StrongSwan.SQL

This library allows for the manipulation of strongSwan connection configuration stored in a MySQL database in a manner that is compatible with the strongSwan SQL plugin for charon.

How to use this module:

The strongSwan IPsec package offers the means to store connection configuration in a SQL database. This module offers some facilities to manipulate these config elements from Haskell code in a simplified abstracted way. This library offers two approaches to manipulating strongswan configuration in an SQL database as expected by the SQL plugin. See Managed vs Manual API below.

Initialization

mkContext :: (Failable m, MonadIO m) => Settings -> m Context

Initialize an SQL context. Use the Default instance of Settings and fine tune parameters as needed. For example:

   context <- init def { dbName = "acmeDB" }
 

Managed API

Since managing each configuration object per hand and establishing the relationships amongst them can be tricky and demands internal knowledge of the SQL plugin inner workings, a special API is offered in which all configuration parameters are bundled together in a single type (see IPSecSettings). The simplified API allows then for writing, reading and deleting these, while behind bars the required elements are created and linked together unbeknownst to the caller. This of course greatly simplifies things but the catch is that the ability to share configuration elements amongst connections is of course lost. Each managed connection configuration gets a separate IKE, Child SA, Peer config etc and no attempt is made to reuse them amongst managed connections.

writeIPSecSettings :: (Failable m, MonadIO m) => IPSecSettings -> Context -> m IPSecSettings

Pushes an IPsec configuration into the DB specified in the given context. Note that if there are any existing elements in the configuration, they are first released (and their inter relationships in the SQL DB removed), before creating them. As a result the different IDs inside the elements etc will probably change. This is the reason why a new IPSecSettings value is returned as a result of the operation and the value "pushed" to the DB originally should not be used any further.

findIPSecSettings :: (Failable m, MonadIO m) => Text -> Context -> m IPSecSettings

Search for an IPsec connection configuration by its unique name. Take note of the Failable context, which means that unless it is desired that this function throws an asynchronous exception upon not finding a configuration, you probably want to run this inside a monadic transformer such as MaybeT or ExceptT

lookupIPSecSettings :: (Failable m, MonadIO m) => Text -> Context -> m (Maybe IPSecSettings)

Lookup an IPsec connection configuration by its unique name. Returns Nothing if the connection is not found. Other errors are reported according to the Failable context the function is called on (MaybeT, ExceptT, IO, etc).

deleteIPSecSettings :: (Failable m, MonadIO m) => IPSecSettings -> Context -> m IPSecSettings

Removes the specified IPSecSettings from the DB, releasing all linked elements. The returned IPSecSettings will contain now "unlinked" elements (i.e. no IDs, etc).

addSecret :: (Failable m, MonadIO m) => Identity -> SharedSecret -> Context -> m Identity

Adds a shared secret to a given identity. If the identity doesn't exist it will get created. If the identity already exists and it already has a secret of the same type, it will be overwritten. This means there can only be one secret of any given type per identity (which makes sense of course from strongswan's perspective).

removeSecret :: (Failable m, MonadIO m) => Identity -> SharedSecretType -> Context -> m ()

Removes a secret of the given type (if present) from the specified identity

removeIdentity :: (Failable m, MonadIO m) => Identity -> Context -> m ()

Removes an identity and its secrets and related entries altogether

Manual API

The different strongswan configuration elements are mapped to a Haskell type and they can be manually written or read from the SQL database. This offers utmost control in terms of what elements get created and how they are interlinked. So for example one can create a single IKE session configuration to be shared for all connections or have some child SA configurations being shared amongst peers of a given type, etc. The downside of course to this level of control is that it requires for the user of the library to be familiar with the (poorly documented) way in which the plugin expects the relationships to be expressed in terms of entries in the SQL tables etc.

The manual API has been reverse engineered based on the SQL table definitions available here

• Child SA : All configuration parameters related to an IPsec SA.
• IKE Configuration : Configuration applicable to the IKE session (phase 1 in IKEv1 parlance).
• Peer Configuration : All elements related to configuration of a peering connection. A peer connection links to a specific IKE configuration (by means of ID), and it is furthermore associated to the Child SA by means of a Peer2ChildConfig type.
• Traffic Selectors: These are independent values linked to a Child SA by means of a Child2TSConfig type.

