diff options
Diffstat (limited to 'keyexchange/isakmpd-20041012/init.c')
| -rw-r--r-- | keyexchange/isakmpd-20041012/init.c | 158 |
1 files changed, 158 insertions, 0 deletions
diff --git a/keyexchange/isakmpd-20041012/init.c b/keyexchange/isakmpd-20041012/init.c new file mode 100644 index 0000000..5ee6682 --- /dev/null +++ b/keyexchange/isakmpd-20041012/init.c @@ -0,0 +1,158 @@ +/* $OpenBSD: init.c,v 1.33 2004/09/17 13:46:34 ho Exp $ */ +/* $EOM: init.c,v 1.25 2000/03/30 14:27:24 ho Exp $ */ + +/* + * Copyright (c) 1998, 1999, 2000 Niklas Hallqvist. All rights reserved. + * Copyright (c) 2000 Angelos D. Keromytis. All rights reserved. + * Copyright (c) 2003, 2004 Håkan Olsson. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES + * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. + * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT + * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF + * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + */ + +/* + * This code was written under funding by Ericsson Radio Systems. + */ + +/* XXX This file could easily be built dynamically instead. */ + +#include <stdlib.h> + +#include "sysdep.h" + +#include "app.h" +#include "cert.h" +#include "conf.h" +#include "connection.h" +#include "doi.h" +#include "exchange.h" +#include "init.h" +#include "ipsec.h" +#include "isakmp_doi.h" +#include "libcrypto.h" +#include "log.h" +#include "math_group.h" +#include "monitor.h" +#include "sa.h" +#include "timer.h" +#include "transport.h" +#include "virtual.h" +#include "udp.h" +#include "ui.h" +#include "util.h" + +#if defined (USE_POLICY) +#include "policy.h" +#endif + +#if defined (USE_NAT_TRAVERSAL) +#include "nat_traversal.h" +#include "udp_encap.h" +#endif + +void +init(void) +{ + app_init(); + doi_init(); + exchange_init(); + group_init(); + ipsec_init(); + isakmp_doi_init(); + message_init(); + libcrypto_init(); + + timer_init(); + + /* The following group are depending on timer_init having run. */ + conf_init(); + connection_init(); + + /* This depends on conf_init, thus check as soon as possible. */ + log_reinit(); + +#if defined (USE_POLICY) + /* policy_init depends on conf_init having run. */ + policy_init(); +#endif + + /* Depends on conf_init and policy_init having run */ + cert_init(); + crl_init(); + + sa_init(); + transport_init(); + virtual_init(); + udp_init(); +#if defined (USE_NAT_TRAVERSAL) + nat_t_init(); + udp_encap_init(); +#endif + monitor_ui_init(); +} + +/* Reinitialize, either after a SIGHUP reception or by FIFO UI cmd. */ +void +reinit(void) +{ + log_print("isakmpd: reinitializing daemon"); + + /* + * XXX Remove all(/some?) pending exchange timers? - they may not be + * possible to complete after we've re-read the config file. + * User-initiated SIGHUP's maybe "authorizes" a wait until + * next connection-check. + * XXX This means we discard exchange->last_msg, is this really ok? + */ + + /* Reinitialize PRNG if we are in deterministic mode. */ + if (regrand) + srandom(seed); + + /* Reread config file. */ + conf_reinit(); + + log_reinit(); + +#if defined (USE_POLICY) + /* Reread the policies. */ + policy_init(); +#endif + + /* Reinitialize certificates */ + cert_init(); + crl_init(); + + /* Reinitialize our connection list. */ + connection_reinit(); + + /* + * Rescan interfaces (call reinit() in all transports). + */ + transport_reinit(); + + /* + * XXX "These" (non-existent) reinitializations should not be done. + * cookie_reinit (); + * ui_reinit (); + */ + + sa_reinit(); +} |