

CREATE TABLE identities (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  type INTEGER NOT NULL,
  data BLOB NOT NULL,
  UNIQUE (type, data)
);


CREATE TABLE child_configs (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  name TEXT NOT NULL,
  lifetime INTEGER NOT NULL DEFAULT '1500',
  rekeytime INTEGER NOT NULL DEFAULT '1200',
  jitter INTEGER NOT NULL DEFAULT '60',
  updown TEXT DEFAULT NULL,
  hostaccess INTEGER NOT NULL DEFAULT '0',
  mode INTEGER NOT NULL DEFAULT '2',
  start_action INTEGER NOT NULL DEFAULT '0',
  dpd_action INTEGER NOT NULL DEFAULT '0',
  close_action INTEGER NOT NULL DEFAULT '0',
  ipcomp INTEGER NOT NULL DEFAULT '0',
  reqid INTEGER NOT NULL DEFAULT '0'
);
DROP INDEX IF EXISTS child_configs_name;
CREATE INDEX child_configs_name ON child_configs (
  name
);


CREATE TABLE child_config_traffic_selector (
  child_cfg INTEGER NOT NULL,
  traffic_selector INTEGER NOT NULL,
  kind INTEGER NOT NULL
);
DROP INDEX IF EXISTS child_config_traffic_selector_all;
CREATE INDEX child_config_traffic_selector_all ON child_config_traffic_selector (
  child_cfg, traffic_selector
);

CREATE TABLE proposals (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  proposal TEXT NOT NULL
);


CREATE TABLE child_config_proposal (
  child_cfg INTEGER NOT NULL,
  prio INTEGER NOT NULL,
  prop INTEGER NOT NULL
);


CREATE TABLE ike_configs (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  certreq INTEGER NOT NULL DEFAULT '1',
  force_encap INTEGER NOT NULL DEFAULT '0',
  local TEXT NOT NULL,
  remote TEXT NOT NULL
);


CREATE TABLE ike_config_proposal (
  ike_cfg INTEGER NOT NULL,
  prio INTEGER NOT NULL,
  prop INTEGER NOT NULL
);


CREATE TABLE peer_configs (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  name TEXT NOT NULL,
  ike_version INTEGER NOT NULL DEFAULT '2',
  ike_cfg INTEGER NOT NULL,
  local_id TEXT NOT NULL,
  remote_id TEXT NOT NULL,
  cert_policy INTEGER NOT NULL DEFAULT '1',
  uniqueid INTEGER NOT NULL DEFAULT '0',
  auth_method INTEGER NOT NULL DEFAULT '1',
  eap_type INTEGER NOT NULL DEFAULT '0',
  eap_vendor INTEGER NOT NULL DEFAULT '0',
  keyingtries INTEGER NOT NULL DEFAULT '3',
  rekeytime INTEGER NOT NULL DEFAULT '7200',
  reauthtime INTEGER NOT NULL DEFAULT '0',
  jitter INTEGER NOT NULL DEFAULT '180',
  overtime INTEGER NOT NULL DEFAULT '300',
  mobike INTEGER NOT NULL DEFAULT '1',
  dpd_delay INTEGER NOT NULL DEFAULT '120',
  virtual TEXT DEFAULT NULL,
  pool TEXT DEFAULT NULL,
  mediation INTEGER NOT NULL DEFAULT '0',
  mediated_by INTEGER NOT NULL DEFAULT '0',
  peer_id INTEGER NOT NULL DEFAULT '0'
);
DROP INDEX IF EXISTS peer_configs_name;
CREATE INDEX peer_configs_name ON peer_configs (
  name
);


CREATE TABLE peer_config_child_config (
  peer_cfg INTEGER NOT NULL,
  child_cfg INTEGER NOT NULL,
  PRIMARY KEY (peer_cfg, child_cfg)
);


