/*
- * Copyright (c) 2012, JANET(UK)
+ * Copyright (c) 2012-2014 , JANET(UK)
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* OF THE POSSIBILITY OF SUCH DAMAGE.
*
*/
-
+#include <sys/socket.h>
+#include <netinet/in.h>
+#include <arpa/inet.h>
#include <string.h>
#include <openssl/dh.h>
#include <jansson.h>
+#include <assert.h>
+#include <talloc.h>
+
#include <tr_msg.h>
#include <trust_router/tr_name.h>
-#include <trust_router/tid.h>
+#include <tid_internal.h>
+#include <trust_router/tr_constraint.h>
+#include <tr_debug.h>
+
+enum msg_type tr_msg_get_msg_type(TR_MSG *msg)
+{
+ return msg->msg_type;
+}
+
+void tr_msg_set_msg_type(TR_MSG *msg, enum msg_type type)
+{
+ msg->msg_type = type;
+}
+
+TID_REQ *tr_msg_get_req(TR_MSG *msg)
+{
+ if (msg->msg_type == TID_REQUEST)
+ return (TID_REQ *)msg->msg_rep;
+ return NULL;
+}
+
+void tr_msg_set_req(TR_MSG *msg, TID_REQ *req)
+{
+ msg->msg_rep = req;
+ msg->msg_type = TID_REQUEST;
+}
+
+TID_RESP *tr_msg_get_resp(TR_MSG *msg)
+{
+ if (msg->msg_type == TID_RESPONSE)
+ return (TID_RESP *)msg->msg_rep;
+ return NULL;
+}
+
+void tr_msg_set_resp(TR_MSG *msg, TID_RESP *resp)
+{
+ msg->msg_rep = resp;
+ msg->msg_type = TID_RESPONSE;
+}
static json_t *tr_msg_encode_dh(DH *dh)
{
static DH *tr_msg_decode_dh(json_t *jdh)
{
DH *dh = NULL;
- json_error_t rc;
json_t *jp = NULL;
json_t *jg = NULL;
json_t *jpub_key = NULL;
- int msize;
if (!(dh = malloc(sizeof(DH)))) {
- fprintf (stderr, "tr_msg_decode_dh(): Error allocating DH structure.\n");
+ tr_crit("tr_msg_decode_dh(): Error allocating DH structure.");
return NULL;
}
memset(dh, 0, sizeof(DH));
/* store required fields from dh object */
- if (((msize = json_object_size(jdh)) < 3) ||
- (NULL == (jp = json_object_get(jdh, "dh_p"))) ||
- (!json_is_string(jp)) ||
+ if ((NULL == (jp = json_object_get(jdh, "dh_p"))) ||
(NULL == (jg = json_object_get(jdh, "dh_g"))) ||
- (!json_is_string(jg)) ||
- (NULL == (jpub_key = json_object_get(jdh, "dh_pub_key"))) ||
- (!json_is_string(jdh))) {
- fprintf (stderr, "tr_msg_decode(): Error parsing message.\n");
+ (NULL == (jpub_key = json_object_get(jdh, "dh_pub_key")))) {
+ tr_debug("tr_msg_decode_dh(): Error parsing dh_info.");
free(dh);
return NULL;
}
if ((!req) || (!req->rp_realm) || (!req->realm) || !(req->comm))
return NULL;
- jreq = json_object();
+ assert(jreq = json_object());
jstr = json_string(req->rp_realm->buf);
json_object_set_new(jreq, "rp_realm", jstr);
jstr = json_string(req->comm->buf);
json_object_set_new(jreq, "community", jstr);
+
+ if (req->orig_coi) {
+ jstr = json_string(req->orig_coi->buf);
+ json_object_set_new(jreq, "orig_coi", jstr);
+ }
json_object_set_new(jreq, "dh_info", tr_msg_encode_dh(req->tidc_dh));
-
+
+ if (req->cons)
+ json_object_set(jreq, "constraints", (json_t *) req->cons);
+
return jreq;
}
static TID_REQ *tr_msg_decode_tidreq(json_t *jreq)
{
TID_REQ *treq = NULL;
- json_error_t rc;
json_t *jrp_realm = NULL;
json_t *jrealm = NULL;