The manual API consists mainly of one writeXXX, findXXX, lookupXXX and a deleteXXX function for each object to be stored as an SQL row in its respective table. The writeXXX functions trigger an insertion or an update of the given row in the SQL database depending on whether the given object owns a key already or not (usually an ID). The search functions (findXXX and lookupXXX) perform a search in the DB for the given key. The difference is that a findXXX will trigger a failure in the Failable context with a NotFound error and that the lookupXXX functions simply return Nothing if a key doesn't exist in the DB (they can of course trigger other errors in the Failable context)

writeChild2TSConfig :: (Failable m, MonadIO m) => Child2TSConfig -> Context -> m (Result (Int, Int))

writeChildSAConfig :: (Failable m, MonadIO m) => ChildSAConfig -> Context -> m (Result Int)

writeIdentity :: (Failable m, MonadIO m) => Identity -> Context -> m (Result Int)

writeIKEConfig :: (Failable m, MonadIO m) => IKEConfig -> Context -> m (Result Int)

writePeerConfig :: (Failable m, MonadIO m) => PeerConfig -> Context -> m (Result Int)

writePeer2ChildConfig :: (Failable m, MonadIO m) => Peer2ChildConfig -> Context -> m (Result (Int, Int))

writeSharedSecret :: (Failable m, MonadIO m) => SharedSecret -> Context -> m (Result Int)

writeSSIdentity :: (Failable m, MonadIO m) => SharedSecretIdentity -> Context -> m (Result (Int, Int))

writeTrafficSelector :: (Failable m, MonadIO m) => TrafficSelector -> Context -> m (Result Int)

lookupChild2TSConfig :: (Failable m, MonadIO m) => Int -> Context -> m [Child2TSConfig]

findChildSAConfig :: (Failable m, MonadIO m) => Int -> Context -> m ChildSAConfig

findChildSAConfigByName :: (Failable m, MonadIO m) => Text -> Context -> m [ChildSAConfig]

findIdentity :: (Failable m, MonadIO m) => Int -> Context -> m Identity

findIdentityBySelf :: (Failable m, MonadIO m) => Identity -> Context -> m Identity

findIKEConfig :: (Failable m, MonadIO m) => Int -> Context -> m IKEConfig

findPeerConfig :: (Failable m, MonadIO m) => Int -> Context -> m PeerConfig

findPeerConfigByName :: (Failable m, MonadIO m) => Text -> Context -> m [PeerConfig]

findPeer2ChildConfig :: (Failable m, MonadIO m) => Int -> Int -> Context -> m Peer2ChildConfig

findSharedSecret :: (Failable m, MonadIO m) => Int -> Context -> m SharedSecret

findSSIdentity :: (Failable m, MonadIO m) => Int -> Context -> m [SharedSecretIdentity]

findTrafficSelector :: (Failable m, MonadIO m) => Int -> Context -> m TrafficSelector

lookupChildSAConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Maybe ChildSAConfig)

lookupIdentity :: (Failable m, MonadIO m) => Int -> Context -> m (Maybe Identity)

lookupIdentityBySelf :: (Failable m, MonadIO m) => Identity -> Context -> m (Maybe Identity)

lookupIKEConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Maybe IKEConfig)

lookupPeerConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Maybe PeerConfig)

lookupPeer2ChildConfig :: (Failable m, MonadIO m) => Int -> Int -> Context -> m (Maybe Peer2ChildConfig)

lookupSharedSecret :: (Failable m, MonadIO m) => Int -> Context -> m (Maybe SharedSecret)

lookupTrafficSelector :: (Failable m, MonadIO m) => Int -> Context -> m (Maybe TrafficSelector)

deleteChild2TSConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Result Int)

deleteChildSAConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Result Int)

deleteIdentity :: (Failable m, MonadIO m) => Int -> Context -> m (Result Int)

deleteIKEConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Result Int)

deleteSharedSecret :: (Failable m, MonadIO m) => Int -> Context -> m (Result Int)

deleteSSIdentity :: (Failable m, MonadIO m) => SharedSecretIdentity -> Context -> m (Result (Int, Int))

deletePeer2ChildConfig :: (Failable m, MonadIO m) => Int -> Int -> Context -> m (Result (Int, Int))

deletePeerConfig :: (Failable m, MonadIO m) => Int -> Context -> m (Result Int)

