OLD | NEW |
1 /* ssl/tls1.h */ | 1 /* ssl/tls1.h */ |
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 * All rights reserved. | 3 * All rights reserved. |
4 * | 4 * |
5 * This package is an SSL implementation written | 5 * This package is an SSL implementation written |
6 * by Eric Young (eay@cryptsoft.com). | 6 * by Eric Young (eay@cryptsoft.com). |
7 * The implementation was written so as to conform with Netscapes SSL. | 7 * The implementation was written so as to conform with Netscapes SSL. |
8 * | 8 * |
9 * This library is free for commercial and non-commercial use as long as | 9 * This library is free for commercial and non-commercial use as long as |
10 * the following conditions are aheared to. The following conditions | 10 * the following conditions are aheared to. The following conditions |
(...skipping 38 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | 49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | 50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
51 * SUCH DAMAGE. | 51 * SUCH DAMAGE. |
52 * | 52 * |
53 * The licence and distribution terms for any publically available version or | 53 * The licence and distribution terms for any publically available version or |
54 * derivative of this code cannot be changed. i.e. this code cannot simply be | 54 * derivative of this code cannot be changed. i.e. this code cannot simply be |
55 * copied and put under another distribution licence | 55 * copied and put under another distribution licence |
56 * [including the GNU Public Licence.] | 56 * [including the GNU Public Licence.] |
57 */ | 57 */ |
58 /* ==================================================================== | 58 /* ==================================================================== |
| 59 * Copyright (c) 1998-2006 The OpenSSL Project. All rights reserved. |
| 60 * |
| 61 * Redistribution and use in source and binary forms, with or without |
| 62 * modification, are permitted provided that the following conditions |
| 63 * are met: |
| 64 * |
| 65 * 1. Redistributions of source code must retain the above copyright |
| 66 * notice, this list of conditions and the following disclaimer. |
| 67 * |
| 68 * 2. Redistributions in binary form must reproduce the above copyright |
| 69 * notice, this list of conditions and the following disclaimer in |
| 70 * the documentation and/or other materials provided with the |
| 71 * distribution. |
| 72 * |
| 73 * 3. All advertising materials mentioning features or use of this |
| 74 * software must display the following acknowledgment: |
| 75 * "This product includes software developed by the OpenSSL Project |
| 76 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" |
| 77 * |
| 78 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to |
| 79 * endorse or promote products derived from this software without |
| 80 * prior written permission. For written permission, please contact |
| 81 * openssl-core@openssl.org. |
| 82 * |
| 83 * 5. Products derived from this software may not be called "OpenSSL" |
| 84 * nor may "OpenSSL" appear in their names without prior written |
| 85 * permission of the OpenSSL Project. |
| 86 * |
| 87 * 6. Redistributions of any form whatsoever must retain the following |
| 88 * acknowledgment: |
| 89 * "This product includes software developed by the OpenSSL Project |
| 90 * for use in the OpenSSL Toolkit (http://www.openssl.org/)" |
| 91 * |
| 92 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY |
| 93 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| 94 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
| 95 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR |
| 96 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
| 97 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| 98 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; |
| 99 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
| 100 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, |
