xref: /freebsd/crypto/openssl/ssl/s3_lib.c (revision 0135f0027c85637a8456d22b6713b6479de73229)
1 /* ssl/s3_lib.c */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3  * All rights reserved.
4  *
5  * This package is an SSL implementation written
6  * by Eric Young (eay@cryptsoft.com).
7  * The implementation was written so as to conform with Netscapes SSL.
8  *
9  * This library is free for commercial and non-commercial use as long as
10  * the following conditions are aheared to.  The following conditions
11  * apply to all code found in this distribution, be it the RC4, RSA,
12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13  * included with this distribution is covered by the same copyright terms
14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15  *
16  * Copyright remains Eric Young's, and as such any Copyright notices in
17  * the code are not to be removed.
18  * If this package is used in a product, Eric Young should be given attribution
19  * as the author of the parts of the library used.
20  * This can be in the form of a textual message at program startup or
21  * in documentation (online or textual) provided with the package.
22  *
23  * Redistribution and use in source and binary forms, with or without
24  * modification, are permitted provided that the following conditions
25  * are met:
26  * 1. Redistributions of source code must retain the copyright
27  *    notice, this list of conditions and the following disclaimer.
28  * 2. Redistributions in binary form must reproduce the above copyright
29  *    notice, this list of conditions and the following disclaimer in the
30  *    documentation and/or other materials provided with the distribution.
31  * 3. All advertising materials mentioning features or use of this software
32  *    must display the following acknowledgement:
33  *    "This product includes cryptographic software written by
34  *     Eric Young (eay@cryptsoft.com)"
35  *    The word 'cryptographic' can be left out if the rouines from the library
36  *    being used are not cryptographic related :-).
37  * 4. If you include any Windows specific code (or a derivative thereof) from
38  *    the apps directory (application code) you must include an acknowledgement:
39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40  *
41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51  * SUCH DAMAGE.
52  *
53  * The licence and distribution terms for any publically available version or
54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
55  * copied and put under another distribution licence
56  * [including the GNU Public Licence.]
57  */
58 /* ====================================================================
59  * Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
60  *
61  * Redistribution and use in source and binary forms, with or without
62  * modification, are permitted provided that the following conditions
63  * are met:
64  *
65  * 1. Redistributions of source code must retain the above copyright
66  *    notice, this list of conditions and the following disclaimer.
67  *
68  * 2. Redistributions in binary form must reproduce the above copyright
69  *    notice, this list of conditions and the following disclaimer in
70  *    the documentation and/or other materials provided with the
71  *    distribution.
72  *
73  * 3. All advertising materials mentioning features or use of this
74  *    software must display the following acknowledgment:
75  *    "This product includes software developed by the OpenSSL Project
76  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
77  *
78  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
79  *    endorse or promote products derived from this software without
80  *    prior written permission. For written permission, please contact
81  *    openssl-core@openssl.org.
82  *
83  * 5. Products derived from this software may not be called "OpenSSL"
84  *    nor may "OpenSSL" appear in their names without prior written
85  *    permission of the OpenSSL Project.
86  *
87  * 6. Redistributions of any form whatsoever must retain the following
88  *    acknowledgment:
89  *    "This product includes software developed by the OpenSSL Project
90  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
91  *
92  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
93  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
94  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
