src/charon/plugins/load_tester/load_tester_creds.c

   1 /*
   2  * Copyright (C) 2008 Martin Willi
   3  * Hochschule fuer Technik Rapperswil
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2 of the License, or (at your
   8  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  12  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  13  * for more details.
  14  *
  15  * $Id$
  16  */
  17
  18 #include "load_tester_creds.h"
  19
  20 #include <time.h>
  21
  22 #include <daemon.h>
  23 #include <credentials/keys/shared_key.h>
  24 #include <credentials/certificates/x509.h>
  25 #include <utils/identification.h>
  26
  27 typedef struct private_load_tester_creds_t private_load_tester_creds_t;
  28
  29 /**
  30  * Private data of an load_tester_creds_t object
  31  */
  32 struct private_load_tester_creds_t {
  33         /**
  34          * Public part
  35          */
  36         load_tester_creds_t public;
  37
  38         /**
  39          * Private key to create signatures
  40          */
  41         private_key_t *private;
  42
  43         /**
  44          * CA certificate, to issue/verify peer certificates
  45          */
  46         certificate_t *ca;
  47
  48         /**
  49          * serial number to issue certificates
  50          */
  51         u_int32_t serial;
  52
  53         /**
  54          * Preshared key
  55          */
  56         shared_key_t *shared;
  57
  58         /**
  59          * Identification for shared key
  60          */
  61         identification_t *id;
  62 };
  63
  64 /**
  65  * 1024-bit RSA key:
  66 -----BEGIN RSA PRIVATE KEY-----
  67 MIICXQIBAAKBgQDQXr7poAPYZLxmTCqR51STGRuk9Hc5SWtTcs6b2RzpnP8EVRLx
  68 JEVxOKE9Mw6n7mD1pNrupCpnpGRdLAV5VznTPhSQ6k7ppJJrxosRYg0pHTZqBUEC
  69 7nQFwAe10g8q0UnM1wa4lJzGxDH78d21cVweJgbkxAeyriS0jhNs7gO5nQIDAQAB
  70 AoGACVACtkxJf7VY2jWTPXwaQoy/uIqYfX3zhwI9i6eTbDlxCE+JDi/xzpKaWjLa
  71 99RmjvP0OPArWQB239ck03x7gAm2obutosGbqbKzJZS5cyIayzyW9djZDHBdt9Ho
  72 quKB39aspWit3xPzkrr+QeIkiggtmBKALTBxTwxAU+P6euECQQD4IPdrzKbCrO79
  73 LKvoPrQQtTjL6ogag9rI9n2ZuoK3/XVybh2byOXT8tA5G5jSz9Ac8XeVOsnH9gT5
  74 3WXeaLOFAkEA1vrm/hVSEasp5eATgQ7ig9CF+GGKqhTwXp/uOSl/h3IRmStu5J0C
  75 9AkYyx0bn3j5R8iUEX/C00KSE1kQNh4NOQJAVOsLYlRG2idPH0xThQc4nuM2jes1
  76 K0Xm8ZISSDNhm1BeCoyPC4rExTW7d1/vfG5svgsRrvvQpOOYrl7MB0Lz9QJBALhg
  77 AWJiyLsskEd90Vx7dpvUaEHo7jMGuEx/X6GYzK5Oj3dNP9NEMfc4IhJ5SWqRJ0KA
  78 bTVA3MexLXT4iqXPSkkCQQDSjLhBwvEnSuW4ElIMzBwLbu7573z2gzU82Mj6trrw
  79 Osoox/vmcepT1Wjy4AvPZHgxp7vEXNSeS+M5L29QNTp8
  80 -----END RSA PRIVATE KEY-----
  81  */
  82 static char private[] = {
  83   0x30,0x82,0x02,0x5d,0x02,0x01,0x00,0x02,0x81,0x81,0x00,0xd0,0x5e,0xbe,0xe9,0xa0,
  84   0x03,0xd8,0x64,0xbc,0x66,0x4c,0x2a,0x91,0xe7,0x54,0x93,0x19,0x1b,0xa4,0xf4,0x77,
