ikev2_ctx Struct Reference

IKEv2 context structure. Used for storing global configuration options and list of active IKEv2 sessions. More...

#include <session.h>

Data Fields
uint32_t	max_fragment_size
	for fragmentatnion support, must be initialized!!!!
IKEv2Session *	SessionList
	linked list of active IKEv2 sessions
Proposal *	suppProp
	list of supported proposals
uint8_t *	id
	side identity
unsigned int	idlen
	id length
int	idtype
	id type
int	authtype
	authentication type
char *	certfile
	certificates file
char *	crl_file
	CRL file.
char *	trusted
	CA cert file.
uint8_t *	pwd
	password
int	pwdlen
	password length
char *	pkfile
	private key file
char *	pkfile_pwd
	password to private key file
EVP_PKEY *	rpk
	private key
uint8_t *	cert
	cert data
int	certlen
	cert data len
int	send_sk_idr
	send SK{IDr} payload? (responder option)
uint32_t	DHCounterMax
	initial value for IKEv2Session.DHCounter
uint8_t	sendCertReq
	send Cert Req payload?
X509_STORE *	x509_store
	openssl cert lookup
uint8_t *	CAsHashString
	concatenated SHA1 hashes of public keys of trusted CA's
uint32_t	CAsHashStringLen
	CAsHashString length.
sharedSecList *	sslist
	list of shared secrets
bool	enableFastReconnect
	enable fast rekeying protocol run
bool	enableFastDHEx
	enable DH exchange in fast rekeying procedure
uint32_t	fastExpire
	fast reconnect session expiration time (in seconds)
pthread_mutex_t	mutex

---

Detailed Description

IKEv2 context structure. Used for storing global configuration options and list of active IKEv2 sessions.

---

Field Documentation

int ikev2_ctx::authtype

authentication type

uint8_t* ikev2_ctx::CAsHashString

concatenated SHA1 hashes of public keys of trusted CA's

uint32_t ikev2_ctx::CAsHashStringLen

CAsHashString length.

uint8_t* ikev2_ctx::cert

cert data

char* ikev2_ctx::certfile

certificates file

int ikev2_ctx::certlen

cert data len

char* ikev2_ctx::crl_file

CRL file.

uint32_t ikev2_ctx::DHCounterMax

initial value for IKEv2Session.DHCounter

bool ikev2_ctx::enableFastDHEx

enable DH exchange in fast rekeying procedure

bool ikev2_ctx::enableFastReconnect

enable fast rekeying protocol run

uint32_t ikev2_ctx::fastExpire

fast reconnect session expiration time (in seconds)

uint8_t* ikev2_ctx::id

side identity

unsigned int ikev2_ctx::idlen

id length

int ikev2_ctx::idtype

id type

uint32_t ikev2_ctx::max_fragment_size

for fragmentatnion support, must be initialized!!!!

pthread_mutex_t ikev2_ctx::mutex

char* ikev2_ctx::pkfile

private key file

char* ikev2_ctx::pkfile_pwd

password to private key file

uint8_t* ikev2_ctx::pwd

password

int ikev2_ctx::pwdlen

password length

EVP_PKEY* ikev2_ctx::rpk

private key

int ikev2_ctx::send_sk_idr

send SK{IDr} payload? (responder option)

uint8_t ikev2_ctx::sendCertReq

send Cert Req payload?

struct IKEv2Session* ikev2_ctx::SessionList

linked list of active IKEv2 sessions

struct sharedSecList* ikev2_ctx::sslist

list of shared secrets

struct Proposal* ikev2_ctx::suppProp

list of supported proposals

char* ikev2_ctx::trusted

CA cert file.

X509_STORE* ikev2_ctx::x509_store

openssl cert lookup

---

The documentation for this struct was generated from the following file:

• session.h

---

Project hosted by: