| /src/crypto/dist/ipsec-tools/src/racoon/ |
| isakmp_agg.c | 111 agg_i1send(struct ph1handle *iph1, vchar_t *msg) /* must be null */
140 if (iph1->status != PHASE1ST_START) {
142 "status mismatched %d.\n", iph1->status);
147 memset(&iph1->index, 0, sizeof(iph1->index));
148 isakmp_newcookie((caddr_t)&iph1->index, iph1->remote, iph1->local);
151 if (ipsecdoi_setid1(iph1) < 0)
155 iph1->sa = ipsecdoi_setph1proposal(iph1->rmconf, iph1->rmconf->proposal)
[all...] |
| isakmp_ident.c | 108 ident_i1send(struct ph1handle *iph1, vchar_t *msg) /* must be null */
132 if (iph1->status != PHASE1ST_START) {
134 "status mismatched %d.\n", iph1->status);
139 memset(&iph1->index, 0, sizeof(iph1->index));
140 isakmp_newcookie((caddr_t)&iph1->index, iph1->remote, iph1->local);
143 iph1->sa = ipsecdoi_setph1proposal(iph1->rmconf
[all...] |
| isakmp_base.c | 103 base_i1send(struct ph1handle *iph1, vchar_t *msg) /* must be null */
129 if (iph1->status != PHASE1ST_START) {
131 "status mismatched %d.\n", iph1->status);
136 memset(&iph1->index, 0, sizeof(iph1->index));
137 isakmp_newcookie((caddr_t)&iph1->index, iph1->remote, iph1->local);
140 if (ipsecdoi_setid1(iph1) < 0)
144 iph1->sa = ipsecdoi_setph1proposal(iph1->rmconf
[all...] |
| oakley.c | 126 static int oakley_check_certid(struct ph1handle *iph1);
412 oakley_prf(vchar_t *key, vchar_t *buf, struct ph1handle *iph1)
417 if (iph1->approval == NULL) {
424 type = iph1->approval->hashtype;
440 oakley_hash(vchar_t *buf, struct ph1handle *iph1)
445 if (iph1->approval == NULL) {
452 type = iph1->approval->hashtype;
711 oakley_compute_hashx(struct ph1handle *iph1, ...)
721 va_start(ap, iph1);
736 va_start(ap, iph1);
2189 struct ph1handle *iph1; member in struct:append_cr_ctx
[all...] |
| isakmp_newg.c | 70 isakmp_newgroup_r(struct ph1handle *iph1 __unused, vchar_t *msg __unused)
101 isakmp_info_send_n1(iph1, ISAKMP_NTYPE_INVALID_PAYLOAD_TYPE, NULL);
102 plog(LLV_ERROR, LOCATION, iph1->remote,
112 isakmp_info_send_n1(iph1, ISAKMP_NTYPE_INVALID_PAYLOAD_TYPE, NULL);
113 plog(LLV_ERROR, LOCATION, iph1->remote,
125 isakmp_info_send_n1(iph1, ISAKMP_NTYPE_INVALID_PAYLOAD_TYPE, NULL);
126 plog(LLV_ERROR, LOCATION, iph1->remote,
137 isakmp_info_send_n1(iph1, ISAKMP_NTYPE_INVALID_PAYLOAD_TYPE, NULL);
138 plog(LLV_ERROR, LOCATION, iph1->remote,
165 my_hash = isakmp_prf(iph1->skeyid_a, buf, iph1)
[all...] |
| isakmp_inf.c | 121 isakmp_info_recv(struct ph1handle *iph1, vchar_t *msg0)
145 if (iph1->ivm == NULL) {
146 plog(LLV_ERROR, LOCATION, NULL, "iph1->ivm == NULL\n");
151 ivm = oakley_newiv2(iph1, ((struct isakmp *)msg0->v)->msgid);
155 msg = oakley_do_decrypt(iph1, msg0, ivm->iv, ivm->ive);
184 if (iph1->status != PHASE1ST_ESTABLISHED &&
185 iph1->status != PHASE1ST_DYING) {
228 hash = oakley_compute_hash1(iph1, isakmp->msgid, payload);
261 switch (iph1->etype) {
265 if ((iph1->side == INITIATOR && iph1->status < PHASE1ST_MSG3SENT
608 struct ph1handle *iph1; local
679 struct ph1handle *iph1 = NULL; local
805 struct ph1handle *iph1 = iph2->ph1; local
1438 struct ph1handle *iph1 = container_of(sc, struct ph1handle, dpd_r_u); local
[all...] |
| gssapi.c | 154 gssapi_get_default_name(struct ph1handle *iph1, int remote, gss_name_t *service)
162 sa = remote ? iph1->remote : iph1->local;
187 gssapi_init(struct ph1handle *iph1)
195 if (iph1->rmconf == NULL) {
208 gssapi_set_state(iph1, gps);
210 if (iph1->rmconf->proposal->gssid != NULL) {
211 id_token.length = iph1->rmconf->proposal->gssid->l;
212 id_token.value = iph1->rmconf->proposal->gssid->v;
217 gssapi_free_state(iph1);
[all...] |
| isakmp_cfg.c | 139 isakmp_cfg_r(struct ph1handle *iph1, vchar_t *msg)
