boringssl/ssl
David Benjamin 6fff386492 Support standard RFC cipher suite names alongside OpenSSL ones.
Both Conscrypt and Netty have a lot of logic to map between the two
kinds of names. WebRTC needed an SSL_CIPHER_get_rfc_name for something.
Just have both in the library. Also deprecate SSL_CIPHER_get_rfc_name
in favor of SSL_CIPHER_standard_name, which matches upstream if built
with enable-ssl-trace. And, unlike SSL_CIPHER_get_rfc_name, this does
not require dealing with the malloc.

(Strangely this decreases bssl's binary size, even though we're carrying
more strings around. It seems the old SSL_CIPHER_get_rfc_name was
somewhat large in comparison. Regardless, a consumer that disliked 30
short strings probably also disliked the OpenSSL names. That would be
better solved by opaquifying SSL_CIPHER and adding a less stringy API
for configuring cipher lists. That's something we can explore later if
needed.)

I also made the command-line tool print out the standard names since
they're more standard. May as well push folks towards those going
forward.

Change-Id: Ieeb3d63e67ef4da87458e68d130166a4c1090596
Reviewed-on: https://boringssl-review.googlesource.com/17324
Reviewed-by: Robert Sloan <varomodt@google.com>
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
2017-06-22 02:45:37 +00:00
..
test Update fuzzer mode suppressions. 2017-06-16 16:53:11 +00:00
bio_ssl.c Move the SSL BIO into ssl/ from decrepit/. 2017-02-03 21:08:10 +00:00
CMakeLists.txt Convert bio_test to GTest. 2017-03-21 17:39:57 +00:00
custom_extensions.c Support enabling early data on SSL 2017-04-03 20:25:29 +00:00
d1_both.c Trim x509.h includes. 2017-03-07 23:13:49 +00:00
d1_lib.c Don't use long for timestamps. 2017-03-01 21:58:38 +00:00
d1_pkt.c Adding support for sending early data on the client. 2017-06-15 19:34:59 +00:00
d1_srtp.c Fix ssl_ctx_make_profiles error handling. 2016-09-27 13:27:06 +00:00
dtls_method.c Adding support for receiving early data on the server. 2017-03-26 19:30:27 +00:00
dtls_record.c Don't use the buffer BIO in DTLS. 2017-01-25 23:35:32 +00:00
handshake_client.c Stash the computed version range in SSL_HANDSHAKE. 2017-06-20 20:13:09 +00:00
handshake_server.c Stash the computed version range in SSL_HANDSHAKE. 2017-06-20 20:13:09 +00:00
internal.h Stash the computed version range in SSL_HANDSHAKE. 2017-06-20 20:13:09 +00:00
s3_both.c Unwind V2ClientHello counters. 2017-06-16 20:24:00 +00:00
s3_lib.c Really remove DHE ciphersuites from TLS. 2017-04-11 23:41:31 +00:00
s3_pkt.c Adding support for sending early data on the client. 2017-06-15 19:34:59 +00:00
ssl_aead_ctx.c Enforce incrementing counter for TLS 1.2 AES-GCM. 2017-05-26 20:06:36 +00:00
ssl_asn1.c Remove the last remnants of key_exchange_info. 2017-04-13 21:23:40 +00:00
ssl_buffer.c Just allocate what's needed for SSL write buffers. 2017-03-27 16:37:53 +00:00
ssl_cert.c Really remove DHE ciphersuites from TLS. 2017-04-11 23:41:31 +00:00
ssl_cipher.c Support standard RFC cipher suite names alongside OpenSSL ones. 2017-06-22 02:45:37 +00:00
ssl_ecdh.c Fix some malloc failure handling. 2017-06-15 19:38:59 +00:00
ssl_file.c Remove |X509| things from SSL_SESSION. 2017-02-10 19:12:04 +00:00
ssl_lib.c Simplify SSL_get0_next_proto_negotiated. 2017-06-22 00:00:44 +00:00
ssl_privkey_cc.cc Rename ssl_rsa.c to ssl_privkey.c. 2017-02-09 18:45:11 +00:00
ssl_privkey.c Simplify ssl_private_key_* state machine points. 2017-06-20 19:37:05 +00:00
ssl_session.c Adding support for sending early data on the client. 2017-06-15 19:34:59 +00:00
ssl_stat.c Simplify ssl_private_key_* state machine points. 2017-06-20 19:37:05 +00:00
ssl_test.cc Support standard RFC cipher suite names alongside OpenSSL ones. 2017-06-22 02:45:37 +00:00
ssl_transcript.c Moving transcript and PRF functions to SSL_TRANSCRIPT. 2017-02-10 16:33:42 +00:00
ssl_x509.c Move ssl_verify_alarm_type into ssl_x509.c. 2017-03-07 23:14:16 +00:00
t1_enc.c Enforce incrementing counter for TLS 1.2 AES-GCM. 2017-05-26 20:06:36 +00:00
t1_lib.c Stash the computed version range in SSL_HANDSHAKE. 2017-06-20 20:13:09 +00:00
tls13_both.c Simplify ssl_private_key_* state machine points. 2017-06-20 19:37:05 +00:00
tls13_client.c Simplify ssl_private_key_* state machine points. 2017-06-20 19:37:05 +00:00
tls13_enc.c Enforce incrementing counter for TLS 1.2 AES-GCM. 2017-05-26 20:06:36 +00:00
tls13_server.c Simplify ssl_private_key_* state machine points. 2017-06-20 19:37:05 +00:00
tls_method.c Adding support for receiving early data on the server. 2017-03-26 19:30:27 +00:00
tls_record.c Enforce max_early_data_size on the server. 2017-04-19 17:21:01 +00:00