json_t *jcomm = NULL;
json_t *jorig_coi = NULL;
json_t *jdh = NULL;
- int msize;
- if (!(treq = malloc(sizeof(TID_REQ)))) {
- fprintf (stderr, "tr_msg_decode_tidreq(): Error allocating TID_REQ structure.\n");
+ if (!(treq =tid_req_new())) {
+ tr_crit("tr_msg_decode_tidreq(): Error allocating TID_REQ structure.");
return NULL;
}
- memset(treq, 0, sizeof(TID_REQ));
-
/* store required fields from request */
- if (((msize = json_object_size(jreq)) < 4) ||
- (NULL == (jrp_realm = json_object_get(jreq, "rp_realm"))) ||
- (!json_is_string(jrp_realm)) ||
- (NULL == (jrealm = json_object_get(jreq, "realm"))) ||
- (!json_is_string(jrealm)) ||
- (NULL == (jcomm = json_object_get(jreq, "comm"))) ||
- (!json_is_string(jcomm)) ||
- (NULL == (jdh = json_object_get(jreq, "dh_info"))) ||
- (!json_is_object(jdh))) {
- fprintf (stderr, "tr_msg_decode(): Error parsing message.\n");
- free(treq);
+ if ((NULL == (jrp_realm = json_object_get(jreq, "rp_realm"))) ||
+ (NULL == (jrealm = json_object_get(jreq, "target_realm"))) ||
+ (NULL == (jcomm = json_object_get(jreq, "community")))) {
+ tr_debug("tr_msg_decode(): Error parsing required fields.");
+ tid_req_free(treq);
return NULL;
}
treq->rp_realm = tr_new_name((char *)json_string_value(jrp_realm));
treq->realm = tr_new_name((char *)json_string_value(jrealm));
treq->comm = tr_new_name((char *)json_string_value(jcomm));
+
+ /* Get DH Info from the request */
+ if (NULL == (jdh = json_object_get(jreq, "dh_info"))) {
+ tr_debug("tr_msg_decode(): Error parsing dh_info.");
+ tid_req_free(treq);
+ return NULL;
+ }
treq->tidc_dh = tr_msg_decode_dh(jdh);
/* store optional "orig_coi" field */
- if ((NULL != (jorig_coi = json_object_get(jreq, "orig_coi"))) &&
- (!json_is_object(jorig_coi))) {
+ if (NULL != (jorig_coi = json_object_get(jreq, "orig_coi"))) {
treq->orig_coi = tr_new_name((char *)json_string_value(jorig_coi));
}
+ treq->cons = (TR_CONSTRAINT_SET *) json_object_get(jreq, "constraints");
+ if (treq->cons) {
+ if (!tr_constraint_set_validate(treq->cons)) {
+ tr_debug("Constraint set validation failed");
+ tid_req_free(treq);
+ return NULL;
+ }
+ json_incref((json_t *) treq->cons);
+ tid_req_cleanup_json(treq, (json_t *) treq->cons);
+ }
return treq;
}
+static json_t *tr_msg_encode_one_server(TID_SRVR_BLK *srvr)
+{
+ json_t *jsrvr = NULL;
+ json_t *jstr = NULL;
+ gchar *time_str = g_time_val_to_iso8601(&srvr->key_expiration);
+
+ tr_debug("Encoding one server.");
+
+ jsrvr = json_object();
+
+ /* Server IP Address -- TBD handle IPv6 */
+ jstr = json_string(inet_ntoa(srvr->aaa_server_addr));
+ json_object_set_new(jsrvr, "server_addr", jstr);
+
+ json_object_set_new(jsrvr,
+ "key_expiration", json_string(time_str));
+ g_free(time_str);
+ /* Server DH Block */
+ jstr = json_string(srvr->key_name->buf);
+ json_object_set_new(jsrvr, "key_name", jstr);
+ json_object_set_new(jsrvr, "server_dh", tr_msg_encode_dh(srvr->aaa_server_dh));
+ if (srvr->path)
