summaryrefslogtreecommitdiff
path: root/sbin/ipsec/ipsecadm/xf_ahhmacmd5.c
blob: b72c8d49b6bc17c6951584b2f20a05780d0b260a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
/* $OpenBSD: xf_ahhmacmd5.c,v 1.4 1997/07/11 23:50:21 provos Exp $ */
/*
 * The author of this code is John Ioannidis, ji@tla.org,
 * 	(except when noted otherwise).
 *
 * This code was written for BSD/OS in Athens, Greece, in November 1995.
 *
 * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996,
 * by Angelos D. Keromytis, kermit@forthnet.gr.
 *
 * Copyright (C) 1995, 1996, 1997 by John Ioannidis and Angelos D. Keromytis.
 *	
 * Permission to use, copy, and modify this software without fee
 * is hereby granted, provided that this entire notice is included in
 * all copies of any software which is or includes a copy or
 * modification of this software.
 *
 * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
 * IMPLIED WARRANTY. IN PARTICULAR, NEITHER AUTHOR MAKES ANY
 * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
 * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
 * PURPOSE.
 */

#include <sys/param.h>
#include <sys/file.h>
#include <sys/socket.h>
#include <sys/ioctl.h>
#include <sys/mbuf.h>
#include <sys/sysctl.h>

#include <net/if.h>
#include <net/route.h>
#include <net/if_dl.h>
#include <netinet/in.h>
#include <netns/ns.h>
#include <netiso/iso.h>
#include <netccitt/x25.h>
#include <arpa/inet.h>
#include <netdb.h>

#include <errno.h>
#include <unistd.h>
#include <stdio.h>
#include <ctype.h>
#include <stdlib.h>
#include <string.h>
#include <paths.h>
#include "net/encap.h"
#include "netinet/ip_ipsp.h"
#include "netinet/ip_ah.h"

extern char buf[]; 

int xf_set __P(( struct encap_msghdr *));
int x2i __P((char *));

int
xf_ahhmacmd5(argc, argv)
int argc;
char **argv;
{
	int klen, i;

	struct encap_msghdr *em;
	struct ah_new_xencap *xd;

	if (argc != 5) {
	  fprintf(stderr, "usage: %s src dst spi key\n", argv[0]);
	  return 0;
	}

	klen = strlen(argv[4])/2;

	em = (struct encap_msghdr *)&buf[0];
	
	em->em_msglen = EMT_SETSPI_FLEN + AH_NEW_XENCAP_LEN + klen;
	em->em_version = PFENCAP_VERSION_1;
	em->em_type = EMT_SETSPI;
	em->em_spi = htonl(strtoul(argv[3], NULL, 16));
	em->em_src.s_addr = inet_addr(argv[1]);
	em->em_dst.s_addr = inet_addr(argv[2]);
	em->em_alg = XF_NEW_AH;
	em->em_sproto = IPPROTO_AH;

	xd = (struct ah_new_xencap *)(em->em_dat);

	xd->amx_hash_algorithm = ALG_AUTH_MD5;
	xd->amx_wnd = 32;
	xd->amx_keylen = klen;

	bzero(xd->amx_key, klen);
	for (i = 0; i < klen; i++ )
	  xd->amx_key[i] = x2i(&(argv[4][2*i]));

	return xf_set(em);
}