|
|
@@ -0,0 +1,255 @@
|
|
|
+package goStrongswanVici
|
|
|
+
|
|
|
+import (
|
|
|
+ "bytes"
|
|
|
+ "encoding/json"
|
|
|
+ "time"
|
|
|
+)
|
|
|
+
|
|
|
+const (
|
|
|
+ EVENT_IKE_UPDOWN = "ike-updown"
|
|
|
+ EVENT_IKE_REKEY = "ike-rekey"
|
|
|
+ EVENT_CHILD_UPDOWN = "child-updown"
|
|
|
+ EVENT_CHILD_REKEY = "child-rekey"
|
|
|
+)
|
|
|
+
|
|
|
+type EventIkeSAUpDown struct {
|
|
|
+ Child_sas map[string]*EventChildSAUpDown `json:"child-sas"`
|
|
|
+ Dh_group string `json:"dh-group"`
|
|
|
+ Encr_keysize string `json:"encr-keysize"`
|
|
|
+ Encr_alg string `json:"encr-alg"`
|
|
|
+ Established string `json:"established"`
|
|
|
+ Initiator_spi string `json:"initiator-spi"`
|
|
|
+ Integ_alg string `json:"integ-alg"`
|
|
|
+ Local_id string `json:"local-id"`
|
|
|
+ Local_host string `json:"local-host"`
|
|
|
+ Local_port string `json:"local-port"`
|
|
|
+ Nat_any string `json:"nat-any"`
|
|
|
+ Nat_remote string `json:"nat-remote"`
|
|
|
+ Prf_alg string `json:"prf-alg"`
|
|
|
+ Rekey_time string `json:"rekey-time"`
|
|
|
+ Remote_id string `json:"remote-id"`
|
|
|
+ Remote_host string `json:"remote-host"`
|
|
|
+ Remote_port string `json:"remote-port"`
|
|
|
+ Remote_vips []string `json:"remote-vips"`
|
|
|
+ Responder_spi string `json:"responder-spi"`
|
|
|
+ State string `json:"state"`
|
|
|
+ Task_Active []string `json:"tasks-active"`
|
|
|
+ Uniqueid string `json:"uniqueid"`
|
|
|
+ Version string `json:"version"`
|
|
|
+ Remote_eap_id string `json:"remote-eap-id"` // client user name
|
|
|
+}
|
|
|
+
|
|
|
+type EventChildSAUpDown struct {
|
|
|
+ Bytes_in string `json:"bytes-in"`
|
|
|
+ Bytes_out string `json:"bytes-out"`
|
|
|
+ Encap string `json:"encap"`
|
|
|
+ Encr_alg string `json:"encr-alg"`
|
|
|
+ Encr_keysize string `json:"encr-keysize"`
|
|
|
+ Integ_alg string `json:"integ-alg"`
|
|
|
+ Install_time string `json:"install-time"`
|
|
|
+ Life_time string `json:"life-time"`
|
|
|
+ Local_ts []string `json:"local-ts"`
|
|
|
+ Mode string `json:"mode"`
|
|
|
+ Name string `json:"name"`
|
|
|
+ Protocol string `json:"protocol"`
|
|
|
+ Packets_out string `json:"packets-out"`
|
|
|
+ Packets_in string `json:"packets-in"`
|
|
|
+ Rekey_time string `json:"rekey-time"`
|
|
|
+ Remote_ts []string `json:"remote-ts"`
|
|
|
+ Reqid string `json:"reqid"`
|
|
|
+ Spi_in string `json:"spi-in"`
|
|
|
+ Spi_out string `json:"spi-out"`
|
|
|
+ State string `json:"state"`
|
|
|
+ UniqueId string `json:"uniqueid"`
|
|
|
+ Remote_eap_id string `json:"remote-eap-id"` // client user name
|
|
|
+}
|
|
|
+
|
|
|
+type EventIkeRekeyPair struct {
|
|
|
+ New EventIkeRekeySA `json:"new"`
|
|
|
+ Old EventIkeRekeySA `json:"old"`
|
|
|
+}
|
|
|
+
|
|
|
+type EventIkeRekeySA struct {
|
|
|
+ Child_sas map[string]*EventChildRekeyPair `json:"child-sas"`
|
|
|
+ Dh_group string `json:"dh-group"`
|
|
|
+ Encr_alg string `json:"encr-alg"`
|
|
|
+ Encr_keysize string `json:"encr-keysize"`
|
|
|
+ Established string `json:"established"`
|
|
|
+ Initiator_spi string `json:"initiator-spi"`
|
|
|
+ Integ_alg string `json:"integ-alg"`
|
|
|
