1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
/* IP SAID (?), for libreswan
*
* Copyright (C) 1998, 1999, 2000 Henry Spencer.
* Copyright (C) 1999, 2000, 2001 Richard Guy Briggs
*
* This library is free software; you can redistribute it and/or modify it
* under the terms of the GNU Library General Public License as published by
* the Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <https://www.gnu.org/licenses/lgpl-2.1.txt>.
*
* This library is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Library General Public
* License for more details.
*
*/
#ifndef IP_SAID_H
#define IP_SAID_H
#include "err.h"
#include "ip_endpoint.h"
#include "libreswan.h" /* for ipsec_spi_t */
#include "ip_protocol.h"
struct jambuf;
/*
* to identify an SA, we need
*/
typedef struct {
/*
* destination host; no port
*
* Per rfc2367, 2.3.3 Address Extension: The zeroing of ports
* (e.g. sin_port and sin6_port) MUST be done for all messages
* except for originating SADB_ACQUIRE messages, which SHOULD
* fill them in with ports from the relevant TCP or UDP
* session which generates the ACQUIRE message.
*/
ip_address dst;
/*
* 32-bit SPI, assigned by the destination host; or one of the
* below magic values.
*
* This is in network order (but is manipulated like an int.
*
* XXX: Does this mean it is the SPI that the remote end
* expects to see on its incoming packets?
*/
# define SPI_PASS 256 /* magic values... */
# define SPI_DROP 257 /* ...for use... */
# define SPI_REJECT 258 /* ...with SA_INT */
# define SPI_HOLD 259
# define SPI_TRAP 260
# define SPI_TRAPSUBNET 261
ipsec_spi_t spi;
/*
* protocol
*
* Don't confuse this with the IP version of the above
* address.
*/
const struct ip_protocol *proto;
} ip_said;
/*
* Constructors
*/
ip_said said3(const ip_address *address, ipsec_spi_t spi/*network-byte-order*/,
const struct ip_protocol *proto);
/*
* Formatting
*/
typedef struct {
char buf[5 + ULTOT_BUF + 1 + sizeof(address_buf)];
} said_buf;
void jam_said(struct jambuf *buf, const ip_said *said);
const char *str_said(const ip_said *said, said_buf *buf);
/*
* Details.
*/
const struct ip_info *said_type(const ip_said *said);
ip_address said_address(const ip_said *said);
/*
* old stype
*/
extern err_t ttosa(const char *src, size_t srclen, ip_said *dst);
#define SATOT_BUF sizeof(said_buf)
#define SAMIGTOT_BUF (16 + SATOT_BUF + ADDRTOT_BUF)
#endif
|
