2 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3 * Copyright 2005 Nokia. All rights reserved.
5 * Licensed under the Apache License 2.0 (the "License"). You may not use
6 * this file except in compliance with the License. You can obtain a copy
7 * in the file LICENSE in the source distribution or at
8 * https://www.openssl.org/source/license.html
12 #include "ssl_local.h"
14 const char *SSL_state_string_long(const SSL
*s
)
16 const SSL_CONNECTION
*sc
= SSL_CONNECTION_FROM_CONST_SSL(s
);
18 if (sc
== NULL
|| ossl_statem_in_error(sc
))
21 switch (SSL_get_state(s
)) {
22 case TLS_ST_CR_CERT_STATUS
:
23 return "SSLv3/TLS read certificate status";
24 case TLS_ST_CW_NEXT_PROTO
:
25 return "SSLv3/TLS write next proto";
26 case TLS_ST_SR_NEXT_PROTO
:
27 return "SSLv3/TLS read next proto";
28 case TLS_ST_SW_CERT_STATUS
:
29 return "SSLv3/TLS write certificate status";
31 return "before SSL initialization";
33 return "SSL negotiation finished successfully";
34 case TLS_ST_CW_CLNT_HELLO
:
35 return "SSLv3/TLS write client hello";
36 case TLS_ST_CR_SRVR_HELLO
:
37 return "SSLv3/TLS read server hello";
39 return "SSLv3/TLS read server certificate";
40 case TLS_ST_CR_COMP_CERT
:
41 return "TLSv1.3 read server compressed certificate";
42 case TLS_ST_CR_KEY_EXCH
:
43 return "SSLv3/TLS read server key exchange";
44 case TLS_ST_CR_CERT_REQ
:
45 return "SSLv3/TLS read server certificate request";
46 case TLS_ST_CR_SESSION_TICKET
:
47 return "SSLv3/TLS read server session ticket";
48 case TLS_ST_CR_SRVR_DONE
:
49 return "SSLv3/TLS read server done";
51 return "SSLv3/TLS write client certificate";
52 case TLS_ST_CW_COMP_CERT
:
53 return "TLSv1.3 write client compressed certificate";
54 case TLS_ST_CW_KEY_EXCH
:
55 return "SSLv3/TLS write client key exchange";
56 case TLS_ST_CW_CERT_VRFY
:
57 return "SSLv3/TLS write certificate verify";
58 case TLS_ST_CW_CHANGE
:
59 case TLS_ST_SW_CHANGE
:
60 return "SSLv3/TLS write change cipher spec";
61 case TLS_ST_CW_FINISHED
:
62 case TLS_ST_SW_FINISHED
:
63 return "SSLv3/TLS write finished";
64 case TLS_ST_CR_CHANGE
:
65 case TLS_ST_SR_CHANGE
:
66 return "SSLv3/TLS read change cipher spec";
67 case TLS_ST_CR_FINISHED
:
68 case TLS_ST_SR_FINISHED
:
69 return "SSLv3/TLS read finished";
70 case TLS_ST_SR_CLNT_HELLO
:
71 return "SSLv3/TLS read client hello";
72 case TLS_ST_SW_HELLO_REQ
:
73 return "SSLv3/TLS write hello request";
74 case TLS_ST_SW_SRVR_HELLO
:
75 return "SSLv3/TLS write server hello";
77 return "SSLv3/TLS write certificate";
78 case TLS_ST_SW_COMP_CERT
:
79 return "TLSv1.3 write server compressed certificate";
80 case TLS_ST_SW_KEY_EXCH
:
81 return "SSLv3/TLS write key exchange";
82 case TLS_ST_SW_CERT_REQ
:
83 return "SSLv3/TLS write certificate request";
84 case TLS_ST_SW_SESSION_TICKET
:
85 return "SSLv3/TLS write session ticket";
86 case TLS_ST_SW_SRVR_DONE
:
87 return "SSLv3/TLS write server done";
89 return "SSLv3/TLS read client certificate";
90 case TLS_ST_SR_COMP_CERT
:
91 return "TLSv1.3 read client compressed certificate";
92 case TLS_ST_SR_KEY_EXCH
:
93 return "SSLv3/TLS read client key exchange";
94 case TLS_ST_SR_CERT_VRFY
:
95 return "SSLv3/TLS read certificate verify";
96 case DTLS_ST_CR_HELLO_VERIFY_REQUEST
:
97 return "DTLS1 read hello verify request";
98 case DTLS_ST_SW_HELLO_VERIFY_REQUEST
