2 The main process for IpSecConfig application.
4 Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR>
6 This program and the accompanying materials
7 are licensed and made available under the terms and conditions of the BSD License
8 which accompanies this distribution. The full text of the license may be found at
9 http://opensource.org/licenses/bsd-license.php.
11 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
12 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
16 #include <Library/UefiRuntimeServicesTableLib.h>
17 #include <Library/HiiLib.h>
19 #include <Protocol/IpSec.h>
21 #include "IpSecConfig.h"
24 #include "PolicyEntryOperation.h"
29 // Used for ShellCommandLineParseEx only
30 // and to ensure user inputs are in valid format
32 SHELL_PARAM_ITEM mIpSecConfigParamList
[] = {
40 { L
"-enable", TypeFlag
},
41 { L
"-disable", TypeFlag
},
42 { L
"-status", TypeFlag
},
48 { L
"--local", TypeValue
},
49 { L
"--remote", TypeValue
},
50 { L
"--proto", TypeValue
},
51 { L
"--local-port", TypeValue
},
52 { L
"--remote-port", TypeValue
},
53 { L
"--icmp-type", TypeValue
},
54 { L
"--icmp-code", TypeValue
},
59 { L
"--name", TypeValue
},
60 { L
"--packet-flag", TypeValue
},
61 { L
"--action", TypeValue
},
62 { L
"--lifebyte", TypeValue
},
63 { L
"--lifetime-soft", TypeValue
},
64 { L
"--lifetime", TypeValue
},
65 { L
"--mode", TypeValue
},
66 { L
"--tunnel-local", TypeValue
},
67 { L
"--tunnel-remote", TypeValue
},
68 { L
"--dont-fragment", TypeValue
},
69 { L
"--ipsec-proto", TypeValue
},
70 { L
"--auth-algo", TypeValue
},
71 { L
"--encrypt-algo", TypeValue
},
73 { L
"--ext-sequence", TypeFlag
},
74 { L
"--sequence-overflow", TypeFlag
},
75 { L
"--fragment-check", TypeFlag
},
76 { L
"--ext-sequence-", TypeFlag
},
77 { L
"--sequence-overflow-", TypeFlag
},
78 { L
"--fragment-check-", TypeFlag
},
84 { L
"--spi", TypeValue
},
85 { L
"--tunnel-dest", TypeValue
},
86 { L
"--tunnel-source", TypeValue
},
87 { L
"--lookup-spi", TypeValue
},
88 { L
"--lookup-ipsec-proto", TypeValue
},
89 { L
"--lookup-dest", TypeValue
},
97 { L
"--sequence-number", TypeValue
},
98 { L
"--antireplay-window", TypeValue
},
99 { L
"--auth-key", TypeValue
},
100 { L
"--encrypt-key", TypeValue
},
101 { L
"--path-mtu", TypeValue
},
106 { L
"--peer-id", TypeValue
},
107 { L
"--peer-address", TypeValue
},
108 { L
"--auth-proto", TypeValue
},
109 { L
"--auth-method", TypeValue
},
110 { L
"--ike-id", TypeValue
},
111 { L
"--ike-id-", TypeValue
},
112 { L
"--auth-data", TypeValue
},
113 { L
"--revocation-data", TypeValue
