/*

 * Copyright (C) 2011-2022 Andreas Steffen

 *

 * Copyright (C) secunet Security Networks AG

 *

 * This program is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License as published by the

 * Free Software Foundation; either version 2 of the License, or (at your

 * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.

 *

 * This program is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY

 * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * for more details.

 */

#include "imcv.h"

#include "ietf/ietf_attr.h"

#include "ita/ita_attr.h"

#include "pwg/pwg_attr.h"

#include "tcg/tcg_attr.h"

#include "pts/components/pts_component.h"

#include "pts/components/pts_component_manager.h"

#include "pts/components/tcg/tcg_comp_func_name.h"

#include "pts/components/ita/ita_comp_func_name.h"

#include "pts/components/ita/ita_comp_ima.h"

#include "pts/components/ita/ita_comp_tboot.h"

#include "pts/components/ita/ita_comp_tgrub.h"

#include <utils/debug.h>

#include <utils/utils.h>

#include <pen/pen.h>

#ifdef HAVE_SYSLOG

#include <syslog.h>

#endif

#ifndef IPSEC_SCRIPT

#define IPSEC_SCRIPT "ipsec"

#endif

#define IMCV_DEBUG_LEVEL      1

#define IMCV_DEFAULT_POLICY_SCRIPT  IPSEC_SCRIPT " _imv_policy"

/**

 * PA-TNC attribute manager

 */

pa_tnc_attr_manager_t *imcv_pa_tnc_attributes;

/**

 * Global list of IMV sessions

 */

imv_session_manager_t *imcv_sessions;

/**

 * Global IMV database

 */

imv_database_t *imcv_db;

/**

 * PTS Functional Component manager

 */

pts_component_manager_t *imcv_pts_components;

/**

 * Reference count for libimcv

 */

static refcount_t libimcv_ref = 0;

/**

 * Reference count for libstrongswan

 */

static refcount_t libstrongswan_ref = 0;

/**

 * Global configuration of imcv dbg function

 */

static int  imcv_debug_level;

static bool imcv_stderr_quiet;

/**

 * Described in header.

 */

void imcv_list_pa_tnc_attribute_type(char *label, pen_t vendor_id, uint32_t type)

{

  enum_name_t *pa_attr_names;

  pa_attr_names = imcv_pa_tnc_attributes->get_names(imcv_pa_tnc_attributes,

                            vendor_id);

  if (pa_attr_names)

  {

    DBG2(DBG_TNC, "%s PA-TNC attribute type '%N/%N' 0x%06x/0x%08x",

       label, pen_names, vendor_id, pa_attr_names, type, vendor_id, type);

  }

  else

  {

    DBG2(DBG_TNC, "%s PA-TNC attribute type '%N' 0x%06x/0x%08x",

       label, pen_names, vendor_id, vendor_id, type);

  }

}

/**

 * imvc dbg function

 */

static void imcv_dbg(debug_t group, level_t level, char *fmt, ...)

{

  va_list args;

  if (level <= imcv_debug_level)

  {

    if (!imcv_stderr_quiet)

    {

      va_start(args, fmt);

      fprintf(stderr, "[HSR] ");

      vfprintf(stderr, fmt, args);

      fprintf(stderr, "\n");

      va_end(args);

    }

#ifdef HAVE_SYSLOG

    {

      int priority = LOG_INFO;

      char buffer[8192];

      char *current = buffer, *next;

      /* write in memory buffer first */

      va_start(args, fmt);

      vsnprintf(buffer, sizeof(buffer), fmt, args);

      va_end(args);

      /* do a syslog with every line */

      while (current)

      {

        next = strchr(current, '\n');

        if (next)

        {

          *(next++) = '\0';

        }

        syslog(priority, "[HSR] %s\n", current);

        current = next;

      }

    }

#endif /* HAVE_SYSLOG */

  }

}

/**

 * Described in header.

 */

bool libimcv_init(bool is_imv)

{

  /* initialize libstrongswan library only once */

  if (lib)

  {

    /* did main program initialize libstrongswan? */

    if (!ref_cur(&libstrongswan_ref))

    {

      ref_get(&libstrongswan_ref);

    }

  }

  else

  {

    /* we are the first to initialize libstrongswan */

    if (!library_init(NULL, "libimcv"))

    {

      return FALSE;

    }

    /* set the debug level and stderr output */

    imcv_debug_level =  lib->settings->get_int(lib->settings,

                  "libimcv.debug_level", IMCV_DEBUG_LEVEL);

    imcv_stderr_quiet = lib->settings->get_int(lib->settings,

                  "libimcv.stderr_quiet", FALSE);

    /* activate the imcv debugging hook */

    dbg = imcv_dbg;

