ssl/s3_lib.c

   1 /* ssl/s3_lib.c */
   2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   3  * All rights reserved.
   4  *
   5  * This package is an SSL implementation written
   6  * by Eric Young (eay@cryptsoft.com).
   7  * The implementation was written so as to conform with Netscapes SSL.
   8  *
   9  * This library is free for commercial and non-commercial use as long as
  10  * the following conditions are aheared to.  The following conditions
  11  * apply to all code found in this distribution, be it the RC4, RSA,
  12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  13  * included with this distribution is covered by the same copyright terms
  14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15  *
  16  * Copyright remains Eric Young's, and as such any Copyright notices in
  17  * the code are not to be removed.
  18  * If this package is used in a product, Eric Young should be given attribution
  19  * as the author of the parts of the library used.
  20  * This can be in the form of a textual message at program startup or
  21  * in documentation (online or textual) provided with the package.
  22  *
  23  * Redistribution and use in source and binary forms, with or without
  24  * modification, are permitted provided that the following conditions
  25  * are met:
  26  * 1. Redistributions of source code must retain the copyright
  27  *    notice, this list of conditions and the following disclaimer.
  28  * 2. Redistributions in binary form must reproduce the above copyright
  29  *    notice, this list of conditions and the following disclaimer in the
  30  *    documentation and/or other materials provided with the distribution.
  31  * 3. All advertising materials mentioning features or use of this software
  32  *    must display the following acknowledgement:
  33  *    "This product includes cryptographic software written by
  34  *     Eric Young (eay@cryptsoft.com)"
  35  *    The word 'cryptographic' can be left out if the rouines from the library
  36  *    being used are not cryptographic related :-).
  37  * 4. If you include any Windows specific code (or a derivative thereof) from
  38  *    the apps directory (application code) you must include an acknowledgement:
  39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  *
  53  * The licence and distribution terms for any publically available version or
  54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  55  * copied and put under another distribution licence
  56  * [including the GNU Public Licence.]
  57  */
  58 /* ====================================================================
  59  * Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
  60  *
  61  * Redistribution and use in source and binary forms, with or without
  62  * modification, are permitted provided that the following conditions
  63  * are met:
  64  *
  65  * 1. Redistributions of source code must retain the above copyright
  66  *    notice, this list of conditions and the following disclaimer.
  67  *
  68  * 2. Redistributions in binary form must reproduce the above copyright
  69  *    notice, this list of conditions and the following disclaimer in
  70  *    the documentation and/or other materials provided with the
  71  *    distribution.
  72  *
  73  * 3. All advertising materials mentioning features or use of this
  74  *    software must display the following acknowledgment:
  75  *    "This product includes software developed by the OpenSSL Project
  76  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77  *
  78  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79  *    endorse or promote products derived from this software without
  80  *    prior written permission. For written permission, please contact
  81  *    openssl-core@openssl.org.
  82  *
  83  * 5. Products derived from this software may not be called "OpenSSL"
  84  *    nor may "OpenSSL" appear in their names without prior written
  85  *    permission of the OpenSSL Project.
  86  *
  87  * 6. Redistributions of any form whatsoever must retain the following
  88  *    acknowledgment:
  89  *    "This product includes software developed by the OpenSSL Project
  90  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91  *
  92  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 100  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 101  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 102  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 103  * OF THE POSSIBILITY OF SUCH DAMAGE.
 104  * ====================================================================
 105  *
 106  * This product includes cryptographic software written by Eric Young
 107  * (eay@cryptsoft.com).  This product includes software written by Tim
 108  * Hudson (tjh@cryptsoft.com).
 109  *
 110  */
 111 /* ====================================================================
 112  * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
 113  *
 114  * Portions of the attached software ("Contribution") are developed by
 115  * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
 116  *
 117  * The Contribution is licensed pursuant to the OpenSSL open source
 118  * license provided above.
 119  *
 120  * ECC cipher suite support in OpenSSL originally written by
 121  * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
 122  *
 123  */
 124
 125 #include <stdio.h>
 126 #include <openssl/objects.h>
 127 #include "ssl_locl.h"
 128 #include "kssl_lcl.h"
 129 #include <openssl/md5.h>
 130 #ifndef OPENSSL_NO_DH
 131 #include <openssl/dh.h>
 132 #endif
 133 #include <openssl/pq_compat.h>
 134
 135 const char *ssl3_version_str="SSLv3" OPENSSL_VERSION_PTEXT;
 136
 137 #define SSL3_NUM_CIPHERS        (sizeof(ssl3_ciphers)/sizeof(SSL_CIPHER))
 138
 139 static long ssl3_default_timeout(void );
 140
 141 OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
 142 /* The RSA ciphers */
 143 /* Cipher 01 */
 144         {
 145         1,
 146         SSL3_TXT_RSA_NULL_MD5,
 147         SSL3_CK_RSA_NULL_MD5,
 148         SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_MD5|SSL_SSLV3,
 149         SSL_NOT_EXP|SSL_STRONG_NONE,
 150         0,
 151         0,
 152         0,
 153         SSL_ALL_CIPHERS,
 154         SSL_ALL_STRENGTHS,
 155         },
 156 /* Cipher 02 */
 157         {
 158         1,
 159         SSL3_TXT_RSA_NULL_SHA,
 160         SSL3_CK_RSA_NULL_SHA,
 161         SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_SHA1|SSL_SSLV3,
 162         SSL_NOT_EXP|SSL_STRONG_NONE,
 163         0,
 164         0,
 165         0,
 166         SSL_ALL_CIPHERS,
 167         SSL_ALL_STRENGTHS,
 168         },
 169
 170 /* anon DH */
 171 /* Cipher 17 */
 172         {
 173         1,
 174         SSL3_TXT_ADH_RC4_40_MD5,
 175         SSL3_CK_ADH_RC4_40_MD5,
 176         SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
 177         SSL_EXPORT|SSL_EXP40,
 178         0,
 179         40,
 180         128,
 181         SSL_ALL_CIPHERS,
 182         SSL_ALL_STRENGTHS,
 183         },
 184 /* Cipher 18 */
 185         {
 186         1,
 187         SSL3_TXT_ADH_RC4_128_MD5,
 188         SSL3_CK_ADH_RC4_128_MD5,
 189         SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
 190         SSL_NOT_EXP|SSL_MEDIUM,
 191         0,
 192         128,
 193         128,
 194         SSL_ALL_CIPHERS,
 195         SSL_ALL_STRENGTHS,
 196         },
 197 /* Cipher 19 */
 198         {
 199         1,
 200         SSL3_TXT_ADH_DES_40_CBC_SHA,
 201         SSL3_CK_ADH_DES_40_CBC_SHA,
 202         SSL_kEDH |SSL_aNULL|SSL_DES|SSL_SHA1|SSL_SSLV3,
 203         SSL_EXPORT|SSL_EXP40,
 204         0,
 205         40,
 206         128,
 207         SSL_ALL_CIPHERS,
 208         SSL_ALL_STRENGTHS,
 209         },
 210 /* Cipher 1A */
 211         {
 212         1,
 213         SSL3_TXT_ADH_DES_64_CBC_SHA,
 214         SSL3_CK_ADH_DES_64_CBC_SHA,
 215         SSL_kEDH |SSL_aNULL|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 216         SSL_NOT_EXP|SSL_LOW,
 217         0,
 218         56,
 219         56,
 220         SSL_ALL_CIPHERS,
 221         SSL_ALL_STRENGTHS,
 222         },
 223 /* Cipher 1B */
 224         {
 225         1,
 226         SSL3_TXT_ADH_DES_192_CBC_SHA,
 227         SSL3_CK_ADH_DES_192_CBC_SHA,
 228         SSL_kEDH |SSL_aNULL|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 229         SSL_NOT_EXP|SSL_HIGH,
 230         0,
 231         168,
 232         168,
 233         SSL_ALL_CIPHERS,
 234         SSL_ALL_STRENGTHS,
 235         },
 236
 237 /* RSA again */
 238 /* Cipher 03 */
 239         {
 240         1,
 241         SSL3_TXT_RSA_RC4_40_MD5,
 242         SSL3_CK_RSA_RC4_40_MD5,
 243         SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
 244         SSL_EXPORT|SSL_EXP40,
