-avoid calling memcpy() with NULL argument, even if len is 0
[oweals/gnunet.git] / src / identity / identity_api.c
index 091a1d60c47207184dbb48b2dd2b12be7658658f..4c8a35dc2053938b18da464186fa0d0b13ddfbfb 100644 (file)
@@ -1,6 +1,6 @@
 /*
      This file is part of GNUnet.
-     (C) 2013 Christian Grothoff (and other contributing authors)
+     Copyright (C) 2013, 2016 GNUnet e.V.
 
      GNUnet is free software; you can redistribute it and/or modify
      it under the terms of the GNU General Public Liceidentity as published
 
      You should have received a copy of the GNU General Public Liceidentity
      along with GNUnet; see the file COPYING.  If not, write to the
-     Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-     Boston, MA 02111-1307, USA.
+     Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
+     Boston, MA 02110-1301, USA.
 */
 
 /**
  * @file identity/identity_api.c
- * @brief api to get information from the network size estimation service
- * @author Nathan Evans
+ * @brief api to interact with the identity service
+ * @author Christian Grothoff
  */
 #include "platform.h"
-#include "gnunet_client_lib.h"
+#include "gnunet_util_lib.h"
 #include "gnunet_constants.h"
-#include "gnunet_container_lib.h"
-#include "gnunet_arm_service.h"
-#include "gnunet_hello_lib.h"
 #include "gnunet_protocols.h"
-#include "gnunet_server_lib.h"
-#include "gnunet_time_lib.h"
 #include "gnunet_identity_service.h"
 #include "identity.h"
 
 #define LOG(kind,...) GNUNET_log_from (kind, "identity-api",__VA_ARGS__)
 
+/**
+ * Handle for an ego.
+ */
+struct GNUNET_IDENTITY_Ego
+{
+  /**
+   * Private key associated with this ego.
+   */
+  struct GNUNET_CRYPTO_EcdsaPrivateKey *pk;
+
+  /**
+   * Current name associated with this ego.
+   */
+  char *name;
+
+  /**
+   * Client context associated with this ego.
+   */
+  void *ctx;
+
+  /**
+   * Hash of the public key of this ego.
+   */
+  struct GNUNET_HashCode id;
+};
+
+
+/**
+ * Handle for an operation with the identity service.
+ */
+struct GNUNET_IDENTITY_Operation
+{
+
+  /**
+   * Main identity handle.
+   */
+  struct GNUNET_IDENTITY_Handle *h;
+
+  /**
+   * We keep operations in a DLL.
+   */
+  struct GNUNET_IDENTITY_Operation *next;
+
+  /**
+   * We keep operations in a DLL.
+   */
+  struct GNUNET_IDENTITY_Operation *prev;
+
+  /**
+   * Message to send to the identity service.
+   * Allocated at the end of this struct.
+   */
+  const struct GNUNET_MessageHeader *msg;
+
+  /**
+   * Continuation to invoke with the result of the transmission; @e cb
+   * will be NULL in this case.
+   */
+  GNUNET_IDENTITY_Continuation cont;
+
+  /**
+   * Continuation to invoke with the result of the transmission for
+   * 'get' operations (@e cont will be NULL in this case).
+   */
+  GNUNET_IDENTITY_Callback cb;
+
+  /**
+   * Closure for @e cont or @e cb.
+   */
+  void *cls;
+
+};
+
+
 /**
  * Handle for the service.
  */
@@ -48,67 +117,118 @@ struct GNUNET_IDENTITY_Handle
   const struct GNUNET_CONFIGURATION_Handle *cfg;
 
   /**
-   * Socket (if available).
+   * Connection to service.
    */
-  struct GNUNET_CLIENT_Connection *client;
+  struct GNUNET_MQ_Handle *mq;
 
   /**
-   * Currently pending transmission request.
+   * Hash map from the hash of the public key to the
+   * respective `GNUNET_IDENTITY_Ego` handle.
    */
-  struct GNUNET_CLIENT_TransmitHandle *th;
+  struct GNUNET_CONTAINER_MultiHashMap *egos;
+
+  /**
+   * Function to call when we receive updates.
+   */
+  GNUNET_IDENTITY_Callback cb;
+
+  /**
+   * Closure for @e cb.
+   */
+  void *cb_cls;
+
+  /**
+   * Head of active operations.
+   */
+  struct GNUNET_IDENTITY_Operation *op_head;
+
+  /**
+   * Tail of active operations.
+   */
+  struct GNUNET_IDENTITY_Operation *op_tail;
 
   /**
    * Task doing exponential back-off trying to reconnect.
    */
-  GNUNET_SCHEDULER_TaskIdentifier reconnect_task;
+  struct GNUNET_SCHEDULER_Task *reconnect_task;
 
   /**
    * Time for next connect retry.
    */
   struct GNUNET_TIME_Relative reconnect_delay;
 
+  /**
+   * Are we polling for incoming messages right now?
+   */
+  int in_receive;
+
 };
 
 
 /**
- * Try again to connect to network size estimation service.
+ * Obtain the ego representing 'anonymous' users.
  *
- * @param cls the handle to the transport service
- * @param tc scheduler context
+ * @return handle for the anonymous user, must not be freed
  */
-static void
-reconnect (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc);
+const struct GNUNET_IDENTITY_Ego *
+GNUNET_IDENTITY_ego_get_anonymous ()
+{
+  static struct GNUNET_IDENTITY_Ego anon;
+  struct GNUNET_CRYPTO_EcdsaPublicKey pub;
+
+  if (NULL != anon.pk)
+    return &anon;
+  anon.pk = (struct GNUNET_CRYPTO_EcdsaPrivateKey *) GNUNET_CRYPTO_ecdsa_key_get_anonymous ();
+  GNUNET_CRYPTO_ecdsa_key_get_public (anon.pk,
+                                      &pub);
+  GNUNET_CRYPTO_hash (&pub,
+                      sizeof (pub),
+                      &anon.id);
+  return &anon;
+}
 
 
 /**
- * Type of a function to call when we receive a message
- * from the service.
+ * Try again to connect to the identity service.
  *
- * @param cls closure
- * @param msg message received, NULL on timeout or fatal error
+ * @param cls handle to the identity service.
  */
 static void
-message_handler (void *cls, const struct GNUNET_MessageHeader *msg)
+reconnect (void *cls);
+
+
+/**
+ * Free ego from hash map.
+ *
+ * @param cls identity service handle
+ * @param key unused
+ * @param value ego to free
+ * @return #GNUNET_OK (continue to iterate)
+ */
+static int
+free_ego (void *cls,
+         const struct GNUNET_HashCode *key,
+         void *value)
 {
   struct GNUNET_IDENTITY_Handle *h = cls;
-  const struct GNUNET_IDENTITY_ClientMessage *client_msg;
-
-  if (msg == NULL)
-  {
-    /* Error, timeout, death */
-    GNUNET_CLIENT_disconnect (h->client);
-    h->client = NULL;
-    h->reconnect_task =
-        GNUNET_SCHEDULER_add_delayed (h->reconnect_delay, &reconnect, h);
-    return;
-  }
-  // FIXME: process...
-  GNUNET_CLIENT_receive (h->client, &message_handler, h,
-                         GNUNET_TIME_UNIT_FOREVER_REL);
+  struct GNUNET_IDENTITY_Ego *ego = value;
+
+  if (NULL != h->cb)
+    h->cb (h->cb_cls,
+          ego,
+          &ego->ctx,
+          NULL);
+  GNUNET_free (ego->pk);
+  GNUNET_free (ego->name);
+  GNUNET_assert (GNUNET_YES ==
+                 GNUNET_CONTAINER_multihashmap_remove (h->egos,
+                                                       key,
+                                                       value));
+  GNUNET_free (ego);
+  return GNUNET_OK;
 }
 
 
-
 /**
  * Reschedule a connect attempt to the service.
  *
@@ -117,72 +237,355 @@ message_handler (void *cls, const struct GNUNET_MessageHeader *msg)
 static void
 reschedule_connect (struct GNUNET_IDENTITY_Handle *h)
 {
-  GNUNET_assert (h->reconnect_task == GNUNET_SCHEDULER_NO_TASK);
+  struct GNUNET_IDENTITY_Operation *op;
+
+  GNUNET_assert (NULL == h->reconnect_task);
 
