t1_trce.c 56 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601
  1. /*
  2. * Copyright 2012-2020 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. #include "ssl_local.h"
  10. #ifndef OPENSSL_NO_SSL_TRACE
  11. /* Packet trace support for OpenSSL */
  12. typedef struct {
  13. int num;
  14. const char *name;
  15. } ssl_trace_tbl;
  16. # define ssl_trace_str(val, tbl) \
  17. do_ssl_trace_str(val, tbl, OSSL_NELEM(tbl))
  18. # define ssl_trace_list(bio, indent, msg, msglen, value, table) \
  19. do_ssl_trace_list(bio, indent, msg, msglen, value, \
  20. table, OSSL_NELEM(table))
  21. static const char *do_ssl_trace_str(int val, const ssl_trace_tbl *tbl,
  22. size_t ntbl)
  23. {
  24. size_t i;
  25. for (i = 0; i < ntbl; i++, tbl++) {
  26. if (tbl->num == val)
  27. return tbl->name;
  28. }
  29. return "UNKNOWN";
  30. }
  31. static int do_ssl_trace_list(BIO *bio, int indent,
  32. const unsigned char *msg, size_t msglen,
  33. size_t vlen, const ssl_trace_tbl *tbl, size_t ntbl)
  34. {
  35. int val;
  36. if (msglen % vlen)
  37. return 0;
  38. while (msglen) {
  39. val = msg[0];
  40. if (vlen == 2)
  41. val = (val << 8) | msg[1];
  42. BIO_indent(bio, indent, 80);
  43. BIO_printf(bio, "%s (%d)\n", do_ssl_trace_str(val, tbl, ntbl), val);
  44. msg += vlen;
  45. msglen -= vlen;
  46. }
  47. return 1;
  48. }
  49. /* Version number */
  50. static const ssl_trace_tbl ssl_version_tbl[] = {
  51. {SSL3_VERSION, "SSL 3.0"},
  52. {TLS1_VERSION, "TLS 1.0"},
  53. {TLS1_1_VERSION, "TLS 1.1"},
  54. {TLS1_2_VERSION, "TLS 1.2"},
  55. {TLS1_3_VERSION, "TLS 1.3"},
  56. {DTLS1_VERSION, "DTLS 1.0"},
  57. {DTLS1_2_VERSION, "DTLS 1.2"},
  58. {DTLS1_BAD_VER, "DTLS 1.0 (bad)"}
  59. };
  60. static const ssl_trace_tbl ssl_content_tbl[] = {
  61. {SSL3_RT_CHANGE_CIPHER_SPEC, "ChangeCipherSpec"},
  62. {SSL3_RT_ALERT, "Alert"},
  63. {SSL3_RT_HANDSHAKE, "Handshake"},
  64. {SSL3_RT_APPLICATION_DATA, "ApplicationData"},
  65. };
  66. /* Handshake types, sorted by ascending id */
  67. static const ssl_trace_tbl ssl_handshake_tbl[] = {
  68. {SSL3_MT_HELLO_REQUEST, "HelloRequest"},
  69. {SSL3_MT_CLIENT_HELLO, "ClientHello"},
  70. {SSL3_MT_SERVER_HELLO, "ServerHello"},
  71. {DTLS1_MT_HELLO_VERIFY_REQUEST, "HelloVerifyRequest"},
  72. {SSL3_MT_NEWSESSION_TICKET, "NewSessionTicket"},
  73. {SSL3_MT_END_OF_EARLY_DATA, "EndOfEarlyData"},
  74. {SSL3_MT_ENCRYPTED_EXTENSIONS, "EncryptedExtensions"},
  75. {SSL3_MT_CERTIFICATE, "Certificate"},
  76. {SSL3_MT_SERVER_KEY_EXCHANGE, "ServerKeyExchange"},
  77. {SSL3_MT_CERTIFICATE_REQUEST, "CertificateRequest"},
  78. {SSL3_MT_SERVER_DONE, "ServerHelloDone"},
  79. {SSL3_MT_CERTIFICATE_VERIFY, "CertificateVerify"},
  80. {SSL3_MT_CLIENT_KEY_EXCHANGE, "ClientKeyExchange"},
  81. {SSL3_MT_FINISHED, "Finished"},
  82. {SSL3_MT_CERTIFICATE_URL, "CertificateUrl"},
  83. {SSL3_MT_CERTIFICATE_STATUS, "CertificateStatus"},
  84. {SSL3_MT_SUPPLEMENTAL_DATA, "SupplementalData"},
  85. {SSL3_MT_KEY_UPDATE, "KeyUpdate"},
  86. # ifndef OPENSSL_NO_NEXTPROTONEG
  87. {SSL3_MT_NEXT_PROTO, "NextProto"},
  88. # endif
  89. {SSL3_MT_MESSAGE_HASH, "MessageHash"}
  90. };
  91. /* Cipher suites */
  92. static const ssl_trace_tbl ssl_ciphers_tbl[] = {
  93. {0x0000, "TLS_NULL_WITH_NULL_NULL"},
  94. {0x0001, "TLS_RSA_WITH_NULL_MD5"},
  95. {0x0002, "TLS_RSA_WITH_NULL_SHA"},
  96. {0x0003, "TLS_RSA_EXPORT_WITH_RC4_40_MD5"},
  97. {0x0004, "TLS_RSA_WITH_RC4_128_MD5"},
  98. {0x0005, "TLS_RSA_WITH_RC4_128_SHA"},
  99. {0x0006, "TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5"},
  100. {0x0007, "TLS_RSA_WITH_IDEA_CBC_SHA"},
  101. {0x0008, "TLS_RSA_EXPORT_WITH_DES40_CBC_SHA"},
  102. {0x0009, "TLS_RSA_WITH_DES_CBC_SHA"},
  103. {0x000A, "TLS_RSA_WITH_3DES_EDE_CBC_SHA"},
  104. {0x000B, "TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA"},
  105. {0x000C, "TLS_DH_DSS_WITH_DES_CBC_SHA"},
  106. {0x000D, "TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA"},
  107. {0x000E, "TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA"},
  108. {0x000F, "TLS_DH_RSA_WITH_DES_CBC_SHA"},
  109. {0x0010, "TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA"},
  110. {0x0011, "TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA"},
  111. {0x0012, "TLS_DHE_DSS_WITH_DES_CBC_SHA"},
  112. {0x0013, "TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA"},
  113. {0x0014, "TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA"},
  114. {0x0015, "TLS_DHE_RSA_WITH_DES_CBC_SHA"},
  115. {0x0016, "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"},
  116. {0x0017, "TLS_DH_anon_EXPORT_WITH_RC4_40_MD5"},
  117. {0x0018, "TLS_DH_anon_WITH_RC4_128_MD5"},
  118. {0x0019, "TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA"},
  119. {0x001A, "TLS_DH_anon_WITH_DES_CBC_SHA"},
  120. {0x001B, "TLS_DH_anon_WITH_3DES_EDE_CBC_SHA"},
  121. {0x001D, "SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA"},
  122. {0x001E, "SSL_FORTEZZA_KEA_WITH_RC4_128_SHA"},
  123. {0x001F, "TLS_KRB5_WITH_3DES_EDE_CBC_SHA"},
  124. {0x0020, "TLS_KRB5_WITH_RC4_128_SHA"},
  125. {0x0021, "TLS_KRB5_WITH_IDEA_CBC_SHA"},
  126. {0x0022, "TLS_KRB5_WITH_DES_CBC_MD5"},
  127. {0x0023, "TLS_KRB5_WITH_3DES_EDE_CBC_MD5"},
  128. {0x0024, "TLS_KRB5_WITH_RC4_128_MD5"},
  129. {0x0025, "TLS_KRB5_WITH_IDEA_CBC_MD5"},
  130. {0x0026, "TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA"},
  131. {0x0027, "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA"},
  132. {0x0028, "TLS_KRB5_EXPORT_WITH_RC4_40_SHA"},
  133. {0x0029, "TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5"},
  134. {0x002A, "TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5"},
  135. {0x002B, "TLS_KRB5_EXPORT_WITH_RC4_40_MD5"},
  136. {0x002C, "TLS_PSK_WITH_NULL_SHA"},
  137. {0x002D, "TLS_DHE_PSK_WITH_NULL_SHA"},
  138. {0x002E, "TLS_RSA_PSK_WITH_NULL_SHA"},
  139. {0x002F, "TLS_RSA_WITH_AES_128_CBC_SHA"},
  140. {0x0030, "TLS_DH_DSS_WITH_AES_128_CBC_SHA"},
  141. {0x0031, "TLS_DH_RSA_WITH_AES_128_CBC_SHA"},
  142. {0x0032, "TLS_DHE_DSS_WITH_AES_128_CBC_SHA"},
  143. {0x0033, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA"},
  144. {0x0034, "TLS_DH_anon_WITH_AES_128_CBC_SHA"},
  145. {0x0035, "TLS_RSA_WITH_AES_256_CBC_SHA"},
  146. {0x0036, "TLS_DH_DSS_WITH_AES_256_CBC_SHA"},
  147. {0x0037, "TLS_DH_RSA_WITH_AES_256_CBC_SHA"},
  148. {0x0038, "TLS_DHE_DSS_WITH_AES_256_CBC_SHA"},
  149. {0x0039, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA"},
  150. {0x003A, "TLS_DH_anon_WITH_AES_256_CBC_SHA"},
  151. {0x003B, "TLS_RSA_WITH_NULL_SHA256"},
  152. {0x003C, "TLS_RSA_WITH_AES_128_CBC_SHA256"},
  153. {0x003D, "TLS_RSA_WITH_AES_256_CBC_SHA256"},
  154. {0x003E, "TLS_DH_DSS_WITH_AES_128_CBC_SHA256"},
  155. {0x003F, "TLS_DH_RSA_WITH_AES_128_CBC_SHA256"},
  156. {0x0040, "TLS_DHE_DSS_WITH_AES_128_CBC_SHA256"},
  157. {0x0041, "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"},
  158. {0x0042, "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA"},
  159. {0x0043, "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA"},
  160. {0x0044, "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA"},
  161. {0x0045, "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"},
  162. {0x0046, "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA"},
  163. {0x0067, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"},
  164. {0x0068, "TLS_DH_DSS_WITH_AES_256_CBC_SHA256"},
  165. {0x0069, "TLS_DH_RSA_WITH_AES_256_CBC_SHA256"},
  166. {0x006A, "TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"},
