2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
58 /* ====================================================================
59 * Copyright (c) 1998-2007 The OpenSSL Project. All rights reserved.
61 * Redistribution and use in source and binary forms, with or without
62 * modification, are permitted provided that the following conditions
65 * 1. Redistributions of source code must retain the above copyright
66 * notice, this list of conditions and the following disclaimer.
68 * 2. Redistributions in binary form must reproduce the above copyright
69 * notice, this list of conditions and the following disclaimer in
70 * the documentation and/or other materials provided with the
73 * 3. All advertising materials mentioning features or use of this
74 * software must display the following acknowledgment:
75 * "This product includes software developed by the OpenSSL Project
76 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
78 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
79 * endorse or promote products derived from this software without
80 * prior written permission. For written permission, please contact
81 * openssl-core@openssl.org.
83 * 5. Products derived from this software may not be called "OpenSSL"
84 * nor may "OpenSSL" appear in their names without prior written
85 * permission of the OpenSSL Project.
87 * 6. Redistributions of any form whatsoever must retain the following
89 * "This product includes software developed by the OpenSSL Project
90 * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
92 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
93 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
94 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
95 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
96 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
97 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
98 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
99 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
100 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
101 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
102 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
103 * OF THE POSSIBILITY OF SUCH DAMAGE.
104 * ====================================================================
106 * This product includes cryptographic software written by Eric Young
107 * (eay@cryptsoft.com). This product includes software written by Tim
108 * Hudson (tjh@cryptsoft.com).
111 /* ====================================================================
112 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
114 * Portions of the attached software ("Contribution") are developed by
115 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
117 * The Contribution is licensed pursuant to the OpenSSL open source
118 * license provided above.
120 * ECC cipher suite support in OpenSSL originally written by
121 * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
124 /* ====================================================================
125 * Copyright 2005 Nokia. All rights reserved.
127 * The portions of the attached software ("Contribution") is developed by
128 * Nokia Corporation and is licensed pursuant to the OpenSSL open source
131 * The Contribution, originally written by Mika Kousa and Pasi Eronen of
132 * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
133 * support (see RFC 4279) to OpenSSL.
135 * No patent licenses or other rights except those expressly stated in
136 * the OpenSSL open source license shall be deemed granted or received
137 * expressly, by implication, estoppel, or otherwise.
139 * No assurances are provided by Nokia that the Contribution does not
140 * infringe the patent or other intellectual property rights of any third
141 * party or that the license provides you with all the necessary rights
142 * to make use of the Contribution.
144 * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
145 * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
146 * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
147 * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
152 #include <openssl/objects.h>
153 #include "ssl_locl.h"
154 #include <openssl/md5.h>
155 #ifndef OPENSSL_NO_DH
156 # include <openssl/dh.h>
158 #include <openssl/rand.h>
160 const char ssl3_version_str
[] = "SSLv3" OPENSSL_VERSION_PTEXT
;
162 #define SSL3_NUM_CIPHERS OSSL_NELEM(ssl3_ciphers)
164 /* list of available SSLv3 ciphers (sorted by id) */
165 OPENSSL_GLOBAL
const SSL_CIPHER ssl3_ciphers
[] = {
167 /* The RSA ciphers */
171 SSL3_TXT_RSA_NULL_MD5
,
172 SSL3_CK_RSA_NULL_MD5
,
178 SSL_NOT_EXP
| SSL_STRONG_NONE
,
179 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
187 SSL3_TXT_RSA_NULL_SHA
,
188 SSL3_CK_RSA_NULL_SHA
,
194 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
195 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
203 SSL3_TXT_RSA_RC4_40_MD5
,
204 SSL3_CK_RSA_RC4_40_MD5
,
210 SSL_EXPORT
| SSL_EXP40
,
211 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
219 SSL3_TXT_RSA_RC4_128_MD5
,
220 SSL3_CK_RSA_RC4_128_MD5
,
226 SSL_NOT_EXP
| SSL_MEDIUM
,
227 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
235 SSL3_TXT_RSA_RC4_128_SHA
,
236 SSL3_CK_RSA_RC4_128_SHA
,
242 SSL_NOT_EXP
| SSL_MEDIUM
,
243 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
251 SSL3_TXT_RSA_RC2_40_MD5
,
252 SSL3_CK_RSA_RC2_40_MD5
,
258 SSL_EXPORT
| SSL_EXP40
,
259 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
265 #ifndef OPENSSL_NO_IDEA
268 SSL3_TXT_RSA_IDEA_128_SHA
,
269 SSL3_CK_RSA_IDEA_128_SHA
,
275 SSL_NOT_EXP
| SSL_MEDIUM
,
276 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
285 SSL3_TXT_RSA_DES_40_CBC_SHA
,
286 SSL3_CK_RSA_DES_40_CBC_SHA
,
292 SSL_EXPORT
| SSL_EXP40
,
293 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
301 SSL3_TXT_RSA_DES_64_CBC_SHA
,
302 SSL3_CK_RSA_DES_64_CBC_SHA
,
308 SSL_NOT_EXP
| SSL_LOW
,
309 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
317 SSL3_TXT_RSA_DES_192_CBC3_SHA
,
318 SSL3_CK_RSA_DES_192_CBC3_SHA
,
324 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
325 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
334 SSL3_TXT_DH_DSS_DES_40_CBC_SHA
,
335 SSL3_CK_DH_DSS_DES_40_CBC_SHA
,
341 SSL_EXPORT
| SSL_EXP40
,
342 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
350 SSL3_TXT_DH_DSS_DES_64_CBC_SHA
,
351 SSL3_CK_DH_DSS_DES_64_CBC_SHA
,
357 SSL_NOT_EXP
| SSL_LOW
,
358 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
366 SSL3_TXT_DH_DSS_DES_192_CBC3_SHA
,
367 SSL3_CK_DH_DSS_DES_192_CBC3_SHA
,
373 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
374 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
382 SSL3_TXT_DH_RSA_DES_40_CBC_SHA
,
383 SSL3_CK_DH_RSA_DES_40_CBC_SHA
,
389 SSL_EXPORT
| SSL_EXP40
,
390 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
398 SSL3_TXT_DH_RSA_DES_64_CBC_SHA
,
399 SSL3_CK_DH_RSA_DES_64_CBC_SHA
,
405 SSL_NOT_EXP
| SSL_LOW
,
406 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
414 SSL3_TXT_DH_RSA_DES_192_CBC3_SHA
,
415 SSL3_CK_DH_RSA_DES_192_CBC3_SHA
,
421 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
422 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
427 /* The Ephemeral DH ciphers */
431 SSL3_TXT_DHE_DSS_DES_40_CBC_SHA
,
432 SSL3_CK_DHE_DSS_DES_40_CBC_SHA
,
438 SSL_EXPORT
| SSL_EXP40
,
439 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
447 SSL3_TXT_DHE_DSS_DES_64_CBC_SHA
,
448 SSL3_CK_DHE_DSS_DES_64_CBC_SHA
,
454 SSL_NOT_EXP
| SSL_LOW
,
455 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
463 SSL3_TXT_DHE_DSS_DES_192_CBC3_SHA
,
464 SSL3_CK_DHE_DSS_DES_192_CBC3_SHA
,
470 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
471 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
479 SSL3_TXT_DHE_RSA_DES_40_CBC_SHA
,
480 SSL3_CK_DHE_RSA_DES_40_CBC_SHA
,
486 SSL_EXPORT
| SSL_EXP40
,
487 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
495 SSL3_TXT_DHE_RSA_DES_64_CBC_SHA
,
496 SSL3_CK_DHE_RSA_DES_64_CBC_SHA
,
502 SSL_NOT_EXP
| SSL_LOW
,
503 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
511 SSL3_TXT_DHE_RSA_DES_192_CBC3_SHA
,
512 SSL3_CK_DHE_RSA_DES_192_CBC3_SHA
,
518 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
519 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
527 SSL3_TXT_ADH_RC4_40_MD5
,
528 SSL3_CK_ADH_RC4_40_MD5
,
534 SSL_EXPORT
| SSL_EXP40
,
535 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
543 SSL3_TXT_ADH_RC4_128_MD5
,
544 SSL3_CK_ADH_RC4_128_MD5
,
550 SSL_NOT_EXP
| SSL_MEDIUM
,
551 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
559 SSL3_TXT_ADH_DES_40_CBC_SHA
,
560 SSL3_CK_ADH_DES_40_CBC_SHA
,
566 SSL_EXPORT
| SSL_EXP40
,
567 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
575 SSL3_TXT_ADH_DES_64_CBC_SHA
,
576 SSL3_CK_ADH_DES_64_CBC_SHA
,
582 SSL_NOT_EXP
| SSL_LOW
,
583 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
591 SSL3_TXT_ADH_DES_192_CBC_SHA
,
592 SSL3_CK_ADH_DES_192_CBC_SHA
,
598 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
599 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
604 /* New AES ciphersuites */
608 TLS1_TXT_RSA_WITH_AES_128_SHA
,
609 TLS1_CK_RSA_WITH_AES_128_SHA
,
615 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
616 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
623 TLS1_TXT_DH_DSS_WITH_AES_128_SHA
,
624 TLS1_CK_DH_DSS_WITH_AES_128_SHA
,
630 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
631 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
638 TLS1_TXT_DH_RSA_WITH_AES_128_SHA
,
639 TLS1_CK_DH_RSA_WITH_AES_128_SHA
,
645 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
646 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
653 TLS1_TXT_DHE_DSS_WITH_AES_128_SHA
,
654 TLS1_CK_DHE_DSS_WITH_AES_128_SHA
,
660 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
661 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
668 TLS1_TXT_DHE_RSA_WITH_AES_128_SHA
,
669 TLS1_CK_DHE_RSA_WITH_AES_128_SHA
,
675 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
676 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
683 TLS1_TXT_ADH_WITH_AES_128_SHA
,
684 TLS1_CK_ADH_WITH_AES_128_SHA
,
690 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
691 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
699 TLS1_TXT_RSA_WITH_AES_256_SHA
,
700 TLS1_CK_RSA_WITH_AES_256_SHA
,
706 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
707 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
714 TLS1_TXT_DH_DSS_WITH_AES_256_SHA
,
715 TLS1_CK_DH_DSS_WITH_AES_256_SHA
,
721 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
