78 lines
2.1 KiB
C
78 lines
2.1 KiB
C
/* routines that interface with pluto to get policy information
|
|
* Copyright (C) 2003 Michael Richardson <[email protected]>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*
|
|
* RCSID $Id: cgipolicy.c,v 1.1 2004/03/15 20:35:24 as Exp $
|
|
*/
|
|
|
|
#include <stddef.h>
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <errno.h>
|
|
#include <wait.h>
|
|
#include <unistd.h>
|
|
#include <fcntl.h>
|
|
|
|
#include <sys/socket.h>
|
|
#include <sys/un.h>
|
|
#include <netinet/in.h>
|
|
#include <arpa/inet.h>
|
|
|
|
#include <freeswan.h>
|
|
#include <freeswan/ipsec_policy.h>
|
|
|
|
#include "libipsecpolicy.h"
|
|
|
|
/*
|
|
* this version is appropriate for when one is called from a perl CGI,
|
|
* running under Apache. It extracts the appropriate things out of standard
|
|
* CGI environment variables, namely:
|
|
* $SERVER_ADDR us
|
|
* $REMOTE_ADDR them
|
|
*/
|
|
|
|
err_t ipsec_policy_cgilookup(struct ipsec_policy_cmd_query *result)
|
|
{
|
|
err_t ret;
|
|
char *us, *them;
|
|
|
|
/* clear it all out */
|
|
memset(result, 0, sizeof(*result));
|
|
|
|
/* setup it up */
|
|
result->head.ipm_version = IPSEC_POLICY_MSG_REVISION;
|
|
result->head.ipm_msg_len = sizeof(*result);
|
|
result->head.ipm_msg_type = IPSEC_CMD_QUERY_HOSTPAIR;
|
|
result->head.ipm_msg_seq = ipsec_policy_seq();
|
|
|
|
|
|
us = getenv("SERVER_ADDR");
|
|
them = getenv("REMOTE_ADDR");
|
|
if(!us || !them) {
|
|
return "$SERVER_ADDR and $REMOTE_ADDR must be set";
|
|
}
|
|
|
|
ret = ttoaddr(us, 0, AF_INET, &result->query_local);
|
|
if(ret != NULL) {
|
|
return ret;
|
|
}
|
|
|
|
ret = ttoaddr(them, 0, AF_INET, &result->query_remote);
|
|
if(ret != NULL) {
|
|
return ret;
|
|
}
|
|
|
|
return ipsec_policy_sendrecv((unsigned char *)result, sizeof(*result));
|
|
}
|
|
|