src/libcharon/processing/jobs/migrate_job.c

   1 /*
   2  * Copyright (C) 2008 Andreas Steffen
   3  * Hochschule fuer Technik Rapperswil
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2 of the License, or (at your
   8  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  12  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  13  * for more details.
  14  */
  15
  16 #include "migrate_job.h"
  17
  18 #include <daemon.h>
  19
  20 #include <config/child_cfg.h>
  21
  22
  23 typedef struct private_migrate_job_t private_migrate_job_t;
  24
  25 /**
  26  * Private data of a migrate_job_t object.
  27  */
  28 struct private_migrate_job_t {
  29         /**
  30          * Public migrate_job_t interface.
  31          */
  32         migrate_job_t public;
  33
  34         /**
  35          * reqid of the CHILD_SA if it already exists
  36          */
  37         u_int32_t reqid;
  38
  39         /**
  40          * source traffic selector
  41          */
  42         traffic_selector_t *src_ts;
  43
  44         /**
  45          * destination traffic selector
  46          */
  47         traffic_selector_t *dst_ts;
  48
  49         /**
  50          * local host address to be used for IKE
  51          */
  52         host_t *local;
  53
  54         /**
  55          * remote host address to be used for IKE
  56          */
  57         host_t *remote;
  58 };
  59
  60 METHOD(job_t, destroy, void,
  61         private_migrate_job_t *this)
  62 {
  63         DESTROY_IF(this->src_ts);
  64         DESTROY_IF(this->dst_ts);
  65         DESTROY_IF(this->local);
  66         DESTROY_IF(this->remote);
  67         free(this);
  68 }
  69
  70 METHOD(job_t, execute, job_requeue_t,
  71         private_migrate_job_t *this)
  72 {
  73         ike_sa_t *ike_sa = NULL;
  74
  75         if (this->reqid)
  76         {
  77                 ike_sa = charon->ike_sa_manager->checkout_by_id(charon->ike_sa_manager,
  78                                                                                                                 this->reqid, TRUE);
  79         }
  80         if (ike_sa)
  81         {
  82                 enumerator_t *children, *enumerator;
  83                 child_sa_t *child_sa;
  84                 host_t *host;
  85                 linked_list_t *vips;
  86
  87                 children = ike_sa->create_child_sa_enumerator(ike_sa);
  88                 while (children->enumerate(children, (void**)&child_sa))
  89                 {
  90                         if (child_sa->get_reqid(child_sa) == this->reqid)
  91                         {
  92                                 break;
  93                         }
  94                 }
  95                 children->destroy(children);
  96                 DBG2(DBG_JOB, "found CHILD_SA with reqid {%d}", this->reqid);
  97
  98                 ike_sa->set_kmaddress(ike_sa, this->local, this->remote);
  99
 100                 host = this->local->clone(this->local);
 101                 host->set_port(host, charon->socket->get_port(charon->socket, FALSE));
 102                 ike_sa->set_my_host(ike_sa, host);
 103
 104                 host = this->remote->clone(this->remote);
 105                 host->set_port(host, IKEV2_UDP_PORT);
 106                 ike_sa->set_other_host(ike_sa, host);
 107
 108                 vips = linked_list_create();
 109                 enumerator = ike_sa->create_virtual_ip_enumerator(ike_sa, TRUE);
 110                 while (enumerator->enumerate(enumerator, &host))
 111                 {
 112                         vips->insert_last(vips, host);
 113                 }
 114                 enumerator->destroy(enumerator);
 115
 116                 if (child_sa->update(child_sa, this->local, this->remote, vips,
 117                                 ike_sa->has_condition(ike_sa, COND_NAT_ANY)) == NOT_SUPPORTED)
 118                 {
 119                         ike_sa->rekey_child_sa(ike_sa, child_sa->get_protocol(child_sa),
 120                                                                    child_sa->get_spi(child_sa, TRUE));
 121                 }
 122                 charon->ike_sa_manager->checkin(charon->ike_sa_manager, ike_sa);
 123                 vips->destroy(vips);
 124         }
 125         else
 126         {
 127                 DBG1(DBG_JOB, "no CHILD_SA found with reqid {%d}", this->reqid);
 128         }
 129         return JOB_REQUEUE_NONE;
 130 }
 131
 132 METHOD(job_t, get_priority, job_priority_t,
 133         private_migrate_job_t *this)
 134 {
 135         return JOB_PRIO_MEDIUM;
 136 }
 137
 138 /*
 139  * Described in header
 140  */
 141 migrate_job_t *migrate_job_create(u_int32_t reqid,
 142                                                                   traffic_selector_t *src_ts,
 143                                                                   traffic_selector_t *dst_ts,
 144                                                                   policy_dir_t dir,
 145                                                                   host_t *local, host_t *remote)
 146 {
 147         private_migrate_job_t *this;
 148
 149         INIT(this,
 150                 .public = {
 151                         .job_interface = {
 152                                 .execute = _execute,
 153                                 .get_priority = _get_priority,
 154                                 .destroy = _destroy,
 155                         },
 156                 },
 157                 .reqid = reqid,
 158                 .src_ts = (dir == POLICY_OUT) ? src_ts : dst_ts,
 159                 .dst_ts = (dir == POLICY_OUT) ? dst_ts : src_ts,
 160                 .local = local,
 161                 .remote = remote,
 162         );
 163
 164         return &this->public;
 165 }