Wireshark 4.5.0
The Wireshark network protocol analyzer
Loading...
Searching...
No Matches
packet-tls-utils.h
1/* packet-tls-utils.h
2 * ssl manipulation functions
3 * By Paolo Abeni <paolo.abeni@email.com>
4 *
5 * Wireshark - Network traffic analyzer
6 * By Gerald Combs <gerald@wireshark.org>
7 * Copyright 1998 Gerald Combs
8 *
9 * SPDX-License-Identifier: GPL-2.0-or-later
10 */
11
12#ifndef __PACKET_TLS_UTILS_H__
13#define __PACKET_TLS_UTILS_H__
14
15#include <stdio.h> /* some APIs we declare take a stdio stream as an argument */
16
17#include <glib.h>
18#include <epan/packet.h>
19#include <epan/prefs.h>
20#include <epan/wmem_scopes.h>
21#include <epan/expert.h>
22#include <epan/conversation.h>
23#include <epan/unit_strings.h>
24#include <wsutil/wsgcrypt.h>
25
26#ifdef HAVE_LIBGNUTLS
27#include <gnutls/x509.h>
28#include <gnutls/pkcs12.h>
29#endif /* HAVE_LIBGNUTLS */
30
31/* TODO inline this now that Libgcrypt is mandatory? */
32#define SSL_CIPHER_CTX gcry_cipher_hd_t
33#define SSL_DECRYPT_DEBUG
34
35
36/* other defines */
37typedef enum {
38 SSL_ID_CHG_CIPHER_SPEC = 0x14,
39 SSL_ID_ALERT = 0x15,
40 SSL_ID_HANDSHAKE = 0x16,
41 SSL_ID_APP_DATA = 0x17,
42 SSL_ID_HEARTBEAT = 0x18,
43 SSL_ID_TLS12_CID = 0x19,
44 SSL_ID_DTLS13_ACK = 0x1A,
45} ContentType;
46
47typedef enum {
48 SSL_HND_HELLO_REQUEST = 0,
49 SSL_HND_CLIENT_HELLO = 1,
50 SSL_HND_SERVER_HELLO = 2,
51 SSL_HND_HELLO_VERIFY_REQUEST = 3,
52 SSL_HND_NEWSESSION_TICKET = 4,
53 SSL_HND_END_OF_EARLY_DATA = 5,
54 SSL_HND_HELLO_RETRY_REQUEST = 6,
55 SSL_HND_ENCRYPTED_EXTENSIONS = 8,
56 SSL_HND_CERTIFICATE = 11,
57 SSL_HND_SERVER_KEY_EXCHG = 12,
58 SSL_HND_CERT_REQUEST = 13,
59 SSL_HND_SVR_HELLO_DONE = 14,
60 SSL_HND_CERT_VERIFY = 15,
61 SSL_HND_CLIENT_KEY_EXCHG = 16,
62 SSL_HND_FINISHED = 20,
63 SSL_HND_CERT_URL = 21,
64 SSL_HND_CERT_STATUS = 22,
65 SSL_HND_SUPPLEMENTAL_DATA = 23,
66 SSL_HND_KEY_UPDATE = 24,
67 SSL_HND_COMPRESSED_CERTIFICATE = 25,
68 /* Encrypted Extensions was NextProtocol in draft-agl-tls-nextprotoneg-03
69 * and changed in draft 04. Not to be confused with TLS 1.3 EE. */
70 SSL_HND_ENCRYPTED_EXTS = 67,
71 SSL_HND_MESSAGE_HASH = 254
72} HandshakeType;
73
74#define SSL2_HND_ERROR 0x00
75#define SSL2_HND_CLIENT_HELLO 0x01
76#define SSL2_HND_CLIENT_MASTER_KEY 0x02
77#define SSL2_HND_CLIENT_FINISHED 0x03
78#define SSL2_HND_SERVER_HELLO 0x04
79#define SSL2_HND_SERVER_VERIFY 0x05
80#define SSL2_HND_SERVER_FINISHED 0x06
81#define SSL2_HND_REQUEST_CERTIFICATE 0x07
82#define SSL2_HND_CLIENT_CERTIFICATE 0x08
83
84#define SSL_HND_HELLO_EXT_SERVER_NAME 0
85#define SSL_HND_HELLO_EXT_MAX_FRAGMENT_LENGTH 1
86#define SSL_HND_HELLO_EXT_CLIENT_CERTIFICATE_URL 2
87#define SSL_HND_HELLO_EXT_TRUSTED_CA_KEYS 3
88#define SSL_HND_HELLO_EXT_TRUNCATED_HMAC 4
89#define SSL_HND_HELLO_EXT_STATUS_REQUEST 5
90#define SSL_HND_HELLO_EXT_USER_MAPPING 6
91#define SSL_HND_HELLO_EXT_CLIENT_AUTHZ 7
92#define SSL_HND_HELLO_EXT_SERVER_AUTHZ 8
93#define SSL_HND_HELLO_EXT_CERT_TYPE 9
94#define SSL_HND_HELLO_EXT_SUPPORTED_GROUPS 10 /* renamed from "elliptic_curves" (RFC 7919 / TLS 1.3) */
95#define SSL_HND_HELLO_EXT_EC_POINT_FORMATS 11
96#define SSL_HND_HELLO_EXT_SRP 12
97#define SSL_HND_HELLO_EXT_SIGNATURE_ALGORITHMS 13
98#define SSL_HND_HELLO_EXT_USE_SRTP 14
99#define SSL_HND_HELLO_EXT_HEARTBEAT 15
100#define SSL_HND_HELLO_EXT_ALPN 16
101#define SSL_HND_HELLO_EXT_STATUS_REQUEST_V2 17
102#define SSL_HND_HELLO_EXT_SIGNED_CERTIFICATE_TIMESTAMP 18
103#define SSL_HND_HELLO_EXT_CLIENT_CERT_TYPE 19
104#define SSL_HND_HELLO_EXT_SERVER_CERT_TYPE 20
105#define SSL_HND_HELLO_EXT_PADDING 21
106#define SSL_HND_HELLO_EXT_ENCRYPT_THEN_MAC 22
107#define SSL_HND_HELLO_EXT_EXTENDED_MASTER_SECRET 23
108#define SSL_HND_HELLO_EXT_TOKEN_BINDING 24
109#define SSL_HND_HELLO_EXT_CACHED_INFO 25
110#define SSL_HND_HELLO_EXT_COMPRESS_CERTIFICATE 27
111#define SSL_HND_HELLO_EXT_RECORD_SIZE_LIMIT 28
112/* 26-33 Unassigned*/
113#define SSL_HND_HELLO_EXT_DELEGATED_CREDENTIALS 34 /* draft-ietf-tls-subcerts-10.txt */
114#define SSL_HND_HELLO_EXT_SESSION_TICKET_TLS 35
115/* RFC 8446 (TLS 1.3) */
116#define SSL_HND_HELLO_EXT_KEY_SHARE_OLD 40 /* draft-ietf-tls-tls13-22 (removed in -23) */
117#define SSL_HND_HELLO_EXT_PRE_SHARED_KEY 41
118#define SSL_HND_HELLO_EXT_EARLY_DATA 42
119#define SSL_HND_HELLO_EXT_SUPPORTED_VERSIONS 43
120#define SSL_HND_HELLO_EXT_COOKIE 44
121#define SSL_HND_HELLO_EXT_PSK_KEY_EXCHANGE_MODES 45
122#define SSL_HND_HELLO_EXT_TICKET_EARLY_DATA_INFO 46 /* draft-ietf-tls-tls13-18 (removed in -19) */
123#define SSL_HND_HELLO_EXT_CERTIFICATE_AUTHORITIES 47
124#define SSL_HND_HELLO_EXT_OID_FILTERS 48
125#define SSL_HND_HELLO_EXT_POST_HANDSHAKE_AUTH 49
126#define SSL_HND_HELLO_EXT_SIGNATURE_ALGORITHMS_CERT 50
127#define SSL_HND_HELLO_EXT_KEY_SHARE 51
128#define SSL_HND_HELLO_EXT_TRANSPARENCY_INFO 52 /* draft-ietf-trans-rfc6962-bis-41 */
129#define SSL_HND_HELLO_EXT_CONNECTION_ID_DEPRECATED 53 /* draft-ietf-tls-dtls-connection-id-07 */
130#define SSL_HND_HELLO_EXT_CONNECTION_ID 54
131#define SSL_HND_HELLO_EXT_EXTERNAL_ID_HASH 55 /* RFC 8844 */
132#define SSL_HND_HELLO_EXT_EXTERNAL_SESSION_ID 56 /* RFC 8844 */
133#define SSL_HND_HELLO_EXT_QUIC_TRANSPORT_PARAMETERS_V1 57 /* draft-ietf-quic-tls-33 */
134#define SSL_HND_HELLO_EXT_TICKET_REQUEST 58 /* draft-ietf-tls-ticketrequests-07 */
135#define SSL_HND_HELLO_EXT_DNSSEC_CHAIN 59 /* RFC 9102 */
136#define SSL_HND_HELLO_EXT_GREASE_0A0A 2570
137#define SSL_HND_HELLO_EXT_GREASE_1A1A 6682
138#define SSL_HND_HELLO_EXT_GREASE_2A2A 10794
139#define SSL_HND_HELLO_EXT_NPN 13172 /* 0x3374 */
140#define SSL_HND_HELLO_EXT_GREASE_3A3A 14906
141#define SSL_HND_HELLO_EXT_ALPS_OLD 17513 /* draft-vvv-tls-alps-01, previous value used in BoringSSL implementation */
142#define SSL_HND_HELLO_EXT_ALPS 17613 /* draft-vvv-tls-alps-01, current value used in BoringSSL implementation */
143#define SSL_HND_HELLO_EXT_GREASE_4A4A 19018
144#define SSL_HND_HELLO_EXT_GREASE_5A5A 23130
145#define SSL_HND_HELLO_EXT_GREASE_6A6A 27242
146#define SSL_HND_HELLO_EXT_CHANNEL_ID_OLD 30031 /* 0x754f */
147#define SSL_HND_HELLO_EXT_CHANNEL_ID 30032 /* 0x7550 */
148#define SSL_HND_HELLO_EXT_GREASE_7A7A 31354
149#define SSL_HND_HELLO_EXT_GREASE_8A8A 35466
150#define SSL_HND_HELLO_EXT_GREASE_9A9A 39578
151#define SSL_HND_HELLO_EXT_GREASE_AAAA 43690
152#define SSL_HND_HELLO_EXT_GREASE_BABA 47802
153#define SSL_HND_HELLO_EXT_GREASE_CACA 51914
154#define SSL_HND_HELLO_EXT_GREASE_DADA 56026
155#define SSL_HND_HELLO_EXT_GREASE_EAEA 60138
156#define SSL_HND_HELLO_EXT_GREASE_FAFA 64250
157#define SSL_HND_HELLO_EXT_ECH_OUTER_EXTENSIONS 64768 /* 0xfd00 draft-ietf-tls-esni-16 */
158#define SSL_HND_HELLO_EXT_ENCRYPTED_CLIENT_HELLO 65037 /* 0xfe0d draft-ietf-tls-esni-16 */
159#define SSL_HND_HELLO_EXT_RENEGOTIATION_INFO 65281 /* 0xFF01 */
160#define SSL_HND_HELLO_EXT_QUIC_TRANSPORT_PARAMETERS 65445 /* 0xffa5 draft-ietf-quic-tls-13 */
161#define SSL_HND_HELLO_EXT_ENCRYPTED_SERVER_NAME 65486 /* 0xffce draft-ietf-tls-esni-01 */
162
163#define SSL_HND_CERT_URL_TYPE_INDIVIDUAL_CERT 1
164#define SSL_HND_CERT_URL_TYPE_PKIPATH 2
165#define SSL_HND_CERT_STATUS_TYPE_OCSP 1
166#define SSL_HND_CERT_STATUS_TYPE_OCSP_MULTI 2
167#define SSL_HND_CERT_TYPE_RAW_PUBLIC_KEY 2
168
169/* https://github.com/quicwg/base-drafts/wiki/Temporary-IANA-Registry#quic-transport-parameters */
170#define SSL_HND_QUIC_TP_ORIGINAL_DESTINATION_CONNECTION_ID 0x00
171#define SSL_HND_QUIC_TP_MAX_IDLE_TIMEOUT 0x01
172#define SSL_HND_QUIC_TP_STATELESS_RESET_TOKEN 0x02
173#define SSL_HND_QUIC_TP_MAX_UDP_PAYLOAD_SIZE 0x03
174#define SSL_HND_QUIC_TP_INITIAL_MAX_DATA 0x04
175#define SSL_HND_QUIC_TP_INITIAL_MAX_STREAM_DATA_BIDI_LOCAL 0x05
176#define SSL_HND_QUIC_TP_INITIAL_MAX_STREAM_DATA_BIDI_REMOTE 0x06
177#define SSL_HND_QUIC_TP_INITIAL_MAX_STREAM_DATA_UNI 0x07
178#define SSL_HND_QUIC_TP_INITIAL_MAX_STREAMS_BIDI 0x08
179#define SSL_HND_QUIC_TP_INITIAL_MAX_STREAMS_UNI 0x09
180#define SSL_HND_QUIC_TP_ACK_DELAY_EXPONENT 0x0a
181#define SSL_HND_QUIC_TP_MAX_ACK_DELAY 0x0b
182#define SSL_HND_QUIC_TP_DISABLE_ACTIVE_MIGRATION 0x0c
183#define SSL_HND_QUIC_TP_PREFERRED_ADDRESS 0x0d
184#define SSL_HND_QUIC_TP_ACTIVE_CONNECTION_ID_LIMIT 0x0e
185#define SSL_HND_QUIC_TP_INITIAL_SOURCE_CONNECTION_ID 0x0f
186#define SSL_HND_QUIC_TP_RETRY_SOURCE_CONNECTION_ID 0x10
187#define SSL_HND_QUIC_TP_VERSION_INFORMATION 0x11 /* https://tools.ietf.org/html/draft-ietf-quic-version-negotiation-14 */
188#define SSL_HND_QUIC_TP_MAX_DATAGRAM_FRAME_SIZE 0x20 /* https://datatracker.ietf.org/doc/html/draft-ietf-quic-datagram-06 */
189#define SSL_HND_QUIC_TP_CIBIR_ENCODING 0x1000 /* https://datatracker.ietf.org/doc/html/draft-banks-quic-cibir-01 */
190#define SSL_HND_QUIC_TP_LOSS_BITS 0x1057 /* https://tools.ietf.org/html/draft-ferrieuxhamchaoui-quic-lossbits-03 */
191#define SSL_HND_QUIC_TP_GREASE_QUIC_BIT 0x2ab2 /* RFC 9287 */
192#define SSL_HND_QUIC_TP_ENABLE_TIME_STAMP 0x7157 /* https://tools.ietf.org/html/draft-huitema-quic-ts-02 */
193#define SSL_HND_QUIC_TP_ENABLE_TIME_STAMP_V2 0x7158 /* https://tools.ietf.org/html/draft-huitema-quic-ts-03 */
194#define SSL_HND_QUIC_TP_MIN_ACK_DELAY_OLD 0xde1a /* https://tools.ietf.org/html/draft-iyengar-quic-delayed-ack-00 */
195/* https://quiche.googlesource.com/quiche/+/refs/heads/master/quic/core/crypto/transport_parameters.cc */
196#define SSL_HND_QUIC_TP_GOOGLE_USER_AGENT 0x3129
197#define SSL_HND_QUIC_TP_GOOGLE_KEY_UPDATE_NOT_YET_SUPPORTED 0x312B
198#define SSL_HND_QUIC_TP_GOOGLE_QUIC_VERSION 0x4752
199#define SSL_HND_QUIC_TP_GOOGLE_INITIAL_RTT 0x3127
200#define SSL_HND_QUIC_TP_GOOGLE_SUPPORT_HANDSHAKE_DONE 0x312A
201#define SSL_HND_QUIC_TP_GOOGLE_QUIC_PARAMS 0x4751
202#define SSL_HND_QUIC_TP_GOOGLE_CONNECTION_OPTIONS 0x3128
203/* https://github.com/facebookincubator/mvfst/blob/master/quic/QuicConstants.h */
204#define SSL_HND_QUIC_TP_FACEBOOK_PARTIAL_RELIABILITY 0xFF00
205#define SSL_HND_QUIC_TP_VERSION_INFORMATION_DRAFT 0xff73db /* https://datatracker.ietf.org/doc/draft-ietf-quic-version-negotiation/13/ */
206#define SSL_HND_QUIC_TP_MIN_ACK_DELAY_DRAFT_V1 0xFF03DE1A /* https://tools.ietf.org/html/draft-ietf-quic-ack-frequency-01 */
207#define SSL_HND_QUIC_TP_MIN_ACK_DELAY_DRAFT05 0xff04de1a /* https://tools.ietf.org/html/draft-ietf-quic-ack-frequency-04 / draft-05 */
208#define SSL_HND_QUIC_TP_MIN_ACK_DELAY 0xff04de1b /* https://tools.ietf.org/html/draft-ietf-quic-ack-frequency-07 */
209#define SSL_HND_QUIC_TP_ENABLE_MULTIPATH_DRAFT04 0x0f739bbc1b666d04 /* https://tools.ietf.org/html/draft-ietf-quic-multipath-04 */
210#define SSL_HND_QUIC_TP_ENABLE_MULTIPATH_DRAFT05 0x0f739bbc1b666d05 /* https://tools.ietf.org/html/draft-ietf-quic-multipath-05 */
211#define SSL_HND_QUIC_TP_ENABLE_MULTIPATH 0x0f739bbc1b666d06 /* https://tools.ietf.org/html/draft-ietf-quic-multipath-06 */
212#define SSL_HND_QUIC_TP_INITIAL_MAX_PATHS 0x0f739bbc1b666d07 /* https://tools.ietf.org/html/draft-ietf-quic-multipath-07 */
213#define SSL_HND_QUIC_TP_INITIAL_MAX_PATH_ID_DRAFT09 0x0f739bbc1b666d09 /* https://tools.ietf.org/html/draft-ietf-quic-multipath-09 */
214#define SSL_HND_QUIC_TP_INITIAL_MAX_PATH_ID_DRAFT11 0x0f739bbc1b666d11 /* https://tools.ietf.org/html/draft-ietf-quic-multipath-11 */
215#define SSL_HND_QUIC_TP_INITIAL_MAX_PATH_ID_DRAFT12 0x0f739bbc1b666d0c /* https://tools.ietf.org/html/draft-ietf-quic-multipath-12 */
216#define SSL_HND_QUIC_TP_INITIAL_MAX_PATH_ID 0x0f739bbc1b666d0d /* https://tools.ietf.org/html/draft-ietf-quic-multipath-13 */
217
218/*
219 * Lookup tables
220 */
221extern const value_string ssl_version_short_names[];
222extern const value_string ssl_20_msg_types[];
223extern value_string_ext ssl_20_cipher_suites_ext;
224extern const value_string ssl_20_certificate_type[];
225extern const value_string ssl_31_content_type[];
226extern const value_string ssl_versions[];
227extern const value_string ssl_31_change_cipher_spec[];
228extern const value_string ssl_31_alert_level[];
229extern const value_string ssl_31_alert_description[];
230extern const value_string ssl_31_handshake_type[];
231extern const value_string tls_heartbeat_type[];