Lenses

There are lenses exported to facilitate access to the records in the type section below.

ikeReqCert :: Lens' IKEConfig Bool

ikeRemoteAddress :: Lens' IKEConfig Text

ikeLocalAddress :: Lens' IKEConfig Text

ikeId :: Lens' IKEConfig (Maybe Int)

ikeForceEncap :: Lens' IKEConfig Bool

childSAUpDown :: Lens' ChildSAConfig (Maybe Text)

childSAStartAction :: Lens' ChildSAConfig SAAction

childSAReqID :: Lens' ChildSAConfig Word32

childSARekeyTime :: Lens' ChildSAConfig Word32

childSAName :: Lens' ChildSAConfig Text

childSAMode :: Lens' ChildSAConfig SAMode

childSAMark :: Lens' ChildSAConfig (Maybe Text)

childSALifeTime :: Lens' ChildSAConfig Word32

childSAJitter :: Lens' ChildSAConfig Word32

childSAId :: Lens' ChildSAConfig (Maybe Int)

childSAIPCompression :: Lens' ChildSAConfig Bool

childSAHostAccess :: Lens' ChildSAConfig Bool

childSADPDAction :: Lens' ChildSAConfig SAAction

childSACloseAction :: Lens' ChildSAConfig SAAction

peerCfgVirtual :: Lens' PeerConfig (Maybe Text)

peerCfgUniqueIds :: Lens' PeerConfig Bool

peerCfgRemoteId :: Lens' PeerConfig (Maybe Int)

peerCfgRekeyTime :: Lens' PeerConfig Word32

peerCfgReauthTime :: Lens' PeerConfig Word32

peerCfgPool :: Lens' PeerConfig (Maybe Text)

peerCfgPeerId :: Lens' PeerConfig Int

peerCfgOverTime :: Lens' PeerConfig Word32

peerCfgName :: Lens' PeerConfig Text

peerCfgMobike :: Lens' PeerConfig Bool

peerCfgMediation :: Lens' PeerConfig Bool

peerCfgMediatedBy :: Lens' PeerConfig Int

peerCfgLocalId :: Lens' PeerConfig (Maybe Int)

peerCfgKeyingTries :: Lens' PeerConfig Word8

peerCfgJitter :: Lens' PeerConfig Word32

peerCfgId :: Lens' PeerConfig (Maybe Int)

peerCfgIKEVersion :: Lens' PeerConfig Word8

peerCfgIKEConfigId :: Lens' PeerConfig (Maybe Int)

peerCfgEAPVendor :: Lens' PeerConfig Word16

peerCfgEAPType :: Lens' PeerConfig EAPType

peerCfgDPDDelay :: Lens' PeerConfig Word32

peerCfgCertPolicy :: Lens' PeerConfig CertPolicy

peerCfgAuthMethod :: Lens' PeerConfig AuthMethod

tsType :: Lens' TrafficSelector TrafficSelectorType

tsStartPort :: Lens' TrafficSelector PortNumber

tsStartAddr :: Lens' TrafficSelector IP

tsProtocol :: Lens' TrafficSelector Word16

tsId :: Lens' TrafficSelector (Maybe Int)

tsEndPort :: Lens' TrafficSelector PortNumber

tsEndAddr :: Lens' TrafficSelector IP

ssType :: Lens' SharedSecret SharedSecretType

ssId :: Lens' SharedSecret (Maybe Int)