CREATE TABLE traffic_selectors (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  type INTEGER NOT NULL DEFAULT '7',
  protocol INTEGER NOT NULL DEFAULT '0',
  start_addr BLOB DEFAULT NULL,
  end_addr BLOB DEFAULT NULL,
  start_port INTEGER NOT NULL DEFAULT '0',
  end_port INTEGER NOT NULL DEFAULT '65535'
);


CREATE TABLE certificates (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  type INTEGER NOT NULL,
  keytype INTEGER NOT NULL,
  data BLOB NOT NULL
);


CREATE TABLE certificate_identity (
  certificate INTEGER NOT NULL,
  identity INTEGER NOT NULL,
  PRIMARY KEY (certificate, identity)
);


CREATE TABLE private_keys (
  id INTEGER NOT NULL  PRIMARY KEY AUTOINCREMENT,
  type INTEGER NOT NULL,
  data BLOB NOT NULL
);


CREATE TABLE private_key_identity (
  private_key INTEGER NOT NULL,
  identity INTEGER NOT NULL,
  PRIMARY KEY (private_key, identity)
);


CREATE TABLE shared_secrets (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  type INTEGER NOT NULL,
  data BLOB NOT NULL
);


CREATE TABLE shared_secret_identity (
  shared_secret INTEGER NOT NULL,
  identity INTEGER NOT NULL,
  PRIMARY KEY (shared_secret, identity)
);


CREATE TABLE certificate_authorities (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  certificate INTEGER NOT NULL
);


CREATE TABLE certificate_distribution_points (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  ca INTEGER NOT NULL,
  type INTEGER NOT NULL,
  uri TEXT NOT NULL
);


CREATE TABLE pools (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  name TEXT NOT NULL UNIQUE,
  start BLOB NOT NULL,
  end BLOB NOT NULL,
  timeout INTEGER NOT NULL
);

CREATE TABLE addresses (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  pool INTEGER NOT NULL,
  address BLOB NOT NULL,
  identity INTEGER NOT NULL DEFAULT 0,
  acquired INTEGER NOT NULL DEFAULT 0,
  released INTEGER NOT NULL DEFAULT 1
);
DROP INDEX IF EXISTS addresses_pool;
CREATE INDEX addresses_pool ON addresses (
  pool
);
DROP INDEX IF EXISTS addresses_address;
CREATE INDEX addresses_address ON addresses (
  address
);
DROP INDEX IF EXISTS addresses_identity;
CREATE INDEX addresses_identity ON addresses (
  identity
);

CREATE TABLE leases (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  address INTEGER NOT NULL,
  identity INTEGER NOT NULL,
  acquired INTEGER NOT NULL,
  released INTEGER NOT NULL
);

CREATE TABLE attribute_pools (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  name TEXT NOT NULL
);

CREATE TABLE attributes (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  identity INTEGER NOT NULL DEFAULT 0,
  pool INTEGER NOT NULL DEFAULT 0,
  type INTEGER NOT NULL,
  value BLOB NOT NULL
);
DROP INDEX IF EXISTS attributes_identity;
CREATE INDEX attributes_identity ON attributes (
  identity
);
DROP INDEX IF EXISTS attributes_pool;
CREATE INDEX attributes_pool ON attributes (
  pool
);

CREATE TABLE ike_sas (
  local_spi BLOB NOT NULL PRIMARY KEY,
  remote_spi BLOB NOT NULL,
  id INTEGER NOT NULL,
  initiator INTEGER NOT NULL,
  local_id_type INTEGER NOT NULL,
  local_id_data BLOB DEFAULT NULL,
  remote_id_type INTEGER NOT NULL,
  remote_id_data BLOB DEFAULT NULL,
  host_family INTEGER NOT NULL,
  local_host_data BLOB NOT NULL,
  remote_host_data BLOB NOT NULL,
  created INTEGER NOT NULL DEFAULT CURRENT_TIMESTAMP
);

