ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/src/connection.C
(Generate patch)

Comparing gvpe/src/connection.C (file contents):
Revision 1.48 by pcg, Tue Mar 8 00:32:54 2005 UTC vs.
Revision 1.56 by pcg, Fri Jun 3 05:07:31 2005 UTC

14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details. 15 GNU General Public License for more details.
16 16
17 You should have received a copy of the GNU General Public License 17 You should have received a copy of the GNU General Public License
18 along with gvpe; if not, write to the Free Software 18 along with gvpe; if not, write to the Free Software
19 Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 19 Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20*/ 20*/
21 21
22#include "config.h" 22#include "config.h"
23 23
24#include <cassert> 24#include <cassert>
27 27
28#include <openssl/rand.h> 28#include <openssl/rand.h>
29#include <openssl/evp.h> 29#include <openssl/evp.h>
30#include <openssl/rsa.h> 30#include <openssl/rsa.h>
31#include <openssl/err.h> 31#include <openssl/err.h>
32
33#include "gettext.h"
34 32
35#include "conf.h" 33#include "conf.h"
36#include "slog.h" 34#include "slog.h"
37#include "device.h" 35#include "device.h"
38#include "vpn.h" 36#include "vpn.h"
97struct rsa_cache : list<rsa_entry> 95struct rsa_cache : list<rsa_entry>
98{ 96{
99 void cleaner_cb (time_watcher &w); time_watcher cleaner; 97 void cleaner_cb (time_watcher &w); time_watcher cleaner;
100 98
101 bool find (const rsaid &id, rsachallenge &chg) 99 bool find (const rsaid &id, rsachallenge &chg)
102 { 100 {
103 for (iterator i = begin (); i != end (); ++i) 101 for (iterator i = begin (); i != end (); ++i)
104 { 102 {
105 if (!memcmp (&id, &i->id, sizeof id) && i->expire > NOW) 103 if (!memcmp (&id, &i->id, sizeof id) && i->expire > NOW)
106 { 104 {
107 memcpy (&chg, &i->chg, sizeof chg); 105 memcpy (&chg, &i->chg, sizeof chg);
108 106
109 erase (i); 107 erase (i);
110 return true; 108 return true;
111 } 109 }
112 } 110 }
113 111
114 if (cleaner.at < NOW) 112 if (cleaner.at < NOW)
115 cleaner.start (NOW + RSA_TTL); 113 cleaner.start (NOW + RSA_TTL);
116 114
117 return false; 115 return false;
118 } 116 }
119 117
120 void gen (rsaid &id, rsachallenge &chg) 118 void gen (rsaid &id, rsachallenge &chg)
121 { 119 {
122 rsa_entry e; 120 rsa_entry e;
123 121
124 RAND_bytes ((unsigned char *)&id, sizeof id); 122 RAND_bytes ((unsigned char *)&id, sizeof id);
125 RAND_bytes ((unsigned char *)&chg, sizeof chg); 123 RAND_bytes ((unsigned char *)&chg, sizeof chg);
126 124
127 e.expire = NOW + RSA_TTL; 125 e.expire = NOW + RSA_TTL;
128 e.id = id; 126 e.id = id;
129 memcpy (&e.chg, &chg, sizeof chg); 127 memcpy (&e.chg, &chg, sizeof chg);
130 128
131 push_back (e); 129 push_back (e);
132 130
133 if (cleaner.at < NOW) 131 if (cleaner.at < NOW)
134 cleaner.start (NOW + RSA_TTL); 132 cleaner.start (NOW + RSA_TTL);
135 } 133 }
136 134
137 rsa_cache () 135 rsa_cache ()
138 : cleaner (this, &rsa_cache::cleaner_cb) 136 : cleaner (this, &rsa_cache::cleaner_cb)
139 { } 137 { }
140 138
141} rsa_cache; 139} rsa_cache;
142 140
143void rsa_cache::cleaner_cb (time_watcher &w) 141void rsa_cache::cleaner_cb (time_watcher &w)
144{ 142{
768 else 766 else
769 send_ping (dsi, 0); 767 send_ping (dsi, 0);
770 } 768 }
771 } 769 }
772 770
773 retry_int *= slow ? 3. : 0.7; 771 retry_int *= slow ? 8. : 0.7;
774 772
775 if (retry_int < conf->max_retry) 773 if (retry_int < conf->max_retry)
776 retry_cnt++; 774 retry_cnt++;
777 else 775 else
778 retry_int = conf->max_retry; 776 retry_int = conf->max_retry;
788 { 786 {
789 slog (L_INFO, _("%s(%s): connection lost"), 787 slog (L_INFO, _("%s(%s): connection lost"),
790 conf->nodename, (const char *)si); 788 conf->nodename, (const char *)si);
791 789
792 if (::conf.script_node_down) 790 if (::conf.script_node_down)
793 run_script (run_script_cb (this, &connection::script_node_down), false); 791 if (!run_script (run_script_cb (this, &connection::script_node_down), false))
792 slog (L_WARN, _("node-down command execution failed, continuing."));
794 } 793 }
795 794
796 delete ictx; ictx = 0; 795 delete ictx; ictx = 0;
797 delete octx; octx = 0; 796 delete octx; octx = 0;
798#if ENABLE_DNS 797#if ENABLE_DNS
849{ 848{
850 if (ictx && octx) 849 if (ictx && octx)