168 if (iph1->mode_cfg->ivm == NULL ||
169 iph1->mode_cfg->last_msgid != packet->msgid )
170 iph1->mode_cfg->ivm =
171 isakmp_cfg_newiv(iph1, packet->msgid);
172 ivm = iph1->mode_cfg->ivm;
174 dmsg = oakley_do_decrypt(iph1, msg, ivm->iv, ivm->ive);
226 if ((check = oakley_compute_hash1(iph1,
249 isakmp_cfg_attr_r(iph1, packet->msgid, attrpl);
272 isakmp_cfg_attr_r(struct ph1handle *iph1, uint32_t msgid
[all...] |
| handler.c | 112 int (* enum_func)(struct ph1handle *iph1, void *arg), void *enum_arg)
232 resolveph1rmconf(struct ph1handle *iph1)
237 if (iph1->side == INITIATOR)
240 rmconf = getrmconf_by_ph1(iph1);
246 if (iph1->rmconf != NULL) {
247 if (rmconf != iph1->rmconf) {
253 iph1->rmconf = rmconf;
281 * the iph1 is new, migrate all phase2s that belong to a dying or dead ph1
283 void migrate_dying_ph12(struct ph1handle *iph1)
288 if (p == iph1)
306 struct ph1handle *iph1; local
345 struct ph1handle *iph1; local
1209 struct ph1handle *iph1; local
[all...] |
| nattraversal.c | 123 natt_hash_addr (struct ph1handle *iph1, struct sockaddr *addr)
132 if (iph1->rmconf != NULL && iph1->rmconf->nat_traversal == NATT_FORCE)
136 saddr2str(addr), iph1->approval->hashtype,
163 memcpy (ptr, iph1->index.i_ck, sizeof (cookie_t));
167 memcpy (ptr, iph1->index.r_ck, sizeof (cookie_t));
180 natd = oakley_hash (buf, iph1);
187 natt_compare_addr_hash (struct ph1handle *iph1, vchar_t *natd_received,
194 if (iph1->rmconf != NULL &&
195 iph1->rmconf->nat_traversal == NATT_FORCE
[all...] |
| isakmp.c | 396 struct ph1handle *iph1; local
451 iph1 = getph1byindex(index1);
452 if (iph1 != NULL) {
455 iph1->side == INITIATOR) {
464 if (NATT_AVAILABLE(iph1) &&
465 ! (iph1->natt_flags & NAT_PORTS_CHANGED) &&
466 ((cmpsaddr(iph1->remote, remote) != CMPSADDR_MATCH) ||
467 (cmpsaddr(iph1->local, local) != CMPSADDR_MATCH)))
470 racoon_free(iph1->remote);
471 racoon_free(iph1->local)
1038 struct ph1handle *iph1; local
1134 struct ph1handle *iph1; local
1810 struct ph1handle *iph1 = container_of(p, struct ph1handle, scr); local
2125 struct ph1handle *iph1 = NULL; local
2317 struct ph1handle *iph1; local
[all...] |
| nattraversal.h | 79 vchar_t *natt_hash_addr(struct ph1handle *iph1, struct sockaddr *addr);
80 int natt_compare_addr_hash(struct ph1handle *iph1, vchar_t *natd_received, int natd_seq);
83 void natt_float_ports(struct ph1handle *iph1);
84 void natt_handle_vendorid(struct ph1handle *iph1, int vid_numeric);
92 int natt_keepalive_add_ph1(struct ph1handle *iph1);
|
| isakmp_frag.c | 82 isakmp_sendfrags(struct ph1handle *iph1, vchar_t *buf)
131 set_isakmp_header1(frag, iph1, ISAKMP_NPTYPE_FRAG);
148 if (isakmp_send(iph1, frag) < 0) {
173 isakmp_frag_insert(struct ph1handle *iph1, struct isakmp_frag_item *item)
176 struct isakmp_frag_item *citem = iph1->frag_chain;
179 if (iph1->frag_chain == NULL) {
180 iph1->frag_chain = item;
195 iph1->frag_chain = item;
210 isakmp_frag_extract(struct ph1handle *iph1, vchar_t *msg)
220 if (iph1->frag_chain == NULL)
[all...] |
| isakmp_unity.c | 89 isakmp_unity_req(struct ph1handle *iph1, struct isakmp_data *attr)
94 if ((iph1->mode_cfg->flags & ISAKMP_CFG_VENDORID_UNITY) == 0) {
145 reply_attr = isakmp_cfg_string(iph1, attr, buf);
151 reply_attr = isakmp_cfg_short(iph1, attr,
156 reply_attr = isakmp_cfg_short(iph1, attr,
161 reply_attr = isakmp_cfg_copy(iph1, attr);
165 reply_attr = isakmp_cfg_string(iph1,
171 reply_attr = isakmp_cfg_split(iph1, attr,
179 reply_attr = isakmp_cfg_split(iph1, attr,
186 reply_attr = isakmp_cfg_varlen(iph1, attr
[all...] |
| isakmp_xauth.c | 121 xauth_sendreq(struct ph1handle *iph1)