-  if (NULL != h->th)
+  if (NULL != h->mq)
   {
-    GNUNET_CLIENT_notify_transmit_ready_cancel (h->th);
-    h->th = NULL;
+    GNUNET_MQ_destroy (h->mq);
+    h->mq = NULL;
   }
-  if (NULL != h->client)
+  while (NULL != (op = h->op_head))
   {
-    GNUNET_CLIENT_disconnect (h->client);
-    h->client = NULL;
+    GNUNET_CONTAINER_DLL_remove (h->op_head,
+                                 h->op_tail,
+                                 op);
+    if (NULL != op->cont)
+      op->cont (op->cls,
+                "Error in communication with the identity service");
+    else if (NULL != op->cb)
+      op->cb (op->cls,
+              NULL,
+              NULL,
+              NULL);
+    GNUNET_free (op);
   }
-
+  GNUNET_CONTAINER_multihashmap_iterate (h->egos,
+                                         &free_ego,
+                                         h);
   LOG (GNUNET_ERROR_TYPE_DEBUG,
-       "Scheduling task to reconnect to identity service in %llu ms.\n",
-       h->reconnect_delay.rel_value);
+       "Scheduling task to reconnect to identity service in %s.\n",
+       GNUNET_STRINGS_relative_time_to_string (h->reconnect_delay,
+                                               GNUNET_YES));
   h->reconnect_task =
-      GNUNET_SCHEDULER_add_delayed (h->reconnect_delay, &reconnect, h);
+      GNUNET_SCHEDULER_add_delayed (h->reconnect_delay,
+                                    &reconnect,
+                                    h);
   h->reconnect_delay = GNUNET_TIME_STD_BACKOFF (h->reconnect_delay);
 }
 
 
 /**
- * Transmit START message to service.
+ * Generic error handler, called with the appropriate error code and
+ * the same closure specified at the creation of the message queue.
+ * Not every message queue implementation supports an error handler.
  *
- * @param cls unused
- * @param size number of bytes available in buf
- * @param buf where to copy the message
- * @return number of bytes copied to buf
+ * @param cls closure with the `struct GNUNET_IDENTITY_Handle *`
+ * @param error error code
  */
-static size_t
-send_start (void *cls, size_t size, void *buf)
+static void
+mq_error_handler (void *cls,
+                  enum GNUNET_MQ_Error error)
 {
-  return sizeof (struct GNUNET_MessageHeader);
+  struct GNUNET_IDENTITY_Handle *h = cls;
+
+  reschedule_connect (h);
 }
 
 
 /**
- * Try again to connect to network size estimation service.
+ * We received a result code from the service.  Check the message
+ * is well-formed.
  *
- * @param cls the handle to the transport service
- * @param tc scheduler context
+ * @param cls closure
+ * @param rcm result message received
+ * @return #GNUNET_OK if the message is well-formed
+ */
+static int
+check_identity_result_code (void *cls,
+                            const struct GNUNET_IDENTITY_ResultCodeMessage *rcm)
+{
+  uint16_t size = ntohs (rcm->header.size) - sizeof (*rcm);
+  const char *str = (const char *) &rcm[1];
+
+  if (0 == size)
+    return GNUNET_OK;
+  if ('\0' != str[size - 1])
+  {
+    GNUNET_break (0);
+    return GNUNET_SYSERR;
+  }
+  return GNUNET_OK;
+}
+
+
+/**
+ * We received a result code from the service.
+ *
+ * @param cls closure
+ * @param rcm result message received
  */
 static void
-reconnect (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
+handle_identity_result_code (void *cls,
+                             const struct GNUNET_IDENTITY_ResultCodeMessage *rcm)
 {
   struct GNUNET_IDENTITY_Handle *h = cls;
+  struct GNUNET_IDENTITY_Operation *op;
+  uint16_t size = ntohs (rcm->header.size) - sizeof (*rcm);
+  const char *str = (0 == size) ? NULL : (const char *) &rcm[1];
 
