1 /* $KAME: strnames.c,v 1.25 2003/11/13 10:53:26 itojun Exp $ */
4 * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. Neither the name of the project nor the names of its contributors
16 * may be used to endorse or promote products derived from this software
17 * without specific prior written permission.
19 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include <sys/types.h>
35 #include <sys/param.h>
36 #include <sys/socket.h>
38 #include <netinet/in.h>
39 #ifdef HAVE_NETINET6_IPSEC
40 # include <netinet6/ipsec.h>
42 # include <netinet/ipsec.h>
44 #include <netinet/in.h>
54 #include "isakmp_var.h"
56 #include "ipsec_doi.h"
61 #include "algorithm.h"
66 char *(*f) __P((int));
75 snprintf(buf, sizeof(buf), "%d", n);
82 s_isakmp_state(t, d, s)
86 case ISAKMP_ETYPE_AGG:
90 case PHASE1ST_MSG1SENT:
92 case PHASE1ST_ESTABLISHED:
99 case PHASE1ST_MSG1SENT:
106 case ISAKMP_ETYPE_BASE:
110 case PHASE1ST_MSG1SENT:
111 return "base I msg1";
112 case PHASE1ST_MSG2SENT:
113 return "base I msg2";
119 case PHASE1ST_MSG1SENT:
120 return "base R msg1";
121 case PHASE1ST_ESTABLISHED:
122 return "base R msg2";
128 case ISAKMP_ETYPE_IDENT:
132 case PHASE1ST_MSG1SENT:
133 return "ident I msg1";
134 case PHASE1ST_MSG2SENT:
135 return "ident I msg2";
136 case PHASE1ST_MSG3SENT:
137 return "ident I msg3";
143 case PHASE1ST_MSG1SENT:
144 return "ident R msg1";
145 case PHASE1ST_MSG2SENT:
146 return "ident R msg2";
147 case PHASE1ST_ESTABLISHED:
148 return "ident R msg3";
154 case ISAKMP_ETYPE_QUICK:
158 case PHASE2ST_MSG1SENT:
159 return "quick I msg1";
161 return "quick I msg2";
167 case PHASE2ST_MSG1SENT:
168 return "quick R msg1";
169 case PHASE2ST_COMMIT:
170 return "quick R msg2";
177 case ISAKMP_ETYPE_NONE:
178 case ISAKMP_ETYPE_AUTH:
179 case ISAKMP_ETYPE_INFO:
180 case ISAKMP_ETYPE_NEWGRP:
181 case ISAKMP_ETYPE_ACKINFO:
189 static struct ksmap name_isakmp_certtype[] = {
190 { ISAKMP_CERT_NONE, "NONE", NULL },
191 { ISAKMP_CERT_PKCS7, "PKCS #7 wrapped X.509 certificate", NULL },
192 { ISAKMP_CERT_PGP, "PGP Certificate", NULL },
193 { ISAKMP_CERT_DNS, "DNS Signed Key", NULL },
194 { ISAKMP_CERT_X509SIGN, "X.509 Certificate Signature", NULL },
195 { ISAKMP_CERT_X509KE, "X.509 Certificate Key Exchange", NULL },
196 { ISAKMP_CERT_KERBEROS, "Kerberos Tokens", NULL },
197 { ISAKMP_CERT_CRL, "Certificate Revocation List (CRL)", NULL },
198 { ISAKMP_CERT_ARL, "Authority Revocation List (ARL)", NULL },
199 { ISAKMP_CERT_SPKI, "SPKI Certificate", NULL },
200 { ISAKMP_CERT_X509ATTR, "X.509 Certificate Attribute", NULL },
208 for (i = 0; i < ARRAYLEN(name_isakmp_certtype); i++)
