- Integrate rbl trees into tinc.

src/connection.h

@@ -0,0 +1,122 @@
+/*
+    connection.h -- header for connection.c
+    Copyright (C) 2000 Guus Sliepen <guus@sliepen.warande.net>,
+                  2000 Ivo Timmermans <itimmermans@bigfoot.com>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program; if not, write to the Free Software
+    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+
+    $Id: connection.h,v 1.1.2.1 2000/11/20 19:12:11 guus Exp $
+*/
+
+#ifndef __TINC_CONNECTION_H__
+#define __TINC_CONNECTION_H__
+
+#include <rbl.h>
+
+#include "config.h"
+
+#ifdef HAVE_OPENSSL_EVP_H
+# include <openssl/evp.h>
+#else
+# include <evp.h>
+#endif
+
+#ifdef HAVE_OPENSSL_RSA_H
+# include <openssl/rsa.h>
+#else
+# include <rsa.h>
+#endif
+
+#include "net.h"
+#include "conf.h"
+
+typedef struct status_bits_t {
+  int pinged:1;                    /* sent ping */
+  int meta:1;                      /* meta connection exists */
+  int active:1;                    /* 1 if active.. */
+  int outgoing:1;                  /* I myself asked for this conn */
+  int termreq:1;                   /* the termination of this connection was requested */
+  int remove:1;                    /* Set to 1 if you want this connection removed */
+  int timeout:1;                   /* 1 if gotten timeout */
+  int validkey:1;                  /* 1 if we currently have a valid key for him */
+  int waitingforkey:1;             /* 1 if we already sent out a request */
+  int dataopen:1;                  /* 1 if we have a valid UDP connection open */
+  int encryptout:1;		   /* 1 if we can encrypt outgoing traffic */
+  int decryptin:1;                 /* 1 if we have to decrypt incoming traffic */
+  int unused:18;
+} status_bits_t;
+
+typedef struct option_bits_t {
+  int unused:32;
+} option_bits_t;
+
+typedef struct connection_t {
+  char *name;                      /* name of this connection */
+  ipv4_t address;                  /* his real (internet) ip */
+  char *hostname;                  /* the hostname of its real ip */
+  short unsigned int port;         /* his portnumber */
+  int protocol_version;            /* used protocol */
+  long unsigned int options;       /* options turned on for this connection */
+
+  int flags;                       /* his flags */
+  int socket;                      /* our udp vpn socket */
+  int meta_socket;                 /* our tcp meta socket */
+  status_bits_t status;            /* status info */
+  packet_queue_t *sq;              /* pending outgoing packets */
+  packet_queue_t *rq;              /* pending incoming packets (they have no
+				      valid key to be decrypted with) */
+  RSA *rsa_key;                    /* the public/private key */
+
+  EVP_CIPHER_CTX *cipher_inctx;    /* Context of encrypted meta data that will come from him to us */
+  EVP_CIPHER_CTX *cipher_outctx;   /* Context of encrypted meta data that will be sent from us to him */
+  char *cipher_inkey;              /* His symmetric meta key */
+  char *cipher_outkey;             /* Our symmetric meta key */
+
+  EVP_CIPHER *cipher_pkttype;      /* Cipher type for encrypted vpn packets */ 
+  char *cipher_pktkey;             /* Cipher key and iv */
+  int cipher_pktkeylength;         /* Cipher key and iv length*/
+
+  char *buffer;                    /* metadata input buffer */
+  int buflen;                      /* bytes read into buffer */
+  int reqlen;                      /* length of first request in buffer */
+  int allow_request;               /* defined if there's only one request possible */
+
+  time_t last_ping_time;           /* last time we saw some activity from the other end */  
+
+  char *mychallenge;               /* challenge we received from him */
+  char *hischallenge;              /* challenge we sent to him */
+
+  struct connection_t *nexthop;    /* nearest meta-hop in this direction */
+  
+  rbltree_t *subnet_tree;          /* Pointer to a tree of subnets belonging to this connection */
+
+  struct config_t *config;         /* Pointer to configuration tree belonging to this host */
+} connection_t;
+
+extern rbltree_t *connection_tree;
+extern connection_t *myself;
+
+extern void init_connections(void);
+extern connection_t *new_connection(void);
+extern void free_connection(connection_t *);
+extern void connection_add(connection_t *);
+extern void connection_del(connection_t *);
+extern connection_t *lookup_id(char *);
+extern void dump_connection_list(void);
+extern int read_host_config(connection_t *);
+extern void destroy_connection(void);
+extern void prune_connection_tree(void);
+
+#endif /* __TINC_CONNECTION_H__ */