able/windows-nt
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
windows-nt/Source/XPSP1/NT/net/inc/winipsec.h

1237 lines
22 KiB
C
Raw Normal View History

Add source files
2020-09-26 03:20:57 -05:00
/*++
Copyright (c) 1999 Microsoft Corporation
Module Name:
winipsec.h
Abstract:
Header file for IPSec WINAPIs.
Author:
krishnaG 21-September-1999
Environment:
User Level: Win32
Revision History:
abhisheV 21-September-1999 Added the structures.
--*/
#ifndef _WINIPSEC_
#define _WINIPSEC_
#ifdef __cplusplus
extern "C" {
#endif
#define PERSIST_SPD_OBJECT (ULONG) 0x00000001
#define IP_ADDRESS_ME (ULONG) 0x00000000
#define IP_ADDRESS_MASK_NONE (ULONG) 0xFFFFFFFF
#define SUBNET_ADDRESS_ANY (ULONG) 0x00000000
#define SUBNET_MASK_ANY (ULONG) 0x00000000
#define FILTER_NATURE_PASS_THRU 0x00000001
#define FILTER_NATURE_BLOCKING 0x00000002
#define FILTER_DIRECTION_INBOUND 0x00000004
#define FILTER_DIRECTION_OUTBOUND 0x00000008
#define ENUM_GENERIC_FILTERS 0x00000001
#define ENUM_SELECT_SPECIFIC_FILTERS 0x00000002
#define ENUM_SPECIFIC_FILTERS 0x00000004
//
// Policy flags.
//
#define IPSEC_MM_POLICY_ENABLE_DIAGNOSTICS 0x00000001
#define IPSEC_MM_POLICY_DEFAULT_POLICY 0x00000002
#define IPSEC_MM_POLICY_ON_NO_MATCH 0x00000004
#define IPSEC_MM_POLICY_DISABLE_CRL 0x00000008
#define IPSEC_MM_POLICY_DISABLE_NEGOTIATE 0x00000010
#define IPSEC_QM_POLICY_TRANSPORT_MODE 0x00000000
#define IPSEC_QM_POLICY_TUNNEL_MODE 0x00000001
#define IPSEC_QM_POLICY_DEFAULT_POLICY 0x00000002
#define IPSEC_QM_POLICY_ALLOW_SOFT 0x00000004
#define IPSEC_QM_POLICY_ON_NO_MATCH 0x00000008
#define IPSEC_QM_POLICY_DISABLE_NEGOTIATE 0x00000010
#define IPSEC_MM_AUTH_DEFAULT_AUTH 0x00000001
#define IPSEC_MM_AUTH_ON_NO_MATCH 0x00000002
#define RETURN_DEFAULTS_ON_NO_MATCH 0x00000001
//
// Delete MM SA flags.
//
#define IPSEC_MM_DELETE_ASSOCIATED_QMS 0x00000001
#define IPSEC_SA_TUNNEL 0x00000001
#define IPSEC_SA_REPLAY 0x00000002
#define IPSEC_SA_DELETE 0x00000004
#define IPSEC_SA_MANUAL 0x00000010
#define IPSEC_SA_MULTICAST_MIRROR 0x00000020
#define IPSEC_SA_INBOUND 0x00000040
#define IPSEC_SA_OUTBOUND 0x00000080
#define IPSEC_SA_DISABLE_IDLE_OUT 0x00000100
#define IPSEC_SA_DISABLE_ANTI_REPLAY_CHECK 0x00000200
#define IPSEC_SA_DISABLE_LIFETIME_CHECK 0x00000400
//
// Bounds for number of offers
//
#define IPSEC_MAX_MM_OFFERS 20
#define IPSEC_MAX_QM_OFFERS 50
typedef enum _ADDR_TYPE {
IP_ADDR_UNIQUE = 1,
IP_ADDR_SUBNET,
IP_ADDR_INTERFACE,
