diff options
| author | Bodo Möller <bodo@openssl.org> | 2000-04-06 22:33:14 +0000 |
|---|---|---|
| committer | Bodo Möller <bodo@openssl.org> | 2000-04-06 22:33:14 +0000 |
| commit | 1d90f280297195f4f1fb42fdeecd0e6f5ee98366 (patch) | |
| tree | ff7eeb2010b6e88ee2da6626b21127b840f9d6fe /ssl/tls1.h | |
| parent | 8acdd759b973fa956b33146b5538bfde11ba870c (diff) | |
In theory, TLS v1 ciphersuites are not the same as SSL v3 ciphersuites
Diffstat (limited to 'ssl/tls1.h')
| -rw-r--r-- | ssl/tls1.h | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/ssl/tls1.h b/ssl/tls1.h index 6e2b06d34f..cf92ae034f 100644 --- a/ssl/tls1.h +++ b/ssl/tls1.h @@ -84,6 +84,10 @@ extern "C" { #define TLS1_AD_USER_CANCELLED 90 #define TLS1_AD_NO_RENEGOTIATION 100 +/* Additional TLS ciphersuites from draft-ietf-tls-56-bit-ciphersuites-00.txt + * (available if TLS1_ALLOW_EXPERIMENTAL_CIPHERSUITES is defined, see + * s3_lib.c). We actually treat them like SSL 3.0 ciphers, which we probably + * shouldn't. */ #define TLS1_CK_RSA_EXPORT1024_WITH_RC4_56_MD5 0x03000060 #define TLS1_CK_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 0x03000061 #define TLS1_CK_RSA_EXPORT1024_WITH_DES_CBC_SHA 0x03000062 @@ -92,6 +96,13 @@ extern "C" { #define TLS1_CK_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA 0x03000065 #define TLS1_CK_DHE_DSS_WITH_RC4_128_SHA 0x03000066 +/* XXX + * Inconsistency alert: + * The OpenSSL names of ciphers with ephemeral DH here include the string + * "DHE", while elsewhere it has always been "EDH". + * (The alias for the list of all such ciphers also is "EDH".) + * The specifications speak of "EDH"; maybe we should allow both forms + * for everything. */ #define TLS1_TXT_RSA_EXPORT1024_WITH_RC4_56_MD5 "EXP1024-RC4-MD5" #define TLS1_TXT_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 "EXP1024-RC2-CBC-MD5" #define TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA "EXP1024-DES-CBC-SHA" |