722 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
730 TLS1_TXT_DH_RSA_WITH_AES_256_SHA
,
731 TLS1_CK_DH_RSA_WITH_AES_256_SHA
,
737 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
738 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
746 TLS1_TXT_DHE_DSS_WITH_AES_256_SHA
,
747 TLS1_CK_DHE_DSS_WITH_AES_256_SHA
,
753 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
754 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
762 TLS1_TXT_DHE_RSA_WITH_AES_256_SHA
,
763 TLS1_CK_DHE_RSA_WITH_AES_256_SHA
,
769 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
770 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
778 TLS1_TXT_ADH_WITH_AES_256_SHA
,
779 TLS1_CK_ADH_WITH_AES_256_SHA
,
785 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
786 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
791 /* TLS v1.2 ciphersuites */
795 TLS1_TXT_RSA_WITH_NULL_SHA256
,
796 TLS1_CK_RSA_WITH_NULL_SHA256
,
802 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
803 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
811 TLS1_TXT_RSA_WITH_AES_128_SHA256
,
812 TLS1_CK_RSA_WITH_AES_128_SHA256
,
818 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
819 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
827 TLS1_TXT_RSA_WITH_AES_256_SHA256
,
828 TLS1_CK_RSA_WITH_AES_256_SHA256
,
834 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
835 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
843 TLS1_TXT_DH_DSS_WITH_AES_128_SHA256
,
844 TLS1_CK_DH_DSS_WITH_AES_128_SHA256
,
850 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
851 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
859 TLS1_TXT_DH_RSA_WITH_AES_128_SHA256
,
860 TLS1_CK_DH_RSA_WITH_AES_128_SHA256
,
866 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
867 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
875 TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256
,
876 TLS1_CK_DHE_DSS_WITH_AES_128_SHA256
,
882 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
883 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
888 #ifndef OPENSSL_NO_CAMELLIA
889 /* Camellia ciphersuites from RFC4132 (128-bit portion) */
894 TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA
,
895 TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA
,
901 SSL_NOT_EXP
| SSL_HIGH
,
902 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
910 TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
,
911 TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA
,
917 SSL_NOT_EXP
| SSL_HIGH
,
918 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
926 TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
,
927 TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA
,
933 SSL_NOT_EXP
| SSL_HIGH
,
934 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
942 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
,
943 TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA
,
949 SSL_NOT_EXP
| SSL_HIGH
,
950 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
958 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
,
959 TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
,
965 SSL_NOT_EXP
| SSL_HIGH
,
966 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
974 TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA
,
975 TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA
,
981 SSL_NOT_EXP
| SSL_HIGH
,
982 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
986 #endif /* OPENSSL_NO_CAMELLIA */
988 /* TLS v1.2 ciphersuites */
992 TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256
,
993 TLS1_CK_DHE_RSA_WITH_AES_128_SHA256
,
999 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1000 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1008 TLS1_TXT_DH_DSS_WITH_AES_256_SHA256
,
1009 TLS1_CK_DH_DSS_WITH_AES_256_SHA256
,
1015 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1016 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1024 TLS1_TXT_DH_RSA_WITH_AES_256_SHA256
,
1025 TLS1_CK_DH_RSA_WITH_AES_256_SHA256
,
1031 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1032 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1040 TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256
,
1041 TLS1_CK_DHE_DSS_WITH_AES_256_SHA256
,
1047 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1048 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1056 TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256
,
1057 TLS1_CK_DHE_RSA_WITH_AES_256_SHA256
,
1063 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1064 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1072 TLS1_TXT_ADH_WITH_AES_128_SHA256
,
1073 TLS1_CK_ADH_WITH_AES_128_SHA256
,
1079 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1080 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1088 TLS1_TXT_ADH_WITH_AES_256_SHA256
,
1089 TLS1_CK_ADH_WITH_AES_256_SHA256
,
1095 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1096 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1101 /* GOST Ciphersuites */
1105 "GOST94-GOST89-GOST89",
1109 SSL_eGOST2814789CNT
,
1112 SSL_NOT_EXP
| SSL_HIGH
,
1113 SSL_HANDSHAKE_MAC_GOST94
| TLS1_PRF_GOST94
| TLS1_STREAM_MAC
,
1118 "GOST2001-GOST89-GOST89",
1122 SSL_eGOST2814789CNT
,
1125 SSL_NOT_EXP
| SSL_HIGH
,
1126 SSL_HANDSHAKE_MAC_GOST94
| TLS1_PRF_GOST94
| TLS1_STREAM_MAC
,
1131 "GOST94-NULL-GOST94",
1138 SSL_NOT_EXP
| SSL_STRONG_NONE
,
1139 SSL_HANDSHAKE_MAC_GOST94
| TLS1_PRF_GOST94
,
1144 "GOST2001-NULL-GOST94",
1151 SSL_NOT_EXP
| SSL_STRONG_NONE
,
1152 SSL_HANDSHAKE_MAC_GOST94
| TLS1_PRF_GOST94
,
1156 #ifndef OPENSSL_NO_CAMELLIA
1157 /* Camellia ciphersuites from RFC4132 (256-bit portion) */
1162 TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA
,
1163 TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA
,
1169 SSL_NOT_EXP
| SSL_HIGH
,
1170 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1177 TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
,
1178 TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA
,
1184 SSL_NOT_EXP
| SSL_HIGH
,
1185 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1193 TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
,
1194 TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA
,
1200 SSL_NOT_EXP
| SSL_HIGH
,
1201 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1209 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
,
1210 TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA
,
1216 SSL_NOT_EXP
| SSL_HIGH
,
1217 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1225 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
,
1226 TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
,
1232 SSL_NOT_EXP
| SSL_HIGH
,
1233 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1241 TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA
,
1242 TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA
,
1248 SSL_NOT_EXP
| SSL_HIGH
,
1249 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1253 #endif /* OPENSSL_NO_CAMELLIA */
1255 #ifndef OPENSSL_NO_PSK
1259 TLS1_TXT_PSK_WITH_RC4_128_SHA
,
1260 TLS1_CK_PSK_WITH_RC4_128_SHA
,
1266 SSL_NOT_EXP
| SSL_MEDIUM
,
1267 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1275 TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA
,
1276 TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA
,
1282 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1283 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1291 TLS1_TXT_PSK_WITH_AES_128_CBC_SHA
,
1292 TLS1_CK_PSK_WITH_AES_128_CBC_SHA
,
1298 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1299 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1307 TLS1_TXT_PSK_WITH_AES_256_CBC_SHA
,
1308 TLS1_CK_PSK_WITH_AES_256_CBC_SHA
,
1314 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1315 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1319 #endif /* OPENSSL_NO_PSK */
1321 #ifndef OPENSSL_NO_SEED
1322 /* SEED ciphersuites from RFC4162 */
1327 TLS1_TXT_RSA_WITH_SEED_SHA
,
1328 TLS1_CK_RSA_WITH_SEED_SHA
,
1334 SSL_NOT_EXP
| SSL_MEDIUM
,
1335 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1343 TLS1_TXT_DH_DSS_WITH_SEED_SHA
,
1344 TLS1_CK_DH_DSS_WITH_SEED_SHA
,
1350 SSL_NOT_EXP
| SSL_MEDIUM
,
1351 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1359 TLS1_TXT_DH_RSA_WITH_SEED_SHA
,
1360 TLS1_CK_DH_RSA_WITH_SEED_SHA
,
1366 SSL_NOT_EXP
| SSL_MEDIUM
,
1367 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1375 TLS1_TXT_DHE_DSS_WITH_SEED_SHA
,
1376 TLS1_CK_DHE_DSS_WITH_SEED_SHA
,
1382 SSL_NOT_EXP
| SSL_MEDIUM
,
1383 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1391 TLS1_TXT_DHE_RSA_WITH_SEED_SHA
,
1392 TLS1_CK_DHE_RSA_WITH_SEED_SHA
,
1398 SSL_NOT_EXP
| SSL_MEDIUM
,
1399 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1407 TLS1_TXT_ADH_WITH_SEED_SHA
,
1408 TLS1_CK_ADH_WITH_SEED_SHA
,
1414 SSL_NOT_EXP
| SSL_MEDIUM
,
1415 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1420 #endif /* OPENSSL_NO_SEED */
1422 /* GCM ciphersuites from RFC5288 */
1427 TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256
,
1428 TLS1_CK_RSA_WITH_AES_128_GCM_SHA256
,
1434 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1435 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1443 TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384
,
1444 TLS1_CK_RSA_WITH_AES_256_GCM_SHA384
,
1450 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1451 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1459 TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256
,
1460 TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256
,
1466 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1467 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1475 TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384
,
1476 TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384
,
1482 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1483 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1491 TLS1_TXT_DH_RSA_WITH_AES_128_GCM_SHA256
,
1492 TLS1_CK_DH_RSA_WITH_AES_128_GCM_SHA256
,
1498 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1499 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1507 TLS1_TXT_DH_RSA_WITH_AES_256_GCM_SHA384
,
1508 TLS1_CK_DH_RSA_WITH_AES_256_GCM_SHA384
,
1514 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1515 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1523 TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256
,
1524 TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256
,
1530 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1531 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1539 TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384
,
1540 TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384
,
1546 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1547 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1555 TLS1_TXT_DH_DSS_WITH_AES_128_GCM_SHA256
,
1556 TLS1_CK_DH_DSS_WITH_AES_128_GCM_SHA256
,
1562 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1563 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1571 TLS1_TXT_DH_DSS_WITH_AES_256_GCM_SHA384
,
1572 TLS1_CK_DH_DSS_WITH_AES_256_GCM_SHA384
,
1578 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1579 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1587 TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256
,
1588 TLS1_CK_ADH_WITH_AES_128_GCM_SHA256
,
1594 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1595 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1603 TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384
,
1604 TLS1_CK_ADH_WITH_AES_256_GCM_SHA384
,
1610 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1611 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1615 #ifndef OPENSSL_NO_PSK
1619 TLS1_TXT_PSK_WITH_AES_128_GCM_SHA256
,
1620 TLS1_CK_PSK_WITH_AES_128_GCM_SHA256
,
1626 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1627 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1635 TLS1_TXT_PSK_WITH_AES_256_GCM_SHA384
,
1636 TLS1_CK_PSK_WITH_AES_256_GCM_SHA384
,
1642 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1643 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
1650 #ifndef OPENSSL_NO_CAMELLIA
1651 /* TLS 1.2 Camellia SHA-256 ciphersuites from RFC5932 */
1656 TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
1657 TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
1663 SSL_NOT_EXP
| SSL_HIGH
,
1664 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1672 TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
,
1673 TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256
,
1679 SSL_NOT_EXP
| SSL_HIGH
,
1680 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1688 TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
1689 TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
1695 SSL_NOT_EXP
| SSL_HIGH
,
1696 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1704 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
,
1705 TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256
,
1711 SSL_NOT_EXP
| SSL_HIGH
,
1712 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1720 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
1721 TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
1727 SSL_NOT_EXP
| SSL_HIGH
,
1728 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1736 TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA256
,
1737 TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA256
,
1743 SSL_NOT_EXP
| SSL_HIGH
,
1744 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1752 TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA256
,
1753 TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA256
,
1759 SSL_NOT_EXP
| SSL_HIGH
,
1760 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1768 TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
,
1769 TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256
,
1775 SSL_NOT_EXP
| SSL_HIGH
,
1776 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1784 TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
,
1785 TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256
,
1791 SSL_NOT_EXP
| SSL_HIGH
,
1792 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1800 TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
,
1801 TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256
,
1807 SSL_NOT_EXP
| SSL_HIGH
,
1808 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1816 TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
,
1817 TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256
,
1823 SSL_NOT_EXP
| SSL_HIGH
,
1824 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1832 TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA256
,
1833 TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA256
,
1839 SSL_NOT_EXP
| SSL_HIGH
,
1840 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
1846 #ifdef OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL
1863 #ifndef OPENSSL_NO_EC
1867 TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA
,
1868 TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA
,
1874 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
1875 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1883 TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA
,
1884 TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA
,
1890 SSL_NOT_EXP
| SSL_MEDIUM
,
1891 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1899 TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA
,
1900 TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA
,
1906 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1907 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1915 TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA
,
1916 TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA
,
1922 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1923 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1931 TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA
,
1932 TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA
,
1938 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1939 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1947 TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA
,
1948 TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA
,
1954 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
1955 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1963 TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA
,
1964 TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA
,
1970 SSL_NOT_EXP
| SSL_MEDIUM
,
1971 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1979 TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA
,
1980 TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA
,
1986 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
1987 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
1995 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
,
1996 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
,
2002 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2003 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2011 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
,
2012 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
,
2018 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2019 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2027 TLS1_TXT_ECDH_RSA_WITH_NULL_SHA
,
2028 TLS1_CK_ECDH_RSA_WITH_NULL_SHA
,
2034 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
2035 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2043 TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA
,
2044 TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA
,
2050 SSL_NOT_EXP
| SSL_MEDIUM
,
2051 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2059 TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA
,
2060 TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA
,
2066 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2067 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2075 TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA
,
2076 TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA
,
2082 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2083 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2091 TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA
,
2092 TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA
,
2098 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2099 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2107 TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA
,
2108 TLS1_CK_ECDHE_RSA_WITH_NULL_SHA
,
2114 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
2115 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2123 TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA
,
2124 TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA
,
2130 SSL_NOT_EXP
| SSL_MEDIUM
,
2131 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2139 TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA
,
2140 TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA
,
2146 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2147 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2155 TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA
,
2156 TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
,
2162 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2163 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2171 TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA
,
2172 TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
,
2178 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2179 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2187 TLS1_TXT_ECDH_anon_WITH_NULL_SHA
,
2188 TLS1_CK_ECDH_anon_WITH_NULL_SHA
,
2194 SSL_NOT_EXP
| SSL_STRONG_NONE
| SSL_FIPS
,
2195 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2203 TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA
,
2204 TLS1_CK_ECDH_anon_WITH_RC4_128_SHA
,
2210 SSL_NOT_EXP
| SSL_MEDIUM
,
2211 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2219 TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA
,
2220 TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA
,
2226 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2227 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2235 TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA
,
2236 TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA
,
2242 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2243 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2251 TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA
,
2252 TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA
,
2258 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2259 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2263 #endif /* OPENSSL_NO_EC */
2265 #ifndef OPENSSL_NO_SRP
2269 TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA
,
2270 TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA
,
2276 SSL_NOT_EXP
| SSL_HIGH
,
2277 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2285 TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
,
2286 TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA
,
2292 SSL_NOT_EXP
| SSL_HIGH
,
2293 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2301 TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