},
114 { L
"--lookup-peer-id", TypeValue
},
115 { L
"--lookup-peer-address", TypeValue
},
123 STR2INT mMapPolicy
[] = {
124 { L
"SPD", IPsecConfigDataTypeSpd
},
125 { L
"SAD", IPsecConfigDataTypeSad
},
126 { L
"PAD", IPsecConfigDataTypePad
},
133 STR2INT mMapIpProtocol
[] = {
134 { L
"TCP", EFI_IP4_PROTO_TCP
},
135 { L
"UDP", EFI_IP4_PROTO_UDP
},
136 { L
"ICMP", EFI_IP4_PROTO_ICMP
},
143 STR2INT mMapIpSecAction
[] = {
144 { L
"Bypass", EfiIPsecActionBypass
},
145 { L
"Discard", EfiIPsecActionDiscard
},
146 { L
"Protect", EfiIPsecActionProtect
},
153 STR2INT mMapIpSecMode
[] = {
154 { L
"Transport", EfiIPsecTransport
},
155 { L
"Tunnel", EfiIPsecTunnel
},
162 STR2INT mMapDfOption
[] = {
163 { L
"clear", EfiIPsecTunnelClearDf
},
164 { L
"set", EfiIPsecTunnelSetDf
},
165 { L
"copy", EfiIPsecTunnelCopyDf
},
172 STR2INT mMapIpSecProtocol
[] = {
173 { L
"AH", EfiIPsecAH
},
174 { L
"ESP", EfiIPsecESP
},
181 STR2INT mMapAuthAlgo
[] = {
182 { L
"NONE", IPSEC_AALG_NONE
},
183 { L
"MD5HMAC", IPSEC_AALG_MD5HMAC
},
184 { L
"SHA1HMAC", IPSEC_AALG_SHA1HMAC
},
185 { L
"SHA2-256HMAC", IPSEC_AALG_SHA2_256HMAC
},
186 { L
"SHA2-384HMAC", IPSEC_AALG_SHA2_384HMAC
},
187 { L
"SHA2-512HMAC", IPSEC_AALG_SHA2_512HMAC
},
188 { L
"AES-XCBC-MAC", IPSEC_AALG_AES_XCBC_MAC
},
189 { L
"NULL", IPSEC_AALG_NULL
},
196 STR2INT mMapEncAlgo
[] = {
197 { L
"NONE", IPSEC_EALG_NONE
},
198 { L
"DESCBC", IPSEC_EALG_DESCBC
},
199 { L
"3DESCBC", IPSEC_EALG_3DESCBC
},
200 { L
"CASTCBC", IPSEC_EALG_CASTCBC
},
201 { L
"BLOWFISHCBC", IPSEC_EALG_BLOWFISHCBC
},
202 { L
"NULL", IPSEC_EALG_NULL
},
203 { L
"AESCBC", IPSEC_EALG_AESCBC
},
204 { L
"AESCTR", IPSEC_EALG_AESCTR
},
205 { L
"AES-CCM-ICV8", IPSEC_EALG_AES_CCM_ICV8
},
206 { L
"AES-CCM-ICV12",IPSEC_EALG_AES_CCM_ICV12
},
207 { L
"AES-CCM-ICV16",IPSEC_EALG_AES_CCM_ICV16
},
208 { L
"AES-GCM-ICV8", IPSEC_EALG_AES_GCM_ICV8
},
209 { L
"AES-GCM-ICV12",IPSEC_EALG_AES_GCM_ICV12
},
210 { L
"AES-GCM-ICV16",IPSEC_EALG_AES_GCM_ICV16
},
217 STR2INT mMapAuthProto
[] = {
218 { L
"IKEv1", EfiIPsecAuthProtocolIKEv1
},
219 { L
"IKEv2", EfiIPsecAuthProtocolIKEv2
},
226 STR2INT mMapAuthMethod
[] = {
227 { L
"PreSharedSecret", EfiIPsecAuthMethodPreSharedSecret
},
228 { L
"Certificates", EfiIPsecAuthMethodCertificates
},
232 EFI_IPSEC2_PROTOCOL
*mIpSec
;
233 EFI_IPSEC_CONFIG_PROTOCOL
*mIpSecConfig
;
234 EFI_HII_HANDLE mHiiHandle
;
235 CHAR16 mAppName
[] = L
"IpSecConfig";
238 // Used for IpSecConfigRetriveCheckListByName only to check the validation of user input
240 VAR_CHECK_ITEM mIpSecConfigVarCheckList