209 if (name_isakmp_certtype[i].key == k)
210 return name_isakmp_certtype[i].str;
214 static struct ksmap name_isakmp_etype[] = {
215 { ISAKMP_ETYPE_NONE, "None", NULL },
216 { ISAKMP_ETYPE_BASE, "Base", NULL },
217 { ISAKMP_ETYPE_IDENT, "Identity Protection", NULL },
218 { ISAKMP_ETYPE_AUTH, "Authentication Only", NULL },
219 { ISAKMP_ETYPE_AGG, "Aggressive", NULL },
220 { ISAKMP_ETYPE_INFO, "Informational", NULL },
221 { ISAKMP_ETYPE_QUICK, "Quick", NULL },
222 { ISAKMP_ETYPE_NEWGRP, "New Group", NULL },
223 { ISAKMP_ETYPE_ACKINFO, "Acknowledged Informational", NULL },
231 for (i = 0; i < ARRAYLEN(name_isakmp_etype); i++)
232 if (name_isakmp_etype[i].key == k)
233 return name_isakmp_etype[i].str;
237 static struct ksmap name_isakmp_notify_msg[] = {
238 { ISAKMP_NTYPE_INVALID_PAYLOAD_TYPE, "INVALID-PAYLOAD-TYPE", NULL },
239 { ISAKMP_NTYPE_DOI_NOT_SUPPORTED, "DOI-NOT-SUPPORTED", NULL },
240 { ISAKMP_NTYPE_SITUATION_NOT_SUPPORTED, "SITUATION-NOT-SUPPORTED", NULL },
241 { ISAKMP_NTYPE_INVALID_COOKIE, "INVALID-COOKIE", NULL },
242 { ISAKMP_NTYPE_INVALID_MAJOR_VERSION, "INVALID-MAJOR-VERSION", NULL },
243 { ISAKMP_NTYPE_INVALID_MINOR_VERSION, "INVALID-MINOR-VERSION", NULL },
244 { ISAKMP_NTYPE_INVALID_EXCHANGE_TYPE, "INVALID-EXCHANGE-TYPE", NULL },
245 { ISAKMP_NTYPE_INVALID_FLAGS, "INVALID-FLAGS", NULL },
246 { ISAKMP_NTYPE_INVALID_MESSAGE_ID, "INVALID-MESSAGE-ID", NULL },
247 { ISAKMP_NTYPE_INVALID_PROTOCOL_ID, "INVALID-PROTOCOL-ID", NULL },
248 { ISAKMP_NTYPE_INVALID_SPI, "INVALID-SPI", NULL },
249 { ISAKMP_NTYPE_INVALID_TRANSFORM_ID, "INVALID-TRANSFORM-ID", NULL },
250 { ISAKMP_NTYPE_ATTRIBUTES_NOT_SUPPORTED, "ATTRIBUTES-NOT-SUPPORTED", NULL },
251 { ISAKMP_NTYPE_NO_PROPOSAL_CHOSEN, "NO-PROPOSAL-CHOSEN", NULL },
252 { ISAKMP_NTYPE_BAD_PROPOSAL_SYNTAX, "BAD-PROPOSAL-SYNTAX", NULL },
253 { ISAKMP_NTYPE_PAYLOAD_MALFORMED, "PAYLOAD-MALFORMED", NULL },
254 { ISAKMP_NTYPE_INVALID_KEY_INFORMATION, "INVALID-KEY-INFORMATION", NULL },
255 { ISAKMP_NTYPE_INVALID_ID_INFORMATION, "INVALID-ID-INFORMATION", NULL },
256 { ISAKMP_NTYPE_INVALID_CERT_ENCODING, "INVALID-CERT-ENCODING", NULL },
257 { ISAKMP_NTYPE_INVALID_CERTIFICATE, "INVALID-CERTIFICATE", NULL },
258 { ISAKMP_NTYPE_BAD_CERT_REQUEST_SYNTAX, "BAD-CERT-REQUEST-SYNTAX", NULL },
259 { ISAKMP_NTYPE_INVALID_CERT_AUTHORITY, "INVALID-CERT-AUTHORITY", NULL },
260 { ISAKMP_NTYPE_INVALID_HASH_INFORMATION, "INVALID-HASH-INFORMATION", NULL },
261 { ISAKMP_NTYPE_AUTHENTICATION_FAILED, "AUTHENTICATION-FAILED", NULL },
262 { ISAKMP_NTYPE_INVALID_SIGNATURE, "INVALID-SIGNATURE", NULL },
263 { ISAKMP_NTYPE_ADDRESS_NOTIFICATION, "ADDRESS-NOTIFICATION", NULL },
