blob: dab5c47fb8a924143c64aa6b88b9142eb53223d2 [file] [log] [blame]
Adam Langley95c29f32014-06-20 12:00:00 -07001/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
2 * All rights reserved.
3 *
4 * This package is an SSL implementation written
5 * by Eric Young (eay@cryptsoft.com).
6 * The implementation was written so as to conform with Netscapes SSL.
7 *
8 * This library is free for commercial and non-commercial use as long as
9 * the following conditions are aheared to. The following conditions
10 * apply to all code found in this distribution, be it the RC4, RSA,
11 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
12 * included with this distribution is covered by the same copyright terms
13 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
14 *
15 * Copyright remains Eric Young's, and as such any Copyright notices in
16 * the code are not to be removed.
17 * If this package is used in a product, Eric Young should be given attribution
18 * as the author of the parts of the library used.
19 * This can be in the form of a textual message at program startup or
20 * in documentation (online or textual) provided with the package.
21 *
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
24 * are met:
25 * 1. Redistributions of source code must retain the copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * "This product includes cryptographic software written by
33 * Eric Young (eay@cryptsoft.com)"
34 * The word 'cryptographic' can be left out if the rouines from the library
35 * being used are not cryptographic related :-).
36 * 4. If you include any Windows specific code (or a derivative thereof) from
37 * the apps directory (application code) you must include an acknowledgement:
38 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
39 *
40 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50 * SUCH DAMAGE.
51 *
52 * The licence and distribution terms for any publically available version or
53 * derivative of this code cannot be changed. i.e. this code cannot simply be
54 * copied and put under another distribution licence
55 * [including the GNU Public Licence.] */
56
David Benjamin9e4e01e2015-09-15 01:48:04 -040057#include <openssl/ssl.h>
58
David Benjamin97718f12016-07-08 09:16:50 -070059#include <openssl/buf.h>
60
David Benjamin2ee94aa2015-04-07 22:38:30 -040061#include "internal.h"
Adam Langley95c29f32014-06-20 12:00:00 -070062
63
David Benjaminb6a0a512016-06-21 10:33:21 -040064static uint16_t ssl3_version_from_wire(uint16_t wire_version) {
65 return wire_version;
66}
67
68static uint16_t ssl3_version_to_wire(uint16_t version) { return version; }
69
David Benjamin97718f12016-07-08 09:16:50 -070070static int ssl3_begin_handshake(SSL *ssl) {
71 if (ssl->init_buf != NULL) {
72 return 1;
73 }
74
75 BUF_MEM *buf = BUF_MEM_new();
76 if (buf == NULL || !BUF_MEM_reserve(buf, SSL3_RT_MAX_PLAIN_LENGTH)) {
77 BUF_MEM_free(buf);
78 return 0;
79 }
80
81 ssl->init_buf = buf;
82 ssl->init_num = 0;
83 return 1;
84}
85
86static void ssl3_finish_handshake(SSL *ssl) {
87 BUF_MEM_free(ssl->init_buf);
88 ssl->init_buf = NULL;
89 ssl->init_num = 0;
90}
91
David Benjamina2c42d72016-07-08 09:05:45 -070092static const SSL_PROTOCOL_METHOD kTLSProtocolMethod = {
David Benjamin9e13e1a2015-03-05 01:56:32 -050093 0 /* is_dtls */,
David Benjaminb6a0a512016-06-21 10:33:21 -040094 SSL3_VERSION,
95 TLS1_3_VERSION,
96 ssl3_version_from_wire,
97 ssl3_version_to_wire,
David Benjamin82c9e902014-12-12 15:55:27 -050098 ssl3_new,
David Benjamin82c9e902014-12-12 15:55:27 -050099 ssl3_free,
David Benjamin97718f12016-07-08 09:16:50 -0700100 ssl3_begin_handshake,
101 ssl3_finish_handshake,
David Benjamin82c9e902014-12-12 15:55:27 -0500102 ssl3_get_message,
David Benjamina6022772015-05-30 16:22:10 -0400103 ssl3_read_app_data,
David Benjamina41280d2015-11-26 02:16:49 -0500104 ssl3_read_change_cipher_spec,
David Benjamina6022772015-05-30 16:22:10 -0400105 ssl3_read_close_notify,
David Benjaminc933a472015-05-30 16:14:58 -0400106 ssl3_write_app_data,
David Benjamin82c9e902014-12-12 15:55:27 -0500107 ssl3_dispatch_alert,
David Benjamina1c90a52015-05-30 17:03:14 -0400108 ssl3_supports_cipher,
David Benjamin75836432016-06-17 18:48:29 -0400109 ssl3_init_message,
110 ssl3_finish_message,
111 ssl3_write_message,
David Benjaminaa7734b2016-06-07 16:40:46 -0400112 ssl3_send_change_cipher_spec,
