ssl/s3_lib.c

   1 /* ssl/s3_lib.c */
   2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   3  * All rights reserved.
   4  *
   5  * This package is an SSL implementation written
   6  * by Eric Young (eay@cryptsoft.com).
   7  * The implementation was written so as to conform with Netscapes SSL.
   8  *
   9  * This library is free for commercial and non-commercial use as long as
  10  * the following conditions are aheared to.  The following conditions
  11  * apply to all code found in this distribution, be it the RC4, RSA,
  12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  13  * included with this distribution is covered by the same copyright terms
  14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15  *
  16  * Copyright remains Eric Young's, and as such any Copyright notices in
  17  * the code are not to be removed.
  18  * If this package is used in a product, Eric Young should be given attribution
  19  * as the author of the parts of the library used.
  20  * This can be in the form of a textual message at program startup or
  21  * in documentation (online or textual) provided with the package.
  22  *
  23  * Redistribution and use in source and binary forms, with or without
  24  * modification, are permitted provided that the following conditions
  25  * are met:
  26  * 1. Redistributions of source code must retain the copyright
  27  *    notice, this list of conditions and the following disclaimer.
  28  * 2. Redistributions in binary form must reproduce the above copyright
  29  *    notice, this list of conditions and the following disclaimer in the
  30  *    documentation and/or other materials provided with the distribution.
  31  * 3. All advertising materials mentioning features or use of this software
  32  *    must display the following acknowledgement:
  33  *    "This product includes cryptographic software written by
  34  *     Eric Young (eay@cryptsoft.com)"
  35  *    The word 'cryptographic' can be left out if the rouines from the library
  36  *    being used are not cryptographic related :-).
  37  * 4. If you include any Windows specific code (or a derivative thereof) from
  38  *    the apps directory (application code) you must include an acknowledgement:
  39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  *
  53  * The licence and distribution terms for any publically available version or
  54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  55  * copied and put under another distribution licence
  56  * [including the GNU Public Licence.]
  57  */
  58 /* ====================================================================
  59  * Copyright (c) 1998-2007 The OpenSSL Project.  All rights reserved.
  60  *
  61  * Redistribution and use in source and binary forms, with or without
  62  * modification, are permitted provided that the following conditions
  63  * are met:
  64  *
  65  * 1. Redistributions of source code must retain the above copyright
  66  *    notice, this list of conditions and the following disclaimer.
  67  *
  68  * 2. Redistributions in binary form must reproduce the above copyright
  69  *    notice, this list of conditions and the following disclaimer in
  70  *    the documentation and/or other materials provided with the
  71  *    distribution.
  72  *
  73  * 3. All advertising materials mentioning features or use of this
  74  *    software must display the following acknowledgment:
  75  *    "This product includes software developed by the OpenSSL Project
  76  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77  *
  78  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79  *    endorse or promote products derived from this software without
  80  *    prior written permission. For written permission, please contact
  81  *    openssl-core@openssl.org.
  82  *
  83  * 5. Products derived from this software may not be called "OpenSSL"
  84  *    nor may "OpenSSL" appear in their names without prior written
  85  *    permission of the OpenSSL Project.
  86  *
  87  * 6. Redistributions of any form whatsoever must retain the following
  88  *    acknowledgment:
  89  *    "This product includes software developed by the OpenSSL Project
  90  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91  *
  92  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 100  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 101  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 102  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 103  * OF THE POSSIBILITY OF SUCH DAMAGE.
 104  * ====================================================================
 105  *
 106  * This product includes cryptographic software written by Eric Young
 107  * (eay@cryptsoft.com).  This product includes software written by Tim
 108  * Hudson (tjh@cryptsoft.com).
 109  *
 110  */
 111 /* ====================================================================
 112  * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
 113  *
 114  * Portions of the attached software ("Contribution") are developed by
 115  * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
 116  *
 117  * The Contribution is licensed pursuant to the OpenSSL open source
 118  * license provided above.
 119  *
 120  * ECC cipher suite support in OpenSSL originally written by
 121  * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
 122  *
 123  */
 124 /* ====================================================================
 125  * Copyright 2005 Nokia. All rights reserved.
 126  *
 127  * The portions of the attached software ("Contribution") is developed by
 128  * Nokia Corporation and is licensed pursuant to the OpenSSL open source
 129  * license.
 130  *
 131  * The Contribution, originally written by Mika Kousa and Pasi Eronen of
 132  * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
 133  * support (see RFC 4279) to OpenSSL.
 134  *
 135  * No patent licenses or other rights except those expressly stated in
 136  * the OpenSSL open source license shall be deemed granted or received
 137  * expressly, by implication, estoppel, or otherwise.
 138  *
 139  * No assurances are provided by Nokia that the Contribution does not
 140  * infringe the patent or other intellectual property rights of any third
 141  * party or that the license provides you with all the necessary rights
 142  * to make use of the Contribution.
 143  *
 144  * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
 145  * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
 146  * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
 147  * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
 148  * OTHERWISE.
 149  */
 150
 151 #include <stdio.h>
 152 #include <openssl/objects.h>
 153 #include "ssl_locl.h"
 154 #include "kssl_lcl.h"
 155 #include <openssl/md5.h>
 156 #ifndef OPENSSL_NO_DH
 157 #include <openssl/dh.h>
 158 #endif
 159
 160 const char ssl3_version_str[]="SSLv3" OPENSSL_VERSION_PTEXT;
 161
 162 #define SSL3_NUM_CIPHERS        (sizeof(ssl3_ciphers)/sizeof(SSL_CIPHER))
 163
 164 /* list of available SSLv3 ciphers (sorted by id) */
 165 OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
 166
 167 /* The RSA ciphers */
 168 /* Cipher 01 */
 169         {
 170         1,
 171         SSL3_TXT_RSA_NULL_MD5,
 172         SSL3_CK_RSA_NULL_MD5,
 173         SSL_kRSA,
 174         SSL_aRSA,
 175         SSL_eNULL,
 176         SSL_MD5,
 177         SSL_SSLV3,
 178         SSL_NOT_EXP|SSL_STRONG_NONE,
 179         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 180         0,
 181         0,
 182         },
 183
 184 /* Cipher 02 */
 185         {
 186         1,
 187         SSL3_TXT_RSA_NULL_SHA,
 188         SSL3_CK_RSA_NULL_SHA,
 189         SSL_kRSA,
 190         SSL_aRSA,
 191         SSL_eNULL,
 192         SSL_SHA1,
 193         SSL_SSLV3,
 194         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
 195         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 196         0,
 197         0,
 198         },
 199
 200 /* Cipher 03 */
 201         {
 202         1,
 203         SSL3_TXT_RSA_RC4_40_MD5,
 204         SSL3_CK_RSA_RC4_40_MD5,
 205         SSL_kRSA,
 206         SSL_aRSA,
 207         SSL_RC4,
 208         SSL_MD5,
 209         SSL_SSLV3,
 210         SSL_EXPORT|SSL_EXP40,
 211         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 212         40,
 213         128,
 214         },
 215
 216 /* Cipher 04 */
 217         {
 218         1,
 219         SSL3_TXT_RSA_RC4_128_MD5,
 220         SSL3_CK_RSA_RC4_128_MD5,
 221         SSL_kRSA,
 222         SSL_aRSA,
 223         SSL_RC4,
 224         SSL_MD5,
 225         SSL_SSLV3,
 226         SSL_NOT_EXP|SSL_MEDIUM,
 227         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 228         128,
 229         128,
 230         },
 231
 232 /* Cipher 05 */
 233         {
 234         1,
 235         SSL3_TXT_RSA_RC4_128_SHA,
 236         SSL3_CK_RSA_RC4_128_SHA,
 237         SSL_kRSA,
 238         SSL_aRSA,
 239         SSL_RC4,
 240         SSL_SHA1,
 241         SSL_SSLV3,
 242         SSL_NOT_EXP|SSL_MEDIUM,
 243         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 244         128,
 245         128,
 246         },
 247
 248 /* Cipher 06 */
 249         {
 250         1,
 251         SSL3_TXT_RSA_RC2_40_MD5,
 252         SSL3_CK_RSA_RC2_40_MD5,
 253         SSL_kRSA,
 254         SSL_aRSA,
 255         SSL_RC2,
 256         SSL_MD5,
 257         SSL_SSLV3,
 258         SSL_EXPORT|SSL_EXP40,
 259         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 260         40,
 261         128,
 262         },
 263
 264 /* Cipher 07 */
 265 #ifndef OPENSSL_NO_IDEA
 266         {
 267         1,
 268         SSL3_TXT_RSA_IDEA_128_SHA,
 269         SSL3_CK_RSA_IDEA_128_SHA,
 270         SSL_kRSA,
 271         SSL_aRSA,
 272         SSL_IDEA,
 273         SSL_SHA1,
 274         SSL_SSLV3,
 275         SSL_NOT_EXP|SSL_MEDIUM,
 276         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 277         128,
 278         128,
 279         },
 280 #endif
 281
 282 /* Cipher 08 */
 283         {
 284         1,
 285         SSL3_TXT_RSA_DES_40_CBC_SHA,
 286         SSL3_CK_RSA_DES_40_CBC_SHA,
 287         SSL_kRSA,
 288         SSL_aRSA,
 289         SSL_DES,
 290         SSL_SHA1,
 291         SSL_SSLV3,
 292         SSL_EXPORT|SSL_EXP40,
 293         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 294         40,
 295         56,
 296         },
 297
 298 /* Cipher 09 */
 299         {
 300         1,
 301         SSL3_TXT_RSA_DES_64_CBC_SHA,
 302         SSL3_CK_RSA_DES_64_CBC_SHA,
 303         SSL_kRSA,
 304         SSL_aRSA,
 305         SSL_DES,
 306         SSL_SHA1,
 307         SSL_SSLV3,
 308         SSL_NOT_EXP|SSL_LOW,
 309         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 310         56,
 311         56,
 312         },
 313
 314 /* Cipher 0A */
 315         {
 316         1,
 317         SSL3_TXT_RSA_DES_192_CBC3_SHA,
 318         SSL3_CK_RSA_DES_192_CBC3_SHA,
 319         SSL_kRSA,
 320         SSL_aRSA,
 321         SSL_3DES,
 322         SSL_SHA1,
 323         SSL_SSLV3,
 324         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 325         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 326         168,
 327         168,
 328         },
 329
 330 /* The DH ciphers */
 331 /* Cipher 0B */
 332         {
 333         1,
 334         SSL3_TXT_DH_DSS_DES_40_CBC_SHA,
 335         SSL3_CK_DH_DSS_DES_40_CBC_SHA,
 336         SSL_kDHd,
 337         SSL_aDH,
 338         SSL_DES,
 339         SSL_SHA1,
 340         SSL_SSLV3,
 341         SSL_EXPORT|SSL_EXP40,
 342         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 343         40,
 344         56,
 345         },
 346
 347 /* Cipher 0C */
 348         {
 349         1,
 350         SSL3_TXT_DH_DSS_DES_64_CBC_SHA,
 351         SSL3_CK_DH_DSS_DES_64_CBC_SHA,
 352         SSL_kDHd,
 353         SSL_aDH,
 354         SSL_DES,
 355         SSL_SHA1,
 356         SSL_SSLV3,
 357         SSL_NOT_EXP|SSL_LOW,
 358         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 359         56,
 360         56,
 361         },
 362
 363 /* Cipher 0D */
 364         {
 365         1,
 366         SSL3_TXT_DH_DSS_DES_192_CBC3_SHA,
 367         SSL3_CK_DH_DSS_DES_192_CBC3_SHA,
 368         SSL_kDHd,
 369         SSL_aDH,
 370         SSL_3DES,
 371         SSL_SHA1,
 372         SSL_SSLV3,
 373         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 374         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 375         168,
 376         168,
 377         },
 378
 379 /* Cipher 0E */
 380         {
 381         1,
 382         SSL3_TXT_DH_RSA_DES_40_CBC_SHA,
 383         SSL3_CK_DH_RSA_DES_40_CBC_SHA,
 384         SSL_kDHr,
 385         SSL_aDH,
 386         SSL_DES,
 387         SSL_SHA1,
 388         SSL_SSLV3,
 389         SSL_EXPORT|SSL_EXP40,
 390         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 391         40,
 392         56,
 393         },
 394
 395 /* Cipher 0F */
 396         {
 397         1,
 398         SSL3_TXT_DH_RSA_DES_64_CBC_SHA,
 399         SSL3_CK_DH_RSA_DES_64_CBC_SHA,
 400         SSL_kDHr,
 401         SSL_aDH,
 402         SSL_DES,
 403         SSL_SHA1,
 404         SSL_SSLV3,
 405         SSL_NOT_EXP|SSL_LOW,
 406         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 407         56,
 408         56,
 409         },
 410
 411 /* Cipher 10 */
 412         {
 413         1,
 414         SSL3_TXT_DH_RSA_DES_192_CBC3_SHA,
 415         SSL3_CK_DH_RSA_DES_192_CBC3_SHA,
 416         SSL_kDHr,
 417         SSL_aDH,
 418         SSL_3DES,
 419         SSL_SHA1,
 420         SSL_SSLV3,
 421         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 422         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 423         168,
 424         168,
 425         },
 426
 427 /* The Ephemeral DH ciphers */
 428 /* Cipher 11 */
 429         {
 430         1,
 431         SSL3_TXT_EDH_DSS_DES_40_CBC_SHA,
 432         SSL3_CK_EDH_DSS_DES_40_CBC_SHA,
 433         SSL_kEDH,
 434         SSL_aDSS,
 435         SSL_DES,
 436         SSL_SHA1,
 437         SSL_SSLV3,
 438         SSL_EXPORT|SSL_EXP40,
 439         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 440         40,
 441         56,
 442         },
 443
 444 /* Cipher 12 */
 445         {
 446         1,
 447         SSL3_TXT_EDH_DSS_DES_64_CBC_SHA,
 448         SSL3_CK_EDH_DSS_DES_64_CBC_SHA,
 449         SSL_kEDH,
 450         SSL_aDSS,
 451         SSL_DES,
 452         SSL_SHA1,
 453         SSL_SSLV3,
 454         SSL_NOT_EXP|SSL_LOW,
 455         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 456         56,
 457         56,
 458         },
 459
 460 /* Cipher 13 */
 461         {
 462         1,
 463         SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA,
 464         SSL3_CK_EDH_DSS_DES_192_CBC3_SHA,
 465         SSL_kEDH,
 466         SSL_aDSS,
 467         SSL_3DES,
 468         SSL_SHA1,
 469         SSL_SSLV3,
 470         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 471         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 472         168,
 473         168,
 474         },
 475
 476 /* Cipher 14 */
 477         {
 478         1,
 479         SSL3_TXT_EDH_RSA_DES_40_CBC_SHA,
 480         SSL3_CK_EDH_RSA_DES_40_CBC_SHA,
 481         SSL_kEDH,
 482         SSL_aRSA,
 483         SSL_DES,
 484         SSL_SHA1,
 485         SSL_SSLV3,
 486         SSL_EXPORT|SSL_EXP40,
 487         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 488         40,
 489         56,
 490         },
 491
 492 /* Cipher 15 */
 493         {
 494         1,
 495         SSL3_TXT_EDH_RSA_DES_64_CBC_SHA,
 496         SSL3_CK_EDH_RSA_DES_64_CBC_SHA,
 497         SSL_kEDH,
 498         SSL_aRSA,
 499         SSL_DES,
 500         SSL_SHA1,
 501         SSL_SSLV3,
 502         SSL_NOT_EXP|SSL_LOW,
 503         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 504         56,
 505         56,
 506         },
 507
 508 /* Cipher 16 */
 509         {
 510         1,
 511         SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA,
 512         SSL3_CK_EDH_RSA_DES_192_CBC3_SHA,
 513         SSL_kEDH,
 514         SSL_aRSA,
 515         SSL_3DES,
 516         SSL_SHA1,
 517         SSL_SSLV3,
 518         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 519         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 520         168,
 521         168,
 522         },
 523
 524 /* Cipher 17 */
 525         {
 526         1,
 527         SSL3_TXT_ADH_RC4_40_MD5,
 528         SSL3_CK_ADH_RC4_40_MD5,
 529         SSL_kEDH,
 530         SSL_aNULL,
 531         SSL_RC4,
 532         SSL_MD5,
 533         SSL_SSLV3,
 534         SSL_EXPORT|SSL_EXP40,
 535         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 536         40,
 537         128,
 538         },
 539
 540 /* Cipher 18 */
 541         {
 542         1,
 543         SSL3_TXT_ADH_RC4_128_MD5,
 544         SSL3_CK_ADH_RC4_128_MD5,
 545         SSL_kEDH,
 546         SSL_aNULL,
 547         SSL_RC4,
 548         SSL_MD5,
 549         SSL_SSLV3,
 550         SSL_NOT_EXP|SSL_MEDIUM,
 551         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 552         128,
 553         128,
 554         },
 555
 556 /* Cipher 19 */
 557         {
 558         1,
 559         SSL3_TXT_ADH_DES_40_CBC_SHA,
 560         SSL3_CK_ADH_DES_40_CBC_SHA,
 561         SSL_kEDH,
 562         SSL_aNULL,
 563         SSL_DES,
 564         SSL_SHA1,
 565         SSL_SSLV3,
 566         SSL_EXPORT|SSL_EXP40,
 567         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 568         40,
 569         128,
 570         },
 571
 572 /* Cipher 1A */
 573         {
 574         1,
 575         SSL3_TXT_ADH_DES_64_CBC_SHA,
 576         SSL3_CK_ADH_DES_64_CBC_SHA,
