ipsec-tools/racoon/vpn_control.h

   1 /* $Id: vpn_control.h,v 1.10 2004/12/30 13:45:49 manubsd Exp $ */
   2
   3 /*
   4  * Copyright (c) 2006 Apple Computer, Inc. All rights reserved.
   5  *
   6  * @APPLE_LICENSE_HEADER_START@
   7  *
   8  * The contents of this file constitute Original Code as defined in and
   9  * are subject to the Apple Public Source License Version 1.1 (the
  10  * "License").  You may not use this file except in compliance with the
  11  * License.  Please obtain a copy of the License at
  12  * http://www.apple.com/publicsource and read it before using this file.
  13  *
  14  * This Original Code and all software distributed under the License are
  15  * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  16  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  17  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  18  * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT.  Please see the
  19  * License for the specific language governing rights and limitations
  20  * under the License.
  21  *
  22  * @APPLE_LICENSE_HEADER_END@
  23  */
  24
  25 /*
  26  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
  27  * All rights reserved.
  28  *
  29  * Redistribution and use in source and binary forms, with or without
  30  * modification, are permitted provided that the following conditions
  31  * are met:
  32  * 1. Redistributions of source code must retain the above copyright
  33  *    notice, this list of conditions and the following disclaimer.
  34  * 2. Redistributions in binary form must reproduce the above copyright
  35  *    notice, this list of conditions and the following disclaimer in the
  36  *    documentation and/or other materials provided with the distribution.
  37  * 3. Neither the name of the project nor the names of its contributors
  38  *    may be used to endorse or promote products derived from this software
  39  *    without specific prior written permission.
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  */
  53
  54 #ifndef _VPN_CONTROL_H
  55 #define _VPN_CONTROL_H
  56
  57 #define VPNCONTROLSOCK_PATH ADMINPORTDIR "/vpncontrol.sock"
  58
  59 #define FROM_LOCAL      0
  60 #define FROM_REMOTE 1
  61
  62 extern char *vpncontrolsock_path;
  63 extern uid_t vpncontrolsock_owner;
  64 extern gid_t vpncontrolsock_group;
  65 extern mode_t vpncontrolsock_mode;
  66
  67
  68 /*
  69  * message types
  70  */
  71 #define VPNCTL_CMD_BIND                                 0x0001
  72 #define VPNCTL_CMD_UNBIND                               0x0002
  73 #define VPNCTL_CMD_REDIRECT                             0x0003
  74 #define VPNCTL_CMD_PING                                 0x0004
  75 #define VPNCTL_STATUS_IKE_FAILED                0x8001
  76 #define VPNCTL_STATUS_PH1_START_US              0x8011
  77 #define VPNCTL_STATUS_PH1_START_PEER    0x8012
  78 #define VPNCTL_STATUS_PH1_ESTABLISHED   0x8013
  79 #define VPNCTL_STATUS_PH2_START                 0x8021
  80 #define VPNCTL_STATUS_PH2_ESTABLISHED   0x8022
  81
  82
  83 /* commands and status for vpn control. */
  84 /* network byte order. */
  85
  86 /* Packet header */
  87 struct vpnctl_hdr {
  88         u_int16_t                       msg_type;
  89         u_int16_t                       flags;
  90         u_int32_t                       cookie;
  91         u_int32_t                       reserved;
  92         u_int16_t                       result;
  93         u_int16_t                       len;                    /* payload length */
  94 };
  95
  96 /* Packet formats for commands */
  97