232extern const value_string tls_heartbeat_mode[];
233extern const value_string ssl_31_compression_method[];
234extern const value_string ssl_31_key_exchange_algorithm[];
235extern const value_string ssl_31_signature_algorithm[];
236extern const value_string ssl_31_client_certificate_type[];
237extern const value_string ssl_31_public_value_encoding[];
238extern value_string_ext ssl_31_ciphersuite_ext;
239extern const value_string tls_hello_extension_types[];
240extern const value_string tls_hash_algorithm[];
241extern const value_string tls_signature_algorithm[];
242extern const value_string tls13_signature_algorithm[];
243extern const value_string tls_certificate_type[];
244extern const value_string tls_cert_chain_type[];
245extern const value_string tls_cert_status_type[];
246extern const value_string ssl_extension_curves[];
247extern const value_string ssl_extension_ec_point_formats[];
248extern const value_string ssl_curve_types[];
249extern const value_string tls_hello_ext_server_name_type_vs[];
250extern const value_string tls_hello_ext_max_fragment_length[];
251extern const value_string tls_hello_ext_psk_ke_mode[];
252extern const value_string tls_hello_ext_trusted_ca_key_type[];
253extern const value_string tls13_key_update_request[];
254extern const value_string compress_certificate_algorithm_vals[];
255extern const val64_string quic_transport_parameter_id[];
256extern const range_string quic_version_vals[];
257extern const val64_string quic_enable_time_stamp_v2_vals[];
258extern const val64_string quic_enable_multipath_vals[];
259extern const value_string tls_hello_ext_ech_clienthello_types[];
260extern const value_string kem_id_type_vals[];
261extern const value_string kdf_id_type_vals[];
262extern const value_string aead_id_type_vals[];
263extern const value_string token_binding_key_parameter_vals[];
264
265/* XXX Should we use GByteArray instead? */
266typedef struct _StringInfo {
267 unsigned char *data; /* Backing storage which may be larger than data_len */
268 unsigned data_len; /* Length of the meaningful part of data */
269} StringInfo;
270
271#define SSL_WRITE_KEY 1
272
273#define SSL_VER_UNKNOWN 0
274#define SSLV2_VERSION 0x0002 /* not in record layer, SSL_CLIENT_SERVER from
275 http://www-archive.mozilla.org/projects/security/pki/nss/ssl/draft02.html */
276#define SSLV3_VERSION 0x300
277#define TLSV1_VERSION 0x301
278#define TLCPV1_VERSION 0x101
279#define TLSV1DOT1_VERSION 0x302
280#define TLSV1DOT2_VERSION 0x303
281#define TLSV1DOT3_VERSION 0x304
282#define DTLSV1DOT0_VERSION 0xfeff
283#define DTLSV1DOT0_OPENSSL_VERSION 0x100
284#define DTLSV1DOT2_VERSION 0xfefd
285#define DTLSV1DOT3_VERSION 0xfefc
286
287/* Returns the TLS 1.3 draft version or 0 if not applicable. */
288static inline uint8_t extract_tls13_draft_version(uint32_t version) {
289 if ((version & 0xff00) == 0x7f00) {
290 return (uint8_t) version;
291 }
292 return 0;
293}
294
295
296#define SSL_CLIENT_RANDOM (1<<0)
297#define SSL_SERVER_RANDOM (1<<1)
298#define SSL_CIPHER (1<<2)
299#define SSL_HAVE_SESSION_KEY (1<<3)
300#define SSL_VERSION (1<<4)
301#define SSL_MASTER_SECRET (1<<5)
302#define SSL_PRE_MASTER_SECRET (1<<6)
303#define SSL_CLIENT_EXTENDED_MASTER_SECRET (1<<7)
304#define SSL_SERVER_EXTENDED_MASTER_SECRET (1<<8)
305#define SSL_NEW_SESSION_TICKET (1<<10)
306#define SSL_ENCRYPT_THEN_MAC (1<<11)
307#define SSL_SEEN_0RTT_APPDATA (1<<12)
308#define SSL_QUIC_RECORD_LAYER (1<<13) /* For QUIC (draft >= -13) */
309
310#define SSL_EXTENDED_MASTER_SECRET_MASK (SSL_CLIENT_EXTENDED_MASTER_SECRET|SSL_SERVER_EXTENDED_MASTER_SECRET)
311
312/* SSL Cipher Suite modes */
313typedef enum {
314 MODE_STREAM, /* GenericStreamCipher */
315 MODE_CBC, /* GenericBlockCipher */
316 MODE_GCM, /* GenericAEADCipher */
317 MODE_CCM, /* AEAD_AES_{128,256}_CCM with 16 byte auth tag */
318 MODE_CCM_8, /* AEAD_AES_{128,256}_CCM with 8 byte auth tag */
319 MODE_POLY1305, /* AEAD_CHACHA20_POLY1305 with 16 byte auth tag (RFC 7905) */
320 MODE_ECB, /* ECB: used to perform record seq number encryption in DTLSv1.3 */
321} ssl_cipher_mode_t;
322
323/* Explicit and implicit nonce length (RFC 5116 - Section 3.2.1) */
324#define IMPLICIT_NONCE_LEN 4
325#define EXPLICIT_NONCE_LEN 8
326#define TLS13_AEAD_NONCE_LENGTH 12
327
328/* TLS 1.3 Record type for selecting the appropriate secret. */
329typedef enum {
330 TLS_SECRET_0RTT_APP,
331 TLS_SECRET_HANDSHAKE,
332 TLS_SECRET_APP,
333} TLSRecordType;
334
335#define SSL_DEBUG_USE_STDERR "-"
336
337#define SSLV2_MAX_SESSION_ID_LENGTH_IN_BYTES 16
338
339/* Record fragment lengths MUST NOT exceed 2^14 (= 0x4000) */
340#define TLS_MAX_RECORD_LENGTH 0x4000
342typedef struct _SslCipherSuite {
343 int number;
344 int kex;
345 int enc;
346 int dig;
347 ssl_cipher_mode_t mode;
350typedef struct _SslFlow {
351 uint32_t byte_seq;
352 uint16_t flags;
353 wmem_tree_t *multisegment_pdus;
354} SslFlow;
355
356typedef struct _SslDecompress SslDecompress;
358typedef struct _SslDecoder {
359 const SslCipherSuite *cipher_suite;
360 int compression;
361 unsigned char _mac_key_or_write_iv[48];
362 StringInfo mac_key; /* for block and stream ciphers */
363 StringInfo write_iv; /* for AEAD ciphers (at least GCM, CCM) */
364 SSL_CIPHER_CTX sn_evp; /* used to decrypt serial number in DTLSv1.3 */
365 SSL_CIPHER_CTX evp;
366 SslDecompress *decomp;
367 uint64_t dtls13_epoch;
368 uint64_t seq;
370 uint16_t epoch;
371 SslFlow *flow;
373} SslDecoder;
374
375#define KEX_DHE_DSS 0x10
376#define KEX_DHE_PSK 0x11
377#define KEX_DHE_RSA 0x12
378#define KEX_DH_ANON 0x13
379#define KEX_DH_DSS 0x14
380#define KEX_DH_RSA 0x15
381#define KEX_ECDHE_ECDSA 0x16
382#define KEX_ECDHE_PSK 0x17
383#define KEX_ECDHE_RSA 0x18
384#define KEX_ECDH_ANON 0x19
385#define KEX_ECDH_ECDSA 0x1a
386#define KEX_ECDH_RSA 0x1b
387#define KEX_KRB5 0x1c
388#define KEX_PSK 0x1d
389#define KEX_RSA 0x1e
390#define KEX_RSA_PSK 0x1f
391#define KEX_SRP_SHA 0x20
392#define KEX_SRP_SHA_DSS 0x21
393#define KEX_SRP_SHA_RSA 0x22
394#define KEX_IS_DH(n) ((n) >= KEX_DHE_DSS && (n) <= KEX_ECDH_RSA)
395#define KEX_TLS13 0x23
396#define KEX_ECJPAKE 0x24
397
398#define KEX_ECDHE_SM2 0x25
399#define KEX_ECC_SM2 0x26
400#define KEX_IBSDH_SM9 0x27
401#define KEX_IBC_SM9 0x28
402
403/* Order is significant, must match "ciphers" array in packet-tls-utils.c */
404
405#define ENC_START 0x30
406#define ENC_DES 0x30
407#define ENC_3DES 0x31
408#define ENC_RC4 0x32
409#define ENC_RC2 0x33
410#define ENC_IDEA 0x34
411#define ENC_AES 0x35
412#define ENC_AES256 0x36
413#define ENC_CAMELLIA128 0x37
414#define ENC_CAMELLIA256 0x38
415#define ENC_SEED 0x39
416#define ENC_CHACHA20 0x3A
417#define ENC_SM1 0x3B
418#define ENC_SM4 0x3C
419#define ENC_NULL 0x3D
420
421
422#define DIG_MD5 0x40
423#define DIG_SHA 0x41
424#define DIG_SHA256 0x42
425#define DIG_SHA384 0x43
426#define DIG_SM3 0x44
427#define DIG_NA 0x45 /* Not Applicable */
429typedef struct {
430 const char *name;
431 unsigned len;
434typedef struct _SslRecordInfo {
435 unsigned char *plain_data;
436 unsigned data_len;
437 int id;
439 ContentType type;
440 SslFlow *flow;
442 uint64_t record_seq;
443 uint32_t seq;
444 struct _SslRecordInfo* next;
446
451typedef struct _TlsHsFragment {
452 unsigned record_id;
454 unsigned reassembly_id;
455 uint32_t offset;
456 uint8_t type;
457 int is_last : 1;
458 struct _TlsHsFragment *next;
461typedef struct {
462 SslRecordInfo *records;
463 TlsHsFragment *hs_fragments;
464 uint32_t srcport;
465 uint32_t destport;
466 int cipher;
470typedef struct _SslSession {
471 int cipher;
472 int compression;
473 uint16_t version;
474 unsigned char tls13_draft_version;
475 unsigned char _client_random[32];
476 int8_t client_cert_type;
477 int8_t server_cert_type;
478 uint32_t client_ccs_frame;
479 uint32_t server_ccs_frame;
480 uint32_t first_ch_ech_frame;
481 StringInfo client_random;
482 bool ech;
483 bool hrr_ech_declined;
484 unsigned char ech_confirmation[8];
485 unsigned char hrr_ech_confirmation[8];
486 unsigned char first_ech_auth_tag[16];
487
488 /* The address/proto/port of the server as determined from heuristics
489 * (e.g. ClientHello) or set externally (via ssl_set_master_secret()). */
490 address srv_addr;
491 port_type srv_ptype;
492 unsigned srv_port;
493
494 /* The Application layer protocol if known (for STARTTLS support) */
495 dissector_handle_t app_handle;
496 const char *alpn_name;
497 /* The ALPN the client requested, not necessarily the one chosen */
498 const char *client_alpn_name;
499 uint32_t last_nontls_frame;
500 bool is_session_resumed;
501
502 /* First pass only: track an in-progress handshake reassembly (>0) */
503 uint32_t client_hs_reassembly_id;
504 uint32_t server_hs_reassembly_id;
505
506 /* Connection ID extension
507
508 struct {
509 opaque cid<0..2^8-1>;
510 } ConnectionId;
511 */
512
513 uint8_t *client_cid;
514 uint8_t *server_cid;
515 uint8_t client_cid_len;
516 bool client_cid_len_present;
517 uint8_t server_cid_len;
518 bool server_cid_len_present;
519 bool deprecated_cid; /* Set when handshake is using the deprecated CID extension type */
520 uint64_t dtls13_current_epoch[2]; /* max epoch (for server and client respectively) */
521 uint64_t dtls13_next_seq_num[2]; /* DTLSv1.3 next expected seq number (for server and client respectively) */
522} SslSession;
523
524/* RFC 5246, section 8.1 says that the master secret is always 48 bytes */
525#define SSL_MASTER_SECRET_LENGTH 48
526
527struct cert_key_id; /* defined in epan/secrets.h */
528
529/* This holds state information for a SSL conversation */
530typedef struct _SslDecryptSession {
531 unsigned char _master_secret[SSL_MASTER_SECRET_LENGTH];
532 unsigned char _session_id[256];
533 unsigned char _client_random[32];
534 unsigned char _server_random[32];
535 StringInfo session_id;
536 StringInfo session_ticket;
537 StringInfo server_random;
538 StringInfo client_random;
539 StringInfo master_secret;
540 StringInfo handshake_data;
541 /* the data store for this StringInfo must be allocated explicitly with a capture lifetime scope */
542 StringInfo pre_master_secret;
543 unsigned char _server_data_for_iv[24];
544 StringInfo server_data_for_iv;
545 unsigned char _client_data_for_iv[24];
546 StringInfo client_data_for_iv;
547
548 int state;
549 const SslCipherSuite *cipher_suite;
550 SslDecoder *server;
551 SslDecoder *client;
552 SslDecoder *server_new;
553 SslDecoder *client_new;
554#if defined(HAVE_LIBGNUTLS)
555 struct cert_key_id *cert_key_id;
556#endif
557 StringInfo psk;
558 StringInfo app_data_segment;
559 SslSession session;
560 bool has_early_data;
561 StringInfo ech_transcript;
562
564
565/* RecordNumber - RFC 9147 section 4 */
566typedef struct {
567 uint64_t epoch;
568 uint64_t sequence_number;
570
571/* User Access Table */
572typedef struct _ssldecrypt_assoc_t {
573 char* ipaddr;
574 char* port;
575 char* protocol;
576 char* keyfile;
577 char* password;
580typedef struct ssl_common_options {
581 const char *psk;
582 const char *keylog_filename;
584
586typedef struct {
587 GHashTable *session; /* Session ID (1-32 bytes) to master secret. */
588 GHashTable *tickets; /* Session Ticket to master secret. */
589 GHashTable *crandom; /* Client Random to master secret */
590 GHashTable *pre_master; /* First 8 bytes of encrypted pre-master secret to
591 pre-master secret */
592 GHashTable *pms; /* Client Random to unencrypted pre-master secret */
593
594 /* For TLS 1.3: maps Client Random to derived secret. */
595 GHashTable *tls13_client_early;
596 GHashTable *tls13_client_handshake;
597 GHashTable *tls13_server_handshake;
598 GHashTable *tls13_client_appdata;
599 GHashTable *tls13_server_appdata;
600 GHashTable *tls13_early_exporter;
601 GHashTable *tls13_exporter;
602 GHashTable *ech_secret;
603 GHashTable *ech_config;
604
605 /* The hash tables above store the static keylog file contents and secrets
606 * from any DSB, not all of which may be used, in addition to any master
607 * secrets derived at runtime ([D]TLS < 1.3). These store the used
608 * Client Random for exporting master secrets and derived secrets in
609 * TLS Export Sessions or adding a DSB.
