summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_ah_new.c
diff options
context:
space:
mode:
authorNiels Provos <provos@cvs.openbsd.org>1998-05-18 21:11:13 +0000
committerNiels Provos <provos@cvs.openbsd.org>1998-05-18 21:11:13 +0000
commit0a99f14607ee1c61291cc2ef2b27e12fa8150b57 (patch)
tree16d9ebdb669b92f649893f48e323f5efe1f65f1c /sys/netinet/ip_ah_new.c
parent32b196f4e8de3c9182f2326dab7a9409ca8e45ad (diff)
first step to the setsockopt/getsockopt interface as described in
draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal userland key management applications when security services are requested. this is only for outgoing connections at the moment, incoming packets are not yet checked against the selected socket policy.
Diffstat (limited to 'sys/netinet/ip_ah_new.c')
-rw-r--r--sys/netinet/ip_ah_new.c44
1 files changed, 25 insertions, 19 deletions
diff --git a/sys/netinet/ip_ah_new.c b/sys/netinet/ip_ah_new.c
index 9c48aa271e2..736e288f62e 100644
--- a/sys/netinet/ip_ah_new.c
+++ b/sys/netinet/ip_ah_new.c
@@ -1,27 +1,33 @@
-/* $OpenBSD: ip_ah_new.c,v 1.16 1998/02/22 01:23:30 niklas Exp $ */
+/* $OpenBSD: ip_ah_new.c,v 1.17 1998/05/18 21:10:33 provos Exp $ */
/*
- * The author of this code is John Ioannidis, ji@tla.org,
- * (except when noted otherwise).
+ * The authors of this code are John Ioannidis (ji@tla.org),
+ * Angelos D. Keromytis (kermit@csd.uch.gr) and
+ * Niels Provos (provos@physnet.uni-hamburg.de).
*
- * This code was written for BSD/OS in Athens, Greece, in November 1995.
+ * This code was written by John Ioannidis for BSD/OS in Athens, Greece,
+ * in November 1995.
*
* Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
- * by Angelos D. Keromytis, kermit@forthnet.gr.
+ * by Angelos D. Keromytis.
*
- * Additional transforms and features in 1997 by Angelos D. Keromytis and
- * Niels Provos.
+ * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis
+ * and Niels Provos.
*
- * Copyright (C) 1995, 1996, 1997 by John Ioannidis, Angelos D. Keromytis
+ * Copyright (C) 1995, 1996, 1997, 1998 by John Ioannidis, Angelos D. Keromytis
* and Niels Provos.
*
* Permission to use, copy, and modify this software without fee
* is hereby granted, provided that this entire notice is included in
* all copies of any software which is or includes a copy or
- * modification of this software.
+ * modification of this software.
+ * You may use this code under the GNU public license if you so wish. Please
+ * contribute changes back to the authors under this freer than GPL license
+ * so that we may further the use of strong encryption without limitations to
+ * all.
*
* THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
- * IMPLIED WARRANTY. IN PARTICULAR, NEITHER AUTHOR MAKES ANY
+ * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
* REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
* MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
* PURPOSE.
@@ -65,7 +71,7 @@
#include <netinet/ip_ah.h>
#include <sys/syslog.h>
-extern void encap_sendnotify(int, struct tdb *);
+extern void encap_sendnotify(int, struct tdb *, void *);
struct ah_hash ah_new_hash[] = {
{ ALG_AUTH_MD5, "HMAC-MD5-96",
@@ -514,14 +520,14 @@ ah_new_input(struct mbuf *m, struct tdb *tdb)
{
if (tdb->tdb_cur_packets >= tdb->tdb_soft_packets)
{
- encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb, NULL);
tdb->tdb_flags &= ~TDBF_SOFT_PACKETS;
}
else
if (tdb->tdb_flags & TDBF_SOFT_BYTES)
if (tdb->tdb_cur_bytes >= tdb->tdb_soft_bytes)
{
- encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb, NULL);
tdb->tdb_flags &= ~TDBF_SOFT_BYTES;
}
}
@@ -530,14 +536,14 @@ ah_new_input(struct mbuf *m, struct tdb *tdb)
{
if (tdb->tdb_cur_packets >= tdb->tdb_exp_packets)
{
- encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb, NULL);
tdb_delete(tdb, 0);
}
else
if (tdb->tdb_flags & TDBF_BYTES)
if (tdb->tdb_cur_bytes >= tdb->tdb_exp_bytes)
{
- encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb, NULL);
tdb_delete(tdb, 0);
}
}
@@ -766,14 +772,14 @@ ah_new_output(struct mbuf *m, struct sockaddr_encap *gw, struct tdb *tdb,
{
if (tdb->tdb_cur_packets >= tdb->tdb_soft_packets)
{
- encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb, NULL);
tdb->tdb_flags &= ~TDBF_SOFT_PACKETS;
}
else
if (tdb->tdb_flags & TDBF_SOFT_BYTES)
if (tdb->tdb_cur_bytes >= tdb->tdb_soft_bytes)
{
- encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_SOFT_EXPIRE, tdb, NULL);
tdb->tdb_flags &= ~TDBF_SOFT_BYTES;
}
}
@@ -782,14 +788,14 @@ ah_new_output(struct mbuf *m, struct sockaddr_encap *gw, struct tdb *tdb,
{
if (tdb->tdb_cur_packets >= tdb->tdb_exp_packets)
{
- encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb, NULL);
tdb_delete(tdb, 0);
}
else
if (tdb->tdb_flags & TDBF_BYTES)
if (tdb->tdb_cur_bytes >= tdb->tdb_exp_bytes)
{
- encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb);
+ encap_sendnotify(NOTIFY_HARD_EXPIRE, tdb, NULL);
tdb_delete(tdb, 0);
}
}