ssl/s3_lib.c

   1 /* ssl/s3_lib.c */
   2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   3  * All rights reserved.
   4  *
   5  * This package is an SSL implementation written
   6  * by Eric Young (eay@cryptsoft.com).
   7  * The implementation was written so as to conform with Netscapes SSL.
   8  *
   9  * This library is free for commercial and non-commercial use as long as
  10  * the following conditions are aheared to.  The following conditions
  11  * apply to all code found in this distribution, be it the RC4, RSA,
  12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  13  * included with this distribution is covered by the same copyright terms
  14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15  *
  16  * Copyright remains Eric Young's, and as such any Copyright notices in
  17  * the code are not to be removed.
  18  * If this package is used in a product, Eric Young should be given attribution
  19  * as the author of the parts of the library used.
  20  * This can be in the form of a textual message at program startup or
  21  * in documentation (online or textual) provided with the package.
  22  *
  23  * Redistribution and use in source and binary forms, with or without
  24  * modification, are permitted provided that the following conditions
  25  * are met:
  26  * 1. Redistributions of source code must retain the copyright
  27  *    notice, this list of conditions and the following disclaimer.
  28  * 2. Redistributions in binary form must reproduce the above copyright
  29  *    notice, this list of conditions and the following disclaimer in the
  30  *    documentation and/or other materials provided with the distribution.
  31  * 3. All advertising materials mentioning features or use of this software
  32  *    must display the following acknowledgement:
  33  *    "This product includes cryptographic software written by
  34  *     Eric Young (eay@cryptsoft.com)"
  35  *    The word 'cryptographic' can be left out if the rouines from the library
  36  *    being used are not cryptographic related :-).
  37  * 4. If you include any Windows specific code (or a derivative thereof) from
  38  *    the apps directory (application code) you must include an acknowledgement:
  39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  *
  53  * The licence and distribution terms for any publically available version or
  54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  55  * copied and put under another distribution licence
  56  * [including the GNU Public Licence.]
  57  */
  58 /* ====================================================================
  59  * Copyright (c) 1998-2006 The OpenSSL Project.  All rights reserved.
  60  *
  61  * Redistribution and use in source and binary forms, with or without
  62  * modification, are permitted provided that the following conditions
  63  * are met:
  64  *
  65  * 1. Redistributions of source code must retain the above copyright
  66  *    notice, this list of conditions and the following disclaimer.
  67  *
  68  * 2. Redistributions in binary form must reproduce the above copyright
  69  *    notice, this list of conditions and the following disclaimer in
  70  *    the documentation and/or other materials provided with the
  71  *    distribution.
  72  *
  73  * 3. All advertising materials mentioning features or use of this
  74  *    software must display the following acknowledgment:
  75  *    "This product includes software developed by the OpenSSL Project
  76  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77  *
  78  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79  *    endorse or promote products derived from this software without
  80  *    prior written permission. For written permission, please contact
  81  *    openssl-core@openssl.org.
  82  *
  83  * 5. Products derived from this software may not be called "OpenSSL"
  84  *    nor may "OpenSSL" appear in their names without prior written
  85  *    permission of the OpenSSL Project.
  86  *
  87  * 6. Redistributions of any form whatsoever must retain the following
  88  *    acknowledgment:
  89  *    "This product includes software developed by the OpenSSL Project
  90  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91  *
  92  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 100  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 101  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 102  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 103  * OF THE POSSIBILITY OF SUCH DAMAGE.
 104  * ====================================================================
 105  *
 106  * This product includes cryptographic software written by Eric Young
 107  * (eay@cryptsoft.com).  This product includes software written by Tim
 108  * Hudson (tjh@cryptsoft.com).
 109  *
 110  */
 111 /* ====================================================================
 112  * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
 113  *
 114  * Portions of the attached software ("Contribution") are developed by
 115  * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
 116  *
 117  * The Contribution is licensed pursuant to the OpenSSL open source
 118  * license provided above.
 119  *
 120  * ECC cipher suite support in OpenSSL originally written by
 121  * Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
 122  *
 123  */
 124 /* ====================================================================
 125  * Copyright 2005 Nokia. All rights reserved.
 126  *
 127  * The portions of the attached software ("Contribution") is developed by
 128  * Nokia Corporation and is licensed pursuant to the OpenSSL open source
 129  * license.
 130  *
 131  * The Contribution, originally written by Mika Kousa and Pasi Eronen of
 132  * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites
 133  * support (see RFC 4279) to OpenSSL.
 134  *
 135  * No patent licenses or other rights except those expressly stated in
 136  * the OpenSSL open source license shall be deemed granted or received
 137  * expressly, by implication, estoppel, or otherwise.
 138  *
 139  * No assurances are provided by Nokia that the Contribution does not
 140  * infringe the patent or other intellectual property rights of any third
 141  * party or that the license provides you with all the necessary rights
 142  * to make use of the Contribution.
 143  *
 144  * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN
 145  * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA
 146  * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY
 147  * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR
 148  * OTHERWISE.
 149  */
 150
 151 #include <stdio.h>
 152 #include <openssl/objects.h>
 153 #include "ssl_locl.h"
 154 #include "kssl_lcl.h"
 155 #ifndef OPENSSL_NO_TLSEXT
 156 #ifndef OPENSSL_NO_EC
 157 #include "../crypto/ec/ec_lcl.h"
 158 #endif /* OPENSSL_NO_EC */
 159 #endif /* OPENSSL_NO_TLSEXT */
 160 #include <openssl/md5.h>
 161 #ifndef OPENSSL_NO_DH
 162 #include <openssl/dh.h>
 163 #endif
 164
 165 const char *ssl3_version_str="SSLv3" OPENSSL_VERSION_PTEXT;
 166
 167 #define SSL3_NUM_CIPHERS        (sizeof(ssl3_ciphers)/sizeof(SSL_CIPHER))
 168
 169 /* list of available SSLv3 ciphers (sorted by id) */
 170 OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
 171 /* The RSA ciphers */
 172 /* Cipher 01 */
 173         {
 174         1,
 175         SSL3_TXT_RSA_NULL_MD5,
 176         SSL3_CK_RSA_NULL_MD5,
 177         SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_MD5|SSL_SSLV3,
 178         SSL_NOT_EXP|SSL_STRONG_NONE,
 179         0,
 180         0,
 181         0,
 182         SSL_ALL_CIPHERS,
 183         SSL_ALL_STRENGTHS,
 184         },
 185 /* Cipher 02 */
 186         {
 187         1,
 188         SSL3_TXT_RSA_NULL_SHA,
 189         SSL3_CK_RSA_NULL_SHA,
 190         SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_SHA1|SSL_SSLV3,
 191         SSL_NOT_EXP|SSL_STRONG_NONE,
 192         0,
 193         0,
 194         0,
 195         SSL_ALL_CIPHERS,
 196         SSL_ALL_STRENGTHS,
 197         },
 198 /* Cipher 03 */
 199         {
 200         1,
 201         SSL3_TXT_RSA_RC4_40_MD5,
 202         SSL3_CK_RSA_RC4_40_MD5,
 203         SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
 204         SSL_EXPORT|SSL_EXP40,
 205         0,
 206         40,
 207         128,
 208         SSL_ALL_CIPHERS,
 209         SSL_ALL_STRENGTHS,
 210         },
 211 /* Cipher 04 */
 212         {
 213         1,
 214         SSL3_TXT_RSA_RC4_128_MD5,
 215         SSL3_CK_RSA_RC4_128_MD5,
 216         SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5|SSL_SSLV3,
 217         SSL_NOT_EXP|SSL_MEDIUM,
 218         0,
 219         128,
 220         128,
 221         SSL_ALL_CIPHERS,
 222         SSL_ALL_STRENGTHS,
 223         },
 224 /* Cipher 05 */
 225         {
 226         1,
 227         SSL3_TXT_RSA_RC4_128_SHA,
 228         SSL3_CK_RSA_RC4_128_SHA,
 229         SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_SHA1|SSL_SSLV3,
 230         SSL_NOT_EXP|SSL_MEDIUM,
 231         0,
 232         128,
 233         128,
 234         SSL_ALL_CIPHERS,
 235         SSL_ALL_STRENGTHS,
 236         },
 237 /* Cipher 06 */
 238         {
 239         1,
 240         SSL3_TXT_RSA_RC2_40_MD5,
 241         SSL3_CK_RSA_RC2_40_MD5,
 242         SSL_kRSA|SSL_aRSA|SSL_RC2  |SSL_MD5 |SSL_SSLV3,
 243         SSL_EXPORT|SSL_EXP40,
 244         0,
 245         40,
 246         128,
 247         SSL_ALL_CIPHERS,
 248         SSL_ALL_STRENGTHS,
 249         },
 250 /* Cipher 07 */
 251 #ifndef OPENSSL_NO_IDEA
 252         {
 253         1,
 254         SSL3_TXT_RSA_IDEA_128_SHA,
 255         SSL3_CK_RSA_IDEA_128_SHA,
 256         SSL_kRSA|SSL_aRSA|SSL_IDEA |SSL_SHA1|SSL_SSLV3,
 257         SSL_NOT_EXP|SSL_MEDIUM,
 258         0,
 259         128,
 260         128,
 261         SSL_ALL_CIPHERS,
 262         SSL_ALL_STRENGTHS,
 263         },
 264 #endif
 265 /* Cipher 08 */
 266         {
 267         1,
 268         SSL3_TXT_RSA_DES_40_CBC_SHA,
 269         SSL3_CK_RSA_DES_40_CBC_SHA,
 270         SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
 271         SSL_EXPORT|SSL_EXP40,
 272         0,
 273         40,
 274         56,
 275         SSL_ALL_CIPHERS,
 276         SSL_ALL_STRENGTHS,
 277         },
 278 /* Cipher 09 */
 279         {
 280         1,
 281         SSL3_TXT_RSA_DES_64_CBC_SHA,
 282         SSL3_CK_RSA_DES_64_CBC_SHA,
 283         SSL_kRSA|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 284         SSL_NOT_EXP|SSL_LOW,
 285         0,
 286         56,
 287         56,
 288         SSL_ALL_CIPHERS,
 289         SSL_ALL_STRENGTHS,
 290         },
 291 /* Cipher 0A */
 292         {
 293         1,
 294         SSL3_TXT_RSA_DES_192_CBC3_SHA,
 295         SSL3_CK_RSA_DES_192_CBC3_SHA,
 296         SSL_kRSA|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 297         SSL_NOT_EXP|SSL_HIGH,
 298         0,
 299         168,
 300         168,
 301         SSL_ALL_CIPHERS,
 302         SSL_ALL_STRENGTHS,
 303         },
 304 /* The DH ciphers */
 305 /* Cipher 0B */
 306         {
 307         0,
 308         SSL3_TXT_DH_DSS_DES_40_CBC_SHA,
 309         SSL3_CK_DH_DSS_DES_40_CBC_SHA,
 310         SSL_kDHd |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
 311         SSL_EXPORT|SSL_EXP40,
 312         0,
 313         40,
 314         56,
 315         SSL_ALL_CIPHERS,
 316         SSL_ALL_STRENGTHS,
 317         },
 318 /* Cipher 0C */
 319         {
 320         0,
 321         SSL3_TXT_DH_DSS_DES_64_CBC_SHA,
 322         SSL3_CK_DH_DSS_DES_64_CBC_SHA,
 323         SSL_kDHd |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 324         SSL_NOT_EXP|SSL_LOW,
 325         0,
 326         56,
 327         56,
 328         SSL_ALL_CIPHERS,
 329         SSL_ALL_STRENGTHS,
 330         },
 331 /* Cipher 0D */
 332         {
 333         0,
 334         SSL3_TXT_DH_DSS_DES_192_CBC3_SHA,
 335         SSL3_CK_DH_DSS_DES_192_CBC3_SHA,
 336         SSL_kDHd |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 337         SSL_NOT_EXP|SSL_HIGH,
 338         0,
 339         168,
 340         168,
 341         SSL_ALL_CIPHERS,
 342         SSL_ALL_STRENGTHS,
 343         },
 344 /* Cipher 0E */
 345         {
 346         0,
 347         SSL3_TXT_DH_RSA_DES_40_CBC_SHA,
 348         SSL3_CK_DH_RSA_DES_40_CBC_SHA,
 349         SSL_kDHr |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
 350         SSL_EXPORT|SSL_EXP40,
 351         0,
 352         40,
 353         56,
 354         SSL_ALL_CIPHERS,
 355         SSL_ALL_STRENGTHS,
 356         },
 357 /* Cipher 0F */
 358         {
 359         0,
 360         SSL3_TXT_DH_RSA_DES_64_CBC_SHA,
 361         SSL3_CK_DH_RSA_DES_64_CBC_SHA,
 362         SSL_kDHr |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 363         SSL_NOT_EXP|SSL_LOW,
 364         0,
 365         56,
 366         56,
 367         SSL_ALL_CIPHERS,
 368         SSL_ALL_STRENGTHS,
 369         },
 370 /* Cipher 10 */
 371         {
 372         0,
 373         SSL3_TXT_DH_RSA_DES_192_CBC3_SHA,
 374         SSL3_CK_DH_RSA_DES_192_CBC3_SHA,
 375         SSL_kDHr |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 376         SSL_NOT_EXP|SSL_HIGH,
 377         0,
 378         168,
 379         168,
 380         SSL_ALL_CIPHERS,
 381         SSL_ALL_STRENGTHS,
 382         },
 383
 384 /* The Ephemeral DH ciphers */
 385 /* Cipher 11 */
 386         {
 387         1,
 388         SSL3_TXT_EDH_DSS_DES_40_CBC_SHA,
 389         SSL3_CK_EDH_DSS_DES_40_CBC_SHA,
 390         SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA1|SSL_SSLV3,
 391         SSL_EXPORT|SSL_EXP40,
 392         0,
 393         40,
 394         56,
 395         SSL_ALL_CIPHERS,
 396         SSL_ALL_STRENGTHS,
 397         },
 398 /* Cipher 12 */
 399         {
 400         1,
 401         SSL3_TXT_EDH_DSS_DES_64_CBC_SHA,
 402         SSL3_CK_EDH_DSS_DES_64_CBC_SHA,
 403         SSL_kEDH|SSL_aDSS|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 404         SSL_NOT_EXP|SSL_LOW,
 405         0,
 406         56,
 407         56,
 408         SSL_ALL_CIPHERS,
 409         SSL_ALL_STRENGTHS,
 410         },
 411 /* Cipher 13 */
 412         {
 413         1,
 414         SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA,
 415         SSL3_CK_EDH_DSS_DES_192_CBC3_SHA,
 416         SSL_kEDH|SSL_aDSS|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 417         SSL_NOT_EXP|SSL_HIGH,
 418         0,
 419         168,
 420         168,
 421         SSL_ALL_CIPHERS,
 422         SSL_ALL_STRENGTHS,
 423         },
 424 /* Cipher 14 */
 425         {
 426         1,
 427         SSL3_TXT_EDH_RSA_DES_40_CBC_SHA,
 428         SSL3_CK_EDH_RSA_DES_40_CBC_SHA,
 429         SSL_kEDH|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
 430         SSL_EXPORT|SSL_EXP40,
 431         0,
 432         40,
 433         56,
 434         SSL_ALL_CIPHERS,
 435         SSL_ALL_STRENGTHS,
 436         },
 437 /* Cipher 15 */
 438         {
 439         1,
 440         SSL3_TXT_EDH_RSA_DES_64_CBC_SHA,
 441         SSL3_CK_EDH_RSA_DES_64_CBC_SHA,
 442         SSL_kEDH|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 443         SSL_NOT_EXP|SSL_LOW,
 444         0,
 445         56,
 446         56,
 447         SSL_ALL_CIPHERS,
 448         SSL_ALL_STRENGTHS,
 449         },
 450 /* Cipher 16 */
 451         {
 452         1,
 453         SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA,
 454         SSL3_CK_EDH_RSA_DES_192_CBC3_SHA,
 455         SSL_kEDH|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 456         SSL_NOT_EXP|SSL_HIGH,
 457         0,
 458         168,
 459         168,
 460         SSL_ALL_CIPHERS,
 461         SSL_ALL_STRENGTHS,
 462         },
 463 /* Cipher 17 */
 464         {
 465         1,
 466         SSL3_TXT_ADH_RC4_40_MD5,
 467         SSL3_CK_ADH_RC4_40_MD5,
 468         SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
 469         SSL_EXPORT|SSL_EXP40,
 470         0,
 471         40,
 472         128,
 473         SSL_ALL_CIPHERS,
 474         SSL_ALL_STRENGTHS,
 475         },
 476 /* Cipher 18 */
 477         {
 478         1,
 479         SSL3_TXT_ADH_RC4_128_MD5,
 480         SSL3_CK_ADH_RC4_128_MD5,
 481         SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
 482         SSL_NOT_EXP|SSL_MEDIUM,
 483         0,
 484         128,
 485         128,
 486         SSL_ALL_CIPHERS,
 487         SSL_ALL_STRENGTHS,
 488         },
 489 /* Cipher 19 */
 490         {
 491         1,
 492         SSL3_TXT_ADH_DES_40_CBC_SHA,
 493         SSL3_CK_ADH_DES_40_CBC_SHA,
 494         SSL_kEDH |SSL_aNULL|SSL_DES|SSL_SHA1|SSL_SSLV3,
 495         SSL_EXPORT|SSL_EXP40,
 496         0,
 497         40,
 498         128,
 499         SSL_ALL_CIPHERS,
 500         SSL_ALL_STRENGTHS,
 501         },
 502 /* Cipher 1A */
 503         {
 504         1,
 505         SSL3_TXT_ADH_DES_64_CBC_SHA,
 506         SSL3_CK_ADH_DES_64_CBC_SHA,
 507         SSL_kEDH |SSL_aNULL|SSL_DES  |SSL_SHA1|SSL_SSLV3,
 508         SSL_NOT_EXP|SSL_LOW,
 509         0,
 510         56,
 511         56,
 512         SSL_ALL_CIPHERS,
 513         SSL_ALL_STRENGTHS,
 514         },
 515 /* Cipher 1B */
 516         {
 517         1,
 518         SSL3_TXT_ADH_DES_192_CBC_SHA,
 519         SSL3_CK_ADH_DES_192_CBC_SHA,
 520         SSL_kEDH |SSL_aNULL|SSL_3DES |SSL_SHA1|SSL_SSLV3,
 521         SSL_NOT_EXP|SSL_HIGH,
 522         0,
 523         168,
 524         168,
 525         SSL_ALL_CIPHERS,
 526         SSL_ALL_STRENGTHS,
 527         },
 528
 529 /* Fortezza */
 530 /* Cipher 1C */
 531         {
 532         0,
 533         SSL3_TXT_FZA_DMS_NULL_SHA,
 534         SSL3_CK_FZA_DMS_NULL_SHA,
 535         SSL_kFZA|SSL_aFZA |SSL_eNULL |SSL_SHA1|SSL_SSLV3,
 536         SSL_NOT_EXP|SSL_STRONG_NONE,
 537         0,
 538         0,
 539         0,
 540         SSL_ALL_CIPHERS,
 541         SSL_ALL_STRENGTHS,
 542         },
 543
 544 /* Cipher 1D */
 545         {
 546         0,
 547         SSL3_TXT_FZA_DMS_FZA_SHA,
 548         SSL3_CK_FZA_DMS_FZA_SHA,
 549         SSL_kFZA|SSL_aFZA |SSL_eFZA |SSL_SHA1|SSL_SSLV3,
 550         SSL_NOT_EXP|SSL_STRONG_NONE,
 551         0,
 552         0,
 553         0,
 554         SSL_ALL_CIPHERS,
 555         SSL_ALL_STRENGTHS,
 556         },
 557
 558 #if 0
 559 /* Cipher 1E */
 560         {
 561         0,
 562         SSL3_TXT_FZA_DMS_RC4_SHA,
 563         SSL3_CK_FZA_DMS_RC4_SHA,
 564         SSL_kFZA|SSL_aFZA |SSL_RC4  |SSL_SHA1|SSL_SSLV3,
 565         SSL_NOT_EXP|SSL_MEDIUM,
 566         0,
 567         128,
 568         128,
 569         SSL_ALL_CIPHERS,
 570         SSL_ALL_STRENGTHS,
 571         },
 572 #endif
 573
 574 #ifndef OPENSSL_NO_KRB5
 575 /* The Kerberos ciphers
 576 ** 20000107 VRS: And the first shall be last,
 577 ** in hopes of avoiding the lynx ssl renegotiation problem.
 578 */
 579 /* Cipher 1E VRS */
 580         {
 581         1,
 582         SSL3_TXT_KRB5_DES_64_CBC_SHA,
 583         SSL3_CK_KRB5_DES_64_CBC_SHA,
 584         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_SHA1   |SSL_SSLV3,
 585         SSL_NOT_EXP|SSL_LOW,
 586         0,
 587         56,
 588         56,
 589         SSL_ALL_CIPHERS,
 590         SSL_ALL_STRENGTHS,
 591         },
 592
 593 /* Cipher 1F VRS */
 594         {
 595         1,
 596         SSL3_TXT_KRB5_DES_192_CBC3_SHA,
 597         SSL3_CK_KRB5_DES_192_CBC3_SHA,
 598         SSL_kKRB5|SSL_aKRB5|  SSL_3DES|SSL_SHA1  |SSL_SSLV3,
 599         SSL_NOT_EXP|SSL_HIGH,
 600         0,
 601         112,
 602         168,
 603         SSL_ALL_CIPHERS,
 604         SSL_ALL_STRENGTHS,
 605         },
 606
 607 /* Cipher 20 VRS */
 608         {
 609         1,
 610         SSL3_TXT_KRB5_RC4_128_SHA,
 611         SSL3_CK_KRB5_RC4_128_SHA,
 612         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_SHA1  |SSL_SSLV3,
 613         SSL_NOT_EXP|SSL_MEDIUM,
 614         0,
 615         128,
 616         128,
 617         SSL_ALL_CIPHERS,
 618         SSL_ALL_STRENGTHS,
 619         },
 620
 621 /* Cipher 21 VRS */
 622         {
 623         1,
 624         SSL3_TXT_KRB5_IDEA_128_CBC_SHA,
 625         SSL3_CK_KRB5_IDEA_128_CBC_SHA,
 626         SSL_kKRB5|SSL_aKRB5|  SSL_IDEA|SSL_SHA1  |SSL_SSLV3,
 627         SSL_NOT_EXP|SSL_MEDIUM,
 628         0,
 629         128,
 630         128,
 631         SSL_ALL_CIPHERS,
 632         SSL_ALL_STRENGTHS,
 633         },
 634
 635 /* Cipher 22 VRS */
 636         {
 637         1,
 638         SSL3_TXT_KRB5_DES_64_CBC_MD5,
 639         SSL3_CK_KRB5_DES_64_CBC_MD5,
 640         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_MD5    |SSL_SSLV3,
 641         SSL_NOT_EXP|SSL_LOW,
 642         0,
 643         56,
 644         56,
 645         SSL_ALL_CIPHERS,
 646         SSL_ALL_STRENGTHS,
 647         },
 648
 649 /* Cipher 23 VRS */
 650         {
 651         1,
 652         SSL3_TXT_KRB5_DES_192_CBC3_MD5,
 653         SSL3_CK_KRB5_DES_192_CBC3_MD5,
 654         SSL_kKRB5|SSL_aKRB5|  SSL_3DES|SSL_MD5   |SSL_SSLV3,
 655         SSL_NOT_EXP|SSL_HIGH,
 656         0,
 657         112,
 658         168,
 659         SSL_ALL_CIPHERS,
 660         SSL_ALL_STRENGTHS,
 661         },
 662
 663 /* Cipher 24 VRS */
 664         {
 665         1,
 666         SSL3_TXT_KRB5_RC4_128_MD5,
 667         SSL3_CK_KRB5_RC4_128_MD5,
 668         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_MD5  |SSL_SSLV3,
 669         SSL_NOT_EXP|SSL_MEDIUM,
 670         0,
 671         128,
 672         128,
 673         SSL_ALL_CIPHERS,
 674         SSL_ALL_STRENGTHS,
 675         },
 676
 677 /* Cipher 25 VRS */
 678         {
 679         1,
 680         SSL3_TXT_KRB5_IDEA_128_CBC_MD5,
 681         SSL3_CK_KRB5_IDEA_128_CBC_MD5,
 682         SSL_kKRB5|SSL_aKRB5|  SSL_IDEA|SSL_MD5  |SSL_SSLV3,
 683         SSL_NOT_EXP|SSL_MEDIUM,
 684         0,
 685         128,
 686         128,
 687         SSL_ALL_CIPHERS,
 688         SSL_ALL_STRENGTHS,
 689         },
 690
 691 /* Cipher 26 VRS */
 692         {
 693         1,
 694         SSL3_TXT_KRB5_DES_40_CBC_SHA,
 695         SSL3_CK_KRB5_DES_40_CBC_SHA,
 696         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_SHA1   |SSL_SSLV3,
 697         SSL_EXPORT|SSL_EXP40,
 698         0,
 699         40,
 700         56,
 701         SSL_ALL_CIPHERS,
 702         SSL_ALL_STRENGTHS,
 703         },
 704
 705 /* Cipher 27 VRS */
 706         {
 707         1,
 708         SSL3_TXT_KRB5_RC2_40_CBC_SHA,
 709         SSL3_CK_KRB5_RC2_40_CBC_SHA,
 710         SSL_kKRB5|SSL_aKRB5|  SSL_RC2|SSL_SHA1   |SSL_SSLV3,
 711         SSL_EXPORT|SSL_EXP40,
 712         0,
 713         40,
 714         128,
 715         SSL_ALL_CIPHERS,
 716         SSL_ALL_STRENGTHS,
 717         },
 718
 719 /* Cipher 28 VRS */
 720         {
 721         1,
 722         SSL3_TXT_KRB5_RC4_40_SHA,
 723         SSL3_CK_KRB5_RC4_40_SHA,
 724         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_SHA1   |SSL_SSLV3,
 725         SSL_EXPORT|SSL_EXP40,
 726         0,
 727         128,
 728         128,
 729         SSL_ALL_CIPHERS,
 730         SSL_ALL_STRENGTHS,
 731         },
 732
 733 /* Cipher 29 VRS */
 734         {
 735         1,
 736         SSL3_TXT_KRB5_DES_40_CBC_MD5,
 737         SSL3_CK_KRB5_DES_40_CBC_MD5,
 738         SSL_kKRB5|SSL_aKRB5|  SSL_DES|SSL_MD5    |SSL_SSLV3,
 739         SSL_EXPORT|SSL_EXP40,
 740         0,
 741         40,
 742         56,
 743         SSL_ALL_CIPHERS,
 744         SSL_ALL_STRENGTHS,
 745         },
 746
 747 /* Cipher 2A VRS */
 748         {
 749         1,
 750         SSL3_TXT_KRB5_RC2_40_CBC_MD5,
 751         SSL3_CK_KRB5_RC2_40_CBC_MD5,
 752         SSL_kKRB5|SSL_aKRB5|  SSL_RC2|SSL_MD5    |SSL_SSLV3,
 753         SSL_EXPORT|SSL_EXP40,
 754         0,
 755         40,
 756         128,
 757         SSL_ALL_CIPHERS,
 758         SSL_ALL_STRENGTHS,
 759         },
 760
 761 /* Cipher 2B VRS */
 762         {
 763         1,
 764         SSL3_TXT_KRB5_RC4_40_MD5,
 765         SSL3_CK_KRB5_RC4_40_MD5,
