blob: 1ed6d9fc79d804aa6b90819fb5048bfe252048e5 [file] [log] [blame]
/**
* This file has no copyright assigned and is placed in the Public Domain.
* This file is part of the w64 mingw-runtime package.
* No warranty is given; refer to the file DISCLAIMER.PD within this package.
*/
#ifndef _INC_IKETYPES
#define _INC_IKETYPES
#include <fwptypes.h>
#ifdef __cplusplus
extern "C" {
#endif
#if (_WIN32_WINNT >= 0x0600)
#ifndef __IPSEC_V4_UDP_ENCAPSULATION0_FWD_DECLARED
#define __IPSEC_V4_UDP_ENCAPSULATION0_FWD_DECLARED
typedef struct IPSEC_V4_UDP_ENCAPSULATION0_ IPSEC_V4_UDP_ENCAPSULATION0;
#endif /* __IPSEC_V4_UDP_ENCAPSULATION0_FWD_DECLARED */
typedef enum IKEEXT_EM_SA_STATE_ {
IKEEXT_EM_SA_STATE_NONE = 0,
IKEEXT_EM_SA_STATE_SENT_ATTS,
IKEEXT_EM_SA_STATE_SSPI_SENT,
IKEEXT_EM_SA_STATE_AUTH_COMPLETE,
IKEEXT_EM_SA_STATE_FINAL,
IKEEXT_EM_SA_STATE_COMPLETE,
IKEEXT_EM_SA_STATE_MAX
} IKEEXT_EM_SA_STATE;
typedef enum IKEEXT_SA_ROLE_ {
IKEEXT_SA_ROLE_INITIATOR = 0,
IKEEXT_SA_ROLE_RESPONDER,
IKEEXT_SA_ROLE_MAX
} IKEEXT_SA_ROLE;
typedef enum IKEEXT_AUTHENTICATION_METHOD_TYPE_ {
IKEEXT_PRESHARED_KEY = 0,
IKEEXT_CERTIFICATE,
IKEEXT_KERBEROS,
IKEEXT_ANONYMOUS,
IKEEXT_SSL,
IKEEXT_NTLM_V2,
IKEEXT_IPV6_CGA,
IKEEXT_CERTIFICATE_ECDSA_P256,
IKEEXT_CERTIFICATE_ECDSA_P384,
IKEEXT_SSL_ECDSA_P256,
IKEEXT_SSL_ECDSA_P384,
IKEEXT_EAP,
IKEEXT_AUTHENTICATION_METHOD_TYPE_MAX
} IKEEXT_AUTHENTICATION_METHOD_TYPE;
typedef enum IKEEXT_KEY_MODULE_TYPE_ {
IKEEXT_KEY_MODULE_IKE = 0,
IKEEXT_KEY_MODULE_AUTHIP,
IKEEXT_KEY_MODULE_IKEV2,
IKEEXT_KEY_MODULE_MAX
} IKEEXT_KEY_MODULE_TYPE;
typedef enum IKEEXT_MM_SA_STATE_ {
IKEEXT_MM_SA_STATE_NONE = 0,
IKEEXT_MM_SA_STATE_SA_SENT,
IKEEXT_MM_SA_STATE_SSPI_SENT,
IKEEXT_MM_SA_STATE_FINAL,
IKEEXT_MM_SA_STATE_FINAL_SENT,
IKEEXT_MM_SA_STATE_COMPLETE,
IKEEXT_MM_SA_STATE_MAX
} IKEEXT_MM_SA_STATE;
typedef enum IKEEXT_QM_SA_STATE_ {
IKEEXT_QM_SA_STATE_NONE = 0,
IKEEXT_QM_SA_STATE_INITIAL,
IKEEXT_QM_SA_STATE_FINAL,
IKEEXT_QM_SA_STATE_COMPLETE,
IKEEXT_QM_SA_STATE_MAX
} IKEEXT_QM_SA_STATE;
typedef enum IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE_ {
IKEEXT_IMPERSONATION_NONE = 0,
IKEEXT_IMPERSONATION_SOCKET_PRINCIPAL,
IKEEXT_IMPERSONATION_MAX
} IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE;
typedef enum IKEEXT_CERT_CONFIG_TYPE_ {
IKEEXT_CERT_CONFIG_EXPLICIT_TRUST_LIST = 0,
IKEEXT_CERT_CONFIG_ENTERPRISE_STORE,
IKEEXT_CERT_CONFIG_TRUSTED_ROOT_STORE,
IKEEXT_CERT_CONFIG_UNSPECIFIED,
IKEEXT_CERT_CONFIG_TYPE_MAX
} IKEEXT_CERT_CONFIG_TYPE;
typedef enum IKEEXT_CIPHER_TYPE_ {
IKEEXT_CIPHER_DES = 0,
IKEEXT_CIPHER_3DES,
IKEEXT_CIPHER_AES_128,
IKEEXT_CIPHER_AES_192,
IKEEXT_CIPHER_AES_256,
IKEEXT_CIPHER_TYPE_MAX
} IKEEXT_CIPHER_TYPE;
typedef enum IKEEXT_INTEGRITY_TYPE_ {
IKEEXT_INTEGRITY_MD5 = 0,
IKEEXT_INTEGRITY_SHA1,
IKEEXT_INTEGRITY_SHA_256,
IKEEXT_INTEGRITY_SHA_384,
IKEEXT_INTEGRITY_TYPE_MAX
} IKEEXT_INTEGRITY_TYPE;
typedef enum IKEEXT_DH_GROUP_ {
IKEEXT_DH_GROUP_NONE = 0,
IKEEXT_DH_GROUP_1,
IKEEXT_DH_GROUP_2,
IKEEXT_DH_GROUP_2048,
IKEEXT_DH_ECP_256,
IKEEXT_DH_ECP_384,
IKEEXT_DH_GROUP_MAX
} IKEEXT_DH_GROUP;
#define IKEEXT_CERT_FLAG_ENABLE_ACCOUNT_MAPPING 0x00000001
#define IKEEXT_CERT_FLAG_DISABLE_REQUEST_PAYLOAD 0x00000002
#define IKEEXT_CERT_FLAG_USE_NAP_CERTIFICATE 0x00000004
#define IKEEXT_CERT_FLAG_INTERMEDIATE_CA 0x00000008
#define IKEEXT_CERT_FLAG_IGNORE_INIT_CERT_MAP_FAILURE 0x00000010
#define IKEEXT_CERT_FLAG_PREFER_NAP_CERTIFICATE_OUTBOUND 0x00000020
typedef struct IKEEXT_CERT_ROOT_CONFIG0_ {
FWP_BYTE_BLOB certData;
UINT32 flags;
} IKEEXT_CERT_ROOT_CONFIG0;
#define IKEEXT_KERB_AUTH_DISABLE_INITIATOR_TOKEN_GENERATION 0x00000001
#define IKEEXT_KERB_AUTH_DONT_ACCEPT_EXPLICIT_CREDENTIALS 0x00000002
typedef struct IKEEXT_KERBEROS_AUTHENTICATION0_ {
UINT32 flags;
} IKEEXT_KERBEROS_AUTHENTICATION0;
#define IKEEXT_NTLM_V2_AUTH_DONT_ACCEPT_EXPLICIT_CREDENTIALS 0x00000001
typedef struct IKEEXT_NTLM_V2_AUTHENTICATION0_ {
UINT32 flags;
} IKEEXT_NTLM_V2_AUTHENTICATION0;
typedef struct IKEEXT_IPV6_CGA_AUTHENTICATION0_ {
wchar_t *keyContainerName;
wchar_t *cspName;
UINT32 cspType;
FWP_BYTE_ARRAY16 cgaModifier;
BYTE cgaCollisionCount;
} IKEEXT_IPV6_CGA_AUTHENTICATION0;
typedef struct IKEEXT_PRESHARED_KEY_AUTHENTICATION0__ {
FWP_BYTE_BLOB presharedKey;
} IKEEXT_PRESHARED_KEY_AUTHENTICATION0;
#define IKEEXT_CERT_AUTH_FLAG_SSL_ONE_WAY 0x00000001
#define IKEEXT_CERT_AUTH_FLAG_DISABLE_CRL_CHECK 0x00000002
#define IKEEXT_CERT_AUTH_ENABLE_CRL_CHECK_STRONG 0x00000004
#define IKEEXT_CERT_AUTH_DISABLE_SSL_CERT_VALIDATION 0x00000008
#if (_WIN32_WINNT >= 0x0601)
#define IKEEXT_CERT_AUTH_ALLOW_HTTP_CERT_LOOKUP 0x00000010
#define IKEEXT_CERT_AUTH_URL_CONTAINS_BUNDLE 0x00000020
#endif /* WIN7 */
typedef struct IKEEXT_CERTIFICATE_AUTHENTICATION0_ {
IKEEXT_CERT_CONFIG_TYPE inboundConfigType;
__C89_NAMELESS union {
__C89_NAMELESS struct {
UINT32 inboundRootArraySize;
IKEEXT_CERT_ROOT_CONFIG0 *inboundRootArray;
};
IKEEXT_CERT_ROOT_CONFIG0 *inboundEnterpriseStoreConfig;
IKEEXT_CERT_ROOT_CONFIG0 *inboundTrustedRootStoreConfig;
};
IKEEXT_CERT_CONFIG_TYPE outboundConfigType;
__C89_NAMELESS union {
__C89_NAMELESS struct {
UINT32 outboundRootArraySize;
IKEEXT_CERT_ROOT_CONFIG0 *outboundRootArray;
};
IKEEXT_CERT_ROOT_CONFIG0 *outboundEnterpriseStoreConfig;
IKEEXT_CERT_ROOT_CONFIG0 *outboundTrustedRootStoreConfig;
};
UINT32 flags;
} IKEEXT_CERTIFICATE_AUTHENTICATION0;
typedef struct IKEEXT_AUTHENTICATION_METHOD0_ {
IKEEXT_AUTHENTICATION_METHOD_TYPE authenticationMethodType;