95  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
96  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
97  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
98  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
99  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
100  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
101  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
102  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
103  * OF THE POSSIBILITY OF SUCH DAMAGE.
104  * ====================================================================
105  *
106  * This product includes cryptographic software written by Eric Young
107  * (eay@cryptsoft.com).  This product includes software written by Tim
108  * Hudson (tjh@cryptsoft.com).
109  *
110  */
111 
112 #include <stdio.h>
113 #include <openssl/md5.h>
114 #include <openssl/sha.h>
115 #include <openssl/objects.h>
116 #include "ssl_locl.h"
117 
118 const char *ssl3_version_str="SSLv3" OPENSSL_VERSION_PTEXT;
119 
120 #define SSL3_NUM_CIPHERS	(sizeof(ssl3_ciphers)/sizeof(SSL_CIPHER))
121 
122 static long ssl3_default_timeout(void );
123 
124 OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
125 /* The RSA ciphers */
126 /* Cipher 01 */
127 	{
128 	1,
129 	SSL3_TXT_RSA_NULL_MD5,
130 	SSL3_CK_RSA_NULL_MD5,
131 	SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_MD5|SSL_SSLV3,
132 	SSL_NOT_EXP,
133 	0,
134 	0,
135 	0,
136 	SSL_ALL_CIPHERS,
137 	SSL_ALL_STRENGTHS,
138 	},
139 /* Cipher 02 */
140 	{
141 	1,
142 	SSL3_TXT_RSA_NULL_SHA,
143 	SSL3_CK_RSA_NULL_SHA,
144 	SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_SHA1|SSL_SSLV3,
145 	SSL_NOT_EXP,
146 	0,
147 	0,
148 	0,
149 	SSL_ALL_CIPHERS,
150 	SSL_ALL_STRENGTHS,
151 	},
152 
153 /* anon DH */
154 /* Cipher 17 */
155 	{
156 	1,
157 	SSL3_TXT_ADH_RC4_40_MD5,
158 	SSL3_CK_ADH_RC4_40_MD5,
159 	SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
160 	SSL_EXPORT|SSL_EXP40,
161 	0,
162 	40,
163 	128,
164 	SSL_ALL_CIPHERS,
165 	SSL_ALL_STRENGTHS,
166 	},
167 /* Cipher 18 */
168 	{
169 	1,
170 	SSL3_TXT_ADH_RC4_128_MD5,
171 	SSL3_CK_ADH_RC4_128_MD5,
172 	SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
173 	SSL_NOT_EXP|SSL_MEDIUM,
174 	0,
175 	128,
176 	128,
177 	SSL_ALL_CIPHERS,
178 	SSL_ALL_STRENGTHS,
179 	},
180 /* Cipher 19 */
181 	{
182 	1,
183 	SSL3_TXT_ADH_DES_40_CBC_SHA,
184 	SSL3_CK_ADH_DES_40_CBC_SHA,
185 	SSL_kEDH |SSL_aNULL|SSL_DES|SSL_SHA1|SSL_SSLV3,
186 	SSL_EXPORT|SSL_EXP40,
187 	0,
188 	40,
189 	128,
190 	SSL_ALL_CIPHERS,
191 	SSL_ALL_STRENGTHS,
192 	},
193 /* Cipher 1A */
194 	{
195 	1,
196 	SSL3_TXT_ADH_DES_64_CBC_SHA,
197 	SSL3_CK_ADH_DES_64_CBC_SHA,
198 	SSL_kEDH |SSL_aNULL|SSL_DES  |SSL_SHA1|SSL_SSLV3,
199 	SSL_NOT_EXP|SSL_LOW,
200 	0,
201 	56,
202 	56,
203 	SSL_ALL_CIPHERS,
204 	SSL_ALL_STRENGTHS,
205 	},
206 /* Cipher 1B */
207 	{
208 	1,
209 	SSL3_TXT_ADH_DES_192_CBC_SHA,
210 	SSL3_CK_ADH_DES_192_CBC_SHA,
211 	SSL_kEDH |SSL_aNULL|SSL_3DES |SSL_SHA1|SSL_SSLV3,
212 	SSL_NOT_EXP|SSL_HIGH,
213 	0,
214 	168,
215 	168,
216 	SSL_ALL_CIPHERS,
217 	SSL_ALL_STRENGTHS,
218 	},
219 
220 /* RSA again */
221 /* Cipher 03 */
222 	{
223 	1,
224 	SSL3_TXT_RSA_RC4_40_MD5,
225 	SSL3_CK_RSA_RC4_40_MD5,
226 	SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
227 	SSL_EXPORT|SSL_EXP40,
228 	0,
229 	40,
230 	128,
231 	SSL_ALL_CIPHERS,
232 	SSL_ALL_STRENGTHS,
233 	},
234 /* Cipher 04 */
235 	{
236 	1,
237 	SSL3_TXT_RSA_RC4_128_MD5,
238 	SSL3_CK_RSA_RC4_128_MD5,
239 	SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5|SSL_SSLV3,
240 	SSL_NOT_EXP|SSL_MEDIUM,
241 	0,
242 	128,
243 	128,
244 	SSL_ALL_CIPHERS,
245 	SSL_ALL_STRENGTHS,
246 	},
247 /* Cipher 05 */
248 	{
249 	1,
250 	SSL3_TXT_RSA_RC4_128_SHA,
251 	SSL3_CK_RSA_RC4_128_SHA,
252 	SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_SHA1|SSL_SSLV3,
253 	SSL_NOT_EXP|SSL_MEDIUM,
254 	0,
255 	128,
256 	128,
257 	SSL_ALL_CIPHERS,
258 	SSL_ALL_STRENGTHS,
259 	},
260 /* Cipher 06 */
261 	{
262 	1,
263 	SSL3_TXT_RSA_RC2_40_MD5,
264 	SSL3_CK_RSA_RC2_40_MD5,
265 	SSL_kRSA|SSL_aRSA|SSL_RC2  |SSL_MD5 |SSL_SSLV3,
266 	SSL_EXPORT|SSL_EXP40,
267 	0,
268 	40,
269 	128,
270 	SSL_ALL_CIPHERS,
271 	SSL_ALL_STRENGTHS,
272 	},
273 /* Cipher 07 */
274 	{
275 	1,
276 	SSL3_TXT_RSA_IDEA_128_SHA,
277 	SSL3_CK_RSA_IDEA_128_SHA,
278 	SSL_kRSA|SSL_aRSA|SSL_IDEA |SSL_SHA1|SSL_SSLV3,
279 	SSL_NOT_EXP|SSL_MEDIUM,
280 	0,
281 	128,
282 	128,
283 	SSL_ALL_CIPHERS,
284 	SSL_ALL_STRENGTHS,
285 	},
286 /* Cipher 08 */
287 	{
288 	1,
289 	SSL3_TXT_RSA_DES_40_CBC_SHA,
290 	SSL3_CK_RSA_DES_40_CBC_SHA,
291 	SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
292 	SSL_EXPORT|SSL_EXP40,
293 	0,
294 	40,
295 	56,
296 	SSL_ALL_CIPHERS,
297 	SSL_ALL_STRENGTHS,
298 	},
299 /* Cipher 09 */
300 	{
301 	1,
302 	SSL3_TXT_RSA_DES_64_CBC_SHA,
303 	SSL3_CK_RSA_DES_64_CBC_SHA,
304 	SSL_kRSA|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
305 	SSL_NOT_EXP|SSL_LOW,
306 	0,
307 	56,
308 	56,
309 	SSL_ALL_CIPHERS,
310 	SSL_ALL_STRENGTHS,
311 	},
312 /* Cipher 0A */
313 	{
314 	1,
315 	SSL3_TXT_RSA_DES_192_CBC3_SHA,
316 	SSL3_CK_RSA_DES_192_CBC3_SHA,
317 	SSL_kRSA|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
318 	SSL_NOT_EXP|SSL_HIGH,
319 	0,
320 	168,
321 	168,
322 	SSL_ALL_CIPHERS,
323 	SSL_ALL_STRENGTHS,
324 	},
325 
326 /*  The DH ciphers */
327 /* Cipher 0B */
328 	{
329 	0,
330 	SSL3_TXT_DH_DSS_DES_40_CBC_SHA,
331 	SSL3_CK_DH_DSS_DES_40_CBC_SHA,
332 	SSL_kDHd |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
333 	SSL_EXPORT|SSL_EXP40,
334 	0,
335 	40,
336 	56,
337 	SSL_ALL_CIPHERS,
338 	SSL_ALL_STRENGTHS,
339 	},
340 /* Cipher 0C */
341 	{
342 	0,
343 	SSL3_TXT_DH_DSS_DES_64_CBC_SHA,
344 	SSL3_CK_DH_DSS_DES_64_CBC_SHA,
345 	SSL_kDHd |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
346 	SSL_NOT_EXP|SSL_LOW,
347 	0,
348 	56,
349 	56,
350 	SSL_ALL_CIPHERS,
351 	SSL_ALL_STRENGTHS,
352 	},
353 /* Cipher 0D */
354 	{
355 	0,
356 	SSL3_TXT_DH_DSS_DES_192_CBC3_SHA,
357 	SSL3_CK_DH_DSS_DES_192_CBC3_SHA,
358 	SSL_kDHd |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
359 	SSL_NOT_EXP|SSL_HIGH,
360 	0,
361 	168,
362 	168,
363 	SSL_ALL_CIPHERS,
364 	SSL_ALL_STRENGTHS,
365 	},
366 /* Cipher 0E */
367 	{
368 	0,
369 	SSL3_TXT_DH_RSA_DES_40_CBC_SHA,
370 	SSL3_CK_DH_RSA_DES_40_CBC_SHA,
371 	SSL_kDHr |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
372 	SSL_EXPORT|SSL_EXP40,
373 	0,
374 	40,
375 	56,
376 	SSL_ALL_CIPHERS,
377 	SSL_ALL_STRENGTHS,
378 	},
379 /* Cipher 0F */
380 	{
381 	0,
382 	SSL3_TXT_DH_RSA_DES_64_CBC_SHA,
383 	SSL3_CK_DH_RSA_DES_64_CBC_SHA,
384 	SSL_kDHr |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
385 	SSL_NOT_EXP|SSL_LOW,
386 	0,
387 	56,
388 	56,
389 	SSL_ALL_CIPHERS,
390 	SSL_ALL_STRENGTHS,
391 	},
392 /* Cipher 10 */
393 	{
394 	0,
395 	SSL3_TXT_DH_RSA_DES_192_CBC3_SHA,
396 	SSL3_CK_DH_RSA_DES_192_CBC3_SHA,
397 	SSL_kDHr |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
398 	SSL_NOT_EXP|SSL_HIGH,
399 	0,
400 	168,
401 	168,
402 	SSL_ALL_CIPHERS,
403 	SSL_ALL_STRENGTHS,
404 	},
405 
406 /* The Ephemeral DH ciphers */
407 /* Cipher 11 */
408 	{
409 	1,
410 	SSL3_TXT_EDH_DSS_DES_40_CBC_SHA,
411 	SSL3_CK_EDH_DSS_DES_40_CBC_SHA,
412 	SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA1|SSL_SSLV3,
413 	SSL_EXPORT|SSL_EXP40,
414 	0,
415 	40,
416 	56,
417 	SSL_ALL_CIPHERS,
418 	SSL_ALL_STRENGTHS,
419 	},
420 /* Cipher 12 */
421 	{
422 	1,
423 	SSL3_TXT_EDH_DSS_DES_64_CBC_SHA,
424 	SSL3_CK_EDH_DSS_DES_64_CBC_SHA,
425 	SSL_kEDH|SSL_aDSS|SSL_DES  |SSL_SHA1|SSL_SSLV3,
426 	SSL_NOT_EXP|SSL_LOW,
427 	0,
428 	56,
429 	56,
430 	SSL_ALL_CIPHERS,
431 	SSL_ALL_STRENGTHS,
432 	},
433 /* Cipher 13 */
434 	{
435 	1,
436 	SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA,
437 	SSL3_CK_EDH_DSS_DES_192_CBC3_SHA,
438 	SSL_kEDH|SSL_aDSS|SSL_3DES |SSL_SHA1|SSL_SSLV3,
439 	SSL_NOT_EXP|SSL_HIGH,
440 	0,
441 	168,
442 	168,
443 	SSL_ALL_CIPHERS,
444 	SSL_ALL_STRENGTHS,
445 	},
446 /* Cipher 14 */
447 	{
448 	1,
449 	SSL3_TXT_EDH_RSA_DES_40_CBC_SHA,
450 	SSL3_CK_EDH_RSA_DES_40_CBC_SHA,
451 	SSL_kEDH|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
452 	SSL_EXPORT|SSL_EXP40,
453 	0,
454 	40,
455 	56,
456 	SSL_ALL_CIPHERS,
457 	SSL_ALL_STRENGTHS,
458 	},
459 /* Cipher 15 */
460 	{
461 	1,
462 	SSL3_TXT_EDH_RSA_DES_64_CBC_SHA,
463 	SSL3_CK_EDH_RSA_DES_64_CBC_SHA,
464 	SSL_kEDH|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
465 	SSL_NOT_EXP|SSL_LOW,
466 	0,
467 	56,
468 	56,
469 	SSL_ALL_CIPHERS,
470 	SSL_ALL_STRENGTHS,
471 	},
472 /* Cipher 16 */
473 	{
474 	1,
475 	SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA,
476 	SSL3_CK_EDH_RSA_DES_192_CBC3_SHA,
477 	SSL_kEDH|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
478 	SSL_NOT_EXP|SSL_HIGH,
479 	0,
480 	168,
481 	168,
482 	SSL_ALL_CIPHERS,
483 	SSL_ALL_STRENGTHS,
484 	},
485 
486 /* Fortezza */
487 /* Cipher 1C */
