[openssh.git] / myproposal.h

/*	$OpenBSD: myproposal.h,v 1.19 2006/03/07 09:07:40 djm Exp $	*/

/*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include <openssl/opensslv.h>

/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
#if OPENSSL_VERSION_NUMBER < 0x00907000L
# define KEX_DEFAULT_KEX		\
	"diffie-hellman-group-exchange-sha1," \
 	"diffie-hellman-group14-sha1," \
 	"diffie-hellman-group1-sha1"
#else
# define KEX_DEFAULT_KEX		\
	"diffie-hellman-group-exchange-sha256," \
	"diffie-hellman-group-exchange-sha1," \
 	"diffie-hellman-group14-sha1," \
 	"diffie-hellman-group1-sha1"
#endif

#define	KEX_DEFAULT_PK_ALG	"ssh-rsa,ssh-dss"
#define	KEX_DEFAULT_ENCRYPT \
	"aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
	"arcfour128,arcfour256,arcfour," \
	"aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se," \
	"aes128-ctr,aes192-ctr,aes256-ctr"
#define	KEX_DEFAULT_MAC \
	"hmac-md5,hmac-sha1,hmac-ripemd160," \
	"hmac-ripemd160@openssh.com," \
	"hmac-sha1-96,hmac-md5-96"
#define	KEX_DEFAULT_COMP	"none,zlib@openssh.com,zlib"
#define	KEX_DEFAULT_LANG	""


static char *myproposal[PROPOSAL_MAX] = {
	KEX_DEFAULT_KEX,
	KEX_DEFAULT_PK_ALG,
	KEX_DEFAULT_ENCRYPT,
	KEX_DEFAULT_ENCRYPT,
	KEX_DEFAULT_MAC,
	KEX_DEFAULT_MAC,
	KEX_DEFAULT_COMP,
	KEX_DEFAULT_COMP,
	KEX_DEFAULT_LANG,
	KEX_DEFAULT_LANG
};
Commit	Line	Data
2ff8003a	1	/* $OpenBSD: myproposal.h,v 1.19 2006/03/07 09:07:40 djm Exp $ */
23c2a7a5	2
bcbf86ec	3	/*
	4	* Copyright (c) 2000 Markus Friedl. All rights reserved.
	5	*
	6	* Redistribution and use in source and binary forms, with or without
	7	* modification, are permitted provided that the following conditions
	8	* are met:
	9	* 1. Redistributions of source code must retain the above copyright
	10	* notice, this list of conditions and the following disclaimer.
	11	* 2. Redistributions in binary form must reproduce the above copyright
	12	* notice, this list of conditions and the following disclaimer in the
	13	* documentation and/or other materials provided with the distribution.
	14	*
	15	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
	16	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
	17	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
	18	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
	19	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	20	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	21	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	22	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	23	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
	24	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	25	*/
b1f0c612	26
	27	#include <openssl/opensslv.h>
	28
	29	/* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
	30	#if OPENSSL_VERSION_NUMBER < 0x00907000L
	31	# define KEX_DEFAULT_KEX \
	32	"diffie-hellman-group-exchange-sha1," \
	33	"diffie-hellman-group14-sha1," \
	34	"diffie-hellman-group1-sha1"
	35	#else
	36	# define KEX_DEFAULT_KEX \
2ff8003a	37	"diffie-hellman-group-exchange-sha256," \
	38	"diffie-hellman-group-exchange-sha1," \
	39	"diffie-hellman-group14-sha1," \
	40	"diffie-hellman-group1-sha1"
b1f0c612	41	#endif
b1f0c612	42
fa08c86b	43	#define KEX_DEFAULT_PK_ALG "ssh-rsa,ssh-dss"
94ec8c6b	44	#define KEX_DEFAULT_ENCRYPT \
74a66cc8	45	"aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc," \
74a66cc8	46	"arcfour128,arcfour256,arcfour," \
25b66522	47	"aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se," \
25b66522	48	"aes128-ctr,aes192-ctr,aes256-ctr"
b2552997	49	#define KEX_DEFAULT_MAC \
f2ba0775	50	"hmac-md5,hmac-sha1,hmac-ripemd160," \
b2552997	51	"hmac-ripemd160@openssh.com," \
b2552997	52	"hmac-sha1-96,hmac-md5-96"
07200973	53	#define KEX_DEFAULT_COMP "none,zlib@openssh.com,zlib"
8ce64345	54	#define KEX_DEFAULT_LANG ""
	55
	56
71276795	57	static char *myproposal[PROPOSAL_MAX] = {
8ce64345	58	KEX_DEFAULT_KEX,
	59	KEX_DEFAULT_PK_ALG,
	60	KEX_DEFAULT_ENCRYPT,
	61	KEX_DEFAULT_ENCRYPT,
	62	KEX_DEFAULT_MAC,
	63	KEX_DEFAULT_MAC,
	64	KEX_DEFAULT_COMP,
	65	KEX_DEFAULT_COMP,
	66	KEX_DEFAULT_LANG,
	67	KEX_DEFAULT_LANG
	68	};