264 { ISAKMP_NTYPE_NOTIFY_SA_LIFETIME, "NOTIFY-SA-LIFETIME", NULL },
265 { ISAKMP_NTYPE_CERTIFICATE_UNAVAILABLE, "CERTIFICATE-UNAVAILABLE", NULL },
266 { ISAKMP_NTYPE_UNSUPPORTED_EXCHANGE_TYPE, "UNSUPPORTED-EXCHANGE-TYPE", NULL },
267 { ISAKMP_NTYPE_UNEQUAL_PAYLOAD_LENGTHS, "UNEQUAL-PAYLOAD-LENGTHS", NULL },
268 { ISAKMP_NTYPE_CONNECTED, "CONNECTED", NULL },
269 { ISAKMP_NTYPE_RESPONDER_LIFETIME, "RESPONDER-LIFETIME", NULL },
270 { ISAKMP_NTYPE_REPLAY_STATUS, "REPLAY-STATUS", NULL },
271 { ISAKMP_NTYPE_INITIAL_CONTACT, "INITIAL-CONTACT", NULL },
272 { ISAKMP_LOG_RETRY_LIMIT_REACHED, "RETRY-LIMIT-REACHED", NULL },
276 s_isakmp_notify_msg(k)
280 for (i = 0; i < ARRAYLEN(name_isakmp_notify_msg); i++)
281 if (name_isakmp_notify_msg[i].key == k)
282 return name_isakmp_notify_msg[i].str;
287 static struct ksmap name_isakmp_nptype[] = {
288 { ISAKMP_NPTYPE_NONE, "none", NULL },
289 { ISAKMP_NPTYPE_SA, "sa", NULL },
290 { ISAKMP_NPTYPE_P, "prop", NULL },
291 { ISAKMP_NPTYPE_T, "trns", NULL },
292 { ISAKMP_NPTYPE_KE, "ke", NULL },
293 { ISAKMP_NPTYPE_ID, "id", NULL },
294 { ISAKMP_NPTYPE_CERT, "cert", NULL },
295 { ISAKMP_NPTYPE_CR, "cr", NULL },
296 { ISAKMP_NPTYPE_HASH, "hash", NULL },
297 { ISAKMP_NPTYPE_SIG, "sig", NULL },
298 { ISAKMP_NPTYPE_NONCE, "nonce", NULL },
299 { ISAKMP_NPTYPE_N, "notify", NULL },
300 { ISAKMP_NPTYPE_D, "delete", NULL },
301 { ISAKMP_NPTYPE_VID, "vid", NULL },
302 { ISAKMP_NPTYPE_GSS, "gss id", NULL },
303 { ISAKMP_NPTYPE_NATD_RFC, "nat-d", NULL },
304 { ISAKMP_NPTYPE_NATOA_RFC, "nat-oa", NULL },
305 { ISAKMP_NPTYPE_NATD_DRAFT, "nat-d", NULL },
306 { ISAKMP_NPTYPE_NATOA_DRAFT, "nat-oa", NULL },
314 for (i = 0; i < ARRAYLEN(name_isakmp_nptype); i++)
315 if (name_isakmp_nptype[i].key == k)
316 return name_isakmp_nptype[i].str;
321 static struct ksmap name_ipsecdoi_proto[] = {
322 { IPSECDOI_PROTO_ISAKMP, "ISAKMP", s_ipsecdoi_trns_isakmp },
323 { IPSECDOI_PROTO_IPSEC_AH, "AH", s_ipsecdoi_trns_ah },
324 { IPSECDOI_PROTO_IPSEC_ESP, "ESP", s_ipsecdoi_trns_esp },
325 { IPSECDOI_PROTO_IPCOMP, "IPCOMP", s_ipsecdoi_trns_ipcomp },
333 for (i = 0; i < ARRAYLEN(name_ipsecdoi_proto); i++)
334 if (name_ipsecdoi_proto[i].key == k)
335 return name_ipsecdoi_proto[i].str;
339 static struct ksmap name_ipsecdoi_trns_isakmp[] = {
340 { IPSECDOI_KEY_IKE, "IKE", NULL },
344 s_ipsecdoi_trns_isakmp(k)
348 for (i = 0; i < ARRAYLEN(name_ipsecdoi_trns_isakmp); i++)
349 if (name_ipsecdoi_trns_isakmp[i].key == k)
350 return name_ipsecdoi_trns_isakmp[i].str;
354 static struct ksmap name_ipsecdoi_trns_ah[] = {
355 { IPSECDOI_AH_MD5, "MD5", NULL },
356 { IPSECDOI_AH_SHA, "SHA", NULL },
