]> git.proxmox.com Git - mirror_edk2.git/blame - NetworkPkg/IpSecDxe/Ikev2/ChildSa.c
NetworkPkg/IpSecDxe: Fix wrong IKE header "FLAG" update
[mirror_edk2.git] / NetworkPkg / IpSecDxe / Ikev2 / ChildSa.c
CommitLineData
9166f840 1/** @file\r
2 The operations for Child SA.\r
3\r
6771c1d6 4 Copyright (c) 2010 - 2016, Intel Corporation. All rights reserved.<BR>\r
9166f840 5\r
6 This program and the accompanying materials\r
7 are licensed and made available under the terms and conditions of the BSD License\r
8 which accompanies this distribution. The full text of the license may be found at\r
9 http://opensource.org/licenses/bsd-license.php.\r
10\r
11 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,\r
12 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
13\r
14**/\r
15\r
16#include "Utility.h"\r
17\r
18/**\r
19 Generate IKE Packet for CREATE_CHILD_SA exchange. \r
20\r
21 This IKE Packet would be the packet for creating new CHILD SA, or the packet for\r
22 rekeying existing IKE SA, or the packet for existing CHILD SA.\r
23 \r
24 @param[in] SaSession Pointer to related SA session. \r
25 @param[in] Context The data passed by the caller.\r
26\r
27 return a pointer of IKE packet.\r
28\r
29**/\r
30IKE_PACKET *\r
31Ikev2CreateChildGenerator (\r
32 IN UINT8 *SaSession,\r
33 IN VOID *Context\r
34 )\r
35{\r
36\r
37 IKEV2_CHILD_SA_SESSION *ChildSaSession;\r
38 IKEV2_SA_SESSION *IkeSaSession;\r
39 IKE_PACKET *IkePacket;\r
40 IKE_PAYLOAD *NotifyPayload;\r
41 UINT32 *MessageId;\r
6771c1d6
JW
42\r
43 NotifyPayload = NULL;\r
44 MessageId = NULL;\r
9166f840 45 \r
46 ChildSaSession = (IKEV2_CHILD_SA_SESSION *) SaSession;\r
6771c1d6 47 if (ChildSaSession == NULL) {\r
9166f840 48 return NULL;\r
49 }\r
6771c1d6
JW
50 \r
51 IkePacket = IkePacketAlloc();\r
52 if (IkePacket == NULL) {\r
9166f840 53 return NULL;\r
54 }\r
55\r
6771c1d6 56\r
9166f840 57 if (Context != NULL) {\r
58 MessageId = (UINT32 *) Context;\r
59 }\r
60 \r
61 IkePacket->Header->Version = (UINT8) (2 << 4);\r
62 IkePacket->Header->NextPayload = IKEV2_PAYLOAD_TYPE_NOTIFY;\r
63 IkePacket->Header->ExchangeType = IKE_XCG_TYPE_CREATE_CHILD_SA;\r
64 \r
65 if (ChildSaSession->SessionCommon.IkeSessionType == IkeSessionTypeChildSa) {\r
66 //\r
67 // 1.a Fill the IkePacket->Hdr\r
68 // \r
69 IkePacket->Header->InitiatorCookie = ChildSaSession->IkeSaSession->InitiatorCookie;\r
70 IkePacket->Header->ResponderCookie = ChildSaSession->IkeSaSession->ResponderCookie;\r
71 \r
72 if (MessageId != NULL) {\r
73 IkePacket->Header->MessageId = *MessageId;\r
74 } else {\r
75 IkePacket->Header->MessageId = ChildSaSession->MessageId;\r
76 } \r
77 \r
78 if (ChildSaSession->SessionCommon.IsInitiator) {\r
7822a1d9 79 IkePacket->Header->Flags = IKE_HEADER_FLAGS_INIT;\r
9166f840 80 }\r
81 \r
82 } else {\r
83 IkeSaSession = (IKEV2_SA_SESSION *) SaSession;\r
84 //\r
85 // 1.a Fill the IkePacket->Hdr\r
86 //\r
87 IkePacket->Header->InitiatorCookie = IkeSaSession->InitiatorCookie;\r
88 IkePacket->Header->ResponderCookie = IkeSaSession->ResponderCookie;\r