 766         SSL_kKRB5|SSL_aKRB5|  SSL_RC4|SSL_MD5    |SSL_SSLV3,
 767         SSL_EXPORT|SSL_EXP40,
 768         0,
 769         128,
 770         128,
 771         SSL_ALL_CIPHERS,
 772         SSL_ALL_STRENGTHS,
 773         },
 774 #endif  /* OPENSSL_NO_KRB5 */
 775 /* New AES ciphersuites */
 776
 777 /* Cipher 2F */
 778         {
 779         1,
 780         TLS1_TXT_RSA_WITH_AES_128_SHA,
 781         TLS1_CK_RSA_WITH_AES_128_SHA,
 782         SSL_kRSA|SSL_aRSA|SSL_AES|SSL_SHA |SSL_TLSV1,
 783         SSL_NOT_EXP|SSL_HIGH,
 784         0,
 785         128,
 786         128,
 787         SSL_ALL_CIPHERS,
 788         SSL_ALL_STRENGTHS,
 789         },
 790 /* Cipher 30 */
 791         {
 792         0,
 793         TLS1_TXT_DH_DSS_WITH_AES_128_SHA,
 794         TLS1_CK_DH_DSS_WITH_AES_128_SHA,
 795         SSL_kDHd|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 796         SSL_NOT_EXP|SSL_HIGH,
 797         0,
 798         128,
 799         128,
 800         SSL_ALL_CIPHERS,
 801         SSL_ALL_STRENGTHS,
 802         },
 803 /* Cipher 31 */
 804         {
 805         0,
 806         TLS1_TXT_DH_RSA_WITH_AES_128_SHA,
 807         TLS1_CK_DH_RSA_WITH_AES_128_SHA,
 808         SSL_kDHr|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 809         SSL_NOT_EXP|SSL_HIGH,
 810         0,
 811         128,
 812         128,
 813         SSL_ALL_CIPHERS,
 814         SSL_ALL_STRENGTHS,
 815         },
 816 /* Cipher 32 */
 817         {
 818         1,
 819         TLS1_TXT_DHE_DSS_WITH_AES_128_SHA,
 820         TLS1_CK_DHE_DSS_WITH_AES_128_SHA,
 821         SSL_kEDH|SSL_aDSS|SSL_AES|SSL_SHA|SSL_TLSV1,
 822         SSL_NOT_EXP|SSL_HIGH,
 823         0,
 824         128,
 825         128,
 826         SSL_ALL_CIPHERS,
 827         SSL_ALL_STRENGTHS,
 828         },
 829 /* Cipher 33 */
 830         {
 831         1,
 832         TLS1_TXT_DHE_RSA_WITH_AES_128_SHA,
 833         TLS1_CK_DHE_RSA_WITH_AES_128_SHA,
 834         SSL_kEDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
 835         SSL_NOT_EXP|SSL_HIGH,
 836         0,
 837         128,
 838         128,
 839         SSL_ALL_CIPHERS,
 840         SSL_ALL_STRENGTHS,
 841         },
 842 /* Cipher 34 */
 843         {
 844         1,
 845         TLS1_TXT_ADH_WITH_AES_128_SHA,
 846         TLS1_CK_ADH_WITH_AES_128_SHA,
 847         SSL_kEDH|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,
 848         SSL_NOT_EXP|SSL_HIGH,
 849         0,
 850         128,
 851         128,
 852         SSL_ALL_CIPHERS,
 853         SSL_ALL_STRENGTHS,
 854         },
 855
 856 /* Cipher 35 */
 857         {
 858         1,
 859         TLS1_TXT_RSA_WITH_AES_256_SHA,
 860         TLS1_CK_RSA_WITH_AES_256_SHA,
 861         SSL_kRSA|SSL_aRSA|SSL_AES|SSL_SHA |SSL_TLSV1,
 862         SSL_NOT_EXP|SSL_HIGH,
 863         0,
 864         256,
 865         256,
 866         SSL_ALL_CIPHERS,
 867         SSL_ALL_STRENGTHS,
 868         },
 869 /* Cipher 36 */
 870         {
 871         0,
 872         TLS1_TXT_DH_DSS_WITH_AES_256_SHA,
 873         TLS1_CK_DH_DSS_WITH_AES_256_SHA,
 874         SSL_kDHd|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 875         SSL_NOT_EXP|SSL_HIGH,
 876         0,
 877         256,
 878         256,
 879         SSL_ALL_CIPHERS,
 880         SSL_ALL_STRENGTHS,
 881         },
 882 /* Cipher 37 */
 883         {
 884         0,
 885         TLS1_TXT_DH_RSA_WITH_AES_256_SHA,
 886         TLS1_CK_DH_RSA_WITH_AES_256_SHA,
 887         SSL_kDHr|SSL_aDH|SSL_AES|SSL_SHA|SSL_TLSV1,
 888         SSL_NOT_EXP|SSL_HIGH,
 889         0,
 890         256,
 891         256,
 892         SSL_ALL_CIPHERS,
 893         SSL_ALL_STRENGTHS,
 894         },
 895 /* Cipher 38 */
 896         {
 897         1,
 898         TLS1_TXT_DHE_DSS_WITH_AES_256_SHA,
 899         TLS1_CK_DHE_DSS_WITH_AES_256_SHA,
 900         SSL_kEDH|SSL_aDSS|SSL_AES|SSL_SHA|SSL_TLSV1,
 901         SSL_NOT_EXP|SSL_HIGH,
 902         0,
 903         256,
 904         256,
 905         SSL_ALL_CIPHERS,
 906         SSL_ALL_STRENGTHS,
 907         },
 908 /* Cipher 39 */
 909         {
 910         1,
 911         TLS1_TXT_DHE_RSA_WITH_AES_256_SHA,
 912         TLS1_CK_DHE_RSA_WITH_AES_256_SHA,
 913         SSL_kEDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
 914         SSL_NOT_EXP|SSL_HIGH,
 915         0,
 916         256,
 917         256,
 918         SSL_ALL_CIPHERS,
 919         SSL_ALL_STRENGTHS,
 920         },
 921         /* Cipher 3A */
 922         {
 923         1,
 924         TLS1_TXT_ADH_WITH_AES_256_SHA,
 925         TLS1_CK_ADH_WITH_AES_256_SHA,
 926         SSL_kEDH|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,
 927         SSL_NOT_EXP|SSL_HIGH,
 928         0,
 929         256,
 930         256,
 931         SSL_ALL_CIPHERS,
 932         SSL_ALL_STRENGTHS,
 933         },
 934
 935 #ifndef OPENSSL_NO_CAMELLIA
 936         /* Camellia ciphersuites from RFC4132 (128-bit portion) */
 937
 938         /* Cipher 41 */
 939         {
 940         1,
 941         TLS1_TXT_RSA_WITH_CAMELLIA_128_CBC_SHA,
 942         TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA,
 943         SSL_kRSA|SSL_aRSA|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
 944         SSL_NOT_EXP|SSL_HIGH,
 945         0,
 946         128,
 947         128,
 948         SSL_ALL_CIPHERS,
 949         SSL_ALL_STRENGTHS
 950         },
 951         /* Cipher 42 */
 952         {
 953         0, /* not implemented (non-ephemeral DH) */
 954         TLS1_TXT_DH_DSS_WITH_CAMELLIA_128_CBC_SHA,
 955         TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA,
 956         SSL_kDHd|SSL_aDH|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
 957         SSL_NOT_EXP|SSL_HIGH,
 958         0,
 959         128,
 960         128,
 961         SSL_ALL_CIPHERS,
 962         SSL_ALL_STRENGTHS
 963         },
 964         /* Cipher 43 */
 965         {
 966         0, /* not implemented (non-ephemeral DH) */
 967         TLS1_TXT_DH_RSA_WITH_CAMELLIA_128_CBC_SHA,
 968         TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA,
 969         SSL_kDHr|SSL_aDH|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
 970         SSL_NOT_EXP|SSL_HIGH,
 971         0,
 972         128,
 973         128,
 974         SSL_ALL_CIPHERS,
 975         SSL_ALL_STRENGTHS
 976         },
 977         /* Cipher 44 */
 978         {
 979         1,
 980         TLS1_TXT_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
 981         TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA,
 982         SSL_kEDH|SSL_aDSS|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
 983         SSL_NOT_EXP|SSL_HIGH,
 984         0,
 985         128,
 986         128,
 987         SSL_ALL_CIPHERS,
 988         SSL_ALL_STRENGTHS
 989         },
 990         /* Cipher 45 */
 991         {
 992         1,
 993         TLS1_TXT_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
 994         TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA,
 995         SSL_kEDH|SSL_aRSA|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
 996         SSL_NOT_EXP|SSL_HIGH,
 997         0,
 998         128,
 999         128,
1000         SSL_ALL_CIPHERS,
1001         SSL_ALL_STRENGTHS
1002         },
1003         /* Cipher 46 */
1004         {
1005         1,
1006         TLS1_TXT_ADH_WITH_CAMELLIA_128_CBC_SHA,
1007         TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA,
1008         SSL_kEDH|SSL_aNULL|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1009         SSL_NOT_EXP|SSL_HIGH,
1010         0,
1011         128,
1012         128,
1013         SSL_ALL_CIPHERS,
1014         SSL_ALL_STRENGTHS
1015         },
1016 #endif /* OPENSSL_NO_CAMELLIA */
1017
1018 #if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES
1019         /* New TLS Export CipherSuites from expired ID */
1020 #if 0
1021         /* Cipher 60 */
1022             {
1023             1,
1024             TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5,
1025             TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5,
1026             SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_MD5|SSL_TLSV1,
1027             SSL_EXPORT|SSL_EXP56,
1028             0,
1029             56,
1030             128,
1031             SSL_ALL_CIPHERS,
1032             SSL_ALL_STRENGTHS,
1033             },
1034         /* Cipher 61 */
1035             {
1036             1,
1037             TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
1038             TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
1039             SSL_kRSA|SSL_aRSA|SSL_RC2|SSL_MD5|SSL_TLSV1,
1040             SSL_EXPORT|SSL_EXP56,
1041             0,
1042             56,
1043             128,
1044             SSL_ALL_CIPHERS,
1045             SSL_ALL_STRENGTHS,
1046             },
1047 #endif
1048         /* Cipher 62 */
1049             {
1050             1,
1051             TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA,
1052             TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA,
1053             SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA|SSL_TLSV1,
1054             SSL_EXPORT|SSL_EXP56,
1055             0,
1056             56,
1057             56,
1058             SSL_ALL_CIPHERS,
1059             SSL_ALL_STRENGTHS,
1060             },
1061         /* Cipher 63 */
1062             {
1063             1,
1064             TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
1065             TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
1066             SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA|SSL_TLSV1,
1067             SSL_EXPORT|SSL_EXP56,
1068             0,
1069             56,
1070             56,
1071             SSL_ALL_CIPHERS,
1072             SSL_ALL_STRENGTHS,
1073             },
1074         /* Cipher 64 */
1075             {
1076             1,
1077             TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA,
1078             TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA,
1079             SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1080             SSL_EXPORT|SSL_EXP56,
1081             0,
1082             56,
1083             128,
1084             SSL_ALL_CIPHERS,
1085             SSL_ALL_STRENGTHS,
1086             },
1087         /* Cipher 65 */
1088             {
1089             1,
1090             TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
1091             TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
1092             SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
1093             SSL_EXPORT|SSL_EXP56,
1094             0,
1095             56,
1096             128,
1097             SSL_ALL_CIPHERS,
1098             SSL_ALL_STRENGTHS,
1099             },
1100         /* Cipher 66 */
1101             {
1102             1,
1103             TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA,
1104             TLS1_CK_DHE_DSS_WITH_RC4_128_SHA,
1105             SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
1106             SSL_NOT_EXP|SSL_MEDIUM,
1107             0,
1108             128,
1109             128,
1110             SSL_ALL_CIPHERS,
1111             SSL_ALL_STRENGTHS
1112             },
1113 #endif
1114
1115 #ifndef OPENSSL_NO_CAMELLIA
1116         /* Camellia ciphersuites from RFC4132 (256-bit portion) */
1117
1118         /* Cipher 84 */
1119         {
1120         1,
1121         TLS1_TXT_RSA_WITH_CAMELLIA_256_CBC_SHA,
1122         TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA,
1123         SSL_kRSA|SSL_aRSA|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1124         SSL_NOT_EXP|SSL_HIGH,
1125         0,
1126         256,
1127         256,
1128         SSL_ALL_CIPHERS,
1129         SSL_ALL_STRENGTHS
1130         },
1131         /* Cipher 85 */
1132         {
1133         0, /* not implemented (non-ephemeral DH) */
1134         TLS1_TXT_DH_DSS_WITH_CAMELLIA_256_CBC_SHA,
1135         TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA,
1136         SSL_kDHd|SSL_aDH|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1137         SSL_NOT_EXP|SSL_HIGH,
