740290313e
Fast-IPsec is a rework of the OpenBSD and KAME IPsec code, using the OpenCryptoFramework (and thus hardware crypto accelerators) and numerous detailed performance improvements. This import is (aside from SPL-level names) the FreeBSD source, imported ``as-is'' as a historical snapshot, for future maintenance and comparison against the FreeBSD source. For now, several minor kernel-API differences are hidden by macros a shim file, ipsec_osdep.h, which (aside from SPL names) can be targeted at either NetBSD or FreeBSD.
92 lines
3.2 KiB
C
92 lines
3.2 KiB
C
/* $NetBSD: key_var.h,v 1.1 2003/08/13 20:06:51 jonathan Exp $ */
|
|
/* $FreeBSD: src/sys/netipsec/key_var.h,v 1.1.4.1 2003/01/24 05:11:36 sam Exp $ */
|
|
/* $KAME: key_var.h,v 1.11 2001/09/12 23:05:07 sakane Exp $ */
|
|
|
|
/*
|
|
* Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. Neither the name of the project nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#ifndef _NETIPSEC_KEY_VAR_H_
|
|
#define _NETIPSEC_KEY_VAR_H_
|
|
|
|
/* sysctl */
|
|
#define KEYCTL_DEBUG_LEVEL 1
|
|
#define KEYCTL_SPI_TRY 2
|
|
#define KEYCTL_SPI_MIN_VALUE 3
|
|
#define KEYCTL_SPI_MAX_VALUE 4
|
|
#define KEYCTL_RANDOM_INT 5
|
|
#define KEYCTL_LARVAL_LIFETIME 6
|
|
#define KEYCTL_BLOCKACQ_COUNT 7
|
|
#define KEYCTL_BLOCKACQ_LIFETIME 8
|
|
#define KEYCTL_ESP_KEYMIN 9
|
|
#define KEYCTL_ESP_AUTH 10
|
|
#define KEYCTL_AH_KEYMIN 11
|
|
#define KEYCTL_PREFERED_OLDSA 12
|
|
#define KEYCTL_MAXID 13
|
|
|
|
#define KEYCTL_NAMES { \
|
|
{ 0, 0 }, \
|
|
{ "debug", CTLTYPE_INT }, \
|
|
{ "spi_try", CTLTYPE_INT }, \
|
|
{ "spi_min_value", CTLTYPE_INT }, \
|
|
{ "spi_max_value", CTLTYPE_INT }, \
|
|
{ "random_int", CTLTYPE_INT }, \
|
|
{ "larval_lifetime", CTLTYPE_INT }, \
|
|
{ "blockacq_count", CTLTYPE_INT }, \
|
|
{ "blockacq_lifetime", CTLTYPE_INT }, \
|
|
{ "esp_keymin", CTLTYPE_INT }, \
|
|
{ "esp_auth", CTLTYPE_INT }, \
|
|
{ "ah_keymin", CTLTYPE_INT }, \
|
|
{ "prefered_oldsa", CTLTYPE_INT }, \
|
|
}
|
|
|
|
#define KEYCTL_VARS { \
|
|
0, \
|
|
0, \
|
|
&key_spi_trycnt, \
|
|
&key_spi_minval, \
|
|
&key_spi_maxval, \
|
|
&key_int_random, \
|
|
&key_larval_lifetime, \
|
|
&key_blockacq_count, \
|
|
&key_blockacq_lifetime, \
|
|
&ipsec_esp_keymin, \
|
|
&ipsec_esp_auth, \
|
|
&ipsec_ah_keymin, \
|
|
&key_prefered_oldsa, \
|
|
}
|
|
|
|
#ifdef _KERNEL
|
|
#define _ARRAYLEN(p) (sizeof(p)/sizeof(p[0]))
|
|
#define _KEYLEN(key) ((u_int)((key)->sadb_key_bits >> 3))
|
|
#define _KEYBITS(key) ((u_int)((key)->sadb_key_bits))
|
|
#define _KEYBUF(key) ((u_int8_t *)((u_int8_t*)(key) + sizeof(struct sadb_key)))
|
|
#endif /*_KERNEL*/
|
|
|
|
#endif /* _NETIPSEC_KEY_VAR_H_ */
|