ssData :: Lens' SharedSecret ByteString

sharedSecretId :: Lens' SharedSecretIdentity Int

identityId :: Lens' SharedSecretIdentity Int

getRemoteTrafficSelector :: Lens' IPSecSettings TrafficSelector

getRemoteIdentity :: Lens' IPSecSettings Identity

getPeerConfig :: Lens' IPSecSettings PeerConfig

getLocalTrafficSelector :: Lens' IPSecSettings TrafficSelector

getLocalIdentity :: Lens' IPSecSettings Identity

getIPSecCfgName :: Lens' IPSecSettings Text

getIKEConfig :: Lens' IPSecSettings IKEConfig

getChildSAConfig :: Lens' IPSecSettings ChildSAConfig

dbHost :: Lens' Settings HostName

dbPort :: Lens' Settings PortNumber

dbName :: Lens' Settings String

dbUser :: Lens' Settings String

dbPassword :: Lens' Settings String

dbCharSet :: Lens' Settings MySQLCharacterEncoding

Types

data AuthMethod

Constructors

AnyAuth

PubKey

PSK

EAP

XAUTH

Instances

Enum AuthMethod

Defined in StrongSwan.SQL.Types

Methods

succ :: AuthMethod -> AuthMethod

pred :: AuthMethod -> AuthMethod

toEnum :: Int -> AuthMethod

fromEnum :: AuthMethod -> Int

enumFrom :: AuthMethod -> [AuthMethod]

enumFromThen :: AuthMethod -> AuthMethod -> [AuthMethod]

enumFromTo :: AuthMethod -> AuthMethod -> [AuthMethod]

enumFromThenTo :: AuthMethod -> AuthMethod -> AuthMethod -> [AuthMethod]

Eq AuthMethod

Defined in StrongSwan.SQL.Types

Methods

(==) :: AuthMethod -> AuthMethod -> Bool

(/=) :: AuthMethod -> AuthMethod -> Bool

Show AuthMethod

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> AuthMethod -> ShowS

show :: AuthMethod -> String

showList :: [AuthMethod] -> ShowS

data ChildSAConfig

Constructors

ChildSAConfig

Fields

• _childSAId :: Maybe Int
• _childSAName :: Text
• _childSALifeTime :: Word32
• _childSARekeyTime :: Word32
• _childSAJitter :: Word32
• _childSAUpDown :: Maybe Text
• _childSAHostAccess :: Bool
• _childSAMode :: SAMode
• _childSAStartAction :: SAAction
• _childSADPDAction :: SAAction
• _childSACloseAction :: SAAction
• _childSAIPCompression :: Bool
• _childSAReqID :: Word32
• _childSAMark :: Maybe Text

Instances

Eq ChildSAConfig

Defined in StrongSwan.SQL.Types

Methods

(==) :: ChildSAConfig -> ChildSAConfig -> Bool

(/=) :: ChildSAConfig -> ChildSAConfig -> Bool

Show ChildSAConfig

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> ChildSAConfig -> ShowS

show :: ChildSAConfig -> String

showList :: [ChildSAConfig] -> ShowS

Default ChildSAConfig

Defined in StrongSwan.SQL.Types

Methods

def :: ChildSAConfig

SQLRow ChildSAConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: ChildSAConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> ChildSAConfig

data Child2TSConfig

Constructors

Child2TSConfig

Fields

• c2tsChildCfgId :: Int
• c2tsTrafficSelectorCfgId :: Int
• c2tsTrafficSelectorKind :: TrafficSelectorKind

Instances

Show Child2TSConfig

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> Child2TSConfig -> ShowS

show :: Child2TSConfig -> String

showList :: [Child2TSConfig] -> ShowS

SQLRow Child2TSConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: Child2TSConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> Child2TSConfig

data CertPolicy

Constructors

AlwaysSend

SendIfAsked

NeverSend

Instances

Enum CertPolicy

Defined in StrongSwan.SQL.Types

Methods

succ :: CertPolicy -> CertPolicy

pred :: CertPolicy -> CertPolicy

toEnum :: Int -> CertPolicy

fromEnum :: CertPolicy -> Int

enumFrom :: CertPolicy -> [CertPolicy]

enumFromThen :: CertPolicy -> CertPolicy -> [CertPolicy]

enumFromTo :: CertPolicy -> CertPolicy -> [CertPolicy]

enumFromThenTo :: CertPolicy -> CertPolicy -> CertPolicy -> [CertPolicy]