-  h->reconnect_task = GNUNET_SCHEDULER_NO_TASK;
-  if ((tc->reason & GNUNET_SCHEDULER_REASON_SHUTDOWN) != 0)
+  op = h->op_head;
+  if (NULL == op)
   {
-    /* shutdown, just give up */
+    GNUNET_break (0);
+    reschedule_connect (h);
     return;
   }
-  LOG (GNUNET_ERROR_TYPE_DEBUG,
-       "Connecting to network size estimation service.\n");
-  GNUNET_assert (h->client == NULL);
-  h->client = GNUNET_CLIENT_connect ("identity", h->cfg);
-  GNUNET_assert (h->client != NULL);
+  GNUNET_CONTAINER_DLL_remove (h->op_head,
+                               h->op_tail,
+                               op);
+  if (NULL != op->cont)
+    op->cont (op->cls,
+              str);
+  else if (NULL != op->cb)
+    op->cb (op->cls, NULL, NULL, NULL);
+  GNUNET_free (op);
+}
+
+
+/**
+ * Check validity of identity update message.
+ *
+ * @param cls closure
+ * @param um message received
+ * @return #GNUNET_OK if the message is well-formed
+ */
+static int
+check_identity_update (void *cls,
+                        const struct GNUNET_IDENTITY_UpdateMessage *um)
+{
+  uint16_t size = ntohs (um->header.size);
+  uint16_t name_len = ntohs (um->name_len);
+  const char *str = (const char *) &um[1];
+
+  if ( (size != name_len + sizeof (struct GNUNET_IDENTITY_UpdateMessage)) ||
+       ( (0 != name_len) &&
+         ('\0' != str[name_len - 1])) )
+  {
+    GNUNET_break (0);
+    return GNUNET_SYSERR;
+  }
+  return GNUNET_OK;
+}
+
+
+/**
+ * Handle identity update message.
+ *
+ * @param cls closure
+ * @param um message received
+ */
+static void
+handle_identity_update (void *cls,
+                        const struct GNUNET_IDENTITY_UpdateMessage *um)
+{
+  struct GNUNET_IDENTITY_Handle *h = cls;
+  uint16_t name_len = ntohs (um->name_len);
+  const char *str = (0 == name_len) ? NULL : (const char *) &um[1];
+  struct GNUNET_CRYPTO_EcdsaPublicKey pub;
+  struct GNUNET_HashCode id;
+  struct GNUNET_IDENTITY_Ego *ego;
+
+  if (GNUNET_YES == ntohs (um->end_of_list))
+  {
+    /* end of initial list of data */
+    if (NULL != h->cb)
+      h->cb (h->cb_cls,
+             NULL,
+             NULL,
+             NULL);
+    return;
+  }
+  GNUNET_CRYPTO_ecdsa_key_get_public (&um->private_key,
+                                     &pub);
+  GNUNET_CRYPTO_hash (&pub,
+                      sizeof (pub),
+                      &id);
+  ego = GNUNET_CONTAINER_multihashmap_get (h->egos,
+                                           &id);
+  if (NULL == ego)
+  {
+    /* ego was created */
+    if (NULL == str)
+    {
+      /* deletion of unknown ego? not allowed */
+      GNUNET_break (0);
+      reschedule_connect (h);
+      return;
+    }
+    ego = GNUNET_new (struct GNUNET_IDENTITY_Ego);
+    ego->pk = GNUNET_new (struct GNUNET_CRYPTO_EcdsaPrivateKey);
+    *ego->pk = um->private_key;
+    ego->name = GNUNET_strdup (str);
+    ego->id = id;
+    GNUNET_assert (GNUNET_YES ==
+                   GNUNET_CONTAINER_multihashmap_put (h->egos,
+                                                      &ego->id,
+                                                      ego,
+                                                      GNUNET_CONTAINER_MULTIHASHMAPOPTION_UNIQUE_ONLY));
+  }
+  if (NULL == str)
+  {
+    /* ego was deleted */
+    GNUNET_assert (GNUNET_YES ==
+                   GNUNET_CONTAINER_multihashmap_remove (h->egos,
+                                                         &ego->id,
+                                                         ego));
+  }
+  else
+  {
+    /* ego changed name */
+    GNUNET_free (ego->name);
+    ego->name = GNUNET_strdup (str);
+  }
+  /* inform application about change */
+  if (NULL != h->cb)
+    h->cb (h->cb_cls,
+           ego,
+           &ego->ctx,
+           str);
+  /* complete deletion */
+  if (NULL == str)
+  {
+    GNUNET_free (ego->pk);
+    GNUNET_free (ego->name);
+    GNUNET_free (ego);
+  }
+}
+
+
+/**
+ * Function called when we receive a set default message from the
+ * service.
+ *
+ * @param cls closure
+ * @param sdm message received
+ * @return #GNUNET_OK if the message is well-formed
+ */
+static int
+check_identity_set_default (void *cls,
+                            const struct GNUNET_IDENTITY_SetDefaultMessage *sdm)
+{
+  uint16_t size = ntohs (sdm->header.size) - sizeof (*sdm);
+  uint16_t name_len = ntohs (sdm->name_len);
+  const char *str = (const char *) &sdm[1];
+
+  if ( (size != name_len) ||
+       ( (0 != name_len) &&
+         ('\0' != str[name_len - 1]) ) )
+  {
+    GNUNET_break (0);
+    return GNUNET_SYSERR;
+  }
+  GNUNET_break (0 == ntohs (sdm->reserved));
+  return GNUNET_OK;
+}
+
+
+/**
+ * Type of a function to call when we receive a message
+ * from the service.
+ *
+ * @param cls closure
+ * @param sdm message received
+ */
+static void
+handle_identity_set_default (void *cls,
+                             const struct GNUNET_IDENTITY_SetDefaultMessage *sdm)
+{
+  struct GNUNET_IDENTITY_Handle *h = cls;
+  struct GNUNET_IDENTITY_Operation *op;
+  struct GNUNET_CRYPTO_EcdsaPublicKey pub;
+  struct GNUNET_HashCode id;
+  struct GNUNET_IDENTITY_Ego *ego;
+
+  GNUNET_CRYPTO_ecdsa_key_get_public (&sdm->private_key,
+                                     &pub);
+  GNUNET_CRYPTO_hash (&pub,
+                      sizeof (pub),
+                      &id);
+  ego = GNUNET_CONTAINER_multihashmap_get (h->egos,
+                                           &id);
+  if (NULL == ego)
+  {
+    GNUNET_break (0);
+    reschedule_connect (h);
+    return;
+  }
+  op = h->op_head;
+  if (NULL == op)
+  {
+    GNUNET_break (0);
+    reschedule_connect (h);
+    return;
+  }
+  GNUNET_log (GNUNET_ERROR_TYPE_DEBUG,
+              "Received SET_DEFAULT message from identity service\n");
+  GNUNET_CONTAINER_DLL_remove (h->op_head,
+                               h->op_tail,
+                               op);
+  if (NULL != op->cb)
+    op->cb (op->cls,
+            ego,
+            &ego->ctx,
+            ego->name);
+  GNUNET_free (op);
+}
 
