1 files changed, 156 insertions, 0 deletions
diff --git a/ipsec/ipsec-impl/src/main/java/io/fd/hc2vpp/ipsec/write/Ikev2PolicyCustomizer.java b/ipsec/ipsec-impl/src/main/java/io/fd/hc2vpp/ipsec/write/Ikev2PolicyCustomizer.java
new file mode 100644
index 000000000..300ea6b8e
--- /dev/null
+++ b/ipsec/ipsec-impl/src/main/java/io/fd/hc2vpp/ipsec/write/Ikev2PolicyCustomizer.java
@@ -0,0 +1,156 @@
+/*
+ * Copyright (c) 2019 PANTHEON.tech.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package io.fd.hc2vpp.ipsec.write;
+
+import io.fd.hc2vpp.common.translate.util.ByteDataTranslator;
+import io.fd.hc2vpp.common.translate.util.FutureJVppCustomizer;
+import io.fd.hc2vpp.common.translate.util.Ipv4Translator;
+import io.fd.hc2vpp.common.translate.util.JvppReplyConsumer;
+import io.fd.honeycomb.translate.spi.write.ListWriterCustomizer;
+import io.fd.honeycomb.translate.write.WriteContext;
+import io.fd.honeycomb.translate.write.WriteFailedException;
+import io.fd.vpp.jvpp.core.dto.Ikev2ProfileAddDel;
+import io.fd.vpp.jvpp.core.dto.Ikev2ProfileSetAuth;
+import io.fd.vpp.jvpp.core.dto.Ikev2ProfileSetTs;
+import io.fd.vpp.jvpp.core.future.FutureJVppCore;
+import java.nio.ByteBuffer;
+import javax.annotation.Nonnull;
+import org.opendaylight.yang.gen.v1.http.fd.io.hc2vpp.yang.vpp.ipsec.rev181213.IpsecIkev2PolicyAugmentation;
+import org.opendaylight.yang.gen.v1.http.fd.io.hc2vpp.yang.vpp.ipsec.rev181213.ikev2.policy.aug.grouping.TrafficSelectors;
+import org.opendaylight.yang.gen.v1.urn.ietf.params.xml.ns.yang.ietf.ipsec.rev181214.IkeGeneralPolicyProfileGrouping;
+import org.opendaylight.yang.gen.v1.urn.ietf.params.xml.ns.yang.ietf.ipsec.rev181214.ikev2.Policy;
+import org.opendaylight.yang.gen.v1.urn.ietf.params.xml.ns.yang.ietf.ipsec.rev181214.ikev2.PolicyKey;
+import org.opendaylight.yang.gen.v1.urn.ietf.params.xml.ns.yang.ietf.ipsec.rev181214.ikev2.policy.profile.grouping.Authentication;
+import org.opendaylight.yangtools.yang.binding.InstanceIdentifier;
+
+public class Ikev2PolicyCustomizer extends FutureJVppCustomizer
+        implements ListWriterCustomizer<Policy, PolicyKey>, JvppReplyConsumer, ByteDataTranslator, Ipv4Translator {
+
+    public Ikev2PolicyCustomizer(final FutureJVppCore vppApi) {
+        super(vppApi);
+    }
+
+    @Override
+    public void writeCurrentAttributes(@Nonnull final InstanceIdentifier<Policy> id, @Nonnull final Policy dataAfter,
+                                       @Nonnull final WriteContext writeContext) throws WriteFailedException {
+        final Ikev2ProfileAddDel request = new Ikev2ProfileAddDel();
+        request.isAdd = BYTE_TRUE;
+        request.name = dataAfter.getName().getBytes();
+        getReplyForWrite(getFutureJVpp().ikev2ProfileAddDel(request).toCompletableFuture(), id);
+        addAuthorization(dataAfter, id);
+        addTrafficSelectors(dataAfter, id);
+    }
+
+    @Override
+    public void deleteCurrentAttributes(@Nonnull final InstanceIdentifier<Policy> id, @Nonnull final Policy dataBefore,
+                                        @Nonnull final WriteContext writeContext) throws WriteFailedException {
+        final Ikev2ProfileAddDel request = new Ikev2ProfileAddDel();
+        request.isAdd = BYTE_FALSE;
+        request.name = dataBefore.getName().getBytes();
+        getReplyForWrite(getFutureJVpp().ikev2ProfileAddDel(request).toCompletableFuture(), id);
+    }
+
+    @Override
+    public void updateCurrentAttributes(@Nonnull final InstanceIdentifier<Policy> id, @Nonnull final Policy dataBefore,
+                                        @Nonnull final Policy dataAfter, @Nonnull final WriteContext writeContext)
+            throws WriteFailedException {
+        addAuthorization(dataAfter, id);
+        addTrafficSelectors(dataAfter, id);
+    }
+
+    private void addTrafficSelectors(final Policy dataAfter, final InstanceIdentifier<Policy> id)
+            throws WriteFailedException {
+        IpsecIkev2PolicyAugmentation aug = dataAfter.augmentation(IpsecIkev2PolicyAugmentation.class);
+        if (aug == null) {
+            return;
+        }
+        if (aug.getTrafficSelectors() != null) {
+            for (TrafficSelectors selector : aug.getTrafficSelectors()) {
+                Ikev2ProfileSetTs addTsRequest = new Ikev2ProfileSetTs();