113 ssl3_expect_flight,
114 ssl3_received_flight,
David Benjamin82c9e902014-12-12 15:55:27 -0500115};
David Benjamin5b33a5e2014-09-24 16:27:30 -0400116
David Benjamin82c9e902014-12-12 15:55:27 -0500117const SSL_METHOD *TLS_method(void) {
David Benjamina2c42d72016-07-08 09:05:45 -0700118 static const SSL_METHOD kMethod = {
David Benjamin82c9e902014-12-12 15:55:27 -0500119 0,
David Benjamina2c42d72016-07-08 09:05:45 -0700120 &kTLSProtocolMethod,
David Benjamin82c9e902014-12-12 15:55:27 -0500121 };
David Benjamina2c42d72016-07-08 09:05:45 -0700122 return &kMethod;
David Benjamin82c9e902014-12-12 15:55:27 -0500123}
David Benjamin5b33a5e2014-09-24 16:27:30 -0400124
David Benjamin82c9e902014-12-12 15:55:27 -0500125const SSL_METHOD *SSLv23_method(void) {
126 return TLS_method();
127}
David Benjamin5b33a5e2014-09-24 16:27:30 -0400128
David Benjamin82c9e902014-12-12 15:55:27 -0500129/* Legacy version-locked methods. */
David Benjamincde8aba2014-11-23 15:47:20 -0500130
David Benjamin82c9e902014-12-12 15:55:27 -0500131const SSL_METHOD *TLSv1_2_method(void) {
David Benjamina2c42d72016-07-08 09:05:45 -0700132 static const SSL_METHOD kMethod = {
David Benjamin82c9e902014-12-12 15:55:27 -0500133 TLS1_2_VERSION,
David Benjamina2c42d72016-07-08 09:05:45 -0700134 &kTLSProtocolMethod,
David Benjamin82c9e902014-12-12 15:55:27 -0500135 };
David Benjamina2c42d72016-07-08 09:05:45 -0700136 return &kMethod;
David Benjamin82c9e902014-12-12 15:55:27 -0500137}
David Benjamincde8aba2014-11-23 15:47:20 -0500138
David Benjamin82c9e902014-12-12 15:55:27 -0500139const SSL_METHOD *TLSv1_1_method(void) {
David Benjamina2c42d72016-07-08 09:05:45 -0700140 static const SSL_METHOD kMethod = {
David Benjamin82c9e902014-12-12 15:55:27 -0500141 TLS1_1_VERSION,
David Benjamina2c42d72016-07-08 09:05:45 -0700142 &kTLSProtocolMethod,
David Benjamin82c9e902014-12-12 15:55:27 -0500143 };
David Benjamina2c42d72016-07-08 09:05:45 -0700144 return &kMethod;
David Benjamin82c9e902014-12-12 15:55:27 -0500145}
David Benjamincde8aba2014-11-23 15:47:20 -0500146
David Benjamin82c9e902014-12-12 15:55:27 -0500147const SSL_METHOD *TLSv1_method(void) {
David Benjamina2c42d72016-07-08 09:05:45 -0700148 static const SSL_METHOD kMethod = {
David Benjamin82c9e902014-12-12 15:55:27 -0500149 TLS1_VERSION,
David Benjamina2c42d72016-07-08 09:05:45 -0700150 &kTLSProtocolMethod,
David Benjamin82c9e902014-12-12 15:55:27 -0500151 };
David Benjamina2c42d72016-07-08 09:05:45 -0700152 return &kMethod;
David Benjamin82c9e902014-12-12 15:55:27 -0500153}
David Benjamincde8aba2014-11-23 15:47:20 -0500154
David Benjamin82c9e902014-12-12 15:55:27 -0500155const SSL_METHOD *SSLv3_method(void) {
David Benjamina2c42d72016-07-08 09:05:45 -0700156 static const SSL_METHOD kMethod = {
David Benjamin82c9e902014-12-12 15:55:27 -0500157 SSL3_VERSION,
David Benjamina2c42d72016-07-08 09:05:45 -0700158 &kTLSProtocolMethod,
David Benjamin82c9e902014-12-12 15:55:27 -0500159 };
David Benjamina2c42d72016-07-08 09:05:45 -0700160 return &kMethod;
David Benjamin82c9e902014-12-12 15:55:27 -0500161}
David Benjamincde8aba2014-11-23 15:47:20 -0500162
David Benjamin82c9e902014-12-12 15:55:27 -0500163/* Legacy side-specific methods. */
David Benjamincde8aba2014-11-23 15:47:20 -0500164
David Benjamin82c9e902014-12-12 15:55:27 -0500165const SSL_METHOD *TLSv1_2_server_method(void) {
166 return TLSv1_2_method();
167}
David Benjamincde8aba2014-11-23 15:47:20 -0500168
David Benjamin82c9e902014-12-12 15:55:27 -0500169const SSL_METHOD *TLSv1_1_server_method(void) {
170 return TLSv1_1_method();
171}
David Benjamincde8aba2014-11-23 15:47:20 -0500172
David Benjamin82c9e902014-12-12 15:55:27 -0500173const SSL_METHOD *TLSv1_server_method(void) {
174 return TLSv1_method();
175}
176
177const SSL_METHOD *SSLv3_server_method(void) {
178 return SSLv3_method();
179}
180
181const SSL_METHOD *TLSv1_2_client_method(void) {
182 return TLSv1_2_method();
183}
184
185const SSL_METHOD *TLSv1_1_client_method(void) {
186 return TLSv1_1_method();
187}
188
189const SSL_METHOD *TLSv1_client_method(void) {
190 return TLSv1_method();
191}
192
193const SSL_METHOD *SSLv3_client_method(void) {
194 return SSLv3_method();
195}
196
197const SSL_METHOD *SSLv23_server_method(void) {
198 return SSLv23_method();
199}
200
201const SSL_METHOD *SSLv23_client_method(void) {
202 return SSLv23_method();
203}