Eq CertPolicy

Defined in StrongSwan.SQL.Types

Methods

(==) :: CertPolicy -> CertPolicy -> Bool

(/=) :: CertPolicy -> CertPolicy -> Bool

Show CertPolicy

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> CertPolicy -> ShowS

show :: CertPolicy -> String

showList :: [CertPolicy] -> ShowS

type Context = MVar Context_

data EAPType

Constructors

EAPUnspecified

EAPMD5

EAPGTC

EAPTLS

EAPSIM

EAPTTLS

EAPAKA

EAPMSCHAPV2

EAPTNC

EAPRADIUS

Instances

Enum EAPType

Defined in StrongSwan.SQL.Types

Methods

succ :: EAPType -> EAPType

pred :: EAPType -> EAPType

toEnum :: Int -> EAPType

fromEnum :: EAPType -> Int

enumFrom :: EAPType -> [EAPType]

enumFromThen :: EAPType -> EAPType -> [EAPType]

enumFromTo :: EAPType -> EAPType -> [EAPType]

enumFromThenTo :: EAPType -> EAPType -> EAPType -> [EAPType]

Eq EAPType

Defined in StrongSwan.SQL.Types

Methods

(==) :: EAPType -> EAPType -> Bool

(/=) :: EAPType -> EAPType -> Bool

Show EAPType

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> EAPType -> ShowS

show :: EAPType -> String

showList :: [EAPType] -> ShowS

data Error

Constructors

UnknownCharacterEncoding Int

UnknownSAMode Int

UnknownSAAction Int

UnknownCertPolicy Int

UnknownAuthMethod Int

UnknownEAPType Int

UnknownTrafficSelectorType Int

UnknownTrafficSelectorKind Int

UnknownSharedSecretType Int

InvalidValueForType String String

SQLValuesMismatch String String

NotFound Text

MultipleResults Text String

FailedOperation Text

Instances

Show Error

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> Error -> ShowS

show :: Error -> String

showList :: [Error] -> ShowS

Exception Error

Defined in StrongSwan.SQL.Types

Methods

toException :: Error -> SomeException

fromException :: SomeException -> Maybe Error

displayException :: Error -> String

data Identity

Constructors

AnyID (Maybe Int)

IPv4AddrID (Maybe Int) IPv4

NameID (Maybe Int) Text

EmailID (Maybe Int) Text Text

RFC 822 Email Address mailbox@domain

IPv6AddrID (Maybe Int) IPv6

ASN1ID (Maybe Int) [ASN1]

OpaqueID (Maybe Int) ByteString

Instances

Eq Identity

Defined in StrongSwan.SQL.Types

Methods

(==) :: Identity -> Identity -> Bool

(/=) :: Identity -> Identity -> Bool

Show Identity

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> Identity -> ShowS

show :: Identity -> String

showList :: [Identity] -> ShowS

Default Identity

Defined in StrongSwan.SQL.Types

Methods

def :: Identity

SQLRow Identity

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: Identity -> [MySQLValue]

fromValues :: [MySQLValue] -> Identity

data IKEConfig

Constructors

IKEConfig

Fields

• _ikeId :: Maybe Int
• _ikeReqCert :: Bool
• _ikeForceEncap :: Bool
• _ikeLocalAddress :: Text
• _ikeRemoteAddress :: Text

Instances

Eq IKEConfig

Defined in StrongSwan.SQL.Types

Methods

(==) :: IKEConfig -> IKEConfig -> Bool

(/=) :: IKEConfig -> IKEConfig -> Bool

Show IKEConfig

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> IKEConfig -> ShowS

show :: IKEConfig -> String

showList :: [IKEConfig] -> ShowS

Default IKEConfig

Defined in StrongSwan.SQL.Types

Methods

def :: IKEConfig

SQLRow IKEConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: IKEConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> IKEConfig

data IPSecSettings

The managed IPsec configuration type encompasses a complete set of elements which are pushed and interlinked as necessary by the Managed API (see above). Note that there are lenses available to facilitate accessing all these fields (see StrongSwan.SQL.Lenses)

Constructors

IPSecSettings

Fields

• _getIPSecCfgName :: Text
• _getIKEConfig :: IKEConfig
• _getChildSAConfig :: ChildSAConfig
• _getPeerConfig :: PeerConfig
• _getLocalTrafficSelector :: TrafficSelector
• _getRemoteTrafficSelector :: TrafficSelector
• _getLocalIdentity :: Identity
• _getRemoteIdentity :: Identity

Instances

Eq IPSecSettings

Defined in StrongSwan.SQL.Types

Methods

(==) :: IPSecSettings -> IPSecSettings -> Bool

(/=) :: IPSecSettings -> IPSecSettings -> Bool

Show IPSecSettings

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> IPSecSettings -> ShowS

show :: IPSecSettings -> String

showList :: [IPSecSettings] -> ShowS

Default IPSecSettings

Defined in StrongSwan.SQL.Types

Methods

def :: IPSecSettings

data PeerConfig

Constructors

PeerConfig

Fields

• _peerCfgId :: Maybe Int
• _peerCfgName :: Text
• _peerCfgIKEVersion :: Word8
• _peerCfgIKEConfigId :: Maybe Int
• _peerCfgLocalId :: Maybe Int
• _peerCfgRemoteId :: Maybe Int
• _peerCfgCertPolicy :: CertPolicy
• _peerCfgUniqueIds :: Bool
• _peerCfgAuthMethod :: AuthMethod
• _peerCfgEAPType :: EAPType
• _peerCfgEAPVendor :: Word16
• _peerCfgKeyingTries :: Word8
• _peerCfgRekeyTime :: Word32
• _peerCfgReauthTime :: Word32
• _peerCfgJitter :: Word32
• _peerCfgOverTime :: Word32
• _peerCfgMobike :: Bool
• _peerCfgDPDDelay :: Word32
• _peerCfgVirtual :: Maybe Text
• _peerCfgPool :: Maybe Text
• _peerCfgMediation :: Bool
• _peerCfgMediatedBy :: Int
• _peerCfgPeerId :: Int

Instances

Eq PeerConfig

Defined in StrongSwan.SQL.Types

Methods

(==) :: PeerConfig -> PeerConfig -> Bool

(/=) :: PeerConfig -> PeerConfig -> Bool

Show PeerConfig

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> PeerConfig -> ShowS

show :: PeerConfig -> String

showList :: [PeerConfig] -> ShowS

Default PeerConfig

Defined in StrongSwan.SQL.Types

Methods

def :: PeerConfig

SQLRow PeerConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: PeerConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> PeerConfig

data Peer2ChildConfig

Constructors

Peer2ChildConfig

Fields

• p2cPeerCfgId :: Int
• p2cChildCfgId :: Int

Instances

Show Peer2ChildConfig

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> Peer2ChildConfig -> ShowS

show :: Peer2ChildConfig -> String

showList :: [Peer2ChildConfig] -> ShowS

SQLRow Peer2ChildConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: Peer2ChildConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> Peer2ChildConfig

data Result a

Constructors

Result

Fields

• lastModifiedKey :: a
• response :: OK

data SAAction

Constructors

None

Route

Restart

Instances

Enum SAAction

Defined in StrongSwan.SQL.Types

Methods

succ :: SAAction -> SAAction

pred :: SAAction -> SAAction

toEnum :: Int -> SAAction

fromEnum :: SAAction -> Int

enumFrom :: SAAction -> [SAAction]

enumFromThen :: SAAction -> SAAction -> [SAAction]

enumFromTo :: SAAction -> SAAction -> [SAAction]

enumFromThenTo :: SAAction -> SAAction -> SAAction -> [SAAction]

Eq SAAction

Defined in StrongSwan.SQL.Types

Methods

(==) :: SAAction -> SAAction -> Bool

(/=) :: SAAction -> SAAction -> Bool

Show SAAction

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> SAAction -> ShowS

show :: SAAction -> String

showList :: [SAAction] -> ShowS

data SAMode

Constructors

Transport

Tunnel

Beet

Pass

Drop

Instances

Enum SAMode

Defined in StrongSwan.SQL.Types

Methods

succ :: SAMode -> SAMode

pred :: SAMode -> SAMode

toEnum :: Int -> SAMode

fromEnum :: SAMode -> Int

enumFrom :: SAMode -> [SAMode]

enumFromThen :: SAMode -> SAMode -> [SAMode]

enumFromTo :: SAMode -> SAMode -> [SAMode]

enumFromThenTo :: SAMode -> SAMode -> SAMode -> [SAMode]

