Annotation of embedaddon/ipsec-tools/src/racoon/localconf.h, revision 1.1.1.1
1.1 misho 1: /* $NetBSD: localconf.h,v 1.7 2008/12/23 14:04:42 tteras Exp $ */
2:
3: /* Id: localconf.h,v 1.13 2005/11/06 18:13:18 monas Exp */
4:
5: /*
6: * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7: * All rights reserved.
8: *
9: * Redistribution and use in source and binary forms, with or without
10: * modification, are permitted provided that the following conditions
11: * are met:
12: * 1. Redistributions of source code must retain the above copyright
13: * notice, this list of conditions and the following disclaimer.
14: * 2. Redistributions in binary form must reproduce the above copyright
15: * notice, this list of conditions and the following disclaimer in the
16: * documentation and/or other materials provided with the distribution.
17: * 3. Neither the name of the project nor the names of its contributors
18: * may be used to endorse or promote products derived from this software
19: * without specific prior written permission.
20: *
21: * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
22: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24: * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
25: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31: * SUCH DAMAGE.
32: */
33:
34: #ifndef _LOCALCONF_H
35: #define _LOCALCONF_H
36:
37: /* local configuration */
38:
39: #define LC_DEFAULT_CF SYSCONFDIR "/racoon.conf"
40:
41: #define LC_PATHTYPE_INCLUDE 0
42: #define LC_PATHTYPE_PSK 1
43: #define LC_PATHTYPE_CERT 2
44: #define LC_PATHTYPE_BACKUPSA 3
45: #define LC_PATHTYPE_SCRIPT 4
46: #define LC_PATHTYPE_PIDFILE 5
47: #define LC_PATHTYPE_MAX 6
48:
49: #define LC_DEFAULT_PAD_MAXSIZE 20
50: #define LC_DEFAULT_PAD_RANDOM TRUE
51: #define LC_DEFAULT_PAD_RANDOMLEN FALSE
52: #define LC_DEFAULT_PAD_STRICT FALSE
53: #define LC_DEFAULT_PAD_EXCLTAIL TRUE
54: #define LC_DEFAULT_RETRY_COUNTER 5
55: #define LC_DEFAULT_RETRY_INTERVAL 10
56: #define LC_DEFAULT_COUNT_PERSEND 1
57: #define LC_DEFAULT_RETRY_CHECKPH1 30
58: #define LC_DEFAULT_WAIT_PH2COMPLETE 30
59: #define LC_DEFAULT_NATT_KA_INTERVAL 20
60: #define LC_DEFAULT_PFKEY_BUFFER_SIZE 0
61:
62: #define LC_DEFAULT_SECRETSIZE 16 /* 128 bits */
63:
64: #define LC_GSSENC_UTF16LE 0 /* GSS ID in UTF-16LE */
65: #define LC_GSSENC_LATIN1 1 /* GSS ID in ISO-Latin-1 */
66: #define LC_GSSENC_MAX 2
67:
68: struct localconf {
69: char *racoon_conf; /* configuration filename */
70:
71: uid_t uid;
72: gid_t gid;
73: char *chroot; /* chroot path */
74: u_int16_t port_isakmp; /* port for isakmp as default */
75: u_int16_t port_isakmp_natt; /* port for NAT-T use */
76: int default_af; /* default address family */
77:
78: int sock_admin;
79: int sock_pfkey;
80: int rtsock; /* routing socket */
81:
82: char *pathinfo[LC_PATHTYPE_MAX];
83:
84: int pad_random;
85: int pad_randomlen;
86: int pad_maxsize;
87: int pad_strict;
88: int pad_excltail;
89:
90: int retry_counter; /* times to retry. */
91: int retry_interval; /* interval each retry. */
92: int count_persend; /* the number of packets each retry. */
93: /* above 3 values are copied into a handler. */
94:
95: int retry_checkph1;
96: int wait_ph2complete;
97:
98: int natt_ka_interval; /* NAT-T keepalive interval. */
99:
100: int secret_size;
101: int strict_address; /* strictly check addresses. */
102:
103: int complex_bundle;
104: /*
105: * If we want to make a packet "IP2 AH ESP IP1 ULP",
106: * the SPD in KAME expresses AH transport + ESP tunnel.
107: * So racoon sent the proposal contained such the order.
108: * But lots of implementation interprets AH tunnel + ESP
109: * tunnel in this case. racoon has changed the format,
110: * usually uses this format. If the option, 'complex_bundle'
111: * is enable, racoon uses old format.
112: */
113:
114: int gss_id_enc; /* GSS ID encoding to use */
115: int pfkey_buffer_size; /* Set socket buffer size for pfkey */
116: };
117:
118: extern struct localconf *lcconf;
119:
120: extern void initlcconf __P((void));
121: extern void flushlcconf __P((void));
122: extern vchar_t *getpskbyname __P((vchar_t *));
123: extern vchar_t *getpskbyaddr __P((struct sockaddr *));
124: extern void getpathname __P((char *, int, int, const char *));
125: extern int sittype2doi __P((int));
126: extern int doitype2doi __P((int));
127: extern vchar_t *getpsk __P((const char *, const int));
128:
129: extern void restore_params __P((void));
130: extern void save_params __P((void));
131:
132: #endif /* _LOCALCONF_H */
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>