| 101 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
| 102 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED |
| 103 * OF THE POSSIBILITY OF SUCH DAMAGE. |
| 104 * ==================================================================== |
| 105 * |
| 106 * This product includes cryptographic software written by Eric Young |
| 107 * (eay@cryptsoft.com). This product includes software written by Tim |
| 108 * Hudson (tjh@cryptsoft.com). |
| 109 * |
| 110 */ |
| 111 /* ==================================================================== |
59 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. | 112 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. |
60 * | 113 * |
61 * Portions of the attached software ("Contribution") are developed by | 114 * Portions of the attached software ("Contribution") are developed by |
62 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project. | 115 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project. |
63 * | 116 * |
64 * The Contribution is licensed pursuant to the OpenSSL open source | 117 * The Contribution is licensed pursuant to the OpenSSL open source |
65 * license provided above. | 118 * license provided above. |
66 * | 119 * |
67 * ECC cipher suite support in OpenSSL originally written by | 120 * ECC cipher suite support in OpenSSL originally written by |
68 * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories. | 121 * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories. |
69 * | 122 * |
70 */ | 123 */ |
| 124 /* ==================================================================== |
| 125 * Copyright 2005 Nokia. All rights reserved. |
| 126 * |
| 127 * The portions of the attached software ("Contribution") is developed by |
| 128 * Nokia Corporation and is licensed pursuant to the OpenSSL open source |
| 129 * license. |
| 130 * |
| 131 * The Contribution, originally written by Mika Kousa and Pasi Eronen of |
| 132 * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites |
| 133 * support (see RFC 4279) to OpenSSL. |
| 134 * |
| 135 * No patent licenses or other rights except those expressly stated in |
| 136 * the OpenSSL open source license shall be deemed granted or received |
| 137 * expressly, by implication, estoppel, or otherwise. |
| 138 * |
| 139 * No assurances are provided by Nokia that the Contribution does not |
| 140 * infringe the patent or other intellectual property rights of any third |
| 141 * party or that the license provides you with all the necessary rights |
| 142 * to make use of the Contribution. |
| 143 * |
| 144 * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN |
| 145 * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA |
| 146 * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY |
| 147 * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR |
| 148 * OTHERWISE. |
| 149 */ |
71 | 150 |
72 #ifndef HEADER_TLS1_H | 151 #ifndef HEADER_TLS1_H |
73 #define HEADER_TLS1_H | 152 #define HEADER_TLS1_H |
74 | 153 |
75 #include <openssl/buffer.h> | 154 #include <openssl/buffer.h> |
76 | 155 |
77 #ifdef __cplusplus | 156 #ifdef __cplusplus |
78 extern "C" { | 157 extern "C" { |
79 #endif | 158 #endif |
80 | 159 |
(...skipping 16 matching lines...) Expand all Loading... |
97 #define TLS1_AD_USER_CANCELLED 90 | 176 #define TLS1_AD_USER_CANCELLED 90 |
98 #define TLS1_AD_NO_RENEGOTIATION 100 | 177 #define TLS1_AD_NO_RENEGOTIATION 100 |
99 /* codes 110-114 are from RFC3546 */ | 178 /* codes 110-114 are from RFC3546 */ |
100 #define TLS1_AD_UNSUPPORTED_EXTENSION 110 | 179 #define TLS1_AD_UNSUPPORTED_EXTENSION 110 |
101 #define TLS1_AD_CERTIFICATE_UNOBTAINABLE 111 | 180 #define TLS1_AD_CERTIFICATE_UNOBTAINABLE 111 |
102 #define TLS1_AD_UNRECOGNIZED_NAME 112 | 181 #define TLS1_AD_UNRECOGNIZED_NAME 112 |
103 #define TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE 113 | 182 #define TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE 113 |
104 #define TLS1_AD_BAD_CERTIFICATE_HASH_VALUE 114 | 183 #define TLS1_AD_BAD_CERTIFICATE_HASH_VALUE 114 |