Eq SAMode

Defined in StrongSwan.SQL.Types

Methods

(==) :: SAMode -> SAMode -> Bool

(/=) :: SAMode -> SAMode -> Bool

Show SAMode

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> SAMode -> ShowS

show :: SAMode -> String

showList :: [SAMode] -> ShowS

data Settings

Constructors

Settings

Fields

• _dbName :: String

  Name of the DB to use

• _dbHost :: HostName

  SQL server host (defaults to localhost)

• _dbPort :: PortNumber

  TCP port (defaults to 3306)

• _dbUser :: String

  DB username (defaults to root)

• _dbPassword :: String

  DB user password

• _dbCharSet :: MySQLCharacterEncoding

  Defaults to UTF8MB4

Instances

Show Settings

Defined in StrongSwan.SQL

Methods

showsPrec :: Int -> Settings -> ShowS

show :: Settings -> String

showList :: [Settings] -> ShowS

Default Settings

Defined in StrongSwan.SQL

Methods

def :: Settings

data SharedSecret

Constructors

SharedSecret

Fields

• _ssId :: Maybe Int
• _ssType :: SharedSecretType
• _ssData :: ByteString

Instances

Show SharedSecret

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> SharedSecret -> ShowS

show :: SharedSecret -> String

showList :: [SharedSecret] -> ShowS

Default SharedSecret

Defined in StrongSwan.SQL.Types

Methods

def :: SharedSecret

SQLRow SharedSecret

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: SharedSecret -> [MySQLValue]

fromValues :: [MySQLValue] -> SharedSecret

data SharedSecretIdentity

Constructors

SharedSecretIdentity

Fields

• _sharedSecretId :: Int
• _identityId :: Int

Instances

SQLRow SharedSecretIdentity

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: SharedSecretIdentity -> [MySQLValue]

fromValues :: [MySQLValue] -> SharedSecretIdentity

data SharedSecretType

Constructors

SharedIKE

SharedEAP

SharedRSA

SharedPIN

Instances

Enum SharedSecretType

Defined in StrongSwan.SQL.Types

Methods

succ :: SharedSecretType -> SharedSecretType

pred :: SharedSecretType -> SharedSecretType

toEnum :: Int -> SharedSecretType

fromEnum :: SharedSecretType -> Int

enumFrom :: SharedSecretType -> [SharedSecretType]

enumFromThen :: SharedSecretType -> SharedSecretType -> [SharedSecretType]

enumFromTo :: SharedSecretType -> SharedSecretType -> [SharedSecretType]

enumFromThenTo :: SharedSecretType -> SharedSecretType -> SharedSecretType -> [SharedSecretType]

Eq SharedSecretType

Defined in StrongSwan.SQL.Types

Methods

(==) :: SharedSecretType -> SharedSecretType -> Bool

(/=) :: SharedSecretType -> SharedSecretType -> Bool

Show SharedSecretType

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> SharedSecretType -> ShowS

show :: SharedSecretType -> String

showList :: [SharedSecretType] -> ShowS

data OK

You may get interested in OK packet because it provides information about successful operations.

Constructors

OK

Fields

• okAffectedRows :: !Int

  affected row number

• okLastInsertID :: !Int

  last insert's ID

• okStatus :: !Word16
• okWarningCnt :: !Word16

Instances

Eq OK

Defined in Database.MySQL.Protocol.Packet

Methods

(==) :: OK -> OK -> Bool

(/=) :: OK -> OK -> Bool

Show OK

Defined in Database.MySQL.Protocol.Packet

Methods

showsPrec :: Int -> OK -> ShowS

show :: OK -> String

showList :: [OK] -> ShowS

Binary OK

Defined in Database.MySQL.Protocol.Packet

Methods

put :: OK -> Put

get :: Get OK

putList :: [OK] -> Put

class SQLRow a

Minimal complete definition

toValues, fromValues

Instances

SQLRow SharedSecretIdentity

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: SharedSecretIdentity -> [MySQLValue]

fromValues :: [MySQLValue] -> SharedSecretIdentity

SQLRow SharedSecret

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: SharedSecret -> [MySQLValue]

fromValues :: [MySQLValue] -> SharedSecret

SQLRow Child2TSConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: Child2TSConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> Child2TSConfig

SQLRow TrafficSelector

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: TrafficSelector -> [MySQLValue]

fromValues :: [MySQLValue] -> TrafficSelector

SQLRow Peer2ChildConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: Peer2ChildConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> Peer2ChildConfig