  98 /* bind to receive status for specified address */
  99 struct vpnctl_cmd_bind {
 100         struct vpnctl_hdr               hdr;
 101         u_int32_t                               address;        /* 0xFFFFFFFF = all */
 102 };
 103
 104 /* unbind to stop receiving status for specified address */
 105 struct vpnctl_cmd_unbind {
 106         struct vpnctl_hdr               hdr;
 107         u_int32_t                               address;        /* 0xFFFFFFFF = all */
 108 };
 109
 110 /* redirect client to specified address */
 111 struct vpnctl_cmd_redirect {
 112         struct vpnctl_hdr               hdr;
 113         u_int32_t                               address;
 114         u_int32_t                               redirect_address;
 115         u_int16_t                               force;
 116 };
 117
 118
 119 /*
 120  * IKE Notify codes - mirrors codes in isakmp.h
 121  */
 122 #define VPNCTL_NTYPE_INVALID_PAYLOAD_TYPE               1
 123 #define VPNCTL_NTYPE_DOI_NOT_SUPPORTED                  2
 124 #define VPNCTL_NTYPE_SITUATION_NOT_SUPPORTED    3
 125 #define VPNCTL_NTYPE_INVALID_COOKIE                             4
 126 #define VPNCTL_NTYPE_INVALID_MAJOR_VERSION              5
 127 #define VPNCTL_NTYPE_INVALID_MINOR_VERSION              6
 128 #define VPNCTL_NTYPE_INVALID_EXCHANGE_TYPE              7
 129 #define VPNCTL_NTYPE_INVALID_FLAGS                              8
 130 #define VPNCTL_NTYPE_INVALID_MESSAGE_ID                 9
 131 #define VPNCTL_NTYPE_INVALID_PROTOCOL_ID                10
 132 #define VPNCTL_NTYPE_INVALID_SPI                                11
 133 #define VPNCTL_NTYPE_INVALID_TRANSFORM_ID               12
 134 #define VPNCTL_NTYPE_ATTRIBUTES_NOT_SUPPORTED   13
 135 #define VPNCTL_NTYPE_NO_PROPOSAL_CHOSEN                 14
 136 #define VPNCTL_NTYPE_BAD_PROPOSAL_SYNTAX                15
 137 #define VPNCTL_NTYPE_PAYLOAD_MALFORMED                  16
 138 #define VPNCTL_NTYPE_INVALID_KEY_INFORMATION    17
 139 #define VPNCTL_NTYPE_INVALID_ID_INFORMATION             18
 140 #define VPNCTL_NTYPE_INVALID_CERT_ENCODING              19
 141 #define VPNCTL_NTYPE_INVALID_CERTIFICATE                20
 142 #define VPNCTL_NTYPE_BAD_CERT_REQUEST_SYNTAX    21
 143 #define VPNCTL_NTYPE_INVALID_CERT_AUTHORITY             22
 144 #define VPNCTL_NTYPE_INVALID_HASH_INFORMATION   23
 145 #define VPNCTL_NTYPE_AUTHENTICATION_FAILED              24
 146 #define VPNCTL_NTYPE_INVALID_SIGNATURE                  25
 147 #define VPNCTL_NTYPE_ADDRESS_NOTIFICATION               26
 148 #define VPNCTL_NTYPE_NOTIFY_SA_LIFETIME                 27
 149 #define VPNCTL_NTYPE_CERTIFICATE_UNAVAILABLE    28
 150 #define VPNCTL_NTYPE_UNSUPPORTED_EXCHANGE_TYPE  29
 151 #define VPNCTL_NTYPE_UNEQUAL_PAYLOAD_LENGTHS    30
 152 #define VPNCTL_NTYPE_LOAD_BALANCE                               40501
 153 #define VPNCTL_NTYPE_INTERNAL_ERROR                             -1
 154
 155
 156 /* packet format for phase change status */
 157 struct vpnctl_status_phase_change {
 158         struct vpnctl_hdr                       hdr;
 159         u_int32_t                                       address;
 160 };
 161
 162 /* Packet formats for failed status */
 163 struct vpnctl_status_failed {
 164         struct vpnctl_hdr                       hdr;
 165         u_int32_t                                       address;
 166         u_int16_t                                       ike_code;
 167         u_int16_t                                       from;
 168         u_int8_t                                        data[0];
 169 };
 170
 171
 172 #endif /* _VPN_CONTROL_H */