  167. {0x006B, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"},
  168. {0x006C, "TLS_DH_anon_WITH_AES_128_CBC_SHA256"},
  169. {0x006D, "TLS_DH_anon_WITH_AES_256_CBC_SHA256"},
  170. {0x0081, "TLS_GOSTR341001_WITH_28147_CNT_IMIT"},
  171. {0x0083, "TLS_GOSTR341001_WITH_NULL_GOSTR3411"},
  172. {0x0084, "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"},
  173. {0x0085, "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA"},
  174. {0x0086, "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA"},
  175. {0x0087, "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA"},
  176. {0x0088, "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"},
  177. {0x0089, "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA"},
  178. {0x008A, "TLS_PSK_WITH_RC4_128_SHA"},
  179. {0x008B, "TLS_PSK_WITH_3DES_EDE_CBC_SHA"},
  180. {0x008C, "TLS_PSK_WITH_AES_128_CBC_SHA"},
  181. {0x008D, "TLS_PSK_WITH_AES_256_CBC_SHA"},
  182. {0x008E, "TLS_DHE_PSK_WITH_RC4_128_SHA"},
  183. {0x008F, "TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA"},
  184. {0x0090, "TLS_DHE_PSK_WITH_AES_128_CBC_SHA"},
  185. {0x0091, "TLS_DHE_PSK_WITH_AES_256_CBC_SHA"},
  186. {0x0092, "TLS_RSA_PSK_WITH_RC4_128_SHA"},
  187. {0x0093, "TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA"},
  188. {0x0094, "TLS_RSA_PSK_WITH_AES_128_CBC_SHA"},
  189. {0x0095, "TLS_RSA_PSK_WITH_AES_256_CBC_SHA"},
  190. {0x0096, "TLS_RSA_WITH_SEED_CBC_SHA"},
  191. {0x0097, "TLS_DH_DSS_WITH_SEED_CBC_SHA"},
  192. {0x0098, "TLS_DH_RSA_WITH_SEED_CBC_SHA"},
  193. {0x0099, "TLS_DHE_DSS_WITH_SEED_CBC_SHA"},
  194. {0x009A, "TLS_DHE_RSA_WITH_SEED_CBC_SHA"},
  195. {0x009B, "TLS_DH_anon_WITH_SEED_CBC_SHA"},
  196. {0x009C, "TLS_RSA_WITH_AES_128_GCM_SHA256"},
  197. {0x009D, "TLS_RSA_WITH_AES_256_GCM_SHA384"},
  198. {0x009E, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"},
  199. {0x009F, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"},
  200. {0x00A0, "TLS_DH_RSA_WITH_AES_128_GCM_SHA256"},
  201. {0x00A1, "TLS_DH_RSA_WITH_AES_256_GCM_SHA384"},
  202. {0x00A2, "TLS_DHE_DSS_WITH_AES_128_GCM_SHA256"},
  203. {0x00A3, "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384"},
  204. {0x00A4, "TLS_DH_DSS_WITH_AES_128_GCM_SHA256"},
  205. {0x00A5, "TLS_DH_DSS_WITH_AES_256_GCM_SHA384"},
  206. {0x00A6, "TLS_DH_anon_WITH_AES_128_GCM_SHA256"},
  207. {0x00A7, "TLS_DH_anon_WITH_AES_256_GCM_SHA384"},
  208. {0x00A8, "TLS_PSK_WITH_AES_128_GCM_SHA256"},
  209. {0x00A9, "TLS_PSK_WITH_AES_256_GCM_SHA384"},
  210. {0x00AA, "TLS_DHE_PSK_WITH_AES_128_GCM_SHA256"},
  211. {0x00AB, "TLS_DHE_PSK_WITH_AES_256_GCM_SHA384"},
  212. {0x00AC, "TLS_RSA_PSK_WITH_AES_128_GCM_SHA256"},
  213. {0x00AD, "TLS_RSA_PSK_WITH_AES_256_GCM_SHA384"},
  214. {0x00AE, "TLS_PSK_WITH_AES_128_CBC_SHA256"},
  215. {0x00AF, "TLS_PSK_WITH_AES_256_CBC_SHA384"},
  216. {0x00B0, "TLS_PSK_WITH_NULL_SHA256"},
  217. {0x00B1, "TLS_PSK_WITH_NULL_SHA384"},
  218. {0x00B2, "TLS_DHE_PSK_WITH_AES_128_CBC_SHA256"},
  219. {0x00B3, "TLS_DHE_PSK_WITH_AES_256_CBC_SHA384"},
  220. {0x00B4, "TLS_DHE_PSK_WITH_NULL_SHA256"},
  221. {0x00B5, "TLS_DHE_PSK_WITH_NULL_SHA384"},
  222. {0x00B6, "TLS_RSA_PSK_WITH_AES_128_CBC_SHA256"},
  223. {0x00B7, "TLS_RSA_PSK_WITH_AES_256_CBC_SHA384"},
  224. {0x00B8, "TLS_RSA_PSK_WITH_NULL_SHA256"},
  225. {0x00B9, "TLS_RSA_PSK_WITH_NULL_SHA384"},
  226. {0x00BA, "TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
  227. {0x00BB, "TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256"},
  228. {0x00BC, "TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
  229. {0x00BD, "TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256"},
  230. {0x00BE, "TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
  231. {0x00BF, "TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256"},
  232. {0x00C0, "TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256"},
  233. {0x00C1, "TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256"},
  234. {0x00C2, "TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256"},
  235. {0x00C3, "TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256"},
  236. {0x00C4, "TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256"},
  237. {0x00C5, "TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256"},
  238. {0x00FF, "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"},
  239. {0x5600, "TLS_FALLBACK_SCSV"},
  240. {0xC001, "TLS_ECDH_ECDSA_WITH_NULL_SHA"},
  241. {0xC002, "TLS_ECDH_ECDSA_WITH_RC4_128_SHA"},
  242. {0xC003, "TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA"},
  243. {0xC004, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA"},
  244. {0xC005, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"},
  245. {0xC006, "TLS_ECDHE_ECDSA_WITH_NULL_SHA"},
  246. {0xC007, "TLS_ECDHE_ECDSA_WITH_RC4_128_SHA"},
  247. {0xC008, "TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA"},
  248. {0xC009, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA"},
  249. {0xC00A, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"},
  250. {0xC00B, "TLS_ECDH_RSA_WITH_NULL_SHA"},
  251. {0xC00C, "TLS_ECDH_RSA_WITH_RC4_128_SHA"},
  252. {0xC00D, "TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA"},
  253. {0xC00E, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA"},
  254. {0xC00F, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA"},
  255. {0xC010, "TLS_ECDHE_RSA_WITH_NULL_SHA"},
  256. {0xC011, "TLS_ECDHE_RSA_WITH_RC4_128_SHA"},
  257. {0xC012, "TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA"},
  258. {0xC013, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"},
  259. {0xC014, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"},
  260. {0xC015, "TLS_ECDH_anon_WITH_NULL_SHA"},
  261. {0xC016, "TLS_ECDH_anon_WITH_RC4_128_SHA"},
  262. {0xC017, "TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA"},
  263. {0xC018, "TLS_ECDH_anon_WITH_AES_128_CBC_SHA"},
  264. {0xC019, "TLS_ECDH_anon_WITH_AES_256_CBC_SHA"},
  265. {0xC01A, "TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA"},
  266. {0xC01B, "TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA"},
  267. {0xC01C, "TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA"},
  268. {0xC01D, "TLS_SRP_SHA_WITH_AES_128_CBC_SHA"},
  269. {0xC01E, "TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA"},
  270. {0xC01F, "TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA"},
  271. {0xC020, "TLS_SRP_SHA_WITH_AES_256_CBC_SHA"},
  272. {0xC021, "TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA"},
  273. {0xC022, "TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA"},
  274. {0xC023, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"},
  275. {0xC024, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384"},
  276. {0xC025, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256"},
  277. {0xC026, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384"},
  278. {0xC027, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"},
  279. {0xC028, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"},
  280. {0xC029, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256"},
  281. {0xC02A, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384"},
  282. {0xC02B, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"},
  283. {0xC02C, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"},
  284. {0xC02D, "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"},
  285. {0xC02E, "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384"},
  286. {0xC02F, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"},
  287. {0xC030, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"},
