diff options
Diffstat (limited to 'src/Cedar/Link.c')
-rw-r--r-- | src/Cedar/Link.c | 655 |
1 files changed, 655 insertions, 0 deletions
diff --git a/src/Cedar/Link.c b/src/Cedar/Link.c new file mode 100644 index 00000000..13f001d2 --- /dev/null +++ b/src/Cedar/Link.c @@ -0,0 +1,655 @@ +// SoftEther VPN Source Code
+// Cedar Communication Module
+//
+// SoftEther VPN Server, Client and Bridge are free software under GPLv2.
+//
+// Copyright (c) 2012-2014 Daiyuu Nobori.
+// Copyright (c) 2012-2014 SoftEther VPN Project, University of Tsukuba, Japan.
+// Copyright (c) 2012-2014 SoftEther Corporation.
+//
+// All Rights Reserved.
+//
+// http://www.softether.org/
+//
+// Author: Daiyuu Nobori
+// Comments: Tetsuo Sugiyama, Ph.D.
+//
+//
+// This program is free software; you can redistribute it and/or
+// modify it under the terms of the GNU General Public License
+// version 2 as published by the Free Software Foundation.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License version 2
+// along with this program; if not, write to the Free Software
+// Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+// IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+// CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+// TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+// SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+//
+// THE LICENSE AGREEMENT IS ATTACHED ON THE SOURCE-CODE PACKAGE
+// AS "LICENSE.TXT" FILE. READ THE TEXT FILE IN ADVANCE TO USE THE SOFTWARE.
+//
+//
+// THIS SOFTWARE IS DEVELOPED IN JAPAN, AND DISTRIBUTED FROM JAPAN,
+// UNDER JAPANESE LAWS. YOU MUST AGREE IN ADVANCE TO USE, COPY, MODIFY,
+// MERGE, PUBLISH, DISTRIBUTE, SUBLICENSE, AND/OR SELL COPIES OF THIS
+// SOFTWARE, THAT ANY JURIDICAL DISPUTES WHICH ARE CONCERNED TO THIS
+// SOFTWARE OR ITS CONTENTS, AGAINST US (SOFTETHER PROJECT, SOFTETHER
+// CORPORATION, DAIYUU NOBORI OR OTHER SUPPLIERS), OR ANY JURIDICAL
+// DISPUTES AGAINST US WHICH ARE CAUSED BY ANY KIND OF USING, COPYING,
+// MODIFYING, MERGING, PUBLISHING, DISTRIBUTING, SUBLICENSING, AND/OR
+// SELLING COPIES OF THIS SOFTWARE SHALL BE REGARDED AS BE CONSTRUED AND
+// CONTROLLED BY JAPANESE LAWS, AND YOU MUST FURTHER CONSENT TO
+// EXCLUSIVE JURISDICTION AND VENUE IN THE COURTS SITTING IN TOKYO,
+// JAPAN. YOU MUST WAIVE ALL DEFENSES OF LACK OF PERSONAL JURISDICTION
+// AND FORUM NON CONVENIENS. PROCESS MAY BE SERVED ON EITHER PARTY IN
+// THE MANNER AUTHORIZED BY APPLICABLE LAW OR COURT RULE.
+//
+// USE ONLY IN JAPAN. DO NOT USE IT IN OTHER COUNTRIES. IMPORTING THIS
+// SOFTWARE INTO OTHER COUNTRIES IS AT YOUR OWN RISK. SOME COUNTRIES
+// PROHIBIT ENCRYPTED COMMUNICATIONS. USING THIS SOFTWARE IN OTHER
+// COUNTRIES MIGHT BE RESTRICTED.
+//
+//
+// DEAR SECURITY EXPERTS
+// ---------------------
+//
+// If you find a bug or a security vulnerability please kindly inform us
+// about the problem immediately so that we can fix the security problem
+// to protect a lot of users around the world as soon as possible.
+//
+// Our e-mail address for security reports is:
+// softether-vpn-security [at] softether.org
+//
+// Please note that the above e-mail address is not a technical support
+// inquiry address. If you need technical assistance, please visit
+// http://www.softether.org/ and ask your question on the users forum.
+//
+// Thank you for your cooperation.
