… | |
… | |
33 | struct vpn; |
33 | struct vpn; |
34 | |
34 | |
35 | // called after HUP etc. to (re-)initialize global data structures |
35 | // called after HUP etc. to (re-)initialize global data structures |
36 | void connection_init (); |
36 | void connection_init (); |
37 | |
37 | |
38 | struct rsaid { |
38 | struct rsaid |
|
|
39 | { |
39 | u8 id[RSA_IDLEN]; // the challenge id |
40 | u8 id[RSA_IDLEN]; // the challenge id |
40 | }; |
41 | }; |
41 | |
42 | |
42 | typedef rsaclear rsachallenge; // challenge data; |
43 | typedef rsaclear rsachallenge; // challenge data; |
43 | typedef rsacrypt rsaencrdata; // encrypted challenge |
44 | typedef rsacrypt rsaencrdata; // encrypted challenge |
… | |
… | |
59 | |
60 | |
60 | void hmac_gen (crypto_ctx * ctx); |
61 | void hmac_gen (crypto_ctx * ctx); |
61 | }; |
62 | }; |
62 | |
63 | |
63 | struct vpn_packet : hmac_packet |
64 | struct vpn_packet : hmac_packet |
|
|
65 | { |
|
|
66 | enum ptype |
64 | { |
67 | { |
65 | enum ptype |
|
|
66 | { |
|
|
67 | PT_RESET = 0, |
68 | PT_RESET = 0, |
68 | PT_DATA_UNCOMPRESSED, |
69 | PT_DATA_UNCOMPRESSED, |
69 | PT_DATA_COMPRESSED, |
70 | PT_DATA_COMPRESSED, |
70 | PT_PING, PT_PONG, // wasting namespace space? ;) |
71 | PT_PING, PT_PONG, // wasting namespace space? ;) |
71 | PT_AUTH_REQ, // authentification request |
72 | PT_AUTH_REQ, // authentification request |
72 | PT_AUTH_RES, // authentification response |
73 | PT_AUTH_RES, // authentification response |
73 | PT_CONNECT_REQ, // want other node to contact me |
74 | PT_CONNECT_REQ, // want other node to contact me |
74 | PT_CONNECT_INFO, // request connection to some node |
75 | PT_CONNECT_INFO, // request connection to some node |
75 | PT_DATA_BRIDGED, // uncompressed packet with foreign mac pot. larger than path mtu |
76 | PT_DATA_BRIDGED, // uncompressed packet with foreign mac pot. larger than path mtu |
76 | PT_MAX |
77 | PT_MAX |
77 | }; |
78 | }; |
78 | |
79 | |
79 | u8 type; |
80 | u8 type; |
80 | u8 srcdst, src1, dst1; |
81 | u8 srcdst, src1, dst1; |
81 | |
82 | |
82 | void set_hdr (ptype type_, unsigned int dst); |
83 | void set_hdr (ptype type_, unsigned int dst); |
83 | |
84 | |
84 | unsigned int src () const |
85 | unsigned int src () const |
85 | { |
86 | { |
86 | return src1 | ((srcdst >> 4) << 8); |
87 | return src1 | ((srcdst >> 4) << 8); |
87 | } |
88 | } |
88 | |
89 | |
89 | unsigned int dst () const |
90 | unsigned int dst () const |
90 | { |
91 | { |
91 | return dst1 | ((srcdst & 0xf) << 8); |
92 | return dst1 | ((srcdst & 0xf) << 8); |
92 | } |
93 | } |
93 | |
94 | |
94 | ptype typ () const |
95 | ptype typ () const |
95 | { |
96 | { |
96 | return (ptype) type; |
97 | return (ptype) type; |
97 | } |
|
|
98 | }; |
98 | } |
|
|
99 | }; |
99 | |
100 | |
100 | //////////////////////////////////////////////////////////////////////////////////////// |
101 | //////////////////////////////////////////////////////////////////////////////////////// |
101 | |
102 | |
102 | // a very simple fifo pkt-queue |
103 | // a very simple fifo pkt-queue |
103 | class pkt_queue |
104 | class pkt_queue |
104 | { |
105 | { |
105 | net_packet *queue[QUEUEDEPTH]; |
106 | net_packet *queue[QUEUEDEPTH]; |
106 | int i, j; |
107 | int i, j; |
107 | |
108 | |
108 | public: |
109 | public: |
109 | |
110 | |
110 | void put (net_packet *p); |
111 | void put (net_packet *p); |
111 | net_packet *get (); |
112 | net_packet *get (); |
112 | |
113 | |
113 | pkt_queue (); |
114 | pkt_queue (); |
114 | ~pkt_queue (); |
115 | ~pkt_queue (); |
115 | }; |
116 | }; |
116 | |
117 | |
117 | enum |
118 | enum |
118 | { |
119 | { |
119 | FEATURE_COMPRESSION = 0x01, |
120 | FEATURE_COMPRESSION = 0x01, |
120 | FEATURE_ROHC = 0x02, |
121 | FEATURE_ROHC = 0x02, |
121 | FEATURE_BRIDGING = 0x04, |
122 | FEATURE_BRIDGING = 0x04, |
122 | }; |
123 | }; |
123 | |
124 | |
124 | struct connection |
125 | struct connection |
125 | { |
126 | { |
126 | conf_node *conf; |
127 | conf_node *conf; |
127 | struct vpn *vpn; |
128 | struct vpn *vpn; |
128 | |
129 | |
129 | sockinfo si; // the current(!) destination ip to send packets to |
130 | sockinfo si; // the current(!) destination ip to send packets to |
130 | int retry_cnt; |
131 | int retry_cnt; |
131 | |
132 | |
