ikev2: Use config value for sending of vendor IDs
[strongswan.git] / src / libcharon / sa / ikev2 / tasks / ike_vendor.c
1 /*
2 * Copyright (C) 2009 Martin Willi
3 * Hochschule fuer Technik Rapperswil
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13 * for more details.
14 */
15
16 /*
17 * Copyright (C) 2016 secunet Security Networks AG
18 * Copyright (C) 2016 Thomas Egerer
19 *
20 * Permission is hereby granted, free of charge, to any person obtaining a copy
21 * of this software and associated documentation files (the "Software"), to deal
22 * in the Software without restriction, including without limitation the rights
23 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
24 * copies of the Software, and to permit persons to whom the Software is
25 * furnished to do so, subject to the following conditions:
26 *
27 * The above copyright notice and this permission notice shall be included in
28 * all copies or substantial portions of the Software.
29 *
30 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
31 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
32 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
33 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
34 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
35 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
36 * THE SOFTWARE.
37 */
38
39 #include "ike_vendor.h"
40
41 #include <daemon.h>
42 #include <encoding/payloads/vendor_id_payload.h>
43
44 typedef struct private_ike_vendor_t private_ike_vendor_t;
45
46 /**
47 * Private data of an ike_vendor_t object.
48 */
49 struct private_ike_vendor_t {
50
51 /**
52 * Public ike_vendor_t interface.
53 */
54 ike_vendor_t public;
55
56 /**
57 * Associated IKE_SA
58 */
59 ike_sa_t *ike_sa;
60
61 /**
62 * Are we the inititator of this task
63 */
64 bool initiator;
65 };
66
67 /**
68 * Vendor ID database entry
69 */
70 typedef struct {
71 /* Description */
72 char *desc;
73 /* extension flag negotiated with vendor ID, if any */
74 ike_extension_t extension;
75 /* Value from strongswan.conf, whether to send vendor ID */
76 char *setting;
77 /* length of vendor ID string, 0 for NULL terminated */
78 int len;
79 /* vendor ID string */
80 char *id;
81 } vid_data_t;
82
83 /**
84 * Get the data of a vendor ID as a chunk
85 */
86 static chunk_t get_vid_data(vid_data_t *data)
87 {
88 return chunk_create(data->id, data->len ?: strlen(data->id));
89 }
90
91 /**
92 * IKEv2 Vendor ID database entry
93 */
94 static vid_data_t vids[] = {
95 /* strongSwan MD5("strongSwan") */
96 { "strongSwan", EXT_STRONGSWAN, "send_vendor_id", 16,
97 "\x88\x2f\xe5\x6d\x6f\xd2\x0d\xbc\x22\x51\x61\x3b\x2e\xbe\x5b\xeb"},
98 { "Cisco Delete Reason", 0, NULL, 0,
99 "CISCO-DELETE-REASON" },
100 { "Cisco Copyright (c) 2009", 0, NULL, 0,
101 "CISCO(COPYRIGHT)&Copyright (c) 2009 Cisco Systems, Inc." },
102 { "FRAGMENTATION", 0, NULL, 16,
103 "\x40\x48\xb7\xd5\x6e\xbc\xe8\x85\x25\xe7\xde\x7f\x00\xd6\xc2\xd3"},
104 { "MS NT5 ISAKMPOAKLEY v7", 0, NULL, 20,
105 "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x07"},
106 { "MS NT5 ISAKMPOAKLEY v8", 0, NULL, 20,
107 "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x08"},
108 { "MS NT5 ISAKMPOAKLEY v9", 0, NULL, 20,
109 "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x09"},
110 { "MS-Negotiation Discovery Capable", 0, NULL, 16,
111 "\xfb\x1d\xe3\xcd\xf3\x41\xb7\xea\x16\xb7\xe5\xbe\x08\x55\xf1\x20"},
112 { "Vid-Initial-Contact", 0, NULL, 16,
113 "\x26\x24\x4d\x38\xed\xdb\x61\xb3\x17\x2a\x36\xe3\xd0\xcf\xb8\x19"},
114 };
115
116 METHOD(task_t, build, status_t,
117 private_ike_vendor_t *this, message_t *message)
118 {
119 vendor_id_payload_t *vid;
120 bool send_vid;
121 int i;
122
123 for (i = 0; i < countof(vids); i++)
124 {
125 send_vid = FALSE;
126
127 if (vids[i].setting)
128 {
129 send_vid = lib->settings->get_bool(lib->settings, "%s.%s", send_vid,
130 lib->ns, vids[i].setting);
131 }
132 if (send_vid)
133 {
134 DBG2(DBG_IKE, "sending %s vendor ID", vids[i].desc);
135 vid = vendor_id_payload_create_data(PLV2_VENDOR_ID,
136 chunk_clone(get_vid_data(&vids[i])));
137 message->add_payload(message, &vid->payload_interface);
138 }
139 }
140
141 return this->initiator ? NEED_MORE : SUCCESS;
142 }
143
144 METHOD(task_t, process, status_t,
145 private_ike_vendor_t *this, message_t *message)
146 {
147 enumerator_t *enumerator;
148 payload_t *payload;
149 int i;
150
151 enumerator = message->create_payload_enumerator(message);
152 while (enumerator->enumerate(enumerator, &payload))
153 {
154 if (payload->get_type(payload) == PLV2_VENDOR_ID)
155 {
156 vendor_id_payload_t *vid;
157 chunk_t data;
158 bool found = FALSE;
159
160 vid = (vendor_id_payload_t*)payload;
161 data = vid->get_data(vid);
162
163 for (i = 0; i < countof(vids); i++)
164 {
165 if (chunk_equals(get_vid_data(&vids[i]), data))
166 {
167 DBG1(DBG_IKE, "received %s vendor ID", vids[i].desc);
168 if (vids[i].extension)
169 {
170 this->ike_sa->enable_extension(this->ike_sa,
171 vids[i].extension);
172 }
173 found = TRUE;
174 break;
175 }
176 }
177 if (!found)
178 {
179 DBG1(DBG_ENC, "received unknown vendor ID: %#B", &data);
180 }
181 }
182 }
183 enumerator->destroy(enumerator);
184
185 return this->initiator ? SUCCESS : NEED_MORE;
186 }
187
188 METHOD(task_t, migrate, void,
189 private_ike_vendor_t *this, ike_sa_t *ike_sa)
190 {
191 this->ike_sa = ike_sa;
192 }
193
194 METHOD(task_t, get_type, task_type_t,
195 private_ike_vendor_t *this)
196 {
197 return TASK_IKE_VENDOR;
198 }
199
200 METHOD(task_t, destroy, void,
201 private_ike_vendor_t *this)
202 {
203 free(this);
204 }
205
206 /**
207 * See header
208 */
209 ike_vendor_t *ike_vendor_create(ike_sa_t *ike_sa, bool initiator)
210 {
211 private_ike_vendor_t *this;
212
213 INIT(this,
214 .public = {
215 .task = {
216 .build = _build,
217 .process = _process,
218 .migrate = _migrate,
219 .get_type = _get_type,
220 .destroy = _destroy,
221 },
222 },
223 .initiator = initiator,
224 .ike_sa = ike_sa,
225 );
226
227 return &this->public;
228 }