488 	{
489 	0,
490 	SSL3_TXT_FZA_DMS_NULL_SHA,
491 	SSL3_CK_FZA_DMS_NULL_SHA,
492 	SSL_kFZA|SSL_aFZA |SSL_eNULL |SSL_SHA1|SSL_SSLV3,
493 	SSL_NOT_EXP,
494 	0,
495 	0,
496 	0,
497 	SSL_ALL_CIPHERS,
498 	SSL_ALL_STRENGTHS,
499 	},
500 
501 /* Cipher 1D */
502 	{
503 	0,
504 	SSL3_TXT_FZA_DMS_FZA_SHA,
505 	SSL3_CK_FZA_DMS_FZA_SHA,
506 	SSL_kFZA|SSL_aFZA |SSL_eFZA |SSL_SHA1|SSL_SSLV3,
507 	SSL_NOT_EXP,
508 	0,
509 	0,
510 	0,
511 	SSL_ALL_CIPHERS,
512 	SSL_ALL_STRENGTHS,
513 	},
514 
515 /* Cipher 1E */
516 	{
517 	0,
518 	SSL3_TXT_FZA_DMS_RC4_SHA,
519 	SSL3_CK_FZA_DMS_RC4_SHA,
520 	SSL_kFZA|SSL_aFZA |SSL_RC4  |SSL_SHA1|SSL_SSLV3,
521 	SSL_NOT_EXP|SSL_MEDIUM,
522 	0,
523 	128,
524 	128,
525 	SSL_ALL_CIPHERS,
526 	SSL_ALL_STRENGTHS,
527 	},
528 
529 #if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES
530 	/* New TLS Export CipherSuites */
531 	/* Cipher 60 */
532 	    {
533 	    1,
534 	    TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5,
535 	    TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5,
536 	    SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_MD5|SSL_TLSV1,
537 	    SSL_EXPORT|SSL_EXP56,
538 	    0,
539 	    56,
540 	    128,
541 	    SSL_ALL_CIPHERS,
542 	    SSL_ALL_STRENGTHS,
543 	    },
544 	/* Cipher 61 */
545 	    {
546 	    1,
547 	    TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
548 	    TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
549 	    SSL_kRSA|SSL_aRSA|SSL_RC2|SSL_MD5|SSL_TLSV1,
550 	    SSL_EXPORT|SSL_EXP56,
551 	    0,
552 	    56,
553 	    128,
554 	    SSL_ALL_CIPHERS,
555 	    SSL_ALL_STRENGTHS,
556 	    },
557 	/* Cipher 62 */
558 	    {
559 	    1,
560 	    TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA,
561 	    TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA,
562 	    SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA|SSL_TLSV1,
563 	    SSL_EXPORT|SSL_EXP56,
564 	    0,
565 	    56,
566 	    56,
567 	    SSL_ALL_CIPHERS,
568 	    SSL_ALL_STRENGTHS,
569 	    },
570 	/* Cipher 63 */
571 	    {
572 	    1,
573 	    TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
574 	    TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
575 	    SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA|SSL_TLSV1,
576 	    SSL_EXPORT|SSL_EXP56,
577 	    0,
578 	    56,
579 	    56,
580 	    SSL_ALL_CIPHERS,
581 	    SSL_ALL_STRENGTHS,
582 	    },
583 	/* Cipher 64 */
584 	    {
585 	    1,
586 	    TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA,
587 	    TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA,
588 	    SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
589 	    SSL_EXPORT|SSL_EXP56,
590 	    0,
591 	    56,
592 	    128,
593 	    SSL_ALL_CIPHERS,
594 	    SSL_ALL_STRENGTHS,
595 	    },
596 	/* Cipher 65 */
597 	    {
598 	    1,
599 	    TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
600 	    TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
601 	    SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
602 	    SSL_EXPORT|SSL_EXP56,
603 	    0,
604 	    56,
605 	    128,
606 	    SSL_ALL_CIPHERS,
607 	    SSL_ALL_STRENGTHS,
608 	    },
609 	/* Cipher 66 */
610 	    {
611 	    1,
612 	    TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA,
613 	    TLS1_CK_DHE_DSS_WITH_RC4_128_SHA,
614 	    SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
615 	    SSL_NOT_EXP|SSL_MEDIUM,
616 	    0,
617 	    128,
618 	    128,
619 	    SSL_ALL_CIPHERS,
620 	    SSL_ALL_STRENGTHS
621 	    },
622 #endif
623 
624 /* end of list */
625 	};
626 
627 static SSL3_ENC_METHOD SSLv3_enc_data={
628 	ssl3_enc,
629 	ssl3_mac,
630 	ssl3_setup_key_block,
631 	ssl3_generate_master_secret,
632 	ssl3_change_cipher_state,
633 	ssl3_final_finish_mac,
634 	MD5_DIGEST_LENGTH+SHA_DIGEST_LENGTH,
635 	ssl3_cert_verify_mac,
636 	SSL3_MD_CLIENT_FINISHED_CONST,4,
637 	SSL3_MD_SERVER_FINISHED_CONST,4,
638 	ssl3_alert_code,
639 	};
640 
641 static SSL_METHOD SSLv3_data= {
642 	SSL3_VERSION,
643 	ssl3_new,
644 	ssl3_clear,
645 	ssl3_free,
646 	ssl_undefined_function,
647 	ssl_undefined_function,
648 	ssl3_read,
649 	ssl3_peek,
650 	ssl3_write,
651 	ssl3_shutdown,
652 	ssl3_renegotiate,
653 	ssl3_renegotiate_check,
654 	ssl3_ctrl,
655 	ssl3_ctx_ctrl,
656 	ssl3_get_cipher_by_char,
657 	ssl3_put_cipher_by_char,
658 	ssl3_pending,
659 	ssl3_num_ciphers,
660 	ssl3_get_cipher,
661 	ssl_bad_method,
662 	ssl3_default_timeout,
663 	&SSLv3_enc_data,
