Edit File by line

[0] Fix | Delete

[1] Fix | Delete

[2] Fix | Delete

[3] Fix | Delete

[4] Fix | Delete

* Licensed under the OpenSSL license (the "License"). You may not use

[5] Fix | Delete

* this file except in compliance with the License. You can obtain a copy

[6] Fix | Delete

* in the file LICENSE in the source distribution or at

[7] Fix | Delete

* https://www.openssl.org/source/license.html

[8] Fix | Delete

[9] Fix | Delete

[10] Fix | Delete

#ifndef HEADER_TLS1_H

[11] Fix | Delete

# define HEADER_TLS1_H

[12] Fix | Delete

[13] Fix | Delete

# include <openssl/buffer.h>

[14] Fix | Delete

# include <openssl/x509.h>

[15] Fix | Delete

[16] Fix | Delete

#ifdef __cplusplus

[17] Fix | Delete

extern "C" {

[18] Fix | Delete

#endif

[19] Fix | Delete

[20] Fix | Delete

/* Default security level if not overridden at config time */

[21] Fix | Delete

# ifndef OPENSSL_TLS_SECURITY_LEVEL

[22] Fix | Delete

# define OPENSSL_TLS_SECURITY_LEVEL 1

[23] Fix | Delete

# endif

[24] Fix | Delete

[25] Fix | Delete

# define TLS1_VERSION 0x0301

[26] Fix | Delete

# define TLS1_1_VERSION 0x0302

[27] Fix | Delete

# define TLS1_2_VERSION 0x0303

[28] Fix | Delete

# define TLS1_3_VERSION 0x0304

[29] Fix | Delete

# define TLS_MAX_VERSION TLS1_3_VERSION

[30] Fix | Delete

[31] Fix | Delete

/* Special value for method supporting multiple versions */

[32] Fix | Delete

# define TLS_ANY_VERSION 0x10000

[33] Fix | Delete

[34] Fix | Delete

# define TLS1_VERSION_MAJOR 0x03

[35] Fix | Delete

# define TLS1_VERSION_MINOR 0x01

[36] Fix | Delete

[37] Fix | Delete

# define TLS1_1_VERSION_MAJOR 0x03

[38] Fix | Delete

# define TLS1_1_VERSION_MINOR 0x02

[39] Fix | Delete

[40] Fix | Delete

# define TLS1_2_VERSION_MAJOR 0x03

[41] Fix | Delete

# define TLS1_2_VERSION_MINOR 0x03

[42] Fix | Delete

[43] Fix | Delete

# define TLS1_get_version(s) \

[44] Fix | Delete

((SSL_version(s) >> 8) == TLS1_VERSION_MAJOR ? SSL_version(s) : 0)

[45] Fix | Delete

[46] Fix | Delete

# define TLS1_get_client_version(s) \

[47] Fix | Delete

((SSL_client_version(s) >> 8) == TLS1_VERSION_MAJOR ? SSL_client_version(s) : 0)

