_key_size = 16;
 336         child_proposals[0].ah.diffie_hellman_group = MODP_1024_BIT;
 337         child_proposals[0].ah.extended_sequence_numbers = NO_EXT_SEQ_NUMBERS;
 338
 339         child_proposals[0].esp.is_set = TRUE;
 340         child_proposals[0].esp.diffie_hellman_group = MODP_1024_BIT;
 341         child_proposals[0].esp.encryption_algorithm = ENCR_AES_CBC;
 342         child_proposals[0].esp.encryption_algorithm_key_size = 16;
 343         child_proposals[0].esp.integrity_algorithm = AUTH_UNDEFINED;
 344         child_proposals[0].esp.extended_sequence_numbers = NO_EXT_SEQ_NUMBERS;
 345         child_proposals[0].esp.spi[0] = 2;
 346         child_proposals[0].esp.spi[1] = 2;
 347         child_proposals[0].esp.spi[2] = 2;
 348         child_proposals[0].esp.spi[3] = 2;
 349
 350         sa_config1->add_proposal(sa_config1, &child_proposals[0]);
 351         sa_config2->add_proposal(sa_config2, &child_proposals[0]);
 352         sa_config3->add_proposal(sa_config3, &child_proposals[0]);
 353
 354         this->add_new_configuration(this,"pinflb31",init_config1,sa_config1);
 355         this->add_new_configuration(this,"pinflb30",init_config2,sa_config2);
 356         this->add_new_configuration(this,"localhost",init_config3,sa_config3);
 357
 358         this->add_new_preshared_secret(this,ID_IPV4_ADDR, "152.96.193.130","das ist ein sicheres wort");
 359         this->add_new_preshared_secret(this,ID_IPV4_ADDR, "152.96.193.131","das ist ein sicheres wort");
 360         this->add_new_preshared_secret(this,ID_IPV4_ADDR, "127.0.0.1","das ist ein sicheres wort");
 361
 362         this->add_new_rsa_public_key(this,ID_IPV4_ADDR, "127.0.0.1", public_key_1, 256);
 363         this->add_new_rsa_public_key(this,ID_IPV4_ADDR, "152.96.193.131", public_key_2, 256);
 364         this->add_new_rsa_private_key(this,ID_IPV4_ADDR, "127.0.0.1", private_key_1, 1024);
 365         this->add_new_rsa_private_key(this,ID_IPV4_ADDR, "152.96.193.131", private_key_2, 1024);
 366 }
 367
 368 /**
 369  * Implementation of configuration_manager_t.get_init_config_for_host.
 370  */
 371 static status_t get_init_config_for_host (private_configuration_manager_t *this, host_t *my_host, host_t *other_host,init_config_t **init_config)
 372 {
 373         iterator_t *iterator;
 374         status_t status = NOT_FOUND;
 375
 376         iterator = this->configurations->create_iterator(this->configurations,TRUE);
 377
 378         this->logger->log(this->logger, CONTROL|MORE, "getting config for hosts %s - %s",
 379                                                 my_host->get_address(my_host), other_host->get_address(other_host));
 380
 381         while (iterator->has_next(iterator))
 382         {
 383                 configuration_entry_t *entry;
 384                 host_t *config_my_host;
 385                 host_t *config_other_host;
 386
 387                 iterator->current(iterator,(void **) &entry);
 388
 389                 config_my_host = entry->init_config->get_my_host(entry->init_config);
 390                 config_other_host = entry->init_config->get_other_host(entry->init_config);
 391
 392                 /* first check if ip is equal */
 393                 if(config_other_host->ip_is_equal(config_other_host,other_host))
 394                 {
 395                         this->logger->log(this->logger, CONTROL|MOST, "config entry with remote host %s",
 396                                                 config_other_host->get_address(config_other_host));
 397                         /* could be right one, check my_host for default route*/
 398                         if (config_my_host->is_default_route(config_my_host))
 399                         {
 400                                 *init_config = entry->init_config;
 401                                 status = SUCCESS;
 402                                 break;
 403                         }
 404                         /* check now if host informations are the same */
 405                         else if (config_my_host->ip_is_equal(config_my_host,my_host))
 406                         {
 407                                 *init_config = entry->init_config;
 408                                 status = SUCCESS;
 409                                 break;
 410                         }
 411
 412                 }
 413                 /* Then check for wildcard hosts!
 414                  * TODO
 415                  * actually its only checked if other host with default route can be found! */
 416                 else if (config_other_host->is_default_route(config_other_host))
 417                 {
 418                         /* could be right one, check my_host for default route*/
 419                         if (config_my_host->is_default_route(config_my_host))
 420                         {
 421                                 *init_config = entry->init_config;
 422                                 status = SUCCESS;
 423                                 break;
 424                         }
 425                         /* check now if host informations are the same */
 426                         else if (config_my_host->ip_is_equal(config_my_host,my_host))
 427                         {
 428                                 *init_config = entry->init_config;
 429                                 status = SUCCESS;
 430                                 break;
 431                         }
 432                 }
 433         }
 434
 435         iterator->destroy(iterator);
 436
 437         return status;
 438 }
 439
 440 /**
 441  * Implementation of configuration_manager_t.get_init_config_for_name.