610 */
611 GHashTable *used_crandom;
613
614int ssl_get_keyex_alg(int cipher);
615
616void quic_transport_parameter_id_base_custom(char *result, uint64_t parameter_id);
617
618bool ssldecrypt_uat_fld_ip_chk_cb(void*, const char*, unsigned, const void*, const void*, char** err);
619bool ssldecrypt_uat_fld_port_chk_cb(void*, const char*, unsigned, const void*, const void*, char** err);
620bool ssldecrypt_uat_fld_fileopen_chk_cb(void*, const char*, unsigned, const void*, const void*, char** err);
621bool ssldecrypt_uat_fld_password_chk_cb(void*, const char*, unsigned, const void*, const void*, char** err);
622char* ssl_association_info(const char* dissector_table_name, const char* table_protocol);
623
625void ssl_init_cid_list(void);
626
628void ssl_cleanup_cid_list(void);
629
631void ssl_add_session_by_cid(SslDecryptSession *ssl);
632
638SslDecryptSession *ssl_get_session_by_cid(tvbuff_t *tvb, uint32_t offset);
639
644extern SslDecryptSession *
645ssl_get_session(conversation_t *conversation, dissector_handle_t tls_handle);
646
648extern void
649ssl_reset_session(SslSession *session, SslDecryptSession *ssl, bool is_client);
650
652extern void
653ssl_set_server(SslSession *session, address *addr, port_type ptype, uint32_t port);
654
662WS_DLL_PUBLIC void
663tls_set_appdata_dissector(dissector_handle_t tls_handle, packet_info *pinfo,
664 dissector_handle_t app_handle);
665
675WS_DLL_PUBLIC uint32_t
676ssl_starttls_ack(dissector_handle_t tls_handle, packet_info *pinfo,
677 dissector_handle_t app_handle);
678
687WS_DLL_PUBLIC uint32_t
688ssl_starttls_post_ack(dissector_handle_t tls_handle, packet_info *pinfo,
689 dissector_handle_t app_handle);
690
692ssl_find_appdata_dissector(const char *name);
693
699extern void
700ssl_data_set(StringInfo* buf, const unsigned char* src, unsigned len);
701
705extern int
706ssl_data_alloc(StringInfo* str, size_t len);
707
708extern int
709ssl_cipher_setiv(SSL_CIPHER_CTX *cipher, unsigned char* iv, int iv_len);
710
714extern const SslCipherSuite *
715ssl_find_cipher(int num);
716
717
719int
720ssl_get_cipher_algo(const SslCipherSuite *cipher_suite);
721
726unsigned
727ssl_get_cipher_blocksize(const SslCipherSuite *cipher_suite);
728
729bool
730ssl_generate_pre_master_secret(SslDecryptSession *ssl_session,
731 uint32_t length, tvbuff_t *tvb, uint32_t offset,
732 const char *ssl_psk, packet_info *pinfo,
733#ifdef HAVE_LIBGNUTLS
734 GHashTable *key_hash,
735#endif
736 const ssl_master_key_map_t *mk_map);
737
742extern int
743ssl_generate_keyring_material(SslDecryptSession*ssl_session);
744
745extern void
746ssl_change_cipher(SslDecryptSession *ssl_session, bool server);
747
763extern int
764ssl_decrypt_record(wmem_allocator_t* allocator, SslDecryptSession *ssl, SslDecoder *decoder, uint8_t ct, uint16_t record_version,
765 bool ignore_mac_failed,
766 const unsigned char *in, uint16_t inl, const unsigned char *cid, uint8_t cidl,
767 StringInfo *comp_str, StringInfo *out_str, unsigned *outl);
768
769
770/* Common part between TLS and DTLS dissectors */
771
772/* handling of association between tls/dtls ports and clear text protocol */
773extern void
774ssl_association_add(const char* dissector_table_name, dissector_handle_t main_handle, dissector_handle_t subdissector_handle, unsigned port, bool tcp);
775
776extern void
777ssl_association_remove(const char* dissector_table_name, dissector_handle_t main_handle, dissector_handle_t subdissector_handle, unsigned port, bool tcp);
778
779extern int
780ssl_packet_from_server(SslSession *session, dissector_table_t table, const packet_info *pinfo);
781
782/* Obtain information about the current TLS layer. */
784tls_add_packet_info(int proto, packet_info *pinfo, uint8_t curr_layer_num_ssl);
785
786/* add to packet data a copy of the specified real data */
787extern void
788ssl_add_record_info(int proto, packet_info *pinfo, const unsigned char *data, int data_len, int record_id, SslFlow *flow, ContentType type, uint8_t curr_layer_num_ssl, uint64_t record_seq);
789
790/* search in packet data for the specified id; return a newly created tvb for the associated data */
791extern tvbuff_t*
792ssl_get_record_info(tvbuff_t *parent_tvb, int proto, packet_info *pinfo, int record_id, uint8_t curr_layer_num_ssl, SslRecordInfo **matched_record);
793
794/* initialize/reset per capture state data (ssl sessions cache) */
795extern void
796ssl_common_init(ssl_master_key_map_t *master_key_map,
797 StringInfo *decrypted_data, StringInfo *compressed_data);
798extern void
799ssl_common_cleanup(ssl_master_key_map_t *master_key_map, FILE **ssl_keylog_file,
800 StringInfo *decrypted_data, StringInfo *compressed_data);
801
807WS_DLL_PUBLIC ssl_master_key_map_t *
808tls_get_master_key_map(bool load_secrets);
809
810/* Process lines from the TLS key log and populate the secrets map. */
811extern void
812tls_keylog_process_lines(const ssl_master_key_map_t *mk_map, const uint8_t *data, unsigned len);
813
814/* tries to update the secrets cache from the given filename */
815extern void
816ssl_load_keyfile(const char *ssl_keylog_filename, FILE **keylog_file,
817 const ssl_master_key_map_t *mk_map);
818
819#ifdef HAVE_LIBGNUTLS
820/* parse ssl related preferences (private keys and ports association strings) */
821extern void
822ssl_parse_key_list(const ssldecrypt_assoc_t * uats, GHashTable *key_hash, const char* dissector_table_name, dissector_handle_t main_handle, bool tcp);
823#endif
824
825extern void
826ssl_finalize_decryption(SslDecryptSession *ssl, ssl_master_key_map_t *mk_map);
827
832extern void
833tls_save_crandom(SslDecryptSession *ssl, ssl_master_key_map_t *mk_map);
834
835extern bool
836tls13_generate_keys(SslDecryptSession *ssl_session, const StringInfo *secret, bool is_from_server);
837
838extern StringInfo *
839tls13_load_secret(SslDecryptSession *ssl, ssl_master_key_map_t *mk_map,
840 bool is_from_server, TLSRecordType type);
841
842extern void
843tls13_change_key(SslDecryptSession *ssl, ssl_master_key_map_t *mk_map,
844 bool is_from_server, TLSRecordType type);
845
846extern void
847tls13_key_update(SslDecryptSession *ssl, bool is_from_server);
848
849extern bool
850ssl_is_valid_content_type(uint8_t type);
851
852extern bool
853ssl_is_valid_handshake_type(uint8_t hs_type, bool is_dtls);
854
855extern bool
856tls_scan_server_hello(tvbuff_t *tvb, uint32_t offset, uint32_t offset_end,
857 uint16_t *server_version, bool *is_hrr);
858
859extern void
860ssl_try_set_version(SslSession *session, SslDecryptSession *ssl,
861 uint8_t content_type, uint8_t handshake_type,
862 bool is_dtls, uint16_t version);
863
864extern void
865ssl_calculate_handshake_hash(SslDecryptSession *ssl_session, tvbuff_t *tvb, uint32_t offset, uint32_t length);
866
867/* common header fields, subtrees and expert info for SSL and DTLS dissectors */
868typedef struct ssl_common_dissect {
869 struct {
870 int change_cipher_spec;
871 int hs_exts_len;
872 int hs_ext_alpn_len;
873 int hs_ext_alpn_list;
874 int hs_ext_alpn_str;
875 int hs_ext_alpn_str_len;
876 int hs_ext_cert_url_item;
877 int hs_ext_cert_url_padding;
878 int hs_ext_cert_url_sha1;
879 int hs_ext_cert_url_type;
880 int hs_ext_cert_url_url;
881 int hs_ext_cert_url_url_hash_list_len;
882 int hs_ext_cert_url_url_len;
883 int hs_ext_cert_status_type;
884 int hs_ext_cert_status_request_len;
885 int hs_ext_cert_status_responder_id_list_len;
886 int hs_ext_cert_status_request_extensions_len;
887 int hs_ext_cert_status_request_list_len;
888 int hs_ocsp_response_list_len;
889 int hs_ocsp_response_len;
890 int hs_ext_cert_type;
891 int hs_ext_cert_types;
892 int hs_ext_cert_types_len;
893 int hs_ext_data;
894 int hs_ext_ec_point_format;
895 int hs_ext_ec_point_formats;
896 int hs_ext_ec_point_formats_len;
897 int hs_ext_srp_len;
898 int hs_ext_srp_username;
899 int hs_ext_supported_group;
900 int hs_ext_supported_groups;
901 int hs_ext_supported_groups_len;
902 int hs_ext_ech_outer_ext;
903 int hs_ext_ech_outer_ext_len;
904 int hs_ech_confirm;
905 int hs_ech_confirm_compute;
906 int hs_ext_heartbeat_mode;
907 int hs_ext_len;
908 int hs_ext_npn_str;
909 int hs_ext_npn_str_len;
910 int hs_ext_reneg_info_len;
911 int hs_ext_reneg_info;
912 int hs_ext_key_share_client_length;
913 int hs_ext_key_share_group;
914 int hs_ext_key_share_key_exchange_length;
915 int hs_ext_key_share_key_exchange;
916 int hs_ext_key_share_selected_group;
917 int hs_ext_psk_identities_length;
918 int hs_ext_psk_identity_identity_length;
919 int hs_ext_psk_identity_identity;
920 int hs_ext_psk_identity_obfuscated_ticket_age;
921 int hs_ext_psk_binders_length;
922 int hs_ext_psk_binders;
923 int hs_ext_psk_binder;
924 int hs_ext_psk_binder_binder_length;
925 int hs_ext_psk_binder_binder;
926 int hs_ext_psk_identity_selected;
927 int hs_ext_session_ticket;
928 int hs_ext_supported_versions_len;
929 int hs_ext_supported_version;
930 int hs_ext_cookie_len;
931 int hs_ext_cookie;
932 int hs_ext_server_name;
933 int hs_ext_server_name_len;
934 int hs_ext_server_name_list_len;
935 int hs_ext_server_name_type;
936 int hs_ext_max_fragment_length;
937 int hs_ext_padding_data;
938 int hs_ext;
939 int hs_ext_type;
940 int hs_ext_connection_id_length;
941 int hs_ext_connection_id;
942 int hs_ext_trusted_ca_keys_len;
943 int hs_ext_trusted_ca_keys_list;
944 int hs_ext_trusted_ca_key;
945 int hs_ext_trusted_ca_key_type;
946 int hs_ext_trusted_ca_key_hash;
947 int hs_ext_trusted_ca_key_dname_len;
948 int hs_ext_trusted_ca_key_dname;
949 int hs_sig_hash_alg;
950 int hs_sig_hash_alg_len;
951 int hs_sig_hash_algs;
952 int hs_sig_hash_hash;
953 int hs_sig_hash_sig;
954 int hs_client_keyex_epms_len;
955 int hs_client_keyex_epms;
956 int hs_server_keyex_modulus_len;
957 int hs_server_keyex_exponent_len;
958 int hs_server_keyex_sig_len;
959 int hs_server_keyex_p_len;
960 int hs_server_keyex_g_len;
961 int hs_server_keyex_ys_len;
962 int hs_client_keyex_yc_len;
963 int hs_client_keyex_point_len;
964 int hs_server_keyex_point_len;
965 int hs_server_keyex_p;
966 int hs_server_keyex_g;
967 int hs_server_keyex_curve_type;
968 int hs_server_keyex_named_curve;
969 int hs_server_keyex_ys;
970 int hs_client_keyex_yc;
971 int hs_server_keyex_point;
972 int hs_client_keyex_point;
973 int hs_server_keyex_xs_len;
974 int hs_client_keyex_xc_len;
975 int hs_server_keyex_xs;
976 int hs_client_keyex_xc;
977 int hs_server_keyex_vs_len;
978 int hs_client_keyex_vc_len;
979 int hs_server_keyex_vs;
980 int hs_client_keyex_vc;
981 int hs_server_keyex_rs_len;
982 int hs_client_keyex_rc_len;
983 int hs_server_keyex_rs;
984 int hs_client_keyex_rc;
985 int hs_server_keyex_modulus;
986 int hs_server_keyex_exponent;
987 int hs_server_keyex_sig;
988 int hs_server_keyex_hint_len;
989 int hs_server_keyex_hint;
990 int hs_client_keyex_identity_len;
991 int hs_client_keyex_identity;
992 int hs_certificates_len;
993 int hs_certificates;
994 int hs_certificate_len;
995 int hs_certificate;
996 int hs_cert_types_count;
997 int hs_cert_types;
998 int hs_cert_type;
999 int hs_dnames_len;
1000 int hs_dnames;
1001 int hs_dnames_truncated;
1002 int hs_dname_len;
1003 int hs_dname;
1004 int hs_random;
1005 int hs_random_time;
1006 int hs_random_bytes;
1007 int hs_session_id;
1008 int hs_session_id_len;
1009 int hs_client_version;
1010 int hs_server_version;
1011 int hs_cipher_suites_len;
1012 int hs_cipher_suites;
1013 int hs_cipher_suite;
1014 int hs_comp_methods_len;
1015 int hs_comp_methods;
1016 int hs_comp_method;
1017 int hs_session_ticket_lifetime_hint;
1018 int hs_session_ticket_age_add;
1019 int hs_session_ticket_nonce_len;
1020 int hs_session_ticket_nonce;
1021 int hs_session_ticket_len;
1022 int hs_session_ticket;
1023 int hs_finished;
1024 int hs_client_cert_vrfy_sig_len;
1025 int hs_client_cert_vrfy_sig;
1026 int hs_ja3_full;
1027 int hs_ja3_hash;
1028 int hs_ja3s_full;
1029 int hs_ja3s_hash;
1030 int hs_ja4;
1031 int hs_ja4_r;
1032
1033 /* TLS 1.3 */
1034 int hs_ext_psk_ke_modes_length;
1035 int hs_ext_psk_ke_mode;
1036 int hs_certificate_request_context_length;
1037 int hs_certificate_request_context;
1038 int hs_key_update_request_update;
1039 int sct_scts_length;
1040 int sct_sct_length;
1041 int sct_sct_version;
1042 int sct_sct_logid;
1043 int sct_sct_timestamp;
1044 int sct_sct_extensions_length;
1045 int sct_sct_extensions;
1046 int sct_sct_signature;
1047 int sct_sct_signature_length;
1048 int hs_ext_max_early_data_size;
1049 int hs_ext_oid_filters_length;
1050 int hs_ext_oid_filters_oid_length;
1051 int hs_ext_oid_filters_oid;
1052 int hs_ext_oid_filters_values_length;
1053 int hs_cred_valid_time;
1054 int hs_cred_pubkey;
1055 int hs_cred_pubkey_len;
1056 int hs_cred_signature;
1057 int hs_cred_signature_len;
1058
1059 /* compress_certificate */
1060 int hs_ext_compress_certificate_algorithms_length;
1061 int hs_ext_compress_certificate_algorithm;
1062 int hs_ext_compress_certificate_uncompressed_length;
1063 int hs_ext_compress_certificate_compressed_certificate_message_length;
1064 int hs_ext_compress_certificate_compressed_certificate_message;
1065
1066 /* Token Binding Negotiation */
1067 int hs_ext_token_binding_version_major;
1068 int hs_ext_token_binding_version_minor;
1069 int hs_ext_token_binding_key_parameters;
1070 int hs_ext_token_binding_key_parameters_length;
1071 int hs_ext_token_binding_key_parameter;
1072
1073 int hs_ext_record_size_limit;
1074
1075 /* QUIC Transport Parameters */
1076 int hs_ext_quictp_len;
1077 int hs_ext_quictp_parameter;
1078 int hs_ext_quictp_parameter_type;
1079 int hs_ext_quictp_parameter_len;
1080 int hs_ext_quictp_parameter_len_old;
1081 int hs_ext_quictp_parameter_value;
1082 int hs_ext_quictp_parameter_original_destination_connection_id;
1083 int hs_ext_quictp_parameter_max_idle_timeout;
1084 int hs_ext_quictp_parameter_stateless_reset_token;
1085 int hs_ext_quictp_parameter_initial_max_data;
1086 int hs_ext_quictp_parameter_initial_max_stream_data_bidi_local;
1087 int hs_ext_quictp_parameter_initial_max_stream_data_bidi_remote;
1088 int hs_ext_quictp_parameter_initial_max_stream_data_uni;
1089 int hs_ext_quictp_parameter_initial_max_streams_bidi;
1090 int hs_ext_quictp_parameter_initial_max_streams_uni;
1091 int hs_ext_quictp_parameter_ack_delay_exponent;
1092 int hs_ext_quictp_parameter_max_ack_delay;
1093 int hs_ext_quictp_parameter_max_udp_payload_size;
1094 int hs_ext_quictp_parameter_pa_ipv4address;
1095 int hs_ext_quictp_parameter_pa_ipv6address;
1096 int hs_ext_quictp_parameter_pa_ipv4port;
1097 int hs_ext_quictp_parameter_pa_ipv6port;
1098 int hs_ext_quictp_parameter_pa_connectionid_length;
1099 int hs_ext_quictp_parameter_pa_connectionid;
1100 int hs_ext_quictp_parameter_pa_statelessresettoken;
1101 int hs_ext_quictp_parameter_active_connection_id_limit;
1102 int hs_ext_quictp_parameter_initial_source_connection_id;
1103 int hs_ext_quictp_parameter_retry_source_connection_id;
1104 int hs_ext_quictp_parameter_max_datagram_frame_size;
1105 int hs_ext_quictp_parameter_cibir_encoding_length;
1106 int hs_ext_quictp_parameter_cibir_encoding_offset;
1107 int hs_ext_quictp_parameter_loss_bits;
1108 int hs_ext_quictp_parameter_enable_time_stamp_v2;
1109 int hs_ext_quictp_parameter_min_ack_delay;
1110 int hs_ext_quictp_parameter_google_user_agent_id;
1111 int hs_ext_quictp_parameter_google_key_update_not_yet_supported;
1112 int hs_ext_quictp_parameter_google_quic_version;
1113 int hs_ext_quictp_parameter_google_initial_rtt;
