ipsec-146.1.tar.gz

[apple/ipsec.git] / ipsec-tools / racoon / handler.h

diff --git a/ipsec-tools/racoon/handler.h b/ipsec-tools/racoon/handler.h
index 9523316a52afa69b5abf79a9104160786ee85dc3..8c8c43e23183f90b5dfa9af09c1039f127f86291 100644 (file)
--- a/ipsec-tools/racoon/handler.h
+++ b/ipsec-tools/racoon/handler.h
@@ -34,13 +34,20 @@
 #ifndef _HANDLER_H
 #define _HANDLER_H
 
 #ifndef _HANDLER_H
 #define _HANDLER_H
 

+#include "config.h"
+

 #include <sys/queue.h>
 #include <sys/queue.h>

+#ifdef HAVE_OPENSSL

 #include <openssl/rsa.h>
 #include <openssl/rsa.h>

+#endif

 
 #include <sys/time.h>
 
 #include "isakmp_var.h"
 #include "oakley.h"
 
 #include <sys/time.h>
 
 #include "isakmp_var.h"
 #include "oakley.h"

+#ifndef HAVE_OPENSSL
+#include <Security/SecDH.h>
+#endif

 
 typedef struct ike_session ike_session_t;
 
 
 typedef struct ike_session ike_session_t;
 


@@ -150,6 +157,10 @@ struct ph1handle {
        int retry_counter;              /* for resend. */
        vchar_t *sendbuf;               /* buffer for re-sending */
 
        int retry_counter;              /* for resend. */
        vchar_t *sendbuf;               /* buffer for re-sending */
 

+#ifndef HAVE_OPENSSL
+       SecDHContext dhC;               /* Context for Security Framework Diffie-Hellman calculations */
+       size_t publicKeySize;
+#endif

        vchar_t *dhpriv;                /* DH; private value */
        vchar_t *dhpub;                 /* DH; public value */
        vchar_t *dhpub_p;               /* DH; partner's public value */
        vchar_t *dhpriv;                /* DH; private value */
        vchar_t *dhpub;                 /* DH; public value */
        vchar_t *dhpub_p;               /* DH; partner's public value */


@@ -168,9 +179,11 @@ struct ph1handle {
        cert_t *cert_p;                 /* peer's CERT minus general header */
        cert_t *crl_p;                  /* peer's CRL minus general header */
        cert_t *cr_p;                   /* peer's CR not including general */
        cert_t *cert_p;                 /* peer's CERT minus general header */
        cert_t *crl_p;                  /* peer's CRL minus general header */
        cert_t *cr_p;                   /* peer's CR not including general */

+#ifdef HAVE_OPENSSL

        RSA *rsa;                       /* my RSA key */
        RSA *rsa_p;                     /* peer's RSA key */
        struct genlist *rsa_candidates; /* possible candidates for peer's RSA key */
        RSA *rsa;                       /* my RSA key */
        RSA *rsa_p;                     /* peer's RSA key */
        struct genlist *rsa_candidates; /* possible candidates for peer's RSA key */

+#endif

        vchar_t *id;                    /* ID minus gen header */
        vchar_t *id_p;                  /* partner's ID minus general header */
                                        /* i.e. struct ipsecdoi_id_b*. */
        vchar_t *id;                    /* ID minus gen header */
        vchar_t *id_p;                  /* partner's ID minus general header */
                                        /* i.e. struct ipsecdoi_id_b*. */


@@ -223,12 +236,10 @@ struct ph1handle {
        u_int8_t xauth_awaiting_userinput;      /* indicates we are waiting for user input */
         vchar_t *xauth_awaiting_userinput_msg; /* tracks the last packet that triggered XAUTH */
 #endif
        u_int8_t xauth_awaiting_userinput;      /* indicates we are waiting for user input */
         vchar_t *xauth_awaiting_userinput_msg; /* tracks the last packet that triggered XAUTH */
 #endif

-#ifdef __APPLE__

        int                    is_rekey:1;
        int                    is_dying:1;
        ike_session_t         *parent_session;
        LIST_ENTRY(ph1handle)  ph1ofsession_chain;
        int                    is_rekey:1;
        int                    is_dying:1;
        ike_session_t         *parent_session;
        LIST_ENTRY(ph1handle)  ph1ofsession_chain;

-#endif

 };
 