+ Local_host string `json:"local-host"`
|
|
|
+ Local_port string `json:"local-port"`
|
|
|
+ Local_id string `json:"local-id"`
|
|
|
+ Nat_any string `json:"nat-any"`
|
|
|
+ Nat_remote string `json:"nat-remote"`
|
|
|
+ Prf_alg string `json:"prf-alg"`
|
|
|
+ Rekey_time string `json:"rekey-time"`
|
|
|
+ Remote_id string `json:"remote-id"`
|
|
|
+ Remote_host string `json:"remote-host"`
|
|
|
+ Remote_port string `json:"remote-port"`
|
|
|
+ Remote_vips []string `json:"remote-vips"`
|
|
|
+ Responder_spi string `json:"responder-spi"`
|
|
|
+ State string `json:"state"`
|
|
|
+ Task_Active []string `json:"tasks-active"`
|
|
|
+ Task_Passive []string `json:"tasks-passive"`
|
|
|
+ Uniqueid string `json:"uniqueid"`
|
|
|
+ Version string `json:"version"`
|
|
|
+ Remote_eap_id string `json:"remote-eap-id"` // client user name
|
|
|
+}
|
|
|
+
|
|
|
+type EventChildRekeyPair struct {
|
|
|
+ New EventChildRekeySA `json:"new"`
|
|
|
+ Old EventChildRekeySA `json:"old"`
|
|
|
+}
|
|
|
+
|
|
|
+type EventChildRekeySA struct {
|
|
|
+ Bytes_in string `json:"bytes-in"`
|
|
|
+ Bytes_out string `json:"bytes-out"`
|
|
|
+ Encap string `json:"encap"`
|
|
|
+ Encr_alg string `json:"encr-alg"`
|
|
|
+ Encr_keysize string `json:"encr-keysize"`
|
|
|
+ Integ_alg string `json:"integ-alg"`
|
|
|
+ Install_time string `json:"install-time"`
|
|
|
+ Life_time string `json:"life-time"`
|
|
|
+ Local_ts []string `json:"local-ts"`
|
|
|
+ Mode string `json:"mode"`
|
|
|
+ Name string `json:"name"`
|
|
|
+ Packets_in string `json:"packets-in"`
|
|
|
+ Packets_out string `json:"packets-out"`
|
|
|
+ Protocol string `json:"protocol"`
|
|
|
+ Remote_ts []string `json:"remote-ts"`
|
|
|
+ Rekey_time string `json:"rekey-time"`
|
|
|
+ Reqid string `json:"reqid"`
|
|
|
+ Spi_in string `json:"spi-in"`
|
|
|
+ Spi_out string `json:"spi-out"`
|
|
|
+ State string `json:"state"`
|
|
|
+ Use_in string `json:"use-in"`
|
|
|
+ Use_out string `json:"use-out"`
|
|
|
+ UniqueId string `json:"uniqueid"`
|
|
|
+}
|
|
|
+
|
|
|
+type EventIkeUpDown struct {
|
|
|
+ Up bool
|
|
|
+ Ike map[string]*EventIkeSAUpDown
|
|
|
+}
|
|
|
+
|
|
|
+type EventIkeRekey struct {
|
|
|
+ Ike map[string]*EventIkeRekeyPair
|
|
|
+}
|
|
|
+
|
|
|
+type EventChildRekey struct {
|
|
|
+ Ike map[string]*EventIkeRekeySA
|
|
|
+}
|
|
|
+
|
|
|
+type EventChildUpDown struct {
|
|
|
+ Up bool
|
|
|
+ Ike map[string]*EventIkeSAUpDown
|
|
|
+}
|
|
|
+
|
|
|
+type EventIkeSa struct {
|
|
|
+ IkeSa
|
|
|
+ TasksActive []string `json:"tasks-active"`
|
|
|
+}
|
|
|
+
|
|
|
+type EventInfo struct {
|
|
|
+ Up bool
|
|
|
+ Ike map[string]*EventIkeSa
|
|
|
+}
|
|
|
+
|
|
|
+func prettyprint(b []byte) string {
|
|
|
+ var out bytes.Buffer
|
|
|
+ json.Indent(&out, b, "", " ")
|
|
|
+ return string(out.Bytes())
|
|
|
+}
|
|
|
+
|
|
|
+type monitorCallBack func(event string, info interface{})
|
|
|
+
|
|
|
+func handleIkeUpDown(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
|
+ event := &EventIkeUpDown{}
|
|
|
+ event.Ike = map[string]*EventIkeSAUpDown{}
|
|
|
+ //we need to marshall all ikes manual because json uses connections names as key
|
|
|
+ for name := range response {
|
|
|
+ value := response[name]
|
|
|
+ if name == "up" {
|
|
|
+ event.Up = true
|
|
|
+ } else {
|
|
|
+ sa := &EventIkeSAUpDown{}
|
|
|
+ ConvertFromGeneral(value, sa)
|
|
|
+ event.Ike[name] = sa
|
|
|
+ }
|
|
|
+ }
|
|
|
+ callback(eventName, event)
|
|
|
+}
|
|
|
+
|
|
|
+func handleIkeRekey(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
|
+ event := &EventIkeRekey{}
|
|
|
+ event.Ike = map[string]*EventIkeRekeyPair{}
|
|
|
+ //we need to marshall all ikes manual because json uses connections names as key
|
|
|
+ for name := range response {
|
|
|
+ value := response[name]
|
|
|
+ sa := &EventIkeRekeyPair{}
|
|
|
+ ConvertFromGeneral(value, sa)
|
|
|
+ event.Ike[name] = sa
|
|
|
+ }
|
|
|
+ callback(eventName, event)
|
|
|
+}
|
|
|
+
|
|
|
+func handleChildUpDown(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
|
+ event := &EventChildUpDown{}
|
|
|
+ event.Ike = map[string]*EventIkeSAUpDown{}
|
|
|
+ //we need to marshall all ikes manual because json uses connections names as key
|
|
|
+ for name := range response {
|
|
|
+ value := response[name]
|
|
|
+ if name == "up" {
|
|
|
+ event.Up = true
|
|
|
+ } else {
|
|
|
+ sa := &EventIkeSAUpDown{}
|
|
|
+ ConvertFromGeneral(value, sa)
|
|
|
+ event.Ike[name] = sa
|
|
|
+ }
|
|
|
+ }
|
|
|
+ callback(eventName, event)
|
|
|
+}
|
|
|
+
|
|
|
+func handleChildRekey(eventName string, callback monitorCallBack, response map[string]interface{}) {
|
|
|
+ event := &EventChildRekey{}
|
|
|
+ event.Ike = map[string]*EventIkeRekeySA{}
|
|
|
+ //we need to marshall all ikes manual because json uses connections names as key
|
|
|
+ for name := range response {
|
|
|
+ value := response[name]
|
|
|
+ sa := &EventIkeRekeySA{}
|
|
|
+ ConvertFromGeneral(value, sa)
|
|
|
+ event.Ike[name] = sa
|
|
|
+ }
|
|
|
+ callback(eventName, event)
|
|
|
+}
|
|
|
+
|
|
|
+func (c *ClientConn) MonitorSA(callback monitorCallBack, watchdog time.Duration) (err error) {
|
|
|
+ //register event
|
|
|
+ c.RegisterEvent(EVENT_CHILD_UPDOWN, func(response map[string]interface{}) {
|
|
|
+ //dumpResponse(response)
|
|
|
+ handleChildUpDown(EVENT_CHILD_UPDOWN, callback, response)
|
|
|
+ })
|
|
|
+ c.RegisterEvent(EVENT_CHILD_REKEY, func(response map[string]interface{}) {
|
|
|
+ //dumpResponse(response)
|
|
|
+ handleChildRekey(EVENT_CHILD_REKEY, callback, response)
|
|
|
+ })
|
|
|
+ c.RegisterEvent(EVENT_IKE_UPDOWN, func(response map[string]interface{}) {
|
|
|
+ //dumpResponse(response)
|
|
|
+ handleIkeUpDown(EVENT_IKE_UPDOWN, callback, response)
|
|
|
+ })
|
|
|
+ c.RegisterEvent(EVENT_IKE_REKEY, func(response map[string]interface{}) {
|
|
|
+ //dumpResponse(response)
|
|
|
+ handleIkeRekey(EVENT_IKE_REKEY, callback, response)
|
|
|
+ })
|
|
|
+
|
|
|
+ for {
|
|
|
+ time.Sleep(watchdog)
|
|
|
+ //collect some daemon stats to see if connection is alive
|
|
|
+ if _, err := c.Stats(); err != nil {
|
|
|
+ return err
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return nil
|
|
|
+}
|
Manuel Buil