1114 int hs_ext_quictp_parameter_google_support_handshake_done;
1115 int hs_ext_quictp_parameter_google_quic_params;
1116 int hs_ext_quictp_parameter_google_quic_params_unknown_field;
1117 int hs_ext_quictp_parameter_google_connection_options;
1118 int hs_ext_quictp_parameter_google_supported_versions_length;
1119 int hs_ext_quictp_parameter_google_supported_version;
1120 int hs_ext_quictp_parameter_facebook_partial_reliability;
1121 int hs_ext_quictp_parameter_chosen_version;
1122 int hs_ext_quictp_parameter_other_version;
1123 int hs_ext_quictp_parameter_enable_multipath;
1124 int hs_ext_quictp_parameter_initial_max_paths;
1125 int hs_ext_quictp_parameter_initial_max_path_id;
1126
1127 int esni_suite;
1128 int esni_record_digest_length;
1129 int esni_record_digest;
1130 int esni_encrypted_sni_length;
1131 int esni_encrypted_sni;
1132 int esni_nonce;
1133
1134 int ech_echconfiglist_length;
1135 int ech_echconfiglist;
1136 int ech_echconfig;
1137 int ech_echconfig_version;
1138 int ech_echconfig_length;
1139 int ech_echconfigcontents_maximum_name_length;
1140 int ech_echconfigcontents_public_name_length;
1141 int ech_echconfigcontents_public_name;
1142 int ech_echconfigcontents_extensions_length;
1143 int ech_echconfigcontents_extensions;
1144 int ech_hpke_keyconfig;
1145 int ech_hpke_keyconfig_config_id;
1146 int ech_hpke_keyconfig_kem_id;
1147 int ech_hpke_keyconfig_public_key_length;
1148 int ech_hpke_keyconfig_public_key;
1149 int ech_hpke_keyconfig_cipher_suites;
1150 int ech_hpke_keyconfig_cipher_suites_length;
1151 int ech_hpke_keyconfig_cipher_suite;
1152 int ech_hpke_keyconfig_cipher_suite_kdf_id;
1153 int ech_hpke_keyconfig_cipher_suite_aead_id;
1154 int ech_clienthello_type;
1155 int ech_cipher_suite;
1156 int ech_config_id;
1157 int ech_enc_length;
1158 int ech_enc;
1159 int ech_payload_length;
1160 int ech_payload;
1161 int ech_confirmation;
1162 int ech_retry_configs;
1163 int ech_padding_data;
1164
1165 int hs_ext_alps_len;
1166 int hs_ext_alps_alpn_list;
1167 int hs_ext_alps_alpn_str;
1168 int hs_ext_alps_alpn_str_len;
1169 int hs_ext_alps_settings;
1170
1171 /* do not forget to update SSL_COMMON_HF_LIST! */
1172 } hf;
1173 struct {
1174 int hs_ext;
1175 int hs_ext_alpn;
1176 int hs_ext_cert_types;
1177 int hs_ext_groups;
1178 int hs_ext_curves_point_formats;
1179 int hs_ext_npn;
1180 int hs_ext_reneg_info;
1181 int hs_ext_key_share;
1182 int hs_ext_key_share_ks;
1183 int hs_ext_pre_shared_key;
1184 int hs_ext_psk_identity;
1185 int hs_ext_psk_binders;
1186 int hs_ext_psk_binder;
1187 int hs_ext_server_name;
1188 int hs_ext_oid_filter;
1189 int hs_ext_quictp_parameter;
1190 int hs_ext_trusted_ca_keys;
1191 int hs_ext_trusted_ca_key;
1192 int hs_sig_hash_alg;
1193 int hs_sig_hash_algs;
1194 int urlhash;
1195 int keyex_params;
1196 int certificates;
1197 int cert_types;
1198 int dnames;
1199 int hs_random;
1200 int cipher_suites;
1201 int comp_methods;
1202 int session_ticket;
1203 int sct;
1204 int cert_status;
1205 int ocsp_response;
1206 int uncompressed_certificates;
1207 int hs_ext_alps;
1208 int ech_echconfiglist;
1209 int ech_echconfig;
1210 int ech_retry_configs;
1211 int ech_hpke_keyconfig;
1212 int ech_hpke_cipher_suites;
1213 int ech_hpke_cipher_suite;
1214 int ech_decrypt;
1215 int hs_ext_token_binding_key_parameters;
1216
1217 /* do not forget to update SSL_COMMON_ETT_LIST! */
1218 } ett;
1219 struct {
1220 /* Generic expert info for malformed packets. */
1221 expert_field client_version_error;
1222 expert_field server_version_error;
1223 expert_field legacy_version;
1224 expert_field malformed_vector_length;
1225 expert_field malformed_buffer_too_small;
1226 expert_field malformed_trailing_data;
1227
1228 expert_field hs_ext_cert_status_undecoded;
1229 expert_field hs_ciphersuite_undecoded;
1230 expert_field hs_srv_keyex_illegal;
1231 expert_field resumed;
1232 expert_field record_length_invalid;
1233 expert_field decompression_error;
1234
1235 expert_field ech_echconfig_invalid_version;
1236 expert_field ech_accepted;
1237 expert_field ech_rejected;
1238
1239 /* do not forget to update SSL_COMMON_EI_LIST! */
1240 } ei;
1242
1243/* Header fields specific to DTLS. See packet-dtls.c */
1244typedef struct {
1245 int hf_dtls_handshake_cookie_len;
1246 int hf_dtls_handshake_cookie;
1247
1248 /* Do not forget to initialize dtls_hfs to -1 in packet-dtls.c! */
1249} dtls_hfs_t;
1250
1251/* Header fields specific to SSL. See packet-tls.c */
1252typedef struct {
1253 int hs_md5_hash;
1254 int hs_sha_hash;
1255
1256 /* Do not forget to initialize ssl_hfs to -1 in packet-tls.c! */
1257} ssl_hfs_t;
1259typedef struct {
1260 uint32_t max_version;
1261 bool server_name_present;
1262 int num_cipher_suites;
1263 int num_extensions;
1264 wmem_strbuf_t *alpn;
1265 wmem_list_t *cipher_list;
1266 wmem_list_t *extension_list;
1267 wmem_list_t *sighash_list;
1268} ja4_data_t;
1269
1270
1271/* Helpers for dissecting Variable-Length Vectors. {{{ */
1272/* Largest value that fits in a 24-bit number (2^24-1). */
1273#define G_MAXUINT24 ((1U << 24) - 1)
1274
1287extern bool
1288ssl_add_vector(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
1289 unsigned offset, unsigned offset_end, uint32_t *ret_length,
1290 int hf_length, uint32_t min_value, uint32_t max_value);
1291
1300extern bool
1301ssl_end_vector(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
1302 unsigned offset, unsigned offset_end);
1303/* }}} */
1304
1305
1306extern void
1307ssl_check_record_length(ssl_common_dissect_t *hf, packet_info *pinfo,
1308 ContentType content_type,
1309 unsigned record_length, proto_item *length_pi,
1310 uint16_t version, tvbuff_t *decrypted_tvb);
1311
1312void
1313ssl_dissect_change_cipher_spec(ssl_common_dissect_t *hf, tvbuff_t *tvb,
1314 packet_info *pinfo, proto_tree *tree,
1315 uint32_t offset, SslSession *session,
1316 bool is_from_server,
1317 const SslDecryptSession *ssl);
1318
1319extern int
1320ssl_dissect_hnd_cli_hello(ssl_common_dissect_t *hf, tvbuff_t *tvb,
1321 packet_info *pinfo, proto_tree *tree, uint32_t offset,
1322 uint32_t offset_end, SslSession *session,
1323 SslDecryptSession *ssl,
1324 dtls_hfs_t *dtls_hfs, ssl_master_key_map_t *mk_map);
1325
1326extern void
1327ssl_dissect_hnd_srv_hello(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info* pinfo,
1328 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1329 SslSession *session, SslDecryptSession *ssl,
1330 bool is_dtls, bool is_hrr);
1331
1332extern void
1333ssl_dissect_hnd_hello_retry_request(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info* pinfo,
1334 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1335 SslSession *session, SslDecryptSession *ssl,
1336 bool is_dtls);
1337
1338extern void
1339ssl_dissect_hnd_encrypted_extensions(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info* pinfo,
1340 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1341 SslSession *session, SslDecryptSession *ssl,
1342 bool is_dtls);
1343
1344extern void
1345ssl_dissect_hnd_new_ses_ticket(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo,
1346 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1347 SslSession *session, SslDecryptSession *ssl,
1348 bool is_dtls, GHashTable *session_hash);
1349
1350extern void
1351ssl_dissect_hnd_cert(ssl_common_dissect_t *hf, tvbuff_t *tvb, proto_tree *tree,
1352 uint32_t offset, uint32_t offset_end, packet_info *pinfo,
1353 SslSession *session, SslDecryptSession *ssl,
1354 bool is_from_server, bool is_dtls);
1355
1356extern void
1357ssl_dissect_hnd_cert_req(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo,
1358 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1359 SslSession *session, bool is_dtls);
1360
1361extern void
1362ssl_dissect_hnd_cli_cert_verify(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo,
1363 proto_tree *tree, uint32_t offset, uint32_t offset_end, uint16_t version);
1364
1365extern void
1366ssl_dissect_hnd_finished(ssl_common_dissect_t *hf, tvbuff_t *tvb,
1367 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1368 const SslSession *session, ssl_hfs_t *ssl_hfs);
1369
1370extern void
1371ssl_dissect_hnd_cert_url(ssl_common_dissect_t *hf, tvbuff_t *tvb, proto_tree *tree, uint32_t offset);
1372
1373extern uint32_t
1374tls_dissect_hnd_certificate_status(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo,
1375 proto_tree *tree, uint32_t offset, uint32_t offset_end);
1376
1377extern void
1378ssl_dissect_hnd_cli_keyex(ssl_common_dissect_t *hf, tvbuff_t *tvb,
1379 proto_tree *tree, uint32_t offset, uint32_t length,
1380 const SslSession *session);
1381
1382extern void
1383ssl_dissect_hnd_srv_keyex(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo,
1384 proto_tree *tree, uint32_t offset, uint32_t offset_end,
1385 const SslSession *session);
1386
1387extern void
1388tls13_dissect_hnd_key_update(ssl_common_dissect_t *hf, tvbuff_t *tvb,
1389 proto_tree *tree, uint32_t offset);
1390
1391extern uint32_t
1392tls_dissect_sct_list(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
1393 uint32_t offset, uint32_t offset_end, uint16_t version);
1394
1395extern bool
1396tls13_hkdf_expand_label_context(int md, const StringInfo *secret,
1397 const char *label_prefix, const char *label,
1398 const uint8_t *context, uint8_t context_length,
1399 uint16_t out_len, unsigned char **out);
1400
1401extern bool
1402tls13_hkdf_expand_label(int md, const StringInfo *secret,
1403 const char *label_prefix, const char *label,
1404 uint16_t out_len, unsigned char **out);
1405
1406extern void
1407ssl_dissect_hnd_compress_certificate(ssl_common_dissect_t *hf, tvbuff_t *tvb, proto_tree *tree,
1408 uint32_t offset, uint32_t offset_end, packet_info *pinfo,
1409 SslSession *session _U_, SslDecryptSession *ssl _U_,
1410 bool is_from_server _U_, bool is_dtls _U_);
1411/* {{{ */
1412#define SSL_COMMON_LIST_T(name) \
1413ssl_common_dissect_t name;
1414/* }}} */
1415
1416/* {{{ */
1417#define SSL_COMMON_HF_LIST(name, prefix) \
1418 { & name .hf.change_cipher_spec, \
1419 { "Change Cipher Spec Message", prefix ".change_cipher_spec", \
1420 FT_NONE, BASE_NONE, NULL, 0x0, \
1421 "Signals a change in cipher specifications", HFILL } \
1422 }, \
1423 { & name .hf.hs_exts_len, \
1424 { "Extensions Length", prefix ".handshake.extensions_length", \
1425 FT_UINT16, BASE_DEC, NULL, 0x0, \
1426 "Length of hello extensions", HFILL } \
1427 }, \
1428 { & name .hf.hs_ext, \
1429 { "Extension", prefix ".handshake.extension", \
1430 FT_NONE, BASE_NONE, NULL, 0x0, \
1431 "Hello extension", HFILL } \
1432 }, \
1433 { & name .hf.hs_ext_type, \
1434 { "Type", prefix ".handshake.extension.type", \
1435 FT_UINT16, BASE_DEC, VALS(tls_hello_extension_types), 0x0, \
1436 "Hello extension type", HFILL } \
1437 }, \
1438 { & name .hf.hs_ext_len, \
1439 { "Length", prefix ".handshake.extension.len", \
1440 FT_UINT16, BASE_DEC, NULL, 0x0, \
1441 "Length of a hello extension", HFILL } \
1442 }, \
1443 { & name .hf.hs_ext_data, \
1444 { "Data", prefix ".handshake.extension.data", \
1445 FT_BYTES, BASE_NONE, NULL, 0x0, \
1446 "Hello Extension data", HFILL } \
1447 }, \
1448 { & name .hf.hs_ext_ech_outer_ext_len, \
1449 { "Outer Extensions List Length", prefix ".handshake.extensions_ech_outer_extensions_length", \
1450 FT_UINT8, BASE_DEC, NULL, 0x0, \
1451 NULL, HFILL } \
1452 }, \
1453 { & name .hf.hs_ext_ech_outer_ext, \
1454 { "Outer Extensions List", prefix ".handshake.extensions_ech_outer_extensions", \
1455 FT_NONE, BASE_NONE, NULL, 0x0, \
1456 "List of extensions derived from Outer Client Hello", HFILL } \
1457 }, \
1458 { & name .hf.hs_ech_confirm, \
1459 { "ECH Confirmation Bytes", prefix ".handshake.ech_confirm", \
1460 FT_BYTES, BASE_NONE, NULL, 0x0, \
1461 NULL, HFILL } \
1462 }, \
1463 { & name .hf.hs_ech_confirm_compute, \
1464 { "Computed ECH Confirmation Bytes", prefix ".handshake.ech_confirm_compute", \
1465 FT_BYTES, BASE_NONE, NULL, 0x0, \
1466 NULL, HFILL } \
1467 }, \
1468 { & name .hf.hs_ext_supported_groups_len, \
1469 { "Supported Groups List Length", prefix ".handshake.extensions_supported_groups_length", \
1470 FT_UINT16, BASE_DEC, NULL, 0x0, \
1471 NULL, HFILL } \
1472 }, \
1473 { & name .hf.hs_ext_supported_groups, \
1474 { "Supported Groups List", prefix ".handshake.extensions_supported_groups", \
1475 FT_NONE, BASE_NONE, NULL, 0x0, \
1476 "List of supported groups (formerly Supported Elliptic Curves)", HFILL } \
1477 }, \
1478 { & name .hf.hs_ext_supported_group, \
1479 { "Supported Group", prefix ".handshake.extensions_supported_group", \
1480 FT_UINT16, BASE_HEX, VALS(ssl_extension_curves), 0x0, \
1481 NULL, HFILL } \
1482 }, \
1483 { & name .hf.hs_ext_ec_point_formats_len, \
1484 { "EC point formats Length", prefix ".handshake.extensions_ec_point_formats_length", \
1485 FT_UINT8, BASE_DEC, NULL, 0x0, \
1486 "Length of elliptic curves point formats field", HFILL } \
1487 }, \
1488 { & name .hf.hs_ext_ec_point_formats, \
1489 { "EC point formats", prefix ".handshake.extensions_ec_point_formats", \
1490 FT_NONE, BASE_NONE, NULL, 0x0, \
1491 "List of elliptic curves point format", HFILL } \
1492 }, \
1493 { & name .hf.hs_ext_ec_point_format, \
1494 { "EC point format", prefix ".handshake.extensions_ec_point_format", \
1495 FT_UINT8, BASE_DEC, VALS(ssl_extension_ec_point_formats), 0x0, \
1496 "Elliptic curves point format", HFILL } \
1497 }, \
1498 { & name .hf.hs_ext_srp_len, \
1499 { "SRP username length", prefix ".handshake.extensions_srp_len", \
1500 FT_UINT8, BASE_DEC, NULL, 0x0, \
1501 "Length of Secure Remote Password username field", HFILL } \
1502 }, \
1503 { & name .hf.hs_ext_srp_username, \
1504 { "SRP username", prefix ".handshake.extensions_srp_username", \
1505 FT_STRING, BASE_NONE, NULL, 0x0, \
1506 "Secure Remote Password username", HFILL } \
1507 }, \
1508 { & name .hf.hs_ext_alpn_len, \
1509 { "ALPN Extension Length", prefix ".handshake.extensions_alpn_len", \
1510 FT_UINT16, BASE_DEC, NULL, 0x0, \
1511 "Length of the ALPN Extension", HFILL } \
1512 }, \
1513 { & name .hf.hs_ext_alpn_list, \
1514 { "ALPN Protocol", prefix ".handshake.extensions_alpn_list", \
1515 FT_NONE, BASE_NONE, NULL, 0x0, \
1516 NULL, HFILL } \
1517 }, \
1518 { & name .hf.hs_ext_alpn_str_len, \
1519 { "ALPN string length", prefix ".handshake.extensions_alpn_str_len", \
1520 FT_UINT8, BASE_DEC, NULL, 0x0, \
1521 "Length of ALPN string", HFILL } \
1522 }, \
1523 { & name .hf.hs_ext_alpn_str, \
1524 { "ALPN Next Protocol", prefix ".handshake.extensions_alpn_str", \
1525 FT_STRING, BASE_NONE, NULL, 0x00, \
1526 NULL, HFILL } \
1527 }, \
1528 { & name .hf.hs_ext_npn_str_len, \
1529 { "Protocol string length", prefix ".handshake.extensions_npn_str_len", \
1530 FT_UINT8, BASE_DEC, NULL, 0x0, \
1531 "Length of next protocol string", HFILL } \
1532 }, \
1533 { & name .hf.hs_ext_npn_str, \
1534 { "Next Protocol", prefix ".handshake.extensions_npn", \
1535 FT_STRING, BASE_NONE, NULL, 0x0, \
1536 NULL, HFILL } \
1537 }, \
1538 { & name .hf.hs_ext_reneg_info_len, \
1539 { "Renegotiation info extension length", prefix ".handshake.extensions_reneg_info_len", \
1540 FT_UINT8, BASE_DEC, NULL, 0x0, \
1541 NULL, HFILL } \
1542 }, \
1543 { & name .hf.hs_ext_reneg_info, \
1544 { "Renegotiation info", prefix ".handshake.extensions_reneg_info",\
1545 FT_BYTES, BASE_NONE, NULL, 0x0, \
1546 NULL, HFILL } \
1547 }, \
1548 { & name .hf.hs_ext_key_share_client_length, \