  288. {0xC031, "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256"},
  289. {0xC032, "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384"},
  290. {0xC033, "TLS_ECDHE_PSK_WITH_RC4_128_SHA"},
  291. {0xC034, "TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA"},
  292. {0xC035, "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA"},
  293. {0xC036, "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA"},
  294. {0xC037, "TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256"},
  295. {0xC038, "TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384"},
  296. {0xC039, "TLS_ECDHE_PSK_WITH_NULL_SHA"},
  297. {0xC03A, "TLS_ECDHE_PSK_WITH_NULL_SHA256"},
  298. {0xC03B, "TLS_ECDHE_PSK_WITH_NULL_SHA384"},
  299. {0xC03C, "TLS_RSA_WITH_ARIA_128_CBC_SHA256"},
  300. {0xC03D, "TLS_RSA_WITH_ARIA_256_CBC_SHA384"},
  301. {0xC03E, "TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256"},
  302. {0xC03F, "TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384"},
  303. {0xC040, "TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256"},
  304. {0xC041, "TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384"},
  305. {0xC042, "TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256"},
  306. {0xC043, "TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384"},
  307. {0xC044, "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256"},
  308. {0xC045, "TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384"},
  309. {0xC046, "TLS_DH_anon_WITH_ARIA_128_CBC_SHA256"},
  310. {0xC047, "TLS_DH_anon_WITH_ARIA_256_CBC_SHA384"},
  311. {0xC048, "TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256"},
  312. {0xC049, "TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384"},
  313. {0xC04A, "TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256"},
  314. {0xC04B, "TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384"},
  315. {0xC04C, "TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256"},
  316. {0xC04D, "TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384"},
  317. {0xC04E, "TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256"},
  318. {0xC04F, "TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384"},
  319. {0xC050, "TLS_RSA_WITH_ARIA_128_GCM_SHA256"},
  320. {0xC051, "TLS_RSA_WITH_ARIA_256_GCM_SHA384"},
  321. {0xC052, "TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256"},
  322. {0xC053, "TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384"},
  323. {0xC054, "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256"},
  324. {0xC055, "TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384"},
  325. {0xC056, "TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256"},
  326. {0xC057, "TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384"},
  327. {0xC058, "TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256"},
  328. {0xC059, "TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384"},
  329. {0xC05A, "TLS_DH_anon_WITH_ARIA_128_GCM_SHA256"},
  330. {0xC05B, "TLS_DH_anon_WITH_ARIA_256_GCM_SHA384"},
  331. {0xC05C, "TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256"},
  332. {0xC05D, "TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384"},
  333. {0xC05E, "TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256"},
  334. {0xC05F, "TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384"},
  335. {0xC060, "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256"},
  336. {0xC061, "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384"},
  337. {0xC062, "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256"},
  338. {0xC063, "TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384"},
  339. {0xC064, "TLS_PSK_WITH_ARIA_128_CBC_SHA256"},
  340. {0xC065, "TLS_PSK_WITH_ARIA_256_CBC_SHA384"},
  341. {0xC066, "TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256"},
  342. {0xC067, "TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384"},
  343. {0xC068, "TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256"},
  344. {0xC069, "TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384"},
  345. {0xC06A, "TLS_PSK_WITH_ARIA_128_GCM_SHA256"},
  346. {0xC06B, "TLS_PSK_WITH_ARIA_256_GCM_SHA384"},
  347. {0xC06C, "TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256"},
  348. {0xC06D, "TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384"},
  349. {0xC06E, "TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256"},
  350. {0xC06F, "TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384"},
  351. {0xC070, "TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256"},
  352. {0xC071, "TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384"},
  353. {0xC072, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256"},
  354. {0xC073, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384"},
  355. {0xC074, "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256"},
  356. {0xC075, "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384"},
  357. {0xC076, "TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
  358. {0xC077, "TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384"},
  359. {0xC078, "TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256"},
  360. {0xC079, "TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384"},
  361. {0xC07A, "TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
  362. {0xC07B, "TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
  363. {0xC07C, "TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
  364. {0xC07D, "TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
  365. {0xC07E, "TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
  366. {0xC07F, "TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
  367. {0xC080, "TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256"},
  368. {0xC081, "TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384"},
  369. {0xC082, "TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256"},
  370. {0xC083, "TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384"},
  371. {0xC084, "TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256"},
  372. {0xC085, "TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384"},
  373. {0xC086, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256"},
  374. {0xC087, "TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384"},
  375. {0xC088, "TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256"},
  376. {0xC089, "TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384"},
  377. {0xC08A, "TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
  378. {0xC08B, "TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
  379. {0xC08C, "TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256"},
  380. {0xC08D, "TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384"},
  381. {0xC08E, "TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256"},
  382. {0xC08F, "TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384"},
  383. {0xC090, "TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256"},
  384. {0xC091, "TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384"},
  385. {0xC092, "TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256"},
  386. {0xC093, "TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384"},
  387. {0xC094, "TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
  388. {0xC095, "TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
  389. {0xC096, "TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
  390. {0xC097, "TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