[48] Fix | Delete

[49] Fix | Delete

# define TLS1_AD_DECRYPTION_FAILED 21

[50] Fix | Delete

# define TLS1_AD_RECORD_OVERFLOW 22

[51] Fix | Delete

# define TLS1_AD_UNKNOWN_CA 48/* fatal */

[52] Fix | Delete

# define TLS1_AD_ACCESS_DENIED 49/* fatal */

[53] Fix | Delete

# define TLS1_AD_DECODE_ERROR 50/* fatal */

[54] Fix | Delete

# define TLS1_AD_DECRYPT_ERROR 51

[55] Fix | Delete

# define TLS1_AD_EXPORT_RESTRICTION 60/* fatal */

[56] Fix | Delete

# define TLS1_AD_PROTOCOL_VERSION 70/* fatal */

[57] Fix | Delete

# define TLS1_AD_INSUFFICIENT_SECURITY 71/* fatal */

[58] Fix | Delete

# define TLS1_AD_INTERNAL_ERROR 80/* fatal */

[59] Fix | Delete

# define TLS1_AD_INAPPROPRIATE_FALLBACK 86/* fatal */

[60] Fix | Delete

# define TLS1_AD_USER_CANCELLED 90

[61] Fix | Delete

# define TLS1_AD_NO_RENEGOTIATION 100

[62] Fix | Delete

/* TLSv1.3 alerts */

[63] Fix | Delete

# define TLS13_AD_MISSING_EXTENSION 109 /* fatal */

[64] Fix | Delete

# define TLS13_AD_CERTIFICATE_REQUIRED 116 /* fatal */

[65] Fix | Delete

/* codes 110-114 are from RFC3546 */

[66] Fix | Delete

# define TLS1_AD_UNSUPPORTED_EXTENSION 110

[67] Fix | Delete

# define TLS1_AD_CERTIFICATE_UNOBTAINABLE 111

[68] Fix | Delete

# define TLS1_AD_UNRECOGNIZED_NAME 112

[69] Fix | Delete

# define TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE 113

[70] Fix | Delete

# define TLS1_AD_BAD_CERTIFICATE_HASH_VALUE 114

[71] Fix | Delete

# define TLS1_AD_UNKNOWN_PSK_IDENTITY 115/* fatal */

[72] Fix | Delete

# define TLS1_AD_NO_APPLICATION_PROTOCOL 120 /* fatal */

[73] Fix | Delete

[74] Fix | Delete

/* ExtensionType values from RFC3546 / RFC4366 / RFC6066 */

[75] Fix | Delete

# define TLSEXT_TYPE_server_name 0

[76] Fix | Delete

# define TLSEXT_TYPE_max_fragment_length 1

[77] Fix | Delete

# define TLSEXT_TYPE_client_certificate_url 2

[78] Fix | Delete

# define TLSEXT_TYPE_trusted_ca_keys 3

[79] Fix | Delete

# define TLSEXT_TYPE_truncated_hmac 4

[80] Fix | Delete

# define TLSEXT_TYPE_status_request 5

[81] Fix | Delete

/* ExtensionType values from RFC4681 */

[82] Fix | Delete

# define TLSEXT_TYPE_user_mapping 6

[83] Fix | Delete

/* ExtensionType values from RFC5878 */

[84] Fix | Delete

# define TLSEXT_TYPE_client_authz 7

[85] Fix | Delete

# define TLSEXT_TYPE_server_authz 8

[86] Fix | Delete

/* ExtensionType values from RFC6091 */

[87] Fix | Delete

# define TLSEXT_TYPE_cert_type 9

[88] Fix | Delete

[89] Fix | Delete

/* ExtensionType values from RFC4492 */

[90] Fix | Delete

[91] Fix | Delete

* Prior to TLSv1.3 the supported_groups extension was known as

[92] Fix | Delete

* elliptic_curves

[93] Fix | Delete

[94] Fix | Delete

# define TLSEXT_TYPE_supported_groups 10

[95] Fix | Delete

# define TLSEXT_TYPE_elliptic_curves TLSEXT_TYPE_supported_groups

[96] Fix | Delete

# define TLSEXT_TYPE_ec_point_formats 11

[97] Fix | Delete

[98] Fix | Delete

[99] Fix | Delete

/* ExtensionType value from RFC5054 */

[100] Fix | Delete

# define TLSEXT_TYPE_srp 12

[101] Fix | Delete

[102] Fix | Delete

/* ExtensionType values from RFC5246 */

[103] Fix | Delete

# define TLSEXT_TYPE_signature_algorithms 13

[104] Fix | Delete

[105] Fix | Delete

/* ExtensionType value from RFC5764 */

[106] Fix | Delete

# define TLSEXT_TYPE_use_srtp 14

[107] Fix | Delete

[108] Fix | Delete

/* ExtensionType value from RFC5620 */

[109] Fix | Delete

# define TLSEXT_TYPE_heartbeat 15

[110] Fix | Delete

[111] Fix | Delete

/* ExtensionType value from RFC7301 */

[112] Fix | Delete

# define TLSEXT_TYPE_application_layer_protocol_negotiation 16

[113] Fix | Delete

[114] Fix | Delete

[115] Fix | Delete

* Extension type for Certificate Transparency

[116] Fix | Delete

* https://tools.ietf.org/html/rfc6962#section-3.3.1

[117] Fix | Delete

[118] Fix | Delete

# define TLSEXT_TYPE_signed_certificate_timestamp 18

[119] Fix | Delete

[120] Fix | Delete

[121] Fix | Delete

* ExtensionType value for TLS padding extension.

[122] Fix | Delete

* http://tools.ietf.org/html/draft-agl-tls-padding

[123] Fix | Delete

[124] Fix | Delete

# define TLSEXT_TYPE_padding 21

[125] Fix | Delete

[126] Fix | Delete

/* ExtensionType value from RFC7366 */

[127] Fix | Delete

# define TLSEXT_TYPE_encrypt_then_mac 22

[128] Fix | Delete

[129] Fix | Delete

/* ExtensionType value from RFC7627 */

[130] Fix | Delete

# define TLSEXT_TYPE_extended_master_secret 23

[131] Fix | Delete

[132] Fix | Delete

/* ExtensionType value from RFC4507 */

[133] Fix | Delete

# define TLSEXT_TYPE_session_ticket 35

[134] Fix | Delete

[135] Fix | Delete

/* As defined for TLS1.3 */

[136] Fix | Delete

# define TLSEXT_TYPE_psk 41

[137] Fix | Delete

# define TLSEXT_TYPE_early_data 42

[138] Fix | Delete

# define TLSEXT_TYPE_supported_versions 43

[139] Fix | Delete

# define TLSEXT_TYPE_cookie 44

[140] Fix | Delete

# define TLSEXT_TYPE_psk_kex_modes 45

[141] Fix | Delete

# define TLSEXT_TYPE_certificate_authorities 47

[142] Fix | Delete

# define TLSEXT_TYPE_post_handshake_auth 49

[143] Fix | Delete

# define TLSEXT_TYPE_signature_algorithms_cert 50

[144] Fix | Delete

# define TLSEXT_TYPE_key_share 51

[145] Fix | Delete

[146] Fix | Delete

/* Temporary extension type */

[147] Fix | Delete

# define TLSEXT_TYPE_renegotiate 0xff01

[148] Fix | Delete

[149] Fix | Delete

# ifndef OPENSSL_NO_NEXTPROTONEG

[150] Fix | Delete

/* This is not an IANA defined extension number */

[151] Fix | Delete

# define TLSEXT_TYPE_next_proto_neg 13172

[152] Fix | Delete

# endif

[153] Fix | Delete

[154] Fix | Delete

/* NameType value from RFC3546 */

[155] Fix | Delete

# define TLSEXT_NAMETYPE_host_name 0

[156] Fix | Delete

/* status request value from RFC3546 */

[157] Fix | Delete

# define TLSEXT_STATUSTYPE_ocsp 1

[158] Fix | Delete

[159] Fix | Delete

/* ECPointFormat values from RFC4492 */

[160] Fix | Delete

# define TLSEXT_ECPOINTFORMAT_first 0

[161] Fix | Delete

# define TLSEXT_ECPOINTFORMAT_uncompressed 0

[162] Fix | Delete

# define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime 1

[163] Fix | Delete

# define TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2 2

[164] Fix | Delete

# define TLSEXT_ECPOINTFORMAT_last 2

[165] Fix | Delete

[166] Fix | Delete

/* Signature and hash algorithms from RFC5246 */

[167] Fix | Delete

# define TLSEXT_signature_anonymous 0

[168] Fix | Delete

# define TLSEXT_signature_rsa 1

[169] Fix | Delete

# define TLSEXT_signature_dsa 2

[170] Fix | Delete

# define TLSEXT_signature_ecdsa 3

[171] Fix | Delete

# define TLSEXT_signature_gostr34102001 237

[172] Fix | Delete

# define TLSEXT_signature_gostr34102012_256 238

[173] Fix | Delete

# define TLSEXT_signature_gostr34102012_512 239

[174] Fix | Delete

[175] Fix | Delete

/* Total number of different signature algorithms */

[176] Fix | Delete

# define TLSEXT_signature_num 7

[177] Fix | Delete

[178] Fix | Delete

# define TLSEXT_hash_none 0

[179] Fix | Delete

# define TLSEXT_hash_md5 1

[180] Fix | Delete

# define TLSEXT_hash_sha1 2

[181] Fix | Delete

# define TLSEXT_hash_sha224 3

[182] Fix | Delete

# define TLSEXT_hash_sha256 4

[183] Fix | Delete

# define TLSEXT_hash_sha384 5

[184] Fix | Delete

# define TLSEXT_hash_sha512 6

[185] Fix | Delete

# define TLSEXT_hash_gostr3411 237

[186] Fix | Delete

# define TLSEXT_hash_gostr34112012_256 238

[187] Fix | Delete

# define TLSEXT_hash_gostr34112012_512 239

[188] Fix | Delete

