2 * Copyright (C) 2009 Martin Willi
3 * Hochschule fuer Technik Rapperswil
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
16 #include "ike_vendor.h"
19 #include <encoding/payloads/vendor_id_payload.h>
21 typedef struct private_ike_vendor_t private_ike_vendor_t
;
24 * Private data of an ike_vendor_t object.
26 struct private_ike_vendor_t
{
29 * Public ike_vendor_t interface.
39 * Are we the inititator of this task
45 * Vendor ID database entry
50 /* extension flag negotiated with vendor ID, if any */
51 ike_extension_t extension
;
52 /* length of vendor ID string, 0 for NULL terminated */
54 /* vendor ID string */
59 * Get the data of a vendor ID as a chunk
61 static chunk_t
get_vid_data(vid_data_t
*data
)
63 return chunk_create(data
->id
, data
->len
?: strlen(data
->id
));
67 * IKEv2 Vendor ID database entry
69 static vid_data_t vids
[] = {
70 /* strongSwan MD5("strongSwan") */
71 { "strongSwan", EXT_STRONGSWAN
, 16,
72 "\x88\x2f\xe5\x6d\x6f\xd2\x0d\xbc\x22\x51\x61\x3b\x2e\xbe\x5b\xeb"},
73 { "Cisco Delete Reason", 0, 0,
74 "CISCO-DELETE-REASON" },
75 { "Cisco Copyright (c) 2009", 0, 0,
76 "CISCO(COPYRIGHT)&Copyright (c) 2009 Cisco Systems, Inc." },
77 { "FRAGMENTATION", 0, 16,
78 "\x40\x48\xb7\xd5\x6e\xbc\xe8\x85\x25\xe7\xde\x7f\x00\xd6\xc2\xd3"},
79 { "MS NT5 ISAKMPOAKLEY v7", 0, 20,
80 "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x07"},
81 { "MS NT5 ISAKMPOAKLEY v8", 0, 20,
82 "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x08"},
83 { "MS NT5 ISAKMPOAKLEY v9", 0, 20,
84 "\x1e\x2b\x51\x69\x05\x99\x1c\x7d\x7c\x96\xfc\xbf\xb5\x87\xe4\x61\x00\x00\x00\x09"},
85 { "MS-Negotiation Discovery Capable", 0, 16,
86 "\xfb\x1d\xe3\xcd\xf3\x41\xb7\xea\x16\xb7\xe5\xbe\x08\x55\xf1\x20"},
87 { "Vid-Initial-Contact", 0, 16,
88 "\x26\x24\x4d\x38\xed\xdb\x61\xb3\x17\x2a\x36\xe3\xd0\xcf\xb8\x19"},
91 METHOD(task_t
, build
, status_t
,
92 private_ike_vendor_t
*this, message_t
*message
)
94 vendor_id_payload_t
*vid
;
98 strongswan
= lib
->settings
->get_bool(lib
->settings
,
99 "%s.send_vendor_id", FALSE
, lib
->ns
);
100 for (i
= 0; i
< countof(vids
); i
++)
102 if (vids
[i
].extension
== EXT_STRONGSWAN
&& strongswan
)
104 DBG2(DBG_IKE
, "sending %s vendor ID", vids
[i
].desc
);
105 vid
= vendor_id_payload_create_data(PLV2_VENDOR_ID
,
106 chunk_clone(get_vid_data(&vids
[i
])));
107 message
->add_payload(message
, &vid
->payload_interface
);
111 return this->initiator
? NEED_MORE
: SUCCESS
;
114 METHOD(task_t
, process
, status_t
,
115 private_ike_vendor_t
*this, message_t
*message
)
117 enumerator_t
*enumerator
;
121 enumerator
= message
->create_payload_enumerator(message
);
122 while (enumerator
->enumerate(enumerator
, &payload
))
124 if (payload
->get_type(payload
) == PLV2_VENDOR_ID
)
126 vendor_id_payload_t
*vid
;
130 vid
= (vendor_id_payload_t
*)payload
;
131 data
= vid
->get_data(vid
);
133 for (i
= 0; i
< countof(vids
); i
++)
135 if (chunk_equals(get_vid_data(&vids
[i
]), data
))
137 DBG1(DBG_IKE
, "received %s vendor ID", vids
[i
].desc
);
138 if (vids
[i
].extension
)
140 this->ike_sa
->enable_extension(this->ike_sa
,
149 DBG1(DBG_ENC
, "received unknown vendor ID: %#B", &data
);
153 enumerator
->destroy(enumerator
);
155 return this->initiator
? SUCCESS
: NEED_MORE
;
158 METHOD(task_t
, migrate
, void,
159 private_ike_vendor_t
*this, ike_sa_t
*ike_sa
)
161 this->ike_sa
= ike_sa
;
164 METHOD(task_t
, get_type
, task_type_t
,
165 private_ike_vendor_t
*this)
167 return TASK_IKE_VENDOR
;
170 METHOD(task_t
, destroy
, void,
171 private_ike_vendor_t
*this)
179 ike_vendor_t
*ike_vendor_create(ike_sa_t
*ike_sa
, bool initiator
)
181 private_ike_vendor_t
*this;
189 .get_type
= _get_type
,
193 .initiator
= initiator
,
197 return &this->public;