[] = {
241 { L
"-enable", BIT(1)|BIT(0), BIT(1), BIT(2)|BIT(1)|BIT(0), 0 },
242 { L
"-disable", BIT(1)|BIT(0), BIT(1), BIT(2)|BIT(1)|BIT(0), 0 },
243 { L
"-status", BIT(1)|BIT(0), BIT(1), BIT(2)|BIT(1)|BIT(0), 0 },
244 { L
"-p", BIT(1), 0, BIT(2)|BIT(1)|BIT(0), 0 },
246 { L
"-a", BIT(0), 0, BIT(2)|BIT(1)|BIT(0), 0 },
247 { L
"-i", BIT(0), 0, BIT(2)|BIT(1)|BIT(0), 0 },
248 { L
"-d", BIT(0), 0, BIT(2)|BIT(1)|BIT(0), 0 },
249 { L
"-e", BIT(0), 0, BIT(2)|BIT(1)|BIT(0), 0 },
250 { L
"-l", BIT(0), 0, BIT(2)|BIT(1)|BIT(0), 0 },
251 { L
"-f", BIT(0), 0, BIT(2)|BIT(1)|BIT(0), 0 },
253 { L
"-?", BIT(0), BIT(0), BIT(2)|BIT(1)|BIT(0), 0 },
258 { L
"--local", 0, 0, BIT(2)|BIT(1), 0 },
259 { L
"--remote", 0, 0, BIT(2)|BIT(1), 0 },
260 { L
"--proto", 0, 0, BIT(2)|BIT(1), 0 },
261 { L
"--local-port", 0, 0, BIT(2)|BIT(1), BIT(0) },
262 { L
"--remote-port", 0, 0, BIT(2)|BIT(1), BIT(0) },
263 { L
"--icmp-type", 0, 0, BIT(2)|BIT(1), BIT(1) },
264 { L
"--icmp-code", 0, 0, BIT(2)|BIT(1), BIT(1) },
269 { L
"--name", 0, 0, BIT(2), 0 },
270 { L
"--packet-flag", 0, 0, BIT(2), 0 },
271 { L
"--action", 0, 0, BIT(2)|BIT(1), 0 },
272 { L
"--lifebyte", 0, 0, BIT(2)|BIT(1), 0 },
273 { L
"--lifetime-soft", 0, 0, BIT(2)|BIT(1), 0 },
274 { L
"--lifetime", 0, 0, BIT(2)|BIT(1), 0 },
275 { L
"--mode", 0, 0, BIT(2)|BIT(1), 0 },
276 { L
"--tunnel-local", 0, 0, BIT(2), 0 },
277 { L
"--tunnel-remote", 0, 0, BIT(2), 0 },
278 { L
"--dont-fragment", 0, 0, BIT(2), 0 },
279 { L
"--ipsec-proto", 0, 0, BIT(2)|BIT(1), 0 },
280 { L
"--auth-algo", 0, 0, BIT(2)|BIT(1), 0 },
281 { L
"--encrypt-algo", 0, 0, BIT(2)|BIT(1), 0 },
283 { L
"--ext-sequence", 0, 0, BIT(2), BIT(2) },
284 { L
"--sequence-overflow", 0, 0, BIT(2), BIT(2) },
285 { L
"--fragment-check", 0, 0, BIT(2), BIT(2) },
286 { L
"--ext-sequence-", 0, 0, BIT(2), BIT(3) },
287 { L
"--sequence-overflow-", 0, 0, BIT(2), BIT(3) },
288 { L
"--fragment-check-", 0, 0, BIT(2), BIT(3) },
294 { L
"--spi", 0, 0, BIT(1), 0 },
295 { L
"--tunnel-dest", 0, 0, BIT(1), 0 },
296 { L
"--tunnel-source", 0, 0, BIT(1), 0 },
297 { L
"--lookup-spi", 0, 0, BIT(1), 0 },
298 { L
"--lookup-ipsec-proto", 0, 0, BIT(1), 0 },
299 { L
"--lookup-dest", 0, 0, BIT(1), 0 },
307 { L
"--sequence-number", 0, 0, BIT(1), 0 },
308 { L
"--antireplay-window", 0, 0, BIT(1), 0 },
309 { L
"--auth-key", 0, 0, BIT(1), 0 },
310 { L
"--encrypt-key", 0, 0, BIT(1), 0 },
311 { L
"--path-mtu", 0, 0, BIT(1), 0 },
314 // The example to add a PAD:
315 // "-A --peer-id Mike [--peer-address 10.23.2.2] --auth-proto IKE1/IKE2