105 #define TLS1_AD_UNKNOWN_PSK_IDENTITY 115 /* fatal */ | 184 #define TLS1_AD_UNKNOWN_PSK_IDENTITY 115 /* fatal */ |
106 | 185 |
107 /* ExtensionType values from RFC 3546 */ | 186 /* ExtensionType values from RFC3546 / RFC4366 */ |
108 #define TLSEXT_TYPE_server_name 0 | 187 #define TLSEXT_TYPE_server_name 0 |
109 #define TLSEXT_TYPE_max_fragment_length 1 | 188 #define TLSEXT_TYPE_max_fragment_length 1 |
110 #define TLSEXT_TYPE_client_certificate_url 2 | 189 #define TLSEXT_TYPE_client_certificate_url 2 |
111 #define TLSEXT_TYPE_trusted_ca_keys 3 | 190 #define TLSEXT_TYPE_trusted_ca_keys 3 |
112 #define TLSEXT_TYPE_truncated_hmac 4 | 191 #define TLSEXT_TYPE_truncated_hmac 4 |
113 #define TLSEXT_TYPE_status_request 5 | 192 #define TLSEXT_TYPE_status_request 5 |
| 193 /* ExtensionType values from RFC4492 */ |
114 #define TLSEXT_TYPE_elliptic_curves 10 | 194 #define TLSEXT_TYPE_elliptic_curves 10 |
115 #define TLSEXT_TYPE_ec_point_formats 11 | 195 #define TLSEXT_TYPE_ec_point_formats 11 |
116 #define TLSEXT_TYPE_session_ticket 35 | 196 #define TLSEXT_TYPE_session_ticket 35 |
| 197 /* ExtensionType value from draft-rescorla-tls-opaque-prf-input-00.txt */ |
| 198 #if 0 /* will have to be provided externally for now , |
| 199 * i.e. build with -DTLSEXT_TYPE_opaque_prf_input=38183 |
| 200 * using whatever extension number you'd like to try */ |
| 201 # define TLSEXT_TYPE_opaque_prf_input ?? */ |
| 202 #endif |
117 | 203 |
118 /* Temporary extension type */ | 204 /* Temporary extension type */ |
119 #define TLSEXT_TYPE_renegotiate 0xff01 | 205 #define TLSEXT_TYPE_renegotiate 0xff01 |
120 | 206 |
| 207 #ifndef OPENSSL_NO_NEXTPROTONEG |
121 /* This is not an IANA defined extension number */ | 208 /* This is not an IANA defined extension number */ |
122 #define TLSEXT_TYPE_next_proto_neg 13172 | 209 #define TLSEXT_TYPE_next_proto_neg 13172 |
123 /* http://tools.ietf.org/html/draft-agl-tls-snapstart-00 */ | 210 #endif |
124 #define TLSEXT_TYPE_snap_start» » » 13174 | |
125 | 211 |
126 /* NameType value from RFC 3546 */ | 212 /* NameType value from RFC 3546 */ |
127 #define TLSEXT_NAMETYPE_host_name 0 | 213 #define TLSEXT_NAMETYPE_host_name 0 |
128 /* status request value from RFC 3546 */ | 214 /* status request value from RFC 3546 */ |
129 #define TLSEXT_STATUSTYPE_ocsp 1 | 215 #define TLSEXT_STATUSTYPE_ocsp 1 |
130 | 216 |
| 217 /* ECPointFormat values from draft-ietf-tls-ecc-12 */ |
| 218 #define TLSEXT_ECPOINTFORMAT_first 0 |
| 219 #define TLSEXT_ECPOINTFORMAT_uncompressed 0 |
| 220 #define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime 1 |
| 221 #define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2 2 |
| 222 #define TLSEXT_ECPOINTFORMAT_last 2 |
| 223 |
131 #ifndef OPENSSL_NO_TLSEXT | 224 #ifndef OPENSSL_NO_TLSEXT |
132 | 225 |
133 #define TLSEXT_MAXLEN_host_name 255 | 226 #define TLSEXT_MAXLEN_host_name 255 |
134 | 227 |
135 const char *SSL_get_servername(const SSL *s, const int type) ; | 228 const char *SSL_get_servername(const SSL *s, const int type) ; |
136 int SSL_get_servername_type(const SSL *s) ; | 229 int SSL_get_servername_type(const SSL *s) ; |
137 | 230 |
138 #define SSL_set_tlsext_host_name(s,name) \ | 231 #define SSL_set_tlsext_host_name(s,name) \ |
139 SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name,(char *)name) | 232 SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name,(char *)name) |
140 | 233 |
(...skipping 39 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
180 SSL_CTX_ctrl((ctx),SSL_CTRL_GET_TLSEXT_TICKET_KEYS,(keylen),(keys)) | 273 SSL_CTX_ctrl((ctx),SSL_CTRL_GET_TLSEXT_TICKET_KEYS,(keylen),(keys)) |
181 #define SSL_CTX_set_tlsext_ticket_keys(ctx, keys, keylen) \ | 274 #define SSL_CTX_set_tlsext_ticket_keys(ctx, keys, keylen) \ |
182 SSL_CTX_ctrl((ctx),SSL_CTRL_SET_TLSEXT_TICKET_KEYS,(keylen),(keys)) | 275 SSL_CTX_ctrl((ctx),SSL_CTRL_SET_TLSEXT_TICKET_KEYS,(keylen),(keys)) |
183 | 276 |
