1/* $USAGI: $ */
2
3/*
4 * Copyright (C)2004 USAGI/WIDE Project
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
10 *
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14 * GNU General Public License for more details.
15 *
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses>.
18 */
19/*
20 * Authors:
21 *	Masahide NAKAMURA @USAGI
22 */
23
24#ifndef __XFRM_H__
25#define __XFRM_H__ 1
26
27#include <stdio.h>
28#include <sys/socket.h>
29#include <linux/xfrm.h>
30
31#ifndef IPPROTO_SCTP
32# define IPPROTO_SCTP	132
33#endif
34#ifndef IPPROTO_DCCP
35# define IPPROTO_DCCP	33
36#endif
37#ifndef IPPROTO_MH
38# define IPPROTO_MH	135
39#endif
40
41#define XFRMS_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_usersa_info))))
42#define XFRMS_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_usersa_info))
43
44#define XFRMP_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_userpolicy_info))))
45#define XFRMP_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_userpoilcy_info))
46
47#define XFRMSID_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_usersa_id))))
48#define XFRMSID_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_usersa_id))
49
50#define XFRMPID_RTA(x)  ((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_userpolicy_id))))
51#define XFRMPID_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct xfrm_userpoilcy_id))
52
53#define XFRMACQ_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_acquire))))
54#define XFRMEXP_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_expire))))
55#define XFRMPEXP_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_polexpire))))
56
57#define XFRMREP_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(struct xfrm_user_report))))
58
59#define XFRMSAPD_RTA(x)	((struct rtattr*)(((char*)(x)) + NLMSG_ALIGN(sizeof(__u32))))
60#define XFRM_FLAG_PRINT(fp, flags, f, s) \
61	do { \
62		if (flags & f) { \
63			flags &= ~f; \
64			fprintf(fp, s "%s", (flags ? " " : "")); \
65		} \
66	} while(0)
67
68struct xfrm_buffer {
69	char *buf;
70	int size;
71	int offset;
72
73	int nlmsg_count;
74	struct rtnl_handle *rth;
75};
76
77struct xfrm_filter {
78	int use;
79
80	struct xfrm_usersa_info xsinfo;
81	__u8 id_src_mask;
82	__u8 id_dst_mask;
83	__u8 id_proto_mask;
84	__u32 id_spi_mask;
85	__u8 mode_mask;
86	__u32 reqid_mask;
87	__u8 state_flags_mask;
88
89	struct xfrm_userpolicy_info xpinfo;
90	__u8 dir_mask;
91	__u8 sel_src_mask;
92	__u8 sel_dst_mask;
93	__u32 sel_dev_mask;
94	__u8 upspec_proto_mask;
95	__u16 upspec_sport_mask;
96	__u16 upspec_dport_mask;
97	__u32 index_mask;
98	__u8 action_mask;
99	__u32 priority_mask;
100	__u8 policy_flags_mask;
101
102	__u8 ptype;
103	__u8 ptype_mask;
104
105};
106#define XFRM_FILTER_MASK_FULL (~0)
107
108extern struct xfrm_filter filter;
109
110int xfrm_state_print(const struct sockaddr_nl *who, struct nlmsghdr *n,
111		     void *arg);
112int xfrm_policy_print(const struct sockaddr_nl *who, struct nlmsghdr *n,
113		      void *arg);
114int do_xfrm_state(int argc, char **argv);
115int do_xfrm_policy(int argc, char **argv);
116int do_xfrm_monitor(int argc, char **argv);
117
118int xfrm_addr_match(xfrm_address_t *x1, xfrm_address_t *x2, int bits);
119int xfrm_xfrmproto_is_ipsec(__u8 proto);
120int xfrm_xfrmproto_is_ro(__u8 proto);
121int xfrm_xfrmproto_getbyname(char *name);
122int xfrm_algotype_getbyname(char *name);
123int xfrm_parse_mark(struct xfrm_mark *mark, int *argcp, char ***argvp);
124const char *strxf_xfrmproto(__u8 proto);
125const char *strxf_algotype(int type);
126const char *strxf_mask8(__u8 mask);
127const char *strxf_mask32(__u32 mask);
128const char *strxf_share(__u8 share);
129const char *strxf_proto(__u8 proto);
130const char *strxf_ptype(__u8 ptype);
131void xfrm_id_info_print(xfrm_address_t *saddr, struct xfrm_id *id,
132			__u8 mode, __u32 reqid, __u16 family, int force_spi,
133			FILE *fp, const char *prefix, const char *title);
134void xfrm_stats_print(struct xfrm_stats *s, FILE *fp, const char *prefix);
135void xfrm_lifetime_print(struct xfrm_lifetime_cfg *cfg,
136			 struct xfrm_lifetime_cur *cur,
137			 FILE *fp, const char *prefix);
138void xfrm_selector_print(struct xfrm_selector *sel, __u16 family,
139			 FILE *fp, const char *prefix);
140void xfrm_xfrma_print(struct rtattr *tb[], __u16 family,
141		      FILE *fp, const char *prefix);
142void xfrm_state_info_print(struct xfrm_usersa_info *xsinfo,
143			    struct rtattr *tb[], FILE *fp, const char *prefix,
144			   const char *title);
145void xfrm_policy_info_print(struct xfrm_userpolicy_info *xpinfo,
146			    struct rtattr *tb[], FILE *fp, const char *prefix,
147			    const char *title);
148int xfrm_id_parse(xfrm_address_t *saddr, struct xfrm_id *id, __u16 *family,
149		  int loose, int *argcp, char ***argvp);
150int xfrm_mode_parse(__u8 *mode, int *argcp, char ***argvp);
151int xfrm_encap_type_parse(__u16 *type, int *argcp, char ***argvp);
152int xfrm_reqid_parse(__u32 *reqid, int *argcp, char ***argvp);
153int xfrm_selector_parse(struct xfrm_selector *sel, int *argcp, char ***argvp);
154int xfrm_lifetime_cfg_parse(struct xfrm_lifetime_cfg *lft,
155			    int *argcp, char ***argvp);
156int xfrm_sctx_parse(char *ctxstr, char *context,
157		    struct xfrm_user_sec_ctx *sctx);
158#endif
159