:
99 return "DTLS1 write hello verify request";
100 case TLS_ST_SW_ENCRYPTED_EXTENSIONS
:
101 return "TLSv1.3 write encrypted extensions";
102 case TLS_ST_CR_ENCRYPTED_EXTENSIONS
:
103 return "TLSv1.3 read encrypted extensions";
104 case TLS_ST_CR_CERT_VRFY
:
105 return "TLSv1.3 read server certificate verify";
106 case TLS_ST_SW_CERT_VRFY
:
107 return "TLSv1.3 write server certificate verify";
108 case TLS_ST_CR_HELLO_REQ
:
109 return "SSLv3/TLS read hello request";
110 case TLS_ST_SW_KEY_UPDATE
:
111 return "TLSv1.3 write server key update";
112 case TLS_ST_CW_KEY_UPDATE
:
113 return "TLSv1.3 write client key update";
114 case TLS_ST_SR_KEY_UPDATE
:
115 return "TLSv1.3 read client key update";
116 case TLS_ST_CR_KEY_UPDATE
:
117 return "TLSv1.3 read server key update";
118 case TLS_ST_EARLY_DATA
:
119 return "TLSv1.3 early data";
120 case TLS_ST_PENDING_EARLY_DATA_END
:
121 return "TLSv1.3 pending early data end";
122 case TLS_ST_CW_END_OF_EARLY_DATA
:
123 return "TLSv1.3 write end of early data";
124 case TLS_ST_SR_END_OF_EARLY_DATA
:
125 return "TLSv1.3 read end of early data";
127 return "unknown state";
131 const char *SSL_state_string(const SSL
*s
)
133 const SSL_CONNECTION
*sc
= SSL_CONNECTION_FROM_CONST_SSL(s
);
135 if (sc
== NULL
|| ossl_statem_in_error(sc
))
138 switch (SSL_get_state(s
)) {
139 case TLS_ST_SR_NEXT_PROTO
:
141 case TLS_ST_SW_SESSION_TICKET
:
143 case TLS_ST_SW_CERT_STATUS
:
145 case TLS_ST_CR_CERT_STATUS
:
147 case TLS_ST_CR_SESSION_TICKET
:
149 case TLS_ST_CW_NEXT_PROTO
:
155 case TLS_ST_CW_CLNT_HELLO
:
157 case TLS_ST_CR_SRVR_HELLO
:
161 case TLS_ST_CR_COMP_CERT
:
163 case TLS_ST_CR_KEY_EXCH
:
165 case TLS_ST_CR_CERT_REQ
:
167 case TLS_ST_CR_SRVR_DONE
:
171 case TLS_ST_CW_COMP_CERT
:
173 case TLS_ST_CW_KEY_EXCH
:
175 case TLS_ST_CW_CERT_VRFY
:
177 case TLS_ST_SW_CHANGE
:
178 case TLS_ST_CW_CHANGE
:
180 case TLS_ST_SW_FINISHED
:
181 case TLS_ST_CW_FINISHED
:
183 case TLS_ST_SR_CHANGE
:
184 case TLS_ST_CR_CHANGE
:
186 case TLS_ST_SR_FINISHED
:
187 case TLS_ST_CR_FINISHED
:
189 case TLS_ST_SW_HELLO_REQ
:
191 case TLS_ST_SR_CLNT_HELLO
:
193 case TLS_ST_SW_SRVR_HELLO
:
197 case TLS_ST_SW_COMP_CERT
:
199 case TLS_ST_SW_KEY_EXCH
:
201 case TLS_ST_SW_CERT_REQ
:
203 case TLS_ST_SW_SRVR_DONE
:
207 case TLS_ST_SR_COMP_CERT
:
209 case TLS_ST_SR_KEY_EXCH
:
211 case TLS_ST_SR_CERT_VRFY
:
213 case DTLS_ST_CR_HELLO_VERIFY_REQUEST
:
215 case DTLS_ST_SW_HELLO_VERIFY_REQUEST
:
217 case TLS_ST_SW_ENCRYPTED_EXTENSIONS
:
219 case TLS_ST_CR_ENCRYPTED_EXTENSIONS
:
221 case TLS_ST_CR_CERT_VRFY
:
223 case TLS_ST_SW_CERT_VRFY
:
225 case TLS_ST_CR_HELLO_REQ
:
227 case TLS_ST_SW_KEY_UPDATE
:
229 case TLS_ST_CW_KEY_UPDATE
:
231 case TLS_ST_SR_KEY_UPDATE
:
233 case TLS_ST_CR_KEY_UPDATE
:
235 case TLS_ST_EARLY_DATA
:
237 case TLS_ST_PENDING_EARLY_DATA_END
:
239 case TLS_ST_CW_END_OF_EARLY_DATA
:
241 case TLS_ST_SR_END_OF_EARLY_DATA
:
248 const char *SSL_alert_type_string_long(int value
)
250 switch (value
>> 8) {
251 case SSL3_AL_WARNING
:
260 const char *SSL_alert_type_string(int value
)
262 switch (value
>> 8) {
263 case SSL3_AL_WARNING
:
272 const char *SSL_alert_desc_string(int value
)
274 switch (value
& 0xff) {
275 case SSL3_AD_CLOSE_NOTIFY
:
277 case SSL3_AD_UNEXPECTED_MESSAGE
:
279 case SSL3_AD_BAD_RECORD_MAC
:
281 case SSL3_AD_DECOMPRESSION_FAILURE