664 	ssl_undefined_function,
665 	ssl3_callback_ctrl,
666 	ssl3_ctx_callback_ctrl,
667 	};
668 
669 static long ssl3_default_timeout(void)
670 	{
671 	/* 2 hours, the 24 hours mentioned in the SSLv3 spec
672 	 * is way too long for http, the cache would over fill */
673 	return(60*60*2);
674 	}
675 
676 SSL_METHOD *sslv3_base_method(void)
677 	{
678 	return(&SSLv3_data);
679 	}
680 
681 int ssl3_num_ciphers(void)
682 	{
683 	return(SSL3_NUM_CIPHERS);
684 	}
685 
686 SSL_CIPHER *ssl3_get_cipher(unsigned int u)
687 	{
688 	if (u < SSL3_NUM_CIPHERS)
689 		return(&(ssl3_ciphers[SSL3_NUM_CIPHERS-1-u]));
690 	else
691 		return(NULL);
692 	}
693 
694 int ssl3_pending(SSL *s)
695 	{
696 	if (s->rstate == SSL_ST_READ_BODY)
697 		return 0;
698 
699 	return (s->s3->rrec.type == SSL3_RT_APPLICATION_DATA) ? s->s3->rrec.length : 0;
700 	}
701 
702 int ssl3_new(SSL *s)
703 	{
704 	SSL3_STATE *s3;
705 
706 	if ((s3=OPENSSL_malloc(sizeof *s3)) == NULL) goto err;
707 	memset(s3,0,sizeof *s3);
708 
709 	s->s3=s3;
710 
711 	s->method->ssl_clear(s);
712 	return(1);
713 err:
714 	return(0);
715 	}
716 
717 void ssl3_free(SSL *s)
718 	{
719 	if(s == NULL)
720 	    return;
721 
722 	ssl3_cleanup_key_block(s);
723 	if (s->s3->rbuf.buf != NULL)
724 		OPENSSL_free(s->s3->rbuf.buf);
725 	if (s->s3->wbuf.buf != NULL)
726 		OPENSSL_free(s->s3->wbuf.buf);
727 	if (s->s3->rrec.comp != NULL)
728 		OPENSSL_free(s->s3->rrec.comp);
729 #ifndef NO_DH
730 	if (s->s3->tmp.dh != NULL)
731 		DH_free(s->s3->tmp.dh);
732 #endif
733 	if (s->s3->tmp.ca_names != NULL)
734 		sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
735 	memset(s->s3,0,sizeof *s->s3);
736 	OPENSSL_free(s->s3);
737 	s->s3=NULL;
738 	}
739 
740 void ssl3_clear(SSL *s)
741 	{
742 	unsigned char *rp,*wp;
743 	size_t rlen, wlen;
744 
745 	ssl3_cleanup_key_block(s);
746 	if (s->s3->tmp.ca_names != NULL)
747 		sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
748 
749 	if (s->s3->rrec.comp != NULL)
750 		{
751 		OPENSSL_free(s->s3->rrec.comp);
752 		s->s3->rrec.comp=NULL;
753 		}
754 #ifndef NO_DH
755 	if (s->s3->tmp.dh != NULL)
756 		DH_free(s->s3->tmp.dh);
757 #endif
758 
759 	rp = s->s3->rbuf.buf;
760 	wp = s->s3->wbuf.buf;
761 	rlen = s->s3->rbuf_len;
762 	wlen = s->s3->wbuf_len;
763 
764 	memset(s->s3,0,sizeof *s->s3);
765 	s->s3->rbuf.buf = rp;
766 	s->s3->wbuf.buf = wp;
767 	s->s3->rbuf_len = rlen;
768 	s->s3->wbuf_len = wlen;
769 
770 	ssl_free_wbio_buffer(s);
771 
772 	s->packet_length=0;
773 	s->s3->renegotiate=0;
774 	s->s3->total_renegotiations=0;
775 	s->s3->num_renegotiations=0;
776 	s->s3->in_read_app_data=0;
777 	s->version=SSL3_VERSION;
778 	}
779 
780 long ssl3_ctrl(SSL *s, int cmd, long larg, char *parg)
781 	{
782 	int ret=0;
783 
784 #if !defined(NO_DSA) || !defined(NO_RSA)
785 	if (
786 #ifndef NO_RSA
787 	    cmd == SSL_CTRL_SET_TMP_RSA ||
788 	    cmd == SSL_CTRL_SET_TMP_RSA_CB ||
789 #endif
790 #ifndef NO_DSA
791 	    cmd == SSL_CTRL_SET_TMP_DH ||
792 	    cmd == SSL_CTRL_SET_TMP_DH_CB ||
793 #endif
794 		0)
795 		{
796 		if (!ssl_cert_inst(&s->cert))
797 		    	{
798 			SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
799 			return(0);
800 			}
801 		}
802 #endif
803 
804 	switch (cmd)
805 		{
806 	case SSL_CTRL_GET_SESSION_REUSED:
807 		ret=s->hit;
808 		break;
809 	case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
810 		break;
811 	case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
812 		ret=s->s3->num_renegotiations;
813 		break;
814 	case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
815 		ret=s->s3->num_renegotiations;
816 		s->s3->num_renegotiations=0;
817 		break;
818 	case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
819 		ret=s->s3->total_renegotiations;
820 		break;
821 	case SSL_CTRL_GET_FLAGS:
822 		ret=(int)(s->s3->flags);
823 		break;
824 #ifndef NO_RSA
825 	case SSL_CTRL_NEED_TMP_RSA:
826 		if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) &&
827 		    ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
828 		     (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8))))
829 			ret = 1;
830 		break;
831 	case SSL_CTRL_SET_TMP_RSA:
832 		{
833 			RSA *rsa = (RSA *)parg;
834 			if (rsa == NULL)
835 				{
836 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
837 				return(ret);
838 				}
839 			if ((rsa = RSAPrivateKey_dup(rsa)) == NULL)
840 				{
841 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_RSA_LIB);
842 				return(ret);
843 				}
