xref: /freebsd/crypto/openssl/ssl/ssl_stat.c (revision 123af6ec70016f5556da5972d4d63c7d175c06d3) 
1 /*
2  * Copyright 1995-2017 The OpenSSL Project Authors. All Rights Reserved.
3  * Copyright 2005 Nokia. All rights reserved.
4  *
5  * Licensed under the OpenSSL license (the "License").  You may not use
6  * this file except in compliance with the License.  You can obtain a copy
7  * in the file LICENSE in the source distribution or at
8  * https://www.openssl.org/source/license.html
9  */
10 
11 #include <stdio.h>
12 #include "ssl_locl.h"
13 
14 const char *SSL_state_string_long(const SSL *s)
15 {
16     if (ossl_statem_in_error(s))
17         return "error";
18 
19     switch (SSL_get_state(s)) {
20     case TLS_ST_CR_CERT_STATUS:
21         return "SSLv3/TLS read certificate status";
22     case TLS_ST_CW_NEXT_PROTO:
23         return "SSLv3/TLS write next proto";
24     case TLS_ST_SR_NEXT_PROTO:
25         return "SSLv3/TLS read next proto";
26     case TLS_ST_SW_CERT_STATUS:
27         return "SSLv3/TLS write certificate status";
28     case TLS_ST_BEFORE:
29         return "before SSL initialization";
30     case TLS_ST_OK:
31         return "SSL negotiation finished successfully";
32     case TLS_ST_CW_CLNT_HELLO:
33         return "SSLv3/TLS write client hello";
34     case TLS_ST_CR_SRVR_HELLO:
35         return "SSLv3/TLS read server hello";
36     case TLS_ST_CR_CERT:
37         return "SSLv3/TLS read server certificate";
38     case TLS_ST_CR_KEY_EXCH:
39         return "SSLv3/TLS read server key exchange";
40     case TLS_ST_CR_CERT_REQ:
41         return "SSLv3/TLS read server certificate request";
42     case TLS_ST_CR_SESSION_TICKET:
43         return "SSLv3/TLS read server session ticket";
44     case TLS_ST_CR_SRVR_DONE:
45         return "SSLv3/TLS read server done";
46     case TLS_ST_CW_CERT:
47         return "SSLv3/TLS write client certificate";
48     case TLS_ST_CW_KEY_EXCH:
49         return "SSLv3/TLS write client key exchange";
50     case TLS_ST_CW_CERT_VRFY:
51         return "SSLv3/TLS write certificate verify";
52     case TLS_ST_CW_CHANGE:
53     case TLS_ST_SW_CHANGE:
54         return "SSLv3/TLS write change cipher spec";
55     case TLS_ST_CW_FINISHED:
56     case TLS_ST_SW_FINISHED:
57         return "SSLv3/TLS write finished";
58     case TLS_ST_CR_CHANGE:
59     case TLS_ST_SR_CHANGE:
60         return "SSLv3/TLS read change cipher spec";
61     case TLS_ST_CR_FINISHED:
62     case TLS_ST_SR_FINISHED:
63         return "SSLv3/TLS read finished";
64     case TLS_ST_SR_CLNT_HELLO:
65         return "SSLv3/TLS read client hello";
66     case TLS_ST_SW_HELLO_REQ:
67         return "SSLv3/TLS write hello request";
68     case TLS_ST_SW_SRVR_HELLO:
69         return "SSLv3/TLS write server hello";
70     case TLS_ST_SW_CERT:
71         return "SSLv3/TLS write certificate";
72     case TLS_ST_SW_KEY_EXCH:
73         return "SSLv3/TLS write key exchange";
74     case TLS_ST_SW_CERT_REQ:
75         return "SSLv3/TLS write certificate request";
76     case TLS_ST_SW_SESSION_TICKET:
77         return "SSLv3/TLS write session ticket";
78     case TLS_ST_SW_SRVR_DONE:
79         return "SSLv3/TLS write server done";
80     case TLS_ST_SR_CERT:
81         return "SSLv3/TLS read client certificate";
82     case TLS_ST_SR_KEY_EXCH:
83         return "SSLv3/TLS read client key exchange";
84     case TLS_ST_SR_CERT_VRFY:
85         return "SSLv3/TLS read certificate verify";
86     case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
87         return "DTLS1 read hello verify request";
88     case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
89         return "DTLS1 write hello verify request";
90     case TLS_ST_SW_ENCRYPTED_EXTENSIONS:
91         return "TLSv1.3 write encrypted extensions";
92     case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
93         return "TLSv1.3 read encrypted extensions";
94     case TLS_ST_CR_CERT_VRFY:
95         return "TLSv1.3 read server certificate verify";
96     case TLS_ST_SW_CERT_VRFY:
97         return "TLSv1.3 write server certificate verify";
98     case TLS_ST_CR_HELLO_REQ:
99         return "SSLv3/TLS read hello request";
100     case TLS_ST_SW_KEY_UPDATE:
101         return "TLSv1.3 write server key update";
102     case TLS_ST_CW_KEY_UPDATE:
103         return "TLSv1.3 write client key update";
104     case TLS_ST_SR_KEY_UPDATE:
105         return "TLSv1.3 read client key update";
106     case TLS_ST_CR_KEY_UPDATE:
107         return "TLSv1.3 read server key update";
108     case TLS_ST_EARLY_DATA:
109         return "TLSv1.3 early data";
110     case TLS_ST_PENDING_EARLY_DATA_END:
111         return "TLSv1.3 pending early data end";
112     case TLS_ST_CW_END_OF_EARLY_DATA:
113         return "TLSv1.3 write end of early data";
114     case TLS_ST_SR_END_OF_EARLY_DATA:
115         return "TLSv1.3 read end of early data";
116     default:
117         return "unknown state";
118     }
119 }
120 
121 const char *SSL_state_string(const SSL *s)
122 {
123     if (ossl_statem_in_error(s))
124         return "SSLERR";
125 
126     switch (SSL_get_state(s)) {
127     case TLS_ST_SR_NEXT_PROTO:
128         return "TRNP";
129     case TLS_ST_SW_SESSION_TICKET:
130         return "TWST";
131     case TLS_ST_SW_CERT_STATUS:
132         return "TWCS";
133     case TLS_ST_CR_CERT_STATUS:
134         return "TRCS";
135     case TLS_ST_CR_SESSION_TICKET:
136         return "TRST";
137     case TLS_ST_CW_NEXT_PROTO:
138         return "TWNP";
139     case TLS_ST_BEFORE:
140         return "PINIT ";
141     case TLS_ST_OK:
142         return "SSLOK ";
143     case TLS_ST_CW_CLNT_HELLO:
144         return "TWCH";
145     case TLS_ST_CR_SRVR_HELLO:
146         return "TRSH";
147     case TLS_ST_CR_CERT:
148         return "TRSC";
149     case TLS_ST_CR_KEY_EXCH:
150         return "TRSKE";
151     case TLS_ST_CR_CERT_REQ:
152         return "TRCR";
153     case TLS_ST_CR_SRVR_DONE:
154         return "TRSD";
155     case TLS_ST_CW_CERT:
156         return "TWCC";
157     case TLS_ST_CW_KEY_EXCH:
158         return "TWCKE";
159     case TLS_ST_CW_CERT_VRFY:
160         return "TWCV";
161     case TLS_ST_SW_CHANGE:
162     case TLS_ST_CW_CHANGE:
163         return "TWCCS";
164     case TLS_ST_SW_FINISHED:
165     case TLS_ST_CW_FINISHED:
166         return "TWFIN";
167     case TLS_ST_SR_CHANGE:
168     case TLS_ST_CR_CHANGE:
169         return "TRCCS";
170     case TLS_ST_SR_FINISHED:
171     case TLS_ST_CR_FINISHED:
172         return "TRFIN";
173     case TLS_ST_SW_HELLO_REQ:
174         return "TWHR";
175     case TLS_ST_SR_CLNT_HELLO:
176         return "TRCH";
177     case TLS_ST_SW_SRVR_HELLO:
178         return "TWSH";
179     case TLS_ST_SW_CERT:
180         return "TWSC";
181     case TLS_ST_SW_KEY_EXCH:
182         return "TWSKE";
183     case TLS_ST_SW_CERT_REQ:
184         return "TWCR";
185     case TLS_ST_SW_SRVR_DONE:
186         return "TWSD";
187     case TLS_ST_SR_CERT:
188         return "TRCC";
189     case TLS_ST_SR_KEY_EXCH:
190         return "TRCKE";
191     case TLS_ST_SR_CERT_VRFY:
192         return "TRCV";
193     case DTLS_ST_CR_HELLO_VERIFY_REQUEST:
194         return "DRCHV";
195     case DTLS_ST_SW_HELLO_VERIFY_REQUEST:
196         return "DWCHV";
197     case TLS_ST_SW_ENCRYPTED_EXTENSIONS:
198         return "TWEE";
199     case TLS_ST_CR_ENCRYPTED_EXTENSIONS:
200         return "TREE";
201     case TLS_ST_CR_CERT_VRFY:
202         return "TRSCV";
203     case TLS_ST_SW_CERT_VRFY:
204         return "TRSCV";
205     case TLS_ST_CR_HELLO_REQ:
206         return "TRHR";
207     case TLS_ST_SW_KEY_UPDATE:
208         return "TWSKU";
209     case TLS_ST_CW_KEY_UPDATE:
210         return "TWCKU";
211     case TLS_ST_SR_KEY_UPDATE:
212         return "TRCKU";
213     case TLS_ST_CR_KEY_UPDATE:
214         return "TRSKU";
215     case TLS_ST_EARLY_DATA:
216         return "TED";
217     case TLS_ST_PENDING_EARLY_DATA_END:
218         return "TPEDE";
219     case TLS_ST_CW_END_OF_EARLY_DATA:
220         return "TWEOED";
221     case TLS_ST_SR_END_OF_EARLY_DATA:
222         return "TWEOED";
223     default:
224         return "UNKWN ";
225     }
226 }
227 
228 const char *SSL_alert_type_string_long(int value)
229 {
230     switch (value >> 8) {
231     case SSL3_AL_WARNING:
232         return "warning";
233     case SSL3_AL_FATAL:
234         return "fatal";
235     default:
236         return "unknown";
237     }
238 }
239 
240 const char *SSL_alert_type_string(int value)
241 {
242     switch (value >> 8) {
243     case SSL3_AL_WARNING:
244         return "W";
245     case SSL3_AL_FATAL:
246         return "F";
247     default:
248         return "U";
249     }
250 }
251 
252 const char *SSL_alert_desc_string(int value)
253 {
254     switch (value & 0xff) {
255     case SSL3_AD_CLOSE_NOTIFY:
256         return "CN";
257     case SSL3_AD_UNEXPECTED_MESSAGE:
258         return "UM";
259     case SSL3_AD_BAD_RECORD_MAC:
260         return "BM";
261     case SSL3_AD_DECOMPRESSION_FAILURE:
262         return "DF";
263     case SSL3_AD_HANDSHAKE_FAILURE:
264         return "HF";
265     case SSL3_AD_NO_CERTIFICATE:
266         return "NC";
267     case SSL3_AD_BAD_CERTIFICATE:
268         return "BC";
269     case SSL3_AD_UNSUPPORTED_CERTIFICATE:
270         return "UC";
271     case SSL3_AD_CERTIFICATE_REVOKED:
272         return "CR";
273     case SSL3_AD_CERTIFICATE_EXPIRED:
274         return "CE";
275     case SSL3_AD_CERTIFICATE_UNKNOWN:
276         return "CU";
277     case SSL3_AD_ILLEGAL_PARAMETER:
278         return "IP";
279     case TLS1_AD_DECRYPTION_FAILED:
280         return "DC";
281     case TLS1_AD_RECORD_OVERFLOW:
282         return "RO";
283     case TLS1_AD_UNKNOWN_CA:
284         return "CA";
285     case TLS1_AD_ACCESS_DENIED:
286         return "AD";
287     case TLS1_AD_DECODE_ERROR:
288         return "DE";
289     case TLS1_AD_DECRYPT_ERROR:
290         return "CY";
291     case TLS1_AD_EXPORT_RESTRICTION:
292         return "ER";
293     case TLS1_AD_PROTOCOL_VERSION:
294         return "PV";
295     case TLS1_AD_INSUFFICIENT_SECURITY:
296         return "IS";
297     case TLS1_AD_INTERNAL_ERROR:
298         return "IE";
299     case TLS1_AD_USER_CANCELLED:
300         return "US";
301     case TLS1_AD_NO_RENEGOTIATION:
302         return "NR";
303     case TLS1_AD_UNSUPPORTED_EXTENSION:
304         return "UE";
305     case TLS1_AD_CERTIFICATE_UNOBTAINABLE:
306         return "CO";
307     case TLS1_AD_UNRECOGNIZED_NAME:
308         return "UN";
309     case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE:
310         return "BR";
311     case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE:
312         return "BH";
313     case TLS1_AD_UNKNOWN_PSK_IDENTITY:
314         return "UP";
315     default:
316         return "UK";
317     }
318 }
319 
320 const char *SSL_alert_desc_string_long(int value)
321 {
322     switch (value & 0xff) {
323     case SSL3_AD_CLOSE_NOTIFY:
324         return "close notify";
325     case SSL3_AD_UNEXPECTED_MESSAGE:
326         return "unexpected_message";
327     case SSL3_AD_BAD_RECORD_MAC:
328         return "bad record mac";
329     case SSL3_AD_DECOMPRESSION_FAILURE:
330         return "decompression failure";
331     case SSL3_AD_HANDSHAKE_FAILURE:
332         return "handshake failure";
333     case SSL3_AD_NO_CERTIFICATE:
334         return "no certificate";
335     case SSL3_AD_BAD_CERTIFICATE:
336         return "bad certificate";
337     case SSL3_AD_UNSUPPORTED_CERTIFICATE:
338         return "unsupported certificate";
339     case SSL3_AD_CERTIFICATE_REVOKED:
340         return "certificate revoked";
341     case SSL3_AD_CERTIFICATE_EXPIRED:
342         return "certificate expired";
343     case SSL3_AD_CERTIFICATE_UNKNOWN:
344         return "certificate unknown";
345     case SSL3_AD_ILLEGAL_PARAMETER:
346         return "illegal parameter";
347     case TLS1_AD_DECRYPTION_FAILED:
348         return "decryption failed";
349     case TLS1_AD_RECORD_OVERFLOW:
350         return "record overflow";
351     case TLS1_AD_UNKNOWN_CA:
352         return "unknown CA";
353     case TLS1_AD_ACCESS_DENIED:
354         return "access denied";
355     case TLS1_AD_DECODE_ERROR:
356         return "decode error";
357     case TLS1_AD_DECRYPT_ERROR:
358         return "decrypt error";
359     case TLS1_AD_EXPORT_RESTRICTION:
360         return "export restriction";
361     case TLS1_AD_PROTOCOL_VERSION:
362         return "protocol version";
363     case TLS1_AD_INSUFFICIENT_SECURITY:
364         return "insufficient security";
365     case TLS1_AD_INTERNAL_ERROR:
366         return "internal error";
367     case TLS1_AD_USER_CANCELLED:
368         return "user canceled";
369     case TLS1_AD_NO_RENEGOTIATION:
370         return "no renegotiation";
371     case TLS1_AD_UNSUPPORTED_EXTENSION:
372         return "unsupported extension";
373     case TLS1_AD_CERTIFICATE_UNOBTAINABLE:
374         return "certificate unobtainable";
375     case TLS1_AD_UNRECOGNIZED_NAME:
376         return "unrecognized name";
377     case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE:
378         return "bad certificate status response";
379     case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE:
380         return "bad certificate hash value";
381     case TLS1_AD_UNKNOWN_PSK_IDENTITY:
382         return "unknown PSK identity";
383     case TLS1_AD_NO_APPLICATION_PROTOCOL:
384         return "no application protocol";
385     default:
386         return "unknown";
387     }
388 }
389