} ADDR_TYPE, * PADDR_TYPE;
typedef struct _ADDR {
ADDR_TYPE AddrType;
ULONG uIpAddr;
ULONG uSubNetMask;
GUID gInterfaceID;
} ADDR, * PADDR;
typedef enum _PROTOCOL_TYPE {
PROTOCOL_UNIQUE = 1,
} PROTOCOL_TYPE, * PPROTOCOL_TYPE;
typedef struct _PROTOCOL {
PROTOCOL_TYPE ProtocolType;
DWORD dwProtocol;
} PROTOCOL, * PPROTOCOL;
typedef enum _PORT_TYPE {
PORT_UNIQUE = 1,
} PORT_TYPE, * PPORT_TYPE;
typedef struct _PORT {
PORT_TYPE PortType;
WORD wPort;
} PORT, * PPORT;
typedef enum _IF_TYPE {
INTERFACE_TYPE_ALL = 1,
INTERFACE_TYPE_LAN,
INTERFACE_TYPE_DIALUP,
INTERFACE_TYPE_MAX
} IF_TYPE, * PIF_TYPE;
typedef enum _FILTER_FLAG {
PASS_THRU = 1,
BLOCKING,
NEGOTIATE_SECURITY,
FILTER_FLAG_MAX
} FILTER_FLAG, * PFILTER_FLAG;
typedef struct _TRANSPORT_FILTER {
GUID gFilterID;
LPWSTR pszFilterName;
IF_TYPE InterfaceType;
BOOL bCreateMirror;
DWORD dwFlags;
ADDR SrcAddr;
ADDR DesAddr;
PROTOCOL Protocol;
PORT SrcPort;
PORT DesPort;
FILTER_FLAG InboundFilterFlag;
FILTER_FLAG OutboundFilterFlag;
DWORD dwDirection;
DWORD dwWeight;
GUID gPolicyID;
} TRANSPORT_FILTER, * PTRANSPORT_FILTER;
//
// Maximum number of transport filters that can be enumerated
// by SPD at a time.
//
#define MAX_TRANSPORTFILTER_ENUM_COUNT 1000
typedef struct _TUNNEL_FILTER {
GUID gFilterID;
LPWSTR pszFilterName;
IF_TYPE InterfaceType;
BOOL bCreateMirror;
DWORD dwFlags;
ADDR SrcAddr;
ADDR DesAddr;
PROTOCOL Protocol;
PORT SrcPort;
PORT DesPort;
ADDR SrcTunnelAddr;
ADDR DesTunnelAddr;
FILTER_FLAG InboundFilterFlag;
FILTER_FLAG OutboundFilterFlag;
DWORD dwDirection;
DWORD dwWeight;
GUID gPolicyID;
} TUNNEL_FILTER, * PTUNNEL_FILTER;
//
// Maximum number of tunnel filters that can be enumerated
// by SPD at a time.
//
#define MAX_TUNNELFILTER_ENUM_COUNT 1000
typedef struct _MM_FILTER {
GUID gFilterID;
LPWSTR pszFilterName;
IF_TYPE InterfaceType;
BOOL bCreateMirror;
DWORD dwFlags;
ADDR SrcAddr;
ADDR DesAddr;
DWORD dwDirection;
DWORD dwWeight;
GUID gMMAuthID;
GUID gPolicyID;
} MM_FILTER, * PMM_FILTER;
//
// Maximum number of main mode filters that can be enumerated
// by SPD at a time.
//
#define MAX_MMFILTER_ENUM_COUNT 1000
//
// Common Structures for Main Mode and Quick Mode Policies.
//
//
// IPSEC DOI ESP algorithms supported by SPD.
//
typedef enum _IPSEC_DOI_ESP_ALGO {
IPSEC_DOI_ESP_NONE = 0,
IPSEC_DOI_ESP_DES,
IPSEC_DOI_ESP_3_DES = 3,
IPSEC_DOI_ESP_MAX
} IPSEC_DOI_ESP_ALGO, * PIPSEC_DOI_ESP_ALGO;
//
// IPSEC DOI AH algorithms supported by SPD.