__C89_NAMELESS union {
IKEEXT_PRESHARED_KEY_AUTHENTICATION0 presharedKeyAuthentication;
IKEEXT_CERTIFICATE_AUTHENTICATION0 certificateAuthentication;
IKEEXT_KERBEROS_AUTHENTICATION0 kerberosAuthentication;
IKEEXT_NTLM_V2_AUTHENTICATION0 ntlmV2Authentication;
IKEEXT_CERTIFICATE_AUTHENTICATION0 sslAuthentication;
IKEEXT_IPV6_CGA_AUTHENTICATION0 cgaAuthentication;
};
} IKEEXT_AUTHENTICATION_METHOD0;
typedef struct IKEEXT_INTEGRITY_ALGORITHM0_ {
IKEEXT_INTEGRITY_TYPE algoIdentifier;
} IKEEXT_INTEGRITY_ALGORITHM0;
typedef struct IKEEXT_CIPHER_ALGORITHM0_ {
IKEEXT_CIPHER_TYPE algoIdentifier;
UINT32 keyLen;
UINT32 rounds;
} IKEEXT_CIPHER_ALGORITHM0;
typedef struct IKEEXT_PROPOSAL0_ {
IKEEXT_CIPHER_ALGORITHM0 cipherAlgorithm;
IKEEXT_INTEGRITY_ALGORITHM0 integrityAlgorithm;
UINT32 maxLifetimeSeconds;
IKEEXT_DH_GROUP dhGroup;
UINT32 quickModeLimit;
} IKEEXT_PROPOSAL0;
#define IKEEXT_POLICY_FLAG_DISABLE_DIAGNOSTICS 0x00000001
#define IKEEXT_POLICY_FLAG_NO_MACHINE_LUID_VERIFY 0x00000002
#define IKEEXT_POLICY_FLAG_NO_IMPERSONATION_LUID_VERIFY 0x00000004
#define IKEEXT_POLICY_FLAG_ENABLE_OPTIONAL_DH 0x00000008
typedef struct IKEEXT_EM_POLICY0_ {
UINT32 numAuthenticationMethods;
IKEEXT_AUTHENTICATION_METHOD0 *authenticationMethods;
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE initiatorImpersonationType;
} IKEEXT_EM_POLICY0;
typedef struct IKEEXT_POLICY0_ {
UINT32 softExpirationTime;
UINT32 numAuthenticationMethods;
IKEEXT_AUTHENTICATION_METHOD0 *authenticationMethods;
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE initiatorImpersonationType;
UINT32 numIkeProposals;
IKEEXT_PROPOSAL0 *ikeProposals;
UINT32 flags;
UINT32 maxDynamicFilters;
} IKEEXT_POLICY0;
typedef struct IKEEXT_CERTIFICATE_CREDENTIAL0_ {
FWP_BYTE_BLOB subjectName;
FWP_BYTE_BLOB certHash;
UINT32 flags;
} IKEEXT_CERTIFICATE_CREDENTIAL0;
typedef struct IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS0_ {
UINT32 totalSocketReceiveFailures;
UINT32 totalSocketSendFailures;
} IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS0;
typedef struct IKEEXT_COMMON_STATISTICS0_ {
IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS0 v4Statistics;
IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS0 v6Statistics;
UINT32 totalPacketsReceived;
UINT32 totalInvalidPacketsReceived;
UINT32 currentQueuedWorkitems;
} IKEEXT_COMMON_STATISTICS0;
typedef UINT64 IKEEXT_COOKIE;
typedef struct IKEEXT_COOKIE_PAIR0_ {
IKEEXT_COOKIE initiator;
IKEEXT_COOKIE responder;
} IKEEXT_COOKIE_PAIR0;
typedef struct IKEEXT_NAME_CREDENTIAL0_ {
wchar_t *principalName;
} IKEEXT_NAME_CREDENTIAL0;
typedef struct IKEEXT_CREDENTIAL0_ {
IKEEXT_AUTHENTICATION_METHOD_TYPE authenticationMethodType;