+ /* The path is owned by the srvr, so grab an extra ref*/
+ json_object_set(jsrvr, "path", srvr->path);
+ return jsrvr;
+}
+
+static int tr_msg_decode_one_server(json_t *jsrvr, TID_SRVR_BLK *srvr)
+{
+ json_t *jsrvr_addr = NULL;
+ json_t *jsrvr_kn = NULL;
+ json_t *jsrvr_dh = NULL;
+
+ if (jsrvr == NULL)
+ return -1;
+
+
+ if ((NULL == (jsrvr_addr = json_object_get(jsrvr, "server_addr"))) ||
+ (NULL == (jsrvr_kn = json_object_get(jsrvr, "key_name"))) ||
+ (NULL == (jsrvr_dh = json_object_get(jsrvr, "server_dh")))) {
+ tr_debug("tr_msg_decode_one_server(): Error parsing required fields.");
+ return -1;
+ }
+
+ /* TBD -- handle IPv6 Addresses */
+ inet_aton(json_string_value(jsrvr_addr), &(srvr->aaa_server_addr));
+ srvr->key_name = tr_new_name((char *)json_string_value(jsrvr_kn));
+ srvr->aaa_server_dh = tr_msg_decode_dh(jsrvr_dh);
+ return 0;
+}
+
+static json_t *tr_msg_encode_servers(TID_RESP *resp)
+{
+ json_t *jservers = NULL;
+ json_t *jsrvr = NULL;
+ TID_SRVR_BLK *srvr = NULL;
+ size_t index;
+
+ jservers = json_array();
+
+ tid_resp_servers_foreach(resp, srvr, index) {
+ if ((NULL == (jsrvr = tr_msg_encode_one_server(srvr))) ||
+ (-1 == json_array_append_new(jservers, jsrvr))) {
+ return NULL;
+ }
+ }
+
+ // tr_debug("tr_msg_encode_servers(): servers contains:");
+ // tr_debug("%s", json_dumps(jservers, 0));
+ return jservers;
+}
+
+static TID_SRVR_BLK *tr_msg_decode_servers(void * ctx, json_t *jservers, size_t *out_len)
+{
+ TID_SRVR_BLK *servers = NULL;
+ json_t *jsrvr;
+ size_t i, num_servers;
+
+ num_servers = json_array_size(jservers);
+ tr_debug("tr_msg_decode_servers(): Number of servers = %u.", (unsigned) num_servers);
+
+ if (0 == num_servers) {
+ tr_debug("tr_msg_decode_servers(): Server array is empty.");
+ return NULL;
+ }
+ servers = talloc_zero_array(ctx, TID_SRVR_BLK, num_servers);
+
+ for (i = 0; i < num_servers; i++) {
+ jsrvr = json_array_get(jservers, i);
+ if (0 != tr_msg_decode_one_server(jsrvr, &servers[i])) {
+ talloc_free(servers);
+ return NULL;
+ }
+
+
+ }
+ *out_len = num_servers;
+ return servers;
+}
+
static json_t * tr_msg_encode_tidresp(TID_RESP *resp)
{
json_t *jresp = NULL;
json_t *jstr = NULL;
+ json_t *jservers = NULL;
- if ((!resp) || (!resp->result) || (!resp->rp_realm) || (!resp->realm) || !(resp->comm))
+ if ((!resp) || (!resp->rp_realm) || (!resp->realm) || !(resp->comm))
return NULL;
jresp = json_object();
- jstr = json_string(resp->result->buf);
- json_object_set_new(jresp, "result", jstr);
+ if (TID_ERROR == resp->result) {
+ jstr = json_string("error");
+ json_object_set_new(jresp, "result", jstr);
+ if (resp->err_msg) {
+ jstr = json_string(resp->err_msg->buf);
+ json_object_set_new(jresp, "err_msg", jstr);
+ }
+ }
+ else {
+ jstr = json_string("success");
+ json_object_set_new(jresp, "result", jstr);
+ }
jstr = json_string(resp->rp_realm->buf);
json_object_set_new(jresp, "rp_realm", jstr);
json_object_set_new(jresp, "orig_coi", jstr);
}
- // TBD -- Encode server info.