  85   0x39,0x49,0x6b,0x53,0x72,0xce,0x9b,0xd9,0x1c,0xe9,0x9c,0xff,0x04,0x55,0x12,0xf1,
  86   0x24,0x45,0x71,0x38,0xa1,0x3d,0x33,0x0e,0xa7,0xee,0x60,0xf5,0xa4,0xda,0xee,0xa4,
  87   0x2a,0x67,0xa4,0x64,0x5d,0x2c,0x05,0x79,0x57,0x39,0xd3,0x3e,0x14,0x90,0xea,0x4e,
  88   0xe9,0xa4,0x92,0x6b,0xc6,0x8b,0x11,0x62,0x0d,0x29,0x1d,0x36,0x6a,0x05,0x41,0x02,
  89   0xee,0x74,0x05,0xc0,0x07,0xb5,0xd2,0x0f,0x2a,0xd1,0x49,0xcc,0xd7,0x06,0xb8,0x94,
  90   0x9c,0xc6,0xc4,0x31,0xfb,0xf1,0xdd,0xb5,0x71,0x5c,0x1e,0x26,0x06,0xe4,0xc4,0x07,
  91   0xb2,0xae,0x24,0xb4,0x8e,0x13,0x6c,0xee,0x03,0xb9,0x9d,0x02,0x03,0x01,0x00,0x01,
  92   0x02,0x81,0x80,0x09,0x50,0x02,0xb6,0x4c,0x49,0x7f,0xb5,0x58,0xda,0x35,0x93,0x3d,
  93   0x7c,0x1a,0x42,0x8c,0xbf,0xb8,0x8a,0x98,0x7d,0x7d,0xf3,0x87,0x02,0x3d,0x8b,0xa7,
  94   0x93,0x6c,0x39,0x71,0x08,0x4f,0x89,0x0e,0x2f,0xf1,0xce,0x92,0x9a,0x5a,0x32,0xda,
  95   0xf7,0xd4,0x66,0x8e,0xf3,0xf4,0x38,0xf0,0x2b,0x59,0x00,0x76,0xdf,0xd7,0x24,0xd3,
  96   0x7c,0x7b,0x80,0x09,0xb6,0xa1,0xbb,0xad,0xa2,0xc1,0x9b,0xa9,0xb2,0xb3,0x25,0x94,
  97   0xb9,0x73,0x22,0x1a,0xcb,0x3c,0x96,0xf5,0xd8,0xd9,0x0c,0x70,0x5d,0xb7,0xd1,0xe8,
  98   0xaa,0xe2,0x81,0xdf,0xd6,0xac,0xa5,0x68,0xad,0xdf,0x13,0xf3,0x92,0xba,0xfe,0x41,
  99   0xe2,0x24,0x8a,0x08,0x2d,0x98,0x12,0x80,0x2d,0x30,0x71,0x4f,0x0c,0x40,0x53,0xe3,
 100   0xfa,0x7a,0xe1,0x02,0x41,0x00,0xf8,0x20,0xf7,0x6b,0xcc,0xa6,0xc2,0xac,0xee,0xfd,
 101   0x2c,0xab,0xe8,0x3e,0xb4,0x10,0xb5,0x38,0xcb,0xea,0x88,0x1a,0x83,0xda,0xc8,0xf6,
 102   0x7d,0x99,0xba,0x82,0xb7,0xfd,0x75,0x72,0x6e,0x1d,0x9b,0xc8,0xe5,0xd3,0xf2,0xd0,
 103   0x39,0x1b,0x98,0xd2,0xcf,0xd0,0x1c,0xf1,0x77,0x95,0x3a,0xc9,0xc7,0xf6,0x04,0xf9,
 104   0xdd,0x65,0xde,0x68,0xb3,0x85,0x02,0x41,0x00,0xd6,0xfa,0xe6,0xfe,0x15,0x52,0x11,
 105   0xab,0x29,0xe5,0xe0,0x13,0x81,0x0e,0xe2,0x83,0xd0,0x85,0xf8,0x61,0x8a,0xaa,0x14,
 106   0xf0,0x5e,0x9f,0xee,0x39,0x29,0x7f,0x87,0x72,0x11,0x99,0x2b,0x6e,0xe4,0x9d,0x02,
 107   0xf4,0x09,0x18,0xcb,0x1d,0x1b,0x9f,0x78,0xf9,0x47,0xc8,0x94,0x11,0x7f,0xc2,0xd3,
 108   0x42,0x92,0x13,0x59,0x10,0x36,0x1e,0x0d,0x39,0x02,0x40,0x54,0xeb,0x0b,0x62,0x54,
 109   0x46,0xda,0x27,0x4f,0x1f,0x4c,0x53,0x85,0x07,0x38,0x9e,0xe3,0x36,0x8d,0xeb,0x35,
 110   0x2b,0x45,0xe6,0xf1,0x92,0x12,0x48,0x33,0x61,0x9b,0x50,0x5e,0x0a,0x8c,0x8f,0x0b,
 111   0x8a,0xc4,0xc5,0x35,0xbb,0x77,0x5f,0xef,0x7c,0x6e,0x6c,0xbe,0x0b,0x11,0xae,0xfb,
 112   0xd0,0xa4,0xe3,0x98,0xae,0x5e,0xcc,0x07,0x42,0xf3,0xf5,0x02,0x41,0x00,0xb8,0x60,
 113   0x01,0x62,0x62,0xc8,0xbb,0x2c,0x90,0x47,0x7d,0xd1,0x5c,0x7b,0x76,0x9b,0xd4,0x68,
 114   0x41,0xe8,0xee,0x33,0x06,0xb8,0x4c,0x7f,0x5f,0xa1,0x98,0xcc,0xae,0x4e,0x8f,0x77,
 115   0x4d,0x3f,0xd3,0x44,0x31,0xf7,0x38,0x22,0x12,0x79,0x49,0x6a,0x91,0x27,0x42,0x80,
 116   0x6d,0x35,0x40,0xdc,0xc7,0xb1,0x2d,0x74,0xf8,0x8a,0xa5,0xcf,0x4a,0x49,0x02,0x41,
