… | |
… | |
17 | */ |
17 | */ |
18 | |
18 | |
19 | #ifndef VPE_CONNECTION_H__ |
19 | #ifndef VPE_CONNECTION_H__ |
20 | #define VPE_CONNECTION_H__ |
20 | #define VPE_CONNECTION_H__ |
21 | |
21 | |
22 | #include <netinet/ip.h> // for tos etc. |
|
|
23 | |
|
|
24 | #include <openssl/rand.h> |
|
|
25 | #include <openssl/hmac.h> |
22 | #include <openssl/hmac.h> |
26 | #include <openssl/evp.h> |
|
|
27 | #include <openssl/rsa.h> |
|
|
28 | #include <openssl/err.h> |
|
|
29 | |
23 | |
30 | #include "global.h" |
24 | #include "global.h" |
31 | #include "conf.h" |
25 | #include "conf.h" |
32 | #include "sockinfo.h" |
26 | #include "sockinfo.h" |
33 | #include "util.h" |
27 | #include "util.h" |
… | |
… | |
79 | }; |
73 | }; |
80 | |
74 | |
81 | u8 type; |
75 | u8 type; |
82 | u8 srcdst, src1, dst1; |
76 | u8 srcdst, src1, dst1; |
83 | |
77 | |
84 | void set_hdr (ptype type, unsigned int dst); |
78 | void set_hdr (ptype type_, unsigned int dst); |
85 | |
79 | |
86 | unsigned int src () const |
80 | unsigned int src () const |
87 | { |
81 | { |
88 | return src1 | ((srcdst >> 4) << 8); |
82 | return src1 | ((srcdst >> 4) << 8); |
89 | } |
83 | } |
… | |
… | |
102 | //////////////////////////////////////////////////////////////////////////////////////// |
96 | //////////////////////////////////////////////////////////////////////////////////////// |
103 | |
97 | |
104 | // a very simple fifo pkt-queue |
98 | // a very simple fifo pkt-queue |
105 | class pkt_queue |
99 | class pkt_queue |
106 | { |
100 | { |
107 | tap_packet *queue[QUEUEDEPTH]; |
101 | net_packet *queue[QUEUEDEPTH]; |
108 | int i, j; |
102 | int i, j; |
109 | |
103 | |
110 | public: |
104 | public: |
111 | |
105 | |
112 | void put (tap_packet *p); |
106 | void put (net_packet *p); |
113 | tap_packet *get (); |
107 | net_packet *get (); |
114 | |
108 | |
115 | pkt_queue (); |
109 | pkt_queue (); |
116 | ~pkt_queue (); |
110 | ~pkt_queue (); |
117 | }; |
111 | }; |
118 | |
112 | |
… | |
… | |
129 | u32 oseqno; |
123 | u32 oseqno; |
130 | sliding_window iseqno; |
124 | sliding_window iseqno; |
131 | |
125 | |
132 | u8 protocol; |
126 | u8 protocol; |
133 | |
127 | |
134 | pkt_queue queue; |
128 | pkt_queue data_queue, vpn_queue; |
135 | |
129 | |
136 | crypto_ctx *octx, *ictx; |
130 | crypto_ctx *octx, *ictx; |
137 | |
131 | |
138 | enum conf_node::connectmode connectmode; |
132 | enum conf_node::connectmode connectmode; |
139 | u8 prot_minor; // minor number of other side |
133 | u8 prot_minor; // minor number of other side |
140 | |
134 | |
141 | void reset_dstaddr (); |
135 | void reset_si (); |
|
|
136 | const sockinfo &forward_si (const sockinfo &si) const; |
142 | |
137 | |
143 | void shutdown (); |
138 | void shutdown (); |
|
|
139 | void connection_established (); |
144 | void reset_connection (); |
140 | void reset_connection (); |
145 | void establish_connection_cb (tstamp &ts); time_watcher establish_connection; |
|
|
146 | void rekey_cb (tstamp &ts); time_watcher rekey; // next rekying (actually current reset + reestablishing) |
|
|
147 | void keepalive_cb (tstamp &ts); time_watcher keepalive; // next keepalive probe |
|
|
148 | |
141 | |
|
|
142 | void establish_connection_cb (time_watcher &w); time_watcher establish_connection; |
|
|
143 | void rekey_cb (time_watcher &w); time_watcher rekey; // next rekying (actually current reset + reestablishing) |
|
|
144 | void keepalive_cb (time_watcher &w); time_watcher keepalive; // next keepalive probe |
|
|
145 | |
|
|
146 | void send_connect_request (int id); |
149 | void send_auth_request (const sockinfo &si, bool initiate); |
147 | void send_auth_request (const sockinfo &si, bool initiate); |
150 | void send_auth_response (const sockinfo &si, const rsaid &id, const rsachallenge &chg); |
148 | void send_auth_response (const sockinfo &si, const rsaid &id, const rsachallenge &chg); |
151 | void send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols); |
149 | void send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols); |
152 | void send_reset (const sockinfo &dsi); |
150 | void send_reset (const sockinfo &dsi); |
153 | void send_ping (const sockinfo &dsi, u8 pong = 0); |
151 | void send_ping (const sockinfo &dsi, u8 pong = 0); |
154 | void send_data_packet (tap_packet *pkt, bool broadcast = false); |
152 | void send_data_packet (tap_packet *pkt, bool broadcast = false); |
|
|
153 | |
155 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
154 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
156 | void connect_request (int id); |
155 | void inject_vpn_packet (vpn_packet *pkt, int tos = 0); // for forwarding |
157 | |
156 | |
158 | void send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos = IPTOS_RELIABILITY); |
157 | void send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos = 0); |
159 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
158 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
160 | |
159 | |
161 | void script_node (); |
160 | void script_node (); |
162 | const char *script_node_up (int); |
161 | const char *script_node_up (); |
163 | const char *script_node_down (int); |
162 | const char *script_node_down (); |
164 | |
163 | |
165 | void dump_status (); |
164 | void dump_status (); |
166 | |
165 | |
167 | connection(struct vpn *vpn_); |
166 | connection(struct vpn *vpn_); |
168 | ~connection (); |
167 | ~connection (); |