1138         0,
1139         256,
1140         256,
1141         SSL_ALL_CIPHERS,
1142         SSL_ALL_STRENGTHS
1143         },
1144         /* Cipher 86 */
1145         {
1146         0, /* not implemented (non-ephemeral DH) */
1147         TLS1_TXT_DH_RSA_WITH_CAMELLIA_256_CBC_SHA,
1148         TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA,
1149         SSL_kDHr|SSL_aDH|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1150         SSL_NOT_EXP|SSL_HIGH,
1151         0,
1152         256,
1153         256,
1154         SSL_ALL_CIPHERS,
1155         SSL_ALL_STRENGTHS
1156         },
1157         /* Cipher 87 */
1158         {
1159         1,
1160         TLS1_TXT_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
1161         TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA,
1162         SSL_kEDH|SSL_aDSS|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1163         SSL_NOT_EXP|SSL_HIGH,
1164         0,
1165         256,
1166         256,
1167         SSL_ALL_CIPHERS,
1168         SSL_ALL_STRENGTHS
1169         },
1170         /* Cipher 88 */
1171         {
1172         1,
1173         TLS1_TXT_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
1174         TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA,
1175         SSL_kEDH|SSL_aRSA|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1176         SSL_NOT_EXP|SSL_HIGH,
1177         0,
1178         256,
1179         256,
1180         SSL_ALL_CIPHERS,
1181         SSL_ALL_STRENGTHS
1182         },
1183         /* Cipher 89 */
1184         {
1185         1,
1186         TLS1_TXT_ADH_WITH_CAMELLIA_256_CBC_SHA,
1187         TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA,
1188         SSL_kEDH|SSL_aNULL|SSL_CAMELLIA|SSL_SHA|SSL_TLSV1,
1189         SSL_NOT_EXP|SSL_HIGH,
1190         0,
1191         256,
1192         256,
1193         SSL_ALL_CIPHERS,
1194         SSL_ALL_STRENGTHS
1195         },
1196 #endif /* OPENSSL_NO_CAMELLIA */
1197
1198 #ifndef OPENSSL_NO_PSK
1199         /* Cipher 8A */
1200         {
1201         1,
1202         TLS1_TXT_PSK_WITH_RC4_128_SHA,
1203         TLS1_CK_PSK_WITH_RC4_128_SHA,
1204         SSL_kPSK|SSL_aPSK|SSL_RC4|SSL_SHA|SSL_TLSV1,
1205         SSL_NOT_EXP|SSL_MEDIUM,
1206         0,
1207         128,
1208         128,
1209         SSL_ALL_CIPHERS,
1210         SSL_ALL_STRENGTHS,
1211         },
1212
1213         /* Cipher 8B */
1214         {
1215         1,
1216         TLS1_TXT_PSK_WITH_3DES_EDE_CBC_SHA,
1217         TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA,
1218         SSL_kPSK|SSL_aPSK|SSL_3DES|SSL_SHA|SSL_TLSV1,
1219         SSL_NOT_EXP|SSL_HIGH,
1220         0,
1221         168,
1222         168,
1223         SSL_ALL_CIPHERS,
1224         SSL_ALL_STRENGTHS,
1225         },
1226
1227         /* Cipher 8C */
1228         {
1229         1,
1230         TLS1_TXT_PSK_WITH_AES_128_CBC_SHA,
1231         TLS1_CK_PSK_WITH_AES_128_CBC_SHA,
1232         SSL_kPSK|SSL_aPSK|SSL_AES|SSL_SHA|SSL_TLSV1,
1233         SSL_NOT_EXP|SSL_MEDIUM,
1234         0,
1235         128,
1236         128,
1237         SSL_ALL_CIPHERS,
1238         SSL_ALL_STRENGTHS,
1239         },
1240
1241         /* Cipher 8D */
1242         {
1243         1,
1244         TLS1_TXT_PSK_WITH_AES_256_CBC_SHA,
1245         TLS1_CK_PSK_WITH_AES_256_CBC_SHA,
1246         SSL_kPSK|SSL_aPSK|SSL_AES|SSL_SHA|SSL_TLSV1,
1247         SSL_NOT_EXP|SSL_HIGH,
1248         0,
1249         256,
1250         256,
1251         SSL_ALL_CIPHERS,
1252         SSL_ALL_STRENGTHS,
1253         },
1254 #endif  /* OPENSSL_NO_PSK */
1255 #ifndef OPENSSL_NO_ECDH
1256         /* Cipher C001 */
1257             {
1258             1,
1259             TLS1_TXT_ECDH_ECDSA_WITH_NULL_SHA,
1260             TLS1_CK_ECDH_ECDSA_WITH_NULL_SHA,
1261             SSL_kECDH|SSL_aECDSA|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1262             SSL_NOT_EXP,
1263             0,
1264             0,
1265             0,
1266             SSL_ALL_CIPHERS,
1267             SSL_ALL_STRENGTHS,
1268             },
1269
1270         /* Cipher C002 */
1271             {
1272             1,
1273             TLS1_TXT_ECDH_ECDSA_WITH_RC4_128_SHA,
1274             TLS1_CK_ECDH_ECDSA_WITH_RC4_128_SHA,
1275             SSL_kECDH|SSL_aECDSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1276             SSL_NOT_EXP,
1277             0,
1278             128,
1279             128,
1280             SSL_ALL_CIPHERS,
1281             SSL_ALL_STRENGTHS,
1282             },
1283
1284         /* Cipher C003 */
1285             {
1286             1,
1287             TLS1_TXT_ECDH_ECDSA_WITH_DES_192_CBC3_SHA,
1288             TLS1_CK_ECDH_ECDSA_WITH_DES_192_CBC3_SHA,
1289             SSL_kECDH|SSL_aECDSA|SSL_3DES|SSL_SHA|SSL_TLSV1,
1290             SSL_NOT_EXP|SSL_HIGH,
1291             0,
1292             168,
1293             168,
1294             SSL_ALL_CIPHERS,
1295             SSL_ALL_STRENGTHS,
1296             },
1297
1298         /* Cipher C004 */
1299             {
1300             1,
1301             TLS1_TXT_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
1302             TLS1_CK_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
1303             SSL_kECDH|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1304             SSL_NOT_EXP|SSL_HIGH,
1305             0,
1306             128,
1307             128,
1308             SSL_ALL_CIPHERS,
1309             SSL_ALL_STRENGTHS,
1310             },
1311
1312         /* Cipher C005 */
1313             {
1314             1,
1315             TLS1_TXT_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
1316             TLS1_CK_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
1317             SSL_kECDH|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1318             SSL_NOT_EXP|SSL_HIGH,
1319             0,
1320             256,
1321             256,
1322             SSL_ALL_CIPHERS,
1323             SSL_ALL_STRENGTHS,
1324             },
1325
1326         /* Cipher C006 */
1327             {
1328             1,
1329             TLS1_TXT_ECDHE_ECDSA_WITH_NULL_SHA,
1330             TLS1_CK_ECDHE_ECDSA_WITH_NULL_SHA,
1331             SSL_kECDHE|SSL_aECDSA|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1332             SSL_NOT_EXP,
1333             0,
1334             0,
1335             0,
1336             SSL_ALL_CIPHERS,
1337             SSL_ALL_STRENGTHS,
1338             },
1339
1340         /* Cipher C007 */
1341             {
1342             1,
1343             TLS1_TXT_ECDHE_ECDSA_WITH_RC4_128_SHA,
1344             TLS1_CK_ECDHE_ECDSA_WITH_RC4_128_SHA,
1345             SSL_kECDHE|SSL_aECDSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1346             SSL_NOT_EXP,
1347             0,
1348             128,
1349             128,
1350             SSL_ALL_CIPHERS,
1351             SSL_ALL_STRENGTHS,
1352             },
1353
1354         /* Cipher C008 */
1355             {
1356             1,
1357             TLS1_TXT_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
1358             TLS1_CK_ECDHE_ECDSA_WITH_DES_192_CBC3_SHA,
1359             SSL_kECDHE|SSL_aECDSA|SSL_3DES|SSL_SHA|SSL_TLSV1,
1360             SSL_NOT_EXP|SSL_HIGH,
1361             0,
1362             168,
1363             168,
1364             SSL_ALL_CIPHERS,
1365             SSL_ALL_STRENGTHS,
1366             },
1367
1368         /* Cipher C009 */
1369             {
1370             1,
1371             TLS1_TXT_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
1372             TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
1373             SSL_kECDHE|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1374             SSL_NOT_EXP|SSL_HIGH,
1375             0,
1376             128,
1377             128,
1378             SSL_ALL_CIPHERS,
1379             SSL_ALL_STRENGTHS,
1380             },
1381
1382         /* Cipher C00A */
1383             {
1384             1,
1385             TLS1_TXT_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
1386             TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
1387             SSL_kECDHE|SSL_aECDSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1388             SSL_NOT_EXP|SSL_HIGH,
1389             0,
1390             256,
1391             256,
1392             SSL_ALL_CIPHERS,
1393             SSL_ALL_STRENGTHS,
1394             },
1395
1396         /* Cipher C00B */
1397             {
1398             1,
1399             TLS1_TXT_ECDH_RSA_WITH_NULL_SHA,
1400             TLS1_CK_ECDH_RSA_WITH_NULL_SHA,
1401             SSL_kECDH|SSL_aRSA|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1402             SSL_NOT_EXP,
1403             0,
1404             0,
1405             0,
1406             SSL_ALL_CIPHERS,
1407             SSL_ALL_STRENGTHS,
1408             },
1409
1410         /* Cipher C00C */
1411             {
1412             1,
1413             TLS1_TXT_ECDH_RSA_WITH_RC4_128_SHA,
1414             TLS1_CK_ECDH_RSA_WITH_RC4_128_SHA,
1415             SSL_kECDH|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1416             SSL_NOT_EXP,
1417             0,
1418             128,
1419             128,
1420             SSL_ALL_CIPHERS,
1421             SSL_ALL_STRENGTHS,
1422             },
1423
1424         /* Cipher C00D */
1425             {
1426             1,
1427             TLS1_TXT_ECDH_RSA_WITH_DES_192_CBC3_SHA,
1428             TLS1_CK_ECDH_RSA_WITH_DES_192_CBC3_SHA,
1429             SSL_kECDH|SSL_aRSA|SSL_3DES|SSL_SHA|SSL_TLSV1,
1430             SSL_NOT_EXP|SSL_HIGH,
1431             0,
1432             168,
1433             168,
1434             SSL_ALL_CIPHERS,
1435             SSL_ALL_STRENGTHS,
1436             },
1437
1438         /* Cipher C00E */
1439             {
1440             1,
1441             TLS1_TXT_ECDH_RSA_WITH_AES_128_CBC_SHA,
1442             TLS1_CK_ECDH_RSA_WITH_AES_128_CBC_SHA,
1443             SSL_kECDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1444             SSL_NOT_EXP|SSL_HIGH,
1445             0,
1446             128,
1447             128,
1448             SSL_ALL_CIPHERS,
1449             SSL_ALL_STRENGTHS,
1450             },
1451
1452         /* Cipher C00F */
1453             {
1454             1,
1455             TLS1_TXT_ECDH_RSA_WITH_AES_256_CBC_SHA,
1456             TLS1_CK_ECDH_RSA_WITH_AES_256_CBC_SHA,
1457             SSL_kECDH|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1458             SSL_NOT_EXP|SSL_HIGH,
1459             0,
1460             256,
1461             256,
1462             SSL_ALL_CIPHERS,
1463             SSL_ALL_STRENGTHS,
1464             },
1465
1466         /* Cipher C010 */
1467             {
1468             1,
1469             TLS1_TXT_ECDHE_RSA_WITH_NULL_SHA,
1470             TLS1_CK_ECDHE_RSA_WITH_NULL_SHA,
1471             SSL_kECDHE|SSL_aRSA|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1472             SSL_NOT_EXP,
1473             0,
1474             0,
1475             0,
1476             SSL_ALL_CIPHERS,
1477             SSL_ALL_STRENGTHS,
1478             },
1479
1480         /* Cipher C011 */
1481             {
1482             1,
1483             TLS1_TXT_ECDHE_RSA_WITH_RC4_128_SHA,
1484             TLS1_CK_ECDHE_RSA_WITH_RC4_128_SHA,
1485             SSL_kECDHE|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
1486             SSL_NOT_EXP,
1487             0,
1488             128,
1489             128,
1490             SSL_ALL_CIPHERS,
1491             SSL_ALL_STRENGTHS,
1492             },
1493
1494         /* Cipher C012 */
1495             {
1496             1,
1497             TLS1_TXT_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
1498             TLS1_CK_ECDHE_RSA_WITH_DES_192_CBC3_SHA,
1499             SSL_kECDHE|SSL_aRSA|SSL_3DES|SSL_SHA|SSL_TLSV1,
1500             SSL_NOT_EXP|SSL_HIGH,
1501             0,
1502             168,
1503             168,
1504             SSL_ALL_CIPHERS,
1505             SSL_ALL_STRENGTHS,
1506             },
1507
1508         /* Cipher C013 */