//
typedef enum _IPSEC_DOI_AH_ALGO {
IPSEC_DOI_AH_NONE = 0,
IPSEC_DOI_AH_MD5,
IPSEC_DOI_AH_SHA1,
IPSEC_DOI_AH_MAX
} IPSEC_DOI_AH_ALGO, * PIPSEC_DOI_AH_ALGO;
//
// Types of IPSEC Operations supported by SPD.
//
typedef enum _IPSEC_OPERATION {
NONE = 0,
AUTHENTICATION,
ENCRYPTION,
COMPRESSION,
SA_DELETE
} IPSEC_OPERATION, * PIPSEC_OPERATION;
//
// HMAC authentication algorithm to use with IPSEC
// Encryption operation.
//
typedef enum _HMAC_AH_ALGO {
HMAC_AH_NONE = 0,
HMAC_AH_MD5,
HMAC_AH_SHA1,
HMAC_AH_MAX
} HMAC_AH_ALGO, * PHMAC_AH_ALGO;
//
// Key Lifetime structure.
//
typedef struct _KEY_LIFETIME {
ULONG uKeyExpirationTime;
ULONG uKeyExpirationKBytes;
} KEY_LIFETIME, * PKEY_LIFETIME;
//
// Main mode policy structures.
//
//
// Main mode authentication algorithms supported by SPD.
//
typedef enum _MM_AUTH_ENUM {
IKE_PRESHARED_KEY = 1,
IKE_DSS_SIGNATURE,
IKE_RSA_SIGNATURE,
IKE_RSA_ENCRYPTION,
IKE_SSPI
} MM_AUTH_ENUM, * PMM_AUTH_ENUM;
//
// Main mode authentication information structure.
//
typedef struct _IPSEC_MM_AUTH_INFO {
MM_AUTH_ENUM AuthMethod;
DWORD dwAuthInfoSize;
#ifdef __midl
[size_is(dwAuthInfoSize)] LPBYTE pAuthInfo;
#else
LPBYTE pAuthInfo;
#endif
} IPSEC_MM_AUTH_INFO, * PIPSEC_MM_AUTH_INFO;
//
// Main mode authentication methods.
//
typedef struct _MM_AUTH_METHODS {
GUID gMMAuthID;
DWORD dwFlags;
DWORD dwNumAuthInfos;
#ifdef __midl
[size_is(dwNumAuthInfos)] PIPSEC_MM_AUTH_INFO pAuthenticationInfo;
#else
PIPSEC_MM_AUTH_INFO pAuthenticationInfo;
#endif
} MM_AUTH_METHODS, * PMM_AUTH_METHODS;
//
// Maximum number of main mode auth methods that can be enumerated
// by SPD at a time.
//
#define MAX_MMAUTH_ENUM_COUNT 1000
//
// Main mode algorithm structure.
//
typedef struct _IPSEC_MM_ALGO {
ULONG uAlgoIdentifier;
ULONG uAlgoKeyLen;
ULONG uAlgoRounds;
} IPSEC_MM_ALGO, * PIPSEC_MM_ALGO;
//
// Main mode policy offer structure.
//
typedef struct _IPSEC_MM_OFFER {
KEY_LIFETIME Lifetime;
DWORD dwFlags;
DWORD dwQuickModeLimit;
DWORD dwDHGroup;
IPSEC_MM_ALGO EncryptionAlgorithm;
IPSEC_MM_ALGO HashingAlgorithm;
} IPSEC_MM_OFFER, * PIPSEC_MM_OFFER;
//
// Defines for DH groups.
//
#define DH_GROUP_1 0x00000001 // For Diffe Hellman group 1.
#define DH_GROUP_2 0x00000002 // For Diffe Hellman group 2.
//
// Default Main Mode key expiration time.
//
#define DEFAULT_MM_KEY_EXPIRATION_TIME 480*60 // 8 hours expressed in seconds.
//
// Maximum number of main mode policies that can be enumerated
// by SPD at a time.
//
#define MAX_MMPOLICY_ENUM_COUNT 10
//
// Main mode policy structure.
//
typedef struct _IPSEC_MM_POLICY {
GUID gPolicyID;
LPWSTR pszPolicyName;
DWORD dwFlags;
ULONG uSoftSAExpirationTime;
DWORD dwOfferCount;
#ifdef __midl
[size_is(dwOfferCount)] PIPSEC_MM_OFFER pOffers;
#else
PIPSEC_MM_OFFER pOffers;
#endif
} IPSEC_MM_POLICY, * PIPSEC_MM_POLICY;
//
// Quick mode policy structures.
//
typedef DWORD IPSEC_QM_SPI, * PIPSEC_QM_SPI;
//
// Quick mode algorithm structure.
//
typedef struct _IPSEC_QM_ALGO {
IPSEC_OPERATION Operation;
ULONG uAlgoIdentifier;
HMAC_AH_ALGO uSecAlgoIdentifier;
ULONG uAlgoKeyLen;
ULONG uSecAlgoKeyLen;
ULONG uAlgoRounds;
IPSEC_QM_SPI MySpi;
IPSEC_QM_SPI PeerSpi;
} IPSEC_QM_ALGO, * PIPSEC_QM_ALGO;
//
// Maximum number of quick mode algorithms in
// a quick mode policy offer.
//
#define QM_MAX_ALGOS 2
//
// Quick mode policy offer structure.
//
typedef struct _IPSEC_QM_OFFER {
KEY_LIFETIME Lifetime;
DWORD dwFlags;
BOOL bPFSRequired;
DWORD dwPFSGroup;
DWORD dwNumAlgos;
IPSEC_QM_ALGO Algos[QM_MAX_ALGOS];
} IPSEC_QM_OFFER, * PIPSEC_QM_OFFER;
//
// Defines for PFS groups.
//
#define PFS_GROUP_NONE 0x00000000 // If PFS is not required.
#define PFS_GROUP_1 0x00000001 // For Diffe Hellman group 1 PFS.
#define PFS_GROUP_2 0x00000002 // For Diffe Hellman group 2 PFS.
#define PFS_GROUP_MM 0x10000000 // Use group negotiated in MM
//
// Default Quick Mode key expiration time.
//
#define DEFAULT_QM_KEY_EXPIRATION_TIME 60*60 // 1 hour expressed in seconds.
//
// Default Quick Mode key expiration kbytes.
//
#define DEFAULT_QM_KEY_EXPIRATION_KBYTES 100*1000 // 100 MB expressed in KB.
//
// Maximum number of quick mode policies that can be enumerated
// by SPD at a time.
//
#define MAX_QMPOLICY_ENUM_COUNT 10
//
// Quick mode policy structure.
//
typedef struct _IPSEC_QM_POLICY {
GUID gPolicyID;
LPWSTR pszPolicyName;
DWORD dwFlags;
DWORD dwOfferCount;
#ifdef __midl
[size_is(dwOfferCount)] PIPSEC_QM_OFFER pOffers;
#else
PIPSEC_QM_OFFER pOffers;
#endif
} IPSEC_QM_POLICY, * PIPSEC_QM_POLICY;
//
// IKE structures.
//
typedef struct _IKE_STATISTICS {
DWORD dwActiveAcquire;
DWORD dwActiveReceive;
DWORD dwAcquireFail;
DWORD dwReceiveFail;
DWORD dwSendFail;
DWORD dwAcquireHeapSize;
DWORD dwReceiveHeapSize;
DWORD dwNegotiationFailures;
DWORD dwAuthenticationFailures;
DWORD dwInvalidCookiesReceived;
DWORD dwTotalAcquire;
DWORD dwTotalGetSpi;
DWORD dwTotalKeyAdd;
DWORD dwTotalKeyUpdate;
DWORD dwGetSpiFail;
DWORD dwKeyAddFail;
DWORD dwKeyUpdateFail;
DWORD dwIsadbListSize;
DWORD dwConnListSize;
DWORD dwOakleyMainModes;
DWORD dwOakleyQuickModes;
DWORD dwSoftAssociations;
DWORD dwInvalidPacketsReceived;
} IKE_STATISTICS, * PIKE_STATISTICS;
typedef LARGE_INTEGER IKE_COOKIE, * PIKE_COOKIE;
typedef struct _IKE_COOKIE_PAIR {
IKE_COOKIE Initiator;
IKE_COOKIE Responder;
} IKE_COOKIE_PAIR, * PIKE_COOKIE_PAIR;
typedef struct _IPSEC_BYTE_BLOB {
DWORD dwSize;
#ifdef __midl
[size_is(dwSize)] LPBYTE pBlob;
#else
LPBYTE pBlob;
#endif
} IPSEC_BYTE_BLOB, * PIPSEC_BYTE_BLOB;
typedef struct _IPSEC_MM_SA {
GUID gMMPolicyID;
IPSEC_MM_OFFER SelectedMMOffer;
MM_AUTH_ENUM MMAuthEnum;
IKE_COOKIE_PAIR MMSpi;
ADDR Me;
IPSEC_BYTE_BLOB MyId;
IPSEC_BYTE_BLOB MyCertificateChain;
ADDR Peer;
IPSEC_BYTE_BLOB PeerId;
IPSEC_BYTE_BLOB PeerCertificateChain;
DWORD dwFlags;
} IPSEC_MM_SA, * PIPSEC_MM_SA;
typedef enum _QM_FILTER_TYPE {
QM_TRANSPORT_FILTER = 1,
QM_TUNNEL_FILTER
} QM_FILTER_TYPE, * PQM_FILTER_TYPE;
typedef struct _IPSEC_QM_FILTER {
QM_FILTER_TYPE QMFilterType;
ADDR SrcAddr;
ADDR DesAddr;
PROTOCOL Protocol;
PORT SrcPort;
PORT DesPort;
ADDR MyTunnelEndpt;
ADDR PeerTunnelEndpt;
DWORD dwFlags;
} IPSEC_QM_FILTER, * PIPSEC_QM_FILTER;
typedef struct _IPSEC_QM_SA {
GUID gQMPolicyID;
IPSEC_QM_OFFER SelectedQMOffer;
GUID gQMFilterID;
IPSEC_QM_FILTER IpsecQMFilter;
IKE_COOKIE_PAIR MMSpi;
} IPSEC_QM_SA, * PIPSEC_QM_SA;
#define MAX_QMSA_ENUM_COUNT 1000
typedef enum _SA_FAIL_MODE {
MAIN_MODE = 1,
QUICK_MODE,
} SA_FAIL_MODE, * PSA_FAIL_MODE;
typedef enum _SA_FAIL_POINT {
FAIL_POINT_ME = 1,
FAIL_POINT_PEER,
} SA_FAIL_POINT, * PSA_FAIL_POINT;
typedef struct _SA_NEGOTIATION_STATUS_INFO {
SA_FAIL_MODE FailMode;
SA_FAIL_POINT FailPoint;
DWORD dwError;
} SA_NEGOTIATION_STATUS_INFO, * PSA_NEGOTIATION_STATUS_INFO;
//
// IPSec structures.