316 // --auth-method PreSharedSeceret/Certificate --ike-id
317 // --auth-data 343343 --revocation-data 2342432"
318 // The example to delete a PAD:
319 // "-D * --lookup-peer-id Mike [--lookup-peer-address 10.23.2.2]"
321 // The example to edit a PAD:
322 // "-E * --lookup-peer-id Mike --auth-method Certificate"
327 { L
"--peer-id", 0, 0, BIT(0), BIT(4) },
328 { L
"--peer-address", 0, 0, BIT(0), BIT(5) },
329 { L
"--auth-proto", 0, 0, BIT(0), 0 },
330 { L
"--auth-method", 0, 0, BIT(0), 0 },
331 { L
"--IKE-ID", 0, 0, BIT(0), BIT(6) },
332 { L
"--IKE-ID-", 0, 0, BIT(0), BIT(7) },
333 { L
"--auth-data", 0, 0, BIT(0), 0 },
334 { L
"--revocation-data", 0, 0, BIT(0), 0 },
335 { L
"--lookup-peer-id", 0, 0, BIT(0), BIT(4) },
336 { L
"--lookup-peer-address",0, 0, BIT(0), BIT(5) },
338 { NULL
, 0, 0, 0, 0 },
342 The function to allocate the proper sized buffer for various
345 @param[in, out] Status Current status.
346 @param[in, out] Buffer Current allocated buffer, or NULL.
347 @param[in] BufferSize Current buffer size needed
349 @retval TRUE If the buffer was reallocated and the caller should try the API again.
350 @retval FALSE If the buffer was not reallocated successfully.
354 IN OUT EFI_STATUS
*Status
,
355 IN OUT VOID
**Buffer
,
361 ASSERT (Status
!= NULL
);
362 ASSERT (Buffer
!= NULL
);
365 // If this is an initial request, buffer will be null with a new buffer size.
367 if ((NULL
== *Buffer
) && (BufferSize
!= 0)) {
368 *Status
= EFI_BUFFER_TOO_SMALL
;
372 // If the status code is "buffer too small", resize the buffer.
375 if (*Status
== EFI_BUFFER_TOO_SMALL
) {
377 if (*Buffer
!= NULL
) {
381 *Buffer
= AllocateZeroPool (BufferSize
);
383 if (*Buffer
!= NULL
) {
386 *Status
= EFI_OUT_OF_RESOURCES
;
391 // If there's an error, free the buffer.
393 if (!TryAgain
&& EFI_ERROR (*Status
) && (*Buffer
!= NULL
)) {
402 Function returns an array of handles that support the requested protocol
403 in a buffer allocated from a pool.
405 @param[in] SearchType Specifies which handle(s) are to be returned.
406 @param[in] Protocol Provides the protocol to search by.
407 This parameter is only valid for SearchType ByProtocol.
409 @param[in] SearchKey Supplies the search key depending on the SearchType.
410 @param[in, out] NoHandles The number of handles returned in Buffer.
411 @param[out] Buffer A pointer to the buffer to return the requested array of
412 handles that support Protocol.
414 @retval EFI_SUCCESS The resulting array of handles was returned.
415 @retval Others Other mistake case.