1549 { "Client Key Share Length", prefix ".handshake.extensions_key_share_client_length", \
1550 FT_UINT16, BASE_DEC, NULL, 0x00, \
1551 NULL, HFILL } \
1552 }, \
1553 { & name .hf.hs_ext_key_share_group, \
1554 { "Group", prefix ".handshake.extensions_key_share_group", \
1555 FT_UINT16, BASE_DEC, VALS(ssl_extension_curves), 0x00, \
1556 NULL, HFILL } \
1557 }, \
1558 { & name .hf.hs_ext_key_share_key_exchange_length, \
1559 { "Key Exchange Length", prefix ".handshake.extensions_key_share_key_exchange_length", \
1560 FT_UINT16, BASE_DEC, NULL, 0x00, \
1561 NULL, HFILL } \
1562 }, \
1563 { & name .hf.hs_ext_key_share_key_exchange, \
1564 { "Key Exchange", prefix ".handshake.extensions_key_share_key_exchange", \
1565 FT_BYTES, BASE_NONE, NULL, 0x0, \
1566 NULL, HFILL } \
1567 }, \
1568 { & name .hf.hs_ext_key_share_selected_group, \
1569 { "Selected Group", prefix ".handshake.extensions_key_share_selected_group", \
1570 FT_UINT16, BASE_DEC, VALS(ssl_extension_curves), 0x00, \
1571 NULL, HFILL } \
1572 }, \
1573 { & name .hf.hs_ext_psk_identities_length, \
1574 { "Identities Length", prefix ".handshake.extensions.psk.identities.length", \
1575 FT_UINT16, BASE_DEC, NULL, 0x0, \
1576 NULL, HFILL } \
1577 }, \
1578 { & name .hf.hs_ext_psk_identity_identity_length, \
1579 { "Identity Length", prefix ".handshake.extensions.psk.identity.identity_length", \
1580 FT_UINT16, BASE_DEC, NULL, 0x0, \
1581 NULL, HFILL } \
1582 }, \
1583 { & name .hf.hs_ext_psk_identity_identity, \
1584 { "Identity", prefix ".handshake.extensions.psk.identity.identity", \
1585 FT_BYTES, BASE_NONE, NULL, 0x0, \
1586 NULL, HFILL } \
1587 }, \
1588 { & name .hf.hs_ext_psk_identity_obfuscated_ticket_age, \
1589 { "Obfuscated Ticket Age", prefix ".handshake.extensions.psk.identity.obfuscated_ticket_age", \
1590 FT_UINT32, BASE_DEC, NULL, 0x0, \
1591 NULL, HFILL } \
1592 }, \
1593 { & name .hf.hs_ext_psk_binders_length, \
1594 { "PSK Binders length", prefix ".handshake.extensions.psk.binders_len", \
1595 FT_UINT16, BASE_DEC, NULL, 0x0, \
1596 NULL, HFILL } \
1597 }, \
1598 { & name .hf.hs_ext_psk_binders, \
1599 { "PSK Binders", prefix ".handshake.extensions.psk.binders", \
1600 FT_NONE, BASE_NONE, NULL, 0x0, \
1601 NULL, HFILL } \
1602 }, \
1603 { & name .hf.hs_ext_psk_binder, \
1604 { "PSK Binder", prefix ".handshake.extensions.psk.binder", \
1605 FT_NONE, BASE_NONE, NULL, 0x0, \
1606 NULL, HFILL } \
1607 }, \
1608 { & name .hf.hs_ext_psk_binder_binder_length, \
1609 { "Binder Length", prefix ".handshake.extensions.psk.binder.binder_length", \
1610 FT_UINT8, BASE_DEC, NULL, 0x0, \
1611 NULL, HFILL } \
1612 }, \
1613 { & name .hf.hs_ext_psk_binder_binder, \
1614 { "Binder", prefix ".handshake.extensions.psk.binder.binder", \
1615 FT_BYTES, BASE_NONE, NULL, 0x0, \
1616 NULL, HFILL } \
1617 }, \
1618 { & name .hf.hs_ext_psk_identity_selected, \
1619 { "Selected Identity", prefix ".handshake.extensions.psk.identity.selected", \
1620 FT_UINT16, BASE_DEC, NULL, 0x0, \
1621 NULL, HFILL } \
1622 }, \
1623 { & name .hf.hs_ext_session_ticket, \
1624 { "Session Ticket", prefix ".handshake.extensions.session_ticket", \
1625 FT_BYTES, BASE_NONE, NULL, 0x0, \
1626 NULL, HFILL } \
1627 }, \
1628 { & name .hf.hs_ext_supported_versions_len, \
1629 { "Supported Versions length", prefix ".handshake.extensions.supported_versions_len", \
1630 FT_UINT8, BASE_DEC, NULL, 0x0, \
1631 NULL, HFILL } \
1632 }, \
1633 { & name .hf.hs_ext_supported_version, \
1634 { "Supported Version", prefix ".handshake.extensions.supported_version", \
1635 FT_UINT16, BASE_HEX, VALS(ssl_versions), 0x0, \
1636 NULL, HFILL } \
1637 }, \
1638 { & name .hf.hs_ext_cookie_len, \
1639 { "Cookie length", prefix ".handshake.extensions.cookie_len", \
1640 FT_UINT16, BASE_DEC, NULL, 0x0, \
1641 NULL, HFILL } \
1642 }, \
1643 { & name .hf.hs_ext_cookie, \
1644 { "Cookie", prefix ".handshake.extensions.cookie", \
1645 FT_BYTES, BASE_NONE, NULL, 0x0, \
1646 NULL, HFILL } \
1647 }, \
1648 { & name .hf.hs_ext_server_name_list_len, \
1649 { "Server Name list length", prefix ".handshake.extensions_server_name_list_len", \
1650 FT_UINT16, BASE_DEC, NULL, 0x0, \
1651 "Length of server name list", HFILL } \
1652 }, \
1653 { & name .hf.hs_ext_server_name_len, \
1654 { "Server Name length", prefix ".handshake.extensions_server_name_len", \
1655 FT_UINT16, BASE_DEC, NULL, 0x0, \
1656 "Length of server name string", HFILL } \
1657 }, \
1658 { & name .hf.hs_ext_server_name_type, \
1659 { "Server Name Type", prefix ".handshake.extensions_server_name_type", \
1660 FT_UINT8, BASE_DEC, VALS(tls_hello_ext_server_name_type_vs), 0x0, \
1661 NULL, HFILL } \
1662 }, \
1663 { & name .hf.hs_ext_server_name, \
1664 { "Server Name", prefix ".handshake.extensions_server_name", \
1665 FT_STRING, BASE_NONE, NULL, 0x0, \
1666 NULL, HFILL } \
1667 }, \
1668 { & name .hf.hs_ext_max_fragment_length, \
1669 { "Maximum Fragment Length", prefix ".handshake.max_fragment_length", \
1670 FT_UINT8, BASE_DEC, VALS(tls_hello_ext_max_fragment_length), 0x00, \
1671 "Maximum fragment length that an endpoint is willing to receive", HFILL } \
1672 }, \
1673 { & name .hf.hs_ext_padding_data, \
1674 { "Padding Data", prefix ".handshake.extensions_padding_data", \
1675 FT_BYTES, BASE_NONE, NULL, 0x0, \
1676 "Must be zero", HFILL } \
1677 }, \
1678 { & name .hf.hs_ext_cert_url_type, \
1679 { "Certificate Chain Type", prefix ".handshake.cert_url_type", \
1680 FT_UINT8, BASE_DEC, VALS(tls_cert_chain_type), 0x0, \
1681 "Certificate Chain Type for Client Certificate URL", HFILL } \
1682 }, \
1683 { & name .hf.hs_ext_cert_url_url_hash_list_len, \
1684 { "URL and Hash list Length", prefix ".handshake.cert_url.url_hash_len", \
1685 FT_UINT16, BASE_DEC, NULL, 0x0, \
1686 NULL, HFILL } \
1687 }, \
1688 { & name .hf.hs_ext_cert_url_item, \
1689 { "URL and Hash", prefix ".handshake.cert_url.url_hash", \
1690 FT_NONE, BASE_NONE, NULL, 0x0, \
1691 NULL, HFILL } \
1692 }, \
1693 { & name .hf.hs_ext_cert_url_url_len, \
1694 { "URL Length", prefix ".handshake.cert_url.url_len", \
1695 FT_UINT16, BASE_DEC, NULL, 0x0, \
1696 NULL, HFILL } \
1697 }, \
1698 { & name .hf.hs_ext_cert_type, \
1699 { "Certificate Type", prefix ".handshake.cert_type.type", \
1700 FT_UINT8, BASE_HEX, VALS(tls_certificate_type), 0x0, \
1701 NULL, HFILL } \
1702 }, \
1703 { & name .hf.hs_ext_cert_types, \
1704 { "Certificate Type List", prefix ".handshake.cert_type.types", \
1705 FT_NONE, BASE_NONE, NULL, 0x0, \
1706 NULL, HFILL } \
1707 }, \
1708 { & name .hf.hs_ext_cert_types_len, \
1709 { "Certificate Type List Length", prefix ".handshake.cert_type.types_len", \
1710 FT_UINT8, BASE_DEC, NULL, 0x0, \
1711 NULL, HFILL } \
1712 }, \
1713 { & name .hf.hs_ext_cert_url_url, \
1714 { "URL", prefix ".handshake.cert_url.url", \
1715 FT_STRING, BASE_NONE, NULL, 0x0, \
1716 "URL used to fetch the certificate(s)", HFILL } \
1717 }, \
1718 { & name .hf.hs_ext_cert_url_padding, \
1719 { "Padding", prefix ".handshake.cert_url.padding", \
1720 FT_NONE, BASE_NONE, NULL, 0x0, \
1721 "Padding that MUST be 0x01 for backwards compatibility", HFILL } \
1722 }, \
1723 { & name .hf.hs_ext_cert_url_sha1, \
1724 { "SHA1 Hash", prefix ".handshake.cert_url.sha1", \
1725 FT_BYTES, BASE_NONE, NULL, 0x0, \
1726 "SHA1 Hash of the certificate", HFILL } \
1727 }, \
1728 { & name .hf.hs_ext_cert_status_type, \
1729 { "Certificate Status Type", prefix ".handshake.extensions_status_request_type", \
1730 FT_UINT8, BASE_DEC, VALS(tls_cert_status_type), 0x0, \
1731 NULL, HFILL } \
1732 }, \
1733 { & name .hf.hs_ext_cert_status_request_len, \
1734 { "Certificate Status Length", prefix ".handshake.extensions_status_request_len", \
1735 FT_UINT16, BASE_DEC, NULL, 0x0, \
1736 NULL, HFILL } \
1737 }, \
1738 { & name .hf.hs_ext_cert_status_responder_id_list_len, \
1739 { "Responder ID list Length", prefix ".handshake.extensions_status_request_responder_ids_len", \
1740 FT_UINT16, BASE_DEC, NULL, 0x0, \
1741 NULL, HFILL } \
1742 }, \
1743 { & name .hf.hs_ext_cert_status_request_extensions_len, \
1744 { "Request Extensions Length", prefix ".handshake.extensions_status_request_exts_len", \
1745 FT_UINT16, BASE_DEC, NULL, 0x0, \
1746 NULL, HFILL } \
1747 }, \
1748 { & name .hf.hs_ext_cert_status_request_list_len, \
1749 { "Certificate Status List Length", prefix ".handshake.extensions_status_request_list_len", \
1750 FT_UINT16, BASE_DEC, NULL, 0x0, \
1751 "CertificateStatusRequestItemV2 list length", HFILL } \
1752 }, \
1753 { & name .hf.hs_ocsp_response_list_len, \
1754 { "OCSP Response List Length", prefix ".handshake.ocsp_response_list_len", \
1755 FT_UINT24, BASE_DEC, NULL, 0x0, \
1756 "OCSPResponseList length", HFILL } \
1757 }, \
1758 { & name .hf.hs_ocsp_response_len, \
1759 { "OCSP Response Length", prefix ".handshake.ocsp_response_len", \
1760 FT_UINT24, BASE_DEC, NULL, 0x0, \
1761 NULL, HFILL } \
1762 }, \
1763 { & name .hf.hs_sig_hash_alg_len, \
1764 { "Signature Hash Algorithms Length", prefix ".handshake.sig_hash_alg_len", \
1765 FT_UINT16, BASE_DEC, NULL, 0x0, \
1766 "Length of Signature Hash Algorithms", HFILL } \
1767 }, \
1768 { & name .hf.hs_sig_hash_algs, \
1769 { "Signature Algorithms", prefix ".handshake.sig_hash_algs", \
1770 FT_NONE, BASE_NONE, NULL, 0x0, \
1771 "List of supported Signature Algorithms", HFILL } \
1772 }, \
1773 { & name .hf.hs_sig_hash_alg, \
1774 { "Signature Algorithm", prefix ".handshake.sig_hash_alg", \
1775 FT_UINT16, BASE_HEX, VALS(tls13_signature_algorithm), 0x0, \
1776 NULL, HFILL } \
1777 }, \
1778 { & name .hf.hs_sig_hash_hash, \
1779 { "Signature Hash Algorithm Hash", prefix ".handshake.sig_hash_hash", \
1780 FT_UINT8, BASE_DEC, VALS(tls_hash_algorithm), 0x0, \
1781 "Hash algorithm (TLS 1.2)", HFILL } \
1782 }, \
1783 { & name .hf.hs_sig_hash_sig, \
1784 { "Signature Hash Algorithm Signature", prefix ".handshake.sig_hash_sig", \
1785 FT_UINT8, BASE_DEC, VALS(tls_signature_algorithm), 0x0, \
1786 "Signature algorithm (TLS 1.2)", HFILL } \
1787 }, \
1788 { & name .hf.hs_client_keyex_epms_len, \
1789 { "Encrypted PreMaster length", prefix ".handshake.epms_len", \
1790 FT_UINT16, BASE_DEC, NULL, 0x0, \
1791 "Length of encrypted PreMaster secret", HFILL } \
1792 }, \
1793 { & name .hf.hs_client_keyex_epms, \
1794 { "Encrypted PreMaster", prefix ".handshake.epms", \
1795 FT_BYTES, BASE_NONE, NULL, 0x0, \
1796 "Encrypted PreMaster secret", HFILL } \
1797 }, \
1798 { & name .hf.hs_server_keyex_modulus_len, \
1799 { "Modulus Length", prefix ".handshake.modulus_len", \
1800 FT_UINT16, BASE_DEC, NULL, 0x0, \
1801 "Length of RSA-EXPORT modulus", HFILL } \
1802 }, \
1803 { & name .hf.hs_server_keyex_exponent_len, \
1804 { "Exponent Length", prefix ".handshake.exponent_len", \
1805 FT_UINT16, BASE_DEC, NULL, 0x0, \
1806 "Length of RSA-EXPORT exponent", HFILL } \
1807 }, \
1808 { & name .hf.hs_server_keyex_sig_len, \
1809 { "Signature Length", prefix ".handshake.sig_len", \
1810 FT_UINT16, BASE_DEC, NULL, 0x0, \
1811 "Length of Signature", HFILL } \
1812 }, \
1813 { & name .hf.hs_server_keyex_p_len, \
1814 { "p Length", prefix ".handshake.p_len", \
1815 FT_UINT16, BASE_DEC, NULL, 0x0, \
1816 "Length of p", HFILL } \
1817 }, \
1818 { & name .hf.hs_server_keyex_g_len, \
1819 { "g Length", prefix ".handshake.g_len", \
1820 FT_UINT16, BASE_DEC, NULL, 0x0, \
1821 "Length of g", HFILL } \
1822 }, \
1823 { & name .hf.hs_server_keyex_ys_len, \
1824 { "Pubkey Length", prefix ".handshake.ys_len", \
1825 FT_UINT16, BASE_DEC, NULL, 0x0, \
1826 "Length of server's Diffie-Hellman public key", HFILL } \
1827 }, \
1828 { & name .hf.hs_client_keyex_yc_len, \
1829 { "Pubkey Length", prefix ".handshake.yc_len", \
1830 FT_UINT16, BASE_DEC, NULL, 0x0, \
1831 "Length of client's Diffie-Hellman public key", HFILL } \
1832 }, \
1833 { & name .hf.hs_client_keyex_point_len, \
1834 { "Pubkey Length", prefix ".handshake.client_point_len", \
1835 FT_UINT8, BASE_DEC, NULL, 0x0, \
1836 "Length of client's EC Diffie-Hellman public key", HFILL } \
1837 }, \
1838 { & name .hf.hs_server_keyex_point_len, \
1839 { "Pubkey Length", prefix ".handshake.server_point_len", \
1840 FT_UINT8, BASE_DEC, NULL, 0x0, \
1841 "Length of server's EC Diffie-Hellman public key", HFILL } \
1842 }, \
1843 { & name .hf.hs_server_keyex_p, \
1844 { "p", prefix ".handshake.p", \
1845 FT_BYTES, BASE_NONE, NULL, 0x0, \
1846 "Diffie-Hellman p", HFILL } \
1847 }, \
1848 { & name .hf.hs_server_keyex_g, \
1849 { "g", prefix ".handshake.g", \
1850 FT_BYTES, BASE_NONE, NULL, 0x0, \
1851 "Diffie-Hellman g", HFILL } \
1852 }, \
1853 { & name .hf.hs_server_keyex_curve_type, \
1854 { "Curve Type", prefix ".handshake.server_curve_type", \
1855 FT_UINT8, BASE_HEX, VALS(ssl_curve_types), 0x0, \
1856 "Server curve_type", HFILL } \
1857 }, \
1858 { & name .hf.hs_server_keyex_named_curve, \
1859 { "Named Curve", prefix ".handshake.server_named_curve", \
1860 FT_UINT16, BASE_HEX, VALS(ssl_extension_curves), 0x0, \
1861 "Server named_curve", HFILL } \
1862 }, \
1863 { & name .hf.hs_server_keyex_ys, \
1864 { "Pubkey", prefix ".handshake.ys", \
1865 FT_BYTES, BASE_NONE, NULL, 0x0, \
1866 "Diffie-Hellman server pubkey", HFILL } \
1867 }, \
1868 { & name .hf.hs_client_keyex_yc, \
1869 { "Pubkey", prefix ".handshake.yc", \
1870 FT_BYTES, BASE_NONE, NULL, 0x0, \
1871 "Diffie-Hellman client pubkey", HFILL } \
1872 }, \
1873 { & name .hf.hs_server_keyex_point, \
1874 { "Pubkey", prefix ".handshake.server_point", \
1875 FT_BYTES, BASE_NONE, NULL, 0x0, \
1876 "EC Diffie-Hellman server pubkey", HFILL } \
1877 }, \
1878 { & name .hf.hs_client_keyex_point, \
1879 { "Pubkey", prefix ".handshake.client_point", \
1880 FT_BYTES, BASE_NONE, NULL, 0x0, \
1881 "EC Diffie-Hellman client pubkey", HFILL } \
1882 }, \
1883 { & name .hf.hs_server_keyex_xs_len, \
1884 { "Pubkey Length", prefix ".handshake.xs_len", \
1885 FT_UINT8, BASE_DEC, NULL, 0x0, \
1886 "Length of EC J-PAKE server public key", HFILL } \
1887 }, \
1888 { & name .hf.hs_client_keyex_xc_len, \
1889 { "Pubkey Length", prefix ".handshake.xc_len", \
1890 FT_UINT8, BASE_DEC, NULL, 0x0, \
1891 "Length of EC J-PAKE client public key", HFILL } \
1892 }, \
1893 { & name .hf.hs_server_keyex_xs, \
1894 { "Pubkey", prefix ".handshake.xs", \
1895 FT_BYTES, BASE_NONE, NULL, 0x0, \
1896 "EC J-PAKE server public key", HFILL } \
1897 }, \
1898 { & name .hf.hs_client_keyex_xc, \
1899 { "Pubkey", prefix ".handshake.xc", \
1900 FT_BYTES, BASE_NONE, NULL, 0x0, \
1901 "EC J-PAKE client public key", HFILL } \
1902 }, \
1903 { & name .hf.hs_server_keyex_vs_len, \
1904 { "Ephemeral Pubkey Length", prefix ".handshake.vs_len", \
1905 FT_UINT8, BASE_DEC, NULL, 0x0, \
1906 "Length of EC J-PAKE server ephemeral public key", HFILL } \
1907 }, \
1908 { & name .hf.hs_client_keyex_vc_len, \
1909 { "Ephemeral Pubkey Length", prefix ".handshake.vc_len", \
1910 FT_UINT8, BASE_DEC, NULL, 0x0, \
1911 "Length of EC J-PAKE client ephemeral public key", HFILL } \
1912 }, \
1913 { & name .hf.hs_server_keyex_vs, \
1914 { "Ephemeral Pubkey", prefix ".handshake.vs", \
1915 FT_BYTES, BASE_NONE, NULL, 0x0, \
1916 "EC J-PAKE server ephemeral public key", HFILL } \
1917 }, \
1918 { & name .hf.hs_client_keyex_vc, \
1919 { "Ephemeral Pubkey", prefix ".handshake.vc", \
1920 FT_BYTES, BASE_NONE, NULL, 0x0, \
1921 "EC J-PAKE client ephemeral public key", HFILL } \
1922 }, \
1923 { & name .hf.hs_server_keyex_rs_len, \