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE impersonationType;
__C89_NAMELESS union {
IKEEXT_PRESHARED_KEY_AUTHENTICATION0 *presharedKey;
IKEEXT_CERTIFICATE_CREDENTIAL0 *certificate;
IKEEXT_NAME_CREDENTIAL0 *name;
};
} IKEEXT_CREDENTIAL0;
typedef struct IKEEXT_CREDENTIAL_PAIR0_ {
IKEEXT_CREDENTIAL0 localCredentials;
IKEEXT_CREDENTIAL0 peerCredentials;
} IKEEXT_CREDENTIAL_PAIR0;
typedef struct IKEEXT_CREDENTIALS0_ {
UINT32 numCredentials;
IKEEXT_CREDENTIAL_PAIR0 *credentials;
} IKEEXT_CREDENTIALS0;
typedef struct IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS0_ {
UINT32 currentActiveMainModes;
UINT32 totalMainModesStarted;
UINT32 totalSuccessfulMainModes;
UINT32 totalFailedMainModes;
UINT32 totalResponderMainModes;
UINT32 currentNewResponderMainModes;
UINT32 currentActiveQuickModes;
UINT32 totalQuickModesStarted;
UINT32 totalSuccessfulQuickModes;
UINT32 totalFailedQuickModes;
UINT32 totalAcquires;
UINT32 totalReinitAcquires;
UINT32 currentActiveExtendedModes;
UINT32 totalExtendedModesStarted;
UINT32 totalSuccessfulExtendedModes;
UINT32 totalFailedExtendedModes;
UINT32 totalImpersonationExtendedModes;
UINT32 totalImpersonationMainModes;
} IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS0;
#define IKEEXT_ERROR_CODE_COUNT (ERROR_IPSEC_IKE_NEG_STATUS_END - ERROR_IPSEC_IKE_NEG_STATUS_BEGIN) /* Should be 84 */
typedef struct IKEEXT_KEYMODULE_STATISTICS0_ {
IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS0 v4Statistics;
IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS0 v6Statistics;
UINT32 errorFrequencyTable[IKEEXT_ERROR_CODE_COUNT];
UINT32 mainModeNegotiationTime;
UINT32 quickModeNegotiationTime;
UINT32 extendedModeNegotiationTime;
} IKEEXT_KEYMODULE_STATISTICS0;
typedef struct IKEEXT_TRAFFIC0_ {
FWP_IP_VERSION ipVersion;
__C89_NAMELESS union {
UINT32 localV4Address;
UINT8 localV6Address[16];
};
__C89_NAMELESS union {
UINT32 remoteV4Address;
UINT8 remoteV6Address[16];
};
UINT64 authIpFilterId;
} IKEEXT_TRAFFIC0;
typedef struct IKEEXT_SA_DETAILS0_ {
UINT64 saId;
IKEEXT_KEY_MODULE_TYPE keyModuleType;
FWP_IP_VERSION ipVersion;
__C89_NAMELESS union {
IPSEC_V4_UDP_ENCAPSULATION0 *v4UdpEncapsulation;
};
IKEEXT_TRAFFIC0 ikeTraffic;
IKEEXT_PROPOSAL0 ikeProposal;
IKEEXT_COOKIE_PAIR0 cookiePair;
IKEEXT_CREDENTIALS0 ikeCredentials;
GUID ikePolicyKey;
UINT64 virtualIfTunnelId;
} IKEEXT_SA_DETAILS0;
typedef struct IKEEXT_SA_ENUM_TEMPLATE0_ {
FWP_CONDITION_VALUE0 localSubNet;
FWP_CONDITION_VALUE0 remoteSubNet;
FWP_BYTE_BLOB localMainModeCertHash;
} IKEEXT_SA_ENUM_TEMPLATE0;
typedef struct IKEEXT_STATISTICS0_ {
IKEEXT_KEYMODULE_STATISTICS0 ikeStatistics;
IKEEXT_KEYMODULE_STATISTICS0 authipStatistics;
IKEEXT_COMMON_STATISTICS0 commonStatistics;
} IKEEXT_STATISTICS0;
