1/*	$NetBSD: isakmp_var.h,v 1.6.6.1 2007/02/20 09:08:49 vanhu Exp $	*/
2
3/* Id: isakmp_var.h,v 1.12 2005/05/07 14:45:31 manubsd Exp */
4
5/*
6 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7 * All rights reserved.
8 *
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
11 * are met:
12 * 1. Redistributions of source code must retain the above copyright
13 *    notice, this list of conditions and the following disclaimer.
14 * 2. Redistributions in binary form must reproduce the above copyright
15 *    notice, this list of conditions and the following disclaimer in the
16 *    documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the project nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#ifndef _ISAKMP_VAR_H
35#define _ISAKMP_VAR_H
36
37#include "vmbuf.h"
38
39#define PORT_ISAKMP 500
40#define PORT_ISAKMP_NATT 4500
41
42#define DEFAULT_NONCE_SIZE	16
43
44typedef u_char cookie_t[8];
45typedef u_char msgid_t[4];
46
47typedef struct { /* i_cookie + r_cookie */
48	cookie_t i_ck;
49	cookie_t r_ck;
50} isakmp_index;
51
52struct isakmp_gen;
53struct sched;
54
55struct sockaddr;
56struct ph1handle;
57struct ph2handle;
58struct remoteconf;
59struct isakmp_gen;
60struct ipsecdoi_pl_id;	/* XXX */
61struct isakmp_pl_ke;	/* XXX */
62struct isakmp_pl_nonce;	/* XXX */
63
64extern int isakmp_handler __P((int));
65extern int isakmp_ph1begin_i __P((struct remoteconf *, struct sockaddr *,
66	struct sockaddr *));
67
68extern vchar_t *isakmp_parsewoh __P((int, struct isakmp_gen *, int));
69extern vchar_t *isakmp_parse __P((vchar_t *));
70
71extern int isakmp_init __P((void));
72extern const char *isakmp_pindex __P((const isakmp_index *, const u_int32_t));
73extern int isakmp_open __P((void));
74extern void isakmp_close __P((void));
75extern int isakmp_send __P((struct ph1handle *, vchar_t *));
76
77extern void isakmp_ph1resend_stub __P((void *));
78extern int isakmp_ph1resend __P((struct ph1handle *));
79extern void isakmp_ph2resend_stub __P((void *));
80extern int isakmp_ph2resend __P((struct ph2handle *));
81extern void isakmp_ph1expire_stub __P((void *));
82extern void isakmp_ph1expire __P((struct ph1handle *));
83extern void isakmp_ph1delete_stub __P((void *));
84extern void isakmp_ph1delete __P((struct ph1handle *));
85extern void isakmp_ph2expire_stub __P((void *));
86extern void isakmp_ph2expire __P((struct ph2handle *));
87extern void isakmp_ph2delete_stub __P((void *));
88extern void isakmp_ph2delete __P((struct ph2handle *));
89
90extern int isakmp_post_acquire __P((struct ph2handle *));
91extern int isakmp_post_getspi __P((struct ph2handle *));
92extern void isakmp_chkph1there_stub __P((void *));
93extern void isakmp_chkph1there __P((struct ph2handle *));
94
95extern caddr_t isakmp_set_attr_v __P((caddr_t, int, caddr_t, int));
96extern caddr_t isakmp_set_attr_l __P((caddr_t, int, u_int32_t));
97extern vchar_t *isakmp_add_attr_v __P((vchar_t *, int, caddr_t, int));
98extern vchar_t *isakmp_add_attr_l __P((vchar_t *, int, u_int32_t));
99
100extern int isakmp_newcookie __P((caddr_t, struct sockaddr *, struct sockaddr *));
101
102extern int isakmp_p2ph __P((vchar_t **, struct isakmp_gen *));
103
104extern u_int32_t isakmp_newmsgid2 __P((struct ph1handle *));
105extern caddr_t set_isakmp_header1 __P((vchar_t *, struct ph1handle *, int));
106extern caddr_t set_isakmp_header2 __P((vchar_t *, struct ph2handle *, int));
107extern caddr_t set_isakmp_payload __P((caddr_t, vchar_t *, int));
108
109extern struct payload_list *isakmp_plist_append __P((struct payload_list *plist,
110	vchar_t *payload, int payload_type));
111extern vchar_t *isakmp_plist_set_all __P((struct payload_list **plist,
112	struct ph1handle *iph1));
113
114#ifdef HAVE_PRINT_ISAKMP_C
115extern void isakmp_printpacket __P((vchar_t *, struct sockaddr *,
116	struct sockaddr *, int));
117#endif
118
119extern int copy_ph1addresses __P(( struct ph1handle *,
120	struct remoteconf *, struct sockaddr *, struct sockaddr *));
121extern void log_ph1established __P((const struct ph1handle *));
122
123extern void script_hook __P((struct ph1handle *, int));
124extern int script_env_append __P((char ***, int *, char *, char *));
125extern int script_exec __P((char *, int, char * const *));
126
127void purge_remote __P((struct ph1handle *));
128void delete_spd __P((struct ph2handle *, u_int64_t));
129#ifdef INET6
130u_int32_t setscopeid __P((struct sockaddr *, struct sockaddr *));
131#endif
132#endif /* _ISAKMP_VAR_H */
133