[189] Fix | Delete

/* Total number of different digest algorithms */

[190] Fix | Delete

[191] Fix | Delete

# define TLSEXT_hash_num 10

[192] Fix | Delete

[193] Fix | Delete

/* Flag set for unrecognised algorithms */

[194] Fix | Delete

# define TLSEXT_nid_unknown 0x1000000

[195] Fix | Delete

[196] Fix | Delete

/* ECC curves */

[197] Fix | Delete

[198] Fix | Delete

# define TLSEXT_curve_P_256 23

[199] Fix | Delete

# define TLSEXT_curve_P_384 24

[200] Fix | Delete

[201] Fix | Delete

/* OpenSSL value to disable maximum fragment length extension */

[202] Fix | Delete

# define TLSEXT_max_fragment_length_DISABLED 0

[203] Fix | Delete

/* Allowed values for max fragment length extension */

[204] Fix | Delete

# define TLSEXT_max_fragment_length_512 1

[205] Fix | Delete

# define TLSEXT_max_fragment_length_1024 2

[206] Fix | Delete

# define TLSEXT_max_fragment_length_2048 3

[207] Fix | Delete

# define TLSEXT_max_fragment_length_4096 4

[208] Fix | Delete

[209] Fix | Delete

int SSL_CTX_set_tlsext_max_fragment_length(SSL_CTX *ctx, uint8_t mode);

[210] Fix | Delete

int SSL_set_tlsext_max_fragment_length(SSL *ssl, uint8_t mode);

[211] Fix | Delete

[212] Fix | Delete

# define TLSEXT_MAXLEN_host_name 255

[213] Fix | Delete

[214] Fix | Delete

__owur const char *SSL_get_servername(const SSL *s, const int type);

[215] Fix | Delete

__owur int SSL_get_servername_type(const SSL *s);

[216] Fix | Delete

[217] Fix | Delete

* SSL_export_keying_material exports a value derived from the master secret,

[218] Fix | Delete

* as specified in RFC 5705. It writes |olen| bytes to |out| given a label and

[219] Fix | Delete

* optional context. (Since a zero length context is allowed, the |use_context|

[220] Fix | Delete

* flag controls whether a context is included.) It returns 1 on success and

[221] Fix | Delete

* 0 or -1 otherwise.

[222] Fix | Delete

[223] Fix | Delete

__owur int SSL_export_keying_material(SSL *s, unsigned char *out, size_t olen,

[224] Fix | Delete

const char *label, size_t llen,

[225] Fix | Delete

const unsigned char *context,

[226] Fix | Delete

size_t contextlen, int use_context);

[227] Fix | Delete

[228] Fix | Delete

[229] Fix | Delete

* SSL_export_keying_material_early exports a value derived from the

[230] Fix | Delete

* early exporter master secret, as specified in

[231] Fix | Delete

* https://tools.ietf.org/html/draft-ietf-tls-tls13-23. It writes

[232] Fix | Delete

* |olen| bytes to |out| given a label and optional context. It

[233] Fix | Delete

* returns 1 on success and 0 otherwise.

[234] Fix | Delete

[235] Fix | Delete

__owur int SSL_export_keying_material_early(SSL *s, unsigned char *out,

[236] Fix | Delete

size_t olen, const char *label,

[237] Fix | Delete

size_t llen,

[238] Fix | Delete

const unsigned char *context,

[239] Fix | Delete

size_t contextlen);

[240] Fix | Delete

[241] Fix | Delete

int SSL_get_peer_signature_type_nid(const SSL *s, int *pnid);

[242] Fix | Delete

int SSL_get_signature_type_nid(const SSL *s, int *pnid);

[243] Fix | Delete

[244] Fix | Delete

int SSL_get_sigalgs(SSL *s, int idx,

[245] Fix | Delete

int *psign, int *phash, int *psignandhash,

[246] Fix | Delete

unsigned char *rsig, unsigned char *rhash);

[247] Fix | Delete

[248] Fix | Delete

int SSL_get_shared_sigalgs(SSL *s, int idx,

[249] Fix | Delete

int *psign, int *phash, int *psignandhash,

[250] Fix | Delete

unsigned char *rsig, unsigned char *rhash);

[251] Fix | Delete

[252] Fix | Delete

__owur int SSL_check_chain(SSL *s, X509 *x, EVP_PKEY *pk, STACK_OF(X509) *chain);

[253] Fix | Delete

[254] Fix | Delete

# define SSL_set_tlsext_host_name(s,name) \

[255] Fix | Delete

SSL_ctrl(s,SSL_CTRL_SET_TLSEXT_HOSTNAME,TLSEXT_NAMETYPE_host_name,\

[256] Fix | Delete

(void *)name)

[257] Fix | Delete

[258] Fix | Delete

# define SSL_set_tlsext_debug_callback(ssl, cb) \

[259] Fix | Delete

SSL_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_DEBUG_CB,\

[260] Fix | Delete

(void (*)(void))cb)

[261] Fix | Delete

[262] Fix | Delete

# define SSL_set_tlsext_debug_arg(ssl, arg) \

[263] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_DEBUG_ARG,0,arg)

[264] Fix | Delete

[265] Fix | Delete

# define SSL_get_tlsext_status_type(ssl) \

[266] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE,0,NULL)

[267] Fix | Delete

[268] Fix | Delete

# define SSL_set_tlsext_status_type(ssl, type) \

[269] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE,type,NULL)

[270] Fix | Delete

[271] Fix | Delete

# define SSL_get_tlsext_status_exts(ssl, arg) \

[272] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS,0,arg)

[273] Fix | Delete

[274] Fix | Delete

# define SSL_set_tlsext_status_exts(ssl, arg) \

[275] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS,0,arg)

[276] Fix | Delete

[277] Fix | Delete

# define SSL_get_tlsext_status_ids(ssl, arg) \

[278] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS,0,arg)

[279] Fix | Delete

[280] Fix | Delete

# define SSL_set_tlsext_status_ids(ssl, arg) \

[281] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS,0,arg)

[282] Fix | Delete

[283] Fix | Delete

# define SSL_get_tlsext_status_ocsp_resp(ssl, arg) \

[284] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP,0,arg)

[285] Fix | Delete

[286] Fix | Delete

# define SSL_set_tlsext_status_ocsp_resp(ssl, arg, arglen) \

[287] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP,arglen,arg)

[288] Fix | Delete

[289] Fix | Delete

# define SSL_CTX_set_tlsext_servername_callback(ctx, cb) \

[290] Fix | Delete

SSL_CTX_callback_ctrl(ctx,SSL_CTRL_SET_TLSEXT_SERVERNAME_CB,\

[291] Fix | Delete

(void (*)(void))cb)

[292] Fix | Delete

[293] Fix | Delete

# define SSL_TLSEXT_ERR_OK 0

[294] Fix | Delete

# define SSL_TLSEXT_ERR_ALERT_WARNING 1

[295] Fix | Delete

# define SSL_TLSEXT_ERR_ALERT_FATAL 2

[296] Fix | Delete

# define SSL_TLSEXT_ERR_NOACK 3

[297] Fix | Delete

[298] Fix | Delete

# define SSL_CTX_set_tlsext_servername_arg(ctx, arg) \

[299] Fix | Delete

SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG,0,arg)

[300] Fix | Delete

[301] Fix | Delete

# define SSL_CTX_get_tlsext_ticket_keys(ctx, keys, keylen) \

[302] Fix | Delete

SSL_CTX_ctrl(ctx,SSL_CTRL_GET_TLSEXT_TICKET_KEYS,keylen,keys)

[303] Fix | Delete

# define SSL_CTX_set_tlsext_ticket_keys(ctx, keys, keylen) \

[304] Fix | Delete

SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TLSEXT_TICKET_KEYS,keylen,keys)

[305] Fix | Delete

[306] Fix | Delete

# define SSL_CTX_get_tlsext_status_cb(ssl, cb) \

[307] Fix | Delete

SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB,0,(void *)cb)

[308] Fix | Delete

# define SSL_CTX_set_tlsext_status_cb(ssl, cb) \

[309] Fix | Delete

SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB,\

[310] Fix | Delete

(void (*)(void))cb)

[311] Fix | Delete

[312] Fix | Delete

# define SSL_CTX_get_tlsext_status_arg(ssl, arg) \

[313] Fix | Delete

SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_CB_ARG,0,arg)

