xref: /freebsd/crypto/openssl/ssl/s3_lib.c (revision 70fe064ad7cab6c0444b91622f60ec6a462f308a)
1 /* ssl/s3_lib.c */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3  * All rights reserved.
4  *
5  * This package is an SSL implementation written
6  * by Eric Young (eay@cryptsoft.com).
7  * The implementation was written so as to conform with Netscapes SSL.
8  *
9  * This library is free for commercial and non-commercial use as long as
10  * the following conditions are aheared to.  The following conditions
11  * apply to all code found in this distribution, be it the RC4, RSA,
12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13  * included with this distribution is covered by the same copyright terms
14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15  *
16  * Copyright remains Eric Young's, and as such any Copyright notices in
17  * the code are not to be removed.
18  * If this package is used in a product, Eric Young should be given attribution
19  * as the author of the parts of the library used.
20  * This can be in the form of a textual message at program startup or
21  * in documentation (online or textual) provided with the package.
22  *
23  * Redistribution and use in source and binary forms, with or without
24  * modification, are permitted provided that the following conditions
25  * are met:
26  * 1. Redistributions of source code must retain the copyright
27  *    notice, this list of conditions and the following disclaimer.
28  * 2. Redistributions in binary form must reproduce the above copyright
29  *    notice, this list of conditions and the following disclaimer in the
30  *    documentation and/or other materials provided with the distribution.
31  * 3. All advertising materials mentioning features or use of this software
32  *    must display the following acknowledgement:
33  *    "This product includes cryptographic software written by
34  *     Eric Young (eay@cryptsoft.com)"
35  *    The word 'cryptographic' can be left out if the rouines from the library
36  *    being used are not cryptographic related :-).
37  * 4. If you include any Windows specific code (or a derivative thereof) from
38  *    the apps directory (application code) you must include an acknowledgement:
39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40  *
41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51  * SUCH DAMAGE.
52  *
53  * The licence and distribution terms for any publically available version or
54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
55  * copied and put under another distribution licence
56  * [including the GNU Public Licence.]
57  */
58 /* ====================================================================
59  * Copyright (c) 1998-2000 The OpenSSL Project.  All rights reserved.
60  *
61  * Redistribution and use in source and binary forms, with or without
62  * modification, are permitted provided that the following conditions
63  * are met:
64  *
65  * 1. Redistributions of source code must retain the above copyright
66  *    notice, this list of conditions and the following disclaimer.
67  *
68  * 2. Redistributions in binary form must reproduce the above copyright
69  *    notice, this list of conditions and the following disclaimer in
70  *    the documentation and/or other materials provided with the
71  *    distribution.
72  *
73  * 3. All advertising materials mentioning features or use of this
74  *    software must display the following acknowledgment:
75  *    "This product includes software developed by the OpenSSL Project
76  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
77  *
78  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
79  *    endorse or promote products derived from this software without
80  *    prior written permission. For written permission, please contact
81  *    openssl-core@openssl.org.
82  *
83  * 5. Products derived from this software may not be called "OpenSSL"
84  *    nor may "OpenSSL" appear in their names without prior written
85  *    permission of the OpenSSL Project.
86  *
87  * 6. Redistributions of any form whatsoever must retain the following
88  *    acknowledgment:
89  *    "This product includes software developed by the OpenSSL Project
90  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
91  *
92  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
93  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