1509             {
1510             1,
1511             TLS1_TXT_ECDHE_RSA_WITH_AES_128_CBC_SHA,
1512             TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA,
1513             SSL_kECDHE|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1514             SSL_NOT_EXP|SSL_HIGH,
1515             0,
1516             128,
1517             128,
1518             SSL_ALL_CIPHERS,
1519             SSL_ALL_STRENGTHS,
1520             },
1521
1522         /* Cipher C014 */
1523             {
1524             1,
1525             TLS1_TXT_ECDHE_RSA_WITH_AES_256_CBC_SHA,
1526             TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA,
1527             SSL_kECDHE|SSL_aRSA|SSL_AES|SSL_SHA|SSL_TLSV1,
1528             SSL_NOT_EXP|SSL_HIGH,
1529             0,
1530             256,
1531             256,
1532             SSL_ALL_CIPHERS,
1533             SSL_ALL_STRENGTHS,
1534             },
1535
1536         /* Cipher C015 */
1537             {
1538             1,
1539             TLS1_TXT_ECDH_anon_WITH_NULL_SHA,
1540             TLS1_CK_ECDH_anon_WITH_NULL_SHA,
1541             SSL_kECDHE|SSL_aNULL|SSL_eNULL|SSL_SHA|SSL_TLSV1,
1542             SSL_NOT_EXP,
1543             0,
1544             0,
1545             0,
1546             SSL_ALL_CIPHERS,
1547             SSL_ALL_STRENGTHS,
1548             },
1549
1550         /* Cipher C016 */
1551             {
1552             1,
1553             TLS1_TXT_ECDH_anon_WITH_RC4_128_SHA,
1554             TLS1_CK_ECDH_anon_WITH_RC4_128_SHA,
1555             SSL_kECDHE|SSL_aNULL|SSL_RC4|SSL_SHA|SSL_TLSV1,
1556             SSL_NOT_EXP,
1557             0,
1558             128,
1559             128,
1560             SSL_ALL_CIPHERS,
1561             SSL_ALL_STRENGTHS,
1562             },
1563
1564         /* Cipher C017 */
1565             {
1566             1,
1567             TLS1_TXT_ECDH_anon_WITH_DES_192_CBC3_SHA,
1568             TLS1_CK_ECDH_anon_WITH_DES_192_CBC3_SHA,
1569             SSL_kECDHE|SSL_aNULL|SSL_3DES|SSL_SHA|SSL_TLSV1,
1570             SSL_NOT_EXP|SSL_HIGH,
1571             0,
1572             168,
1573             168,
1574             SSL_ALL_CIPHERS,
1575             SSL_ALL_STRENGTHS,
1576             },
1577
1578         /* Cipher C018 */
1579             {
1580             1,
1581             TLS1_TXT_ECDH_anon_WITH_AES_128_CBC_SHA,
1582             TLS1_CK_ECDH_anon_WITH_AES_128_CBC_SHA,
1583             SSL_kECDHE|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,
1584             SSL_NOT_EXP|SSL_HIGH,
1585             0,
1586             128,
1587             128,
1588             SSL_ALL_CIPHERS,
1589             SSL_ALL_STRENGTHS,
1590             },
1591
1592         /* Cipher C019 */
1593             {
1594             1,
1595             TLS1_TXT_ECDH_anon_WITH_AES_256_CBC_SHA,
1596             TLS1_CK_ECDH_anon_WITH_AES_256_CBC_SHA,
1597             SSL_kECDHE|SSL_aNULL|SSL_AES|SSL_SHA|SSL_TLSV1,
1598             SSL_NOT_EXP|SSL_HIGH,
1599             0,
1600             256,
1601             256,
1602             SSL_ALL_CIPHERS,
1603             SSL_ALL_STRENGTHS,
1604             },
1605 #endif  /* OPENSSL_NO_ECDH */
1606
1607
1608 /* end of list */
1609         };
1610
1611 SSL3_ENC_METHOD SSLv3_enc_data={
1612         ssl3_enc,
1613         ssl3_mac,
1614         ssl3_setup_key_block,
1615         ssl3_generate_master_secret,
1616         ssl3_change_cipher_state,
1617         ssl3_final_finish_mac,
1618         MD5_DIGEST_LENGTH+SHA_DIGEST_LENGTH,
1619         ssl3_cert_verify_mac,
1620         SSL3_MD_CLIENT_FINISHED_CONST,4,
1621         SSL3_MD_SERVER_FINISHED_CONST,4,
1622         ssl3_alert_code,
1623         };
1624
1625 long ssl3_default_timeout(void)
1626         {
1627         /* 2 hours, the 24 hours mentioned in the SSLv3 spec
1628          * is way too long for http, the cache would over fill */
1629         return(60*60*2);
1630         }
1631
1632 int ssl3_num_ciphers(void)
1633         {
1634         return(SSL3_NUM_CIPHERS);
1635         }
1636
1637 SSL_CIPHER *ssl3_get_cipher(unsigned int u)
1638         {
1639         if (u < SSL3_NUM_CIPHERS)
1640                 return(&(ssl3_ciphers[SSL3_NUM_CIPHERS-1-u]));
1641         else
1642                 return(NULL);
1643         }
1644
1645 int ssl3_pending(const SSL *s)
1646         {
1647         if (s->rstate == SSL_ST_READ_BODY)
1648                 return 0;
1649
1650         return (s->s3->rrec.type == SSL3_RT_APPLICATION_DATA) ? s->s3->rrec.length : 0;
1651         }
1652
1653 int ssl3_new(SSL *s)
1654         {
1655         SSL3_STATE *s3;
1656
1657         if ((s3=OPENSSL_malloc(sizeof *s3)) == NULL) goto err;
1658         memset(s3,0,sizeof *s3);
1659         EVP_MD_CTX_init(&s3->finish_dgst1);
1660         EVP_MD_CTX_init(&s3->finish_dgst2);
1661         memset(s3->rrec.seq_num,0,sizeof(s3->rrec.seq_num));
1662         memset(s3->wrec.seq_num,0,sizeof(s3->wrec.seq_num));
1663
1664         s->s3=s3;
1665
1666         s->method->ssl_clear(s);
1667         return(1);
1668 err:
1669         return(0);
1670         }
1671
1672 void ssl3_free(SSL *s)
1673         {
1674         if(s == NULL)
1675             return;
1676
1677         ssl3_cleanup_key_block(s);
1678         if (s->s3->rbuf.buf != NULL)
1679                 OPENSSL_free(s->s3->rbuf.buf);
1680         if (s->s3->wbuf.buf != NULL)
1681                 OPENSSL_free(s->s3->wbuf.buf);
1682         if (s->s3->rrec.comp != NULL)
1683                 OPENSSL_free(s->s3->rrec.comp);
1684 #ifndef OPENSSL_NO_DH
1685         if (s->s3->tmp.dh != NULL)
1686                 DH_free(s->s3->tmp.dh);
1687 #endif
1688 #ifndef OPENSSL_NO_ECDH
1689         if (s->s3->tmp.ecdh != NULL)
1690                 EC_KEY_free(s->s3->tmp.ecdh);
1691 #endif
1692
1693         if (s->s3->tmp.ca_names != NULL)
1694                 sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
1695         EVP_MD_CTX_cleanup(&s->s3->finish_dgst1);
1696         EVP_MD_CTX_cleanup(&s->s3->finish_dgst2);
1697
1698         OPENSSL_cleanse(s->s3,sizeof *s->s3);
1699         OPENSSL_free(s->s3);
1700         s->s3=NULL;
1701         }
1702
1703 void ssl3_clear(SSL *s)
1704         {
1705         unsigned char *rp,*wp;
1706         size_t rlen, wlen;
1707
1708         ssl3_cleanup_key_block(s);
1709         if (s->s3->tmp.ca_names != NULL)
1710                 sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
1711
1712         if (s->s3->rrec.comp != NULL)
1713                 {
1714                 OPENSSL_free(s->s3->rrec.comp);
1715                 s->s3->rrec.comp=NULL;
1716                 }
1717 #ifndef OPENSSL_NO_DH
1718         if (s->s3->tmp.dh != NULL)
1719                 DH_free(s->s3->tmp.dh);
1720 #endif
1721 #ifndef OPENSSL_NO_ECDH
1722         if (s->s3->tmp.ecdh != NULL)
1723                 EC_KEY_free(s->s3->tmp.ecdh);
1724 #endif
1725
1726         rp = s->s3->rbuf.buf;
1727         wp = s->s3->wbuf.buf;
1728         rlen = s->s3->rbuf.len;
1729         wlen = s->s3->wbuf.len;
1730
1731         EVP_MD_CTX_cleanup(&s->s3->finish_dgst1);
1732         EVP_MD_CTX_cleanup(&s->s3->finish_dgst2);
1733
1734         memset(s->s3,0,sizeof *s->s3);
1735         s->s3->rbuf.buf = rp;
1736         s->s3->wbuf.buf = wp;
1737         s->s3->rbuf.len = rlen;
1738         s->s3->wbuf.len = wlen;
1739
1740         ssl_free_wbio_buffer(s);
1741
1742         s->packet_length=0;
1743         s->s3->renegotiate=0;
1744         s->s3->total_renegotiations=0;
1745         s->s3->num_renegotiations=0;
1746         s->s3->in_read_app_data=0;
1747         s->version=SSL3_VERSION;
1748         }
1749
1750 long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
1751         {
1752         int ret=0;
1753
1754 #if !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_RSA)
1755         if (
1756 #ifndef OPENSSL_NO_RSA
1757             cmd == SSL_CTRL_SET_TMP_RSA ||
1758             cmd == SSL_CTRL_SET_TMP_RSA_CB ||
1759 #endif
1760 #ifndef OPENSSL_NO_DSA
1761             cmd == SSL_CTRL_SET_TMP_DH ||
1762             cmd == SSL_CTRL_SET_TMP_DH_CB ||
1763 #endif
1764                 0)
1765                 {
1766                 if (!ssl_cert_inst(&s->cert))
1767                         {
1768                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
1769                         return(0);
1770                         }
1771                 }
1772 #endif
1773
1774         switch (cmd)
1775                 {
1776         case SSL_CTRL_GET_SESSION_REUSED:
1777                 ret=s->hit;
1778                 break;
1779         case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
1780                 break;
1781         case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
1782                 ret=s->s3->num_renegotiations;
1783                 break;
1784         case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
1785                 ret=s->s3->num_renegotiations;
1786                 s->s3->num_renegotiations=0;
1787                 break;
1788         case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
1789                 ret=s->s3->total_renegotiations;
1790                 break;
1791         case SSL_CTRL_GET_FLAGS:
1792                 ret=(int)(s->s3->flags);
1793                 break;
1794 #ifndef OPENSSL_NO_RSA
1795         case SSL_CTRL_NEED_TMP_RSA:
1796                 if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) &&
1797                     ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
1798                      (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8))))
1799                         ret = 1;
1800                 break;
1801         case SSL_CTRL_SET_TMP_RSA:
1802                 {
1803                         RSA *rsa = (RSA *)parg;
1804                         if (rsa == NULL)
1805                                 {
1806                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
1807                                 return(ret);
1808                                 }
1809                         if ((rsa = RSAPrivateKey_dup(rsa)) == NULL)
1810                                 {
1811                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_RSA_LIB);
1812                                 return(ret);
1813                                 }
1814                         if (s->cert->rsa_tmp != NULL)
1815                                 RSA_free(s->cert->rsa_tmp);
1816                         s->cert->rsa_tmp = rsa;
1817                         ret = 1;
1818                 }
1819                 break;
1820         case SSL_CTRL_SET_TMP_RSA_CB:
1821                 {
1822                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1823                 return(ret);
1824                 }
1825                 break;
1826 #endif
1827 #ifndef OPENSSL_NO_DH
1828         case SSL_CTRL_SET_TMP_DH:
1829                 {
1830                         DH *dh = (DH *)parg;
1831                         if (dh == NULL)
1832                                 {
1833                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
1834                                 return(ret);
1835                                 }
1836                         if ((dh = DHparams_dup(dh)) == NULL)
1837                                 {
1838                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
1839                                 return(ret);
1840                                 }
1841                         if (!(s->options & SSL_OP_SINGLE_DH_USE))
1842                                 {
1843                                 if (!DH_generate_key(dh))
1844                                         {
1845                                         DH_free(dh);
1846                                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
1847                                         return(ret);
1848                                         }
1849                                 }
1850                         if (s->cert->dh_tmp != NULL)
