PageRenderTime 26ms CodeModel.GetById 18ms RepoModel.GetById 0ms app.codeStats 0ms

/gecko_api/include/sslproto.h

http://firefox-mac-pdf.googlecode.com/
C Header | 220 lines | 136 code | 28 blank | 56 comment | 0 complexity | 2796bd06c767d60bbcda914ab490d499 MD5 | raw file
    

  1. /*
    2. 

  2.  * Various and sundry protocol constants. DON'T CHANGE THESE. These values 
    3. 

  3.  * are mostly defined by the SSL2, SSL3, or TLS protocol specifications.
    4. 

  4.  * Cipher kinds and ciphersuites are part of the public API.
    5. 

  5.  *
    6. 

  6.  * ***** BEGIN LICENSE BLOCK *****
    7. 

  7.  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
    8. 

  8.  *
    9. 

  9.  * The contents of this file are subject to the Mozilla Public License Version
    10. 

  10.  * 1.1 (the "License"); you may not use this file except in compliance with
    11. 

  11.  * the License. You may obtain a copy of the License at
    12. 

  12.  * http://www.mozilla.org/MPL/
    13. 

  13.  *
    14. 

  14.  * Software distributed under the License is distributed on an "AS IS" basis,
    15. 

  15.  * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
    16. 

  16.  * for the specific language governing rights and limitations under the
    17. 

  17.  * License.
    18. 

  18.  *
    19. 

  19.  * The Original Code is the Netscape security libraries.
    20. 

  20.  *
    21. 

  21.  * The Initial Developer of the Original Code is
    22. 

  22.  * Netscape Communications Corporation.
    23. 

  23.  * Portions created by the Initial Developer are Copyright (C) 1994-2000
    24. 

  24.  * the Initial Developer. All Rights Reserved.
    25. 

  25.  *
    26. 

  26.  * Contributor(s):
    27. 

  27.  *   Dr Vipul Gupta <vipul.gupta@sun.com>, Sun Microsystems Laboratories
    28. 

  28.  *
    29. 

  29.  * Alternatively, the contents of this file may be used under the terms of
    30. 

  30.  * either the GNU General Public License Version 2 or later (the "GPL"), or
    31. 

  31.  * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
    32. 

  32.  * in which case the provisions of the GPL or the LGPL are applicable instead
    33. 

  33.  * of those above. If you wish to allow use of your version of this file only
    34. 

  34.  * under the terms of either the GPL or the LGPL, and not to allow others to
    35. 

  35.  * use your version of this file under the terms of the MPL, indicate your
    36. 

  36.  * decision by deleting the provisions above and replace them with the notice
    37. 

  37.  * and other provisions required by the GPL or the LGPL. If you do not delete
    38. 

  38.  * the provisions above, a recipient may use your version of this file under
    39. 

  39.  * the terms of any one of the MPL, the GPL or the LGPL.
    40. 

  40.  *
    41. 

  41.  * ***** END LICENSE BLOCK ***** */
    42. 

  42. /* $Id: sslproto.h,v 1.12 2007/02/28 19:47:38 rrelyea%redhat.com Exp $ */
    43. 

  43. 

  44. #ifndef __sslproto_h_
    45. 

  45. #define __sslproto_h_
    46. 

  46. 

  47. /* All versions less than 3_0 are treated as SSL version 2 */
    48. 

  48. #define SSL_LIBRARY_VERSION_2			0x0002
    49. 

  49. #define SSL_LIBRARY_VERSION_3_0			0x0300
    50. 

  50. #define SSL_LIBRARY_VERSION_3_1_TLS		0x0301
    51. 

  51. 

  52. /* Header lengths of some of the messages */
    53. 

  53. #define SSL_HL_ERROR_HBYTES			3
    54. 

  54. #define SSL_HL_CLIENT_HELLO_HBYTES		9
    55. 

  55. #define SSL_HL_CLIENT_MASTER_KEY_HBYTES		10
    56. 

  56. #define SSL_HL_CLIENT_FINISHED_HBYTES		1
    57. 

  57. #define SSL_HL_SERVER_HELLO_HBYTES		11
    58. 