-  h->th =
-      GNUNET_CLIENT_notify_transmit_ready (h->client,
-                                           sizeof (struct GNUNET_MessageHeader),
-                                           GNUNET_TIME_UNIT_FOREVER_REL,
-                                           GNUNET_NO, &send_start, h);
-  GNUNET_assert (h->th != NULL);
+
+/**
+ * Try again to connect to the identity service.
+ *
+ * @param cls handle to the identity service.
+ */
+static void
+reconnect (void *cls)
+{
+  GNUNET_MQ_hd_var_size (identity_result_code,
+                         GNUNET_MESSAGE_TYPE_IDENTITY_RESULT_CODE,
+                         struct GNUNET_IDENTITY_ResultCodeMessage);
+  GNUNET_MQ_hd_var_size (identity_update,
+                         GNUNET_MESSAGE_TYPE_IDENTITY_UPDATE,
+                         struct GNUNET_IDENTITY_UpdateMessage);
+  GNUNET_MQ_hd_var_size (identity_set_default,
+                         GNUNET_MESSAGE_TYPE_IDENTITY_SET_DEFAULT,
+                         struct GNUNET_IDENTITY_SetDefaultMessage);
+  struct GNUNET_IDENTITY_Handle *h = cls;
+  struct GNUNET_MQ_MessageHandler handlers[] = {
+    make_identity_result_code_handler (h),
+    make_identity_update_handler (h),
+    make_identity_set_default_handler (h),
+    GNUNET_MQ_handler_end ()
+  };
+  struct GNUNET_MQ_Envelope *env;
+  struct GNUNET_MessageHeader *msg;
+
+  h->reconnect_task = NULL;
+  LOG (GNUNET_ERROR_TYPE_DEBUG,
+       "Connecting to identity service.\n");
+  GNUNET_assert (NULL == h->mq);
+  h->mq = GNUNET_CLIENT_connecT (h->cfg,
+                                 "identity",
+                                 handlers,
+                                 &mq_error_handler,
+                                 h);
+  if (NULL == h->mq)
+    return;
+  env = GNUNET_MQ_msg (msg,
+                       GNUNET_MESSAGE_TYPE_IDENTITY_START);
+  GNUNET_MQ_send (h->mq,
+                  env);
 }
 
 
@@ -191,7 +594,7 @@ reconnect (void *cls, const struct GNUNET_SCHEDULER_TaskContext *tc)
  *
  * @param cfg the configuration to use
  * @param cb function to call on all identity events, can be NULL
- * @param cb_cls closure for 'cb'
+ * @param cb_cls closure for @a cb
  * @return handle to use
  */
 struct GNUNET_IDENTITY_Handle *
@@ -199,13 +602,328 @@ GNUNET_IDENTITY_connect (const struct GNUNET_CONFIGURATION_Handle *cfg,
                         GNUNET_IDENTITY_Callback cb,
                         void *cb_cls)
 {
-  struct GNUNET_IDENTITY_Handle *ret;
+  struct GNUNET_IDENTITY_Handle *h;
+
+  h = GNUNET_new (struct GNUNET_IDENTITY_Handle);
+  h->cfg = cfg;
+  h->cb = cb;
+  h->cb_cls = cb_cls;
+  h->egos = GNUNET_CONTAINER_multihashmap_create (16, GNUNET_YES);
+  reconnect (h);
+  if (NULL == h->mq)
+  {
+    GNUNET_free (h);
+    return NULL;
+  }
+  return h;
+}
+
 
