userapps/opensource/ipsec-tools/src/racoon/isakmp_agg.c

   1 /* $Id: isakmp_agg.c,v 1.1.1.1 2006/05/18 10:47:25 michaelc Exp $ */
   2
   3 /*
   4  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  * 2. Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in the
  14  *    documentation and/or other materials provided with the distribution.
  15  * 3. Neither the name of the project nor the names of its contributors
  16  *    may be used to endorse or promote products derived from this software
  17  *    without specific prior written permission.
  18  *
  19  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  20  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  22  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  23  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  24  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  25  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  26  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  27  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  28  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  29  * SUCH DAMAGE.
  30  */
  31
  32 /* Aggressive Exchange (Aggressive Mode) */
  33
  34 #include "config.h"
  35
  36 #include <sys/types.h>
  37 #include <sys/param.h>
  38
  39 #include <stdlib.h>
  40 #include <stdio.h>
  41 #include <string.h>
  42 #include <errno.h>
  43 #if TIME_WITH_SYS_TIME
  44 # include <sys/time.h>
  45 # include <time.h>
  46 #else
  47 # if HAVE_SYS_TIME_H
  48 #  include <sys/time.h>
  49 # else
  50 #  include <time.h>
  51 # endif
  52 #endif
  53
  54 #include "var.h"
  55 #include "misc.h"
  56 #include "vmbuf.h"
  57 #include "plog.h"
  58 #include "sockmisc.h"
  59 #include "schedule.h"
  60 #include "debug.h"
  61
  62 #include "localconf.h"
  63 #include "remoteconf.h"
  64 #include "isakmp_var.h"
  65 #include "isakmp.h"
  66 #include "evt.h"
  67 #include "oakley.h"
  68 #include "handler.h"
  69 #include "ipsec_doi.h"
  70 #include "crypto_openssl.h"
  71 #include "pfkey.h"
  72 #include "isakmp_agg.h"
  73 #include "isakmp_inf.h"
  74 #ifdef ENABLE_HYBRID
  75 #include "isakmp_xauth.h"
  76 #include "isakmp_cfg.h"
  77 #endif
  78 #ifdef ENABLE_FRAG
  79 #include "isakmp_frag.h"
  80 #endif
  81 #include "vendorid.h"
  82 #include "strnames.h"
  83
  84 #ifdef ENABLE_NATT
  85 #include "nattraversal.h"
  86 #endif
  87
  88 #ifdef HAVE_GSSAPI
  89 #include "gssapi.h"
  90 #endif
  91
  92 /*
  93  * begin Aggressive Mode as initiator.
  94  */
  95 /*
  96  * send to responder
  97  *      psk: HDR, SA, KE, Ni, IDi1
  98  *      sig: HDR, SA, KE, Ni, IDi1 [, CR ]
  99  *   gssapi: HDR, SA, KE, Ni, IDi1, GSSi
 100  *      rsa: HDR, SA, [ HASH(1),] KE, <IDi1_b>Pubkey_r, <Ni_b>Pubkey_r
 101  *      rev: HDR, SA, [ HASH(1),] <Ni_b>Pubkey_r, <KE_b>Ke_i,
 102  *           <IDii_b>Ke_i [, <Cert-I_b>Ke_i ]
 103  */
 104 int
 105 agg_i1send(iph1, msg)
 106         struct ph1handle *iph1;
 107         vchar_t *msg; /* must be null */
 108 {
 109         struct payload_list *plist = NULL;
 110         int need_cr = 0;
 111         vchar_t *cr = NULL, *gsstoken = NULL;
 112         int error = -1;
 113 #ifdef ENABLE_NATT
 114         vchar_t *vid_natt[MAX_NATT_VID_COUNT];
 115         int i;
 116 #endif
 117 #ifdef ENABLE_HYBRID
 118         vchar_t *vid_xauth = NULL;
 119         vchar_t *vid_unity = NULL;
 120 #endif
 121 #ifdef ENABLE_FRAG
 122         vchar_t *vid_frag = NULL;
 123 #endif
 124 #ifdef HAVE_GSSAPI
 125         int len;
 126 #endif
 127 #ifdef ENABLE_DPD
 128         vchar_t *vid_dpd = NULL;
 129 #endif
 130
 131
 132         /* validity check */
 133         if (msg != NULL) {
 134                 plog(LLV_ERROR, LOCATION, NULL,
 135                         "msg has to be NULL in this function.\n");
 136                 goto end;
 137         }
 138         if (iph1->status != PHASE1ST_START) {
 139                 plog(LLV_ERROR, LOCATION, NULL,
 140                         "status mismatched %d.\n", iph1->status);
 141                 goto end;
 142         }
 143
 144         /* create isakmp index */
 145         memset(&iph1->index, 0, sizeof(iph1->index));
 146         isakmp_newcookie((caddr_t)&iph1->index, iph1->remote, iph1->local);
 147
 148         /* make ID payload into isakmp status */
 149         if (ipsecdoi_setid1(iph1) < 0)
 150                 goto end;
 151
 152         /* create SA payload for my proposal */
 153         iph1->sa = ipsecdoi_setph1proposal(iph1->rmconf->proposal);
 154         if (iph1->sa == NULL)
 155                 goto end;
 156
 157         /* consistency check of proposals */
 158         if (iph1->rmconf->dhgrp == NULL) {
 159                 plog(LLV_ERROR, LOCATION, NULL,
 160                         "configuration failure about DH group.\n");
 161                 goto end;
 162         }
 163
 164         /* generate DH public value */
 165         if (oakley_dh_generate(iph1->rmconf->dhgrp,
 166                                 &iph1->dhpub, &iph1->dhpriv) < 0)
 167                 goto end;
 168
 169         /* generate NONCE value */
 170         iph1->nonce = eay_set_random(iph1->rmconf->nonce_size);
 171         if (iph1->nonce == NULL)
 172                 goto end;
 173
 174 #ifdef ENABLE_HYBRID
 175         /* Do we need Xauth VID? */
 176         switch (iph1->rmconf->proposal->authmethod) {
 177         case OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_R:
 178         case OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_R:
 179                 if ((vid_xauth = set_vendorid(VENDORID_XAUTH)) == NULL)
 180                         plog(LLV_ERROR, LOCATION, NULL,
 181                              "Xauth vendor ID generation failed\n");
 182                 if ((vid_unity = set_vendorid(VENDORID_UNITY)) == NULL)
 183                         plog(LLV_ERROR, LOCATION, NULL,
 184                              "Unity vendor ID generation failed\n");
 185                 break;
 186         default:
 187                 break;
 188         }
 189 #endif
 190
 191 #ifdef ENABLE_FRAG
 192         if (iph1->rmconf->ike_frag) {
 193                 vid_frag = set_vendorid(VENDORID_FRAG);
 194                 if (vid_frag != NULL)
 195                         vid_frag = isakmp_frag_addcap(vid_frag,
 196                             VENDORID_FRAG_AGG);
 197                 if (vid_frag == NULL)
 198                         plog(LLV_ERROR, LOCATION, NULL,
 199                             "Frag vendorID construction failed\n");
 200         }
 201 #endif
 202
 203         /* create CR if need */
 204         if (iph1->rmconf->send_cr
