diff options
Diffstat (limited to '')
-rw-r--r-- | src/lib/libssl/ssl3.h | 441 |
1 files changed, 0 insertions, 441 deletions
diff --git a/src/lib/libssl/ssl3.h b/src/lib/libssl/ssl3.h deleted file mode 100644 index 1b1110b4e9..0000000000 --- a/src/lib/libssl/ssl3.h +++ /dev/null | |||
@@ -1,441 +0,0 @@ | |||
1 | /* $OpenBSD: ssl3.h,v 1.60 2024/03/02 11:47:41 tb Exp $ */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | /* ==================================================================== | ||
59 | * Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved. | ||
60 | * | ||
61 | * Redistribution and use in source and binary forms, with or without | ||
62 | * modification, are permitted provided that the following conditions | ||
63 | * are met: | ||
64 | * | ||
65 | * 1. Redistributions of source code must retain the above copyright | ||
66 | * notice, this list of conditions and the following disclaimer. | ||
67 | * | ||
68 | * 2. Redistributions in binary form must reproduce the above copyright | ||
69 | * notice, this list of conditions and the following disclaimer in | ||
70 | * the documentation and/or other materials provided with the | ||
71 | * distribution. | ||
72 | * | ||
73 | * 3. All advertising materials mentioning features or use of this | ||
74 | * software must display the following acknowledgment: | ||
75 | * "This product includes software developed by the OpenSSL Project | ||
76 | * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" | ||
77 | * | ||
78 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
79 | * endorse or promote products derived from this software without | ||
80 | * prior written permission. For written permission, please contact | ||
81 | * openssl-core@openssl.org. | ||
82 | * | ||
83 | * 5. Products derived from this software may not be called "OpenSSL" | ||
84 | * nor may "OpenSSL" appear in their names without prior written | ||
85 | * permission of the OpenSSL Project. | ||
86 | * | ||
87 | * 6. Redistributions of any form whatsoever must retain the following | ||
88 | * acknowledgment: | ||
89 | * "This product includes software developed by the OpenSSL Project | ||
90 | * for use in the OpenSSL Toolkit (http://www.openssl.org/)" | ||
91 | * | ||
92 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
93 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
94 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
95 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