1924 { "Schnorr signature Length", prefix ".handshake.rs_len", \
1925 FT_UINT8, BASE_DEC, NULL, 0x0, \
1926 "Length of EC J-PAKE server Schnorr signature", HFILL } \
1927 }, \
1928 { & name .hf.hs_client_keyex_rc_len, \
1929 { "Schnorr signature Length", prefix ".handshake.rc_len", \
1930 FT_UINT8, BASE_DEC, NULL, 0x0, \
1931 "Length of EC J-PAKE client Schnorr signature", HFILL } \
1932 }, \
1933 { & name .hf.hs_server_keyex_rs, \
1934 { "Schnorr signature", prefix ".handshake.rs", \
1935 FT_BYTES, BASE_NONE, NULL, 0x0, \
1936 "EC J-PAKE server Schnorr signature", HFILL } \
1937 }, \
1938 { & name .hf.hs_client_keyex_rc, \
1939 { "Schnorr signature", prefix ".handshake.rc", \
1940 FT_BYTES, BASE_NONE, NULL, 0x0, \
1941 "EC J-PAKE client Schnorr signature", HFILL } \
1942 }, \
1943 { & name .hf.hs_server_keyex_modulus, \
1944 { "Modulus", prefix ".handshake.modulus", \
1945 FT_BYTES, BASE_NONE, NULL, 0x0, \
1946 "RSA-EXPORT modulus", HFILL } \
1947 }, \
1948 { & name .hf.hs_server_keyex_exponent, \
1949 { "Exponent", prefix ".handshake.exponent", \
1950 FT_BYTES, BASE_NONE, NULL, 0x0, \
1951 "RSA-EXPORT exponent", HFILL } \
1952 }, \
1953 { & name .hf.hs_server_keyex_sig, \
1954 { "Signature", prefix ".handshake.sig", \
1955 FT_BYTES, BASE_NONE, NULL, 0x0, \
1956 "Diffie-Hellman server signature", HFILL } \
1957 }, \
1958 { & name .hf.hs_server_keyex_hint_len, \
1959 { "Hint Length", prefix ".handshake.hint_len", \
1960 FT_UINT16, BASE_DEC, NULL, 0x0, \
1961 "Length of PSK Hint", HFILL } \
1962 }, \
1963 { & name .hf.hs_server_keyex_hint, \
1964 { "Hint", prefix ".handshake.hint", \
1965 FT_BYTES, BASE_NONE, NULL, 0x0, \
1966 "PSK Hint", HFILL } \
1967 }, \
1968 { & name .hf.hs_client_keyex_identity_len, \
1969 { "Identity Length", prefix ".handshake.identity_len", \
1970 FT_UINT16, BASE_DEC, NULL, 0x0, \
1971 "Length of PSK Identity", HFILL } \
1972 }, \
1973 { & name .hf.hs_client_keyex_identity, \
1974 { "Identity", prefix ".handshake.identity", \
1975 FT_BYTES, BASE_NONE, NULL, 0x0, \
1976 "PSK Identity", HFILL } \
1977 }, \
1978 { & name .hf.hs_ext_heartbeat_mode, \
1979 { "Mode", prefix ".handshake.extension.heartbeat.mode", \
1980 FT_UINT8, BASE_DEC, VALS(tls_heartbeat_mode), 0x0, \
1981 "Heartbeat extension mode", HFILL } \
1982 }, \
1983 { & name .hf.hs_certificates_len, \
1984 { "Certificates Length", prefix ".handshake.certificates_length", \
1985 FT_UINT24, BASE_DEC, NULL, 0x0, \
1986 "Length of certificates field", HFILL } \
1987 }, \
1988 { & name .hf.hs_certificates, \
1989 { "Certificates", prefix ".handshake.certificates", \
1990 FT_NONE, BASE_NONE, NULL, 0x0, \
1991 "List of certificates", HFILL } \
1992 }, \
1993 { & name .hf.hs_certificate, \
1994 { "Certificate", prefix ".handshake.certificate", \
1995 FT_BYTES, BASE_NONE, NULL, 0x0, \
1996 NULL, HFILL } \
1997 }, \
1998 { & name .hf.hs_certificate_len, \
1999 { "Certificate Length", prefix ".handshake.certificate_length", \
2000 FT_UINT24, BASE_DEC, NULL, 0x0, \
2001 "Length of certificate", HFILL } \
2002 }, \
2003 { & name .hf.hs_cert_types_count, \
2004 { "Certificate types count", prefix ".handshake.cert_types_count",\
2005 FT_UINT8, BASE_DEC, NULL, 0x0, \
2006 "Count of certificate types", HFILL } \
2007 }, \
2008 { & name .hf.hs_cert_types, \
2009 { "Certificate types", prefix ".handshake.cert_types", \
2010 FT_NONE, BASE_NONE, NULL, 0x0, \
2011 "List of certificate types", HFILL } \
2012 }, \
2013 { & name .hf.hs_cert_type, \
2014 { "Certificate type", prefix ".handshake.cert_type", \
2015 FT_UINT8, BASE_DEC, VALS(ssl_31_client_certificate_type), 0x0, \
2016 NULL, HFILL } \
2017 }, \
2018 { & name .hf.hs_dnames_len, \
2019 { "Distinguished Names Length", prefix ".handshake.dnames_len", \
2020 FT_UINT16, BASE_DEC, NULL, 0x0, \
2021 "Length of list of CAs that server trusts", HFILL } \
2022 }, \
2023 { & name .hf.hs_dnames, \
2024 { "Distinguished Names", prefix ".handshake.dnames", \
2025 FT_NONE, BASE_NONE, NULL, 0x0, \
2026 "List of CAs that server trusts", HFILL } \
2027 }, \
2028 { & name .hf.hs_dname_len, \
2029 { "Distinguished Name Length", prefix ".handshake.dname_len", \
2030 FT_UINT16, BASE_DEC, NULL, 0x0, \
2031 "Length of distinguished name", HFILL } \
2032 }, \
2033 { & name .hf.hs_dnames_truncated, \
2034 { "Tree view truncated", prefix ".handshake.dnames_truncated", \
2035 FT_NONE, BASE_NONE, NULL, 0x00, \
2036 "Some Distinguished Names are not added to tree pane to limit resources", HFILL } \
2037 }, \
2038 { & name .hf.hs_dname, \
2039 { "Distinguished Name", prefix ".handshake.dname", \
2040 FT_NONE, BASE_NONE, NULL, 0x0, \
2041 "Distinguished name of a CA that server trusts", HFILL } \
2042 }, \
2043 { & name .hf.hs_random, \
2044 { "Random", prefix ".handshake.random", \
2045 FT_BYTES, BASE_NONE, NULL, 0x0, \
2046 "Random values used for deriving keys", HFILL } \
2047 }, \
2048 { & name .hf.hs_random_time, \
2049 { "GMT Unix Time", prefix ".handshake.random_time", \
2050 FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0x0, \
2051 "Unix time field of random structure", HFILL } \
2052 }, \
2053 { & name .hf.hs_random_bytes, \
2054 { "Random Bytes", prefix ".handshake.random_bytes", \
2055 FT_BYTES, BASE_NONE, NULL, 0x0, \
2056 "Random values used for deriving keys", HFILL } \
2057 }, \
2058 { & name .hf.hs_session_id, \
2059 { "Session ID", prefix ".handshake.session_id", \
2060 FT_BYTES, BASE_NONE, NULL, 0x0, \
2061 "Identifies the SSL session, allowing later resumption", HFILL }\
2062 }, \
2063 { & name .hf.hs_session_id_len, \
2064 { "Session ID Length", prefix ".handshake.session_id_length", \
2065 FT_UINT8, BASE_DEC, NULL, 0x0, \
2066 "Length of Session ID field", HFILL } \
2067 }, \
2068 { & name .hf.hs_client_version, \
2069 { "Version", prefix ".handshake.version", \
2070 FT_UINT16, BASE_HEX, VALS(ssl_versions), 0x0, \
2071 "Maximum version supported by client [legacy_version if supported_versions ext is present]", HFILL } \
2072 }, \
2073 { & name .hf.hs_server_version, \
2074 { "Version", prefix ".handshake.version", \
2075 FT_UINT16, BASE_HEX, VALS(ssl_versions), 0x0, \
2076 "Version selected by server [legacy_version if supported_versions ext is present]", HFILL } \
2077 }, \
2078 { & name .hf.hs_cipher_suites_len, \
2079 { "Cipher Suites Length", prefix ".handshake.cipher_suites_length", \
2080 FT_UINT16, BASE_DEC, NULL, 0x0, \
2081 "Length of cipher suites field", HFILL } \
2082 }, \
2083 { & name .hf.hs_cipher_suites, \
2084 { "Cipher Suites", prefix ".handshake.ciphersuites", \
2085 FT_NONE, BASE_NONE, NULL, 0x0, \
2086 "List of cipher suites supported by client", HFILL } \
2087 }, \
2088 { & name .hf.hs_cipher_suite, \
2089 { "Cipher Suite", prefix ".handshake.ciphersuite", \
2090 FT_UINT16, BASE_HEX|BASE_EXT_STRING, &ssl_31_ciphersuite_ext, 0x0, \
2091 NULL, HFILL } \
2092 }, \
2093 { & name .hf.hs_comp_methods_len, \
2094 { "Compression Methods Length", prefix ".handshake.comp_methods_length", \
2095 FT_UINT8, BASE_DEC, NULL, 0x0, \
2096 "Length of compression methods field", HFILL } \
2097 }, \
2098 { & name .hf.hs_comp_methods, \
2099 { "Compression Methods", prefix ".handshake.comp_methods", \
2100 FT_NONE, BASE_NONE, NULL, 0x0, \
2101 "List of compression methods supported by client", HFILL } \
2102 }, \
2103 { & name .hf.hs_comp_method, \
2104 { "Compression Method", prefix ".handshake.comp_method", \
2105 FT_UINT8, BASE_DEC, VALS(ssl_31_compression_method), 0x0, \
2106 NULL, HFILL } \
2107 }, \
2108 { & name .hf.hs_session_ticket_lifetime_hint, \
2109 { "Session Ticket Lifetime Hint", \
2110 prefix ".handshake.session_ticket_lifetime_hint", \
2111 FT_UINT32, BASE_DEC|BASE_UNIT_STRING, UNS(&units_second_seconds), 0x0, \
2112 "New Session Ticket Lifetime Hint", HFILL } \
2113 }, \
2114 { & name .hf.hs_session_ticket_age_add, \
2115 { "Session Ticket Age Add", \
2116 prefix ".handshake.session_ticket_age_add", \
2117 FT_UINT32, BASE_DEC, NULL, 0x0, \
2118 "Random 32-bit value to obscure age of ticket", HFILL } \
2119 }, \
2120 { & name .hf.hs_session_ticket_nonce_len, \
2121 { "Session Ticket Nonce Length", prefix ".handshake.session_ticket_nonce_length", \
2122 FT_UINT8, BASE_DEC, NULL, 0x0, \
2123 NULL, HFILL } \
2124 }, \
2125 { & name .hf.hs_session_ticket_nonce, \
2126 { "Session Ticket Nonce", prefix ".handshake.session_ticket_nonce", \
2127 FT_BYTES, BASE_NONE, NULL, 0x0, \
2128 "A unique per-ticket value", HFILL } \
2129 }, \
2130 { & name .hf.hs_session_ticket_len, \
2131 { "Session Ticket Length", prefix ".handshake.session_ticket_length", \
2132 FT_UINT16, BASE_DEC, NULL, 0x0, \
2133 "New Session Ticket Length", HFILL } \
2134 }, \
2135 { & name .hf.hs_session_ticket, \
2136 { "Session Ticket", prefix ".handshake.session_ticket", \
2137 FT_BYTES, BASE_NONE, NULL, 0x0, \
2138 "New Session Ticket", HFILL } \
2139 }, \
2140 { & name .hf.hs_finished, \
2141 { "Verify Data", prefix ".handshake.verify_data", \
2142 FT_BYTES, BASE_NONE, NULL, 0x0, \
2143 "Opaque verification data", HFILL } \
2144 }, \
2145 { & name .hf.hs_client_cert_vrfy_sig_len, \
2146 { "Signature length", prefix ".handshake.client_cert_vrfy.sig_len", \
2147 FT_UINT16, BASE_DEC, NULL, 0x0, \
2148 "Length of CertificateVerify's signature", HFILL } \
2149 }, \
2150 { & name .hf.hs_client_cert_vrfy_sig, \
2151 { "Signature", prefix ".handshake.client_cert_vrfy.sig", \
2152 FT_BYTES, BASE_NONE, NULL, 0x0, \
2153 "CertificateVerify's signature", HFILL } \
2154 }, \
2155 { & name .hf.hs_ja3_full, \
2156 { "JA3 Fullstring", prefix ".handshake.ja3_full", \
2157 FT_STRING, BASE_NONE, NULL, 0x0, \
2158 NULL, HFILL } \
2159 }, \
2160 { & name .hf.hs_ja3_hash, \
2161 { "JA3", prefix ".handshake.ja3", \
2162 FT_STRING, BASE_NONE, NULL, 0x0, \
2163 NULL, HFILL } \
2164 }, \
2165 { & name .hf.hs_ja3s_full, \
2166 { "JA3S Fullstring", prefix ".handshake.ja3s_full", \
2167 FT_STRING, BASE_NONE, NULL, 0x0, \
2168 NULL, HFILL } \
2169 }, \
2170 { & name .hf.hs_ja3s_hash, \
2171 { "JA3S", prefix ".handshake.ja3s", \
2172 FT_STRING, BASE_NONE, NULL, 0x0, \
2173 NULL, HFILL } \
2174 }, \
2175 { & name .hf.hs_ja4, \
2176 { "JA4", prefix ".handshake.ja4", \
2177 FT_STRING, BASE_NONE, NULL, 0x0, \
2178 NULL, HFILL } \
2179 }, \
2180 { & name .hf.hs_ja4_r, \
2181 { "JA4_r", prefix ".handshake.ja4_r", \
2182 FT_STRING, BASE_NONE, NULL, 0x0, \
2183 NULL, HFILL } \
2184 }, \
2185 { & name .hf.hs_ext_psk_ke_modes_length, \
2186 { "PSK Key Exchange Modes Length", prefix ".extension.psk_ke_modes_length", \
2187 FT_UINT8, BASE_DEC, NULL, 0x0, \
2188 NULL, HFILL } \
2189 }, \
2190 { & name .hf.hs_ext_psk_ke_mode, \
2191 { "PSK Key Exchange Mode", prefix ".extension.psk_ke_mode", \
2192 FT_UINT8, BASE_DEC, VALS(tls_hello_ext_psk_ke_mode), 0x0, \
2193 "Key exchange modes where the client supports use of PSKs", HFILL } \
2194 }, \
2195 { & name .hf.hs_certificate_request_context_length, \
2196 { "Certificate Request Context Length", prefix ".handshake.certificate_request_context_length", \
2197 FT_UINT8, BASE_DEC, NULL, 0x0, \
2198 NULL, HFILL } \
2199 }, \
2200 { & name .hf.hs_certificate_request_context, \
2201 { "Certificate Request Context", prefix ".handshake.certificate_request_context", \
2202 FT_BYTES, BASE_NONE, NULL, 0x0, \
2203 "Value from CertificateRequest or empty for server auth", HFILL } \
2204 }, \
2205 { & name .hf.hs_key_update_request_update, \
2206 { "Key Update Request", prefix ".handshake.key_update.request_update", \
2207 FT_UINT8, BASE_DEC, VALS(tls13_key_update_request), 0x00, \
2208 "Whether the receiver should also update its keys", HFILL } \
2209 }, \
2210 { & name .hf.sct_scts_length, \
2211 { "Serialized SCT List Length", prefix ".sct.scts_length", \
2212 FT_UINT16, BASE_DEC, NULL, 0x00, \
2213 NULL, HFILL } \
2214 }, \
2215 { & name .hf.sct_sct_length, \
2216 { "Serialized SCT Length", prefix ".sct.sct_length", \
2217 FT_UINT16, BASE_DEC, NULL, 0x00, \
2218 NULL, HFILL } \
2219 }, \
2220 { & name .hf.sct_sct_version, \
2221 { "SCT Version", prefix ".sct.sct_version", \
2222 FT_UINT8, BASE_DEC, NULL, 0x00, \
2223 "SCT Protocol version (v1 (0) is defined in RFC 6962)", HFILL } \
2224 }, \
2225 { & name .hf.sct_sct_logid, \
2226 { "Log ID", prefix ".sct.sct_logid", \
2227 FT_BYTES, BASE_NONE, NULL, 0x00, \
2228 "SHA-256 hash of log's public key", HFILL } \
2229 }, \
2230 { & name .hf.sct_sct_timestamp, \
2231 { "Timestamp", prefix ".sct.sct_timestamp", \
2232 FT_ABSOLUTE_TIME, ABSOLUTE_TIME_UTC, NULL, 0x00, \
2233 "Timestamp of issuance", HFILL } \
2234 }, \
2235 { & name .hf.sct_sct_extensions_length, \
2236 { "Extensions length", prefix ".sct.sct_extensions_length", \
2237 FT_UINT16, BASE_DEC, NULL, 0x00, \
2238 "Length of future extensions to this protocol (currently none)", HFILL } \
2239 }, \
2240 { & name .hf.sct_sct_extensions, \
2241 { "Extensions", prefix ".sct.sct_extensions", \
2242 FT_NONE, BASE_NONE, NULL, 0x00, \
2243 "Future extensions to this protocol (currently none)", HFILL } \
2244 }, \
2245 { & name .hf.sct_sct_signature_length, \
2246 { "Signature Length", prefix ".sct.sct_signature_length", \
2247 FT_UINT16, BASE_DEC, NULL, 0x00, \
2248 NULL, HFILL } \
2249 }, \
2250 { & name .hf.sct_sct_signature, \
2251 { "Signature", prefix ".sct.sct_signature", \
2252 FT_BYTES, BASE_NONE, NULL, 0x00, \
2253 NULL, HFILL } \
2254 }, \
2255 { & name .hf.hs_ext_max_early_data_size, \
2256 { "Maximum Early Data Size", prefix ".early_data.max_early_data_size", \
2257 FT_UINT32, BASE_DEC, NULL, 0x00, \
2258 "Maximum amount of 0-RTT data that the client may send", HFILL } \
2259 }, \
2260 { & name .hf.hs_ext_oid_filters_length, \
2261 { "OID Filters Length", prefix ".extension.oid_filters_length", \
2262 FT_UINT16, BASE_DEC, NULL, 0x00, \
2263 NULL, HFILL } \
2264 }, \
2265 { & name .hf.hs_ext_oid_filters_oid_length, \
2266 { "Certificate Extension OID Length", prefix ".extension.oid_filters.oid_length", \
2267 FT_UINT8, BASE_DEC, NULL, 0x00, \
2268 NULL, HFILL } \
2269 }, \
2270 { & name .hf.hs_ext_oid_filters_oid, \
2271 { "Certificate Extension OID", prefix ".extension.oid_filters.oid", \
2272 FT_OID, BASE_NONE, NULL, 0x00, \
2273 NULL, HFILL } \
2274 }, \
2275 { & name .hf.hs_ext_oid_filters_values_length, \
2276 { "Certificate Extension Values Length", prefix ".extension.oid_filters.values_length", \
2277 FT_UINT16, BASE_DEC, NULL, 0x00, \
2278 NULL, HFILL } \
2279 }, \
2280 { & name .hf.hs_cred_valid_time, \
2281 { "Valid Time", prefix ".handshake.cred.valid_time", \
2282 FT_UINT16, BASE_DEC, NULL, 0x0, \
2283 "Delegated Credentials Valid Time", HFILL } \
2284 }, \
2285 { & name .hf.hs_cred_pubkey, \
2286 { "Subject Public Key Info", prefix ".handshake.cred.pubkey", \
2287 FT_BYTES, BASE_NONE, NULL, 0x0, \
2288 "Delegated Credentials Subject Public Key Info", HFILL } \
2289 }, \
2290 { & name .hf.hs_cred_pubkey_len, \
2291 { "Subject Public Key Info Length", prefix ".handshake.cred.pubkey_len", \
2292 FT_UINT24, BASE_DEC, NULL, 0x0, \
2293 "Delegated Credentials Subject Public Key Info Length", HFILL } \
2294 }, \
2295 { & name .hf.hs_cred_signature, \
2296 { "Signature", prefix ".handshake.cred.signature", \
2297 FT_BYTES, BASE_NONE, NULL, 0x0, \
2298 "Delegated Credentials Signature", HFILL } \
2299 }, \
2300 { & name .hf.hs_cred_signature_len, \
2301 { "Signature Length", prefix ".handshake.cred.signature_len", \
2302 FT_UINT16, BASE_DEC, NULL, 0x0, \
