123 lines
5.5 KiB
C
123 lines
5.5 KiB
C
#ifndef TINC_CONNECTION_H
|
|
#define TINC_CONNECTION_H
|
|
|
|
/*
|
|
connection.h -- header for connection.c
|
|
Copyright (C) 2000-2016 Guus Sliepen <guus@tinc-vpn.org>,
|
|
2000-2005 Ivo Timmermans
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License along
|
|
with this program; if not, write to the Free Software Foundation, Inc.,
|
|
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
|
|
#include <openssl/rsa.h>
|
|
#include <openssl/evp.h>
|
|
|
|
#if OPENSSL_VERSION_NUMBER < 0x10100000L
|
|
#define EVP_CIPHER_CTX_reset(c) EVP_CIPHER_CTX_cleanup(c)
|
|
#endif
|
|
|
|
#include "avl_tree.h"
|
|
|
|
#define OPTION_INDIRECT 0x0001
|
|
#define OPTION_TCPONLY 0x0002
|
|
#define OPTION_PMTU_DISCOVERY 0x0004
|
|
#define OPTION_CLAMP_MSS 0x0008
|
|
|
|
typedef struct connection_status_t {
|
|
unsigned int pinged: 1; /* sent ping */
|
|
unsigned int active: 1; /* 1 if active.. */
|
|
unsigned int connecting: 1; /* 1 if we are waiting for a non-blocking connect() to finish */
|
|
unsigned int unused_termreq: 1; /* the termination of this connection was requested */
|
|
unsigned int remove: 1; /* Set to 1 if you want this connection removed */
|
|
unsigned int timeout: 1; /* 1 if gotten timeout */
|
|
unsigned int encryptout: 1; /* 1 if we can encrypt outgoing traffic */
|
|
unsigned int decryptin: 1; /* 1 if we have to decrypt incoming traffic */
|
|
unsigned int mst: 1; /* 1 if this connection is part of a minimum spanning tree */
|
|
unsigned int proxy_passed: 1; /* 1 if we are connecting via a proxy and we have finished talking with it */
|
|
unsigned int tarpit: 1; /* 1 if the connection should be added to the tarpit */
|
|
unsigned int unused: 21;
|
|
} connection_status_t;
|
|
|
|
#include "edge.h"
|
|
#include "net.h"
|
|
#include "node.h"
|
|
|
|
typedef struct connection_t {
|
|
char *name; /* name he claims to have */
|
|
|
|
union sockaddr_t address; /* his real (internet) ip */
|
|
char *hostname; /* the hostname of its real ip */
|
|
int protocol_version; /* used protocol */
|
|
|
|
int socket; /* socket used for this connection */
|
|
uint32_t options; /* options for this connection */
|
|
connection_status_t status; /* status info */
|
|
int estimated_weight; /* estimation for the weight of the edge for this connection */
|
|
struct timeval start; /* time this connection was started, used for above estimation */
|
|
struct outgoing_t *outgoing; /* used to keep track of outgoing connections */
|
|
|
|
struct node_t *node; /* node associated with the other end */
|
|
struct edge_t *edge; /* edge associated with this connection */
|
|
|
|
RSA *rsa_key; /* his public/private key */
|
|
const EVP_CIPHER *incipher; /* Cipher he will use to send data to us */
|
|
const EVP_CIPHER *outcipher; /* Cipher we will use to send data to him */
|
|
EVP_CIPHER_CTX *inctx; /* Context of encrypted meta data that will come from him to us */
|
|
EVP_CIPHER_CTX *outctx; /* Context of encrypted meta data that will be sent from us to him */
|
|
uint64_t inbudget; /* Encrypted bytes send budget */
|
|
uint64_t outbudget; /* Encrypted bytes receive budget */
|
|
char *inkey; /* His symmetric meta key + iv */
|
|
char *outkey; /* Our symmetric meta key + iv */
|
|
int inkeylength; /* Length of his key + iv */
|
|
int outkeylength; /* Length of our key + iv */
|
|
const EVP_MD *indigest;
|
|
const EVP_MD *outdigest;
|
|
int inmaclength;
|
|
int outmaclength;
|
|
int incompression;
|
|
int outcompression;
|
|
char *mychallenge; /* challenge we received from him */
|
|
char *hischallenge; /* challenge we sent to him */
|
|
|
|
char buffer[MAXBUFSIZE]; /* metadata input buffer */
|
|
int buflen; /* bytes read into buffer */
|
|
int reqlen; /* length of incoming request */
|
|
length_t tcplen; /* length of incoming TCPpacket */
|
|
int allow_request; /* defined if there's only one request possible */
|
|
|
|
char *outbuf; /* metadata output buffer */
|
|
int outbufstart; /* index of first meaningful byte in output buffer */
|
|
int outbuflen; /* number of meaningful bytes in output buffer */
|
|
int outbufsize; /* number of bytes allocated to output buffer */
|
|
|
|
time_t last_ping_time; /* last time we saw some activity from the other end or pinged them */
|
|
time_t last_flushed_time; /* last time buffer was empty. Only meaningful if outbuflen > 0 */
|
|
|
|
avl_tree_t *config_tree; /* Pointer to configuration tree belonging to him */
|
|
} connection_t;
|
|
|
|
extern avl_tree_t *connection_tree;
|
|
extern connection_t *everyone;
|
|
|
|
extern void init_connections(void);
|
|
extern void exit_connections(void);
|
|
extern connection_t *new_connection(void) __attribute__((__malloc__));
|
|
extern void free_connection(connection_t *c);
|
|
extern void free_connection_partially(connection_t *c);
|
|
extern void connection_add(connection_t *c);
|
|
extern void connection_del(connection_t *c);
|
|
extern void dump_connections(void);
|
|
|
|
#endif
|