96 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
97 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
98 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
99 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
100 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
101 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
102 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
103 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
104 | * ==================================================================== | ||
105 | * | ||
106 | * This product includes cryptographic software written by Eric Young | ||
107 | * (eay@cryptsoft.com). This product includes software written by Tim | ||
108 | * Hudson (tjh@cryptsoft.com). | ||
109 | * | ||
110 | */ | ||
111 | /* ==================================================================== | ||
112 | * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. | ||
113 | * ECC cipher suite support in OpenSSL originally developed by | ||
114 | * SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project. | ||
115 | */ | ||
116 | |||
117 | #ifndef HEADER_SSL3_H | ||
118 | #define HEADER_SSL3_H | ||
119 | |||
120 | #include <openssl/opensslconf.h> | ||
121 | #include <openssl/buffer.h> | ||
122 | #include <openssl/evp.h> | ||
123 | #include <openssl/ssl.h> | ||
124 | |||
125 | #ifdef __cplusplus | ||
126 | extern "C" { | ||
127 | #endif | ||
128 | |||
129 | /* TLS_EMPTY_RENEGOTIATION_INFO_SCSV from RFC 5746. */ | ||
130 | #define SSL3_CK_SCSV 0x030000FF | ||
131 | |||
132 | /* TLS_FALLBACK_SCSV from draft-ietf-tls-downgrade-scsv-03. */ | ||
133 | #define SSL3_CK_FALLBACK_SCSV 0x03005600 | ||
134 | |||
135 | #define SSL3_CK_RSA_NULL_MD5 0x03000001 | ||
136 | #define SSL3_CK_RSA_NULL_SHA 0x03000002 | ||
137 | #define SSL3_CK_RSA_RC4_40_MD5 0x03000003 | ||
138 | #define SSL3_CK_RSA_RC4_128_MD5 0x03000004 | ||
139 | #define SSL3_CK_RSA_RC4_128_SHA 0x03000005 | ||
140 | #define SSL3_CK_RSA_RC2_40_MD5 0x03000006 | ||
141 | #define SSL3_CK_RSA_IDEA_128_SHA 0x03000007 | ||
142 | #define SSL3_CK_RSA_DES_40_CBC_SHA 0x03000008 | ||
143 | #define SSL3_CK_RSA_DES_64_CBC_SHA 0x03000009 | ||
144 | #define SSL3_CK_RSA_DES_192_CBC3_SHA 0x0300000A | ||
145 | |||
146 | #define SSL3_CK_DH_DSS_DES_40_CBC_SHA 0x0300000B | ||
147 | #define SSL3_CK_DH_DSS_DES_64_CBC_SHA 0x0300000C | ||
148 | #define SSL3_CK_DH_DSS_DES_192_CBC3_SHA 0x0300000D | ||
149 | #define SSL3_CK_DH_RSA_DES_40_CBC_SHA 0x0300000E | ||
150 | #define SSL3_CK_DH_RSA_DES_64_CBC_SHA 0x0300000F | ||
151 | #define SSL3_CK_DH_RSA_DES_192_CBC3_SHA 0x03000010 | ||
152 | |||
153 | #define SSL3_CK_EDH_DSS_DES_40_CBC_SHA 0x03000011 | ||
154 | #define SSL3_CK_EDH_DSS_DES_64_CBC_SHA 0x03000012 | ||
155 | #define SSL3_CK_EDH_DSS_DES_192_CBC3_SHA 0x03000013 | ||
156 | #define SSL3_CK_EDH_RSA_DES_40_CBC_SHA 0x03000014 | ||
157 | #define SSL3_CK_EDH_RSA_DES_64_CBC_SHA 0x03000015 | ||
158 | #define SSL3_CK_EDH_RSA_DES_192_CBC3_SHA 0x03000016 | ||
159 | |||
160 | #define SSL3_CK_ADH_RC4_40_MD5 0x03000017 | ||
161 | #define SSL3_CK_ADH_RC4_128_MD5 0x03000018 | ||
162 | #define SSL3_CK_ADH_DES_40_CBC_SHA 0x03000019 | ||
163 | #define SSL3_CK_ADH_DES_64_CBC_SHA 0x0300001A | ||
164 | #define SSL3_CK_ADH_DES_192_CBC_SHA 0x0300001B | ||
165 | |||
166 | /* VRS Additional Kerberos5 entries | ||
167 | */ | ||
168 | #define SSL3_CK_KRB5_DES_64_CBC_SHA 0x0300001E | ||
169 | #define SSL3_CK_KRB5_DES_192_CBC3_SHA 0x0300001F | ||
170 | #define SSL3_CK_KRB5_RC4_128_SHA 0x03000020 | ||
171 | #define SSL3_CK_KRB5_IDEA_128_CBC_SHA 0x03000021 | ||
172 | #define SSL3_CK_KRB5_DES_64_CBC_MD5 0x03000022 | ||
173 | #define SSL3_CK_KRB5_DES_192_CBC3_MD5 0x03000023 | ||
174 | #define SSL3_CK_KRB5_RC4_128_MD5 0x03000024 | ||
175 | #define SSL3_CK_KRB5_IDEA_128_CBC_MD5 0x03000025 | ||
176 | |||
177 | #define SSL3_CK_KRB5_DES_40_CBC_SHA 0x03000026 | ||
178 | #define SSL3_CK_KRB5_RC2_40_CBC_SHA 0x03000027 | ||
179 | #define SSL3_CK_KRB5_RC4_40_SHA 0x03000028 | ||
180 | #define SSL3_CK_KRB5_DES_40_CBC_MD5 0x03000029 | ||
181 | #define SSL3_CK_KRB5_RC2_40_CBC_MD5 0x0300002A | ||
182 | #define SSL3_CK_KRB5_RC4_40_MD5 0x0300002B | ||
183 | |||
184 | #define SSL3_TXT_RSA_NULL_MD5 "NULL-MD5" | ||
185 | #define SSL3_TXT_RSA_NULL_SHA "NULL-SHA" | ||
186 | #define SSL3_TXT_RSA_RC4_40_MD5 "EXP-RC4-MD5" | ||
187 | #define SSL3_TXT_RSA_RC4_128_MD5 "RC4-MD5" | ||
188 | #define SSL3_TXT_RSA_RC4_128_SHA "RC4-SHA" | ||
189 | #define SSL3_TXT_RSA_RC2_40_MD5 "EXP-RC2-CBC-MD5" | ||
190 | #define SSL3_TXT_RSA_IDEA_128_SHA "IDEA-CBC-SHA" | ||
191 | #define SSL3_TXT_RSA_DES_40_CBC_SHA "EXP-DES-CBC-SHA" | ||
192 | #define SSL3_TXT_RSA_DES_64_CBC_SHA "DES-CBC-SHA" | ||
193 | #define SSL3_TXT_RSA_DES_192_CBC3_SHA "DES-CBC3-SHA" | ||
194 | |||
195 | #define SSL3_TXT_DH_DSS_DES_40_CBC_SHA "EXP-DH-DSS-DES-CBC-SHA" | ||
196 | #define SSL3_TXT_DH_DSS_DES_64_CBC_SHA "DH-DSS-DES-CBC-SHA" | ||