  391. {0xC098, "TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
  392. {0xC099, "TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
  393. {0xC09A, "TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256"},
  394. {0xC09B, "TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384"},
  395. {0xC09C, "TLS_RSA_WITH_AES_128_CCM"},
  396. {0xC09D, "TLS_RSA_WITH_AES_256_CCM"},
  397. {0xC09E, "TLS_DHE_RSA_WITH_AES_128_CCM"},
  398. {0xC09F, "TLS_DHE_RSA_WITH_AES_256_CCM"},
  399. {0xC0A0, "TLS_RSA_WITH_AES_128_CCM_8"},
  400. {0xC0A1, "TLS_RSA_WITH_AES_256_CCM_8"},
  401. {0xC0A2, "TLS_DHE_RSA_WITH_AES_128_CCM_8"},
  402. {0xC0A3, "TLS_DHE_RSA_WITH_AES_256_CCM_8"},
  403. {0xC0A4, "TLS_PSK_WITH_AES_128_CCM"},
  404. {0xC0A5, "TLS_PSK_WITH_AES_256_CCM"},
  405. {0xC0A6, "TLS_DHE_PSK_WITH_AES_128_CCM"},
  406. {0xC0A7, "TLS_DHE_PSK_WITH_AES_256_CCM"},
  407. {0xC0A8, "TLS_PSK_WITH_AES_128_CCM_8"},
  408. {0xC0A9, "TLS_PSK_WITH_AES_256_CCM_8"},
  409. {0xC0AA, "TLS_PSK_DHE_WITH_AES_128_CCM_8"},
  410. {0xC0AB, "TLS_PSK_DHE_WITH_AES_256_CCM_8"},
  411. {0xC0AC, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM"},
  412. {0xC0AD, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM"},
  413. {0xC0AE, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8"},
  414. {0xC0AF, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8"},
  415. {0xC102, "IANA-GOST2012-GOST8912-GOST8912"},
  416. {0xCCA8, "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"},
  417. {0xCCA9, "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"},
  418. {0xCCAA, "TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256"},
  419. {0xCCAB, "TLS_PSK_WITH_CHACHA20_POLY1305_SHA256"},
  420. {0xCCAC, "TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256"},
  421. {0xCCAD, "TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256"},
  422. {0xCCAE, "TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256"},
  423. {0x1301, "TLS_AES_128_GCM_SHA256"},
  424. {0x1302, "TLS_AES_256_GCM_SHA384"},
  425. {0x1303, "TLS_CHACHA20_POLY1305_SHA256"},
  426. {0x1304, "TLS_AES_128_CCM_SHA256"},
  427. {0x1305, "TLS_AES_128_CCM_8_SHA256"},
  428. {0xFEFE, "SSL_RSA_FIPS_WITH_DES_CBC_SHA"},
  429. {0xFEFF, "SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA"},
  430. {0xFF85, "LEGACY-GOST2012-GOST8912-GOST8912"},
  431. {0xFF87, "GOST2012-NULL-GOST12"},
  432. {0xC100, "GOST2012-KUZNYECHIK-KUZNYECHIKOMAC"},
  433. {0xC101, "GOST2012-MAGMA-MAGMAOMAC"},
  434. {0xC102, "GOST2012-GOST8912-IANA"},
  435. };
  436. /* Compression methods */
  437. static const ssl_trace_tbl ssl_comp_tbl[] = {
  438. {0x0000, "No Compression"},
  439. {0x0001, "Zlib Compression"}
  440. };
  441. /* Extensions sorted by ascending id */
  442. static const ssl_trace_tbl ssl_exts_tbl[] = {
  443. {TLSEXT_TYPE_server_name, "server_name"},
  444. {TLSEXT_TYPE_max_fragment_length, "max_fragment_length"},
  445. {TLSEXT_TYPE_client_certificate_url, "client_certificate_url"},
  446. {TLSEXT_TYPE_trusted_ca_keys, "trusted_ca_keys"},
  447. {TLSEXT_TYPE_truncated_hmac, "truncated_hmac"},
  448. {TLSEXT_TYPE_status_request, "status_request"},
  449. {TLSEXT_TYPE_user_mapping, "user_mapping"},
  450. {TLSEXT_TYPE_client_authz, "client_authz"},
  451. {TLSEXT_TYPE_server_authz, "server_authz"},
  452. {TLSEXT_TYPE_cert_type, "cert_type"},
  453. {TLSEXT_TYPE_supported_groups, "supported_groups"},
  454. {TLSEXT_TYPE_ec_point_formats, "ec_point_formats"},
  455. {TLSEXT_TYPE_srp, "srp"},
  456. {TLSEXT_TYPE_signature_algorithms, "signature_algorithms"},
  457. {TLSEXT_TYPE_use_srtp, "use_srtp"},
  458. {TLSEXT_TYPE_application_layer_protocol_negotiation,
  459. "application_layer_protocol_negotiation"},
  460. {TLSEXT_TYPE_signed_certificate_timestamp, "signed_certificate_timestamps"},
  461. {TLSEXT_TYPE_padding, "padding"},
  462. {TLSEXT_TYPE_encrypt_then_mac, "encrypt_then_mac"},
  463. {TLSEXT_TYPE_extended_master_secret, "extended_master_secret"},
  464. {TLSEXT_TYPE_session_ticket, "session_ticket"},
  465. {TLSEXT_TYPE_psk, "psk"},
  466. {TLSEXT_TYPE_early_data, "early_data"},
  467. {TLSEXT_TYPE_supported_versions, "supported_versions"},
  468. {TLSEXT_TYPE_cookie, "cookie_ext"},
  469. {TLSEXT_TYPE_psk_kex_modes, "psk_key_exchange_modes"},
  470. {TLSEXT_TYPE_certificate_authorities, "certificate_authorities"},
  471. {TLSEXT_TYPE_post_handshake_auth, "post_handshake_auth"},
  472. {TLSEXT_TYPE_signature_algorithms_cert, "signature_algorithms_cert"},
  473. {TLSEXT_TYPE_key_share, "key_share"},
  474. {TLSEXT_TYPE_renegotiate, "renegotiate"},
  475. # ifndef OPENSSL_NO_NEXTPROTONEG
  476. {TLSEXT_TYPE_next_proto_neg, "next_proto_neg"},
  477. # endif
  478. };
  479. static const ssl_trace_tbl ssl_groups_tbl[] = {
  480. {1, "sect163k1 (K-163)"},
  481. {2, "sect163r1"},
  482. {3, "sect163r2 (B-163)"},
  483. {4, "sect193r1"},
  484. {5, "sect193r2"},
  485. {6, "sect233k1 (K-233)"},
  486. {7, "sect233r1 (B-233)"},
  487. {8, "sect239k1"},
  488. {9, "sect283k1 (K-283)"},
  489. {10, "sect283r1 (B-283)"},
  490. {11, "sect409k1 (K-409)"},
  491. {12, "sect409r1 (B-409)"},
  492. {13, "sect571k1 (K-571)"},
  493. {14, "sect571r1 (B-571)"},
  494. {15, "secp160k1"},
  495. {16, "secp160r1"},
  496. {17, "secp160r2"},
  497. {18, "secp192k1"},
  498. {19, "secp192r1 (P-192)"},
  499. {20, "secp224k1"},
  500. {21, "secp224r1 (P-224)"},
  501. {22, "secp256k1"},
  502. {23, "secp256r1 (P-256)"},
  503. {24, "secp384r1 (P-384)"},
  504. {25, "secp521r1 (P-521)"},
  505. {26, "brainpoolP256r1"},
  506. {27, "brainpoolP384r1"},
  507. {28, "brainpoolP512r1"},
  508. {29, "ecdh_x25519"},
  509. {30, "ecdh_x448"},
  510. {34, "GC256A"},
  511. {35, "GC256B"},
  512. {36, "GC256C"},
  513. {37, "GC256D"},
  514. {38, "GC512A"},
  515. {39, "GC512B"},
  516. {40, "GC512C"},
  517. {256, "ffdhe2048"},
  518. {257, "ffdhe3072"},
  519. {258, "ffdhe4096"},
  520. {259, "ffdhe6144"},
  521. {260, "ffdhe8192"},
  522. {0xFF01, "arbitrary_explicit_prime_curves"},
  523. {0xFF02, "arbitrary_explicit_char2_curves"}
  524. };
  525. static const ssl_trace_tbl ssl_point_tbl[] = {
  526. {0, "uncompressed"},
  527. {1, "ansiX962_compressed_prime"},
  528. {2, "ansiX962_compressed_char2"}
  529. };
  530. static const ssl_trace_tbl ssl_mfl_tbl[] = {
  531. {0, "disabled"},
  532. {1, "max_fragment_length := 2^9 (512 bytes)"},
  533. {2, "max_fragment_length := 2^10 (1024 bytes)"},
  534. {3, "max_fragment_length := 2^11 (2048 bytes)"},
  535. {4, "max_fragment_length := 2^12 (4096 bytes)"}
  536. };
  537. static const ssl_trace_tbl ssl_sigalg_tbl[] = {
  538. {TLSEXT_SIGALG_ecdsa_secp256r1_sha256, "ecdsa_secp256r1_sha256"},
  539. {TLSEXT_SIGALG_ecdsa_secp384r1_sha384, "ecdsa_secp384r1_sha384"},
  540. {TLSEXT_SIGALG_ecdsa_secp521r1_sha512, "ecdsa_secp521r1_sha512"},
  541. {TLSEXT_SIGALG_ecdsa_sha224, "ecdsa_sha224"},
  542. {TLSEXT_SIGALG_ed25519, "ed25519"},
  543. {TLSEXT_SIGALG_ed448, "ed448"},
  544. {TLSEXT_SIGALG_ecdsa_sha1, "ecdsa_sha1"},
  545. {TLSEXT_SIGALG_rsa_pss_rsae_sha256, "rsa_pss_rsae_sha256"},
  546. {TLSEXT_SIGALG_rsa_pss_rsae_sha384, "rsa_pss_rsae_sha384"},
  547. {TLSEXT_SIGALG_rsa_pss_rsae_sha512, "rsa_pss_rsae_sha512"},
  548. {TLSEXT_SIGALG_rsa_pss_pss_sha256, "rsa_pss_pss_sha256"},
  549. {TLSEXT_SIGALG_rsa_pss_pss_sha384, "rsa_pss_pss_sha384"},
  550. {TLSEXT_SIGALG_rsa_pss_pss_sha512, "rsa_pss_pss_sha512"},
  551. {TLSEXT_SIGALG_rsa_pkcs1_sha256, "rsa_pkcs1_sha256"},
  552. {TLSEXT_SIGALG_rsa_pkcs1_sha384, "rsa_pkcs1_sha384"},
  553. {TLSEXT_SIGALG_rsa_pkcs1_sha512, "rsa_pkcs1_sha512"},