 117   0x00,0xd2,0x8c,0xb8,0x41,0xc2,0xf1,0x27,0x4a,0xe5,0xb8,0x12,0x52,0x0c,0xcc,0x1c,
 118   0x0b,0x6e,0xee,0xf9,0xef,0x7c,0xf6,0x83,0x35,0x3c,0xd8,0xc8,0xfa,0xb6,0xba,0xf0,
 119   0x3a,0xca,0x28,0xc7,0xfb,0xe6,0x71,0xea,0x53,0xd5,0x68,0xf2,0xe0,0x0b,0xcf,0x64,
 120   0x78,0x31,0xa7,0xbb,0xc4,0x5c,0xd4,0x9e,0x4b,0xe3,0x39,0x2f,0x6f,0x50,0x35,0x3a,
 121   0x7c,
 122 };
 123
 124 /**
 125  * And an associated self-signed certificate
 126 -----BEGIN CERTIFICATE-----
 127 MIIB9DCCAV2gAwIBAgIBADANBgkqhkiG9w0BAQUFADA3MQwwCgYDVQQDEwNzcnYx
 128 EjAQBgNVBAsTCWxvYWQtdGVzdDETMBEGA1UEChMKc3Ryb25nU3dhbjAeFw0wODEy
 129 MDgxODU4NDhaFw0xODEyMDYxODU4NDhaMDcxDDAKBgNVBAMTA3NydjESMBAGA1UE
 130 CxMJbG9hZC10ZXN0MRMwEQYDVQQKEwpzdHJvbmdTd2FuMIGfMA0GCSqGSIb3DQEB
 131 AQUAA4GNADCBiQKBgQDQXr7poAPYZLxmTCqR51STGRuk9Hc5SWtTcs6b2RzpnP8E
 132 VRLxJEVxOKE9Mw6n7mD1pNrupCpnpGRdLAV5VznTPhSQ6k7ppJJrxosRYg0pHTZq
 133 BUEC7nQFwAe10g8q0UnM1wa4lJzGxDH78d21cVweJgbkxAeyriS0jhNs7gO5nQID
 134 AQABoxAwDjAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBAF39Xedyk2wj
 135 qOcaaZ7ypb8RDlLvS0uaJMVtLtIhtb2weMMlgdmOnKXEYrJL2/mbp14Fhe+XYME9
 136 nZLAnmUnX8bQWCsQlajb7YGE8w6QDMwXUVgSXTMhRl+PRX2CMIUzU21h1EIx65Po
 137 CwMLbJ7vQqwPHXRitDmNkEOK9H+vRnDf
 138 -----END CERTIFICATE-----
 139
 140  */
 141 char cert[] = {
 142   0x30,0x82,0x01,0xf4,0x30,0x82,0x01,0x5d,0xa0,0x03,0x02,0x01,0x02,0x02,0x01,0x00,
 143   0x30,0x0d,0x06,0x09,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x01,0x01,0x05,0x05,0x00,0x30,
 144   0x37,0x31,0x0c,0x30,0x0a,0x06,0x03,0x55,0x04,0x03,0x13,0x03,0x73,0x72,0x76,0x31,
 145   0x12,0x30,0x10,0x06,0x03,0x55,0x04,0x0b,0x13,0x09,0x6c,0x6f,0x61,0x64,0x2d,0x74,
 146   0x65,0x73,0x74,0x31,0x13,0x30,0x11,0x06,0x03,0x55,0x04,0x0a,0x13,0x0a,0x73,0x74,
 147   0x72,0x6f,0x6e,0x67,0x53,0x77,0x61,0x6e,0x30,0x1e,0x17,0x0d,0x30,0x38,0x31,0x32,
 148   0x30,0x38,0x31,0x38,0x35,0x38,0x34,0x38,0x5a,0x17,0x0d,0x31,0x38,0x31,0x32,0x30,
 149   0x36,0x31,0x38,0x35,0x38,0x34,0x38,0x5a,0x30,0x37,0x31,0x0c,0x30,0x0a,0x06,0x03,
 150   0x55,0x04,0x03,0x13,0x03,0x73,0x72,0x76,0x31,0x12,0x30,0x10,0x06,0x03,0x55,0x04,
 151   0x0b,0x13,0x09,0x6c,0x6f,0x61,0x64,0x2d,0x74,0x65,0x73,0x74,0x31,0x13,0x30,0x11,
 152   0x06,0x03,0x55,0x04,0x0a,0x13,0x0a,0x73,0x74,0x72,0x6f,0x6e,0x67,0x53,0x77,0x61,
 153   0x6e,0x30,0x81,0x9f,0x30,0x0d,0x06,0x09,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x01,0x01,
 154   0x01,0x05,0x00,0x03,0x81,0x8d,0x00,0x30,0x81,0x89,0x02,0x81,0x81,0x00,0xd0,0x5e,
 155   0xbe,0xe9,0xa0,0x03,0xd8,0x64,0xbc,0x66,0x4c,0x2a,0x91,0xe7,0x54,0x93,0x19,0x1b,
 156   0xa4,0xf4,0x77,0x39,0x49,0x6b,0x53,0x72,0xce,0x9b,0xd9,0x1c,0xe9,0x9c,0xff,0x04,
 157   0x55,0x12,0xf1,0x24,0x45,0x71,0x38,0xa1,0x3d,0x33,0x0e,0xa7,0xee,0x60,0xf5,0xa4,
 158   0xda,0xee,0xa4,0x2a,0x67,0xa4,0x64,0x5d,0x2c,0x05,0x79,0x57,0x39,0xd3,0x3e,0x14,
