diff options
Diffstat (limited to 'ipsec-tools/src/libipsec/libpfkey.h')
| -rw-r--r-- | ipsec-tools/src/libipsec/libpfkey.h | 238 |
1 files changed, 238 insertions, 0 deletions
diff --git a/ipsec-tools/src/libipsec/libpfkey.h b/ipsec-tools/src/libipsec/libpfkey.h new file mode 100644 index 00000000..a213aac7 --- /dev/null +++ b/ipsec-tools/src/libipsec/libpfkey.h @@ -0,0 +1,238 @@ +/* $NetBSD: libpfkey.h,v 1.18 2010/12/03 14:32:52 tteras Exp $ */ + +/* Id: libpfkey.h,v 1.13 2005/12/04 20:26:43 manubsd Exp */ + +/* + * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * 3. Neither the name of the project nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#ifndef _LIBPFKEY_H +#define _LIBPFKEY_H + +#ifndef KAME_LIBPFKEY_H +#define KAME_LIBPFKEY_H + +#define PRIORITY_LOW 0xC0000000 +#define PRIORITY_DEFAULT 0x80000000 +#define PRIORITY_HIGH 0x40000000 + +#define PRIORITY_OFFSET_POSITIVE_MAX 0x3fffffff +#define PRIORITY_OFFSET_NEGATIVE_MAX 0x40000000 + +struct sadb_msg; +extern void pfkey_sadump __P((struct sadb_msg *)); +extern void pfkey_sadump_withports __P((struct sadb_msg *)); +extern void pfkey_spdump __P((struct sadb_msg *)); +extern void pfkey_spdump_withports __P((struct sadb_msg *)); + +struct sockaddr; +struct sadb_alg; + +/* Accomodate different prototypes in <netinet6/ipsec.h> */ +#include <sys/types.h> +#include PATH_IPSEC_H + +#ifndef HAVE_IPSEC_POLICY_T +typedef caddr_t ipsec_policy_t; +#define __ipsec_const +#else +#define __ipsec_const const +#endif + +struct pfkey_send_sa_args { + int so; /* socket */ + u_int type; + u_int satype; + u_int mode; + struct sockaddr *src; /* IP src address for SA */ + struct sockaddr *dst; /* IP dst address for SA */ + u_int32_t spi; /* SA's spi */ + u_int32_t reqid; + u_int wsize; + caddr_t keymat; + u_int e_type, e_keylen; /* Encryption alg and keylen */ + u_int a_type, a_keylen; /* Authentication alg and key */ + u_int flags; + u_int32_t l_alloc; + u_int32_t l_bytes; + u_int32_t l_addtime; + u_int32_t l_usetime; + u_int32_t seq; + u_int8_t l_natt_type; + u_int16_t l_natt_sport, l_natt_dport; + struct sockaddr *l_natt_oa; + u_int16_t l_natt_frag; + u_int8_t ctxdoi, ctxalg; /* Security context DOI and algorithm */ + caddr_t ctxstr; /* Security context string */ + u_int16_t ctxstrlen; /* length of security context string */ +}; + +/* The options built into libipsec */ +extern int libipsec_opt; +#define LIBIPSEC_OPT_NATT 0x01 +#define LIBIPSEC_OPT_FRAG 0x02 +#define LIBIPSEC_OPT_SEC_CTX 0x04 + +/* IPsec Library Routines */ + +int ipsec_check_keylen __P((u_int, u_int, u_int)); +int ipsec_check_keylen2 __P((u_int, u_int, u_int)); +int ipsec_get_keylen __P((u_int, u_int, struct sadb_alg *)); +char *ipsec_dump_policy_withports __P((void *, const char *)); +void ipsec_hexdump __P((const void *, int)); +const char *ipsec_strerror __P((void)); +void kdebug_sadb __P((struct sadb_msg *)); +ipsec_policy_t ipsec_set_policy __P((__ipsec_const char *, int)); +int ipsec_get_policylen __P((ipsec_policy_t)); +char *ipsec_dump_policy __P((ipsec_policy_t, __ipsec_const char *)); + +/* PFKey Routines */ + +u_int pfkey_set_softrate __P((u_int, u_int)); +u_int pfkey_get_softrate __P((u_int)); +int pfkey_send_getspi __P((int, u_int, u_int, struct sockaddr *, + struct sockaddr *, u_int32_t, u_int32_t, u_int32_t, u_int32_t)); +int pfkey_send_getspi_nat __P((int, u_int, u_int, + struct sockaddr *, struct sockaddr *, u_int8_t, u_int16_t, u_int16_t, + u_int32_t, u_int32_t, u_int32_t, u_int32_t)); + +int pfkey_send_update2 __P((struct pfkey_send_sa_args *)); +int pfkey_send_add2 __P((struct pfkey_send_sa_args *)); +int pfkey_send_delete __P((int, u_int, u_int, + struct sockaddr *, struct sockaddr *, u_int32_t)); +int pfkey_send_delete_all __P((int, u_int, u_int, + struct sockaddr *, struct sockaddr *)); +int pfkey_send_get __P((int, u_int, u_int, + struct sockaddr *, struct sockaddr *, u_int32_t)); +int pfkey_send_register __P((int, u_int)); +int pfkey_recv_register __P((int)); +int pfkey_set_supported __P((struct sadb_msg *, int)); +int pfkey_send_flush __P((int, u_int)); +int pfkey_send_dump __P((int, u_int)); +int pfkey_send_promisc_toggle __P((int, int)); +int pfkey_send_spdadd __P((int, struct sockaddr *, u_int, + struct sockaddr *, u_int, u_int, caddr_t, int, u_int32_t)); +int pfkey_send_spdadd2 __P((int, struct sockaddr *, u_int, + struct sockaddr *, u_int, u_int, u_int64_t, u_int64_t, + caddr_t, int, u_int32_t)); +int pfkey_send_spdupdate __P((int, struct sockaddr *, u_int, + struct sockaddr *, u_int, u_int, caddr_t, int, u_int32_t)); +int pfkey_send_spdupdate2 __P((int, struct sockaddr *, u_int, + struct sockaddr *, u_int, u_int, u_int64_t, u_int64_t, + caddr_t, int, u_int32_t)); +int pfkey_send_spddelete __P((int, struct sockaddr *, u_int, + struct sockaddr *, u_int, u_int, caddr_t, int, u_int32_t)); +int pfkey_send_spddelete2 __P((int, u_int32_t)); +int pfkey_send_spdget __P((int, u_int32_t)); +int pfkey_send_spdsetidx __P((int, struct sockaddr *, u_int, + struct sockaddr *, u_int, u_int, caddr_t, int, u_int32_t)); +int pfkey_send_spdflush __P((int)); +int pfkey_send_spddump __P((int)); +#ifdef SADB_X_MIGRATE +int pfkey_send_migrate __P((int, struct sockaddr *, struct sockaddr *, + struct sockaddr *, u_int, struct sockaddr *, u_int, u_int, + caddr_t, int, u_int32_t)); +#endif + +/* XXX should be somewhere else !!! + */ +#ifdef SADB_X_EXT_NAT_T_TYPE +#define PFKEY_ADDR_X_PORT(ext) (ntohs(((struct sadb_x_nat_t_port *)ext)->sadb_x_nat_t_port_port)) +#define PFKEY_ADDR_X_NATTYPE(ext) ( ext != NULL && ((struct sadb_x_nat_t_type *)ext)->sadb_x_nat_t_type_type ) +#endif + + +int pfkey_open __P((void)); +void pfkey_close __P((int)); +int pfkey_set_buffer_size __P((int, int)); +struct sadb_msg *pfkey_recv __P((int)); +int pfkey_send __P((int, struct sadb_msg *, int)); +int pfkey_align __P((struct sadb_msg *, caddr_t *)); +int pfkey_check __P((caddr_t *)); + +/* + * Deprecated, available for backward compatibility with third party + * libipsec users. Please use pfkey_send_update2 and pfkey_send_add2 instead + */ +int pfkey_send_update __P((int, u_int, u_int, struct sockaddr *, + struct sockaddr *, u_int32_t, u_int32_t, u_int, + caddr_t, u_int, u_int, u_int, u_int, u_int, u_int32_t, u_int64_t, + u_int64_t, u_int64_t, u_int32_t)); +int pfkey_send_update_nat __P((int, u_int, u_int, struct sockaddr *, + struct sockaddr *, u_int32_t, u_int32_t, u_int, + caddr_t, u_int, u_int, u_int, u_int, u_int, u_int32_t, u_int64_t, + u_int64_t, u_int64_t, u_int32_t, + u_int8_t, u_int16_t, u_int16_t, struct sockaddr *, u_int16_t)); +int pfkey_send_add __P((int, u_int, u_int, struct sockaddr *, + struct sockaddr *, u_int32_t, u_int32_t, u_int, + caddr_t, u_int, u_int, u_int, u_int, u_int, u_int32_t, u_int64_t, + u_int64_t, u_int64_t, u_int32_t)); +int pfkey_send_add_nat __P((int, u_int, u_int, struct sockaddr *, + struct sockaddr *, u_int32_t, u_int32_t, u_int, + caddr_t, u_int, u_int, u_int, u_int, u_int, u_int32_t, u_int64_t, + u_int64_t, u_int64_t, u_int32_t, + u_int8_t, u_int16_t, u_int16_t, struct sockaddr *, u_int16_t)); + +#ifndef __SYSDEP_SA_LEN__ +#define __SYSDEP_SA_LEN__ +#include <netinet/in.h> + +#ifndef IPPROTO_IPV4 +#define IPPROTO_IPV4 IPPROTO_IPIP +#endif + +#ifndef IPPROTO_IPCOMP +#define IPPROTO_IPCOMP IPPROTO_COMP +#endif + +#ifndef IPPROTO_MH +#define IPPROTO_MH 135 +#endif + +static __inline u_int8_t +sysdep_sa_len (const struct sockaddr *sa) +{ +#ifdef __linux__ + switch (sa->sa_family) + { + case AF_INET: + return sizeof (struct sockaddr_in); + case AF_INET6: + return sizeof (struct sockaddr_in6); + } + // log_print ("sysdep_sa_len: unknown sa family %d", sa->sa_family); + return sizeof (struct sockaddr_in); +#else + return sa->sa_len; +#endif +} +#endif + +#endif /* KAME_LIBPFKEY_H */ + +#endif /* _LIBPFKEY_H */ |