 245         0,
 246         40,
 247         128,
 248         SSL_ALL_CIPHERS,
 249         SSL_ALL_STRENGTHS,
 250         },
 251 /* Cipher 04 */
 252         {
 253         1,
 254         SSL3_TXT_RSA_RC4_128_MD5,
 255         SSL3_CK_RSA_RC4_128_MD5,
 256         SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5|SSL_SSLV3,
 257         SSL_NOT_EXP|SSL_MEDIUM,
 258         0,
 259         128,
 260         128,
 261         SSL_ALL_CIPHERS,
 262         SSL_ALL_STRENGTHS,
 263         },
 264 /* Cipher 05 */
 265         {
 266         1,
 267         SSL3_TXT_RSA_RC4_128_SHA,
 268         SSL3_CK_RSA_RC4_128_SHA,
 269         SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_SHA1|SSL_SSLV3,
 270         SSL_NOT_EXP|SSL_MEDIUM,
 271         0,
 272         128,
 273         128,
 274         SSL_ALL_CIPHERS,
 275         SSL_ALL_STRENGTHS,
 276         },
 277 /* Cipher 06 */
 278         {
 279         1,
 280         SSL3_TXT_RSA_RC2_40_MD5,
 281         SSL3_CK_RSA_RC2_40_MD5,
 282         SSL_kRSA|SSL_aRSA|SSL_RC2  |SSL_MD5 |SSL_SSLV3,
 283         SSL_EXPORT|SSL_EXP40,
 284         0,
 285         40,
 286         128,
 287         SSL_ALL_CIPHERS,
 288         SSL_ALL_STRENGTHS,
 289         },
 290 /* Cipher 07 */
 291 #ifndef OPENSSL_NO_IDEA
 292         {
 293         1,
 294         SSL3_TXT_RSA_IDEA_128_SHA,
 295         SSL3_CK_RSA_IDEA_128_SHA,
 296         SSL_kRSA|SSL_aRSA|SSL_IDEA |SSL_SHA1|SSL_SSLV3,
 297         SSL_NOT_EXP|SSL_MEDIUM,
 298         0,
 299         128,
 300         128,
 301         SSL_ALL_CIPHERS,
 302         SSL_ALL_STRENGTHS,
 303         },
 304 #endif
 305 /* Cipher 08 */
 306         {
 307         1,
 308         SSL3_TXT_RSA_DES_40_CBC_SHA,
 309         SSL3_CK_RSA_DES_40_CBC_SHA,
 310         SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
 311         SSL_EXPORT|SSL_EXP40,
 312         0,
 313         40,
 314         56,
 315         SSL_ALL_CIPHERS,
 316         SSL_ALL_STRENGTHS,
 317         },
 318 /* Cipher 09 */
 319         {
 320         1,
 321         SSL3_TXT_RSA_DES_64_CBC_SHA,
 322         SSL3_CK_RSA_DES_64_CBC_SHA,
 323         SSL_kRSA|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 324         SSL_NOT_EXP|SSL_LOW,
 325         0,
 326         56,
 327         56,
 328         SSL_ALL_CIPHERS,
 329         SSL_ALL_STRENGTHS,
 330         },
 331 /* Cipher 0A */
 332         {
 333         1,
 334         SSL3_TXT_RSA_DES_192_CBC3_SHA,
 335         SSL3_CK_RSA_DES_192_CBC3_SHA,
 336         SSL_kRSA|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 337         SSL_NOT_EXP|SSL_HIGH,
 338         0,
 339         168,
 340         168,
 341         SSL_ALL_CIPHERS,
 342         SSL_ALL_STRENGTHS,
 343         },
 344
 345 /*  The DH ciphers */
 346 /* Cipher 0B */
 347         {
 348         0,
 349         SSL3_TXT_DH_DSS_DES_40_CBC_SHA,
 350         SSL3_CK_DH_DSS_DES_40_CBC_SHA,
 351         SSL_kDHd |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
 352         SSL_EXPORT|SSL_EXP40,
 353         0,
 354         40,
 355         56,
 356         SSL_ALL_CIPHERS,
 357         SSL_ALL_STRENGTHS,
 358         },
 359 /* Cipher 0C */
 360         {
 361         0,
 362         SSL3_TXT_DH_DSS_DES_64_CBC_SHA,
 363         SSL3_CK_DH_DSS_DES_64_CBC_SHA,
 364         SSL_kDHd |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 365         SSL_NOT_EXP|SSL_LOW,
 366         0,
 367         56,
 368         56,
 369         SSL_ALL_CIPHERS,
 370         SSL_ALL_STRENGTHS,
 371         },
 372 /* Cipher 0D */
 373         {
 374         0,
 375         SSL3_TXT_DH_DSS_DES_192_CBC3_SHA,
 376         SSL3_CK_DH_DSS_DES_192_CBC3_SHA,
 377         SSL_kDHd |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 378         SSL_NOT_EXP|SSL_HIGH,
 379         0,
 380         168,
 381         168,
 382         SSL_ALL_CIPHERS,
 383         SSL_ALL_STRENGTHS,
 384         },
 385 /* Cipher 0E */
 386         {
 387         0,
 388         SSL3_TXT_DH_RSA_DES_40_CBC_SHA,
 389         SSL3_CK_DH_RSA_DES_40_CBC_SHA,
 390         SSL_kDHr |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
 391         SSL_EXPORT|SSL_EXP40,
 392         0,
 393         40,
 394         56,
 395         SSL_ALL_CIPHERS,
 396         SSL_ALL_STRENGTHS,
 397         },
 398 /* Cipher 0F */
 399         {
 400         0,
 401         SSL3_TXT_DH_RSA_DES_64_CBC_SHA,
 402         SSL3_CK_DH_RSA_DES_64_CBC_SHA,
 403         SSL_kDHr |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 404         SSL_NOT_EXP|SSL_LOW,
 405         0,
 406         56,
 407         56,
 408         SSL_ALL_CIPHERS,
 409         SSL_ALL_STRENGTHS,
 410         },
 411 /* Cipher 10 */
 412         {
 413         0,
 414         SSL3_TXT_DH_RSA_DES_192_CBC3_SHA,
 415         SSL3_CK_DH_RSA_DES_192_CBC3_SHA,
 416         SSL_kDHr |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 417         SSL_NOT_EXP|SSL_HIGH,
 418         0,
 419         168,
 420         168,
 421         SSL_ALL_CIPHERS,
 422         SSL_ALL_STRENGTHS,
 423         },
 424
 425 /* The Ephemeral DH ciphers */
 426 /* Cipher 11 */
 427         {
 428         1,
 429         SSL3_TXT_EDH_DSS_DES_40_CBC_SHA,
 430         SSL3_CK_EDH_DSS_DES_40_CBC_SHA,
 431         SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA1|SSL_SSLV3,
 432         SSL_EXPORT|SSL_EXP40,
 433         0,
 434         40,
 435         56,
 436         SSL_ALL_CIPHERS,
 437         SSL_ALL_STRENGTHS,
 438         },
 439 /* Cipher 12 */
 440         {
 441         1,
 442         SSL3_TXT_EDH_DSS_DES_64_CBC_SHA,
 443         SSL3_CK_EDH_DSS_DES_64_CBC_SHA,
 444         SSL_kEDH|SSL_aDSS|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 445         SSL_NOT_EXP|SSL_LOW,
 446         0,
 447         56,
 448         56,
 449         SSL_ALL_CIPHERS,
 450         SSL_ALL_STRENGTHS,
 451         },
 452 /* Cipher 13 */
 453         {
 454         1,
 455         SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA,
 456         SSL3_CK_EDH_DSS_DES_192_CBC3_SHA,
 457         SSL_kEDH|SSL_aDSS|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 458         SSL_NOT_EXP|SSL_HIGH,
 459         0,
 460         168,
 461         168,
 462         SSL_ALL_CIPHERS,
 463         SSL_ALL_STRENGTHS,
 464         },
 465 /* Cipher 14 */
 466         {
 467         1,
 468         SSL3_TXT_EDH_RSA_DES_40_CBC_SHA,
 469         SSL3_CK_EDH_RSA_DES_40_CBC_SHA,
 470         SSL_kEDH|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
 471         SSL_EXPORT|SSL_EXP40,
 472         0,
 473         40,
 474         56,
 475         SSL_ALL_CIPHERS,
 476         SSL_ALL_STRENGTHS,
 477         },
 478 /* Cipher 15 */
 479         {
 480         1,
 481         SSL3_TXT_EDH_RSA_DES_64_CBC_SHA,
 482         SSL3_CK_EDH_RSA_DES_64_CBC_SHA,
 483         SSL_kEDH|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 484         SSL_NOT_EXP|SSL_LOW,
 485         0,
 486         56,
 487         56,
 488         SSL_ALL_CIPHERS,
 489         SSL_ALL_STRENGTHS,
 490         },
 491 /* Cipher 16 */
 492         {
 493         1,
 494         SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA,
 495         SSL3_CK_EDH_RSA_DES_192_CBC3_SHA,
 496         SSL_kEDH|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 497         SSL_NOT_EXP|SSL_HIGH,
 498         0,
 499         168,
 500         168,
 501         SSL_ALL_CIPHERS,
 502         SSL_ALL_STRENGTHS,
 503         },
 504
 505 /* Fortezza */
 506 /* Cipher 1C */
 507         {
 508         0,
 509         SSL3_TXT_FZA_DMS_NULL_SHA,
 510         SSL3_CK_FZA_DMS_NULL_SHA,
 511         SSL_kFZA|SSL_aFZA |SSL_eNULL |SSL_SHA1|SSL_SSLV3,
 512         SSL_NOT_EXP|SSL_STRONG_NONE,
 513         0,
 514         0,
 515         0,
 516         SSL_ALL_CIPHERS,
 517         SSL_ALL_STRENGTHS,
 518         },
 519
 520 /* Cipher 1D */
 521         {
 522         0,
 523         SSL3_TXT_FZA_DMS_FZA_SHA,
 524         SSL3_CK_FZA_DMS_FZA_SHA,
 525         SSL_kFZA|SSL_aFZA |SSL_eFZA |SSL_SHA1|SSL_SSLV3,
 526         SSL_NOT_EXP|SSL_STRONG_NONE,
 527         0,
 528         0,
 529         0,
 530         SSL_ALL_CIPHERS,
 531         SSL_ALL_STRENGTHS,
 532         },
 533
 534 #if 0
 535 /* Cipher 1E */
 536         {
 537         0,
 538         SSL3_TXT_FZA_DMS_RC4_SHA,
 539         SSL3_CK_FZA_DMS_RC4_SHA,
 540         SSL_kFZA|SSL_aFZA |SSL_RC4  |SSL_SHA1|SSL_SSLV3,
 541         SSL_NOT_EXP|SSL_MEDIUM,
 542         0,
 543         128,
 544         128,
 545         SSL_ALL_CIPHERS,
 546         SSL_ALL_STRENGTHS,
 547         },
 548 #endif
 549
 550 #ifndef OPENSSL_NO_KRB5
 551 /* The Kerberos ciphers
 552 ** 20000107 VRS: And the first shall be last,
 553 ** in hopes of avoiding the lynx ssl renegotiation problem.
 554 */
 555 /* Cipher 1E VRS */
 556         {
 557         1,
 558         SSL3_TXT_KRB5_DES_64_CBC_SHA,
 559         SSL3_CK_KRB5_DES_64_CBC_SHA,
 560         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_SHA1   |SSL_SSLV3,
 561         SSL_NOT_EXP|SSL_LOW,
 562         0,
 563         56,
 564         56,
 565         SSL_ALL_CIPHERS,
 566         SSL_ALL_STRENGTHS,
 567         },
 568
 569 /* Cipher 1F VRS */
 570         {
 571         1,
 572         SSL3_TXT_KRB5_DES_192_CBC3_SHA,
 573         SSL3_CK_KRB5_DES_192_CBC3_SHA,
 574         SSL_kKRB5|SSL_aKRB5|  SSL_3DES|SSL_SHA1  |SSL_SSLV3,
 575         SSL_NOT_EXP|SSL_HIGH,
 576         0,
 577         112,
 578         168,
 579         SSL_ALL_CIPHERS,
 580         SSL_ALL_STRENGTHS,
 581         },
 582
 583 /* Cipher 20 VRS */
 584         {
 585         1,
 586         SSL3_TXT_KRB5_RC4_128_SHA,
 587         SSL3_CK_KRB5_RC4_128_SHA,
 588         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_SHA1  |SSL_SSLV3,
 589         SSL_NOT_EXP|SSL_MEDIUM,
 590         0,
 591         128,
 592         128,
 593         SSL_ALL_CIPHERS,
 594         SSL_ALL_STRENGTHS,
 595         },
 596
 597 /* Cipher 21 VRS */
 598         {
 599         1,
 600         SSL3_TXT_KRB5_IDEA_128_CBC_SHA,
 601         SSL3_CK_KRB5_IDEA_128_CBC_SHA,
 602         SSL_kKRB5|SSL_aKRB5|  SSL_IDEA|SSL_SHA1  |SSL_SSLV3,
 603         SSL_NOT_EXP|SSL_MEDIUM,
 604         0,
 605         128,
 606         128,
 607         SSL_ALL_CIPHERS,
 608         SSL_ALL_STRENGTHS,
 609         },
 610
 611 /* Cipher 22 VRS */
 612         {
 613         1,
 614         SSL3_TXT_KRB5_DES_64_CBC_MD5,
 615         SSL3_CK_KRB5_DES_64_CBC_MD5,
 616         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_MD5    |SSL_SSLV3,
 617         SSL_NOT_EXP|SSL_LOW,
 618         0,
 619         56,
 620         56,
 621         SSL_ALL_CIPHERS,
 622         SSL_ALL_STRENGTHS,
 623         },
 624
 625 /* Cipher 23 VRS */
 626         {
 627         1,
 628         SSL3_TXT_KRB5_DES_192_CBC3_MD5,
 629         SSL3_CK_KRB5_DES_192_CBC3_MD5,
 630         SSL_kKRB5|SSL_aKRB5|  SSL_3DES|SSL_MD5   |SSL_SSLV3,
 631         SSL_NOT_EXP|SSL_HIGH,
 632         0,
 633         112,
 634         168,
 635         SSL_ALL_CIPHERS,
 636         SSL_ALL_STRENGTHS,
 637         },
 638
 639 /* Cipher 24 VRS */
 640         {
 641         1,
 642         SSL3_TXT_KRB5_RC4_128_MD5,
 643         SSL3_CK_KRB5_RC4_128_MD5,
 644         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_MD5  |SSL_SSLV3,
 645         SSL_NOT_EXP|SSL_MEDIUM,
 646         0,
 647         128,
 648         128,
 649         SSL_ALL_CIPHERS,
 650         SSL_ALL_STRENGTHS,
 651         },
 652
 653 /* Cipher 25 VRS */
 654         {
 655         1,
 656         SSL3_TXT_KRB5_IDEA_128_CBC_MD5,
 657         SSL3_CK_KRB5_IDEA_128_CBC_MD5,
 658         SSL_kKRB5|SSL_aKRB5|  SSL_IDEA|SSL_MD5  |SSL_SSLV3,
 659         SSL_NOT_EXP|SSL_MEDIUM,
 660         0,
 661         128,
 662         128,
 663         SSL_ALL_CIPHERS,
 664         SSL_ALL_STRENGTHS,
 665         },
 666
 667 /* Cipher 26 VRS */
 668         {
 669         1,
 670         SSL3_TXT_KRB5_DES_40_CBC_SHA,
 671         SSL3_CK_KRB5_DES_40_CBC_SHA,
 672         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_SHA1   |SSL_SSLV3,
 673         SSL_EXPORT|SSL_EXP40,
 674         0,
 675         40,
 676         56,
 677         SSL_ALL_CIPHERS,
 678         SSL_ALL_STRENGTHS,
 679         },
 680
 681 /* Cipher 27 VRS */
 682         {
 683         1,
 684         SSL3_TXT_KRB5_RC2_40_CBC_SHA,
 685         SSL3_CK_KRB5_RC2_40_CBC_SHA,
 686         SSL_kKRB5|SSL_aKRB5|  SSL_RC2|SSL_SHA1   |SSL_SSLV3,
 687         SSL_EXPORT|SSL_EXP40,
 688         0,
 689         40,
 690         128,
 691         SSL_ALL_CIPHERS,
 692         SSL_ALL_STRENGTHS,
 693         },
 694
 695 /* Cipher 28 VRS */
 696         {
 697         1,
 698         SSL3_TXT_KRB5_RC4_40_SHA,
 699         SSL3_CK_KRB5_RC4_40_SHA,
 700         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_SHA1   |SSL_SSLV3,
 701         SSL_EXPORT|SSL_EXP40,
 702         0,
 703         128,
 704         128,
 705         SSL_ALL_CIPHERS,
 706         SSL_ALL_STRENGTHS,
 707         },
 708
 709 /* Cipher 29 VRS */
 710         {
 711         1,
 712         SSL3_TXT_KRB5_DES_40_CBC_MD5,
 713         SSL3_CK_KRB5_DES_40_CBC_MD5,
 714         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_MD5    |SSL_SSLV3,
 715         SSL_EXPORT|SSL_EXP40,
 716         0,
 717         40,
 718         56,
 719         SSL_ALL_CIPHERS,
 720         SSL_ALL_STRENGTHS,
 721         },
 722
 723 /* Cipher 2A VRS */
 724         {
 725         1,
 726         SSL3_TXT_KRB5_RC2_40_CBC_MD5,
 727         SSL3_CK_KRB5_RC2_40_CBC_MD5,
 728         SSL_kKRB5|SSL_aKRB5|  SSL_RC2|SSL_MD5    |SSL_SSLV3,
 729         SSL_EXPORT|SSL_EXP40,
 730         0,
 731         40,
 732         128,
 733         SSL_ALL_CIPHERS,
 734         SSL_ALL_STRENGTHS,
 735         },
 736
 737 /* Cipher 2B VRS */
 738         {
 739         1,
 740         SSL3_TXT_KRB5_RC4_40_MD5,
 741         SSL3_CK_KRB5_RC4_40_MD5,
 742         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_MD5    |SSL_SSLV3,
 743         SSL_EXPORT|SSL_EXP40,
 744         0,
 745         128,
 746         128,
 747         SSL_ALL_CIPHERS,
 748         SSL_ALL_STRENGTHS,
 749         },
 750 #endif  /* OPENSSL_NO_KRB5 */
 751
 752
 753 #if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES
 754         /* New TLS Export CipherSuites */
 755         /* Cipher 60 */
 756             {
 757             1,
 758             TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5,
 759             TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5,
 760             SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_MD5|SSL_TLSV1,
 761             SSL_EXPORT|SSL_EXP56,
 762             0,
 763             56,
 764             128,
 765             SSL_ALL_CIPHERS,
 766             SSL_ALL_STRENGTHS,
 767             },
 768         /* Cipher 61 */
 769             {
 770             1,
 771             TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
 772             TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
 773             SSL_kRSA|SSL_aRSA|SSL_RC2|SSL_MD5|SSL_TLSV1,
 774             SSL_EXPORT|SSL_EXP56,
 775             0,
 776             56,
 777             128,
 778             SSL_ALL_CIPHERS,
 779             SSL_ALL_STRENGTHS,
 780             },
 781         /* Cipher 62 */
 782             {
 783             1,
 784             TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA,
 785             TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA,
 786             SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA|SSL_TLSV1,
 787             SSL_EXPORT|SSL_EXP56,
 788             0,
 789             56,
 790             56,
 791             SSL_ALL_CIPHERS,
 792             SSL_ALL_STRENGTHS,
 793             },
 794         /* Cipher 63 */
 795             {
 796             1,
 797             TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
 798             TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
 799             SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA|SSL_TLSV1,
 800             SSL_EXPORT|SSL_EXP56,
 801             0,
 802             56,
 803             56,
 804             SSL_ALL_CIPHERS,
 805             SSL_ALL_STRENGTHS,
 806             },
 807         /* Cipher 64 */
 808             {
 809             1,
 810             TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA,
 811             TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA,
 812             SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
 813             SSL_EXPORT|SSL_EXP56,
 814             0,
 815             56,
 816             128,
 817             SSL_ALL_CIPHERS,
 818             SSL_ALL_STRENGTHS,
 819             },
 820         /* Cipher 65 */
 821             {
 822             1,
 823             TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
 824             TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
 825             SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
 826             SSL_EXPORT|SSL_EXP56,
 827             0,
 828             56,
 829             128,
 830             SSL_ALL_CIPHERS,
 831             SSL_ALL_STRENGTHS,
 832             },
 833         /* Cipher 66 */
 834             {
 835             1,
 836             TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA,
 837             TLS1_CK_DHE_DSS_WITH_RC4_128_SHA,
 838             SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
 839             SSL_NOT_EXP|SSL_MEDIUM,
 840             0,
 841             128,
 842             128,
 843             SSL_ALL_CIPHERS,
 844             SSL_ALL_STRENGTHS
 845             },
 846 #endif
 847         /* New AES ciphersuites */
 848
 849         /* Cipher 2F */
 850             {
 851             1,
 852             TLS1_TXT_RSA_WITH_AES_128_SHA,
 853             TLS1_CK_RSA_WITH_AES_128_SHA,
 854             SSL_kRSA|SSL_aRSA|SSL_AES|SSL_SHA |SSL_TLSV1,
 855             SSL_NOT_EXP|SSL_MEDIUM,
 856             0,
 857             128,
 858             128,
 859             SSL_ALL_CIPHERS,
 860             SSL_ALL_STRENGTHS,
 861             },
 862         /* Cipher 30 */
 863             {
 864             0,
 865             TLS1_TXT_DH_DSS_WITH_AES_128_SHA,
 866             TLS1_CK_DH_DSS_WITH_AES_128_SHA,
 867             SSL_kDHd|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 868             SSL_NOT_EXP|SSL_MEDIUM,
 869             0,
 870             128,
 871             128,
 872             SSL_ALL_CIPHERS,
 873             SSL_ALL_STRENGTHS,
 874             },