419 IN EFI_LOCATE_SEARCH_TYPE SearchType
,
420 IN EFI_GUID
*Protocol OPTIONAL
,
421 IN VOID
*SearchKey OPTIONAL
,
422 IN OUT UINTN
*NoHandles
,
423 OUT EFI_HANDLE
**Buffer
429 ASSERT (NoHandles
!= NULL
);
430 ASSERT (Buffer
!= NULL
);
433 // Initialize for GrowBuffer loop.
435 Status
= EFI_SUCCESS
;
437 BufferSize
= 50 * sizeof (EFI_HANDLE
);
440 // Call the real function.
442 while (GrowBuffer (&Status
, (VOID
**) Buffer
, BufferSize
)) {
443 Status
= gBS
->LocateHandle (
452 *NoHandles
= BufferSize
/ sizeof (EFI_HANDLE
);
453 if (EFI_ERROR (Status
)) {
461 Find the first instance of this protocol in the system and return its interface.
463 @param[in] ProtocolGuid The guid of the protocol.
464 @param[out] Interface The pointer to the first instance of the protocol.
466 @retval EFI_SUCCESS A protocol instance matching ProtocolGuid was found.
467 @retval Others A protocol instance matching ProtocolGuid was not found.
471 IN EFI_GUID
*ProtocolGuid
,
485 Status
= LocateHandle (ByProtocol
, ProtocolGuid
, NULL
, &NumberHandles
, &Handles
);
486 if (EFI_ERROR (Status
)) {
487 DEBUG ((EFI_D_INFO
, "LibLocateProtocol: Handle not found\n"));
491 for (Index
= 0; Index
< NumberHandles
; Index
++) {
492 ASSERT (Handles
!= NULL
);
493 Status
= gBS
->HandleProtocol (
499 if (!EFI_ERROR (Status
)) {
504 if (Handles
!= NULL
) {
512 Helper function called to check the conflicted flags.
514 @param[in] CheckList The pointer to the VAR_CHECK_ITEM table.
515 @param[in] ParamPackage The pointer to the ParamPackage list.
517 @retval EFI_SUCCESS No conflicted flags.
518 @retval EFI_INVALID_PARAMETER The input parameter is erroroneous or there are some conflicted flags.
521 IpSecConfigRetriveCheckListByName (
522 IN VAR_CHECK_ITEM
*CheckList
,
523 IN LIST_ENTRY
*ParamPackage
528 VAR_CHECK_ITEM
*Item
;
540 Item
= mIpSecConfigVarCheckList
;
542 if ((ParamPackage
== NULL
) || (CheckList
== NULL
)) {
543 return EFI_INVALID_PARAMETER
;
547 // Enumerate through the list of parameters that are input by user.
549 for (Node
= GetFirstNode (ParamPackage
); !IsNull (ParamPackage
, Node
); Node
= GetNextNode (ParamPackage
, Node
)) {
550 if (((SHELL_PARAM_PACKAGE
*) Node
)->Name
!= NULL
) {
552 // Enumerate the check list that defines the conflicted attributes of each flag.
554 for (; Item
->VarName
!= NULL
; Item
++) {
555 if (StrCmp (((SHELL_PARAM_PACKAGE
*) Node
)->Name
, Item
->VarName
) == 0) {
558 Attribute1
= Item
->Attribute1
;
559 Attribute2
= Item
->Attribute2
;
560 Attribute3
= Item
->Attribute3
;
561 Attribute4
= Item
->Attribute4
;
563 Attribute1
&= Item
->Attribute1
;
564 Attribute2
|= Item
->Attribute2
;
565 Attribute3
&= Item
->Attribute3
;
566 Attribute4
|= Item
->Attribute4
;
567 if (Attribute1
!= 0) {
568 return EFI_INVALID_PARAMETER
;
571 if (Attribute2
!= 0) {
572 if ((Index
== 2) && (StrCmp (Item
->VarName
, L
"-p") == 0)) {
576 return EFI_INVALID_PARAMETER
;
579 if (Attribute3
== 0) {
580 return EFI_INVALID_PARAMETER
;
582 if (((Attribute4
& 0xFF) == 0x03) || ((Attribute4
& 0xFF) == 0x0C) ||
583 ((Attribute4
& 0xFF) == 0x30) || ((Attribute4
& 0xFF) == 0xC0)) {
584 return EFI_INVALID_PARAMETER
;
591 Item
= mIpSecConfigVarCheckList
;
599 This is the declaration of an EFI image entry point. This entry point is
600 the same for UEFI Applications, UEFI OS Loaders, and UEFI Drivers, including
601 both device drivers and bus drivers.