//
typedef struct _IPSEC_STATISTICS {
DWORD dwNumActiveAssociations;
DWORD dwNumOffloadedSAs;
DWORD dwNumPendingKeyOps;
DWORD dwNumKeyAdditions;
DWORD dwNumKeyDeletions;
DWORD dwNumReKeys;
DWORD dwNumActiveTunnels;
DWORD dwNumBadSPIPackets;
DWORD dwNumPacketsNotDecrypted;
DWORD dwNumPacketsNotAuthenticated;
DWORD dwNumPacketsWithReplayDetection;
ULARGE_INTEGER uConfidentialBytesSent;
ULARGE_INTEGER uConfidentialBytesReceived;
ULARGE_INTEGER uAuthenticatedBytesSent;
ULARGE_INTEGER uAuthenticatedBytesReceived;
ULARGE_INTEGER uTransportBytesSent;
ULARGE_INTEGER uTransportBytesReceived;
ULARGE_INTEGER uBytesSentInTunnels;
ULARGE_INTEGER uBytesReceivedInTunnels;
ULARGE_INTEGER uOffloadedBytesSent;
ULARGE_INTEGER uOffloadedBytesReceived;
} IPSEC_STATISTICS, * PIPSEC_STATISTICS;
typedef struct _IPSEC_INTERFACE_INFO {
GUID gInterfaceID;
DWORD dwIndex;
LPWSTR pszInterfaceName;
LPWSTR pszDeviceName;
DWORD dwInterfaceType;
ULONG uIpAddr;
} IPSEC_INTERFACE_INFO, * PIPSEC_INTERFACE_INFO;
//
// If dwInterfaceType is MIB_IF_TYPE_ETHERNET or MIB_IF_TYPE_FDDI
// or MIB_IF_TYPE_TOKENRING then its a LAN interface.
// If dwInterfaceType is MIB_IF_TYPE_PPP or MIB_IF_TYPE_SLIP
// then its a WAN/DIALUP interface.
//
#define MAX_INTERFACE_ENUM_COUNT 100
typedef struct _Record {
DWORD SrcIpAddress;
DWORD DesIpAddress;
}RECORD, *PRECORD;
//
// IPSEC SPD APIs.
//
DWORD
WINAPI
SPDApiBufferAllocate(
DWORD dwByteCount,
LPVOID * ppBuffer
);
VOID
WINAPI
SPDApiBufferFree(
LPVOID pBuffer
);
DWORD
WINAPI
AddTransportFilter(
LPWSTR pServerName,
DWORD dwFlags,
PTRANSPORT_FILTER pTransportFilter,
PHANDLE phFilter
);
DWORD
WINAPI
DeleteTransportFilter(
HANDLE hFilter
);
DWORD
WINAPI
EnumTransportFilters(
LPWSTR pServerName,
DWORD dwLevel,
GUID gGenericFilterID,
PTRANSPORT_FILTER * ppTransportFilters,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumFilters,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
SetTransportFilter(
HANDLE hFilter,
PTRANSPORT_FILTER pTransportFilter
);
DWORD
WINAPI
GetTransportFilter(
HANDLE hFilter,
PTRANSPORT_FILTER * ppTransportFilter
);
DWORD
WINAPI
AddQMPolicy(
LPWSTR pServerName,
DWORD dwFlags,
PIPSEC_QM_POLICY pQMPolicy
);
DWORD
WINAPI
DeleteQMPolicy(
LPWSTR pServerName,
LPWSTR pszPolicyName
);
DWORD
WINAPI
EnumQMPolicies(
LPWSTR pServerName,
PIPSEC_QM_POLICY * ppQMPolicies,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumPolicies,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
SetQMPolicy(
LPWSTR pServerName,
LPWSTR pszPolicyName,
PIPSEC_QM_POLICY pQMPolicy
);
DWORD
WINAPI
GetQMPolicy(
LPWSTR pServerName,
LPWSTR pszPolicyName,
PIPSEC_QM_POLICY * ppQMPolicy
);
DWORD
WINAPI
AddMMPolicy(
LPWSTR pServerName,
DWORD dwFlags,
PIPSEC_MM_POLICY pMMPolicy
);
DWORD
WINAPI
DeleteMMPolicy(
LPWSTR pServerName,
LPWSTR pszPolicyName
);
DWORD
WINAPI
