mirror of
				https://github.com/Mbed-TLS/mbedtls.git
				synced 2025-10-31 21:50:31 +03:00 
			
		
		
		
	Relax some SHA2 ciphersuite's version requirements
Changed: - PSK ciphersuites (RFC 5487, section 3) - ECDHE-PSK ciphersuites (RFC 5489, section 3) - Additional Camellia ciphersuites (RFC 6367, sec 3.3) Unchanged: - all GCM ciphersuites - Camellia ciphersuites from RFC 5932 (sec. 3.3.2) - ECC-SHA2 ciphersuites from RFC 5289 (unclear) - SHA2 from RFC 5246 (TLS 1.2, no precision)
This commit is contained in:
		| @@ -99,20 +99,20 @@ extern "C" { | ||||
| #define TLS_RSA_PSK_WITH_AES_128_GCM_SHA256      0xAC   /**< TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_AES_256_GCM_SHA384      0xAD   /**< TLS 1.2 */ | ||||
|  | ||||
| #define TLS_PSK_WITH_AES_128_CBC_SHA256          0xAE   /**< TLS 1.2 */ | ||||
| #define TLS_PSK_WITH_AES_256_CBC_SHA384          0xAF   /**< TLS 1.2 */ | ||||
| #define TLS_PSK_WITH_NULL_SHA256                 0xB0   /**< Weak! TLS 1.2 */ | ||||
| #define TLS_PSK_WITH_NULL_SHA384                 0xB1   /**< Weak! TLS 1.2 */ | ||||
| #define TLS_PSK_WITH_AES_128_CBC_SHA256          0xAE | ||||
| #define TLS_PSK_WITH_AES_256_CBC_SHA384          0xAF | ||||
| #define TLS_PSK_WITH_NULL_SHA256                 0xB0   /**< Weak! */ | ||||
| #define TLS_PSK_WITH_NULL_SHA384                 0xB1   /**< Weak! */ | ||||
|  | ||||
| #define TLS_DHE_PSK_WITH_AES_128_CBC_SHA256      0xB2   /**< TLS 1.2 */ | ||||
| #define TLS_DHE_PSK_WITH_AES_256_CBC_SHA384      0xB3   /**< TLS 1.2 */ | ||||
| #define TLS_DHE_PSK_WITH_NULL_SHA256             0xB4   /**< Weak! TLS 1.2 */ | ||||
| #define TLS_DHE_PSK_WITH_NULL_SHA384             0xB5   /**< Weak! TLS 1.2 */ | ||||
| #define TLS_DHE_PSK_WITH_AES_128_CBC_SHA256      0xB2 | ||||
| #define TLS_DHE_PSK_WITH_AES_256_CBC_SHA384      0xB3 | ||||
| #define TLS_DHE_PSK_WITH_NULL_SHA256             0xB4   /**< Weak! */ | ||||
| #define TLS_DHE_PSK_WITH_NULL_SHA384             0xB5   /**< Weak! */ | ||||
|  | ||||
| #define TLS_RSA_PSK_WITH_AES_128_CBC_SHA256      0xB6   /**< TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_AES_256_CBC_SHA384      0xB7   /**< TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_NULL_SHA256             0xB8   /**< Weak! TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_NULL_SHA384             0xB9   /**< Weak! TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_AES_128_CBC_SHA256      0xB6 | ||||
| #define TLS_RSA_PSK_WITH_AES_256_CBC_SHA384      0xB7 | ||||
| #define TLS_RSA_PSK_WITH_NULL_SHA256             0xB8   /**< Weak! */ | ||||
| #define TLS_RSA_PSK_WITH_NULL_SHA384             0xB9   /**< Weak! */ | ||||
|  | ||||
| #define TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256     0xBA   /**< TLS 1.2 */ | ||||
| #define TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 0xBE   /**< TLS 1.2 */ | ||||
| @@ -148,16 +148,16 @@ extern "C" { | ||||
| #define TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA      0xC034 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA       0xC035 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA       0xC036 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256    0xC037 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384    0xC038 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256    0xC037 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384    0xC038 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_NULL_SHA              0xC039 /**< Weak! No SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_NULL_SHA256           0xC03A /**< Weak! TLS 1.2 */ | ||||
| #define TLS_ECDHE_PSK_WITH_NULL_SHA384           0xC03B /**< Weak! TLS 1.2 */ | ||||
| #define TLS_ECDHE_PSK_WITH_NULL_SHA256           0xC03A /**< Weak! No SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_NULL_SHA384           0xC03B /**< Weak! No SSL3! */ | ||||
|  | ||||
| #define TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0xC072 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0xC073 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   0xC076 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384   0xC077 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 0xC072 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 0xC073 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256   0xC076 /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384   0xC077 /**< Not in SSL3! */ | ||||
|  | ||||
| #define TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256         0xC07A /**< TLS 1.2 */ | ||||
| #define TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384         0xC07B /**< TLS 1.2 */ | ||||
| @@ -175,14 +175,14 @@ extern "C" { | ||||
| #define TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256   0xC092 /**< TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384   0xC093 /**< TLS 1.2 */ | ||||
|  | ||||
| #define TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256       0xC094 /**< TLS 1.2 */ | ||||
| #define TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384       0xC095 /**< TLS 1.2 */ | ||||
| #define TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC096 /**< TLS 1.2 */ | ||||
| #define TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC097 /**< TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC098 /**< TLS 1.2 */ | ||||
| #define TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC099 /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC09A /**< TLS 1.2 */ | ||||
| #define TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC09B /**< TLS 1.2 */ | ||||
| #define TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256       0xC094 | ||||
| #define TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384       0xC095 | ||||
| #define TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC096 | ||||
| #define TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC097 | ||||
| #define TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256   0xC098 | ||||
| #define TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384   0xC099 | ||||
| #define TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 0xC09A /**< Not in SSL3! */ | ||||
| #define TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 0xC09B /**< Not in SSL3! */ | ||||
|  | ||||
| typedef enum { | ||||
|     POLARSSL_KEY_EXCHANGE_NONE = 0, | ||||
|   | ||||