[314] Fix | Delete

# define SSL_CTX_set_tlsext_status_arg(ssl, arg) \

[315] Fix | Delete

SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG,0,arg)

[316] Fix | Delete

[317] Fix | Delete

# define SSL_CTX_set_tlsext_status_type(ssl, type) \

[318] Fix | Delete

SSL_CTX_ctrl(ssl,SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE,type,NULL)

[319] Fix | Delete

[320] Fix | Delete

# define SSL_CTX_get_tlsext_status_type(ssl) \

[321] Fix | Delete

SSL_CTX_ctrl(ssl,SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE,0,NULL)

[322] Fix | Delete

[323] Fix | Delete

# define SSL_CTX_set_tlsext_ticket_key_cb(ssl, cb) \

[324] Fix | Delete

SSL_CTX_callback_ctrl(ssl,SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB,\

[325] Fix | Delete

(void (*)(void))cb)

[326] Fix | Delete

[327] Fix | Delete

# ifndef OPENSSL_NO_HEARTBEATS

[328] Fix | Delete

# define SSL_DTLSEXT_HB_ENABLED 0x01

[329] Fix | Delete

# define SSL_DTLSEXT_HB_DONT_SEND_REQUESTS 0x02

[330] Fix | Delete

# define SSL_DTLSEXT_HB_DONT_RECV_REQUESTS 0x04

[331] Fix | Delete

# define SSL_get_dtlsext_heartbeat_pending(ssl) \

[332] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_GET_DTLS_EXT_HEARTBEAT_PENDING,0,NULL)

[333] Fix | Delete

# define SSL_set_dtlsext_heartbeat_no_requests(ssl, arg) \

[334] Fix | Delete

SSL_ctrl(ssl,SSL_CTRL_SET_DTLS_EXT_HEARTBEAT_NO_REQUESTS,arg,NULL)

[335] Fix | Delete

[336] Fix | Delete

# if OPENSSL_API_COMPAT < 0x10100000L

[337] Fix | Delete

# define SSL_CTRL_TLS_EXT_SEND_HEARTBEAT \

[338] Fix | Delete

SSL_CTRL_DTLS_EXT_SEND_HEARTBEAT

[339] Fix | Delete

# define SSL_CTRL_GET_TLS_EXT_HEARTBEAT_PENDING \

[340] Fix | Delete

SSL_CTRL_GET_DTLS_EXT_HEARTBEAT_PENDING

[341] Fix | Delete

# define SSL_CTRL_SET_TLS_EXT_HEARTBEAT_NO_REQUESTS \

[342] Fix | Delete

SSL_CTRL_SET_DTLS_EXT_HEARTBEAT_NO_REQUESTS

[343] Fix | Delete

# define SSL_TLSEXT_HB_ENABLED \

[344] Fix | Delete

SSL_DTLSEXT_HB_ENABLED

[345] Fix | Delete

# define SSL_TLSEXT_HB_DONT_SEND_REQUESTS \

[346] Fix | Delete

SSL_DTLSEXT_HB_DONT_SEND_REQUESTS

[347] Fix | Delete

# define SSL_TLSEXT_HB_DONT_RECV_REQUESTS \

[348] Fix | Delete

SSL_DTLSEXT_HB_DONT_RECV_REQUESTS

[349] Fix | Delete

# define SSL_get_tlsext_heartbeat_pending(ssl) \

[350] Fix | Delete

SSL_get_dtlsext_heartbeat_pending(ssl)

[351] Fix | Delete

# define SSL_set_tlsext_heartbeat_no_requests(ssl, arg) \

[352] Fix | Delete

SSL_set_dtlsext_heartbeat_no_requests(ssl,arg)

[353] Fix | Delete

# endif

[354] Fix | Delete

# endif

[355] Fix | Delete

[356] Fix | Delete

/* PSK ciphersuites from 4279 */

[357] Fix | Delete

# define TLS1_CK_PSK_WITH_RC4_128_SHA 0x0300008A

[358] Fix | Delete

# define TLS1_CK_PSK_WITH_3DES_EDE_CBC_SHA 0x0300008B

[359] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_128_CBC_SHA 0x0300008C

[360] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_256_CBC_SHA 0x0300008D