-  ret = GNUNET_malloc (sizeof (struct GNUNET_IDENTITY_Handle));
-  ret->cfg = cfg;
-  ret->reconnect_delay = GNUNET_TIME_UNIT_ZERO;
-  ret->reconnect_task = GNUNET_SCHEDULER_add_now (&reconnect, ret);
-  return ret;
+/**
+ * Obtain the ECC key associated with a ego.
+ *
+ * @param ego the ego
+ * @return associated ECC key, valid as long as the ego is valid
+ */
+const struct GNUNET_CRYPTO_EcdsaPrivateKey *
+GNUNET_IDENTITY_ego_get_private_key (const struct GNUNET_IDENTITY_Ego *ego)
+{
+  return ego->pk;
+}
+
+
+/**
+ * Get the identifier (public key) of an ego.
+ *
+ * @param ego identity handle with the private key
+ * @param pk set to ego's public key
+ */
+void
+GNUNET_IDENTITY_ego_get_public_key (const struct GNUNET_IDENTITY_Ego *ego,
+                                   struct GNUNET_CRYPTO_EcdsaPublicKey *pk)
+{
+  GNUNET_CRYPTO_ecdsa_key_get_public (ego->pk,
+                                      pk);
+}
+
+
+/**
+ * Obtain the identity that is currently preferred/default
+ * for a service.
+ *
+ * @param h identity service to query
+ * @param service_name for which service is an identity wanted
+ * @param cb function to call with the result (will only be called once)
+ * @param cb_cls closure for @a cb
+ * @return handle to abort the operation
+ */
+struct GNUNET_IDENTITY_Operation *
+GNUNET_IDENTITY_get (struct GNUNET_IDENTITY_Handle *h,
+                    const char *service_name,
+                    GNUNET_IDENTITY_Callback cb,
+                    void *cb_cls)
+{
+  struct GNUNET_IDENTITY_Operation *op;
+  struct GNUNET_MQ_Envelope *env;
+  struct GNUNET_IDENTITY_GetDefaultMessage *gdm;
+  size_t slen;
+
+  if (NULL == h->mq)
+    return NULL;
+  slen = strlen (service_name) + 1;
+  if (slen >= GNUNET_SERVER_MAX_MESSAGE_SIZE - sizeof (struct GNUNET_IDENTITY_GetDefaultMessage))
+  {
+    GNUNET_break (0);
+    return NULL;
+  }
+  op = GNUNET_new (struct GNUNET_IDENTITY_Operation);
+  op->h = h;
+  op->cb = cb;
+  op->cls = cb_cls;
+  GNUNET_CONTAINER_DLL_insert_tail (h->op_head,
+                                   h->op_tail,
+                                   op);
+  env = GNUNET_MQ_msg_extra (gdm,
+                             slen,
+                             GNUNET_MESSAGE_TYPE_IDENTITY_GET_DEFAULT);
+  gdm->name_len = htons (slen);
+  gdm->reserved = htons (0);
+  GNUNET_memcpy (&gdm[1],
+          service_name,
+          slen);
+  GNUNET_MQ_send (h->mq,
+                  env);
+  return op;
+}
+
+
+/**
+ * Set the preferred/default identity for a service.
+ *
+ * @param h identity service to inform
+ * @param service_name for which service is an identity set
+ * @param ego new default identity to be set for this service
+ * @param cont function to call once the operation finished
+ * @param cont_cls closure for @a cont
+ * @return handle to abort the operation
+ */
+struct GNUNET_IDENTITY_Operation *
+GNUNET_IDENTITY_set (struct GNUNET_IDENTITY_Handle *h,
+                    const char *service_name,
+                    struct GNUNET_IDENTITY_Ego *ego,
+                    GNUNET_IDENTITY_Continuation cont,
+                    void *cont_cls)
+{
+  struct GNUNET_IDENTITY_Operation *op;
+  struct GNUNET_MQ_Envelope *env;
+  struct GNUNET_IDENTITY_SetDefaultMessage *sdm;
+  size_t slen;
+
+  if (NULL == h->mq)
+    return NULL;
+  slen = strlen (service_name) + 1;
+  if (slen >= GNUNET_SERVER_MAX_MESSAGE_SIZE - sizeof (struct GNUNET_IDENTITY_SetDefaultMessage))
+  {
+    GNUNET_break (0);
+    return NULL;
+  }
+  op = GNUNET_new (struct GNUNET_IDENTITY_Operation);
+  op->h = h;
+  op->cont = cont;
+  op->cls = cont_cls;
+  GNUNET_CONTAINER_DLL_insert_tail (h->op_head,
+                                   h->op_tail,
+                                   op);
+  env = GNUNET_MQ_msg_extra (sdm,
+                             slen,
+                             GNUNET_MESSAGE_TYPE_IDENTITY_SET_DEFAULT);
+  sdm->name_len = htons (slen);
+  sdm->reserved = htons (0);
+  sdm->private_key = *ego->pk;
+  GNUNET_memcpy (&sdm[1],
+          service_name,
+          slen);
+  GNUNET_MQ_send (h->mq,
+                  env);
+  return op;
+}
+
+
+/**
+ * Create a new identity with the given name.
+ *
+ * @param h identity service to use
+ * @param name desired name
+ * @param cont function to call with the result (will only be called once)
+ * @param cont_cls closure for @a cont
+ * @return handle to abort the operation
+ */
+struct GNUNET_IDENTITY_Operation *
+GNUNET_IDENTITY_create (struct GNUNET_IDENTITY_Handle *h,
+                       const char *name,
+                       GNUNET_IDENTITY_Continuation cont,
+                       void *cont_cls)
+{
+  struct GNUNET_IDENTITY_Operation *op;
+  struct GNUNET_MQ_Envelope *env;
+  struct GNUNET_IDENTITY_CreateRequestMessage *crm;
+  struct GNUNET_CRYPTO_EcdsaPrivateKey *pk;
+  size_t slen;
+
+  if (NULL == h->mq)
+    return NULL;
+  slen = strlen (name) + 1;
+  if (slen >= GNUNET_SERVER_MAX_MESSAGE_SIZE - sizeof (struct GNUNET_IDENTITY_CreateRequestMessage))
+  {
+    GNUNET_break (0);
+    return NULL;
+  }
+  op = GNUNET_new (struct GNUNET_IDENTITY_Operation);
+  op->h = h;
+  op->cont = cont;
+  op->cls = cont_cls;
+  GNUNET_CONTAINER_DLL_insert_tail (h->op_head,
+                                   h->op_tail,
+                                   op);
+  env = GNUNET_MQ_msg_extra (crm,
+                             slen,
+                             GNUNET_MESSAGE_TYPE_IDENTITY_CREATE);
+  crm->name_len = htons (slen);
+  crm->reserved = htons (0);
+  pk = GNUNET_CRYPTO_ecdsa_key_create ();
+  crm->private_key = *pk;
+  GNUNET_free (pk);
+  GNUNET_memcpy (&crm[1],
+          name,
+          slen);
+  GNUNET_MQ_send (h->mq,
+                  env);
+  return op;
+}
+
+
+/**
+ * Renames an existing identity.
+ *
+ * @param h identity service to use
+ * @param old_name old name
+ * @param new_name desired new name
+ * @param cb function to call with the result (will only be called once)
+ * @param cb_cls closure for @a cb
+ * @return handle to abort the operation
+ */
+struct GNUNET_IDENTITY_Operation *
+GNUNET_IDENTITY_rename (struct GNUNET_IDENTITY_Handle *h,
+                       const char *old_name,
+                       const char *new_name,
+                       GNUNET_IDENTITY_Continuation cb,
+                       void *cb_cls)
+{
+  struct GNUNET_IDENTITY_Operation *op;
+  struct GNUNET_MQ_Envelope *env;
+  struct GNUNET_IDENTITY_RenameMessage *grm;
+  size_t slen_old;
+  size_t slen_new;
+  char *dst;
+
+  if (NULL == h->mq)
+    return NULL;
+  slen_old = strlen (old_name) + 1;
+  slen_new = strlen (new_name) + 1;
+  if ( (slen_old >= GNUNET_SERVER_MAX_MESSAGE_SIZE) ||
+       (slen_new >= GNUNET_SERVER_MAX_MESSAGE_SIZE) ||
+       (slen_old + slen_new >= GNUNET_SERVER_MAX_MESSAGE_SIZE - sizeof (struct GNUNET_IDENTITY_RenameMessage)) )
+  {
+    GNUNET_break (0);
+    return NULL;
+  }
+  op = GNUNET_new (struct GNUNET_IDENTITY_Operation);
+  op->h = h;
+  op->cont = cb;
+  op->cls = cb_cls;
+  GNUNET_CONTAINER_DLL_insert_tail (h->op_head,
+                                   h->op_tail,
+                                   op);
+  env = GNUNET_MQ_msg_extra (grm,
+                             slen_old + slen_new,
+                             GNUNET_MESSAGE_TYPE_IDENTITY_RENAME);
+  grm->old_name_len = htons (slen_old);
+  grm->new_name_len = htons (slen_new);
+  dst = (char *) &grm[1];
+  GNUNET_memcpy (dst,
+          old_name,
+          slen_old);
+  GNUNET_memcpy (&dst[slen_old],
+          new_name,
+          slen_new);
+  GNUNET_MQ_send (h->mq,
+                  env);
+  return op;
+}
+
+
+/**
+ * Delete an existing identity.
+ *
+ * @param h identity service to use
+ * @param name name of the identity to delete
+ * @param cb function to call with the result (will only be called once)
+ * @param cb_cls closure for @a cb
+ * @return handle to abort the operation
+ */
+struct GNUNET_IDENTITY_Operation *
+GNUNET_IDENTITY_delete (struct GNUNET_IDENTITY_Handle *h,
+                       const char *name,
+                       GNUNET_IDENTITY_Continuation cb,
+                       void *cb_cls)
+{
+  struct GNUNET_IDENTITY_Operation *op;
+  struct GNUNET_MQ_Envelope *env;
+  struct GNUNET_IDENTITY_DeleteMessage *gdm;
+  size_t slen;
+
+  if (NULL == h->mq)
+    return NULL;
+  slen = strlen (name) + 1;
+  if (slen >= GNUNET_SERVER_MAX_MESSAGE_SIZE - sizeof (struct GNUNET_IDENTITY_DeleteMessage))
+  {
+    GNUNET_break (0);
+    return NULL;
+  }
+  op = GNUNET_new (struct GNUNET_IDENTITY_Operation);
+  op->h = h;
+  op->cont = cb;
+  op->cls = cb_cls;
+  GNUNET_CONTAINER_DLL_insert_tail (h->op_head,
+                                   h->op_tail,
+                                   op);
+  env = GNUNET_MQ_msg_extra (gdm,
+                             slen,
+                             GNUNET_MESSAGE_TYPE_IDENTITY_DELETE);
+  gdm->name_len = htons (slen);
+  gdm->reserved = htons (0);
+  GNUNET_memcpy (&gdm[1],
+          name,
+          slen);
+  GNUNET_MQ_send (h->mq,
+                  env);
+  return op;
+}
+
+
+/**
+ * Cancel an identity operation. Note that the operation MAY still
+ * be executed; this merely cancels the continuation; if the request
+ * was already transmitted, the service may still choose to complete
+ * the operation.
+ *
+ * @param op operation to cancel
+ */
+void
+GNUNET_IDENTITY_cancel (struct GNUNET_IDENTITY_Operation *op)
+{
+  op->cont = NULL;
+  op->cb = NULL;
 }
 