+ if (NULL == resp->servers) {
+ tr_debug("tr_msg_encode_tidresp(): No servers to encode.");
+ return jresp;
+ }
+ jservers = tr_msg_encode_servers(resp);
+ json_object_set_new(jresp, "servers", jservers);
return jresp;
}
static TID_RESP *tr_msg_decode_tidresp(json_t *jresp)
{
TID_RESP *tresp = NULL;
- json_error_t rc;
json_t *jresult = NULL;
json_t *jrp_realm = NULL;
json_t *jrealm = NULL;
json_t *jcomm = NULL;
json_t *jorig_coi = NULL;
json_t *jservers = NULL;
- int msize;
+ json_t *jerr_msg = NULL;
- if (!(tresp = malloc(sizeof(TID_RESP)))) {
- fprintf (stderr, "tr_msg_decode_tidresp(): Error allocating TID_RESP structure.\n");
+ if (!(tresp = talloc_zero(NULL, TID_RESP))) {
+ tr_crit("tr_msg_decode_tidresp(): Error allocating TID_RESP structure.");
return NULL;
}
- memset(tresp, 0, sizeof(TID_RESP));
- /* store required fields from request */
- if (((msize = json_object_size(jresp)) < 5) ||
- (NULL == (jresult = json_object_get(jresp, "result"))) ||
+ /* store required fields from response */
+ if ((NULL == (jresult = json_object_get(jresp, "result"))) ||
(!json_is_string(jresult)) ||
(NULL == (jrp_realm = json_object_get(jresp, "rp_realm"))) ||
(!json_is_string(jrp_realm)) ||
- (NULL == (jrealm = json_object_get(jresp, "realm"))) ||
+ (NULL == (jrealm = json_object_get(jresp, "target_realm"))) ||
(!json_is_string(jrealm)) ||
(NULL == (jcomm = json_object_get(jresp, "comm"))) ||
- (!json_is_string(jcomm)) ||
- (NULL == (jservers = json_object_get(jresp, "servers"))) ||
- (!json_is_object(jservers))) {
- fprintf (stderr, "tr_msg_decode(): Error parsing message.\n");
- free(tresp);
+ (!json_is_string(jcomm))) {
+ tr_debug("tr_msg_decode_tidresp(): Error parsing response.");
+ talloc_free(tresp);
return NULL;
}
- tresp->result = tr_new_name((char *)json_string_value(jresult));
+ if (0 == (strcmp(json_string_value(jresult), "success"))) {
+ tr_debug("tr_msg_decode_tidresp(): Success! result = %s.", json_string_value(jresult));
+ if ((NULL != (jservers = json_object_get(jresp, "servers"))) ||
+ (!json_is_array(jservers))) {
+ tresp->servers = tr_msg_decode_servers(tresp, jservers, &tresp->num_servers);
+ }
+ else {
+ talloc_free(tresp);
+ return NULL;
+ }
+ tresp->result = TID_SUCCESS;
+ }
+ else {
+ tresp->result = TID_ERROR;
+ tr_debug("tr_msg_decode_tidresp(): Error! result = %s.", json_string_value(jresult));
+ if ((NULL != (jerr_msg = json_object_get(jresp, "err_msg"))) ||
+ (!json_is_string(jerr_msg))) {
+ tresp->err_msg = tr_new_name((char *)json_string_value(jerr_msg));
+ }
+ }
+
tresp->rp_realm = tr_new_name((char *)json_string_value(jrp_realm));
tresp->realm = tr_new_name((char *)json_string_value(jrealm));
tresp->comm = tr_new_name((char *)json_string_value(jcomm));