 875         /* Cipher 31 */
 876             {
 877             0,
 878             TLS1_TXT_DH_RSA_WITH_AES_128_SHA,
 879             TLS1_CK_DH_RSA_WITH_AES_128_SHA,
 880             SSL_kDHr|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 881             SSL_NOT_EXP|SSL_MEDIUM,
 882             0,
 883             128,
 884             128,
 885             SSL_ALL_CIPHERS,
 886             SSL_ALL_STRENGTHS,
 887             },
 888         /* Cipher 32 */
 889             {
 890             1,
 891             TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,
 892             TLS1_CK_DHE_DSS_WITH_AES_128_SHA,
 893             SSL_kEDH|SSL_aDSS|SSL_AES|SSL_SHA|SSL_TLSV1,
 894             SSL_NOT_EXP|SSL_MEDIUM,
 895             0,
 896             128,
 897             128,
 898             SSL_ALL_CIPHERS,
 899             SSL_ALL_STRENGTHS,
 900             },
 901         /* Cipher 33 */
 902             {
 903             1,
 904             TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,
 905             TLS1_CK_DHE_RSA_WITH_AES_128_SHA,
 906             SSL_kEDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
 907             SSL_NOT_EXP|SSL_MEDIUM,
 908             0,
 909             128,
 910             128,
 911             SSL_ALL_CIPHERS,
 912             SSL_ALL_STRENGTHS,
 913             },
 914         /* Cipher 34 */
 915             {
 916             1,
 917             TLS1_TXT_ADH_WITH_AES_128_SHA,
 918             TLS1_CK_ADH_WITH_AES_128_SHA,
 919             SSL_kEDH|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,
 920             SSL_NOT_EXP|SSL_MEDIUM,
 921             0,
 922             128,
 923             128,
 924             SSL_ALL_CIPHERS,
 925             SSL_ALL_STRENGTHS,
 926             },
 927
 928         /* Cipher 35 */
 929             {
 930             1,
 931             TLS1_TXT_RSA_WITH_AES_256_SHA,
 932             TLS1_CK_RSA_WITH_AES_256_SHA,
 933             SSL_kRSA|SSL_aRSA|SSL_AES|SSL_SHA |SSL_TLSV1,
 934             SSL_NOT_EXP|SSL_HIGH,
 935             0,
 936             256,
 937             256,
 938             SSL_ALL_CIPHERS,
 939             SSL_ALL_STRENGTHS,
 940             },
 941         /* Cipher 36 */
 942             {
 943             0,
 944             TLS1_TXT_DH_DSS_WITH_AES_256_SHA,
 945             TLS1_CK_DH_DSS_WITH_AES_256_SHA,
 946             SSL_kDHd|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 947             SSL_NOT_EXP|SSL_HIGH,
 948             0,
 949             256,
 950             256,
 951             SSL_ALL_CIPHERS,
 952             SSL_ALL_STRENGTHS,
 953             },
 954         /* Cipher 37 */
 955             {
 956             0,
 957             TLS1_TXT_DH_RSA_WITH_AES_256_SHA,
 958             TLS1_CK_DH_RSA_WITH_AES_256_SHA,
 959             SSL_kDHr|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 960             SSL_NOT_EXP|SSL_HIGH,
 961             0,
 962             256,
 963             256,
 964             SSL_ALL_CIPHERS,
 965             SSL_ALL_STRENGTHS,
 966             },
 967         /* Cipher 38 */
 968             {
 969             1,
 970             TLS1_TXT_DHE_DSS_WITH_AES_256_SHA,
 971             TLS1_CK_DHE_DSS_WITH_AES_256_SHA,
 972             SSL_kEDH|SSL_aDSS|SSL_AES|SSL_SHA|SSL_TLSV1,
 973             SSL_NOT_EXP|SSL_HIGH,
 974             0,
 975             256,
 976             256,
 977             SSL_ALL_CIPHERS,
 978             SSL_ALL_STRENGTHS,
 979             },
 980         /* Cipher 39 */
 981             {
 982             1,
 983             TLS1_TXT_DHE_RSA_WITH_AES_256_SHA,
 984             TLS1_CK_DHE_RSA_WITH_AES_256_SHA,
 985             SSL_kEDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
 986             SSL_NOT_EXP|SSL_HIGH,
 987             0,
 988             256,
 989             256,
 990             SSL_ALL_CIPHERS,
 991             SSL_ALL_STRENGTHS,
 992             },
 993         /* Cipher 3A */
 994             {
 995             1,
 996             TLS1_TXT_ADH_WITH_AES_256_SHA,
 997             TLS1_CK_ADH_WITH_AES_256_SHA,
 998             SSL_kEDH|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,
 999             SSL_NOT_EXP|SSL_HIGH,
1000             0,
1001             256,
1002             256,
1003             SSL_ALL_CIPHERS,
1004             SSL_ALL_STRENGTHS,
1005             },
1006
1007 #ifndef OPENSSL_NO_ECDH
1008         /* Cipher 47 */
1009             {
1010             1,
1011             TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA,
1012             TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA,
1013             SSL_kECDH|SSL_aECDSA|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1014             SSL_NOT_EXP,
1015             0,
1016             0,
1017             0,
1018             SSL_ALL_CIPHERS,
1019             SSL_ALL_STRENGTHS,
1020             },
1021
1022         /* Cipher 48 */
1023             {
1024             1,
1025             TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA,
1026             TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA,
1027             SSL_kECDH|SSL_aECDSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1028             SSL_NOT_EXP,
1029             0,
1030             128,
1031             128,
1032             SSL_ALL_CIPHERS,
1033             SSL_ALL_STRENGTHS,
1034             },
1035
1036         /* Cipher 49 */
1037             {
1038             1,
1039             TLS1_TXT_ECDH_ECDSA_WITH_DES_CBC_SHA,
1040             TLS1_CK_ECDH_ECDSA_WITH_DES_CBC_SHA,
1041             SSL_kECDH|SSL_aECDSA|SSL_DES|SSL_SHA|SSL_TLSV1,
1042             SSL_NOT_EXP|SSL_LOW,
1043             0,
1044             56,
1045             56,
1046             SSL_ALL_CIPHERS,
1047             SSL_ALL_STRENGTHS,
1048             },
1049
1050         /* Cipher 4A */
1051             {
1052             1,
1053             TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA,
1054             TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA,
1055             SSL_kECDH|SSL_aECDSA|SSL_3DES|SSL_SHA|SSL_TLSV1,
1056             SSL_NOT_EXP|SSL_HIGH,
1057             0,
1058             168,
1059             168,
1060             SSL_ALL_CIPHERS,
1061             SSL_ALL_STRENGTHS,
1062             },
1063
1064         /* Cipher 4B */
1065             {
1066             1,
1067             TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
1068             TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
1069             SSL_kECDH|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1070             SSL_NOT_EXP|SSL_MEDIUM,
1071             0,
1072             128,
1073             128,
1074             SSL_ALL_CIPHERS,
1075             SSL_ALL_STRENGTHS,
1076             },
1077
1078         /* Cipher 4C */
1079             {
1080             1,
1081             TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
1082             TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
1083             SSL_kECDH|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1084             SSL_NOT_EXP|SSL_HIGH,
1085             0,
1086             256,
1087             256,
1088             SSL_ALL_CIPHERS,
1089             SSL_ALL_STRENGTHS,
1090             },
1091
1092         /* Cipher 5B */
1093         /* XXX NOTE: The ECC/TLS draft has a bug and reuses 4B for this */
1094             {
1095             1,
1096             TLS1_TXT_ECDH_ECDSA_EXPORT_WITH_RC4_40_SHA,
1097             TLS1_CK_ECDH_ECDSA_EXPORT_WITH_RC4_40_SHA,
1098             SSL_kECDH|SSL_aECDSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1099             SSL_EXPORT|SSL_EXP40,
1100             0,
1101             40,
1102             128,
1103             SSL_ALL_CIPHERS,
1104             SSL_ALL_STRENGTHS,
1105             },
1106
1107         /* Cipher 5C */
1108         /* XXX NOTE: The ECC/TLS draft has a bug and reuses 4C for this */
1109             {
1110             1,
1111             TLS1_TXT_ECDH_ECDSA_EXPORT_WITH_RC4_56_SHA,
1112             TLS1_CK_ECDH_ECDSA_EXPORT_WITH_RC4_56_SHA,
1113             SSL_kECDH|SSL_aECDSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1114             SSL_EXPORT|SSL_EXP56,
1115             0,
1116             56,
1117             128,
1118             SSL_ALL_CIPHERS,
1119             SSL_ALL_STRENGTHS,
1120             },
1121
1122         /* Cipher 4D */
1123             {
1124             1,
1125             TLS1_TXT_ECDH_RSA_WITH_NULL_SHA,
1126             TLS1_CK_ECDH_RSA_WITH_NULL_SHA,
1127             SSL_kECDH|SSL_aRSA|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1128             SSL_NOT_EXP,
1129             0,
1130             0,
1131             0,
1132             SSL_ALL_CIPHERS,
1133             SSL_ALL_STRENGTHS,
1134             },
1135
1136         /* Cipher 4E */
1137             {
1138             1,
1139             TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA,
1140             TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA,
1141             SSL_kECDH|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1142             SSL_NOT_EXP,
1143             0,
1144             128,
1145             128,
1146             SSL_ALL_CIPHERS,
1147             SSL_ALL_STRENGTHS,
1148             },
1149
1150         /* Cipher 4F */
1151             {
1152             1,
1153             TLS1_TXT_ECDH_RSA_WITH_DES_CBC_SHA,
1154             TLS1_CK_ECDH_RSA_WITH_DES_CBC_SHA,
1155             SSL_kECDH|SSL_aRSA|SSL_DES|SSL_SHA|SSL_TLSV1,
1156             SSL_NOT_EXP|SSL_LOW,
1157             0,
1158             56,
1159             56,
1160             SSL_ALL_CIPHERS,
1161             SSL_ALL_STRENGTHS,
1162             },
1163
1164         /* Cipher 50 */
1165             {