2303 "Delegated Credentials Signature Length", HFILL } \
2304 }, \
2305 { & name .hf.hs_ext_compress_certificate_algorithms_length, \
2306 { "Algorithms Length", prefix ".compress_certificate.algorithms_length", \
2307 FT_UINT8, BASE_DEC, NULL, 0x00, \
2308 NULL, HFILL } \
2309 }, \
2310 { & name .hf.hs_ext_compress_certificate_algorithm, \
2311 { "Algorithm", prefix ".compress_certificate.algorithm", \
2312 FT_UINT16, BASE_DEC, VALS(compress_certificate_algorithm_vals), 0x00, \
2313 NULL, HFILL } \
2314 }, \
2315 { & name .hf.hs_ext_compress_certificate_uncompressed_length, \
2316 { "Uncompressed Length", prefix ".compress_certificate.uncompressed_length", \
2317 FT_UINT24, BASE_DEC, NULL, 0x00, \
2318 NULL, HFILL } \
2319 }, \
2320 { & name .hf.hs_ext_compress_certificate_compressed_certificate_message_length, \
2321 { "Length", prefix ".compress_certificate.compressed_certificate_message.length", \
2322 FT_UINT24, BASE_DEC, NULL, 0x00, \
2323 NULL, HFILL } \
2324 }, \
2325 { & name .hf.hs_ext_compress_certificate_compressed_certificate_message, \
2326 { "Compressed Certificate Message", prefix ".compress_certificate.compressed_certificate_message", \
2327 FT_BYTES, BASE_NONE, NULL, 0x00, \
2328 NULL, HFILL } \
2329 }, \
2330 { & name .hf.hs_ext_token_binding_version_major, \
2331 { "Protocol Major Version", prefix ".token_binding.version_major", \
2332 FT_UINT8, BASE_HEX, NULL, 0x00, \
2333 "Major version of the Token Binding protocol", HFILL } \
2334 }, \
2335 { & name .hf.hs_ext_token_binding_version_minor, \
2336 { "Protocol Minor Version", prefix ".token_binding.version_minor", \
2337 FT_UINT8, BASE_HEX, NULL, 0x00, \
2338 "Minor version of the Token Binding protocol", HFILL } \
2339 }, \
2340 { & name .hf.hs_ext_token_binding_key_parameters, \
2341 { "Key Parameters", prefix ".token_binding.key_parameters", \
2342 FT_NONE, BASE_NONE, NULL, 0x0, \
2343 NULL, HFILL } \
2344 }, \
2345 { & name .hf.hs_ext_token_binding_key_parameters_length, \
2346 { "Key Parameters Length", prefix ".token_binding.key_parameters_length", \
2347 FT_UINT8, BASE_DEC, NULL, 0x00, \
2348 "Length of the key parameters list", HFILL } \
2349 }, \
2350 { & name .hf.hs_ext_token_binding_key_parameter, \
2351 { "Key Parameter", prefix ".token_binding.key_parameter", \
2352 FT_UINT8, BASE_DEC, VALS(token_binding_key_parameter_vals), 0x00, \
2353 "Identifier of the Token Binding key parameter", HFILL } \
2354 }, \
2355 { & name .hf.hs_ext_record_size_limit, \
2356 { "Record Size Limit", prefix ".record_size_limit", \
2357 FT_UINT16, BASE_DEC, NULL, 0x00, \
2358 "Maximum record size that an endpoint is willing to receive", HFILL } \
2359 }, \
2360 { & name .hf.hs_ext_quictp_len, \
2361 { "Parameters Length", prefix ".quic.len", \
2362 FT_UINT16, BASE_DEC, NULL, 0x00, \
2363 NULL, HFILL } \
2364 }, \
2365 { & name .hf.hs_ext_quictp_parameter, \
2366 { "Parameter", prefix ".quic.parameter", \
2367 FT_NONE, BASE_NONE, NULL, 0x00, \
2368 NULL, HFILL } \
2369 }, \
2370 { & name .hf.hs_ext_quictp_parameter_type, \
2371 { "Type", prefix ".quic.parameter.type", \
2372 FT_UINT64, BASE_CUSTOM, CF_FUNC(quic_transport_parameter_id_base_custom), 0x00, \
2373 NULL, HFILL } \
2374 }, \
2375 { & name .hf.hs_ext_quictp_parameter_len, \
2376 { "Length", prefix ".quic.parameter.length", \
2377 FT_UINT64, BASE_DEC, NULL, 0x00, \
2378 NULL, HFILL } \
2379 }, \
2380 { & name .hf.hs_ext_quictp_parameter_len_old, \
2381 { "Length", prefix ".quic.parameter.length.old", \
2382 FT_UINT16, BASE_DEC, NULL, 0x00, \
2383 NULL, HFILL } \
2384 }, \
2385 { & name .hf.hs_ext_quictp_parameter_value, \
2386 { "Value", prefix ".quic.parameter.value", \
2387 FT_BYTES, BASE_NONE, NULL, 0x00, \
2388 NULL, HFILL } \
2389 }, \
2390 { & name .hf.hs_ext_quictp_parameter_original_destination_connection_id, \
2391 { "original_destination_connection_id", prefix ".quic.parameter.original_destination_connection_id", \
2392 FT_BYTES, BASE_NONE, NULL, 0x00, \
2393 "Destination Connection ID from the first Initial packet sent by the client", HFILL } \
2394 }, \
2395 { & name .hf.hs_ext_quictp_parameter_max_idle_timeout, \
2396 { "max_idle_timeout", prefix ".quic.parameter.max_idle_timeout", \
2397 FT_UINT64, BASE_DEC, NULL, 0x00, \
2398 "In milliseconds", HFILL } \
2399 }, \
2400 { & name .hf.hs_ext_quictp_parameter_stateless_reset_token, \
2401 { "stateless_reset_token", prefix ".quic.parameter.stateless_reset_token", \
2402 FT_BYTES, BASE_NONE, NULL, 0x00, \
2403 "Used in verifying a stateless reset", HFILL } \
2404 }, \
2405 { & name .hf.hs_ext_quictp_parameter_max_udp_payload_size, \
2406 { "max_udp_payload_size", prefix ".quic.parameter.max_udp_payload_size", \
2407 FT_UINT64, BASE_DEC, NULL, 0x00, \
2408 "Maximum UDP payload size that the endpoint is willing to receive", HFILL } \
2409 }, \
2410 { & name .hf.hs_ext_quictp_parameter_initial_max_data, \
2411 { "initial_max_data", prefix ".quic.parameter.initial_max_data", \
2412 FT_UINT64, BASE_DEC, NULL, 0x00, \
2413 "Contains the initial value for the maximum amount of data that can be sent on the connection", HFILL } \
2414 }, \
2415 { & name .hf.hs_ext_quictp_parameter_initial_max_stream_data_bidi_local, \
2416 { "initial_max_stream_data_bidi_local", prefix ".quic.parameter.initial_max_stream_data_bidi_local", \
2417 FT_UINT64, BASE_DEC, NULL, 0x00, \
2418 "Initial stream maximum data for bidirectional, locally-initiated streams", HFILL } \
2419 }, \
2420 { & name .hf.hs_ext_quictp_parameter_initial_max_stream_data_bidi_remote, \
2421 { "initial_max_stream_data_bidi_remote", prefix ".quic.parameter.initial_max_stream_data_bidi_remote", \
2422 FT_UINT64, BASE_DEC, NULL, 0x00, \
2423 "Initial stream maximum data for bidirectional, peer-initiated streams", HFILL } \
2424 }, \
2425 { & name .hf.hs_ext_quictp_parameter_initial_max_stream_data_uni, \
2426 { "initial_max_stream_data_uni", prefix ".quic.parameter.initial_max_stream_data_uni", \
2427 FT_UINT64, BASE_DEC, NULL, 0x00, \
2428 "Initial stream maximum data for unidirectional streams parameter", HFILL } \
2429 }, \
2430 { & name .hf.hs_ext_quictp_parameter_initial_max_streams_bidi, \
2431 { "initial_max_streams_bidi", prefix ".quic.parameter.initial_max_streams_bidi", \
2432 FT_UINT64, BASE_DEC, NULL, 0x00, \
2433 "Initial maximum number of application-owned bidirectional streams", HFILL } \
2434 }, \
2435 { & name .hf.hs_ext_quictp_parameter_initial_max_streams_uni, \
2436 { "initial_max_streams_uni", prefix ".quic.parameter.initial_max_streams_uni", \
2437 FT_UINT64, BASE_DEC, NULL, 0x00, \
2438 "Initial maximum number of application-owned unidirectional streams", HFILL } \
2439 }, \
2440 { & name .hf.hs_ext_quictp_parameter_ack_delay_exponent, \
2441 { "ack_delay_exponent", prefix ".quic.parameter.ack_delay_exponent", \
2442 FT_UINT64, BASE_DEC, NULL, 0x00, \
2443 "Indicating an exponent used to decode the ACK Delay field in the ACK frame,", HFILL } \
2444 }, \
2445 { & name .hf.hs_ext_quictp_parameter_max_ack_delay, \
2446 { "max_ack_delay", prefix ".quic.parameter.max_ack_delay", \
2447 FT_UINT64, BASE_DEC, NULL, 0x00, \
2448 "Indicating the maximum amount of time in milliseconds by which it will delay sending of acknowledgments", HFILL } \
2449 }, \
2450 { & name .hf.hs_ext_quictp_parameter_pa_ipv4address, \
2451 { "ipv4Address", prefix ".quic.parameter.preferred_address.ipv4address", \
2452 FT_IPv4, BASE_NONE, NULL, 0x00, \
2453 NULL, HFILL } \
2454 }, \
2455 { & name .hf.hs_ext_quictp_parameter_pa_ipv6address, \
2456 { "ipv6Address", prefix ".quic.parameter.preferred_address.ipv6address", \
2457 FT_IPv6, BASE_NONE, NULL, 0x00, \
2458 NULL, HFILL } \
2459 }, \
2460 { & name .hf.hs_ext_quictp_parameter_pa_ipv4port, \
2461 { "ipv4Port", prefix ".quic.parameter.preferred_address.ipv4port", \
2462 FT_UINT16, BASE_DEC, NULL, 0x00, \
2463 NULL, HFILL } \
2464 }, \
2465 { & name .hf.hs_ext_quictp_parameter_pa_ipv6port, \
2466 { "ipv6Port", prefix ".quic.parameter.preferred_address.ipv6port", \
2467 FT_UINT16, BASE_DEC, NULL, 0x00, \
2468 NULL, HFILL } \
2469 }, \
2470 { & name .hf.hs_ext_quictp_parameter_pa_connectionid_length, \
2471 { "Length", prefix ".quic.parameter.preferred_address.connectionid.length", \
2472 FT_UINT8, BASE_DEC, NULL, 0x00, \
2473 "Length of connectionId Field", HFILL } \
2474 }, \
2475 { & name .hf.hs_ext_quictp_parameter_pa_connectionid, \
2476 { "connectionId", prefix ".quic.parameter.preferred_address.connectionid", \
2477 FT_BYTES, BASE_NONE, NULL, 0x00, \
2478 NULL, HFILL } \
2479 }, \
2480 { & name .hf.hs_ext_quictp_parameter_pa_statelessresettoken, \
2481 { "statelessResetToken", prefix ".quic.parameter.preferred_address.statelessresettoken", \
2482 FT_BYTES, BASE_NONE, NULL, 0x00, \
2483 NULL, HFILL } \
2484 }, \
2485 { & name .hf.hs_ext_quictp_parameter_active_connection_id_limit, \
2486 { "Active Connection ID Limit", prefix ".quic.parameter.active_connection_id_limit", \
2487 FT_UINT64, BASE_DEC, NULL, 0x00, \
2488 NULL, HFILL } \
2489 }, \
2490 { & name .hf.hs_ext_quictp_parameter_initial_source_connection_id, \
2491 { "Initial Source Connection ID", prefix ".quic.parameter.initial_source_connection_id", \
2492 FT_BYTES, BASE_NONE, NULL, 0x00, \
2493 NULL, HFILL } \
2494 }, \
2495 { & name .hf.hs_ext_quictp_parameter_retry_source_connection_id, \
2496 { "Retry Source Connection ID", prefix ".quic.parameter.retry_source_connection_id", \
2497 FT_BYTES, BASE_NONE, NULL, 0x00, \
2498 NULL, HFILL } \
2499 }, \
2500 { & name .hf.hs_ext_quictp_parameter_max_datagram_frame_size, \
2501 { "max_datagram_frame_size", prefix ".quic.parameter.max_datagram_frame_size", \
2502 FT_UINT64, BASE_DEC, NULL, 0x00, \
2503 NULL, HFILL } \
2504 }, \
2505 { & name .hf.hs_ext_quictp_parameter_cibir_encoding_length, \
2506 { "length", prefix ".quic.parameter.cibir_encoding.length", \
2507 FT_UINT64, BASE_DEC, NULL, 0x00, \
2508 NULL, HFILL } \
2509 }, \
2510 { & name .hf.hs_ext_quictp_parameter_cibir_encoding_offset, \
2511 { "offset", prefix ".quic.parameter.cibir_encoding.offset", \
2512 FT_UINT64, BASE_DEC, NULL, 0x00, \
2513 NULL, HFILL } \
2514 }, \
2515 { & name .hf.hs_ext_quictp_parameter_loss_bits, \
2516 { "loss_bits", prefix ".quic.parameter.loss_bits", \
2517 FT_UINT64, BASE_DEC, NULL, 0x00, \
2518 NULL, HFILL } \
2519 }, \
2520 { & name .hf.hs_ext_quictp_parameter_enable_time_stamp_v2, \
2521 { "Enable TimestampV2", prefix ".quic.parameter.enable_time_stamp_v2", \
2522 FT_UINT64, BASE_DEC|BASE_VAL64_STRING, VALS64(quic_enable_time_stamp_v2_vals), 0x00, \
2523 NULL, HFILL } \
2524 }, \
2525 { & name .hf.hs_ext_quictp_parameter_min_ack_delay, \
2526 { "min_ack_delay", prefix ".quic.parameter.min_ack_delay", \
2527 FT_UINT64, BASE_DEC, NULL, 0x00, \
2528 NULL, HFILL } \
2529 }, \
2530 { & name .hf.hs_ext_quictp_parameter_google_user_agent_id, \
2531 { "Google UserAgent", prefix ".quic.parameter.google.user_agent", \
2532 FT_STRING, BASE_NONE, NULL, 0x00, \
2533 NULL, HFILL } \
2534 }, \
2535 { & name .hf.hs_ext_quictp_parameter_google_key_update_not_yet_supported, \
2536 { "Google Key Update not yet supported", prefix ".quic.parameter.google.key_update_not_yet_supported", \
2537 FT_NONE, BASE_NONE, NULL, 0x00, \
2538 NULL, HFILL } \
2539 }, \
2540 { & name .hf.hs_ext_quictp_parameter_google_quic_version, \
2541 { "Google QUIC version", prefix ".quic.parameter.google.quic_version", \
2542 FT_UINT32, BASE_RANGE_STRING | BASE_HEX, RVALS(quic_version_vals), 0x00, \
2543 NULL, HFILL } \
2544 }, \
2545 { & name .hf.hs_ext_quictp_parameter_google_initial_rtt, \
2546 { "Google Initial RTT", prefix ".quic.parameter.google.initial_rtt", \
2547 FT_UINT64, BASE_DEC, NULL, 0x00, \
2548 NULL, HFILL } \
2549 }, \
2550 { & name .hf.hs_ext_quictp_parameter_google_support_handshake_done, \
2551 { "Google Support Handshake Done", prefix ".quic.parameter.google.support_handshake_done", \
2552 FT_NONE, BASE_NONE, NULL, 0x00, \
2553 NULL, HFILL } \
2554 }, \
2555 { & name .hf.hs_ext_quictp_parameter_google_quic_params, \
2556 { "Google QUIC parameters", prefix ".quic.parameter.google.quic_params", \
2557 FT_BYTES, BASE_NONE, NULL, 0x00, \
2558 NULL, HFILL } \
2559 }, \
2560 { & name .hf.hs_ext_quictp_parameter_google_quic_params_unknown_field, \
2561 { "Google Unknown Field", prefix ".quic.parameter.google.quic_params_unknown_field", \
2562 FT_BYTES, BASE_NONE, NULL, 0x00, \
2563 NULL, HFILL } \
2564 }, \
2565 { & name .hf.hs_ext_quictp_parameter_google_connection_options, \
2566 { "Google Connection options", prefix ".quic.parameter.google.connection_options", \
2567 FT_BYTES, BASE_NONE, NULL, 0x00, \
2568 NULL, HFILL } \
2569 }, \
2570 { & name .hf.hs_ext_quictp_parameter_google_supported_versions_length, \
2571 { "Google Supported Versions Length", prefix ".quic.parameter.google.supported_versions_length", \
2572 FT_UINT8, BASE_DEC, NULL, 0x00, \
2573 NULL, HFILL } \
2574 }, \
2575 { & name .hf.hs_ext_quictp_parameter_google_supported_version, \
2576 { "Google Supported Version", prefix ".quic.parameter.google.supported_version", \
2577 FT_UINT32, BASE_RANGE_STRING | BASE_HEX, RVALS(quic_version_vals), 0x00, \
2578 NULL, HFILL } \
2579 }, \
2580 { & name .hf.hs_ext_quictp_parameter_facebook_partial_reliability, \
2581 { "Facebook Partial Reliability", prefix ".quic.parameter.facebook.partial_reliability", \
2582 FT_UINT64, BASE_DEC, NULL, 0x00, \
2583 NULL, HFILL } \
2584 }, \
2585 { & name .hf.hs_ext_quictp_parameter_chosen_version, \
2586 { "Chosen Version", prefix ".quic.parameter.vi.chosen_version", \
2587 FT_UINT32, BASE_RANGE_STRING | BASE_HEX, RVALS(quic_version_vals), 0x00, \
2588 NULL, HFILL } \
2589 }, \
2590 { & name .hf.hs_ext_quictp_parameter_other_version, \
2591 { "Other Version", prefix ".quic.parameter.vi.other_version", \
2592 FT_UINT32, BASE_RANGE_STRING | BASE_HEX, RVALS(quic_version_vals), 0x00, \
2593 NULL, HFILL } \
2594 }, \
2595 { & name .hf.hs_ext_quictp_parameter_enable_multipath, \
2596 { "Enable Multipath", prefix ".quic.parameter.enable_multipath", \
2597 FT_UINT64, BASE_DEC|BASE_VAL64_STRING, VALS64(quic_enable_multipath_vals), 0x00, \
2598 NULL, HFILL } \
2599 }, \
2600 { & name .hf.hs_ext_quictp_parameter_initial_max_paths, \
2601 { "Initial Max Paths", prefix ".quic.parameter.initial_max_paths", \
2602 FT_UINT64, BASE_DEC, NULL, 0x00, \
2603 NULL, HFILL } \
2604 }, \
2605 { & name .hf.hs_ext_quictp_parameter_initial_max_path_id, \
2606 { "Initial Max Path ID", prefix ".quic.parameter.initial_max_path_id", \
2607 FT_UINT64, BASE_DEC, NULL, 0x00, \
2608 NULL, HFILL } \
2609 }, \
2610 { & name .hf.hs_ext_connection_id_length, \
2611 { "Connection ID length", prefix ".connection_id_length", \
2612 FT_UINT8, BASE_DEC, NULL, 0x00, \
2613 NULL, HFILL } \
2614 }, \
2615 { & name .hf.hs_ext_connection_id, \
2616 { "Connection ID", prefix ".connection_id", \
2617 FT_BYTES, BASE_NONE, NULL, 0x00, \
2618 NULL, HFILL } \
2619 }, \
2620 { & name .hf.hs_ext_trusted_ca_keys_len, \
2621 { "Trusted CA keys length", prefix ".handshake.trusted_ca.keys_length", \
2622 FT_UINT16, BASE_DEC, NULL, 0x00, \
2623 "Length of Trusted CA keys extension", HFILL } \
2624 }, \
2625 { & name .hf.hs_ext_trusted_ca_keys_list, \
2626 { "Trusted CA keys", prefix ".handshake.trusted_ca.keys", \
2627 FT_NONE, BASE_NONE, NULL, 0x00, \
2628 "List of Trusted CA keys", HFILL } \
2629 }, \