 577         SSL_kEDH,
 578         SSL_aNULL,
 579         SSL_DES,
 580         SSL_SHA1,
 581         SSL_SSLV3,
 582         SSL_NOT_EXP|SSL_LOW,
 583         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 584         56,
 585         56,
 586         },
 587
 588 /* Cipher 1B */
 589         {
 590         1,
 591         SSL3_TXT_ADH_DES_192_CBC_SHA,
 592         SSL3_CK_ADH_DES_192_CBC_SHA,
 593         SSL_kEDH,
 594         SSL_aNULL,
 595         SSL_3DES,
 596         SSL_SHA1,
 597         SSL_SSLV3,
 598         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 599         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 600         168,
 601         168,
 602         },
 603
 604 /* Fortezza ciphersuite from SSL 3.0 spec */
 605 #if 0
 606 /* Cipher 1C */
 607         {
 608         0,
 609         SSL3_TXT_FZA_DMS_NULL_SHA,
 610         SSL3_CK_FZA_DMS_NULL_SHA,
 611         SSL_kFZA,
 612         SSL_aFZA,
 613         SSL_eNULL,
 614         SSL_SHA1,
 615         SSL_SSLV3,
 616         SSL_NOT_EXP|SSL_STRONG_NONE,
 617         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 618         0,
 619         0,
 620         },
 621
 622 /* Cipher 1D */
 623         {
 624         0,
 625         SSL3_TXT_FZA_DMS_FZA_SHA,
 626         SSL3_CK_FZA_DMS_FZA_SHA,
 627         SSL_kFZA,
 628         SSL_aFZA,
 629         SSL_eFZA,
 630         SSL_SHA1,
 631         SSL_SSLV3,
 632         SSL_NOT_EXP|SSL_STRONG_NONE,
 633         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 634         0,
 635         0,
 636         },
 637
 638 /* Cipher 1E */
 639         {
 640         0,
 641         SSL3_TXT_FZA_DMS_RC4_SHA,
 642         SSL3_CK_FZA_DMS_RC4_SHA,
 643         SSL_kFZA,
 644         SSL_aFZA,
 645         SSL_RC4,
 646         SSL_SHA1,
 647         SSL_SSLV3,
 648         SSL_NOT_EXP|SSL_MEDIUM,
 649         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 650         128,
 651         128,
 652         },
 653 #endif
 654
 655 #ifndef OPENSSL_NO_KRB5
 656 /* The Kerberos ciphers*/
 657 /* Cipher 1E */
 658         {
 659         1,
 660         SSL3_TXT_KRB5_DES_64_CBC_SHA,
 661         SSL3_CK_KRB5_DES_64_CBC_SHA,
 662         SSL_kKRB5,
 663         SSL_aKRB5,
 664         SSL_DES,
 665         SSL_SHA1,
 666         SSL_SSLV3,
 667         SSL_NOT_EXP|SSL_LOW,
 668         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 669         56,
 670         56,
 671         },
 672
 673 /* Cipher 1F */
 674         {
 675         1,
 676         SSL3_TXT_KRB5_DES_192_CBC3_SHA,
 677         SSL3_CK_KRB5_DES_192_CBC3_SHA,
 678         SSL_kKRB5,
 679         SSL_aKRB5,
 680         SSL_3DES,
 681         SSL_SHA1,
 682         SSL_SSLV3,
 683         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 684         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 685         168,
 686         168,
 687         },
 688
 689 /* Cipher 20 */
 690         {
 691         1,
 692         SSL3_TXT_KRB5_RC4_128_SHA,
 693         SSL3_CK_KRB5_RC4_128_SHA,
 694         SSL_kKRB5,
 695         SSL_aKRB5,
 696         SSL_RC4,
 697         SSL_SHA1,
 698         SSL_SSLV3,
 699         SSL_NOT_EXP|SSL_MEDIUM,
 700         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 701         128,
 702         128,
 703         },
 704
 705 /* Cipher 21 */
 706         {
 707         1,
 708         SSL3_TXT_KRB5_IDEA_128_CBC_SHA,
 709         SSL3_CK_KRB5_IDEA_128_CBC_SHA,
 710         SSL_kKRB5,
 711         SSL_aKRB5,
 712         SSL_IDEA,
 713         SSL_SHA1,
 714         SSL_SSLV3,
 715         SSL_NOT_EXP|SSL_MEDIUM,
 716         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 717         128,
 718         128,
 719         },
 720
 721 /* Cipher 22 */
 722         {
 723         1,
 724         SSL3_TXT_KRB5_DES_64_CBC_MD5,
 725         SSL3_CK_KRB5_DES_64_CBC_MD5,
 726         SSL_kKRB5,
 727         SSL_aKRB5,
 728         SSL_DES,
 729         SSL_MD5,
 730         SSL_SSLV3,
 731         SSL_NOT_EXP|SSL_LOW,
 732         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 733         56,
 734         56,
 735         },
 736
 737 /* Cipher 23 */
 738         {
 739         1,
 740         SSL3_TXT_KRB5_DES_192_CBC3_MD5,
 741         SSL3_CK_KRB5_DES_192_CBC3_MD5,
 742         SSL_kKRB5,
 743         SSL_aKRB5,
 744         SSL_3DES,
 745         SSL_MD5,
 746         SSL_SSLV3,
 747         SSL_NOT_EXP|SSL_HIGH,
 748         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 749         168,
 750         168,
 751         },
 752
 753 /* Cipher 24 */
 754         {
 755         1,
 756         SSL3_TXT_KRB5_RC4_128_MD5,
 757         SSL3_CK_KRB5_RC4_128_MD5,
 758         SSL_kKRB5,
 759         SSL_aKRB5,
 760         SSL_RC4,
 761         SSL_MD5,
 762         SSL_SSLV3,
 763         SSL_NOT_EXP|SSL_MEDIUM,
 764         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 765         128,
 766         128,
 767         },
 768
 769 /* Cipher 25 */
 770         {
 771         1,
 772         SSL3_TXT_KRB5_IDEA_128_CBC_MD5,
 773         SSL3_CK_KRB5_IDEA_128_CBC_MD5,
 774         SSL_kKRB5,
 775         SSL_aKRB5,
 776         SSL_IDEA,
 777         SSL_MD5,
 778         SSL_SSLV3,
 779         SSL_NOT_EXP|SSL_MEDIUM,
 780         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 781         128,
 782         128,
 783         },
 784
 785 /* Cipher 26 */
 786         {
 787         1,
 788         SSL3_TXT_KRB5_DES_40_CBC_SHA,
 789         SSL3_CK_KRB5_DES_40_CBC_SHA,
 790         SSL_kKRB5,
 791         SSL_aKRB5,
 792         SSL_DES,
 793         SSL_SHA1,
 794         SSL_SSLV3,
 795         SSL_EXPORT|SSL_EXP40,
 796         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 797         40,
 798         56,
 799         },
 800
 801 /* Cipher 27 */
 802         {
 803         1,
 804         SSL3_TXT_KRB5_RC2_40_CBC_SHA,
 805         SSL3_CK_KRB5_RC2_40_CBC_SHA,
 806         SSL_kKRB5,
 807         SSL_aKRB5,
 808         SSL_RC2,
 809         SSL_SHA1,
 810         SSL_SSLV3,
 811         SSL_EXPORT|SSL_EXP40,
 812         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 813         40,
 814         128,
 815         },
 816
 817 /* Cipher 28 */
 818         {
 819         1,
 820         SSL3_TXT_KRB5_RC4_40_SHA,
 821         SSL3_CK_KRB5_RC4_40_SHA,
 822         SSL_kKRB5,
 823         SSL_aKRB5,
 824         SSL_RC4,
 825         SSL_SHA1,
 826         SSL_SSLV3,
 827         SSL_EXPORT|SSL_EXP40,
 828         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 829         40,
 830         128,
 831         },
 832
 833 /* Cipher 29 */
 834         {
 835         1,
 836         SSL3_TXT_KRB5_DES_40_CBC_MD5,
 837         SSL3_CK_KRB5_DES_40_CBC_MD5,
 838         SSL_kKRB5,
 839         SSL_aKRB5,
 840         SSL_DES,
 841         SSL_MD5,
 842         SSL_SSLV3,
 843         SSL_EXPORT|SSL_EXP40,
 844         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 845         40,
 846         56,
 847         },
 848
 849 /* Cipher 2A */
 850         {
 851         1,
 852         SSL3_TXT_KRB5_RC2_40_CBC_MD5,
 853         SSL3_CK_KRB5_RC2_40_CBC_MD5,
 854         SSL_kKRB5,
 855         SSL_aKRB5,
 856         SSL_RC2,
 857         SSL_MD5,
 858         SSL_SSLV3,
 859         SSL_EXPORT|SSL_EXP40,
 860         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 861         40,
 862         128,
 863         },
 864
 865 /* Cipher 2B */
 866         {
 867         1,
 868         SSL3_TXT_KRB5_RC4_40_MD5,
 869         SSL3_CK_KRB5_RC4_40_MD5,
 870         SSL_kKRB5,
 871         SSL_aKRB5,
 872         SSL_RC4,
 873         SSL_MD5,
 874         SSL_SSLV3,
 875         SSL_EXPORT|SSL_EXP40,
 876         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 877         40,
 878         128,
 879         },
 880 #endif  /* OPENSSL_NO_KRB5 */
 881
 882 /* New AES ciphersuites */
 883 /* Cipher 2F */
 884         {
 885         1,
 886         TLS1_TXT_RSA_WITH_AES_128_SHA,
 887         TLS1_CK_RSA_WITH_AES_128_SHA,
 888         SSL_kRSA,
 889         SSL_aRSA,
 890         SSL_AES128,
 891         SSL_SHA1,
 892         SSL_TLSV1,
 893         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 894         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 895         128,
 896         128,
 897         },
 898 /* Cipher 30 */
 899         {
 900         1,
 901         TLS1_TXT_DH_DSS_WITH_AES_128_SHA,
 902         TLS1_CK_DH_DSS_WITH_AES_128_SHA,
 903         SSL_kDHd,
 904         SSL_aDH,
 905         SSL_AES128,
 906         SSL_SHA1,
 907         SSL_TLSV1,
 908         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 909         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 910         128,
 911         128,
 912         },
 913 /* Cipher 31 */
 914         {
 915         1,
 916         TLS1_TXT_DH_RSA_WITH_AES_128_SHA,
 917         TLS1_CK_DH_RSA_WITH_AES_128_SHA,
 918         SSL_kDHr,
 919         SSL_aDH,
 920         SSL_AES128,
 921         SSL_SHA1,
 922         SSL_TLSV1,
 923         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 924         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 925         128,
 926         128,
 927         },
 928 /* Cipher 32 */
 929         {
 930         1,
 931         TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,
 932         TLS1_CK_DHE_DSS_WITH_AES_128_SHA,
 933         SSL_kEDH,
 934         SSL_aDSS,
 935         SSL_AES128,
 936         SSL_SHA1,
 937         SSL_TLSV1,
 938         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 939         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 940         128,
 941         128,
 942         },
 943 /* Cipher 33 */
 944         {
 945         1,
 946         TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,
 947         TLS1_CK_DHE_RSA_WITH_AES_128_SHA,
 948         SSL_kEDH,
 949         SSL_aRSA,
 950         SSL_AES128,
 951         SSL_SHA1,
 952         SSL_TLSV1,
 953         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 954         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 955         128,
 956         128,
 957         },
 958 /* Cipher 34 */
 959         {
 960         1,
 961         TLS1_TXT_ADH_WITH_AES_128_SHA,
 962         TLS1_CK_ADH_WITH_AES_128_SHA,
 963         SSL_kEDH,
 964         SSL_aNULL,
 965         SSL_AES128,
 966         SSL_SHA1,
 967         SSL_TLSV1,
 968         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 969         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 970         128,
 971         128,
 972         },
 973
 974 /* Cipher 35 */
 975         {
 976         1,
 977         TLS1_TXT_RSA_WITH_AES_256_SHA,
 978         TLS1_CK_RSA_WITH_AES_256_SHA,
 979         SSL_kRSA,
 980         SSL_aRSA,
 981         SSL_AES256,
 982         SSL_SHA1,
 983         SSL_TLSV1,
 984         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
 985         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
 986         256,
 987         256,
 988         },
 989 /* Cipher 36 */
 990         {
 991         1,
 992         TLS1_TXT_DH_DSS_WITH_AES_256_SHA,
 993         TLS1_CK_DH_DSS_WITH_AES_256_SHA,
 994         SSL_kDHd,
 995         SSL_aDH,
 996         SSL_AES256,
 997         SSL_SHA1,
 998         SSL_TLSV1,
 999         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1000         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1001         256,
1002         256,
1003         },
1004
1005 /* Cipher 37 */
1006         {
1007         1,
1008         TLS1_TXT_DH_RSA_WITH_AES_256_SHA,
1009         TLS1_CK_DH_RSA_WITH_AES_256_SHA,
1010         SSL_kDHr,
1011         SSL_aDH,
1012         SSL_AES256,
1013         SSL_SHA1,
1014         SSL_TLSV1,
1015         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1016         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1017         256,
1018         256,
1019         },
1020
1021 /* Cipher 38 */
1022         {
1023         1,
1024         TLS1_TXT_DHE_DSS_WITH_AES_256_SHA,
1025         TLS1_CK_DHE_DSS_WITH_AES_256_SHA,
1026         SSL_kEDH,
1027         SSL_aDSS,
1028         SSL_AES256,
1029         SSL_SHA1,
1030         SSL_TLSV1,
1031         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1032         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1033         256,
1034         256,
1035         },
1036
1037 /* Cipher 39 */
1038         {
1039         1,
1040         TLS1_TXT_DHE_RSA_WITH_AES_256_SHA,
1041         TLS1_CK_DHE_RSA_WITH_AES_256_SHA,
1042         SSL_kEDH,
1043         SSL_aRSA,
1044         SSL_AES256,
1045         SSL_SHA1,
1046         SSL_TLSV1,
1047         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1048         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1049         256,
1050         256,
1051         },
1052
1053         /* Cipher 3A */
1054         {
1055         1,
1056         TLS1_TXT_ADH_WITH_AES_256_SHA,
1057         TLS1_CK_ADH_WITH_AES_256_SHA,
1058         SSL_kEDH,
1059         SSL_aNULL,
1060         SSL_AES256,
1061         SSL_SHA1,
1062         SSL_TLSV1,
1063         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1064         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1065         256,
1066         256,
1067         },
1068
1069         /* TLS v1.2 ciphersuites */
1070         /* Cipher 3B */
1071         {
1072         1,
1073         TLS1_TXT_RSA_WITH_NULL_SHA256,
1074         TLS1_CK_RSA_WITH_NULL_SHA256,
1075         SSL_kRSA,
1076         SSL_aRSA,
1077         SSL_eNULL,
1078         SSL_SHA256,
1079         SSL_TLSV1_2,
1080         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
1081         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1082         0,
1083         0,
1084         },
1085
1086         /* Cipher 3C */
1087         {
1088         1,
1089         TLS1_TXT_RSA_WITH_AES_128_SHA256,
1090         TLS1_CK_RSA_WITH_AES_128_SHA256,
1091         SSL_kRSA,
1092         SSL_aRSA,
1093         SSL_AES128,
1094         SSL_SHA256,
1095         SSL_TLSV1_2,
1096         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1097         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1098         128,
1099         128,
1100         },
1101
1102         /* Cipher 3D */
1103         {
1104         1,
1105         TLS1_TXT_RSA_WITH_AES_256_SHA256,
1106         TLS1_CK_RSA_WITH_AES_256_SHA256,
1107         SSL_kRSA,
1108         SSL_aRSA,
1109         SSL_AES256,
1110         SSL_SHA256,
1111         SSL_TLSV1_2,
1112         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1113         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1114         256,
1115         256,
1116         },
1117
1118         /* Cipher 3E */
1119         {
1120         1,
1121         TLS1_TXT_DH_DSS_WITH_AES_128_SHA256,
1122         TLS1_CK_DH_DSS_WITH_AES_128_SHA256,
1123         SSL_kDHd,
1124         SSL_aDH,
1125         SSL_AES128,
1126         SSL_SHA256,
1127         SSL_TLSV1_2,
1128         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1129         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1130         128,
1131         128,
1132         },
1133
1134         /* Cipher 3F */
1135         {
1136         1,
1137         TLS1_TXT_DH_RSA_WITH_AES_128_SHA256,
1138         TLS1_CK_DH_RSA_WITH_AES_128_SHA256,
1139         SSL_kDHr,
1140         SSL_aDH,
1141         SSL_AES128,
1142         SSL_SHA256,
1143         SSL_TLSV1_2,
1144         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1145         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1146         128,
1147         128,
1148         },
1149
1150         /* Cipher 40 */
1151         {
1152         1,
1153         TLS1_TXT_DHE_DSS_WITH_AES_128_SHA256,
1154         TLS1_CK_DHE_DSS_WITH_AES_128_SHA256,
1155         SSL_kEDH,
1156         SSL_aDSS,
1157         SSL_AES128,
1158         SSL_SHA256,
1159         SSL_TLSV1_2,
1160         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1161         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1162         128,
1163         128,
1164         },
1165
1166 #ifndef OPENSSL_NO_CAMELLIA
1167         /* Camellia ciphersuites from RFC4132 (128-bit portion) */
1168
1169         /* Cipher 41 */
1170         {
1171         1,
1172         TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA,
1173         TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA,
1174         SSL_kRSA,
1175         SSL_aRSA,
1176         SSL_CAMELLIA128,
1177         SSL_SHA1,
1178         SSL_TLSV1,
1179         SSL_NOT_EXP|SSL_HIGH,
1180         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1181         128,
1182         128,
1183         },
1184
1185         /* Cipher 42 */
1186         {
1187         1,
1188         TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA,
1189         TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA,
1190         SSL_kDHd,
1191         SSL_aDH,
1192         SSL_CAMELLIA128,
1193         SSL_SHA1,
1194         SSL_TLSV1,
1195         SSL_NOT_EXP|SSL_HIGH,
1196         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1197         128,
1198         128,
1199         },
1200
1201         /* Cipher 43 */
1202         {
1203         1,
1204         TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA,
1205         TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA,
1206         SSL_kDHr,
1207         SSL_aDH,
1208         SSL_CAMELLIA128,
1209         SSL_SHA1,
1210         SSL_TLSV1,
1211         SSL_NOT_EXP|SSL_HIGH,
1212         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1213         128,
1214         128,
1215         },
1216
1217         /* Cipher 44 */
1218         {
1219         1,
1220         TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