844 			if (s->cert->rsa_tmp != NULL)
845 				RSA_free(s->cert->rsa_tmp);
846 			s->cert->rsa_tmp = rsa;
847 			ret = 1;
848 		}
849 		break;
850 	case SSL_CTRL_SET_TMP_RSA_CB:
851 		{
852 		SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
853 		return(ret);
854 		}
855 		break;
856 #endif
857 #ifndef NO_DH
858 	case SSL_CTRL_SET_TMP_DH:
859 		{
860 			DH *dh = (DH *)parg;
861 			if (dh == NULL)
862 				{
863 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
864 				return(ret);
865 				}
866 			if ((dh = DHparams_dup(dh)) == NULL)
867 				{
868 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
869 				return(ret);
870 				}
871 			if (!(s->options & SSL_OP_SINGLE_DH_USE))
872 				{
873 				if (!DH_generate_key(dh))
874 					{
875 					DH_free(dh);
876 					SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
877 					return(ret);
878 					}
879 				}
880 			if (s->cert->dh_tmp != NULL)
881 				DH_free(s->cert->dh_tmp);
882 			s->cert->dh_tmp = dh;
883 			ret = 1;
884 		}
885 		break;
886 	case SSL_CTRL_SET_TMP_DH_CB:
887 		{
888 		SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
889 		return(ret);
890 		}
891 		break;
892 #endif
893 	default:
894 		break;
895 		}
896 	return(ret);
897 	}
898 
899 long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp)())
900 	{
901 	int ret=0;
902 
903 #if !defined(NO_DSA) || !defined(NO_RSA)
904 	if (
905 #ifndef NO_RSA
906 	    cmd == SSL_CTRL_SET_TMP_RSA_CB ||
907 #endif
908 #ifndef NO_DSA
909 	    cmd == SSL_CTRL_SET_TMP_DH_CB ||
910 #endif
911 		0)
912 		{
913 		if (!ssl_cert_inst(&s->cert))
914 			{
915 			SSLerr(SSL_F_SSL3_CALLBACK_CTRL, ERR_R_MALLOC_FAILURE);
916 			return(0);
917 			}
918 		}
919 #endif
920 
921 	switch (cmd)
922 		{
923 #ifndef NO_RSA
924 	case SSL_CTRL_SET_TMP_RSA_CB:
925 		{
926 		s->cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
927 		}
928 		break;
929 #endif
930 #ifndef NO_DH
931 	case SSL_CTRL_SET_TMP_DH_CB:
932 		{
933 		s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
934 		}
935 		break;
936 #endif
937 	default:
938 		break;
939 		}
940 	return(ret);
941 	}
942 
943 long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, char *parg)
944 	{
945 	CERT *cert;
946 
947 	cert=ctx->cert;
948 
949 	switch (cmd)
950 		{
951 #ifndef NO_RSA
952 	case SSL_CTRL_NEED_TMP_RSA:
953 		if (	(cert->rsa_tmp == NULL) &&
954 			((cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
955 			 (EVP_PKEY_size(cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8)))
956 			)
957 			return(1);
958 		else
959 			return(0);
960 		/* break; */
961 	case SSL_CTRL_SET_TMP_RSA:
962 		{
963 		RSA *rsa;
964 		int i;
965 
966 		rsa=(RSA *)parg;
967 		i=1;
968 		if (rsa == NULL)
969 			i=0;
970 		else
971 			{
972 			if ((rsa=RSAPrivateKey_dup(rsa)) == NULL)
973 				i=0;
974 			}
975 		if (!i)
976 			{
977 			SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_RSA_LIB);
978 			return(0);
979 			}
980 		else
981 			{
982 			if (cert->rsa_tmp != NULL)
983 				RSA_free(cert->rsa_tmp);
984 			cert->rsa_tmp=rsa;
985 			return(1);
986 			}
987 		}
988 		/* break; */
989 	case SSL_CTRL_SET_TMP_RSA_CB:
990 		{
991 		SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
992 		return(0);
993 		}
994 		break;
995 #endif
996 #ifndef NO_DH
997 	case SSL_CTRL_SET_TMP_DH:
998 		{
999 		DH *new=NULL,*dh;
1000 
1001 		dh=(DH *)parg;
1002 		if ((new=DHparams_dup(dh)) == NULL)
1003 			{
1004 			SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
1005 			return 0;
1006 			}
1007 		if (!(ctx->options & SSL_OP_SINGLE_DH_USE))
1008 			{
1009 			if (!DH_generate_key(new))
1010 				{
1011 				SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
1012 				DH_free(new);
1013 				return 0;
1014 				}
1015 			}
1016 		if (cert->dh_tmp != NULL)
1017 			DH_free(cert->dh_tmp);
1018 		cert->dh_tmp=new;
1019 		return 1;
1020 		}
1021 		/*break; */
1022 	case SSL_CTRL_SET_TMP_DH_CB:
1023 		{
1024 		SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1025 		return(0);
1026 		}
1027 		break;
1028 #endif
1029 	/* A Thawte special :-) */
1030 	case SSL_CTRL_EXTRA_CHAIN_CERT:
1031 		if (ctx->extra_certs == NULL)
1032 			{
1033 			if ((ctx->extra_certs=sk_X509_new_null()) == NULL)
1034 				return(0);
1035 			}
1036 		sk_X509_push(ctx->extra_certs,(X509 *)parg);
1037 		break;
1038 
1039 	default:
1040 		return(0);
1041 		}
1042 	return(1);
1043 	}
1044 
1045 long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp)())