  554. {TLSEXT_SIGALG_rsa_pkcs1_sha224, "rsa_pkcs1_sha224"},
  555. {TLSEXT_SIGALG_rsa_pkcs1_sha1, "rsa_pkcs1_sha1"},
  556. {TLSEXT_SIGALG_dsa_sha256, "dsa_sha256"},
  557. {TLSEXT_SIGALG_dsa_sha384, "dsa_sha384"},
  558. {TLSEXT_SIGALG_dsa_sha512, "dsa_sha512"},
  559. {TLSEXT_SIGALG_dsa_sha224, "dsa_sha224"},
  560. {TLSEXT_SIGALG_dsa_sha1, "dsa_sha1"},
  561. {TLSEXT_SIGALG_gostr34102012_256_intrinsic, "gost2012_256"},
  562. {TLSEXT_SIGALG_gostr34102012_512_intrinsic, "gost2012_512"},
  563. {TLSEXT_SIGALG_gostr34102012_256_gostr34112012_256, "gost2012_256"},
  564. {TLSEXT_SIGALG_gostr34102012_512_gostr34112012_512, "gost2012_512"},
  565. {TLSEXT_SIGALG_gostr34102001_gostr3411, "gost2001_gost94"},
  566. };
  567. static const ssl_trace_tbl ssl_ctype_tbl[] = {
  568. {1, "rsa_sign"},
  569. {2, "dss_sign"},
  570. {3, "rsa_fixed_dh"},
  571. {4, "dss_fixed_dh"},
  572. {5, "rsa_ephemeral_dh"},
  573. {6, "dss_ephemeral_dh"},
  574. {20, "fortezza_dms"},
  575. {64, "ecdsa_sign"},
  576. {65, "rsa_fixed_ecdh"},
  577. {66, "ecdsa_fixed_ecdh"},
  578. {67, "gost_sign256"},
  579. {68, "gost_sign512"},
  580. };
  581. static const ssl_trace_tbl ssl_psk_kex_modes_tbl[] = {
  582. {TLSEXT_KEX_MODE_KE, "psk_ke"},
  583. {TLSEXT_KEX_MODE_KE_DHE, "psk_dhe_ke"}
  584. };
  585. static const ssl_trace_tbl ssl_key_update_tbl[] = {
  586. {SSL_KEY_UPDATE_NOT_REQUESTED, "update_not_requested"},
  587. {SSL_KEY_UPDATE_REQUESTED, "update_requested"}
  588. };
  589. static void ssl_print_hex(BIO *bio, int indent, const char *name,
  590. const unsigned char *msg, size_t msglen)
  591. {
  592. size_t i;
  593. BIO_indent(bio, indent, 80);
  594. BIO_printf(bio, "%s (len=%d): ", name, (int)msglen);
  595. for (i = 0; i < msglen; i++)
  596. BIO_printf(bio, "%02X", msg[i]);
  597. BIO_puts(bio, "\n");
  598. }
  599. static int ssl_print_hexbuf(BIO *bio, int indent, const char *name, size_t nlen,
  600. const unsigned char **pmsg, size_t *pmsglen)
  601. {
  602. size_t blen;
  603. const unsigned char *p = *pmsg;
  604. if (*pmsglen < nlen)
  605. return 0;
  606. blen = p[0];
  607. if (nlen > 1)
  608. blen = (blen << 8) | p[1];
  609. if (*pmsglen < nlen + blen)
  610. return 0;
  611. p += nlen;
  612. ssl_print_hex(bio, indent, name, p, blen);
  613. *pmsg += blen + nlen;
  614. *pmsglen -= blen + nlen;
  615. return 1;
  616. }
  617. static int ssl_print_version(BIO *bio, int indent, const char *name,
  618. const unsigned char **pmsg, size_t *pmsglen,
  619. unsigned int *version)
  620. {
  621. int vers;
  622. if (*pmsglen < 2)
  623. return 0;
  624. vers = ((*pmsg)[0] << 8) | (*pmsg)[1];
  625. if (version != NULL)
  626. *version = vers;
  627. BIO_indent(bio, indent, 80);
  628. BIO_printf(bio, "%s=0x%x (%s)\n",
  629. name, vers, ssl_trace_str(vers, ssl_version_tbl));
  630. *pmsg += 2;
  631. *pmsglen -= 2;
  632. return 1;
  633. }
  634. static int ssl_print_random(BIO *bio, int indent,
  635. const unsigned char **pmsg, size_t *pmsglen)
  636. {
  637. unsigned int tm;
  638. const unsigned char *p = *pmsg;
  639. if (*pmsglen < 32)
  640. return 0;
  641. tm = ((unsigned int)p[0] << 24)
  642. | ((unsigned int)p[1] << 16)
  643. | ((unsigned int)p[2] << 8)
  644. | (unsigned int)p[3];
  645. p += 4;
  646. BIO_indent(bio, indent, 80);
  647. BIO_puts(bio, "Random:\n");
  648. BIO_indent(bio, indent + 2, 80);
  649. BIO_printf(bio, "gmt_unix_time=0x%08X\n", tm);
  650. ssl_print_hex(bio, indent + 2, "random_bytes", p, 28);
  651. *pmsg += 32;
  652. *pmsglen -= 32;
  653. return 1;
  654. }
  655. static int ssl_print_signature(BIO *bio, int indent, const SSL *ssl,
  656. const unsigned char **pmsg, size_t *pmsglen)
  657. {
  658. if (*pmsglen < 2)
  659. return 0;
  660. if (SSL_USE_SIGALGS(ssl)) {
  661. const unsigned char *p = *pmsg;
  662. unsigned int sigalg = (p[0] << 8) | p[1];
  663. BIO_indent(bio, indent, 80);
  664. BIO_printf(bio, "Signature Algorithm: %s (0x%04x)\n",
  665. ssl_trace_str(sigalg, ssl_sigalg_tbl), sigalg);
  666. *pmsg += 2;
  667. *pmsglen -= 2;
  668. }
  669. return ssl_print_hexbuf(bio, indent, "Signature", 2, pmsg, pmsglen);
  670. }
  671. static int ssl_print_extension(BIO *bio, int indent, int server,
  672. unsigned char mt, int extype,
  673. const unsigned char *ext, size_t extlen)
  674. {
  675. size_t xlen, share_len;
  676. unsigned int sigalg;
  677. uint32_t max_early_data;
  678. BIO_indent(bio, indent, 80);
  679. BIO_printf(bio, "extension_type=%s(%d), length=%d\n",
  680. ssl_trace_str(extype, ssl_exts_tbl), extype, (int)extlen);
  681. switch (extype) {
  682. case TLSEXT_TYPE_max_fragment_length:
  683. if (extlen < 1)
  684. return 0;
  685. xlen = extlen;
  686. return ssl_trace_list(bio, indent + 2, ext, xlen, 1, ssl_mfl_tbl);
  687. case TLSEXT_TYPE_ec_point_formats:
  688. if (extlen < 1)
  689. return 0;
  690. xlen = ext[0];
  691. if (extlen != xlen + 1)
  692. return 0;
  693. return ssl_trace_list(bio, indent + 2, ext + 1, xlen, 1, ssl_point_tbl);
  694. case TLSEXT_TYPE_supported_groups:
  695. if (extlen < 2)
  696. return 0;
  697. xlen = (ext[0] << 8) | ext[1];
  698. if (extlen != xlen + 2)
  699. return 0;
  700. return ssl_trace_list(bio, indent + 2, ext + 2, xlen, 2, ssl_groups_tbl);
  701. case TLSEXT_TYPE_application_layer_protocol_negotiation:
  702. if (extlen < 2)
  703. return 0;
  704. xlen = (ext[0] << 8) | ext[1];
  705. if (extlen != xlen + 2)
  706. return 0;
  707. ext += 2;
  708. while (xlen > 0) {
  709. size_t plen = *ext++;
  710. if (plen + 1 > xlen)
  711. return 0;
  712. BIO_indent(bio, indent + 2, 80);
  713. BIO_write(bio, ext, plen);
  714. BIO_puts(bio, "\n");
  715. ext += plen;
  716. xlen -= plen + 1;
  717. }
  718. return 1;
  719. case TLSEXT_TYPE_signature_algorithms:
  720. if (extlen < 2)
  721. return 0;
  722. xlen = (ext[0] << 8) | ext[1];
  723. if (extlen != xlen + 2)
  724. return 0;
  725. if (xlen & 1)
  726. return 0;
  727. ext += 2;
  728. while (xlen > 0) {
  729. BIO_indent(bio, indent + 2, 80);
  730. sigalg = (ext[0] << 8) | ext[1];
  731. BIO_printf(bio, "%s (0x%04x)\n",
  732. ssl_trace_str(sigalg, ssl_sigalg_tbl), sigalg);
  733. xlen -= 2;
  734. ext += 2;
  735. }
  736. break;
  737. case TLSEXT_TYPE_renegotiate:
  738. if (extlen < 1)
  739. return 0;
  740. xlen = ext[0];
  741. if (xlen + 1 != extlen)
  742. return 0;
  743. ext++;
  744. if (xlen) {
  745. if (server) {
  746. if (xlen & 1)
  747. return 0;
  748. xlen >>= 1;
  749. }
  750. ssl_print_hex(bio, indent + 4, "client_verify_data", ext, xlen);
  751. if (server) {
  752. ext += xlen;
  753. ssl_print_hex(bio, indent + 4, "server_verify_data", ext, xlen);
  754. }
  755. } else {
  756. BIO_indent(bio, indent + 4, 80);
  757. BIO_puts(bio, "<EMPTY>\n");
  758. }
  759. break;
  760. case TLSEXT_TYPE_session_ticket:
  761. if (extlen != 0)
  762. ssl_print_hex(bio, indent + 4, "ticket", ext, extlen);
  763. break;
  764. case TLSEXT_TYPE_key_share:
  765. if (server && extlen == 2) {
  766. int group_id;
  767. /* We assume this is an HRR, otherwise this is an invalid key_share */
  768. group_id = (ext[0] << 8) | ext[1];
  769. BIO_indent(bio, indent + 4, 80);
  770. BIO_printf(bio, "NamedGroup: %s (%d)\n",
  771. ssl_trace_str(group_id, ssl_groups_tbl), group_id);
  772. break;
  773. }
  774. if (extlen < 2)
  775. return 0;
  776. if (server) {
  777. xlen = extlen;
  778. } else {
  779. xlen = (ext[0] << 8) | ext[1];
  780. if (extlen != xlen + 2)
  781. return 0;
  782. ext += 2;
  783. }
  784. for (; xlen > 0; ext += share_len, xlen -= share_len) {