128 struct xauth_state *xst = &iph1->mode_cfg->xauth;
132 if (iph1->status < PHASE1ST_ESTABLISHED) {
175 isakmp_cfg_send(iph1, buffer,
186 xauth_attr_reply(struct ph1handle *iph1, struct isakmp_data *attr, int id)
191 struct xauth_state *xst = &iph1->mode_cfg->xauth;
193 if ((iph1->mode_cfg->flags & ISAKMP_CFG_VENDORID_XAUTH) == 0) {
262 strncpy(iph1->mode_cfg->login, usr, LOGINLEN);
263 iph1->mode_cfg->login[LOGINLEN] = '\0';
266 if ((port = isakmp_cfg_getport(iph1)) == -1)
358 struct ph1handle *iph1; local
[all...] |
| rsalist.c | 189 struct ph1handle *iph1; member in struct:lookup_result
201 local_score = naddr_score(key->src, req->iph1->local);
202 remote_score = naddr_score(key->dst, req->iph1->remote);
224 rsa_lookup_keys(struct ph1handle *iph1, int my)
230 saddr2str_fromto("%s <-> %s", iph1->local, iph1->remote));
232 r.iph1 = iph1;
237 list = iph1->rmconf->rsa_private;
239 list = iph1->rmconf->rsa_public
[all...] |
| vendorid.c | 249 handle_vendorid(struct ph1handle *iph1, struct isakmp_gen *gen)
257 iph1->vendorid_mask |= BIT(vid_numeric);
261 natt_handle_vendorid(iph1, vid_numeric);
266 iph1->mode_cfg->flags |= ISAKMP_CFG_VENDORID_XAUTH;
269 iph1->mode_cfg->flags |= ISAKMP_CFG_VENDORID_UNITY;
277 (iph1->rmconf == NULL || iph1->rmconf->dpd)) {
278 iph1->dpd_support = 1;
|
| admin.c | 172 admin_ph1_delete_sa(struct ph1handle *iph1, void *arg __unused)
174 if (iph1->status >= PHASE1ST_ESTABLISHED)
175 isakmp_info_send_d1(iph1);
176 purge_remote(iph1);
256 struct ph1handle *iph1; local
267 iph1 = getph1byaddr(src, dst, 0);
268 if (iph1 == NULL) {
273 if (iph1->cert_p != NULL) {
275 tmp.v = iph1->cert_p->v + 1;
276 tmp.l = iph1->cert_p->l - 1
350 struct ph1handle *iph1; local
[all...] |
| rsalist.h | 60 struct genlist *rsa_lookup_keys(struct ph1handle *iph1, int my);
|
| remoteconf.c | 287 rmconf_selector_from_ph1(struct rmconfselector *rmsel, struct ph1handle *iph1)
291 rmsel->remote = iph1->remote;
292 rmsel->etype = iph1->etype;
293 rmsel->approval = iph1->approval;
294 rmsel->identity = iph1->id_p;
295 rmsel->certificate_request = iph1->cr_p;
411 getrmconf_by_ph1(struct ph1handle *iph1)
416 rmconf_selector_from_ph1(&ctx.sel, iph1);
420 if (iph1->id_p != NULL)
421 idstr = ipsecdoi_id2str(iph1->id_p)
[all...] |
| remoteconf.h | 187 struct ph1handle *iph1);
198 extern struct remoteconf *getrmconf_by_ph1(struct ph1handle *iph1);
|
| ipsec_doi.c | 166 * the pointer to one of isakmpsa in proposal is set into iph1->approval.
173 ipsecdoi_checkph1proposal(vchar_t *sa, struct ph1handle *iph1)
186 newsa = get_ph1approval(iph1, doitype, sittype, pair);
192 iph1->sa_ret = newsa;
236 get_ph1approval(struct ph1handle *iph1, uint32_t doitype, uint32_t sittype,
247 rmsel.remote = iph1->remote;
249 if (iph1->approval) {
250 delisakmpsa(iph1->approval);
251 iph1->approval = NULL;
264 iph1->vendorid_mask) < 0
[all...] |
| isakmp_var.h | 120 struct ph1handle *iph1);
|
| handler.h | 468 int (* enum_func)(struct ph1handle *iph1, void *arg), void *enum_arg);
485 extern void migrate_dying_ph12(struct ph1handle *iph1);
|
| pfkey.c | 2803 * 6) Update of IKE addresses in Phase 1 (iph1->local and iph1->remote)
2834 migrate_ph1_ike_addresses(iph1, arg)
2835 struct ph1handle *iph1;
2843 if (cmpsaddr(iph1->local, ma->local) == CMPSADDR_MATCH &&
2844 cmpsaddr(iph1->remote, ma->remote) == CMPSADDR_MATCH)
2847 if (iph1->status < PHASE1ST_ESTABLISHED) {
2861 iph1->status = PHASE1ST_EXPIRED;
2862 isakmp_ph1delete(iph1);
2884 if (iph1->local != NULL)
2937 struct ph1handle *iph1; local
3268 struct ph1handle *iph1; local
3323 struct ph1handle *iph1; local
[all...] |