  58. #define SSL_HL_SERVER_VERIFY_HBYTES		1
    59. 

  59. #define SSL_HL_SERVER_FINISHED_HBYTES		1
    60. 

  60. #define SSL_HL_REQUEST_CERTIFICATE_HBYTES	2
    61. 

  61. #define SSL_HL_CLIENT_CERTIFICATE_HBYTES	6
    62. 

  62. 

  63. /* Security handshake protocol codes */
    64. 

  64. #define SSL_MT_ERROR				0
    65. 

  65. #define SSL_MT_CLIENT_HELLO			1
    66. 

  66. #define SSL_MT_CLIENT_MASTER_KEY		2
    67. 

  67. #define SSL_MT_CLIENT_FINISHED			3
    68. 

  68. #define SSL_MT_SERVER_HELLO			4
    69. 

  69. #define SSL_MT_SERVER_VERIFY			5
    70. 

  70. #define SSL_MT_SERVER_FINISHED			6
    71. 

  71. #define SSL_MT_REQUEST_CERTIFICATE		7
    72. 

  72. #define SSL_MT_CLIENT_CERTIFICATE		8
    73. 

  73. 

  74. /* Certificate types */
    75. 

  75. #define SSL_CT_X509_CERTIFICATE			0x01
    76. 

  76. #if 0 /* XXX Not implemented yet */
    77. 

  77. #define SSL_PKCS6_CERTIFICATE			0x02
    78. 

  78. #endif
    79. 

  79. #define SSL_AT_MD5_WITH_RSA_ENCRYPTION		0x01
    80. 

  80. 

  81. /* Error codes */
    82. 

  82. #define SSL_PE_NO_CYPHERS			0x0001
    83. 

  83. #define SSL_PE_NO_CERTIFICATE			0x0002
    84. 

  84. #define SSL_PE_BAD_CERTIFICATE			0x0004
    85. 

  85. #define SSL_PE_UNSUPPORTED_CERTIFICATE_TYPE	0x0006
    86. 

  86. 

  87. /* Cypher kinds (not the spec version!) */
    88. 

  88. #define SSL_CK_RC4_128_WITH_MD5			0x01
    89. 

  89. #define SSL_CK_RC4_128_EXPORT40_WITH_MD5	0x02
    90. 

  90. #define SSL_CK_RC2_128_CBC_WITH_MD5		0x03
    91. 

  91. #define SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5	0x04
    92. 

  92. #define SSL_CK_IDEA_128_CBC_WITH_MD5		0x05
    93. 

  93. #define SSL_CK_DES_64_CBC_WITH_MD5		0x06
    94. 

  94. #define SSL_CK_DES_192_EDE3_CBC_WITH_MD5	0x07
    95. 

  95. 

  96. /* Cipher enables.  These are used only for SSL_EnableCipher 
    97. 

  97.  * These values define the SSL2 suites, and do not colide with the 
    98. 

  98.  * SSL3 Cipher suites defined below.
    99. 

  99.  */
    100. 

  100. #define SSL_EN_RC4_128_WITH_MD5			0xFF01
    101. 

  101. #define SSL_EN_RC4_128_EXPORT40_WITH_MD5	0xFF02
    102. 

  102. #define SSL_EN_RC2_128_CBC_WITH_MD5		0xFF03
    103. 

  103. #define SSL_EN_RC2_128_CBC_EXPORT40_WITH_MD5	0xFF04
    104. 

  104. #define SSL_EN_IDEA_128_CBC_WITH_MD5		0xFF05
    105. 

  105. #define SSL_EN_DES_64_CBC_WITH_MD5		0xFF06
    106. 

  106. #define SSL_EN_DES_192_EDE3_CBC_WITH_MD5	0xFF07
    107. 

  107. 

  108. /* SSL v3 Cipher Suites */
    109. 

  109. #define SSL_NULL_WITH_NULL_NULL			0x0000
    110. 

  110. 

  111. #define SSL_RSA_WITH_NULL_MD5			0x0001
    112. 

  112. #define SSL_RSA_WITH_NULL_SHA			0x0002
    113. 