 442  */
 443 static status_t get_init_config_for_name (private_configuration_manager_t *this, char *name, init_config_t **init_config)
 444 {
 445         iterator_t *iterator;
 446         status_t status = NOT_FOUND;
 447
 448         iterator = this->configurations->create_iterator(this->configurations,TRUE);
 449
 450         while (iterator->has_next(iterator))
 451         {
 452                 configuration_entry_t *entry;
 453                 iterator->current(iterator,(void **) &entry);
 454
 455                 if (strcmp(entry->name,name) == 0)
 456                 {
 457
 458                         /* found configuration */
 459                         *init_config = entry->init_config;
 460                         status = SUCCESS;
 461                         break;
 462                 }
 463         }
 464
 465         iterator->destroy(iterator);
 466
 467         return status;
 468 }
 469
 470 /**
 471  * Implementation of configuration_manager_t.get_sa_config_for_name.
 472  */
 473 static status_t get_sa_config_for_name (private_configuration_manager_t *this, char *name, sa_config_t **sa_config)
 474 {
 475         iterator_t *iterator;
 476         status_t status = NOT_FOUND;
 477
 478         iterator = this->configurations->create_iterator(this->configurations,TRUE);
 479
 480         while (iterator->has_next(iterator))
 481         {
 482                 configuration_entry_t *entry;
 483                 iterator->current(iterator,(void **) &entry);
 484
 485                 if (strcmp(entry->name,name) == 0)
 486                 {
 487                         /* found configuration */
 488                         *sa_config = entry->sa_config;
 489                         status = SUCCESS;
 490                         break;
 491                 }
 492         }
 493
 494         iterator->destroy(iterator);
 495
 496         return status;
 497 }
 498
 499 /**
 500  * Implementation of configuration_manager_t.get_sa_config_for_init_config_and_id.
 501  */
 502 static status_t get_sa_config_for_init_config_and_id (private_configuration_manager_t *this, init_config_t *init_config, identification_t *other_id, identification_t *my_id,sa_config_t **sa_config)
 503 {
 504         iterator_t *iterator;
 505         status_t status = NOT_FOUND;
 506
 507         iterator = this->configurations->create_iterator(this->configurations,TRUE);
 508
 509         while (iterator->has_next(iterator))
 510         {
 511                 configuration_entry_t *entry;
 512                 iterator->current(iterator,(void **) &entry);
 513
 514                 if (entry->init_config == init_config)
 515                 {
 516                         identification_t *config_my_id = entry->sa_config->get_my_id(entry->sa_config);
 517                         identification_t *config_other_id = entry->sa_config->get_other_id(entry->sa_config);
 518
 519                         /* host informations seem to be the same */
 520                         if (config_other_id->equals(config_other_id,other_id))
 521                         {
 522                                 /* other ids seems to match */
 523
 524                                 if (my_id == NULL)
 525                                 {
 526                                         /* first matching one is selected */
 527
 528                                         /* TODO priorize found entries */
 529                                         *sa_config = entry->sa_config;
 530                                         status = SUCCESS;
 531                                         break;
 532                                 }
 533
 534                                 if (config_my_id->equals(config_my_id,my_id))
 535                                 {
 536                                         *sa_config = entry->sa_config;
 537                                         status = SUCCESS;
 538                                         break;
 539                                 }
 540
 541                         }
 542                 }
 543         }
 544
 545         iterator->destroy(iterator);
 546
 547         return status;
 548 }
 549
 550 /**
 551  * Implementation of private_configuration_manager_t.add_new_configuration.
 552  */
 553 static void add_new_configuration (private_configuration_manager_t *this, char *name, init_config_t *init_config, sa_config_t *sa_config)
 554 {
 555         iterator_t *iterator;
 556         bool found;
 557
 558         iterator = this->init_configs->create_iterator(this->init_configs,TRUE);
 559         found = FALSE;
 560         while (iterator->has_next(iterator))
 561         {
 562                 init_config_t *found_init_config;
 563                 iterator->current(iterator,(void **) &found_init_config);
 564                 if (init_config == found_init_config)
 565                 {
 566                         found = TRUE;
 567                         break;
 568                 }
 569         }
 570         iterator->destroy(iterator);
 571         if (!found)
 572         {
 573                 this->init_configs->insert_first(this->init_configs,init_config);
 574         }
 575
 576         iterator = this->sa_configs->create_iterator(this->sa_configs,TRUE);
 577         found = FALSE;
 578         while (iterator->has_next(iterator))
 579         {
 580                 sa_config_t *found_sa_config;
 581                 iterator->current(iterator,(void **) &found_sa_config);
 582                 if (sa_config == found_sa_config)
 583                 {
 584                         found = TRUE;
 585                         break;
 586                 }
 587         }
 588         iterator->destroy(iterator);
 589         if (!found)
 590         {
 591                 this->sa_configs->insert_first(this->sa_configs,sa_config);
 592         }
 593
 594         this->configurations->insert_first(this->configurations,configuration_entry_create(name,init_config,sa_config));
 595 }
 596
 597 /**
 598  * Implementation of private_configuration_manager_t.add_new_preshared_secret.
