1 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #ifndef NET_BASE_SSL_CONNECTION_STATUS_FLAGS_H_
6 #define NET_BASE_SSL_CONNECTION_STATUS_FLAGS_H_
7 #pragma once
8
9 namespace net {
10
11 // Status flags for SSLInfo::connection_status.
12 enum {
13 // The lower 16 bits are reserved for the TLS ciphersuite id.
14 SSL_CONNECTION_CIPHERSUITE_SHIFT = 0,
15 SSL_CONNECTION_CIPHERSUITE_MASK = 0xffff,
16
17 // The next two bits are reserved for the compression used.
18 SSL_CONNECTION_COMPRESSION_SHIFT = 16,
19 SSL_CONNECTION_COMPRESSION_MASK = 3,
20
21 // We fell back to SSLv3 for this connection.
22 SSL_CONNECTION_SSL3_FALLBACK = 1 << 18,
23
24 // The server doesn't support the renegotiation_info extension. If this bit
25 // is not set then either the extension isn't supported, or we don't have any
26 // knowledge either way. (The latter case will occur when we use an SSL
27 // library that doesn't report it, like SChannel.)
28 SSL_CONNECTION_NO_RENEGOTIATION_EXTENSION = 1 << 19,
29
30 // The next three bits are reserved for the SSL version.
31 SSL_CONNECTION_VERSION_SHIFT = 20,
32 SSL_CONNECTION_VERSION_MASK = 7,
33
34 // 1 << 31 (the sign bit) is reserved so that the SSL connection status will
35 // never be negative.
36 };
37
38 // NOTE: the SSL version enum constants must be between 0 and
39 // SSL_CONNECTION_VERSION_MASK, inclusive.
40 enum {
41 SSL_CONNECTION_VERSION_UNKNOWN = 0, // Unknown SSL version.
42 SSL_CONNECTION_VERSION_SSL2 = 1,
43 SSL_CONNECTION_VERSION_SSL3 = 2,
44 SSL_CONNECTION_VERSION_TLS1 = 3,
45 SSL_CONNECTION_VERSION_TLS1_1 = 4,
46 SSL_CONNECTION_VERSION_TLS1_2 = 5,
47 SSL_CONNECTION_VERSION_MAX,
48 };
49 COMPILE_ASSERT(SSL_CONNECTION_VERSION_MAX - 1 <= SSL_CONNECTION_VERSION_MASK,
50 SSL_CONNECTION_VERSION_MASK_too_small);
51
SSLConnectionStatusToCipherSuite(int connection_status)52 inline int SSLConnectionStatusToCipherSuite(int connection_status) {
53 return (connection_status >> SSL_CONNECTION_CIPHERSUITE_SHIFT) &
54 SSL_CONNECTION_CIPHERSUITE_MASK;
55 }
56
SSLConnectionStatusToCompression(int connection_status)57 inline int SSLConnectionStatusToCompression(int connection_status) {
58 return (connection_status >> SSL_CONNECTION_COMPRESSION_SHIFT) &
59 SSL_CONNECTION_COMPRESSION_MASK;
60 }
61
SSLConnectionStatusToVersion(int connection_status)62 inline int SSLConnectionStatusToVersion(int connection_status) {
63 return (connection_status >> SSL_CONNECTION_VERSION_SHIFT) &
64 SSL_CONNECTION_VERSION_MASK;
65 }
66
67 } // namespace net
68
69 #endif // NET_BASE_SSL_CONNECTION_STATUS_FLAGS_H_
70