+                if (selector.getLocalAddressHigh() != null && selector.getLocalAddressLow() != null) {
+                    addTsRequest.isLocal = BYTE_TRUE;
+                    addTsRequest.startAddr = ByteBuffer
+                            .wrap(ipv4AddressNoZoneToArray(selector.getLocalAddressLow().getIpv4Address().getValue()))
+                            .getInt();
+                    addTsRequest.endAddr = ByteBuffer
+                            .wrap(ipv4AddressNoZoneToArray(selector.getLocalAddressHigh().getIpv4Address().getValue()))
+                            .getInt();
+                    if (selector.getLocalPortHigh() != null && selector.getLocalPortLow() != null) {
+                        addTsRequest.startPort = selector.getLocalPortLow().getValue().shortValue();
+                        addTsRequest.endPort = selector.getLocalPortHigh().getValue().shortValue();
+                    }
+                } else if (selector.getRemoteAddressHigh() != null && selector.getRemoteAddressLow() != null) {
+                    addTsRequest.isLocal = BYTE_FALSE;
+                    addTsRequest.startAddr = ByteBuffer
+                            .wrap(ipv4AddressNoZoneToArray(selector.getRemoteAddressLow().getIpv4Address().getValue()))
+                            .getInt();
+                    addTsRequest.endAddr = ByteBuffer
+                            .wrap(ipv4AddressNoZoneToArray(selector.getRemoteAddressHigh().getIpv4Address().getValue()))
+                            .getInt();
+                    if (selector.getRemotePortHigh() != null && selector.getRemotePortLow() != null) {
+                        addTsRequest.startPort = selector.getRemotePortLow().getValue().shortValue();
+                        addTsRequest.endPort = selector.getRemotePortHigh().getValue().shortValue();
+                    }
+                }
+                if (selector.getProtocol() != null) {
+                    addTsRequest.proto = selector.getProtocol().byteValue();
+                }
+                if (dataAfter.getName() != null) {
+                    addTsRequest.name = dataAfter.getName().getBytes();
+                }
+                getReplyForWrite(getFutureJVpp().ikev2ProfileSetTs(addTsRequest).toCompletableFuture(), id);
+            }
+        }
+    }
+
+    private void addAuthorization(final Policy data, final InstanceIdentifier<Policy> id)
+            throws WriteFailedException {
+        Authentication auth = data.getAuthentication();
+        if (auth != null) {
+            if (auth.isPresharedKey() != null && data.getPreSharedKey() != null) {
+                setProfilePreSharedKeyAuth(data.key().getName(), data.getPreSharedKey(), id);
+            } else if (auth.isRsaSignature() != null) {
+                IpsecIkev2PolicyAugmentation aug = data.augmentation(IpsecIkev2PolicyAugmentation.class);
+                if (aug != null && aug.getCertificate() != null) {
+                    setProfileRSAAuth(data.key().getName(), aug.getCertificate(), id);
+                }
+            }
+        }
+    }
+
+    private void setProfileRSAAuth(final String name, final String fileName, final InstanceIdentifier<Policy> id)
+            throws WriteFailedException {
+        Ikev2ProfileSetAuth request = new Ikev2ProfileSetAuth();
+        request.name = name.getBytes();
+        request.data = fileName.getBytes();
+        request.authMethod = BYTE_TRUE;
+        getReplyForWrite(getFutureJVpp().ikev2ProfileSetAuth(request).toCompletableFuture(), id);
+    }
+
+    private void setProfilePreSharedKeyAuth(final String name,
+                                            final IkeGeneralPolicyProfileGrouping.PreSharedKey preSharedKey,
+                                            final InstanceIdentifier<Policy> id) throws WriteFailedException {
+        final Ikev2ProfileSetAuth request = new Ikev2ProfileSetAuth();
+        request.authMethod = BYTE_FALSE;
+        if (preSharedKey.getHexString() != null) {
+            request.isHex = BYTE_TRUE;
+        }
+        request.data = preSharedKey.stringValue().getBytes();
+        request.name = name.getBytes();
+        getReplyForWrite(getFutureJVpp().ikev2ProfileSetAuth(request).toCompletableFuture(), id);
+    }
+}