summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoel Sing <jsing@cvs.openbsd.org>2014-11-02 10:42:39 +0000
committerJoel Sing <jsing@cvs.openbsd.org>2014-11-02 10:42:39 +0000
commitb59741394141c0cc4ca7ac029ed7ca89692dbf81 (patch)
treedb07c23e2991b580cb212db831125ce835abc8ab
parent6b478fcf37c861d7eb4f747c85529f0a1e930ca8 (diff)
Remove remnants from RC2 and SEED - there are no longer any cipher suites
that use these algorithms (and SEED was removed from libcrypto some time ago). ok doug@
-rw-r--r--lib/libssl/src/ssl/ssl_ciph.c52
-rw-r--r--lib/libssl/src/ssl/ssl_locl.h24
2 files changed, 23 insertions, 53 deletions
diff --git a/lib/libssl/src/ssl/ssl_ciph.c b/lib/libssl/src/ssl/ssl_ciph.c
index 4bd085310f1..1645f6af491 100644
--- a/lib/libssl/src/ssl/ssl_ciph.c
+++ b/lib/libssl/src/ssl/ssl_ciph.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_ciph.c,v 1.70 2014/10/15 13:57:21 jsing Exp $ */
+/* $OpenBSD: ssl_ciph.c,v 1.71 2014/11/02 10:42:38 jsing Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -150,22 +150,20 @@
#define SSL_ENC_DES_IDX 0
#define SSL_ENC_3DES_IDX 1
#define SSL_ENC_RC4_IDX 2
-#define SSL_ENC_RC2_IDX 3
-#define SSL_ENC_IDEA_IDX 4
-#define SSL_ENC_NULL_IDX 5
-#define SSL_ENC_AES128_IDX 6
-#define SSL_ENC_AES256_IDX 7
-#define SSL_ENC_CAMELLIA128_IDX 8
-#define SSL_ENC_CAMELLIA256_IDX 9
-#define SSL_ENC_GOST89_IDX 10
-#define SSL_ENC_SEED_IDX 11
-#define SSL_ENC_AES128GCM_IDX 12
-#define SSL_ENC_AES256GCM_IDX 13
-#define SSL_ENC_NUM_IDX 14
+#define SSL_ENC_IDEA_IDX 3
+#define SSL_ENC_NULL_IDX 4
+#define SSL_ENC_AES128_IDX 5
+#define SSL_ENC_AES256_IDX 6
+#define SSL_ENC_CAMELLIA128_IDX 7
+#define SSL_ENC_CAMELLIA256_IDX 8
+#define SSL_ENC_GOST89_IDX 9
+#define SSL_ENC_AES128GCM_IDX 10
+#define SSL_ENC_AES256GCM_IDX 11
+#define SSL_ENC_NUM_IDX 12
static const EVP_CIPHER *ssl_cipher_methods[SSL_ENC_NUM_IDX] = {
- NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL
+ NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL
};
#define SSL_MD_MD5_IDX 0
@@ -380,18 +378,10 @@ static const SSL_CIPHER cipher_aliases[] = {
.algorithm_enc = SSL_RC4,
},
{
- .name = SSL_TXT_RC2,
- .algorithm_enc = SSL_RC2,
- },
- {
.name = SSL_TXT_IDEA,
.algorithm_enc = SSL_IDEA,
},
{
- .name = SSL_TXT_SEED,
- .algorithm_enc = SSL_SEED,
- },
- {
.name = SSL_TXT_eNULL,
.algorithm_enc = SSL_eNULL,
},
@@ -536,8 +526,6 @@ ssl_load_ciphers(void)
EVP_get_cipherbyname(SN_des_ede3_cbc);
ssl_cipher_methods[SSL_ENC_RC4_IDX]=
EVP_get_cipherbyname(SN_rc4);
- ssl_cipher_methods[SSL_ENC_RC2_IDX]=
- EVP_get_cipherbyname(SN_rc2_cbc);
#ifndef OPENSSL_NO_IDEA
ssl_cipher_methods[SSL_ENC_IDEA_IDX]=
EVP_get_cipherbyname(SN_idea_cbc);
@@ -554,8 +542,6 @@ ssl_load_ciphers(void)
EVP_get_cipherbyname(SN_camellia_256_cbc);
ssl_cipher_methods[SSL_ENC_GOST89_IDX]=
EVP_get_cipherbyname(SN_gost89_cnt);
- ssl_cipher_methods[SSL_ENC_SEED_IDX]=
- EVP_get_cipherbyname(SN_seed_cbc);
ssl_cipher_methods[SSL_ENC_AES128GCM_IDX]=
EVP_get_cipherbyname(SN_aes_128_gcm);
@@ -627,9 +613,6 @@ ssl_cipher_get_evp(const SSL_SESSION *s, const EVP_CIPHER **enc,
case SSL_RC4:
i = SSL_ENC_RC4_IDX;
break;
- case SSL_RC2:
- i = SSL_ENC_RC2_IDX;
- break;
case SSL_IDEA:
i = SSL_ENC_IDEA_IDX;
break;
@@ -651,9 +634,6 @@ ssl_cipher_get_evp(const SSL_SESSION *s, const EVP_CIPHER **enc,
case SSL_eGOST2814789CNT:
i = SSL_ENC_GOST89_IDX;
break;
- case SSL_SEED:
- i = SSL_ENC_SEED_IDX;
- break;
case SSL_AES128GCM:
i = SSL_ENC_AES128GCM_IDX;
break;
@@ -860,7 +840,6 @@ ssl_cipher_get_disabled(unsigned long *mkey, unsigned long *auth,
*enc |= (ssl_cipher_methods[SSL_ENC_DES_IDX ] == NULL) ? SSL_DES : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_3DES_IDX] == NULL) ? SSL_3DES : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_RC4_IDX ] == NULL) ? SSL_RC4 : 0;
- *enc |= (ssl_cipher_methods[SSL_ENC_RC2_IDX ] == NULL) ? SSL_RC2 : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_IDEA_IDX] == NULL) ? SSL_IDEA : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_AES128_IDX] == NULL) ? SSL_AES128 : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_AES256_IDX] == NULL) ? SSL_AES256 : 0;
@@ -869,7 +848,6 @@ ssl_cipher_get_disabled(unsigned long *mkey, unsigned long *auth,
*enc |= (ssl_cipher_methods[SSL_ENC_CAMELLIA128_IDX] == NULL) ? SSL_CAMELLIA128 : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_CAMELLIA256_IDX] == NULL) ? SSL_CAMELLIA256 : 0;
*enc |= (ssl_cipher_methods[SSL_ENC_GOST89_IDX] == NULL) ? SSL_eGOST2814789CNT : 0;
- *enc |= (ssl_cipher_methods[SSL_ENC_SEED_IDX] == NULL) ? SSL_SEED : 0;
*mac |= (ssl_digest_methods[SSL_MD_MD5_IDX ] == NULL) ? SSL_MD5 : 0;
*mac |= (ssl_digest_methods[SSL_MD_SHA1_IDX] == NULL) ? SSL_SHA1 : 0;
@@ -1642,9 +1620,6 @@ SSL_CIPHER_description(const SSL_CIPHER *cipher, char *buf, int len)
case SSL_RC4:
enc = alg2 & SSL2_CF_8_BYTE_ENC ? "RC4(64)" : "RC4(128)";
break;
- case SSL_RC2:
- enc = "RC2(128)";
- break;
case SSL_IDEA:
enc = "IDEA(128)";
break;
@@ -1669,9 +1644,6 @@ SSL_CIPHER_description(const SSL_CIPHER *cipher, char *buf, int len)
case SSL_CAMELLIA256:
enc = "Camellia(256)";
break;
- case SSL_SEED:
- enc = "SEED(128)";
- break;
case SSL_CHACHA20POLY1305:
enc = "ChaCha20-Poly1305";
break;
diff --git a/lib/libssl/src/ssl/ssl_locl.h b/lib/libssl/src/ssl/ssl_locl.h
index e7bcb890e4e..9aa9bc60ffe 100644
--- a/lib/libssl/src/ssl/ssl_locl.h
+++ b/lib/libssl/src/ssl/ssl_locl.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_locl.h,v 1.73 2014/10/31 15:25:55 jsing Exp $ */
+/* $OpenBSD: ssl_locl.h,v 1.74 2014/11/02 10:42:38 jsing Exp $ */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
* All rights reserved.
*
@@ -274,18 +274,16 @@
#define SSL_DES 0x00000001L
#define SSL_3DES 0x00000002L
#define SSL_RC4 0x00000004L
-#define SSL_RC2 0x00000008L
-#define SSL_IDEA 0x00000010L
-#define SSL_eNULL 0x00000020L
-#define SSL_AES128 0x00000040L
-#define SSL_AES256 0x00000080L
-#define SSL_CAMELLIA128 0x00000100L
-#define SSL_CAMELLIA256 0x00000200L
-#define SSL_eGOST2814789CNT 0x00000400L
-#define SSL_SEED 0x00000800L
-#define SSL_AES128GCM 0x00001000L
-#define SSL_AES256GCM 0x00002000L
-#define SSL_CHACHA20POLY1305 0x00004000L
+#define SSL_IDEA 0x00000008L
+#define SSL_eNULL 0x00000010L
+#define SSL_AES128 0x00000020L
+#define SSL_AES256 0x00000040L
+#define SSL_CAMELLIA128 0x00000080L
+#define SSL_CAMELLIA256 0x00000100L
+#define SSL_eGOST2814789CNT 0x00000200L
+#define SSL_AES128GCM 0x00000400L
+#define SSL_AES256GCM 0x00000800L
+#define SSL_CHACHA20POLY1305 0x00001000L
#define SSL_AES (SSL_AES128|SSL_AES256|SSL_AES128GCM|SSL_AES256GCM)
#define SSL_CAMELLIA (SSL_CAMELLIA128|SSL_CAMELLIA256)