1851                                 DH_free(s->cert->dh_tmp);
1852                         s->cert->dh_tmp = dh;
1853                         ret = 1;
1854                 }
1855                 break;
1856         case SSL_CTRL_SET_TMP_DH_CB:
1857                 {
1858                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1859                 return(ret);
1860                 }
1861                 break;
1862 #endif
1863 #ifndef OPENSSL_NO_ECDH
1864         case SSL_CTRL_SET_TMP_ECDH:
1865                 {
1866                 EC_KEY *ecdh = NULL;
1867
1868                 if (parg == NULL)
1869                         {
1870                         SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
1871                         return(ret);
1872                         }
1873                 if (!EC_KEY_up_ref((EC_KEY *)parg))
1874                         {
1875                         SSLerr(SSL_F_SSL3_CTRL,ERR_R_ECDH_LIB);
1876                         return(ret);
1877                         }
1878                 ecdh = (EC_KEY *)parg;
1879                 if (!(s->options & SSL_OP_SINGLE_ECDH_USE))
1880                         {
1881                         if (!EC_KEY_generate_key(ecdh))
1882                                 {
1883                                 EC_KEY_free(ecdh);
1884                                 SSLerr(SSL_F_SSL3_CTRL,ERR_R_ECDH_LIB);
1885                                 return(ret);
1886                                 }
1887                         }
1888                 if (s->cert->ecdh_tmp != NULL)
1889                         EC_KEY_free(s->cert->ecdh_tmp);
1890                 s->cert->ecdh_tmp = ecdh;
1891                 ret = 1;
1892                 }
1893                 break;
1894         case SSL_CTRL_SET_TMP_ECDH_CB:
1895                 {
1896                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1897                 return(ret);
1898                 }
1899                 break;
1900 #endif /* !OPENSSL_NO_ECDH */
1901 #ifndef OPENSSL_NO_TLSEXT
1902         case SSL_CTRL_SET_TLSEXT_HOSTNAME:
1903                 if (larg == TLSEXT_NAMETYPE_host_name)
1904                         {
1905                         if (s->tlsext_hostname != NULL)
1906                                 OPENSSL_free(s->tlsext_hostname);
1907                         s->tlsext_hostname = NULL;
1908
1909                         ret = 1;
1910                         if (parg == NULL)
1911                                 break;
1912                         if (strlen((char *)parg) > TLSEXT_MAXLEN_host_name)
1913                                 {
1914                                 SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME);
1915                                 return 0;
1916                                 }
1917                         if ((s->tlsext_hostname = BUF_strdup((char *)parg)) == NULL)
1918                                 {
1919                                 SSLerr(SSL_F_SSL3_CTRL, ERR_R_INTERNAL_ERROR);
1920                                 return 0;
1921                                 }
1922                         }
1923                 else
1924                         {
1925                         SSLerr(SSL_F_SSL3_CTRL, SSL_R_SSL3_EXT_INVALID_SERVERNAME_TYPE);
1926                         return 0;
1927                         }
1928                 s->options |= SSL_OP_NO_SSLv2; /* can't use extension w/ SSL 2.0 format */
1929                 break;
1930 #endif /* !OPENSSL_NO_TLSEXT */
1931         default:
1932                 break;
1933                 }
1934         return(ret);
1935         }
1936
1937 long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp)(void))
1938         {
1939         int ret=0;
1940
1941 #if !defined(OPENSSL_NO_DSA) || !defined(OPENSSL_NO_RSA)
1942         if (
1943 #ifndef OPENSSL_NO_RSA
1944             cmd == SSL_CTRL_SET_TMP_RSA_CB ||
1945 #endif
1946 #ifndef OPENSSL_NO_DSA
1947             cmd == SSL_CTRL_SET_TMP_DH_CB ||
1948 #endif
1949                 0)
1950                 {
1951                 if (!ssl_cert_inst(&s->cert))
1952                         {
1953                         SSLerr(SSL_F_SSL3_CALLBACK_CTRL, ERR_R_MALLOC_FAILURE);
1954                         return(0);
1955                         }
1956                 }
1957 #endif
1958
1959         switch (cmd)
1960                 {
1961 #ifndef OPENSSL_NO_RSA
1962         case SSL_CTRL_SET_TMP_RSA_CB:
1963                 {
1964                 s->cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
1965                 }
1966                 break;
1967 #endif
1968 #ifndef OPENSSL_NO_DH
1969         case SSL_CTRL_SET_TMP_DH_CB:
1970                 {
1971                 s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
1972                 }
1973                 break;
1974 #endif
1975 #ifndef OPENSSL_NO_ECDH
1976         case SSL_CTRL_SET_TMP_ECDH_CB:
1977                 {
1978                 s->cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;
1979                 }
1980                 break;
1981 #endif
1982         default:
1983                 break;
1984                 }
1985         return(ret);
1986         }
1987
1988 long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
1989         {
1990         CERT *cert;
1991
1992         cert=ctx->cert;
1993
1994         switch (cmd)
1995                 {
1996 #ifndef OPENSSL_NO_RSA
1997         case SSL_CTRL_NEED_TMP_RSA:
1998                 if (    (cert->rsa_tmp == NULL) &&
1999                         ((cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
2000                          (EVP_PKEY_size(cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8)))
2001                         )
2002                         return(1);
2003                 else
2004                         return(0);
2005                 /* break; */
2006         case SSL_CTRL_SET_TMP_RSA:
2007                 {
2008                 RSA *rsa;
2009                 int i;
2010
2011                 rsa=(RSA *)parg;
2012                 i=1;
2013                 if (rsa == NULL)
2014                         i=0;
2015                 else
2016                         {
2017                         if ((rsa=RSAPrivateKey_dup(rsa)) == NULL)
2018                                 i=0;
2019                         }
2020                 if (!i)
2021                         {
2022                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_RSA_LIB);
2023                         return(0);
2024                         }
2025                 else
2026                         {
2027                         if (cert->rsa_tmp != NULL)
2028                                 RSA_free(cert->rsa_tmp);
2029                         cert->rsa_tmp=rsa;
2030                         return(1);
2031                         }
2032                 }
2033                 /* break; */
2034         case SSL_CTRL_SET_TMP_RSA_CB:
2035                 {
2036                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
2037                 return(0);
2038                 }
2039                 break;
2040 #endif
2041 #ifndef OPENSSL_NO_DH
2042         case SSL_CTRL_SET_TMP_DH:
2043                 {
2044                 DH *new=NULL,*dh;
2045
2046                 dh=(DH *)parg;
2047                 if ((new=DHparams_dup(dh)) == NULL)
2048                         {
2049                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
2050                         return 0;
2051                         }
2052                 if (!(ctx->options & SSL_OP_SINGLE_DH_USE))
2053                         {
2054                         if (!DH_generate_key(new))
2055                                 {
2056                                 SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
2057                                 DH_free(new);
2058                                 return 0;
2059                                 }
2060                         }
2061                 if (cert->dh_tmp != NULL)
2062                         DH_free(cert->dh_tmp);
2063                 cert->dh_tmp=new;
2064                 return 1;
2065                 }
2066                 /*break; */
2067         case SSL_CTRL_SET_TMP_DH_CB:
2068                 {
2069                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
2070                 return(0);
2071                 }
2072                 break;
2073 #endif
2074 #ifndef OPENSSL_NO_ECDH
2075         case SSL_CTRL_SET_TMP_ECDH:
2076                 {
2077                 EC_KEY *ecdh = NULL;
2078
2079                 if (parg == NULL)
2080                         {
2081                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
2082                         return 0;
2083                         }
2084                 ecdh = EC_KEY_dup((EC_KEY *)parg);
2085                 if (ecdh == NULL)
2086                         {
2087                         SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_EC_LIB);
2088                         return 0;
2089                         }
2090                 if (!(ctx->options & SSL_OP_SINGLE_ECDH_USE))
2091                         {
2092                         if (!EC_KEY_generate_key(ecdh))
2093                                 {
2094                                 EC_KEY_free(ecdh);
2095                                 SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_ECDH_LIB);
2096                                 return 0;
2097                                 }
2098                         }
2099
2100                 if (cert->ecdh_tmp != NULL)
2101                         {
2102                         EC_KEY_free(cert->ecdh_tmp);
2103                         }
2104                 cert->ecdh_tmp = ecdh;
2105                 return 1;
2106                 }
2107                 /* break; */
2108         case SSL_CTRL_SET_TMP_ECDH_CB:
2109                 {
2110                 SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
2111                 return(0);
2112                 }
2113                 break;
2114 #endif /* !OPENSSL_NO_ECDH */
2115 #ifndef OPENSSL_NO_TLSEXT
2116         case SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG:
2117                 ctx->tlsext_servername_arg=parg;
2118                 break;
2119 #endif /* !OPENSSL_NO_TLSEXT */
2120         /* A Thawte special :-) */
2121         case SSL_CTRL_EXTRA_CHAIN_CERT:
2122                 if (ctx->extra_certs == NULL)
2123                         {
2124                         if ((ctx->extra_certs=sk_X509_new_null()) == NULL)
2125                                 return(0);
2126                         }
2127                 sk_X509_push(ctx->extra_certs,(X509 *)parg);
2128                 break;
2129
2130         default:
2131                 return(0);
2132                 }
2133         return(1);
2134         }
2135
2136 long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp)(void))
2137         {
2138         CERT *cert;
2139
2140         cert=ctx->cert;
2141
2142         switch (cmd)
2143                 {
2144 #ifndef OPENSSL_NO_RSA
2145         case SSL_CTRL_SET_TMP_RSA_CB:
2146                 {
2147                 cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
2148                 }
2149                 break;
2150 #endif
2151 #ifndef OPENSSL_NO_DH
2152         case SSL_CTRL_SET_TMP_DH_CB:
2153                 {
2154                 cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
2155                 }
2156                 break;
2157 #endif
2158 #ifndef OPENSSL_NO_ECDH
2159         case SSL_CTRL_SET_TMP_ECDH_CB:
2160                 {
2161                 cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;
2162                 }
2163                 break;
2164 #endif
2165 #ifndef OPENSSL_NO_TLSEXT
2166         case SSL_CTRL_SET_TLSEXT_SERVERNAME_CB:
2167                 ctx->tlsext_servername_callback=(int (*)(SSL *,int *,void *))fp;
2168                 break;
2169 #endif
2170         default:
