payload: Use common prefixes for all payload type identifiers
[strongswan.git] / src / libcharon / encoding / payloads / id_payload.c
index 317cbd6..a002a8f 100644 (file)
@@ -1,9 +1,8 @@
 /*
- * Copyright (C) 2005-2010 Martin Willi
+ * Copyright (C) 2005-2011 Martin Willi
  * Copyright (C) 2010 revosec AG
- * Copyright (C) 2007 Tobias Brunner
+ * Copyright (C) 2007-2011 Tobias Brunner
  * Copyright (C) 2005 Jan Hutter
- *
  * Hochschule fuer Technik Rapperswil
  *
  * This program is free software; you can redistribute it and/or modify it
@@ -82,7 +81,7 @@ struct private_id_payload_t {
        u_int16_t port;
 
        /**
-        * one of ID_INITIATOR, ID_RESPONDER and IDv1
+        * one of PLV2_ID_INITIATOR, PLV2_ID_RESPONDER, IDv1 and PLV1_NAT_OA
         */
        payload_type_t type;
 };
@@ -92,9 +91,9 @@ struct private_id_payload_t {
  */
 static encoding_rule_t encodings_v2[] = {
        /* 1 Byte next payload type, stored in the field next_payload */
-       { U_INT_8,                      offsetof(private_id_payload_t, next_payload)    },
+       { U_INT_8,                      offsetof(private_id_payload_t, next_payload)    },
        /* the critical bit */
-       { FLAG,                         offsetof(private_id_payload_t, critical)                },
+       { FLAG,                         offsetof(private_id_payload_t, critical)                },
        /* 7 Bit reserved bits */
        { RESERVED_BIT,         offsetof(private_id_payload_t, reserved_bit[0]) },
        { RESERVED_BIT,         offsetof(private_id_payload_t, reserved_bit[1]) },
@@ -104,7 +103,7 @@ static encoding_rule_t encodings_v2[] = {
        { RESERVED_BIT,         offsetof(private_id_payload_t, reserved_bit[5]) },
        { RESERVED_BIT,         offsetof(private_id_payload_t, reserved_bit[6]) },
        /* Length of the whole payload*/
-       { PAYLOAD_LENGTH,       offsetof(private_id_payload_t, payload_length)  },
+       { PAYLOAD_LENGTH,       offsetof(private_id_payload_t, payload_length)  },
        /* 1 Byte ID type*/
        { U_INT_8,                      offsetof(private_id_payload_t, id_type)                 },
        /* 3 reserved bytes */
@@ -166,6 +165,13 @@ METHOD(payload_t, verify, status_t,
 {
        bool bad_length = FALSE;
 
+       if ((this->type == PLV1_NAT_OA || this->type == PLV1_NAT_OA_DRAFT_00_03) &&
+               this->id_type != ID_IPV4_ADDR && this->id_type != ID_IPV6_ADDR)
+       {
+               DBG1(DBG_ENC, "invalid ID type %N for %N payload", id_type_names,
+                        this->id_type, payload_type_short_names, this->type);
+               return FAILED;
+       }
        switch (this->id_type)
        {
                case ID_IPV4_ADDR_RANGE:
@@ -189,7 +195,8 @@ METHOD(payload_t, verify, status_t,
 METHOD(payload_t, get_encoding_rules, int,
        private_id_payload_t *this, encoding_rule_t **rules)
 {
-       if (this->type == ID_V1)
+       if (this->type == PLV1_ID ||
+               this->type == PLV1_NAT_OA || this->type == PLV1_NAT_OA_DRAFT_00_03)
        {
                *rules = encodings_v1;
                return countof(encodings_v1);
@@ -264,6 +271,16 @@ static traffic_selector_t *get_ts_from_subnet(private_id_payload_t *this,
                                                                net, this->port, netmask, this->port ?: 65535);
 }
 
+/**
+ * Create a traffic selector from an IP ID
+ */
+static traffic_selector_t *get_ts_from_ip(private_id_payload_t *this,
+                                                                                 ts_type_t type)
+{
+       return traffic_selector_create_from_bytes(this->protocol_id, type,
+                               this->id_data, this->port, this->id_data, this->port ?: 65535);
+}
+
 METHOD(id_payload_t, get_ts, traffic_selector_t*,
        private_id_payload_t *this)
 {
@@ -293,12 +310,33 @@ METHOD(id_payload_t, get_ts, traffic_selector_t*,
                                return get_ts_from_range(this, TS_IPV6_ADDR_RANGE);
                        }
                        break;
+               case ID_IPV4_ADDR:
+                       if (this->id_data.len == 4)
+                       {
+                               return get_ts_from_ip(this, TS_IPV4_ADDR_RANGE);
+                       }
+                       break;
+               case ID_IPV6_ADDR:
+                       if (this->id_data.len == 16)
+                       {
+                               return get_ts_from_ip(this, TS_IPV6_ADDR_RANGE);
+                       }
+                       break;
                default:
                        break;
        }
        return NULL;
 }
 
+METHOD(id_payload_t, get_encoded, chunk_t,
+       private_id_payload_t *this)
+{
+       u_int16_t port = htons(this->port);
+       return chunk_cat("cccc", chunk_from_thing(this->id_type),
+                                        chunk_from_thing(this->protocol_id),
+                                        chunk_from_thing(port), this->id_data);
+}
+
 METHOD2(payload_t, id_payload_t, destroy, void,
        private_id_payload_t *this)
 {
@@ -326,10 +364,11 @@ id_payload_t *id_payload_create(payload_type_t type)
                                .destroy = _destroy,
                        },
                        .get_identification = _get_identification,
+                       .get_encoded = _get_encoded,
                        .get_ts = _get_ts,
                        .destroy = _destroy,
                },
-               .next_payload = NO_PAYLOAD,
+               .next_payload = PL_NONE,
                .payload_length = get_header_length(this),
                .type = type,
        );
@@ -361,9 +400,21 @@ id_payload_t *id_payload_create_from_ts(traffic_selector_t *ts)
        u_int8_t mask;
        host_t *net;
 
-       this = (private_id_payload_t*)id_payload_create(ID_V1);
+       this = (private_id_payload_t*)id_payload_create(PLV1_ID);
 
-       if (ts->to_subnet(ts, &net, &mask))
+       if (ts->is_host(ts, NULL))
+       {
+               if (ts->get_type(ts) == TS_IPV4_ADDR_RANGE)
+               {
+                       this->id_type = ID_IPV4_ADDR;
+               }
+               else
+               {
+                       this->id_type = ID_IPV6_ADDR;
+               }
+               this->id_data = chunk_clone(ts->get_from_address(ts));
+       }
+       else if (ts->to_subnet(ts, &net, &mask))
        {
                u_int8_t netmask[16], len, byte;
 
@@ -390,6 +441,7 @@ id_payload_t *id_payload_create_from_ts(traffic_selector_t *ts)
                }
                this->id_data = chunk_cat("cc", net->get_address(net),
                                                                  chunk_create(netmask, len));
+               net->destroy(net);
        }
        else
        {
@@ -403,12 +455,12 @@ id_payload_t *id_payload_create_from_ts(traffic_selector_t *ts)
                }
                this->id_data = chunk_cat("cc",
                                                        ts->get_from_address(ts), ts->get_to_address(ts));
+               net->destroy(net);
        }
        this->port = ts->get_from_port(ts);
        this->protocol_id = ts->get_protocol(ts);
        this->payload_length += this->id_data.len;
 
-       net->destroy(net);
-
        return &this->public;
 }
+