1166             1,
1167             TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA,
1168             TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA,
1169             SSL_kECDH|SSL_aRSA|SSL_3DES|SSL_SHA|SSL_TLSV1,
1170             SSL_NOT_EXP|SSL_HIGH,
1171             0,
1172             168,
1173             168,
1174             SSL_ALL_CIPHERS,
1175             SSL_ALL_STRENGTHS,
1176             },
1177
1178         /* Cipher 51 */
1179             {
1180             1,
1181             TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA,
1182             TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA,
1183             SSL_kECDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1184             SSL_NOT_EXP|SSL_MEDIUM,
1185             0,
1186             128,
1187             128,
1188             SSL_ALL_CIPHERS,
1189             SSL_ALL_STRENGTHS,
1190             },
1191
1192         /* Cipher 52 */
1193             {
1194             1,
1195             TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA,
1196             TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA,
1197             SSL_kECDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1198             SSL_NOT_EXP|SSL_HIGH,
1199             0,
1200             256,
1201             256,
1202             SSL_ALL_CIPHERS,
1203             SSL_ALL_STRENGTHS,
1204             },
1205
1206         /* Cipher 53 */
1207             {
1208             1,
1209             TLS1_TXT_ECDH_RSA_EXPORT_WITH_RC4_40_SHA,
1210             TLS1_CK_ECDH_RSA_EXPORT_WITH_RC4_40_SHA,
1211             SSL_kECDH|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1212             SSL_EXPORT|SSL_EXP40,
1213             0,
1214             40,
1215             128,
1216             SSL_ALL_CIPHERS,
1217             SSL_ALL_STRENGTHS,
1218             },
1219
1220         /* Cipher 54 */
1221             {
1222             1,
1223             TLS1_TXT_ECDH_RSA_EXPORT_WITH_RC4_56_SHA,
1224             TLS1_CK_ECDH_RSA_EXPORT_WITH_RC4_56_SHA,
1225             SSL_kECDH|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1226             SSL_EXPORT|SSL_EXP56,
1227             0,
1228             56,
1229             128,
1230             SSL_ALL_CIPHERS,
1231             SSL_ALL_STRENGTHS,
1232             },
1233
1234         /* Cipher 55 */
1235             {
1236             1,
1237             TLS1_TXT_ECDH_anon_WITH_NULL_SHA,
1238             TLS1_CK_ECDH_anon_WITH_NULL_SHA,
1239             SSL_kECDHE|SSL_aNULL|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1240             SSL_NOT_EXP,
1241             0,
1242             0,
1243             0,
1244             SSL_ALL_CIPHERS,
1245             SSL_ALL_STRENGTHS,
1246             },
1247
1248         /* Cipher 56 */
1249             {
1250             1,
1251             TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA,
1252             TLS1_CK_ECDH_anon_WITH_RC4_128_SHA,
1253             SSL_kECDHE|SSL_aNULL|SSL_RC4|SSL_SHA|SSL_TLSV1,
1254             SSL_NOT_EXP,
1255             0,
1256             128,
1257             128,
1258             SSL_ALL_CIPHERS,
1259             SSL_ALL_STRENGTHS,
1260             },
1261
1262         /* Cipher 57 */
1263             {
1264             1,
1265             TLS1_TXT_ECDH_anon_WITH_DES_CBC_SHA,
1266             TLS1_CK_ECDH_anon_WITH_DES_CBC_SHA,
1267             SSL_kECDHE|SSL_aNULL|SSL_DES|SSL_SHA|SSL_TLSV1,
1268             SSL_NOT_EXP|SSL_LOW,
1269             0,
1270             56,
1271             56,
1272             SSL_ALL_CIPHERS,
1273             SSL_ALL_STRENGTHS,
1274             },
1275
1276         /* Cipher 58 */
1277             {
1278             1,
1279             TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA,
1280             TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA,
1281             SSL_kECDHE|SSL_aNULL|SSL_3DES|SSL_SHA|SSL_TLSV1,
1282             SSL_NOT_EXP|SSL_HIGH,
1283             0,
1284             168,
1285             168,
1286             SSL_ALL_CIPHERS,
1287             SSL_ALL_STRENGTHS,
1288             },
1289
1290         /* Cipher 59 */
1291             {
1292             1,
1293             TLS1_TXT_ECDH_anon_EXPORT_WITH_DES_40_CBC_SHA,
1294             TLS1_CK_ECDH_anon_EXPORT_WITH_DES_40_CBC_SHA,
1295             SSL_kECDHE|SSL_aNULL|SSL_DES|SSL_SHA|SSL_TLSV1,
1296             SSL_EXPORT|SSL_EXP40,
1297             0,
1298             40,
1299             56,
1300             SSL_ALL_CIPHERS,
1301             SSL_ALL_STRENGTHS,
1302             },
1303
1304         /* Cipher 5A */
1305             {
1306             1,
1307             TLS1_TXT_ECDH_anon_EXPORT_WITH_RC4_40_SHA,
1308             TLS1_CK_ECDH_anon_EXPORT_WITH_RC4_40_SHA,
1309             SSL_kECDHE|SSL_aNULL|SSL_RC4|SSL_SHA|SSL_TLSV1,
1310             SSL_EXPORT|SSL_EXP40,
1311             0,
1312             40,
1313             128,
1314             SSL_ALL_CIPHERS,
1315             SSL_ALL_STRENGTHS,
1316             },
1317
1318         /* Cipher 77 XXX: ECC ciphersuites offering forward secrecy
1319          * are not yet specified in the ECC/TLS draft but our code
1320          * allows them to be implemented very easily. To add such
1321          * a cipher suite, one needs to add two constant definitions
1322          * to tls1.h and a new structure in this file as shown below. We
1323          * illustrate the process for the made-up cipher
1324          * ECDHE-ECDSA-AES128-SHA.
1325          */
1326             {
1327             1,
1328             TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
1329             TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
1330             SSL_kECDHE|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1331             SSL_NOT_EXP|SSL_MEDIUM,
1332             0,
1333             128,
1334             128,
1335             SSL_ALL_CIPHERS,
1336             SSL_ALL_STRENGTHS,
1337             },
1338
1339         /* Cipher 78 XXX: Another made-up ECC cipher suite that
1340          * offers forward secrecy (ECDHE-RSA-AES128-SHA).
1341          */
1342             {
1343             1,
1344             TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA,
1345             TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,
1346             SSL_kECDHE|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1347             SSL_NOT_EXP|SSL_MEDIUM,
1348             0,
1349             128,
1350             128,
1351             SSL_ALL_CIPHERS,
1352             SSL_ALL_STRENGTHS,
1353             },
1354
1355 #endif /* !OPENSSL_NO_ECDH */
1356
1357 /* end of list */
1358         };
1359
1360 static SSL3_ENC_METHOD SSLv3_enc_data={
1361         ssl3_enc,
1362         ssl3_mac,
1363         ssl3_setup_key_block,
1364         ssl3_generate_master_secret,
1365         ssl3_change_cipher_state,
1366         ssl3_final_finish_mac,
1367         MD5_DIGEST_LENGTH+SHA_DIGEST_LENGTH,
1368         ssl3_cert_verify_mac,
1369         SSL3_MD_CLIENT_FINISHED_CONST,4,
1370         SSL3_MD_SERVER_FINISHED_CONST,4,
1371         ssl3_alert_code,
1372         };
1373
1374 static SSL_METHOD SSLv3_data= {
1375         SSL3_VERSION,
1376         ssl3_new,
1377         ssl3_clear,
1378         ssl3_free,
1379         ssl_undefined_function,
1380         ssl_undefined_function,
1381         ssl3_read,
1382         ssl3_peek,
1383         ssl3_write,
1384         ssl3_shutdown,
1385         ssl3_renegotiate,
1386         ssl3_renegotiate_check,
1387         ssl3_get_message,
1388         ssl3_read_bytes,
1389         ssl3_write_bytes,
1390         ssl3_dispatch_alert,
1391         ssl3_ctrl,
1392         ssl3_ctx_ctrl,
1393         ssl3_get_cipher_by_char,
1394         ssl3_put_cipher_by_char,
1395         ssl3_pending,
1396         ssl3_num_ciphers,
1397         ssl3_get_cipher,
1398         ssl_bad_method,
1399         ssl3_default_timeout,
1400         &SSLv3_enc_data,
1401         ssl_undefined_void_function,
1402         ssl3_callback_ctrl,
1403         ssl3_ctx_callback_ctrl,
1404         };
1405
1406 static long ssl3_default_timeout(void)
1407         {
1408         /* 2 hours, the 24 hours mentioned in the SSLv3 spec
1409          * is way too long for http, the cache would over fill */
1410         return(60*60*2);
1411         }
1412
1413 SSL_METHOD *sslv3_base_method(void)
1414         {
1415         return(&SSLv3_data);
1416         }
1417
1418 int ssl3_num_ciphers(void)
1419         {
1420         return(SSL3_NUM_CIPHERS);
1421         }
1422
1423 SSL_CIPHER *ssl3_get_cipher(unsigned int u)
1424         {
1425         if (u < SSL3_NUM_CIPHERS)
1426                 return(&(ssl3_ciphers[SSL3_NUM_CIPHERS-1-u]));
1427         else
1428                 return(NULL);
1429         }
1430
1431 int ssl3_pending(const SSL *s)
1432         {
1433         if (s->rstate == SSL_ST_READ_BODY)
1434                 return 0;
1435
1436         return (s->s3->rrec.type == SSL3_RT_APPLICATION_DATA) ? s->s3->rrec.length : 0;
1437         }
1438
1439 int ssl3_new(SSL *s)
1440         {
1441         SSL3_STATE *s3;
1442
1443         if ((s3=OPENSSL_malloc(sizeof *s3)) == NULL) goto err;
1444         memset(s3,0,sizeof *s3);
1445         EVP_MD_CTX_init(&s3->finish_dgst1);
1446         EVP_MD_CTX_init(&s3->finish_dgst2);
1447         pq_64bit_init(&(s3->rrec.seq_num));
1448         pq_64bit_init(&(s3->wrec.seq_num));
1449
1450         s->s3=s3;
1451
1452         s->method->ssl_clear(s);
1453         return(1);
1454 err:
1455         return(0);
1456         }
1457
1458 void ssl3_free(SSL *s)
1459         {
1460         if(s == NULL)
1461             return;
1462
1463         ssl3_cleanup_key_block(s);
1464         if (s->s3->rbuf.buf != NULL)
1465                 OPENSSL_free(s->s3->rbuf.buf);
