2008-02-28 02:34:43 +01:00
|
|
|
/*
|
|
|
|
|
* IKEv2 responder (RFC 4306) for EAP-IKEV2
|
|
|
|
|
* Copyright (c) 2007, Jouni Malinen <j@w1.fi>
|
|
|
|
|
*
|
2012-02-11 15:46:35 +01:00
|
|
|
* This software may be distributed under the terms of the BSD license.
|
|
|
|
|
* See README for more details.
|
2008-02-28 02:34:43 +01:00
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
#ifndef IKEV2_H
|
|
|
|
|
#define IKEV2_H
|
|
|
|
|
|
|
|
|
|
#include "eap_common/ikev2_common.h"
|
|
|
|
|
|
|
|
|
|
struct ikev2_proposal_data {
|
|
|
|
|
u8 proposal_num;
|
|
|
|
|
int integ;
|
|
|
|
|
int prf;
|
|
|
|
|
int encr;
|
|
|
|
|
int dh;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
struct ikev2_responder_data {
|
|
|
|
|
enum { SA_INIT, SA_AUTH, CHILD_SA, NOTIFY, IKEV2_DONE, IKEV2_FAILED }
|
|
|
|
|
state;
|
|
|
|
|
u8 i_spi[IKEV2_SPI_LEN];
|
|
|
|
|
u8 r_spi[IKEV2_SPI_LEN];
|
|
|
|
|
u8 i_nonce[IKEV2_NONCE_MAX_LEN];
|
|
|
|
|
size_t i_nonce_len;
|
|
|
|
|
u8 r_nonce[IKEV2_NONCE_MAX_LEN];
|
|
|
|
|
size_t r_nonce_len;
|
|
|
|
|
struct wpabuf *i_dh_public;
|
|
|
|
|
struct wpabuf *r_dh_private;
|
|
|
|
|
struct ikev2_proposal_data proposal;
|
|
|
|
|
const struct dh_group *dh;
|
|
|
|
|
struct ikev2_keys keys;
|
|
|
|
|
u8 *IDi;
|
|
|
|
|
size_t IDi_len;
|
|
|
|
|
u8 IDi_type;
|
|
|
|
|
u8 *IDr;
|
|
|
|
|
size_t IDr_len;
|
|
|
|
|
struct wpabuf *r_sign_msg;
|
|
|
|
|
struct wpabuf *i_sign_msg;
|
|
|
|
|
u8 *shared_secret;
|
|
|
|
|
size_t shared_secret_len;
|
|
|
|
|
enum { PEER_AUTH_CERT, PEER_AUTH_SECRET } peer_auth;
|
|
|
|
|
u8 *key_pad;
|
|
|
|
|
size_t key_pad_len;
|
|
|
|
|
u16 error_type;
|
|
|
|
|
enum { LAST_MSG_SA_INIT, LAST_MSG_SA_AUTH } last_msg;
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
void ikev2_responder_deinit(struct ikev2_responder_data *data);
|
|
|
|
|
int ikev2_responder_process(struct ikev2_responder_data *data,
|
|
|
|
|
const struct wpabuf *buf);
|
|
|
|
|
struct wpabuf * ikev2_responder_build(struct ikev2_responder_data *data);
|
|
|
|
|
|
|
|
|
|
#endif /* IKEV2_H */
|