603 The entry point for IpSecConfig application that parse the command line input and call an IpSecConfig process.
605 @param[in] ImageHandle The image handle of this application.
606 @param[in] SystemTable The pointer to the EFI System Table.
608 @retval EFI_SUCCESS The operation completed successfully.
613 InitializeIpSecConfig (
614 IN EFI_HANDLE ImageHandle
,
615 IN EFI_SYSTEM_TABLE
*SystemTable
619 EFI_IPSEC_CONFIG_DATA_TYPE DataType
;
621 LIST_ENTRY
*ParamPackage
;
622 CONST CHAR16
*ValueStr
;
623 CHAR16
*ProblemParam
;
624 UINTN NonOptionCount
;
627 // Register our string package with HII and return the handle to it.
629 mHiiHandle
= HiiAddPackages (&gEfiCallerIdGuid
, ImageHandle
, IpSecConfigStrings
, NULL
);
630 ASSERT (mHiiHandle
!= NULL
);
632 Status
= ShellCommandLineParseEx (mIpSecConfigParamList
, &ParamPackage
, &ProblemParam
, TRUE
, FALSE
);
633 if (EFI_ERROR (Status
)) {
634 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_UNKNOWN_OPERATION
), mHiiHandle
, ProblemParam
);
638 Status
= IpSecConfigRetriveCheckListByName (mIpSecConfigVarCheckList
, ParamPackage
);
639 if (EFI_ERROR (Status
)) {
640 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_MISTAKEN_OPTIONS
), mHiiHandle
);
644 Status
= LocateProtocol (&gEfiIpSecConfigProtocolGuid
, (VOID
**) &mIpSecConfig
);
645 if (EFI_ERROR (Status
) || mIpSecConfig
== NULL
) {
646 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_PROTOCOL_INEXISTENT
), mHiiHandle
, mAppName
);
650 Status
= LocateProtocol (&gEfiIpSec2ProtocolGuid
, (VOID
**) &mIpSec
);
651 if (EFI_ERROR (Status
) || mIpSec
== NULL
) {
652 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_PROTOCOL_INEXISTENT
), mHiiHandle
, mAppName
);
659 if (ShellCommandLineGetFlag (ParamPackage
, L
"-enable")) {
660 if (!(mIpSec
->DisabledFlag
)) {
661 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_ALREADY_ENABLE
), mHiiHandle
, mAppName
);
666 Value
= IPSEC_STATUS_ENABLED
;
667 Status
= gRT
->SetVariable (
668 IPSECCONFIG_STATUS_NAME
,
669 &gEfiIpSecConfigProtocolGuid
,
670 EFI_VARIABLE_BOOTSERVICE_ACCESS
| EFI_VARIABLE_NON_VOLATILE
,
674 if (!EFI_ERROR (Status
)) {
675 mIpSec
->DisabledFlag
= FALSE
;
676 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_ENABLE_SUCCESS
), mHiiHandle
, mAppName
);
678 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_ENABLE_FAILED
), mHiiHandle
, mAppName
);
688 if (ShellCommandLineGetFlag (ParamPackage
, L
"-disable")) {
689 if (mIpSec
->DisabledFlag
) {
690 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_ALREADY_DISABLE
), mHiiHandle
, mAppName
);
693 // Set disable flag; however, leave it to be disabled in the callback function of DisabledEvent.