 599  */
 600 static void add_new_preshared_secret (private_configuration_manager_t *this,id_type_t type, char *id_string, char *preshared_secret)
 601 {
 602         preshared_secret_entry_t *entry = allocator_alloc_thing(preshared_secret_entry_t);
 603
 604         entry->identification = identification_create_from_string(type,id_string);
 605         entry->preshared_secret.len = strlen(preshared_secret);
 606         entry->preshared_secret.ptr = allocator_alloc(entry->preshared_secret.len);
 607         memcpy(entry->preshared_secret.ptr,preshared_secret,entry->preshared_secret.len);
 608
 609         this->preshared_secrets->insert_last(this->preshared_secrets,entry);
 610 }
 611
 612 /**
 613  * Implementation of private_configuration_manager_t.add_new_preshared_secret.
 614  */
 615 static void add_new_rsa_public_key (private_configuration_manager_t *this, id_type_t type, char *id_string, u_int8_t* key_pos, size_t key_len)
 616 {
 617         chunk_t key;
 618         key.ptr = key_pos;
 619         key.len = key_len;
 620
 621         rsa_public_key_entry_t *entry = allocator_alloc_thing(rsa_public_key_entry_t);
 622
 623         entry->identification = identification_create_from_string(type,id_string);
 624         entry->public_key = rsa_public_key_create();
 625         entry->public_key->set_key(entry->public_key, key);
 626
 627         this->rsa_public_keys->insert_last(this->rsa_public_keys, entry);
 628 }
 629
 630 /**
 631  * Implementation of private_configuration_manager_t.add_new_preshared_secret.
 632  */
 633 static void add_new_rsa_private_key (private_configuration_manager_t *this, id_type_t type, char *id_string, u_int8_t* key_pos, size_t key_len)
 634 {
 635         chunk_t key;
 636         key.ptr = key_pos;
 637         key.len = key_len;
 638
 639         rsa_private_key_entry_t *entry = allocator_alloc_thing(rsa_private_key_entry_t);
 640
 641         entry->identification = identification_create_from_string(type,id_string);
 642         entry->private_key = rsa_private_key_create();
 643         entry->private_key->set_key(entry->private_key, key);
 644
 645         this->rsa_private_keys->insert_last(this->rsa_private_keys, entry);
 646 }
 647
 648 /**
 649  * Implementation of configuration_manager_t.get_shared_secret.
 650  */
 651 static status_t get_shared_secret(private_configuration_manager_t *this, identification_t *identification, chunk_t *preshared_secret)
 652 {
 653         iterator_t *iterator;
 654
 655         iterator = this->preshared_secrets->create_iterator(this->preshared_secrets,TRUE);
 656         while (iterator->has_next(iterator))
 657         {
 658                 preshared_secret_entry_t *entry;
 659                 iterator->current(iterator,(void **) &entry);
 660                 if (entry->identification->equals(entry->identification,identification))
 661                 {
 662                         *preshared_secret = entry->preshared_secret;
 663                         iterator->destroy(iterator);
 664                         return SUCCESS;
 665                 }
 666         }
 667         iterator->destroy(iterator);
 668         return NOT_FOUND;
 669 }
 670
 671 /**
 672  * Implementation of configuration_manager_t.get_shared_secret.
 673  */
 674 static status_t get_rsa_public_key(private_configuration_manager_t *this, identification_t *identification, rsa_public_key_t **public_key)
 675 {
 676         iterator_t *iterator;
 677
 678         iterator = this->rsa_public_keys->create_iterator(this->rsa_public_keys,TRUE);
 679         while (iterator->has_next(iterator))
 680         {
 681                 rsa_public_key_entry_t *entry;
 682                 iterator->current(iterator,(void **) &entry);
 683                 if (entry->identification->equals(entry->identification,identification))
 684                 {
 685                         *public_key = entry->public_key;
 686                         iterator->destroy(iterator);
 687                         return SUCCESS;
 688                 }
 689         }
 690         iterator->destroy(iterator);
 691         return NOT_FOUND;
 692 }
 693
 694 /**
 695  * Implementation of configuration_manager_t.get_shared_secret.
 696  */
 697 static status_t get_rsa_private_key(private_configuration_manager_t *this, identification_t *identification, rsa_private_key_t **private_key)
 698 {
 699         iterator_t *iterator;
 700
 701         iterator = this->rsa_private_keys->create_iterator(this->rsa_private_keys,TRUE);
 702         while (iterator->has_next(iterator))
 703         {
 704                 rsa_private_key_entry_t *entry;
 705                 iterator->current(iterator,(void **) &entry);
 706                 if (entry->identification->equals(entry->identification,identification))
 707                 {
 708                         *private_key = entry->private_key;
 709                         iterator->destroy(iterator);
 710                         return SUCCESS;
 711                 }
 712         }
 713         iterator->destroy(iterator);
 714         return NOT_FOUND;
 715 }
 716
 717 /**
 718  * Implementation of configuration_manager_t.destroy.