+
+
+// Link.c
+// Inter-HUB Link
+
+#include "CedarPch.h"
+
+// Link server thread
+void LinkServerSessionThread(THREAD *t, void *param)
+{
+ LINK *k = (LINK *)param;
+ CONNECTION *c;
+ SESSION *s;
+ POLICY *policy;
+ wchar_t name[MAX_SIZE];
+ // Validate arguments
+ if (t == NULL || param == NULL)
+ {
+ return;
+ }
+
+ // Create a server connection
+ c = NewServerConnection(k->Cedar, NULL, t);
+ c->Protocol = CONNECTION_HUB_LINK_SERVER;
+
+ // Create a policy
+ policy = ZeroMalloc(sizeof(POLICY));
+ Copy(policy, k->Policy, sizeof(POLICY));
+
+ // Create a server session
+ s = NewServerSession(k->Cedar, c, k->Hub, LINK_USER_NAME, policy);
+ s->LinkModeServer = true;
+ s->Link = k;
+ c->Session = s;
+ ReleaseConnection(c);
+
+ // User name
+ s->Username = CopyStr(LINK_USER_NAME_PRINT);
+
+ k->ServerSession = s;
+ AddRef(k->ServerSession->ref);
+
+ // Notify the initialization completion
+ NoticeThreadInit(t);
+
+ UniStrCpy(name, sizeof(name), k->Option->AccountName);
+ HLog(s->Hub, "LH_LINK_START", name, s->Name);
+
+ // Main function of session
+ SessionMain(s);
+
+ HLog(s->Hub, "LH_LINK_STOP", name);
+
+ ReleaseSession(s);
+}
+
+// Initialize the packet adapter
+bool LinkPaInit(SESSION *s)
+{
+ LINK *k;
+ THREAD *t;
+ // Validate arguments
+ if (s == NULL || (k = (LINK *)s->PacketAdapter->Param) == NULL)
+ {
+ return false;
+ }
+
+ // Create a transmission packet queue
+ k->SendPacketQueue = NewQueue();
+
+ // Creat a link server thread
+ t = NewThread(LinkServerSessionThread, (void *)k);
+ WaitThreadInit(t);
+
+ ReleaseThread(t);
+
+ return true;
+}
+
+// Get the cancel object
+CANCEL *LinkPaGetCancel(SESSION *s)
+{
+ LINK *k;
+ // Validate arguments
+ if (s == NULL || (k = (LINK *)s->PacketAdapter->Param) == NULL)
+ {
+ return NULL;
+ }
+
+ return NULL;
+}
+
+// Get the next packet
+UINT LinkPaGetNextPacket(SESSION *s, void **data)
+{
+ LINK *k;
+ UINT ret = 0;
+ // Validate arguments
+ if (s == NULL || data == NULL || (k = (LINK *)s->PacketAdapter->Param) == NULL)
+ {
+ return INFINITE;
+ }
+
+ // Examine whether there are packets in the queue
+ LockQueue(k->SendPacketQueue);
+ {
+ BLOCK *block = GetNext(k->SendPacketQueue);
+
+ if (block != NULL)
+ {
+ // There was a packet
+ *data = block->Buf;
+ ret = block->Size;
+ // Discard the memory for the structure
+ Free(block);
+ }
+ }
+ UnlockQueue(k->SendPacketQueue);
+
+ return ret;
+}
+
+// Write the received packet
+bool LinkPaPutPacket(SESSION *s, void *data, UINT size)
+{
+ LINK *k;
+ BLOCK *block;
+ SESSION *server_session;
+ CONNECTION *server_connection;
+ // Validate arguments
+ if (s == NULL || (k = (LINK *)s->PacketAdapter->Param) == NULL)
+ {
+ return false;
+ }
+
+ server_session = k->ServerSession;
+ server_connection = server_session->Connection;
+
+ // Since the packet arrives from the HUB of the link destination,
+ // deliver it to the ReceivedBlocks of the server session
+ if (data != NULL)
+ {
+ block = NewBlock(data, size, 0);
+
+ LockQueue(server_connection->ReceivedBlocks);
+ {
+ InsertQueue(server_connection->ReceivedBlocks, block);
+ }
+ UnlockQueue(server_connection->ReceivedBlocks);
+ }
+ else
+ {
+ // Issue the Cancel, since finished store all packets when the data == NULL
+ Cancel(server_session->Cancel1);
+
+ if (k->Hub != NULL && k->Hub->Option != NULL && k->Hub->Option->YieldAfterStorePacket)
+ {
+ YieldCpu();
+ }
+ }
+
+ return true;
+}
+