1046 	{
1047 	CERT *cert;
1048 
1049 	cert=ctx->cert;
1050 
1051 	switch (cmd)
1052 		{
1053 #ifndef NO_RSA
1054 	case SSL_CTRL_SET_TMP_RSA_CB:
1055 		{
1056 		cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
1057 		}
1058 		break;
1059 #endif
1060 #ifndef NO_DH
1061 	case SSL_CTRL_SET_TMP_DH_CB:
1062 		{
1063 		cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
1064 		}
1065 		break;
1066 #endif
1067 	default:
1068 		return(0);
1069 		}
1070 	return(1);
1071 	}
1072 
1073 /* This function needs to check if the ciphers required are actually
1074  * available */
1075 SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
1076 	{
1077 	static int init=1;
1078 	static SSL_CIPHER *sorted[SSL3_NUM_CIPHERS];
1079 	SSL_CIPHER c,*cp= &c,**cpp;
1080 	unsigned long id;
1081 	int i;
1082 
1083 	if (init)
1084 		{
1085 		CRYPTO_w_lock(CRYPTO_LOCK_SSL);
1086 
1087 		for (i=0; i<SSL3_NUM_CIPHERS; i++)
1088 			sorted[i]= &(ssl3_ciphers[i]);
1089 
1090 		qsort(	(char *)sorted,
1091 			SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER *),
1092 			FP_ICC ssl_cipher_ptr_id_cmp);
1093 
1094 		CRYPTO_w_unlock(CRYPTO_LOCK_SSL);
1095 
1096 		init=0;
1097 		}
1098 
1099 	id=0x03000000L|((unsigned long)p[0]<<8L)|(unsigned long)p[1];
1100 	c.id=id;
1101 	cpp=(SSL_CIPHER **)OBJ_bsearch((char *)&cp,
1102 		(char *)sorted,
1103 		SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER *),
1104 		FP_ICC ssl_cipher_ptr_id_cmp);
1105 	if ((cpp == NULL) || !(*cpp)->valid)
1106 		return(NULL);
1107 	else
1108 		return(*cpp);
1109 	}
1110 
1111 int ssl3_put_cipher_by_char(const SSL_CIPHER *c, unsigned char *p)
1112 	{
1113 	long l;
1114 
1115 	if (p != NULL)
1116 		{
1117 		l=c->id;
1118 		if ((l & 0xff000000) != 0x03000000) return(0);
1119 		p[0]=((unsigned char)(l>> 8L))&0xFF;
1120 		p[1]=((unsigned char)(l     ))&0xFF;
1121 		}
1122 	return(2);
1123 	}
1124 
1125 SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *have,
1126 	     STACK_OF(SSL_CIPHER) *pref)
1127 	{
1128 	SSL_CIPHER *c,*ret=NULL;
1129 	int i,j,ok;
1130 	CERT *cert;
1131 	unsigned long alg,mask,emask;
1132 
1133 	/* Let's see which ciphers we can support */
1134 	cert=s->cert;
1135 
1136 	sk_SSL_CIPHER_set_cmp_func(pref,ssl_cipher_ptr_id_cmp);
1137 
1138 #ifdef CIPHER_DEBUG
1139 	printf("Have:\n");
1140 	for(i=0 ; i < sk_num(pref) ; ++i)
1141 	    {
1142 	    c=(SSL_CIPHER *)sk_value(pref,i);
1143 	    printf("%p:%s\n",c,c->name);
1144 	    }
1145 #endif
1146 
1147 	for (i=0; i<sk_SSL_CIPHER_num(have); i++)
1148 		{
1149 		c=sk_SSL_CIPHER_value(have,i);
1150 
1151 		ssl_set_cert_masks(cert,c);
1152 		mask=cert->mask;
1153 		emask=cert->export_mask;
1154 
1155 		alg=c->algorithms&(SSL_MKEY_MASK|SSL_AUTH_MASK);
1156 		if (SSL_C_IS_EXPORT(c))
1157 			{
1158 			ok=((alg & emask) == alg)?1:0;
1159 #ifdef CIPHER_DEBUG
1160 			printf("%d:[%08lX:%08lX]%p:%s (export)\n",ok,alg,emask,
1161 			       c,c->name);
1162 #endif
1163 			}
1164 		else
1165 			{
1166 			ok=((alg & mask) == alg)?1:0;
1167 #ifdef CIPHER_DEBUG
1168 			printf("%d:[%08lX:%08lX]%p:%s\n",ok,alg,mask,c,
1169 			       c->name);
1170 #endif
1171 			}
1172 
1173 		if (!ok) continue;
1174 
1175 		j=sk_SSL_CIPHER_find(pref,c);
1176 		if (j >= 0)
1177 			{
1178 			ret=sk_SSL_CIPHER_value(pref,j);
1179 			break;
1180 			}
1181 		}
1182 	return(ret);
1183 	}
1184 
1185 int ssl3_get_req_cert_type(SSL *s, unsigned char *p)
1186 	{
1187 	int ret=0;
1188 	unsigned long alg;
1189 
1190 	alg=s->s3->tmp.new_cipher->algorithms;
1191 
1192 #ifndef NO_DH
1193 	if (alg & (SSL_kDHr|SSL_kEDH))
1194 		{
1195 #  ifndef NO_RSA
1196 		p[ret++]=SSL3_CT_RSA_FIXED_DH;
1197 #  endif
1198 #  ifndef NO_DSA
1199 		p[ret++]=SSL3_CT_DSS_FIXED_DH;
1200 #  endif
1201 		}
1202 	if ((s->version == SSL3_VERSION) &&
1203 		(alg & (SSL_kEDH|SSL_kDHd|SSL_kDHr)))
1204 		{
1205 #  ifndef NO_RSA
1206 		p[ret++]=SSL3_CT_RSA_EPHEMERAL_DH;
1207 #  endif
1208 #  ifndef NO_DSA
1209 		p[ret++]=SSL3_CT_DSS_EPHEMERAL_DH;
1210 #  endif
1211 		}
1212 #endif /* !NO_DH */
1213 #ifndef NO_RSA
1214 	p[ret++]=SSL3_CT_RSA_SIGN;
1215 #endif
1216 #ifndef NO_DSA
1217 	p[ret++]=SSL3_CT_DSS_SIGN;
1218 #endif
1219 	return(ret);
1220 	}
1221 
1222 int ssl3_shutdown(SSL *s)
1223 	{
1224 
1225 	/* Don't do anything much if we have not done the handshake or
1226 	 * we don't want to send messages :-) */
1227 	if ((s->quiet_shutdown) || (s->state == SSL_ST_BEFORE))
1228 		{
