#include #include #include #include #include #include "logger.h" #include "ikev2_vpn_protocol_linux.h" #include "utilities.h" #include "core/ipcclient.h" #include #include #include static Ikev2Protocol* self = nullptr; Ikev2Protocol::Ikev2Protocol(const QJsonObject &configuration, QObject* parent) : VpnProtocol(configuration, parent) { self = this; readIkev2Configuration(configuration); } Ikev2Protocol::~Ikev2Protocol() { qDebug() << "IpsecProtocol::~IpsecProtocol()"; Ikev2Protocol::stop(); } void Ikev2Protocol::stop() { setConnectionState(Vpn::ConnectionState::Disconnected); Ikev2Protocol::disconnect_vpn(); qDebug() << "IpsecProtocol::stop()"; } void Ikev2Protocol::readIkev2Configuration(const QJsonObject &configuration) { QJsonObject ikev2_data = configuration.value(ProtocolProps::key_proto_config_data(Proto::Ikev2)).toObject(); m_config = QJsonDocument::fromJson(ikev2_data.value(config_key::config).toString().toUtf8()).object(); } ErrorCode Ikev2Protocol::start() { STACK_OF(X509) *certstack = sk_X509_new_null(); BIO *p12 = BIO_new(BIO_s_mem()); EVP_PKEY *pkey; X509 *cert; BIO_write(p12, QByteArray::fromBase64(m_config[config_key::cert].toString().toUtf8()), QByteArray::fromBase64(m_config[config_key::cert].toString().toUtf8()).size()); PKCS12 *pkcs12 = d2i_PKCS12_bio(p12, NULL); PKCS12_parse(pkcs12, m_config[config_key::password].toString().toStdString().c_str(), &pkey, &cert, &certstack); BIO *bio = BIO_new(BIO_s_mem()); PEM_write_bio_X509(bio, cert); BUF_MEM *mem = NULL; BIO_get_mem_ptr(bio, &mem); std::string pem(mem->data, mem->length); qDebug() << pem; QString alias(pem.c_str()); IpcClient::Interface()->writeIPsecUserCert(alias, m_config[config_key::userName].toString()); IpcClient::Interface()->writeIPsecConfig(m_config[config_key::config].toString()); IpcClient::Interface()->writeIPsecCaCert(m_config[config_key::cacert].toString(), m_config[config_key::userName].toString()); IpcClient::Interface()->writeIPsecPrivate(m_config[config_key::cert].toString(), m_config[config_key::userName].toString()); IpcClient::Interface()->writeIPsecPrivatePass(m_config[config_key::password].toString(), m_config[config_key::hostName].toString(), m_config[config_key::userName].toString()); connect_to_vpn("ikev2-vpn"); setConnectionState(Vpn::ConnectionState::Connected); return ErrorCode::NoError; } //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ bool Ikev2Protocol::create_new_vpn(const QString & vpn_name, const QString & serv_addr){ qDebug() << "Ikev2Protocol::create_new_vpn()"; return true; } //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ bool Ikev2Protocol::delete_vpn_connection(const QString &vpn_name){ return false; } //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ bool Ikev2Protocol::connect_to_vpn(const QString &vpn_name) { IpcClient::Interface()->startIPsec(vpn_name); return true; } //~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ bool Ikev2Protocol::disconnect_vpn() { IpcClient::Interface()->stopIPsec("ikev2-vpn"); return true; }