94  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
95  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
96  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
97  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
98  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
99  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
100  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
101  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
102  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
103  * OF THE POSSIBILITY OF SUCH DAMAGE.
104  * ====================================================================
105  *
106  * This product includes cryptographic software written by Eric Young
107  * (eay@cryptsoft.com).  This product includes software written by Tim
108  * Hudson (tjh@cryptsoft.com).
109  *
110  */
111 
112 #include <stdio.h>
113 #include <openssl/md5.h>
114 #include <openssl/sha.h>
115 #include <openssl/objects.h>
116 #include "ssl_locl.h"
117 
118 const char *ssl3_version_str="SSLv3" OPENSSL_VERSION_PTEXT;
119 
120 #define SSL3_NUM_CIPHERS	(sizeof(ssl3_ciphers)/sizeof(SSL_CIPHER))
121 
122 static long ssl3_default_timeout(void );
123 
124 OPENSSL_GLOBAL SSL_CIPHER ssl3_ciphers[]={
125 /* The RSA ciphers */
126 /* Cipher 01 */
127 	{
128 	1,
129 	SSL3_TXT_RSA_NULL_MD5,
130 	SSL3_CK_RSA_NULL_MD5,
131 	SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_MD5|SSL_SSLV3,
132 	SSL_NOT_EXP,
133 	0,
134 	0,
135 	0,
136 	SSL_ALL_CIPHERS,
137 	SSL_ALL_STRENGTHS,
138 	},
139 /* Cipher 02 */
140 	{
141 	1,
142 	SSL3_TXT_RSA_NULL_SHA,
143 	SSL3_CK_RSA_NULL_SHA,
144 	SSL_kRSA|SSL_aRSA|SSL_eNULL |SSL_SHA1|SSL_SSLV3,
145 	SSL_NOT_EXP,
146 	0,
147 	0,
148 	0,
149 	SSL_ALL_CIPHERS,
150 	SSL_ALL_STRENGTHS,
151 	},
152 
153 /* anon DH */
154 /* Cipher 17 */
155 	{
156 	1,
157 	SSL3_TXT_ADH_RC4_40_MD5,
158 	SSL3_CK_ADH_RC4_40_MD5,
159 	SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
160 	SSL_EXPORT|SSL_EXP40,
161 	0,
162 	40,
163 	128,
164 	SSL_ALL_CIPHERS,
165 	SSL_ALL_STRENGTHS,
166 	},
167 /* Cipher 18 */
168 	{
169 	1,
170 	SSL3_TXT_ADH_RC4_128_MD5,
171 	SSL3_CK_ADH_RC4_128_MD5,
172 	SSL_kEDH |SSL_aNULL|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
173 	SSL_NOT_EXP,
174 	0,
175 	128,
176 	128,
177 	SSL_ALL_CIPHERS,
178 	SSL_ALL_STRENGTHS,
179 	},
180 /* Cipher 19 */
181 	{
182 	1,
183 	SSL3_TXT_ADH_DES_40_CBC_SHA,
184 	SSL3_CK_ADH_DES_40_CBC_SHA,
185 	SSL_kEDH |SSL_aNULL|SSL_DES|SSL_SHA1|SSL_SSLV3,
186 	SSL_EXPORT|SSL_EXP40,
187 	0,
188 	40,
189 	128,
190 	SSL_ALL_CIPHERS,
191 	SSL_ALL_STRENGTHS,
192 	},
193 /* Cipher 1A */
194 	{
195 	1,
196 	SSL3_TXT_ADH_DES_64_CBC_SHA,
197 	SSL3_CK_ADH_DES_64_CBC_SHA,
198 	SSL_kEDH |SSL_aNULL|SSL_DES  |SSL_SHA1|SSL_SSLV3,
199 	SSL_NOT_EXP,
200 	0,
201 	56,
202 	56,
203 	SSL_ALL_CIPHERS,
204 	SSL_ALL_STRENGTHS,
205 	},
206 /* Cipher 1B */
207 	{
208 	1,
209 	SSL3_TXT_ADH_DES_192_CBC_SHA,
210 	SSL3_CK_ADH_DES_192_CBC_SHA,
211 	SSL_kEDH |SSL_aNULL|SSL_3DES |SSL_SHA1|SSL_SSLV3,
212 	SSL_NOT_EXP,
213 	0,
214 	168,
215 	168,
216 	SSL_ALL_CIPHERS,
217 	SSL_ALL_STRENGTHS,
218 	},
219 
220 /* RSA again */
221 /* Cipher 03 */
222 	{
223 	1,
224 	SSL3_TXT_RSA_RC4_40_MD5,
225 	SSL3_CK_RSA_RC4_40_MD5,
226 	SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5 |SSL_SSLV3,
227 	SSL_EXPORT|SSL_EXP40,
228 	0,
229 	40,
230 	128,
231 	SSL_ALL_CIPHERS,
232 	SSL_ALL_STRENGTHS,
233 	},
234 /* Cipher 04 */
235 	{
236 	1,
237 	SSL3_TXT_RSA_RC4_128_MD5,
238 	SSL3_CK_RSA_RC4_128_MD5,
239 	SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_MD5|SSL_SSLV3,
240 	SSL_NOT_EXP|SSL_MEDIUM,
241 	0,
242 	128,
243 	128,
244 	SSL_ALL_CIPHERS,
245 	SSL_ALL_STRENGTHS,
246 	},
247 /* Cipher 05 */
248 	{
249 	1,
250 	SSL3_TXT_RSA_RC4_128_SHA,
251 	SSL3_CK_RSA_RC4_128_SHA,
252 	SSL_kRSA|SSL_aRSA|SSL_RC4  |SSL_SHA1|SSL_SSLV3,
253 	SSL_NOT_EXP|SSL_MEDIUM,
254 	0,
255 	128,
256 	128,
257 	SSL_ALL_CIPHERS,
258 	SSL_ALL_STRENGTHS,
259 	},
260 /* Cipher 06 */
261 	{
262 	1,
263 	SSL3_TXT_RSA_RC2_40_MD5,
264 	SSL3_CK_RSA_RC2_40_MD5,
265 	SSL_kRSA|SSL_aRSA|SSL_RC2  |SSL_MD5 |SSL_SSLV3,
266 	SSL_EXPORT|SSL_EXP40,
267 	0,
268 	40,
269 	128,
270 	SSL_ALL_CIPHERS,
271 	SSL_ALL_STRENGTHS,
272 	},
273 /* Cipher 07 */
274 	{
275 	1,
276 	SSL3_TXT_RSA_IDEA_128_SHA,
277 	SSL3_CK_RSA_IDEA_128_SHA,
278 	SSL_kRSA|SSL_aRSA|SSL_IDEA |SSL_SHA1|SSL_SSLV3,