197 | #define SSL3_TXT_DH_DSS_DES_192_CBC3_SHA "DH-DSS-DES-CBC3-SHA" | ||
198 | #define SSL3_TXT_DH_RSA_DES_40_CBC_SHA "EXP-DH-RSA-DES-CBC-SHA" | ||
199 | #define SSL3_TXT_DH_RSA_DES_64_CBC_SHA "DH-RSA-DES-CBC-SHA" | ||
200 | #define SSL3_TXT_DH_RSA_DES_192_CBC3_SHA "DH-RSA-DES-CBC3-SHA" | ||
201 | |||
202 | #define SSL3_TXT_EDH_DSS_DES_40_CBC_SHA "EXP-EDH-DSS-DES-CBC-SHA" | ||
203 | #define SSL3_TXT_EDH_DSS_DES_64_CBC_SHA "EDH-DSS-DES-CBC-SHA" | ||
204 | #define SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA "EDH-DSS-DES-CBC3-SHA" | ||
205 | #define SSL3_TXT_EDH_RSA_DES_40_CBC_SHA "EXP-EDH-RSA-DES-CBC-SHA" | ||
206 | #define SSL3_TXT_EDH_RSA_DES_64_CBC_SHA "EDH-RSA-DES-CBC-SHA" | ||
207 | #define SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA "EDH-RSA-DES-CBC3-SHA" | ||
208 | |||
209 | #define SSL3_TXT_ADH_RC4_40_MD5 "EXP-ADH-RC4-MD5" | ||
210 | #define SSL3_TXT_ADH_RC4_128_MD5 "ADH-RC4-MD5" | ||
211 | #define SSL3_TXT_ADH_DES_40_CBC_SHA "EXP-ADH-DES-CBC-SHA" | ||
212 | #define SSL3_TXT_ADH_DES_64_CBC_SHA "ADH-DES-CBC-SHA" | ||
213 | #define SSL3_TXT_ADH_DES_192_CBC_SHA "ADH-DES-CBC3-SHA" | ||
214 | |||
215 | #define SSL3_TXT_KRB5_DES_64_CBC_SHA "KRB5-DES-CBC-SHA" | ||
216 | #define SSL3_TXT_KRB5_DES_192_CBC3_SHA "KRB5-DES-CBC3-SHA" | ||
217 | #define SSL3_TXT_KRB5_RC4_128_SHA "KRB5-RC4-SHA" | ||
218 | #define SSL3_TXT_KRB5_IDEA_128_CBC_SHA "KRB5-IDEA-CBC-SHA" | ||
219 | #define SSL3_TXT_KRB5_DES_64_CBC_MD5 "KRB5-DES-CBC-MD5" | ||
220 | #define SSL3_TXT_KRB5_DES_192_CBC3_MD5 "KRB5-DES-CBC3-MD5" | ||
221 | #define SSL3_TXT_KRB5_RC4_128_MD5 "KRB5-RC4-MD5" | ||
222 | #define SSL3_TXT_KRB5_IDEA_128_CBC_MD5 "KRB5-IDEA-CBC-MD5" | ||
223 | |||
224 | #define SSL3_TXT_KRB5_DES_40_CBC_SHA "EXP-KRB5-DES-CBC-SHA" | ||
225 | #define SSL3_TXT_KRB5_RC2_40_CBC_SHA "EXP-KRB5-RC2-CBC-SHA" | ||
226 | #define SSL3_TXT_KRB5_RC4_40_SHA "EXP-KRB5-RC4-SHA" | ||
227 | #define SSL3_TXT_KRB5_DES_40_CBC_MD5 "EXP-KRB5-DES-CBC-MD5" | ||
228 | #define SSL3_TXT_KRB5_RC2_40_CBC_MD5 "EXP-KRB5-RC2-CBC-MD5" | ||
229 | #define SSL3_TXT_KRB5_RC4_40_MD5 "EXP-KRB5-RC4-MD5" | ||
230 | |||
231 | #define SSL3_SSL_SESSION_ID_LENGTH 32 | ||
232 | #define SSL3_MAX_SSL_SESSION_ID_LENGTH 32 | ||
233 | |||
234 | #define SSL3_MASTER_SECRET_SIZE 48 | ||
235 | #define SSL3_RANDOM_SIZE 32 | ||
236 | #define SSL3_SEQUENCE_SIZE 8 | ||
237 | #define SSL3_SESSION_ID_SIZE 32 | ||
238 | #define SSL3_CIPHER_VALUE_SIZE 2 | ||
239 | |||
240 | #define SSL3_RT_HEADER_LENGTH 5 | ||
