#!/usr/bin/perl
#
# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005 Yokogawa Electric Corporation,
# YDC Corporation, IPA (Information-technology Promotion Agency, Japan).
# All rights reserved.
#
# Redistribution and use of this software in source and binary forms, with
# or without modification, are permitted provided that the following
# conditions and disclaimer are agreed and accepted by the user:
#
# 1. Redistributions of source code must retain the above copyright
# notice, this list of conditions and the following disclaimer.
#
# 2. Redistributions in binary form must reproduce the above copyright
# notice, this list of conditions and the following disclaimer in the
# documentation and/or other materials provided with the distribution.
#
# 3. Neither the names of the copyrighters, the name of the project which
# is related to this software (hereinafter referred to as "project") nor
# the names of the contributors may be used to endorse or promote products
# derived from this software without specific prior written permission.
#
# 4. No merchantable use may be permitted without prior written
# notification to the copyrighters. However, using this software for the
# purpose of testing or evaluating any products including merchantable
# products may be permitted without any notification to the copyrighters.
#
#
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHTERS, THE PROJECT AND
# CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING
# BUT NOT LIMITED THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
# FOR A PARTICULAR PURPOSE, ARE DISCLAIMED. IN NO EVENT SHALL THE
# COPYRIGHTERS, THE PROJECT OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
# INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
# (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
# CONTRACT,STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
# THE POSSIBILITY OF SUCH DAMAGE.
#
# $TAHI: v6eval/bin/remotes/manual/ikeSetSA.rmt,v 1.3 2005/05/12 08:38:03 ozoe Exp $
#
########################################################################
use V6evalRemote;
use File::Basename;
rArg() || goto error;
my $basename = basename($0, '.rmt');
my $prompt = "$basename> ";
print "\n";
print $prompt . "Set Security Association Configure of NUT manually as following:\n\n";
#print $prompt . "This remote command is incomplete one.\n";
#print $prompt . "If you want to continue test, be careful.\n\n";
print $prompt . "Set pre-shared key.\n" if ($rOpt_key_id ne undef);
print $prompt . "pre-shared key id = $rOpt_key_id\n" if ($rOpt_key_id ne undef);
print $prompt . "pre-shared key = $rOpt_key_value\n\n" if ($rOpt_key_value ne undef);
print $prompt . "Set certificate.\n" if ($rOpt_certificate_type ne undef);
print $prompt . "certificate type = $rOpt_certificate_type\n" if ($rOpt_certificate_type ne undef);
print $prompt . "certificate file = $rOpt_certificate_file\n" if ($rOpt_certificate_file ne undef);
print $prompt . "private key file = $rOpt_privkey_file\n" if ($rOpt_privkey_file ne undef);
print $prompt . "peers certificate file = $rOpt_peers_certfile\n" if ($rOpt_peers_certfile ne undef);
print $prompt . "send certificate = $rOpt_send_cert\n" if ($rOpt_send_cert ne undef);
print $prompt . "send certificate request = $rOpt_send_cr\n" if ($rOpt_send_cr ne undef);
print $prompt . "verify certificate = $rOpt_verify_cert\n\n" if ($rOpt_verify_cert ne undef);
print $prompt . "Set Phase-1 parameter.\n";
print $prompt . "dst = $rOpt_dst\n" if ($rOpt_dst ne undef);
print $prompt . "dst port = $rOpt_dst_port\n" if ($rOpt_dst_port ne undef);
print $prompt . "exchange mode = $rOpt_exchange_mode\n" if ($rOpt_exchange_mode ne undef);
print $prompt . "doi = $rOpt_doi\n" if ($rOpt_doi ne undef);
print $prompt . "situation = $rOpt_situation\n" if ($rOpt_situation ne undef);
print $prompt . "my id type = $rOpt_isakmp_src_id_type\n" if ($rOpt_isakmp_src_id_type ne undef);
print $prompt . "my id = $rOpt_isakmp_src_id\n" if ($rOpt_isakmp_src_id ne undef);
print $prompt . "peers id type = $rOpt_peers_id_type\n" if ($rOpt_peers_id_type ne undef);