  785. int group_id;
  786. if (xlen < 4)
  787. return 0;
  788. group_id = (ext[0] << 8) | ext[1];
  789. share_len = (ext[2] << 8) | ext[3];
  790. ext += 4;
  791. xlen -= 4;
  792. if (xlen < share_len)
  793. return 0;
  794. BIO_indent(bio, indent + 4, 80);
  795. BIO_printf(bio, "NamedGroup: %s (%d)\n",
  796. ssl_trace_str(group_id, ssl_groups_tbl), group_id);
  797. ssl_print_hex(bio, indent + 4, "key_exchange: ", ext, share_len);
  798. }
  799. break;
  800. case TLSEXT_TYPE_supported_versions:
  801. if (server) {
  802. int version;
  803. if (extlen != 2)
  804. return 0;
  805. version = (ext[0] << 8) | ext[1];
  806. BIO_indent(bio, indent + 4, 80);
  807. BIO_printf(bio, "%s (%d)\n",
  808. ssl_trace_str(version, ssl_version_tbl), version);
  809. break;
  810. }
  811. if (extlen < 1)
  812. return 0;
  813. xlen = ext[0];
  814. if (extlen != xlen + 1)
  815. return 0;
  816. return ssl_trace_list(bio, indent + 2, ext + 1, xlen, 2,
  817. ssl_version_tbl);
  818. case TLSEXT_TYPE_psk_kex_modes:
  819. if (extlen < 1)
  820. return 0;
  821. xlen = ext[0];
  822. if (extlen != xlen + 1)
  823. return 0;
  824. return ssl_trace_list(bio, indent + 2, ext + 1, xlen, 1,
  825. ssl_psk_kex_modes_tbl);
  826. case TLSEXT_TYPE_early_data:
  827. if (mt != SSL3_MT_NEWSESSION_TICKET)
  828. break;
  829. if (extlen != 4)
  830. return 0;
  831. max_early_data = ((unsigned int)ext[0] << 24)
  832. | ((unsigned int)ext[1] << 16)
  833. | ((unsigned int)ext[2] << 8)
  834. | (unsigned int)ext[3];
  835. BIO_indent(bio, indent + 2, 80);
  836. BIO_printf(bio, "max_early_data=%u\n", max_early_data);
  837. break;
  838. default:
  839. BIO_dump_indent(bio, (const char *)ext, extlen, indent + 2);
  840. }
  841. return 1;
  842. }
  843. static int ssl_print_extensions(BIO *bio, int indent, int server,
  844. unsigned char mt, const unsigned char **msgin,
  845. size_t *msginlen)
  846. {
  847. size_t extslen, msglen = *msginlen;
  848. const unsigned char *msg = *msgin;
  849. BIO_indent(bio, indent, 80);
  850. if (msglen == 0) {
  851. BIO_puts(bio, "No extensions\n");
  852. return 1;
  853. }
  854. if (msglen < 2)
  855. return 0;
  856. extslen = (msg[0] << 8) | msg[1];
  857. msglen -= 2;
  858. msg += 2;
  859. if (extslen == 0) {
  860. BIO_puts(bio, "No extensions\n");
  861. *msgin = msg;
  862. *msginlen = msglen;
  863. return 1;
  864. }
  865. if (extslen > msglen)
  866. return 0;
  867. BIO_printf(bio, "extensions, length = %d\n", (int)extslen);
  868. msglen -= extslen;
  869. while (extslen > 0) {
  870. int extype;
  871. size_t extlen;
  872. if (extslen < 4)
  873. return 0;
  874. extype = (msg[0] << 8) | msg[1];
  875. extlen = (msg[2] << 8) | msg[3];
  876. if (extslen < extlen + 4) {
  877. BIO_printf(bio, "extensions, extype = %d, extlen = %d\n", extype,
  878. (int)extlen);
  879. BIO_dump_indent(bio, (const char *)msg, extslen, indent + 2);
  880. return 0;
  881. }
  882. msg += 4;
  883. if (!ssl_print_extension(bio, indent + 2, server, mt, extype, msg,
  884. extlen))
  885. return 0;
  886. msg += extlen;
  887. extslen -= extlen + 4;
  888. }
  889. *msgin = msg;
  890. *msginlen = msglen;
  891. return 1;
  892. }
  893. static int ssl_print_client_hello(BIO *bio, const SSL *ssl, int indent,
  894. const unsigned char *msg, size_t msglen)
  895. {
  896. size_t len;
  897. unsigned int cs;
  898. if (!ssl_print_version(bio, indent, "client_version", &msg, &msglen, NULL))
  899. return 0;
  900. if (!ssl_print_random(bio, indent, &msg, &msglen))
  901. return 0;
  902. if (!ssl_print_hexbuf(bio, indent, "session_id", 1, &msg, &msglen))
  903. return 0;
  904. if (SSL_IS_DTLS(ssl)) {
  905. if (!ssl_print_hexbuf(bio, indent, "cookie", 1, &msg, &msglen))
  906. return 0;
  907. }
  908. if (msglen < 2)
  909. return 0;
  910. len = (msg[0] << 8) | msg[1];
  911. msg += 2;
  912. msglen -= 2;
  913. BIO_indent(bio, indent, 80);
  914. BIO_printf(bio, "cipher_suites (len=%d)\n", (int)len);
  915. if (msglen < len || len & 1)
  916. return 0;
  917. while (len > 0) {
  918. cs = (msg[0] << 8) | msg[1];
  919. BIO_indent(bio, indent + 2, 80);
  920. BIO_printf(bio, "{0x%02X, 0x%02X} %s\n",
  921. msg[0], msg[1], ssl_trace_str(cs, ssl_ciphers_tbl));
  922. msg += 2;
  923. msglen -= 2;
  924. len -= 2;
  925. }
  926. if (msglen < 1)
  927. return 0;
  928. len = msg[0];
  929. msg++;
  930. msglen--;
  931. if (msglen < len)
  932. return 0;
  933. BIO_indent(bio, indent, 80);
  934. BIO_printf(bio, "compression_methods (len=%d)\n", (int)len);
  935. while (len > 0) {
  936. BIO_indent(bio, indent + 2, 80);
  937. BIO_printf(bio, "%s (0x%02X)\n",
  938. ssl_trace_str(msg[0], ssl_comp_tbl), msg[0]);
  939. msg++;
  940. msglen--;
  941. len--;
  942. }
  943. if (!ssl_print_extensions(bio, indent, 0, SSL3_MT_CLIENT_HELLO, &msg,
  944. &msglen))
  945. return 0;
  946. return 1;
  947. }
  948. static int dtls_print_hello_vfyrequest(BIO *bio, int indent,
  949. const unsigned char *msg, size_t msglen)
  950. {
  951. if (!ssl_print_version(bio, indent, "server_version", &msg, &msglen, NULL))
  952. return 0;
  953. if (!ssl_print_hexbuf(bio, indent, "cookie", 1, &msg, &msglen))
  954. return 0;
  955. return 1;
  956. }
  957. static int ssl_print_server_hello(BIO *bio, int indent,
  958. const unsigned char *msg, size_t msglen)
  959. {
  960. unsigned int cs;
  961. unsigned int vers;
  962. if (!ssl_print_version(bio, indent, "server_version", &msg, &msglen, &vers))
  963. return 0;
  964. if (!ssl_print_random(bio, indent, &msg, &msglen))
  965. return 0;
  966. if (vers != TLS1_3_VERSION
  967. && !ssl_print_hexbuf(bio, indent, "session_id", 1, &msg, &msglen))
  968. return 0;
  969. if (msglen < 2)
  970. return 0;
  971. cs = (msg[0] << 8) | msg[1];
  972. BIO_indent(bio, indent, 80);
  973. BIO_printf(bio, "cipher_suite {0x%02X, 0x%02X} %s\n",
  974. msg[0], msg[1], ssl_trace_str(cs, ssl_ciphers_tbl));
  975. msg += 2;
  976. msglen -= 2;
  977. if (vers != TLS1_3_VERSION) {
  978. if (msglen < 1)
  979. return 0;
  980. BIO_indent(bio, indent, 80);
  981. BIO_printf(bio, "compression_method: %s (0x%02X)\n",
  982. ssl_trace_str(msg[0], ssl_comp_tbl), msg[0]);
  983. msg++;
  984. msglen--;
  985. }
  986. if (!ssl_print_extensions(bio, indent, 1, SSL3_MT_SERVER_HELLO, &msg,
  987. &msglen))
  988. return 0;
  989. return 1;
  990. }
  991. static int ssl_get_keyex(const char **pname, const SSL *ssl)
  992. {
  993. unsigned long alg_k = ssl->s3.tmp.new_cipher->algorithm_mkey;
  994. if (alg_k & SSL_kRSA) {
  995. *pname = "rsa";
  996. return SSL_kRSA;
  997. }
  998. if (alg_k & SSL_kDHE) {
  999. *pname = "DHE";
  1000. return SSL_kDHE;
  1001. }
  1002. if (alg_k & SSL_kECDHE) {
  1003. *pname = "ECDHE";
  1004. return SSL_kECDHE;
  1005. }
  1006. if (alg_k & SSL_kPSK) {
  1007. *pname = "PSK";
  1008. return SSL_kPSK;
  1009. }
  1010. if (alg_k & SSL_kRSAPSK) {
  1011. *pname = "RSAPSK";
  1012. return SSL_kRSAPSK;
  1013. }
  1014. if (alg_k & SSL_kDHEPSK) {
  1015. *pname = "DHEPSK";
  1016. return SSL_kDHEPSK;
  1017. }
  1018. if (alg_k & SSL_kECDHEPSK) {
  1019. *pname = "ECDHEPSK";
  1020. return SSL_kECDHEPSK;
  1021. }
  1022. if (alg_k & SSL_kSRP) {
  1023. *pname = "SRP";
  1024. return SSL_kSRP;
  1025. }
  1026. if (alg_k & SSL_kGOST) {
  1027. *pname = "GOST";
  1028. return SSL_kGOST;
  1029. }
  1030. if (alg_k & SSL_kGOST18) {
  1031. *pname = "GOST18";
  1032. return SSL_kGOST18;
  1033. }
  1034. *pname = "UNKNOWN";
  1035. return 0;
  1036. }