357 { IPSECDOI_AH_DES, "DES", NULL },
361 s_ipsecdoi_trns_ah(k)
365 for (i = 0; i < ARRAYLEN(name_ipsecdoi_trns_ah); i++)
366 if (name_ipsecdoi_trns_ah[i].key == k)
367 return name_ipsecdoi_trns_ah[i].str;
371 static struct ksmap name_ipsecdoi_trns_esp[] = {
372 { IPSECDOI_ESP_DES_IV64, "DES_IV64", NULL },
373 { IPSECDOI_ESP_DES, "DES", NULL },
374 { IPSECDOI_ESP_3DES, "3DES", NULL },
375 { IPSECDOI_ESP_RC5, "RC5", NULL },
376 { IPSECDOI_ESP_IDEA, "IDEA", NULL },
377 { IPSECDOI_ESP_CAST, "CAST", NULL },
378 { IPSECDOI_ESP_BLOWFISH, "BLOWFISH", NULL },
379 { IPSECDOI_ESP_3IDEA, "3IDEA", NULL },
380 { IPSECDOI_ESP_DES_IV32, "DES_IV32", NULL },
381 { IPSECDOI_ESP_RC4, "RC4", NULL },
382 { IPSECDOI_ESP_NULL, "NULL", NULL },
383 { IPSECDOI_ESP_AES, "AES", NULL },
384 { IPSECDOI_ESP_TWOFISH, "TWOFISH", NULL },
388 s_ipsecdoi_trns_esp(k)
392 for (i = 0; i < ARRAYLEN(name_ipsecdoi_trns_esp); i++)
393 if (name_ipsecdoi_trns_esp[i].key == k)
394 return name_ipsecdoi_trns_esp[i].str;
398 static struct ksmap name_ipsecdoi_trns_ipcomp[] = {
399 { IPSECDOI_IPCOMP_OUI, "OUI", NULL},
400 { IPSECDOI_IPCOMP_DEFLATE, "DEFLATE", NULL},
401 { IPSECDOI_IPCOMP_LZS, "LZS", NULL},
405 s_ipsecdoi_trns_ipcomp(k)
409 for (i = 0; i < ARRAYLEN(name_ipsecdoi_trns_ipcomp); i++)
410 if (name_ipsecdoi_trns_ipcomp[i].key == k)
411 return name_ipsecdoi_trns_ipcomp[i].str;
416 s_ipsecdoi_trns(proto, trns)
420 for (i = 0; i < ARRAYLEN(name_ipsecdoi_proto); i++)
421 if (name_ipsecdoi_proto[i].key == proto
422 && name_ipsecdoi_proto[i].f)
423 return (name_ipsecdoi_proto[i].f)(trns);
424 return num2str(trns);
427 static struct ksmap name_attr_ipsec[] = {
428 { IPSECDOI_ATTR_SA_LD_TYPE, "SA Life Type", s_ipsecdoi_ltype },
429 { IPSECDOI_ATTR_SA_LD, "SA Life Duration", NULL },
430 { IPSECDOI_ATTR_GRP_DESC, "Group Description", NULL },
431 { IPSECDOI_ATTR_ENC_MODE, "Encryption Mode", s_ipsecdoi_encmode },
432 { IPSECDOI_ATTR_AUTH, "Authentication Algorithm", s_ipsecdoi_auth },
433 { IPSECDOI_ATTR_KEY_LENGTH, "Key Length", NULL },
434 { IPSECDOI_ATTR_KEY_ROUNDS, "Key Rounds", NULL },
435 { IPSECDOI_ATTR_COMP_DICT_SIZE, "Compression Dictionary Size", NULL },
436 { IPSECDOI_ATTR_COMP_PRIVALG, "Compression Private Algorithm", NULL },
444 for (i = 0; i < ARRAYLEN(name_attr_ipsec); i++)
445 if (name_attr_ipsec[i].key == k)
446 return name_attr_ipsec[i].str;
450 static struct ksmap name_attr_ipsec_ltype[] = {
451 { IPSECDOI_ATTR_SA_LD_TYPE_SEC, "seconds", NULL },
452 { IPSECDOI_ATTR_SA_LD_TYPE_KB, "kilobytes", NULL },
460 for (i = 0; i < ARRAYLEN(name_attr_ipsec_ltype); i++)
461 if (name_attr_ipsec_ltype[i].key == k)