132 | tstamp last_activity; // time of last packet received |
133 | tstamp last_activity; // time of last packet received |
133 | |
134 | |
134 | u32 oseqno; |
135 | u32 oseqno; |
135 | sliding_window iseqno; |
136 | sliding_window iseqno; |
136 | |
137 | |
137 | u8 protocol; |
138 | u8 protocol; |
138 | u8 features; |
139 | u8 features; |
139 | |
140 | |
140 | pkt_queue data_queue, vpn_queue; |
141 | pkt_queue data_queue, vpn_queue; |
141 | |
142 | |
142 | crypto_ctx *octx, *ictx; |
143 | crypto_ctx *octx, *ictx; |
143 | |
144 | |
144 | #if ENABLE_DNS |
145 | #if ENABLE_DNS |
145 | struct dns_connection *dns; |
146 | struct dns_connection *dns; |
146 | |
147 | |
147 | void dnsv4_reset_connection (); |
148 | void dnsv4_reset_connection (); |
148 | #endif |
149 | #endif |
149 | |
150 | |
150 | enum conf_node::connectmode connectmode; |
151 | enum conf_node::connectmode connectmode; |
151 | u8 prot_minor; // minor number of other side |
152 | u8 prot_minor; // minor number of other side |
152 | |
153 | |
153 | void reset_si (); |
154 | void reset_si (); |
154 | const sockinfo &forward_si (const sockinfo &si) const; |
155 | const sockinfo &forward_si (const sockinfo &si) const; |
155 | |
156 | |
156 | void shutdown (); |
157 | void shutdown (); |
157 | void connection_established (); |
158 | void connection_established (); |
158 | void reset_connection (); |
159 | void reset_connection (); |
159 | |
160 | |
160 | void establish_connection_cb (ev::timer &w, int revents); ev::timer establish_connection; |
161 | void establish_connection_cb (ev::timer &w, int revents); ev::timer establish_connection; |
161 | void rekey_cb (ev::timer &w, int revents); ev::timer rekey; // next rekying (actually current reset + reestablishing) |
162 | void rekey_cb (ev::timer &w, int revents); ev::timer rekey; // next rekying (actually current reset + reestablishing) |
162 | void keepalive_cb (ev::timer &w, int revents); ev::timer keepalive; // next keepalive probe |
163 | void keepalive_cb (ev::timer &w, int revents); ev::timer keepalive; // next keepalive probe |
163 | |
164 | |
164 | void send_connect_request (int id); |
165 | void send_connect_request (int id); |
165 | void send_auth_request (const sockinfo &si, bool initiate); |
166 | void send_auth_request (const sockinfo &si, bool initiate); |
166 | void send_auth_response (const sockinfo &si, const rsaid &id, const rsachallenge &chg); |
167 | void send_auth_response (const sockinfo &si, const rsaid &id, const rsachallenge &chg); |
167 | void send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols); |
168 | void send_connect_info (int rid, const sockinfo &rsi, u8 rprotocols); |
168 | void send_reset (const sockinfo &dsi); |
169 | void send_reset (const sockinfo &dsi); |
169 | void send_ping (const sockinfo &dsi, u8 pong = 0); |
170 | void send_ping (const sockinfo &dsi, u8 pong = 0); |
170 | void send_data_packet (tap_packet *pkt); |
171 | void send_data_packet (tap_packet *pkt); |
171 | |
172 | |
172 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
173 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
173 | void inject_vpn_packet (vpn_packet *pkt, int tos = 0); // for forwarding |
174 | void inject_vpn_packet (vpn_packet *pkt, int tos = 0); // for forwarding |
174 | |
175 | |
175 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
176 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
176 | void send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos = 0); |
177 | void send_vpn_packet (vpn_packet *pkt, const sockinfo &si, int tos = 0); |
177 | |
178 | |
178 | void script_init_env (const char *ext); |
179 | void script_init_env (const char *ext); |
179 | void script_init_connect_env (); |
180 | void script_init_connect_env (); |
180 | const char *script_node_up (); |
181 | const char *script_node_up (); |
181 | const char *script_node_down (); |
182 | const char *script_node_down (); |
182 | |
183 | |
183 | void dump_status (); |
184 | void dump_status (); |
184 | |
185 | |
185 | connection (struct vpn *vpn, conf_node *conf); |
186 | connection (struct vpn *vpn, conf_node *conf); |
186 | ~connection (); |
187 | ~connection (); |
187 | }; |
188 | }; |
188 | |
189 | |
189 | #endif |
190 | #endif |
190 | |
191 | |