/* $OpenBSD: sysdep.c,v 1.11 2002/06/09 08:13:07 todd Exp $ */ /* * Copyright (c) 1998, 1999 Niklas Hallqvist. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. All advertising materials mentioning features or use of this software * must display the following acknowledgement: * This product includes software developed by Ericsson Radio Systems. * 4. The name of the author may not be used to endorse or promote products * derived from this software without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* * This code was written under funding by Ericsson Radio Systems. */ #include #include #include #include #include #include #include #include #include #include "sysdep.h" #ifdef NEED_SYSDEP_APP #include "app.h" #include "conf.h" #include "ipsec.h" #include "klips.h" #endif /* NEED_SYSDEP_APP */ #include "log.h" #include "sysdep.h" extern char *__progname; u_int32_t sysdep_random () { u_int32_t rndval; u_char sig[16]; MD5_CTX ctx; int fd, i; struct { struct timeval tv; u_int rnd[(128 - sizeof (struct timeval)) / sizeof (u_int)]; } rdat; fd = open ("/dev/urandom", O_RDONLY); if (fd != -1) { read (fd, rdat.rnd, sizeof(rdat.rnd)); close (fd); } MD5Init (&ctx); MD5Update (&ctx, (char *)&rdat, sizeof(rdat)); MD5Final (sig, &ctx); rndval = 0; for (i = 0; i < 4; i++) { u_int32_t *tmp = (u_int32_t *)&sig[i * 4]; rndval ^= *tmp; } return rndval; } char * sysdep_progname () { return __progname; } /* Return the length of the sockaddr struct. */ u_int8_t sysdep_sa_len (struct sockaddr *sa) { switch (sa->sa_family) { case AF_INET: return sizeof (struct sockaddr_in); case AF_INET6: return sizeof (struct sockaddr_in6); } log_print ("sysdep_sa_len: unknown sa family %d", sa->sa_family); return sizeof (struct sockaddr_in); } /* As regress/ use this file I protect the sysdep_app_* stuff like this. */ #ifdef NEED_SYSDEP_APP int sysdep_app_open () { return klips_open (); } void sysdep_app_handler (int fd) { } /* Check that the connection named NAME is active, or else make it active. */ void sysdep_connection_check (char *name) { klips_connection_check (name); } /* * Generate a SPI for protocol PROTO and the source/destination pair given by * SRC, SRCLEN, DST & DSTLEN. Stash the SPI size in SZ. */ u_int8_t * sysdep_ipsec_get_spi (size_t *sz, u_int8_t proto, struct sockaddr *src, struct sockaddr *dst, u_int32_t seq) { if (app_none) { *sz = IPSEC_SPI_SIZE; /* XXX should be random instead I think. */ return strdup ("\x12\x34\x56\x78"); } return klips_get_spi (sz, proto, src, dst, seq); } int sysdep_cleartext (int fd, int af) { return 0; } int sysdep_ipsec_delete_spi (struct sa *sa, struct proto *proto, int incoming) { return klips_delete_spi (sa, proto, incoming); } int sysdep_ipsec_enable_sa (struct sa *sa, struct sa *isakmp_sa) { return klips_enable_sa (sa, isakmp_sa); } int sysdep_ipsec_group_spis (struct sa *sa, struct proto *proto1, struct proto *proto2, int incoming) { return klips_group_spis (sa, proto1, proto2, incoming); } int sysdep_ipsec_set_spi (struct sa *sa, struct proto *proto, int incoming, struct sa *isakmp_sa) { return klips_set_spi (sa, proto, incoming, isakmp_sa); } #endif