1229 		s->shutdown=(SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
1230 		return(1);
1231 		}
1232 
1233 	if (!(s->shutdown & SSL_SENT_SHUTDOWN))
1234 		{
1235 		s->shutdown|=SSL_SENT_SHUTDOWN;
1236 #if 1
1237 		ssl3_send_alert(s,SSL3_AL_WARNING,SSL_AD_CLOSE_NOTIFY);
1238 #endif
1239 		/* our shutdown alert has been sent now, and if it still needs
1240 	 	 * to be written, s->s3->alert_dispatch will be true */
1241 		}
1242 	else if (s->s3->alert_dispatch)
1243 		{
1244 		/* resend it if not sent */
1245 #if 1
1246 		ssl3_dispatch_alert(s);
1247 #endif
1248 		}
1249 	else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN))
1250 		{
1251 		/* If we are waiting for a close from our peer, we are closed */
1252 		ssl3_read_bytes(s,0,NULL,0,0);
1253 		}
1254 
1255 	if ((s->shutdown == (SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN)) &&
1256 		!s->s3->alert_dispatch)
1257 		return(1);
1258 	else
1259 		return(0);
1260 	}
1261 
1262 int ssl3_write(SSL *s, const void *buf, int len)
1263 	{
1264 	int ret,n;
1265 
1266 #if 0
1267 	if (s->shutdown & SSL_SEND_SHUTDOWN)
1268 		{
1269 		s->rwstate=SSL_NOTHING;
1270 		return(0);
1271 		}
1272 #endif
1273 	clear_sys_error();
1274 	if (s->s3->renegotiate) ssl3_renegotiate_check(s);
1275 
1276 	/* This is an experimental flag that sends the
1277 	 * last handshake message in the same packet as the first
1278 	 * use data - used to see if it helps the TCP protocol during
1279 	 * session-id reuse */
1280 	/* The second test is because the buffer may have been removed */
1281 	if ((s->s3->flags & SSL3_FLAGS_POP_BUFFER) && (s->wbio == s->bbio))
1282 		{
1283 		/* First time through, we write into the buffer */
1284 		if (s->s3->delay_buf_pop_ret == 0)
1285 			{
1286 			ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
1287 					     buf,len);
1288 			if (ret <= 0) return(ret);
1289 
1290 			s->s3->delay_buf_pop_ret=ret;
1291 			}
1292 
1293 		s->rwstate=SSL_WRITING;
1294 		n=BIO_flush(s->wbio);
1295 		if (n <= 0) return(n);
1296 		s->rwstate=SSL_NOTHING;
1297 
1298 		/* We have flushed the buffer, so remove it */
1299 		ssl_free_wbio_buffer(s);
1300 		s->s3->flags&= ~SSL3_FLAGS_POP_BUFFER;
1301 
1302 		ret=s->s3->delay_buf_pop_ret;
1303 		s->s3->delay_buf_pop_ret=0;
1304 		}
1305 	else
1306 		{
1307 		ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
1308 				     buf,len);
1309 		if (ret <= 0) return(ret);
1310 		}
1311 
1312 	return(ret);
1313 	}
1314 
1315 static int ssl3_read_internal(SSL *s, void *buf, int len, int peek)
1316 	{
1317 	int ret;
1318 
1319 	clear_sys_error();
1320 	if (s->s3->renegotiate) ssl3_renegotiate_check(s);
1321 	s->s3->in_read_app_data=1;
1322 	ret=ssl3_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
1323 	if ((ret == -1) && (s->s3->in_read_app_data == 2))
1324 		{
1325 		/* ssl3_read_bytes decided to call s->handshake_func, which
1326 		 * called ssl3_read_bytes to read handshake data.
1327 		 * However, ssl3_read_bytes actually found application data
1328 		 * and thinks that application data makes sense here; so disable
1329 		 * handshake processing and try to read application data again. */
1330 		s->in_handshake++;
1331 		ret=ssl3_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
1332 		s->in_handshake--;
1333 		}
1334 	else
1335 		s->s3->in_read_app_data=0;
1336 
1337 	return(ret);
1338 	}
1339 
1340 int ssl3_read(SSL *s, void *buf, int len)
1341 	{
1342 	return ssl3_read_internal(s, buf, len, 0);
1343 	}
1344 
1345 int ssl3_peek(SSL *s, void *buf, int len)
1346 	{
1347 	return ssl3_read_internal(s, buf, len, 1);
1348 	}
1349 
1350 int ssl3_renegotiate(SSL *s)
1351 	{
1352 	if (s->handshake_func == NULL)
1353 		return(1);
1354 
1355 	if (s->s3->flags & SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS)
1356 		return(0);
1357 
1358 	s->s3->renegotiate=1;
1359 	return(1);
1360 	}
1361 
1362 int ssl3_renegotiate_check(SSL *s)
1363 	{
1364 	int ret=0;
1365 
1366 	if (s->s3->renegotiate)
1367 		{
1368 		if (	(s->s3->rbuf.left == 0) &&
1369 			(s->s3->wbuf.left == 0) &&
1370 			!SSL_in_init(s))
1371 			{
1372 /*
1373 if we are the server, and we have sent a 'RENEGOTIATE' message, we
1374 need to go to SSL_ST_ACCEPT.
1375 */
1376 			/* SSL_ST_ACCEPT */
1377 			s->state=SSL_ST_RENEGOTIATE;
1378 			s->s3->renegotiate=0;
1379 			s->s3->num_renegotiations++;
1380 			s->s3->total_renegotiations++;
1381 			ret=1;
1382 			}
1383 		}
1384 	return(ret);
1385 	}
1386 
1387