1 /* $FreeBSD$ */ 2 /* $KAME: key.h,v 1.21 2001/07/27 03:51:30 itojun Exp $ */ 3 4 /*- 5 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 1. Redistributions of source code must retain the above copyright 12 * notice, this list of conditions and the following disclaimer. 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 3. Neither the name of the project nor the names of its contributors 17 * may be used to endorse or promote products derived from this software 18 * without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND 21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE 24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30 * SUCH DAMAGE. 31 */ 32 33 #ifndef _NETIPSEC_KEY_H_ 34 #define _NETIPSEC_KEY_H_ 35 36 #ifdef _KERNEL 37 38 struct secpolicy; 39 struct secpolicyindex; 40 struct ipsecrequest; 41 struct secasvar; 42 struct sockaddr; 43 struct socket; 44 struct sadb_msg; 45 struct sadb_x_policy; 46 struct secasindex; 47 union sockaddr_union; 48 49 extern void key_addref(struct secpolicy *sp); 50 extern int key_havesp(u_int dir); 51 extern struct secpolicy *key_allocsp(struct secpolicyindex *, u_int, 52 const char*, int); 53 extern struct secpolicy *key_allocsp2(u_int32_t spi, union sockaddr_union *dst, 54 u_int8_t proto, u_int dir, const char*, int); 55 extern struct secpolicy *key_newsp(const char*, int); 56 #if 0 57 extern struct secpolicy *key_gettunnel(const struct sockaddr *, 58 const struct sockaddr *, const struct sockaddr *, 59 const struct sockaddr *, const char*, int); 60 #endif 61 /* NB: prepend with _ for KAME IPv6 compatbility */ 62 extern void _key_freesp(struct secpolicy **, const char*, int); 63 64 #define KEY_ALLOCSP(spidx, dir) \ 65 key_allocsp(spidx, dir, __FILE__, __LINE__) 66 #define KEY_ALLOCSP2(spi, dst, proto, dir) \ 67 key_allocsp2(spi, dst, proto, dir, __FILE__, __LINE__) 68 #define KEY_NEWSP() \ 69 key_newsp(__FILE__, __LINE__) 70 #if 0 71 #define KEY_GETTUNNEL(osrc, odst, isrc, idst) \ 72 key_gettunnel(osrc, odst, isrc, idst, __FILE__, __LINE__) 73 #endif 74 #define KEY_FREESP(spp) \ 75 _key_freesp(spp, __FILE__, __LINE__) 76 77 extern struct secasvar *key_allocsa(union sockaddr_union *, u_int, u_int32_t, 78 const char*, int); 79 extern struct secasvar *key_allocsa_tunnel(union sockaddr_union *, 80 union sockaddr_union *, u_int, const char*, int); 81 extern void key_addrefsa(struct secasvar *, const char*, int); 82 extern void key_freesav(struct secasvar **, const char*, int); 83 84 #define KEY_ALLOCSA(dst, proto, spi) \ 85 key_allocsa(dst, proto, spi, __FILE__, __LINE__) 86 #define KEY_ALLOCSA_TUNNEL(src, dst, proto) \ 87 key_allocsa_tunnel(src, dst, proto, __FILE__, __LINE__) 88 #define KEY_ADDREFSA(sav) \ 89 key_addrefsa(sav, __FILE__, __LINE__) 90 #define KEY_FREESAV(psav) \ 91 key_freesav(psav, __FILE__, __LINE__) 92 93 extern void key_freeso(struct socket *); 94 extern int key_checktunnelsanity(struct secasvar *, u_int, 95 caddr_t, caddr_t); 96 extern int key_checkrequest(struct ipsecrequest *isr, 97 const struct secasindex *); 98 extern struct secpolicy *key_msg2sp(struct sadb_x_policy *, 99 size_t, int *); 100 extern struct mbuf *key_sp2msg(struct secpolicy *); 101 extern int key_ismyaddr(struct sockaddr *); 102 extern int key_spdacquire(struct secpolicy *); 103 extern u_long key_random(void); 104 extern void key_randomfill(void *, size_t); 105 extern void key_freereg(struct socket *); 106 extern int key_parse(struct mbuf *, struct socket *); 107 extern void key_init(void); 108 #ifdef VIMAGE 109 extern void key_destroy(void); 110 #endif 111 extern void key_sa_recordxfer(struct secasvar *, struct mbuf *); 112 #ifdef IPSEC_NAT_T 113 u_int16_t key_portfromsaddr(struct sockaddr *); 114 #define KEY_PORTFROMSADDR(saddr) \ 115 key_portfromsaddr((struct sockaddr *)(saddr)) 116 #endif 117 118 #ifdef MALLOC_DECLARE 119 MALLOC_DECLARE(M_IPSEC_SA); 120 MALLOC_DECLARE(M_IPSEC_SAH); 121 MALLOC_DECLARE(M_IPSEC_SP); 122 MALLOC_DECLARE(M_IPSEC_SR); 123 MALLOC_DECLARE(M_IPSEC_MISC); 124 MALLOC_DECLARE(M_IPSEC_SAQ); 125 MALLOC_DECLARE(M_IPSEC_SAR); 126 MALLOC_DECLARE(M_IPSEC_INPCB); 127 #endif /* MALLOC_DECLARE */ 128 129 #endif /* defined(_KERNEL) */ 130 #endif /* _NETIPSEC_KEY_H_ */ 131