279 	SSL_NOT_EXP|SSL_MEDIUM,
280 	0,
281 	128,
282 	128,
283 	SSL_ALL_CIPHERS,
284 	SSL_ALL_STRENGTHS,
285 	},
286 /* Cipher 08 */
287 	{
288 	1,
289 	SSL3_TXT_RSA_DES_40_CBC_SHA,
290 	SSL3_CK_RSA_DES_40_CBC_SHA,
291 	SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
292 	SSL_EXPORT|SSL_EXP40,
293 	0,
294 	40,
295 	56,
296 	SSL_ALL_CIPHERS,
297 	SSL_ALL_STRENGTHS,
298 	},
299 /* Cipher 09 */
300 	{
301 	1,
302 	SSL3_TXT_RSA_DES_64_CBC_SHA,
303 	SSL3_CK_RSA_DES_64_CBC_SHA,
304 	SSL_kRSA|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
305 	SSL_NOT_EXP|SSL_LOW,
306 	0,
307 	56,
308 	56,
309 	SSL_ALL_CIPHERS,
310 	SSL_ALL_STRENGTHS,
311 	},
312 /* Cipher 0A */
313 	{
314 	1,
315 	SSL3_TXT_RSA_DES_192_CBC3_SHA,
316 	SSL3_CK_RSA_DES_192_CBC3_SHA,
317 	SSL_kRSA|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
318 	SSL_NOT_EXP|SSL_HIGH,
319 	0,
320 	168,
321 	168,
322 	SSL_ALL_CIPHERS,
323 	SSL_ALL_STRENGTHS,
324 	},
325 
326 /*  The DH ciphers */
327 /* Cipher 0B */
328 	{
329 	0,
330 	SSL3_TXT_DH_DSS_DES_40_CBC_SHA,
331 	SSL3_CK_DH_DSS_DES_40_CBC_SHA,
332 	SSL_kDHd |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
333 	SSL_EXPORT|SSL_EXP40,
334 	0,
335 	40,
336 	56,
337 	SSL_ALL_CIPHERS,
338 	SSL_ALL_STRENGTHS,
339 	},
340 /* Cipher 0C */
341 	{
342 	0,
343 	SSL3_TXT_DH_DSS_DES_64_CBC_SHA,
344 	SSL3_CK_DH_DSS_DES_64_CBC_SHA,
345 	SSL_kDHd |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
346 	SSL_NOT_EXP|SSL_LOW,
347 	0,
348 	56,
349 	56,
350 	SSL_ALL_CIPHERS,
351 	SSL_ALL_STRENGTHS,
352 	},
353 /* Cipher 0D */
354 	{
355 	0,
356 	SSL3_TXT_DH_DSS_DES_192_CBC3_SHA,
357 	SSL3_CK_DH_DSS_DES_192_CBC3_SHA,
358 	SSL_kDHd |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
359 	SSL_NOT_EXP|SSL_HIGH,
360 	0,
361 	168,
362 	168,
363 	SSL_ALL_CIPHERS,
364 	SSL_ALL_STRENGTHS,
365 	},
366 /* Cipher 0E */
367 	{
368 	0,
369 	SSL3_TXT_DH_RSA_DES_40_CBC_SHA,
370 	SSL3_CK_DH_RSA_DES_40_CBC_SHA,
371 	SSL_kDHr |SSL_aDH|SSL_DES|SSL_SHA1|SSL_SSLV3,
372 	SSL_EXPORT|SSL_EXP40,
373 	0,
374 	40,
375 	56,
376 	SSL_ALL_CIPHERS,
377 	SSL_ALL_STRENGTHS,
378 	},
379 /* Cipher 0F */
380 	{
381 	0,
382 	SSL3_TXT_DH_RSA_DES_64_CBC_SHA,
383 	SSL3_CK_DH_RSA_DES_64_CBC_SHA,
384 	SSL_kDHr |SSL_aDH|SSL_DES  |SSL_SHA1|SSL_SSLV3,
385 	SSL_NOT_EXP|SSL_LOW,
386 	0,
387 	56,
388 	56,
389 	SSL_ALL_CIPHERS,
390 	SSL_ALL_STRENGTHS,
391 	},
392 /* Cipher 10 */
393 	{
394 	0,
395 	SSL3_TXT_DH_RSA_DES_192_CBC3_SHA,
396 	SSL3_CK_DH_RSA_DES_192_CBC3_SHA,
397 	SSL_kDHr |SSL_aDH|SSL_3DES |SSL_SHA1|SSL_SSLV3,
398 	SSL_NOT_EXP|SSL_HIGH,
399 	0,
400 	168,
401 	168,
402 	SSL_ALL_CIPHERS,
403 	SSL_ALL_STRENGTHS,
404 	},
405 
406 /* The Ephemeral DH ciphers */
407 /* Cipher 11 */
408 	{
409 	1,
410 	SSL3_TXT_EDH_DSS_DES_40_CBC_SHA,
411 	SSL3_CK_EDH_DSS_DES_40_CBC_SHA,
412 	SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA1|SSL_SSLV3,
413 	SSL_EXPORT|SSL_EXP40,
414 	0,
415 	40,
416 	56,
417 	SSL_ALL_CIPHERS,
418 	SSL_ALL_STRENGTHS,
419 	},
420 /* Cipher 12 */
421 	{
422 	1,
423 	SSL3_TXT_EDH_DSS_DES_64_CBC_SHA,
424 	SSL3_CK_EDH_DSS_DES_64_CBC_SHA,
425 	SSL_kEDH|SSL_aDSS|SSL_DES  |SSL_SHA1|SSL_SSLV3,
426 	SSL_NOT_EXP|SSL_LOW,
427 	0,
428 	56,
429 	56,
430 	SSL_ALL_CIPHERS,
431 	SSL_ALL_STRENGTHS,
432 	},
433 /* Cipher 13 */
434 	{
435 	1,
436 	SSL3_TXT_EDH_DSS_DES_192_CBC3_SHA,
437 	SSL3_CK_EDH_DSS_DES_192_CBC3_SHA,
438 	SSL_kEDH|SSL_aDSS|SSL_3DES |SSL_SHA1|SSL_SSLV3,
439 	SSL_NOT_EXP|SSL_HIGH,
440 	0,
441 	168,
442 	168,
443 	SSL_ALL_CIPHERS,
444 	SSL_ALL_STRENGTHS,
445 	},
446 /* Cipher 14 */
447 	{
448 	1,
449 	SSL3_TXT_EDH_RSA_DES_40_CBC_SHA,
450 	SSL3_CK_EDH_RSA_DES_40_CBC_SHA,
451 	SSL_kEDH|SSL_aRSA|SSL_DES|SSL_SHA1|SSL_SSLV3,
452 	SSL_EXPORT|SSL_EXP40,
453 	0,
454 	40,
455 	56,
456 	SSL_ALL_CIPHERS,
457 	SSL_ALL_STRENGTHS,
458 	},
459 /* Cipher 15 */
460 	{
461 	1,
462 	SSL3_TXT_EDH_RSA_DES_64_CBC_SHA,
463 	SSL3_CK_EDH_RSA_DES_64_CBC_SHA,
464 	SSL_kEDH|SSL_aRSA|SSL_DES  |SSL_SHA1|SSL_SSLV3,
465 	SSL_NOT_EXP|SSL_LOW,
466 	0,
467 	56,
468 	56,
469 	SSL_ALL_CIPHERS,
470 	SSL_ALL_STRENGTHS,
471 	},
472 /* Cipher 16 */
473 	{
474 	1,
475 	SSL3_TXT_EDH_RSA_DES_192_CBC3_SHA,
476 	SSL3_CK_EDH_RSA_DES_192_CBC3_SHA,
477 	SSL_kEDH|SSL_aRSA|SSL_3DES |SSL_SHA1|SSL_SSLV3,
478 	SSL_NOT_EXP|SSL_HIGH,
479 	0,
480 	168,
481 	168,
482 	SSL_ALL_CIPHERS,
483 	SSL_ALL_STRENGTHS,
484 	},
485 
486 /* Fortezza */
487 /* Cipher 1C */
488 	{
489 	0,
