Add TLS-SRP (RFC 5054) support

net/socket/nss_ssl_util.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/socket/nss_ssl_util.h"
 
 #include <nss.h>
 #include <secerr.h>
 #include <ssl.h>
 #include <sslerr.h>
@@ skipping 28 matching lines @@
     const PRUint16* pSSL_ImplementedCiphers = static_cast<const PRUint16*>(
         dlsym(RTLD_DEFAULT, "SSL_ImplementedCiphers"));
     if (pSSL_ImplementedCiphers == NULL) {
       NOTREACHED() << "Can't get list of supported ciphers";
       return;
     }
 #else
 #define pSSL_ImplementedCiphers SSL_ImplementedCiphers
 #endif
 
-    // Explicitly enable exactly those ciphers with keys of at least 80 bits
+    // Explicitly enable exactly those ciphers with keys of at least 80 bits,
+    // except for SRP ciphers.
     for (int i = 0; i < SSL_NumImplementedCiphers; i++) {
       SSLCipherSuiteInfo info;
       if (SSL_GetCipherSuiteInfo(pSSL_ImplementedCiphers[i], &info,
                                  sizeof(info)) == SECSuccess) {
         SSL_CipherPrefSetDefault(pSSL_ImplementedCiphers[i],
-                                 (info.effectiveKeyBits >= 80));
+                                 (info.effectiveKeyBits >= 80 &&
+                                  !IsNSSCipherKEATypeSRP(info.keaType)));
       }
     }
 
     // Enable SSL.
     SSL_OptionSetDefault(SSL_SECURITY, PR_TRUE);
 
     // All other SSL options are set per-session by SSLClientSocket and
     // SSLServerSocket.
   }
 
@@ skipping 112 matching lines @@
     case SSL_ERROR_ILLEGAL_PARAMETER_ALERT:
       return ERR_SSL_PROTOCOL_ERROR;
     case SSL_ERROR_DECOMPRESSION_FAILURE_ALERT:
       return ERR_SSL_DECOMPRESSION_FAILURE_ALERT;
     case SSL_ERROR_BAD_MAC_ALERT:
       return ERR_SSL_BAD_RECORD_MAC_ALERT;
     case SSL_ERROR_UNSAFE_NEGOTIATION:
       return ERR_SSL_UNSAFE_NEGOTIATION;
     case SSL_ERROR_WEAK_SERVER_KEY:
       return ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY;
+    case SSL_ERROR_UNKNOWN_PSK_IDENTITY_ALERT:
+      return ERR_SSL_UNKNOWN_PSK_IDENTITY_ALERT;
 
     default: {
       if (IS_SSL_ERROR(err)) {
         LOG(WARNING) << "Unknown SSL error " << err <<
             " mapped to net::ERR_SSL_PROTOCOL_ERROR";
         return ERR_SSL_PROTOCOL_ERROR;
       }
       LOG(WARNING) << "Unknown error " << err <<
           " mapped to net::ERR_FAILED";
       return ERR_FAILED;
@@ skipping 40 matching lines @@
 };
 
 void LogFailedNSSFunction(const BoundNetLog& net_log,
                           const char* function,
                           const char* param) {
   net_log.AddEvent(
       NetLog::TYPE_SSL_NSS_ERROR,
       make_scoped_refptr(new SSLFailedNSSFunctionParams(function, param)));
 }
 
+// Returns true iff |kea_type|, an NSS cipher's key exchange algorithm (KEA),
+// uses SRP, including ciphers that also use certificates (e.g., SRP_SHA_RSA
+// and SRP_SHA_DSS).
+bool IsNSSCipherKEATypeSRP(SSLKEAType kea_type) {
+  return kea_type == ssl_kea_srp ||
+      kea_type == ssl_kea_srp_rsa ||
+      kea_type == ssl_kea_srp_dss;
+}
+
 }  // namespace net