session.h

Go to the documentation of this file.

/*
 *  session.h  -  session control structure
 *  
 *  EAP-IKEv2
 *
 *  This library implements ideas of draft-tschofenig-eap-ikev2-10.txt
 *  Internet-Draft. Version of the document that this library corresponds
 *  to you can find at
 *  http://tools.ietf.org/wg/eap/draft-tschofenig-eap-ikev2-10.txt.
 *
 *  This file is part of libeap-ikev2.
 *
 *  libeap-ikev2 is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  libeap-ikev2 is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with libeap-ikev2; if not, write to the Free Software
 *
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 *  Copyright (C) 2005-2006 Krzysztof Rzecki <krzysztof.rzecki@ccns.pl>      
 *  Copyright (C) 2005-2006 Rafal Mijal <rafal.mijal@ccns.pl>                
 *  Copyright (C) 2005-2006 Piotr Marnik <piotr.marnik@ccns.pl>              
 *  Copyright (C) 2005-2006 Pawel Matejski <pawel.matejski@ccns.pl>          
 *  Copyright (C) 2003      Udo Schilcher <udo.schilcher@edu.uni-klu.ac.at>
 *  Copyright (C) 2003      Thomas Hambrusch <thambrus@edu.uni-klu.ac.at>          
 *
 */

#ifndef __session_h
#define __session_h

#ifdef __cplusplus
extern "C" {
#endif

#include"common.h"

#include <openssl/dh.h>


#include"transforms.h"

// defines

#define IKEv2_STY_INITIATOR         1
#define IKEv2_STY_RESPONDER         2

// session status
typedef enum {
 IKEv2_SST_NORMAL=0,
 IKEv2_SST_FAILED,
 IKEv2_SST_ESTABLISHED,
 IKEv2_SST_REKEYING,
} IKEv2_SST;


// default option values

#define IKEv2_DEFAULT_DH_COUNTER_MAX 3
#define IKEv2_DEFAULT_DH_COUNTER_MAX_STR TOSTRING(IKEv2_DEFAULT_DH_COUNTER_MAX)

#define IKEv2_DEFAULT_MAX_FRAGMENT_SIZE 1398
#define IKEv2_DEFAULT_MAX_FRAGMENT_SIZE_STR TOSTRING(IKEv2_DEFAULT_MAX_FRAGMENT_SIZE)

#define IKEv2_DEFAULT_IDTYPE  IKEv2_IDT_KEY_ID
#define IKEv2_DEFAULT_IDTYPE_STR "KEY_ID"



#define RAW_FASTID_LEN 20
    
// structures


struct IKEv2Session
{
  uint32_t timestamp;          
  struct IKEv2Session *next;  

  int Type;                    
  
  uint64_t iSPI;               
  uint64_t rSPI;               
  uint32_t State;              
  uint32_t MsgID;              
  uint32_t recvMsgID;          

  uint32_t Status;             
  
  int WaitResponse;            
  uint32_t respMsgID;          

  struct Protocol *UsedTransforms; 
    
  DH *dh;                      
  uint8_t *DHKey;              
  uint32_t DHKeyLen;           
  uint32_t DHCounter;          
  BIGNUM *Ni;                  
  BIGNUM *Nr;                  
  
  uint8_t *fmsg;               
  uint32_t fmlen;              
  uint8_t *rmsg;               
  uint32_t rmlen;              
  int include_integ;           
  int expect_integ;            

  uint8_t *IDr;                
  int IDrLen;                  
  uint8_t *pwd;                
  uint16_t pwdlen;             

  int SK_ready;                
  uint8_t *SK_d;               
  uint8_t *SK_ai;              
  uint8_t *SK_ar;              
  uint8_t *SK_ei;              
  uint8_t *SK_er;              
  uint8_t *SK_pi;              
  uint8_t *SK_pr;              
  char *fastID;                


  uint8_t *fragdata;           
  uint32_t fdlen;              
  uint32_t fragment;           
  bool sendfrag;               

  //bool hasinteg;             ///< insert an integrity checksum?
  uint8_t *integkey;           
  uint32_t iklen;              
  uint32_t integtype;          

  uint8_t *ointegkey;          
  uint32_t oiklen;             

  uint8_t eapMsgID;            
  uint8_t *eapKeyData;         

  bool fFastReconnect;         
  bool fDHExchange;            
};


typedef struct ikev2_ctx
{
   uint32_t max_fragment_size;   
   struct IKEv2Session *SessionList;  
   struct Proposal *suppProp;    

   uint8_t *id;                  
   unsigned int idlen;           
   int idtype;                   
   int authtype;                 
   char *certfile;               
   char *crl_file;               
   char *trusted;                
   uint8_t *pwd;                 
   int pwdlen;                   
   char *pkfile;                 
   char *pkfile_pwd;             

   EVP_PKEY *rpk;                
   uint8_t *cert;                
   int certlen;                  
   int send_sk_idr;              
   
   uint32_t DHCounterMax;        
   uint8_t sendCertReq;          
   X509_STORE *x509_store;       
   uint8_t *CAsHashString;       
   uint32_t CAsHashStringLen;    
   struct sharedSecList *sslist; 
   bool enableFastReconnect;     
   bool enableFastDHEx;          
   uint32_t fastExpire;          
#ifdef HAVE_PTHREAD_H 
   pthread_mutex_t mutex;
#endif
} ikev2_ctx;
 

// function prototypes

struct IKEv2Session *NewSession( struct ikev2_ctx *i2, uint64_t iSPI, uint64_t rSPI, int Type );
struct IKEv2Session *FindISession( struct ikev2_ctx *i2, uint64_t iSPI );
struct IKEv2Session *FindRSession( struct ikev2_ctx *i2, uint64_t rSPI );
struct IKEv2Session *FindSession( struct ikev2_ctx *i2, uint64_t SPI );
struct IKEv2Session *FindSessionByFastid( struct ikev2_ctx *i2, const char* fastid);
void DeleteSession( struct ikev2_ctx *i2, struct IKEv2Session *s );
void ComputeSessionKeys( struct IKEv2Session *s );
void ComputeNewKeys( struct IKEv2Session *s,int dhex );
struct ikev2_ctx * Create_ikev2_ctx(void);
void Free_ikev2_ctx(struct ikev2_ctx *i2);
void FreeSession( struct IKEv2Session *s );
void FreeSessionList(struct IKEv2Session *s);
int FreeSessionIfExpired(struct ikev2_ctx *i2,uint32_t currentTime);

void DumpIKEv2SessionKeys(const struct IKEv2Session *s) ;
#ifdef __cplusplus
}
#endif

#endif

---

Project hosted by: