|
Packit Service |
3880ab |
/*
|
|
Packit Service |
3880ab |
* seg6.c "ip sr/seg6"
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* This program is free software; you can redistribute it and/or
|
|
Packit Service |
3880ab |
* modify it under the terms of the GNU General Public License
|
|
Packit Service |
3880ab |
* version 2 as published by the Free Software Foundation;
|
|
Packit Service |
3880ab |
*
|
|
Packit Service |
3880ab |
* Author: David Lebrun <david.lebrun@uclouvain.be>
|
|
Packit Service |
3880ab |
*/
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include <stdio.h>
|
|
Packit Service |
3880ab |
#include <stdlib.h>
|
|
Packit Service |
3880ab |
#include <string.h>
|
|
Packit Service |
3880ab |
#include <unistd.h>
|
|
Packit Service |
3880ab |
#include <errno.h>
|
|
Packit Service |
3880ab |
#include <sys/types.h>
|
|
Packit Service |
3880ab |
#include <sys/socket.h>
|
|
Packit Service |
3880ab |
#include <arpa/inet.h>
|
|
Packit Service |
3880ab |
#include <sys/ioctl.h>
|
|
Packit Service |
3880ab |
#include <linux/if.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include <linux/genetlink.h>
|
|
Packit Service |
3880ab |
#include <linux/seg6_genl.h>
|
|
Packit Service |
3880ab |
#include <linux/seg6_hmac.h>
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#include "utils.h"
|
|
Packit Service |
3880ab |
#include "ip_common.h"
|
|
Packit Service |
3880ab |
#include "libgenl.h"
|
|
Packit Service |
3880ab |
#include "json_print.h"
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#define HMAC_KEY_PROMPT "Enter secret for HMAC key ID (blank to delete): "
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void usage(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
fprintf(stderr,
|
|
Packit Service |
3880ab |
"Usage: ip sr { COMMAND | help }\n"
|
|
Packit Service |
3880ab |
" ip sr hmac show\n"
|
|
Packit Service |
3880ab |
" ip sr hmac set KEYID ALGO\n"
|
|
Packit Service |
3880ab |
" ip sr tunsrc show\n"
|
|
Packit Service |
3880ab |
" ip sr tunsrc set ADDRESS\n"
|
|
Packit Service |
3880ab |
"where ALGO := { sha1 | sha256 }\n");
|
|
Packit Service |
3880ab |
exit(-1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static struct rtnl_handle grth = { .fd = -1 };
|
|
Packit Service |
3880ab |
static int genl_family = -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
#define SEG6_REQUEST(_req, _bufsiz, _cmd, _flags) \
|
|
Packit Service |
3880ab |
GENL_REQUEST(_req, _bufsiz, genl_family, 0, \
|
|
Packit Service |
3880ab |
SEG6_GENL_VERSION, _cmd, _flags)
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static struct {
|
|
Packit Service |
3880ab |
unsigned int cmd;
|
|
Packit Service |
3880ab |
inet_prefix addr;
|
|
Packit Service |
3880ab |
__u32 keyid;
|
|
Packit Service |
3880ab |
const char *pass;
|
|
Packit Service |
3880ab |
__u8 alg_id;
|
|
Packit Service |
3880ab |
} opts;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void print_dumphmac(struct rtattr *attrs[])
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
char secret[64];
|
|
Packit Service |
3880ab |
char *algstr;
|
|
Packit Service |
3880ab |
__u8 slen = rta_getattr_u8(attrs[SEG6_ATTR_SECRETLEN]);
|
|
Packit Service |
3880ab |
__u8 alg_id = rta_getattr_u8(attrs[SEG6_ATTR_ALGID]);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
memset(secret, 0, 64);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (slen > 63) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "HMAC secret length %d > 63, truncated\n", slen);
|
|
Packit Service |
3880ab |
slen = 63;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
memcpy(secret, RTA_DATA(attrs[SEG6_ATTR_SECRET]), slen);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
switch (alg_id) {
|
|
Packit Service |
3880ab |
case SEG6_HMAC_ALGO_SHA1:
|
|
Packit Service |
3880ab |
algstr = "sha1";
