./ike_aggressive.c: Merge with EOM 1.1

./ike_phase_1.h: Merge with EOM 1.1
./ike_aggressive.h: Merge with EOM 1.1

Let's get aggressive!

3 files changed, 255 insertions, 0 deletions

diff --git a/sbin/isakmpd/ike_aggressive.c b/sbin/isakmpd/ike_aggressive.c
new file mode 100644
index 00000000000..4a3daf3bb3d
--- /dev/null
+++ b/sbin/isakmpd/ike_aggressive.c
@@ -0,0 +1,153 @@
+/*	$Id: ike_aggressive.c,v 1.1 1999/04/19 19:59:53 niklas Exp $	*/
+
+/*
+ * Copyright (c) 1999 Niklas Hallqvist.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *	This product includes software developed by Ericsson Radio Systems.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This code was written under funding by Ericsson Radio Systems.
+ */
+
+#include <sys/types.h>
+#include <netinet/in.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "sysdep.h"
+
+#include "attribute.h"
+#include "conf.h"
+#include "constants.h"
+#include "crypto.h"
+#include "dh.h"
+#include "doi.h"
+#include "exchange.h"
+#include "hash.h"
+#include "ike_auth.h"
+#include "ike_aggressive.h"
+#include "ike_phase_1.h"
+#include "ipsec.h"
+#include "ipsec_doi.h"
+#include "isakmp.h"
+#include "log.h"
+#include "math_group.h"
+#include "message.h"
+#include "prf.h"
+#include "sa.h"
+#include "transport.h"
+#include "util.h"
+
+static int initiator_recv_SA_KE_NONCE_ID_AUTH (struct message *);
+static int initiator_send_SA_KE_NONCE_ID (struct message *);
+static int initiator_send_AUTH (struct message *);
+static int responder_recv_SA_KE_NONCE_ID (struct message *);
+static int responder_send_SA_KE_NONCE_ID_AUTH (struct message *);
+
+int (*ike_aggressive_initiator[]) (struct message *) = {
+  initiator_send_SA_KE_NONCE_ID,
+  initiator_recv_SA_KE_NONCE_ID_AUTH,
+  initiator_send_AUTH
+};
+
+int (*ike_aggressive_responder[]) (struct message *) = {
+  responder_recv_SA_KE_NONCE_ID,
+  responder_send_SA_KE_NONCE_ID_AUTH,
+  ike_phase_1_recv_AUTH
+};
+
+/* Offer a set of transforms to the responder in the MSG message.  */
+static int
+initiator_send_SA_KE_NONCE_ID (struct message *msg)
+{
+  if (ike_phase_1_initiator_send_SA (msg))
+    return -1;
+
+  if (ike_phase_1_initiator_send_KE_NONCE (msg))
+    return -1;
+
+  return ike_phase_1_send_ID (msg);
+}
+
+/* Figure out what transform the responder chose.  */
+static int
+initiator_recv_SA_KE_NONCE_ID_AUTH (struct message *msg)
+{
+  if (ike_phase_1_initiator_recv_SA (msg))
+    return -1;
+
+  if (ike_phase_1_initiator_recv_KE_NONCE (msg))
+    return -1;
+
+  return ike_phase_1_recv_ID_AUTH (msg);
+}
+
+static int
+initiator_send_AUTH (struct message *msg)
+{
+  msg->exchange->flags |= EXCHANGE_FLAG_ENCRYPT;
+
+  return ike_phase_1_send_AUTH (msg);
+}
+
+/*
+ * Accept a set of transforms offered by the initiator and chose one we can
+ * handle.  Also accept initiator's public DH value, nonce and ID.
+ */
+static int
+responder_recv_SA_KE_NONCE_ID (struct message *msg)
+{
+  if (ike_phase_1_responder_recv_SA (msg))
+    return -1;
+
+  if (ike_phase_1_recv_KE_NONCE (msg))
+    return -1;
+
+  return ike_phase_1_recv_ID (msg);
+}
+
+/*
+ * Reply with the transform we chose.  Send our public DH value and a nonce
+ * to the initiator.
+ */
+static int
+responder_send_SA_KE_NONCE_ID_AUTH (struct message *msg)
+{
+  /* Add the SA payload with the transform that was chosen.  */
+  if (ike_phase_1_responder_send_SA (msg))
+   return -1;
+
+  /* XXX Should we really just use the initiator's nonce size?  */
+  if (ike_phase_1_send_KE_NONCE (msg, msg->exchange->nonce_i_len))
+    return -1;
+
+  if (ike_phase_1_post_exchange_KE_NONCE (msg))
+    return -1;
+
+  return ike_phase_1_responder_send_ID_AUTH (msg);
+    return -1;
+}
diff --git a/sbin/isakmpd/ike_aggressive.h b/sbin/isakmpd/ike_aggressive.h
new file mode 100644
index 00000000000..15ba27e14c1
--- /dev/null
+++ b/sbin/isakmpd/ike_aggressive.h
@@ -0,0 +1,44 @@
+/*	$Id: ike_aggressive.h,v 1.1 1999/04/19 19:59:53 niklas Exp $	*/
+
+/*
+ * Copyright (c) 1999 Niklas Hallqvist.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *	This product includes software developed by Ericsson Radio Systems.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This code was written under funding by Ericsson Radio Systems.
+ */
+
+#ifndef _IKE_AGGRESSIVE_H_
+#define _IKE_AGGRESSIVE_H_
+
+struct message;
+
+extern int (*ike_aggressive_initiator[]) (struct message *msg);
+extern int (*ike_aggressive_responder[]) (struct message *msg);
+
+#endif /* _IKE_AGGRESSIVE_H_ */
diff --git a/sbin/isakmpd/ike_phase_1.h b/sbin/isakmpd/ike_phase_1.h
new file mode 100644
index 00000000000..f3df8b19d7b
--- /dev/null
+++ b/sbin/isakmpd/ike_phase_1.h
@@ -0,0 +1,58 @@
+/*	$Id: ike_phase_1.h,v 1.1 1999/04/19 19:59:53 niklas Exp $	*/
+
+/*
+ * Copyright (c) 1999 Niklas Hallqvist.  All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *	This product includes software developed by Ericsson Radio Systems.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This code was written under funding by Ericsson Radio Systems.
+ */
+
+#ifndef _IKE_PHASE_1_H_
+#define _IKE_PHASE_1_H_
+
+struct message;
+
+extern int ike_phase_1_initiator_recv_KE_NONCE (struct message *);
+extern int ike_phase_1_initiator_recv_SA (struct message *);
+extern int ike_phase_1_initiator_send_KE_NONCE (struct message *);
+extern int ike_phase_1_initiator_send_SA (struct message *);
+extern int ike_phase_1_post_exchange_KE_NONCE (struct message *);
+extern int ike_phase_1_recv_AUTH (struct message *);
+extern int ike_phase_1_recv_ID (struct message *);
+extern int ike_phase_1_recv_ID_AUTH (struct message *);
+extern int ike_phase_1_recv_KE_NONCE (struct message *);
+extern int ike_phase_1_responder_recv_SA (struct message *);
+extern int ike_phase_1_responder_send_SA (struct message *);
+extern int ike_phase_1_responder_send_ID_AUTH (struct message *);
+extern int ike_phase_1_send_AUTH (struct message *);
+extern int ike_phase_1_send_ID (struct message *);
+extern int ike_phase_1_send_ID_AUTH (struct message *);
+extern int ike_phase_1_send_KE_NONCE (struct message *, size_t);
+
+#endif /* _IKE_PHASE_1_H_ */