462 return name_attr_ipsec_ltype[i].str;
466 static struct ksmap name_attr_ipsec_encmode[] = {
467 { IPSECDOI_ATTR_ENC_MODE_ANY, "Any", NULL },
468 { IPSECDOI_ATTR_ENC_MODE_TUNNEL, "Tunnel", NULL },
469 { IPSECDOI_ATTR_ENC_MODE_TRNS, "Transport", NULL },
470 { IPSECDOI_ATTR_ENC_MODE_UDPTUNNEL_RFC, "UDP-Tunnel", NULL },
471 { IPSECDOI_ATTR_ENC_MODE_UDPTRNS_RFC, "UDP-Transport", NULL },
472 { IPSECDOI_ATTR_ENC_MODE_UDPTUNNEL_DRAFT, "UDP-Tunnel", NULL },
473 { IPSECDOI_ATTR_ENC_MODE_UDPTRNS_DRAFT, "UDP-Transport", NULL },
477 s_ipsecdoi_encmode(k)
481 for (i = 0; i < ARRAYLEN(name_attr_ipsec_encmode); i++)
482 if (name_attr_ipsec_encmode[i].key == k)
483 return name_attr_ipsec_encmode[i].str;
487 static struct ksmap name_attr_ipsec_auth[] = {
488 { IPSECDOI_ATTR_AUTH_HMAC_MD5, "hmac-md5", NULL },
489 { IPSECDOI_ATTR_AUTH_HMAC_SHA1, "hmac-sha", NULL },
490 { IPSECDOI_ATTR_AUTH_DES_MAC, "des-mac", NULL },
491 { IPSECDOI_ATTR_AUTH_KPDK, "kpdk", NULL },
499 for (i = 0; i < ARRAYLEN(name_attr_ipsec_auth); i++)
500 if (name_attr_ipsec_auth[i].key == k)
501 return name_attr_ipsec_auth[i].str;
506 s_ipsecdoi_attr_v(type, val)
510 for (i = 0; i < ARRAYLEN(name_attr_ipsec); i++)
511 if (name_attr_ipsec[i].key == type
512 && name_attr_ipsec[i].f)
513 return (name_attr_ipsec[i].f)(val);
517 static struct ksmap name_ipsecdoi_ident[] = {
518 { IPSECDOI_ID_IPV4_ADDR, "IPv4_address", NULL },
519 { IPSECDOI_ID_FQDN, "FQDN", NULL },
520 { IPSECDOI_ID_USER_FQDN, "User_FQDN", NULL },
521 { IPSECDOI_ID_IPV4_ADDR_SUBNET, "IPv4_subnet", NULL },
522 { IPSECDOI_ID_IPV6_ADDR, "IPv6_address", NULL },
523 { IPSECDOI_ID_IPV6_ADDR_SUBNET, "IPv6_subnet", NULL },
524 { IPSECDOI_ID_IPV4_ADDR_RANGE, "IPv4_address_range", NULL },
525 { IPSECDOI_ID_IPV6_ADDR_RANGE, "IPv6_address_range", NULL },
526 { IPSECDOI_ID_DER_ASN1_DN, "DER_ASN1_DN", NULL },
527 { IPSECDOI_ID_DER_ASN1_GN, "DER_ASN1_GN", NULL },
528 { IPSECDOI_ID_KEY_ID, "KEY_ID", NULL },
536 for (i = 0; i < ARRAYLEN(name_ipsecdoi_ident); i++)
537 if (name_ipsecdoi_ident[i].key == k)
538 return name_ipsecdoi_ident[i].str;
543 static struct ksmap name_oakley_attr[] = {
544 { OAKLEY_ATTR_ENC_ALG, "Encryption Algorithm", s_attr_isakmp_enc },
545 { OAKLEY_ATTR_HASH_ALG, "Hash Algorithm", s_attr_isakmp_hash },
546 { OAKLEY_ATTR_AUTH_METHOD, "Authentication Method", s_oakley_attr_method },
547 { OAKLEY_ATTR_GRP_DESC, "Group Description", s_attr_isakmp_desc },
548 { OAKLEY_ATTR_GRP_TYPE, "Group Type", s_attr_isakmp_group },
549 { OAKLEY_ATTR_GRP_PI, "Group Prime/Irreducible Polynomial", NULL },
550 { OAKLEY_ATTR_GRP_GEN_ONE, "Group Generator One", NULL },