 205          && oakley_needcr(iph1->rmconf->proposal->authmethod)
 206          && iph1->rmconf->peerscertfile == NULL) {
 207                 need_cr = 1;
 208                 cr = oakley_getcr(iph1);
 209                 if (cr == NULL) {
 210                         plog(LLV_ERROR, LOCATION, NULL,
 211                                 "failed to get cr buffer.\n");
 212                         goto end;
 213                 }
 214         }
 215
 216         plog(LLV_DEBUG, LOCATION, NULL, "authmethod is %s\n",
 217                 s_oakley_attr_method(iph1->rmconf->proposal->authmethod));
 218 #ifdef HAVE_GSSAPI
 219         if (iph1->rmconf->proposal->authmethod ==
 220             OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB) {
 221                 gssapi_get_itoken(iph1, &len);
 222         }
 223 #endif
 224
 225         /* set SA payload to propose */
 226         plist = isakmp_plist_append(plist, iph1->sa, ISAKMP_NPTYPE_SA);
 227
 228         /* create isakmp KE payload */
 229         plist = isakmp_plist_append(plist, iph1->dhpub, ISAKMP_NPTYPE_KE);
 230
 231         /* create isakmp NONCE payload */
 232         plist = isakmp_plist_append(plist, iph1->nonce, ISAKMP_NPTYPE_NONCE);
 233
 234         /* create isakmp ID payload */
 235         plist = isakmp_plist_append(plist, iph1->id, ISAKMP_NPTYPE_ID);
 236
 237 #ifdef HAVE_GSSAPI
 238         if (iph1->rmconf->proposal->authmethod ==
 239             OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB) {
 240                 gssapi_get_token_to_send(iph1, &gsstoken);
 241                 plist = isakmp_plist_append(plist, gsstoken, ISAKMP_NPTYPE_GSS);
 242         } else
 243 #endif
 244         /* create isakmp CR payload */
 245         if (need_cr)
 246                 plist = isakmp_plist_append(plist, cr, ISAKMP_NPTYPE_CR);
 247
 248 #ifdef ENABLE_FRAG
 249         if (vid_frag)
 250                 plist = isakmp_plist_append(plist, vid_frag, ISAKMP_NPTYPE_VID);
 251 #endif
 252 #ifdef ENABLE_NATT
 253         /* set VID payload for NAT-T if NAT-T support allowed in the config file */
 254         if (iph1->rmconf->nat_traversal)
 255                 plist = isakmp_plist_append_natt_vids(plist, vid_natt);
 256         else
 257                 vid_natt[0]=NULL;
 258 #endif
 259 #ifdef ENABLE_HYBRID
 260         if (vid_xauth)
 261                 plist = isakmp_plist_append(plist,
 262                     vid_xauth, ISAKMP_NPTYPE_VID);
 263         if (vid_unity)
 264                 plist = isakmp_plist_append(plist,
 265                     vid_unity, ISAKMP_NPTYPE_VID);
 266 #endif
 267 #ifdef ENABLE_DPD
 268         if(iph1->rmconf->dpd){
 269                 vid_dpd = set_vendorid(VENDORID_DPD);
 270                 if (vid_dpd != NULL)
 271                         plist = isakmp_plist_append(plist, vid_dpd, ISAKMP_NPTYPE_VID);
 272         }
 273 #endif
 274
 275         iph1->sendbuf = isakmp_plist_set_all (&plist, iph1);
 276
 277 #ifdef HAVE_PRINT_ISAKMP_C
 278         isakmp_printpacket(iph1->sendbuf, iph1->local, iph1->remote, 0);
 279 #endif
 280
 281         /* send the packet, add to the schedule to resend */
 282         iph1->retry_counter = iph1->rmconf->retry_counter;
 283         if (isakmp_ph1resend(iph1) == -1)
 284                 goto end;
 285
 286         iph1->status = PHASE1ST_MSG1SENT;
 287
 288         error = 0;
 289
 290 end:
 291         if (cr)
 292                 vfree(cr);
 293         if (gsstoken)
 294                 vfree(gsstoken);
 295 #ifdef ENABLE_FRAG
 296         if (vid_frag)
 297                 vfree(vid_frag);
 298 #endif
 299 #ifdef ENABLE_NATT
 300         for (i = 0; i < MAX_NATT_VID_COUNT && vid_natt[i] != NULL; i++)
 301                 vfree(vid_natt[i]);
 302 #endif
 303 #ifdef ENABLE_DPD
 304         if (vid_dpd != NULL)
 305                 vfree(vid_dpd);
 306 #endif
 307
 308         return error;
 309 }
 310
 311 /*
 312  * receive from responder
 313  *      psk: HDR, SA, KE, Nr, IDr1, HASH_R
 314  *      sig: HDR, SA, KE, Nr, IDr1, [ CR, ] [ CERT, ] SIG_R
 315  *   gssapi: HDR, SA, KE, Nr, IDr1, GSSr, HASH_R
 316  *      rsa: HDR, SA, KE, <IDr1_b>PubKey_i, <Nr_b>PubKey_i, HASH_R
 317  *      rev: HDR, SA, <Nr_b>PubKey_i, <KE_b>Ke_r, <IDir_b>Ke_r, HASH_R
 318  */
 319 int
 320 agg_i2recv(iph1, msg)
 321         struct ph1handle *iph1;
 322         vchar_t *msg;
 323 {
 324         vchar_t *pbuf = NULL;
 325         struct isakmp_parse_t *pa;
 326         vchar_t *satmp = NULL;
 327         int error = -1;
 328         int vid_numeric;
 329         int ptype;
 330 #ifdef ENABLE_HYBRID
 331         vchar_t *unity_vid;
 332         vchar_t *xauth_vid;
 333 #endif
 334 #ifdef HAVE_GSSAPI
 335         vchar_t *gsstoken = NULL;
 336 #endif
 337
 338 #ifdef ENABLE_NATT
 339         int natd_seq = 0;
 340         struct natd_payload {
 341                 int seq;
 342                 vchar_t *payload;
 343                 TAILQ_ENTRY(natd_payload) chain;
 344         };
 345         TAILQ_HEAD(_natd_payload, natd_payload) natd_tree;
 346         TAILQ_INIT(&natd_tree);
 347 #endif
 348
 349         /* validity check */
 350         if (iph1->status != PHASE1ST_MSG1SENT) {
 351                 plog(LLV_ERROR, LOCATION, NULL,
 352                         "status mismatched %d.\n", iph1->status);
 353                 goto end;
 354         }
 355
 356         /* validate the type of next payload */
 357         pbuf = isakmp_parse(msg);
 358         if (pbuf == NULL)
 359                 goto end;
 360         pa = (struct isakmp_parse_t *)pbuf->v;
 361
 362         iph1->pl_hash = NULL;
 363
 364         /* SA payload is fixed postion */
 365         if (pa->type != ISAKMP_NPTYPE_SA) {
 366                 plog(LLV_ERROR, LOCATION, iph1->remote,
 367                         "received invalid next payload type %d, "
 368                         "expecting %d.\n",
 369                         pa->type, ISAKMP_NPTYPE_SA);
 370                 goto end;
 371         }
 372
 373         if (isakmp_p2ph(&satmp, pa->ptr) < 0)
 374                 goto end;
 375         pa++;
 376
 377         for (/*nothing*/;
 378              pa->type != ISAKMP_NPTYPE_NONE;
 379              pa++) {
 380
 381                 switch (pa->type) {
 382                 case ISAKMP_NPTYPE_KE:
 383                         if (isakmp_p2ph(&iph1->dhpub_p, pa->ptr) < 0)
 384                                 goto end;
 385                         break;
 386                 case ISAKMP_NPTYPE_NONCE:
 387                         if (isakmp_p2ph(&iph1->nonce_p, pa->ptr) < 0)
 388                                 goto end;
 389                         break;