 159   0x90,0xea,0x4e,0xe9,0xa4,0x92,0x6b,0xc6,0x8b,0x11,0x62,0x0d,0x29,0x1d,0x36,0x6a,
 160   0x05,0x41,0x02,0xee,0x74,0x05,0xc0,0x07,0xb5,0xd2,0x0f,0x2a,0xd1,0x49,0xcc,0xd7,
 161   0x06,0xb8,0x94,0x9c,0xc6,0xc4,0x31,0xfb,0xf1,0xdd,0xb5,0x71,0x5c,0x1e,0x26,0x06,
 162   0xe4,0xc4,0x07,0xb2,0xae,0x24,0xb4,0x8e,0x13,0x6c,0xee,0x03,0xb9,0x9d,0x02,0x03,
 163   0x01,0x00,0x01,0xa3,0x10,0x30,0x0e,0x30,0x0c,0x06,0x03,0x55,0x1d,0x13,0x04,0x05,
 164   0x30,0x03,0x01,0x01,0xff,0x30,0x0d,0x06,0x09,0x2a,0x86,0x48,0x86,0xf7,0x0d,0x01,
 165   0x01,0x05,0x05,0x00,0x03,0x81,0x81,0x00,0x5d,0xfd,0x5d,0xe7,0x72,0x93,0x6c,0x23,
 166   0xa8,0xe7,0x1a,0x69,0x9e,0xf2,0xa5,0xbf,0x11,0x0e,0x52,0xef,0x4b,0x4b,0x9a,0x24,
 167   0xc5,0x6d,0x2e,0xd2,0x21,0xb5,0xbd,0xb0,0x78,0xc3,0x25,0x81,0xd9,0x8e,0x9c,0xa5,
 168   0xc4,0x62,0xb2,0x4b,0xdb,0xf9,0x9b,0xa7,0x5e,0x05,0x85,0xef,0x97,0x60,0xc1,0x3d,
 169   0x9d,0x92,0xc0,0x9e,0x65,0x27,0x5f,0xc6,0xd0,0x58,0x2b,0x10,0x95,0xa8,0xdb,0xed,
 170   0x81,0x84,0xf3,0x0e,0x90,0x0c,0xcc,0x17,0x51,0x58,0x12,0x5d,0x33,0x21,0x46,0x5f,
 171   0x8f,0x45,0x7d,0x82,0x30,0x85,0x33,0x53,0x6d,0x61,0xd4,0x42,0x31,0xeb,0x93,0xe8,
 172   0x0b,0x03,0x0b,0x6c,0x9e,0xef,0x42,0xac,0x0f,0x1d,0x74,0x62,0xb4,0x39,0x8d,0x90,
 173   0x43,0x8a,0xf4,0x7f,0xaf,0x46,0x70,0xdf,
 174 };
 175
 176
 177 /**
 178  * A preshared key
 179  */
 180 static char psk[] = {
 181   0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08
 182 };
 183
 184 /**
 185  * Implements credential_set_t.create_private_enumerator
 186  */
 187 static enumerator_t* create_private_enumerator(private_load_tester_creds_t *this,
 188                                                         key_type_t type, identification_t *id)
 189 {
 190         if (this->private == NULL)
 191         {
 192                 return NULL;
 193         }
 194         if (type != KEY_ANY && type != KEY_RSA)
 195         {
 196                 return NULL;
 197         }
 198         if (id)
 199         {
 200                 identification_t *keyid;
 201
 202                 keyid = this->private->get_id(this->private, id->get_type(id));
 203                 if (!keyid || !keyid->equals(keyid, id))
 204                 {
 205                         return NULL;
 206                 }
 207         }
 208         return enumerator_create_single(this->private, NULL);
 209 }
 210
 211 /**
 212  * Implements credential_set_t.create_cert_enumerator
 213  */
 214 static enumerator_t* create_cert_enumerator(private_load_tester_creds_t *this,
 215                                                         certificate_type_t cert, key_type_t key,
 216                                                         identification_t *id, bool trusted)
 217 {
 218         certificate_t *peer_cert;
