summaryrefslogtreecommitdiff
path: root/src/charon/config/child_cfg.h
diff options
context:
space:
mode:
authorRene Mayrhofer <rene@mayrhofer.eu.org>2008-12-05 16:44:41 +0000
committerRene Mayrhofer <rene@mayrhofer.eu.org>2008-12-05 16:44:41 +0000
commit2db1ef4ac8928944958712923b9c89c263a337d2 (patch)
tree700043d9d97b7e7ba344b448918728af0a8be8d1 /src/charon/config/child_cfg.h
parent5dc75410286b0e3a16845b44dd696ba0f40df573 (diff)
downloadvyos-strongswan-2db1ef4ac8928944958712923b9c89c263a337d2.tar.gz
vyos-strongswan-2db1ef4ac8928944958712923b9c89c263a337d2.zip
- Updated to new upstream.
Diffstat (limited to 'src/charon/config/child_cfg.h')
-rw-r--r--src/charon/config/child_cfg.h41
1 files changed, 38 insertions, 3 deletions
diff --git a/src/charon/config/child_cfg.h b/src/charon/config/child_cfg.h
index 83d6cafe6..787324dca 100644
--- a/src/charon/config/child_cfg.h
+++ b/src/charon/config/child_cfg.h
@@ -14,7 +14,7 @@
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*
- * $Id: child_cfg.h 4358 2008-09-25 13:56:23Z tobias $
+ * $Id: child_cfg.h 4611 2008-11-11 06:29:25Z andreas $
*/
/**
@@ -154,6 +154,17 @@ struct child_cfg_t {
host_t *host);
/**
+ * Checks [single] traffic selectors for equality
+ *
+ * @param local TRUE for TS on local side, FALSE for remote
+ * @param ts list with single traffic selector to compare with
+ * @param host address to use for narrowing "dynamic" TS', or NULL
+ * @return TRUE if TS are equal, FALSE otherwise
+ */
+ bool (*equal_traffic_selectors)(child_cfg_t *this, bool local,
+ linked_list_t *ts_list, host_t *host);
+
+ /**
* Get the updown script to run for the CHILD_SA.
*
* @return path to updown script
@@ -219,6 +230,31 @@ struct child_cfg_t {
* FALSE, otherwise
*/
bool (*use_ipcomp)(child_cfg_t *this);
+
+ /**
+ * Sets two options needed for Mobile IPv6 interoperability
+ *
+ * @proxy_mode use IPsec transport proxy mode (default FALSE)
+ * @install_policy install IPsec kernel policies (default TRUE)
+ */
+ void (*set_mipv6_options)(child_cfg_t *this, bool proxy_mod,
+ bool install_policy);
+
+ /**
+ * Check whether IPsec transport SA should be set up in proxy mode
+ *
+ * @return TRUE, if proxy mode should be used
+ * FALSE, otherwise
+ */
+ bool (*use_proxy_mode)(child_cfg_t *this);
+
+ /**
+ * Check whether IPsec policies should be installed in the kernel
+ *
+ * @return TRUE, if IPsec kernel policies should be installed
+ * FALSE, otherwise
+ */
+ bool (*install_policy)(child_cfg_t *this);
/**
* Increase the reference count.
@@ -261,7 +297,6 @@ struct child_cfg_t {
child_cfg_t *child_cfg_create(char *name, u_int32_t lifetime,
u_int32_t rekeytime, u_int32_t jitter,
char *updown, bool hostaccess, ipsec_mode_t mode,
- action_t dpd_action, action_t close_action,
- bool ipcomp);
+ action_t dpd_action, action_t close_action, bool ipcomp);
#endif /* CHILD_CFG_H_ @} */