851 send_data_packet (pkt); 850 send_data_packet (pkt);
852 else 851 else
853 { 852 {
854 if (!broadcast)//DDDD 853 if (!broadcast)
855 data_queue.put (new tap_packet (*pkt)); 854 data_queue.put (new tap_packet (*pkt));
856 855
857 establish_connection (); 856 establish_connection ();
858 } 857 }
859} 858}
1019 slog (L_INFO, _("%s(%s): connection established, protocol version %d.%d"), 1018 slog (L_INFO, _("%s(%s): connection established, protocol version %d.%d"),
1020 conf->nodename, (const char *)rsi, 1019 conf->nodename, (const char *)rsi,
1021 p->prot_major, p->prot_minor); 1020 p->prot_major, p->prot_minor);
1022 1021
1023 if (::conf.script_node_up) 1022 if (::conf.script_node_up)
1024 run_script (run_script_cb (this, &connection::script_node_up), false); 1023 if (!run_script (run_script_cb (this, &connection::script_node_up), false))
1024 slog (L_WARN, _("node-up command execution failed, continuing."));
1025 1025
1026 break; 1026 break;
1027 } 1027 }
1028 else 1028 else
1029 slog (L_ERR, _("%s(%s): sent and received challenge do not match"), 1029 slog (L_ERR, _("%s(%s): sent and received challenge do not match"),
1063 { 1063 {
1064 vpn->tap->send (d); 1064 vpn->tap->send (d);
1065 1065
1066 if (si != rsi) 1066 if (si != rsi)
1067 { 1067 {
1068 // fast re-sync on connection changes, useful especially for tcp/ip 1068 // fast re-sync on source address changes, useful especially for tcp/ip
1069 si = rsi; 1069 si = rsi;
1070 1070
1071 slog (L_INFO, _("%s(%s): socket address changed to %s"), 1071 slog (L_INFO, _("%s(%s): socket address changed to %s"),
1072 conf->nodename, (const char *)si, (const char *)rsi); 1072 conf->nodename, (const char *)si, (const char *)rsi);
1073 } 1073 }
1169 send_vpn_packet (p, si); 1169 send_vpn_packet (p, si);
1170 1170
1171 delete p; 1171 delete p;
1172} 1172}
1173 1173
1174void connection::script_init_env (const char *ext)
1175{
1176 char *env;
1177 asprintf (&env, "IFUPDATA%s=%s", ext, conf->if_up_data); putenv (env);
1178 asprintf (&env, "NODENAME%s=%s", ext, conf->nodename); putenv (env);
1179 asprintf (&env, "MAC%s=%02x:%02x:%02x:%02x:%02x:%02x", ext,
1180 0xfe, 0xfd, 0x80, 0x00, conf->id >> 8,
1181 conf->id & 0xff); putenv (env);
1182}
1183
1174void connection::script_node () 1184void connection::script_init_connect_env ()
1175{ 1185{
1176 vpn->script_if_up (); 1186 vpn->script_init_env ();
1177 1187
1178 char *env; 1188 char *env;
1179 asprintf (&env, "DESTID=%d", conf->id); putenv (env); 1189 asprintf (&env, "DESTID=%d", conf->id); putenv (env);
1180 asprintf (&env, "DESTNODE=%s", conf->nodename); putenv (env); 1190 asprintf (&env, "DESTNODE=%s", conf->nodename); putenv (env);
1181 asprintf (&env, "DESTIP=%s", si.ntoa ()); putenv (env); 1191 asprintf (&env, "DESTIP=%s", si.ntoa ()); putenv (env);
1182 asprintf (&env, "DESTPORT=%d", ntohs (si.port)); putenv (env); 1192 asprintf (&env, "DESTPORT=%d", ntohs (si.port)); putenv (env);
1183} 1193}
1184 1194
1185const char *connection::script_node_up () 1195const char *connection::script_node_up ()
1186{ 1196{
1187 script_node (); 1197 script_init_connect_env ();
1188 1198
1189 putenv ("STATE=up"); 1199 putenv ("STATE=up");
1190 1200
1201 char *filename;
1202 asprintf (&filename,
1203 "%s/%s",
1204 confbase,
1191 return ::conf.script_node_up ? ::conf.script_node_up : "node-up"; 1205 ::conf.script_node_up ? ::conf.script_node_up : "node-up");
1206
1207 return filename;
1192} 1208}
1193 1209
1194const char *connection::script_node_down () 1210const char *connection::script_node_down ()
1195{ 1211{
1196 script_node (); 1212 script_init_connect_env ();
1197 1213
1198 putenv ("STATE=down"); 1214 putenv ("STATE=down");
1199 1215
1200 return ::conf.script_node_up ? ::conf.script_node_down : "node-down"; 1216 char *filename;
1217 asprintf (&filename,
1218 "%s/%s",
1219 confbase,
1220 ::conf.script_node_down ? ::conf.script_node_down : "node-down");
1221
1222 return filename;
1201} 1223}
1202 1224
1203connection::connection (struct vpn *vpn, conf_node *conf) 1225connection::connection (struct vpn *vpn, conf_node *conf)
1204: vpn(vpn), conf(conf) 1226: vpn(vpn), conf(conf)
1205, rekey (this, &connection::rekey_cb) 1227, rekey (this, &connection::rekey_cb)

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines