1 /* $NetBSD: isakmp_var.h,v 1.20 2025/03/08 16:39:08 christos Exp $ */
2
3 /* Id: isakmp_var.h,v 1.12 2005/05/07 14:45:31 manubsd Exp */
4
5 /*
6 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7 * All rights reserved.
8 *
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
11 * are met:
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the project nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34 #ifndef _ISAKMP_VAR_H
35 #define _ISAKMP_VAR_H
36
37 #include "vmbuf.h"
38 #include "policy.h"
39
40 #define PORT_ISAKMP 500
41 #define PORT_ISAKMP_NATT 4500
42
43 #define DEFAULT_NONCE_SIZE 16
44
45 typedef u_char cookie_t[8];
46 typedef u_char msgid_t[4];
47
48 typedef struct { /* i_cookie + r_cookie */
49 cookie_t i_ck;
50 cookie_t r_ck;
51 } isakmp_index;
52
53 struct isakmp_gen;
54 struct sched;
55
56 struct sockaddr;
57 struct ph1handle;
58 struct ph2handle;
59 struct remoteconf;
60 struct ipsecdoi_pl_id; /* XXX */
61 struct isakmp_pl_ke; /* XXX */
62 struct isakmp_pl_nonce; /* XXX */
63
64 extern struct ph1handle *isakmp_ph1begin_i(struct remoteconf *,
65 struct sockaddr *, struct sockaddr *);
66
67 extern vchar_t *isakmp_parsewoh(int, struct isakmp_gen *, int);
68 extern vchar_t *isakmp_parse(vchar_t *);
69
70 extern int isakmp_init(void);
71 extern const char *isakmp_pindex(const isakmp_index *, const uint32_t);
72 extern int isakmp_open(struct sockaddr *, int);
73 extern void isakmp_close(int fd);
74 extern int isakmp_send(struct ph1handle *, vchar_t *);
75
76 extern int isakmp_ph1send(struct ph1handle *);
77 extern int isakmp_ph2send(struct ph2handle *);
78 extern void isakmp_ph1dying_stub(struct sched *);
79 extern void isakmp_ph1dying(struct ph1handle *);
80 extern void isakmp_ph1expire_stub(struct sched *);
81 extern void isakmp_ph1expire(struct ph1handle *);
82 extern void isakmp_ph1delete_stub(struct sched *);
83 extern void isakmp_ph1delete(struct ph1handle *);
84 extern void isakmp_ph2expire_stub(struct sched *);
85 extern void isakmp_ph2expire(struct ph2handle *);
86 extern void isakmp_ph2delete_stub(struct sched *);
87 extern void isakmp_ph2delete(struct ph2handle *);
88
89 extern int isakmp_get_sainfo(struct ph2handle *, struct secpolicy *, struct secpolicy *);
90 extern int isakmp_post_acquire(struct ph2handle *, struct ph1handle *, int);
91 extern int isakmp_post_getspi(struct ph2handle *);
92 extern void isakmp_chkph1there_stub(struct sched *);
93 extern void isakmp_chkph1there(struct ph2handle *);
94
95 extern caddr_t isakmp_set_attr_v(caddr_t, int, caddr_t, int);
96 extern caddr_t isakmp_set_attr_l(caddr_t, int, uint32_t);
97 extern vchar_t *isakmp_add_attr_v(vchar_t *, int, caddr_t, int);
98 extern vchar_t *isakmp_add_attr_l(vchar_t *, int, uint32_t);
99
100 extern int isakmp_newcookie(caddr_t, struct sockaddr *, struct sockaddr *);
101
102 extern int isakmp_p2ph(vchar_t **, struct isakmp_gen *);
103
104 extern uint32_t isakmp_newmsgid2(struct ph1handle *);
105 extern caddr_t set_isakmp_header1(vchar_t *, struct ph1handle *, int);
106 extern caddr_t set_isakmp_header2(vchar_t *, struct ph2handle *, int);
107 extern caddr_t set_isakmp_payload(caddr_t, vchar_t *, int);
108
109 extern struct payload_list *isakmp_plist_append_full(
110 struct payload_list *, vchar_t *, uint8_t, uint8_t);
111
112 static inline struct payload_list *
isakmp_plist_append(struct payload_list * plist,vchar_t * payload,uint8_t payload_type)113 isakmp_plist_append(struct payload_list *plist, vchar_t *payload, uint8_t payload_type)
114 {
115 return isakmp_plist_append_full(plist, payload, payload_type, 0);
116 }
117
118
119 extern vchar_t *isakmp_plist_set_all(struct payload_list **plist,
120 struct ph1handle *iph1);
121
122 #ifdef HAVE_PRINT_ISAKMP_C
123 extern void isakmp_printpacket(vchar_t *, struct sockaddr *,
124 struct sockaddr *, int);
125 #endif
126
127 extern int copy_ph1addresses( struct ph1handle *,
128 struct remoteconf *, struct sockaddr *, struct sockaddr *);
129 extern void log_ph1established(const struct ph1handle *);
130
131 extern void script_hook(struct ph1handle *, int);
132 extern int script_env_append(char ***, int *, const char *, char *);
133 extern int script_exec(char *, int, char * const *);
134
135 void purge_remote(struct ph1handle *);
136 void delete_spd(struct ph2handle *, u_int64_t);
137 #ifdef INET6
138 uint32_t setscopeid(struct sockaddr *, struct sockaddr *);
139 #endif
140
141 #endif /* _ISAKMP_VAR_H */
142