490 	SSL3_TXT_FZA_DMS_NULL_SHA,
491 	SSL3_CK_FZA_DMS_NULL_SHA,
492 	SSL_kFZA|SSL_aFZA |SSL_eNULL |SSL_SHA1|SSL_SSLV3,
493 	SSL_NOT_EXP,
494 	0,
495 	0,
496 	0,
497 	SSL_ALL_CIPHERS,
498 	SSL_ALL_STRENGTHS,
499 	},
500 
501 /* Cipher 1D */
502 	{
503 	0,
504 	SSL3_TXT_FZA_DMS_FZA_SHA,
505 	SSL3_CK_FZA_DMS_FZA_SHA,
506 	SSL_kFZA|SSL_aFZA |SSL_eFZA |SSL_SHA1|SSL_SSLV3,
507 	SSL_NOT_EXP,
508 	0,
509 	0,
510 	0,
511 	SSL_ALL_CIPHERS,
512 	SSL_ALL_STRENGTHS,
513 	},
514 
515 /* Cipher 1E */
516 	{
517 	0,
518 	SSL3_TXT_FZA_DMS_RC4_SHA,
519 	SSL3_CK_FZA_DMS_RC4_SHA,
520 	SSL_kFZA|SSL_aFZA |SSL_RC4  |SSL_SHA1|SSL_SSLV3,
521 	SSL_NOT_EXP,
522 	0,
523 	128,
524 	128,
525 	SSL_ALL_CIPHERS,
526 	SSL_ALL_STRENGTHS,
527 	},
528 
529 #if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES
530 	/* New TLS Export CipherSuites */
531 	/* Cipher 60 */
532 	    {
533 	    1,
534 	    TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5,
535 	    TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5,
536 	    SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_MD5|SSL_TLSV1,
537 	    SSL_EXPORT|SSL_EXP56,
538 	    0,
539 	    56,
540 	    128,
541 	    SSL_ALL_CIPHERS,
542 	    SSL_ALL_STRENGTHS,
543 	    },
544 	/* Cipher 61 */
545 	    {
546 	    1,
547 	    TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
548 	    TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5,
549 	    SSL_kRSA|SSL_aRSA|SSL_RC2|SSL_MD5|SSL_TLSV1,
550 	    SSL_EXPORT|SSL_EXP56,
551 	    0,
552 	    56,
553 	    128,
554 	    SSL_ALL_CIPHERS,
555 	    SSL_ALL_STRENGTHS,
556 	    },
557 	/* Cipher 62 */
558 	    {
559 	    1,
560 	    TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA,
561 	    TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA,
562 	    SSL_kRSA|SSL_aRSA|SSL_DES|SSL_SHA|SSL_TLSV1,
563 	    SSL_EXPORT|SSL_EXP56,
564 	    0,
565 	    56,
566 	    56,
567 	    SSL_ALL_CIPHERS,
568 	    SSL_ALL_STRENGTHS,
569 	    },
570 	/* Cipher 63 */
571 	    {
572 	    1,
573 	    TLS1_TXT_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
574 	    TLS1_CK_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA,
575 	    SSL_kEDH|SSL_aDSS|SSL_DES|SSL_SHA|SSL_TLSV1,
576 	    SSL_EXPORT|SSL_EXP56,
577 	    0,
578 	    56,
579 	    56,
580 	    SSL_ALL_CIPHERS,
581 	    SSL_ALL_STRENGTHS,
582 	    },
583 	/* Cipher 64 */
584 	    {
585 	    1,
586 	    TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_SHA,
587 	    TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_SHA,
588 	    SSL_kRSA|SSL_aRSA|SSL_RC4|SSL_SHA|SSL_TLSV1,
589 	    SSL_EXPORT|SSL_EXP56,
590 	    0,
591 	    56,
592 	    128,
593 	    SSL_ALL_CIPHERS,
594 	    SSL_ALL_STRENGTHS,
595 	    },
596 	/* Cipher 65 */
597 	    {
598 	    1,
599 	    TLS1_TXT_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
600 	    TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA,
601 	    SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
602 	    SSL_EXPORT|SSL_EXP56,
603 	    0,
604 	    56,
605 	    128,
606 	    SSL_ALL_CIPHERS,
607 	    SSL_ALL_STRENGTHS,
608 	    },
609 	/* Cipher 66 */
610 	    {
611 	    1,
612 	    TLS1_TXT_DHE_DSS_WITH_RC4_128_SHA,
613 	    TLS1_CK_DHE_DSS_WITH_RC4_128_SHA,
614 	    SSL_kEDH|SSL_aDSS|SSL_RC4|SSL_SHA|SSL_TLSV1,
615 	    SSL_NOT_EXP,
616 	    0,
617 	    128,
618 	    128,
619 	    SSL_ALL_CIPHERS,
620 	    SSL_ALL_STRENGTHS
621 	    },
622 #endif
623 
624 /* end of list */
625 	};
626 
627 static SSL3_ENC_METHOD SSLv3_enc_data={
628 	ssl3_enc,
629 	ssl3_mac,
630 	ssl3_setup_key_block,
631 	ssl3_generate_master_secret,
632 	ssl3_change_cipher_state,
633 	ssl3_final_finish_mac,
634 	MD5_DIGEST_LENGTH+SHA_DIGEST_LENGTH,
635 	ssl3_cert_verify_mac,
636 	SSL3_MD_CLIENT_FINISHED_CONST,4,
637 	SSL3_MD_SERVER_FINISHED_CONST,4,
638 	ssl3_alert_code,
639 	};
640 
641 static SSL_METHOD SSLv3_data= {
642 	SSL3_VERSION,
643 	ssl3_new,
644 	ssl3_clear,
645 	ssl3_free,
646 	ssl_undefined_function,
647 	ssl_undefined_function,
648 	ssl3_read,
649 	ssl3_peek,
650 	ssl3_write,
651 	ssl3_shutdown,
652 	ssl3_renegotiate,
653 	ssl3_renegotiate_check,
654 	ssl3_ctrl,
655 	ssl3_ctx_ctrl,
656 	ssl3_get_cipher_by_char,
657 	ssl3_put_cipher_by_char,
658 	ssl3_pending,
659 	ssl3_num_ciphers,
660 	ssl3_get_cipher,
661 	ssl_bad_method,
662 	ssl3_default_timeout,
663 	&SSLv3_enc_data,
664 	ssl_undefined_function,
665 	ssl3_callback_ctrl,
666 	ssl3_ctx_callback_ctrl,
667 	};
668 
669 static long ssl3_default_timeout(void)
670 	{
671 	/* 2 hours, the 24 hours mentioned in the SSLv3 spec
672 	 * is way too long for http, the cache would over fill */
673 	return(60*60*2);
674 	}
675 
676 SSL_METHOD *sslv3_base_method(void)
677 	{
678 	return(&SSLv3_data);
679 	}
680 
681 int ssl3_num_ciphers(void)
682 	{
683 	return(SSL3_NUM_CIPHERS);
684 	}
685 
686 SSL_CIPHER *ssl3_get_cipher(unsigned int u)
687 	{
688 	if (u < SSL3_NUM_CIPHERS)
689 		return(&(ssl3_ciphers[SSL3_NUM_CIPHERS-1-u]));
690 	else
691 		return(NULL);
692 	}
693 
694 int ssl3_pending(SSL *s)
695 	{
696 	return (s->s3->rrec.type == SSL3_RT_APPLICATION_DATA) ? s->s3->rrec.length : 0;
697 	}
698 
699 int ssl3_new(SSL *s)
700 	{
701 	SSL3_STATE *s3;
702 
703 	if ((s3=OPENSSL_malloc(sizeof *s3)) == NULL) goto err;
704 	memset(s3,0,sizeof *s3);
705 
706 	s->s3=s3;
707 
708 	s->method->ssl_clear(s);
709 	return(1);
710 err:
711 	return(0);
712 	}
713 
714 void ssl3_free(SSL *s)
715 	{
716 	if(s == NULL)
717 	    return;
718 
719 	ssl3_cleanup_key_block(s);
720 	if (s->s3->rbuf.buf != NULL)
721 		OPENSSL_free(s->s3->rbuf.buf);
722 	if (s->s3->wbuf.buf != NULL)
723 		OPENSSL_free(s->s3->wbuf.buf);
724 	if (s->s3->rrec.comp != NULL)
725 		OPENSSL_free(s->s3->rrec.comp);
726 #ifndef NO_DH
727 	if (s->s3->tmp.dh != NULL)
728 		DH_free(s->s3->tmp.dh);
729 #endif
730 	if (s->s3->tmp.ca_names != NULL)
731 		sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
732 	memset(s->s3,0,sizeof *s->s3);
733 	OPENSSL_free(s->s3);
734 	s->s3=NULL;
735 	}
736 
737 void ssl3_clear(SSL *s)
738 	{
739 	unsigned char *rp,*wp;
740 
741 	ssl3_cleanup_key_block(s);
742 	if (s->s3->tmp.ca_names != NULL)
743 		sk_X509_NAME_pop_free(s->s3->tmp.ca_names,X509_NAME_free);
744 
745 	if (s->s3->rrec.comp != NULL)
746 		{
747 		OPENSSL_free(s->s3->rrec.comp);
748 		s->s3->rrec.comp=NULL;
749 		}
750 #ifndef NO_DH
751 	if (s->s3->tmp.dh != NULL)
752 		DH_free(s->s3->tmp.dh);
753 #endif
754 
755 	rp=s->s3->rbuf.buf;
756 	wp=s->s3->wbuf.buf;
757 
758 	memset(s->s3,0,sizeof *s->s3);
759 	if (rp != NULL) s->s3->rbuf.buf=rp;
760 	if (wp != NULL) s->s3->wbuf.buf=wp;
761 
762 	ssl_free_wbio_buffer(s);
763 
764 	s->packet_length=0;
765 	s->s3->renegotiate=0;
766 	s->s3->total_renegotiations=0;
767 	s->s3->num_renegotiations=0;
768 	s->s3->in_read_app_data=0;
769 	s->version=SSL3_VERSION;
770 	}
771 
772 long ssl3_ctrl(SSL *s, int cmd, long larg, char *parg)
773 	{
774 	int ret=0;
775 
776 #if !defined(NO_DSA) || !defined(NO_RSA)
777 	if (
778 #ifndef NO_RSA
779 	    cmd == SSL_CTRL_SET_TMP_RSA ||
780 	    cmd == SSL_CTRL_SET_TMP_RSA_CB ||
781 #endif
782 #ifndef NO_DSA
783 	    cmd == SSL_CTRL_SET_TMP_DH ||
784 	    cmd == SSL_CTRL_SET_TMP_DH_CB ||
785 #endif
786 		0)
787 		{
788 		if (!ssl_cert_inst(&s->cert))
789 		    	{
790 			SSLerr(SSL_F_SSL3_CTRL, ERR_R_MALLOC_FAILURE);
791 			return(0);
792 			}
793 		}
794 #endif
795 
796 	switch (cmd)
797 		{
798 	case SSL_CTRL_GET_SESSION_REUSED:
799 		ret=s->hit;
800 		break;
801 	case SSL_CTRL_GET_CLIENT_CERT_REQUEST:
802 		break;
803 	case SSL_CTRL_GET_NUM_RENEGOTIATIONS:
804 		ret=s->s3->num_renegotiations;
805 		break;
806 	case SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS:
807 		ret=s->s3->num_renegotiations;
808 		s->s3->num_renegotiations=0;
809 		break;
810 	case SSL_CTRL_GET_TOTAL_RENEGOTIATIONS:
811 		ret=s->s3->total_renegotiations;
812 		break;
813 	case SSL_CTRL_GET_FLAGS:
814 		ret=(int)(s->s3->flags);
815 		break;
816 #ifndef NO_RSA
817 	case SSL_CTRL_NEED_TMP_RSA:
818 		if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) &&
819 		    ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
820 		     (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8))))
821 			ret = 1;
822 		break;
823 	case SSL_CTRL_SET_TMP_RSA:
824 		{
825 			RSA *rsa = (RSA *)parg;
826 			if (rsa == NULL)
827 				{
828 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
829 				return(ret);
830 				}
831 			if ((rsa = RSAPrivateKey_dup(rsa)) == NULL)
832 				{
833 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_RSA_LIB);
834 				return(ret);
835 				}
836 			if (s->cert->rsa_tmp != NULL)
837 				RSA_free(s->cert->rsa_tmp);
838 			s->cert->rsa_tmp = rsa;
839 			ret = 1;
840 		}
841 		break;
842 	case SSL_CTRL_SET_TMP_RSA_CB:
843 		{
844 		SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
845 		return(ret);
846 		}
847 		break;
848 #endif
849 #ifndef NO_DH
850 	case SSL_CTRL_SET_TMP_DH:
851 		{
852 			DH *dh = (DH *)parg;
853 			if (dh == NULL)
854 				{
855 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_PASSED_NULL_PARAMETER);
856 				return(ret);
857 				}
858 			if ((dh = DHparams_dup(dh)) == NULL)
859 				{
860 				SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
861 				return(ret);
862 				}
863 			if (!(s->options & SSL_OP_SINGLE_DH_USE))
864 				{
865 				if (!DH_generate_key(dh))
866 					{
867 					DH_free(dh);
868 					SSLerr(SSL_F_SSL3_CTRL, ERR_R_DH_LIB);
869 					return(ret);
870 					}
871 				}
872 			if (s->cert->dh_tmp != NULL)
873 				DH_free(s->cert->dh_tmp);
874 			s->cert->dh_tmp = dh;
875 			ret = 1;
876 		}
877 		break;
878 	case SSL_CTRL_SET_TMP_DH_CB:
879 		{
880 		SSLerr(SSL_F_SSL3_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
881 		return(ret);
882 		}
883 		break;
884 #endif
885 	default:
886 		break;
887 		}
888 	return(ret);
889 	}
890 
891 long ssl3_callback_ctrl(SSL *s, int cmd, void (*fp)())
892 	{
893 	int ret=0;
894 
895 #if !defined(NO_DSA) || !defined(NO_RSA)
896 	if (
897 #ifndef NO_RSA
898 	    cmd == SSL_CTRL_SET_TMP_RSA_CB ||
899 #endif
900 #ifndef NO_DSA
901 	    cmd == SSL_CTRL_SET_TMP_DH_CB ||
902 #endif
903 		0)
904 		{
905 		if (!ssl_cert_inst(&s->cert))
906 			{
907 			SSLerr(SSL_F_SSL3_CALLBACK_CTRL, ERR_R_MALLOC_FAILURE);
908 			return(0);
909 			}
910 		}
911 #endif
912 
913 	switch (cmd)
914 		{
915 #ifndef NO_RSA
916 	case SSL_CTRL_SET_TMP_RSA_CB:
917 		{
918 		s->cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
919 		}
920 		break;
921 #endif
922 #ifndef NO_DH
923 	case SSL_CTRL_SET_TMP_DH_CB:
924 		{
925 		s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
926 		}
927 		break;
928 #endif
929 	default:
930 		break;
931 		}
932 	return(ret);
933 	}
934 
935 long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, char *parg)
936 	{
937 	CERT *cert;
938 
939 	cert=ctx->cert;
940 
941 	switch (cmd)
942 		{
943 #ifndef NO_RSA
944 	case SSL_CTRL_NEED_TMP_RSA:
945 		if (	(cert->rsa_tmp == NULL) &&
946 			((cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||
947 			 (EVP_PKEY_size(cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > (512/8)))
948 			)
949 			return(1);
950 		else
951 			return(0);
952 		/* break; */
953 	case SSL_CTRL_SET_TMP_RSA:
954 		{
955 		RSA *rsa;
956 		int i;
957 
958 		rsa=(RSA *)parg;
959 		i=1;
960 		if (rsa == NULL)
961 			i=0;
962 		else
963 			{
964 			if ((rsa=RSAPrivateKey_dup(rsa)) == NULL)
965 				i=0;
966 			}
967 		if (!i)
968 			{
969 			SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_RSA_LIB);
970 			return(0);
971 			}
972 		else
973 			{
974 			if (cert->rsa_tmp != NULL)
975 				RSA_free(cert->rsa_tmp);
976 			cert->rsa_tmp=rsa;
977 			return(1);
978 			}
979 		}
980 		/* break; */
981 	case SSL_CTRL_SET_TMP_RSA_CB:
982 		{
983 		SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
984 		return(0);
985 		}
986 		break;
987 #endif
988 #ifndef NO_DH
989 	case SSL_CTRL_SET_TMP_DH:
990 		{
991 		DH *new=NULL,*dh;
992 
993 		dh=(DH *)parg;
994 		if ((new=DHparams_dup(dh)) == NULL)
995 			{
996 			SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
997 			return 0;
998 			}
999 		if (!(ctx->options & SSL_OP_SINGLE_DH_USE))
1000 			{
1001 			if (!DH_generate_key(new))
1002 				{
1003 				SSLerr(SSL_F_SSL3_CTX_CTRL,ERR_R_DH_LIB);
1004 				DH_free(new);
1005 				return 0;
1006 				}
1007 			}
1008 		if (cert->dh_tmp != NULL)
1009 			DH_free(cert->dh_tmp);
1010 		cert->dh_tmp=new;
1011 		return 1;
1012 		}
1013 		/*break; */
1014 	case SSL_CTRL_SET_TMP_DH_CB:
1015 		{
1016 		SSLerr(SSL_F_SSL3_CTX_CTRL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
1017 		return(0);
1018 		}
1019 		break;
1020 #endif
1021 	/* A Thawte special :-) */
1022 	case SSL_CTRL_EXTRA_CHAIN_CERT:
1023 		if (ctx->extra_certs == NULL)
1024 			{
1025 			if ((ctx->extra_certs=sk_X509_new_null()) == NULL)
1026 				return(0);
1027 			}
1028 		sk_X509_push(ctx->extra_certs,(X509 *)parg);
1029 		break;
1030 
1031 	default:
1032 		return(0);
1033 		}
1034 	return(1);
1035 	}
1036 
1037 long ssl3_ctx_callback_ctrl(SSL_CTX *ctx, int cmd, void (*fp)())
1038 	{
1039 	CERT *cert;
1040 
1041 	cert=ctx->cert;
1042 
1043 	switch (cmd)
1044 		{
1045 #ifndef NO_RSA
