1 /* strongSwan IPsec config file parser
2 * Copyright (C) 2001-2002 Mathieu Lafon
3 * Arkoon Network Security
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
16 #ifndef _IPSEC_CONFREAD_H_
17 #define _IPSEC_CONFREAD_H_
23 #include "ipsec-parser.h"
24 #include "interfaces.h"
42 /* shared with ike_version_t */
44 KEY_EXCHANGE_IKEV1
= 1,
45 KEY_EXCHANGE_IKEV2
= 2,
54 typedef struct starter_end starter_end_t
;
76 bool has_client_wildcard
;
77 bool has_port_wildcard
;
81 certpolicy_t sendcert
;
93 typedef struct also also_t
;
101 typedef struct starter_conn starter_conn_t
;
103 struct starter_conn
{
110 starter_state_t state
;
112 keyexchange_t keyexchange
;
115 char *xauth_identity
;
117 time_t sa_ike_life_seconds
;
118 time_t sa_ipsec_life_seconds
;
119 time_t sa_rekey_margin
;
120 u_int64_t sa_ipsec_life_bytes
;
121 u_int64_t sa_ipsec_margin_bytes
;
122 u_int64_t sa_ipsec_life_packets
;
123 u_int64_t sa_ipsec_margin_packets
;
124 unsigned long sa_keying_tries
;
125 unsigned long sa_rekey_fuzz
;
130 sa_family_t addr_family
;
131 sa_family_t tunnel_addr_family
;
134 starter_end_t left
, right
;
144 dpd_action_t dpd_action
;
147 dpd_action_t close_action
;
152 char *me_mediated_by
;
155 starter_conn_t
*next
;
158 typedef struct starter_ca starter_ca_t
;
167 starter_state_t state
;
183 typedef struct starter_config starter_config_t
;
185 struct starter_config
{
193 /* pluto/charon keywords */
198 char *plutostderrlog
;
201 time_t crlcheckinterval
;
203 strict_t strictcrlpolicy
;
207 u_int force_keepalive
;
208 char *virtual_private
;
210 char *pkcs11initargs
;
211 bool pkcs11keepstate
;
221 /* information about the default route */
222 defaultroute_t defaultroute
;
224 /* number of encountered parsing errors */
228 /* do we parse also statements */
232 starter_ca_t ca_default
;
234 /* connections list (without %default) */
235 starter_ca_t
*ca_first
, *ca_last
;
238 starter_conn_t conn_default
;
240 /* connections list (without %default) */
241 starter_conn_t
*conn_first
, *conn_last
;
244 extern starter_config_t
*confread_load(const char *file
);
245 extern void confread_free(starter_config_t
*cfg
);
247 #endif /* _IPSEC_CONFREAD_H_ */