EnumMMPolicies(
LPWSTR pServerName,
PIPSEC_MM_POLICY * ppMMPolicies,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumPolicies,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
SetMMPolicy(
LPWSTR pServerName,
LPWSTR pszPolicyName,
PIPSEC_MM_POLICY pMMPolicy
);
DWORD
WINAPI
GetMMPolicy(
LPWSTR pServerName,
LPWSTR pszPolicyName,
PIPSEC_MM_POLICY * ppMMPolicy
);
DWORD
WINAPI
AddMMFilter(
LPWSTR pServerName,
DWORD dwFlags,
PMM_FILTER pMMFilter,
PHANDLE phMMFilter
);
DWORD
WINAPI
DeleteMMFilter(
HANDLE hMMFilter
);
DWORD
WINAPI
EnumMMFilters(
LPWSTR pServerName,
DWORD dwLevel,
GUID gGenericFilterID,
PMM_FILTER * ppMMFilters,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumMMFilters,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
SetMMFilter(
HANDLE hMMFilter,
PMM_FILTER pMMFilter
);
DWORD
WINAPI
GetMMFilter(
HANDLE hMMFilter,
PMM_FILTER * ppMMFilter
);
DWORD
WINAPI
MatchMMFilter(
LPWSTR pServerName,
PMM_FILTER pMMFilter,
DWORD dwFlags,
PMM_FILTER * ppMatchedMMFilters,
PIPSEC_MM_POLICY * ppMatchedMMPolicies,
PMM_AUTH_METHODS * ppMatchedMMAuthMethods,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumMatches,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
MatchTransportFilter(
LPWSTR pServerName,
PTRANSPORT_FILTER pTxFilter,
DWORD dwFlags,
PTRANSPORT_FILTER * ppMatchedTxFilters,
PIPSEC_QM_POLICY * ppMatchedQMPolicies,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumMatches,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
GetQMPolicyByID(
LPWSTR pServerName,
GUID gQMPolicyID,
PIPSEC_QM_POLICY * ppQMPolicy
);
DWORD
WINAPI
GetMMPolicyByID(
LPWSTR pServerName,
GUID gMMPolicyID,
PIPSEC_MM_POLICY * ppMMPolicy
);
DWORD
WINAPI
AddMMAuthMethods(
LPWSTR pServerName,
DWORD dwFlags,
PMM_AUTH_METHODS pMMAuthMethods
);
DWORD
WINAPI
DeleteMMAuthMethods(
LPWSTR pServerName,
GUID gMMAuthID
);
DWORD
WINAPI
EnumMMAuthMethods(
LPWSTR pServerName,
PMM_AUTH_METHODS * ppMMAuthMethods,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumAuthMethods,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
SetMMAuthMethods(
LPWSTR pServerName,
GUID gMMAuthID,
PMM_AUTH_METHODS pMMAuthMethods
);
DWORD
WINAPI
GetMMAuthMethods(
LPWSTR pServerName,
GUID gMMAuthID,
PMM_AUTH_METHODS * ppMMAuthMethods
);
DWORD
IPSecInitiateIKENegotiation(
LPWSTR pServerName,
PIPSEC_QM_FILTER pQMFilter,
DWORD dwClientProcessId,
HANDLE hClientEvent,
DWORD dwFlags,
PHANDLE phNegotiation
);
DWORD
IPSecQueryIKENegotiationStatus(
HANDLE hNegotiation,
PSA_NEGOTIATION_STATUS_INFO pNegotiationStatus
);
DWORD
IPSecCloseIKENegotiationHandle(
HANDLE hNegotiation
);
DWORD
IPSecEnumMMSAs(
LPWSTR pServerName,
PIPSEC_MM_SA pMMTemplate,
PIPSEC_MM_SA * ppMMSAs,
LPDWORD pdwNumEntries,
LPDWORD pdwTotalMMsAvailable,
LPDWORD pdwEnumHandle,
DWORD dwFlags
);
DWORD
IPSecDeleteMMSAs(