1046 	case SSL_CTRL_SET_TMP_RSA_CB:
1047 		{
1048 		cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;
1049 		}
1050 		break;
1051 #endif
1052 #ifndef NO_DH
1053 	case SSL_CTRL_SET_TMP_DH_CB:
1054 		{
1055 		cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;
1056 		}
1057 		break;
1058 #endif
1059 	default:
1060 		return(0);
1061 		}
1062 	return(1);
1063 	}
1064 
1065 /* This function needs to check if the ciphers required are actually
1066  * available */
1067 SSL_CIPHER *ssl3_get_cipher_by_char(const unsigned char *p)
1068 	{
1069 	static int init=1;
1070 	static SSL_CIPHER *sorted[SSL3_NUM_CIPHERS];
1071 	SSL_CIPHER c,*cp= &c,**cpp;
1072 	unsigned long id;
1073 	int i;
1074 
1075 	if (init)
1076 		{
1077 		CRYPTO_w_lock(CRYPTO_LOCK_SSL);
1078 
1079 		for (i=0; i<SSL3_NUM_CIPHERS; i++)
1080 			sorted[i]= &(ssl3_ciphers[i]);
1081 
1082 		qsort(	(char *)sorted,
1083 			SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER *),
1084 			FP_ICC ssl_cipher_ptr_id_cmp);
1085 
1086 		CRYPTO_w_unlock(CRYPTO_LOCK_SSL);
1087 
1088 		init=0;
1089 		}
1090 
1091 	id=0x03000000L|((unsigned long)p[0]<<8L)|(unsigned long)p[1];
1092 	c.id=id;
1093 	cpp=(SSL_CIPHER **)OBJ_bsearch((char *)&cp,
1094 		(char *)sorted,
1095 		SSL3_NUM_CIPHERS,sizeof(SSL_CIPHER *),
1096 		FP_ICC ssl_cipher_ptr_id_cmp);
1097 	if ((cpp == NULL) || !(*cpp)->valid)
1098 		return(NULL);
1099 	else
1100 		return(*cpp);
1101 	}
1102 
1103 int ssl3_put_cipher_by_char(const SSL_CIPHER *c, unsigned char *p)
1104 	{
1105 	long l;
1106 
1107 	if (p != NULL)
1108 		{
1109 		l=c->id;
1110 		if ((l & 0xff000000) != 0x03000000) return(0);
1111 		p[0]=((unsigned char)(l>> 8L))&0xFF;
1112 		p[1]=((unsigned char)(l     ))&0xFF;
1113 		}
1114 	return(2);
1115 	}
1116 
1117 SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *have,
1118 	     STACK_OF(SSL_CIPHER) *pref)
1119 	{
1120 	SSL_CIPHER *c,*ret=NULL;
1121 	int i,j,ok;
1122 	CERT *cert;
1123 	unsigned long alg,mask,emask;
1124 
1125 	/* Let's see which ciphers we can support */
1126 	cert=s->cert;
1127 
1128 	sk_SSL_CIPHER_set_cmp_func(pref,ssl_cipher_ptr_id_cmp);
1129 
1130 #ifdef CIPHER_DEBUG
1131 	printf("Have:\n");
1132 	for(i=0 ; i < sk_num(pref) ; ++i)
1133 	    {
1134 	    c=(SSL_CIPHER *)sk_value(pref,i);
1135 	    printf("%p:%s\n",c,c->name);
1136 	    }
1137 #endif
1138 
1139 	for (i=0; i<sk_SSL_CIPHER_num(have); i++)
1140 		{
1141 		c=sk_SSL_CIPHER_value(have,i);
1142 
1143 		ssl_set_cert_masks(cert,c);
1144 		mask=cert->mask;
1145 		emask=cert->export_mask;
1146 
1147 		alg=c->algorithms&(SSL_MKEY_MASK|SSL_AUTH_MASK);
1148 		if (SSL_C_IS_EXPORT(c))
1149 			{
1150 			ok=((alg & emask) == alg)?1:0;
1151 #ifdef CIPHER_DEBUG
1152 			printf("%d:[%08lX:%08lX]%p:%s (export)\n",ok,alg,emask,
1153 			       c,c->name);
1154 #endif
1155 			}
1156 		else
1157 			{
1158 			ok=((alg & mask) == alg)?1:0;
1159 #ifdef CIPHER_DEBUG
1160 			printf("%d:[%08lX:%08lX]%p:%s\n",ok,alg,mask,c,
1161 			       c->name);
1162 #endif
1163 			}
1164 
1165 		if (!ok) continue;
1166 
1167 		j=sk_SSL_CIPHER_find(pref,c);
1168 		if (j >= 0)
1169 			{
1170 			ret=sk_SSL_CIPHER_value(pref,j);
1171 			break;
1172 			}
1173 		}
1174 	return(ret);
1175 	}
1176 
1177 int ssl3_get_req_cert_type(SSL *s, unsigned char *p)
1178 	{
1179 	int ret=0;
1180 	unsigned long alg;
1181 
1182 	alg=s->s3->tmp.new_cipher->algorithms;
1183 
1184 #ifndef NO_DH
1185 	if (alg & (SSL_kDHr|SSL_kEDH))
1186 		{
1187 #  ifndef NO_RSA
1188 		p[ret++]=SSL3_CT_RSA_FIXED_DH;
1189 #  endif
1190 #  ifndef NO_DSA
1191 		p[ret++]=SSL3_CT_DSS_FIXED_DH;
1192 #  endif
1193 		}
1194 	if ((s->version == SSL3_VERSION) &&
1195 		(alg & (SSL_kEDH|SSL_kDHd|SSL_kDHr)))
1196 		{
1197 #  ifndef NO_RSA
1198 		p[ret++]=SSL3_CT_RSA_EPHEMERAL_DH;
1199 #  endif
1200 #  ifndef NO_DSA
1201 		p[ret++]=SSL3_CT_DSS_EPHEMERAL_DH;
1202 #  endif
1203 		}
1204 #endif /* !NO_DH */
1205 #ifndef NO_RSA
1206 	p[ret++]=SSL3_CT_RSA_SIGN;
1207 #endif
1208 #ifndef NO_DSA
1209 	p[ret++]=SSL3_CT_DSS_SIGN;
1210 #endif
1211 	return(ret);
1212 	}
1213 
1214 int ssl3_shutdown(SSL *s)
1215 	{
1216 
1217 	/* Don't do anything much if we have not done the handshake or
1218 	 * we don't want to send messages :-) */
1219 	if ((s->quiet_shutdown) || (s->state == SSL_ST_BEFORE))
1220 		{
1221 		s->shutdown=(SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN);
1222 		return(1);
1223 		}
1224 
1225 	if (!(s->shutdown & SSL_SENT_SHUTDOWN))
1226 		{
1227 		s->shutdown|=SSL_SENT_SHUTDOWN;
1228 #if 1
1229 		ssl3_send_alert(s,SSL3_AL_WARNING,SSL_AD_CLOSE_NOTIFY);
1230 #endif
1231 		/* our shutdown alert has been sent now, and if it still needs
1232 	 	 * to be written, s->s3->alert_dispatch will be true */
1233 		}
1234 	else if (s->s3->alert_dispatch)
1235 		{
1236 		/* resend it if not sent */
1237 #if 1
1238 		ssl3_dispatch_alert(s);
1239 #endif
1240 		}
1241 	else if (!(s->shutdown & SSL_RECEIVED_SHUTDOWN))
1242 		{
1243 		/* If we are waiting for a close from our peer, we are closed */
1244 		ssl3_read_bytes(s,0,NULL,0,0);
1245 		}
1246 
1247 	if ((s->shutdown == (SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN)) &&
1248 		!s->s3->alert_dispatch)
1249 		return(1);
1250 	else
1251 		return(0);
1252 	}
1253 
1254 int ssl3_write(SSL *s, const void *buf, int len)
1255 	{
1256 	int ret,n;
1257 
1258 #if 0
1259 	if (s->shutdown & SSL_SEND_SHUTDOWN)
1260 		{
1261 		s->rwstate=SSL_NOTHING;
1262 		return(0);
1263 		}
1264 #endif
1265 	clear_sys_error();
1266 	if (s->s3->renegotiate) ssl3_renegotiate_check(s);
1267 
1268 	/* This is an experimental flag that sends the
1269 	 * last handshake message in the same packet as the first
1270 	 * use data - used to see if it helps the TCP protocol during
1271 	 * session-id reuse */
1272 	/* The second test is because the buffer may have been removed */
1273 	if ((s->s3->flags & SSL3_FLAGS_POP_BUFFER) && (s->wbio == s->bbio))
1274 		{
1275 		/* First time through, we write into the buffer */
1276 		if (s->s3->delay_buf_pop_ret == 0)
1277 			{
1278 			ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
1279 					     buf,len);
1280 			if (ret <= 0) return(ret);
1281 
1282 			s->s3->delay_buf_pop_ret=ret;
1283 			}
1284 
1285 		s->rwstate=SSL_WRITING;
1286 		n=BIO_flush(s->wbio);
1287 		if (n <= 0) return(n);
1288 		s->rwstate=SSL_NOTHING;
1289 
1290 		/* We have flushed the buffer, so remove it */
1291 		ssl_free_wbio_buffer(s);
1292 		s->s3->flags&= ~SSL3_FLAGS_POP_BUFFER;
1293 
1294 		ret=s->s3->delay_buf_pop_ret;
1295 		s->s3->delay_buf_pop_ret=0;
1296 		}
1297 	else
1298 		{
1299 		ret=ssl3_write_bytes(s,SSL3_RT_APPLICATION_DATA,
1300 				     buf,len);
1301 		if (ret <= 0) return(ret);
1302 		}
1303 
1304 	return(ret);
1305 	}
1306 
1307 static int ssl3_read_internal(SSL *s, void *buf, int len, int peek)
1308 	{
1309 	int ret;
1310 
1311 	clear_sys_error();
1312 	if (s->s3->renegotiate) ssl3_renegotiate_check(s);
1313 	s->s3->in_read_app_data=1;
1314 	ret=ssl3_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
1315 	if ((ret == -1) && (s->s3->in_read_app_data == 0))
1316 		{
1317 		/* ssl3_read_bytes decided to call s->handshake_func, which
1318 		 * called ssl3_read_bytes to read handshake data.
1319 		 * However, ssl3_read_bytes actually found application data
1320 		 * and thinks that application data makes sense here (signalled
1321 		 * by resetting 'in_read_app_data', strangely); so disable
1322 		 * handshake processing and try to read application data again. */
1323 		s->in_handshake++;
1324 		ret=ssl3_read_bytes(s,SSL3_RT_APPLICATION_DATA,buf,len,peek);
1325 		s->in_handshake--;
1326 		}
1327 	else
1328 		s->s3->in_read_app_data=0;
1329 
1330 	return(ret);
1331 	}
1332 
1333 int ssl3_read(SSL *s, void *buf, int len)
1334 	{
1335 	return ssl3_read_internal(s, buf, len, 0);
1336 	}
1337 
1338 int ssl3_peek(SSL *s, void *buf, int len)
1339 	{
1340 	return ssl3_read_internal(s, buf, len, 1);
1341 	}
1342 
1343 int ssl3_renegotiate(SSL *s)
1344 	{
1345 	if (s->handshake_func == NULL)
1346 		return(1);
1347 
1348 	if (s->s3->flags & SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS)
1349 		return(0);
1350 
1351 	s->s3->renegotiate=1;
1352 	return(1);
1353 	}
1354 
1355 int ssl3_renegotiate_check(SSL *s)
1356 	{
1357 	int ret=0;
1358 
1359 	if (s->s3->renegotiate)
1360 		{
1361 		if (	(s->s3->rbuf.left == 0) &&
1362 			(s->s3->wbuf.left == 0) &&
1363 			!SSL_in_init(s))
1364 			{
1365 /*
1366 if we are the server, and we have sent a 'RENEGOTIATE' message, we
1367 need to go to SSL_ST_ACCEPT.
1368 */
1369 			/* SSL_ST_ACCEPT */
1370 			s->state=SSL_ST_RENEGOTIATE;
1371 			s->s3->renegotiate=0;
1372 			s->s3->num_renegotiations++;
1373 			s->s3->total_renegotiations++;
1374 			ret=1;
1375 			}
1376 		}
1377 	return(ret);
1378 	}
1379 
1380