… | |
… | |
18 | |
18 | |
19 | #ifndef VPE_PROTOCOL_H__ |
19 | #ifndef VPE_PROTOCOL_H__ |
20 | #define VPE_PROTOCOL_H__ |
20 | #define VPE_PROTOCOL_H__ |
21 | |
21 | |
22 | #include <netinet/in.h> |
22 | #include <netinet/in.h> |
23 | #include <netinet/ip.h> // for tos etc. |
|
|
24 | |
23 | |
25 | #include <openssl/evp.h> |
24 | #include <openssl/evp.h> |
26 | #include <openssl/rsa.h> |
25 | #include <openssl/rsa.h> |
27 | |
26 | |
28 | #include "conf.h" |
27 | #include "conf.h" |
29 | #include "iom.h" |
28 | #include "iom.h" |
30 | #include "util.h" |
29 | #include "util.h" |
|
|
30 | #include "sockinfo.h" |
31 | #include "device.h" |
31 | #include "device.h" |
32 | |
32 | #include "connection.h" |
33 | /* Protocol version. Different versions are incompatible, |
|
|
34 | incompatible version have different protocols. |
|
|
35 | */ |
|
|
36 | |
|
|
37 | #define PROTOCOL_MAJOR 2 |
|
|
38 | #define PROTOCOL_MINOR 0 |
|
|
39 | |
|
|
40 | struct vpn; |
|
|
41 | struct vpn_packet; |
|
|
42 | |
|
|
43 | typedef u8 rsachallenge[RSA_KEYLEN - RSA_OVERHEAD]; // challenge data |
|
|
44 | typedef u8 rsaencrdata[RSA_KEYLEN]; // encrypted challenge |
|
|
45 | |
|
|
46 | struct crypto_ctx; |
|
|
47 | |
|
|
48 | // a very simple fifo pkt-queue |
|
|
49 | class pkt_queue |
|
|
50 | { |
|
|
51 | tap_packet *queue[QUEUEDEPTH]; |
|
|
52 | int i, j; |
|
|
53 | |
|
|
54 | public: |
|
|
55 | |
|
|
56 | void put (tap_packet *p); |
|
|
57 | tap_packet *get (); |
|
|
58 | |
|
|
59 | pkt_queue (); |
|
|
60 | ~pkt_queue (); |
|
|
61 | }; |
|
|
62 | |
|
|
63 | enum auth_subtype { AUTH_INIT, AUTH_INITREPLY, AUTH_REPLY }; |
|
|
64 | |
|
|
65 | struct auth_packet; |
|
|
66 | |
|
|
67 | struct connection |
|
|
68 | { |
|
|
69 | conf_node *conf; |
|
|
70 | struct vpn *vpn; |
|
|
71 | u32 seqrand; |
|
|
72 | |
|
|
73 | SOCKADDR sa; |
|
|
74 | int retry_cnt; |
|
|
75 | |
|
|
76 | tstamp last_activity; // time of last packet received |
|
|
77 | |
|
|
78 | u32 oseqno; |
|
|
79 | sliding_window iseqno; |
|
|
80 | |
|
|
81 | pkt_queue queue; |
|
|
82 | |
|
|
83 | crypto_ctx *octx, *ictx; |
|
|
84 | |
|
|
85 | enum conf_node::connectmode connectmode; |
|
|
86 | |
|
|
87 | void reset_dstaddr (); |
|
|
88 | |
|
|
89 | void shutdown (); |
|
|
90 | void reset_connection (); |
|
|
91 | void establish_connection_cb (tstamp &ts); time_watcher establish_connection; |
|
|
92 | void rekey_cb (tstamp &ts); time_watcher rekey; // next rekying (actually current reset + reestablishing) |
|
|
93 | void keepalive_cb (tstamp &ts); time_watcher keepalive; // next keepalive probe |
|
|
94 | |
|
|
95 | void send_auth (auth_subtype subtype, SOCKADDR *sa, const rsachallenge *k = 0); |
|
|
96 | void send_reset (SOCKADDR *dsa); |
|
|
97 | void send_ping (SOCKADDR *dss, u8 pong = 0); |
|
|
98 | void send_data_packet (tap_packet *pkt, bool broadcast = false); |
|
|
99 | void inject_data_packet (tap_packet *pkt, bool broadcast = false); |
|
|
100 | void connect_request (int id); |
|
|
101 | |
|
|
102 | void recv_vpn_packet (vpn_packet *pkt, SOCKADDR *rsa); |
|
|
103 | |
|
|
104 | void script_node (); |
|
|
105 | const char *script_node_up (); |
|
|
106 | const char *script_node_down (); |
|
|
107 | |
|
|
108 | connection(struct vpn *vpn_); |
|
|
109 | ~connection (); |
|
|
110 | }; |
|
|
111 | |
33 | |
112 | struct vpn |
34 | struct vpn |
113 | { |
35 | { |
114 | int socket_fd; |
36 | int udpv4_fd; |
|
|
37 | int ipv4_fd; |
|
|
38 | |
115 | int events; |
39 | int events; |
116 | |
40 | |
117 | enum { |
41 | enum { |
118 | EVENT_RECONNECT = 1, |
42 | EVENT_RECONNECT = 1, |
119 | EVENT_SHUTDOWN = 2, |
43 | EVENT_SHUTDOWN = 2, |
… | |
… | |
126 | typedef vector<connection *> conns_vector; |
50 | typedef vector<connection *> conns_vector; |
127 | conns_vector conns; |
51 | conns_vector conns; |
128 | |
52 | |
129 | connection *find_router (); |
53 | connection *find_router (); |
130 | |
54 | |
131 | void send_vpn_packet (vpn_packet *pkt, SOCKADDR *sa, int tos = IPTOS_RELIABILITY); |
|
|
132 | void reconnect_all (); |
55 | void reconnect_all (); |
133 | void shutdown_all (); |
56 | void shutdown_all (); |
134 | void connect_request (int id); |
57 | void connect_request (int id); |
135 | |
58 | |
136 | void vpn_ev (short revents); io_watcher vpn_ev_watcher; |
59 | void tap_ev (short revents); io_watcher tap_ev_watcher; |
|
|
60 | void ipv4_ev (short revents); io_watcher ipv4_ev_watcher; |
137 | void udp_ev (short revents); io_watcher udp_ev_watcher; |
61 | void udpv4_ev (short revents); io_watcher udpv4_ev_watcher; |
|
|
62 | |
|
|
63 | void recv_vpn_packet (vpn_packet *pkt, const sockinfo &rsi); |
|
|
64 | |
|
|
65 | void send_udpv4_packet (vpn_packet *pkt, const sockinfo &si, int tos = IPTOS_RELIABILITY); |
|
|
66 | void send_ipv4_packet (vpn_packet *pkt, const sockinfo &si, int tos = IPTOS_RELIABILITY); |
138 | |
67 | |
139 | vpn (); |
68 | vpn (); |
140 | ~vpn (); |
69 | ~vpn (); |
141 | |
70 | |
142 | int setup (); |
71 | int setup (); |
143 | |
72 | |
|
|
73 | void dump_status (); |
|
|
74 | |
144 | const char *script_if_up (); |
75 | const char *script_if_up (int); |
145 | }; |
76 | }; |
146 | |
77 | |
147 | #endif |
78 | #endif |
148 | |
79 | |