+// Release the packet adapter
+void LinkPaFree(SESSION *s)
+{
+ LINK *k;
+ // Validate arguments
+ if (s == NULL || (k = (LINK *)s->PacketAdapter->Param) == NULL)
+ {
+ return;
+ }
+
+ // Stop the server session
+ StopSession(k->ServerSession);
+ ReleaseSession(k->ServerSession);
+
+ // Release the transmission packet queue
+ LockQueue(k->SendPacketQueue);
+ {
+ BLOCK *block;
+ while (block = GetNext(k->SendPacketQueue))
+ {
+ FreeBlock(block);
+ }
+ }
+ UnlockQueue(k->SendPacketQueue);
+
+ ReleaseQueue(k->SendPacketQueue);
+}
+
+// Packet adapter
+PACKET_ADAPTER *LinkGetPacketAdapter()
+{
+ return NewPacketAdapter(LinkPaInit, LinkPaGetCancel, LinkPaGetNextPacket,
+ LinkPaPutPacket, LinkPaFree);
+}
+
+// Release all links
+void ReleaseAllLink(HUB *h)
+{
+ LINK **kk;
+ UINT num, i;
+ // Validate arguments
+ if (h == NULL)
+ {
+ return;
+ }
+
+ LockList(h->LinkList);
+ {
+ num = LIST_NUM(h->LinkList);
+ kk = ToArray(h->LinkList);
+ DeleteAll(h->LinkList);
+ }
+ UnlockList(h->LinkList);
+
+ for (i = 0;i < num;i++)
+ {
+ LINK *k = kk[i];
+
+ ReleaseLink(k);
+ }
+
+ Free(kk);
+}
+
+// Release the link
+void ReleaseLink(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ if (Release(k->ref) == 0)
+ {
+ CleanupLink(k);
+ }
+}
+
+// Clean-up the link
+void CleanupLink(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ DeleteLock(k->lock);
+ if (k->ClientSession)
+ {
+ ReleaseSession(k->ClientSession);
+ }
+ Free(k->Option);
+ CiFreeClientAuth(k->Auth);
+ Free(k->Policy);
+
+ if (k->ServerCert != NULL)
+ {
+ FreeX(k->ServerCert);
+ }
+
+ Free(k);
+}
+
+// Make the link on-line
+void SetLinkOnline(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ if (k->Offline == false)
+ {
+ return;
+ }
+
+ k->Offline = false;
+ StartLink(k);
+}
+
+// Make the link off-line
+void SetLinkOffline(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ if (k->Offline)
+ {
+ return;
+ }
+
+ StopLink(k);
+ k->Offline = true;
+}
+
+// Delete the link
+void DelLink(HUB *hub, LINK *k)
+{
+ // Validate arguments
+ if (hub == NULL || k == NULL)
+ {
+ return;
+ }
+
+ LockList(hub->LinkList);
+ {
+ if (Delete(hub->LinkList, k))
+ {
+ ReleaseLink(k);
+ }
+ }
+ UnlockList(hub->LinkList);
+}
+
+// Start all links
+void StartAllLink(HUB *h)
+{
+ // Validate arguments
+ if (h == NULL)
+ {
+ return;
+ }
+
+ LockList(h->LinkList);
+ {
+ UINT i;
+ for (i = 0;i < LIST_NUM(h->LinkList);i++)
+ {
+ LINK *k = (LINK *)LIST_DATA(h->LinkList, i);
+
+ if (k->Offline == false)
+ {
+ StartLink(k);
+ }
+ }
+ }
+ UnlockList(h->LinkList);
+}
+
+// Stop all links
+void StopAllLink(HUB *h)
+{
+ LINK **link_list;
+ UINT num_link;
+ UINT i;
+ // Validate arguments
+ if (h == NULL)
+ {
+ return;
+ }
+
+ LockList(h->LinkList);
+ {
+ link_list = ToArray(h->LinkList);
+ num_link = LIST_NUM(h->LinkList);
+ for (i = 0;i < num_link;i++)
+ {
+ AddRef(link_list[i]->ref);
+ }
+ }
+ UnlockList(h->LinkList);
+
+ for (i = 0;i < num_link;i++)
+ {
+ StopLink(link_list[i]);
+ ReleaseLink(link_list[i]);
+ }
+
+ Free(link_list);
+}
+
+// Start the link
+void StartLink(LINK *k)
+{
+ PACKET_ADAPTER *pa;
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ LockLink(k);
+ {
+ if (k->Started || k->Halting)
+ {
+ UnlockLink(k);
+ return;
+ }
+ k->Started = true;
+ }
+ UnlockLink(k);
+
+ // Connect the client session
+ pa = LinkGetPacketAdapter();
+ pa->Param = (void *)k;
+ LockLink(k);
+ {