551 { OAKLEY_ATTR_GRP_GEN_TWO, "Group Generator Two", NULL },
552 { OAKLEY_ATTR_GRP_CURVE_A, "Group Curve A", NULL },
553 { OAKLEY_ATTR_GRP_CURVE_B, "Group Curve B", NULL },
554 { OAKLEY_ATTR_SA_LD_TYPE, "Life Type", s_attr_isakmp_ltype },
555 { OAKLEY_ATTR_SA_LD, "Life Duration", NULL },
556 { OAKLEY_ATTR_PRF, "PRF", NULL },
557 { OAKLEY_ATTR_KEY_LEN, "Key Length", NULL },
558 { OAKLEY_ATTR_FIELD_SIZE, "Field Size", NULL },
559 { OAKLEY_ATTR_GRP_ORDER, "Group Order", NULL },
560 { OAKLEY_ATTR_BLOCK_SIZE, "Block Size", NULL },
561 { OAKLEY_ATTR_GSS_ID, "GSS-API endpoint name",NULL },
569 for (i = 0; i < ARRAYLEN(name_oakley_attr); i++)
570 if (name_oakley_attr[i].key == k)
571 return name_oakley_attr[i].str;
575 static struct ksmap name_attr_isakmp_enc[] = {
576 { OAKLEY_ATTR_ENC_ALG_DES, "DES-CBC", NULL },
577 { OAKLEY_ATTR_ENC_ALG_IDEA, "IDEA-CBC", NULL },
578 { OAKLEY_ATTR_ENC_ALG_BLOWFISH, "Blowfish-CBC", NULL },
579 { OAKLEY_ATTR_ENC_ALG_RC5, "RC5-R16-B64-CBC", NULL },
580 { OAKLEY_ATTR_ENC_ALG_3DES, "3DES-CBC", NULL },
581 { OAKLEY_ATTR_ENC_ALG_CAST, "CAST-CBC", NULL },
589 for (i = 0; i < ARRAYLEN(name_attr_isakmp_enc); i++)
590 if (name_attr_isakmp_enc[i].key == k)
591 return name_attr_isakmp_enc[i].str;
595 static struct ksmap name_attr_isakmp_hash[] = {
596 { OAKLEY_ATTR_HASH_ALG_MD5, "MD5", NULL },
597 { OAKLEY_ATTR_HASH_ALG_SHA, "SHA", NULL },
598 { OAKLEY_ATTR_HASH_ALG_TIGER, "Tiger", NULL },
602 s_attr_isakmp_hash(k)
606 for (i = 0; i < ARRAYLEN(name_attr_isakmp_hash); i++)
607 if (name_attr_isakmp_hash[i].key == k)
608 return name_attr_isakmp_hash[i].str;
612 static struct ksmap name_attr_isakmp_method[] = {
613 { OAKLEY_ATTR_AUTH_METHOD_PSKEY, "pre-shared key", NULL },
614 { OAKLEY_ATTR_AUTH_METHOD_DSSSIG, "DSS signatures", NULL },
615 { OAKLEY_ATTR_AUTH_METHOD_RSASIG, "RSA signatures", NULL },
616 { OAKLEY_ATTR_AUTH_METHOD_RSAENC, "Encryption with RSA", NULL },
617 { OAKLEY_ATTR_AUTH_METHOD_RSAREV, "Revised encryption with RSA", NULL },
618 { OAKLEY_ATTR_AUTH_METHOD_EGENC, "Encryption with El-Gamal", NULL },
619 { OAKLEY_ATTR_AUTH_METHOD_EGREV, "Revised encryption with El-Gamal", NULL },
620 { OAKLEY_ATTR_AUTH_METHOD_GSSAPI_KRB, "GSS-API on Kerberos 5", NULL },
622 { OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_I, "Hybrid DSS server", NULL },
623 { OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_I, "Hybrid RSA server", NULL },
624 { OAKLEY_ATTR_AUTH_METHOD_HYBRID_DSS_R, "Hybrid DSS client", NULL },
625 { OAKLEY_ATTR_AUTH_METHOD_HYBRID_RSA_R, "Hybrid RSA client", NULL },
630 s_oakley_attr_method(k)
634 for (i = 0; i < ARRAYLEN(name_attr_isakmp_method); i++)