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
case SEG6_HMAC_ALGO_SHA256:
|
|
Packit Service |
3880ab |
algstr = "sha256";
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
default:
|
|
Packit Service |
3880ab |
algstr = "<unknown>";
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_uint(PRINT_ANY, "hmac", "hmac %u ",
|
|
Packit Service |
3880ab |
rta_getattr_u32(attrs[SEG6_ATTR_HMACKEYID]));
|
|
Packit Service |
3880ab |
print_string(PRINT_ANY, "algo", "algo %s ", algstr);
|
|
Packit Service |
3880ab |
print_string(PRINT_ANY, "secret", "secret \"%s\"\n", secret);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static void print_tunsrc(struct rtattr *attrs[])
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
const char *dst
|
|
Packit Service |
3880ab |
= rt_addr_n2a(AF_INET6, 16,
|
|
Packit Service |
3880ab |
RTA_DATA(attrs[SEG6_ATTR_DST]));
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
print_string(PRINT_ANY, "tunsrc",
|
|
Packit Service |
3880ab |
"tunsrc addr %s\n", dst);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int process_msg(struct nlmsghdr *n, void *arg)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
struct rtattr *attrs[SEG6_ATTR_MAX + 1];
|
|
Packit Service |
3880ab |
struct genlmsghdr *ghdr;
|
|
Packit Service |
3880ab |
int len = n->nlmsg_len;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (n->nlmsg_type != genl_family)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
len -= NLMSG_LENGTH(GENL_HDRLEN);
|
|
Packit Service |
3880ab |
if (len < 0)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
ghdr = NLMSG_DATA(n);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
parse_rtattr(attrs, SEG6_ATTR_MAX, (void *)ghdr + GENL_HDRLEN, len);
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
open_json_object(NULL);
|
|
Packit Service |
3880ab |
switch (ghdr->cmd) {
|
|
Packit Service |
3880ab |
case SEG6_CMD_DUMPHMAC:
|
|
Packit Service |
3880ab |
print_dumphmac(attrs);
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
case SEG6_CMD_GET_TUNSRC:
|
|
Packit Service |
3880ab |
print_tunsrc(attrs);
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
close_json_object();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
static int seg6_do_cmd(void)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
SEG6_REQUEST(req, 1024, opts.cmd, NLM_F_REQUEST);
|
|
Packit Service |
3880ab |
struct nlmsghdr *answer;
|
|
Packit Service |
3880ab |
int repl = 0, dump = 0;
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (genl_family < 0) {
|
|
Packit Service |
3880ab |
if (rtnl_open_byproto(&grth, 0, NETLINK_GENERIC) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Cannot open generic netlink socket\n");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
genl_family = genl_resolve_family(&grth, SEG6_GENL_NAME);
|
|
Packit Service |
3880ab |
if (genl_family < 0)
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
req.n.nlmsg_type = genl_family;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
switch (opts.cmd) {
|
|
Packit Service |
3880ab |
case SEG6_CMD_SETHMAC:
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
addattr32(&req.n, sizeof(req), SEG6_ATTR_HMACKEYID, opts.keyid);
|
|
Packit Service |
3880ab |
addattr8(&req.n, sizeof(req), SEG6_ATTR_SECRETLEN,
|
|
Packit Service |
3880ab |
strlen(opts.pass));
|
|
Packit Service |
3880ab |
addattr8(&req.n, sizeof(req), SEG6_ATTR_ALGID, opts.alg_id);
|
|
Packit Service |
3880ab |
if (strlen(opts.pass))
|
|
Packit Service |
3880ab |
addattr_l(&req.n, sizeof(req), SEG6_ATTR_SECRET,
|
|
Packit Service |
3880ab |
opts.pass, strlen(opts.pass));
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
case SEG6_CMD_SET_TUNSRC:
|
|
Packit Service |
3880ab |
addattr_l(&req.n, sizeof(req), SEG6_ATTR_DST, opts.addr.data,
|
|
Packit Service |
3880ab |
sizeof(struct in6_addr));
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
