/* * Copyright 1997-2000 Niels Provos * All rights reserved. * * Parts derived from code by Angelos D. Keromytis, kermit@forthnet.gr * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * 3. All advertising materials mentioning features or use of this software * must display the following acknowledgement: * This product includes software developed by Niels Provos. * 4. The name of the author may not be used to endorse or promote products * derived from this software without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* * This is an experimental implementation of the Photuris Session Key Management * Protocol, as of draft-ietf-ipsec-photuris-06.txt. * * The usual disclaimers/non-guarantees etc. etc. apply. */ #ifndef lint static char rcsid[] = "$Id: api.c,v 1.4 2000/12/15 02:50:37 provos Exp $"; #endif #define _API_C_ #include #include #include #include #include #include #include #include #include #include "state.h" #include "photuris.h" #include "config.h" #include "api.h" #include "log.h" #include "buffer.h" #include "schedule.h" #include "server.h" #include "packet.h" /* * process_api: * process requests from user processes or kernel notify */ void process_api(int fd, int sendsock) { struct stateob *st; int sz, i; #ifdef DEBUG printf("Entering API.\n"); #endif bzero(buffer, BUFFER_SIZE); if ((sz = read(fd, buffer, BUFFER_SIZE)) == -1) log_fatal("read() in process_api()"); buffer[sz >= BUFFER_SIZE ? BUFFER_SIZE -1 : sz] = 0; if (!sz) return; /* Set up a new state object */ if ((st = state_new()) == NULL) { log_error("state_new() in process_api()"); return; } startup_parse(st, buffer); #ifndef DEBUG if (addresses != (char **) NULL && strlen(st->address)) for (i = 0; i < num_ifs; i++) { if (addresses[i] == (char *)NULL) continue; if (!strcmp(addresses[i], st->address)) { /* XXX Code to notify kernel of failure here */ log_print("discarded request to initiate KES with localhost"); state_value_reset(st); free(st); return; } } #endif startup_end(st); #ifdef DEBUG printf("API finished.\n"); #endif } int start_exchange(int sd, struct stateob *st, char *address, int port) { struct sockaddr_in sin; /* Now fill it in */ strncpy(st->address, address, 15); st->address[15] = '\0'; st->port = port; st->initiator = 1; /* Determine sender address before we invalidate buffer */ sin.sin_addr.s_addr = inet_addr(st->address); sin.sin_port = htons(st->port); sin.sin_family = AF_INET; packet_size = PACKET_BUFFER_SIZE; if (photuris_cookie_request(st, packet_buffer, &packet_size) == -1) { log_print("photuris_cookie_request() in start_exchange() " "for %s:%d", st->address, st->port); return -1; } /* Save the packets for later retransmits */ packet_save(st, packet_buffer, packet_size); if (sendto(sd, packet_buffer, packet_size, 0, (struct sockaddr *) &sin, sizeof(sin)) != packet_size) { /* XXX Code to notify kernel of failure */ log_error("sendto() in start_exchange() for %s:%d", st->address, st->port); return -1; } schedule_insert(TIMEOUT, retrans_timeout, st->icookie, COOKIE_SIZE); return 0; }