1466         if (s->s3->wbuf.buf != NULL)
1467                 OPENSSL_free(s->s3->wbuf.buf);
1468         if (s->s3->rrec.comp != NULL)
1469                 OPENSSL_free(s->s3->rrec.comp);
1470 #ifndef OPENSSL_NO_DH
1471         if (s->s3->tmp.dh != NULL)
1472                 DH_free(s->s3->tmp.dh);
1473 #endif
1474 #ifndef OPENSSL_NO_ECDH
1475         if (s->s3->tmp.ecdh != NULL)
1476                 EC_KEY_free(s->s3->tmp.ecdh);
1477 #endif
1478
1479         if (s->s3->tmp.ca_names != NULL)
1480                 sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
1481         EVP_MD_CTX_cleanup(&s->s3->finish_dgst1);
1482         EVP_MD_CTX_cleanup(&s->s3->finish_dgst2);
1483         pq_64bit_free(&(s->s3->rrec.seq_num));
1484         pq_64bit_free(&(s->s3->wrec.seq_num));
1485
1486         OPENSSL_cleanse(s->s3,sizeof *s->s3);
1487         OPENSSL_free(s->s3);
1488         s->s3=NULL;
1489         }
1490
1491 void ssl3_clear(SSL *s)
1492         {
1493         unsigned char *rp,*wp;
1494         size_t rlen, wlen;
1495
1496         ssl3_cleanup_key_block(s);
1497         if (s->s3->tmp.ca_names != NULL)
1498                 sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
1499
1500         if (s->s3->rrec.comp != NULL)
1501                 {
1502                 OPENSSL_free(s->s3->rrec.comp);
1503                 s->s3->rrec.comp=NULL;
1504                 }
1505 #ifndef OPENSSL_NO_DH
1506         if (s->s3->tmp.dh != NULL)
1507                 DH_free(s->s3->tmp.dh);
1508 #endif
1509 #ifndef OPENSSL_NO_ECDH
1510         if (s->s3->tmp.ecdh != NULL)
1511                 EC_KEY_free(s->s3->tmp.ecdh);
1512 #endif
1513
1514         rp = s->s3->rbuf.buf;
1515         wp = s->s3->wbuf.buf;
1516         rlen = s->s3->rbuf.len;
1517         wlen = s->s3->wbuf.len;
1518
1519         EVP_MD_CTX_cleanup(&s->s3->finish_dgst1);
1520         EVP_MD_CTX_cleanup(&s->s3->finish_dgst2);
1521
1522         memset(s->s3,0,sizeof *s->s3);
1523         s->s3->rbuf.buf = rp;
1524         s->s3->wbuf.buf = wp;
1525         s->s3->rbuf.len = rlen;
1526         s->s3->wbuf.len = wlen;
1527
1528         ssl_free_wbio_buffer(s);
1529
1530         s->packet_length=0;
1531         s->s3->renegotiate=0;
1532         s->s3->total_renegotiations=0;
1533         s->s3->num_renegotiations=0;
1534         s->s3->in_read_app_data=0;
1535         s->version=SSL3_VERSION;
1536         }
1537
1538 long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
1539         {
1540         int ret=0;
1541
1542 #if !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_RSA)
1543         if (
1544 #ifndef OPENSSL_NO_RSA
1545             cmd == SSL_CTRL_SET_TMP_RSA ||
1546             cmd == SSL_CTRL_SET_TMP_RSA_CB ||
1547 #endif
1548 #ifndef OPENSSL_NO_DSA
1549             cmd == SSL_CTRL_SET_TMP_DH ||
1550             cmd == SSL_CTRL_SET_TMP_DH_CB ||
1551 #endif
1552                 0)
1553                 {
1554                 if (!ssl_cert_inst(&s->cert))
1555                         {
1556                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
1557                         return(0);
1558                         }
1559                 }
1560 #endif
1561
1562         switch (cmd)
1563                 {
1564         case SSL_CTRL_GET_SESSION_REUSED:
1565                 ret=s->hit;
1566                 break;
1567         case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
1568                 break;
1569         case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
1570                 ret=s->s3->num_renegotiations;
1571                 break;
1572         case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
1573                 ret=s->s3->num_renegotiations;
1574                 s->s3->num_renegotiations=0;
1575                 break;
1576         case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
1577                 ret=s->s3->total_renegotiations;
1578                 break;
1579         case SSL_CTRL_GET_FLAGS:
1580                 ret=(int)(s->s3->flags);
1581                 break;
1582 #ifndef OPENSSL_NO_RSA
1583         case SSL_CTRL_NEED_TMP_RSA:
1584                 if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) &&
1585                     ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
1586                      (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8))))
1587                         ret = 1;
1588                 break;
1589         case SSL_CTRL_SET_TMP_RSA:
1590                 {
1591                         RSA *rsa = (RSA *)parg;
1592                         if (rsa == NULL)
1593                                 {
1594                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
1595                                 return(ret);
1596                                 }
1597                         if ((rsa = RSAPrivateKey_dup(rsa)) == NULL)
1598                                 {
1599                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_RSA_LIB);
1600                                 return(ret);
1601                                 }
1602                         if (s->cert->rsa_tmp != NULL)
1603                                 RSA_free(s->cert->rsa_tmp);
1604                         s->cert->rsa_tmp = rsa;
1605                         ret = 1;
1606                 }
1607                 break;
1608         case SSL_CTRL_SET_TMP_RSA_CB:
1609                 {
1610                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1611                 return(ret);
1612                 }
1613                 break;
1614 #endif
1615 #ifndef OPENSSL_NO_DH
1616         case SSL_CTRL_SET_TMP_DH:
1617                 {
1618                         DH *dh = (DH *)parg;
1619                         if (dh == NULL)
1620                                 {
1621                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
1622                                 return(ret);
1623                                 }
1624                         if ((dh = DHparams_dup(dh)) == NULL)
1625                                 {
1626                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
1627                                 return(ret);
1628                                 }
1629                         if (!(s->options & SSL_OP_SINGLE_DH_USE))
1630                                 {
1631                                 if (!DH_generate_key(dh))
1632                                         {
1633                                         DH_free(dh);
1634                                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
1635                                         return(ret);
1636                                         }
1637                                 }
1638                         if (s->cert->dh_tmp != NULL)
1639                                 DH_free(s->cert->dh_tmp);
1640                         s->cert->dh_tmp = dh;
1641                         ret = 1;
1642                 }
1643                 break;
1644         case SSL_CTRL_SET_TMP_DH_CB:
1645                 {
1646                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1647                 return(ret);
1648                 }
1649                 break;
1650 #endif
1651 #ifndef OPENSSL_NO_ECDH
1652         case SSL_CTRL_SET_TMP_ECDH:
1653                 {
1654                 EC_KEY *ecdh = NULL;
1655
1656                 if (parg == NULL)
1657                         {
1658                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
1659                         return(ret);
1660                         }
1661                 if (!EC_KEY_up_ref((EC_KEY *)parg))
1662                         {
1663                         SSLerr(SSL_F_SSL3_CTRL,ERR_R_ECDH_LIB);
1664                         return(ret);
1665                         }
1666                 ecdh = (EC_KEY *)parg;
1667                 if (!(s->options & SSL_OP_SINGLE_ECDH_USE))
1668                         {
1669                         if (!EC_KEY_generate_key(ecdh))
1670                                 {
1671                                 EC_KEY_free(ecdh);
1672                                 SSLerr(SSL_F_SSL3_CTRL,ERR_R_ECDH_LIB);
1673                                 return(ret);
1674                                 }
1675                         }
1676                 if (s->cert->ecdh_tmp != NULL)
1677                         EC_KEY_free(s->cert->ecdh_tmp);
1678                 s->cert->ecdh_tmp = ecdh;
1679                 ret = 1;
1680                 }
1681                 break;
1682         case SSL_CTRL_SET_TMP_ECDH_CB:
1683                 {
1684                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1685                 return(ret);
1686                 }
1687                 break;
1688 #endif /* !OPENSSL_NO_ECDH */
1689         default:
1690                 break;
1691                 }
1692         return(ret);
1693         }
1694
1695 long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp)(void))
1696         {
1697         int ret=0;
1698
1699 #if !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_RSA)
1700         if (
1701 #ifndef OPENSSL_NO_RSA
1702             cmd == SSL_CTRL_SET_TMP_RSA_CB ||
1703 #endif
1704 #ifndef OPENSSL_NO_DSA
1705             cmd == SSL_CTRL_SET_TMP_DH_CB ||
1706 #endif
1707                 0)
1708                 {
1709                 if (!ssl_cert_inst(&s->cert))
1710                         {
1711                         SSLerr(SSL_F_SSL3_CALLBACK_CTRL, ERR_R_MALLOC_FAILURE);
1712                         return(0);
1713                         }
1714                 }
1715 #endif
1716
1717         switch (cmd)
1718                 {
1719 #ifndef OPENSSL_NO_RSA
1720         case SSL_CTRL_SET_TMP_RSA_CB:
1721                 {
1722                 s->cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
