| /* |
| * Copyright (C) 2013 Martin Willi |
| * Copyright (C) 2013 revosec AG |
| * |
| * This program is free software; you can redistribute it and/or modify it |
| * under the terms of the GNU General Public License as published by the |
| * Free Software Foundation; either version 2 of the License, or (at your |
| * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. |
| * |
| * This program is distributed in the hope that it will be useful, but |
| * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY |
| * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
| * for more details. |
| */ |
| |
| /** |
| * @defgroup kernel_wfp_compat kernel_wfp_compat |
| * @{ @ingroup kernel_wfp |
| */ |
| |
| #ifndef KERNEL_WFP_COMPAT_H_ |
| #define KERNEL_WFP_COMPAT_H_ |
| |
| #include <winsock2.h> |
| #include <windows.h> |
| #include <ipsectypes.h> |
| |
| /* MinGW defines CIPHERs incorrectly starting at 0 */ |
| #define IPSEC_CIPHER_TYPE_DES 1 |
| #define IPSEC_CIPHER_TYPE_3DES 2 |
| #define IPSEC_CIPHER_TYPE_AES_128 3 |
| #define IPSEC_CIPHER_TYPE_AES_192 4 |
| #define IPSEC_CIPHER_TYPE_AES_256 5 |
| #define IPSEC_CIPHER_TYPE_MAX 6 |
| |
| #include <fwpmtypes.h> |
| #include <fwpmu.h> |
| #undef interface |
| |
| /* MinGW defines TRANSFORMs incorrectly starting at 0 */ |
| #define IPSEC_TRANSFORM_AH 1 |
| #define IPSEC_TRANSFORM_ESP_AUTH 2 |
| #define IPSEC_TRANSFORM_ESP_CIPHER 3 |
| #define IPSEC_TRANSFORM_ESP_AUTH_AND_CIPHER 4 |
| #define IPSEC_TRANSFORM_ESP_AUTH_FW 5 |
| #define IPSEC_TRANSFORM_TYPE_MAX 6 |
| |
| /* missing in MinGW */ |
| enum { |
| FWPM_TUNNEL_FLAG_POINT_TO_POINT = (1<<0), |
| FWPM_TUNNEL_FLAG_ENABLE_VIRTUAL_IF_TUNNELING = (1<<1), |
| }; |
| |
| /* missing in MinGW */ |
| enum { |
| IPSEC_SA_DETAILS_UPDATE_TRAFFIC = (1<<0), |
| IPSEC_SA_DETAILS_UPDATE_UDP_ENCAPSULATION = (1<<1), |
| IPSEC_SA_BUNDLE_UPDATE_FLAGS = (1<<2), |
| IPSEC_SA_BUNDLE_UPDATE_NAP_CONTEXT = (1<<3), |
| IPSEC_SA_BUNDLE_UPDATE_KEY_MODULE_STATE = (1<<4), |
| IPSEC_SA_BUNDLE_UPDATE_PEER_V4_PRIVATE_ADDRESS = (1<<5), |
| IPSEC_SA_BUNDLE_UPDATE_MM_SA_ID = (1<<6), |
| }; |
| |
| /* missing in MinGW */ |
| enum { |
| FWPM_NET_EVENT_FLAG_IP_PROTOCOL_SET = (1<<0), |
| FWPM_NET_EVENT_FLAG_LOCAL_ADDR_SET = (1<<1), |
| FWPM_NET_EVENT_FLAG_REMOTE_ADDR_SET = (1<<2), |
| FWPM_NET_EVENT_FLAG_LOCAL_PORT_SET = (1<<3), |
| FWPM_NET_EVENT_FLAG_REMOTE_PORT_SET = (1<<4), |
| FWPM_NET_EVENT_FLAG_APP_ID_SET = (1<<5), |
| FWPM_NET_EVENT_FLAG_USER_ID_SET = (1<<6), |
| FWPM_NET_EVENT_FLAG_SCOPE_ID_SET = (1<<7), |
| FWPM_NET_EVENT_FLAG_IP_VERSION_SET = (1<<8), |
| FWPM_NET_EVENT_FLAG_REAUTH_REASON_SET = (1<<9), |
| }; |
| |
| /* missing in MinGW */ |
| enum { |
| FWPM_FILTER_FLAG_PERSISTENT = (1<<0), |
| FWPM_FILTER_FLAG_BOOTTIME = (1<<1), |
| FWPM_FILTER_FLAG_HAS_PROVIDER_CONTEXT = (1<<2), |
| FWPM_FILTER_FLAG_CLEAR_ACTION_RIGHT = (1<<3), |
| FWPM_FILTER_FLAG_PERMIT_IF_CALLOUT_UNREGISTERED = (1<<4), |
| FWPM_FILTER_FLAG_DISABLED = (1<<5), |
| }; |
| |
| /* missing in MinGW */ |