LPWSTR pServerName,
PIPSEC_MM_SA pMMTemplate,
DWORD dwFlags
);
DWORD
IPSecDeleteQMSAs(
LPWSTR pServerName,
PIPSEC_QM_SA pIpsecQMSA,
DWORD dwFlags
);
DWORD
IPSecQueryIKEStatistics(
LPWSTR pServerName,
PIKE_STATISTICS pIKEStatistics
);
DWORD
IPSecRegisterIKENotifyClient(
LPWSTR pServerName,
DWORD dwClientProcessId,
HANDLE hClientEvent,
IPSEC_QM_SA QMTemplate,
PHANDLE phNotifyHandle,
DWORD dwFlags
);
DWORD IPSecQueryNotifyData(
HANDLE hNotifyHandle,
PDWORD pdwNumEntries,
PIPSEC_QM_SA *ppQMSAs,
DWORD dwFlags
);
DWORD IPSecCloseNotifyHandle(
HANDLE hNotifyHandle
);
DWORD
WINAPI
QueryIPSecStatistics(
LPWSTR pServerName,
PIPSEC_STATISTICS * ppIpsecStatistics
);
DWORD
WINAPI
EnumQMSAs(
LPWSTR pServerName,
PIPSEC_QM_SA pQMSATemplate,
PIPSEC_QM_SA * ppQMSAs,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumQMSAs,
LPDWORD pdwNumTotalQMSAs,
LPDWORD pdwResumeHandle,
DWORD dwFlags
);
DWORD
WINAPI
AddTunnelFilter(
LPWSTR pServerName,
DWORD dwFlags,
PTUNNEL_FILTER pTunnelFilter,
PHANDLE phFilter
);
DWORD
WINAPI
DeleteTunnelFilter(
HANDLE hFilter
);
DWORD
WINAPI
EnumTunnelFilters(
LPWSTR pServerName,
DWORD dwLevel,
GUID gGenericFilterID,
PTUNNEL_FILTER * ppTunnelFilters,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumFilters,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
SetTunnelFilter(
HANDLE hFilter,
PTUNNEL_FILTER pTunnelFilter
);
DWORD
WINAPI
GetTunnelFilter(
HANDLE hFilter,
PTUNNEL_FILTER * ppTunnelFilter
);
DWORD
WINAPI
MatchTunnelFilter(
LPWSTR pServerName,
PTUNNEL_FILTER pTnFilter,
DWORD dwFlags,
PTUNNEL_FILTER * ppMatchedTnFilters,
PIPSEC_QM_POLICY * ppMatchedQMPolicies,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumMatches,
LPDWORD pdwResumeHandle
);
DWORD
WINAPI
OpenMMFilterHandle(
LPWSTR pServerName,
PMM_FILTER pMMFilter,
PHANDLE phMMFilter
);
DWORD
WINAPI
CloseMMFilterHandle(
HANDLE hMMFilter
);
DWORD
WINAPI
OpenTransportFilterHandle(
LPWSTR pServerName,
PTRANSPORT_FILTER pTransportFilter,
PHANDLE phTxFilter
);
DWORD
WINAPI
CloseTransportFilterHandle(
HANDLE hTxFilter
);
DWORD
WINAPI
OpenTunnelFilterHandle(
LPWSTR pServerName,
PTUNNEL_FILTER pTunnelFilter,
PHANDLE phTnFilter
);
DWORD
WINAPI
CloseTunnelFilterHandle(
HANDLE hTnFilter
);
DWORD
WINAPI
EnumIPSecInterfaces(
LPWSTR pServerName,
PIPSEC_INTERFACE_INFO pIpsecIfTemplate,
PIPSEC_INTERFACE_INFO * ppIpsecInterfaces,
DWORD dwPreferredNumEntries,
LPDWORD pdwNumInterfaces,
LPDWORD pdwNumTotalInterfaces,
LPDWORD pdwResumeHandle,
DWORD dwFlags
);
DWORD
WINAPI
IPSecAddSAs(
LPWSTR pServerName,
PIPSEC_QM_OFFER pQMOffer,
PIPSEC_QM_FILTER pQMFilter,
HANDLE *hLarvalContext,
DWORD dwInboundKeyMatLen,
BYTE *pInboundKeyMat,
DWORD dwOutboundKeyMatLen,
BYTE *pOutboundKeyMat,
BYTE *pContextInfo,
DWORD dwFlags
);
#ifdef __cplusplus
}
#endif
#endif // _WINIPSEC_
Reference in a new issue Copy permalink