+ k->ClientSession = NewClientSession(k->Cedar, k->Option, k->Auth, pa);
+ }
+ UnlockLink(k);
+}
+
+// Stop the link
+void StopLink(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ LockLink(k);
+ {
+ if (k->Started == false)
+ {
+ UnlockLink(k);
+ return;
+ }
+ k->Started = false;
+ k->Halting = true;
+ }
+ UnlockLink(k);
+
+ if (k->ClientSession != NULL)
+ {
+ // Disconnect the client session
+ StopSession(k->ClientSession);
+
+ LockLink(k);
+ {
+ ReleaseSession(k->ClientSession);
+ k->ClientSession = NULL;
+ }
+ UnlockLink(k);
+ }
+
+ LockLink(k);
+ {
+ k->Halting = false;
+ }
+ UnlockLink(k);
+}
+
+// Lock the link
+void LockLink(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ Lock(k->lock);
+}
+
+// Unlock the link
+void UnlockLink(LINK *k)
+{
+ // Validate arguments
+ if (k == NULL)
+ {
+ return;
+ }
+
+ Unlock(k->lock);
+}
+
+// Normalize the policy for the link
+void NormalizeLinkPolicy(POLICY *p)
+{
+ // Validate arguments
+ if (p == NULL)
+ {
+ return;
+ }
+
+ p->Access = true;
+ p->NoBridge = p->NoRouting = p->PrivacyFilter =
+ p->MonitorPort = false;
+ p->MaxConnection = 32;
+ p->TimeOut = 20;
+ p->FixPassword = false;
+}
+
+// Create a Link
+LINK *NewLink(CEDAR *cedar, HUB *hub, CLIENT_OPTION *option, CLIENT_AUTH *auth, POLICY *policy)
+{
+ CLIENT_OPTION *o;
+ LINK *k;
+ CLIENT_AUTH *a;
+ // Validate arguments
+ if (cedar == NULL || hub == NULL || option == NULL || auth == NULL || policy == NULL)
+ {
+ return NULL;
+ }
+ if (hub->Halt)
+ {
+ return NULL;
+ }
+
+ if (LIST_NUM(hub->LinkList) >= MAX_HUB_LINKS)
+ {
+ return NULL;
+ }
+
+ if (UniIsEmptyStr(option->AccountName))
+ {
+ return NULL;
+ }
+
+ // Limitation of authentication method
+ if (auth->AuthType != CLIENT_AUTHTYPE_ANONYMOUS && auth->AuthType != CLIENT_AUTHTYPE_PASSWORD &&
+ auth->AuthType != CLIENT_AUTHTYPE_PLAIN_PASSWORD && auth->AuthType != CLIENT_AUTHTYPE_CERT)
+ {
+ // Authentication method other than anonymous authentication, password authentication, plain password, certificate authentication cannot be used
+ return NULL;
+ }
+
+ // Copy of the client options (for modification)
+ o = ZeroMalloc(sizeof(CLIENT_OPTION));
+ Copy(o, option, sizeof(CLIENT_OPTION));
+ StrCpy(o->DeviceName, sizeof(o->DeviceName), LINK_DEVICE_NAME);
+
+ o->RequireBridgeRoutingMode = true; // Request the bridge mode
+ o->RequireMonitorMode = false; // Not to require the monitor mode
+
+ o->NumRetry = INFINITE; // Retry the connection infinitely
+ o->RetryInterval = 10; // Retry interval is 10 seconds
+ o->NoRoutingTracking = true; // Stop the routing tracking
+
+ // Copy the authentication data
+ a = CopyClientAuth(auth);
+ a->SecureSignProc = NULL;
+ a->CheckCertProc = NULL;
+
+ // Link object
+ k = ZeroMalloc(sizeof(LINK));
+ k->lock = NewLock();
+ k->ref = NewRef();
+
+ k->Cedar = cedar;
+ k->Option = o;
+ k->Auth = a;
+ k->Hub = hub;
+
+ // Copy the policy
+ k->Policy = ZeroMalloc(sizeof(POLICY));
+ Copy(k->Policy, policy, sizeof(POLICY));
+
+ // Normalize the policy
+ NormalizeLinkPolicy(k->Policy);
+
+ // Register in the link list of the HUB
+ LockList(hub->LinkList);
+ {
+ Add(hub->LinkList, k);
+ AddRef(k->ref);
+ }
+ UnlockList(hub->LinkList);
+
+ return k;
+}
+
+
+// Developed by SoftEther VPN Project at University of Tsukuba in Japan.
+// Department of Computer Science has dozens of overly-enthusiastic geeks.
+// Join us: http://www.tsukuba.ac.jp/english/admission/
|