241 | #define SSL3_HM_HEADER_LENGTH 4 | ||
242 | |||
243 | #define SSL3_ALIGN_PAYLOAD 8 | ||
244 | |||
245 | /* This is the maximum MAC (digest) size used by the SSL library. | ||
246 | * Currently maximum of 20 is used by SHA1, but we reserve for | ||
247 | * future extension for 512-bit hashes. | ||
248 | */ | ||
249 | |||
250 | #define SSL3_RT_MAX_MD_SIZE 64 | ||
251 | |||
252 | /* Maximum block size used in all ciphersuites. Currently 16 for AES. | ||
253 | */ | ||
254 | |||
255 | #define SSL_RT_MAX_CIPHER_BLOCK_SIZE 16 | ||
256 | |||
257 | #define SSL3_RT_MAX_EXTRA (16384) | ||
258 | |||
259 | /* Maximum plaintext length: defined by SSL/TLS standards */ | ||
260 | #define SSL3_RT_MAX_PLAIN_LENGTH 16384 | ||
261 | /* Maximum compression overhead: defined by SSL/TLS standards */ | ||
262 | #define SSL3_RT_MAX_COMPRESSED_OVERHEAD 1024 | ||
263 | |||
264 | /* The standards give a maximum encryption overhead of 1024 bytes. | ||
265 | * In practice the value is lower than this. The overhead is the maximum | ||
266 | * number of padding bytes (256) plus the mac size. | ||
267 | */ | ||
268 | #define SSL3_RT_MAX_ENCRYPTED_OVERHEAD (256 + SSL3_RT_MAX_MD_SIZE) | ||
269 | |||
270 | /* OpenSSL currently only uses a padding length of at most one block so | ||
271 | * the send overhead is smaller. | ||
272 | */ | ||
273 | |||
274 | #define SSL3_RT_SEND_MAX_ENCRYPTED_OVERHEAD \ | ||
275 | (SSL_RT_MAX_CIPHER_BLOCK_SIZE + SSL3_RT_MAX_MD_SIZE) | ||
276 | |||
277 | /* If compression isn't used don't include the compression overhead */ | ||
278 | #define SSL3_RT_MAX_COMPRESSED_LENGTH SSL3_RT_MAX_PLAIN_LENGTH | ||
279 | #define SSL3_RT_MAX_ENCRYPTED_LENGTH \ | ||
280 | (SSL3_RT_MAX_ENCRYPTED_OVERHEAD+SSL3_RT_MAX_COMPRESSED_LENGTH) | ||
281 | #define SSL3_RT_MAX_PACKET_SIZE \ | ||
282 | (SSL3_RT_MAX_ENCRYPTED_LENGTH+SSL3_RT_HEADER_LENGTH) | ||
283 | |||
284 | #define SSL3_MD_CLIENT_FINISHED_CONST "\x43\x4C\x4E\x54" | ||
285 | #define SSL3_MD_SERVER_FINISHED_CONST "\x53\x52\x56\x52" | ||
286 | |||
287 | #define SSL3_VERSION 0x0300 | ||
288 | #define SSL3_VERSION_MAJOR 0x03 | ||
289 | #define SSL3_VERSION_MINOR 0x00 | ||
290 | |||
291 | #define SSL3_RT_CHANGE_CIPHER_SPEC 20 | ||
292 | #define SSL3_RT_ALERT 21 | ||
293 | #define SSL3_RT_HANDSHAKE 22 | ||
294 | #define SSL3_RT_APPLICATION_DATA 23 | ||
295 | |||
296 | #define SSL3_AL_WARNING 1 | ||
297 | #define SSL3_AL_FATAL 2 | ||
298 | |||
299 | #ifndef LIBRESSL_INTERNAL | ||