,
2302 TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA
,
2308 SSL_NOT_EXP
| SSL_HIGH
,
2309 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2317 TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA
,
2318 TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA
,
2324 SSL_NOT_EXP
| SSL_HIGH
,
2325 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2333 TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
,
2334 TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA
,
2340 SSL_NOT_EXP
| SSL_HIGH
,
2341 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2349 TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
,
2350 TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA
,
2356 SSL_NOT_EXP
| SSL_HIGH
,
2357 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2365 TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA
,
2366 TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA
,
2372 SSL_NOT_EXP
| SSL_HIGH
,
2373 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2381 TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
,
2382 TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA
,
2388 SSL_NOT_EXP
| SSL_HIGH
,
2389 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2397 TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
,
2398 TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA
,
2404 SSL_NOT_EXP
| SSL_HIGH
,
2405 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2409 #endif /* OPENSSL_NO_SRP */
2410 #ifndef OPENSSL_NO_EC
2412 /* HMAC based TLS v1.2 ciphersuites from RFC5289 */
2417 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256
,
2418 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256
,
2424 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2425 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2433 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384
,
2434 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384
,
2440 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2441 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2449 TLS1_TXT_ECDH_ECDSA_WITH_AES_128_SHA256
,
2450 TLS1_CK_ECDH_ECDSA_WITH_AES_128_SHA256
,
2456 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2457 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2465 TLS1_TXT_ECDH_ECDSA_WITH_AES_256_SHA384
,
2466 TLS1_CK_ECDH_ECDSA_WITH_AES_256_SHA384
,
2472 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2473 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2481 TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256
,
2482 TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256
,
2488 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2489 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2497 TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384
,
2498 TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384
,
2504 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2505 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2513 TLS1_TXT_ECDH_RSA_WITH_AES_128_SHA256
,
2514 TLS1_CK_ECDH_RSA_WITH_AES_128_SHA256
,
2520 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2521 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2529 TLS1_TXT_ECDH_RSA_WITH_AES_256_SHA384
,
2530 TLS1_CK_ECDH_RSA_WITH_AES_256_SHA384
,
2536 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2537 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2542 /* GCM based TLS v1.2 ciphersuites from RFC5289 */
2547 TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
,
2548 TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
,
2554 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2555 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2563 TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
,
2564 TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
,
2570 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2571 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2579 TLS1_TXT_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
,
2580 TLS1_CK_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
,
2586 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2587 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2595 TLS1_TXT_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
,
2596 TLS1_CK_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
,
2602 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2603 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2611 TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256
,
2612 TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256
,
2618 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2619 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2627 TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384
,
2628 TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384
,
2634 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2635 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2643 TLS1_TXT_ECDH_RSA_WITH_AES_128_GCM_SHA256
,
2644 TLS1_CK_ECDH_RSA_WITH_AES_128_GCM_SHA256
,
2650 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2651 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2659 TLS1_TXT_ECDH_RSA_WITH_AES_256_GCM_SHA384
,
2660 TLS1_CK_ECDH_RSA_WITH_AES_256_GCM_SHA384
,
2666 SSL_NOT_EXP
| SSL_HIGH
| SSL_FIPS
,
2667 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2672 # ifndef OPENSSL_NO_CAMELLIA
2675 TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
,
2676 TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
,
2682 SSL_NOT_EXP
| SSL_HIGH
,
2683 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2689 TLS1_TXT_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
,
2690 TLS1_CK_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
,
2696 SSL_NOT_EXP
| SSL_HIGH
,
2697 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2703 TLS1_TXT_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
,
2704 TLS1_CK_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256
,
2710 SSL_NOT_EXP
| SSL_HIGH
,
2711 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2717 TLS1_TXT_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
,
2718 TLS1_CK_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384
,
2724 SSL_NOT_EXP
| SSL_HIGH
,
2725 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2731 TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
2732 TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
2738 SSL_NOT_EXP
| SSL_HIGH
,
2739 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2745 TLS1_TXT_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
,
2746 TLS1_CK_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384
,
2752 SSL_NOT_EXP
| SSL_HIGH
,
2753 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2759 TLS1_TXT_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
2760 TLS1_CK_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256
,
2766 SSL_NOT_EXP
| SSL_HIGH
,
2767 SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
,
2773 TLS1_TXT_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
,
2774 TLS1_CK_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384
,
2780 SSL_NOT_EXP
| SSL_HIGH
,
2781 SSL_HANDSHAKE_MAC_SHA384
| TLS1_PRF_SHA384
,
2784 # endif /* OPENSSL_NO_CAMELLIA */
2785 #endif /* OPENSSL_NO_EC */
2787 #ifdef TEMP_GOST_TLS
2795 SSL_eGOST2814789CNT
,
2798 SSL_NOT_EXP
| SSL_HIGH
,
2799 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2809 SSL_eGOST2814789CNT
,
2812 SSL_NOT_EXP
| SSL_HIGH
,
2813 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2822 SSL_eGOST2814789CNT
,
2825 SSL_NOT_EXP
| SSL_HIGH
,
2826 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
,
2831 "GOST-GOST89STREAM",
2835 SSL_eGOST2814789CNT
,
2838 SSL_NOT_EXP
| SSL_HIGH
,
2839 SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
| TLS1_STREAM_MAC
,
2847 const SSL3_ENC_METHOD SSLv3_enc_data
= {
2850 ssl3_setup_key_block
,
2851 ssl3_generate_master_secret
,
2852 ssl3_change_cipher_state
,
2853 ssl3_final_finish_mac
,
2854 MD5_DIGEST_LENGTH
+ SHA_DIGEST_LENGTH
,
2855 ssl3_cert_verify_mac
,
2856 SSL3_MD_CLIENT_FINISHED_CONST
, 4,
2857 SSL3_MD_SERVER_FINISHED_CONST
, 4,
2859 (int (*)(SSL
*, unsigned char *, size_t, const char *,
2860 size_t, const unsigned char *, size_t,
2861 int use_context
))ssl_undefined_function
,
2863 SSL3_HM_HEADER_LENGTH
,
2864 ssl3_set_handshake_header
,
2865 ssl3_handshake_write
2868 long ssl3_default_timeout(void)
2871 * 2 hours, the 24 hours mentioned in the SSLv3 spec is way too long for
2872 * http, the cache would over fill
2874 return (60 * 60 * 2);
2877 int ssl3_num_ciphers(void)
2879 return (SSL3_NUM_CIPHERS
);
2882 const SSL_CIPHER
*ssl3_get_cipher(unsigned int u
)
2884 if (u
< SSL3_NUM_CIPHERS
)
2885 return (&(ssl3_ciphers
[SSL3_NUM_CIPHERS
- 1 - u
]));
2890 int ssl3_set_handshake_header(SSL
*s
, int htype
, unsigned long len
)
2892 unsigned char *p
= (unsigned char *)s
->init_buf
->data
;
2895 s
->init_num
= (int)len
+ SSL3_HM_HEADER_LENGTH
;
2901 int ssl3_handshake_write(SSL
*s
)
2903 return ssl3_do_write(s
, SSL3_RT_HANDSHAKE
);
2906 int ssl3_new(SSL
*s
)
2910 if ((s3
= OPENSSL_malloc(sizeof(*s3
))) == NULL
)
2912 memset(s3
, 0, sizeof(*s3
));
2915 #ifndef OPENSSL_NO_SRP
2916 if (!SSL_SRP_CTX_init(s
))
2919 s
->method
->ssl_clear(s
);
2925 void ssl3_free(SSL
*s
)
2930 ssl3_cleanup_key_block(s
);
2932 #ifndef OPENSSL_NO_RSA
2933 RSA_free(s
->s3
->peer_rsa_tmp
);
2935 #ifndef OPENSSL_NO_DH
2936 DH_free(s
->s3
->tmp
.dh
);
2937 DH_free(s
->s3
->peer_dh_tmp
);
2939 #ifndef OPENSSL_NO_EC
2940 EC_KEY_free(s
->s3
->tmp
.ecdh
);
2941 EC_KEY_free(s
->s3
->peer_ecdh_tmp
);
2944 sk_X509_NAME_pop_free(s
->s3
->tmp
.ca_names
, X509_NAME_free
);
2945 OPENSSL_free(s
->s3
->tmp
.ciphers_raw
);
2946 OPENSSL_clear_free(s
->s3
->tmp
.pms
, s
->s3
->tmp
.pmslen
);
2947 OPENSSL_free(s
->s3
->tmp
.peer_sigalgs
);
2948 ssl3_free_digest_list(s
);
2949 OPENSSL_free(s
->s3
->alpn_selected
);
2951 #ifndef OPENSSL_NO_SRP
2952 SSL_SRP_CTX_free(s
);
2954 OPENSSL_clear_free(s
->s3
, sizeof(*s
->s3
));
2958 void ssl3_clear(SSL
*s
)
2962 ssl3_cleanup_key_block(s
);
2963 sk_X509_NAME_pop_free(s
->s3
->tmp
.ca_names
, X509_NAME_free
);
2964 OPENSSL_free(s
->s3
->tmp
.ciphers_raw
);
2965 s
->s3
->tmp
.ciphers_raw
= NULL
;
2966 OPENSSL_clear_free(s
->s3
->tmp
.pms
, s
->s3
->tmp
.pmslen
);
2967 s
->s3
->tmp
.pms
= NULL
;
2968 OPENSSL_free(s
->s3
->tmp
.peer_sigalgs
);
2969 s
->s3
->tmp
.peer_sigalgs
= NULL
;
2971 #ifndef OPENSSL_NO_RSA
2972 RSA_free(s
->s3
->peer_rsa_tmp
);
2973 s
->s3
->peer_rsa_tmp
= NULL
;
2976 #ifndef OPENSSL_NO_DH
2977 DH_free(s
->s3
->tmp
.dh
);
2978 s
->s3
->tmp
.dh
= NULL
;
2979 DH_free(s
->s3
->peer_dh_tmp
);
2980 s
->s3
->peer_dh_tmp
= NULL
;
2982 #ifndef OPENSSL_NO_EC
2983 EC_KEY_free(s
->s3
->tmp
.ecdh
);
2984 s
->s3
->tmp
.ecdh
= NULL
;
2985 EC_KEY_free(s
->s3
->peer_ecdh_tmp
);
2986 s
->s3
->peer_ecdh_tmp
= NULL
;
2987 s
->s3
->is_probably_safari
= 0;
2988 #endif /* !OPENSSL_NO_EC */
2990 init_extra
= s
->s3
->init_extra
;
2991 ssl3_free_digest_list(s
);
2993 if (s
->s3
->alpn_selected
) {
2994 OPENSSL_free(s
->s3
->alpn_selected
);
2995 s
->s3
->alpn_selected
= NULL
;
2998 memset(s
->s3
, 0, sizeof(*s
->s3
));
2999 s
->s3
->init_extra
= init_extra
;
3001 ssl_free_wbio_buffer(s
);
3003 s
->s3
->renegotiate
= 0;
3004 s
->s3
->total_renegotiations
= 0;
3005 s
->s3
->num_renegotiations
= 0;
3006 s
->s3
->in_read_app_data
= 0;
3007 s
->version
= SSL3_VERSION
;
3009 #if !defined(OPENSSL_NO_NEXTPROTONEG)
3010 OPENSSL_free(s
->next_proto_negotiated
);
3011 s
->next_proto_negotiated
= NULL
;
3012 s
->next_proto_negotiated_len
= 0;
3016 #ifndef OPENSSL_NO_SRP
3017 static char *srp_password_from_info_cb(SSL
*s
, void *arg
)
3019 return BUF_strdup(s
->srp_ctx
.info
);
3023 static int ssl3_set_req_cert_type(CERT
*c
, const unsigned char *p
,
3026 long ssl3_ctrl(SSL
*s
, int cmd
, long larg
, void *parg
)
3031 case SSL_CTRL_GET_SESSION_REUSED
:
3034 case SSL_CTRL_GET_CLIENT_CERT_REQUEST
:
3036 case SSL_CTRL_GET_NUM_RENEGOTIATIONS
:
3037 ret
= s
->s3
->num_renegotiations
;
3039 case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS
:
3040 ret
= s
->s3
->num_renegotiations
;
3041 s
->s3
->num_renegotiations
= 0;
3043 case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS
:
3044 ret
= s
->s3
->total_renegotiations
;
3046 case SSL_CTRL_GET_FLAGS
:
3047 ret
= (int)(s
->s3
->flags
);
3049 #ifndef OPENSSL_NO_RSA
3050 case SSL_CTRL_NEED_TMP_RSA
:
3051 if ((s
->cert
!= NULL
) && (s
->cert
->rsa_tmp
== NULL
) &&
3052 ((s
->cert
->pkeys
[SSL_PKEY_RSA_ENC
].privatekey
== NULL
) ||
3053 (EVP_PKEY_size(s
->cert
->pkeys
[SSL_PKEY_RSA_ENC
].privatekey
) >
3057 case SSL_CTRL_SET_TMP_RSA
:
3059 RSA
*rsa
= (RSA
*)parg
;
3061 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_PASSED_NULL_PARAMETER
);
3064 if ((rsa
= RSAPrivateKey_dup(rsa
)) == NULL
) {
3065 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_RSA_LIB
);
3068 RSA_free(s
->cert
->rsa_tmp
);
3069 s
->cert
->rsa_tmp
= rsa
;
3073 case SSL_CTRL_SET_TMP_RSA_CB
:
3075 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
);
3079 #ifndef OPENSSL_NO_DH
3080 case SSL_CTRL_SET_TMP_DH
:
3082 DH
*dh
= (DH
*)parg
;
3084 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_PASSED_NULL_PARAMETER
);
3087 if (!ssl_security(s
, SSL_SECOP_TMP_DH
,
3088 DH_security_bits(dh
), 0, dh
)) {
3089 SSLerr(SSL_F_SSL3_CTRL
, SSL_R_DH_KEY_TOO_SMALL
);
3092 if ((dh
= DHparams_dup(dh
)) == NULL
) {
3093 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_DH_LIB
);
3096 if (!(s
->options
& SSL_OP_SINGLE_DH_USE
)) {
3097 if (!DH_generate_key(dh
)) {
3099 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_DH_LIB
);
3103 DH_free(s
->cert
->dh_tmp
);
3104 s
->cert
->dh_tmp
= dh
;
3108 case SSL_CTRL_SET_TMP_DH_CB
:
3110 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
);
3113 case SSL_CTRL_SET_DH_AUTO
:
3114 s
->cert
->dh_tmp_auto
= larg
;
3117 #ifndef OPENSSL_NO_EC
3118 case SSL_CTRL_SET_TMP_ECDH
:
3120 EC_KEY
*ecdh
= NULL
;
3123 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_PASSED_NULL_PARAMETER
);
3126 if (!EC_KEY_up_ref((EC_KEY
*)parg
)) {
3127 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_ECDH_LIB
);
3130 ecdh
= (EC_KEY
*)parg
;
3131 if (!(s
->options
& SSL_OP_SINGLE_ECDH_USE
)) {
3132 if (!EC_KEY_generate_key(ecdh
)) {
3134 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_ECDH_LIB
);
3138 EC_KEY_free(s
->cert
->ecdh_tmp
);
3139 s
->cert
->ecdh_tmp
= ecdh
;
3143 case SSL_CTRL_SET_TMP_ECDH_CB
:
3145 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
);
3148 #endif /* !OPENSSL_NO_EC */
3149 case SSL_CTRL_SET_TLSEXT_HOSTNAME
:
3150 if (larg
== TLSEXT_NAMETYPE_host_name
) {
3151 OPENSSL_free(s
->tlsext_hostname
);
3152 s
->tlsext_hostname
= NULL
;
3157 if (strlen((char *)parg
) > TLSEXT_MAXLEN_host_name
) {
3158 SSLerr(SSL_F_SSL3_CTRL
, SSL_R_SSL3_EXT_INVALID_SERVERNAME
);
3161 if ((s
->tlsext_hostname
= BUF_strdup((char *)parg
)) == NULL
) {
3162 SSLerr(SSL_F_SSL3_CTRL
, ERR_R_INTERNAL_ERROR
);
3166 SSLerr(SSL_F_SSL3_CTRL
, SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE
);
3170 case SSL_CTRL_SET_TLSEXT_DEBUG_ARG
:
3171 s
->tlsext_debug_arg
= parg
;
3175 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE
:
3176 s
->tlsext_status_type
= larg
;
3180 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS
:
3181 *(STACK_OF(X509_EXTENSION
) **)parg
= s
->tlsext_ocsp_exts
;
3185 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS
:
3186 s
->tlsext_ocsp_exts
= parg
;
3190 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS
:
3191 *(STACK_OF(OCSP_RESPID
) **)parg
= s
->tlsext_ocsp_ids
;
3195 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS
:
3196 s
->tlsext_ocsp_ids
= parg
;
3200 case SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP
:
3201 *(unsigned char **)parg
= s
->tlsext_ocsp_resp
;
3202 return s
->tlsext_ocsp_resplen
;
3204 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP
:
3205 OPENSSL_free(s
->tlsext_ocsp_resp
);
3206 s
->tlsext_ocsp_resp
= parg
;
3207 s
->tlsext_ocsp_resplen
= larg
;
3211 #ifndef OPENSSL_NO_HEARTBEATS
3212 case SSL_CTRL_TLS_EXT_SEND_HEARTBEAT
:
3214 ret
= dtls1_heartbeat(s
);
3216 ret
= tls1_heartbeat(s
);
3219 case SSL_CTRL_GET_TLS_EXT_HEARTBEAT_PENDING
:
3220 ret
= s
->tlsext_hb_pending
;
3223 case SSL_CTRL_SET_TLS_EXT_HEARTBEAT_NO_REQUESTS
:
3225 s
->tlsext_heartbeat
|= SSL_TLSEXT_HB_DONT_RECV_REQUESTS
;
3227 s
->tlsext_heartbeat
&= ~SSL_TLSEXT_HB_DONT_RECV_REQUESTS
;
3232 case SSL_CTRL_CHAIN
:
3234 return ssl_cert_set1_chain(s
, NULL
, (STACK_OF(X509
) *)parg
);
3236 return ssl_cert_set0_chain(s
, NULL
, (STACK_OF(X509
) *)parg
);
3238 case SSL_CTRL_CHAIN_CERT
:
3240 return ssl_cert_add1_chain_cert(s
, NULL
, (X509
*)parg
);
3242 return ssl_cert_add0_chain_cert(s
, NULL
, (X509
*)parg
);
3244 case SSL_CTRL_GET_CHAIN_CERTS
:
3245 *(STACK_OF(X509
) **)parg
= s
->cert
->key
->chain
;
3248 case SSL_CTRL_SELECT_CURRENT_CERT
:
3249 return ssl_cert_select_current(s
->cert
, (X509
*)parg
);
3251 case SSL_CTRL_SET_CURRENT_CERT
:
3252 if (larg
== SSL_CERT_SET_SERVER
) {
3254 const SSL_CIPHER
*cipher
;
3257 cipher
= s
->s3
->tmp
.new_cipher
;
3261 * No certificate for unauthenticated ciphersuites or using SRP
3264 if (cipher
->algorithm_auth
& (SSL_aNULL
| SSL_aSRP
))
3266 cpk
= ssl_get_server_send_pkey(s
);
3272 return ssl_cert_set_current(s
->cert
, larg
);
3274 #ifndef OPENSSL_NO_EC
3275 case SSL_CTRL_GET_CURVES
:
3277 unsigned char *clist
;
3281 clist
= s
->session
->tlsext_ellipticcurvelist
;
3282 clistlen
= s
->session
->tlsext_ellipticcurvelist_length
/ 2;
3286 unsigned int cid
, nid
;
3287 for (i
= 0; i
< clistlen
; i
++) {
3289 nid
= tls1_ec_curve_id2nid(cid
);
3293 cptr
[i
] = TLSEXT_nid_unknown
| cid
;
3296 return (int)clistlen
;
3299 case SSL_CTRL_SET_CURVES
:
3300 return tls1_set_curves(&s
->tlsext_ellipticcurvelist
,
3301 &s
->tlsext_ellipticcurvelist_length
,
3304 case SSL_CTRL_SET_CURVES_LIST
:
3305 return tls1_set_curves_list(&s
->tlsext_ellipticcurvelist
,
3306 &s
->tlsext_ellipticcurvelist_length
,
3309 case SSL_CTRL_GET_SHARED_CURVE
:
3310 return tls1_shared_curve(s
, larg
);
3312 # ifndef OPENSSL_NO_EC
3313 case SSL_CTRL_SET_ECDH_AUTO
:
3314 s
->cert
->ecdh_tmp_auto
= larg
;
3318 case SSL_CTRL_SET_SIGALGS
:
3319 return tls1_set_sigalgs(s
->cert
, parg
, larg
, 0);
3321 case SSL_CTRL_SET_SIGALGS_LIST
:
3322 return tls1_set_sigalgs_list(s
->cert
, parg
, 0);
3324 case SSL_CTRL_SET_CLIENT_SIGALGS
:
3325 return tls1_set_sigalgs(s
->cert
, parg
, larg
, 1);
3327 case SSL_CTRL_SET_CLIENT_SIGALGS_LIST
:
3328 return tls1_set_sigalgs_list(s
->cert
, parg
, 1);
3330 case SSL_CTRL_GET_CLIENT_CERT_TYPES
:
3332 const unsigned char **pctype
= parg
;
3333 if (s
->server
|| !s
->s3
->tmp
.cert_req
)
3335 if (s
->cert
->ctypes
) {
3337 *pctype
= s
->cert
->ctypes
;
3338 return (int)s
->cert
->ctype_num
;
3341 *pctype
= (unsigned char *)s
->s3
->tmp
.ctype
;
3342 return s
->s3
->tmp
.ctype_num
;
3345 case SSL_CTRL_SET_CLIENT_CERT_TYPES
:
3348 return ssl3_set_req_cert_type(s
->cert
, parg
, larg
);
3350 case SSL_CTRL_BUILD_CERT_CHAIN
:
3351 return ssl_build_cert_chain(s
, NULL
, larg
);
3353 case SSL_CTRL_SET_VERIFY_CERT_STORE
:
3354 return ssl_cert_set_cert_store(s
->cert
, parg
, 0, larg
);
3356 case SSL_CTRL_SET_CHAIN_CERT_STORE
:
3357 return ssl_cert_set_cert_store(s
->cert
, parg
, 1, larg
);
3359 case SSL_CTRL_GET_PEER_SIGNATURE_NID
:
3360 if (SSL_USE_SIGALGS(s
)) {
3363 sig
= s
->s3
->tmp
.peer_md
;
3365 *(int *)parg
= EVP_MD_type(sig
);
3371 /* Might want to do something here for other versions */
3375 case SSL_CTRL_GET_SERVER_TMP_KEY
:
3376 if (s
->server
|| !s
->session
)
3381 #if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_NO_DH) && !defined(OPENSSL_NO_EC)
3382 if (!s
->s3
->peer_rsa_tmp
&& !s
->s3
->peer_dh_tmp
&& !s
->s3
->peer_ecdh_tmp
)
3385 ptmp
= EVP_PKEY_new();
3388 #ifndef OPENSSL_NO_RSA
3389 else if (s
->s3
->peer_rsa_tmp
)
3390 rv
= EVP_PKEY_set1_RSA(ptmp
, s
->s3
->peer_rsa_tmp
);
3392 #ifndef OPENSSL_NO_DH
3393 else if (s
->s3
->peer_dh_tmp
)
3394 rv
= EVP_PKEY_set1_DH(ptmp
, s
->s3
->peer_dh_tmp
);
3396 #ifndef OPENSSL_NO_EC
3397 else if (s
->s3
->peer_ecdh_tmp
)
3398 rv
= EVP_PKEY_set1_EC_KEY(ptmp
, s
->s3
->peer_ecdh_tmp
);
3401 *(EVP_PKEY
**)parg
= ptmp
;
3404 EVP_PKEY_free(ptmp
);
3407 #ifndef OPENSSL_NO_EC
3408 case SSL_CTRL_GET_EC_POINT_FORMATS
:
3410 SSL_SESSION
*sess
= s
->session
;
3411 const unsigned char **pformat
= parg
;
3412 if (!sess
|| !sess
->tlsext_ecpointformatlist
)
3414 *pformat
= sess
->tlsext_ecpointformatlist
;
3415 return (int)sess
->tlsext_ecpointformatlist_length
;
3419 case SSL_CTRL_CHECK_PROTO_VERSION
:
3421 * For library-internal use; checks that the current protocol is the
3422 * highest enabled version (according to s->ctx->method, as version
3423 * negotiation may have changed s->method).
3425 if (s
->version
== s
->ctx
->method
->version
)
3428 * Apparently we're using a version-flexible SSL_METHOD (not at its
3429 * highest protocol version).
3431 if (s
->ctx
->method
->version
== TLS_method()->version
) {
3432 #if TLS_MAX_VERSION != TLS1_2_VERSION
3433 # error Code needs update for TLS_method() support beyond TLS1_2_VERSION.