 719  */
 720 static status_t get_retransmit_timeout (private_configuration_manager_t *this, u_int32_t retransmit_count, u_int32_t *timeout)
 721 {
 722         if ((retransmit_count > this->max_retransmit_count) && (this->max_retransmit_count != 0))
 723         {
 724                 return FAILED;
 725         }
 726
 727         /**
 728          * TODO implement a good retransmit policy
 729          */
 730         *timeout = this->first_retransmit_timeout * (retransmit_count + 1);
 731
 732         return SUCCESS;
 733 }
 734
 735 /**
 736  * Implementation of configuration_manager_t.destroy.
 737  */
 738 static void destroy(private_configuration_manager_t *this)
 739 {
 740         this->logger->log(this->logger,CONTROL | MORE, "Going to destroy configuration manager ");
 741
 742         this->logger->log(this->logger,CONTROL | MOST, "Destroy configuration entries");
 743         while (this->configurations->get_count(this->configurations) > 0)
 744         {
 745                 configuration_entry_t *entry;
 746                 this->configurations->remove_first(this->configurations,(void **) &entry);
 747                 entry->destroy(entry);
 748         }
 749         this->configurations->destroy(this->configurations);
 750
 751         this->logger->log(this->logger,CONTROL | MOST, "Destroy sa_config_t objects");
 752         while (this->sa_configs->get_count(this->sa_configs) > 0)
 753         {
 754                 sa_config_t *sa_config;
 755                 this->sa_configs->remove_first(this->sa_configs,(void **) &sa_config);
 756                 sa_config->destroy(sa_config);
 757         }
 758
 759         this->sa_configs->destroy(this->sa_configs);
 760
 761         this->logger->log(this->logger,CONTROL | MOST, "Destroy init_config_t objects");
 762         while (this->init_configs->get_count(this->init_configs) > 0)
 763         {
 764                 init_config_t *init_config;
 765                 this->init_configs->remove_first(this->init_configs,(void **) &init_config);
 766                 init_config->destroy(init_config);
 767         }
 768         this->init_configs->destroy(this->init_configs);
 769
 770         while (this->preshared_secrets->get_count(this->preshared_secrets) > 0)
 771         {
 772                 preshared_secret_entry_t *entry;
 773                 this->preshared_secrets->remove_first(this->preshared_secrets,(void **) &entry);
 774                 entry->identification->destroy(entry->identification);
 775                 allocator_free_chunk(&(entry->preshared_secret));
 776                 allocator_free(entry);
 777         }
 778         this->preshared_secrets->destroy(this->preshared_secrets);
 779
 780         this->logger->log(this->logger,CONTROL | MOST, "Destroy rsa private keys");
 781         while (this->rsa_private_keys->get_count(this->rsa_private_keys) > 0)
 782         {
 783                 rsa_private_key_entry_t *entry;
 784                 this->rsa_private_keys->remove_first(this->rsa_private_keys,(void **) &entry);
 785                 entry->identification->destroy(entry->identification);
 786                 entry->private_key->destroy(entry->private_key);
 787                 allocator_free(entry);
 788         }
 789         this->rsa_private_keys->destroy(this->rsa_private_keys);
 790
 791         this->logger->log(this->logger,CONTROL | MOST, "Destroy rsa public keys");
 792         while (this->rsa_public_keys->get_count(this->rsa_public_keys) > 0)
 793         {
 794                 rsa_public_key_entry_t *entry;
 795                 this->rsa_public_keys->remove_first(this->rsa_public_keys,(void **) &entry);
 796                 entry->identification->destroy(entry->identification);
 797                 entry->public_key->destroy(entry->public_key);
 798                 allocator_free(entry);
 799         }
 800         this->rsa_public_keys->destroy(this->rsa_public_keys);
 801
 802         this->logger->log(this->logger,CONTROL | MOST, "Destroy assigned logger");