1221         TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
1222         SSL_kEDH,
1223         SSL_aDSS,
1224         SSL_CAMELLIA128,
1225         SSL_SHA1,
1226         SSL_TLSV1,
1227         SSL_NOT_EXP|SSL_HIGH,
1228         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1229         128,
1230         128,
1231         },
1232
1233         /* Cipher 45 */
1234         {
1235         1,
1236         TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
1237         TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
1238         SSL_kEDH,
1239         SSL_aRSA,
1240         SSL_CAMELLIA128,
1241         SSL_SHA1,
1242         SSL_TLSV1,
1243         SSL_NOT_EXP|SSL_HIGH,
1244         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1245         128,
1246         128,
1247         },
1248
1249         /* Cipher 46 */
1250         {
1251         1,
1252         TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA,
1253         TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA,
1254         SSL_kEDH,
1255         SSL_aNULL,
1256         SSL_CAMELLIA128,
1257         SSL_SHA1,
1258         SSL_TLSV1,
1259         SSL_NOT_EXP|SSL_HIGH,
1260         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1261         128,
1262         128,
1263         },
1264 #endif /* OPENSSL_NO_CAMELLIA */
1265
1266 #if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES
1267         /* New TLS Export CipherSuites from expired ID */
1268 #if 0
1269         /* Cipher 60 */
1270         {
1271         1,
1272         TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5,
1273         TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5,
1274         SSL_kRSA,
1275         SSL_aRSA,
1276         SSL_RC4,
1277         SSL_MD5,
1278         SSL_TLSV1,
1279         SSL_EXPORT|SSL_EXP56,
1280         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1281         56,
1282         128,
1283         },
1284
1285         /* Cipher 61 */
1286         {
1287         1,
1288         TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
1289         TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
1290         SSL_kRSA,
1291         SSL_aRSA,
1292         SSL_RC2,
1293         SSL_MD5,
1294         SSL_TLSV1,
1295         SSL_EXPORT|SSL_EXP56,
1296         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1297         56,
1298         128,
1299         },
1300 #endif
1301
1302         /* Cipher 62 */
1303         {
1304         1,
1305         TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA,
1306         TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA,
1307         SSL_kRSA,
1308         SSL_aRSA,
1309         SSL_DES,
1310         SSL_SHA1,
1311         SSL_TLSV1,
1312         SSL_EXPORT|SSL_EXP56,
1313         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1314         56,
1315         56,
1316         },
1317
1318         /* Cipher 63 */
1319         {
1320         1,
1321         TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
1322         TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
1323         SSL_kEDH,
1324         SSL_aDSS,
1325         SSL_DES,
1326         SSL_SHA1,
1327         SSL_TLSV1,
1328         SSL_EXPORT|SSL_EXP56,
1329         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1330         56,
1331         56,
1332         },
1333
1334         /* Cipher 64 */
1335         {
1336         1,
1337         TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA,
1338         TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA,
1339         SSL_kRSA,
1340         SSL_aRSA,
1341         SSL_RC4,
1342         SSL_SHA1,
1343         SSL_TLSV1,
1344         SSL_EXPORT|SSL_EXP56,
1345         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1346         56,
1347         128,
1348         },
1349
1350         /* Cipher 65 */
1351         {
1352         1,
1353         TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
1354         TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
1355         SSL_kEDH,
1356         SSL_aDSS,
1357         SSL_RC4,
1358         SSL_SHA1,
1359         SSL_TLSV1,
1360         SSL_EXPORT|SSL_EXP56,
1361         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1362         56,
1363         128,
1364         },
1365
1366         /* Cipher 66 */
1367         {
1368         1,
1369         TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA,
1370         TLS1_CK_DHE_DSS_WITH_RC4_128_SHA,
1371         SSL_kEDH,
1372         SSL_aDSS,
1373         SSL_RC4,
1374         SSL_SHA1,
1375         SSL_TLSV1,
1376         SSL_NOT_EXP|SSL_MEDIUM,
1377         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1378         128,
1379         128,
1380         },
1381 #endif
1382
1383         /* TLS v1.2 ciphersuites */
1384         /* Cipher 67 */
1385         {
1386         1,
1387         TLS1_TXT_DHE_RSA_WITH_AES_128_SHA256,
1388         TLS1_CK_DHE_RSA_WITH_AES_128_SHA256,
1389         SSL_kEDH,
1390         SSL_aRSA,
1391         SSL_AES128,
1392         SSL_SHA256,
1393         SSL_TLSV1_2,
1394         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1395         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1396         128,
1397         128,
1398         },
1399
1400         /* Cipher 68 */
1401         {
1402         1,
1403         TLS1_TXT_DH_DSS_WITH_AES_256_SHA256,
1404         TLS1_CK_DH_DSS_WITH_AES_256_SHA256,
1405         SSL_kDHd,
1406         SSL_aDH,
1407         SSL_AES256,
1408         SSL_SHA256,
1409         SSL_TLSV1_2,
1410         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1411         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1412         256,
1413         256,
1414         },
1415
1416         /* Cipher 69 */
1417         {
1418         1,
1419         TLS1_TXT_DH_RSA_WITH_AES_256_SHA256,
1420         TLS1_CK_DH_RSA_WITH_AES_256_SHA256,
1421         SSL_kDHr,
1422         SSL_aDH,
1423         SSL_AES256,
1424         SSL_SHA256,
1425         SSL_TLSV1_2,
1426         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1427         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1428         256,
1429         256,
1430         },
1431
1432         /* Cipher 6A */
1433         {
1434         1,
1435         TLS1_TXT_DHE_DSS_WITH_AES_256_SHA256,
1436         TLS1_CK_DHE_DSS_WITH_AES_256_SHA256,
1437         SSL_kEDH,
1438         SSL_aDSS,
1439         SSL_AES256,
1440         SSL_SHA256,
1441         SSL_TLSV1_2,
1442         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1443         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1444         256,
1445         256,
1446         },
1447
1448         /* Cipher 6B */
1449         {
1450         1,
1451         TLS1_TXT_DHE_RSA_WITH_AES_256_SHA256,
1452         TLS1_CK_DHE_RSA_WITH_AES_256_SHA256,
1453         SSL_kEDH,
1454         SSL_aRSA,
1455         SSL_AES256,
1456         SSL_SHA256,
1457         SSL_TLSV1_2,
1458         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1459         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1460         256,
1461         256,
1462         },
1463
1464         /* Cipher 6C */
1465         {
1466         1,
1467         TLS1_TXT_ADH_WITH_AES_128_SHA256,
1468         TLS1_CK_ADH_WITH_AES_128_SHA256,
1469         SSL_kEDH,
1470         SSL_aNULL,
1471         SSL_AES128,
1472         SSL_SHA256,
1473         SSL_TLSV1_2,
1474         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1475         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1476         128,
1477         128,
1478         },
1479
1480         /* Cipher 6D */
1481         {
1482         1,
1483         TLS1_TXT_ADH_WITH_AES_256_SHA256,
1484         TLS1_CK_ADH_WITH_AES_256_SHA256,
1485         SSL_kEDH,
1486         SSL_aNULL,
1487         SSL_AES256,
1488         SSL_SHA256,
1489         SSL_TLSV1_2,
1490         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1491         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1492         256,
1493         256,
1494         },
1495
1496         /* GOST Ciphersuites */
1497
1498         {
1499         1,
1500         "GOST94-GOST89-GOST89",
1501         0x3000080,
1502         SSL_kGOST,
1503         SSL_aGOST94,
1504         SSL_eGOST2814789CNT,
1505         SSL_GOST89MAC,
1506         SSL_TLSV1,
1507         SSL_NOT_EXP|SSL_HIGH,
1508         SSL_HANDSHAKE_MAC_GOST94|TLS1_PRF_GOST94|TLS1_STREAM_MAC,
1509         256,
1510         256
1511         },
1512         {
1513         1,
1514         "GOST2001-GOST89-GOST89",
1515         0x3000081,
1516         SSL_kGOST,
1517         SSL_aGOST01,
1518         SSL_eGOST2814789CNT,
1519         SSL_GOST89MAC,
1520         SSL_TLSV1,
1521         SSL_NOT_EXP|SSL_HIGH,
1522         SSL_HANDSHAKE_MAC_GOST94|TLS1_PRF_GOST94|TLS1_STREAM_MAC,
1523         256,
1524         256
1525         },
1526         {
1527         1,
1528         "GOST94-NULL-GOST94",
1529         0x3000082,
1530         SSL_kGOST,
1531         SSL_aGOST94,
1532         SSL_eNULL,
1533         SSL_GOST94,
1534         SSL_TLSV1,
1535         SSL_NOT_EXP|SSL_STRONG_NONE,
1536         SSL_HANDSHAKE_MAC_GOST94|TLS1_PRF_GOST94,
1537         0,
1538         0
1539         },
1540         {
1541         1,
1542         "GOST2001-NULL-GOST94",
1543         0x3000083,
1544         SSL_kGOST,
1545         SSL_aGOST01,
1546         SSL_eNULL,
1547         SSL_GOST94,
1548         SSL_TLSV1,
1549         SSL_NOT_EXP|SSL_STRONG_NONE,
1550         SSL_HANDSHAKE_MAC_GOST94|TLS1_PRF_GOST94,
1551         0,
1552         0
1553         },
1554
1555 #ifndef OPENSSL_NO_CAMELLIA
1556         /* Camellia ciphersuites from RFC4132 (256-bit portion) */
1557
1558         /* Cipher 84 */
1559         {
1560         1,
1561         TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA,
1562         TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA,
1563         SSL_kRSA,
1564         SSL_aRSA,
1565         SSL_CAMELLIA256,
1566         SSL_SHA1,
1567         SSL_TLSV1,
1568         SSL_NOT_EXP|SSL_HIGH,
1569         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1570         256,
1571         256,
1572         },
1573         /* Cipher 85 */
1574         {
1575         1,
1576         TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA,
1577         TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA,
1578         SSL_kDHd,
1579         SSL_aDH,
1580         SSL_CAMELLIA256,
1581         SSL_SHA1,
1582         SSL_TLSV1,
1583         SSL_NOT_EXP|SSL_HIGH,
1584         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1585         256,
1586         256,
1587         },
1588
1589         /* Cipher 86 */
1590         {
1591         1,
1592         TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA,
1593         TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA,
1594         SSL_kDHr,
1595         SSL_aDH,
1596         SSL_CAMELLIA256,
1597         SSL_SHA1,
1598         SSL_TLSV1,
1599         SSL_NOT_EXP|SSL_HIGH,
1600         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1601         256,
1602         256,
1603         },
1604
1605         /* Cipher 87 */
1606         {
1607         1,
1608         TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
1609         TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
1610         SSL_kEDH,
1611         SSL_aDSS,
1612         SSL_CAMELLIA256,
1613         SSL_SHA1,
1614         SSL_TLSV1,
1615         SSL_NOT_EXP|SSL_HIGH,
1616         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1617         256,
1618         256,
1619         },
1620
1621         /* Cipher 88 */
1622         {
1623         1,
1624         TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
1625         TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
1626         SSL_kEDH,
1627         SSL_aRSA,
1628         SSL_CAMELLIA256,
1629         SSL_SHA1,
1630         SSL_TLSV1,
1631         SSL_NOT_EXP|SSL_HIGH,
1632         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1633         256,
1634         256,
1635         },
1636
1637         /* Cipher 89 */
1638         {
1639         1,
1640         TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA,
1641         TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA,
1642         SSL_kEDH,
1643         SSL_aNULL,
1644         SSL_CAMELLIA256,
1645         SSL_SHA1,
1646         SSL_TLSV1,
1647         SSL_NOT_EXP|SSL_HIGH,
1648         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1649         256,
1650         256,
1651         },
1652 #endif /* OPENSSL_NO_CAMELLIA */
1653
1654 #ifndef OPENSSL_NO_PSK
1655         /* Cipher 8A */
1656         {
1657         1,
1658         TLS1_TXT_PSK_WITH_RC4_128_SHA,
1659         TLS1_CK_PSK_WITH_RC4_128_SHA,
1660         SSL_kPSK,
1661         SSL_aPSK,
1662         SSL_RC4,
1663         SSL_SHA1,
1664         SSL_TLSV1,
1665         SSL_NOT_EXP|SSL_MEDIUM,
1666         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1667         128,
1668         128,
1669         },
1670
1671         /* Cipher 8B */
1672         {
1673         1,
1674         TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA,
1675         TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA,
1676         SSL_kPSK,
1677         SSL_aPSK,
1678         SSL_3DES,
1679         SSL_SHA1,
1680         SSL_TLSV1,
1681         SSL_NOT_EXP|SSL_HIGH,
1682         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1683         168,
1684         168,
1685         },
1686
1687         /* Cipher 8C */
1688         {
1689         1,
1690         TLS1_TXT_PSK_WITH_AES_128_CBC_SHA,
1691         TLS1_CK_PSK_WITH_AES_128_CBC_SHA,
1692         SSL_kPSK,
1693         SSL_aPSK,
1694         SSL_AES128,
1695         SSL_SHA1,
1696         SSL_TLSV1,
1697         SSL_NOT_EXP|SSL_HIGH,
1698         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1699         128,
1700         128,
1701         },
1702
1703         /* Cipher 8D */
1704         {
1705         1,
1706         TLS1_TXT_PSK_WITH_AES_256_CBC_SHA,
1707         TLS1_CK_PSK_WITH_AES_256_CBC_SHA,
1708         SSL_kPSK,
1709         SSL_aPSK,
1710         SSL_AES256,
1711         SSL_SHA1,
1712         SSL_TLSV1,
1713         SSL_NOT_EXP|SSL_HIGH,
1714         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1715         256,
1716         256,
1717         },
1718 #endif  /* OPENSSL_NO_PSK */
1719
1720 #ifndef OPENSSL_NO_SEED
1721         /* SEED ciphersuites from RFC4162 */
1722
1723         /* Cipher 96 */
1724         {
1725         1,
1726         TLS1_TXT_RSA_WITH_SEED_SHA,
1727         TLS1_CK_RSA_WITH_SEED_SHA,
1728         SSL_kRSA,
1729         SSL_aRSA,
1730         SSL_SEED,
1731         SSL_SHA1,
1732         SSL_TLSV1,
1733         SSL_NOT_EXP|SSL_MEDIUM,
1734         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1735         128,
1736         128,
1737         },
1738
1739         /* Cipher 97 */
1740         {
1741         1,
1742         TLS1_TXT_DH_DSS_WITH_SEED_SHA,
1743         TLS1_CK_DH_DSS_WITH_SEED_SHA,
1744         SSL_kDHd,
1745         SSL_aDH,
1746         SSL_SEED,
1747         SSL_SHA1,
1748         SSL_TLSV1,
1749         SSL_NOT_EXP|SSL_MEDIUM,
1750         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1751         128,
1752         128,
1753         },
1754
1755         /* Cipher 98 */
1756         {
1757         1,
1758         TLS1_TXT_DH_RSA_WITH_SEED_SHA,
1759         TLS1_CK_DH_RSA_WITH_SEED_SHA,
1760         SSL_kDHr,
1761         SSL_aDH,
1762         SSL_SEED,
1763         SSL_SHA1,
1764         SSL_TLSV1,
1765         SSL_NOT_EXP|SSL_MEDIUM,
1766         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1767         128,
1768         128,
1769         },
1770
1771         /* Cipher 99 */
1772         {
1773         1,
1774         TLS1_TXT_DHE_DSS_WITH_SEED_SHA,
1775         TLS1_CK_DHE_DSS_WITH_SEED_SHA,
1776         SSL_kEDH,
1777         SSL_aDSS,
1778         SSL_SEED,
1779         SSL_SHA1,
1780         SSL_TLSV1,
1781         SSL_NOT_EXP|SSL_MEDIUM,
1782         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1783         128,
1784         128,
1785         },
1786
1787         /* Cipher 9A */
1788         {
1789         1,
1790         TLS1_TXT_DHE_RSA_WITH_SEED_SHA,
1791         TLS1_CK_DHE_RSA_WITH_SEED_SHA,
1792         SSL_kEDH,
1793         SSL_aRSA,
1794         SSL_SEED,
1795         SSL_SHA1,
1796         SSL_TLSV1,
1797         SSL_NOT_EXP|SSL_MEDIUM,
1798         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1799         128,
1800         128,
1801         },
1802
1803         /* Cipher 9B */
1804         {
1805         1,
1806         TLS1_TXT_ADH_WITH_SEED_SHA,
1807         TLS1_CK_ADH_WITH_SEED_SHA,
1808         SSL_kEDH,
1809         SSL_aNULL,
1810         SSL_SEED,
1811         SSL_SHA1,
1812         SSL_TLSV1,
1813         SSL_NOT_EXP|SSL_MEDIUM,
1814         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
1815         128,
1816         128,
1817         },
1818
1819 #endif /* OPENSSL_NO_SEED */
1820
1821         /* GCM ciphersuites from RFC5288 */
1822
1823         /* Cipher 9C */
1824         {
1825         1,
1826         TLS1_TXT_RSA_WITH_AES_128_GCM_SHA256,
1827         TLS1_CK_RSA_WITH_AES_128_GCM_SHA256,
1828         SSL_kRSA,
1829         SSL_aRSA,
1830         SSL_AES128GCM,
1831         SSL_AEAD,
1832         SSL_TLSV1_2,
1833         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1834         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
1835         128,
1836         128,
1837         },
1838
1839         /* Cipher 9D */
1840         {
1841         1,
1842         TLS1_TXT_RSA_WITH_AES_256_GCM_SHA384,
1843         TLS1_CK_RSA_WITH_AES_256_GCM_SHA384,
1844         SSL_kRSA,
1845         SSL_aRSA,
1846         SSL_AES256GCM,
