Pass the CREATE_CHILD_SA initiator flag to the child_keys parameter
[strongswan.git] / src / libcharon / bus / listeners / listener.h
1 /*
2 * Copyright (C) 2009 Martin Willi
3 * Hochschule fuer Technik Rapperswil
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13 * for more details.
14 */
15
16 /**
17 * @defgroup listener listener
18 * @{ @ingroup listeners
19 */
20
21 #ifndef LISTENER_H_
22 #define LISTENER_H_
23
24 typedef struct listener_t listener_t;
25
26 #include <bus/bus.h>
27
28 /**
29 * Listener interface, listens to events if registered to the bus.
30 */
31 struct listener_t {
32
33 /**
34 * Log a debugging message.
35 *
36 * The implementing signal function returns TRUE to stay registered
37 * to the bus, or FALSE to unregister itself.
38 * Calling bus_t.log() inside of a registered listener is possible,
39 * but the bus does not invoke listeners recursively.
40 *
41 * @param group kind of the signal (up, down, rekeyed, ...)
42 * @param level verbosity level of the signal
43 * @param thread ID of the thread raised this signal
44 * @param ike_sa IKE_SA associated to the event
45 * @param format printf() style format string
46 * @param args vprintf() style va_list argument list
47 * @return TRUE to stay registered, FALSE to unregister
48 */
49 bool (*log)(listener_t *this, debug_t group, level_t level, int thread,
50 ike_sa_t *ike_sa, char* format, va_list args);
51
52 /**
53 * Hook called if a critical alert is risen.
54 *
55 * @param ike_sa IKE_SA associated to the alert, if any
56 * @param alert kind of alert
57 * @param ... alert specific argument list
58 * @return TRUE to stay registered, FALSE to unregister
59 */
60 bool (*alert)(listener_t *this, ike_sa_t *ike_sa,
61 alert_t alert, va_list args);
62
63 /**
64 * Handle state changes in an IKE_SA.
65 *
66 * @param ike_sa IKE_SA which changes its state
67 * @param state new IKE_SA state this IKE_SA changes to
68 * @return TRUE to stay registered, FALSE to unregister
69 */
70 bool (*ike_state_change)(listener_t *this, ike_sa_t *ike_sa,
71 ike_sa_state_t state);
72
73 /**
74 * Handle state changes in a CHILD_SA.
75 *
76 * @param ike_sa IKE_SA containing the affected CHILD_SA
77 * @param child_sa CHILD_SA which changes its state
78 * @param state new CHILD_SA state this CHILD_SA changes to
79 * @return TRUE to stay registered, FALSE to unregister
80 */
81 bool (*child_state_change)(listener_t *this, ike_sa_t *ike_sa,
82 child_sa_t *child_sa, child_sa_state_t state);
83
84 /**
85 * Hook called for received/sent messages of an IKE_SA.
86 *
87 * @param ike_sa IKE_SA sending/receving a message
88 * @param message message object
89 * @param incoming TRUE for incoming messages, FALSE for outgoing
90 * @return TRUE to stay registered, FALSE to unregister
91 */
92 bool (*message)(listener_t *this, ike_sa_t *ike_sa, message_t *message,
93 bool incoming);
94
95 /**
96 * Hook called with IKE_SA key material.
97 *
98 * @param ike_sa IKE_SA this keymat belongs to
99 * @param dh diffie hellman shared secret
100 * @param nonce_i initiators nonce
101 * @param nonce_r responders nonce
102 * @param rekey IKE_SA we are rekeying, if any
103 * @return TRUE to stay registered, FALSE to unregister
104 */
105 bool (*ike_keys)(listener_t *this, ike_sa_t *ike_sa, diffie_hellman_t *dh,
106 chunk_t nonce_i, chunk_t nonce_r, ike_sa_t *rekey);
107
108 /**
109 * Hook called with CHILD_SA key material.
110 *
111 * @param ike_sa IKE_SA the child sa belongs to
112 * @param child_sa CHILD_SA this keymat is used for
113 * @param initiator initiator of the CREATE_CHILD_SA exchange
114 * @param dh diffie hellman shared secret
115 * @param nonce_i initiators nonce
116 * @param nonce_r responders nonce
117 * @return TRUE to stay registered, FALSE to unregister
118 */
119 bool (*child_keys)(listener_t *this, ike_sa_t *ike_sa, child_sa_t *child_sa,
120 bool initiator, diffie_hellman_t *dh,
121 chunk_t nonce_i, chunk_t nonce_r);
122
123 /**
124 * Hook called if an IKE_SA gets up or down.
125 *
126 * @param ike_sa IKE_SA coming up/going down
127 * @param up TRUE for an up event, FALSE for a down event
128 * @return TRUE to stay registered, FALSE to unregister
129 */
130 bool (*ike_updown)(listener_t *this, ike_sa_t *ike_sa, bool up);
131
132 /**
133 * Hook called when an IKE_SA gets rekeyed.
134 *
135 * @param old rekeyed IKE_SA getting obsolete
136 * @param new new IKE_SA replacing old
137 * @return TRUE to stay registered, FALSE to unregister
138 */
139 bool (*ike_rekey)(listener_t *this, ike_sa_t *old, ike_sa_t *new);
140
141 /**
142 * Hook called when a CHILD_SA gets up or down.
143 *
144 * @param ike_sa IKE_SA containing the handled CHILD_SA
145 * @param child_sa CHILD_SA coming up/going down
146 * @param up TRUE for an up event, FALSE for a down event
147 * @return TRUE to stay registered, FALSE to unregister
148 */
149 bool (*child_updown)(listener_t *this, ike_sa_t *ike_sa,
150 child_sa_t *child_sa, bool up);
151
152 /**
153 * Hook called when an CHILD_SA gets rekeyed.
154 *
155 * @param ike_sa IKE_SA containing the rekeyed CHILD_SA
156 * @param old rekeyed CHILD_SA getting obsolete
157 * @param new new CHILD_SA replacing old
158 * @return TRUE to stay registered, FALSE to unregister
159 */
160 bool (*child_rekey)(listener_t *this, ike_sa_t *ike_sa,
161 child_sa_t *old, child_sa_t *new);
162
163 /**
164 * Hook called to invoke additional authorization rules.
165 *
166 * An authorization hook gets invoked several times: After each
167 * authentication round, the hook gets invoked with with final = FALSE.
168 * After authentication is complete and the peer configuration is selected,
169 * it is invoked again, but with final = TRUE.
170 *
171 * @param ike_sa IKE_SA to authorize
172 * @param final TRUE if this is the final hook invocation
173 * @param success set to TRUE to complete IKE_SA, FALSE abort
174 * @return TRUE to stay registered, FALSE to unregister
175 */
176 bool (*authorize)(listener_t *this, ike_sa_t *ike_sa,
177 bool final, bool *success);
178
179 /**
180 * CHILD_SA traffic selector narrowing hook.
181 *
182 * This hook is invoked for each CHILD_SA and allows plugins to modify
183 * the traffic selector list negotiated for this CHILD_SA.
184 *
185 * @param ike_sa IKE_SA the created CHILD_SA is created in
186 * @param child_sa CHILD_SA set up with these traffic selectors
187 * @param type type of hook getting invoked
188 * @param local list of local traffic selectors to narrow
189 * @param remote list of remote traffic selectors to narrow
190 */
191 bool (*narrow)(listener_t *this, ike_sa_t *ike_sa, child_sa_t *child_sa,
192 narrow_hook_t type, linked_list_t *local, linked_list_t *remote);
193 };
194
195 #endif /** LISTENER_H_ @}*/