 390                 case ISAKMP_NPTYPE_ID:
 391                         if (isakmp_p2ph(&iph1->id_p, pa->ptr) < 0)
 392                                 goto end;
 393                         break;
 394                 case ISAKMP_NPTYPE_HASH:
 395                         iph1->pl_hash = (struct isakmp_pl_hash *)pa->ptr;
 396                         break;
 397                 case ISAKMP_NPTYPE_CR:
 398                         if (oakley_savecr(iph1, pa->ptr) < 0)
 399                                 goto end;
 400                         break;
 401                 case ISAKMP_NPTYPE_CERT:
 402                         if (oakley_savecert(iph1, pa->ptr) < 0)
 403                                 goto end;
 404                         break;
 405                 case ISAKMP_NPTYPE_SIG:
 406                         if (isakmp_p2ph(&iph1->sig_p, pa->ptr) < 0)
 407                                 goto end;
 408                         break;
 409                 case ISAKMP_NPTYPE_VID:
 410                         vid_numeric = check_vendorid(pa->ptr);
 411 #ifdef ENABLE_NATT
 412                         if (iph1->rmconf->nat_traversal &&
 413                             natt_vendorid(vid_numeric))
 414                                 natt_handle_vendorid(iph1, vid_numeric);
 415 #endif
 416 #ifdef ENABLE_HYBRID
 417                         switch (vid_numeric) {
 418                         case VENDORID_XAUTH:
 419                                 iph1->mode_cfg->flags |=
 420                                     ISAKMP_CFG_VENDORID_XAUTH;
 421                                 break;
 422
 423                         case VENDORID_UNITY:
 424                                 iph1->mode_cfg->flags |=
 425                                     ISAKMP_CFG_VENDORID_UNITY;
 426                                 break;
 427                         default:
 428                                 break;
 429                         }
 430 #endif
 431 #ifdef ENABLE_DPD
 432                         if (vid_numeric == VENDORID_DPD && iph1->rmconf->dpd) {
 433                                 iph1->dpd_support=1;
 434                                 plog(LLV_DEBUG, LOCATION, NULL,
 435                                          "remote supports DPD\n");
 436                         }
 437 #endif
 438                         break;
 439                 case ISAKMP_NPTYPE_N:
 440                         isakmp_check_notify(pa->ptr, iph1);
 441                         break;
 442 #ifdef HAVE_GSSAPI
 443                 case ISAKMP_NPTYPE_GSS:
 444                         if (isakmp_p2ph(&gsstoken, pa->ptr) < 0)
 445                                 goto end;
 446                         gssapi_save_received_token(iph1, gsstoken);
 447                         break;
 448 #endif
 449
 450 #ifdef ENABLE_NATT
 451                 case ISAKMP_NPTYPE_NATD_DRAFT:
 452                 case ISAKMP_NPTYPE_NATD_RFC:
 453                         if (NATT_AVAILABLE(iph1) && iph1->natt_options &&
 454                             pa->type == iph1->natt_options->payload_nat_d) {
 455                                 struct natd_payload *natd;
 456                                 natd = (struct natd_payload *)racoon_malloc(sizeof(*natd));
 457                                 if (!natd)
 458                                         goto end;
 459
 460                                 natd->payload = NULL;
 461
 462                                 if (isakmp_p2ph (&natd->payload, pa->ptr) < 0)
 463                                         goto end;
 464
 465                                 natd->seq = natd_seq++;
 466
 467                                 TAILQ_INSERT_TAIL(&natd_tree, natd, chain);
 468                                 break;
 469                         }
 470                         /* passthrough to default... */
 471 #endif
 472
 473                 default:
 474                         /* don't send information, see isakmp_ident_r1() */
 475                         plog(LLV_ERROR, LOCATION, iph1->remote,
 476                                 "ignore the packet, "
 477                                 "received unexpecting payload type %d.\n",
 478                                 pa->type);
 479                         goto end;
 480                 }
 481         }
 482
 483         /* payload existency check */
 484         /* XXX to be checked each authentication method. */
 485
 486         /* verify identifier */
 487         if (ipsecdoi_checkid1(iph1) != 0) {
 488                 plog(LLV_ERROR, LOCATION, iph1->remote,
 489                         "invalid ID payload.\n");
 490                 goto end;
 491         }
 492
 493         /* check SA payload and set approval SA for use */
 494         if (ipsecdoi_checkph1proposal(satmp, iph1) < 0) {
 495                 plog(LLV_ERROR, LOCATION, iph1->remote,
 496                         "failed to get valid proposal.\n");
 497                 /* XXX send information */
 498                 goto end;
 499         }
 500         VPTRINIT(iph1->sa_ret);
 501
 502         /* fix isakmp index */
 503         memcpy(&iph1->index.r_ck, &((struct isakmp *)msg->v)->r_ck,
 504                 sizeof(cookie_t));
 505
 506 #ifdef ENABLE_NATT
 507         if (NATT_AVAILABLE(iph1)) {
 508                 struct natd_payload *natd = NULL;
 509                 int natd_verified;
 510
 511                 plog(LLV_INFO, LOCATION, iph1->remote,
 512                      "Selected NAT-T version: %s\n",
 513                      vid_string_by_id(iph1->natt_options->version));
 514
 515                 /* set both bits first so that we can clear them
 516                    upon verifying hashes */
 517                 iph1->natt_flags |= NAT_DETECTED;
 518
 519                 while ((natd = TAILQ_FIRST(&natd_tree)) != NULL) {
 520                         /* this function will clear appropriate bits bits
 521                            from iph1->natt_flags */
 522                         natd_verified = natt_compare_addr_hash (iph1,
 523                                 natd->payload, natd->seq);
 524
 525                         plog (LLV_INFO, LOCATION, NULL, "NAT-D payload #%d %s\n",
 526                                 natd->seq - 1,
 527                                 natd_verified ? "verified" : "doesn't match");
 528
 529                         vfree (natd->payload);
 530
 531                         TAILQ_REMOVE(&natd_tree, natd, chain);
 532                         racoon_free (natd);
 533                 }
 534
 535                 plog (LLV_INFO, LOCATION, NULL, "NAT %s %s%s\n",
 536                       iph1->natt_flags & NAT_DETECTED ?