case SEG6_CMD_DUMPHMAC:
|
|
Packit Service |
3880ab |
dump = 1;
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
case SEG6_CMD_GET_TUNSRC:
|
|
Packit Service |
3880ab |
repl = 1;
|
|
Packit Service |
3880ab |
break;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (!repl && !dump) {
|
|
Packit Service |
3880ab |
if (rtnl_talk(&grth, &req.n, NULL) < 0)
|
|
Packit Service |
3880ab |
return -1;
|
|
Packit Service |
3880ab |
} else if (repl) {
|
|
Packit Service |
3880ab |
if (rtnl_talk(&grth, &req.n, &answer) < 0)
|
|
Packit Service |
3880ab |
return -2;
|
|
Packit Service |
3880ab |
new_json_obj(json);
|
|
Packit Service |
3880ab |
if (process_msg(answer, stdout) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Error parsing reply\n");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
delete_json_obj();
|
|
Packit Service |
3880ab |
free(answer);
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
req.n.nlmsg_flags |= NLM_F_DUMP;
|
|
Packit Service |
3880ab |
req.n.nlmsg_seq = grth.dump = ++grth.seq;
|
|
Packit Service |
3880ab |
if (rtnl_send(&grth, &req, req.n.nlmsg_len) < 0) {
|
|
Packit Service |
3880ab |
perror("Failed to send dump request");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
new_json_obj(json);
|
|
Packit Service |
3880ab |
if (rtnl_dump_filter(&grth, process_msg, stdout) < 0) {
|
|
Packit Service |
3880ab |
fprintf(stderr, "Dump terminated\n");
|
|
Packit Service |
3880ab |
exit(1);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
delete_json_obj();
|
|
Packit Service |
3880ab |
fflush(stdout);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return 0;
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
int do_seg6(int argc, char **argv)
|
|
Packit Service |
3880ab |
{
|
|
Packit Service |
3880ab |
if (argc < 1 || matches(*argv, "help") == 0)
|
|
Packit Service |
3880ab |
usage();
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
memset(&opts, 0, sizeof(opts));
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
if (matches(*argv, "hmac") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (matches(*argv, "show") == 0) {
|
|
Packit Service |
3880ab |
opts.cmd = SEG6_CMD_DUMPHMAC;
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "set") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (get_u32(&opts.keyid, *argv, 0) || opts.keyid == 0)
|
|
Packit Service |
3880ab |
invarg("hmac KEYID value is invalid", *argv);
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (strcmp(*argv, "sha1") == 0) {
|
|
Packit Service |
3880ab |
opts.alg_id = SEG6_HMAC_ALGO_SHA1;
|
|
Packit Service |
3880ab |
} else if (strcmp(*argv, "sha256") == 0) {
|
|
Packit Service |
3880ab |
opts.alg_id = SEG6_HMAC_ALGO_SHA256;
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
invarg("hmac ALGO value is invalid", *argv);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
opts.cmd = SEG6_CMD_SETHMAC;
|
|
Packit Service |
3880ab |
opts.pass = getpass(HMAC_KEY_PROMPT);
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
invarg("unknown", *argv);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "tunsrc") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
if (matches(*argv, "show") == 0) {
|
|
Packit Service |
3880ab |
opts.cmd = SEG6_CMD_GET_TUNSRC;
|
|
Packit Service |
3880ab |
} else if (matches(*argv, "set") == 0) {
|
|
Packit Service |
3880ab |
NEXT_ARG();
|
|
Packit Service |
3880ab |
opts.cmd = SEG6_CMD_SET_TUNSRC;
|
|
Packit Service |
3880ab |
get_addr(&opts.addr, *argv, AF_INET6);
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
invarg("unknown", *argv);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
} else {
|
|
Packit Service |
3880ab |
invarg("unknown", *argv);
|
|
Packit Service |
3880ab |
}
|
|
Packit Service |
3880ab |
|
|
Packit Service |
3880ab |
return seg6_do_cmd();
|
|
Packit Service |
3880ab |
}
|