Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 1 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 2 | * All rights reserved. |
| 3 | * |
| 4 | * This package is an SSL implementation written |
| 5 | * by Eric Young (eay@cryptsoft.com). |
| 6 | * The implementation was written so as to conform with Netscapes SSL. |
Robert Sloan | ab8b888 | 2018-03-26 11:39:51 -0700 | [diff] [blame^] | 7 | * |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 8 | * This library is free for commercial and non-commercial use as long as |
| 9 | * the following conditions are aheared to. The following conditions |
| 10 | * apply to all code found in this distribution, be it the RC4, RSA, |
| 11 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation |
| 12 | * included with this distribution is covered by the same copyright terms |
| 13 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). |
Robert Sloan | ab8b888 | 2018-03-26 11:39:51 -0700 | [diff] [blame^] | 14 | * |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 15 | * Copyright remains Eric Young's, and as such any Copyright notices in |
| 16 | * the code are not to be removed. |
| 17 | * If this package is used in a product, Eric Young should be given attribution |
| 18 | * as the author of the parts of the library used. |
| 19 | * This can be in the form of a textual message at program startup or |
| 20 | * in documentation (online or textual) provided with the package. |
Robert Sloan | ab8b888 | 2018-03-26 11:39:51 -0700 | [diff] [blame^] | 21 | * |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 22 | * Redistribution and use in source and binary forms, with or without |
| 23 | * modification, are permitted provided that the following conditions |
| 24 | * are met: |
| 25 | * 1. Redistributions of source code must retain the copyright |
| 26 | * notice, this list of conditions and the following disclaimer. |
| 27 | * 2. Redistributions in binary form must reproduce the above copyright |
| 28 | * notice, this list of conditions and the following disclaimer in the |
| 29 | * documentation and/or other materials provided with the distribution. |
| 30 | * 3. All advertising materials mentioning features or use of this software |
| 31 | * must display the following acknowledgement: |
| 32 | * "This product includes cryptographic software written by |
| 33 | * Eric Young (eay@cryptsoft.com)" |
| 34 | * The word 'cryptographic' can be left out if the rouines from the library |
| 35 | * being used are not cryptographic related :-). |
Robert Sloan | ab8b888 | 2018-03-26 11:39:51 -0700 | [diff] [blame^] | 36 | * 4. If you include any Windows specific code (or a derivative thereof) from |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 37 | * the apps directory (application code) you must include an acknowledgement: |
| 38 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" |
Robert Sloan | ab8b888 | 2018-03-26 11:39:51 -0700 | [diff] [blame^] | 39 | * |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 40 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND |
| 41 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| 42 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
| 43 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
| 44 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
| 45 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
| 46 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
| 47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
| 48 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
| 49 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
| 50 | * SUCH DAMAGE. |
Robert Sloan | ab8b888 | 2018-03-26 11:39:51 -0700 | [diff] [blame^] | 51 | * |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 52 | * The licence and distribution terms for any publically available version or |
| 53 | * derivative of this code cannot be changed. i.e. this code cannot simply be |
| 54 | * copied and put under another distribution licence |
| 55 | * [including the GNU Public Licence.] |
| 56 | */ |
| 57 | /* ==================================================================== |
| 58 | * Copyright 2005 Nokia. All rights reserved. |
| 59 | * |
| 60 | * The portions of the attached software ("Contribution") is developed by |
| 61 | * Nokia Corporation and is licensed pursuant to the OpenSSL open source |
| 62 | * license. |
| 63 | * |
| 64 | * The Contribution, originally written by Mika Kousa and Pasi Eronen of |
| 65 | * Nokia Corporation, consists of the "PSK" (Pre-Shared Key) ciphersuites |
| 66 | * support (see RFC 4279) to OpenSSL. |
| 67 | * |
| 68 | * No patent licenses or other rights except those expressly stated in |
| 69 | * the OpenSSL open source license shall be deemed granted or received |
| 70 | * expressly, by implication, estoppel, or otherwise. |
| 71 | * |
| 72 | * No assurances are provided by Nokia that the Contribution does not |
| 73 | * infringe the patent or other intellectual property rights of any third |
| 74 | * party or that the license provides you with all the necessary rights |
| 75 | * to make use of the Contribution. |
| 76 | * |
| 77 | * THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN |
| 78 | * ADDITION TO THE DISCLAIMERS INCLUDED IN THE LICENSE, NOKIA |
| 79 | * SPECIFICALLY DISCLAIMS ANY LIABILITY FOR CLAIMS BROUGHT BY YOU OR ANY |
| 80 | * OTHER ENTITY BASED ON INFRINGEMENT OF INTELLECTUAL PROPERTY RIGHTS OR |
| 81 | * OTHERWISE. |
| 82 | */ |
| 83 | |
Kenny Root | b849459 | 2015-09-25 02:29:14 +0000 | [diff] [blame] | 84 | #include <openssl/ssl.h> |
| 85 | |
Robert Sloan | a94fe05 | 2017-02-21 08:49:28 -0800 | [diff] [blame] | 86 | #include <assert.h> |
| 87 | |
Adam Langley | e9ada86 | 2015-05-11 17:20:37 -0700 | [diff] [blame] | 88 | #include "internal.h" |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 89 | |
Kenny Root | b849459 | 2015-09-25 02:29:14 +0000 | [diff] [blame] | 90 | |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 91 | const char *SSL_state_string_long(const SSL *ssl) { |
Robert Sloan | 29c1d2c | 2017-10-30 14:10:28 -0700 | [diff] [blame] | 92 | if (ssl->s3->hs == nullptr) { |
Robert Sloan | a27a6a4 | 2017-09-05 08:39:28 -0700 | [diff] [blame] | 93 | return "SSL negotiation finished successfully"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 94 | } |
Robert Sloan | a27a6a4 | 2017-09-05 08:39:28 -0700 | [diff] [blame] | 95 | |
Robert Sloan | 29c1d2c | 2017-10-30 14:10:28 -0700 | [diff] [blame] | 96 | return ssl->server ? ssl_server_handshake_state(ssl->s3->hs.get()) |
| 97 | : ssl_client_handshake_state(ssl->s3->hs.get()); |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 98 | } |
| 99 | |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 100 | const char *SSL_state_string(const SSL *ssl) { |
Robert Sloan | a27a6a4 | 2017-09-05 08:39:28 -0700 | [diff] [blame] | 101 | return "!!!!!!"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 102 | } |
| 103 | |