  113. #define SSL_RSA_EXPORT_WITH_RC4_40_MD5		0x0003
    114. 

  114. #define SSL_RSA_WITH_RC4_128_MD5		0x0004
    115. 

  115. #define SSL_RSA_WITH_RC4_128_SHA		0x0005
    116. 

  116. #define SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5	0x0006
    117. 

  117. #define SSL_RSA_WITH_IDEA_CBC_SHA		0x0007
    118. 

  118. #define SSL_RSA_EXPORT_WITH_DES40_CBC_SHA	0x0008
    119. 

  119. #define SSL_RSA_WITH_DES_CBC_SHA		0x0009
    120. 

  120. #define SSL_RSA_WITH_3DES_EDE_CBC_SHA		0x000a
    121. 

  121. 						       
    122. 

  122. #define SSL_DH_DSS_EXPORT_WITH_DES40_CBC_SHA	0x000b
    123. 

  123. #define SSL_DH_DSS_WITH_DES_CBC_SHA		0x000c
    124. 

  124. #define SSL_DH_DSS_WITH_3DES_EDE_CBC_SHA	0x000d
    125. 

  125. #define SSL_DH_RSA_EXPORT_WITH_DES40_CBC_SHA	0x000e
    126. 

  126. #define SSL_DH_RSA_WITH_DES_CBC_SHA		0x000f
    127. 

  127. #define SSL_DH_RSA_WITH_3DES_EDE_CBC_SHA	0x0010
    128. 

  128. 						       
    129. 

  129. #define SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA	0x0011
    130. 

  130. #define SSL_DHE_DSS_WITH_DES_CBC_SHA		0x0012
    131. 

  131. #define SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA	0x0013
    132. 

  132. #define SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA	0x0014
    133. 

  133. #define SSL_DHE_RSA_WITH_DES_CBC_SHA		0x0015
    134. 

  134. #define SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA	0x0016
    135. 

  135. 						       
    136. 

  136. #define SSL_DH_ANON_EXPORT_WITH_RC4_40_MD5	0x0017
    137. 

  137. #define SSL_DH_ANON_WITH_RC4_128_MD5		0x0018
    138. 

  138. #define SSL_DH_ANON_EXPORT_WITH_DES40_CBC_SHA	0x0019
    139. 

  139. #define SSL_DH_ANON_WITH_DES_CBC_SHA		0x001a
    140. 

  140. #define SSL_DH_ANON_WITH_3DES_EDE_CBC_SHA	0x001b
    141. 

  141. 

  142. #define SSL_FORTEZZA_DMS_WITH_NULL_SHA		0x001c /* deprecated */
    143. 

  143. #define SSL_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA	0x001d /* deprecated */
    144. 

  144. #define SSL_FORTEZZA_DMS_WITH_RC4_128_SHA	0x001e /* deprecated */
    145. 

  145. 

  146. /* New TLS cipher suites */
    147. 

  147. #define TLS_RSA_WITH_AES_128_CBC_SHA      	0x002F
    148. 

  148. #define TLS_DH_DSS_WITH_AES_128_CBC_SHA   	0x0030
    149. 

  149. #define TLS_DH_RSA_WITH_AES_128_CBC_SHA   	0x0031
    150. 

  150. #define TLS_DHE_DSS_WITH_AES_128_CBC_SHA  	0x0032
    151. 

  151. #define TLS_DHE_RSA_WITH_AES_128_CBC_SHA  	0x0033
    152. 

  152. #define TLS_DH_ANON_WITH_AES_128_CBC_SHA  	0x0034
    153. 

  153. 

  154. #define TLS_RSA_WITH_AES_256_CBC_SHA      	0x0035
    155. 

  155. #define TLS_DH_DSS_WITH_AES_256_CBC_SHA   	0x0036
    156. 

  156. #define TLS_DH_RSA_WITH_AES_256_CBC_SHA   	0x0037
    157. 

  157. #define TLS_DHE_DSS_WITH_AES_256_CBC_SHA  	0x0038
    158. 

  158. #define TLS_DHE_RSA_WITH_AES_256_CBC_SHA  	0x0039
    159. 