1723                 }
1724                 break;
1725 #endif
1726 #ifndef OPENSSL_NO_DH
1727         case SSL_CTRL_SET_TMP_DH_CB:
1728                 {
1729                 s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
1730                 }
1731                 break;
1732 #endif
1733 #ifndef OPENSSL_NO_ECDH
1734         case SSL_CTRL_SET_TMP_ECDH_CB:
1735                 {
1736                 s->cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;
1737                 }
1738                 break;
1739 #endif
1740         default:
1741                 break;
1742                 }
1743         return(ret);
1744         }
1745
1746 long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
1747         {
1748         CERT *cert;
1749
1750         cert=ctx->cert;
1751
1752         switch (cmd)
1753                 {
1754 #ifndef OPENSSL_NO_RSA
1755         case SSL_CTRL_NEED_TMP_RSA:
1756                 if (    (cert->rsa_tmp == NULL) &&
1757                         ((cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
1758                          (EVP_PKEY_size(cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8)))
1759                         )
1760                         return(1);
1761                 else
1762                         return(0);
1763                 /* break; */
1764         case SSL_CTRL_SET_TMP_RSA:
1765                 {
1766                 RSA *rsa;
1767                 int i;
1768
1769                 rsa=(RSA *)parg;
1770                 i=1;
1771                 if (rsa == NULL)
1772                         i=0;
1773                 else
1774                         {
1775                         if ((rsa=RSAPrivateKey_dup(rsa)) == NULL)
1776                                 i=0;
1777                         }
1778                 if (!i)
1779                         {
1780                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_RSA_LIB);
1781                         return(0);
1782                         }
1783                 else
1784                         {
1785                         if (cert->rsa_tmp != NULL)
1786                                 RSA_free(cert->rsa_tmp);
1787                         cert->rsa_tmp=rsa;
1788                         return(1);
1789                         }
1790                 }
1791                 /* break; */
1792         case SSL_CTRL_SET_TMP_RSA_CB:
1793                 {
1794                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1795                 return(0);
1796                 }
1797                 break;
1798 #endif
1799 #ifndef OPENSSL_NO_DH
1800         case SSL_CTRL_SET_TMP_DH:
1801                 {
1802                 DH *new=NULL,*dh;
1803
1804                 dh=(DH *)parg;
1805                 if ((new=DHparams_dup(dh)) == NULL)
1806                         {
1807                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
1808                         return 0;
1809                         }
1810                 if (!(ctx->options & SSL_OP_SINGLE_DH_USE))
1811                         {
1812                         if (!DH_generate_key(new))
1813                                 {
1814                                 SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
1815                                 DH_free(new);
1816                                 return 0;
1817                                 }
1818                         }
1819                 if (cert->dh_tmp != NULL)
1820                         DH_free(cert->dh_tmp);
1821                 cert->dh_tmp=new;
1822                 return 1;
1823                 }
1824                 /*break; */
1825         case SSL_CTRL_SET_TMP_DH_CB:
1826                 {
1827                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1828                 return(0);
1829                 }
1830                 break;
1831 #endif
1832 #ifndef OPENSSL_NO_ECDH
1833         case SSL_CTRL_SET_TMP_ECDH:
1834                 {
1835                 EC_KEY *ecdh = NULL;
1836
1837                 if (parg == NULL)
1838                         {
1839                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
1840                         return 0;
1841                         }
1842                 if (!EC_KEY_up_ref((EC_KEY *)parg))
1843                         {
1844                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
1845                         return 0;
1846                         }
1847                 ecdh = (EC_KEY *)parg;
1848                 if (!(ctx->options & SSL_OP_SINGLE_ECDH_USE))
1849                         {
1850                         if (!EC_KEY_generate_key(ecdh))
1851                                 {
1852                                 EC_KEY_free(ecdh);
1853                                 SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
1854                                 return 0;
1855                                 }
1856                         }
1857
1858                 if (cert->ecdh_tmp != NULL)
1859                         {
1860                         EC_KEY_free(cert->ecdh_tmp);
1861                         }
1862                 cert->ecdh_tmp = ecdh;
1863                 return 1;
1864                 }
1865                 /* break; */
1866         case SSL_CTRL_SET_TMP_ECDH_CB:
1867                 {
1868                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1869                 return(0);
1870                 }
1871                 break;
1872 #endif /* !OPENSSL_NO_ECDH */
1873         /* A Thawte special :-) */
1874         case SSL_CTRL_EXTRA_CHAIN_CERT:
1875                 if (ctx->extra_certs == NULL)
1876                         {
1877                         if ((ctx->extra_certs=sk_X509_new_null()) == NULL)
1878                                 return(0);
1879                         }
1880                 sk_X509_push(ctx->extra_certs,(X509 *)parg);
1881                 break;
1882
1883         default:
1884                 return(0);
1885                 }
1886         return(1);
1887         }
1888
1889 long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp)(void))
1890         {
1891         CERT *cert;
1892
1893         cert=ctx->cert;
1894
1895         switch (cmd)
1896                 {
1897 #ifndef OPENSSL_NO_RSA
1898         case SSL_CTRL_SET_TMP_RSA_CB:
1899                 {
1900                 cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
1901                 }
1902                 break;
1903 #endif
1904 #ifndef OPENSSL_NO_DH
1905         case SSL_CTRL_SET_TMP_DH_CB:
1906                 {
1907                 cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
1908                 }
1909                 break;
1910 #endif
1911 #ifndef OPENSSL_NO_ECDH
1912         case SSL_CTRL_SET_TMP_ECDH_CB:
1913                 {
1914                 cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;
1915                 }
1916                 break;
1917 #endif
1918         default:
1919                 return(0);
1920                 }
1921         return(1);
1922         }
1923
1924 /* This function needs to check if the ciphers required are actually
1925  * available */
1926 SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
1927         {
1928         static int init=1;
1929         static SSL_CIPHER *sorted[SSL3_NUM_CIPHERS];
1930         SSL_CIPHER c,*cp= &c,**cpp;
1931         unsigned long id;
1932         unsigned int i;
1933
1934         if (init)
1935                 {
1936                 CRYPTO_w_lock(CRYPTO_LOCK_SSL);
1937
1938                 if (init)
1939                         {
1940                         for (i=0; i<SSL3_NUM_CIPHERS; i++)
1941                                 sorted[i]= &(ssl3_ciphers[i]);
1942
1943                         qsort(sorted,
1944                                 SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER *),
1945                                 FP_ICC ssl_cipher_ptr_id_cmp);
1946
1947                         init=0;
1948                         }
1949
1950                 CRYPTO_w_unlock(CRYPTO_LOCK_SSL);
1951                 }
1952
1953         id=0x03000000L|((unsigned long)p[0]<<8L)|(unsigned long)p[1];
1954         c.id=id;
1955         cpp=(SSL_CIPHER **)OBJ_bsearch((char *)&cp,
1956                 (char *)sorted,
1957                 SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER *),
1958                 FP_ICC ssl_cipher_ptr_id_cmp);
1959         if ((cpp == NULL) || !(*cpp)->valid)
1960                 return(NULL);
1961         else
1962                 return(*cpp);
1963         }
1964
1965 int ssl3_put_cipher_by_char(const SSL_CIPHER *c, unsigned char *p)
1966         {
1967         long l;
1968
1969         if (p != NULL)
1970                 {
1971                 l=c->id;
1972                 if ((l & 0xff000000) != 0x03000000) return(0);
1973                 p[0]=((unsigned char)(l>> 8L))&0xFF;
1974                 p[1]=((unsigned char)(l     ))&0xFF;
1975                 }
1976         return(2);
1977         }
1978
1979 SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
1980              STACK_OF(SSL_CIPHER) *srvr)
1981         {
1982         SSL_CIPHER *c,*ret=NULL;
1983         STACK_OF(SSL_CIPHER) *prio, *allow;
1984         int i,j,ok;
1985         CERT *cert;
1986         unsigned long alg,mask,emask;
1987
1988         /* Let's see which ciphers we can support */
1989         cert=s->cert;
1990
1991 #if 0
1992         /* Do not set the compare functions, because this may lead to a
1993          * reordering by "id". We want to keep the original ordering.
1994          * We may pay a price in performance during sk_SSL_CIPHER_find(),
1995          * but would have to pay with the price of sk_SSL_CIPHER_dup().