89\r
90 if (MessageId != NULL) {\r
91 IkePacket->Header->MessageId = *MessageId;\r
92 } else {\r
93 IkePacket->Header->MessageId = IkeSaSession->MessageId;\r
94 } \r
95 \r
96 if (IkeSaSession->SessionCommon.IsInitiator) {\r
7822a1d9 97 IkePacket->Header->Flags = IKE_HEADER_FLAGS_INIT;\r
9166f840 98 }\r
7822a1d9
JW
99 }\r
100\r
101 if (MessageId != NULL) {\r
102 IkePacket->Header->Flags |= IKE_HEADER_FLAGS_RESPOND;\r
103 }\r
9166f840 104 \r
105 //\r
106 // According to RFC4306, Chapter 4.\r
107 // A minimal implementation may support the CREATE_CHILD_SA exchange only to\r
108 // recognize requests and reject them with a Notify payload of type NO_ADDITIONAL_SAS.\r
109 //\r
110 NotifyPayload = Ikev2GenerateNotifyPayload (\r
111 0,\r
112 IKEV2_PAYLOAD_TYPE_NONE,\r
113 0, \r
114 IKEV2_NOTIFICATION_NO_ADDITIONAL_SAS,\r
115 NULL,\r
116 NULL,\r
117 0\r
118 );\r
6771c1d6
JW
119 if (NotifyPayload == NULL) { \r
120 IkePacketFree (IkePacket);\r
121 return NULL;\r
122 }\r
9166f840 123 \r
124 IKE_PACKET_APPEND_PAYLOAD (IkePacket, NotifyPayload);\r
125 //\r
126 // TODO: Support the CREATE_CHILD_SA exchange. \r
127 // \r
128 return IkePacket;\r
129}\r
130\r
131/**\r
132 Parse the IKE packet of CREATE_CHILD_SA exchange.\r
133 \r
134 This function parse the IKE packet and save the related information to further\r
135 calculation. \r
136 \r
137 @param[in] SaSession Pointer to IKEv2_CHILD_SA_SESSION related to this Exchange.\r
138 @param[in] IkePacket Received packet to be parsed.\r
139 \r
140\r
141 @retval EFI_SUCCESS The IKE Packet is acceptable.\r
142 @retval EFI_UNSUPPORTED Not support the CREATE_CHILD_SA request.\r
143\r
144**/\r
145EFI_STATUS\r
146Ikev2CreateChildParser (\r
147 IN UINT8 *SaSession,\r
148 IN IKE_PACKET *IkePacket\r
149 )\r
150{\r
151 return EFI_UNSUPPORTED;\r
152}\r
153\r
154/**\r
155 Routine process before the payload decoding.\r
156\r
157 @param[in] SessionCommon Pointer to ChildSa SessionCommon.\r
158 @param[in] PayloadBuf Pointer to the payload.\r
159 @param[in] PayloadSize Size of PayloadBuf in byte.\r
160 @param[in] PayloadType Type of Payload.\r
161\r
162**/\r
163VOID\r
164Ikev2ChildSaBeforeDecodePayload (\r
165 IN UINT8 *SessionCommon,\r
166 IN UINT8 *PayloadBuf,\r
167 IN UINTN PayloadSize,\r
168 IN UINT8 PayloadType\r
169 )\r
170{\r
171\r
172}\r
173\r
174/**\r
175 Routine Process after the payload encoding.\r
176\r
177 @param[in] SessionCommon Pointer to ChildSa SessionCommon.\r
178 @param[in] PayloadBuf Pointer to the payload.\r
179 @param[in] PayloadSize Size of PayloadBuf in byte.\r
180 @param[in] PayloadType Type of Payload.\r
181\r
182**/\r
183VOID\r
184Ikev2ChildSaAfterEncodePayload (\r
185 IN UINT8 *SessionCommon,\r
186 IN UINT8 *PayloadBuf,\r
187 IN UINTN PayloadSize,\r
188 IN UINT8 PayloadType\r
189 )\r
190{\r
191}\r
192\r
193IKEV2_PACKET_HANDLER mIkev2CreateChild = {\r
194 //\r
195 // Create Child\r
196 //\r
197 Ikev2CreateChildParser,\r
198 Ikev2CreateChildGenerator\r
199};\r