 537                                 "detected:" : "not detected",
 538                       iph1->natt_flags & NAT_DETECTED_ME ? "ME " : "",
 539                       iph1->natt_flags & NAT_DETECTED_PEER ? "PEER" : "");
 540
 541                 if (iph1->natt_flags & NAT_DETECTED)
 542                         natt_float_ports (iph1);
 543         }
 544 #endif
 545
 546         /* compute sharing secret of DH */
 547         if (oakley_dh_compute(iph1->rmconf->dhgrp, iph1->dhpub,
 548                                 iph1->dhpriv, iph1->dhpub_p, &iph1->dhgxy) < 0)
 549                 goto end;
 550
 551         /* generate SKEYIDs & IV & final cipher key */
 552         if (oakley_skeyid(iph1) < 0)
 553                 goto end;
 554         if (oakley_skeyid_dae(iph1) < 0)
 555                 goto end;
 556         if (oakley_compute_enckey(iph1) < 0)
 557                 goto end;
 558         if (oakley_newiv(iph1) < 0)
 559                 goto end;
 560
 561         /* validate authentication value */
 562         ptype = oakley_validate_auth(iph1);
 563         if (ptype != 0) {
 564                 if (ptype == -1) {
 565                         /* message printed inner oakley_validate_auth() */
 566                         goto end;
 567                 }
 568                 EVT_PUSH(iph1->local, iph1->remote,
 569                     EVTT_PEERPH1AUTH_FAILED, NULL);
 570                 isakmp_info_send_n1(iph1, ptype, NULL);
 571                 goto end;
 572         }
 573
 574         if (oakley_checkcr(iph1) < 0) {
 575                 /* Ignore this error in order to be interoperability. */
 576                 ;
 577         }
 578
 579         /* change status of isakmp status entry */
 580         iph1->status = PHASE1ST_MSG2RECEIVED;
 581
 582         error = 0;
 583
 584 end:
 585         if (pbuf)
 586                 vfree(pbuf);
 587         if (satmp)
 588                 vfree(satmp);
 589         if (error) {
 590                 VPTRINIT(iph1->dhpub_p);
 591                 VPTRINIT(iph1->nonce_p);
 592                 VPTRINIT(iph1->id_p);
 593                 oakley_delcert(iph1->cert_p);
 594                 iph1->cert_p = NULL;
 595                 oakley_delcert(iph1->crl_p);
 596                 iph1->crl_p = NULL;
 597                 VPTRINIT(iph1->sig_p);
 598                 oakley_delcert(iph1->cr_p);
 599                 iph1->cr_p = NULL;
 600         }
 601
 602         return error;
 603 }
 604
 605 /*
 606  * send to responder
 607  *      psk: HDR, HASH_I
 608  *   gssapi: HDR, HASH_I
 609  *      sig: HDR, [ CERT, ] SIG_I
 610  *      rsa: HDR, HASH_I
 611  *      rev: HDR, HASH_I
 612  */
 613 int
 614 agg_i2send(iph1, msg)
 615         struct ph1handle *iph1;
 616         vchar_t *msg;
 617 {
 618         struct payload_list *plist = NULL;
 619         int need_cert = 0;
 620         int error = -1;
 621         vchar_t *gsshash = NULL;
 622
 623         /* validity check */
 624         if (iph1->status != PHASE1ST_MSG2RECEIVED) {
 625                 plog(LLV_ERROR, LOCATION, NULL,
 626                         "status mismatched %d.\n", iph1->status);
 627                 goto end;
 628         }
 629
 630         /* generate HASH to send */
 631         plog(LLV_DEBUG, LOCATION, NULL, "generate HASH_I\n");
 632         iph1->hash = oakley_ph1hash_common(iph1, GENERATE);
 633         if (iph1->hash == NULL) {
 634 #ifdef HAVE_GSSAPI
 635                 if (gssapi_more_tokens(iph1))
 636                         isakmp_info_send_n1(iph1,
 637                             ISAKMP_NTYPE_INVALID_EXCHANGE_TYPE, NULL);
 638 #endif
 639                 goto end;
 640         }
 641
 642         switch (iph1->approval->authmethod) {
 643         case OAKLEY_ATTR_AUTH_METHOD_PSKEY:
 644                 /* set HASH payload */
 645                 plist = isakmp_plist_append(plist, iph1->hash, ISAKMP_NPTYPE_HASH);
 646                 break;
 647         case OAKLEY_ATTR_AUTH_METHOD_DSSSIG:
 648         case OAKLEY_ATTR_AUTH_METHOD_RSASIG:
 649 #ifdef ENABLE_HYBRID
 650         case OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_I:
 651         case OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_I:
 652 #endif
 653                 /* XXX if there is CR or not ? */
 654
 655                 if (oakley_getmycert(iph1) < 0)
 656                         goto end;
 657
 658                 if (oakley_getsign(iph1) < 0)
 659                         goto end;
 660
 661                 if (iph1->cert != NULL && iph1->rmconf->send_cert)
 662                         need_cert = 1;
 663
 664                 /* add CERT payload if there */
 665                 if (need_cert)
 666                         plist = isakmp_plist_append(plist, iph1->cert->pl, ISAKMP_NPTYPE_CERT);
 667
 668                 /* add SIG payload */
 669                 plist = isakmp_plist_append(plist, iph1->sig, ISAKMP_NPTYPE_SIG);
 670                 break;
 671
 672         case OAKLEY_ATTR_AUTH_METHOD_RSAENC:
 673         case OAKLEY_ATTR_AUTH_METHOD_RSAREV:
 674                 break;
 675 #ifdef HAVE_GSSAPI
 676         case OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB:
 677                 gsshash = gssapi_wraphash(iph1);
 678                 if (gsshash == NULL) {
 679                         plog(LLV_ERROR, LOCATION, NULL,
 680                                 "failed to wrap hash\n");
 681                         isakmp_info_send_n1(iph1,
 682                                 ISAKMP_NTYPE_INVALID_EXCHANGE_TYPE, NULL);
 683                         goto end;
 684                 }
 685
 686                 plist = isakmp_plist_append(plist, gsshash, ISAKMP_NPTYPE_HASH);
 687                 break;
 688 #endif
 689         }
 690
 691 #ifdef ENABLE_NATT
 692         /* generate NAT-D payloads */
 693         if (NATT_AVAILABLE(iph1))
 694         {
 695                 vchar_t *natd[2] = { NULL, NULL };
 696
 697                 plog (LLV_INFO, LOCATION, NULL, "Adding remote and local NAT-D payloads.\n");
 698                 if ((natd[0] = natt_hash_addr (iph1, iph1->remote)) == NULL) {
 699                         plog(LLV_ERROR, LOCATION, NULL,
 700                                 "NAT-D hashing failed for %s\n", saddr2str(iph1->remote));
 701                         goto end;
 702                 }
 703
 704                 if ((natd[1] = natt_hash_addr (iph1, iph1->local)) == NULL) {
 705                         plog(LLV_ERROR, LOCATION, NULL,
 706                                 "NAT-D hashing failed for %s\n", saddr2str(iph1->local));
 707                         goto end;
 708                 }
 709
 710                 plist = isakmp_plist_append(plist, natd[0], iph1->natt_options->payload_nat_d);
 711                 plist = isakmp_plist_append(plist, natd[1], iph1->natt_options->payload_nat_d);
 712         }
 713 #endif
 714
 715         iph1->sendbuf = isakmp_plist_set_all (&plist, iph1);
 716
 717 #ifdef HAVE_PRINT_ISAKMP_C
 718         isakmp_printpacket(iph1->sendbuf, iph1->local, iph1->remote, 0);