1847         SSL_AEAD,
1848         SSL_TLSV1_2,
1849         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1850         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
1851         256,
1852         256,
1853         },
1854
1855         /* Cipher 9E */
1856         {
1857         1,
1858         TLS1_TXT_DHE_RSA_WITH_AES_128_GCM_SHA256,
1859         TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256,
1860         SSL_kEDH,
1861         SSL_aRSA,
1862         SSL_AES128GCM,
1863         SSL_AEAD,
1864         SSL_TLSV1_2,
1865         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1866         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
1867         128,
1868         128,
1869         },
1870
1871         /* Cipher 9F */
1872         {
1873         1,
1874         TLS1_TXT_DHE_RSA_WITH_AES_256_GCM_SHA384,
1875         TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384,
1876         SSL_kEDH,
1877         SSL_aRSA,
1878         SSL_AES256GCM,
1879         SSL_AEAD,
1880         SSL_TLSV1_2,
1881         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1882         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
1883         256,
1884         256,
1885         },
1886
1887         /* Cipher A0 */
1888         {
1889         1,
1890         TLS1_TXT_DH_RSA_WITH_AES_128_GCM_SHA256,
1891         TLS1_CK_DH_RSA_WITH_AES_128_GCM_SHA256,
1892         SSL_kDHr,
1893         SSL_aDH,
1894         SSL_AES128GCM,
1895         SSL_AEAD,
1896         SSL_TLSV1_2,
1897         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1898         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
1899         128,
1900         128,
1901         },
1902
1903         /* Cipher A1 */
1904         {
1905         1,
1906         TLS1_TXT_DH_RSA_WITH_AES_256_GCM_SHA384,
1907         TLS1_CK_DH_RSA_WITH_AES_256_GCM_SHA384,
1908         SSL_kDHr,
1909         SSL_aDH,
1910         SSL_AES256GCM,
1911         SSL_AEAD,
1912         SSL_TLSV1_2,
1913         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1914         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
1915         256,
1916         256,
1917         },
1918
1919         /* Cipher A2 */
1920         {
1921         1,
1922         TLS1_TXT_DHE_DSS_WITH_AES_128_GCM_SHA256,
1923         TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256,
1924         SSL_kEDH,
1925         SSL_aDSS,
1926         SSL_AES128GCM,
1927         SSL_AEAD,
1928         SSL_TLSV1_2,
1929         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1930         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
1931         128,
1932         128,
1933         },
1934
1935         /* Cipher A3 */
1936         {
1937         1,
1938         TLS1_TXT_DHE_DSS_WITH_AES_256_GCM_SHA384,
1939         TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384,
1940         SSL_kEDH,
1941         SSL_aDSS,
1942         SSL_AES256GCM,
1943         SSL_AEAD,
1944         SSL_TLSV1_2,
1945         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1946         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
1947         256,
1948         256,
1949         },
1950
1951         /* Cipher A4 */
1952         {
1953         1,
1954         TLS1_TXT_DH_DSS_WITH_AES_128_GCM_SHA256,
1955         TLS1_CK_DH_DSS_WITH_AES_128_GCM_SHA256,
1956         SSL_kDHd,
1957         SSL_aDH,
1958         SSL_AES128GCM,
1959         SSL_AEAD,
1960         SSL_TLSV1_2,
1961         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1962         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
1963         128,
1964         128,
1965         },
1966
1967         /* Cipher A5 */
1968         {
1969         1,
1970         TLS1_TXT_DH_DSS_WITH_AES_256_GCM_SHA384,
1971         TLS1_CK_DH_DSS_WITH_AES_256_GCM_SHA384,
1972         SSL_kDHd,
1973         SSL_aDH,
1974         SSL_AES256GCM,
1975         SSL_AEAD,
1976         SSL_TLSV1_2,
1977         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1978         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
1979         256,
1980         256,
1981         },
1982
1983         /* Cipher A6 */
1984         {
1985         1,
1986         TLS1_TXT_ADH_WITH_AES_128_GCM_SHA256,
1987         TLS1_CK_ADH_WITH_AES_128_GCM_SHA256,
1988         SSL_kEDH,
1989         SSL_aNULL,
1990         SSL_AES128GCM,
1991         SSL_AEAD,
1992         SSL_TLSV1_2,
1993         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
1994         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
1995         128,
1996         128,
1997         },
1998
1999         /* Cipher A7 */
2000         {
2001         1,
2002         TLS1_TXT_ADH_WITH_AES_256_GCM_SHA384,
2003         TLS1_CK_ADH_WITH_AES_256_GCM_SHA384,
2004         SSL_kEDH,
2005         SSL_aNULL,
2006         SSL_AES256GCM,
2007         SSL_AEAD,
2008         SSL_TLSV1_2,
2009         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2010         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2011         256,
2012         256,
2013         },
2014
2015 #ifndef OPENSSL_NO_ECDH
2016         /* Cipher C001 */
2017         {
2018         1,
2019         TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA,
2020         TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA,
2021         SSL_kECDHe,
2022         SSL_aECDH,
2023         SSL_eNULL,
2024         SSL_SHA1,
2025         SSL_TLSV1,
2026         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
2027         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2028         0,
2029         0,
2030         },
2031
2032         /* Cipher C002 */
2033         {
2034         1,
2035         TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA,
2036         TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA,
2037         SSL_kECDHe,
2038         SSL_aECDH,
2039         SSL_RC4,
2040         SSL_SHA1,
2041         SSL_TLSV1,
2042         SSL_NOT_EXP|SSL_MEDIUM,
2043         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2044         128,
2045         128,
2046         },
2047
2048         /* Cipher C003 */
2049         {
2050         1,
2051         TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA,
2052         TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA,
2053         SSL_kECDHe,
2054         SSL_aECDH,
2055         SSL_3DES,
2056         SSL_SHA1,
2057         SSL_TLSV1,
2058         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2059         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2060         168,
2061         168,
2062         },
2063
2064         /* Cipher C004 */
2065         {
2066         1,
2067         TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
2068         TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
2069         SSL_kECDHe,
2070         SSL_aECDH,
2071         SSL_AES128,
2072         SSL_SHA1,
2073         SSL_TLSV1,
2074         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2075         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2076         128,
2077         128,
2078         },
2079
2080         /* Cipher C005 */
2081         {
2082         1,
2083         TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
2084         TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
2085         SSL_kECDHe,
2086         SSL_aECDH,
2087         SSL_AES256,
2088         SSL_SHA1,
2089         SSL_TLSV1,
2090         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2091         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2092         256,
2093         256,
2094         },
2095
2096         /* Cipher C006 */
2097         {
2098         1,
2099         TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA,
2100         TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA,
2101         SSL_kEECDH,
2102         SSL_aECDSA,
2103         SSL_eNULL,
2104         SSL_SHA1,
2105         SSL_TLSV1,
2106         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
2107         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2108         0,
2109         0,
2110         },
2111
2112         /* Cipher C007 */
2113         {
2114         1,
2115         TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA,
2116         TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA,
2117         SSL_kEECDH,
2118         SSL_aECDSA,
2119         SSL_RC4,
2120         SSL_SHA1,
2121         SSL_TLSV1,
2122         SSL_NOT_EXP|SSL_MEDIUM,
2123         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2124         128,
2125         128,
2126         },
2127
2128         /* Cipher C008 */
2129         {
2130         1,
2131         TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
2132         TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
2133         SSL_kEECDH,
2134         SSL_aECDSA,
2135         SSL_3DES,
2136         SSL_SHA1,
2137         SSL_TLSV1,
2138         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2139         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2140         168,
2141         168,
2142         },
2143
2144         /* Cipher C009 */
2145         {
2146         1,
2147         TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
2148         TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
2149         SSL_kEECDH,
2150         SSL_aECDSA,
2151         SSL_AES128,
2152         SSL_SHA1,
2153         SSL_TLSV1,
2154         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2155         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2156         128,
2157         128,
2158         },
2159
2160         /* Cipher C00A */
2161         {
2162         1,
2163         TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
2164         TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
2165         SSL_kEECDH,
2166         SSL_aECDSA,
2167         SSL_AES256,
2168         SSL_SHA1,
2169         SSL_TLSV1,
2170         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2171         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2172         256,
2173         256,
2174         },
2175
2176         /* Cipher C00B */
2177         {
2178         1,
2179         TLS1_TXT_ECDH_RSA_WITH_NULL_SHA,
2180         TLS1_CK_ECDH_RSA_WITH_NULL_SHA,
2181         SSL_kECDHr,
2182         SSL_aECDH,
2183         SSL_eNULL,
2184         SSL_SHA1,
2185         SSL_TLSV1,
2186         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
2187         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2188         0,
2189         0,
2190         },
2191
2192         /* Cipher C00C */
2193         {
2194         1,
2195         TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA,
2196         TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA,
2197         SSL_kECDHr,
2198         SSL_aECDH,
2199         SSL_RC4,
2200         SSL_SHA1,
2201         SSL_TLSV1,
2202         SSL_NOT_EXP|SSL_MEDIUM,
2203         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2204         128,
2205         128,
2206         },
2207
2208         /* Cipher C00D */
2209         {
2210         1,
2211         TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA,
2212         TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA,
2213         SSL_kECDHr,
2214         SSL_aECDH,
2215         SSL_3DES,
2216         SSL_SHA1,
2217         SSL_TLSV1,
2218         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2219         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2220         168,
2221         168,
2222         },
2223
2224         /* Cipher C00E */
2225         {
2226         1,
2227         TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA,
2228         TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA,
2229         SSL_kECDHr,
2230         SSL_aECDH,
2231         SSL_AES128,
2232         SSL_SHA1,
2233         SSL_TLSV1,
2234         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2235         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2236         128,
2237         128,
2238         },
2239
2240         /* Cipher C00F */
2241         {
2242         1,
2243         TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA,
2244         TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA,
2245         SSL_kECDHr,
2246         SSL_aECDH,
2247         SSL_AES256,
2248         SSL_SHA1,
2249         SSL_TLSV1,
2250         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2251         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2252         256,
2253         256,
2254         },
2255
2256         /* Cipher C010 */
2257         {
2258         1,
2259         TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA,
2260         TLS1_CK_ECDHE_RSA_WITH_NULL_SHA,
2261         SSL_kEECDH,
2262         SSL_aRSA,
2263         SSL_eNULL,
2264         SSL_SHA1,
2265         SSL_TLSV1,
2266         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
2267         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2268         0,
2269         0,
2270         },
2271
2272         /* Cipher C011 */
2273         {
2274         1,
2275         TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA,
2276         TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA,
2277         SSL_kEECDH,
2278         SSL_aRSA,
2279         SSL_RC4,
2280         SSL_SHA1,
2281         SSL_TLSV1,
2282         SSL_NOT_EXP|SSL_MEDIUM,
2283         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2284         128,
2285         128,
2286         },
2287
2288         /* Cipher C012 */
2289         {
2290         1,
2291         TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
2292         TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
2293         SSL_kEECDH,
2294         SSL_aRSA,
2295         SSL_3DES,
2296         SSL_SHA1,
2297         SSL_TLSV1,
2298         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2299         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2300         168,
2301         168,
2302         },
2303
2304         /* Cipher C013 */
2305         {
2306         1,
2307         TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA,
2308         TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,
2309         SSL_kEECDH,
2310         SSL_aRSA,
2311         SSL_AES128,
2312         SSL_SHA1,
2313         SSL_TLSV1,
2314         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2315         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2316         128,
2317         128,
2318         },
2319
2320         /* Cipher C014 */
2321         {
2322         1,
2323         TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA,
2324         TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA,
2325         SSL_kEECDH,
2326         SSL_aRSA,
2327         SSL_AES256,
2328         SSL_SHA1,
2329         SSL_TLSV1,
2330         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2331         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2332         256,
2333         256,
2334         },
2335
2336         /* Cipher C015 */
2337         {
2338         1,
2339         TLS1_TXT_ECDH_anon_WITH_NULL_SHA,
2340         TLS1_CK_ECDH_anon_WITH_NULL_SHA,
2341         SSL_kEECDH,
2342         SSL_aNULL,
2343         SSL_eNULL,
2344         SSL_SHA1,
2345         SSL_TLSV1,
2346         SSL_NOT_EXP|SSL_STRONG_NONE|SSL_FIPS,
2347         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2348         0,
2349         0,
2350         },
2351
2352         /* Cipher C016 */
2353         {
2354         1,
2355         TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA,
2356         TLS1_CK_ECDH_anon_WITH_RC4_128_SHA,
2357         SSL_kEECDH,
2358         SSL_aNULL,
2359         SSL_RC4,
2360         SSL_SHA1,
2361         SSL_TLSV1,
2362         SSL_NOT_EXP|SSL_MEDIUM,
2363         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2364         128,
2365         128,
2366         },
2367
2368         /* Cipher C017 */
2369         {
2370         1,
2371         TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA,
2372         TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA,
2373         SSL_kEECDH,
2374         SSL_aNULL,
2375         SSL_3DES,
2376         SSL_SHA1,
2377         SSL_TLSV1,
2378         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2379         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2380         168,
2381         168,
2382         },
2383
2384         /* Cipher C018 */
2385         {
2386         1,
2387         TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA,
2388         TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA,
2389         SSL_kEECDH,
2390         SSL_aNULL,
2391         SSL_AES128,
2392         SSL_SHA1,
2393         SSL_TLSV1,
2394         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2395         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2396         128,
2397         128,
2398         },
2399
2400         /* Cipher C019 */
2401         {
2402         1,
2403         TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA,
2404         TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA,
2405         SSL_kEECDH,
2406         SSL_aNULL,
2407         SSL_AES256,
2408         SSL_SHA1,
2409         SSL_TLSV1,
2410         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2411         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2412         256,
2413         256,
2414         },
2415 #endif  /* OPENSSL_NO_ECDH */
2416
2417 #ifndef OPENSSL_NO_SRP
2418         /* Cipher C01A */
2419         {
2420         1,
2421         TLS1_TXT_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
2422         TLS1_CK_SRP_SHA_WITH_3DES_EDE_CBC_SHA,
2423         SSL_kSRP,
2424         SSL_aNULL,