3435 if (!(s
->options
& SSL_OP_NO_TLSv1_2
))
3436 return s
->version
== TLS1_2_VERSION
;
3437 if (!(s
->options
& SSL_OP_NO_TLSv1_1
))
3438 return s
->version
== TLS1_1_VERSION
;
3439 if (!(s
->options
& SSL_OP_NO_TLSv1
))
3440 return s
->version
== TLS1_VERSION
;
3441 if (!(s
->options
& SSL_OP_NO_SSLv3
))
3442 return s
->version
== SSL3_VERSION
;
3444 return 0; /* Unexpected state; fail closed. */
3452 long ssl3_callback_ctrl(SSL
*s
, int cmd
, void (*fp
) (void))
3457 #ifndef OPENSSL_NO_RSA
3458 case SSL_CTRL_SET_TMP_RSA_CB
:
3460 s
->cert
->rsa_tmp_cb
= (RSA
*(*)(SSL
*, int, int))fp
;
3464 #ifndef OPENSSL_NO_DH
3465 case SSL_CTRL_SET_TMP_DH_CB
:
3467 s
->cert
->dh_tmp_cb
= (DH
*(*)(SSL
*, int, int))fp
;
3471 #ifndef OPENSSL_NO_EC
3472 case SSL_CTRL_SET_TMP_ECDH_CB
:
3474 s
->cert
->ecdh_tmp_cb
= (EC_KEY
*(*)(SSL
*, int, int))fp
;
3478 case SSL_CTRL_SET_TLSEXT_DEBUG_CB
:
3479 s
->tlsext_debug_cb
= (void (*)(SSL
*, int, int,
3480 unsigned char *, int, void *))fp
;
3483 case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB
:
3485 s
->not_resumable_session_cb
= (int (*)(SSL
*, int))fp
;
3494 long ssl3_ctx_ctrl(SSL_CTX
*ctx
, int cmd
, long larg
, void *parg
)
3501 #ifndef OPENSSL_NO_RSA
3502 case SSL_CTRL_NEED_TMP_RSA
:
3503 if ((cert
->rsa_tmp
== NULL
) &&
3504 ((cert
->pkeys
[SSL_PKEY_RSA_ENC
].privatekey
== NULL
) ||
3505 (EVP_PKEY_size(cert
->pkeys
[SSL_PKEY_RSA_ENC
].privatekey
) >
3512 case SSL_CTRL_SET_TMP_RSA
:
3522 if ((rsa
= RSAPrivateKey_dup(rsa
)) == NULL
)
3526 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_RSA_LIB
);
3529 RSA_free(cert
->rsa_tmp
);
3530 cert
->rsa_tmp
= rsa
;
3535 case SSL_CTRL_SET_TMP_RSA_CB
:
3537 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
);
3541 #ifndef OPENSSL_NO_DH
3542 case SSL_CTRL_SET_TMP_DH
:
3544 DH
*new = NULL
, *dh
;
3547 if (!ssl_ctx_security(ctx
, SSL_SECOP_TMP_DH
,
3548 DH_security_bits(dh
), 0, dh
)) {
3549 SSLerr(SSL_F_SSL3_CTX_CTRL
, SSL_R_DH_KEY_TOO_SMALL
);
3552 if ((new = DHparams_dup(dh
)) == NULL
) {
3553 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_DH_LIB
);
3556 if (!(ctx
->options
& SSL_OP_SINGLE_DH_USE
)) {
3557 if (!DH_generate_key(new)) {
3558 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_DH_LIB
);
3563 DH_free(cert
->dh_tmp
);
3570 case SSL_CTRL_SET_TMP_DH_CB
:
3572 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
);
3575 case SSL_CTRL_SET_DH_AUTO
:
3576 ctx
->cert
->dh_tmp_auto
= larg
;
3579 #ifndef OPENSSL_NO_EC
3580 case SSL_CTRL_SET_TMP_ECDH
:
3582 EC_KEY
*ecdh
= NULL
;
3585 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_ECDH_LIB
);
3588 ecdh
= EC_KEY_dup((EC_KEY
*)parg
);
3590 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_EC_LIB
);
3593 if (!(ctx
->options
& SSL_OP_SINGLE_ECDH_USE
)) {
3594 if (!EC_KEY_generate_key(ecdh
)) {
3596 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_ECDH_LIB
);
3601 EC_KEY_free(cert
->ecdh_tmp
);
3602 cert
->ecdh_tmp
= ecdh
;
3606 case SSL_CTRL_SET_TMP_ECDH_CB
:
3608 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED
);
3611 #endif /* !OPENSSL_NO_EC */
3612 case SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG
:
3613 ctx
->tlsext_servername_arg
= parg
;
3615 case SSL_CTRL_SET_TLSEXT_TICKET_KEYS
:
3616 case SSL_CTRL_GET_TLSEXT_TICKET_KEYS
:
3618 unsigned char *keys
= parg
;
3622 SSLerr(SSL_F_SSL3_CTX_CTRL
, SSL_R_INVALID_TICKET_KEYS_LENGTH
);
3625 if (cmd
== SSL_CTRL_SET_TLSEXT_TICKET_KEYS
) {
3626 memcpy(ctx
->tlsext_tick_key_name
, keys
, 16);
3627 memcpy(ctx
->tlsext_tick_hmac_key
, keys
+ 16, 16);
3628 memcpy(ctx
->tlsext_tick_aes_key
, keys
+ 32, 16);
3630 memcpy(keys
, ctx
->tlsext_tick_key_name
, 16);
3631 memcpy(keys
+ 16, ctx
->tlsext_tick_hmac_key
, 16);
3632 memcpy(keys
+ 32, ctx
->tlsext_tick_aes_key
, 16);
3637 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG
:
3638 ctx
->tlsext_status_arg
= parg
;
3641 #ifndef OPENSSL_NO_SRP
3642 case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME
:
3643 ctx
->srp_ctx
.srp_Mask
|= SSL_kSRP
;
3644 OPENSSL_free(ctx
->srp_ctx
.login
);
3645 ctx
->srp_ctx
.login
= NULL
;
3648 if (strlen((const char *)parg
) > 255
3649 || strlen((const char *)parg
) < 1) {
3650 SSLerr(SSL_F_SSL3_CTX_CTRL
, SSL_R_INVALID_SRP_USERNAME
);
3653 if ((ctx
->srp_ctx
.login
= BUF_strdup((char *)parg
)) == NULL
) {
3654 SSLerr(SSL_F_SSL3_CTX_CTRL
, ERR_R_INTERNAL_ERROR
);
3658 case SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD
:
3659 ctx
->srp_ctx
.SRP_give_srp_client_pwd_callback
=
3660 srp_password_from_info_cb
;
3661 ctx
->srp_ctx
.info
= parg
;
3663 case SSL_CTRL_SET_SRP_ARG
:
3664 ctx
->srp_ctx
.srp_Mask
|= SSL_kSRP
;
3665 ctx
->srp_ctx
.SRP_cb_arg
= parg
;
3668 case SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH
:
3669 ctx
->srp_ctx
.strength
= larg
;
3673 #ifndef OPENSSL_NO_EC
3674 case SSL_CTRL_SET_CURVES
:
3675 return tls1_set_curves(&ctx
->tlsext_ellipticcurvelist
,
3676 &ctx
->tlsext_ellipticcurvelist_length
,
3679 case SSL_CTRL_SET_CURVES_LIST
:
3680 return tls1_set_curves_list(&ctx
->tlsext_ellipticcurvelist
,
3681 &ctx
->tlsext_ellipticcurvelist_length
,
3683 case SSL_CTRL_SET_ECDH_AUTO
:
3684 ctx
->cert
->ecdh_tmp_auto
= larg
;
3687 case SSL_CTRL_SET_SIGALGS
:
3688 return tls1_set_sigalgs(ctx
->cert
, parg
, larg
, 0);
3690 case SSL_CTRL_SET_SIGALGS_LIST
:
3691 return tls1_set_sigalgs_list(ctx
->cert
, parg
, 0);
3693 case SSL_CTRL_SET_CLIENT_SIGALGS
:
3694 return tls1_set_sigalgs(ctx
->cert
, parg
, larg
, 1);
3696 case SSL_CTRL_SET_CLIENT_SIGALGS_LIST
:
3697 return tls1_set_sigalgs_list(ctx
->cert
, parg
, 1);
3699 case SSL_CTRL_SET_CLIENT_CERT_TYPES
:
3700 return ssl3_set_req_cert_type(ctx
->cert
, parg
, larg
);
3702 case SSL_CTRL_BUILD_CERT_CHAIN
:
3703 return ssl_build_cert_chain(NULL
, ctx
, larg
);
3705 case SSL_CTRL_SET_VERIFY_CERT_STORE
:
3706 return ssl_cert_set_cert_store(ctx
->cert
, parg
, 0, larg
);
3708 case SSL_CTRL_SET_CHAIN_CERT_STORE
:
3709 return ssl_cert_set_cert_store(ctx
->cert
, parg
, 1, larg
);
3711 /* A Thawte special :-) */
3712 case SSL_CTRL_EXTRA_CHAIN_CERT
:
3713 if (ctx
->extra_certs
== NULL
) {
3714 if ((ctx
->extra_certs
= sk_X509_new_null()) == NULL
)
3717 sk_X509_push(ctx
->extra_certs
, (X509
*)parg
);
3720 case SSL_CTRL_GET_EXTRA_CHAIN_CERTS
:
3721 if (ctx
->extra_certs
== NULL
&& larg
== 0)
3722 *(STACK_OF(X509
) **)parg
= ctx
->cert
->key
->chain
;
3724 *(STACK_OF(X509
) **)parg
= ctx
->extra_certs
;
3727 case SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS
:
3728 sk_X509_pop_free(ctx
->extra_certs
, X509_free
);
3729 ctx
->extra_certs
= NULL
;
3732 case SSL_CTRL_CHAIN
:
3734 return ssl_cert_set1_chain(NULL
, ctx
, (STACK_OF(X509
) *)parg
);
3736 return ssl_cert_set0_chain(NULL
, ctx
, (STACK_OF(X509
) *)parg
);
3738 case SSL_CTRL_CHAIN_CERT
:
3740 return ssl_cert_add1_chain_cert(NULL
, ctx
, (X509
*)parg
);
3742 return ssl_cert_add0_chain_cert(NULL
, ctx
, (X509
*)parg
);
3744 case SSL_CTRL_GET_CHAIN_CERTS
:
3745 *(STACK_OF(X509
) **)parg
= ctx
->cert
->key
->chain
;
3748 case SSL_CTRL_SELECT_CURRENT_CERT
:
3749 return ssl_cert_select_current(ctx
->cert
, (X509
*)parg
);
3751 case SSL_CTRL_SET_CURRENT_CERT
:
3752 return ssl_cert_set_current(ctx
->cert
, larg
);
3760 long ssl3_ctx_callback_ctrl(SSL_CTX
*ctx
, int cmd
, void (*fp
) (void))
3767 #ifndef OPENSSL_NO_RSA
3768 case SSL_CTRL_SET_TMP_RSA_CB
:
3770 cert
->rsa_tmp_cb
= (RSA
*(*)(SSL
*, int, int))fp
;
3774 #ifndef OPENSSL_NO_DH
3775 case SSL_CTRL_SET_TMP_DH_CB
:
3777 cert
->dh_tmp_cb
= (DH
*(*)(SSL
*, int, int))fp
;
3781 #ifndef OPENSSL_NO_EC
3782 case SSL_CTRL_SET_TMP_ECDH_CB
:
3784 cert
->ecdh_tmp_cb
= (EC_KEY
*(*)(SSL
*, int, int))fp
;
3788 case SSL_CTRL_SET_TLSEXT_SERVERNAME_CB
:
3789 ctx
->tlsext_servername_callback
= (int (*)(SSL
*, int *, void *))fp
;
3792 case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB
:
3793 ctx
->tlsext_status_cb
= (int (*)(SSL
*, void *))fp
;
3796 case SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB
:
3797 ctx
->tlsext_ticket_key_cb
= (int (*)(SSL
*, unsigned char *,
3800 HMAC_CTX
*, int))fp
;
3803 #ifndef OPENSSL_NO_SRP
3804 case SSL_CTRL_SET_SRP_VERIFY_PARAM_CB
:
3805 ctx
->srp_ctx
.srp_Mask
|= SSL_kSRP
;
3806 ctx
->srp_ctx
.SRP_verify_param_callback
= (int (*)(SSL
*, void *))fp
;
3808 case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB
:
3809 ctx
->srp_ctx
.srp_Mask
|= SSL_kSRP
;
3810 ctx
->srp_ctx
.TLS_ext_srp_username_callback
=
3811 (int (*)(SSL
*, int *, void *))fp
;
3813 case SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB
:
3814 ctx
->srp_ctx
.srp_Mask
|= SSL_kSRP
;
3815 ctx
->srp_ctx
.SRP_give_srp_client_pwd_callback
=
3816 (char *(*)(SSL
*, void *))fp
;
3819 case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB
:
3821 ctx
->not_resumable_session_cb
= (int (*)(SSL
*, int))fp
;
3831 * This function needs to check if the ciphers required are actually
3834 const SSL_CIPHER
*ssl3_get_cipher_by_char(const unsigned char *p
)
3837 const SSL_CIPHER
*cp
;
3840 id
= 0x03000000L
| ((unsigned long)p
[0] << 8L) | (unsigned long)p
[1];
3842 cp
= OBJ_bsearch_ssl_cipher_id(&c
, ssl3_ciphers
, SSL3_NUM_CIPHERS
);
3843 #ifdef DEBUG_PRINT_UNKNOWN_CIPHERSUITES
3845 fprintf(stderr
, "Unknown cipher ID %x\n", (p
[0] << 8) | p
[1]);
3850 int ssl3_put_cipher_by_char(const SSL_CIPHER
*c
, unsigned char *p
)
3856 if ((l
& 0xff000000) != 0x03000000)
3858 p
[0] = ((unsigned char)(l
>> 8L)) & 0xFF;
3859 p
[1] = ((unsigned char)(l
)) & 0xFF;
3864 SSL_CIPHER
*ssl3_choose_cipher(SSL
*s
, STACK_OF(SSL_CIPHER
) *clnt
,
3865 STACK_OF(SSL_CIPHER
) *srvr
)
3867 SSL_CIPHER
*c
, *ret
= NULL
;
3868 STACK_OF(SSL_CIPHER
) *prio
, *allow
;
3870 unsigned long alg_k
, alg_a
, mask_k
, mask_a
, emask_k
, emask_a
;
3872 /* Let's see which ciphers we can support */
3876 * Do not set the compare functions, because this may lead to a
3877 * reordering by "id". We want to keep the original ordering. We may pay
3878 * a price in performance during sk_SSL_CIPHER_find(), but would have to
3879 * pay with the price of sk_SSL_CIPHER_dup().
3881 sk_SSL_CIPHER_set_cmp_func(srvr
, ssl_cipher_ptr_id_cmp
);
3882 sk_SSL_CIPHER_set_cmp_func(clnt
, ssl_cipher_ptr_id_cmp
);
3886 fprintf(stderr
, "Server has %d from %p:\n", sk_SSL_CIPHER_num(srvr
),
3888 for (i
= 0; i
< sk_SSL_CIPHER_num(srvr
); ++i
) {
3889 c
= sk_SSL_CIPHER_value(srvr
, i
);
3890 fprintf(stderr
, "%p:%s\n", (void *)c
, c
->name
);
3892 fprintf(stderr
, "Client sent %d from %p:\n", sk_SSL_CIPHER_num(clnt
),
3894 for (i
= 0; i
< sk_SSL_CIPHER_num(clnt
); ++i
) {
3895 c
= sk_SSL_CIPHER_value(clnt
, i
);
3896 fprintf(stderr
, "%p:%s\n", (void *)c
, c
->name
);
3900 if (s
->options
& SSL_OP_CIPHER_SERVER_PREFERENCE
|| tls1_suiteb(s
)) {
3908 tls1_set_cert_validity(s
);
3910 for (i
= 0; i
< sk_SSL_CIPHER_num(prio
); i
++) {
3911 c
= sk_SSL_CIPHER_value(prio
, i
);
3913 /* Skip TLS v1.2 only ciphersuites if not supported */
3914 if ((c
->algorithm_ssl
& SSL_TLSV1_2
) && !SSL_USE_TLS1_2_CIPHERS(s
))
3917 ssl_set_masks(s
, c
);
3918 mask_k
= s
->s3
->tmp
.mask_k
;
3919 mask_a
= s
->s3
->tmp
.mask_a
;
3920 emask_k
= s
->s3
->tmp
.export_mask_k
;
3921 emask_a
= s
->s3
->tmp
.export_mask_a
;
3922 #ifndef OPENSSL_NO_SRP
3923 if (s
->srp_ctx
.srp_Mask
& SSL_kSRP
) {
3925 emask_k
|= SSL_kSRP
;
3927 emask_a
|= SSL_aSRP
;
3931 alg_k
= c
->algorithm_mkey
;
3932 alg_a
= c
->algorithm_auth
;
3934 #ifndef OPENSSL_NO_PSK
3935 /* with PSK there must be server callback set */
3936 if ((alg_k
& SSL_kPSK
) && s
->psk_server_callback
== NULL
)
3938 #endif /* OPENSSL_NO_PSK */
3940 if (SSL_C_IS_EXPORT(c
)) {
3941 ok
= (alg_k
& emask_k
) && (alg_a
& emask_a
);
3943 fprintf(stderr
, "%d:[%08lX:%08lX:%08lX:%08lX]%p:%s (export)\n",
3944 ok
, alg_k
, alg_a
, emask_k
, emask_a
, (void *)c
, c
->name
);
3947 ok
= (alg_k
& mask_k
) && (alg_a
& mask_a
);
3949 fprintf(stderr
, "%d:[%08lX:%08lX:%08lX:%08lX]%p:%s\n", ok
, alg_k
,
3950 alg_a
, mask_k
, mask_a
, (void *)c
, c
->name
);
3954 # ifndef OPENSSL_NO_EC
3956 * if we are considering an ECC cipher suite that uses an ephemeral
3959 if (alg_k
& SSL_kECDHE
)
3960 ok
= ok
&& tls1_check_ec_tmp_key(s
, c
->id
);
3961 # endif /* OPENSSL_NO_EC */
3965 ii
= sk_SSL_CIPHER_find(allow
, c
);
3967 /* Check security callback permits this cipher */
3968 if (!ssl_security(s
, SSL_SECOP_CIPHER_SHARED
,
3969 c
->strength_bits
, 0, c
))
3971 #if !defined(OPENSSL_NO_EC)
3972 if ((alg_k
& SSL_kECDHE
) && (alg_a
& SSL_aECDSA
)
3973 && s
->s3
->is_probably_safari
) {
3975 ret
= sk_SSL_CIPHER_value(allow
, ii
);
3979 ret
= sk_SSL_CIPHER_value(allow
, ii
);
3986 int ssl3_get_req_cert_type(SSL
*s
, unsigned char *p
)
3990 unsigned long alg_k
, alg_a
= 0;
3992 /* If we have custom certificate types set, use them */
3993 if (s
->cert
->ctypes
) {
3994 memcpy(p
, s
->cert
->ctypes
, s
->cert
->ctype_num
);
3995 return (int)s
->cert
->ctype_num
;
3997 /* Get mask of algorithms disabled by signature list */
3998 ssl_set_sig_mask(&alg_a
, s
, SSL_SECOP_SIGALG_MASK
);
3999 if (s
->cert
->cert_flags
& SSL_CERT_FLAGS_CHECK_TLS_STRICT
)
4002 alg_k
= s
->s3
->tmp
.new_cipher
->algorithm_mkey
;
4004 #ifndef OPENSSL_NO_GOST
4005 if (s
->version
>= TLS1_VERSION
) {
4006 if (alg_k
& SSL_kGOST
) {
4007 p
[ret
++] = TLS_CT_GOST94_SIGN
;
4008 p
[ret
++] = TLS_CT_GOST01_SIGN
;
4014 #ifndef OPENSSL_NO_DH
4015 if (alg_k
& (SSL_kDHr
| SSL_kDHE
)) {
4016 # ifndef OPENSSL_NO_RSA
4018 * Since this refers to a certificate signed with an RSA algorithm,
4019 * only check for rsa signing in strict mode.
4021 if (nostrict
|| !(alg_a
& SSL_aRSA
))
4022 p
[ret
++] = SSL3_CT_RSA_FIXED_DH
;
4024 # ifndef OPENSSL_NO_DSA
4025 if (nostrict
|| !(alg_a
& SSL_aDSS
))
4026 p
[ret
++] = SSL3_CT_DSS_FIXED_DH
;
4029 if ((s
->version
== SSL3_VERSION
) &&
4030 (alg_k
& (SSL_kDHE
| SSL_kDHd
| SSL_kDHr
))) {
4031 # ifndef OPENSSL_NO_RSA
4032 p
[ret
++] = SSL3_CT_RSA_EPHEMERAL_DH
;
4034 # ifndef OPENSSL_NO_DSA
4035 p
[ret
++] = SSL3_CT_DSS_EPHEMERAL_DH
;
4038 #endif /* !OPENSSL_NO_DH */
4039 #ifndef OPENSSL_NO_RSA
4040 if (!(alg_a
& SSL_aRSA
))
4041 p
[ret
++] = SSL3_CT_RSA_SIGN
;
4043 #ifndef OPENSSL_NO_DSA
4044 if (!(alg_a
& SSL_aDSS
))
4045 p
[ret
++] = SSL3_CT_DSS_SIGN
;
4047 #ifndef OPENSSL_NO_EC
4048 if ((alg_k
& (SSL_kECDHr
| SSL_kECDHe
)) && (s
->version
>= TLS1_VERSION
)) {
4049 if (nostrict
|| !(alg_a
& SSL_aRSA
))
4050 p
[ret
++] = TLS_CT_RSA_FIXED_ECDH
;
4051 if (nostrict
|| !(alg_a
& SSL_aECDSA
))
4052 p
[ret
++] = TLS_CT_ECDSA_FIXED_ECDH
;
4055 * ECDSA certs can be used with RSA cipher suites as well so we don't
4056 * need to check for SSL_kECDH or SSL_kECDHE
4058 if (s
->version
>= TLS1_VERSION
) {
4059 if (!(alg_a
& SSL_aECDSA
))
4060 p
[ret
++] = TLS_CT_ECDSA_SIGN
;
4066 static int ssl3_set_req_cert_type(CERT
*c
, const unsigned char *p
, size_t len
)
4068 OPENSSL_free(c
->ctypes
);
4074 c
->ctypes
= OPENSSL_malloc(len
);
4077 memcpy(c
->ctypes
, p
, len
);
4082 int ssl3_shutdown(SSL
*s
)
4087 * Don't do anything much if we have not done the handshake or we don't
4088 * want to send messages :-)
4090 if ((s
->quiet_shutdown
) || (s
->state
== SSL_ST_BEFORE
)) {
4091 s
->shutdown
= (SSL_SENT_SHUTDOWN
| SSL_RECEIVED_SHUTDOWN
);
4095 if (!(s
->shutdown
& SSL_SENT_SHUTDOWN
)) {
4096 s
->shutdown
|= SSL_SENT_SHUTDOWN
;
4097 ssl3_send_alert(s
, SSL3_AL_WARNING
, SSL_AD_CLOSE_NOTIFY
);
4099 * our shutdown alert has been sent now, and if it still needs to be
4100 * written, s->s3->alert_dispatch will be true
4102 if (s
->s3
->alert_dispatch
)
4103 return (-1); /* return WANT_WRITE */
4104 } else if (s
->s3
->alert_dispatch
) {
4105 /* resend it if not sent */
4106 ret
= s
->method
->ssl_dispatch_alert(s
);
4109 * we only get to return -1 here the 2nd/Nth invocation, we must
4110 * have already signalled return 0 upon a previous invoation,
4115 } else if (!(s
->shutdown
& SSL_RECEIVED_SHUTDOWN
)) {
4117 * If we are waiting for a close from our peer, we are closed
4119 s
->method
->ssl_read_bytes(s
, 0, NULL
, 0, 0);
4120 if (!(s
->shutdown
& SSL_RECEIVED_SHUTDOWN
)) {
4121 return (-1); /* return WANT_READ */
4125 if ((s
->shutdown
== (SSL_SENT_SHUTDOWN
| SSL_RECEIVED_SHUTDOWN
)) &&
4126 !s
->s3
->alert_dispatch
)
4132 int ssl3_write(SSL
*s
, const void *buf
, int len
)
4137 if (s
->shutdown
& SSL_SEND_SHUTDOWN
) {
4138 s
->rwstate
= SSL_NOTHING
;
4143 if (s
->s3
->renegotiate
)
4144 ssl3_renegotiate_check(s
);
4147 * This is an experimental flag that sends the last handshake message in
4148 * the same packet as the first use data - used to see if it helps the
4149 * TCP protocol during session-id reuse
4151 /* The second test is because the buffer may have been removed */
4152 if ((s
->s3
->flags
& SSL3_FLAGS_POP_BUFFER
) && (s
->wbio
== s
->bbio
)) {
4153 /* First time through, we write into the buffer */
4154 if (s
->s3
->delay_buf_pop_ret
== 0) {
4155 ret
= ssl3_write_bytes(s
, SSL3_RT_APPLICATION_DATA
, buf
, len
);
4159 s
->s3
->delay_buf_pop_ret
= ret
;
4162 s
->rwstate
= SSL_WRITING
;
4163 n
= BIO_flush(s
->wbio
);
4166 s
->rwstate
= SSL_NOTHING
;
4168 /* We have flushed the buffer, so remove it */
4169 ssl_free_wbio_buffer(s
);
4170 s
->s3
->flags
&= ~SSL3_FLAGS_POP_BUFFER
;
4172 ret
= s
->s3
->delay_buf_pop_ret
;
4173 s
->s3
->delay_buf_pop_ret
= 0;
4175 ret
= s
->method
->ssl_write_bytes(s
, SSL3_RT_APPLICATION_DATA
,
4184 static int ssl3_read_internal(SSL
*s
, void *buf
, int len
, int peek
)
4189 if (s
->s3
->renegotiate
)
4190 ssl3_renegotiate_check(s
);
4191 s
->s3
->in_read_app_data
= 1;
4193 s
->method
->ssl_read_bytes(s
, SSL3_RT_APPLICATION_DATA
, buf
, len
,
4195 if ((ret
== -1) && (s
->s3
->in_read_app_data
== 2)) {
4197 * ssl3_read_bytes decided to call s->handshake_func, which called
4198 * ssl3_read_bytes to read handshake data. However, ssl3_read_bytes
4199 * actually found application data and thinks that application data
4200 * makes sense here; so disable handshake processing and try to read
4201 * application data again.
4205 s
->method
->ssl_read_bytes(s
, SSL3_RT_APPLICATION_DATA
, buf
, len
,
4209 s
->s3
->in_read_app_data
= 0;
4214 int ssl3_read(SSL
*s
, void *buf
, int len
)
4216 return ssl3_read_internal(s
, buf
, len
, 0);
4219 int ssl3_peek(SSL
*s
, void *buf
, int len
)
4221 return ssl3_read_internal(s
, buf
, len
, 1);
4224 int ssl3_renegotiate(SSL
*s
)
4226 if (s
->handshake_func
== NULL
)
4229 if (s
->s3
->flags
& SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS
)
4232 s
->s3
->renegotiate
= 1;
4236 int ssl3_renegotiate_check(SSL
*s
)
4240 if (s
->s3
->renegotiate
) {
4241 if (!RECORD_LAYER_read_pending(&s
->rlayer
)
4242 && !RECORD_LAYER_write_pending(&s
->rlayer
)
4243 && !SSL_in_init(s
)) {
4245 * if we are the server, and we have sent a 'RENEGOTIATE'
4246 * message, we need to go to SSL_ST_ACCEPT.
4249 s
->state
= SSL_ST_RENEGOTIATE
;
4250 s
->s3
->renegotiate
= 0;
4251 s
->s3
->num_renegotiations
++;
4252 s
->s3
->total_renegotiations
++;
4260 * If we are using default SHA1+MD5 algorithms switch to new SHA256 PRF and
4261 * handshake macs if required.
4263 long ssl_get_algorithm2(SSL
*s
)
4265 long alg2
= s
->s3
->tmp
.new_cipher
->algorithm2
;
4266 if (s
->method
->ssl3_enc
->enc_flags
& SSL_ENC_FLAG_SHA256_PRF
4267 && alg2
== (SSL_HANDSHAKE_MAC_DEFAULT
| TLS1_PRF
))
4268 return SSL_HANDSHAKE_MAC_SHA256
| TLS1_PRF_SHA256
;
4273 * Fill a ClientRandom or ServerRandom field of length len. Returns <= 0 on
4274 * failure, 1 on success.
4276 int ssl_fill_hello_random(SSL
*s
, int server
, unsigned char *result
, int len
)
4283 send_time
= (s
->mode
& SSL_MODE_SEND_SERVERHELLO_TIME
) != 0;
4285 send_time
= (s
->mode
& SSL_MODE_SEND_CLIENTHELLO_TIME
) != 0;
4287 unsigned long Time
= (unsigned long)time(NULL
);
4288 unsigned char *p
= result
;
4290 return RAND_bytes(p
, len
- 4);
4292 return RAND_bytes(result
, len
);
4295 int ssl_generate_master_secret(SSL
*s
, unsigned char *pms
, size_t pmslen
,
4298 s
->session
->master_key_length
=
4299 s
->method
->ssl3_enc
->generate_master_secret(s
, s
->session
->master_key
,
4302 OPENSSL_clear_free(pms
, pmslen
);
4304 OPENSSL_cleanse(pms
, pmslen
);
4306 s
->s3
->tmp
.pms
= NULL
;
4307 return s
->session
->master_key_length
>= 0;