1 | /* |
1 | /* |
2 | connection.h -- header for connection.C |
2 | connection.h -- header for connection.C |
|
|
3 | Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de> |
3 | |
4 | |
|
|
5 | This file is part of GVPE. |
|
|
6 | |
4 | This program is free software; you can redistribute it and/or modify |
7 | GVPE is free software; you can redistribute it and/or modify |
5 | it under the terms of the GNU General Public License as published by |
8 | it under the terms of the GNU General Public License as published by |
6 | the Free Software Foundation; either version 2 of the License, or |
9 | the Free Software Foundation; either version 2 of the License, or |
7 | (at your option) any later version. |
10 | (at your option) any later version. |
8 | |
11 | |
9 | This program is distributed in the hope that it will be useful, |
12 | This program is distributed in the hope that it will be useful, |
10 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
13 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
11 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
14 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
12 | GNU General Public License for more details. |
15 | GNU General Public License for more details. |
13 | |
16 | |
14 | You should have received a copy of the GNU General Public License |
17 | You should have received a copy of the GNU General Public License |
15 | along with this program; if not, write to the Free Software |
18 | along with gvpe; if not, write to the Free Software |
16 | Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
19 | Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
17 | */ |
20 | */ |
18 | |
21 | |
19 | #ifndef VPE_CONNECTION_H__ |
22 | #ifndef VPE_CONNECTION_H__ |
20 | #define VPE_CONNECTION_H__ |
23 | #define VPE_CONNECTION_H__ |
… | |
… | |
34 | |
37 | |
35 | struct rsaid { |
38 | struct rsaid { |
36 | u8 id[RSA_IDLEN]; // the challenge id |
39 | u8 id[RSA_IDLEN]; // the challenge id |
37 | }; |
40 | }; |
38 | |
41 | |
39 | typedef u8 rsachallenge[RSA_KEYLEN - RSA_OVERHEAD]; // challenge data; |
42 | typedef rsaclear rsachallenge; // challenge data; |
40 | typedef u8 rsaencrdata[RSA_KEYLEN]; // encrypted challenge |
43 | typedef rsacrypt rsaencrdata; // encrypted challenge |
41 | typedef u8 rsaresponse[RSA_RESLEN]; // the encrypted ripemd160 hash |
44 | typedef u8 rsaresponse[RSA_RESLEN]; // the encrypted ripemd160 hash |
42 | |
45 | |
43 | //////////////////////////////////////////////////////////////////////////////////////// |
46 | //////////////////////////////////////////////////////////////////////////////////////// |
44 | |
47 | |
45 | struct crypto_ctx; |
48 | struct crypto_ctx; |
46 | |
49 | |
47 | struct hmac_packet:net_packet |
50 | struct hmac_packet : net_packet |
48 | { |
51 | { |
49 | u8 hmac[HMACLENGTH]; // each and every packet has a hmac field, but that is not (yet) checked everywhere |
52 | u8 hmac[HMACLENGTH]; // each and every packet has a hmac field, but that is not (yet) checked everywhere |
50 | |
53 | |
51 | void hmac_set (crypto_ctx * ctx); |
54 | void hmac_set (crypto_ctx * ctx); |
52 | bool hmac_chk (crypto_ctx * ctx); |
55 | bool hmac_chk (crypto_ctx * ctx); |
… | |
… | |
108 | |
111 | |
109 | pkt_queue (); |
112 | pkt_queue (); |
110 | ~pkt_queue (); |
113 | ~pkt_queue (); |
111 | }; |
114 | }; |
112 | |
115 | |
|
|
116 | enum |
|
|
117 | { |
|
|
118 | FEATURE_COMPRESSION = 0x01, |
|
|
119 | FEATURE_ROHC = 0x02, |
|
|
120 | }; |
|
|
121 | |
113 | struct connection |
122 | struct connection |
114 | { |
123 | { |
115 | conf_node *conf; |
124 | conf_node *conf; |
116 | struct vpn *vpn; |
125 | struct vpn *vpn; |
117 | |
126 | |
… | |
… | |
122 | |
131 | |
123 | u32 oseqno; |
132 | u32 oseqno; |
124 | sliding_window iseqno; |
133 | sliding_window iseqno; |
125 | |
134 | |
126 | u8 protocol; |
135 | u8 protocol; |
|
|
136 | u8 features; |
127 | |
137 | |
128 | pkt_queue data_queue, vpn_queue; |
138 | pkt_queue data_queue, vpn_queue; |
129 | |
139 | |
130 | crypto_ctx *octx, *ictx; |
140 | crypto_ctx *octx, *ictx; |
|
|
141 | |
|
|
142 | #if ENABLE_DNS |
|
|
143 | sockinfo dns_si; // forwarder |
|
|
144 | |
|
|
145 | vector<struct dns_rcv *> dns_rcvpq; int dns_rcvseq; // received packets |
|
|
146 | |
|
|
147 | struct byte_stream *dns_rcvdq; |
|
|
148 | struct byte_stream *dns_snddq; int dns_sndseq; //D |
|
|
149 | |
|
|
150 | void dnsv4_cb (time_watcher &w); time_watcher dnsv4_tw; |
|
|
151 | bool send_dnsv4_packet (vpn_packet *pkt, const sockinfo &si, int tos); |
|
|
152 | void dnsv4_receive_rep (struct dns_rcv *r); |
|
|
153 | #endif |
131 | |
154 | |
132 | enum conf_node::connectmode connectmode; |
155 | enum conf_node::connectmode connectmode; |
133 | u8 prot_minor; // minor number of other side |
156 | u8 prot_minor; // minor number of other side |
134 | |
157 | |
135 | void reset_si (); |
158 | void reset_si (); |
… | |
… | |
161 | const char *script_node_up (); |
184 | const char *script_node_up (); |
162 | const char *script_node_down (); |
185 | const char *script_node_down (); |
163 | |
186 | |
164 | void dump_status (); |
187 | void dump_status (); |
165 | |
188 | |
166 | connection(struct vpn *vpn_); |
189 | connection (struct vpn *vpn, conf_node *conf); |
167 | ~connection (); |
190 | ~connection (); |
168 | }; |
191 | }; |
169 | |
192 | |
170 | #endif |
193 | #endif |
171 | |
194 | |