184 #define SSL_CTX_set_tlsext_status_cb(ssl, cb) \ | 277 #define SSL_CTX_set_tlsext_status_cb(ssl, cb) \ |
185 SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB,(void (*)(void))cb) | 278 SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB,(void (*)(void))cb) |
186 | 279 |
187 #define SSL_CTX_set_tlsext_status_arg(ssl, arg) \ | 280 #define SSL_CTX_set_tlsext_status_arg(ssl, arg) \ |
188 SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG,0, (void *)arg) | 281 SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG,0, (void *)arg) |
189 | 282 |
| 283 #define SSL_set_tlsext_opaque_prf_input(s, src, len) \ |
| 284 SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT, len, src) |
| 285 #define SSL_CTX_set_tlsext_opaque_prf_input_callback(ctx, cb) \ |
| 286 SSL_CTX_callback_ctrl(ctx,SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB, (void (*)(voi
d))cb) |
| 287 #define SSL_CTX_set_tlsext_opaque_prf_input_callback_arg(ctx, arg) \ |
| 288 SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB_ARG, 0, arg) |
| 289 |
190 #define SSL_CTX_set_tlsext_ticket_key_cb(ssl, cb) \ | 290 #define SSL_CTX_set_tlsext_ticket_key_cb(ssl, cb) \ |
191 SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB,(void (*)(void))cb) | 291 SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB,(void (*)(void))cb) |
192 | 292 |
193 #endif | 293 #endif |
194 | 294 |
195 /* Additional TLS ciphersuites from draft-ietf-tls-56-bit-ciphersuites-00.txt | 295 /* PSK ciphersuites from 4279 */ |
| 296 #define TLS1_CK_PSK_WITH_RC4_128_SHA 0x0300008A |
| 297 #define TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA 0x0300008B |
| 298 #define TLS1_CK_PSK_WITH_AES_128_CBC_SHA 0x0300008C |
| 299 #define TLS1_CK_PSK_WITH_AES_256_CBC_SHA 0x0300008D |
| 300 |
| 301 /* Additional TLS ciphersuites from expired Internet Draft |
| 302 * draft-ietf-tls-56-bit-ciphersuites-01.txt |
196 * (available if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES is defined, see | 303 * (available if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES is defined, see |
197 * s3_lib.c). We actually treat them like SSL 3.0 ciphers, which we probably | 304 * s3_lib.c). We actually treat them like SSL 3.0 ciphers, which we probably |
198 * shouldn't. */ | 305 * shouldn't. Note that the first two are actually not in the IDs. */ |
199 #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5» » 0x03000060 | 306 #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5» » 0x03000060 /* not in ID
*/ |
200 #define TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5» 0x03000061 | 307 #define TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5» 0x03000061 /* not in ID
*/ |
201 #define TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA 0x03000062 | 308 #define TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA 0x03000062 |
202 #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA 0x03000063 | 309 #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA 0x03000063 |
203 #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA 0x03000064 | 310 #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA 0x03000064 |
204 #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA 0x03000065 | 311 #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA 0x03000065 |
205 #define TLS1_CK_DHE_DSS_WITH_RC4_128_SHA 0x03000066 | 312 #define TLS1_CK_DHE_DSS_WITH_RC4_128_SHA 0x03000066 |
206 | 313 |
207 /* AES ciphersuites from RFC3268 */ | 314 /* AES ciphersuites from RFC3268 */ |
208 | 315 |
209 #define TLS1_CK_RSA_WITH_AES_128_SHA 0x0300002F | 316 #define TLS1_CK_RSA_WITH_AES_128_SHA 0x0300002F |
210 #define TLS1_CK_DH_DSS_WITH_AES_128_SHA 0x03000030 | 317 #define TLS1_CK_DH_DSS_WITH_AES_128_SHA 0x03000030 |
(...skipping 117 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
328 #define TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA "ECDHE-RSA-DES-CBC3-SHA" | 435 #define TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA "ECDHE-RSA-DES-CBC3-SHA" |