 719 #endif
 720
 721         /* send to responder */
 722         if (isakmp_send(iph1, iph1->sendbuf) < 0)
 723                 goto end;
 724
 725         /* the sending message is added to the received-list. */
 726         if (add_recvdpkt(iph1->remote, iph1->local, iph1->sendbuf, msg) == -1) {
 727                 plog(LLV_ERROR , LOCATION, NULL,
 728                         "failed to add a response packet to the tree.\n");
 729                 goto end;
 730         }
 731
 732         /* set encryption flag */
 733         iph1->flags |= ISAKMP_FLAG_E;
 734
 735         iph1->status = PHASE1ST_ESTABLISHED;
 736
 737         error = 0;
 738
 739 end:
 740         if (gsshash)
 741                 vfree(gsshash);
 742         return error;
 743 }
 744
 745 /*
 746  * receive from initiator
 747  *      psk: HDR, SA, KE, Ni, IDi1
 748  *      sig: HDR, SA, KE, Ni, IDi1 [, CR ]
 749  *   gssapi: HDR, SA, KE, Ni, IDi1 , GSSi
 750  *      rsa: HDR, SA, [ HASH(1),] KE, <IDi1_b>Pubkey_r, <Ni_b>Pubkey_r
 751  *      rev: HDR, SA, [ HASH(1),] <Ni_b>Pubkey_r, <KE_b>Ke_i,
 752  *           <IDii_b>Ke_i [, <Cert-I_b>Ke_i ]
 753  */
 754 int
 755 agg_r1recv(iph1, msg)
 756         struct ph1handle *iph1;
 757         vchar_t *msg;
 758 {
 759         int error = -1;
 760         vchar_t *pbuf = NULL;
 761         struct isakmp_parse_t *pa;
 762         int vid_numeric;
 763 #ifdef HAVE_GSSAPI
 764         vchar_t *gsstoken = NULL;
 765 #endif
 766
 767         /* validity check */
 768         if (iph1->status != PHASE1ST_START) {
 769                 plog(LLV_ERROR, LOCATION, NULL,
 770                         "status mismatched %d.\n", iph1->status);
 771                 goto end;
 772         }
 773
 774         /* validate the type of next payload */
 775         pbuf = isakmp_parse(msg);
 776         if (pbuf == NULL)
 777                 goto end;
 778         pa = (struct isakmp_parse_t *)pbuf->v;
 779
 780         /* SA payload is fixed postion */
 781         if (pa->type != ISAKMP_NPTYPE_SA) {
 782                 plog(LLV_ERROR, LOCATION, iph1->remote,
 783                         "received invalid next payload type %d, "
 784                         "expecting %d.\n",
 785                         pa->type, ISAKMP_NPTYPE_SA);
 786                 goto end;
 787         }
 788         if (isakmp_p2ph(&iph1->sa, pa->ptr) < 0)
 789                 goto end;
 790         pa++;
 791
 792         for (/*nothing*/;
 793              pa->type != ISAKMP_NPTYPE_NONE;
 794              pa++) {
 795
 796                 plog(LLV_DEBUG, LOCATION, NULL,
 797                         "received payload of type %s\n",
 798                         s_isakmp_nptype(pa->type));
 799
 800                 switch (pa->type) {
 801                 case ISAKMP_NPTYPE_KE:
 802                         if (isakmp_p2ph(&iph1->dhpub_p, pa->ptr) < 0)
 803                                 goto end;
 804                         break;
 805                 case ISAKMP_NPTYPE_NONCE:
 806                         if (isakmp_p2ph(&iph1->nonce_p, pa->ptr) < 0)
 807                                 goto end;
 808                         break;
 809                 case ISAKMP_NPTYPE_ID:
 810                         if (isakmp_p2ph(&iph1->id_p, pa->ptr) < 0)
 811                                 goto end;
 812                         break;
 813                 case ISAKMP_NPTYPE_VID:
 814                         vid_numeric = check_vendorid(pa->ptr);
 815
 816 #ifdef ENABLE_NATT
 817                         if (iph1->rmconf->nat_traversal &&
 818                             natt_vendorid(vid_numeric)) {
 819                                 natt_handle_vendorid(iph1, vid_numeric);
 820                                 break;
 821                         }
 822 #endif
 823 #ifdef ENABLE_HYBRID
 824                         switch (vid_numeric) {
 825                         case VENDORID_XAUTH:
 826                                 iph1->mode_cfg->flags |=
 827                                     ISAKMP_CFG_VENDORID_XAUTH;
 828                                 break;
 829
 830                         case VENDORID_UNITY:
 831                                 iph1->mode_cfg->flags |=
 832                                     ISAKMP_CFG_VENDORID_UNITY;
 833                                 break;
 834                         default:
 835                                 break;
 836                         }
 837 #endif
 838 #ifdef ENABLE_DPD
 839                         if (vid_numeric == VENDORID_DPD && iph1->rmconf->dpd) {
 840                                 iph1->dpd_support=1;
 841                                 plog(LLV_DEBUG, LOCATION, NULL,
 842                                          "remote supports DPD\n");
 843                         }
 844 #endif
 845 #ifdef ENABLE_FRAG
 846                         if ((vid_numeric == VENDORID_FRAG) &&
 847                             (vendorid_frag_cap(pa->ptr) & VENDORID_FRAG_AGG))
 848                                 iph1->frag = 1;
 849 #endif
 850                         break;
 851
 852                 case ISAKMP_NPTYPE_CR:
 853                         if (oakley_savecr(iph1, pa->ptr) < 0)
 854                                 goto end;
 855                         break;
 856
 857 #ifdef HAVE_GSSAPI
 858                 case ISAKMP_NPTYPE_GSS:
 859                         if (isakmp_p2ph(&gsstoken, pa->ptr) < 0)
 860                                 goto end;
 861                         gssapi_save_received_token(iph1, gsstoken);
 862                         break;
 863 #endif
 864                 default:
 865                         /* don't send information, see isakmp_ident_r1() */
 866                         plog(LLV_ERROR, LOCATION, iph1->remote,
 867                                 "ignore the packet, "
 868                                 "received unexpecting payload type %d.\n",
 869                                 pa->type);
 870                         goto end;
 871                 }
 872         }
 873
 874         /* payload existency check */
 875         /* XXX to be checked each authentication method. */
 876
 877         /* verify identifier */
 878         if (ipsecdoi_checkid1(iph1) != 0) {
 879                 plog(LLV_ERROR, LOCATION, iph1->remote,
 880                         "invalid ID payload.\n");
 881                 goto end;
 882         }
 883
 884 #ifdef ENABLE_NATT
 885         if (NATT_AVAILABLE(iph1))
 886                 plog(LLV_INFO, LOCATION, iph1->remote,
 887                      "Selected NAT-T version: %s\n",
 888                      vid_string_by_id(iph1->natt_options->version));
 889 #endif
 890
 891         /* check SA payload and set approval SA for use */
 892         if (ipsecdoi_checkph1proposal(iph1->sa, iph1) < 0) {
 893                 plog(LLV_ERROR, LOCATION, iph1->remote,
 894                         "failed to get valid proposal.\n");
 895                 /* XXX send information */
 896                 goto end;
 897         }
 898