1996          */
1997         sk_SSL_CIPHER_set_cmp_func(srvr, ssl_cipher_ptr_id_cmp);
1998         sk_SSL_CIPHER_set_cmp_func(clnt, ssl_cipher_ptr_id_cmp);
1999 #endif
2000
2001 #ifdef CIPHER_DEBUG
2002         printf("Server has %d from %p:\n", sk_SSL_CIPHER_num(srvr), srvr);
2003         for(i=0 ; i < sk_SSL_CIPHER_num(srvr) ; ++i)
2004             {
2005             c=sk_SSL_CIPHER_value(srvr,i);
2006             printf("%p:%s\n",c,c->name);
2007             }
2008         printf("Client sent %d from %p:\n", sk_SSL_CIPHER_num(clnt), clnt);
2009         for(i=0 ; i < sk_SSL_CIPHER_num(clnt) ; ++i)
2010             {
2011             c=sk_SSL_CIPHER_value(clnt,i);
2012             printf("%p:%s\n",c,c->name);
2013             }
2014 #endif
2015
2016         if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE)
2017             {
2018             prio = srvr;
2019             allow = clnt;
2020             }
2021         else
2022             {
2023             prio = clnt;
2024             allow = srvr;
2025             }
2026
2027         for (i=0; i<sk_SSL_CIPHER_num(prio); i++)
2028                 {
2029                 c=sk_SSL_CIPHER_value(prio,i);
2030
2031                 ssl_set_cert_masks(cert,c);
2032                 mask=cert->mask;
2033                 emask=cert->export_mask;
2034
2035 #ifdef KSSL_DEBUG
2036                 printf("ssl3_choose_cipher %d alg= %lx\n", i,c->algorithms);
2037 #endif    /* KSSL_DEBUG */
2038
2039                 alg=c->algorithms&(SSL_MKEY_MASK|SSL_AUTH_MASK);
2040 #ifndef OPENSSL_NO_KRB5
2041                 if (alg & SSL_KRB5)
2042                         {
2043                         if ( !kssl_keytab_is_available(s->kssl_ctx) )
2044                             continue;
2045                         }
2046 #endif /* OPENSSL_NO_KRB5 */
2047                 if (SSL_C_IS_EXPORT(c))
2048                         {
2049                         ok=((alg & emask) == alg)?1:0;
2050 #ifdef CIPHER_DEBUG
2051                         printf("%d:[%08lX:%08lX]%p:%s (export)\n",ok,alg,emask,
2052                                c,c->name);
2053 #endif
2054                         }
2055                 else
2056                         {
2057                         ok=((alg & mask) == alg)?1:0;
2058 #ifdef CIPHER_DEBUG
2059                         printf("%d:[%08lX:%08lX]%p:%s\n",ok,alg,mask,c,
2060                                c->name);
2061 #endif
2062                         }
2063
2064                 if (!ok) continue;
2065                 j=sk_SSL_CIPHER_find(allow,c);
2066                 if (j >= 0)
2067                         {
2068                         ret=sk_SSL_CIPHER_value(allow,j);
2069                         break;
2070                         }
2071                 }
2072         return(ret);
2073         }
2074
2075 int ssl3_get_req_cert_type(SSL *s, unsigned char *p)
2076         {
2077         int ret=0;
2078         unsigned long alg;
2079
2080         alg=s->s3->tmp.new_cipher->algorithms;
2081
2082 #ifndef OPENSSL_NO_DH
2083         if (alg & (SSL_kDHr|SSL_kEDH))
2084                 {
2085 #  ifndef OPENSSL_NO_RSA
2086                 p[ret++]=SSL3_CT_RSA_FIXED_DH;
2087 #  endif
2088 #  ifndef OPENSSL_NO_DSA
2089                 p[ret++]=SSL3_CT_DSS_FIXED_DH;
2090 #  endif
2091                 }
2092         if ((s->version == SSL3_VERSION) &&
2093                 (alg & (SSL_kEDH|SSL_kDHd|SSL_kDHr)))
2094                 {
2095 #  ifndef OPENSSL_NO_RSA
2096                 p[ret++]=SSL3_CT_RSA_EPHEMERAL_DH;
2097 #  endif
2098 #  ifndef OPENSSL_NO_DSA
2099                 p[ret++]=SSL3_CT_DSS_EPHEMERAL_DH;
2100 #  endif
2101                 }
2102 #endif /* !OPENSSL_NO_DH */
2103 #ifndef OPENSSL_NO_RSA
2104         p[ret++]=SSL3_CT_RSA_SIGN;
2105 #endif
2106 #ifndef OPENSSL_NO_DSA
2107         p[ret++]=SSL3_CT_DSS_SIGN;
2108 #endif
2109 #ifndef OPENSSL_NO_ECDH
2110         /* We should ask for fixed ECDH certificates only
2111          * for SSL_kECDH (and not SSL_kECDHE)
2112          */
2113         if ((alg & SSL_kECDH) && (s->version >= TLS1_VERSION))
2114                 {
2115                 p[ret++]=TLS_CT_RSA_FIXED_ECDH;
2116                 p[ret++]=TLS_CT_ECDSA_FIXED_ECDH;
2117                 }
2118 #endif
2119
2120 #ifndef OPENSSL_NO_ECDSA
2121         /* ECDSA certs can be used with RSA cipher suites as well
2122          * so we don't need to check for SSL_kECDH or SSL_kECDHE
2123          */
2124         if (s->version >= TLS1_VERSION)
2125                 {
2126                 p[ret++]=TLS_CT_ECDSA_SIGN;
2127                 }
2128 #endif
2129         return(ret);
2130         }
2131
2132 int ssl3_shutdown(SSL *s)
2133         {
2134
2135         /* Don't do anything much if we have not done the handshake or
2136          * we don't want to send messages :-) */
2137         if ((s->quiet_shutdown) || (s->state == SSL_ST_BEFORE))
2138                 {
2139                 s->shutdown=(SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
2140                 return(1);
2141                 }
2142
2143         if (!(s->shutdown & SSL_SENT_SHUTDOWN))
2144                 {
2145                 s->shutdown|=SSL_SENT_SHUTDOWN;
2146 #if 1
2147                 ssl3_send_alert(s,SSL3_AL_WARNING,SSL_AD_CLOSE_NOTIFY);
2148 #endif
2149                 /* our shutdown alert has been sent now, and if it still needs
2150                  * to be written, s->s3->alert_dispatch will be true */
2151                 }
2152         else if (s->s3->alert_dispatch)
2153                 {
2154                 /* resend it if not sent */
2155 #if 1
2156                 s->method->ssl_dispatch_alert(s);
2157 #endif
2158                 }
2159         else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN))
2160                 {
2161                 /* If we are waiting for a close from our peer, we are closed */
2162                 s->method->ssl_read_bytes(s,0,NULL,0,0);
2163                 }
2164
2165         if ((s->shutdown == (SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN)) &&
2166                 !s->s3->alert_dispatch)
2167                 return(1);
2168         else
2169                 return(0);
2170         }
2171
2172 int ssl3_write(SSL *s, const void *buf, int len)
2173         {
2174         int ret,n;
2175
2176 #if 0
2177         if (s->shutdown & SSL_SEND_SHUTDOWN)
2178                 {
2179                 s->rwstate=SSL_NOTHING;
2180                 return(0);
2181                 }
2182 #endif
2183         clear_sys_error();
2184         if (s->s3->renegotiate) ssl3_renegotiate_check(s);
2185
2186         /* This is an experimental flag that sends the
2187          * last handshake message in the same packet as the first
2188          * use data - used to see if it helps the TCP protocol during
2189          * session-id reuse */
2190         /* The second test is because the buffer may have been removed */
2191         if ((s->s3->flags & SSL3_FLAGS_POP_BUFFER) && (s->wbio == s->bbio))
2192                 {
2193                 /* First time through, we write into the buffer */
2194                 if (s->s3->delay_buf_pop_ret == 0)
2195                         {
2196                         ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
2197                                              buf,len);
2198                         if (ret <= 0) return(ret);
2199
2200                         s->s3->delay_buf_pop_ret=ret;
2201                         }
2202
2203                 s->rwstate=SSL_WRITING;
2204                 n=BIO_flush(s->wbio);
2205                 if (n <= 0) return(n);
2206                 s->rwstate=SSL_NOTHING;
2207
2208                 /* We have flushed the buffer, so remove it */
2209                 ssl_free_wbio_buffer(s);
2210                 s->s3->flags&= ~SSL3_FLAGS_POP_BUFFER;
2211
2212                 ret=s->s3->delay_buf_pop_ret;
2213                 s->s3->delay_buf_pop_ret=0;
2214                 }
2215         else
2216                 {
2217                 ret=s->method->ssl_write_bytes(s,SSL3_RT_APPLICATION_DATA,
2218                         buf,len);
2219                 if (ret <= 0) return(ret);
2220                 }
2221
2222         return(ret);
2223         }
2224
2225 static int ssl3_read_internal(SSL *s, void *buf, int len, int peek)
2226         {
2227         int ret;
2228
2229         clear_sys_error();
2230         if (s->s3->renegotiate) ssl3_renegotiate_check(s);
2231         s->s3->in_read_app_data=1;
2232         ret=s->method->ssl_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
2233         if ((ret == -1) && (s->s3->in_read_app_data == 2))
2234                 {
2235                 /* ssl3_read_bytes decided to call s->handshake_func, which
2236                  * called ssl3_read_bytes to read handshake data.
2237                  * However, ssl3_read_bytes actually found application data
2238                  * and thinks that application data makes sense here; so disable
2239                  * handshake processing and try to read application data again. */
2240                 s->in_handshake++;
2241                 ret=s->method->ssl_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
2242                 s->in_handshake--;
2243                 }
2244         else
2245                 s->s3->in_read_app_data=0;
2246
2247         return(ret);
2248         }
2249
2250 int ssl3_read(SSL *s, void *buf, int len)
2251         {
2252         return ssl3_read_internal(s, buf, len, 0);
2253         }
2254
2255 int ssl3_peek(SSL *s, void *buf, int len)
2256         {
2257         return ssl3_read_internal(s, buf, len, 1);
2258         }
2259
2260 int ssl3_renegotiate(SSL *s)
2261         {
2262         if (s->handshake_func == NULL)
2263                 return(1);
2264
2265         if (s->s3->flags & SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS)
2266                 return(0);
2267
2268         s->s3->renegotiate=1;
2269         return(1);
2270         }
2271
2272 int ssl3_renegotiate_check(SSL *s)
2273         {
2274         int ret=0;
2275
2276         if (s->s3->renegotiate)
2277                 {
2278                 if (    (s->s3->rbuf.left == 0) &&
2279                         (s->s3->wbuf.left == 0) &&
2280                         !SSL_in_init(s))
2281                         {
2282 /*
2283 if we are the server, and we have sent a 'RENEGOTIATE' message, we
2284 need to go to SSL_ST_ACCEPT.
2285 */
2286                         /* SSL_ST_ACCEPT */
2287                         s->state=SSL_ST_RENEGOTIATE;
2288                         s->s3->renegotiate=0;
2289                         s->s3->num_renegotiations++;
2290                         s->s3->total_renegotiations++;
2291                         ret=1;
2292                         }
2293                 }
2294         return(ret);
2295         }
2296