300 | #define SSL3_AD_CLOSE_NOTIFY 0 | ||
301 | #define SSL3_AD_UNEXPECTED_MESSAGE 10 /* fatal */ | ||
302 | #define SSL3_AD_BAD_RECORD_MAC 20 /* fatal */ | ||
303 | #define SSL3_AD_DECOMPRESSION_FAILURE 30 /* fatal */ | ||
304 | #define SSL3_AD_HANDSHAKE_FAILURE 40 /* fatal */ | ||
305 | #define SSL3_AD_NO_CERTIFICATE 41 | ||
306 | #define SSL3_AD_BAD_CERTIFICATE 42 | ||
307 | #define SSL3_AD_UNSUPPORTED_CERTIFICATE 43 | ||
308 | #define SSL3_AD_CERTIFICATE_REVOKED 44 | ||
309 | #define SSL3_AD_CERTIFICATE_EXPIRED 45 | ||
310 | #define SSL3_AD_CERTIFICATE_UNKNOWN 46 | ||
311 | #define SSL3_AD_ILLEGAL_PARAMETER 47 /* fatal */ | ||
312 | #endif | ||
313 | |||
314 | #define TLS1_HB_REQUEST 1 | ||
315 | #define TLS1_HB_RESPONSE 2 | ||
316 | |||
317 | #define SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS 0x0001 | ||
318 | #define TLS1_FLAGS_FREEZE_TRANSCRIPT 0x0020 | ||
319 | #define SSL3_FLAGS_CCS_OK 0x0080 | ||
320 | |||
321 | /* SSLv3 */ | ||
322 | /*client */ | ||
323 | /* extra state */ | ||
324 | #define SSL3_ST_CW_FLUSH (0x100|SSL_ST_CONNECT) | ||
325 | /* write to server */ | ||
326 | #define SSL3_ST_CW_CLNT_HELLO_A (0x110|SSL_ST_CONNECT) | ||
327 | #define SSL3_ST_CW_CLNT_HELLO_B (0x111|SSL_ST_CONNECT) | ||
328 | /* read from server */ | ||
329 | #define SSL3_ST_CR_SRVR_HELLO_A (0x120|SSL_ST_CONNECT) | ||
330 | #define SSL3_ST_CR_SRVR_HELLO_B (0x121|SSL_ST_CONNECT) | ||
331 | #define DTLS1_ST_CR_HELLO_VERIFY_REQUEST_A (0x126|SSL_ST_CONNECT) | ||
332 | #define DTLS1_ST_CR_HELLO_VERIFY_REQUEST_B (0x127|SSL_ST_CONNECT) | ||
333 | #define SSL3_ST_CR_CERT_A (0x130|SSL_ST_CONNECT) | ||
334 | #define SSL3_ST_CR_CERT_B (0x131|SSL_ST_CONNECT) | ||
335 | #define SSL3_ST_CR_KEY_EXCH_A (0x140|SSL_ST_CONNECT) | ||
336 | #define SSL3_ST_CR_KEY_EXCH_B (0x141|SSL_ST_CONNECT) | ||
337 | #define SSL3_ST_CR_CERT_REQ_A (0x150|SSL_ST_CONNECT) | ||
338 | #define SSL3_ST_CR_CERT_REQ_B (0x151|SSL_ST_CONNECT) | ||
339 | #define SSL3_ST_CR_SRVR_DONE_A (0x160|SSL_ST_CONNECT) | ||
340 | #define SSL3_ST_CR_SRVR_DONE_B (0x161|SSL_ST_CONNECT) | ||
341 | /* write to server */ | ||
342 | #define SSL3_ST_CW_CERT_A (0x170|SSL_ST_CONNECT) | ||
343 | #define SSL3_ST_CW_CERT_B (0x171|SSL_ST_CONNECT) | ||
344 | #define SSL3_ST_CW_CERT_C (0x172|SSL_ST_CONNECT) | ||
345 | #define SSL3_ST_CW_CERT_D (0x173|SSL_ST_CONNECT) | ||
346 | #define SSL3_ST_CW_KEY_EXCH_A (0x180|SSL_ST_CONNECT) | ||
347 | #define SSL3_ST_CW_KEY_EXCH_B (0x181|SSL_ST_CONNECT) | ||