  1037. static int ssl_print_client_keyex(BIO *bio, int indent, const SSL *ssl,
  1038. const unsigned char *msg, size_t msglen)
  1039. {
  1040. const char *algname;
  1041. int id = ssl_get_keyex(&algname, ssl);
  1042. BIO_indent(bio, indent, 80);
  1043. BIO_printf(bio, "KeyExchangeAlgorithm=%s\n", algname);
  1044. if (id & SSL_PSK) {
  1045. if (!ssl_print_hexbuf(bio, indent + 2,
  1046. "psk_identity", 2, &msg, &msglen))
  1047. return 0;
  1048. }
  1049. switch (id) {
  1050. case SSL_kRSA:
  1051. case SSL_kRSAPSK:
  1052. if (TLS1_get_version(ssl) == SSL3_VERSION) {
  1053. ssl_print_hex(bio, indent + 2,
  1054. "EncryptedPreMasterSecret", msg, msglen);
  1055. } else {
  1056. if (!ssl_print_hexbuf(bio, indent + 2,
  1057. "EncryptedPreMasterSecret", 2, &msg, &msglen))
  1058. return 0;
  1059. }
  1060. break;
  1061. case SSL_kDHE:
  1062. case SSL_kDHEPSK:
  1063. if (!ssl_print_hexbuf(bio, indent + 2, "dh_Yc", 2, &msg, &msglen))
  1064. return 0;
  1065. break;
  1066. case SSL_kECDHE:
  1067. case SSL_kECDHEPSK:
  1068. if (!ssl_print_hexbuf(bio, indent + 2, "ecdh_Yc", 1, &msg, &msglen))
  1069. return 0;
  1070. break;
  1071. case SSL_kGOST:
  1072. ssl_print_hex(bio, indent + 2, "GostKeyTransportBlob", msg, msglen);
  1073. msglen = 0;
  1074. break;
  1075. case SSL_kGOST18:
  1076. ssl_print_hex(bio, indent + 2,
  1077. "GOST-wrapped PreMasterSecret", msg, msglen);
  1078. msglen = 0;
  1079. break;
  1080. }
  1081. return !msglen;
  1082. }
  1083. static int ssl_print_server_keyex(BIO *bio, int indent, const SSL *ssl,
  1084. const unsigned char *msg, size_t msglen)
  1085. {
  1086. const char *algname;
  1087. int id = ssl_get_keyex(&algname, ssl);
  1088. BIO_indent(bio, indent, 80);
  1089. BIO_printf(bio, "KeyExchangeAlgorithm=%s\n", algname);
  1090. if (id & SSL_PSK) {
  1091. if (!ssl_print_hexbuf(bio, indent + 2,
  1092. "psk_identity_hint", 2, &msg, &msglen))
  1093. return 0;
  1094. }
  1095. switch (id) {
  1096. case SSL_kRSA:
  1097. if (!ssl_print_hexbuf(bio, indent + 2, "rsa_modulus", 2, &msg, &msglen))
  1098. return 0;
  1099. if (!ssl_print_hexbuf(bio, indent + 2, "rsa_exponent", 2,
  1100. &msg, &msglen))
  1101. return 0;
  1102. break;
  1103. case SSL_kDHE:
  1104. case SSL_kDHEPSK:
  1105. if (!ssl_print_hexbuf(bio, indent + 2, "dh_p", 2, &msg, &msglen))
  1106. return 0;
  1107. if (!ssl_print_hexbuf(bio, indent + 2, "dh_g", 2, &msg, &msglen))
  1108. return 0;
  1109. if (!ssl_print_hexbuf(bio, indent + 2, "dh_Ys", 2, &msg, &msglen))
  1110. return 0;
  1111. break;
  1112. # ifndef OPENSSL_NO_EC
  1113. case SSL_kECDHE:
  1114. case SSL_kECDHEPSK:
  1115. if (msglen < 1)
  1116. return 0;
  1117. BIO_indent(bio, indent + 2, 80);
  1118. if (msg[0] == EXPLICIT_PRIME_CURVE_TYPE)
  1119. BIO_puts(bio, "explicit_prime\n");
  1120. else if (msg[0] == EXPLICIT_CHAR2_CURVE_TYPE)
  1121. BIO_puts(bio, "explicit_char2\n");
  1122. else if (msg[0] == NAMED_CURVE_TYPE) {
  1123. int curve;
  1124. if (msglen < 3)
  1125. return 0;
  1126. curve = (msg[1] << 8) | msg[2];
  1127. BIO_printf(bio, "named_curve: %s (%d)\n",
  1128. ssl_trace_str(curve, ssl_groups_tbl), curve);
  1129. msg += 3;
  1130. msglen -= 3;
  1131. if (!ssl_print_hexbuf(bio, indent + 2, "point", 1, &msg, &msglen))
  1132. return 0;
  1133. } else {
  1134. BIO_printf(bio, "UNKNOWN CURVE PARAMETER TYPE %d\n", msg[0]);
  1135. return 0;
  1136. }
  1137. break;
  1138. # endif
  1139. case SSL_kPSK:
  1140. case SSL_kRSAPSK:
  1141. break;
  1142. }
  1143. if (!(id & SSL_PSK))
  1144. ssl_print_signature(bio, indent, ssl, &msg, &msglen);
  1145. return !msglen;
  1146. }
  1147. static int ssl_print_certificate(BIO *bio, int indent,
  1148. const unsigned char **pmsg, size_t *pmsglen)
  1149. {
  1150. size_t msglen = *pmsglen;
  1151. size_t clen;
  1152. X509 *x;
  1153. const unsigned char *p = *pmsg, *q;
  1154. if (msglen < 3)
  1155. return 0;
  1156. clen = (p[0] << 16) | (p[1] << 8) | p[2];
  1157. if (msglen < clen + 3)
  1158. return 0;
  1159. q = p + 3;
  1160. BIO_indent(bio, indent, 80);
  1161. BIO_printf(bio, "ASN.1Cert, length=%d", (int)clen);
  1162. x = d2i_X509(NULL, &q, clen);
  1163. if (!x)
  1164. BIO_puts(bio, "<UNPARSEABLE CERTIFICATE>\n");
  1165. else {
  1166. BIO_puts(bio, "\n------details-----\n");
  1167. X509_print_ex(bio, x, XN_FLAG_ONELINE, 0);
  1168. PEM_write_bio_X509(bio, x);
  1169. /* Print certificate stuff */
  1170. BIO_puts(bio, "------------------\n");
  1171. X509_free(x);
  1172. }
  1173. if (q != p + 3 + clen) {
  1174. BIO_puts(bio, "<TRAILING GARBAGE AFTER CERTIFICATE>\n");
  1175. }
  1176. *pmsg += clen + 3;
  1177. *pmsglen -= clen + 3;
  1178. return 1;
  1179. }
  1180. static int ssl_print_certificates(BIO *bio, const SSL *ssl, int server,
  1181. int indent, const unsigned char *msg,
  1182. size_t msglen)
  1183. {
  1184. size_t clen;
  1185. if (SSL_IS_TLS13(ssl)
  1186. && !ssl_print_hexbuf(bio, indent, "context", 1, &msg, &msglen))
  1187. return 0;
  1188. if (msglen < 3)
  1189. return 0;
  1190. clen = (msg[0] << 16) | (msg[1] << 8) | msg[2];
  1191. if (msglen != clen + 3)
  1192. return 0;
  1193. msg += 3;
  1194. BIO_indent(bio, indent, 80);
  1195. BIO_printf(bio, "certificate_list, length=%d\n", (int)clen);
  1196. while (clen > 0) {
  1197. if (!ssl_print_certificate(bio, indent + 2, &msg, &clen))
  1198. return 0;
  1199. if (SSL_IS_TLS13(ssl)
  1200. && !ssl_print_extensions(bio, indent + 2, server,
  1201. SSL3_MT_CERTIFICATE, &msg, &clen))
  1202. return 0;
  1203. }
  1204. return 1;
  1205. }
  1206. static int ssl_print_cert_request(BIO *bio, int indent, const SSL *ssl,
  1207. const unsigned char *msg, size_t msglen)
  1208. {
  1209. size_t xlen;
  1210. unsigned int sigalg;
  1211. if (SSL_IS_TLS13(ssl)) {
  1212. if (!ssl_print_hexbuf(bio, indent, "request_context", 1, &msg, &msglen))
  1213. return 0;
  1214. if (!ssl_print_extensions(bio, indent, 1,
  1215. SSL3_MT_CERTIFICATE_REQUEST, &msg, &msglen))
  1216. return 0;
  1217. return 1;
  1218. } else {
  1219. if (msglen < 1)
  1220. return 0;
  1221. xlen = msg[0];
  1222. if (msglen < xlen + 1)
  1223. return 0;
  1224. msg++;
  1225. BIO_indent(bio, indent, 80);
  1226. BIO_printf(bio, "certificate_types (len=%d)\n", (int)xlen);
  1227. if (!ssl_trace_list(bio, indent + 2, msg, xlen, 1, ssl_ctype_tbl))
  1228. return 0;
  1229. msg += xlen;
  1230. msglen -= xlen + 1;
  1231. }
  1232. if (SSL_USE_SIGALGS(ssl)) {
  1233. if (msglen < 2)
  1234. return 0;
  1235. xlen = (msg[0] << 8) | msg[1];
  1236. if (msglen < xlen + 2 || (xlen & 1))
  1237. return 0;
  1238. msg += 2;
  1239. msglen -= xlen + 2;
  1240. BIO_indent(bio, indent, 80);
  1241. BIO_printf(bio, "signature_algorithms (len=%d)\n", (int)xlen);
  1242. while (xlen > 0) {
  1243. BIO_indent(bio, indent + 2, 80);
  1244. sigalg = (msg[0] << 8) | msg[1];
  1245. BIO_printf(bio, "%s (0x%04x)\n",
  1246. ssl_trace_str(sigalg, ssl_sigalg_tbl), sigalg);
  1247. xlen -= 2;
  1248. msg += 2;
  1249. }
  1250. msg += xlen;
  1251. }
  1252. if (msglen < 2)
  1253. return 0;
  1254. xlen = (msg[0] << 8) | msg[1];
  1255. BIO_indent(bio, indent, 80);
  1256. if (msglen < xlen + 2)
  1257. return 0;
  1258. msg += 2;
  1259. msglen -= 2 + xlen;
  1260. BIO_printf(bio, "certificate_authorities (len=%d)\n", (int)xlen);
  1261. while (xlen > 0) {
  1262. size_t dlen;
  1263. X509_NAME *nm;
  1264. const unsigned char *p;
  1265. if (xlen < 2)
  1266. return 0;
  1267. dlen = (msg[0] << 8) | msg[1];
  1268. if (xlen < dlen + 2)
  1269. return 0;