 
@@ -217,21 +935,34 @@ GNUNET_IDENTITY_connect (const struct GNUNET_CONFIGURATION_Handle *cfg,
 void
 GNUNET_IDENTITY_disconnect (struct GNUNET_IDENTITY_Handle *h)
 {
+  struct GNUNET_IDENTITY_Operation *op;
+
   GNUNET_assert (NULL != h);
-  if (h->reconnect_task != GNUNET_SCHEDULER_NO_TASK)
+  if (h->reconnect_task != NULL)
   {
     GNUNET_SCHEDULER_cancel (h->reconnect_task);
-    h->reconnect_task = GNUNET_SCHEDULER_NO_TASK;
+    h->reconnect_task = NULL;
+  }
+  if (NULL != h->egos)
+  {
+    GNUNET_CONTAINER_multihashmap_iterate (h->egos,
+                                          &free_ego,
+                                          h);
+    GNUNET_CONTAINER_multihashmap_destroy (h->egos);
+    h->egos = NULL;
   }
-  if (h->th != NULL)
+  while (NULL != (op = h->op_head))
   {
-    GNUNET_CLIENT_notify_transmit_ready_cancel (h->th);
-    h->th = NULL;
+    GNUNET_break (NULL == op->cont);
+    GNUNET_CONTAINER_DLL_remove (h->op_head,
+                                h->op_tail,
+                                op);
+    GNUNET_free (op);
   }
-  if (h->client != NULL)
+  if (NULL != h->mq)
   {
-    GNUNET_CLIENT_disconnect (h->client);
-    h->client = NULL;
+    GNUNET_MQ_destroy (h->mq);
+    h->mq = NULL;
   }
   GNUNET_free (h);
 }