xnu-7195.101.1.tar.gz

[apple/xnu.git] / bsd / netkey / key.h

diff --git a/bsd/netkey/key.h b/bsd/netkey/key.h
index 3dda20469ef606a0a5afcc93b7f4f47f37127745..aca9509a533217f332b357ba549ebcae0aad238f 100644 (file)
--- a/bsd/netkey/key.h
+++ b/bsd/netkey/key.h
@@ -33,10 +33,10 @@
 #define _NETKEY_KEY_H_
 #include <sys/appleapiopts.h>
 
-#ifdef KERNEL_PRIVATE
+#ifdef BSD_KERNEL_PRIVATE
 
-#define KEY_SADB_UNLOCKED      0
-#define KEY_SADB_LOCKED                1
+#define KEY_SADB_UNLOCKED       0
+#define KEY_SADB_LOCKED         1
 
 extern struct key_cb key_cb;
 
@@ -48,18 +48,28 @@ struct sockaddr;
 struct socket;
 struct sadb_msg;
 struct sadb_x_policy;
+struct secasindex;
+struct secashead;
+struct sadb_key;
+struct sadb_lifetime;
 
 extern struct secpolicy *key_allocsp(struct secpolicyindex *, u_int);
 extern struct secasvar *key_allocsa_policy(struct secasindex *);
 extern struct secpolicy *key_gettunnel(struct sockaddr *,
-       struct sockaddr *, struct sockaddr *, struct sockaddr *);
+    struct sockaddr *, struct sockaddr *, struct sockaddr *);
+extern struct secasvar *key_alloc_outbound_sav_for_interface(ifnet_t interface, int family,
+    struct sockaddr *src,
+    struct sockaddr *dst);
 extern int key_checkrequest(struct ipsecrequest *isr, struct secasindex *,
-       struct secasvar **sav);
+    struct secasvar **sav);
 extern struct secasvar *key_allocsa(u_int, caddr_t, caddr_t,
-                                       u_int, u_int32_t);
+    u_int, u_int32_t);
+struct secasvar *
+key_allocsa_extended(u_int family, caddr_t src, caddr_t dst,
+    u_int proto, u_int32_t spi, ifnet_t interface);
+extern bool key_checksa_present(u_int family, caddr_t src, caddr_t dst, u_int16_t src_port, u_int16_t dst_port);
 extern u_int16_t key_natt_get_translated_port(struct secasvar *);
 extern void key_freesp(struct secpolicy *, int);
-extern void key_freeso(struct socket *);
 extern void key_freesav(struct secasvar *, int);
 extern struct secpolicy *key_newsp(void);
 extern struct secpolicy *key_msg2sp(struct sadb_x_policy *, size_t, int *);
@@ -71,11 +81,25 @@ extern u_int32_t key_random(void);
 extern void key_randomfill(void *, size_t);
 extern void key_freereg(struct socket *);
 extern int key_parse(struct mbuf *, struct socket *);
-extern void key_domain_init(void);
 extern int key_checktunnelsanity(struct secasvar *, u_int, caddr_t, caddr_t);
 extern void key_sa_recordxfer(struct secasvar *, struct mbuf *);
 extern void key_sa_routechange(struct sockaddr *);
+extern void key_sa_chgstate(struct secasvar *, u_int8_t);
 extern void key_sa_stir_iv(struct secasvar *);
+extern void key_delsah(struct secashead *sah);
+extern struct secashead *key_newsah2(struct secasindex *saidx, u_int8_t dir);
+extern void key_delsav(struct secasvar *sav);
+extern struct secpolicy *key_getspbyid(u_int32_t);
+extern void key_delsp_for_ipsec_if(ifnet_t ipsec_if);
 
-#endif /* KERNEL_PRIVATE */
+struct ifnet;
+struct ifnet_keepalive_offload_frame;
+extern u_int32_t key_fill_offload_frames_for_savs(struct ifnet *,
+    struct ifnet_keepalive_offload_frame *frames_array, u_int32_t, size_t);
+
+extern bool key_custom_ipsec_token_is_valid(void *);
+extern int key_reserve_custom_ipsec(void **, union sockaddr_in_4_6 *, union sockaddr_in_4_6 *, u_int8_t proto);
+extern void key_release_custom_ipsec(void **);
+
+#endif /* BSD_KERNEL_PRIVATE */
 #endif /* _NETKEY_KEY_H_ */