2425         SSL_3DES,
2426         SSL_SHA1,
2427         SSL_TLSV1,
2428         SSL_NOT_EXP|SSL_HIGH,
2429         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2430         168,
2431         168,
2432         },
2433
2434         /* Cipher C01B */
2435         {
2436         1,
2437         TLS1_TXT_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
2438         TLS1_CK_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA,
2439         SSL_kSRP,
2440         SSL_aRSA,
2441         SSL_3DES,
2442         SSL_SHA1,
2443         SSL_TLSV1,
2444         SSL_NOT_EXP|SSL_HIGH,
2445         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2446         168,
2447         168,
2448         },
2449
2450         /* Cipher C01C */
2451         {
2452         1,
2453         TLS1_TXT_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
2454         TLS1_CK_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA,
2455         SSL_kSRP,
2456         SSL_aDSS,
2457         SSL_3DES,
2458         SSL_SHA1,
2459         SSL_TLSV1,
2460         SSL_NOT_EXP|SSL_HIGH,
2461         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2462         168,
2463         168,
2464         },
2465
2466         /* Cipher C01D */
2467         {
2468         1,
2469         TLS1_TXT_SRP_SHA_WITH_AES_128_CBC_SHA,
2470         TLS1_CK_SRP_SHA_WITH_AES_128_CBC_SHA,
2471         SSL_kSRP,
2472         SSL_aNULL,
2473         SSL_AES128,
2474         SSL_SHA1,
2475         SSL_TLSV1,
2476         SSL_NOT_EXP|SSL_HIGH,
2477         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2478         128,
2479         128,
2480         },
2481
2482         /* Cipher C01E */
2483         {
2484         1,
2485         TLS1_TXT_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
2486         TLS1_CK_SRP_SHA_RSA_WITH_AES_128_CBC_SHA,
2487         SSL_kSRP,
2488         SSL_aRSA,
2489         SSL_AES128,
2490         SSL_SHA1,
2491         SSL_TLSV1,
2492         SSL_NOT_EXP|SSL_HIGH,
2493         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2494         128,
2495         128,
2496         },
2497
2498         /* Cipher C01F */
2499         {
2500         1,
2501         TLS1_TXT_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
2502         TLS1_CK_SRP_SHA_DSS_WITH_AES_128_CBC_SHA,
2503         SSL_kSRP,
2504         SSL_aDSS,
2505         SSL_AES128,
2506         SSL_SHA1,
2507         SSL_TLSV1,
2508         SSL_NOT_EXP|SSL_HIGH,
2509         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2510         128,
2511         128,
2512         },
2513
2514         /* Cipher C020 */
2515         {
2516         1,
2517         TLS1_TXT_SRP_SHA_WITH_AES_256_CBC_SHA,
2518         TLS1_CK_SRP_SHA_WITH_AES_256_CBC_SHA,
2519         SSL_kSRP,
2520         SSL_aNULL,
2521         SSL_AES256,
2522         SSL_SHA1,
2523         SSL_TLSV1,
2524         SSL_NOT_EXP|SSL_HIGH,
2525         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2526         256,
2527         256,
2528         },
2529
2530         /* Cipher C021 */
2531         {
2532         1,
2533         TLS1_TXT_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
2534         TLS1_CK_SRP_SHA_RSA_WITH_AES_256_CBC_SHA,
2535         SSL_kSRP,
2536         SSL_aRSA,
2537         SSL_AES256,
2538         SSL_SHA1,
2539         SSL_TLSV1,
2540         SSL_NOT_EXP|SSL_HIGH,
2541         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2542         256,
2543         256,
2544         },
2545
2546         /* Cipher C022 */
2547         {
2548         1,
2549         TLS1_TXT_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
2550         TLS1_CK_SRP_SHA_DSS_WITH_AES_256_CBC_SHA,
2551         SSL_kSRP,
2552         SSL_aDSS,
2553         SSL_AES256,
2554         SSL_SHA1,
2555         SSL_TLSV1,
2556         SSL_NOT_EXP|SSL_HIGH,
2557         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2558         256,
2559         256,
2560         },
2561 #endif  /* OPENSSL_NO_SRP */
2562 #ifndef OPENSSL_NO_ECDH
2563
2564         /* HMAC based TLS v1.2 ciphersuites from RFC5289 */
2565
2566         /* Cipher C023 */
2567         {
2568         1,
2569         TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_SHA256,
2570         TLS1_CK_ECDHE_ECDSA_WITH_AES_128_SHA256,
2571         SSL_kEECDH,
2572         SSL_aECDSA,
2573         SSL_AES128,
2574         SSL_SHA256,
2575         SSL_TLSV1_2,
2576         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2577         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2578         128,
2579         128,
2580         },
2581
2582         /* Cipher C024 */
2583         {
2584         1,
2585         TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_SHA384,
2586         TLS1_CK_ECDHE_ECDSA_WITH_AES_256_SHA384,
2587         SSL_kEECDH,
2588         SSL_aECDSA,
2589         SSL_AES256,
2590         SSL_SHA384,
2591         SSL_TLSV1_2,
2592         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2593         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2594         256,
2595         256,
2596         },
2597
2598         /* Cipher C025 */
2599         {
2600         1,
2601         TLS1_TXT_ECDH_ECDSA_WITH_AES_128_SHA256,
2602         TLS1_CK_ECDH_ECDSA_WITH_AES_128_SHA256,
2603         SSL_kECDHe,
2604         SSL_aECDH,
2605         SSL_AES128,
2606         SSL_SHA256,
2607         SSL_TLSV1_2,
2608         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2609         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2610         128,
2611         128,
2612         },
2613
2614         /* Cipher C026 */
2615         {
2616         1,
2617         TLS1_TXT_ECDH_ECDSA_WITH_AES_256_SHA384,
2618         TLS1_CK_ECDH_ECDSA_WITH_AES_256_SHA384,
2619         SSL_kECDHe,
2620         SSL_aECDH,
2621         SSL_AES256,
2622         SSL_SHA384,
2623         SSL_TLSV1_2,
2624         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2625         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2626         256,
2627         256,
2628         },
2629
2630         /* Cipher C027 */
2631         {
2632         1,
2633         TLS1_TXT_ECDHE_RSA_WITH_AES_128_SHA256,
2634         TLS1_CK_ECDHE_RSA_WITH_AES_128_SHA256,
2635         SSL_kEECDH,
2636         SSL_aRSA,
2637         SSL_AES128,
2638         SSL_SHA256,
2639         SSL_TLSV1_2,
2640         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2641         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2642         128,
2643         128,
2644         },
2645
2646         /* Cipher C028 */
2647         {
2648         1,
2649         TLS1_TXT_ECDHE_RSA_WITH_AES_256_SHA384,
2650         TLS1_CK_ECDHE_RSA_WITH_AES_256_SHA384,
2651         SSL_kEECDH,
2652         SSL_aRSA,
2653         SSL_AES256,
2654         SSL_SHA384,
2655         SSL_TLSV1_2,
2656         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2657         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2658         256,
2659         256,
2660         },
2661
2662         /* Cipher C029 */
2663         {
2664         1,
2665         TLS1_TXT_ECDH_RSA_WITH_AES_128_SHA256,
2666         TLS1_CK_ECDH_RSA_WITH_AES_128_SHA256,
2667         SSL_kECDHr,
2668         SSL_aECDH,
2669         SSL_AES128,
2670         SSL_SHA256,
2671         SSL_TLSV1_2,
2672         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2673         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2674         128,
2675         128,
2676         },
2677
2678         /* Cipher C02A */
2679         {
2680         1,
2681         TLS1_TXT_ECDH_RSA_WITH_AES_256_SHA384,
2682         TLS1_CK_ECDH_RSA_WITH_AES_256_SHA384,
2683         SSL_kECDHr,
2684         SSL_aECDH,
2685         SSL_AES256,
2686         SSL_SHA384,
2687         SSL_TLSV1_2,
2688         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2689         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2690         256,
2691         256,
2692         },
2693
2694         /* GCM based TLS v1.2 ciphersuites from RFC5289 */
2695
2696         /* Cipher C02B */
2697         {
2698         1,
2699         TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
2700         TLS1_CK_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
2701         SSL_kEECDH,
2702         SSL_aECDSA,
2703         SSL_AES128GCM,
2704         SSL_AEAD,
2705         SSL_TLSV1_2,
2706         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2707         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2708         128,
2709         128,
2710         },
2711
2712         /* Cipher C02C */
2713         {
2714         1,
2715         TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
2716         TLS1_CK_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
2717         SSL_kEECDH,
2718         SSL_aECDSA,
2719         SSL_AES256GCM,
2720         SSL_AEAD,
2721         SSL_TLSV1_2,
2722         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2723         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2724         256,
2725         256,
2726         },
2727
2728         /* Cipher C02D */
2729         {
2730         1,
2731         TLS1_TXT_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
2732         TLS1_CK_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
2733         SSL_kECDHe,
2734         SSL_aECDH,
2735         SSL_AES128GCM,
2736         SSL_AEAD,
2737         SSL_TLSV1_2,
2738         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2739         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2740         128,
2741         128,
2742         },
2743
2744         /* Cipher C02E */
2745         {
2746         1,
2747         TLS1_TXT_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
2748         TLS1_CK_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
2749         SSL_kECDHe,
2750         SSL_aECDH,
2751         SSL_AES256GCM,
2752         SSL_AEAD,
2753         SSL_TLSV1_2,
2754         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2755         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2756         256,
2757         256,
2758         },
2759
2760         /* Cipher C02F */
2761         {
2762         1,
2763         TLS1_TXT_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
2764         TLS1_CK_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
2765         SSL_kEECDH,
2766         SSL_aRSA,
2767         SSL_AES128GCM,
2768         SSL_AEAD,
2769         SSL_TLSV1_2,
2770         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2771         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2772         128,
2773         128,
2774         },
2775
2776         /* Cipher C030 */
2777         {
2778         1,
2779         TLS1_TXT_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
2780         TLS1_CK_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
2781         SSL_kEECDH,
2782         SSL_aRSA,
2783         SSL_AES256GCM,
2784         SSL_AEAD,
2785         SSL_TLSV1_2,
2786         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2787         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2788         256,
2789         256,
2790         },
2791
2792         /* Cipher C031 */
2793         {
2794         1,
2795         TLS1_TXT_ECDH_RSA_WITH_AES_128_GCM_SHA256,
2796         TLS1_CK_ECDH_RSA_WITH_AES_128_GCM_SHA256,
2797         SSL_kECDHr,
2798         SSL_aECDH,
2799         SSL_AES128GCM,
2800         SSL_AEAD,
2801         SSL_TLSV1_2,
2802         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2803         SSL_HANDSHAKE_MAC_SHA256|TLS1_PRF_SHA256,
2804         128,
2805         128,
2806         },
2807
2808         /* Cipher C032 */
2809         {
2810         1,
2811         TLS1_TXT_ECDH_RSA_WITH_AES_256_GCM_SHA384,
2812         TLS1_CK_ECDH_RSA_WITH_AES_256_GCM_SHA384,
2813         SSL_kECDHr,
2814         SSL_aECDH,
2815         SSL_AES256GCM,
2816         SSL_AEAD,
2817         SSL_TLSV1_2,
2818         SSL_NOT_EXP|SSL_HIGH|SSL_FIPS,
2819         SSL_HANDSHAKE_MAC_SHA384|TLS1_PRF_SHA384,
2820         256,
2821         256,
2822         },
2823
2824 #endif /* OPENSSL_NO_ECDH */
2825
2826
2827 #ifdef TEMP_GOST_TLS
2828 /* Cipher FF00 */
2829         {
2830         1,
2831         "GOST-MD5",
2832         0x0300ff00,
2833         SSL_kRSA,
2834         SSL_aRSA,
2835         SSL_eGOST2814789CNT,
2836         SSL_MD5,
2837         SSL_TLSV1,
2838         SSL_NOT_EXP|SSL_HIGH,
2839         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2840         256,
2841         256,
2842         },
2843         {
2844         1,
2845         "GOST-GOST94",
2846         0x0300ff01,
2847         SSL_kRSA,
2848         SSL_aRSA,
2849         SSL_eGOST2814789CNT,
2850         SSL_GOST94,
2851         SSL_TLSV1,
2852         SSL_NOT_EXP|SSL_HIGH,
2853         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2854         256,
2855         256
2856         },
2857         {
2858         1,
2859         "GOST-GOST89MAC",
2860         0x0300ff02,
2861         SSL_kRSA,
2862         SSL_aRSA,
2863         SSL_eGOST2814789CNT,
2864         SSL_GOST89MAC,
2865         SSL_TLSV1,
2866         SSL_NOT_EXP|SSL_HIGH,
2867         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF,
2868         256,
2869         256
2870         },
2871         {
2872         1,
2873         "GOST-GOST89STREAM",
2874         0x0300ff03,
2875         SSL_kRSA,
2876         SSL_aRSA,
2877         SSL_eGOST2814789CNT,
2878         SSL_GOST89MAC,
2879         SSL_TLSV1,
2880         SSL_NOT_EXP|SSL_HIGH,
2881         SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF|TLS1_STREAM_MAC,
2882         256,
2883         256
2884         },
2885 #endif
2886
2887 /* end of list */
2888         };
2889
2890 SSL3_ENC_METHOD SSLv3_enc_data={
2891         ssl3_enc,
2892         n_ssl3_mac,
2893         ssl3_setup_key_block,
2894         ssl3_generate_master_secret,
2895         ssl3_change_cipher_state,
2896         ssl3_final_finish_mac,
2897         MD5_DIGEST_LENGTH+SHA_DIGEST_LENGTH,
2898         ssl3_cert_verify_mac,
2899         SSL3_MD_CLIENT_FINISHED_CONST,4,
2900         SSL3_MD_SERVER_FINISHED_CONST,4,
2901         ssl3_alert_code,
2902         (int (*)(SSL *, unsigned char *, size_t, const char *,
2903                  size_t, const unsigned char *, size_t,
2904                  int use_context))ssl_undefined_function,
2905         };
2906
2907 long ssl3_default_timeout(void)
2908         {
2909         /* 2 hours, the 24 hours mentioned in the SSLv3 spec
2910          * is way too long for http, the cache would over fill */
2911         return(60*60*2);
2912         }
2913
2914 int ssl3_num_ciphers(void)
2915         {
2916         return(SSL3_NUM_CIPHERS);
2917         }
2918
2919 const SSL_CIPHER *ssl3_get_cipher(unsigned int u)
2920         {
2921         if (u < SSL3_NUM_CIPHERS)
2922                 return(&(ssl3_ciphers[SSL3_NUM_CIPHERS-1-u]));
2923         else
2924                 return(NULL);
2925         }
2926
2927 int ssl3_pending(const SSL *s)
2928         {
2929         if (s->rstate == SSL_ST_READ_BODY)
2930                 return 0;
2931
2932         return (s->s3->rrec.type == SSL3_RT_APPLICATION_DATA) ? s->s3->rrec.length : 0;
2933         }
2934
2935 int ssl3_new(SSL *s)
2936         {
2937         SSL3_STATE *s3;
2938
2939         if ((s3=OPENSSL_malloc(sizeof *s3)) == NULL) goto err;
2940         memset(s3,0,sizeof *s3);
2941         memset(s3->rrec.seq_num,0,sizeof(s3->rrec.seq_num));
2942         memset(s3->wrec.seq_num,0,sizeof(s3->wrec.seq_num));
2943
2944         s->s3=s3;
2945
2946 #ifndef OPENSSL_NO_SRP
2947         SSL_SRP_CTX_init(s);
2948 #endif
2949         s->method->ssl_clear(s);
2950         return(1);
2951 err:
2952         return(0);
2953         }
2954
2955 void ssl3_free(SSL *s)
2956         {
2957         if(s == NULL)
2958             return;
2959
2960 #ifdef TLSEXT_TYPE_opaque_prf_input
2961         if (s->s3->client_opaque_prf_input != NULL)
2962                 OPENSSL_free(s->s3->client_opaque_prf_input);
2963         if (s->s3->server_opaque_prf_input != NULL)
2964                 OPENSSL_free(s->s3->server_opaque_prf_input);
2965 #endif
2966
2967         ssl3_cleanup_key_block(s);
2968         if (s->s3->rbuf.buf != NULL)
2969                 ssl3_release_read_buffer(s);
2970         if (s->s3->wbuf.buf != NULL)
2971                 ssl3_release_write_buffer(s);
2972         if (s->s3->rrec.comp != NULL)
2973                 OPENSSL_free(s->s3->rrec.comp);
2974 #ifndef OPENSSL_NO_DH
2975         if (s->s3->tmp.dh != NULL)
2976                 DH_free(s->s3->tmp.dh);
2977 #endif
2978 #ifndef OPENSSL_NO_ECDH
2979         if (s->s3->tmp.ecdh != NULL)
2980                 EC_KEY_free(s->s3->tmp.ecdh);
2981 #endif
2982
2983         if (s->s3->tmp.ca_names != NULL)
2984                 sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
2985         if (s->s3->handshake_buffer) {
2986                 BIO_free(s->s3->handshake_buffer);
2987         }
2988         if (s->s3->handshake_dgst) ssl3_free_digest_list(s);
2989 #ifndef OPENSSL_NO_SRP
2990         SSL_SRP_CTX_free(s);
2991 #endif
2992 #ifndef OPENSSL_NO_TLSEXT
2993         if (s->s3->tlsext_authz_client_types != NULL)
2994                 OPENSSL_free(s->s3->tlsext_authz_client_types);
2995 #endif
2996         OPENSSL_cleanse(s->s3,sizeof *s->s3);
2997         OPENSSL_free(s->s3);
2998         s->s3=NULL;
2999         }
3000
3001 void ssl3_clear(SSL *s)
3002         {
3003         unsigned char *rp,*wp;
3004         size_t rlen, wlen;
3005         int init_extra;
3006
3007 #ifdef TLSEXT_TYPE_opaque_prf_input
3008         if (s->s3->client_opaque_prf_input != NULL)
3009                 OPENSSL_free(s->s3->client_opaque_prf_input);
3010         s->s3->client_opaque_prf_input = NULL;
