blob: f76099fc5c8a752cd7fbf476b7c12976035a81e1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
/* Copyright 2001-2004 The Apache Software Foundation
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/*
* Cipher definitions
*/
typedef struct
{
const char *name; /* The mod_nss cipher name */
PRInt32 num; /* The cipher id */
const char *openssl_name; /* The OpenSSL cipher name */
PRInt32 attr; /* cipher attributes: algorithms, etc */
PRInt32 version; /* protocol version valid for this cipher */
PRInt32 strength; /* LOW, MEDIUM, HIGH */
PRInt32 bits; /* bits of strength */
PRInt32 alg_bits; /* bits of the algorithm */
} cipher_properties;
/* OpenSSL-compatible cipher attributes */
#define SSL_kRSA 0x00000001L
#define SSL_aRSA 0x00000002L
#define SSL_aDSS 0x00000004L
#define SSL_DSS SSL_aDSS
#define SSL_eNULL 0x00000008L
#define SSL_DES 0x00000010L
#define SSL_3DES 0x00000020L
#define SSL_RC4 0x00000040L
#define SSL_RC2 0x00000080L
#define SSL_MD5 0x00000200L
#define SSL_SHA1 0x00000400L
#define SSL_SHA SSL_SHA1
#define SSL_RSA (SSL_kRSA)
#define SSL_kEDH 0x00000800L
#define SSL_EDH (SSL_kEDH)
#define SSL_aNULL 0x00001000L
#define SSL_kECDHe 0x00002000L
#define SSL_aECDH 0x00004000L
#define SSL_aECDSA 0x00008000L
#define SSL_kECDHr 0x00010000L
#define SSL_kEECDH 0x00020000L
#define SSL_ECDH (SSL_kECDHe|SSL_kECDHr|SSL_kEECDH)
#define SSL_EECDH (SSL_kEECDH)
#define SSL_ADH (SSL_kEDH)
#define SSL_kDHE 0x00040000L
#define SSL_DHE (SSL_kDHE)
/* cipher strength */
#define SSL_STRONG_NONE 0x00000001L
#define SSL_NULL 0x00000002L
#define SSL_EXPORT40 0x00000004L
#define SSL_EXPORT56 0x00000008L
#define SSL_LOW 0x00000010L
#define SSL_MEDIUM 0x00000020L
#define SSL_HIGH 0x00000040L
#define SSL_AES128 0x00400000L
#define SSL_AES256 0x00800000L
#define SSL_CAMELLIA128 0x01000000L
#define SSL_CAMELLIA256 0x02000000L
#define SSL_AES128GCM 0x04000000L
#define SSL_AES256GCM 0x08000000L
#define SSL_SHA256 0x10000000L
#define SSL_SHA384 0x20000000L
#define SSL_AEAD 0x40000000L
#define SSL_AES (SSL_AES128|SSL_AES256|SSL_AES128GCM|SSL_AES256GCM)
#define SSL_CAMELLIA (SSL_CAMELLIA128|SSL_CAMELLIA256)
/* Protocols */
#define SSLV2 0x00000001L
#define SSLV3 0x00000002L
#define TLSV1 SSLV3
#define TLSV1_2 0x00000004L
/* the table itself is defined in nss_engine_cipher.c */
#if 0
#ifdef NSS_ENABLE_ECC
# ifdef ENABLE_SHA384
# define ciphernum 54
# else
# define ciphernum 49
# endif
#else
#define ciphernum 20
#endif
#endif
extern int ciphernum;
/* function prototypes */
int nss_parse_ciphers(server_rec *s, char *ciphers, PRBool cipher_list[ciphernum]);
int countciphers(PRBool cipher_state[ciphernum], int version);
/* I chose an arbitrary cipher to test the existence for to handle older
* versions of NSS, at least back to 3.15.1
*/
#ifndef TLS_NULL_WITH_NULL_NULL
#define TLS_NULL_WITH_NULL_NULL SSL_NULL_WITH_NULL_NULL
#define TLS_RSA_WITH_NULL_MD5 SSL_RSA_WITH_NULL_MD5
#define TLS_RSA_WITH_NULL_SHA SSL_RSA_WITH_NULL_SHA
#define TLS_RSA_EXPORT_WITH_RC4_40_MD5 SSL_RSA_EXPORT_WITH_RC4_40_MD5
#define TLS_RSA_WITH_RC4_128_MD5 SSL_RSA_WITH_RC4_128_MD5
#define TLS_RSA_WITH_RC4_128_SHA SSL_RSA_WITH_RC4_128_SHA
#define TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
#define TLS_RSA_WITH_IDEA_CBC_SHA SSL_RSA_WITH_IDEA_CBC_SHA
#define TLS_RSA_EXPORT_WITH_DES40_CBC_SHA SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
#define TLS_RSA_WITH_DES_CBC_SHA SSL_RSA_WITH_DES_CBC_SHA
#define TLS_RSA_WITH_3DES_EDE_CBC_SHA SSL_RSA_WITH_3DES_EDE_CBC_SHA
#endif
|