 803         charon->logger_manager->destroy_logger(charon->logger_manager,this->logger);
 804         allocator_free(this);
 805 }
 806
 807 /*
 808  * Described in header-file
 809  */
 810 configuration_manager_t *configuration_manager_create(u_int32_t first_retransmit_timeout,u_int32_t max_retransmit_count)
 811 {
 812         private_configuration_manager_t *this = allocator_alloc_thing(private_configuration_manager_t);
 813
 814         /* public functions */
 815         this->public.destroy = (void(*)(configuration_manager_t*))destroy;
 816         this->public.get_init_config_for_name = (status_t (*) (configuration_manager_t *, char *, init_config_t **)) get_init_config_for_name;
 817         this->public.get_init_config_for_host = (status_t (*) (configuration_manager_t *, host_t *, host_t *,init_config_t **)) get_init_config_for_host;
 818         this->public.get_sa_config_for_name =(status_t (*) (configuration_manager_t *, char *, sa_config_t **)) get_sa_config_for_name;
 819         this->public.get_sa_config_for_init_config_and_id =(status_t (*) (configuration_manager_t *, init_config_t *, identification_t *, identification_t *,sa_config_t **)) get_sa_config_for_init_config_and_id;
 820         this->public.get_retransmit_timeout = (status_t (*) (configuration_manager_t *, u_int32_t retransmit_count, u_int32_t *timeout))get_retransmit_timeout;
 821         this->public.get_shared_secret = (status_t (*) (configuration_manager_t *, identification_t *, chunk_t *))get_shared_secret;
 822         this->public.get_rsa_private_key = (status_t (*) (configuration_manager_t *, identification_t *, rsa_private_key_t**))get_rsa_private_key;
 823         this->public.get_rsa_public_key = (status_t (*) (configuration_manager_t *, identification_t *, rsa_public_key_t**))get_rsa_public_key;
 824
 825         /* private functions */
 826         this->load_default_config = load_default_config;
 827         this->add_new_configuration = add_new_configuration;
 828         this->add_new_preshared_secret = add_new_preshared_secret;
 829         this->add_new_rsa_public_key = add_new_rsa_public_key;
 830         this->add_new_rsa_private_key = add_new_rsa_private_key;
 831
 832         /* private variables */
 833         this->logger = charon->logger_manager->create_logger(charon->logger_manager,CONFIGURATION_MANAGER,NULL);
 834         this->configurations = linked_list_create();
 835         this->sa_configs = linked_list_create();
 836         this->init_configs = linked_list_create();
 837         this->preshared_secrets = linked_list_create();
 838         this->rsa_private_keys = linked_list_create();
 839         this->rsa_public_keys = linked_list_create();
 840         this->max_retransmit_count = max_retransmit_count;
 841         this->first_retransmit_timeout = first_retransmit_timeout;
 842
 843         this->load_default_config(this);
 844
 845         return (&this->public);
 846 }
 847
 848
 849 u_int8_t public_key_1[] = {
 850         0xD4,0x8D,0x40,0x8E,0xBD,0xFC,0x6D,0xE9,0xDB,0x1C,0xD2,0x21,0x19,0x37,0x6B,0xE2,
 851         0xDC,0xCE,0x74,0xA2,0x63,0xF6,0xD8,0x8D,0xAF,0x1C,0xC0,0xFF,0x07,0x3F,0xFB,0x52,
 852         0x59,0x45,0x01,0x10,0x35,0xA9,0xB8,0x16,0x69,0x31,0x19,0x4F,0xDD,0x66,0xAD,0xAC,
 853         0x80,0x11,0x33,0x38,0x5A,0x11,0xF9,0x33,0x3F,0xD2,0x41,0x4A,0x21,0x9B,0x54,0x44,
 854         0x00,0xB6,0x07,0x33,0x4A,0x5B,0x4E,0x09,0x7C,0x9D,0xB8,0xDE,0x6B,0xA2,0xB2,0x78,
 855         0x23,0x3D,0xF0,0xB7,0x37,0x2B,0x7A,0x71,0x50,0x6E,0xEA,0x93,0x3E,0xB5,0x2C,0xBD,
 856         0xD6,0x08,0x43,0x12,0x0A,0xE8,0x8D,0xE6,0x6C,0x24,0xCC,0x3F,0xF7,0x18,0x7E,0x87,
 857         0x59,0x0C,0xA9,0x5D,0x85,0xF8,0x6E,0x83,0xD8,0x18,0x77,0x07,0xB6,0x44,0x3C,0x8D,
 858         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 859         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 860         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 861         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 862         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 863         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 864         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 865         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x01
 866 };
 867
 868 u_int8_t private_key_1[] = {
 869         0xD4,0x8D,0x40,0x8E,0xBD,0xFC,0x6D,0xE9,0xDB,0x1C,0xD2,0x21,0x19,0x37,0x6B,0xE2,
 870         0xDC,0xCE,0x74,0xA2,0x63,0xF6,0xD8,0x8D,0xAF,0x1C,0xC0,0xFF,0x07,0x3F,0xFB,0x52,
 871         0x59,0x45,0x01,0x10,0x35,0xA9,0xB8,0x16,0x69,0x31,0x19,0x4F,0xDD,0x66,0xAD,0xAC,
 872         0x80,0x11,0x33,0x38,0x5A,0x11,0xF9,0x33,0x3F,0xD2,0x41,0x4A,0x21,0x9B,0x54,0x44,
 873         0x00,0xB6,0x07,0x33,0x4A,0x5B,0x4E,0x09,0x7C,0x9D,0xB8,0xDE,0x6B,0xA2,0xB2,0x78,
 874         0x23,0x3D,0xF0,0xB7,0x37,0x2B,0x7A,0x71,0x50,0x6E,0xEA,0x93,0x3E,0xB5,0x2C,0xBD,
 875         0xD6,0x08,0x43,0x12,0x0A,0xE8,0x8D,0xE6,0x6C,0x24,0xCC,0x3F,0xF7,0x18,0x7E,0x87,
 876         0x59,0x0C,0xA9,0x5D,0x85,0xF8,0x6E,0x83,0xD8,0x18,0x77,0x07,0xB6,0x44,0x3C,0x8D,
 877         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 878         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 879         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 880         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 881         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 882         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 883         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 884         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x01,
 885         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 886         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 887         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 888         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 889         0xEE,0xF2,0x37,0xF2,0x98,0xEB,0x33,0xC6,0x84,0xE8,0xB9,0xD1,0x18,0xB5,0x29,0x00,
 890         0xAC,0x6B,0x78,0xBC,0x9E,0xB6,0x01,0x21,0x29,0xEE,0x4A,0x99,0xFB,0x3D,0x07,0x23,
 891         0x77,0x84,0x93,0x4B,0x53,0x49,0xB0,0xA4,0x6F,0xB0,0xF5,0x50,0xDB,0x35,0xDD,0xDF,
 892         0x41,0x6F,0x7B,0xA9,0x88,0x3D,0x0B,0x1C,0x2E,0x2B,0x44,0x35,0x24,0x72,0x66,0xC1,
 893         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 894         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 895         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 896         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 897         0xE3,0xB8,0xC8,0x30,0x67,0xD0,0x5D,0xF1,0x32,0x64,0xDC,0x4B,0xB3,0x7E,0xE3,0x1A,
 898         0xC5,0xBC,0xAC,0xC9,0x95,0x5C,0x96,0x0D,0x5A,0x52,0x90,0xE0,0x08,0x3F,0xA6,0x71,
 899         0xC7,0x18,0xC5,0x64,0xA2,0xE4,0xB8,0x43,0x5A,0x8A,0x7A,0x9B,0xDF,0xDA,0x81,0x85,
 900         0x6C,0x0F,0xA4,0xC9,0xAC,0x25,0x19,0x54,0xFE,0x75,0xAA,0x1D,0x22,0xB8,0xF4,0xCD,
 901         0x1A,0x91,0xC2,0xA3,0x65,0x3F,0xD7,0xFC,0x7E,0xE1,0x92,0x29,0xC5,0x85,0x6E,0x44,
 902         0xC8,0x4D,0xBD,0x7A,0x2C,0x2D,0x47,0xE2,0x24,0x24,0xDF,0xC2,0x31,0x65,0x8F,0xD4,
 903         0xBA,0x28,0x7C,0x4A,0xCA,0xAE,0x79,0xBE,0xC1,0x6C,0xFC,0x09,0x45,0xF7,0x87,0x17,
 904         0xB4,0x55,0x92,0x15,0xC5,0xFA,0x8F,0xB0,0x56,0x96,0xC1,0x87,0x12,0xFE,0xDF,0xF0,
 905         0x3A,0xE1,0xB1,0x83,0x19,0x74,0xF0,0x7D,0x37,0x41,0x3E,0x6A,0xFE,0x33,0x3E,0x74,
 906         0x01,0x45,0xE4,0x65,0xAE,0xC9,0xAE,0x64,0xE3,0xF1,0x90,0xFD,0x1A,0x30,0x44,0x82,
 907         0xEE,0x34,0x94,0xF2,0x68,0x3D,0x61,0x90,0xFB,0xEB,0xD8,0x18,0xE6,0x7C,0xEC,0x69,
 908         0x70,0xD0,0xEB,0x2F,0xC1,0x3D,0x9C,0x6A,0x4B,0x89,0x50,0x6B,0x3F,0xA5,0x38,0x41,
 909         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 910         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 911         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 912         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 913         0x65,0xEE,0x34,0x09,0xAC,0x4C,0x21,0x71,0x1D,0x3F,0x7E,0x0D,0x01,0xC2,0x3E,0x34,
 914         0x88,0x58,0xEC,0x4F,0x62,0x50,0xF7,0xD8,0x62,0xDF,0xC1,0x39,0x40,0xA0,0xBF,0x0B,
 915         0xD5,0x2F,0x5B,0xFA,0x35,0x14,0x69,0x63,0x2C,0x36,0x4B,0xDF,0xEB,0x33,0x66,0x6B,
 916         0x97,0xA9,0x6C,0x12,0x5D,0x08,0xD5,0x55,0x77,0x28,0x83,0xD7,0x3B,0xAE,0x05,0xC1,
 917         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 918         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 919         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 920         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 921         0x9F,0x96,0x17,0x75,0x14,0xCB,0xC9,0x8A,0x06,0xAE,0xF8,0x53,0x74,0xEF,0x2F,0x68,
 922         0xCB,0xBA,0x75,0xBC,0xAF,0x97,0xBA,0xF0,0x90,0xA3,0xDC,0x33,0xA4,0x94,0x36,0xA8,
 923         0xF5,0xC6,0x3E,0x4F,0x50,0x78,0xC9,0x49,0x2A,0x62,0x71,0x9A,0x5B,0x3E,0x5E,0x16,
 924         0x8A,0xAC,0x4B,0xE7,0xA9,0x64,0x36,0x64,0x82,0x0F,0x23,0xB0,0x57,0x6D,0x16,0xE1,
 925         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 926         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 927         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 928         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 929         0x25,0xF1,0x40,0x05,0x58,0x19,0x37,0x61,0x34,0x98,0xBB,0x29,0x1B,0x44,0x08,0x1A,
 930         0xD3,0x66,0x62,0x4C,0x9C,0x47,0xD2,0x91,0x60,0x46,0x6F,0x8E,0xA6,0xE7,0x80,0x7B,
 931         0x17,0x77,0x9A,0xB5,0x18,0x8A,0x15,0x8F,0x77,0xA1,0x55,0x3E,0x96,0x66,0x86,0x57,
 932         0x75,0x73,0xF5,0x57,0x50,0x28,0xEA,0x83,0x14,0xB1,0x55,0xA3,0x82,0xCD,0x36,0xF8
 933 };
 934 u_int8_t public_key_2[] = {
 935         0x88,0x3E,0xE2,0x2E,0x5D,0x01,0x13,0xDF,0x1D,0x8B,0xF4,0x39,0xCA,0xE6,0x3C,0xE1,
 936         0x46,0x8E,0xD4,0xF1,0x06,0x56,0x12,0x8D,0xCD,0x51,0xBD,0x32,0xF5,0x18,0x15,0x4D,
 937         0x0F,0x98,0xDF,0xFF,0xA5,0xA3,0xAB,0x39,0x43,0xC4,0xF6,0xAC,0x98,0x5C,0x84,0x63,
 938         0x8C,0x46,0x33,0xA2,0x23,0x8C,0xF0,0x4D,0xFE,0xE7,0xF3,0x38,0xC4,0x19,0x39,0xC4,
 939         0x90,0xF4,0xC8,0x0D,0xB0,0xFE,0x65,0x11,0x0B,0x41,0x73,0xBB,0x05,0xA6,0x4B,0xC5,
 940         0x27,0xA4,0x48,0x21,0xC5,0xAE,0x91,0x9C,0xD8,0x62,0x27,0xBE,0xDF,0xDA,0xC6,0x4E,
 941         0xC1,0x6E,0x5B,0x61,0x51,0xAA,0xC9,0x53,0xCD,0x02,0x5B,0xC5,0xEE,0xE9,0xC7,0x7B,
 942         0xB1,0x7E,0xD2,0xC2,0xFE,0x5F,0xD7,0x0F,0x75,0x2B,0xB9,0x49,0x5F,0x35,0xF1,0x83,
 943         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 944         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 945         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 946         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 947         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 948         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 949         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 950         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x01
 951 };
 952 u_int8_t private_key_2[] = {
 953         0x88,0x3E,0xE2,0x2E,0x5D,0x01,0x13,0xDF,0x1D,0x8B,0xF4,0x39,0xCA,0xE6,0x3C,0xE1,
 954         0x46,0x8E,0xD4,0xF1,0x06,0x56,0x12,0x8D,0xCD,0x51,0xBD,0x32,0xF5,0x18,0x15,0x4D,
 955         0x0F,0x98,0xDF,0xFF,0xA5,0xA3,0xAB,0x39,0x43,0xC4,0xF6,0xAC,0x98,0x5C,0x84,0x63,
 956         0x8C,0x46,0x33,0xA2,0x23,0x8C,0xF0,0x4D,0xFE,0xE7,0xF3,0x38,0xC4,0x19,0x39,0xC4,
 957         0x90,0xF4,0xC8,0x0D,0xB0,0xFE,0x65,0x11,0x0B,0x41,0x73,0xBB,0x05,0xA6,0x4B,0xC5,
 958         0x27,0xA4,0x48,0x21,0xC5,0xAE,0x91,0x9C,0xD8,0x62,0x27,0xBE,0xDF,0xDA,0xC6,0x4E,
 959         0xC1,0x6E,0x5B,0x61,0x51,0xAA,0xC9,0x53,0xCD,0x02,0x5B,0xC5,0xEE,0xE9,0xC7,0x7B,
 960         0xB1,0x7E,0xD2,0xC2,0xFE,0x5F,0xD7,0x0F,0x75,0x2B,0xB9,0x49,0x5F,0x35,0xF1,0x83,
 961         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 962         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 963         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 964         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 965         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 966         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 967         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 968         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x01,
 969         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 970         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 971         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 972         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 973         0xE8,0x37,0xB6,0x08,0xD8,0x9C,0x72,0xC5,0x34,0xDB,0x3A,0xA2,0xF9,0x24,0xE1,0x44,
 974         0x23,0x3B,0x72,0x70,0x5D,0xCC,0xC3,0xBA,0x3D,0xCE,0x82,0xAC,0x6A,0x71,0x72,0x90,
 975         0xC7,0x94,0xB3,0x8B,0x85,0xE0,0xEF,0x39,0xF0,0xE4,0x08,0x31,0xEA,0xE6,0x3B,0x7D,
 976         0xB0,0x36,0xFA,0x71,0x6E,0xA3,0xF9,0x4C,0x39,0x05,0x8C,0xB7,0x8C,0x99,0x94,0x85,
 977         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 978         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 979         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 980         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 981         0x96,0x32,0xF9,0xD9,0xA8,0xC0,0x84,0xFD,0xE5,0x6B,0xA6,0xC2,0x85,0x85,0x68,0x17,
 982         0x7E,0x98,0xD0,0x6A,0xDC,0xD8,0x4C,0x46,0xCB,0x6D,0x4C,0x25,0xE5,0xF9,0x58,0xB2,
 983         0x17,0xE4,0x20,0x8A,0x87,0x0D,0xD7,0x4C,0x79,0xA3,0xB3,0x69,0x98,0x7F,0x5D,0x08,
 984         0x33,0x5B,0xAD,0xA3,0x34,0xE8,0x55,0x5E,0x09,0x60,0x70,0xA8,0x11,0xFD,0x70,0x67,
 985         0x00,0xE1,0xA7,0x44,0xF5,0x85,0x14,0x43,0xD5,0x45,0x1A,0x87,0x65,0x30,0xA8,0x24,
 986         0x2C,0xF8,0xAF,0x97,0xFF,0x9A,0x7E,0xF4,0x3B,0xE7,0xD3,0x79,0x88,0xEC,0x66,0xF6,
 987         0xE0,0xAA,0xF4,0x88,0x0A,0xE2,0x4C,0x31,0x4A,0xA6,0xF3,0x91,0x9A,0x4A,0xBE,0xF0,
 988         0x85,0xEF,0xCE,0x55,0xB6,0x35,0x2B,0x38,0xD5,0xF5,0x5A,0x35,0x7B,0xCF,0x4D,0xF8,
 989         0x5D,0x1E,0x57,0x99,0xAF,0xED,0x33,0x6F,0xD5,0xA7,0x49,0x5B,0x14,0x4C,0x7D,0x17,
 990         0x81,0xAE,0x1E,0xDA,0x9D,0xFB,0xA9,0xC3,0x00,0x4C,0x17,0x37,0x30,0x96,0x60,0xE1,
 991         0x6A,0xCC,0xD3,0xDB,0x40,0xCE,0x96,0x96,0x0D,0x95,0x0D,0x84,0x38,0xBD,0xDA,0x2F,
 992         0xEC,0xED,0x22,0x39,0x8E,0x8C,0xDF,0xCD,0x07,0xCF,0x0F,0xB0,0x2B,0x76,0xDB,0xC1,
 993         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 994         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 995         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 996         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 997         0xA5,0x37,0x9E,0x08,0x45,0x35,0x6A,0x62,0xEC,0xEC,0x5D,0x97,0xBE,0x73,0x82,0xE2,
 998         0x9B,0xBE,0x9B,0xF9,0x5E,0x83,0x65,0x6E,0x88,0xB2,0xF9,0x3D,0xFA,0xAD,0xA4,0xB9,
 999         0x65,0x86,0x63,0x08,0x0D,0xC4,0xAF,0xF0,0x25,0x77,0xD8,0x6C,0xCB,0x97,0xEB,0x13,
1000         0xCD,0xE0,0x0F,0xE7,0xCC,0xB4,0x55,0x96,0xE9,0xAB,0x0D,0x27,0x3A,0x9D,0xBA,0x91,
1001         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1002         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1003         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1004         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1005         0x44,0xA3,0x44,0xF4,0x47,0x9E,0xBA,0xE7,0xBF,0xF8,0xC2,0xFB,0x2F,0xC3,0x38,0x3F,
1006         0x4C,0x56,0x0F,0x20,0x56,0x8D,0xED,0xC5,0x88,0x5F,0x09,0x26,0x64,0x82,0xDF,0x1A,
1007         0x7B,0xBA,0x7F,0x78,0x6E,0xA1,0x4F,0x9B,0x1E,0x17,0x45,0xFC,0xE2,0x78,0x89,0x8E,
1008         0x1E,0xD2,0x2D,0x76,0x60,0xCE,0x2F,0x7C,0xCA,0xB2,0x2C,0xA9,0x51,0x97,0x4C,0xCF,
1009         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1010         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1011         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1012         0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
1013         0x01,0x40,0x4B,0x7D,0xAB,0x8A,0xB9,0x5E,0xEE,0xA1,0x81,0xED,0x27,0x89,0xF6,0x4C,
1014         0x59,0x8C,0x23,0x14,0x3B,0x1B,0xBA,0xC3,0xB2,0x00,0x9A,0x9E,0xDF,0x54,0x82,0xA7,
1015         0x3E,0xC9,0x23,0x85,0x4D,0xD3,0x80,0xA7,0x89,0x11,0xBA,0x76,0xF5,0xC1,0x55,0x37,
1016         0x0A,0x0D,0x8C,0x07,0x0A,0xC8,0xC5,0x11,0x74,0x9C,0xB6,0x80,0x3B,0x0A,0x9A,0xA2
1017 };