695 gBS
->SignalEvent (mIpSec
->DisabledEvent
);
696 if (mIpSec
->DisabledFlag
) {
697 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_DISABLE_SUCCESS
), mHiiHandle
, mAppName
);
699 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_DISABLE_FAILED
), mHiiHandle
, mAppName
);
709 if (ShellCommandLineGetFlag (ParamPackage
, L
"-status")) {
710 if (mIpSec
->DisabledFlag
) {
711 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_STATUS_DISABLE
), mHiiHandle
, mAppName
);
713 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_STATUS_ENABLE
), mHiiHandle
, mAppName
);
719 // Try to get policy database type.
721 DataType
= (EFI_IPSEC_CONFIG_DATA_TYPE
) - 1;
722 ValueStr
= ShellCommandLineGetValue (ParamPackage
, L
"-p");
723 if (ValueStr
!= NULL
) {
724 DataType
= (EFI_IPSEC_CONFIG_DATA_TYPE
) MapStringToInteger (ValueStr
, mMapPolicy
);
725 if (DataType
== -1) {
726 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_INCORRECT_DB
), mHiiHandle
, mAppName
, ValueStr
);
731 if (ShellCommandLineGetFlag (ParamPackage
, L
"-?")) {
732 if (DataType
== -1) {
733 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_HELP
), mHiiHandle
);
738 case IPsecConfigDataTypeSpd
:
739 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_SPD_HELP
), mHiiHandle
);
742 case IPsecConfigDataTypeSad
:
743 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_SAD_HELP
), mHiiHandle
);
746 case IPsecConfigDataTypePad
:
747 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_PAD_HELP
), mHiiHandle
);
751 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_INCORRECT_DB
), mHiiHandle
);
758 NonOptionCount
= ShellCommandLineGetCount (ParamPackage
);
759 if ((NonOptionCount
- 1) > 0) {
760 ValueStr
= ShellCommandLineGetRawValue (ParamPackage
, (UINT32
) (NonOptionCount
- 1));
761 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_REDUNDANCY_MANY
), mHiiHandle
, mAppName
, ValueStr
);
765 if (DataType
== -1) {
766 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_MISSING_DB
), mHiiHandle
, mAppName
);
770 if (ShellCommandLineGetFlag (ParamPackage
, L
"-a")) {
771 Status
= AddOrInsertPolicyEntry (DataType
, ParamPackage
);
772 if (EFI_ERROR (Status
)) {
775 } else if (ShellCommandLineGetFlag (ParamPackage
, L
"-i")) {
776 Status
= AddOrInsertPolicyEntry (DataType
, ParamPackage
);
777 if (EFI_ERROR (Status
)) {
780 } else if (ShellCommandLineGetFlag (ParamPackage
, L
"-e")) {
781 Status
= EditPolicyEntry (DataType
, ParamPackage
);
782 if (EFI_ERROR (Status
)) {
785 } else if (ShellCommandLineGetFlag (ParamPackage
, L
"-d")) {
786 Status
= FlushOrDeletePolicyEntry (DataType
, ParamPackage
);
787 if (EFI_ERROR (Status
)) {
790 } else if (ShellCommandLineGetFlag (ParamPackage
, L
"-f")) {
791 Status
= FlushOrDeletePolicyEntry (DataType
, ParamPackage
);
792 if (EFI_ERROR (Status
)) {
795 } else if (ShellCommandLineGetFlag (ParamPackage
, L
"-l")) {
796 Status
= ListPolicyEntry (DataType
, ParamPackage
);
797 if (EFI_ERROR (Status
)) {
801 ShellPrintHiiEx (-1, -1, NULL
, STRING_TOKEN (STR_IPSEC_CONFIG_UNKNOWN_OPERATION
), mHiiHandle
, mAppName
);
806 ShellCommandLineFreeVarList (ParamPackage
);
807 HiiRemovePackages (mHiiHandle
);