diff options
Diffstat (limited to 'src/libcharon/plugins/tnc_imv')
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/Makefile.am | 26 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/Makefile.in | 701 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv.c | 426 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv.h | 60 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_bind_function.c | 246 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_manager.c | 530 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_manager.h | 32 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_plugin.c | 83 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_plugin.h | 42 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.c | 406 | ||||
| -rw-r--r-- | src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.h | 33 |
11 files changed, 0 insertions, 2585 deletions
diff --git a/src/libcharon/plugins/tnc_imv/Makefile.am b/src/libcharon/plugins/tnc_imv/Makefile.am deleted file mode 100644 index 49efe3be4..000000000 --- a/src/libcharon/plugins/tnc_imv/Makefile.am +++ /dev/null @@ -1,26 +0,0 @@ -AM_CPPFLAGS = \ - -I$(top_srcdir)/src/libstrongswan \ - -I$(top_srcdir)/src/libhydra \ - -I$(top_srcdir)/src/libcharon \ - -I$(top_srcdir)/src/libtncif \ - -I$(top_srcdir)/src/libtnccs \ - -I$(top_srcdir)/src/libtls - -AM_CFLAGS = \ - -rdynamic - -if MONOLITHIC -noinst_LTLIBRARIES = libstrongswan-tnc-imv.la -else -plugin_LTLIBRARIES = libstrongswan-tnc-imv.la -libstrongswan_tnc_imv_la_LIBADD = \ - $(top_builddir)/src/libtncif/libtncif.la \ - $(top_builddir)/src/libtnccs/libtnccs.la -endif - -libstrongswan_tnc_imv_la_SOURCES = \ - tnc_imv_plugin.h tnc_imv_plugin.c tnc_imv.h tnc_imv.c \ - tnc_imv_manager.h tnc_imv_manager.c tnc_imv_bind_function.c \ - tnc_imv_recommendations.h tnc_imv_recommendations.c - -libstrongswan_tnc_imv_la_LDFLAGS = -module -avoid-version diff --git a/src/libcharon/plugins/tnc_imv/Makefile.in b/src/libcharon/plugins/tnc_imv/Makefile.in deleted file mode 100644 index 118dd6d2d..000000000 --- a/src/libcharon/plugins/tnc_imv/Makefile.in +++ /dev/null @@ -1,701 +0,0 @@ -# Makefile.in generated by automake 1.11.6 from Makefile.am. -# @configure_input@ - -# Copyright (C) 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, -# 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 Free Software -# Foundation, Inc. -# This Makefile.in is free software; the Free Software Foundation -# gives unlimited permission to copy and/or distribute it, -# with or without modifications, as long as this notice is preserved. - -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY, to the extent permitted by law; without -# even the implied warranty of MERCHANTABILITY or FITNESS FOR A -# PARTICULAR PURPOSE. - -@SET_MAKE@ - -VPATH = @srcdir@ -am__make_dryrun = \ - { \ - am__dry=no; \ - case $$MAKEFLAGS in \ - *\\[\ \ ]*) \ - echo 'am--echo: ; @echo "AM" OK' | $(MAKE) -f - 2>/dev/null \ - | grep '^AM OK$$' >/dev/null || am__dry=yes;; \ - *) \ - for am__flg in $$MAKEFLAGS; do \ - case $$am__flg in \ - *=*|--*) ;; \ - *n*) am__dry=yes; break;; \ - esac; \ - done;; \ - esac; \ - test $$am__dry = yes; \ - } -pkgdatadir = $(datadir)/@PACKAGE@ -pkgincludedir = $(includedir)/@PACKAGE@ -pkglibdir = $(libdir)/@PACKAGE@ -pkglibexecdir = $(libexecdir)/@PACKAGE@ -am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd -install_sh_DATA = $(install_sh) -c -m 644 -install_sh_PROGRAM = $(install_sh) -c -install_sh_SCRIPT = $(install_sh) -c -INSTALL_HEADER = $(INSTALL_DATA) -transform = $(program_transform_name) -NORMAL_INSTALL = : -PRE_INSTALL = : -POST_INSTALL = : -NORMAL_UNINSTALL = : -PRE_UNINSTALL = : -POST_UNINSTALL = : -build_triplet = @build@ -host_triplet = @host@ -subdir = src/libcharon/plugins/tnc_imv -DIST_COMMON = $(srcdir)/Makefile.am $(srcdir)/Makefile.in -ACLOCAL_M4 = $(top_srcdir)/aclocal.m4 -am__aclocal_m4_deps = $(top_srcdir)/m4/config/libtool.m4 \ - $(top_srcdir)/m4/config/ltoptions.m4 \ - $(top_srcdir)/m4/config/ltsugar.m4 \ - $(top_srcdir)/m4/config/ltversion.m4 \ - $(top_srcdir)/m4/config/lt~obsolete.m4 \ - $(top_srcdir)/m4/macros/with.m4 \ - $(top_srcdir)/m4/macros/enable-disable.m4 \ - $(top_srcdir)/m4/macros/add-plugin.m4 \ - $(top_srcdir)/configure.ac -am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \ - $(ACLOCAL_M4) -mkinstalldirs = $(install_sh) -d -CONFIG_HEADER = $(top_builddir)/config.h -CONFIG_CLEAN_FILES = -CONFIG_CLEAN_VPATH_FILES = -am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`; -am__vpath_adj = case $$p in \ - $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \ - *) f=$$p;; \ - esac; -am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`; -am__install_max = 40 -am__nobase_strip_setup = \ - srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'` -am__nobase_strip = \ - for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||" -am__nobase_list = $(am__nobase_strip_setup); \ - for p in $$list; do echo "$$p $$p"; done | \ - sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \ - $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \ - if (++n[$$2] == $(am__install_max)) \ - { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \ - END { for (dir in files) print dir, files[dir] }' -am__base_list = \ - sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \ - sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g' -am__uninstall_files_from_dir = { \ - test -z "$$files" \ - || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \ - || { echo " ( cd '$$dir' && rm -f" $$files ")"; \ - $(am__cd) "$$dir" && rm -f $$files; }; \ - } -am__installdirs = "$(DESTDIR)$(plugindir)" -LTLIBRARIES = $(noinst_LTLIBRARIES) $(plugin_LTLIBRARIES) -@MONOLITHIC_FALSE@libstrongswan_tnc_imv_la_DEPENDENCIES = \ -@MONOLITHIC_FALSE@ $(top_builddir)/src/libtncif/libtncif.la \ -@MONOLITHIC_FALSE@ $(top_builddir)/src/libtnccs/libtnccs.la -am_libstrongswan_tnc_imv_la_OBJECTS = tnc_imv_plugin.lo tnc_imv.lo \ - tnc_imv_manager.lo tnc_imv_bind_function.lo \ - tnc_imv_recommendations.lo -libstrongswan_tnc_imv_la_OBJECTS = \ - $(am_libstrongswan_tnc_imv_la_OBJECTS) -AM_V_lt = $(am__v_lt_@AM_V@) -am__v_lt_ = $(am__v_lt_@AM_DEFAULT_V@) -am__v_lt_0 = --silent -libstrongswan_tnc_imv_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \ - $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \ - $(AM_CFLAGS) $(CFLAGS) $(libstrongswan_tnc_imv_la_LDFLAGS) \ - $(LDFLAGS) -o $@ -@MONOLITHIC_FALSE@am_libstrongswan_tnc_imv_la_rpath = -rpath \ -@MONOLITHIC_FALSE@ $(plugindir) -@MONOLITHIC_TRUE@am_libstrongswan_tnc_imv_la_rpath = -DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir) -depcomp = $(SHELL) $(top_srcdir)/depcomp -am__depfiles_maybe = depfiles -am__mv = mv -f -COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \ - $(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS) -LTCOMPILE = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ - $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) \ - $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \ - $(AM_CFLAGS) $(CFLAGS) -AM_V_CC = $(am__v_CC_@AM_V@) -am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@) -am__v_CC_0 = @echo " CC " $@; -AM_V_at = $(am__v_at_@AM_V@) -am__v_at_ = $(am__v_at_@AM_DEFAULT_V@) -am__v_at_0 = @ -CCLD = $(CC) -LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \ - $(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \ - $(AM_LDFLAGS) $(LDFLAGS) -o $@ -AM_V_CCLD = $(am__v_CCLD_@AM_V@) -am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@) -am__v_CCLD_0 = @echo " CCLD " $@; -AM_V_GEN = $(am__v_GEN_@AM_V@) -am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@) -am__v_GEN_0 = @echo " GEN " $@; -SOURCES = $(libstrongswan_tnc_imv_la_SOURCES) -DIST_SOURCES = $(libstrongswan_tnc_imv_la_SOURCES) -am__can_run_installinfo = \ - case $$AM_UPDATE_INFO_DIR in \ - n|no|NO) false;; \ - *) (install-info --version) >/dev/null 2>&1;; \ - esac -ETAGS = etags -CTAGS = ctags -DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST) -ACLOCAL = @ACLOCAL@ -ALLOCA = @ALLOCA@ -AMTAR = @AMTAR@ -AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@ -AR = @AR@ -AUTOCONF = @AUTOCONF@ -AUTOHEADER = @AUTOHEADER@ -AUTOMAKE = @AUTOMAKE@ -AWK = @AWK@ -BFDLIB = @BFDLIB@ -BTLIB = @BTLIB@ -CC = @CC@ -CCDEPMODE = @CCDEPMODE@ -CFLAGS = @CFLAGS@ -CHECK_CFLAGS = @CHECK_CFLAGS@ -CHECK_LIBS = @CHECK_LIBS@ -COVERAGE_CFLAGS = @COVERAGE_CFLAGS@ -COVERAGE_LDFLAGS = @COVERAGE_LDFLAGS@ -CPP = @CPP@ -CPPFLAGS = @CPPFLAGS@ -CYGPATH_W = @CYGPATH_W@ -DEFS = @DEFS@ -DEPDIR = @DEPDIR@ -DLLIB = @DLLIB@ -DLLTOOL = @DLLTOOL@ -DSYMUTIL = @DSYMUTIL@ -DUMPBIN = @DUMPBIN@ -ECHO_C = @ECHO_C@ -ECHO_N = @ECHO_N@ -ECHO_T = @ECHO_T@ -EGREP = @EGREP@ -EXEEXT = @EXEEXT@ -FGREP = @FGREP@ -GENHTML = @GENHTML@ -GPERF = @GPERF@ -GPRBUILD = @GPRBUILD@ -GREP = @GREP@ -INSTALL = @INSTALL@ -INSTALL_DATA = @INSTALL_DATA@ -INSTALL_PROGRAM = @INSTALL_PROGRAM@ -INSTALL_SCRIPT = @INSTALL_SCRIPT@ -INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@ -LCOV = @LCOV@ -LD = @LD@ -LDFLAGS = @LDFLAGS@ -LEX = @LEX@ -LEXLIB = @LEXLIB@ -LEX_OUTPUT_ROOT = @LEX_OUTPUT_ROOT@ -LIBOBJS = @LIBOBJS@ -LIBS = @LIBS@ -LIBTOOL = @LIBTOOL@ -LIPO = @LIPO@ -LN_S = @LN_S@ -LTLIBOBJS = @LTLIBOBJS@ -MAKEINFO = @MAKEINFO@ -MANIFEST_TOOL = @MANIFEST_TOOL@ -MKDIR_P = @MKDIR_P@ -MYSQLCFLAG = @MYSQLCFLAG@ -MYSQLCONFIG = @MYSQLCONFIG@ -MYSQLLIB = @MYSQLLIB@ -NM = @NM@ -NMEDIT = @NMEDIT@ -OBJDUMP = @OBJDUMP@ -OBJEXT = @OBJEXT@ -OTOOL = @OTOOL@ -OTOOL64 = @OTOOL64@ -PACKAGE = @PACKAGE@ -PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@ -PACKAGE_NAME = @PACKAGE_NAME@ -PACKAGE_STRING = @PACKAGE_STRING@ -PACKAGE_TARNAME = @PACKAGE_TARNAME@ -PACKAGE_URL = @PACKAGE_URL@ -PACKAGE_VERSION = @PACKAGE_VERSION@ -PATH_SEPARATOR = @PATH_SEPARATOR@ -PERL = @PERL@ -PKG_CONFIG = @PKG_CONFIG@ -PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@ -PKG_CONFIG_PATH = @PKG_CONFIG_PATH@ -PTHREADLIB = @PTHREADLIB@ -RANLIB = @RANLIB@ -RTLIB = @RTLIB@ -RUBY = @RUBY@ -RUBYINCLUDE = @RUBYINCLUDE@ -RUBYLIB = @RUBYLIB@ -SED = @SED@ -SET_MAKE = @SET_MAKE@ -SHELL = @SHELL@ -SOCKLIB = @SOCKLIB@ -STRIP = @STRIP@ -UNWINDLIB = @UNWINDLIB@ -VERSION = @VERSION@ -YACC = @YACC@ -YFLAGS = @YFLAGS@ -abs_builddir = @abs_builddir@ -abs_srcdir = @abs_srcdir@ -abs_top_builddir = @abs_top_builddir@ -abs_top_srcdir = @abs_top_srcdir@ -ac_ct_AR = @ac_ct_AR@ -ac_ct_CC = @ac_ct_CC@ -ac_ct_DUMPBIN = @ac_ct_DUMPBIN@ -am__include = @am__include@ -am__leading_dot = @am__leading_dot@ -am__quote = @am__quote@ -am__tar = @am__tar@ -am__untar = @am__untar@ -attest_plugins = @attest_plugins@ -bindir = @bindir@ -build = @build@ -build_alias = @build_alias@ -build_cpu = @build_cpu@ -build_os = @build_os@ -build_vendor = @build_vendor@ -builddir = @builddir@ -c_plugins = @c_plugins@ -charon_natt_port = @charon_natt_port@ -charon_plugins = @charon_plugins@ -charon_udp_port = @charon_udp_port@ -clearsilver_LIBS = @clearsilver_LIBS@ -cmd_plugins = @cmd_plugins@ -datadir = @datadir@ -datarootdir = @datarootdir@ -dbusservicedir = @dbusservicedir@ -dev_headers = @dev_headers@ -docdir = @docdir@ -dvidir = @dvidir@ -exec_prefix = @exec_prefix@ -fips_mode = @fips_mode@ -gtk_CFLAGS = @gtk_CFLAGS@ -gtk_LIBS = @gtk_LIBS@ -h_plugins = @h_plugins@ -host = @host@ -host_alias = @host_alias@ -host_cpu = @host_cpu@ -host_os = @host_os@ -host_vendor = @host_vendor@ -htmldir = @htmldir@ -imcvdir = @imcvdir@ -includedir = @includedir@ -infodir = @infodir@ -install_sh = @install_sh@ -ipsec_script = @ipsec_script@ -ipsec_script_upper = @ipsec_script_upper@ -ipsecdir = @ipsecdir@ -ipsecgroup = @ipsecgroup@ -ipseclibdir = @ipseclibdir@ -ipsecuser = @ipsecuser@ -libdir = @libdir@ -libexecdir = @libexecdir@ -linux_headers = @linux_headers@ -localedir = @localedir@ -localstatedir = @localstatedir@ -maemo_CFLAGS = @maemo_CFLAGS@ -maemo_LIBS = @maemo_LIBS@ -manager_plugins = @manager_plugins@ -mandir = @mandir@ -medsrv_plugins = @medsrv_plugins@ -mkdir_p = @mkdir_p@ -nm_CFLAGS = @nm_CFLAGS@ -nm_LIBS = @nm_LIBS@ -nm_ca_dir = @nm_ca_dir@ -nm_plugins = @nm_plugins@ -oldincludedir = @oldincludedir@ -openac_plugins = @openac_plugins@ -pcsclite_CFLAGS = @pcsclite_CFLAGS@ -pcsclite_LIBS = @pcsclite_LIBS@ -pdfdir = @pdfdir@ -piddir = @piddir@ -pki_plugins = @pki_plugins@ -plugindir = @plugindir@ -pool_plugins = @pool_plugins@ -prefix = @prefix@ -program_transform_name = @program_transform_name@ -psdir = @psdir@ -random_device = @random_device@ -resolv_conf = @resolv_conf@ -routing_table = @routing_table@ -routing_table_prio = @routing_table_prio@ -s_plugins = @s_plugins@ -sbindir = @sbindir@ -scepclient_plugins = @scepclient_plugins@ -scripts_plugins = @scripts_plugins@ -sharedstatedir = @sharedstatedir@ -soup_CFLAGS = @soup_CFLAGS@ -soup_LIBS = @soup_LIBS@ -srcdir = @srcdir@ -starter_plugins = @starter_plugins@ -strongswan_conf = @strongswan_conf@ -sysconfdir = @sysconfdir@ -systemdsystemunitdir = @systemdsystemunitdir@ -target_alias = @target_alias@ -top_build_prefix = @top_build_prefix@ -top_builddir = @top_builddir@ -top_srcdir = @top_srcdir@ -urandom_device = @urandom_device@ -xml_CFLAGS = @xml_CFLAGS@ -xml_LIBS = @xml_LIBS@ -AM_CPPFLAGS = \ - -I$(top_srcdir)/src/libstrongswan \ - -I$(top_srcdir)/src/libhydra \ - -I$(top_srcdir)/src/libcharon \ - -I$(top_srcdir)/src/libtncif \ - -I$(top_srcdir)/src/libtnccs \ - -I$(top_srcdir)/src/libtls - -AM_CFLAGS = \ - -rdynamic - -@MONOLITHIC_TRUE@noinst_LTLIBRARIES = libstrongswan-tnc-imv.la -@MONOLITHIC_FALSE@plugin_LTLIBRARIES = libstrongswan-tnc-imv.la -@MONOLITHIC_FALSE@libstrongswan_tnc_imv_la_LIBADD = \ -@MONOLITHIC_FALSE@ $(top_builddir)/src/libtncif/libtncif.la \ -@MONOLITHIC_FALSE@ $(top_builddir)/src/libtnccs/libtnccs.la - -libstrongswan_tnc_imv_la_SOURCES = \ - tnc_imv_plugin.h tnc_imv_plugin.c tnc_imv.h tnc_imv.c \ - tnc_imv_manager.h tnc_imv_manager.c tnc_imv_bind_function.c \ - tnc_imv_recommendations.h tnc_imv_recommendations.c - -libstrongswan_tnc_imv_la_LDFLAGS = -module -avoid-version -all: all-am - -.SUFFIXES: -.SUFFIXES: .c .lo .o .obj -$(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps) - @for dep in $?; do \ - case '$(am__configure_deps)' in \ - *$$dep*) \ - ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \ - && { if test -f $@; then exit 0; else break; fi; }; \ - exit 1;; \ - esac; \ - done; \ - echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu src/libcharon/plugins/tnc_imv/Makefile'; \ - $(am__cd) $(top_srcdir) && \ - $(AUTOMAKE) --gnu src/libcharon/plugins/tnc_imv/Makefile -.PRECIOUS: Makefile -Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status - @case '$?' in \ - *config.status*) \ - cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \ - *) \ - echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \ - cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \ - esac; - -$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES) - cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh - -$(top_srcdir)/configure: $(am__configure_deps) - cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh -$(ACLOCAL_M4): $(am__aclocal_m4_deps) - cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh -$(am__aclocal_m4_deps): - -clean-noinstLTLIBRARIES: - -test -z "$(noinst_LTLIBRARIES)" || rm -f $(noinst_LTLIBRARIES) - @list='$(noinst_LTLIBRARIES)'; for p in $$list; do \ - dir="`echo $$p | sed -e 's|/[^/]*$$||'`"; \ - test "$$dir" != "$$p" || dir=.; \ - echo "rm -f \"$${dir}/so_locations\""; \ - rm -f "$${dir}/so_locations"; \ - done -install-pluginLTLIBRARIES: $(plugin_LTLIBRARIES) - @$(NORMAL_INSTALL) - @list='$(plugin_LTLIBRARIES)'; test -n "$(plugindir)" || list=; \ - list2=; for p in $$list; do \ - if test -f $$p; then \ - list2="$$list2 $$p"; \ - else :; fi; \ - done; \ - test -z "$$list2" || { \ - echo " $(MKDIR_P) '$(DESTDIR)$(plugindir)'"; \ - $(MKDIR_P) "$(DESTDIR)$(plugindir)" || exit 1; \ - echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(plugindir)'"; \ - $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(plugindir)"; \ - } - -uninstall-pluginLTLIBRARIES: - @$(NORMAL_UNINSTALL) - @list='$(plugin_LTLIBRARIES)'; test -n "$(plugindir)" || list=; \ - for p in $$list; do \ - $(am__strip_dir) \ - echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(plugindir)/$$f'"; \ - $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(plugindir)/$$f"; \ - done - -clean-pluginLTLIBRARIES: - -test -z "$(plugin_LTLIBRARIES)" || rm -f $(plugin_LTLIBRARIES) - @list='$(plugin_LTLIBRARIES)'; for p in $$list; do \ - dir="`echo $$p | sed -e 's|/[^/]*$$||'`"; \ - test "$$dir" != "$$p" || dir=.; \ - echo "rm -f \"$${dir}/so_locations\""; \ - rm -f "$${dir}/so_locations"; \ - done -libstrongswan-tnc-imv.la: $(libstrongswan_tnc_imv_la_OBJECTS) $(libstrongswan_tnc_imv_la_DEPENDENCIES) $(EXTRA_libstrongswan_tnc_imv_la_DEPENDENCIES) - $(AM_V_CCLD)$(libstrongswan_tnc_imv_la_LINK) $(am_libstrongswan_tnc_imv_la_rpath) $(libstrongswan_tnc_imv_la_OBJECTS) $(libstrongswan_tnc_imv_la_LIBADD) $(LIBS) - -mostlyclean-compile: - -rm -f *.$(OBJEXT) - -distclean-compile: - -rm -f *.tab.c - -@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tnc_imv.Plo@am__quote@ -@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tnc_imv_bind_function.Plo@am__quote@ -@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tnc_imv_manager.Plo@am__quote@ -@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tnc_imv_plugin.Plo@am__quote@ -@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tnc_imv_recommendations.Plo@am__quote@ - -.c.o: -@am__fastdepCC_TRUE@ $(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $< -@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po -@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@ -@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ -@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(COMPILE) -c $< - -.c.obj: -@am__fastdepCC_TRUE@ $(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'` -@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po -@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@ -@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ -@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(COMPILE) -c `$(CYGPATH_W) '$<'` - -.c.lo: -@am__fastdepCC_TRUE@ $(AM_V_CC)$(LTCOMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $< -@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Plo -@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@ -@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@ -@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(LTCOMPILE) -c -o $@ $< - -mostlyclean-libtool: - -rm -f *.lo - -clean-libtool: - -rm -rf .libs _libs - -ID: $(HEADERS) $(SOURCES) $(LISP) $(TAGS_FILES) - list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \ - unique=`for i in $$list; do \ - if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ - done | \ - $(AWK) '{ files[$$0] = 1; nonempty = 1; } \ - END { if (nonempty) { for (i in files) print i; }; }'`; \ - mkid -fID $$unique -tags: TAGS - -TAGS: $(HEADERS) $(SOURCES) $(TAGS_DEPENDENCIES) \ - $(TAGS_FILES) $(LISP) - set x; \ - here=`pwd`; \ - list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \ - unique=`for i in $$list; do \ - if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ - done | \ - $(AWK) '{ files[$$0] = 1; nonempty = 1; } \ - END { if (nonempty) { for (i in files) print i; }; }'`; \ - shift; \ - if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \ - test -n "$$unique" || unique=$$empty_fix; \ - if test $$# -gt 0; then \ - $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ - "$$@" $$unique; \ - else \ - $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \ - $$unique; \ - fi; \ - fi -ctags: CTAGS -CTAGS: $(HEADERS) $(SOURCES) $(TAGS_DEPENDENCIES) \ - $(TAGS_FILES) $(LISP) - list='$(SOURCES) $(HEADERS) $(LISP) $(TAGS_FILES)'; \ - unique=`for i in $$list; do \ - if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \ - done | \ - $(AWK) '{ files[$$0] = 1; nonempty = 1; } \ - END { if (nonempty) { for (i in files) print i; }; }'`; \ - test -z "$(CTAGS_ARGS)$$unique" \ - || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \ - $$unique - -GTAGS: - here=`$(am__cd) $(top_builddir) && pwd` \ - && $(am__cd) $(top_srcdir) \ - && gtags -i $(GTAGS_ARGS) "$$here" - -distclean-tags: - -rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags - -distdir: $(DISTFILES) - @srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ - topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \ - list='$(DISTFILES)'; \ - dist_files=`for file in $$list; do echo $$file; done | \ - sed -e "s|^$$srcdirstrip/||;t" \ - -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \ - case $$dist_files in \ - */*) $(MKDIR_P) `echo "$$dist_files" | \ - sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \ - sort -u` ;; \ - esac; \ - for file in $$dist_files; do \ - if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \ - if test -d $$d/$$file; then \ - dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \ - if test -d "$(distdir)/$$file"; then \ - find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \ - fi; \ - if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \ - cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \ - find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \ - fi; \ - cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \ - else \ - test -f "$(distdir)/$$file" \ - || cp -p $$d/$$file "$(distdir)/$$file" \ - || exit 1; \ - fi; \ - done -check-am: all-am -check: check-am -all-am: Makefile $(LTLIBRARIES) -installdirs: - for dir in "$(DESTDIR)$(plugindir)"; do \ - test -z "$$dir" || $(MKDIR_P) "$$dir"; \ - done -install: install-am -install-exec: install-exec-am -install-data: install-data-am -uninstall: uninstall-am - -install-am: all-am - @$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am - -installcheck: installcheck-am -install-strip: - if test -z '$(STRIP)'; then \ - $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ - install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ - install; \ - else \ - $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \ - install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \ - "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \ - fi -mostlyclean-generic: - -clean-generic: - -distclean-generic: - -test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES) - -test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES) - -maintainer-clean-generic: - @echo "This command is intended for maintainers to use" - @echo "it deletes files that may require special tools to rebuild." -clean: clean-am - -clean-am: clean-generic clean-libtool clean-noinstLTLIBRARIES \ - clean-pluginLTLIBRARIES mostlyclean-am - -distclean: distclean-am - -rm -rf ./$(DEPDIR) - -rm -f Makefile -distclean-am: clean-am distclean-compile distclean-generic \ - distclean-tags - -dvi: dvi-am - -dvi-am: - -html: html-am - -html-am: - -info: info-am - -info-am: - -install-data-am: install-pluginLTLIBRARIES - -install-dvi: install-dvi-am - -install-dvi-am: - -install-exec-am: - -install-html: install-html-am - -install-html-am: - -install-info: install-info-am - -install-info-am: - -install-man: - -install-pdf: install-pdf-am - -install-pdf-am: - -install-ps: install-ps-am - -install-ps-am: - -installcheck-am: - -maintainer-clean: maintainer-clean-am - -rm -rf ./$(DEPDIR) - -rm -f Makefile -maintainer-clean-am: distclean-am maintainer-clean-generic - -mostlyclean: mostlyclean-am - -mostlyclean-am: mostlyclean-compile mostlyclean-generic \ - mostlyclean-libtool - -pdf: pdf-am - -pdf-am: - -ps: ps-am - -ps-am: - -uninstall-am: uninstall-pluginLTLIBRARIES - -.MAKE: install-am install-strip - -.PHONY: CTAGS GTAGS all all-am check check-am clean clean-generic \ - clean-libtool clean-noinstLTLIBRARIES clean-pluginLTLIBRARIES \ - ctags distclean distclean-compile distclean-generic \ - distclean-libtool distclean-tags distdir dvi dvi-am html \ - html-am info info-am install install-am install-data \ - install-data-am install-dvi install-dvi-am install-exec \ - install-exec-am install-html install-html-am install-info \ - install-info-am install-man install-pdf install-pdf-am \ - install-pluginLTLIBRARIES install-ps install-ps-am \ - install-strip installcheck installcheck-am installdirs \ - maintainer-clean maintainer-clean-generic mostlyclean \ - mostlyclean-compile mostlyclean-generic mostlyclean-libtool \ - pdf pdf-am ps ps-am tags uninstall uninstall-am \ - uninstall-pluginLTLIBRARIES - - -# Tell versions [3.59,3.63) of GNU make to not export all variables. -# Otherwise a system limit (for SysV at least) may be exceeded. -.NOEXPORT: diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv.c b/src/libcharon/plugins/tnc_imv/tnc_imv.c deleted file mode 100644 index ef0387d70..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv.c +++ /dev/null @@ -1,426 +0,0 @@ -/* - * Copyright (C) 2006 Mike McCauley - * Copyright (C) 2010-2011 Andreas Steffen, - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -#include "tnc_imv.h" - -#include <dlfcn.h> - -#include <tncif_pa_subtypes.h> - -#include <utils/debug.h> -#include <daemon.h> -#include <library.h> -#include <collections/linked_list.h> -#include <threading/mutex.h> - -typedef struct private_tnc_imv_t private_tnc_imv_t; - -/** - * Private data of an imv_t object. - */ -struct private_tnc_imv_t { - - /** - * Public members of imv_t. - */ - imv_t public; - - /** - * Name of loaded IMV - */ - char *name; - - /** - * Handle of loaded IMV - */ - void *handle; - - /** - * ID of loaded IMV - */ - TNC_IMVID id; - - /** - * List of additional IMV IDs - */ - linked_list_t *additional_ids; - - /** - * List of message types supported by IMV - Vendor ID part - */ - TNC_VendorIDList supported_vids; - - /** - * List of message types supported by IMV - Subtype part - */ - TNC_MessageSubtypeList supported_subtypes; - - /** - * Number of supported message types - */ - TNC_UInt32 type_count; - - /** - * mutex to lock the imv_t object - */ - mutex_t *mutex; -}; - -METHOD(imv_t, set_id, void, - private_tnc_imv_t *this, TNC_IMVID id) -{ - this->id = id; -} - -METHOD(imv_t, get_id, TNC_IMVID, - private_tnc_imv_t *this) -{ - return this->id; -} - -METHOD(imv_t, add_id, void, - private_tnc_imv_t *this, TNC_IMVID id) -{ - TNC_IMVID *new_id; - - new_id = malloc_thing(TNC_IMVID); - *new_id = id; - this->additional_ids->insert_last(this->additional_ids, new_id); -} - -METHOD(imv_t, has_id, bool, - private_tnc_imv_t *this, TNC_IMVID id) -{ - enumerator_t *enumerator; - TNC_IMVID *additional_id; - bool found = FALSE; - - /* check primary IMV ID */ - if (id == this->id) - { - return TRUE; - } - - /* return if there are no additional IMV IDs */ - if (this->additional_ids->get_count(this->additional_ids) == 0) - { - return FALSE; - } - - /* check additional IMV IDs */ - enumerator = this->additional_ids->create_enumerator(this->additional_ids); - while (enumerator->enumerate(enumerator, &additional_id)) - { - if (id == *additional_id) - { - found = TRUE; - break; - } - } - enumerator->destroy(enumerator); - - return found; -} - -METHOD(imv_t, get_name, char*, - private_tnc_imv_t *this) -{ - return this->name; -} - -METHOD(imv_t, set_message_types, void, - private_tnc_imv_t *this, TNC_MessageTypeList supported_types, - TNC_UInt32 type_count) -{ - char buf[BUF_LEN]; - char *pos = buf; - int len = sizeof(buf); - int i, written; - size_t size; - TNC_VendorID vid; - TNC_MessageSubtype subtype; - enum_name_t *pa_subtype_names; - - /* lock the imv_t instance */ - this->mutex->lock(this->mutex); - - /* Free existing VendorID and MessageSubtype lists */ - free(this->supported_vids); - this->supported_vids = NULL; - free(this->supported_subtypes); - this->supported_subtypes = NULL; - - /* Store the new MessageType list */ - this->type_count = type_count; - if (type_count && supported_types) - { - size = type_count * sizeof(TNC_VendorID); - this->supported_vids = malloc(size); - size = type_count * sizeof(TNC_MessageSubtype); - this->supported_subtypes = malloc(size); - - for (i = 0; i < type_count; i++) - { - vid = (supported_types[i] >> 8) & TNC_VENDORID_ANY; - subtype = supported_types[i] & TNC_SUBTYPE_ANY; - - pa_subtype_names = get_pa_subtype_names(vid); - if (pa_subtype_names) - { - written = snprintf(pos, len," '%N/%N' 0x%06x/0x%02x", - pen_names, vid, pa_subtype_names, subtype, - vid, subtype); - } - else - { - written = snprintf(pos, len," '%N' 0x%06x/0x%02x", - pen_names, vid, vid, subtype); - } - if (written >= len) - { - break; - } - pos += written; - len -= written; - - this->supported_vids[i] = vid; - this->supported_subtypes[i] = subtype; - } - } - *pos = '\0'; - DBG2(DBG_TNC, "IMV %u supports %u message type%s:%s", - this->id, type_count, (type_count == 1) ? "":"s", buf); - - /* unlock the imv_t instance */ - this->mutex->unlock(this->mutex); -} - -METHOD(imv_t, set_message_types_long, void, - private_tnc_imv_t *this, TNC_VendorIDList supported_vids, - TNC_MessageSubtypeList supported_subtypes, TNC_UInt32 type_count) -{ - char buf[BUF_LEN]; - char *pos = buf; - int len = sizeof(buf); - int i, written; - size_t size; - TNC_VendorID vid; - TNC_MessageSubtype subtype; - enum_name_t *pa_subtype_names; - - /* lock the imv_t instance */ - this->mutex->lock(this->mutex); - - /* Free existing VendorID and MessageSubtype lists */ - free(this->supported_vids); - this->supported_vids = NULL; - free(this->supported_subtypes); - this->supported_subtypes = NULL; - - /* Store the new MessageType list */ - this->type_count = type_count; - if (type_count && supported_vids && supported_subtypes) - { - size = type_count * sizeof(TNC_VendorID); - this->supported_vids = malloc(size); - memcpy(this->supported_vids, supported_vids, size); - size = type_count * sizeof(TNC_MessageSubtype); - this->supported_subtypes = malloc(size); - memcpy(this->supported_subtypes, supported_subtypes, size); - - for (i = 0; i < type_count; i++) - { - vid = supported_vids[i]; - subtype = supported_subtypes[i]; - - pa_subtype_names = get_pa_subtype_names(vid); - if (pa_subtype_names) - { - written = snprintf(pos, len," '%N/%N' 0x%06x/0x%08x", - pen_names, vid, pa_subtype_names, subtype, - vid, subtype); - } - else - { - written = snprintf(pos, len," '%N' 0x%06x/0x%08x", - pen_names, vid, vid, subtype); - } - if (written >= len) - { - break; - } - pos += written; - len -= written; - } - } - *pos = '\0'; - DBG2(DBG_TNC, "IMV %u supports %u message type%s:%s", - this->id, type_count, (type_count == 1) ? "":"s", buf); - - /* unlock the imv_t instance */ - this->mutex->unlock(this->mutex); -} - -METHOD(imv_t, type_supported, bool, - private_tnc_imv_t *this, TNC_VendorID msg_vid, TNC_MessageSubtype msg_subtype) -{ - TNC_VendorID vid; - TNC_MessageSubtype subtype; - int i; - - for (i = 0; i < this->type_count; i++) - { - vid = this->supported_vids[i]; - subtype = this->supported_subtypes[i]; - - if ((vid == TNC_VENDORID_ANY && subtype == TNC_SUBTYPE_ANY) || - (vid == msg_vid && (subtype == TNC_SUBTYPE_ANY || - subtype == msg_subtype))) - { - return TRUE; - } - } - return FALSE; -} - -METHOD(imv_t, destroy, void, - private_tnc_imv_t *this) -{ - if (this->handle && lib->settings->get_bool(lib->settings, - "%s.plugins.tnc-imv.dlclose", TRUE, charon->name)) - { - dlclose(this->handle); - } - this->mutex->destroy(this->mutex); - this->additional_ids->destroy_function(this->additional_ids, free); - free(this->supported_vids); - free(this->supported_subtypes); - free(this->name); - free(this); -} - -/** - * Generic constructor. - */ -static private_tnc_imv_t* tnc_imv_create_empty(char *name) -{ - private_tnc_imv_t *this; - - INIT(this, - .public = { - .set_id = _set_id, - .get_id = _get_id, - .add_id = _add_id, - .has_id = _has_id, - .get_name = _get_name, - .set_message_types = _set_message_types, - .set_message_types_long = _set_message_types_long, - .type_supported = _type_supported, - .destroy = _destroy, - }, - .name = strdup(name), - .additional_ids = linked_list_create(), - .mutex = mutex_create(MUTEX_TYPE_DEFAULT), - ); - - return this; -} - -/** - * Described in header. - */ -imv_t* tnc_imv_create(char *name, char *path) -{ - private_tnc_imv_t *this; - - this = tnc_imv_create_empty(name); - - this->handle = dlopen(path, RTLD_LAZY); - if (!this->handle) - { - DBG1(DBG_TNC, "IMV \"%s\" failed to load: %s", name, dlerror()); - destroy(this); - return NULL; - } - - this->public.initialize = dlsym(this->handle, "TNC_IMV_Initialize"); - if (!this->public.initialize) - { - DBG1(DBG_TNC, "could not resolve TNC_IMV_Initialize in %s: %s\n", - path, dlerror()); - destroy(this); - return NULL; - } - this->public.notify_connection_change = - dlsym(this->handle, "TNC_IMV_NotifyConnectionChange"); - this->public.solicit_recommendation = - dlsym(this->handle, "TNC_IMV_SolicitRecommendation"); - if (!this->public.solicit_recommendation) - { - DBG1(DBG_TNC, "could not resolve TNC_IMV_SolicitRecommendation in %s: %s\n", - path, dlerror()); - destroy(this); - return NULL; - } - this->public.receive_message = - dlsym(this->handle, "TNC_IMV_ReceiveMessage"); - this->public.receive_message_long = - dlsym(this->handle, "TNC_IMV_ReceiveMessageLong"); - this->public.batch_ending = - dlsym(this->handle, "TNC_IMV_BatchEnding"); - this->public.terminate = - dlsym(this->handle, "TNC_IMV_Terminate"); - this->public.provide_bind_function = - dlsym(this->handle, "TNC_IMV_ProvideBindFunction"); - if (!this->public.provide_bind_function) - { - DBG1(DBG_TNC, "could not resolve TNC_IMV_ProvideBindFunction in %s: %s\n", - path, dlerror()); - destroy(this); - return NULL; - } - - return &this->public; -} - -/** - * Described in header. - */ -imv_t* tnc_imv_create_from_functions(char *name, - TNC_IMV_InitializePointer initialize, - TNC_IMV_NotifyConnectionChangePointer notify_connection_change, - TNC_IMV_ReceiveMessagePointer receive_message, - TNC_IMV_ReceiveMessageLongPointer receive_message_long, - TNC_IMV_SolicitRecommendationPointer solicit_recommendation, - TNC_IMV_BatchEndingPointer batch_ending, - TNC_IMV_TerminatePointer terminate, - TNC_IMV_ProvideBindFunctionPointer provide_bind_function) -{ - private_tnc_imv_t *this; - - this = tnc_imv_create_empty(name); - - this->public.initialize = initialize; - this->public.notify_connection_change = notify_connection_change; - this->public.receive_message = receive_message; - this->public.receive_message_long = receive_message_long; - this->public.solicit_recommendation = solicit_recommendation; - this->public.batch_ending = batch_ending; - this->public.terminate = terminate; - this->public.provide_bind_function = provide_bind_function; - - return &this->public; -} diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv.h b/src/libcharon/plugins/tnc_imv/tnc_imv.h deleted file mode 100644 index e7c7b8b4f..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv.h +++ /dev/null @@ -1,60 +0,0 @@ -/* - * Copyright (C) 2010 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -/** - * - * @defgroup tnc_imv_t tnc_imv - * @{ @ingroup tnc_imv - */ - -#ifndef TNC_IMV_H_ -#define TNC_IMV_H_ - -#include <tnc/imv/imv.h> - -/** - * Create an Integrity Measurement Verifier loaded from a library. - * - * @param name name of the IMV - * @param filename path to the dynamic IMV library - * @return instance of the imv_t interface - */ -imv_t* tnc_imv_create(char *name, char *filename); - -/** - * Create an Integrity Measurement Verifier from a set of IMV functions. - * - * @param name name of the IMV - * @param initialize TNC_IMV_InitializePointer - * @param notify_connection_change TNC_IMV_NotifyConnectionChangePointer - * @param receive_message TNC_IMV_ReceiveMessagePointer - * @param receive_message_long TNC_IMV_ReceiveMessageLongPointer - * @param solicit_recommendation TNC_IMV_SolicitRecommendationPointer - * @param batch_ending TNC_IMV_BatchEndingPointer - * @param terminate TNC_IMV_TerminatePointer - * @param provide_bind_function TNC_IMV_ProvideBindFunctionPointer - * @return instance of the imv_t interface - */ -imv_t* tnc_imv_create_from_functions(char *name, - TNC_IMV_InitializePointer initialize, - TNC_IMV_NotifyConnectionChangePointer notify_connection_change, - TNC_IMV_ReceiveMessagePointer receive_message, - TNC_IMV_ReceiveMessageLongPointer receive_message_long, - TNC_IMV_SolicitRecommendationPointer solicit_recommendation, - TNC_IMV_BatchEndingPointer batch_ending, - TNC_IMV_TerminatePointer terminate, - TNC_IMV_ProvideBindFunctionPointer provide_bind_function); - -#endif /** TNC_IMV_H_ @}*/ diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_bind_function.c b/src/libcharon/plugins/tnc_imv/tnc_imv_bind_function.c deleted file mode 100644 index 36cdb7fbb..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_bind_function.c +++ /dev/null @@ -1,246 +0,0 @@ -/* - * Copyright (C) 2006 Mike McCauley - * Copyright (C) 2010-2011 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -#include <tnc/tnc.h> -#include <tnc/imv/imv_manager.h> -#include <tnc/tnccs/tnccs_manager.h> - -#include <utils/debug.h> - -/** - * Called by the IMV to inform a TNCS about the set of message types the IMV - * is able to receive - */ -TNC_Result TNC_TNCS_ReportMessageTypes(TNC_IMVID imv_id, - TNC_MessageTypeList supported_types, - TNC_UInt32 type_count) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring ReportMessageTypes() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->imvs->set_message_types(tnc->imvs, imv_id, supported_types, - type_count); -} - -/** - * Called by the IMV to inform a TNCS about the set of message types the IMV - * is able to receive. This function supports long message types. - */ -TNC_Result TNC_TNCS_ReportMessageTypesLong(TNC_IMVID imv_id, - TNC_VendorIDList supported_vids, - TNC_MessageSubtypeList supported_subtypes, - TNC_UInt32 type_count) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring ReportMessageTypesLong() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->imvs->set_message_types_long(tnc->imvs, imv_id, supported_vids, - supported_subtypes, type_count); -} - -/** - * Called by the IMV to ask a TNCS to retry an Integrity Check Handshake - */ -TNC_Result TNC_TNCS_RequestHandshakeRetry(TNC_IMVID imv_id, - TNC_ConnectionID connection_id, - TNC_RetryReason reason) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring RequestHandshakeRetry() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->tnccs->request_handshake_retry(tnc->tnccs, FALSE, imv_id, - connection_id, reason); -} - -/** - * Called by the IMV when an IMV-IMC message is to be sent - */ -TNC_Result TNC_TNCS_SendMessage(TNC_IMVID imv_id, - TNC_ConnectionID connection_id, - TNC_BufferReference msg, - TNC_UInt32 msg_len, - TNC_MessageType msg_type) -{ - TNC_VendorID msg_vid; - TNC_MessageSubtype msg_subtype; - - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring SendMessage() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - msg_vid = (msg_type >> 8) & TNC_VENDORID_ANY; - msg_subtype = msg_type & TNC_SUBTYPE_ANY; - - return tnc->tnccs->send_message(tnc->tnccs, TNC_IMCID_ANY, imv_id, - connection_id, 0, msg, msg_len, msg_vid, msg_subtype); -} - -/** - * Called by the IMV when an IMV-IMC message is to be sent over IF-TNCCS 2.0 - */ -TNC_Result TNC_TNCS_SendMessageLong(TNC_IMVID imv_id, - TNC_ConnectionID connection_id, - TNC_UInt32 msg_flags, - TNC_BufferReference msg, - TNC_UInt32 msg_len, - TNC_VendorID msg_vid, - TNC_MessageSubtype msg_subtype, - TNC_UInt32 imc_id) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring SendMessageLong() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->tnccs->send_message(tnc->tnccs, imc_id, imv_id, connection_id, - msg_flags, msg, msg_len, msg_vid, msg_subtype); -} - -/** - * Called by the IMV to deliver its IMV Action Recommendation and IMV Evaluation - * Result to the TNCS - */ -TNC_Result TNC_TNCS_ProvideRecommendation(TNC_IMVID imv_id, - TNC_ConnectionID connection_id, - TNC_IMV_Action_Recommendation recommendation, - TNC_IMV_Evaluation_Result evaluation) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring ProvideRecommendation() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->tnccs->provide_recommendation(tnc->tnccs, imv_id, connection_id, - recommendation, evaluation); -} - -/** - * Called by the IMV to get the value of an attribute associated with a - * connection or with the TNCS as a whole. - */ -TNC_Result TNC_TNCS_GetAttribute(TNC_IMVID imv_id, - TNC_ConnectionID connection_id, - TNC_AttributeID attribute_id, - TNC_UInt32 buffer_len, - TNC_BufferReference buffer, - TNC_UInt32 *out_value_len) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring GetAttribute() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->tnccs->get_attribute(tnc->tnccs, FALSE, imv_id, connection_id, - attribute_id, buffer_len, buffer, out_value_len); -} - -/** - * Called by the IMV to set the value of an attribute associated with a - * connection or with the TNCS as a whole. - */ -TNC_Result TNC_TNCS_SetAttribute(TNC_IMVID imv_id, - TNC_ConnectionID connection_id, - TNC_AttributeID attribute_id, - TNC_UInt32 buffer_len, - TNC_BufferReference buffer) -{ - if (!tnc->imvs->is_registered(tnc->imvs, imv_id)) - { - DBG1(DBG_TNC, "ignoring SetAttribute() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; - } - return tnc->tnccs->set_attribute(tnc->tnccs, FALSE, imv_id, connection_id, - attribute_id, buffer_len, buffer); -} - -/** - * Called by the IMV when it wants to reserve an additional IMV ID for itself - */ -TNC_Result TNC_TNCS_ReserveAdditionalIMVID(TNC_IMVID imv_id, TNC_UInt32 *new_id) -{ - if (tnc->imvs->reserve_id(tnc->imvs, imv_id, new_id)) - { - return TNC_RESULT_SUCCESS; - } - DBG1(DBG_TNC, "ignoring ReserveAdditionalIMVID() from unregistered IMV %u", - imv_id); - return TNC_RESULT_INVALID_PARAMETER; -} - -/** - * Called by the IMV when it needs a function pointer - */ -TNC_Result TNC_TNCS_BindFunction(TNC_IMVID id, - char *function_name, - void **function_pointer) -{ - if (streq(function_name, "TNC_TNCS_ReportMessageTypes")) - { - *function_pointer = (void*)TNC_TNCS_ReportMessageTypes; - } - else if (streq(function_name, "TNC_TNCS_ReportMessageTypesLong")) - { - *function_pointer = (void*)TNC_TNCS_ReportMessageTypesLong; - } - else if (streq(function_name, "TNC_TNCS_RequestHandshakeRetry")) - { - *function_pointer = (void*)TNC_TNCS_RequestHandshakeRetry; - } - else if (streq(function_name, "TNC_TNCS_SendMessage")) - { - *function_pointer = (void*)TNC_TNCS_SendMessage; - } - else if (streq(function_name, "TNC_TNCS_SendMessageLong")) - { - *function_pointer = (void*)TNC_TNCS_SendMessageLong; - } - else if (streq(function_name, "TNC_TNCS_ProvideRecommendation")) - { - *function_pointer = (void*)TNC_TNCS_ProvideRecommendation; - } - else if (streq(function_name, "TNC_TNCS_GetAttribute")) - { - *function_pointer = (void*)TNC_TNCS_GetAttribute; - } - else if (streq(function_name, "TNC_TNCS_SetAttribute")) - { - *function_pointer = (void*)TNC_TNCS_SetAttribute; - } - else if (streq(function_name, "TNC_TNCS_ReserveAdditionalIMVID")) - { - *function_pointer = (void*)TNC_TNCS_ReserveAdditionalIMVID; - } - else - { - return TNC_RESULT_INVALID_PARAMETER; - } - return TNC_RESULT_SUCCESS; -} diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_manager.c b/src/libcharon/plugins/tnc_imv/tnc_imv_manager.c deleted file mode 100644 index b950e3119..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_manager.c +++ /dev/null @@ -1,530 +0,0 @@ -/* - * Copyright (C) 2006 Mike McCauley - * Copyright (C) 2010-2011 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -#include "tnc_imv_manager.h" -#include "tnc_imv.h" -#include "tnc_imv_recommendations.h" - -#include <tncifimv.h> -#include <tncif_names.h> - -#include <sys/types.h> -#include <sys/stat.h> -#include <sys/mman.h> -#include <unistd.h> -#include <errno.h> -#include <fcntl.h> - -#include <daemon.h> -#include <utils/debug.h> -#include <threading/rwlock.h> -#include <threading/mutex.h> -#include <collections/linked_list.h> - -typedef struct private_tnc_imv_manager_t private_tnc_imv_manager_t; - -/** - * Private data of an imv_manager_t object. - */ -struct private_tnc_imv_manager_t { - - /** - * Public members of imv_manager_t. - */ - imv_manager_t public; - - /** - * Linked list of IMVs - */ - linked_list_t *imvs; - - /** - * Lock for IMV list - */ - rwlock_t *lock; - - /** - * Next IMV ID to be assigned - */ - TNC_IMVID next_imv_id; - - /** - * Mutex to access next IMV ID - */ - mutex_t *id_mutex; - - /** - * Policy defining how to derive final recommendation from individual ones - */ - recommendation_policy_t policy; -}; - -METHOD(imv_manager_t, add, bool, - private_tnc_imv_manager_t *this, imv_t *imv) -{ - TNC_Version version; - TNC_IMVID imv_id; - - this->id_mutex->lock(this->id_mutex); - imv_id = this->next_imv_id++; - this->id_mutex->unlock(this->id_mutex); - - imv->set_id(imv, imv_id); - if (imv->initialize(imv_id, TNC_IFIMV_VERSION_1, - TNC_IFIMV_VERSION_1, &version) != TNC_RESULT_SUCCESS) - { - DBG1(DBG_TNC, "IMV \"%s\" failed to initialize", imv->get_name(imv)); - return FALSE; - } - this->lock->write_lock(this->lock); - this->imvs->insert_last(this->imvs, imv); - this->lock->unlock(this->lock); - - if (imv->provide_bind_function(imv->get_id(imv), - TNC_TNCS_BindFunction) != TNC_RESULT_SUCCESS) - { - if (imv->terminate) - { - imv->terminate(imv->get_id(imv)); - } - DBG1(DBG_TNC, "IMV \"%s\" failed to obtain bind function", - imv->get_name(imv)); - this->lock->write_lock(this->lock); - this->imvs->remove_last(this->imvs, (void**)&imv); - this->lock->unlock(this->lock); - return FALSE; - } - return TRUE; -} - -METHOD(imv_manager_t, remove_, imv_t*, - private_tnc_imv_manager_t *this, TNC_IMVID id) -{ - enumerator_t *enumerator; - imv_t *imv, *removed_imv = NULL; - - this->lock->write_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (id == imv->get_id(imv)) - { - this->imvs->remove_at(this->imvs, enumerator); - removed_imv = imv; - break; - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); - - return removed_imv; -} - -METHOD(imv_manager_t, load, bool, - private_tnc_imv_manager_t *this, char *name, char *path) -{ - imv_t *imv; - - imv = tnc_imv_create(name, path); - if (!imv) - { - return FALSE; - } - if (!add(this, imv)) - { - imv->destroy(imv); - return FALSE; - } - DBG1(DBG_TNC, "IMV %u \"%s\" loaded from '%s'", imv->get_id(imv), name, path); - return TRUE; -} - -METHOD(imv_manager_t, load_from_functions, bool, - private_tnc_imv_manager_t *this, char *name, - TNC_IMV_InitializePointer initialize, - TNC_IMV_NotifyConnectionChangePointer notify_connection_change, - TNC_IMV_ReceiveMessagePointer receive_message, - TNC_IMV_ReceiveMessageLongPointer receive_message_long, - TNC_IMV_SolicitRecommendationPointer solicit_recommendation, - TNC_IMV_BatchEndingPointer batch_ending, - TNC_IMV_TerminatePointer terminate, - TNC_IMV_ProvideBindFunctionPointer provide_bind_function) -{ - imv_t *imv; - - imv = tnc_imv_create_from_functions(name, - initialize,notify_connection_change, - receive_message, receive_message_long, - solicit_recommendation, batch_ending, - terminate, provide_bind_function); - if (!imv) - { - return FALSE; - } - if (!add(this, imv)) - { - imv->destroy(imv); - return FALSE; - } - DBG1(DBG_TNC, "IMV %u \"%s\" loaded", imv->get_id(imv), name); - return TRUE; -} - -METHOD(imv_manager_t, is_registered, bool, - private_tnc_imv_manager_t *this, TNC_IMVID id) -{ - enumerator_t *enumerator; - imv_t *imv; - bool found = FALSE; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (imv->has_id(imv, id)) - { - found = TRUE; - break; - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); - - return found; -} - -METHOD(imv_manager_t, reserve_id, bool, - private_tnc_imv_manager_t *this, TNC_IMVID id, TNC_UInt32 *new_id) -{ - enumerator_t *enumerator; - imv_t *imv; - bool found = FALSE; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (id == imv->get_id(imv)) - { - found = TRUE; - this->id_mutex->lock(this->id_mutex); - *new_id = this->next_imv_id++; - this->id_mutex->unlock(this->id_mutex); - imv->add_id(imv, *new_id); - DBG2(DBG_TNC, "additional ID %u reserved for IMV with primary ID %u", - *new_id, id); - break; - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); - - return found; -} - -METHOD(imv_manager_t, get_recommendation_policy, recommendation_policy_t, - private_tnc_imv_manager_t *this) -{ - return this->policy; -} - -METHOD(imv_manager_t, create_recommendations, recommendations_t*, - private_tnc_imv_manager_t *this) -{ - return tnc_imv_recommendations_create(this->imvs); -} - -METHOD(imv_manager_t, enforce_recommendation, bool, - private_tnc_imv_manager_t *this, TNC_IMV_Action_Recommendation rec, - TNC_IMV_Evaluation_Result eval) -{ - char *group; - identification_t *id; - ike_sa_t *ike_sa; - auth_cfg_t *auth; - bool no_access = FALSE; - - DBG1(DBG_TNC, "final recommendation is '%N' and evaluation is '%N'", - TNC_IMV_Action_Recommendation_names, rec, - TNC_IMV_Evaluation_Result_names, eval); - - switch (rec) - { - case TNC_IMV_ACTION_RECOMMENDATION_ALLOW: - group = "allow"; - break; - case TNC_IMV_ACTION_RECOMMENDATION_ISOLATE: - group = "isolate"; - break; - case TNC_IMV_ACTION_RECOMMENDATION_NO_ACCESS: - case TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION: - default: - group = "no access"; - no_access = TRUE; - break; - } - - ike_sa = charon->bus->get_sa(charon->bus); - if (!ike_sa) - { - DBG1(DBG_TNC, "policy enforcement point did not find IKE_SA"); - return FALSE; - } - - id = ike_sa->get_other_id(ike_sa); - DBG0(DBG_TNC, "policy enforced on peer '%Y' is '%s'", id, group); - - if (no_access) - { - return FALSE; - } - else - { - auth = ike_sa->get_auth_cfg(ike_sa, FALSE); - id = identification_create_from_string(group); - auth->add(auth, AUTH_RULE_GROUP, id); - DBG1(DBG_TNC, "policy enforcement point added group membership '%s'", - group); - } - return TRUE; -} - - -METHOD(imv_manager_t, notify_connection_change, void, - private_tnc_imv_manager_t *this, TNC_ConnectionID id, - TNC_ConnectionState state) -{ - enumerator_t *enumerator; - imv_t *imv; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (imv->notify_connection_change) - { - imv->notify_connection_change(imv->get_id(imv), id, state); - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); -} - -METHOD(imv_manager_t, set_message_types, TNC_Result, - private_tnc_imv_manager_t *this, TNC_IMVID id, - TNC_MessageTypeList supported_types, - TNC_UInt32 type_count) -{ - enumerator_t *enumerator; - imv_t *imv; - TNC_Result result = TNC_RESULT_FATAL; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (id == imv->get_id(imv)) - { - imv->set_message_types(imv, supported_types, type_count); - result = TNC_RESULT_SUCCESS; - break; - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); - return result; -} - -METHOD(imv_manager_t, set_message_types_long, TNC_Result, - private_tnc_imv_manager_t *this, TNC_IMVID id, - TNC_VendorIDList supported_vids, - TNC_MessageSubtypeList supported_subtypes, - TNC_UInt32 type_count) -{ - enumerator_t *enumerator; - imv_t *imv; - TNC_Result result = TNC_RESULT_FATAL; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (id == imv->get_id(imv)) - { - imv->set_message_types_long(imv, supported_vids, supported_subtypes, - type_count); - result = TNC_RESULT_SUCCESS; - break; - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); - return result; -} - -METHOD(imv_manager_t, solicit_recommendation, void, - private_tnc_imv_manager_t *this, TNC_ConnectionID id) -{ - enumerator_t *enumerator; - imv_t *imv; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - imv->solicit_recommendation(imv->get_id(imv), id); - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); -} - -METHOD(imv_manager_t, receive_message, void, - private_tnc_imv_manager_t *this, TNC_ConnectionID connection_id, - bool excl, - TNC_BufferReference msg, - TNC_UInt32 msg_len, - TNC_VendorID msg_vid, - TNC_MessageSubtype msg_subtype, - TNC_UInt32 src_imc_id, - TNC_UInt32 dst_imv_id) -{ - bool type_supported = FALSE; - TNC_MessageType msg_type; - TNC_UInt32 msg_flags; - enumerator_t *enumerator; - imv_t *imv; - - msg_type = (msg_vid << 8) | msg_subtype; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (imv->type_supported(imv, msg_vid, msg_subtype) && - (!excl || (excl && imv->has_id(imv, dst_imv_id)))) - { - if (imv->receive_message_long && src_imc_id) - { - type_supported = TRUE; - msg_flags = excl ? TNC_MESSAGE_FLAGS_EXCLUSIVE : 0; - imv->receive_message_long(imv->get_id(imv), connection_id, - msg_flags, msg, msg_len, msg_vid, msg_subtype, - src_imc_id, dst_imv_id); - - } - else if (imv->receive_message && msg_vid <= TNC_VENDORID_ANY && - msg_subtype <= TNC_SUBTYPE_ANY) - { - type_supported = TRUE; - msg_type = (msg_vid << 8) | msg_subtype; - imv->receive_message(imv->get_id(imv), connection_id, - msg, msg_len, msg_type); - } - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); - - if (!type_supported) - { - DBG2(DBG_TNC, "message type 0x%06x/0x%08x not supported by any IMV", - msg_vid, msg_subtype); - } -} - -METHOD(imv_manager_t, batch_ending, void, - private_tnc_imv_manager_t *this, TNC_ConnectionID id) -{ - enumerator_t *enumerator; - imv_t *imv; - - this->lock->read_lock(this->lock); - enumerator = this->imvs->create_enumerator(this->imvs); - while (enumerator->enumerate(enumerator, &imv)) - { - if (imv->batch_ending) - { - imv->batch_ending(imv->get_id(imv), id); - } - } - enumerator->destroy(enumerator); - this->lock->unlock(this->lock); -} - -METHOD(imv_manager_t, destroy, void, - private_tnc_imv_manager_t *this) -{ - imv_t *imv; - - while (this->imvs->remove_last(this->imvs, (void**)&imv) == SUCCESS) - { - if (imv->terminate && - imv->terminate(imv->get_id(imv)) != TNC_RESULT_SUCCESS) - { - DBG1(DBG_TNC, "IMV \"%s\" not terminated successfully", - imv->get_name(imv)); - } - imv->destroy(imv); - } - this->imvs->destroy(this->imvs); - this->lock->destroy(this->lock); - this->id_mutex->destroy(this->id_mutex); - free(this); -} - -/** - * Described in header. - */ -imv_manager_t* tnc_imv_manager_create(void) -{ - private_tnc_imv_manager_t *this; - recommendation_policy_t policy; - - INIT(this, - .public = { - .add = _add, - .remove = _remove_, /* avoid name conflict with stdio.h */ - .load = _load, - .load_from_functions = _load_from_functions, - .is_registered = _is_registered, - .reserve_id = _reserve_id, - .get_recommendation_policy = _get_recommendation_policy, - .create_recommendations = _create_recommendations, - .enforce_recommendation = _enforce_recommendation, - .notify_connection_change = _notify_connection_change, - .set_message_types = _set_message_types, - .set_message_types_long = _set_message_types_long, - .solicit_recommendation = _solicit_recommendation, - .receive_message = _receive_message, - .batch_ending = _batch_ending, - .destroy = _destroy, - }, - .imvs = linked_list_create(), - .lock = rwlock_create(RWLOCK_TYPE_DEFAULT), - .id_mutex = mutex_create(MUTEX_TYPE_DEFAULT), - .next_imv_id = 1, - ); - - policy = enum_from_name(recommendation_policy_names, - lib->settings->get_str(lib->settings, - "%s.plugins.tnc-imv.recommendation_policy", "default", - charon->name)); - this->policy = (policy != -1) ? policy : RECOMMENDATION_POLICY_DEFAULT; - DBG1(DBG_TNC, "TNC recommendation policy is '%N'", - recommendation_policy_names, this->policy); - - return &this->public; -} diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_manager.h b/src/libcharon/plugins/tnc_imv/tnc_imv_manager.h deleted file mode 100644 index 2fe9e7ae3..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_manager.h +++ /dev/null @@ -1,32 +0,0 @@ -/* - * Copyright (C) 2010 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -/** - * - * @defgroup tnc_imv_manager tnc_imv_manager - * @{ @ingroup tnc_imv - */ - -#ifndef TNC_IMV_MANAGER_H_ -#define TNC_IMV_MANAGER_H_ - -#include <tnc/imv/imv_manager.h> - -/** - * Create an IMV manager instance. - */ -imv_manager_t *tnc_imv_manager_create(); - -#endif /** TNC_IMV_MANAGER_H_ @}*/ diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_plugin.c b/src/libcharon/plugins/tnc_imv/tnc_imv_plugin.c deleted file mode 100644 index d06c2fcaf..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_plugin.c +++ /dev/null @@ -1,83 +0,0 @@ -/* - * Copyright (C) 2010-2011 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -#include "tnc_imv_plugin.h" -#include "tnc_imv_manager.h" - -#include <tnc/tnc.h> - - -typedef struct private_tnc_imv_plugin_t private_tnc_imv_plugin_t; - -/** - * Private data of a tnc_imv_plugin_t object. - */ -struct private_tnc_imv_plugin_t { - - /** - * Public interface. - */ - tnc_imv_plugin_t public; - -}; - - -METHOD(plugin_t, get_name, char*, - tnc_imv_plugin_t *this) -{ - return "tnc-imv"; -} - -METHOD(plugin_t, get_features, int, - private_tnc_imv_plugin_t *this, plugin_feature_t *features[]) -{ - static plugin_feature_t f[] = { - PLUGIN_CALLBACK(tnc_manager_register, tnc_imv_manager_create), - PLUGIN_PROVIDE(CUSTOM, "imv-manager"), - PLUGIN_DEPENDS(CUSTOM, "tnccs-manager"), - PLUGIN_SDEPEND(CERT_DECODE, CERT_X509), - PLUGIN_SDEPEND(CERT_DECODE, CERT_TRUSTED_PUBKEY), - PLUGIN_SDEPEND(DATABASE, DB_ANY), - }; - *features = f; - return countof(f); -} - -METHOD(plugin_t, destroy, void, - private_tnc_imv_plugin_t *this) -{ - free(this); -} - -/* - * see header file - */ -plugin_t *tnc_imv_plugin_create() -{ - private_tnc_imv_plugin_t *this; - - INIT(this, - .public = { - .plugin = { - .get_name = _get_name, - .get_features = _get_features, - .destroy = _destroy, - }, - }, - ); - - return &this->public.plugin; -} - diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_plugin.h b/src/libcharon/plugins/tnc_imv/tnc_imv_plugin.h deleted file mode 100644 index afeee2ea2..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_plugin.h +++ /dev/null @@ -1,42 +0,0 @@ -/* - * Copyright (C) 2010 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -/** - * @defgroup tnc_imv tnc_imv - * @ingroup cplugins - * - * @defgroup tnc_imv_plugin tnc_imv_plugin - * @{ @ingroup tnc_imv - */ - -#ifndef TNC_IMV_PLUGIN_H_ -#define TNC_IMV_PLUGIN_H_ - -#include <plugins/plugin.h> - -typedef struct tnc_imv_plugin_t tnc_imv_plugin_t; - -/** - * TNC IMV plugin - */ -struct tnc_imv_plugin_t { - - /** - * implements plugin interface - */ - plugin_t plugin; -}; - -#endif /** TNC_IMV_PLUGIN_H_ @}*/ diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.c b/src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.c deleted file mode 100644 index a9dbb2b9f..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.c +++ /dev/null @@ -1,406 +0,0 @@ -/* - * Copyright (C) 2010-2012 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -#include <tncifimv.h> -#include <tncif_names.h> -#include <tncif_policy.h> - -#include <tnc/tnc.h> -#include <tnc/imv/imv.h> -#include <tnc/imv/imv_manager.h> -#include <tnc/imv/imv_recommendations.h> - -#include <utils/debug.h> -#include <collections/linked_list.h> - -typedef struct private_tnc_imv_recommendations_t private_tnc_imv_recommendations_t; -typedef struct recommendation_entry_t recommendation_entry_t; - -/** - * Recommendation entry - */ -struct recommendation_entry_t { - - /** - * IMV ID - */ - TNC_IMVID id; - - /** - * Received a recommendation message from this IMV? - */ - bool have_recommendation; - - /** - * Action Recommendation provided by IMV instance - */ - TNC_IMV_Action_Recommendation rec; - - /** - * Evaluation Result provided by IMV instance - */ - TNC_IMV_Evaluation_Result eval; - - /** - * Reason string provided by IMV instance - */ - chunk_t reason; - - /** - * Reason language provided by IMV instance - */ - chunk_t reason_language; -}; - -/** - * Private data of a recommendations_t object. - */ -struct private_tnc_imv_recommendations_t { - - /** - * Public members of recommendations_t. - */ - recommendations_t public; - - /** - * list of recommendations and evaluations provided by IMVs - */ - linked_list_t *recs; - - /** - * Preferred language for remediation messages - */ - chunk_t preferred_language; -}; - -METHOD(recommendations_t, provide_recommendation, TNC_Result, - private_tnc_imv_recommendations_t* this, TNC_IMVID id, - TNC_IMV_Action_Recommendation rec, - TNC_IMV_Evaluation_Result eval) -{ - enumerator_t *enumerator; - recommendation_entry_t *entry; - bool found = FALSE; - - DBG2(DBG_TNC, "IMV %u provides recommendation '%N' and evaluation '%N'", id, - TNC_IMV_Action_Recommendation_names, rec, - TNC_IMV_Evaluation_Result_names, eval); - - enumerator = this->recs->create_enumerator(this->recs); - while (enumerator->enumerate(enumerator, &entry)) - { - if (entry->id == id) - { - found = TRUE; - entry->have_recommendation = TRUE; - entry->rec = rec; - entry->eval = eval; - break; - } - } - enumerator->destroy(enumerator); - return found ? TNC_RESULT_SUCCESS : TNC_RESULT_FATAL; -} - -METHOD(recommendations_t, have_recommendation, bool, - private_tnc_imv_recommendations_t *this, TNC_IMV_Action_Recommendation *rec, - TNC_IMV_Evaluation_Result *eval) -{ - enumerator_t *enumerator; - recommendation_entry_t *entry; - recommendation_policy_t policy; - TNC_IMV_Action_Recommendation final_rec; - TNC_IMV_Evaluation_Result final_eval; - bool first = TRUE, incomplete = FALSE; - - final_rec = TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION; - final_eval = TNC_IMV_EVALUATION_RESULT_DONT_KNOW; - if (rec && eval) - { - *rec = final_rec; - *eval = final_eval; - } - - if (this->recs->get_count(this->recs) == 0) - { - DBG1(DBG_TNC, "there are no IMVs to make a recommendation"); - return TRUE; - } - policy = tnc->imvs->get_recommendation_policy(tnc->imvs); - - enumerator = this->recs->create_enumerator(this->recs); - while (enumerator->enumerate(enumerator, &entry)) - { - if (!entry->have_recommendation) - { - incomplete = TRUE; - break; - } - if (first) - { - final_rec = entry->rec; - final_eval = entry->eval; - first = FALSE; - continue; - } - switch (policy) - { - case RECOMMENDATION_POLICY_DEFAULT: - final_rec = tncif_policy_update_recommendation(final_rec, - entry->rec); - final_eval = tncif_policy_update_evaluation(final_eval, - entry->eval); - break; - - case RECOMMENDATION_POLICY_ALL: - if (entry->rec != final_rec) - { - final_rec = TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION; - } - if (entry->eval != final_eval) - { - final_eval = TNC_IMV_EVALUATION_RESULT_DONT_KNOW; - } - break; - - case RECOMMENDATION_POLICY_ANY: - switch (entry->rec) - { - case TNC_IMV_ACTION_RECOMMENDATION_ALLOW: - final_rec = entry->rec; - break; - case TNC_IMV_ACTION_RECOMMENDATION_ISOLATE: - if (final_rec != TNC_IMV_ACTION_RECOMMENDATION_ALLOW) - { - final_rec = entry->rec; - }; - break; - case TNC_IMV_ACTION_RECOMMENDATION_NO_ACCESS: - if (final_rec == TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION) - { - final_rec = entry->rec; - }; - break; - case TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION: - break; - } - switch (entry->eval) - { - case TNC_IMV_EVALUATION_RESULT_COMPLIANT: - final_eval = entry->eval; - break; - case TNC_IMV_EVALUATION_RESULT_NONCOMPLIANT_MINOR: - if (final_eval != TNC_IMV_EVALUATION_RESULT_COMPLIANT) - { - final_eval = entry->eval; - } - break; - case TNC_IMV_EVALUATION_RESULT_NONCOMPLIANT_MAJOR: - if (final_eval != TNC_IMV_EVALUATION_RESULT_COMPLIANT && - final_eval != TNC_IMV_EVALUATION_RESULT_NONCOMPLIANT_MINOR) - { - final_eval = entry->eval; - } - break; - case TNC_IMV_EVALUATION_RESULT_ERROR: - if (final_eval == TNC_IMV_EVALUATION_RESULT_DONT_KNOW) - { - final_eval = entry->eval; - } - break; - case TNC_IMV_EVALUATION_RESULT_DONT_KNOW: - break; - } - } - } - enumerator->destroy(enumerator); - - if (incomplete) - { - return FALSE; - } - if (rec && eval) - { - *rec = final_rec; - *eval = final_eval; - } - return TRUE; -} - -METHOD(recommendations_t, clear_recommendation, void, - private_tnc_imv_recommendations_t *this) -{ - enumerator_t *enumerator; - recommendation_entry_t *entry; - - enumerator = this->recs->create_enumerator(this->recs); - while (enumerator->enumerate(enumerator, &entry)) - { - entry->have_recommendation = FALSE; - entry->rec = TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION; - entry->eval = TNC_IMV_EVALUATION_RESULT_DONT_KNOW; - chunk_clear(&entry->reason); - chunk_clear(&entry->reason_language); - } - enumerator->destroy(enumerator); -} - -METHOD(recommendations_t, get_preferred_language, chunk_t, - private_tnc_imv_recommendations_t *this) -{ - return this->preferred_language; -} - -METHOD(recommendations_t, set_preferred_language, void, - private_tnc_imv_recommendations_t *this, chunk_t pref_lang) -{ - free(this->preferred_language.ptr); - this->preferred_language = chunk_clone(pref_lang); -} - -METHOD(recommendations_t, set_reason_string, TNC_Result, - private_tnc_imv_recommendations_t *this, TNC_IMVID id, chunk_t reason) -{ - enumerator_t *enumerator; - recommendation_entry_t *entry; - bool found = FALSE; - - DBG2(DBG_TNC, "IMV %u is setting reason string to '%.*s'", - id, (int)reason.len, reason.ptr); - - enumerator = this->recs->create_enumerator(this->recs); - while (enumerator->enumerate(enumerator, &entry)) - { - if (entry->id == id) - { - found = TRUE; - free(entry->reason.ptr); - entry->reason = chunk_clone(reason); - break; - } - } - enumerator->destroy(enumerator); - return found ? TNC_RESULT_SUCCESS : TNC_RESULT_INVALID_PARAMETER; -} - -METHOD(recommendations_t, set_reason_language, TNC_Result, - private_tnc_imv_recommendations_t *this, TNC_IMVID id, chunk_t reason_lang) -{ - enumerator_t *enumerator; - recommendation_entry_t *entry; - bool found = FALSE; - - DBG2(DBG_TNC, "IMV %u is setting reason language to '%.*s'", - id, (int)reason_lang.len, reason_lang.ptr); - - enumerator = this->recs->create_enumerator(this->recs); - while (enumerator->enumerate(enumerator, &entry)) - { - if (entry->id == id) - { - found = TRUE; - free(entry->reason_language.ptr); - entry->reason_language = chunk_clone(reason_lang); - break; - } - } - enumerator->destroy(enumerator); - return found ? TNC_RESULT_SUCCESS : TNC_RESULT_INVALID_PARAMETER; -} - -/** - * Enumerate reason and reason_language, not recommendation entries - */ -static bool reason_filter(void *null, recommendation_entry_t **entry, - TNC_IMVID *id, void *i2, chunk_t *reason, void *i3, - chunk_t *reason_language) -{ - if ((*entry)->reason.len) - { - *id = (*entry)->id; - *reason = (*entry)->reason; - *reason_language = (*entry)->reason_language; - return TRUE; - } - else - { - return FALSE; - } -} - -METHOD(recommendations_t, create_reason_enumerator, enumerator_t*, - private_tnc_imv_recommendations_t *this) -{ - return enumerator_create_filter(this->recs->create_enumerator(this->recs), - (void*)reason_filter, NULL, NULL); -} - -METHOD(recommendations_t, destroy, void, - private_tnc_imv_recommendations_t *this) -{ - recommendation_entry_t *entry; - - while (this->recs->remove_last(this->recs, (void**)&entry) == SUCCESS) - { - free(entry->reason.ptr); - free(entry->reason_language.ptr); - free(entry); - } - this->recs->destroy(this->recs); - free(this->preferred_language.ptr); - free(this); -} - -/** - * Described in header. - */ -recommendations_t* tnc_imv_recommendations_create(linked_list_t *imv_list) -{ - private_tnc_imv_recommendations_t *this; - recommendation_entry_t *entry; - enumerator_t *enumerator; - imv_t *imv; - - INIT(this, - .public = { - .provide_recommendation = _provide_recommendation, - .have_recommendation = _have_recommendation, - .clear_recommendation = _clear_recommendation, - .get_preferred_language = _get_preferred_language, - .set_preferred_language = _set_preferred_language, - .set_reason_string = _set_reason_string, - .set_reason_language = _set_reason_language, - .create_reason_enumerator = _create_reason_enumerator, - .destroy = _destroy, - }, - .recs = linked_list_create(), - ); - - enumerator = imv_list->create_enumerator(imv_list); - while (enumerator->enumerate(enumerator, &imv)) - { - entry = malloc_thing(recommendation_entry_t); - entry->id = imv->get_id(imv); - entry->have_recommendation = FALSE; - entry->rec = TNC_IMV_ACTION_RECOMMENDATION_NO_RECOMMENDATION; - entry->eval = TNC_IMV_EVALUATION_RESULT_DONT_KNOW; - entry->reason = chunk_empty; - entry->reason_language = chunk_empty; - this->recs->insert_last(this->recs, entry); - } - enumerator->destroy(enumerator); - - return &this->public; -} diff --git a/src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.h b/src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.h deleted file mode 100644 index 66d03b2f8..000000000 --- a/src/libcharon/plugins/tnc_imv/tnc_imv_recommendations.h +++ /dev/null @@ -1,33 +0,0 @@ -/* - * Copyright (C) 2010 Andreas Steffen - * HSR Hochschule fuer Technik Rapperswil - * - * This program is free software; you can redistribute it and/or modify it - * under the terms of the GNU General Public License as published by the - * Free Software Foundation; either version 2 of the License, or (at your - * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. - * - * This program is distributed in the hope that it will be useful, but - * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY - * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License - * for more details. - */ - -/** - * - * @defgroup tnc_imv_manager tnc_imv_manager - * @{ @ingroup tnc_imv - */ - -#ifndef TNC_IMV_RECOMMENDATIONS_H_ -#define TNC_IMV_RECOMMENDATIONS_H_ - -#include <tnc/imv/imv_recommendations.h> -#include <collections/linked_list.h> - -/** - * Create an IMV empty recommendations instance - */ -recommendations_t *tnc_imv_recommendations_create(); - -#endif /** TNC_IMV_RECOMMENDATIONS_H_ @}*/ |