blob: 7bca3bcae44ae97b83296f8b8045f4de49d44763 [file] [log] [blame]
Damien Miller67081b52009-01-28 16:33:31 +11001/* $OpenBSD: myproposal.h,v 1.23 2009/01/23 07:58:11 djm Exp $ */
Ben Lindstrom36579d32001-01-29 07:39:26 +00002
Damien Millere4340be2000-09-16 13:29:08 +11003/*
4 * Copyright (c) 2000 Markus Friedl. All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25 */
Tim Rice425a6882006-03-15 20:17:05 -080026
27#include <openssl/opensslv.h>
28
29/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
30#if OPENSSL_VERSION_NUMBER < 0x00907000L
31# define KEX_DEFAULT_KEX \
32 "diffie-hellman-group-exchange-sha1," \
Damien Miller51b4f822006-03-26 00:04:32 +110033 "diffie-hellman-group14-sha1," \
34 "diffie-hellman-group1-sha1"
Tim Rice425a6882006-03-15 20:17:05 -080035#else
36# define KEX_DEFAULT_KEX \
Damien Millera63128d2006-03-15 12:08:28 +110037 "diffie-hellman-group-exchange-sha256," \
38 "diffie-hellman-group-exchange-sha1," \
Damien Miller51b4f822006-03-26 00:04:32 +110039 "diffie-hellman-group14-sha1," \
40 "diffie-hellman-group1-sha1"
Tim Rice425a6882006-03-15 20:17:05 -080041#endif
42
Damien Miller0bc1bd82000-11-13 22:57:25 +110043#define KEX_DEFAULT_PK_ALG "ssh-rsa,ssh-dss"
Damien Miller67081b52009-01-28 16:33:31 +110044
Damien Miller874d77b2000-10-14 16:23:11 +110045#define KEX_DEFAULT_ENCRYPT \
Damien Miller67081b52009-01-28 16:33:31 +110046 "aes128-ctr,aes192-ctr,aes256-ctr," \
47 "arcfour256,arcfour128," \
Damien Miller3710f272005-05-26 12:19:17 +100048 "aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
Damien Miller67081b52009-01-28 16:33:31 +110049 "aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se"
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000050#define KEX_DEFAULT_MAC \
Damien Millere45796f2007-06-11 14:01:42 +100051 "hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160," \
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000052 "hmac-ripemd160@openssh.com," \
53 "hmac-sha1-96,hmac-md5-96"
Damien Miller9786e6e2005-07-26 21:54:56 +100054#define KEX_DEFAULT_COMP "none,zlib@openssh.com,zlib"
Damien Miller1383bd82000-04-06 12:32:37 +100055#define KEX_DEFAULT_LANG ""
56
57
Damien Millerb1715dc2000-05-30 13:44:51 +100058static char *myproposal[PROPOSAL_MAX] = {
Damien Miller1383bd82000-04-06 12:32:37 +100059 KEX_DEFAULT_KEX,
60 KEX_DEFAULT_PK_ALG,
61 KEX_DEFAULT_ENCRYPT,
62 KEX_DEFAULT_ENCRYPT,
63 KEX_DEFAULT_MAC,
64 KEX_DEFAULT_MAC,
65 KEX_DEFAULT_COMP,
66 KEX_DEFAULT_COMP,
67 KEX_DEFAULT_LANG,
68 KEX_DEFAULT_LANG
69};