SQLRow PeerConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: PeerConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> PeerConfig

SQLRow ChildSAConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: ChildSAConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> ChildSAConfig

SQLRow IKEConfig

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: IKEConfig -> [MySQLValue]

fromValues :: [MySQLValue] -> IKEConfig

SQLRow Identity

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: Identity -> [MySQLValue]

fromValues :: [MySQLValue] -> Identity

data TrafficSelector

Constructors

TrafficSelector

Fields

• _tsId :: Maybe Int
• _tsType :: TrafficSelectorType
• _tsProtocol :: Word16
• _tsStartAddr :: IP
• _tsEndAddr :: IP
• _tsStartPort :: PortNumber
• _tsEndPort :: PortNumber

Instances

Eq TrafficSelector

Defined in StrongSwan.SQL.Types

Methods

(==) :: TrafficSelector -> TrafficSelector -> Bool

(/=) :: TrafficSelector -> TrafficSelector -> Bool

Show TrafficSelector

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> TrafficSelector -> ShowS

show :: TrafficSelector -> String

showList :: [TrafficSelector] -> ShowS

Default TrafficSelector

Defined in StrongSwan.SQL.Types

Methods

def :: TrafficSelector

SQLRow TrafficSelector

Defined in StrongSwan.SQL.Encoding

Methods

toValues :: TrafficSelector -> [MySQLValue]

fromValues :: [MySQLValue] -> TrafficSelector

data TrafficSelectorType

Constructors

IPv4AddrRange

IPv6AddrRange

Instances

Enum TrafficSelectorType

Defined in StrongSwan.SQL.Types

Methods

succ :: TrafficSelectorType -> TrafficSelectorType

pred :: TrafficSelectorType -> TrafficSelectorType

toEnum :: Int -> TrafficSelectorType

fromEnum :: TrafficSelectorType -> Int

enumFrom :: TrafficSelectorType -> [TrafficSelectorType]

enumFromThen :: TrafficSelectorType -> TrafficSelectorType -> [TrafficSelectorType]

enumFromTo :: TrafficSelectorType -> TrafficSelectorType -> [TrafficSelectorType]

enumFromThenTo :: TrafficSelectorType -> TrafficSelectorType -> TrafficSelectorType -> [TrafficSelectorType]

Eq TrafficSelectorType

Defined in StrongSwan.SQL.Types

Methods

(==) :: TrafficSelectorType -> TrafficSelectorType -> Bool

(/=) :: TrafficSelectorType -> TrafficSelectorType -> Bool

Show TrafficSelectorType

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> TrafficSelectorType -> ShowS

show :: TrafficSelectorType -> String

showList :: [TrafficSelectorType] -> ShowS

data TrafficSelectorKind

Constructors

LocalTS

RemoteTS

LocalDynamicTS

RemoteDynamicTS

Instances

Enum TrafficSelectorKind

Defined in StrongSwan.SQL.Types

Methods

succ :: TrafficSelectorKind -> TrafficSelectorKind

pred :: TrafficSelectorKind -> TrafficSelectorKind

toEnum :: Int -> TrafficSelectorKind

fromEnum :: TrafficSelectorKind -> Int

enumFrom :: TrafficSelectorKind -> [TrafficSelectorKind]

enumFromThen :: TrafficSelectorKind -> TrafficSelectorKind -> [TrafficSelectorKind]

enumFromTo :: TrafficSelectorKind -> TrafficSelectorKind -> [TrafficSelectorKind]

enumFromThenTo :: TrafficSelectorKind -> TrafficSelectorKind -> TrafficSelectorKind -> [TrafficSelectorKind]

Eq TrafficSelectorKind

Defined in StrongSwan.SQL.Types

Methods

(==) :: TrafficSelectorKind -> TrafficSelectorKind -> Bool

(/=) :: TrafficSelectorKind -> TrafficSelectorKind -> Bool

Show TrafficSelectorKind

Defined in StrongSwan.SQL.Types

Methods

showsPrec :: Int -> TrafficSelectorKind -> ShowS

show :: TrafficSelectorKind -> String

showList :: [TrafficSelectorKind] -> ShowS