 899         if (oakley_checkcr(iph1) < 0) {
 900                 /* Ignore this error in order to be interoperability. */
 901                 ;
 902         }
 903
 904         iph1->status = PHASE1ST_MSG1RECEIVED;
 905
 906         error = 0;
 907
 908 end:
 909         if (pbuf)
 910                 vfree(pbuf);
 911         if (error) {
 912                 VPTRINIT(iph1->sa);
 913                 VPTRINIT(iph1->dhpub_p);
 914                 VPTRINIT(iph1->nonce_p);
 915                 VPTRINIT(iph1->id_p);
 916                 oakley_delcert(iph1->cr_p);
 917                 iph1->cr_p = NULL;
 918         }
 919
 920         return error;
 921 }
 922
 923 /*
 924  * send to initiator
 925  *      psk: HDR, SA, KE, Nr, IDr1, HASH_R
 926  *      sig: HDR, SA, KE, Nr, IDr1, [ CR, ] [ CERT, ] SIG_R
 927  *   gssapi: HDR, SA, KE, Nr, IDr1, GSSr, HASH_R
 928  *      rsa: HDR, SA, KE, <IDr1_b>PubKey_i, <Nr_b>PubKey_i, HASH_R
 929  *      rev: HDR, SA, <Nr_b>PubKey_i, <KE_b>Ke_r, <IDir_b>Ke_r, HASH_R
 930  */
 931 int
 932 agg_r1send(iph1, msg)
 933         struct ph1handle *iph1;
 934         vchar_t *msg;
 935 {
 936         struct payload_list *plist = NULL;
 937         int need_cr = 0;
 938         int need_cert = 0;
 939         vchar_t *cr = NULL;
 940         vchar_t *vid = NULL;
 941         int error = -1;
 942 #ifdef ENABLE_HYBRID
 943         vchar_t *xauth_vid = NULL;
 944         vchar_t *unity_vid = NULL;
 945 #endif
 946 #ifdef ENABLE_NATT
 947         vchar_t *vid_natt = NULL;
 948         vchar_t *natd[2] = { NULL, NULL };
 949 #endif
 950 #ifdef ENABLE_DPD
 951         vchar_t *vid_dpd = NULL;
 952 #endif
 953
 954 #ifdef HAVE_GSSAPI
 955         int gsslen;
 956         vchar_t *gsstoken = NULL, *gsshash = NULL;
 957         vchar_t *gss_sa = NULL;
 958 #endif
 959
 960         /* validity check */
 961         if (iph1->status != PHASE1ST_MSG1RECEIVED) {
 962                 plog(LLV_ERROR, LOCATION, NULL,
 963                         "status mismatched %d.\n", iph1->status);
 964                 goto end;
 965         }
 966
 967         /* set responder's cookie */
 968         isakmp_newcookie((caddr_t)&iph1->index.r_ck, iph1->remote, iph1->local);
 969
 970         /* make ID payload into isakmp status */
 971         if (ipsecdoi_setid1(iph1) < 0)
 972                 goto end;
 973
 974         /* generate DH public value */
 975         if (oakley_dh_generate(iph1->rmconf->dhgrp,
 976                                 &iph1->dhpub, &iph1->dhpriv) < 0)
 977                 goto end;
 978
 979         /* generate NONCE value */
 980         iph1->nonce = eay_set_random(iph1->rmconf->nonce_size);
 981         if (iph1->nonce == NULL)
 982                 goto end;
 983
 984         /* compute sharing secret of DH */
 985         if (oakley_dh_compute(iph1->approval->dhgrp, iph1->dhpub,
 986                                 iph1->dhpriv, iph1->dhpub_p, &iph1->dhgxy) < 0)
 987                 goto end;
 988
 989         /* generate SKEYIDs & IV & final cipher key */
 990         if (oakley_skeyid(iph1) < 0)
 991                 goto end;
 992         if (oakley_skeyid_dae(iph1) < 0)
 993                 goto end;
 994         if (oakley_compute_enckey(iph1) < 0)
 995                 goto end;
 996         if (oakley_newiv(iph1) < 0)
 997                 goto end;
 998
 999 #ifdef HAVE_GSSAPI
1000         if (iph1->rmconf->proposal->authmethod ==
1001             OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB)
1002                 gssapi_get_rtoken(iph1, &gsslen);
1003 #endif
1004
1005         /* generate HASH to send */
1006         plog(LLV_DEBUG, LOCATION, NULL, "generate HASH_R\n");
1007         iph1->hash = oakley_ph1hash_common(iph1, GENERATE);
1008         if (iph1->hash == NULL) {
1009 #ifdef HAVE_GSSAPI
1010                 if (gssapi_more_tokens(iph1))
1011                         isakmp_info_send_n1(iph1,
1012                             ISAKMP_NTYPE_INVALID_EXCHANGE_TYPE, NULL);
1013 #endif
1014                 goto end;
1015         }
1016
1017         /* create CR if need */
1018         if (iph1->rmconf->send_cr
1019          && oakley_needcr(iph1->approval->authmethod)
1020          && iph1->rmconf->peerscertfile == NULL) {
1021                 need_cr = 1;
1022                 cr = oakley_getcr(iph1);
1023                 if (cr == NULL) {
1024                         plog(LLV_ERROR, LOCATION, NULL,
1025                                 "failed to get cr buffer.\n");
1026                         goto end;
1027                 }
1028         }
1029
1030 #ifdef ENABLE_NATT
1031         /* Has the peer announced NAT-T? */
1032         if (NATT_AVAILABLE(iph1)) {
1033                 /* set chosen VID */
1034                 vid_natt = set_vendorid(iph1->natt_options->version);
1035
1036                 /* generate NAT-D payloads */
1037                 plog (LLV_INFO, LOCATION, NULL, "Adding remote and local NAT-D payloads.\n");
1038                 if ((natd[0] = natt_hash_addr (iph1, iph1->remote)) == NULL) {
1039                         plog(LLV_ERROR, LOCATION, NULL,
1040                                 "NAT-D hashing failed for %s\n", saddr2str(iph1->remote));
1041                         goto end;
1042                 }
1043
1044                 if ((natd[1] = natt_hash_addr (iph1, iph1->local)) == NULL) {
1045                         plog(LLV_ERROR, LOCATION, NULL,
1046                                 "NAT-D hashing failed for %s\n", saddr2str(iph1->local));
1047                         goto end;
1048                 }
1049         }
1050 #endif
1051 #ifdef ENABLE_DPD
1052         /* Only send DPD support if remote announced DPD and if DPD support is active */
1053         if (iph1->dpd_support && iph1->rmconf->dpd)
1054                 vid_dpd = set_vendorid(VENDORID_DPD);
1055 #endif
1056
1057         switch (iph1->approval->authmethod) {
1058         case OAKLEY_ATTR_AUTH_METHOD_PSKEY:
1059                 /* set SA payload to reply */
1060                 plist = isakmp_plist_append(plist, iph1->sa_ret, ISAKMP_NPTYPE_SA);
1061
1062                 /* create isakmp KE payload */
1063                 plist = isakmp_plist_append(plist, iph1->dhpub, ISAKMP_NPTYPE_KE);
1064
1065                 /* create isakmp NONCE payload */
1066                 plist = isakmp_plist_append(plist, iph1->nonce, ISAKMP_NPTYPE_NONCE);
1067
1068                 /* create isakmp ID payload */
1069                 plist = isakmp_plist_append(plist, iph1->id, ISAKMP_NPTYPE_ID);
1070
1071                 /* create isakmp HASH payload */
1072                 plist = isakmp_plist_append(plist, iph1->hash, ISAKMP_NPTYPE_HASH);
1073
1074                 /* append vendor id, if needed */
1075                 if (vid)
1076                         plist = isakmp_plist_append(plist, vid, ISAKMP_NPTYPE_VID);
1077
1078                 /* create isakmp CR payload if needed */
1079                 if (need_cr)
1080                         plist = isakmp_plist_append(plist, cr, ISAKMP_NPTYPE_CR);
1081                 break;
