blob: f564b0d967dd8c12e60af8b2556e57b427e2d003 [file] [log] [blame]
Damien Miller51b4f822006-03-26 00:04:32 +11001/* $OpenBSD: myproposal.h,v 1.20 2006/03/19 18:53:12 deraadt Exp $ */
Ben Lindstrom36579d32001-01-29 07:39:26 +00002
Damien Millere4340be2000-09-16 13:29:08 +11003/*
4 * Copyright (c) 2000 Markus Friedl. All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25 */
Tim Rice425a6882006-03-15 20:17:05 -080026
27#include <openssl/opensslv.h>
28
29/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
30#if OPENSSL_VERSION_NUMBER < 0x00907000L
31# define KEX_DEFAULT_KEX \
32 "diffie-hellman-group-exchange-sha1," \
Damien Miller51b4f822006-03-26 00:04:32 +110033 "diffie-hellman-group14-sha1," \
34 "diffie-hellman-group1-sha1"
Tim Rice425a6882006-03-15 20:17:05 -080035#else
36# define KEX_DEFAULT_KEX \
Damien Millera63128d2006-03-15 12:08:28 +110037 "diffie-hellman-group-exchange-sha256," \
38 "diffie-hellman-group-exchange-sha1," \
Damien Miller51b4f822006-03-26 00:04:32 +110039 "diffie-hellman-group14-sha1," \
40 "diffie-hellman-group1-sha1"
Tim Rice425a6882006-03-15 20:17:05 -080041#endif
42
Damien Miller0bc1bd82000-11-13 22:57:25 +110043#define KEX_DEFAULT_PK_ALG "ssh-rsa,ssh-dss"
Damien Miller874d77b2000-10-14 16:23:11 +110044#define KEX_DEFAULT_ENCRYPT \
Damien Miller3710f272005-05-26 12:19:17 +100045 "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
46 "arcfour128,arcfour256,arcfour," \
Damien Millerf5399c22003-05-18 20:53:59 +100047 "aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se," \
48 "aes128-ctr,aes192-ctr,aes256-ctr"
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000049#define KEX_DEFAULT_MAC \
Ben Lindstromec26fb12001-03-06 01:05:23 +000050 "hmac-md5,hmac-sha1,hmac-ripemd160," \
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000051 "hmac-ripemd160@openssh.com," \
52 "hmac-sha1-96,hmac-md5-96"
Damien Miller9786e6e2005-07-26 21:54:56 +100053#define KEX_DEFAULT_COMP "none,zlib@openssh.com,zlib"
Damien Miller1383bd82000-04-06 12:32:37 +100054#define KEX_DEFAULT_LANG ""
55
56
Damien Millerb1715dc2000-05-30 13:44:51 +100057static char *myproposal[PROPOSAL_MAX] = {
Damien Miller1383bd82000-04-06 12:32:37 +100058 KEX_DEFAULT_KEX,
59 KEX_DEFAULT_PK_ALG,
60 KEX_DEFAULT_ENCRYPT,
61 KEX_DEFAULT_ENCRYPT,
62 KEX_DEFAULT_MAC,
63 KEX_DEFAULT_MAC,
64 KEX_DEFAULT_COMP,
65 KEX_DEFAULT_COMP,
66 KEX_DEFAULT_LANG,
67 KEX_DEFAULT_LANG
68};