3011         if (s->s3->server_opaque_prf_input != NULL)
3012                 OPENSSL_free(s->s3->server_opaque_prf_input);
3013         s->s3->server_opaque_prf_input = NULL;
3014 #endif
3015
3016         ssl3_cleanup_key_block(s);
3017         if (s->s3->tmp.ca_names != NULL)
3018                 sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
3019
3020         if (s->s3->rrec.comp != NULL)
3021                 {
3022                 OPENSSL_free(s->s3->rrec.comp);
3023                 s->s3->rrec.comp=NULL;
3024                 }
3025 #ifndef OPENSSL_NO_DH
3026         if (s->s3->tmp.dh != NULL)
3027                 {
3028                 DH_free(s->s3->tmp.dh);
3029                 s->s3->tmp.dh = NULL;
3030                 }
3031 #endif
3032 #ifndef OPENSSL_NO_ECDH
3033         if (s->s3->tmp.ecdh != NULL)
3034                 {
3035                 EC_KEY_free(s->s3->tmp.ecdh);
3036                 s->s3->tmp.ecdh = NULL;
3037                 }
3038 #endif
3039 #ifndef OPENSSL_NO_TLSEXT
3040         if (s->s3->tlsext_authz_client_types != NULL)
3041                 {
3042                 OPENSSL_free(s->s3->tlsext_authz_client_types);
3043                 s->s3->tlsext_authz_client_types = NULL;
3044                 }
3045 #endif
3046
3047         rp = s->s3->rbuf.buf;
3048         wp = s->s3->wbuf.buf;
3049         rlen = s->s3->rbuf.len;
3050         wlen = s->s3->wbuf.len;
3051         init_extra = s->s3->init_extra;
3052         if (s->s3->handshake_buffer) {
3053                 BIO_free(s->s3->handshake_buffer);
3054                 s->s3->handshake_buffer = NULL;
3055         }
3056         if (s->s3->handshake_dgst) {
3057                 ssl3_free_digest_list(s);
3058         }
3059         memset(s->s3,0,sizeof *s->s3);
3060         s->s3->rbuf.buf = rp;
3061         s->s3->wbuf.buf = wp;
3062         s->s3->rbuf.len = rlen;
3063         s->s3->wbuf.len = wlen;
3064         s->s3->init_extra = init_extra;
3065
3066         ssl_free_wbio_buffer(s);
3067
3068         s->packet_length=0;
3069         s->s3->renegotiate=0;
3070         s->s3->total_renegotiations=0;
3071         s->s3->num_renegotiations=0;
3072         s->s3->in_read_app_data=0;
3073         s->version=SSL3_VERSION;
3074
3075 #if !defined(OPENSSL_NO_TLSEXT) && !defined(OPENSSL_NO_NEXTPROTONEG)
3076         if (s->next_proto_negotiated)
3077                 {
3078                 OPENSSL_free(s->next_proto_negotiated);
3079                 s->next_proto_negotiated = NULL;
3080                 s->next_proto_negotiated_len = 0;
3081                 }
3082 #endif
3083         }
3084
3085 #ifndef OPENSSL_NO_SRP
3086 static char * MS_CALLBACK srp_password_from_info_cb(SSL *s, void *arg)
3087         {
3088         return BUF_strdup(s->srp_ctx.info) ;
3089         }
3090 #endif
3091
3092 long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
3093         {
3094         int ret=0;
3095
3096 #if !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_RSA)
3097         if (
3098 #ifndef OPENSSL_NO_RSA
3099             cmd == SSL_CTRL_SET_TMP_RSA ||
3100             cmd == SSL_CTRL_SET_TMP_RSA_CB ||
3101 #endif
3102 #ifndef OPENSSL_NO_DSA
3103             cmd == SSL_CTRL_SET_TMP_DH ||
3104             cmd == SSL_CTRL_SET_TMP_DH_CB ||
3105 #endif
3106                 0)
3107                 {
3108                 if (!ssl_cert_inst(&s->cert))
3109                         {
3110                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
3111                         return(0);
3112                         }
3113                 }
3114 #endif
3115
3116         switch (cmd)
3117                 {
3118         case SSL_CTRL_GET_SESSION_REUSED:
3119                 ret=s->hit;
3120                 break;
3121         case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
3122                 break;
3123         case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
3124                 ret=s->s3->num_renegotiations;
3125                 break;
3126         case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
3127                 ret=s->s3->num_renegotiations;
3128                 s->s3->num_renegotiations=0;
3129                 break;
3130         case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
3131                 ret=s->s3->total_renegotiations;
3132                 break;
3133         case SSL_CTRL_GET_FLAGS:
3134                 ret=(int)(s->s3->flags);
3135                 break;
3136 #ifndef OPENSSL_NO_RSA
3137         case SSL_CTRL_NEED_TMP_RSA:
3138                 if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) &&
3139                     ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
3140                      (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8))))
3141                         ret = 1;
3142                 break;
3143         case SSL_CTRL_SET_TMP_RSA:
3144                 {
3145                         RSA *rsa = (RSA *)parg;
3146                         if (rsa == NULL)
3147                                 {
3148                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
3149                                 return(ret);
3150                                 }
3151                         if ((rsa = RSAPrivateKey_dup(rsa)) == NULL)
3152                                 {
3153                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_RSA_LIB);
3154                                 return(ret);
3155                                 }
3156                         if (s->cert->rsa_tmp != NULL)
3157                                 RSA_free(s->cert->rsa_tmp);
3158                         s->cert->rsa_tmp = rsa;
3159                         ret = 1;
3160                 }
3161                 break;
3162         case SSL_CTRL_SET_TMP_RSA_CB:
3163                 {
3164                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
3165                 return(ret);
3166                 }
3167                 break;
3168 #endif
3169 #ifndef OPENSSL_NO_DH
3170         case SSL_CTRL_SET_TMP_DH:
3171                 {
3172                         DH *dh = (DH *)parg;
3173                         if (dh == NULL)
3174                                 {
3175                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
3176                                 return(ret);
3177                                 }
3178                         if ((dh = DHparams_dup(dh)) == NULL)
3179                                 {
3180                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
3181                                 return(ret);
3182                                 }
3183                         if (!(s->options & SSL_OP_SINGLE_DH_USE))
3184                                 {
3185                                 if (!DH_generate_key(dh))
3186                                         {
3187                                         DH_free(dh);
3188                                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
3189                                         return(ret);
3190                                         }
3191                                 }
3192                         if (s->cert->dh_tmp != NULL)
3193                                 DH_free(s->cert->dh_tmp);
3194                         s->cert->dh_tmp = dh;
3195                         ret = 1;
3196                 }
3197                 break;
3198         case SSL_CTRL_SET_TMP_DH_CB:
3199                 {
3200                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
3201                 return(ret);
3202                 }
3203                 break;
3204 #endif
3205 #ifndef OPENSSL_NO_ECDH
3206         case SSL_CTRL_SET_TMP_ECDH:
3207                 {
3208                 EC_KEY *ecdh = NULL;
3209
3210                 if (parg == NULL)
3211                         {
3212                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
3213                         return(ret);
3214                         }
3215                 if (!EC_KEY_up_ref((EC_KEY *)parg))
3216                         {
3217                         SSLerr(SSL_F_SSL3_CTRL,ERR_R_ECDH_LIB);
3218                         return(ret);
3219                         }
3220                 ecdh = (EC_KEY *)parg;
3221                 if (!(s->options & SSL_OP_SINGLE_ECDH_USE))
3222                         {
3223                         if (!EC_KEY_generate_key(ecdh))
3224                                 {
3225                                 EC_KEY_free(ecdh);
3226                                 SSLerr(SSL_F_SSL3_CTRL,ERR_R_ECDH_LIB);
3227                                 return(ret);
3228                                 }
3229                         }
3230                 if (s->cert->ecdh_tmp != NULL)
3231                         EC_KEY_free(s->cert->ecdh_tmp);
3232                 s->cert->ecdh_tmp = ecdh;
3233                 ret = 1;
3234                 }
3235                 break;
3236         case SSL_CTRL_SET_TMP_ECDH_CB:
3237                 {
3238                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
3239                 return(ret);
3240                 }
3241                 break;
3242 #endif /* !OPENSSL_NO_ECDH */
3243 #ifndef OPENSSL_NO_TLSEXT
3244         case SSL_CTRL_SET_TLSEXT_HOSTNAME:
3245                 if (larg == TLSEXT_NAMETYPE_host_name)
3246                         {
3247                         if (s->tlsext_hostname != NULL)
3248                                 OPENSSL_free(s->tlsext_hostname);
3249                         s->tlsext_hostname = NULL;
3250
3251                         ret = 1;
3252                         if (parg == NULL)
3253                                 break;
3254                         if (strlen((char *)parg) > TLSEXT_MAXLEN_host_name)
3255                                 {
3256                                 SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME);
3257                                 return 0;
3258                                 }
3259                         if ((s->tlsext_hostname = BUF_strdup((char *)parg)) == NULL)
3260                                 {
3261                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_INTERNAL_ERROR);
3262                                 return 0;
3263                                 }
3264                         }
3265                 else
3266                         {
3267                         SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE);
3268                         return 0;
3269                         }
3270                 break;
3271         case SSL_CTRL_SET_TLSEXT_DEBUG_ARG:
3272                 s->tlsext_debug_arg=parg;
3273                 ret = 1;
3274                 break;
3275
3276 #ifdef TLSEXT_TYPE_opaque_prf_input
3277         case SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT:
3278                 if (larg > 12288) /* actual internal limit is 2^16 for the complete hello message
3279                                    * (including the cert chain and everything) */
3280                         {
3281                         SSLerr(SSL_F_SSL3_CTRL, SSL_R_OPAQUE_PRF_INPUT_TOO_LONG);
3282                         break;
3283                         }
3284                 if (s->tlsext_opaque_prf_input != NULL)
3285                         OPENSSL_free(s->tlsext_opaque_prf_input);
3286                 if ((size_t)larg == 0)
3287                         s->tlsext_opaque_prf_input = OPENSSL_malloc(1); /* dummy byte just to get non-NULL */
3288                 else
3289                         s->tlsext_opaque_prf_input = BUF_memdup(parg, (size_t)larg);
3290                 if (s->tlsext_opaque_prf_input != NULL)
3291                         {
3292                         s->tlsext_opaque_prf_input_len = (size_t)larg;
3293                         ret = 1;
3294                         }
3295                 else
3296                         s->tlsext_opaque_prf_input_len = 0;
3297                 break;
3298 #endif
3299
3300         case SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE:
3301                 s->tlsext_status_type=larg;
3302                 ret = 1;
3303                 break;
3304
3305         case SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS:
3306                 *(STACK_OF(X509_EXTENSION) **)parg = s->tlsext_ocsp_exts;
3307                 ret = 1;
3308                 break;
3309
3310         case SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS:
3311                 s->tlsext_ocsp_exts = parg;
3312                 ret = 1;
3313                 break;
3314
3315         case SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS:
3316                 *(STACK_OF(OCSP_RESPID) **)parg = s->tlsext_ocsp_ids;
3317                 ret = 1;
3318                 break;
3319
3320         case SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS:
3321                 s->tlsext_ocsp_ids = parg;
3322                 ret = 1;
3323                 break;
3324
3325         case SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP:
3326                 *(unsigned char **)parg = s->tlsext_ocsp_resp;
3327                 return s->tlsext_ocsp_resplen;
3328
3329         case SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP:
3330                 if (s->tlsext_ocsp_resp)
3331                         OPENSSL_free(s->tlsext_ocsp_resp);
3332                 s->tlsext_ocsp_resp = parg;
3333                 s->tlsext_ocsp_resplen = larg;
3334                 ret = 1;
3335                 break;
3336
3337 #ifndef OPENSSL_NO_HEARTBEATS
3338         case SSL_CTRL_TLS_EXT_SEND_HEARTBEAT:
3339                 if (SSL_version(s) == DTLS1_VERSION || SSL_version(s) == DTLS1_BAD_VER)
3340                         ret = dtls1_heartbeat(s);
3341                 else
3342                         ret = tls1_heartbeat(s);
3343                 break;
3344
3345         case SSL_CTRL_GET_TLS_EXT_HEARTBEAT_PENDING:
3346                 ret = s->tlsext_hb_pending;
3347                 break;
3348
3349         case SSL_CTRL_SET_TLS_EXT_HEARTBEAT_NO_REQUESTS:
3350                 if (larg)
3351                         s->tlsext_heartbeat |= SSL_TLSEXT_HB_DONT_RECV_REQUESTS;
3352                 else
3353                         s->tlsext_heartbeat &= ~SSL_TLSEXT_HB_DONT_RECV_REQUESTS;
3354                 ret = 1;
3355                 break;
3356 #endif
3357
3358 #endif /* !OPENSSL_NO_TLSEXT */
3359
3360         case SSL_CTRL_CHAIN:
3361                 if (larg)
3362                         return ssl_cert_set1_chain(s->cert,
3363                                                 (STACK_OF (X509) *)parg);
3364                 else
3365                         return ssl_cert_set0_chain(s->cert,
3366                                                 (STACK_OF (X509) *)parg);
3367
3368         case SSL_CTRL_CHAIN_CERT:
3369                 if (larg)
3370                         return ssl_cert_add1_chain_cert(s->cert, (X509 *)parg);
3371                 else
3372                         return ssl_cert_add0_chain_cert(s->cert, (X509 *)parg);
3373
3374         case SSL_CTRL_GET_CURVES:
3375                 {
3376                 unsigned char *clist;
3377                 size_t clistlen;
3378                 if (!s->session)
3379                         return 0;
3380                 clist = s->session->tlsext_ellipticcurvelist;
3381                 clistlen = s->session->tlsext_ellipticcurvelist_length / 2;
3382                 if (parg)
3383                         {
3384                         size_t i;
3385                         int *cptr = parg;
3386                         unsigned int cid, nid;
3387                         for (i = 0; i < clistlen; i++)
3388                                 {
3389                                 n2s(clist, cid);
3390                                 nid = tls1_ec_curve_id2nid(cid);
3391                                 if (nid != 0)
3392                                         cptr[i] = nid;
3393                                 else
3394                                         cptr[i] = TLSEXT_nid_unknown | cid;
3395                                 }
3396                         }
3397                 return (int)clistlen;
3398                 }
3399
3400         case SSL_CTRL_SET_CURVES:
3401                 return tls1_set_curves(&s->tlsext_ellipticcurvelist,
3402                                         &s->tlsext_ellipticcurvelist_length,
3403                                                                 parg, larg);
3404
3405         case SSL_CTRL_SET_CURVES_LIST:
3406                 return tls1_set_curves_list(&s->tlsext_ellipticcurvelist,
3407                                         &s->tlsext_ellipticcurvelist_length,
3408                                                                 parg);
3409
3410         case SSL_CTRL_GET_SHARED_CURVE:
3411                 return tls1_shared_curve(s, larg);
3412
3413         case SSL_CTRL_SET_ECDH_AUTO:
3414                 s->cert->ecdh_tmp_auto = larg;
3415                 break;
3416
3417         case SSL_CTRL_SET_SIGALGS:
3418                 return tls1_set_sigalgs(s->cert, parg, larg);
3419
3420         case SSL_CTRL_SET_SIGALGS_LIST:
3421                 return tls1_set_sigalgs_list(s->cert, parg);
3422
3423         default:
3424                 break;
3425                 }
3426         return(ret);
3427         }
3428
3429 long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp)(void))
3430         {
3431         int ret=0;
3432
3433 #if !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_RSA)
3434         if (
3435 #ifndef OPENSSL_NO_RSA
3436             cmd == SSL_CTRL_SET_TMP_RSA_CB ||
3437 #endif
3438 #ifndef OPENSSL_NO_DSA
3439             cmd == SSL_CTRL_SET_TMP_DH_CB ||
3440 #endif
3441                 0)
3442                 {