[361] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_RC4_128_SHA 0x0300008E

[362] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_3DES_EDE_CBC_SHA 0x0300008F

[363] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA 0x03000090

[364] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA 0x03000091

[365] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_RC4_128_SHA 0x03000092

[366] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_3DES_EDE_CBC_SHA 0x03000093

[367] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA 0x03000094

[368] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA 0x03000095

[369] Fix | Delete

[370] Fix | Delete

/* PSK ciphersuites from 5487 */

[371] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_128_GCM_SHA256 0x030000A8

[372] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_256_GCM_SHA384 0x030000A9

[373] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_128_GCM_SHA256 0x030000AA

[374] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_256_GCM_SHA384 0x030000AB

[375] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_AES_128_GCM_SHA256 0x030000AC

[376] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_AES_256_GCM_SHA384 0x030000AD

[377] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_128_CBC_SHA256 0x030000AE

[378] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_256_CBC_SHA384 0x030000AF

[379] Fix | Delete

# define TLS1_CK_PSK_WITH_NULL_SHA256 0x030000B0

[380] Fix | Delete

# define TLS1_CK_PSK_WITH_NULL_SHA384 0x030000B1

[381] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_128_CBC_SHA256 0x030000B2

[382] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_256_CBC_SHA384 0x030000B3

[383] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_NULL_SHA256 0x030000B4

[384] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_NULL_SHA384 0x030000B5

[385] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_AES_128_CBC_SHA256 0x030000B6

[386] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_AES_256_CBC_SHA384 0x030000B7

[387] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_NULL_SHA256 0x030000B8

[388] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_NULL_SHA384 0x030000B9

[389] Fix | Delete

[390] Fix | Delete

/* NULL PSK ciphersuites from RFC4785 */

[391] Fix | Delete

# define TLS1_CK_PSK_WITH_NULL_SHA 0x0300002C

[392] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_NULL_SHA 0x0300002D

[393] Fix | Delete

# define TLS1_CK_RSA_PSK_WITH_NULL_SHA 0x0300002E

[394] Fix | Delete

[395] Fix | Delete

/* AES ciphersuites from RFC3268 */

[396] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_128_SHA 0x0300002F

[397] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_AES_128_SHA 0x03000030

[398] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_AES_128_SHA 0x03000031

[399] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_AES_128_SHA 0x03000032

[400] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_128_SHA 0x03000033

[401] Fix | Delete

# define TLS1_CK_ADH_WITH_AES_128_SHA 0x03000034

[402] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_256_SHA 0x03000035

[403] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_AES_256_SHA 0x03000036

[404] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_AES_256_SHA 0x03000037

[405] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_AES_256_SHA 0x03000038

[406] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_256_SHA 0x03000039

[407] Fix | Delete

# define TLS1_CK_ADH_WITH_AES_256_SHA 0x0300003A

[408] Fix | Delete

[409] Fix | Delete

/* TLS v1.2 ciphersuites */

[410] Fix | Delete

# define TLS1_CK_RSA_WITH_NULL_SHA256 0x0300003B

[411] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_128_SHA256 0x0300003C

[412] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_256_SHA256 0x0300003D

[413] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_AES_128_SHA256 0x0300003E

[414] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_AES_128_SHA256 0x0300003F

[415] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_AES_128_SHA256 0x03000040

[416] Fix | Delete

[417] Fix | Delete

/* Camellia ciphersuites from RFC4132 */

[418] Fix | Delete

# define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000041

[419] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA 0x03000042

[420] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000043

[421] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA 0x03000044

[422] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA 0x03000045

[423] Fix | Delete

# define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA 0x03000046

[424] Fix | Delete

[425] Fix | Delete

/* TLS v1.2 ciphersuites */

[426] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_128_SHA256 0x03000067

[427] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_AES_256_SHA256 0x03000068

[428] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_AES_256_SHA256 0x03000069

[429] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_AES_256_SHA256 0x0300006A