| enum { |
| IPSEC_SA_BUNDLE_FLAG_ND_SECURE = (1<< 0), |
| IPSEC_SA_BUNDLE_FLAG_ND_BOUNDARY = (1<< 1), |
| IPSEC_SA_BUNDLE_FLAG_ND_PEER_NAT_BOUNDARY = (1<< 2), |
| IPSEC_SA_BUNDLE_FLAG_GUARANTEE_ENCRYPTION = (1<< 3), |
| IPSEC_SA_BUNDLE_FLAG_NLB = (1<< 4), |
| IPSEC_SA_BUNDLE_FLAG_NO_MACHINE_LUID_VERIFY = (1<< 5), |
| IPSEC_SA_BUNDLE_FLAG_NO_IMPERSONATION_LUID_VERIFY = (1<< 6), |
| IPSEC_SA_BUNDLE_FLAG_NO_EXPLICIT_CRED_MATCH = (1<< 7), |
| IPSEC_SA_BUNDLE_FLAG_ALLOW_NULL_TARGET_NAME_MATCH = (1<< 9), |
| IPSEC_SA_BUNDLE_FLAG_CLEAR_DF_ON_TUNNEL = (1<<10), |
| IPSEC_SA_BUNDLE_FLAG_ASSUME_UDP_CONTEXT_OUTBOUND = (1<<11), |
| IPSEC_SA_BUNDLE_FLAG_ND_PEER_BOUNDARY = (1<<12), |
| IPSEC_SA_BUNDLE_FLAG_SUPPRESS_DUPLICATE_DELETION = (1<<13), |
| IPSEC_SA_BUNDLE_FLAG_PEER_SUPPORTS_GUARANTEE_ENCRYPTION = (1<<14), |
| IPSEC_SA_BUNDLE_FLAG_FORCE_INBOUND_CONNECTIONS = (1<<15), |
| IPSEC_SA_BUNDLE_FLAG_FORCE_OUTBOUND_CONNECTIONS = (1<<16), |
| IPSEC_SA_BUNDLE_FLAG_FORWARD_PATH_INITIATOR = (1<<17), |
| }; |
| |
| /* missing in some MinGW versions */ |
| extern const GUID FWPM_CONDITION_IP_REMOTE_ADDRESS; |
| extern const GUID FWPM_CONDITION_IP_LOCAL_ADDRESS; |
| extern const GUID FWPM_CONDITION_IP_SOURCE_ADDRESS; |
| extern const GUID FWPM_CONDITION_IP_DESTINATION_ADDRESS; |
| extern const GUID FWPM_CONDITION_IP_LOCAL_PORT; |
| extern const GUID FWPM_CONDITION_IP_REMOTE_PORT; |
| extern const GUID FWPM_CONDITION_IP_PROTOCOL; |
| #ifndef FWPM_CONDITION_ICMP_TYPE |
| # define FWPM_CONDITION_ICMP_TYPE FWPM_CONDITION_IP_LOCAL_PORT |
| #endif |
| #ifndef FWPM_CONDITION_ICMP_CODE |
| # define FWPM_CONDITION_ICMP_CODE FWPM_CONDITION_IP_REMOTE_PORT |
| #endif |
| extern const GUID FWPM_LAYER_INBOUND_TRANSPORT_V4; |
| extern const GUID FWPM_LAYER_INBOUND_TRANSPORT_V6; |
| extern const GUID FWPM_LAYER_OUTBOUND_TRANSPORT_V4; |
| extern const GUID FWPM_LAYER_OUTBOUND_TRANSPORT_V6; |
| extern const GUID FWPM_LAYER_IPFORWARD_V4; |
| extern const GUID FWPM_LAYER_IPFORWARD_V6; |
| extern const GUID FWPM_LAYER_ALE_AUTH_CONNECT_V4; |
| extern const GUID FWPM_LAYER_ALE_AUTH_CONNECT_V6; |
| extern const GUID FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4; |
| extern const GUID FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6; |
| extern const GUID FWPM_SUBLAYER_IPSEC_TUNNEL; |
| extern const GUID FWPM_SUBLAYER_IPSEC_FORWARD_OUTBOUND_TUNNEL; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_TRANSPORT_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_TRANSPORT_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TUNNEL_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_OUTBOUND_TUNNEL_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_FORWARD_INBOUND_TUNNEL_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_FORWARD_INBOUND_TUNNEL_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_FORWARD_OUTBOUND_TUNNEL_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_FORWARD_OUTBOUND_TUNNEL_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_ALE_CONNECT_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_ALE_CONNECT_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_ALE_ACCEPT_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_ALE_ACCEPT_V6; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_INITIATE_SECURE_V4; |