635 if (name_attr_isakmp_method[i].key == k)
636 return name_attr_isakmp_method[i].str;
640 static struct ksmap name_attr_isakmp_desc[] = {
641 { OAKLEY_ATTR_GRP_DESC_MODP768, "768-bit MODP group", NULL },
642 { OAKLEY_ATTR_GRP_DESC_MODP1024, "1024-bit MODP group", NULL },
643 { OAKLEY_ATTR_GRP_DESC_EC2N155, "EC2N group on GP[2^155]", NULL },
644 { OAKLEY_ATTR_GRP_DESC_EC2N185, "EC2N group on GP[2^185]", NULL },
645 { OAKLEY_ATTR_GRP_DESC_MODP1536, "1536-bit MODP group", NULL },
646 { OAKLEY_ATTR_GRP_DESC_MODP2048, "2048-bit MODP group", NULL },
647 { OAKLEY_ATTR_GRP_DESC_MODP3072, "3072-bit MODP group", NULL },
648 { OAKLEY_ATTR_GRP_DESC_MODP4096, "4096-bit MODP group", NULL },
649 { OAKLEY_ATTR_GRP_DESC_MODP6144, "6144-bit MODP group", NULL },
650 { OAKLEY_ATTR_GRP_DESC_MODP8192, "8192-bit MODP group", NULL },
654 s_attr_isakmp_desc(k)
658 for (i = 0; i < ARRAYLEN(name_attr_isakmp_desc); i++)
659 if (name_attr_isakmp_desc[i].key == k)
660 return name_attr_isakmp_desc[i].str;
664 static struct ksmap name_attr_isakmp_group[] = {
665 { OAKLEY_ATTR_GRP_TYPE_MODP, "MODP", NULL },
666 { OAKLEY_ATTR_GRP_TYPE_ECP, "ECP", NULL },
667 { OAKLEY_ATTR_GRP_TYPE_EC2N, "EC2N", NULL },
671 s_attr_isakmp_group(k)
675 for (i = 0; i < ARRAYLEN(name_attr_isakmp_group); i++)
676 if (name_attr_isakmp_group[i].key == k)
677 return name_attr_isakmp_group[i].str;
681 static struct ksmap name_attr_isakmp_ltype[] = {
682 { OAKLEY_ATTR_SA_LD_TYPE_SEC, "seconds", NULL },
683 { OAKLEY_ATTR_SA_LD_TYPE_KB, "kilobytes", NULL },
687 s_attr_isakmp_ltype(k)
691 for (i = 0; i < ARRAYLEN(name_attr_isakmp_ltype); i++)
692 if (name_attr_isakmp_ltype[i].key == k)
693 return name_attr_isakmp_ltype[i].str;
698 s_oakley_attr_v(type, val)
702 for (i = 0; i < ARRAYLEN(name_oakley_attr); i++)
703 if (name_oakley_attr[i].key == type
704 && name_oakley_attr[i].f)
705 return (name_oakley_attr[i].f)(val);
709 /* netinet6/ipsec.h */
710 static struct ksmap name_ipsec_level[] = {
711 { IPSEC_LEVEL_USE, "use", NULL },
712 { IPSEC_LEVEL_REQUIRE, "require", NULL },
713 { IPSEC_LEVEL_UNIQUE, "unique", NULL },
721 for (i = 0; i < ARRAYLEN(name_ipsec_level); i++)
722 if (name_ipsec_level[i].key == k)
723 return name_ipsec_level[i].str;
727 static struct ksmap name_algclass[] = {
728 { algclass_ipsec_enc, "ipsec enc", s_ipsecdoi_trns_esp },
729 { algclass_ipsec_auth, "ipsec auth", s_ipsecdoi_trns_ah },
730 { algclass_ipsec_comp, "ipsec comp", s_ipsecdoi_trns_ipcomp },
731 { algclass_isakmp_enc, "isakmp enc", s_attr_isakmp_enc },
732 { algclass_isakmp_hash, "isakmp hash", s_attr_isakmp_hash },
733 { algclass_isakmp_dh, "isakmp dh", s_attr_isakmp_desc },