#endif /*(_WIN32_WINNT >= 0x0600)*/
#if (_WIN32_WINNT >= 0x0601)
typedef struct IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS1_ {
UINT32 currentActiveMainModes;
UINT32 totalMainModesStarted;
UINT32 totalSuccessfulMainModes;
UINT32 totalFailedMainModes;
UINT32 totalResponderMainModes;
UINT32 currentNewResponderMainModes;
UINT32 currentActiveQuickModes;
UINT32 totalQuickModesStarted;
UINT32 totalSuccessfulQuickModes;
UINT32 totalFailedQuickModes;
UINT32 totalAcquires;
UINT32 totalReinitAcquires;
UINT32 currentActiveExtendedModes;
UINT32 totalExtendedModesStarted;
UINT32 totalSuccessfulExtendedModes;
UINT32 totalFailedExtendedModes;
UINT32 totalImpersonationExtendedModes;
UINT32 totalImpersonationMainModes;
} IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS1;
typedef struct IKEEXT_KEYMODULE_STATISTICS1_ {
IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS1 v4Statistics;
IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS1 v6Statistics;
UINT32 errorFrequencyTable[IKEEXT_ERROR_CODE_COUNT];
UINT32 mainModeNegotiationTime;
UINT32 quickModeNegotiationTime;
UINT32 extendedModeNegotiationTime;
} IKEEXT_KEYMODULE_STATISTICS1;
typedef struct IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS1_ {
UINT32 totalSocketReceiveFailures;
UINT32 totalSocketSendFailures;
} IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS1;
typedef struct IKEEXT_COMMON_STATISTICS1_ {
IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS1 v4Statistics;
IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS1 v6Statistics;
UINT32 totalPacketsReceived;
UINT32 totalInvalidPacketsReceived;
UINT32 currentQueuedWorkitems;
} IKEEXT_COMMON_STATISTICS1;
typedef struct IKEEXT_STATISTICS1_ {
IKEEXT_KEYMODULE_STATISTICS1 ikeStatistics;
IKEEXT_KEYMODULE_STATISTICS1 authipStatistics;
IKEEXT_KEYMODULE_STATISTICS1 ikev2Statistics;
IKEEXT_COMMON_STATISTICS1 commonStatistics;
} IKEEXT_STATISTICS1;
typedef struct IKEEXT_PRESHARED_KEY_AUTHENTICATION1__ {
FWP_BYTE_BLOB presharedKey;
UINT32 flags;
} IKEEXT_PRESHARED_KEY_AUTHENTICATION1;
typedef struct IKEEXT_CERTIFICATE_CREDENTIAL1_ {
FWP_BYTE_BLOB subjectName;
FWP_BYTE_BLOB certHash;
UINT32 flags;
FWP_BYTE_BLOB certificate;
} IKEEXT_CERTIFICATE_CREDENTIAL1;
typedef struct IKEEXT_CREDENTIAL1_ {
IKEEXT_AUTHENTICATION_METHOD_TYPE authenticationMethodType;
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE impersonationType;
__C89_NAMELESS union {
IKEEXT_PRESHARED_KEY_AUTHENTICATION1 *presharedKey;
IKEEXT_CERTIFICATE_CREDENTIAL1 *certificate;
IKEEXT_NAME_CREDENTIAL0 *name;
; // case(IKEEXT_ANONYMOUS)
};
} IKEEXT_CREDENTIAL1;
typedef struct IKEEXT_CREDENTIAL_PAIR1_ {
IKEEXT_CREDENTIAL1 localCredentials;
IKEEXT_CREDENTIAL1 peerCredentials;