329 #define TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA "ECDHE-RSA-AES128-SHA" | 436 #define TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA "ECDHE-RSA-AES128-SHA" |
330 #define TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA "ECDHE-RSA-AES256-SHA" | 437 #define TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA "ECDHE-RSA-AES256-SHA" |
331 | 438 |
332 #define TLS1_TXT_ECDH_anon_WITH_NULL_SHA "AECDH-NULL-SHA" | 439 #define TLS1_TXT_ECDH_anon_WITH_NULL_SHA "AECDH-NULL-SHA" |
333 #define TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA "AECDH-RC4-SHA" | 440 #define TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA "AECDH-RC4-SHA" |
334 #define TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA "AECDH-DES-CBC3-SHA" | 441 #define TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA "AECDH-DES-CBC3-SHA" |
335 #define TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA "AECDH-AES128-SHA" | 442 #define TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA "AECDH-AES128-SHA" |
336 #define TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA "AECDH-AES256-SHA" | 443 #define TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA "AECDH-AES256-SHA" |
337 | 444 |
| 445 /* PSK ciphersuites from RFC 4279 */ |
| 446 #define TLS1_TXT_PSK_WITH_RC4_128_SHA "PSK-RC4-SHA" |
| 447 #define TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA "PSK-3DES-EDE-CBC-SHA" |
| 448 #define TLS1_TXT_PSK_WITH_AES_128_CBC_SHA "PSK-AES128-CBC-SHA" |
| 449 #define TLS1_TXT_PSK_WITH_AES_256_CBC_SHA "PSK-AES256-CBC-SHA" |
| 450 |
338 /* Camellia ciphersuites from RFC4132 */ | 451 /* Camellia ciphersuites from RFC4132 */ |
339 #define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA "CAMELLIA128-SHA" | 452 #define TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA "CAMELLIA128-SHA" |
340 #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA "DH-DSS-CAMELLIA128-SHA" | 453 #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA "DH-DSS-CAMELLIA128-SHA" |
341 #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA "DH-RSA-CAMELLIA128-SHA" | 454 #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA "DH-RSA-CAMELLIA128-SHA" |
342 #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA "DHE-DSS-CAMELLIA128-SHA
" | 455 #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA "DHE-DSS-CAMELLIA128-SHA
" |
343 #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA "DHE-RSA-CAMELLIA128-SHA
" | 456 #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA "DHE-RSA-CAMELLIA128-SHA
" |
344 #define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA "ADH-CAMELLIA128-SHA" | 457 #define TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA "ADH-CAMELLIA128-SHA" |
345 | 458 |
346 #define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA "CAMELLIA256-SHA" | 459 #define TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA "CAMELLIA256-SHA" |
347 #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA "DH-DSS-CAMELLIA256-SHA" | 460 #define TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA "DH-DSS-CAMELLIA256-SHA" |
348 #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA "DH-RSA-CAMELLIA256-SHA" | 461 #define TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA "DH-RSA-CAMELLIA256-SHA" |
349 #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA "DHE-DSS-CAMELLIA256-SHA
" | 462 #define TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA "DHE-DSS-CAMELLIA256-SHA
" |
350 #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA "DHE-RSA-CAMELLIA256-SHA
" | 463 #define TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA "DHE-RSA-CAMELLIA256-SHA
" |
351 #define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA "ADH-CAMELLIA256-SHA" | 464 #define TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA "ADH-CAMELLIA256-SHA" |
352 | 465 |
353 /* SEED ciphersuites from RFC4162 */ | 466 /* SEED ciphersuites from RFC4162 */ |