 /* Phase 2 handler */
 };
 
 /* Phase 2 handler */


@@ -307,6 +318,10 @@ struct ph2handle {
        struct saprop *approval;        /* SA(s) approved. */
        caddr_t spidx_gen;              /* policy from peer's proposal */
 
        struct saprop *approval;        /* SA(s) approved. */
        caddr_t spidx_gen;              /* policy from peer's proposal */
 

+#ifndef HAVE_OPENSSL
+       SecDHContext dhC;               /* Context for Security Framework Diffie-Hellman calculations */
+       size_t publicKeySize;
+#endif 

        struct dhgroup *pfsgrp;         /* DH; prime number */
        vchar_t *dhpriv;                /* DH; private value */
        vchar_t *dhpub;                 /* DH; public value */
        struct dhgroup *pfsgrp;         /* DH; prime number */
        vchar_t *dhpriv;                /* DH; private value */
        vchar_t *dhpub;                 /* DH; public value */


@@ -334,14 +349,12 @@ struct ph2handle {
        struct timeval end;
 #endif
        struct ph1handle *ph1;  /* back pointer to isakmp status */
        struct timeval end;
 #endif
        struct ph1handle *ph1;  /* back pointer to isakmp status */

-#ifdef __APPLE__

        int                    is_rekey:1;
        int                    is_dying:1;
        ike_session_t         *parent_session;
        LIST_ENTRY(ph2handle)  ph2ofsession_chain;
        vchar_t               *ext_nat_id;
        vchar_t               *ext_nat_id_p;
        int                    is_rekey:1;
        int                    is_dying:1;
        ike_session_t         *parent_session;
        LIST_ENTRY(ph2handle)  ph2ofsession_chain;
        vchar_t               *ext_nat_id;
        vchar_t               *ext_nat_id_p;

-#endif

        
        LIST_ENTRY(ph2handle) chain;
        LIST_ENTRY(ph2handle) ph1bind;  /* chain to ph1handle */
        
        LIST_ENTRY(ph2handle) chain;
        LIST_ENTRY(ph2handle) ph1bind;  /* chain to ph1handle */


@@ -366,6 +379,10 @@ struct recvdpkt {
        int retry_counter;              /* how many times to send */
        time_t time_send;               /* timestamp to send a packet */
        time_t created;                 /* timestamp to create a queue */
        int retry_counter;              /* how many times to send */
        time_t time_send;               /* timestamp to send a packet */
        time_t created;                 /* timestamp to create a queue */

+       time_t retry_interval;
+#ifdef ENABLE_FRAG
+       u_int32_t frag_flags;            /* IKE phase 1 fragmentation */
+#endif

 
        struct sched *scr;              /* schedule for resend, may not used */
 
 
        struct sched *scr;              /* schedule for resend, may not used */
 


@@ -501,10 +518,12 @@ extern int inscontacted __P((struct sockaddr *));
 extern void clear_contacted __P((void));
 extern void initctdtree __P((void));
 
 extern void clear_contacted __P((void));
 extern void initctdtree __P((void));
 

+extern time_t get_exp_retx_interval __P((int num_retries, int fixed_retry_interval));
+

 extern int check_recvdpkt __P((struct sockaddr *,
        struct sockaddr *, vchar_t *));
 extern int add_recvdpkt __P((struct sockaddr *, struct sockaddr *,
 extern int check_recvdpkt __P((struct sockaddr *,
        struct sockaddr *, vchar_t *));
 extern int add_recvdpkt __P((struct sockaddr *, struct sockaddr *,

-       vchar_t *, vchar_t *, size_t));
+       vchar_t *, vchar_t *, size_t, u_int32_t));

 extern void clear_recvdpkt __P((void));
 extern void init_recvdpkt __P((void));
 
 extern void clear_recvdpkt __P((void));
 extern void init_recvdpkt __P((void));
 


@@ -515,5 +534,6 @@ extern int exclude_cfg_addr __P((const struct sockaddr *));
 #ifdef ENABLE_DPD
 extern int  ph1_force_dpd __P((struct sockaddr *));
 #endif
 #ifdef ENABLE_DPD
 extern int  ph1_force_dpd __P((struct sockaddr *));
 #endif

+extern void sweep_sleepwake __P((void));

 
 #endif /* _HANDLER_H */
 
 #endif /* _HANDLER_H */