| @@ -269,14 +269,14 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_CAMELLIA_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_CAMELLIA_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_ECDHE_ECDSA, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -388,14 +388,14 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_CAMELLIA_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_ECDHE_RSA, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_CAMELLIA_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_ECDHE_RSA, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -721,7 +721,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_PSK_WITH_AES_128_CBC_SHA256, "TLS-PSK-WITH-AES-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_AES_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -729,7 +729,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_PSK_WITH_AES_256_CBC_SHA384, "TLS-PSK-WITH-AES-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_AES_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -755,7 +755,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_CAMELLIA_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -763,7 +763,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_CAMELLIA_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -835,7 +835,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_DHE_PSK_WITH_AES_128_CBC_SHA256, "TLS-DHE-PSK-WITH-AES-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_AES_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_DHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -843,7 +843,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_DHE_PSK_WITH_AES_256_CBC_SHA384, "TLS-DHE-PSK-WITH-AES-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_AES_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_DHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -869,7 +869,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-DHE-PSK-WITH-CAMELLIA-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_CAMELLIA_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_DHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -877,7 +877,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-DHE-PSK-WITH-CAMELLIA-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_CAMELLIA_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_DHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -932,7 +932,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256, "TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_AES_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_ECDHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -940,7 +940,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384, "TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_AES_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_ECDHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -966,7 +966,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-ECDHE-PSK-WITH-CAMELLIA-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_CAMELLIA_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_ECDHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -974,7 +974,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-ECDHE-PSK-WITH-CAMELLIA-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_CAMELLIA_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_ECDHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -1028,7 +1028,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_RSA_PSK_WITH_AES_128_CBC_SHA256, "TLS-RSA-PSK-WITH-AES-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_AES_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_RSA_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -1036,7 +1036,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_RSA_PSK_WITH_AES_256_CBC_SHA384, "TLS-RSA-PSK-WITH-AES-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_AES_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_RSA_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -1062,7 +1062,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256, "TLS-RSA-PSK-WITH-CAMELLIA-128-CBC-SHA256", | ||||
|       POLARSSL_CIPHER_CAMELLIA_128_CBC, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_RSA_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA256_C */ | ||||
| @@ -1070,7 +1070,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384, "TLS-RSA-PSK-WITH-CAMELLIA-256-CBC-SHA384", | ||||
|       POLARSSL_CIPHER_CAMELLIA_256_CBC, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_RSA_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       0 }, | ||||
| #endif /* POLARSSL_SHA512_C */ | ||||
| @@ -1158,7 +1158,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_PSK_WITH_NULL_SHA256, "TLS-PSK-WITH-NULL-SHA256", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1166,7 +1166,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_PSK_WITH_NULL_SHA384, "TLS-PSK-WITH-NULL-SHA384", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1184,7 +1184,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_DHE_PSK_WITH_NULL_SHA256, "TLS-DHE-PSK-WITH-NULL-SHA256", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_DHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1192,7 +1192,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_DHE_PSK_WITH_NULL_SHA384, "TLS-DHE-PSK-WITH-NULL-SHA384", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_DHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1210,7 +1210,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_ECDHE_PSK_WITH_NULL_SHA256, "TLS-ECDHE-PSK-WITH-NULL-SHA256", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_ECDHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1218,7 +1218,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_ECDHE_PSK_WITH_NULL_SHA384, "TLS-ECDHE-PSK-WITH-NULL-SHA384", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_ECDHE_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_1, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1236,7 +1236,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA256_C) | ||||
|     { TLS_RSA_PSK_WITH_NULL_SHA256, "TLS-RSA-PSK-WITH-NULL-SHA256", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA256, POLARSSL_KEY_EXCHANGE_RSA_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
| @@ -1244,7 +1244,7 @@ static const ssl_ciphersuite_t ciphersuite_definitions[] = | ||||
| #if defined(POLARSSL_SHA512_C) | ||||
|     { TLS_RSA_PSK_WITH_NULL_SHA384, "TLS-RSA-PSK-WITH-NULL-SHA384", | ||||
|       POLARSSL_CIPHER_NULL, POLARSSL_MD_SHA384, POLARSSL_KEY_EXCHANGE_RSA_PSK, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_0, | ||||
|       SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3, | ||||
|       POLARSSL_CIPHERSUITE_WEAK }, | ||||
| #endif | ||||
|   | ||||
		Reference in New Issue
	
	Block a user