1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #ifndef NET_BASE_SSL_CONNECTION_STATUS_FLAGS_H_ 6 #define NET_BASE_SSL_CONNECTION_STATUS_FLAGS_H_ 7 #pragma once 8 9 namespace net { 10 11 // Status flags for SSLInfo::connection_status. 12 enum { 13 // The lower 16 bits are reserved for the TLS ciphersuite id. 14 SSL_CONNECTION_CIPHERSUITE_SHIFT = 0, 15 SSL_CONNECTION_CIPHERSUITE_MASK = 0xffff, 16 17 // The next two bits are reserved for the compression used. 18 SSL_CONNECTION_COMPRESSION_SHIFT = 16, 19 SSL_CONNECTION_COMPRESSION_MASK = 3, 20 21 // We fell back to SSLv3 for this connection. 22 SSL_CONNECTION_SSL3_FALLBACK = 1 << 18, 23 24 // The server doesn't support the renegotiation_info extension. If this bit 25 // is not set then either the extension isn't supported, or we don't have any 26 // knowledge either way. (The latter case will occur when we use an SSL 27 // library that doesn't report it, like SChannel.) 28 SSL_CONNECTION_NO_RENEGOTIATION_EXTENSION = 1 << 19, 29 30 // The next three bits are reserved for the SSL version. 31 SSL_CONNECTION_VERSION_SHIFT = 20, 32 SSL_CONNECTION_VERSION_MASK = 7, 33 34 // 1 << 31 (the sign bit) is reserved so that the SSL connection status will 35 // never be negative. 36 }; 37 38 // NOTE: the SSL version enum constants must be between 0 and 39 // SSL_CONNECTION_VERSION_MASK, inclusive. 40 enum { 41 SSL_CONNECTION_VERSION_UNKNOWN = 0, // Unknown SSL version. 42 SSL_CONNECTION_VERSION_SSL2 = 1, 43 SSL_CONNECTION_VERSION_SSL3 = 2, 44 SSL_CONNECTION_VERSION_TLS1 = 3, 45 SSL_CONNECTION_VERSION_TLS1_1 = 4, 46 SSL_CONNECTION_VERSION_TLS1_2 = 5, 47 SSL_CONNECTION_VERSION_MAX, 48 }; 49 COMPILE_ASSERT(SSL_CONNECTION_VERSION_MAX - 1 <= SSL_CONNECTION_VERSION_MASK, 50 SSL_CONNECTION_VERSION_MASK_too_small); 51 52 inline int SSLConnectionStatusToCipherSuite(int connection_status) { 53 return (connection_status >> SSL_CONNECTION_CIPHERSUITE_SHIFT) & 54 SSL_CONNECTION_CIPHERSUITE_MASK; 55 } 56 57 inline int SSLConnectionStatusToCompression(int connection_status) { 58 return (connection_status >> SSL_CONNECTION_COMPRESSION_SHIFT) & 59 SSL_CONNECTION_COMPRESSION_MASK; 60 } 61 62 inline int SSLConnectionStatusToVersion(int connection_status) { 63 return (connection_status >> SSL_CONNECTION_VERSION_SHIFT) & 64 SSL_CONNECTION_VERSION_MASK; 65 } 66 67 } // namespace net 68 69 #endif // NET_BASE_SSL_CONNECTION_STATUS_FLAGS_H_ 70