2171                 return(0);
2172                 }
2173         return(1);
2174         }
2175
2176 /* This function needs to check if the ciphers required are actually
2177  * available */
2178 SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
2179         {
2180         SSL_CIPHER c,*cp;
2181         unsigned long id;
2182
2183         id=0x03000000L|((unsigned long)p[0]<<8L)|(unsigned long)p[1];
2184         c.id=id;
2185         cp = (SSL_CIPHER *)OBJ_bsearch((char *)&c,
2186                 (char *)ssl3_ciphers,
2187                 SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER),
2188                 FP_ICC ssl_cipher_id_cmp);
2189         if (cp == NULL || cp->valid == 0)
2190                 return NULL;
2191         else
2192                 return cp;
2193         }
2194
2195 int ssl3_put_cipher_by_char(const SSL_CIPHER *c, unsigned char *p)
2196         {
2197         long l;
2198
2199         if (p != NULL)
2200                 {
2201                 l=c->id;
2202                 if ((l & 0xff000000) != 0x03000000) return(0);
2203                 p[0]=((unsigned char)(l>> 8L))&0xFF;
2204                 p[1]=((unsigned char)(l     ))&0xFF;
2205                 }
2206         return(2);
2207         }
2208
2209 SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
2210              STACK_OF(SSL_CIPHER) *srvr)
2211         {
2212         SSL_CIPHER *c,*ret=NULL;
2213         STACK_OF(SSL_CIPHER) *prio, *allow;
2214         int i,ii,ok;
2215         unsigned int j;
2216 #ifndef OPENSSL_NO_TLSEXT
2217 #ifndef OPENSSL_NO_EC
2218         int ec_ok, ec_nid;
2219         unsigned char ec_search1 = 0, ec_search2 = 0;
2220 #endif /* OPENSSL_NO_EC */
2221 #endif /* OPENSSL_NO_TLSEXT */
2222         CERT *cert;
2223         unsigned long alg,mask,emask;
2224
2225         /* Let's see which ciphers we can support */
2226         cert=s->cert;
2227
2228 #if 0
2229         /* Do not set the compare functions, because this may lead to a
2230          * reordering by "id". We want to keep the original ordering.
2231          * We may pay a price in performance during sk_SSL_CIPHER_find(),
2232          * but would have to pay with the price of sk_SSL_CIPHER_dup().
2233          */
2234         sk_SSL_CIPHER_set_cmp_func(srvr, ssl_cipher_ptr_id_cmp);
2235         sk_SSL_CIPHER_set_cmp_func(clnt, ssl_cipher_ptr_id_cmp);
2236 #endif
2237
2238 #ifdef CIPHER_DEBUG
2239         printf("Server has %d from %p:\n", sk_SSL_CIPHER_num(srvr), srvr);
2240         for(i=0 ; i < sk_SSL_CIPHER_num(srvr) ; ++i)
2241             {
2242             c=sk_SSL_CIPHER_value(srvr,i);
2243             printf("%p:%s\n",c,c->name);
2244             }
2245         printf("Client sent %d from %p:\n", sk_SSL_CIPHER_num(clnt), clnt);
2246         for(i=0 ; i < sk_SSL_CIPHER_num(clnt) ; ++i)
2247             {
2248             c=sk_SSL_CIPHER_value(clnt,i);
2249             printf("%p:%s\n",c,c->name);
2250             }
2251 #endif
2252
2253         if (s->options & SSL_OP_CIPHER_SERVER_PREFERENCE)
2254             {
2255             prio = srvr;
2256             allow = clnt;
2257             }
2258         else
2259             {
2260             prio = clnt;
2261             allow = srvr;
2262             }
2263
2264         for (i=0; i<sk_SSL_CIPHER_num(prio); i++)
2265                 {
2266                 c=sk_SSL_CIPHER_value(prio,i);
2267
2268                 ssl_set_cert_masks(cert,c);
2269                 mask=cert->mask;
2270                 emask=cert->export_mask;
2271
2272 #ifdef KSSL_DEBUG
2273                 printf("ssl3_choose_cipher %d alg= %lx\n", i,c->algorithms);
2274 #endif    /* KSSL_DEBUG */
2275
2276                 alg=c->algorithms&(SSL_MKEY_MASK|SSL_AUTH_MASK);
2277 #ifndef OPENSSL_NO_KRB5
2278                 if (alg & SSL_KRB5)
2279                         {
2280                         if ( !kssl_keytab_is_available(s->kssl_ctx) )
2281                             continue;
2282                         }
2283 #endif /* OPENSSL_NO_KRB5 */
2284 #ifndef OPENSSL_NO_PSK
2285                 /* with PSK there must be server callback set */
2286                 if ((alg & SSL_PSK) && s->psk_server_callback == NULL)
2287                         continue;
2288 #endif /* OPENSSL_NO_PSK */
2289
2290                 if (SSL_C_IS_EXPORT(c))
2291                         {
2292                         ok=((alg & emask) == alg)?1:0;
2293 #ifdef CIPHER_DEBUG
2294                         printf("%d:[%08lX:%08lX]%p:%s (export)\n",ok,alg,emask,
2295                                c,c->name);
2296 #endif
2297                         }
2298                 else
2299                         {
2300                         ok=((alg & mask) == alg)?1:0;
2301 #ifdef CIPHER_DEBUG
2302                         printf("%d:[%08lX:%08lX]%p:%s\n",ok,alg,mask,c,
2303                                c->name);
2304 #endif
2305                         }
2306
2307 #ifndef OPENSSL_NO_TLSEXT
2308 #ifndef OPENSSL_NO_EC
2309                 if (
2310                         /* if we are considering an ECC cipher suite that uses our certificate */
2311                         (alg & SSL_aECDSA)
2312                         /* and we have an ECC certificate */
2313                         && (s->cert->pkeys[SSL_PKEY_ECC].x509 != NULL)
2314                         /* and the client specified a Supported Point Formats extension */
2315                         && ((s->session->tlsext_ecpointformatlist_length > 0) && (s->session->tlsext_ecpointformatlist != NULL))
2316                         /* and our certificate's point is compressed */
2317                         && (
2318                                 (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info != NULL)
2319                                 && (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->key != NULL)
2320                                 && (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->key->public_key != NULL)
2321                                 && (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->key->public_key->data != NULL)
2322                                 && (
2323                                         (*(s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->key->public_key->data) == POINT_CONVERSION_COMPRESSED)
2324                                         || (*(s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->key->public_key->data) == POINT_CONVERSION_COMPRESSED + 1)
2325                                         )
2326                                 )
2327                 )
2328                         {
2329                         ec_ok = 0;
2330                         /* if our certificate's curve is over a field type that the client does not support
2331                          * then do not allow this cipher suite to be negotiated */
2332                         if (
2333                                 (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec != NULL)
2334                                 && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group != NULL)
2335                                 && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group->meth != NULL)
2336                                 && (EC_METHOD_get_field_type(s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group->meth) == NID_X9_62_prime_field)
2337                         )
2338                                 {
2339                                 for (j = 0; j < s->session->tlsext_ecpointformatlist_length; j++)
2340                                         {
2341                                         if (s->session->tlsext_ecpointformatlist[j] == TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime)
2342                                                 {
2343                                                 ec_ok = 1;
2344                                                 break;
2345                                                 }
2346                                         }
2347                                 }
2348                         else if (EC_METHOD_get_field_type(s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group->meth) == NID_X9_62_characteristic_two_field)
2349                                 {
2350                                 for (j = 0; j < s->session->tlsext_ecpointformatlist_length; j++)
2351                                         {
2352                                         if (s->session->tlsext_ecpointformatlist[j] == TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2)
2353                                                 {
2354                                                 ec_ok = 1;
2355                                                 break;
2356                                                 }
2357                                         }
2358                                 }
2359                         ok = ok && ec_ok;
2360                         }
2361                 if (
2362                         /* if we are considering an ECC cipher suite that uses our certificate */
2363                         (alg & SSL_aECDSA)
2364                         /* and we have an ECC certificate */
2365                         && (s->cert->pkeys[SSL_PKEY_ECC].x509 != NULL)
2366                         /* and the client specified an EllipticCurves extension */
2367                         && ((s->session->tlsext_ellipticcurvelist_length > 0) && (s->session->tlsext_ellipticcurvelist != NULL))
2368                 )
2369                         {
2370                         ec_ok = 0;
2371                         if (
2372                                 (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec != NULL)
2373                                 && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group != NULL)
2374                         )
2375                                 {
2376                                 ec_nid = EC_GROUP_get_curve_name(s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group);
2377                                 if ((ec_nid == 0)
2378                                         && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group->meth != NULL)
2379                                 )
2380                                         {
2381                                         if (EC_METHOD_get_field_type(s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group->meth) == NID_X9_62_prime_field)
2382                                                 {
2383                                                 ec_search1 = 0xFF;
2384                                                 ec_search2 = 0x01;
2385                                                 }
2386                                         else if (EC_METHOD_get_field_type(s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group->meth) == NID_X9_62_characteristic_two_field)
2387                                                 {
2388                                                 ec_search1 = 0xFF;
2389                                                 ec_search2 = 0x02;
2390                                                 }
2391                                         }
2392                                 else
2393                                         {
2394                                         ec_search1 = 0x00;
2395                                         ec_search2 = tls1_ec_nid2curve_id(ec_nid);
2396                                         }
2397                                 if ((ec_search1 != 0) || (ec_search2 != 0))
2398                                         {
2399                                         for (j = 0; j < s->session->tlsext_ellipticcurvelist_length / 2; j++)
2400                                                 {
2401                                                 if ((s->session->tlsext_ellipticcurvelist[2*j] == ec_search1) && (s->session->tlsext_ellipticcurvelist[2*j+1] == ec_search2))
2402                                                         {