[430] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_256_SHA256 0x0300006B

[431] Fix | Delete

# define TLS1_CK_ADH_WITH_AES_128_SHA256 0x0300006C

[432] Fix | Delete

# define TLS1_CK_ADH_WITH_AES_256_SHA256 0x0300006D

[433] Fix | Delete

[434] Fix | Delete

/* Camellia ciphersuites from RFC4132 */

[435] Fix | Delete

# define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000084

[436] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA 0x03000085

[437] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000086

[438] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA 0x03000087

[439] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA 0x03000088

[440] Fix | Delete

# define TLS1_CK_ADH_WITH_CAMELLIA_256_CBC_SHA 0x03000089

[441] Fix | Delete

[442] Fix | Delete

/* SEED ciphersuites from RFC4162 */

[443] Fix | Delete

# define TLS1_CK_RSA_WITH_SEED_SHA 0x03000096

[444] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_SEED_SHA 0x03000097

[445] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_SEED_SHA 0x03000098

[446] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_SEED_SHA 0x03000099

[447] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_SEED_SHA 0x0300009A

[448] Fix | Delete

# define TLS1_CK_ADH_WITH_SEED_SHA 0x0300009B

[449] Fix | Delete

[450] Fix | Delete

/* TLS v1.2 GCM ciphersuites from RFC5288 */

[451] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_128_GCM_SHA256 0x0300009C

[452] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_256_GCM_SHA384 0x0300009D

[453] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_128_GCM_SHA256 0x0300009E

[454] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_256_GCM_SHA384 0x0300009F

[455] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_AES_128_GCM_SHA256 0x030000A0

[456] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_AES_256_GCM_SHA384 0x030000A1

[457] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_AES_128_GCM_SHA256 0x030000A2

[458] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_AES_256_GCM_SHA384 0x030000A3

[459] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_AES_128_GCM_SHA256 0x030000A4

[460] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_AES_256_GCM_SHA384 0x030000A5

[461] Fix | Delete

# define TLS1_CK_ADH_WITH_AES_128_GCM_SHA256 0x030000A6

[462] Fix | Delete

# define TLS1_CK_ADH_WITH_AES_256_GCM_SHA384 0x030000A7

[463] Fix | Delete

[464] Fix | Delete

/* CCM ciphersuites from RFC6655 */

[465] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_128_CCM 0x0300C09C

[466] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_256_CCM 0x0300C09D

[467] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_128_CCM 0x0300C09E

[468] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_256_CCM 0x0300C09F

[469] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_128_CCM_8 0x0300C0A0

[470] Fix | Delete

# define TLS1_CK_RSA_WITH_AES_256_CCM_8 0x0300C0A1

[471] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_128_CCM_8 0x0300C0A2

[472] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_AES_256_CCM_8 0x0300C0A3

[473] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_128_CCM 0x0300C0A4

[474] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_256_CCM 0x0300C0A5

[475] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_128_CCM 0x0300C0A6

[476] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_256_CCM 0x0300C0A7

[477] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_128_CCM_8 0x0300C0A8

[478] Fix | Delete

# define TLS1_CK_PSK_WITH_AES_256_CCM_8 0x0300C0A9

[479] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_128_CCM_8 0x0300C0AA

[480] Fix | Delete

# define TLS1_CK_DHE_PSK_WITH_AES_256_CCM_8 0x0300C0AB

[481] Fix | Delete

[482] Fix | Delete

/* CCM ciphersuites from RFC7251 */

[483] Fix | Delete

# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM 0x0300C0AC

[484] Fix | Delete

# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM 0x0300C0AD

[485] Fix | Delete

# define TLS1_CK_ECDHE_ECDSA_WITH_AES_128_CCM_8 0x0300C0AE

[486] Fix | Delete

# define TLS1_CK_ECDHE_ECDSA_WITH_AES_256_CCM_8 0x0300C0AF

[487] Fix | Delete

[488] Fix | Delete

/* TLS 1.2 Camellia SHA-256 ciphersuites from RFC5932 */

[489] Fix | Delete

# define TLS1_CK_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x030000BA

[490] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 0x030000BB

[491] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x030000BC

[492] Fix | Delete

# define TLS1_CK_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 0x030000BD

[493] Fix | Delete

# define TLS1_CK_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0x030000BE

[494] Fix | Delete

# define TLS1_CK_ADH_WITH_CAMELLIA_128_CBC_SHA256 0x030000BF

[495] Fix | Delete

[496] Fix | Delete

# define TLS1_CK_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x030000C0

[497] Fix | Delete

# define TLS1_CK_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 0x030000C1

[498] Fix | Delete

# define TLS1_CK_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 0x030000C2

[499] Fix | Delete

12 3