348 | #define SSL3_ST_CW_CERT_VRFY_A (0x190|SSL_ST_CONNECT) | ||
349 | #define SSL3_ST_CW_CERT_VRFY_B (0x191|SSL_ST_CONNECT) | ||
350 | #define SSL3_ST_CW_CHANGE_A (0x1A0|SSL_ST_CONNECT) | ||
351 | #define SSL3_ST_CW_CHANGE_B (0x1A1|SSL_ST_CONNECT) | ||
352 | #define SSL3_ST_CW_FINISHED_A (0x1B0|SSL_ST_CONNECT) | ||
353 | #define SSL3_ST_CW_FINISHED_B (0x1B1|SSL_ST_CONNECT) | ||
354 | /* read from server */ | ||
355 | #define SSL3_ST_CR_CHANGE_A (0x1C0|SSL_ST_CONNECT) | ||
356 | #define SSL3_ST_CR_CHANGE_B (0x1C1|SSL_ST_CONNECT) | ||
357 | #define SSL3_ST_CR_FINISHED_A (0x1D0|SSL_ST_CONNECT) | ||
358 | #define SSL3_ST_CR_FINISHED_B (0x1D1|SSL_ST_CONNECT) | ||
359 | #define SSL3_ST_CR_SESSION_TICKET_A (0x1E0|SSL_ST_CONNECT) | ||
360 | #define SSL3_ST_CR_SESSION_TICKET_B (0x1E1|SSL_ST_CONNECT) | ||
361 | #define SSL3_ST_CR_CERT_STATUS_A (0x1F0|SSL_ST_CONNECT) | ||
362 | #define SSL3_ST_CR_CERT_STATUS_B (0x1F1|SSL_ST_CONNECT) | ||
363 | |||
364 | /* server */ | ||
365 | /* extra state */ | ||
366 | #define SSL3_ST_SW_FLUSH (0x100|SSL_ST_ACCEPT) | ||
367 | /* read from client */ | ||
368 | /* Do not change the number values, they do matter */ | ||
369 | #define SSL3_ST_SR_CLNT_HELLO_A (0x110|SSL_ST_ACCEPT) | ||
370 | #define SSL3_ST_SR_CLNT_HELLO_B (0x111|SSL_ST_ACCEPT) | ||
371 | #define SSL3_ST_SR_CLNT_HELLO_C (0x112|SSL_ST_ACCEPT) | ||
372 | /* write to client */ | ||
373 | #define DTLS1_ST_SW_HELLO_VERIFY_REQUEST_A (0x113|SSL_ST_ACCEPT) | ||
374 | #define DTLS1_ST_SW_HELLO_VERIFY_REQUEST_B (0x114|SSL_ST_ACCEPT) | ||
375 | #define SSL3_ST_SW_HELLO_REQ_A (0x120|SSL_ST_ACCEPT) | ||
376 | #define SSL3_ST_SW_HELLO_REQ_B (0x121|SSL_ST_ACCEPT) | ||
377 | #define SSL3_ST_SW_HELLO_REQ_C (0x122|SSL_ST_ACCEPT) | ||
378 | #define SSL3_ST_SW_SRVR_HELLO_A (0x130|SSL_ST_ACCEPT) | ||
379 | #define SSL3_ST_SW_SRVR_HELLO_B (0x131|SSL_ST_ACCEPT) | ||
380 | #define SSL3_ST_SW_CERT_A (0x140|SSL_ST_ACCEPT) | ||
381 | #define SSL3_ST_SW_CERT_B (0x141|SSL_ST_ACCEPT) | ||
382 | #define SSL3_ST_SW_KEY_EXCH_A (0x150|SSL_ST_ACCEPT) | ||
383 | #define SSL3_ST_SW_KEY_EXCH_B (0x151|SSL_ST_ACCEPT) | ||
384 | #define SSL3_ST_SW_CERT_REQ_A (0x160|SSL_ST_ACCEPT) | ||
385 | #define SSL3_ST_SW_CERT_REQ_B (0x161|SSL_ST_ACCEPT) | ||
386 | #define SSL3_ST_SW_SRVR_DONE_A (0x170|SSL_ST_ACCEPT) | ||
387 | #define SSL3_ST_SW_SRVR_DONE_B (0x171|SSL_ST_ACCEPT) | ||
388 | /* read from client */ | ||
389 | #define SSL3_ST_SR_CERT_A (0x180|SSL_ST_ACCEPT) | ||
390 | #define SSL3_ST_SR_CERT_B (0x181|SSL_ST_ACCEPT) | ||
391 | #define SSL3_ST_SR_KEY_EXCH_A (0x190|SSL_ST_ACCEPT) | ||
392 | #define SSL3_ST_SR_KEY_EXCH_B (0x191|SSL_ST_ACCEPT) | ||
393 | #define SSL3_ST_SR_CERT_VRFY_A (0x1A0|SSL_ST_ACCEPT) | ||
394 | #define SSL3_ST_SR_CERT_VRFY_B (0x1A1|SSL_ST_ACCEPT) | ||
395 | #define SSL3_ST_SR_CHANGE_A (0x1B0|SSL_ST_ACCEPT) | ||
396 | #define SSL3_ST_SR_CHANGE_B (0x1B1|SSL_ST_ACCEPT) | ||
397 | #define SSL3_ST_SR_FINISHED_A (0x1C0|SSL_ST_ACCEPT) | ||
398 | #define SSL3_ST_SR_FINISHED_B (0x1C1|SSL_ST_ACCEPT) | ||
399 | /* write to client */ | ||
400 | #define SSL3_ST_SW_CHANGE_A (0x1D0|SSL_ST_ACCEPT) | ||
401 | #define SSL3_ST_SW_CHANGE_B (0x1D1|SSL_ST_ACCEPT) | ||
402 | #define SSL3_ST_SW_FINISHED_A (0x1E0|SSL_ST_ACCEPT) | ||
403 | #define SSL3_ST_SW_FINISHED_B (0x1E1|SSL_ST_ACCEPT) | ||
404 | #define SSL3_ST_SW_SESSION_TICKET_A (0x1F0|SSL_ST_ACCEPT) | ||
405 | #define SSL3_ST_SW_SESSION_TICKET_B (0x1F1|SSL_ST_ACCEPT) | ||
406 | #define SSL3_ST_SW_CERT_STATUS_A (0x200|SSL_ST_ACCEPT) | ||
407 | #define SSL3_ST_SW_CERT_STATUS_B (0x201|SSL_ST_ACCEPT) | ||
408 | |||
409 | #define SSL3_MT_HELLO_REQUEST 0 | ||
410 | #define SSL3_MT_CLIENT_HELLO 1 | ||
411 | #define SSL3_MT_SERVER_HELLO 2 | ||
412 | #define SSL3_MT_NEWSESSION_TICKET 4 | ||
413 | #define SSL3_MT_CERTIFICATE 11 | ||
414 | #define SSL3_MT_SERVER_KEY_EXCHANGE 12 | ||
415 | #define SSL3_MT_CERTIFICATE_REQUEST 13 | ||
416 | #define SSL3_MT_SERVER_DONE 14 | ||
417 | #define SSL3_MT_CERTIFICATE_VERIFY 15 | ||
418 | #define SSL3_MT_CLIENT_KEY_EXCHANGE 16 | ||
419 | #define SSL3_MT_FINISHED 20 | ||
420 | #define SSL3_MT_CERTIFICATE_STATUS 22 | ||
421 | |||
422 | #define DTLS1_MT_HELLO_VERIFY_REQUEST 3 | ||
423 | |||
424 | #define SSL3_MT_CCS 1 | ||
425 | |||
426 | #ifndef LIBRESSL_INTERNAL | ||
427 | /* These are used when changing over to a new cipher */ | ||
428 | #define SSL3_CC_READ 0x01 | ||
429 | #define SSL3_CC_WRITE 0x02 | ||
430 | #define SSL3_CC_CLIENT 0x10 | ||
431 | #define SSL3_CC_SERVER 0x20 | ||
432 | #define SSL3_CHANGE_CIPHER_CLIENT_WRITE (SSL3_CC_CLIENT|SSL3_CC_WRITE) | ||
433 | #define SSL3_CHANGE_CIPHER_SERVER_READ (SSL3_CC_SERVER|SSL3_CC_READ) | ||
434 | #define SSL3_CHANGE_CIPHER_CLIENT_READ (SSL3_CC_CLIENT|SSL3_CC_READ) | ||
435 | #define SSL3_CHANGE_CIPHER_SERVER_WRITE (SSL3_CC_SERVER|SSL3_CC_WRITE) | ||
436 | #endif | ||
437 | |||
438 | #ifdef __cplusplus | ||
439 | } | ||
440 | #endif | ||
441 | #endif | ||