print $prompt . "peers id = $rOpt_peers_id\n" if ($rOpt_peers_id ne undef);
print $prompt . "verify identifier = $rOpt_verify_identifier\n" if ($rOpt_verify_identifier ne undef);
print $prompt . "nonce size = $rOpt_nonce_size\n" if ($rOpt_nonce_size ne undef);
print $prompt . "\ttransform 1\n" if ($rOpt_encryption_algorithm ne undef);
print $prompt . "\t\tencryption algorithm = $rOpt_encryption_algorithm\n" if ($rOpt_encryption_algorithm ne undef);
print $prompt . "\t\thash algorithm = $rOpt_hash_algorithm\n" if ($rOpt_hash_algorithm ne undef);
print $prompt . "\t\tauthentication method = $rOpt_authentication_method\n" if ($rOpt_authentication_method ne undef);
print $prompt . "\t\tdh group= $rOpt_dh_group\n" if ($rOpt_dh_group ne undef);
print $prompt . "\t\tlifetime = $rOpt_lifetime\n" if ($rOpt_lifetime ne undef);
print $prompt . "\t\tlifetime unit = $rOpt_lifetime_unit\n" if ($rOpt_lifetime_unit ne undef);
print $prompt . "\ttransform 2\n" if ($rOpt_encryption_algorithm_2 ne undef);
print $prompt . "\t\tencryption algorithm 2 = $rOpt_encryption_algorithm_2\n" if ($rOpt_encryption_algorithm_2 ne undef);
print $prompt . "\t\thash algorithm 2 = $rOpt_hash_algorithm_2\n" if ($rOpt_hash_algorithm_2 ne undef);
print $prompt . "\t\tauthentication method 2 = $rOpt_authentication_method_2\n" if ($rOpt_authentication_method_2 ne undef);
print $prompt . "\t\tdh group 2 = $rOpt_dh_group_2\n" if ($rOpt_dh_group_2 ne undef);
print $prompt . "\t\tlifetime 2 = $rOpt_lifetime_2\n" if ($rOpt_lifetime_2 ne undef);
print $prompt . "\t\tlifetime unit2 = $rOpt_lifetime_unit_2\n" if ($rOpt_lifetime_unit_2 ne undef);
print "\n";
print $prompt . "then press enter key.\a\n";
<STDIN>;
print $prompt . "Set Phase-2 parameter.\n";
print $prompt . "id type = $rOpt_ph2_id_type\n" if ($rOpt_ph2_id_type ne undef);
print $prompt . "src id = $rOpt_ph2_src_id\n" if ($rOpt_ph2_src_id ne undef);
print $prompt . "dst id = $rOpt_ph2_dst_id\n" if ($rOpt_ph2_dst_id ne undef);
print $prompt . "src port = $rOpt_ph2_src_port\n" if ($rOpt_ph2_src_port ne undef);
print $prompt . "dst port = $rOpt_ph2_dst_port\n" if ($rOpt_ph2_dst_port ne undef);
print $prompt . "src upper = $rOpt_ph2_src_upper\n" if ($rOpt_ph2_src_upper ne undef);
print $prompt . "dst upper = $rOpt_ph2_dst_upper\n" if ($rOpt_ph2_dst_upper ne undef);
for (my $i = 1; $i <= $rOpt_ipsec_p_num; $i++){
my $num = eval '$rOpt_ipsec_p'."$i".'_t_num';
my $ipsec_p_t_num = $num;
my $ph2_lt = undef;
my $ph2_lt_unit = undef;
my $ph2_enc_alg = undef;
my $ph2_auth_alg= undef;
my $ph2_auth_mtd = undef;
print $prompt . "proposal "."$i\n";
for (my $j = 1; $j <= $ipsec_p_t_num; $j++){
$ph2_lt_value = eval '$rOpt_ph2_p'. "$i"."_t$j".'_lt';
$ph2_lt_unit = eval '$rOpt_ph2_p'. "$i"."_t$j".'_lt_unit';
$ph2_enc_alg = eval '$rOpt_ph2_p'. "$i"."_t$j".'_enc_alg';
$ph2_auth_alg= eval '$rOpt_ph2_p'. "$i"."_t$j".'_auth_alg';
$ph2_auth_mtd = eval '$rOpt_ph2_p'. "$i"."_t$j".'_auth_mtd';
print $prompt . "\ttransform "."$j\n";
print $prompt . "\t\ttransform id = $ph2_enc_alg\n" if ($ph2_enc_alg ne undef);
print $prompt . "\t\ttransform id = $ph2_auth_alg\n" if ($ph2_auth_alg ne undef);
print $prompt . "\t\tauthentication algorithm = $ph2_auth_mtd\n" if ($ph2_auth_mtd ne undef);
print $prompt . "\t\tpfs group = $rOpt_pfs_group\n" if ($rOpt_pfs_group ne undef);
print $prompt . "\t\tlifetime = $ph2_lt_value\n" if ($ph2_lt_value ne undef);
print $prompt . "\t\tlifetime unit = $ph2_lt_unit\n" if ($ph2_lt_unit ne undef);
}
}
print "\n";
print $prompt . "Execute IKE program.\n";
print $prompt . "then press enter key.\a\n";
<STDIN>;
exit($V6evalRemote::exitPass);
error:
rClose();
exit($V6evalRemote::exitFail);
########################################################################
__END__
=head1 NAME
B<ikeSetSA.rmt> - set IKE configuration and start IKE negotiation
=head1 SYNOPSIS
B<ikeSetSA.rmt> [-commonoption ...] [options]
=head1 DESCRIPTION
*options
TBD
=head1 RETURN VALUES
The B<ikeSetSA.rmt> exits with one of the following values:
0 command completed successfully
1 command failed
=head1 SEE ALSO
perldoc V6evalRemote
=cut
syntax highlighted by Code2HTML, v. 0.9.1