missing references to daemon.h
[strongswan.git] / src / libcharon / plugins / eap_tnc / eap_tnc.c
1 /*
2 * Copyright (C) 2010 Andreas Steffen
3 * HSR Hochschule fuer Technik Rapperswil
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13 * for more details.
14 */
15
16 #include "eap_tnc.h"
17
18 #include <tnc/tnc.h>
19 #include <tnc/tnccs/tnccs_manager.h>
20 #include <tls_eap.h>
21 #include <debug.h>
22 #include <daemon.h>
23
24 typedef struct private_eap_tnc_t private_eap_tnc_t;
25
26 /**
27 * Private data of an eap_tnc_t object.
28 */
29 struct private_eap_tnc_t {
30
31 /**
32 * Public authenticator_t interface.
33 */
34 eap_tnc_t public;
35
36 /**
37 * TLS stack, wrapped by EAP helper
38 */
39 tls_eap_t *tls_eap;
40 };
41
42
43 /** Maximum number of EAP-TNC messages/fragments allowed */
44 #define MAX_MESSAGE_COUNT 10
45 /** Default size of a EAP-TNC fragment */
46 #define MAX_FRAGMENT_LEN 50000
47
48 METHOD(eap_method_t, initiate, status_t,
49 private_eap_tnc_t *this, eap_payload_t **out)
50 {
51 chunk_t data;
52
53 if (this->tls_eap->initiate(this->tls_eap, &data) == NEED_MORE)
54 {
55 *out = eap_payload_create_data(data);
56 free(data.ptr);
57 return NEED_MORE;
58 }
59 return FAILED;
60 }
61
62 METHOD(eap_method_t, process, status_t,
63 private_eap_tnc_t *this, eap_payload_t *in, eap_payload_t **out)
64 {
65 status_t status;
66 chunk_t data;
67
68 data = in->get_data(in);
69 status = this->tls_eap->process(this->tls_eap, data, &data);
70 if (status == NEED_MORE)
71 {
72 *out = eap_payload_create_data(data);
73 free(data.ptr);
74 }
75 return status;
76 }
77
78 METHOD(eap_method_t, get_type, eap_type_t,
79 private_eap_tnc_t *this, u_int32_t *vendor)
80 {
81 *vendor = 0;
82 return EAP_TNC;
83 }
84
85 METHOD(eap_method_t, get_msk, status_t,
86 private_eap_tnc_t *this, chunk_t *msk)
87 {
88 *msk = this->tls_eap->get_msk(this->tls_eap);
89 if (msk->len)
90 {
91 return SUCCESS;
92 }
93 return FAILED;
94 }
95
96 METHOD(eap_method_t, get_identifier, u_int8_t,
97 private_eap_tnc_t *this)
98 {
99 return this->tls_eap->get_identifier(this->tls_eap);
100 }
101
102 METHOD(eap_method_t, set_identifier, void,
103 private_eap_tnc_t *this, u_int8_t identifier)
104 {
105 this->tls_eap->set_identifier(this->tls_eap, identifier);
106 }
107
108 METHOD(eap_method_t, is_mutual, bool,
109 private_eap_tnc_t *this)
110 {
111 return FALSE;
112 }
113
114 METHOD(eap_method_t, destroy, void,
115 private_eap_tnc_t *this)
116 {
117 this->tls_eap->destroy(this->tls_eap);
118 free(this);
119 }
120
121 /**
122 * Generic private constructor
123 */
124 static eap_tnc_t *eap_tnc_create(identification_t *server,
125 identification_t *peer, bool is_server)
126 {
127 private_eap_tnc_t *this;
128 size_t frag_size;
129 int max_msg_count;
130 bool include_length;
131 char* protocol;
132 tnccs_type_t type;
133 tnccs_t *tnccs;
134
135 INIT(this,
136 .public = {
137 .eap_method = {
138 .initiate = _initiate,
139 .process = _process,
140 .get_type = _get_type,
141 .is_mutual = _is_mutual,
142 .get_msk = _get_msk,
143 .get_identifier = _get_identifier,
144 .set_identifier = _set_identifier,
145 .destroy = _destroy,
146 },
147 },
148 );
149
150 frag_size = lib->settings->get_int(lib->settings,
151 "%s.plugins.eap-tnc.fragment_size", MAX_FRAGMENT_LEN,
152 charon->name);
153 max_msg_count = lib->settings->get_int(lib->settings,
154 "%s.plugins.eap-tnc.max_message_count", MAX_MESSAGE_COUNT,
155 charon->name);
156 include_length = lib->settings->get_bool(lib->settings,
157 "%s.plugins.eap-tnc.include_length", TRUE, charon->name);
158 protocol = lib->settings->get_str(lib->settings,
159 "%s.plugins.eap-tnc.protocol", "tnccs-1.1", charon->name);
160 if (strcaseeq(protocol, "tnccs-2.0"))
161 {
162 type = TNCCS_2_0;
163 }
164 else if (strcaseeq(protocol, "tnccs-1.1"))
165 {
166 type = TNCCS_1_1;
167 }
168 else if (strcaseeq(protocol, "tnccs-dynamic") && is_server)
169 {
170 type = TNCCS_DYNAMIC;
171 }
172 else
173 {
174 DBG1(DBG_TNC, "TNCCS protocol '%s' not supported", protocol);
175 free(this);
176 return NULL;
177 }
178 tnccs = tnc->tnccs->create_instance(tnc->tnccs, type, is_server);
179 this->tls_eap = tls_eap_create(EAP_TNC, (tls_t*)tnccs, frag_size,
180 max_msg_count, include_length);
181 if (!this->tls_eap)
182 {
183 free(this);
184 return NULL;
185 }
186 return &this->public;
187 }
188
189 eap_tnc_t *eap_tnc_create_server(identification_t *server,
190 identification_t *peer)
191 {
192 return eap_tnc_create(server, peer, TRUE);
193 }
194
195 eap_tnc_t *eap_tnc_create_peer(identification_t *server,
196 identification_t *peer)
197 {
198 return eap_tnc_create(server, peer, FALSE);
199 }