2403                                                         ec_ok = 1;
2404                                                         break;
2405                                                         }
2406                                                 }
2407                                         }
2408                                 }
2409                         ok = ok && ec_ok;
2410                         }
2411                 if (
2412                         /* if we are considering an ECC cipher suite that uses an ephemeral EC key */
2413                         ((alg & SSL_kECDH) || (alg & SSL_kECDHE))
2414                         /* and we have an ephemeral EC key */
2415                         && (s->cert->ecdh_tmp != NULL)
2416                         /* and the client specified an EllipticCurves extension */
2417                         && ((s->session->tlsext_ellipticcurvelist_length > 0) && (s->session->tlsext_ellipticcurvelist != NULL))
2418                 )
2419                         {
2420                         ec_ok = 0;
2421                         if (s->cert->ecdh_tmp->group != NULL)
2422                                 {
2423                                 ec_nid = EC_GROUP_get_curve_name(s->cert->ecdh_tmp->group);
2424                                 if ((ec_nid == 0)
2425                                         && (s->cert->ecdh_tmp->group->meth != NULL)
2426                                 )
2427                                         {
2428                                         if (EC_METHOD_get_field_type(s->cert->ecdh_tmp->group->meth) == NID_X9_62_prime_field)
2429                                                 {
2430                                                 ec_search1 = 0xFF;
2431                                                 ec_search2 = 0x01;
2432                                                 }
2433                                         else if (EC_METHOD_get_field_type(s->cert->ecdh_tmp->group->meth) == NID_X9_62_characteristic_two_field)
2434                                                 {
2435                                                 ec_search1 = 0xFF;
2436                                                 ec_search2 = 0x02;
2437                                                 }
2438                                         }
2439                                 else
2440                                         {
2441                                         ec_search1 = 0x00;
2442                                         ec_search2 = tls1_ec_nid2curve_id(ec_nid);
2443                                         }
2444                                 if ((ec_search1 != 0) || (ec_search2 != 0))
2445                                         {
2446                                         for (j = 0; j < s->session->tlsext_ellipticcurvelist_length / 2; j++)
2447                                                 {
2448                                                 if ((s->session->tlsext_ellipticcurvelist[2*j] == ec_search1) && (s->session->tlsext_ellipticcurvelist[2*j+1] == ec_search2))
2449                                                         {
2450                                                         ec_ok = 1;
2451                                                         break;
2452                                                         }
2453                                                 }
2454                                         }
2455                                 }
2456                         ok = ok && ec_ok;
2457                         }
2458 #endif /* OPENSSL_NO_EC */
2459 #endif /* OPENSSL_NO_TLSEXT */
2460
2461                 if (!ok) continue;
2462                 ii=sk_SSL_CIPHER_find(allow,c);
2463                 if (ii >= 0)
2464                         {
2465                         ret=sk_SSL_CIPHER_value(allow,ii);
2466                         break;
2467                         }
2468                 }
2469         return(ret);
2470         }
2471
2472 int ssl3_get_req_cert_type(SSL *s, unsigned char *p)
2473         {
2474         int ret=0;
2475         unsigned long alg;
2476
2477         alg=s->s3->tmp.new_cipher->algorithms;
2478
2479 #ifndef OPENSSL_NO_DH
2480         if (alg & (SSL_kDHr|SSL_kEDH))
2481                 {
2482 #  ifndef OPENSSL_NO_RSA
2483                 p[ret++]=SSL3_CT_RSA_FIXED_DH;
2484 #  endif
2485 #  ifndef OPENSSL_NO_DSA
2486                 p[ret++]=SSL3_CT_DSS_FIXED_DH;
2487 #  endif
2488                 }
2489         if ((s->version == SSL3_VERSION) &&
2490                 (alg & (SSL_kEDH|SSL_kDHd|SSL_kDHr)))
2491                 {
2492 #  ifndef OPENSSL_NO_RSA
2493                 p[ret++]=SSL3_CT_RSA_EPHEMERAL_DH;
2494 #  endif
2495 #  ifndef OPENSSL_NO_DSA
2496                 p[ret++]=SSL3_CT_DSS_EPHEMERAL_DH;
2497 #  endif
2498                 }
2499 #endif /* !OPENSSL_NO_DH */
2500 #ifndef OPENSSL_NO_RSA
2501         p[ret++]=SSL3_CT_RSA_SIGN;
2502 #endif
2503 #ifndef OPENSSL_NO_DSA
2504         p[ret++]=SSL3_CT_DSS_SIGN;
2505 #endif
2506 #ifndef OPENSSL_NO_ECDH
2507         /* We should ask for fixed ECDH certificates only
2508          * for SSL_kECDH (and not SSL_kECDHE)
2509          */
2510         if ((alg & SSL_kECDH) && (s->version >= TLS1_VERSION))
2511                 {
2512                 p[ret++]=TLS_CT_RSA_FIXED_ECDH;
2513                 p[ret++]=TLS_CT_ECDSA_FIXED_ECDH;
2514                 }
2515 #endif
2516
2517 #ifndef OPENSSL_NO_ECDSA
2518         /* ECDSA certs can be used with RSA cipher suites as well
2519          * so we don't need to check for SSL_kECDH or SSL_kECDHE
2520          */
2521         if (s->version >= TLS1_VERSION)
2522                 {
2523                 p[ret++]=TLS_CT_ECDSA_SIGN;
2524                 }
2525 #endif
2526         return(ret);
2527         }
2528
2529 int ssl3_shutdown(SSL *s)
2530         {
2531
2532         /* Don't do anything much if we have not done the handshake or
2533          * we don't want to send messages :-) */
2534         if ((s->quiet_shutdown) || (s->state == SSL_ST_BEFORE))
2535                 {
2536                 s->shutdown=(SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
2537                 return(1);
2538                 }
2539
2540         if (!(s->shutdown & SSL_SENT_SHUTDOWN))
2541                 {
2542                 s->shutdown|=SSL_SENT_SHUTDOWN;
2543 #if 1
2544                 ssl3_send_alert(s,SSL3_AL_WARNING,SSL_AD_CLOSE_NOTIFY);
2545 #endif
2546                 /* our shutdown alert has been sent now, and if it still needs
2547                  * to be written, s->s3->alert_dispatch will be true */
2548                 }
2549         else if (s->s3->alert_dispatch)
2550                 {
2551                 /* resend it if not sent */
2552 #if 1
2553                 s->method->ssl_dispatch_alert(s);
2554 #endif
2555                 }
2556         else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN))
2557                 {
2558                 /* If we are waiting for a close from our peer, we are closed */
2559                 s->method->ssl_read_bytes(s,0,NULL,0,0);
2560                 }
2561
2562         if ((s->shutdown == (SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN)) &&
2563                 !s->s3->alert_dispatch)
2564                 return(1);
2565         else
2566                 return(0);
2567         }
2568
2569 int ssl3_write(SSL *s, const void *buf, int len)
2570         {
2571         int ret,n;
2572
2573 #if 0
2574         if (s->shutdown & SSL_SEND_SHUTDOWN)
2575                 {
2576                 s->rwstate=SSL_NOTHING;
2577                 return(0);
2578                 }
2579 #endif
2580         clear_sys_error();
2581         if (s->s3->renegotiate) ssl3_renegotiate_check(s);
2582
2583         /* This is an experimental flag that sends the
2584          * last handshake message in the same packet as the first
2585          * use data - used to see if it helps the TCP protocol during
2586          * session-id reuse */
2587         /* The second test is because the buffer may have been removed */
2588         if ((s->s3->flags & SSL3_FLAGS_POP_BUFFER) && (s->wbio == s->bbio))
2589                 {
2590                 /* First time through, we write into the buffer */
2591                 if (s->s3->delay_buf_pop_ret == 0)
2592                         {
2593                         ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
2594                                              buf,len);
2595                         if (ret <= 0) return(ret);
2596
2597                         s->s3->delay_buf_pop_ret=ret;
2598                         }
2599
2600                 s->rwstate=SSL_WRITING;
2601                 n=BIO_flush(s->wbio);
2602                 if (n <= 0) return(n);
2603                 s->rwstate=SSL_NOTHING;
2604
2605                 /* We have flushed the buffer, so remove it */
2606                 ssl_free_wbio_buffer(s);
2607                 s->s3->flags&= ~SSL3_FLAGS_POP_BUFFER;
2608
2609                 ret=s->s3->delay_buf_pop_ret;
2610                 s->s3->delay_buf_pop_ret=0;
2611                 }
2612         else
2613                 {
2614                 ret=s->method->ssl_write_bytes(s,SSL3_RT_APPLICATION_DATA,
2615                         buf,len);
2616                 if (ret <= 0) return(ret);
2617                 }
2618
2619         return(ret);
2620         }
2621
2622 static int ssl3_read_internal(SSL *s, void *buf, int len, int peek)
2623         {
2624         int ret;
2625
2626         clear_sys_error();
2627         if (s->s3->renegotiate) ssl3_renegotiate_check(s);
2628         s->s3->in_read_app_data=1;
2629         ret=s->method->ssl_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
2630         if ((ret == -1) && (s->s3->in_read_app_data == 2))
2631                 {
2632                 /* ssl3_read_bytes decided to call s->handshake_func, which
2633                  * called ssl3_read_bytes to read handshake data.
2634                  * However, ssl3_read_bytes actually found application data
2635                  * and thinks that application data makes sense here; so disable
2636                  * handshake processing and try to read application data again. */
2637                 s->in_handshake++;
2638                 ret=s->method->ssl_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
2639                 s->in_handshake--;
2640                 }
2641         else
2642                 s->s3->in_read_app_data=0;
2643
2644         return(ret);
2645         }
2646
2647 int ssl3_read(SSL *s, void *buf, int len)
2648         {
2649         return ssl3_read_internal(s, buf, len, 0);
2650         }
2651
2652 int ssl3_peek(SSL *s, void *buf, int len)
2653         {
2654         return ssl3_read_internal(s, buf, len, 1);
2655         }
2656
2657 int ssl3_renegotiate(SSL *s)
2658         {
2659         if (s->handshake_func == NULL)
2660                 return(1);
2661
2662         if (s->s3->flags & SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS)
2663                 return(0);
2664
2665         s->s3->renegotiate=1;
2666         return(1);
2667         }
2668
2669 int ssl3_renegotiate_check(SSL *s)
2670         {
2671         int ret=0;
2672
2673         if (s->s3->renegotiate)
2674                 {
2675                 if (    (s->s3->rbuf.left == 0) &&
2676                         (s->s3->wbuf.left == 0) &&
2677                         !SSL_in_init(s))
2678                         {
2679 /*
2680 if we are the server, and we have sent a 'RENEGOTIATE' message, we
2681 need to go to SSL_ST_ACCEPT.
2682 */
2683                         /* SSL_ST_ACCEPT */
2684                         s->state=SSL_ST_RENEGOTIATE;
2685                         s->s3->renegotiate=0;
2686                         s->s3->num_renegotiations++;
2687                         s->s3->total_renegotiations++;
2688                         ret=1;
2689                         }
2690                 }
2691         return(ret);
2692         }
2693