ipseccontrollerimpl.h

/***************************************************************************
*   Copyright (C) 2005 by                                                 *
*   Pedro J. Fernandez Ruiz    pedroj.fernandez@dif.um.es                 *
*   Alejandro Perez Mendez     alejandro_perez@dif.um.es                  *
*                                                                         *
*   This library is free software; you can redistribute it and/or         *
*   modify it under the terms of the GNU Lesser General Public            *
*   License as published by the Free Software Foundation; either          *
*   version 2.1 of the License, or (at your option) any later version.    *
*                                                                         *
*   This library is distributed in the hope that it will be useful,       *
*   but WITHOUT ANY WARRANTY; without even the implied warranty of        *
*   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU     *
*   Lesser General Public License for more details.                       *
*                                                                         *
*   You should have received a copy of the GNU Lesser General Public      *
*   License along with this library; if not, write to the Free Software   *
*   Foundation, Inc., 51 Franklin St, Fifth Floor,                        *
*   Boston, MA  02110-1301  USA                                           *
***************************************************************************/
#ifndef IPSECCONTROLLERIMPL_H
#define IPSECCONTROLLERIMPL_H

#include "runnable.h"
#include "mutex.h"
#include "ipaddress.h"
#include "payload_tsi.h"
#include "payload_tsr.h"
#include "enums.h"
#include "proposal.h"
#include "childsa.h"
#include "payload_sa.h"
#include "ikesacontroller.h"


namespace openikev2 {

    class IpsecControllerImpl : public Runnable {

            /****************************** ATTRIBUTES ******************************/
        public:
            string name;                    
            /****************************** METHODS ******************************/
        public:
            virtual void initialize() = 0;

            virtual bool narrowPayloadTS( const Payload_TSi & received_payload_ts_i, const Payload_TSr & received_payload_ts_r, IkeSaController& ike_sa_controller, ChildSa & child_sa ) = 0;

            virtual bool checkNarrowPayloadTS( const Payload_TSi & received_payload_ts_i, const Payload_TSr & received_payload_ts_r, ChildSa & child_sa ) = 0;

            virtual uint32_t getSpi( const IpAddress& src, const IpAddress& dst, Enums::PROTOCOL_ID protocol ) = 0;

            virtual void createIpsecSa( const IpAddress& src, const IpAddress& dst, const ChildSa& childsa ) = 0;

            virtual uint32_t deleteIpsecSa( const IpAddress& src, const IpAddress& dst, Enums::PROTOCOL_ID protocol, uint32_t spi ) = 0;

            virtual void createIpsecPolicy( vector<TrafficSelector*> src_sel, vector<TrafficSelector*> dst_sel, Enums::DIRECTION direction, uint32_t priority, Enums::PROTOCOL_ID ipsec_protocol, Enums::IPSEC_MODE mode, const IpAddress* src_tunnel, const IpAddress* dst_tunnel ) = 0;

            virtual void deleteIpsecPolicy( vector< TrafficSelector*> src_sel, vector< TrafficSelector*> dst_sel, Enums::DIRECTION direction ) = 0;

            virtual void flushIpsecPolicies() = 0;

            virtual void flushIpsecSas() = 0;

            void processExpire( const IpAddress& src, const IpAddress& dst, uint32_t rekeyed_spi, bool hard );

            virtual void updateIpsecAddresses ( const IpAddress& old_address, const IpAddress& new_address) = 0;
            
            virtual void run();

            virtual ~IpsecControllerImpl();
    };
}

#endif

---