#ifdef HAVE_SYSLOG

    openlog("imcv", 0, LOG_DAEMON);

#endif

    if (!lib->plugins->load(lib->plugins,

        lib->settings->get_str(lib->settings, "libimcv.load",

          "random nonce gmp pubkey x509")))

    {

      library_deinit();

      return FALSE;

    }

  }

  ref_get(&libstrongswan_ref);

  lib->settings->add_fallback(lib->settings, "%s.imcv", "libimcv", lib->ns);

  lib->settings->add_fallback(lib->settings, "%s.plugins", "libimcv.plugins",

                lib->ns);

  if (!ref_cur(&libimcv_ref))

  {

    char *uri, *script;

    libtpmtss_init();

    /* initialize the PA-TNC attribute manager */

    imcv_pa_tnc_attributes = pa_tnc_attr_manager_create();

    imcv_pa_tnc_attributes->add_vendor(imcv_pa_tnc_attributes, PEN_IETF,

              ietf_attr_create_from_data, ietf_attr_names);

    imcv_pa_tnc_attributes->add_vendor(imcv_pa_tnc_attributes, PEN_ITA,

              ita_attr_create_from_data, ita_attr_names);

    imcv_pa_tnc_attributes->add_vendor(imcv_pa_tnc_attributes, PEN_PWG,

              pwg_attr_create_from_data, pwg_attr_names);

    imcv_pa_tnc_attributes->add_vendor(imcv_pa_tnc_attributes, PEN_TCG,

              tcg_attr_create_from_data, tcg_attr_names);

    imcv_pts_components = pts_component_manager_create();

    imcv_pts_components->add_vendor(imcv_pts_components, PEN_TCG,

          pts_tcg_comp_func_names, PTS_TCG_QUALIFIER_TYPE_SIZE,

          pts_tcg_qualifier_flag_names, pts_tcg_qualifier_type_names);

    imcv_pts_components->add_vendor(imcv_pts_components, PEN_ITA,

          pts_ita_comp_func_names, PTS_ITA_QUALIFIER_TYPE_SIZE,

          pts_ita_qualifier_flag_names, pts_ita_qualifier_type_names);

    imcv_pts_components->add_component(imcv_pts_components, PEN_ITA,

                    PTS_ITA_COMP_FUNC_NAME_TGRUB,

                    pts_ita_comp_tgrub_create);

    imcv_pts_components->add_component(imcv_pts_components, PEN_ITA,

                    PTS_ITA_COMP_FUNC_NAME_TBOOT,

                    pts_ita_comp_tboot_create);

    imcv_pts_components->add_component(imcv_pts_components, PEN_ITA,

                    PTS_ITA_COMP_FUNC_NAME_IMA,

                    pts_ita_comp_ima_create);

    if (is_imv)

    {

      /* instantiate global IMV session manager */

      imcv_sessions = imv_session_manager_create();

      /* instantiate and attach global IMV database if URI is valid */

      uri = lib->settings->get_str(lib->settings,

            "%s.imcv.database", NULL, lib->ns);

      script = lib->settings->get_str(lib->settings,

            "%s.imcv.policy_script", IMCV_DEFAULT_POLICY_SCRIPT,

            lib->ns);

      if (uri)

      {

        imcv_db = imv_database_create(uri, script);

      }

    }

    DBG1(DBG_LIB, "libimcv initialized");

  }

  ref_get(&libimcv_ref);

  return TRUE;

}

/**

 * Described in header.

 */

void libimcv_deinit(void)

{

  if (ref_put(&libimcv_ref))

  {

    imcv_pts_components->remove_vendor(imcv_pts_components, PEN_TCG);

    imcv_pts_components->remove_vendor(imcv_pts_components, PEN_ITA);

    imcv_pts_components->destroy(imcv_pts_components);

    imcv_pa_tnc_attributes->remove_vendor(imcv_pa_tnc_attributes, PEN_IETF);

    imcv_pa_tnc_attributes->remove_vendor(imcv_pa_tnc_attributes, PEN_ITA);

    imcv_pa_tnc_attributes->remove_vendor(imcv_pa_tnc_attributes, PEN_PWG);

    imcv_pa_tnc_attributes->remove_vendor(imcv_pa_tnc_attributes, PEN_TCG);

    DESTROY_IF(imcv_pa_tnc_attributes);

    imcv_pa_tnc_attributes = NULL;

    DESTROY_IF(imcv_db);

    DESTROY_IF(imcv_sessions);

    DBG1(DBG_LIB, "libimcv terminated");

    libtpmtss_deinit();

  }

  if (ref_put(&libstrongswan_ref))

  {

    library_deinit();

  }

}