| extern const GUID FWPM_CALLOUT_IPSEC_INBOUND_INITIATE_SECURE_V6; |
| |
| /* integrity config, missing in some MinGW versions */ |
| #ifndef IPSEC_AUTH_CONFIG_HMAC_MD5_96 |
| enum { |
| IPSEC_AUTH_CONFIG_HMAC_MD5_96 = 0, |
| IPSEC_AUTH_CONFIG_HMAC_SHA_1_96, |
| IPSEC_AUTH_CONFIG_HMAC_SHA_256_128, |
| IPSEC_AUTH_CONFIG_GCM_AES_128, |
| IPSEC_AUTH_CONFIG_GCM_AES_192, |
| IPSEC_AUTH_CONFIG_GCM_AES_256, |
| IPSEC_AUTH_CONFIG_MAX |
| }; |
| #define IPSEC_AUTH_TRANSFORM_ID_HMAC_MD5_96 { \ |
| IPSEC_AUTH_MD5, IPSEC_AUTH_CONFIG_HMAC_MD5_96 } |
| #define IPSEC_AUTH_TRANSFORM_ID_HMAC_SHA_1_96 { \ |
| IPSEC_AUTH_SHA_1, IPSEC_AUTH_CONFIG_HMAC_SHA_1_96 } |
| #define IPSEC_AUTH_TRANSFORM_ID_HMAC_SHA_256_128 { \ |
| IPSEC_AUTH_SHA_256, IPSEC_AUTH_CONFIG_HMAC_SHA_256_128 } |
| #define IPSEC_AUTH_TRANSFORM_ID_GCM_AES_128 { \ |
| IPSEC_AUTH_AES_128, IPSEC_AUTH_CONFIG_GCM_AES_128 } |
| #define IPSEC_AUTH_TRANSFORM_ID_GCM_AES_192 { \ |
| IPSEC_AUTH_AES_192, IPSEC_AUTH_CONFIG_GCM_AES_192 } |
| #define IPSEC_AUTH_TRANSFORM_ID_GCM_AES_256 { \ |
| IPSEC_AUTH_AES_256, IPSEC_AUTH_CONFIG_GCM_AES_256 } |
| #endif |
| |
| /* encryption config, missing in some MinGW versions */ |
| #ifndef IPSEC_CIPHER_CONFIG_CBC_DES |
| enum { |
| IPSEC_CIPHER_CONFIG_CBC_DES = 1, |
| IPSEC_CIPHER_CONFIG_CBC_3DES, |
| IPSEC_CIPHER_CONFIG_CBC_AES_128, |
| IPSEC_CIPHER_CONFIG_CBC_AES_192, |
| IPSEC_CIPHER_CONFIG_CBC_AES_256, |
| IPSEC_CIPHER_CONFIG_GCM_AES_128, |
| IPSEC_CIPHER_CONFIG_GCM_AES_192, |
| IPSEC_CIPHER_CONFIG_GCM_AES_256, |
| IPSEC_CIPHER_CONFIG_MAX |
| }; |
| #define IPSEC_CIPHER_TRANSFORM_ID_GCM_AES_128 { \ |
| IPSEC_CIPHER_TYPE_AES_128, IPSEC_CIPHER_CONFIG_GCM_AES_128 } |
| #define IPSEC_CIPHER_TRANSFORM_ID_GCM_AES_192 { \ |
| IPSEC_CIPHER_TYPE_AES_192, IPSEC_CIPHER_CONFIG_GCM_AES_192 } |
| #define IPSEC_CIPHER_TRANSFORM_ID_GCM_AES_256 { \ |
| IPSEC_CIPHER_TYPE_AES_256, IPSEC_CIPHER_CONFIG_GCM_AES_256 } |
| #define IPSEC_CIPHER_TRANSFORM_ID_CBC_DES { \ |
| IPSEC_CIPHER_TYPE_DES, IPSEC_CIPHER_CONFIG_CBC_DES } |
| #define IPSEC_CIPHER_TRANSFORM_ID_CBC_3DES { \ |
| IPSEC_CIPHER_TYPE_3DES, IPSEC_CIPHER_CONFIG_CBC_3DES } |
| #define IPSEC_CIPHER_TRANSFORM_ID_AES_128 { \ |
| IPSEC_CIPHER_TYPE_AES_128, IPSEC_CIPHER_CONFIG_CBC_AES_128 } |
| #define IPSEC_CIPHER_TRANSFORM_ID_AES_192 { \ |
| IPSEC_CIPHER_TYPE_AES_192, IPSEC_CIPHER_CONFIG_CBC_AES_192 } |
| #define IPSEC_CIPHER_TRANSFORM_ID_AES_256 { \ |
| IPSEC_CIPHER_TYPE_AES_256, IPSEC_CIPHER_CONFIG_CBC_AES_256 } |
| #endif |
| |
| DWORD WINAPI FwpmIPsecTunnelAdd0(HANDLE, UINT32, |
| const FWPM_PROVIDER_CONTEXT0*, const FWPM_PROVIDER_CONTEXT0*, UINT32, |
| const FWPM_FILTER_CONDITION0*, PSECURITY_DESCRIPTOR); |
| |
| #endif /** KERNEL_WFP_COMPAT_H_ @}*/ |
