2 * @file initiator_init.c
4 * @brief Start state of a IKE_SA as initiator
9 * Copyright (C) 2005 Jan Hutter, Martin Willi
10 * Hochschule fuer Technik Rapperswil
12 * This program is free software; you can redistribute it and/or modify it
13 * under the terms of the GNU General Public License as published by the
14 * Free Software Foundation; either version 2 of the License, or (at your
15 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
17 * This program is distributed in the hope that it will be useful, but
18 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
19 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
23 #include "initiator_init.h"
27 #include <sa/states/state.h>
28 #include <sa/states/ike_sa_init_requested.h>
29 #include <utils/allocator.h>
30 #include <transforms/diffie_hellman.h>
31 #include <encoding/payloads/sa_payload.h>
32 #include <encoding/payloads/ke_payload.h>
33 #include <encoding/payloads/nonce_payload.h>
36 typedef struct private_initiator_init_t private_initiator_init_t
;
39 * Private data of a initiator_init_t object.
42 struct private_initiator_init_t
{
44 * Methods of the state_t interface.
46 initiator_init_t
public;
51 protected_ike_sa_t
*ike_sa
;
54 * Diffie hellman object used to generate public DH value.
55 * This objet is passed to the next state of type ike_sa_init_requested_t.
57 diffie_hellman_t
*diffie_hellman
;
62 u_int16_t dh_group_number
;
65 * DH group priority used to get dh_group_number from configuration manager.
66 * This priority is passed to the next state of type ike_sa_init_requested_t.
68 u_int16_t dh_group_priority
;
72 * This nonce is passed to the next state of type ike_sa_init_requested_t.
77 * Logger used to log :-)
79 * Is logger of ike_sa!
84 * Builds the IKE_SA_INIT request message.
86 * @param this calling object
87 * @param message the created message will be stored at this location
89 void (*build_ike_sa_init_request
) (private_initiator_init_t
*this, message_t
**message
);
92 * Builds the SA payload for this state.
94 * @param this calling object
95 * @param payload The generated SA payload object of type ke_payload_t is
96 * stored at this location.
98 void (*build_sa_payload
) (private_initiator_init_t
*this, payload_t
**payload
);
101 * Builds the KE payload for this state.
103 * @param this calling object
104 * @param payload The generated KE payload object of type ke_payload_t is
105 * stored at this location.
107 void (*build_ke_payload
) (private_initiator_init_t
*this, payload_t
**payload
);
110 * Builds the NONCE payload for this state.
112 * @param this calling object
113 * @param payload The generated NONCE payload object of type ke_payload_t is
114 * stored at this location.
116 void (*build_nonce_payload
) (private_initiator_init_t
*this, payload_t
**payload
);
119 * Destroy function called internally of this class after state change succeeded.
121 * This destroy function does not destroy objects which were passed to the new state.
123 * @param this calling object
125 void (*destroy_after_state_change
) (private_initiator_init_t
*this);
129 * Implements function initiator_init_t.initiate_connection.
131 static status_t
initiate_connection (private_initiator_init_t
*this, char *name
)
133 ike_sa_init_requested_t
*next_state
;
137 randomizer_t
*randomizer
;
138 init_config_t
*init_config
;
139 sa_config_t
*sa_config
;
141 this->logger
->log(this->logger
, CONTROL
, "Initializing connection %s",name
);
143 /* get init_config_t object */
144 status
= charon
->configuration_manager
->get_init_config_for_name(charon
->configuration_manager
,name
,&init_config
);
146 if (status
!= SUCCESS
)
148 this->logger
->log(this->logger
, ERROR
| MORE
, "Could not retrieve INIT configuration informations for %s",name
);
152 /* configuration can be set */
153 this->ike_sa
->set_init_config(this->ike_sa
,init_config
);
155 /* get sa_config_t object */
156 status
= charon
->configuration_manager
->get_sa_config_for_name(charon
->configuration_manager
,name
,&sa_config
);
158 if (status
!= SUCCESS
)
160 this->logger
->log(this->logger
, ERROR
| MORE
, "Could not retrieve SA configuration informations for %s",name
);
164 /* configuration can be set */
165 this->ike_sa
->set_sa_config(this->ike_sa
,sa_config
);
167 this->ike_sa
->set_other_host(this->ike_sa
,init_config
->get_other_host_clone(init_config
));
168 this->ike_sa
->set_my_host(this->ike_sa
,init_config
->get_my_host_clone(init_config
));
170 this->dh_group_number
= init_config
->get_dh_group_number(init_config
,this->dh_group_priority
);
171 if (this->dh_group_number
== MODP_UNDEFINED
)
173 this->logger
->log(this->logger
, ERROR
| MORE
, "Diffie hellman group could not be retrieved with priority %d", this->dh_group_priority
);
177 /* a diffie hellman object could allready exist caused by an failed initiate_connection call */
178 if (this->diffie_hellman
== NULL
)
180 this->diffie_hellman
= diffie_hellman_create(this->dh_group_number
);
183 if (this->sent_nonce
.ptr
!= NULL
)
185 allocator_free(this->sent_nonce
.ptr
);
186 this->sent_nonce
= CHUNK_INITIALIZER
;
189 this->logger
->log(this->logger
, CONTROL
|MOST
, "Get pseudo random bytes for nonce");
190 randomizer
= this->ike_sa
->get_randomizer(this->ike_sa
);
191 randomizer
->allocate_pseudo_random_bytes(randomizer
, NONCE_SIZE
, &(this->sent_nonce
));
193 this->logger
->log(this->logger
, RAW
|MOST
, "Nonce",&(this->sent_nonce
));
195 this->build_ike_sa_init_request (this,&message
);
197 /* generate packet */
198 this->logger
->log(this->logger
, CONTROL
|MOST
, "generate packet from message");
199 status
= message
->generate(message
, NULL
, NULL
, &packet
);
200 if (status
!= SUCCESS
)
202 this->logger
->log(this->logger
, ERROR
, "could not generate packet from message");
203 message
->destroy(message
);
207 this->logger
->log(this->logger
, CONTROL
|MOST
, "Add packet to global send queue");
208 charon
->send_queue
->add(charon
->send_queue
, packet
);
210 /* state can now be changed */
211 this->logger
->log(this->logger
, CONTROL
|MOST
, "Create next state object");
212 next_state
= ike_sa_init_requested_create(this->ike_sa
, this->dh_group_number
, this->diffie_hellman
, this->sent_nonce
);
214 /* last message can now be set */
215 status
= this->ike_sa
->set_last_requested_message(this->ike_sa
, message
);
217 if (status
!= SUCCESS
)
219 this->logger
->log(this->logger
, ERROR
, "Could not set last requested message");
220 (next_state
->state_interface
).destroy(&(next_state
->state_interface
));
221 message
->destroy(message
);
225 /* state can now be changed */
226 this->ike_sa
->set_new_state(this->ike_sa
,(state_t
*) next_state
);
228 /* state has NOW changed :-) */
229 this->logger
->log(this->logger
, CONTROL
|MORE
, "Changed state of IKE_SA from %s to %s", mapping_find(ike_sa_state_m
,INITIATOR_INIT
),mapping_find(ike_sa_state_m
,IKE_SA_INIT_REQUESTED
) );
231 this->logger
->log(this->logger
, CONTROL
|MOST
, "Destroy old sate object");
232 this->destroy_after_state_change(this);
238 * implements private_initiator_init_t.build_ike_sa_init_request
240 static void build_ike_sa_init_request (private_initiator_init_t
*this, message_t
**request
)
245 /* going to build message */
246 this->logger
->log(this->logger
, CONTROL
|MOST
, "Going to build message");
247 this->ike_sa
->build_message(this->ike_sa
, IKE_SA_INIT
, TRUE
, &message
);
249 /* build SA payload */
250 this->build_sa_payload(this, &payload
);
251 this->logger
->log(this->logger
, CONTROL
|MOST
, "add SA payload to message");
252 message
->add_payload(message
, payload
);
254 /* build KE payload */
255 this->build_ke_payload(this, &payload
);
256 this->logger
->log(this->logger
, CONTROL
|MOST
, "add KE payload to message");
257 message
->add_payload(message
, payload
);
259 /* build Nonce payload */
260 this->build_nonce_payload(this, &payload
);
261 this->logger
->log(this->logger
, CONTROL
|MOST
, "add nonce payload to message");
262 message
->add_payload(message
, payload
);
268 * implements private_initiator_init_t.build_sa_payload
270 static void build_sa_payload(private_initiator_init_t
*this, payload_t
**payload
)
272 sa_payload_t
* sa_payload
;
273 size_t proposal_count
;
274 ike_proposal_t
*proposals
;
275 init_config_t
*init_config
;
277 this->logger
->log(this->logger
, CONTROL
|MORE
, "building sa payload");
279 init_config
= this->ike_sa
->get_init_config(this->ike_sa
);
281 proposal_count
= init_config
->get_proposals(init_config
,&proposals
);
283 sa_payload
= sa_payload_create_from_ike_proposals(proposals
,proposal_count
);
285 allocator_free(proposals
);
286 *payload
= (payload_t
*) sa_payload
;
290 * implements private_initiator_init_t.build_ke_payload
292 static void build_ke_payload(private_initiator_init_t
*this, payload_t
**payload
)
294 ke_payload_t
*ke_payload
;
297 this->logger
->log(this->logger
, CONTROL
|MORE
, "building ke payload");
299 this->diffie_hellman
->get_my_public_value(this->diffie_hellman
,&key_data
);
301 ke_payload
= ke_payload_create();
302 ke_payload
->set_dh_group_number(ke_payload
, this->dh_group_number
);
303 ke_payload
->set_key_exchange_data(ke_payload
, key_data
);
305 allocator_free_chunk(&key_data
);
306 *payload
= (payload_t
*) ke_payload
;
310 * implements private_initiator_init_t.build_nonce_payload
312 static void build_nonce_payload(private_initiator_init_t
*this, payload_t
**payload
)
314 nonce_payload_t
*nonce_payload
;
316 this->logger
->log(this->logger
, CONTROL
|MORE
, "building nonce payload");
318 nonce_payload
= nonce_payload_create();
320 nonce_payload
->set_nonce(nonce_payload
, this->sent_nonce
);
322 *payload
= (payload_t
*) nonce_payload
;
326 * Implements state_t.get_state
328 static status_t
process_message(private_initiator_init_t
*this, message_t
*message
, state_t
**new_state
)
330 *new_state
= (state_t
*) this;
331 this->logger
->log(this->logger
, ERROR
|MORE
, "In state INITIATOR_INIT no message is processed");
336 * Implements state_t.get_state
338 static ike_sa_state_t
get_state(private_initiator_init_t
*this)
340 return INITIATOR_INIT
;
344 * Implements state_t.get_state
346 static void destroy(private_initiator_init_t
*this)
348 this->logger
->log(this->logger
, CONTROL
| MORE
, "Going to destroy initiator_init_t state object");
350 /* destroy stored proposal */
351 this->logger
->log(this->logger
, CONTROL
| MOST
, "Destroy stored proposals");
353 /* destroy diffie hellman object */
354 if (this->diffie_hellman
!= NULL
)
356 this->logger
->log(this->logger
, CONTROL
| MOST
, "Destroy diffie_hellman_t object");
357 this->diffie_hellman
->destroy(this->diffie_hellman
);
359 if (this->sent_nonce
.ptr
!= NULL
)
361 this->logger
->log(this->logger
, CONTROL
| MOST
, "Free memory of sent nonce");
362 allocator_free(this->sent_nonce
.ptr
);
364 allocator_free(this);
368 * Implements private_initiator_init_t.destroy_after_state_change
370 static void destroy_after_state_change (private_initiator_init_t
*this)
372 this->logger
->log(this->logger
, CONTROL
| MORE
, "Going to destroy initiator_init_t state object");
374 /* destroy stored proposal */
375 this->logger
->log(this->logger
, CONTROL
| MOST
, "Destroy stored proposals");
376 allocator_free(this);
380 * Described in header.
382 initiator_init_t
*initiator_init_create(protected_ike_sa_t
*ike_sa
)
384 private_initiator_init_t
*this = allocator_alloc_thing(private_initiator_init_t
);
386 /* interface functions */
387 this->public.state_interface
.process_message
= (status_t (*) (state_t
*,message_t
*)) process_message
;
388 this->public.state_interface
.get_state
= (ike_sa_state_t (*) (state_t
*)) get_state
;
389 this->public.state_interface
.destroy
= (void (*) (state_t
*)) destroy
;
391 /* public functions */
392 this->public.initiate_connection
= (status_t (*)(initiator_init_t
*, char *)) initiate_connection
;
394 /* private functions */
395 this->destroy_after_state_change
= destroy_after_state_change
;
396 this->build_ike_sa_init_request
= build_ike_sa_init_request
;
397 this->build_nonce_payload
= build_nonce_payload
;
398 this->build_sa_payload
= build_sa_payload
;
399 this->build_ke_payload
= build_ke_payload
;
402 this->ike_sa
= ike_sa
;
403 this->dh_group_priority
= 1;
404 this->logger
= this->ike_sa
->get_logger(this->ike_sa
);
405 this->sent_nonce
= CHUNK_INITIALIZER
;
407 return &(this->public);