| 104 | const char *SSL_alert_type_string_long(int value) { |
| 105 | value >>= 8; |
| 106 | if (value == SSL3_AL_WARNING) { |
| 107 | return "warning"; |
| 108 | } else if (value == SSL3_AL_FATAL) { |
| 109 | return "fatal"; |
| 110 | } |
| 111 | |
| 112 | return "unknown"; |
| 113 | } |
| 114 | |
| 115 | const char *SSL_alert_type_string(int value) { |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 116 | return "!"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 117 | } |
| 118 | |
| 119 | const char *SSL_alert_desc_string(int value) { |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 120 | return "!!"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 121 | } |
| 122 | |
| 123 | const char *SSL_alert_desc_string_long(int value) { |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 124 | switch (value & 0xff) { |
| 125 | case SSL3_AD_CLOSE_NOTIFY: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 126 | return "close notify"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 127 | |
| 128 | case SSL3_AD_UNEXPECTED_MESSAGE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 129 | return "unexpected_message"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 130 | |
| 131 | case SSL3_AD_BAD_RECORD_MAC: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 132 | return "bad record mac"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 133 | |
| 134 | case SSL3_AD_DECOMPRESSION_FAILURE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 135 | return "decompression failure"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 136 | |
| 137 | case SSL3_AD_HANDSHAKE_FAILURE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 138 | return "handshake failure"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 139 | |
| 140 | case SSL3_AD_NO_CERTIFICATE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 141 | return "no certificate"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 142 | |
| 143 | case SSL3_AD_BAD_CERTIFICATE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 144 | return "bad certificate"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 145 | |
| 146 | case SSL3_AD_UNSUPPORTED_CERTIFICATE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 147 | return "unsupported certificate"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 148 | |
| 149 | case SSL3_AD_CERTIFICATE_REVOKED: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 150 | return "certificate revoked"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 151 | |
| 152 | case SSL3_AD_CERTIFICATE_EXPIRED: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 153 | return "certificate expired"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 154 | |
| 155 | case SSL3_AD_CERTIFICATE_UNKNOWN: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 156 | return "certificate unknown"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 157 | |
| 158 | case SSL3_AD_ILLEGAL_PARAMETER: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 159 | return "illegal parameter"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 160 | |
| 161 | case TLS1_AD_DECRYPTION_FAILED: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 162 | return "decryption failed"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 163 | |
| 164 | case TLS1_AD_RECORD_OVERFLOW: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 165 | return "record overflow"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 166 | |
| 167 | case TLS1_AD_UNKNOWN_CA: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 168 | return "unknown CA"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 169 | |
| 170 | case TLS1_AD_ACCESS_DENIED: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 171 | return "access denied"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 172 | |
| 173 | case TLS1_AD_DECODE_ERROR: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 174 | return "decode error"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 175 | |
| 176 | case TLS1_AD_DECRYPT_ERROR: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 177 | return "decrypt error"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 178 | |
| 179 | case TLS1_AD_EXPORT_RESTRICTION: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 180 | return "export restriction"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 181 | |
| 182 | case TLS1_AD_PROTOCOL_VERSION: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 183 | return "protocol version"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 184 | |
| 185 | case TLS1_AD_INSUFFICIENT_SECURITY: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 186 | return "insufficient security"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 187 | |
| 188 | case TLS1_AD_INTERNAL_ERROR: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 189 | return "internal error"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 190 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 191 | case SSL3_AD_INAPPROPRIATE_FALLBACK: |
| 192 | return "inappropriate fallback"; |
| 193 | |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 194 | case TLS1_AD_USER_CANCELLED: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 195 | return "user canceled"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 196 | |
| 197 | case TLS1_AD_NO_RENEGOTIATION: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 198 | return "no renegotiation"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 199 | |
| 200 | case TLS1_AD_UNSUPPORTED_EXTENSION: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 201 | return "unsupported extension"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 202 | |
| 203 | case TLS1_AD_CERTIFICATE_UNOBTAINABLE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 204 | return "certificate unobtainable"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 205 | |
| 206 | case TLS1_AD_UNRECOGNIZED_NAME: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 207 | return "unrecognized name"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 208 | |
| 209 | case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 210 | return "bad certificate status response"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 211 | |
| 212 | case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 213 | return "bad certificate hash value"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 214 | |
| 215 | case TLS1_AD_UNKNOWN_PSK_IDENTITY: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 216 | return "unknown PSK identity"; |
| 217 | |
David Benjamin | 95add82 | 2016-10-19 01:09:12 -0400 | [diff] [blame] | 218 | case TLS1_AD_CERTIFICATE_REQUIRED: |
| 219 | return "certificate required"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 220 | |
| 221 | default: |
Kenny Root | e99801b | 2015-11-06 15:31:15 -0800 | [diff] [blame] | 222 | return "unknown"; |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 223 | } |
Adam Langley | d9e397b | 2015-01-22 14:27:53 -0800 | [diff] [blame] | 224 | } |