CREATE TABLE logs (
  id INTEGER NOT NULL PRIMARY KEY AUTOINCREMENT,
  local_spi BLOB NOT NULL,
  signal INTEGER NOT NULL,
  level INTEGER NOT NULL,
  msg TEXT NOT NULL,
  time INTEGER NOT NULL DEFAULT CURRENT_TIMESTAMP
);

/* Identities */

INSERT INTO identities (
  type, data
) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */
  9, X'3047310b3009060355040613024348311b3019060355040a13127374726f6e675377616e2050726f6a656374311b3019060355040313127374726f6e675377616e20526f6f74204341'
);

INSERT INTO identities (
  type, data
) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */
  11, X'288a0bd0d28511dae59ffa160ab021d708922d67'
);

INSERT INTO identities (
  type, data
) VALUES ( /* keyid of 'C=CH, O=strongSwan Project, CN=strongSwan Root CA' */
  11, X'91f8e4475f0bc75a388624bcf0a56fe6a45f0c2a'
);

INSERT INTO identities (
  type, data
) VALUES ( /* dave@strongswan.org */
  3, X'64617665407374726f6e677377616e2e6f7267'
 );

INSERT INTO identities (
  type, data
) VALUES ( /* subjkey of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */
  11, X'516f2a5affb28c278a5b3044f84fab6b42e4e8d1'
 );

INSERT INTO identities (
  type, data
) VALUES ( /* moon.strongswan.org */
  2, X'6d6f6f6e2e7374726f6e677377616e2e6f7267'
 );

/* Certificates */

INSERT INTO certificates (
   type, keytype, data
) VALUES ( /* C=CH, O=strongSwan Project, CN=strongSwan Root CA */
  1, 1, X'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'
);

INSERT INTO certificates (
   type, keytype, data
) VALUES ( /* C=CH, O=strongSwan Project, CN=dave@strongswan.org */
  1, 1, X'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'
);

INSERT INTO certificate_identity (
  certificate, identity
) VALUES (
  1, 1
);

INSERT INTO certificate_identity (
  certificate, identity
) VALUES (
  1, 2
);

INSERT INTO certificate_identity (
  certificate, identity
) VALUES (
  1, 3
);

INSERT INTO certificate_identity (
  certificate, identity
) VALUES (
  2, 4
);

INSERT INTO certificate_identity (
  certificate, identity
) VALUES (
  2, 5
);

/* Private Keys */

INSERT INTO private_keys (
   type, data
) VALUES ( /* key of 'C=CH, O=strongSwan Project, CN=dave@strongswan.org' */
  1, X'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'
);

INSERT INTO private_key_identity (
  private_key, identity
) VALUES (
  1, 4
);

INSERT INTO private_key_identity (
  private_key, identity
) VALUES (
  1, 5
);

/* Configurations */

INSERT INTO ike_configs (
  local, remote
) VALUES (
  '192.168.0.200', '192.168.0.1'
);

INSERT INTO peer_configs (
  name, ike_cfg, local_id, remote_id
) VALUES (
  'home', 1, 4, 6
);

INSERT INTO child_configs (
  name, updown
) VALUES (
  'home', '/usr/local/libexec/ipsec/_updown iptables'
);

INSERT INTO peer_config_child_config (
  peer_cfg, child_cfg
) VALUES (
  1, 1
);

INSERT INTO traffic_selectors (
  type, start_addr, end_addr
) VALUES ( /* 10.1.0.0/16 */
  7, X'0a010000', X'0a01ffff'
);

INSERT INTO traffic_selectors (
  type
) VALUES ( /* dynamic/32 */
  7
);

INSERT INTO child_config_traffic_selector (
  child_cfg, traffic_selector, kind
) VALUES (
  1, 1, 1
);

INSERT INTO child_config_traffic_selector (
	child_cfg, traffic_selector, kind
) VALUES (
  1, 2, 2
);

