sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-03 00:00:24 -04:00
Code Issues Projects Releases Wiki Activity

message: Add rules for IKE_FOLLOWUP_KE exchanges

Browse Source
This commit is contained in:
Tobias Brunner 2020-04-03 15:10:40 +02:00
parent 414db6cab1
commit b8358936aa
1 changed files with 48 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
src/libcharon/encoding/message.c
View File

@ -440,6 +440,46 @@ static payload_order_t ike_intermediate_r_order[] = {
{PLV2_FRAGMENT, 0},
};
/**
* Message rule for IKE_FOLLOWUP_KE from initiator.
*/
static payload_rule_t ike_followup_ke_i_rules[] = {
/* payload type min max encr suff */
{PLV2_FRAGMENT, 0, 1, TRUE, TRUE},
{PLV2_NOTIFY, 0, MAX_NOTIFY_PAYLOADS, TRUE, FALSE},
{PLV2_KEY_EXCHANGE, 1, 1, TRUE, FALSE},
};
/**
* payload order for IKE_FOLLOWUP_KE initiator
*/
static payload_order_t ike_followup_ke_i_order[] = {
/* payload type notify type */
{PLV2_KEY_EXCHANGE, 0},
{PLV2_NOTIFY, 0},
{PLV2_FRAGMENT, 0},
};
/**
* Message rule for IKE_FOLLOWUP_KE from responder.
*/
static payload_rule_t ike_followup_ke_r_rules[] = {
/* payload type min max encr suff */
{PLV2_FRAGMENT, 0, 1, TRUE, TRUE},
{PLV2_NOTIFY, 0, MAX_NOTIFY_PAYLOADS, TRUE, TRUE},
{PLV2_KEY_EXCHANGE, 1, 1, TRUE, FALSE},
};
/**
* payload order for IKE_FOLLOWUP_KE responder
*/
static payload_order_t ike_followup_ke_r_order[] = {
/* payload type notify type */
{PLV2_KEY_EXCHANGE, 0},
{PLV2_NOTIFY, 0},
{PLV2_FRAGMENT, 0},
};
#ifdef ME
/**
* Message rule for ME_CONNECT from initiator.
@ -815,6 +855,14 @@ static message_rule_t message_rules[] = {
countof(ike_intermediate_r_rules), ike_intermediate_r_rules,
countof(ike_intermediate_r_order), ike_intermediate_r_order,
},
{IKE_FOLLOWUP_KE, TRUE, TRUE,
countof(ike_followup_ke_i_rules), ike_followup_ke_i_rules,
countof(ike_followup_ke_i_order), ike_followup_ke_i_order,
},
{IKE_FOLLOWUP_KE, FALSE, TRUE,
countof(ike_followup_ke_r_rules), ike_followup_ke_r_rules,
countof(ike_followup_ke_r_order), ike_followup_ke_r_order,
},
#ifdef ME
{ME_CONNECT, TRUE, TRUE,
countof(me_connect_i_rules), me_connect_i_rules,