:
283 case SSL3_AD_HANDSHAKE_FAILURE
:
285 case SSL3_AD_NO_CERTIFICATE
:
287 case SSL3_AD_BAD_CERTIFICATE
:
289 case SSL3_AD_UNSUPPORTED_CERTIFICATE
:
291 case SSL3_AD_CERTIFICATE_REVOKED
:
293 case SSL3_AD_CERTIFICATE_EXPIRED
:
295 case SSL3_AD_CERTIFICATE_UNKNOWN
:
297 case SSL3_AD_ILLEGAL_PARAMETER
:
299 case TLS1_AD_DECRYPTION_FAILED
:
301 case TLS1_AD_RECORD_OVERFLOW
:
303 case TLS1_AD_UNKNOWN_CA
:
305 case TLS1_AD_ACCESS_DENIED
:
307 case TLS1_AD_DECODE_ERROR
:
309 case TLS1_AD_DECRYPT_ERROR
:
311 case TLS1_AD_EXPORT_RESTRICTION
:
313 case TLS1_AD_PROTOCOL_VERSION
:
315 case TLS1_AD_INSUFFICIENT_SECURITY
:
317 case TLS1_AD_INTERNAL_ERROR
:
319 case TLS1_AD_USER_CANCELLED
:
321 case TLS1_AD_NO_RENEGOTIATION
:
323 case TLS1_AD_UNSUPPORTED_EXTENSION
:
325 case TLS1_AD_CERTIFICATE_UNOBTAINABLE
:
327 case TLS1_AD_UNRECOGNIZED_NAME
:
329 case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE
:
331 case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE
:
333 case TLS1_AD_UNKNOWN_PSK_IDENTITY
:
340 const char *SSL_alert_desc_string_long(int value
)
342 switch (value
& 0xff) {
343 case SSL3_AD_CLOSE_NOTIFY
:
344 return "close notify";
345 case SSL3_AD_UNEXPECTED_MESSAGE
:
346 return "unexpected_message";
347 case SSL3_AD_BAD_RECORD_MAC
:
348 return "bad record mac";
349 case SSL3_AD_DECOMPRESSION_FAILURE
:
350 return "decompression failure";
351 case SSL3_AD_HANDSHAKE_FAILURE
:
352 return "handshake failure";
353 case SSL3_AD_NO_CERTIFICATE
:
354 return "no certificate";
355 case SSL3_AD_BAD_CERTIFICATE
:
356 return "bad certificate";
357 case SSL3_AD_UNSUPPORTED_CERTIFICATE
:
358 return "unsupported certificate";
359 case SSL3_AD_CERTIFICATE_REVOKED
:
360 return "certificate revoked";
361 case SSL3_AD_CERTIFICATE_EXPIRED
:
362 return "certificate expired";
363 case SSL3_AD_CERTIFICATE_UNKNOWN
:
364 return "certificate unknown";
365 case SSL3_AD_ILLEGAL_PARAMETER
:
366 return "illegal parameter";
367 case TLS1_AD_DECRYPTION_FAILED
:
368 return "decryption failed";
369 case TLS1_AD_RECORD_OVERFLOW
:
370 return "record overflow";
371 case TLS1_AD_UNKNOWN_CA
:
373 case TLS1_AD_ACCESS_DENIED
:
374 return "access denied";
375 case TLS1_AD_DECODE_ERROR
:
376 return "decode error";
377 case TLS1_AD_DECRYPT_ERROR
:
378 return "decrypt error";
379 case TLS1_AD_EXPORT_RESTRICTION
:
380 return "export restriction";
381 case TLS1_AD_PROTOCOL_VERSION
:
382 return "protocol version";
383 case TLS1_AD_INSUFFICIENT_SECURITY
:
384 return "insufficient security";
385 case TLS1_AD_INTERNAL_ERROR
:
386 return "internal error";
387 case TLS1_AD_USER_CANCELLED
:
388 return "user canceled";
389 case TLS1_AD_NO_RENEGOTIATION
:
390 return "no renegotiation";
391 case TLS1_AD_UNSUPPORTED_EXTENSION
:
392 return "unsupported extension";
393 case TLS1_AD_CERTIFICATE_UNOBTAINABLE
:
394 return "certificate unobtainable";
395 case TLS1_AD_UNRECOGNIZED_NAME
:
396 return "unrecognized name";
397 case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE
:
398 return "bad certificate status response";
399 case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE
:
400 return "bad certificate hash value";
401 case TLS1_AD_UNKNOWN_PSK_IDENTITY
:
402 return "unknown PSK identity";
403 case TLS1_AD_NO_APPLICATION_PROTOCOL
:
404 return "no application protocol";