3443                 if (!ssl_cert_inst(&s->cert))
3444                         {
3445                         SSLerr(SSL_F_SSL3_CALLBACK_CTRL, ERR_R_MALLOC_FAILURE);
3446                         return(0);
3447                         }
3448                 }
3449 #endif
3450
3451         switch (cmd)
3452                 {
3453 #ifndef OPENSSL_NO_RSA
3454         case SSL_CTRL_SET_TMP_RSA_CB:
3455                 {
3456                 s->cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
3457                 }
3458                 break;
3459 #endif
3460 #ifndef OPENSSL_NO_DH
3461         case SSL_CTRL_SET_TMP_DH_CB:
3462                 {
3463                 s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
3464                 }
3465                 break;
3466 #endif
3467 #ifndef OPENSSL_NO_ECDH
3468         case SSL_CTRL_SET_TMP_ECDH_CB:
3469                 {
3470                 s->cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;
3471                 }
3472                 break;
3473 #endif
3474 #ifndef OPENSSL_NO_TLSEXT
3475         case SSL_CTRL_SET_TLSEXT_DEBUG_CB:
3476                 s->tlsext_debug_cb=(void (*)(SSL *,int ,int,
3477                                         unsigned char *, int, void *))fp;
3478                 break;
3479 #endif
3480         case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB:
3481                 {
3482                 s->not_resumable_session_cb = (int (*)(SSL *, int))fp;
3483                 }
3484                 break;
3485         default:
3486                 break;
3487                 }
3488         return(ret);
3489         }
3490
3491 long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
3492         {
3493         CERT *cert;
3494
3495         cert=ctx->cert;
3496
3497         switch (cmd)
3498                 {
3499 #ifndef OPENSSL_NO_RSA
3500         case SSL_CTRL_NEED_TMP_RSA:
3501                 if (    (cert->rsa_tmp == NULL) &&
3502                         ((cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
3503                          (EVP_PKEY_size(cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8)))
3504                         )
3505                         return(1);
3506                 else
3507                         return(0);
3508                 /* break; */
3509         case SSL_CTRL_SET_TMP_RSA:
3510                 {
3511                 RSA *rsa;
3512                 int i;
3513
3514                 rsa=(RSA *)parg;
3515                 i=1;
3516                 if (rsa == NULL)
3517                         i=0;
3518                 else
3519                         {
3520                         if ((rsa=RSAPrivateKey_dup(rsa)) == NULL)
3521                                 i=0;
3522                         }
3523                 if (!i)
3524                         {
3525                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_RSA_LIB);
3526                         return(0);
3527                         }
3528                 else
3529                         {
3530                         if (cert->rsa_tmp != NULL)
3531                                 RSA_free(cert->rsa_tmp);
3532                         cert->rsa_tmp=rsa;
3533                         return(1);
3534                         }
3535                 }
3536                 /* break; */
3537         case SSL_CTRL_SET_TMP_RSA_CB:
3538                 {
3539                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
3540                 return(0);
3541                 }
3542                 break;
3543 #endif
3544 #ifndef OPENSSL_NO_DH
3545         case SSL_CTRL_SET_TMP_DH:
3546                 {
3547                 DH *new=NULL,*dh;
3548
3549                 dh=(DH *)parg;
3550                 if ((new=DHparams_dup(dh)) == NULL)
3551                         {
3552                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
3553                         return 0;
3554                         }
3555                 if (!(ctx->options & SSL_OP_SINGLE_DH_USE))
3556                         {
3557                         if (!DH_generate_key(new))
3558                                 {
3559                                 SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
3560                                 DH_free(new);
3561                                 return 0;
3562                                 }
3563                         }
3564                 if (cert->dh_tmp != NULL)
3565                         DH_free(cert->dh_tmp);
3566                 cert->dh_tmp=new;
3567                 return 1;
3568                 }
3569                 /*break; */
3570         case SSL_CTRL_SET_TMP_DH_CB:
3571                 {
3572                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
3573                 return(0);
3574                 }
3575                 break;
3576 #endif
3577 #ifndef OPENSSL_NO_ECDH
3578         case SSL_CTRL_SET_TMP_ECDH:
3579                 {
3580                 EC_KEY *ecdh = NULL;
3581
3582                 if (parg == NULL)
3583                         {
3584                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
3585                         return 0;
3586                         }
3587                 ecdh = EC_KEY_dup((EC_KEY *)parg);
3588                 if (ecdh == NULL)
3589                         {
3590                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_EC_LIB);
3591                         return 0;
3592                         }
3593                 if (!(ctx->options & SSL_OP_SINGLE_ECDH_USE))
3594                         {
3595                         if (!EC_KEY_generate_key(ecdh))
3596                                 {
3597                                 EC_KEY_free(ecdh);
3598                                 SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
3599                                 return 0;
3600                                 }
3601                         }
3602
3603                 if (cert->ecdh_tmp != NULL)
3604                         {
3605                         EC_KEY_free(cert->ecdh_tmp);
3606                         }
3607                 cert->ecdh_tmp = ecdh;
3608                 return 1;
3609                 }
3610                 /* break; */
3611         case SSL_CTRL_SET_TMP_ECDH_CB:
3612                 {
3613                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
3614                 return(0);
3615                 }
3616                 break;
3617 #endif /* !OPENSSL_NO_ECDH */
3618 #ifndef OPENSSL_NO_TLSEXT
3619         case SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG:
3620                 ctx->tlsext_servername_arg=parg;
3621                 break;
3622         case SSL_CTRL_SET_TLSEXT_TICKET_KEYS:
3623         case SSL_CTRL_GET_TLSEXT_TICKET_KEYS:
3624                 {
3625                 unsigned char *keys = parg;
3626                 if (!keys)
3627                         return 48;
3628                 if (larg != 48)
3629                         {
3630                         SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_INVALID_TICKET_KEYS_LENGTH);
3631                         return 0;
3632                         }
3633                 if (cmd == SSL_CTRL_SET_TLSEXT_TICKET_KEYS)
3634                         {
3635                         memcpy(ctx->tlsext_tick_key_name, keys, 16);
3636                         memcpy(ctx->tlsext_tick_hmac_key, keys + 16, 16);
3637                         memcpy(ctx->tlsext_tick_aes_key, keys + 32, 16);
3638                         }
3639                 else
3640                         {
3641                         memcpy(keys, ctx->tlsext_tick_key_name, 16);
3642                         memcpy(keys + 16, ctx->tlsext_tick_hmac_key, 16);
3643                         memcpy(keys + 32, ctx->tlsext_tick_aes_key, 16);
3644                         }
3645                 return 1;
3646                 }
3647
3648 #ifdef TLSEXT_TYPE_opaque_prf_input
3649         case SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB_ARG:
3650                 ctx->tlsext_opaque_prf_input_callback_arg = parg;
3651                 return 1;
3652 #endif
3653
3654         case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG:
3655                 ctx->tlsext_status_arg=parg;
3656                 return 1;
3657                 break;
3658
3659 #ifndef OPENSSL_NO_SRP
3660         case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME:
3661                 ctx->srp_ctx.srp_Mask|=SSL_kSRP;
3662                 if (ctx->srp_ctx.login != NULL)
3663                         OPENSSL_free(ctx->srp_ctx.login);
3664                 ctx->srp_ctx.login = NULL;
3665                 if (parg == NULL)
3666                         break;
3667                 if (strlen((const char *)parg) > 255 || strlen((const char *)parg) < 1)
3668                         {
3669                         SSLerr(SSL_F_SSL3_CTX_CTRL, SSL_R_INVALID_SRP_USERNAME);
3670                         return 0;
3671                         }
3672                 if ((ctx->srp_ctx.login = BUF_strdup((char *)parg)) == NULL)
3673                         {
3674                         SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_INTERNAL_ERROR);
3675                         return 0;
3676                         }
3677                 break;
3678         case SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD:
3679                 ctx->srp_ctx.SRP_give_srp_client_pwd_callback=srp_password_from_info_cb;
3680                 ctx->srp_ctx.info=parg;
3681                 break;
3682         case SSL_CTRL_SET_SRP_ARG:
3683                 ctx->srp_ctx.srp_Mask|=SSL_kSRP;
3684                 ctx->srp_ctx.SRP_cb_arg=parg;
3685                 break;
3686
3687         case SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH:
3688                 ctx->srp_ctx.strength=larg;
3689                 break;
3690 #endif
3691
3692         case SSL_CTRL_SET_CURVES:
3693                 return tls1_set_curves(&ctx->tlsext_ellipticcurvelist,
3694                                         &ctx->tlsext_ellipticcurvelist_length,
3695                                                                 parg, larg);
3696
3697         case SSL_CTRL_SET_CURVES_LIST:
3698                 return tls1_set_curves_list(&ctx->tlsext_ellipticcurvelist,
3699                                         &ctx->tlsext_ellipticcurvelist_length,
3700                                                                 parg);
3701         case SSL_CTRL_SET_ECDH_AUTO:
3702                 ctx->cert->ecdh_tmp_auto = larg;
3703                 break;
3704
3705         case SSL_CTRL_SET_SIGALGS:
3706                 return tls1_set_sigalgs(ctx->cert, parg, larg);
3707
3708         case SSL_CTRL_SET_SIGALGS_LIST:
3709                 return tls1_set_sigalgs_list(ctx->cert, parg);
3710
3711         case SSL_CTRL_SET_TLSEXT_AUTHZ_SERVER_AUDIT_PROOF_CB_ARG:
3712                 ctx->tlsext_authz_server_audit_proof_cb_arg = parg;
3713                 break;
3714
3715 #endif /* !OPENSSL_NO_TLSEXT */
3716
3717         /* A Thawte special :-) */
3718         case SSL_CTRL_EXTRA_CHAIN_CERT:
3719                 if (ctx->extra_certs == NULL)
3720                         {
3721                         if ((ctx->extra_certs=sk_X509_new_null()) == NULL)
3722                                 return(0);
3723                         }
3724                 sk_X509_push(ctx->extra_certs,(X509 *)parg);
3725                 break;
3726
3727         case SSL_CTRL_GET_EXTRA_CHAIN_CERTS:
3728                 *(STACK_OF(X509) **)parg =  ctx->extra_certs;
3729                 break;
3730
3731         case SSL_CTRL_CLEAR_EXTRA_CHAIN_CERTS:
3732                 if (ctx->extra_certs)
3733                         {
3734                         sk_X509_pop_free(ctx->extra_certs, X509_free);
3735                         ctx->extra_certs = NULL;
3736                         }
3737                 break;
3738
3739         case SSL_CTRL_CHAIN:
3740                 if (larg)
3741                         return ssl_cert_set1_chain(ctx->cert,
3742                                                 (STACK_OF (X509) *)parg);
3743                 else
3744                         return ssl_cert_set0_chain(ctx->cert,
3745                                                 (STACK_OF (X509) *)parg);
3746
3747         case SSL_CTRL_CHAIN_CERT:
3748                 if (larg)
3749                         return ssl_cert_add1_chain_cert(ctx->cert, (X509 *)parg);
3750                 else
3751                         return ssl_cert_add0_chain_cert(ctx->cert, (X509 *)parg);
3752
3753         default:
3754                 return(0);
3755                 }
3756         return(1);
3757         }
3758
3759 long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp)(void))
3760         {
3761         CERT *cert;
3762
3763         cert=ctx->cert;
3764
3765         switch (cmd)
3766                 {
3767 #ifndef OPENSSL_NO_RSA
3768         case SSL_CTRL_SET_TMP_RSA_CB:
3769                 {
3770                 cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
3771                 }
3772                 break;
3773 #endif
3774 #ifndef OPENSSL_NO_DH
3775         case SSL_CTRL_SET_TMP_DH_CB:
3776                 {
3777                 cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
3778                 }
3779                 break;
3780 #endif
3781 #ifndef OPENSSL_NO_ECDH
3782         case SSL_CTRL_SET_TMP_ECDH_CB:
3783                 {
3784                 cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;
3785                 }
3786                 break;
3787 #endif
3788 #ifndef OPENSSL_NO_TLSEXT
3789         case SSL_CTRL_SET_TLSEXT_SERVERNAME_CB:
3790                 ctx->tlsext_servername_callback=(int (*)(SSL *,int *,void *))fp;
3791                 break;
3792
3793 #ifdef TLSEXT_TYPE_opaque_prf_input
3794         case SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB:
3795                 ctx->tlsext_opaque_prf_input_callback = (int (*)(SSL *,void *, size_t, void *))fp;
3796                 break;
3797 #endif
3798
3799         case SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB:
3800                 ctx->tlsext_status_cb=(int (*)(SSL *,void *))fp;
3801                 break;
3802
3803         case SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB:
3804                 ctx->tlsext_ticket_key_cb=(int (*)(SSL *,unsigned char  *,
3805                                                 unsigned char *,
3806                                                 EVP_CIPHER_CTX *,
3807                                                 HMAC_CTX *, int))fp;
3808                 break;
3809
3810 #ifndef OPENSSL_NO_SRP
3811         case SSL_CTRL_SET_SRP_VERIFY_PARAM_CB:
3812                 ctx->srp_ctx.srp_Mask|=SSL_kSRP;
3813                 ctx->srp_ctx.SRP_verify_param_callback=(int (*)(SSL *,void *))fp;
3814                 break;
3815         case SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB:
3816                 ctx->srp_ctx.srp_Mask|=SSL_kSRP;
3817                 ctx->srp_ctx.TLS_ext_srp_username_callback=(int (*)(SSL *,int *,void *))fp;
3818                 break;
3819         case SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB:
3820                 ctx->srp_ctx.srp_Mask|=SSL_kSRP;
3821                 ctx->srp_ctx.SRP_give_srp_client_pwd_callback=(char *(*)(SSL *,void *))fp;
3822                 break;
3823 #endif
3824
3825         case SSL_CTRL_SET_TLSEXT_AUTHZ_SERVER_AUDIT_PROOF_CB:
3826                 ctx->tlsext_authz_server_audit_proof_cb =
3827                         (int (*)(SSL *, void *))fp;
3828                 break;
3829
3830 #endif
3831         case SSL_CTRL_SET_NOT_RESUMABLE_SESS_CB:
3832                 {
3833                 ctx->not_resumable_session_cb = (int (*)(SSL *, int))fp;
3834                 }
3835                 break;
3836         default:
3837                 return(0);
3838                 }
3839         return(1);
3840         }
3841
3842 /* This function needs to check if the ciphers required are actually
3843  * available */
3844 const SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
3845         {
3846         SSL_CIPHER c;
3847         const SSL_CIPHER *cp;
3848         unsigned long id;
3849
3850         id=0x03000000L|((unsigned long)p[0]<<8L)|(unsigned long)p[1];
3851         c.id=id;
3852         cp = OBJ_bsearch_ssl_cipher_id(&c, ssl3_ciphers, SSL3_NUM_CIPHERS);
3853 #ifdef DEBUG_PRINT_UNKNOWN_CIPHERSUITES
3854 if (cp == NULL) fprintf(stderr, "Unknown cipher ID %x\n", (p[0] << 8) | p[1]);
3855 #endif
3856         if (cp == NULL || cp->valid == 0)
3857                 return NULL;
3858         else
3859                 return cp;
3860         }
3861
3862 int ssl3_put_cipher_by_char(const SSL_CIPHER *c, unsigned char *p)
3863         {
3864         long l;
3865
3866         if (p != NULL)
3867                 {
3868                 l=c->id;
3869                 if ((l & 0xff000000) != 0x03000000) return(0);
3870                 p[0]=((unsigned char)(l>> 8L))&0xFF;
3871                 p[1]=((unsigned char)(l     ))&0xFF;
3872                 }
3873         return(2);
3874         }
3875
3876 SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
3877              STACK_OF(SSL_CIPHER) *srvr)
3878         {
3879         SSL_CIPHER *c,*ret=NULL;
3880         STACK_OF(SSL_CIPHER) *prio, *allow;
3881         int i,ii,ok;
3882         CERT *cert;
3883         unsigned long alg_k,alg_a,mask_k,mask_a,emask_k,emask_a;
3884
3885         /* Let's see which ciphers we can support */
3886         cert=s->cert;
3887
3888 #if 0
3889         /* Do not set the compare functions, because this may lead to a
3890          * reordering by "id". We want to keep the original ordering.