  159. #define TLS_DH_ANON_WITH_AES_256_CBC_SHA  	0x003A
    160. 

  160. 

  161. #define TLS_RSA_WITH_CAMELLIA_128_CBC_SHA      	0x0041
    162. 

  162. #define TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA   	0x0042
    163. 

  163. #define TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA   	0x0043
    164. 

  164. #define TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA  	0x0044
    165. 

  165. #define TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA  	0x0045
    166. 

  166. #define TLS_DH_ANON_WITH_CAMELLIA_128_CBC_SHA  	0x0046
    167. 

  167. 

  168. #define TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA     0x0062
    169. 

  169. #define TLS_RSA_EXPORT1024_WITH_RC4_56_SHA      0x0064
    170. 

  170. 

  171. #define TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA 0x0063
    172. 

  172. #define TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA  0x0065
    173. 

  173. #define TLS_DHE_DSS_WITH_RC4_128_SHA            0x0066
    174. 

  174. 

  175. #define TLS_RSA_WITH_CAMELLIA_256_CBC_SHA      	0x0084
    176. 

  176. #define TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA   	0x0085
    177. 

  177. #define TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA   	0x0086
    178. 

  178. #define TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA  	0x0087
    179. 

  179. #define TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA  	0x0088
    180. 

  180. #define TLS_DH_ANON_WITH_CAMELLIA_256_CBC_SHA  	0x0089
    181. 

  181. 

  182. #define TLS_ECDH_ECDSA_WITH_NULL_SHA            0xC001
    183. 

  183. #define TLS_ECDH_ECDSA_WITH_RC4_128_SHA         0xC002
    184. 

  184. #define TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA    0xC003
    185. 

  185. #define TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA     0xC004
    186. 

  186. #define TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA     0xC005
    187. 

  187. 

  188. #define TLS_ECDHE_ECDSA_WITH_NULL_SHA           0xC006
    189. 

  189. #define TLS_ECDHE_ECDSA_WITH_RC4_128_SHA        0xC007
    190. 

  190. #define TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA   0xC008
    191. 

  191. #define TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA    0xC009
    192. 

  192. #define TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA    0xC00A
    193. 

  193. 

  194. #define TLS_ECDH_RSA_WITH_NULL_SHA              0xC00B
    195. 

  195. #define TLS_ECDH_RSA_WITH_RC4_128_SHA           0xC00C
    196. 

  196. #define TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA      0xC00D
    197. 

  197. #define TLS_ECDH_RSA_WITH_AES_128_CBC_SHA       0xC00E
    198. 

  198. #define TLS_ECDH_RSA_WITH_AES_256_CBC_SHA       0xC00F
    199. 

  199. 

  200. #define TLS_ECDHE_RSA_WITH_NULL_SHA             0xC010
    201. 

  201. #define TLS_ECDHE_RSA_WITH_RC4_128_SHA          0xC011
    202. 

  202. #define TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA     0xC012
    203. 

  203. #define TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA      0xC013
    204. 

  204. #define TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA      0xC014
    205. 

  205. 

  206. #define TLS_ECDH_anon_WITH_NULL_SHA             0xC015
    207. 

  207. #define TLS_ECDH_anon_WITH_RC4_128_SHA          0xC016
    208. 

  208. #define TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA     0xC017
    209. 

  209. #define TLS_ECDH_anon_WITH_AES_128_CBC_SHA      0xC018
    210. 

  210. #define TLS_ECDH_anon_WITH_AES_256_CBC_SHA      0xC019
    211. 

  211. 

  212. /* Netscape "experimental" cipher suites. */
    213. 

  213. #define SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA	0xffe0
    214. 

  214. #define SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA	0xffe1
    215. 

  215. 

  216. /* New non-experimental openly spec'ed versions of those cipher suites. */
    217. 

  217. #define SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA 	0xfeff
    218. 

  218. #define SSL_RSA_FIPS_WITH_DES_CBC_SHA      	0xfefe
    219. 

  219. 

  220. #endif /* __sslproto_h_ */
    221. 

  221.