1082         case OAKLEY_ATTR_AUTH_METHOD_DSSSIG:
1083         case OAKLEY_ATTR_AUTH_METHOD_RSASIG:
1084 #ifdef ENABLE_HYBRID
1085         case OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_I:
1086         case OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_I:
1087 #endif
1088                 /* XXX if there is CR or not ? */
1089
1090                 if (oakley_getmycert(iph1) < 0)
1091                         goto end;
1092
1093                 if (oakley_getsign(iph1) < 0)
1094                         goto end;
1095
1096                 if (iph1->cert != NULL && iph1->rmconf->send_cert)
1097                         need_cert = 1;
1098
1099                 /* set SA payload to reply */
1100                 plist = isakmp_plist_append(plist, iph1->sa_ret, ISAKMP_NPTYPE_SA);
1101
1102                 /* create isakmp KE payload */
1103                 plist = isakmp_plist_append(plist, iph1->dhpub, ISAKMP_NPTYPE_KE);
1104
1105                 /* create isakmp NONCE payload */
1106                 plist = isakmp_plist_append(plist, iph1->nonce, ISAKMP_NPTYPE_NONCE);
1107
1108                 /* add ID payload */
1109                 plist = isakmp_plist_append(plist, iph1->id, ISAKMP_NPTYPE_ID);
1110
1111                 /* add CERT payload if there */
1112                 if (need_cert)
1113                         plist = isakmp_plist_append(plist, iph1->cert->pl, ISAKMP_NPTYPE_CERT);
1114
1115                 /* add SIG payload */
1116                 plist = isakmp_plist_append(plist, iph1->sig, ISAKMP_NPTYPE_SIG);
1117
1118                 /* append vendor id, if needed */
1119                 if (vid)
1120                         plist = isakmp_plist_append(plist, vid, ISAKMP_NPTYPE_VID);
1121
1122 #ifdef ENABLE_HYBRID
1123         if (iph1->mode_cfg->flags & ISAKMP_CFG_VENDORID_XAUTH) {
1124                 if ((xauth_vid = set_vendorid(VENDORID_XAUTH)) == NULL) {
1125                         plog(LLV_ERROR, LOCATION, NULL,
1126                             "Cannot create Xauth vendor ID\n");
1127                         goto end;
1128                 }
1129                 plist = isakmp_plist_append(plist,
1130                     xauth_vid, ISAKMP_NPTYPE_VID);
1131         }
1132
1133         if (iph1->mode_cfg->flags & ISAKMP_CFG_VENDORID_UNITY) {
1134                 if ((unity_vid = set_vendorid(VENDORID_UNITY)) == NULL) {
1135                         plog(LLV_ERROR, LOCATION, NULL,
1136                             "Cannot create Unity vendor ID\n");
1137                         goto end;
1138                 }
1139                 plist = isakmp_plist_append(plist,
1140                     unity_vid, ISAKMP_NPTYPE_VID);
1141         }
1142 #endif
1143
1144                 /* create isakmp CR payload if needed */
1145                 if (need_cr)
1146                         plist = isakmp_plist_append(plist, cr, ISAKMP_NPTYPE_CR);
1147                 break;
1148
1149         case OAKLEY_ATTR_AUTH_METHOD_RSAENC:
1150         case OAKLEY_ATTR_AUTH_METHOD_RSAREV:
1151                 break;
1152 #ifdef HAVE_GSSAPI
1153         case OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB:
1154                 /* create buffer to send isakmp payload */
1155                 gsshash = gssapi_wraphash(iph1);
1156                 if (gsshash == NULL) {
1157                         plog(LLV_ERROR, LOCATION, NULL,
1158                                 "failed to wrap hash\n");
1159                         /*
1160                          * This is probably due to the GSS roundtrips not
1161                          * being finished yet. Return this error in
1162                          * the hope that a fallback to main mode will
1163                          * be done.
1164                          */
1165                         isakmp_info_send_n1(iph1,
1166                             ISAKMP_NTYPE_INVALID_EXCHANGE_TYPE, NULL);
1167                         goto end;
1168                 }
1169                 if (iph1->approval->gssid != NULL)
1170                         gss_sa = ipsecdoi_setph1proposal(iph1->approval);
1171                 else
1172                         gss_sa = iph1->sa_ret;
1173
1174                 /* set SA payload to reply */
1175                 plist = isakmp_plist_append(plist, gss_sa, ISAKMP_NPTYPE_SA);
1176
1177                 /* create isakmp KE payload */
1178                 plist = isakmp_plist_append(plist, iph1->dhpub, ISAKMP_NPTYPE_KE);
1179
1180                 /* create isakmp NONCE payload */
1181                 plist = isakmp_plist_append(plist, iph1->nonce, ISAKMP_NPTYPE_NONCE);
1182
1183                 /* create isakmp ID payload */
1184                 plist = isakmp_plist_append(plist, iph1->id, ISAKMP_NPTYPE_ID);
1185
1186                 /* create GSS payload */
1187                 gssapi_get_token_to_send(iph1, &gsstoken);
1188                 plist = isakmp_plist_append(plist, gsstoken, ISAKMP_NPTYPE_GSS);
1189
1190                 /* create isakmp HASH payload */
1191                 plist = isakmp_plist_append(plist, gsshash, ISAKMP_NPTYPE_HASH);
1192
1193                 /* append vendor id, if needed */
1194                 if (vid)
1195                         plist = isakmp_plist_append(plist, vid, ISAKMP_NPTYPE_VID);
1196
1197                 break;
1198 #endif
1199         }
1200
1201 #ifdef ENABLE_NATT
1202         /* append NAT-T payloads */
1203         if (vid_natt) {
1204                 /* chosen VID */
1205                 plist = isakmp_plist_append(plist, vid_natt, ISAKMP_NPTYPE_VID);
1206                 /* NAT-D */
1207                 plist = isakmp_plist_append(plist, natd[0], iph1->natt_options->payload_nat_d);
1208                 plist = isakmp_plist_append(plist, natd[1], iph1->natt_options->payload_nat_d);
1209         }
1210 #endif
1211 #ifdef ENABLE_DPD
1212         if (vid_dpd)
1213                 plist = isakmp_plist_append(plist, vid_dpd, ISAKMP_NPTYPE_VID);
1214 #endif
1215
1216         iph1->sendbuf = isakmp_plist_set_all (&plist, iph1);
1217
1218 #ifdef HAVE_PRINT_ISAKMP_C
1219         isakmp_printpacket(iph1->sendbuf, iph1->local, iph1->remote, 1);
1220 #endif
1221
1222         /* send the packet, add to the schedule to resend */
1223         iph1->retry_counter = iph1->rmconf->retry_counter;
1224         if (isakmp_ph1resend(iph1) == -1)
1225                 goto end;
1226
1227         /* the sending message is added to the received-list. */
1228         if (add_recvdpkt(iph1->remote, iph1->local, iph1->sendbuf, msg) == -1) {
1229                 plog(LLV_ERROR , LOCATION, NULL,
1230                         "failed to add a response packet to the tree.\n");
1231                 goto end;
1232         }
1233
1234         iph1->status = PHASE1ST_MSG1SENT;
1235
1236         error = 0;
1237
1238 end:
1239         if (cr)
1240                 vfree(cr);
1241         if (vid)
1242                 vfree(vid);
1243 #ifdef ENABLE_HYBRID
1244         if (xauth_vid)
1245                 vfree(xauth_vid);
1246         if (unity_vid)
1247                 vfree(unity_vid);