3891          * We may pay a price in performance during sk_SSL_CIPHER_find(),
3892          * but would have to pay with the price of sk_SSL_CIPHER_dup().
3893          */
3894         sk_SSL_CIPHER_set_cmp_func(srvr, ssl_cipher_ptr_id_cmp);
3895         sk_SSL_CIPHER_set_cmp_func(clnt, ssl_cipher_ptr_id_cmp);
3896 #endif
3897
3898 #ifdef CIPHER_DEBUG
3899         printf("Server has %d from %p:\n", sk_SSL_CIPHER_num(srvr), (void *)srvr);
3900         for(i=0 ; i < sk_SSL_CIPHER_num(srvr) ; ++i)
3901                 {
3902                 c=sk_SSL_CIPHER_value(srvr,i);
3903                 printf("%p:%s\n",(void *)c,c->name);
3904                 }
3905         printf("Client sent %d from %p:\n", sk_SSL_CIPHER_num(clnt), (void *)clnt);
3906         for(i=0 ; i < sk_SSL_CIPHER_num(clnt) ; ++i)
3907             {
3908             c=sk_SSL_CIPHER_value(clnt,i);
3909             printf("%p:%s\n",(void *)c,c->name);
3910             }
3911 #endif
3912
3913         if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE)
3914                 {
3915                 prio = srvr;
3916                 allow = clnt;
3917                 }
3918         else
3919                 {
3920                 prio = clnt;
3921                 allow = srvr;
3922                 }
3923
3924         for (i=0; i<sk_SSL_CIPHER_num(prio); i++)
3925                 {
3926                 c=sk_SSL_CIPHER_value(prio,i);
3927
3928                 /* Skip TLS v1.2 only ciphersuites if lower than v1.2 */
3929                 if ((c->algorithm_ssl & SSL_TLSV1_2) &&
3930                         (TLS1_get_version(s) < TLS1_2_VERSION))
3931                         continue;
3932
3933                 ssl_set_cert_masks(cert,c);
3934                 mask_k = cert->mask_k;
3935                 mask_a = cert->mask_a;
3936                 emask_k = cert->export_mask_k;
3937                 emask_a = cert->export_mask_a;
3938 #ifndef OPENSSL_NO_SRP
3939                 mask_k=cert->mask_k | s->srp_ctx.srp_Mask;
3940                 emask_k=cert->export_mask_k | s->srp_ctx.srp_Mask;
3941 #endif
3942
3943 #ifdef KSSL_DEBUG
3944 /*              printf("ssl3_choose_cipher %d alg= %lx\n", i,c->algorithms);*/
3945 #endif    /* KSSL_DEBUG */
3946
3947                 alg_k=c->algorithm_mkey;
3948                 alg_a=c->algorithm_auth;
3949
3950 #ifndef OPENSSL_NO_KRB5
3951                 if (alg_k & SSL_kKRB5)
3952                         {
3953                         if ( !kssl_keytab_is_available(s->kssl_ctx) )
3954                             continue;
3955                         }
3956 #endif /* OPENSSL_NO_KRB5 */
3957 #ifndef OPENSSL_NO_PSK
3958                 /* with PSK there must be server callback set */
3959                 if ((alg_k & SSL_kPSK) && s->psk_server_callback == NULL)
3960                         continue;
3961 #endif /* OPENSSL_NO_PSK */
3962
3963                 if (SSL_C_IS_EXPORT(c))
3964                         {
3965                         ok = (alg_k & emask_k) && (alg_a & emask_a);
3966 #ifdef CIPHER_DEBUG
3967                         printf("%d:[%08lX:%08lX:%08lX:%08lX]%p:%s (export)\n",ok,alg_k,alg_a,emask_k,emask_a,
3968                                (void *)c,c->name);
3969 #endif
3970                         }
3971                 else
3972                         {
3973                         ok = (alg_k & mask_k) && (alg_a & mask_a);
3974 #ifdef CIPHER_DEBUG
3975                         printf("%d:[%08lX:%08lX:%08lX:%08lX]%p:%s\n",ok,alg_k,alg_a,mask_k,mask_a,(void *)c,
3976                                c->name);
3977 #endif
3978                         }
3979
3980 #ifndef OPENSSL_NO_TLSEXT
3981 #ifndef OPENSSL_NO_EC
3982                 /* if we are considering an ECC cipher suite that uses our
3983                  * certificate check it */
3984                 if (alg_a & (SSL_aECDSA|SSL_aECDH))
3985                         ok = ok && tls1_check_ec_server_key(s);
3986                 /* if we are considering an ECC cipher suite that uses
3987                  * an ephemeral EC key check it */
3988                 if (alg_k & SSL_kEECDH)
3989                         ok = ok && tls1_check_ec_tmp_key(s);
3990 #endif /* OPENSSL_NO_EC */
3991 #endif /* OPENSSL_NO_TLSEXT */
3992
3993                 if (!ok) continue;
3994                 ii=sk_SSL_CIPHER_find(allow,c);
3995                 if (ii >= 0)
3996                         {
3997                         ret=sk_SSL_CIPHER_value(allow,ii);
3998                         break;
3999                         }
4000                 }
4001         return(ret);
4002         }
4003
4004 int ssl3_get_req_cert_type(SSL *s, unsigned char *p)
4005         {
4006         int ret=0;
4007         unsigned long alg_k;
4008
4009         alg_k = s->s3->tmp.new_cipher->algorithm_mkey;
4010
4011 #ifndef OPENSSL_NO_GOST
4012         if (s->version >= TLS1_VERSION)
4013                 {
4014                 if (alg_k & SSL_kGOST)
4015                         {
4016                         p[ret++]=TLS_CT_GOST94_SIGN;
4017                         p[ret++]=TLS_CT_GOST01_SIGN;
4018                         return(ret);
4019                         }
4020                 }
4021 #endif
4022
4023 #ifndef OPENSSL_NO_DH
4024         if (alg_k & (SSL_kDHr|SSL_kEDH))
4025                 {
4026 #  ifndef OPENSSL_NO_RSA
4027                 p[ret++]=SSL3_CT_RSA_FIXED_DH;
4028 #  endif
4029 #  ifndef OPENSSL_NO_DSA
4030                 p[ret++]=SSL3_CT_DSS_FIXED_DH;
4031 #  endif
4032                 }
4033         if ((s->version == SSL3_VERSION) &&
4034                 (alg_k & (SSL_kEDH|SSL_kDHd|SSL_kDHr)))
4035                 {
4036 #  ifndef OPENSSL_NO_RSA
4037                 p[ret++]=SSL3_CT_RSA_EPHEMERAL_DH;
4038 #  endif
4039 #  ifndef OPENSSL_NO_DSA
4040                 p[ret++]=SSL3_CT_DSS_EPHEMERAL_DH;
4041 #  endif
4042                 }
4043 #endif /* !OPENSSL_NO_DH */
4044 #ifndef OPENSSL_NO_RSA
4045         p[ret++]=SSL3_CT_RSA_SIGN;
4046 #endif
4047 #ifndef OPENSSL_NO_DSA
4048         p[ret++]=SSL3_CT_DSS_SIGN;
4049 #endif
4050 #ifndef OPENSSL_NO_ECDH
4051         if ((alg_k & (SSL_kECDHr|SSL_kECDHe)) && (s->version >= TLS1_VERSION))
4052                 {
4053                 p[ret++]=TLS_CT_RSA_FIXED_ECDH;
4054                 p[ret++]=TLS_CT_ECDSA_FIXED_ECDH;
4055                 }
4056 #endif
4057
4058 #ifndef OPENSSL_NO_ECDSA
4059         /* ECDSA certs can be used with RSA cipher suites as well
4060          * so we don't need to check for SSL_kECDH or SSL_kEECDH
4061          */
4062         if (s->version >= TLS1_VERSION)
4063                 {
4064                 p[ret++]=TLS_CT_ECDSA_SIGN;
4065                 }
4066 #endif
4067         return(ret);
4068         }
4069
4070 int ssl3_shutdown(SSL *s)
4071         {
4072         int ret;
4073
4074         /* Don't do anything much if we have not done the handshake or
4075          * we don't want to send messages :-) */
4076         if ((s->quiet_shutdown) || (s->state == SSL_ST_BEFORE))
4077                 {
4078                 s->shutdown=(SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
4079                 return(1);
4080                 }
4081
4082         if (!(s->shutdown & SSL_SENT_SHUTDOWN))
4083                 {
4084                 s->shutdown|=SSL_SENT_SHUTDOWN;
4085 #if 1
4086                 ssl3_send_alert(s,SSL3_AL_WARNING,SSL_AD_CLOSE_NOTIFY);
4087 #endif
4088                 /* our shutdown alert has been sent now, and if it still needs
4089                  * to be written, s->s3->alert_dispatch will be true */
4090                 if (s->s3->alert_dispatch)
4091                         return(-1);     /* return WANT_WRITE */
4092                 }
4093         else if (s->s3->alert_dispatch)
4094                 {
4095                 /* resend it if not sent */
4096 #if 1
4097                 ret=s->method->ssl_dispatch_alert(s);
4098                 if(ret == -1)
4099                         {
4100                         /* we only get to return -1 here the 2nd/Nth
4101                          * invocation, we must  have already signalled
4102                          * return 0 upon a previous invoation,
4103                          * return WANT_WRITE */
4104                         return(ret);
4105                         }
4106 #endif
4107                 }
4108         else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN))
4109                 {
4110                 /* If we are waiting for a close from our peer, we are closed */
4111                 s->method->ssl_read_bytes(s,0,NULL,0,0);
4112                 if(!(s->shutdown & SSL_RECEIVED_SHUTDOWN))
4113                         {
4114                         return(-1);     /* return WANT_READ */
4115                         }
4116                 }
4117
4118         if ((s->shutdown == (SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN)) &&
4119                 !s->s3->alert_dispatch)
4120                 return(1);
4121         else
4122                 return(0);
4123         }
4124
4125 int ssl3_write(SSL *s, const void *buf, int len)
4126         {
4127         int ret,n;
4128
4129 #if 0
4130         if (s->shutdown & SSL_SEND_SHUTDOWN)
4131                 {
4132                 s->rwstate=SSL_NOTHING;
4133                 return(0);
4134                 }
4135 #endif
4136         clear_sys_error();
4137         if (s->s3->renegotiate) ssl3_renegotiate_check(s);
4138
4139         /* This is an experimental flag that sends the
4140          * last handshake message in the same packet as the first
4141          * use data - used to see if it helps the TCP protocol during
4142          * session-id reuse */
4143         /* The second test is because the buffer may have been removed */
4144         if ((s->s3->flags & SSL3_FLAGS_POP_BUFFER) && (s->wbio == s->bbio))
4145                 {
4146                 /* First time through, we write into the buffer */
4147                 if (s->s3->delay_buf_pop_ret == 0)
4148                         {
4149                         ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
4150                                              buf,len);
4151                         if (ret <= 0) return(ret);
4152
4153                         s->s3->delay_buf_pop_ret=ret;
4154                         }
4155
4156                 s->rwstate=SSL_WRITING;
4157                 n=BIO_flush(s->wbio);
4158                 if (n <= 0) return(n);
4159                 s->rwstate=SSL_NOTHING;
4160
4161                 /* We have flushed the buffer, so remove it */
4162                 ssl_free_wbio_buffer(s);
4163                 s->s3->flags&= ~SSL3_FLAGS_POP_BUFFER;
4164
4165                 ret=s->s3->delay_buf_pop_ret;
4166                 s->s3->delay_buf_pop_ret=0;
4167                 }
4168         else
4169                 {
4170                 ret=s->method->ssl_write_bytes(s,SSL3_RT_APPLICATION_DATA,
4171                         buf,len);
4172                 if (ret <= 0) return(ret);
4173                 }
4174
4175         return(ret);
4176         }
4177
4178 static int ssl3_read_internal(SSL *s, void *buf, int len, int peek)
4179         {
4180         int ret;
4181
4182         clear_sys_error();
4183         if (s->s3->renegotiate) ssl3_renegotiate_check(s);
4184         s->s3->in_read_app_data=1;
4185         ret=s->method->ssl_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
4186         if ((ret == -1) && (s->s3->in_read_app_data == 2))
4187                 {
4188                 /* ssl3_read_bytes decided to call s->handshake_func, which
4189                  * called ssl3_read_bytes to read handshake data.
4190                  * However, ssl3_read_bytes actually found application data
4191                  * and thinks that application data makes sense here; so disable
4192                  * handshake processing and try to read application data again. */
4193                 s->in_handshake++;
4194                 ret=s->method->ssl_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
4195                 s->in_handshake--;
4196                 }
4197         else
4198                 s->s3->in_read_app_data=0;
4199
4200         return(ret);
4201         }
4202
4203 int ssl3_read(SSL *s, void *buf, int len)
4204         {
4205         return ssl3_read_internal(s, buf, len, 0);
4206         }
4207
4208 int ssl3_peek(SSL *s, void *buf, int len)
4209         {
4210         return ssl3_read_internal(s, buf, len, 1);
4211         }
4212
4213 int ssl3_renegotiate(SSL *s)
4214         {
4215         if (s->handshake_func == NULL)
4216                 return(1);
4217
4218         if (s->s3->flags & SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS)
4219                 return(0);
4220
4221         s->s3->renegotiate=1;
4222         return(1);
4223         }
4224
4225 int ssl3_renegotiate_check(SSL *s)
4226         {
4227         int ret=0;
4228
4229         if (s->s3->renegotiate)
4230                 {
4231                 if (    (s->s3->rbuf.left == 0) &&
4232                         (s->s3->wbuf.left == 0) &&
4233                         !SSL_in_init(s))
4234                         {
4235 /*
4236 if we are the server, and we have sent a 'RENEGOTIATE' message, we
4237 need to go to SSL_ST_ACCEPT.
4238 */
4239                         /* SSL_ST_ACCEPT */
4240                         s->state=SSL_ST_RENEGOTIATE;
4241                         s->s3->renegotiate=0;
4242                         s->s3->num_renegotiations++;
4243                         s->s3->total_renegotiations++;
4244                         ret=1;
4245                         }
4246                 }
4247         return(ret);
4248         }
4249 /* If we are using TLS v1.2 or later and default SHA1+MD5 algorithms switch
4250  * to new SHA256 PRF and handshake macs
4251  */
4252 long ssl_get_algorithm2(SSL *s)
4253         {
4254         long alg2 = s->s3->tmp.new_cipher->algorithm2;
4255         if (TLS1_get_version(s) >= TLS1_2_VERSION &&
4256             alg2 == (SSL_HANDSHAKE_MAC_DEFAULT|TLS1_PRF))
4257                 return SSL_HANDSHAKE_MAC_SHA256 | TLS1_PRF_SHA256;
4258         return alg2;
4259         }
4260