 219         public_key_t *peer_key, *ca_key;
 220         u_int32_t serial;
 221         time_t now;
 222         identification_t *keyid = NULL;
 223
 224         if (this->ca == NULL)
 225         {
 226                 return NULL;
 227         }
 228         if (cert != CERT_ANY && cert != CERT_X509)
 229         {
 230                 return NULL;
 231         }
 232         if (key != KEY_ANY && key != KEY_RSA)
 233         {
 234                 return NULL;
 235         }
 236         ca_key = this->ca->get_public_key(this->ca);
 237         if (ca_key && id)
 238         {
 239                 keyid = ca_key->get_id(ca_key, id->get_type(id));
 240         }
 241         if (!id || this->ca->has_subject(this->ca, id) ||
 242                 (keyid && id->equals(id, keyid)))
 243         {       /* ca certificate */
 244                 DESTROY_IF(ca_key);
 245                 return enumerator_create_single(this->ca, NULL);
 246         }
 247         DESTROY_IF(ca_key);
 248         if (!trusted)
 249         {
 250                 /* peer certificate, generate on demand */
 251                 serial = htonl(++this->serial);
 252                 now = time(NULL);
 253                 peer_key = this->private->get_public_key(this->private);
 254                 peer_cert = lib->creds->create(lib->creds, CRED_CERTIFICATE, CERT_X509,
 255                                                                         BUILD_SIGNING_KEY, this->private,
 256                                                                         BUILD_SIGNING_CERT, this->ca,
 257                                                                         BUILD_PUBLIC_KEY, peer_key,
 258                                                                         BUILD_SUBJECT, id,
 259                                                                         BUILD_NOT_BEFORE_TIME, now - 60 * 60 * 24,
 260                                                                         BUILD_NOT_AFTER_TIME, now + 60 * 60 * 24,
 261                                                                         BUILD_SERIAL, chunk_from_thing(serial),
 262                                                                         BUILD_END);
 263                 peer_key->destroy(peer_key);
 264                 if (peer_cert)
 265                 {
 266                         return enumerator_create_single(peer_cert, (void*)peer_cert->destroy);
 267                 }
 268         }
 269         return NULL;
 270 }
 271
 272 /**
 273  * Implements credential_set_t.create_shared_enumerator
 274  */
 275 static enumerator_t* create_shared_enumerator(private_load_tester_creds_t *this,
 276                                                         shared_key_type_t type, identification_t *me,