1248 #endif
1249 #ifdef HAVE_GSSAPI
1250         if (gsstoken)
1251                 vfree(gsstoken);
1252         if (gsshash)
1253                 vfree(gsshash);
1254         if (gss_sa != iph1->sa_ret)
1255                 vfree(gss_sa);
1256 #endif
1257 #ifdef ENABLE_DPD
1258         if (vid_dpd)
1259                 vfree(vid_dpd);
1260 #endif
1261
1262         return error;
1263 }
1264
1265 /*
1266  * receive from initiator
1267  *      psk: HDR, HASH_I
1268  *   gssapi: HDR, HASH_I
1269  *      sig: HDR, [ CERT, ] SIG_I
1270  *      rsa: HDR, HASH_I
1271  *      rev: HDR, HASH_I
1272  */
1273 int
1274 agg_r2recv(iph1, msg0)
1275         struct ph1handle *iph1;
1276         vchar_t *msg0;
1277 {
1278         vchar_t *msg = NULL;
1279         vchar_t *pbuf = NULL;
1280         struct isakmp_parse_t *pa;
1281         int error = -1;
1282         int ptype;
1283
1284 #ifdef ENABLE_NATT
1285         int natd_seq = 0;
1286 #endif
1287
1288         /* validity check */
1289         if (iph1->status != PHASE1ST_MSG1SENT) {
1290                 plog(LLV_ERROR, LOCATION, NULL,
1291                         "status mismatched %d.\n", iph1->status);
1292                 goto end;
1293         }
1294
1295         /* decrypting if need. */
1296         /* XXX configurable ? */
1297         if (ISSET(((struct isakmp *)msg0->v)->flags, ISAKMP_FLAG_E)) {
1298                 msg = oakley_do_decrypt(iph1, msg0,
1299                                         iph1->ivm->iv, iph1->ivm->ive);
1300                 if (msg == NULL)
1301                         goto end;
1302         } else
1303                 msg = vdup(msg0);
1304
1305         /* validate the type of next payload */
1306         pbuf = isakmp_parse(msg);
1307         if (pbuf == NULL)
1308                 goto end;
1309
1310         iph1->pl_hash = NULL;
1311
1312         for (pa = (struct isakmp_parse_t *)pbuf->v;
1313              pa->type != ISAKMP_NPTYPE_NONE;
1314              pa++) {
1315
1316                 switch (pa->type) {
1317                 case ISAKMP_NPTYPE_HASH:
1318                         iph1->pl_hash = (struct isakmp_pl_hash *)pa->ptr;
1319                         break;
1320                 case ISAKMP_NPTYPE_VID:
1321                         (void)check_vendorid(pa->ptr);
1322                         break;
1323                 case ISAKMP_NPTYPE_CERT:
1324                         if (oakley_savecert(iph1, pa->ptr) < 0)
1325                                 goto end;
1326                         break;
1327                 case ISAKMP_NPTYPE_SIG:
1328                         if (isakmp_p2ph(&iph1->sig_p, pa->ptr) < 0)
1329                                 goto end;
1330                         break;
1331                 case ISAKMP_NPTYPE_N:
1332                         isakmp_check_notify(pa->ptr, iph1);
1333                         break;
1334
1335 #ifdef ENABLE_NATT
1336                 case ISAKMP_NPTYPE_NATD_DRAFT:
1337                 case ISAKMP_NPTYPE_NATD_RFC:
1338                         if (pa->type == iph1->natt_options->payload_nat_d)
1339                         {
1340                                 vchar_t *natd_received = NULL;
1341                                 int natd_verified;
1342
1343                                 if (isakmp_p2ph (&natd_received, pa->ptr) < 0)
1344                                         goto end;
1345
1346                                 if (natd_seq == 0)
1347                                         iph1->natt_flags |= NAT_DETECTED;
1348
1349                                 natd_verified = natt_compare_addr_hash (iph1,
1350                                         natd_received, natd_seq++);
1351
1352                                 plog (LLV_INFO, LOCATION, NULL, "NAT-D payload #%d %s\n",
1353                                         natd_seq - 1,
1354                                         natd_verified ? "verified" : "doesn't match");
1355
1356                                 vfree (natd_received);
1357                                 break;
1358                         }
1359                         /* passthrough to default... */
1360 #endif
1361
1362                 default:
1363                         /* don't send information, see isakmp_ident_r1() */
1364                         plog(LLV_ERROR, LOCATION, iph1->remote,
1365                                 "ignore the packet, "
1366                                 "received unexpecting payload type %d.\n",
1367                                 pa->type);
1368                         goto end;
1369                 }
1370         }
1371
1372 #ifdef ENABLE_NATT
1373         if (NATT_AVAILABLE(iph1))
1374                 plog (LLV_INFO, LOCATION, NULL, "NAT %s %s%s\n",
1375                       iph1->natt_flags & NAT_DETECTED ?
1376                                 "detected:" : "not detected",
1377                       iph1->natt_flags & NAT_DETECTED_ME ? "ME " : "",
1378                       iph1->natt_flags & NAT_DETECTED_PEER ? "PEER" : "");
1379 #endif
1380
1381         /* validate authentication value */
1382         ptype = oakley_validate_auth(iph1);
1383         if (ptype != 0) {
1384                 if (ptype == -1) {
1385                         /* message printed inner oakley_validate_auth() */
1386                         goto end;
1387                 }
1388                 EVT_PUSH(iph1->local, iph1->remote,
1389                     EVTT_PEERPH1AUTH_FAILED, NULL);
1390                 isakmp_info_send_n1(iph1, ptype, NULL);
1391                 goto end;
1392         }
1393
1394         iph1->status = PHASE1ST_MSG2RECEIVED;
1395
1396         error = 0;
1397
1398 end:
1399         if (pbuf)
1400                 vfree(pbuf);
1401         if (msg)
1402                 vfree(msg);
1403         if (error) {
1404                 oakley_delcert(iph1->cert_p);
1405                 iph1->cert_p = NULL;
1406                 oakley_delcert(iph1->crl_p);
1407                 iph1->crl_p = NULL;
1408                 VPTRINIT(iph1->sig_p);
1409         }
1410
1411         return error;
1412 }
1413
1414 /*
1415  * status update and establish isakmp sa.
1416  */
1417 int
1418 agg_r2send(iph1, msg)
1419         struct ph1handle *iph1;
1420         vchar_t *msg;
1421 {
1422         int error = -1;
1423
1424         /* validity check */
1425         if (iph1->status != PHASE1ST_MSG2RECEIVED) {
1426                 plog(LLV_ERROR, LOCATION, NULL,
1427                         "status mismatched %d.\n", iph1->status);
1428                 goto end;
1429         }
1430
1431         /* IV synchronized when packet encrypted. */
1432         /* see handler.h about IV synchronization. */
1433         if (ISSET(((struct isakmp *)msg->v)->flags, ISAKMP_FLAG_E))
1434                 memcpy(iph1->ivm->iv->v, iph1->ivm->ive->v, iph1->ivm->iv->l);
1435
1436         /* set encryption flag */
1437         iph1->flags |= ISAKMP_FLAG_E;
1438
1439         iph1->status = PHASE1ST_ESTABLISHED;
1440
1441         error = 0;
1442
1443 end:
1444         return error;
1445 }