(!json_is_object(jorig_coi))) {
tresp->orig_coi = tr_new_name((char *)json_string_value(jorig_coi));
}
-
- // Decode server info
- // tresp->servers = tr_msg_decode_servers(jservers);
-
+
return tresp;
}
switch (msg->msg_type)
{
case TID_REQUEST:
- jmsg_type = json_string("TIDRequest");
+ jmsg_type = json_string("tid_request");
json_object_set_new(jmsg, "msg_type", jmsg_type);
- json_object_set_new(jmsg, "msg_body", tr_msg_encode_tidreq(msg->tid_req));
+ json_object_set_new(jmsg, "msg_body", tr_msg_encode_tidreq(tr_msg_get_req(msg)));
break;
case TID_RESPONSE:
- jmsg_type = json_string("TIDResponse");
+ jmsg_type = json_string("tid_response");
json_object_set_new(jmsg, "msg_type", jmsg_type);
- json_object_set_new(jmsg, "msg_body", tr_msg_encode_tidresp(msg->tid_resp));
+ json_object_set_new(jmsg, "msg_body", tr_msg_encode_tidresp(tr_msg_get_resp(msg)));
break;
/* TBD -- Add TR message types */
TR_MSG *msg;
json_t *jmsg = NULL;
json_error_t rc;
- size_t msize;
json_t *jtype;
json_t *jbody;
const char *mtype = NULL;
- if (NULL == (jmsg = json_loadb(jbuf, buflen, 0, &rc))) {
- fprintf (stderr, "tr_msg_decode(): error loading object, rc = %d.\n", rc);
+ if (NULL == (jmsg = json_loadb(jbuf, buflen, JSON_DISABLE_EOF_CHECK, &rc))) {
+ tr_debug("tr_msg_decode(): error loading object");
return NULL;
}
if (!(msg = malloc(sizeof(TR_MSG)))) {
- fprintf (stderr, "tr_msg_decode(): Error allocating TR_MSG structure.\n");
+ tr_debug("tr_msg_decode(): Error allocating TR_MSG structure.");
json_decref(jmsg);
return NULL;
}
memset(msg, 0, sizeof(TR_MSG));
- if ((2 != (msize = json_object_size(jmsg))) ||
- (NULL == (jtype = json_object_get(jmsg, "msg_type"))) ||
- (!json_is_string(jtype)) ||
- (NULL == (jbody = json_object_get(jmsg, "msg_body"))) ||
- (!json_is_object(jbody))) {
- fprintf (stderr, "tr_msg_decode(): Error parsing message.\n");
+ if ((NULL == (jtype = json_object_get(jmsg, "msg_type"))) ||
+ (NULL == (jbody = json_object_get(jmsg, "msg_body")))) {
+ tr_debug("tr_msg_decode(): Error parsing message header.");
json_decref(jmsg);
tr_msg_free_decoded(msg);
return NULL;
mtype = json_string_value(jtype);
- if (0 == strcmp(mtype, "TIDRequest")) {
+ if (0 == strcmp(mtype, "tid_request")) {
msg->msg_type = TID_REQUEST;
- msg->tid_req = tr_msg_decode_tidreq(jbody);
+ tr_msg_set_req(msg, tr_msg_decode_tidreq(jbody));
}
- else if (0 == strcmp(mtype, "TIDResponse")) {
+ else if (0 == strcmp(mtype, "tid_response")) {
msg->msg_type = TID_RESPONSE;
- msg->tid_resp = tr_msg_decode_tidresp(jbody);
+ tr_msg_set_resp(msg, tr_msg_decode_tidresp(jbody));
}
else {
msg->msg_type = TR_UNKNOWN;
- msg->tid_req = NULL;
+ msg->msg_rep = NULL;
}
return msg;
}
projects / trust_router.git / blobdiff