1 | /* |
1 | /* |
2 | connection.h -- header for connection.C |
2 | connection.h -- header for connection.C |
3 | Copyright (C) 2003 Marc Lehmann <pcg@goof.com> |
3 | Copyright (C) 2003-2005 Marc Lehmann <gvpe@schmorp.de> |
4 | |
4 | |
|
|
5 | This file is part of GVPE. |
|
|
6 | |
5 | This program is free software; you can redistribute it and/or modify |
7 | GVPE is free software; you can redistribute it and/or modify |
6 | it under the terms of the GNU General Public License as published by |
8 | it under the terms of the GNU General Public License as published by |
7 | the Free Software Foundation; either version 2 of the License, or |
9 | the Free Software Foundation; either version 2 of the License, or |
8 | (at your option) any later version. |
10 | (at your option) any later version. |
9 | |
11 | |
10 | This program is distributed in the hope that it will be useful, |
12 | This program is distributed in the hope that it will be useful, |
11 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
13 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
14 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
13 | GNU General Public License for more details. |
15 | GNU General Public License for more details. |
14 | |
16 | |
15 | You should have received a copy of the GNU General Public License |
17 | You should have received a copy of the GNU General Public License |
16 | along with this program; if not, write to the Free Software |
18 | along with gvpe; if not, write to the Free Software |
17 | Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
19 | Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA |
18 | */ |
20 | */ |
19 | |
21 | |
20 | #ifndef VPE_CONNECTION_H__ |
22 | #ifndef GVPE_CONNECTION_H__ |
21 | #define VPE_CONNECTION_H__ |
23 | #define GVPE_CONNECTION_H__ |
22 | |
24 | |
23 | #include <openssl/hmac.h> |
25 | #include <openssl/hmac.h> |
24 | |
26 | |
25 | #include "global.h" |
27 | #include "global.h" |
26 | #include "conf.h" |
28 | #include "conf.h" |
… | |
… | |
43 | |
45 | |
44 | //////////////////////////////////////////////////////////////////////////////////////// |
46 | //////////////////////////////////////////////////////////////////////////////////////// |
45 | |
47 | |
46 | struct crypto_ctx; |
48 | struct crypto_ctx; |
47 | |
49 | |
48 | struct hmac_packet:net_packet |
50 | struct hmac_packet : net_packet |
49 | { |
51 | { |
50 | u8 hmac[HMACLENGTH]; // each and every packet has a hmac field, but that is not (yet) checked everywhere |
52 | u8 hmac[HMACLENGTH]; // each and every packet has a hmac field, but that is not (yet) checked everywhere |
51 | |
53 | |
52 | void hmac_set (crypto_ctx * ctx); |
54 | void hmac_set (crypto_ctx * ctx); |
53 | bool hmac_chk (crypto_ctx * ctx); |
55 | bool hmac_chk (crypto_ctx * ctx); |
… | |
… | |
66 | PT_DATA_UNCOMPRESSED, |
68 | PT_DATA_UNCOMPRESSED, |
67 | PT_DATA_COMPRESSED, |
69 | PT_DATA_COMPRESSED, |
68 | PT_PING, PT_PONG, // wasting namespace space? ;) |
70 | PT_PING, PT_PONG, // wasting namespace space? ;) |
69 | PT_AUTH_REQ, // authentification request |
71 | PT_AUTH_REQ, // authentification request |
70 | PT_AUTH_RES, // authentification response |
72 | PT_AUTH_RES, // authentification response |
71 | PT_CONNECT_REQ, // want other host to contact me |
73 | PT_CONNECT_REQ, // want other node to contact me |
72 | PT_CONNECT_INFO, // request connection to some node |
74 | PT_CONNECT_INFO, // request connection to some node |
|
|
75 | PT_DATA_BRIDGED, // uncompressed packet with foreign mac pot. larger than path mtu |
73 | PT_MAX |
76 | PT_MAX |
74 | }; |
77 | }; |
75 | |
78 | |
76 | u8 type; |
79 | u8 type; |
77 | u8 srcdst, src1, dst1; |
80 | u8 srcdst, src1, dst1; |
… | |
… | |
109 | |
112 | |
110 | pkt_queue (); |
113 | pkt_queue (); |
111 | ~pkt_queue (); |
114 | ~pkt_queue (); |
112 | }; |
115 | }; |
113 | |
116 | |
|
|
117 | enum |
|
|
118 | { |
|
|
119 | FEATURE_COMPRESSION = 0x01, |
|
|
120 | FEATURE_ROHC = 0x02, |
|
|
121 | FEATURE_BRIDGING = 0x04, |
|
|
122 | }; |
|
|
123 | |
114 | struct connection |
124 | struct connection |
115 | { |
125 | { |
116 | conf_node *conf; |
126 | conf_node *conf; |
117 | struct vpn *vpn; |
127 | struct vpn *vpn; |
118 | |
128 | |
… | |
… | |
123 | |
133 | |
124 | u32 oseqno; |
134 | u32 oseqno; |
125 | sliding_window iseqno; |
135 | sliding_window iseqno; |
126 | |
136 | |
127 | u8 protocol; |
137 | u8 protocol; |
|
|
138 | u8 features; |
128 | |
139 | |
129 | pkt_queue data_queue, vpn_queue; |
140 | pkt_queue data_queue, vpn_queue; |
130 | |
141 | |
131 | crypto_ctx *octx, *ictx; |
142 | crypto_ctx *octx, *ictx; |
|
|
143 | |
|
|
144 | #if ENABLE_DNS |
|
|
145 | struct dns_connection *dns; |
|
|
146 | |
|
|
147 | void dnsv4_reset_connection (); |
|
|
148 | #endif |
132 | |
149 | |
133 | enum conf_node::connectmode connectmode; |
150 | enum conf_node::connectmode connectmode; |
134 | u8 prot_minor; // minor number of other side |
151 | u8 prot_minor; // minor number of other side |
135 | |
152 | |
136 | void reset_si (); |
153 | void reset_si (); |
… | |
… | |
138 | |
155 | |
139 | void shutdown (); |
156 | void shutdown (); |
140 | void connection_established (); |
157 | void connection_established (); |
141 | void reset_connection (); |
158 | void reset_connection (); |
142 | |
159 | |
143 | void establish_connection_cb (time_watcher &w); time_watcher establish_connection; |
160 | void establish_connection_cb (ev::timer &w, int revents); ev::timer establish_connection; |
144 | void rekey_cb (time_watcher &w); time_watcher rekey; // next rekying (actually current reset + reestablishing) |
161 | void rekey_cb (ev::timer &w, int revents); ev::timer rekey; // next rekying (actually current reset + reestablishing) |
145 | void keepalive_cb (time_watcher &w); time_watcher keepalive; // next keepalive probe |
162 | void keepalive_cb (ev::timer &w, int revents); ev::timer keepalive; // next keepalive probe |
146 | |
163 | |
147 | void send_connect_request (int id); |
164 | void send_connect_request (int id); |
148 | void send_auth_request (const sockinfo &si, bool initiate); |
165 | void send_auth_request (const sockinfo &si, bool initiate); |
149 | void send_auth_response (const sockinfo &si, const rsaid &id, const rsachallenge &chg); |
166 | void send_auth_response (const sockinfo &si, const rsaid &id, const rsachallenge &chg); |
150 | void send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols); |
167 | void send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols); |
… | |
… | |
153 | void send_data_packet (tap_packet *pkt); |
170 | void send_data_packet (tap_packet *pkt); |
154 | |
171 | |
155 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
172 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
156 | void inject_vpn_packet (vpn_packet *pkt, int tos = 0); // for forwarding |
173 | void inject_vpn_packet (vpn_packet *pkt, int tos = 0); // for forwarding |
157 | |
174 | |
|
|
175 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
158 | void send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos = 0); |
176 | void send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos = 0); |
159 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
|
|
160 | |
177 | |
|
|
178 | void script_init_env (const char *ext); |
161 | void script_node (); |
179 | void script_init_connect_env (); |
162 | const char *script_node_up (); |
180 | const char *script_node_up (); |
163 | const char *script_node_down (); |
181 | const char *script_node_down (); |
164 | |
182 | |
165 | void dump_status (); |
183 | void dump_status (); |
166 | |
184 | |
167 | connection(struct vpn *vpn_); |
185 | connection (struct vpn *vpn, conf_node *conf); |
168 | ~connection (); |
186 | ~connection (); |
169 | }; |
187 | }; |
170 | |
188 | |
171 | #endif |
189 | #endif |
172 | |
190 | |