354 #define TLS1_TXT_RSA_WITH_SEED_SHA "SEED-SHA" | 467 #define TLS1_TXT_RSA_WITH_SEED_SHA "SEED-SHA" |
355 #define TLS1_TXT_DH_DSS_WITH_SEED_SHA "DH-DSS-SEED-SHA" | 468 #define TLS1_TXT_DH_DSS_WITH_SEED_SHA "DH-DSS-SEED-SHA" |
356 #define TLS1_TXT_DH_RSA_WITH_SEED_SHA "DH-RSA-SEED-SHA" | 469 #define TLS1_TXT_DH_RSA_WITH_SEED_SHA "DH-RSA-SEED-SHA" |
357 #define TLS1_TXT_DHE_DSS_WITH_SEED_SHA "DHE-DSS-SEED-SHA" | 470 #define TLS1_TXT_DHE_DSS_WITH_SEED_SHA "DHE-DSS-SEED-SHA" |
358 #define TLS1_TXT_DHE_RSA_WITH_SEED_SHA "DHE-RSA-SEED-SHA" | 471 #define TLS1_TXT_DHE_RSA_WITH_SEED_SHA "DHE-RSA-SEED-SHA" |
359 #define TLS1_TXT_ADH_WITH_SEED_SHA "ADH-SEED-SHA" | 472 #define TLS1_TXT_ADH_WITH_SEED_SHA "ADH-SEED-SHA" |
360 | 473 |
| 474 |
361 #define TLS_CT_RSA_SIGN 1 | 475 #define TLS_CT_RSA_SIGN 1 |
362 #define TLS_CT_DSS_SIGN 2 | 476 #define TLS_CT_DSS_SIGN 2 |
363 #define TLS_CT_RSA_FIXED_DH 3 | 477 #define TLS_CT_RSA_FIXED_DH 3 |
364 #define TLS_CT_DSS_FIXED_DH 4 | 478 #define TLS_CT_DSS_FIXED_DH 4 |
365 #define TLS_CT_ECDSA_SIGN 64 | 479 #define TLS_CT_ECDSA_SIGN 64 |
366 #define TLS_CT_RSA_FIXED_ECDH 65 | 480 #define TLS_CT_RSA_FIXED_ECDH 65 |
367 #define TLS_CT_ECDSA_FIXED_ECDH 66 | 481 #define TLS_CT_ECDSA_FIXED_ECDH 66 |
368 #define TLS_CT_NUMBER» » » 7 | 482 #define TLS_CT_GOST94_SIGN» » 21 |
| 483 #define TLS_CT_GOST01_SIGN» » 22 |
| 484 /* when correcting this number, correct also SSL3_CT_NUMBER in ssl3.h (see |
| 485 * comment there) */ |
| 486 #define TLS_CT_NUMBER» » » 9 |
369 | 487 |
370 #define TLS1_FINISH_MAC_LENGTH 12 | 488 #define TLS1_FINISH_MAC_LENGTH 12 |
371 | 489 |
372 #define TLS_MD_MAX_CONST_SIZE 20 | 490 #define TLS_MD_MAX_CONST_SIZE 20 |
373 #define TLS_MD_CLIENT_FINISH_CONST "client finished" | 491 #define TLS_MD_CLIENT_FINISH_CONST "client finished" |
374 #define TLS_MD_CLIENT_FINISH_CONST_SIZE 15 | 492 #define TLS_MD_CLIENT_FINISH_CONST_SIZE 15 |
375 #define TLS_MD_SERVER_FINISH_CONST "server finished" | 493 #define TLS_MD_SERVER_FINISH_CONST "server finished" |
376 #define TLS_MD_SERVER_FINISH_CONST_SIZE 15 | 494 #define TLS_MD_SERVER_FINISH_CONST_SIZE 15 |
377 #define TLS_MD_SERVER_WRITE_KEY_CONST "server write key" | 495 #define TLS_MD_SERVER_WRITE_KEY_CONST "server write key" |
378 #define TLS_MD_SERVER_WRITE_KEY_CONST_SIZE 16 | 496 #define TLS_MD_SERVER_WRITE_KEY_CONST_SIZE 16 |
(...skipping 20 matching lines...) Expand all Loading... |
399 #undef TLS_MD_CLIENT_WRITE_KEY_CONST | 517 #undef TLS_MD_CLIENT_WRITE_KEY_CONST |
400 #define TLS_MD_CLIENT_WRITE_KEY_CONST "\x63\x6c\x69\x65\x6e\x74\x20\x77\x72\x69\
x74\x65\x20\x6b\x65\x79" /*client write key*/ | 518 #define TLS_MD_CLIENT_WRITE_KEY_CONST "\x63\x6c\x69\x65\x6e\x74\x20\x77\x72\x69\
x74\x65\x20\x6b\x65\x79" /*client write key*/ |
401 #undef TLS_MD_SERVER_WRITE_KEY_CONST | 519 #undef TLS_MD_SERVER_WRITE_KEY_CONST |
402 #define TLS_MD_SERVER_WRITE_KEY_CONST "\x73\x65\x72\x76\x65\x72\x20\x77\x72\x69\
x74\x65\x20\x6b\x65\x79" /*server write key*/ | 520 #define TLS_MD_SERVER_WRITE_KEY_CONST "\x73\x65\x72\x76\x65\x72\x20\x77\x72\x69\
x74\x65\x20\x6b\x65\x79" /*server write key*/ |
403 #undef TLS_MD_IV_BLOCK_CONST | 521 #undef TLS_MD_IV_BLOCK_CONST |
404 #define TLS_MD_IV_BLOCK_CONST "\x49\x56\x20\x62\x6c\x6f\x63\x6b" /*IV b
lock*/ | 522 #define TLS_MD_IV_BLOCK_CONST "\x49\x56\x20\x62\x6c\x6f\x63\x6b" /*IV b
lock*/ |
405 #undef TLS_MD_MASTER_SECRET_CONST | 523 #undef TLS_MD_MASTER_SECRET_CONST |
406 #define TLS_MD_MASTER_SECRET_CONST "\x6d\x61\x73\x74\x65\x72\x20\x73\x65\x63\
x72\x65\x74" /*master secret*/ | 524 #define TLS_MD_MASTER_SECRET_CONST "\x6d\x61\x73\x74\x65\x72\x20\x73\x65\x63\
x72\x65\x74" /*master secret*/ |
407 #endif | 525 #endif |
408 | 526 |
| 527 /* TLS Session Ticket extension struct */ |
| 528 struct tls_session_ticket_ext_st |
| 529 { |
| 530 unsigned short length; |
| 531 void *data; |
| 532 }; |
| 533 |
409 #ifdef __cplusplus | 534 #ifdef __cplusplus |
410 } | 535 } |
411 #endif | 536 #endif |
412 #endif | 537 #endif |
413 | |
414 | |
415 | |
OLD | NEW |