734 { algclass_isakmp_ameth, "isakmp auth method", s_oakley_attr_method },
742 for (i = 0; i < ARRAYLEN(name_algclass); i++)
743 if (name_algclass[i].key == k)
744 return name_algclass[i].str;
753 for (i = 0; i < ARRAYLEN(name_algclass); i++)
754 if (name_algclass[i].key == class
755 && name_algclass[i].f)
756 return (name_algclass[i].f)(n);
761 static struct ksmap name_pfkey_type[] = {
762 { SADB_GETSPI, "GETSPI", NULL },
763 { SADB_UPDATE, "UPDATE", NULL },
764 { SADB_ADD, "ADD", NULL },
765 { SADB_DELETE, "DELETE", NULL },
766 { SADB_GET, "GET", NULL },
767 { SADB_ACQUIRE, "ACQUIRE", NULL },
768 { SADB_REGISTER, "REGISTER", NULL },
769 { SADB_EXPIRE, "EXPIRE", NULL },
770 { SADB_FLUSH, "FLUSH", NULL },
771 { SADB_DUMP, "DUMP", NULL },
772 { SADB_X_PROMISC, "X_PRIMISC", NULL },
773 { SADB_X_PCHANGE, "X_PCHANGE", NULL },
774 { SADB_X_SPDUPDATE, "X_SPDUPDATE", NULL },
775 { SADB_X_SPDADD, "X_SPDADD", NULL },
776 { SADB_X_SPDDELETE, "X_SPDDELETE", NULL },
777 { SADB_X_SPDGET, "X_SPDGET", NULL },
778 { SADB_X_SPDACQUIRE, "X_SPDACQUIRE", NULL },
779 { SADB_X_SPDDUMP, "X_SPDDUMP", NULL },
780 { SADB_X_SPDFLUSH, "X_SPDFLUSH", NULL },
781 { SADB_X_SPDSETIDX, "X_SPDSETIDX", NULL },
782 { SADB_X_SPDEXPIRE, "X_SPDEXPIRE", NULL },
783 { SADB_X_SPDDELETE2, "X_SPDDELETE2", NULL },
785 { SADB_X_NAT_T_NEW_MAPPING, "X_NAT_T_NEW_MAPPING", NULL },
794 for (i = 0; i < ARRAYLEN(name_pfkey_type); i++)
795 if (name_pfkey_type[i].key == k)
796 return name_pfkey_type[i].str;
800 static struct ksmap name_pfkey_satype[] = {
801 { SADB_SATYPE_UNSPEC, "UNSPEC", NULL },
802 { SADB_SATYPE_AH, "AH", NULL },
803 { SADB_SATYPE_ESP, "ESP", NULL },
804 { SADB_SATYPE_RSVP, "RSVP", NULL },
805 { SADB_SATYPE_OSPFV2, "OSPFV2", NULL },
806 { SADB_SATYPE_RIPV2, "RIPV2", NULL },
807 { SADB_SATYPE_MIP, "MIP", NULL },
808 { SADB_X_SATYPE_IPCOMP, "IPCOMP", NULL },
816 for (i = 0; i < ARRAYLEN(name_pfkey_satype); i++)
817 if (name_pfkey_satype[i].key == k)
818 return name_pfkey_satype[i].str;
822 static struct ksmap name_direction[] = {
823 { IPSEC_DIR_INBOUND, "in", NULL },
824 { IPSEC_DIR_OUTBOUND, "out", NULL },
825 #ifdef HAVE_POLICY_FWD
826 { IPSEC_DIR_FWD, "fwd", NULL },
835 for (i = 0; i < ARRAYLEN(name_direction); i++)
836 if (name_direction[i].key == k)
837 return name_direction[i].str;
854 case IPSEC_ULPROTO_ANY:
876 case ISAKMP_ETYPE_NONE:
878 case ISAKMP_ETYPE_BASE:
880 case ISAKMP_ETYPE_IDENT:
882 case ISAKMP_ETYPE_AUTH:
884 case ISAKMP_ETYPE_AGG:
886 case ISAKMP_ETYPE_INFO:
888 case ISAKMP_ETYPE_QUICK:
890 case ISAKMP_ETYPE_NEWGRP:
892 case ISAKMP_ETYPE_ACKINFO:
905 case IDTYPE_USERFQDN: