Research on Styx

Only available on StudyMode
  • Download(s) : 49
  • Published : March 12, 2013
Open Document
Text Preview
Universitatea POLITEHNICA din Bucuresti
,

Facultatea de Automatic  si Calculatoare, , Catedra de Calculatoare

Vrije Universiteit Amsterdam Faculteit der Exacte Wetenschappen

LUCRARE DE DIPLOM€ STYX. Runtime Manipulation of Strongswan Congurations

Conduc tori Stiintici:
, ,

Autor:
R zvan Alin Ghitulete ,

Associate Prof.Dr.Ing.Habil. Thilo Kielmann Dr.Ir.Kees van Reeuwijk Prof.Dr.Ing. Nicolae • pu³

University POLITEHNICA of Bucharest
Automatic Control and Computers Faculty

Vrije Universiteit Amsterdam Faculteit der Exacte Wetenschappen

BACHELOR THESIS STYX. Runtime Manipulation of Strongswan Congurations

Scientic Advisor:
Associate Prof.Dr.Ing.Habil. Thilo Kielmann Dr.Ir.Kees van Reeuwijk Prof.Dr.Ing. Nicolae • pu³

Author:
R zvan Alin Ghitulete ,

Bucharest, July 2012

I would like to take this opportunity and thank Tobias Brunner for the never ending patience that he has shown in the e-mail exchanges that we had during the last 4 months. He always found time and tried to explain all the principles used in the strongSwan project I had diculties grasping.

Also I would like to express my gratitude towards Prof. Thilo Kielmann, and Kees van Reeuwijk for all the support they provided, and for the countless times they had to steer me in the right direction.

Last, but not least I feel that I have to thank Prof. Nicolae • pu³ without whom this project would not have been possible.

Contents
Acknowledgements Abstract 1 Introduction
1.1 1.2 Project Objectives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Project Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

1 1 2
3 3

2 IPsec
2.1 2.2 Description 2.2.1 2.2.2 2.2.3 2.3 2.3.1 2.3.2 2.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . IPsec Components ESP AH . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Transport Mode Tunnel mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

4
4 4 5 5 5 6 6 6 7

Modes of operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Internet Key Exchange . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

3 strongSwan
3.1 Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3.1.1 3.1.2 Pluto Charon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8
9 9 10

4 Implementation
4.1 4.2 Overview 4.2.1 4.2.2 4.2.3 4.3 4.3.1 4.3.2 4.3.3 4.3.4 4.3.5 4.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Plugin Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Remote Procedure Call Handler Conguration Options Parser . . . . . . . . . . . . . . . . . . . . . . . . Styx strongSwan Backend Modules . . . . . . . . . . . . . . . . . . . . . connect(bool, string) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . terminate(u_int32_t) . . . . . . . . . . . . . . . . . . . . . . . . . . . . addCong(string, address, address, ...) . . . . . . . . . . . . . . . . . . . removeCong(string) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . version() . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

14
14 16 16 17 18 19 19 20 20 20 21 21

API specication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Changelog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5 Evaluation
5.1 Managing Congurations 5.1.1 5.1.2 . . . . . . ....
tracking img