Commit 387cf213 authored by David Woodhouse's avatar David Woodhouse Committed by Matt Caswell
Browse files

Fix cipher support for DTLS1_BAD_VER 



Commit 3eb2aff4 ("Add support for minimum and maximum protocol version
supported by a cipher") disabled all ciphers for DTLS1_BAD_VER.

That wasn't helpful. Give them back.

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
parent ff495289

ssl/s3_lib.c

+88 −88
Original line number Diff line number Diff line
@@ -77,7 +77,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_MD5,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -92,7 +92,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -107,7 +107,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -122,7 +122,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -137,7 +137,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -152,7 +152,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -167,7 +167,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -182,7 +182,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -197,7 +197,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -212,7 +212,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -227,7 +227,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -242,7 +242,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -257,7 +257,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -272,7 +272,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -844,7 +844,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -859,7 +859,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -874,7 +874,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -889,7 +889,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -904,7 +904,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -919,7 +919,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -934,7 +934,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -949,7 +949,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -964,7 +964,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -979,7 +979,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -994,7 +994,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1009,7 +1009,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1147,7 +1147,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1162,7 +1162,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1177,7 +1177,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1192,7 +1192,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1207,7 +1207,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1222,7 +1222,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1237,7 +1237,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1252,7 +1252,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1267,7 +1267,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1282,7 +1282,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1297,7 +1297,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1312,7 +1312,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1417,7 +1417,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1432,7 +1432,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -1447,7 +1447,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1462,7 +1462,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     0,
@@ -1477,7 +1477,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1492,7 +1492,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -1507,7 +1507,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1522,7 +1522,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     0,
@@ -1537,7 +1537,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1552,7 +1552,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -1567,7 +1567,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1582,7 +1582,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     0,
@@ -1598,7 +1598,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1613,7 +1613,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1628,7 +1628,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1643,7 +1643,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1658,7 +1658,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -1673,7 +1673,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1688,7 +1688,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     0,
@@ -1703,7 +1703,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_eNULL,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_STRONG_NONE | SSL_FIPS,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     0,
@@ -1722,7 +1722,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1737,7 +1737,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1752,7 +1752,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_3DES,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     112,
@@ -1767,7 +1767,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1782,7 +1782,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1797,7 +1797,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -1812,7 +1812,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1827,7 +1827,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -1842,7 +1842,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_AES256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -2096,7 +2096,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -2111,7 +2111,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -2126,7 +2126,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -2141,7 +2141,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     256,
@@ -2156,7 +2156,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2171,7 +2171,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2186,7 +2186,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2201,7 +2201,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2281,7 +2281,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2296,7 +2296,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -2311,7 +2311,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2326,7 +2326,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -2341,7 +2341,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2356,7 +2356,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -2371,7 +2371,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA128,

     SSL_SHA256,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2386,7 +2386,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_CAMELLIA256,

     SSL_SHA384,

     TLS1_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_HIGH,

     SSL_HANDSHAKE_MAC_SHA384 | TLS1_PRF_SHA384,

     256,
@@ -2468,7 +2468,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_IDEA,

     SSL_SHA1,

     SSL3_VERSION, TLS1_1_VERSION,

     DTLS1_VERSION, DTLS1_VERSION,

     DTLS1_BAD_VER, DTLS1_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2486,7 +2486,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_SEED,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2501,7 +2501,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_SEED,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2516,7 +2516,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_SEED,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,
@@ -2531,7 +2531,7 @@ static SSL_CIPHER ssl3_ciphers[] = 
     SSL_SEED,

     SSL_SHA1,

     SSL3_VERSION, TLS1_2_VERSION,

     DTLS1_VERSION, DTLS1_2_VERSION,

     DTLS1_BAD_VER, DTLS1_2_VERSION,

     SSL_NOT_DEFAULT | SSL_MEDIUM,

     SSL_HANDSHAKE_MAC_DEFAULT | TLS1_PRF,

     128,