2019-07-28 10:31:56 +08:00
|
|
|
/*++
|
2014-11-19 00:25:21 +08:00
|
|
|
* NAME
|
|
|
|
|
* tls_level 3
|
|
|
|
|
* SUMMARY
|
|
|
|
|
* TLS security level conversion
|
|
|
|
|
* SYNOPSIS
|
|
|
|
|
* #include <tls.h>
|
|
|
|
|
*
|
|
|
|
|
* int tls_level_lookup(name)
|
|
|
|
|
* const char *name;
|
|
|
|
|
*
|
|
|
|
|
* const char *str_tls_level(level)
|
|
|
|
|
* int level;
|
|
|
|
|
* DESCRIPTION
|
|
|
|
|
* The macros in this module convert TLS levels from symbolic
|
|
|
|
|
* name to internal form and vice versa. The macros are safe
|
|
|
|
|
* because they evaluate their arguments only once.
|
|
|
|
|
*
|
|
|
|
|
* tls_level_lookup() converts a TLS level from symbolic name
|
|
|
|
|
* to internal form. When an unknown level is specified,
|
|
|
|
|
* tls_level_lookup() logs no warning, and returns TLS_LEV_INVALID.
|
|
|
|
|
*
|
|
|
|
|
* str_tls_level() converts a TLS level from internal form to
|
|
|
|
|
* symbolic name. The result is a null pointer for an unknown
|
|
|
|
|
* level.
|
|
|
|
|
* SEE ALSO
|
|
|
|
|
* name_code(3) name to number mapping
|
|
|
|
|
* LICENSE
|
|
|
|
|
* .ad
|
|
|
|
|
* .fi
|
|
|
|
|
* The Secure Mailer license must be distributed with this software.
|
|
|
|
|
* AUTHOR(S)
|
|
|
|
|
* Wietse Venema
|
|
|
|
|
* IBM T.J. Watson Research
|
|
|
|
|
* P.O. Box 704
|
|
|
|
|
* Yorktown Heights, NY 10598, USA
|
|
|
|
|
*
|
|
|
|
|
* Victor Duchovni
|
|
|
|
|
* Morgan Stanley
|
|
|
|
|
*--*/
|
|
|
|
|
|
|
|
|
|
#include "StdAfx.h"
|
|
|
|
|
|
|
|
|
|
#ifdef USE_TLS
|
|
|
|
|
|
|
|
|
|
/* Utility library. */
|
|
|
|
|
|
|
|
|
|
#include "../util/name_code.h"
|
|
|
|
|
|
|
|
|
|
/* TLS library. */
|
|
|
|
|
|
|
|
|
|
#include "tls_private.h"
|
|
|
|
|
|
|
|
|
|
/* Application-specific. */
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Order is critical:
|
|
|
|
|
*
|
|
|
|
|
* Levels > "encrypt" are expected to match a peer certificate.
|
|
|
|
|
*
|
|
|
|
|
* Levels >= "verify" are expected to require a valid CA trust-chain
|
|
|
|
|
*
|
|
|
|
|
* This forces "fingerprint" between "encrypt" and "verify".
|
|
|
|
|
*/
|
|
|
|
|
const NAME_CODE tls_level_table[] = {
|
|
|
|
|
{ "none", TLS_LEV_NONE },
|
|
|
|
|
{ "may", TLS_LEV_MAY },
|
|
|
|
|
{ "encrypt", TLS_LEV_ENCRYPT },
|
|
|
|
|
{ "fingerprint", TLS_LEV_FPRINT },
|
|
|
|
|
{ "verify", TLS_LEV_VERIFY },
|
|
|
|
|
{ "secure", TLS_LEV_SECURE },
|
|
|
|
|
{ 0, TLS_LEV_INVALID },
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
#endif
|