} IKEEXT_CREDENTIAL_PAIR1;
typedef struct IKEEXT_CREDENTIALS1_ {
UINT32 numCredentials;
IKEEXT_CREDENTIAL_PAIR1 *credentials;
} IKEEXT_CREDENTIALS1;
typedef struct IKEEXT_SA_DETAILS1_ {
UINT64 saId;
IKEEXT_KEY_MODULE_TYPE keyModuleType;
FWP_IP_VERSION ipVersion;
__C89_NAMELESS union {
IPSEC_V4_UDP_ENCAPSULATION0 *v4UdpEncapsulation;
; // case(FWP_IP_VERSION_V6)
};
IKEEXT_TRAFFIC0 ikeTraffic;
IKEEXT_PROPOSAL0 ikeProposal;
IKEEXT_COOKIE_PAIR0 cookiePair;
IKEEXT_CREDENTIALS1 ikeCredentials;
GUID ikePolicyKey;
UINT64 virtualIfTunnelId;
} IKEEXT_SA_DETAILS1;
typedef struct IKEEXT_CERTIFICATE_AUTHENTICATION1_ {
IKEEXT_CERT_CONFIG_TYPE inboundConfigType;
__C89_NAMELESS union {
__C89_NAMELESS struct {
UINT32 inboundRootArraySize;
IKEEXT_CERT_ROOT_CONFIG0 *inboundRootArray;
};
IKEEXT_CERT_ROOT_CONFIG0 *inboundEnterpriseStoreConfig;
IKEEXT_CERT_ROOT_CONFIG0 *inboundTrustedRootStoreConfig;
; // case(IKEEXT_CERT_CONFIG_UNSPECIFIED)
};
IKEEXT_CERT_CONFIG_TYPE outboundConfigType;
__C89_NAMELESS union {
__C89_NAMELESS struct {
UINT32 outboundRootArraySize;
IKEEXT_CERT_ROOT_CONFIG0 *outboundRootArray;
};
IKEEXT_CERT_ROOT_CONFIG0 *outboundEnterpriseStoreConfig;
IKEEXT_CERT_ROOT_CONFIG0 *outboundTrustedRootStoreConfig;
; // case(IKEEXT_CERT_CONFIG_UNSPECIFIED)
};
UINT32 flags;
FWP_BYTE_BLOB localCertLocationUrl;
} IKEEXT_CERTIFICATE_AUTHENTICATION1;
typedef struct IKEEXT_EAP_AUTHENTICATION0__ {
UINT32 flags;
} IKEEXT_EAP_AUTHENTICATION0;
typedef struct IKEEXT_AUTHENTICATION_METHOD1_ {
IKEEXT_AUTHENTICATION_METHOD_TYPE authenticationMethodType;
__C89_NAMELESS union {
IKEEXT_PRESHARED_KEY_AUTHENTICATION1 presharedKeyAuthentication;
IKEEXT_CERTIFICATE_AUTHENTICATION1 certificateAuthentication;
IKEEXT_KERBEROS_AUTHENTICATION0 kerberosAuthentication;
IKEEXT_NTLM_V2_AUTHENTICATION0 ntlmV2Authentication;
IKEEXT_CERTIFICATE_AUTHENTICATION1 sslAuthentication;
IKEEXT_IPV6_CGA_AUTHENTICATION0 cgaAuthentication;
IKEEXT_EAP_AUTHENTICATION0 eapAuthentication;
; // case(IKEEXT_ANONYMOUS)
};
} IKEEXT_AUTHENTICATION_METHOD1;
typedef struct IKEEXT_POLICY1_ {
UINT32 softExpirationTime;
UINT32 numAuthenticationMethods;
IKEEXT_AUTHENTICATION_METHOD1 *authenticationMethods;
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE initiatorImpersonationType;
UINT32 numIkeProposals;
IKEEXT_PROPOSAL0 *ikeProposals;
UINT32 flags;
UINT32 maxDynamicFilters;
UINT32 retransmitDurationSecs;
} IKEEXT_POLICY1;
typedef struct IKEEXT_EM_POLICY1_ {
UINT32 numAuthenticationMethods;
IKEEXT_AUTHENTICATION_METHOD1 *authenticationMethods;
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE initiatorImpersonationType;
} IKEEXT_EM_POLICY1;
#endif /*(_WIN32_WINNT >= 0x0601)*/
#ifdef __cplusplus
}
#endif
#endif /*_INC_IKETYPES*/