  1270. msg += 2;
  1271. BIO_indent(bio, indent + 2, 80);
  1272. BIO_printf(bio, "DistinguishedName (len=%d): ", (int)dlen);
  1273. p = msg;
  1274. nm = d2i_X509_NAME(NULL, &p, dlen);
  1275. if (!nm) {
  1276. BIO_puts(bio, "<UNPARSEABLE DN>\n");
  1277. } else {
  1278. X509_NAME_print_ex(bio, nm, 0, XN_FLAG_ONELINE);
  1279. BIO_puts(bio, "\n");
  1280. X509_NAME_free(nm);
  1281. }
  1282. xlen -= dlen + 2;
  1283. msg += dlen;
  1284. }
  1285. if (SSL_IS_TLS13(ssl)) {
  1286. if (!ssl_print_hexbuf(bio, indent, "request_extensions", 2,
  1287. &msg, &msglen))
  1288. return 0;
  1289. }
  1290. return msglen == 0;
  1291. }
  1292. static int ssl_print_ticket(BIO *bio, int indent, const SSL *ssl,
  1293. const unsigned char *msg, size_t msglen)
  1294. {
  1295. unsigned int tick_life;
  1296. if (msglen == 0) {
  1297. BIO_indent(bio, indent + 2, 80);
  1298. BIO_puts(bio, "No Ticket\n");
  1299. return 1;
  1300. }
  1301. if (msglen < 4)
  1302. return 0;
  1303. tick_life = ((unsigned int)msg[0] << 24)
  1304. | ((unsigned int)msg[1] << 16)
  1305. | ((unsigned int)msg[2] << 8)
  1306. | (unsigned int)msg[3];
  1307. msglen -= 4;
  1308. msg += 4;
  1309. BIO_indent(bio, indent + 2, 80);
  1310. BIO_printf(bio, "ticket_lifetime_hint=%u\n", tick_life);
  1311. if (SSL_IS_TLS13(ssl)) {
  1312. unsigned int ticket_age_add;
  1313. if (msglen < 4)
  1314. return 0;
  1315. ticket_age_add =
  1316. ((unsigned int)msg[0] << 24)
  1317. | ((unsigned int)msg[1] << 16)
  1318. | ((unsigned int)msg[2] << 8)
  1319. | (unsigned int)msg[3];
  1320. msglen -= 4;
  1321. msg += 4;
  1322. BIO_indent(bio, indent + 2, 80);
  1323. BIO_printf(bio, "ticket_age_add=%u\n", ticket_age_add);
  1324. if (!ssl_print_hexbuf(bio, indent + 2, "ticket_nonce", 1, &msg,
  1325. &msglen))
  1326. return 0;
  1327. }
  1328. if (!ssl_print_hexbuf(bio, indent + 2, "ticket", 2, &msg, &msglen))
  1329. return 0;
  1330. if (SSL_IS_TLS13(ssl)
  1331. && !ssl_print_extensions(bio, indent + 2, 0,
  1332. SSL3_MT_NEWSESSION_TICKET, &msg, &msglen))
  1333. return 0;
  1334. if (msglen)
  1335. return 0;
  1336. return 1;
  1337. }
  1338. static int ssl_print_handshake(BIO *bio, const SSL *ssl, int server,
  1339. const unsigned char *msg, size_t msglen,
  1340. int indent)
  1341. {
  1342. size_t hlen;
  1343. unsigned char htype;
  1344. if (msglen < 4)
  1345. return 0;
  1346. htype = msg[0];
  1347. hlen = (msg[1] << 16) | (msg[2] << 8) | msg[3];
  1348. BIO_indent(bio, indent, 80);
  1349. BIO_printf(bio, "%s, Length=%d\n",
  1350. ssl_trace_str(htype, ssl_handshake_tbl), (int)hlen);
  1351. msg += 4;
  1352. msglen -= 4;
  1353. if (SSL_IS_DTLS(ssl)) {
  1354. if (msglen < 8)
  1355. return 0;
  1356. BIO_indent(bio, indent, 80);
  1357. BIO_printf(bio, "message_seq=%d, fragment_offset=%d, "
  1358. "fragment_length=%d\n",
  1359. (msg[0] << 8) | msg[1],
  1360. (msg[2] << 16) | (msg[3] << 8) | msg[4],
  1361. (msg[5] << 16) | (msg[6] << 8) | msg[7]);
  1362. msg += 8;
  1363. msglen -= 8;
  1364. }
  1365. if (msglen < hlen)
  1366. return 0;
  1367. switch (htype) {
  1368. case SSL3_MT_CLIENT_HELLO:
  1369. if (!ssl_print_client_hello(bio, ssl, indent + 2, msg, msglen))
  1370. return 0;
  1371. break;
  1372. case DTLS1_MT_HELLO_VERIFY_REQUEST:
  1373. if (!dtls_print_hello_vfyrequest(bio, indent + 2, msg, msglen))
  1374. return 0;
  1375. break;
  1376. case SSL3_MT_SERVER_HELLO:
  1377. if (!ssl_print_server_hello(bio, indent + 2, msg, msglen))
  1378. return 0;
  1379. break;
  1380. case SSL3_MT_SERVER_KEY_EXCHANGE:
  1381. if (!ssl_print_server_keyex(bio, indent + 2, ssl, msg, msglen))
  1382. return 0;
  1383. break;
  1384. case SSL3_MT_CLIENT_KEY_EXCHANGE:
  1385. if (!ssl_print_client_keyex(bio, indent + 2, ssl, msg, msglen))
  1386. return 0;
  1387. break;
  1388. case SSL3_MT_CERTIFICATE:
  1389. if (!ssl_print_certificates(bio, ssl, server, indent + 2, msg, msglen))
  1390. return 0;
  1391. break;
  1392. case SSL3_MT_CERTIFICATE_VERIFY:
  1393. if (!ssl_print_signature(bio, indent + 2, ssl, &msg, &msglen))
  1394. return 0;
  1395. break;
  1396. case SSL3_MT_CERTIFICATE_REQUEST:
  1397. if (!ssl_print_cert_request(bio, indent + 2, ssl, msg, msglen))
  1398. return 0;
  1399. break;
  1400. case SSL3_MT_FINISHED:
  1401. ssl_print_hex(bio, indent + 2, "verify_data", msg, msglen);
  1402. break;
  1403. case SSL3_MT_SERVER_DONE:
  1404. if (msglen != 0)
  1405. ssl_print_hex(bio, indent + 2, "unexpected value", msg, msglen);
  1406. break;
  1407. case SSL3_MT_NEWSESSION_TICKET:
  1408. if (!ssl_print_ticket(bio, indent + 2, ssl, msg, msglen))
  1409. return 0;
  1410. break;
  1411. case SSL3_MT_ENCRYPTED_EXTENSIONS:
  1412. if (!ssl_print_extensions(bio, indent + 2, 1,
  1413. SSL3_MT_ENCRYPTED_EXTENSIONS, &msg, &msglen))
  1414. return 0;
  1415. break;
  1416. case SSL3_MT_KEY_UPDATE:
  1417. if (msglen != 1) {
  1418. ssl_print_hex(bio, indent + 2, "unexpected value", msg, msglen);
  1419. return 0;
  1420. }
  1421. if (!ssl_trace_list(bio, indent + 2, msg, msglen, 1,
  1422. ssl_key_update_tbl))
  1423. return 0;
  1424. break;
  1425. default:
  1426. BIO_indent(bio, indent + 2, 80);
  1427. BIO_puts(bio, "Unsupported, hex dump follows:\n");
  1428. BIO_dump_indent(bio, (const char *)msg, msglen, indent + 4);
  1429. }
  1430. return 1;
  1431. }
  1432. void SSL_trace(int write_p, int version, int content_type,
  1433. const void *buf, size_t msglen, SSL *ssl, void *arg)
  1434. {
  1435. const unsigned char *msg = buf;
  1436. BIO *bio = arg;
  1437. switch (content_type) {
  1438. case SSL3_RT_HEADER:
  1439. {
  1440. int hvers;
  1441. /* avoid overlapping with length at the end of buffer */
  1442. if (msglen < (size_t)(SSL_IS_DTLS(ssl) ?
  1443. DTLS1_RT_HEADER_LENGTH : SSL3_RT_HEADER_LENGTH)) {
  1444. BIO_puts(bio, write_p ? "Sent" : "Received");
  1445. ssl_print_hex(bio, 0, " too short message", msg, msglen);
  1446. break;
  1447. }
  1448. hvers = msg[1] << 8 | msg[2];
  1449. BIO_puts(bio, write_p ? "Sent" : "Received");
  1450. BIO_printf(bio, " Record\nHeader:\n Version = %s (0x%x)\n",
  1451. ssl_trace_str(hvers, ssl_version_tbl), hvers);
  1452. if (SSL_IS_DTLS(ssl)) {
  1453. BIO_printf(bio,
  1454. " epoch=%d, sequence_number=%04x%04x%04x\n",
  1455. (msg[3] << 8 | msg[4]),
  1456. (msg[5] << 8 | msg[6]),
  1457. (msg[7] << 8 | msg[8]), (msg[9] << 8 | msg[10]));
  1458. }
  1459. BIO_printf(bio, " Content Type = %s (%d)\n Length = %d",
  1460. ssl_trace_str(msg[0], ssl_content_tbl), msg[0],
  1461. msg[msglen - 2] << 8 | msg[msglen - 1]);
  1462. }
  1463. break;
  1464. case SSL3_RT_INNER_CONTENT_TYPE:
  1465. BIO_printf(bio, " Inner Content Type = %s (%d)",
  1466. ssl_trace_str(msg[0], ssl_content_tbl), msg[0]);
  1467. break;
  1468. case SSL3_RT_HANDSHAKE:
  1469. if (!ssl_print_handshake(bio, ssl, ssl->server ? write_p : !write_p,
  1470. msg, msglen, 4))
  1471. BIO_printf(bio, "Message length parse error!\n");
  1472. break;
  1473. case SSL3_RT_CHANGE_CIPHER_SPEC:
  1474. if (msglen == 1 && msg[0] == 1)
  1475. BIO_puts(bio, " change_cipher_spec (1)\n");
  1476. else
  1477. ssl_print_hex(bio, 4, "unknown value", msg, msglen);
  1478. break;
  1479. case SSL3_RT_ALERT:
  1480. if (msglen != 2)
  1481. BIO_puts(bio, " Illegal Alert Length\n");
  1482. else {
  1483. BIO_printf(bio, " Level=%s(%d), description=%s(%d)\n",
  1484. SSL_alert_type_string_long(msg[0] << 8),
  1485. msg[0], SSL_alert_desc_string_long(msg[1]), msg[1]);
  1486. }
  1487. }
  1488. BIO_puts(bio, "\n");
  1489. }
  1490. #endif