 277                                                         identification_t *other)
 278 {
 279         if (type != SHARED_ANY && type != SHARED_IKE)
 280         {
 281                 return NULL;
 282         }
 283         if (me && !this->id->matches(this->id, me))
 284         {
 285                 return NULL;
 286         }
 287         if (other && !this->id->matches(this->id, other))
 288         {
 289                 return NULL;
 290         }
 291         return enumerator_create_single(this->shared, NULL);
 292 }
 293
 294 /**
 295  * Implementation of load_tester_creds_t.destroy
 296  */
 297 static void destroy(private_load_tester_creds_t *this)
 298 {
 299         DESTROY_IF(this->private);
 300         DESTROY_IF(this->ca);
 301         this->shared->destroy(this->shared);
 302         this->id->destroy(this->id);
 303         free(this);
 304 }
 305
 306 load_tester_creds_t *load_tester_creds_create()
 307 {
 308         private_load_tester_creds_t *this = malloc_thing(private_load_tester_creds_t);
 309
 310         this->public.credential_set.create_shared_enumerator = (enumerator_t*(*)(credential_set_t*, shared_key_type_t, identification_t*, identification_t*))create_shared_enumerator;
 311         this->public.credential_set.create_private_enumerator = (enumerator_t*(*) (credential_set_t*, key_type_t, identification_t*))create_private_enumerator;
 312         this->public.credential_set.create_cert_enumerator = (enumerator_t*(*) (credential_set_t*,      certificate_type_t, key_type_t,identification_t *, bool))create_cert_enumerator;
 313         this->public.credential_set.create_cdp_enumerator  = (enumerator_t*(*) (credential_set_t *,certificate_type_t, identification_t *))return_null;
 314         this->public.credential_set.cache_cert = (void (*)(credential_set_t *, certificate_t *))nop;
 315         this->public.destroy = (void(*) (load_tester_creds_t*))destroy;
 316
 317         this->private = lib->creds->create(lib->creds, CRED_PRIVATE_KEY, KEY_RSA,
 318                                 BUILD_BLOB_ASN1_DER, chunk_create(private, sizeof(private)),
 319                                 BUILD_END);
 320
 321         this->ca = lib->creds->create(lib->creds, CRED_CERTIFICATE, CERT_X509,
 322                                 BUILD_BLOB_ASN1_DER, chunk_create(cert, sizeof(cert)),
 323                                 BUILD_X509_FLAG, X509_CA,
 324                                 BUILD_END);
 325
 326         this->shared = shared_key_create(SHARED_IKE,
 327                                                                          chunk_clone(chunk_create(psk, sizeof(psk))));
 328         this->id = identification_create_from_string("CN=*, OU=load-test, O=strongSwan");
 329         this->serial = 0;
 330         return &this->public;
 331 }
 332