2630 { & name .hf.hs_ext_trusted_ca_key, \
2631 { "Trusted CA key", prefix ".handshake.trusted_ca.key", \
2632 FT_NONE, BASE_NONE, NULL, 0x0, \
2633 NULL, HFILL } \
2634 }, \
2635 { & name .hf.hs_ext_trusted_ca_key_type, \
2636 { "Trusted CA key type", prefix ".handshake.trusted_ca.key_type", \
2637 FT_UINT8, BASE_DEC, VALS(tls_hello_ext_trusted_ca_key_type), 0x00, \
2638 "Type of Trusted CA key", HFILL } \
2639 }, \
2640 { & name .hf.hs_ext_trusted_ca_key_hash, \
2641 { "Trusted CA key hash", prefix ".handshake.trusted_ca.key_hash", \
2642 FT_BYTES, BASE_NONE, NULL, 0x00, \
2643 NULL, HFILL } \
2644 }, \
2645 { & name .hf.hs_ext_trusted_ca_key_dname_len, \
2646 { "Distinguished Name Length", prefix ".handshake.trusted_ca.key_dname_len", \
2647 FT_UINT16, BASE_DEC, NULL, 0x0, \
2648 "Length of distinguished name", HFILL } \
2649 }, \
2650 { & name .hf.hs_ext_trusted_ca_key_dname, \
2651 { "Distinguished Name", prefix ".handshake.trusted_ca.key_dname", \
2652 FT_NONE, BASE_NONE, NULL, 0x0, \
2653 "Distinguished name of a CA that the client trusts", HFILL } \
2654 }, \
2655 { & name .hf.esni_suite, \
2656 { "Cipher Suite", prefix ".esni.suite", \
2657 FT_UINT16, BASE_HEX|BASE_EXT_STRING, &ssl_31_ciphersuite_ext, 0x0, \
2658 "Cipher suite used to encrypt the SNI", HFILL } \
2659 }, \
2660 { & name .hf.esni_record_digest_length, \
2661 { "Record Digest Length", prefix ".esni.record_digest_length", \
2662 FT_UINT16, BASE_DEC, NULL, 0x00, \
2663 NULL, HFILL } \
2664 }, \
2665 { & name .hf.esni_record_digest, \
2666 { "Record Digest", prefix ".esni.record_digest", \
2667 FT_BYTES, BASE_NONE, NULL, 0x00, \
2668 "Cryptographic hash of the ESNIKeys from which the ESNI key was obtained", HFILL } \
2669 }, \
2670 { & name .hf.esni_encrypted_sni_length, \
2671 { "Encrypted SNI Length", prefix ".esni.encrypted_sni_length", \
2672 FT_UINT16, BASE_DEC, NULL, 0x00, \
2673 NULL, HFILL } \
2674 }, \
2675 { & name .hf.esni_encrypted_sni, \
2676 { "Encrypted SNI", prefix ".esni.encrypted_sni", \
2677 FT_BYTES, BASE_NONE, NULL, 0x00, \
2678 "The encrypted ClientESNIInner structure", HFILL } \
2679 }, \
2680 { & name .hf.esni_nonce, \
2681 { "Nonce", prefix ".esni.nonce", \
2682 FT_BYTES, BASE_NONE, NULL, 0x00, \
2683 "Contents of ClientESNIInner.nonce", HFILL } \
2684 }, \
2685 { & name .hf.ech_echconfiglist_length, \
2686 { "ECHConfigList length", prefix ".ech.echconfiglist_length", \
2687 FT_UINT16, BASE_DEC, NULL, 0x0, \
2688 "Encrypted ClientHello (ECH) Configurations length", HFILL } \
2689 }, \
2690 { & name .hf.ech_echconfiglist, \
2691 { "ECHConfigList", prefix ".ech.echconfiglist", \
2692 FT_NONE, BASE_NONE, NULL, 0x0, \
2693 "Encrypted ClientHello (ECH) Configurations", HFILL } \
2694 }, \
2695 { & name .hf.ech_echconfig, \
2696 { "ECHConfig", prefix ".ech.echconfig", \
2697 FT_NONE, BASE_NONE, NULL, 0x0, \
2698 "Encrypted ClientHello (ECH) Configuration", HFILL } \
2699 }, \
2700 { & name .hf.ech_echconfig_version, \
2701 { "Version", prefix ".ech.echconfig.version", \
2702 FT_UINT16, BASE_HEX, NULL, 0x0, \
2703 "Encrypted ClientHello: ECHConfig version", HFILL } \
2704 }, \
2705 { & name .hf.ech_echconfig_length, \
2706 { "Length", prefix ".ech.echconfig.length", \
2707 FT_UINT16, BASE_DEC, NULL, 0x0, \
2708 "Encrypted ClientHello: ECHConfig length", HFILL } \
2709 }, \
2710 { & name .hf.ech_echconfigcontents_maximum_name_length, \
2711 { "Maximum Name Length", prefix ".ech.echconfigcontents.maximum_name_length", \
2712 FT_UINT8, BASE_DEC, NULL, 0x0, \
2713 "The longest name of a backend server, if known", HFILL } \
2714 }, \
2715 { & name .hf.ech_echconfigcontents_public_name_length, \
2716 { "Public Name length", prefix ".ech.echconfigcontents.public_name_length", \
2717 FT_UINT8, BASE_DEC, NULL, 0x0, \
2718 "Length of the Public Name field", HFILL } \
2719 }, \
2720 { & name .hf.ech_echconfigcontents_public_name, \
2721 { "Public Name", prefix ".ech.echconfigcontents.public_name", \
2722 FT_STRING, BASE_NONE, NULL, 0x0, \
2723 "The DNS name of the client-facing server, i.e., the entity trusted to update the ECH configuration", HFILL } \
2724 }, \
2725 { & name .hf.ech_echconfigcontents_extensions_length, \
2726 { "Extensions length", prefix ".ech.echconfigcontents.extensions_length", \
2727 FT_UINT16, BASE_DEC, NULL, 0x0, \
2728 "Length of the Extensions field", HFILL } \
2729 }, \
2730 { & name .hf.ech_echconfigcontents_extensions, \
2731 { "Extensions", prefix ".ech.echconfigcontents.extensions", \
2732 FT_BYTES, BASE_NONE, NULL, 0x0, \
2733 "A list of extensions that the client must take into consideration when generating a ClientHello message", HFILL } \
2734 }, \
2735 { & name .hf.ech_hpke_keyconfig, \
2736 { "HPKE Key Config", prefix ".ech.hpke.keyconfig", \
2737 FT_NONE, BASE_NONE, NULL, 0x0, \
2738 "HPKE Key Config", HFILL } \
2739 }, \
2740 { & name .hf.ech_hpke_keyconfig_config_id, \
2741 { "Config Id", prefix ".ech.hpke.keyconfig.config_id", \
2742 FT_UINT8, BASE_DEC, NULL, 0x0, \
2743 "HPKE Config Id", HFILL } \
2744 }, \
2745 { & name .hf.ech_hpke_keyconfig_kem_id, \
2746 { "KEM Id", prefix ".ech.hpke.keyconfig.kem_id", \
2747 FT_UINT16, BASE_DEC, VALS(kem_id_type_vals), 0x0, \
2748 "HPKE KEM Id", HFILL } \
2749 }, \
2750 { & name .hf.ech_hpke_keyconfig_public_key_length, \
2751 { "Public Key length", prefix ".ech.hpke.keyconfig.public_key_length", \
2752 FT_UINT16, BASE_DEC, NULL, 0x0, \
2753 "HPKE Public Key length", HFILL } \
2754 }, \
2755 { & name .hf.ech_hpke_keyconfig_public_key, \
2756 { "Public Key", prefix ".ech.hpke.keyconfig.public_key", \
2757 FT_BYTES, BASE_NONE, NULL, 0x0, \
2758 "HPKE Public Key", HFILL } \
2759 }, \
2760 { & name .hf.ech_hpke_keyconfig_cipher_suites, \
2761 { "Cipher Suites", prefix ".ech.hpke.keyconfig.cipher_suites", \
2762 FT_NONE, BASE_NONE, NULL, 0x0, \
2763 "HPKE Cipher Suites", HFILL } \
2764 }, \
2765 { & name .hf.ech_hpke_keyconfig_cipher_suites_length, \
2766 { "Cipher Suites length", prefix ".ech.hpke.keyconfig.cipher_suites_length", \
2767 FT_UINT16, BASE_DEC, NULL, 0x0, \
2768 "HPKE Cipher Suites length", HFILL } \
2769 }, \
2770 { & name .hf.ech_hpke_keyconfig_cipher_suite, \
2771 { "Cipher Suite", prefix ".ech.hpke.keyconfig.cipher_suite", \
2772 FT_NONE, BASE_NONE, NULL, 0x0, \
2773 "HPKE Cipher Suite", HFILL } \
2774 }, \
2775 { & name .hf.ech_hpke_keyconfig_cipher_suite_kdf_id, \
2776 { "KDF Id", prefix ".ech.hpke.keyconfig.cipher_suite.kdf_id", \
2777 FT_UINT16, BASE_DEC, VALS(kdf_id_type_vals), 0x0, \
2778 "HPKE KDF Id", HFILL } \
2779 }, \
2780 { & name .hf.ech_hpke_keyconfig_cipher_suite_aead_id, \
2781 { "AEAD Id", prefix ".ech.hpke.keyconfig.cipher_suite.aead_id", \
2782 FT_UINT16, BASE_DEC, VALS(aead_id_type_vals), 0x0, \
2783 "HPKE AEAD Id", HFILL } \
2784 }, \
2785 { & name .hf.ech_clienthello_type, \
2786 { "Client Hello type", prefix ".ech.client_hello_type", \
2787 FT_UINT8, BASE_DEC, VALS(tls_hello_ext_ech_clienthello_types), 0x0, \
2788 "Client Hello type", HFILL } \
2789 }, \
2790 { & name .hf.ech_cipher_suite, \
2791 { "Cipher Suite", prefix ".ech.cipher_suite", \
2792 FT_NONE, BASE_NONE, NULL, 0x0, \
2793 "The cipher suite used to encrypt ClientHelloInner", HFILL } \
2794 }, \
2795 { & name .hf.ech_config_id, \
2796 { "Config Id", prefix ".ech.config_id", \
2797 FT_UINT8, BASE_DEC, NULL, 0x0, \
2798 "The ECHConfigContents.key_config.config_id for the chosen ECHConfig", HFILL } \
2799 }, \
2800 { & name .hf.ech_enc_length, \
2801 { "Enc length", prefix ".ech.enc_length", \
2802 FT_UINT16, BASE_DEC, NULL, 0x0, \
2803 NULL, HFILL } \
2804 }, \
2805 { & name .hf.ech_enc, \
2806 { "Enc", prefix ".ech.enc", \
2807 FT_BYTES, BASE_NONE, NULL, 0x0, \
2808 "The HPKE encapsulated key, used by servers to decrypt the corresponding payload field", HFILL } \
2809 }, \
2810 { & name .hf.ech_payload_length, \
2811 { "Payload length", prefix ".ech.payload_length", \
2812 FT_UINT16, BASE_DEC, NULL, 0x0, \
2813 "Payload Length", HFILL } \
2814 }, \
2815 { & name .hf.ech_payload, \
2816 { "Payload", prefix ".ech.payload", \
2817 FT_BYTES, BASE_NONE, NULL, 0x0, \
2818 "The serialized and encrypted ClientHelloInner structure", HFILL } \
2819 }, \
2820 { & name .hf.ech_confirmation, \
2821 { "Confirmation", prefix ".ech.confirmation", \
2822 FT_BYTES, BASE_NONE, NULL, 0x0, \
2823 "Confirmation of ECH acceptance in a HelloRetryRequest", HFILL } \
2824 }, \
2825 { & name .hf.ech_retry_configs, \
2826 { "Retry Configs", prefix ".ech.retry_configs", \
2827 FT_NONE, BASE_NONE, NULL, 0x0, \
2828 "ECHConfig structures for one-time use by the client in a retry connection", HFILL } \
2829 }, \
2830 { & name .hf.ech_padding_data, \
2831 { "ECH Encrypted Padding", prefix ".ech.encrypted_padding", \
2832 FT_BYTES, BASE_NONE, NULL, 0x0, \
2833 "Must be zero", HFILL } \
2834 }, \
2835 { & name .hf.hs_ext_alps_len, \
2836 { "ALPS Extension Length", prefix ".handshake.extensions_alps_len", \
2837 FT_UINT16, BASE_DEC, NULL, 0x0, \
2838 "Length of the ALPS Extension", HFILL } \
2839 }, \
2840 { & name .hf.hs_ext_alps_alpn_list, \
2841 { "Supported ALPN List", prefix ".handshake.extensions_alps_alpn_list", \
2842 FT_NONE, BASE_NONE, NULL, 0x0, \
2843 "List of supported ALPN by ALPS", HFILL } \
2844 }, \
2845 { & name .hf.hs_ext_alps_alpn_str_len, \
2846 { "Supported ALPN Length", prefix ".handshake.extensions_alps_alpn_str_len", \
2847 FT_UINT8, BASE_DEC, NULL, 0x0, \
2848 "Length of ALPN string", HFILL } \
2849 }, \
2850 { & name .hf.hs_ext_alps_alpn_str, \
2851 { "Supported ALPN", prefix ".handshake.extensions_alps_alpn_str", \
2852 FT_STRING, BASE_NONE, NULL, 0x00, \
2853 "ALPN supported by ALPS", HFILL } \
2854 }, \
2855 { & name .hf.hs_ext_alps_settings, \
2856 { "ALPN Opaque Settings", prefix ".handshake.extensions_alps.settings", \
2857 FT_BYTES, BASE_NONE, NULL, 0x00, \
2858 "ALPN Opaque Settings", HFILL } \
2859 }
2860/* }}} */
2861
2862/* {{{ */
2863#define SSL_COMMON_ETT_LIST(name) \
2864 & name .ett.hs_ext, \
2865 & name .ett.hs_ext_alpn, \
2866 & name .ett.hs_ext_cert_types, \
2867 & name .ett.hs_ext_groups, \
2868 & name .ett.hs_ext_curves_point_formats, \
2869 & name .ett.hs_ext_npn, \
2870 & name .ett.hs_ext_reneg_info, \
2871 & name .ett.hs_ext_key_share, \
2872 & name .ett.hs_ext_key_share_ks, \
2873 & name .ett.hs_ext_pre_shared_key, \
2874 & name .ett.hs_ext_psk_identity, \
2875 & name .ett.hs_ext_psk_binders, \
2876 & name .ett.hs_ext_psk_binder, \
2877 & name .ett.hs_ext_server_name, \
2878 & name .ett.hs_ext_oid_filter, \
2879 & name .ett.hs_ext_quictp_parameter, \
2880 & name .ett.hs_ext_trusted_ca_keys, \
2881 & name .ett.hs_ext_trusted_ca_key, \
2882 & name .ett.hs_sig_hash_alg, \
2883 & name .ett.hs_sig_hash_algs, \
2884 & name .ett.urlhash, \
2885 & name .ett.keyex_params, \
2886 & name .ett.certificates, \
2887 & name .ett.cert_types, \
2888 & name .ett.dnames, \
2889 & name .ett.hs_random, \
2890 & name .ett.cipher_suites, \
2891 & name .ett.comp_methods, \
2892 & name .ett.session_ticket, \
2893 & name .ett.sct, \
2894 & name .ett.cert_status, \
2895 & name .ett.ocsp_response, \
2896 & name .ett.uncompressed_certificates, \
2897 & name .ett.hs_ext_alps, \
2898 & name .ett.ech_echconfiglist, \
2899 & name .ett.ech_echconfig, \
2900 & name .ett.ech_retry_configs, \
2901 & name .ett.ech_hpke_keyconfig, \
2902 & name .ett.ech_hpke_cipher_suites, \
2903 & name .ett.ech_hpke_cipher_suite, \
2904 & name .ett.ech_decrypt, \
2905 & name .ett.hs_ext_token_binding_key_parameters, \
2906
2907/* }}} */
2908
2909/* {{{ */
2910#define SSL_COMMON_EI_LIST(name, prefix) \
2911 { & name .ei.client_version_error, \
2912 { prefix ".handshake.client_version_error", PI_PROTOCOL, PI_WARN, \
2913 "Client Hello legacy version field specifies version 1.3, not version 1.2; some servers may not be able to handle that.", EXPFILL } \
2914 }, \
2915 { & name .ei.server_version_error, \
2916 { prefix ".handshake.server_version_error", PI_PROTOCOL, PI_WARN, \
2917 "Server Hello legacy version field specifies version 1.3, not version 1.2; some middleboxes may not be able to handle that.", EXPFILL } \
2918 }, \
2919 { & name .ei.legacy_version, \
2920 { prefix ".handshake.legacy_version", PI_DEPRECATED, PI_CHAT, \
2921 "This legacy_version field MUST be ignored. The supported_versions extension is present and MUST be used instead.", EXPFILL } \
2922 }, \
2923 { & name .ei.malformed_vector_length, \
2924 { prefix ".malformed.vector_length", PI_PROTOCOL, PI_WARN, \
2925 "Variable vector length is outside the permitted range", EXPFILL } \
2926 }, \
2927 { & name .ei.malformed_buffer_too_small, \
2928 { prefix ".malformed.buffer_too_small", PI_MALFORMED, PI_ERROR, \
2929 "Malformed message, not enough data is available", EXPFILL } \
2930 }, \
2931 { & name .ei.malformed_trailing_data, \
2932 { prefix ".malformed.trailing_data", PI_PROTOCOL, PI_WARN, \
2933 "Undecoded trailing data is present", EXPFILL } \
2934 }, \
2935 { & name .ei.hs_ext_cert_status_undecoded, \
2936 { prefix ".handshake.status_request.undecoded", PI_UNDECODED, PI_NOTE, \
2937 "Responder ID list or Request Extensions are not implemented, contact Wireshark developers if you want this to be supported", EXPFILL } \
2938 }, \
2939 { & name .ei.hs_ciphersuite_undecoded, \
2940 { prefix ".handshake.ciphersuite.undecoded", PI_UNDECODED, PI_NOTE, \
2941 "Ciphersuite not implemented, contact Wireshark developers if you want this to be supported", EXPFILL } \
2942 }, \
2943 { & name .ei.hs_srv_keyex_illegal, \
2944 { prefix ".handshake.server_keyex_illegal", PI_PROTOCOL, PI_WARN, \
2945 "It is not legal to send the ServerKeyExchange message for this ciphersuite", EXPFILL } \
2946 }, \
2947 { & name .ei.resumed, \
2948 { prefix ".resumed", PI_SEQUENCE, PI_NOTE, \
2949 "This session reuses previously negotiated keys (Session resumption)", EXPFILL } \
2950 }, \
2951 { & name .ei.record_length_invalid, \
2952 { prefix ".record.length.invalid", PI_PROTOCOL, PI_ERROR, \
2953 "Record fragment length is too small or too large", EXPFILL } \
2954 }, \
2955 { & name .ei.decompression_error, \
2956 { prefix ".decompression_error", PI_PROTOCOL, PI_ERROR, \
2957 "Decompression error", EXPFILL } \
2958 }, \
2959 { & name .ei.ech_echconfig_invalid_version, \
2960 { prefix ".ech_echconfig_invalid_version", PI_PROTOCOL, PI_ERROR, \
2961 "Invalid/unknown ECHConfig version", EXPFILL } \
2962 }, \
2963 { & name .ei.ech_accepted, \
2964 { prefix ".ech_accepted", PI_PROTOCOL, PI_NOTE, \
2965 "Calculated ECH Confirmation matches Server Random bytes, ECH was accepted", EXPFILL } \
2966 }, \
2967 { & name .ei.ech_rejected, \
2968 { prefix ".ech_rejected", PI_PROTOCOL, PI_WARN, \
2969 "Calculated ECH Confirmation does not match Server Random bytes, ECH was rejected", EXPFILL } \
2970 }
2971/* }}} */
2972
2973extern void
2974ssl_common_register_ssl_alpn_dissector_table(const char *name,
2975 const char *ui_name, const int proto);
2976
2977extern void
2978ssl_common_register_dtls_alpn_dissector_table(const char *name,
2979 const char *ui_name, const int proto);
2980
2981extern void
2982ssl_common_register_options(module_t *module, ssl_common_options_t *options, bool is_dtls);
2983
2984#ifdef SSL_DECRYPT_DEBUG
2985extern void
2986ssl_debug_printf(const char* fmt,...) G_GNUC_PRINTF(1,2);
2987extern void
2988ssl_print_data(const char* name, const unsigned char* data, size_t len);
2989extern void
2990ssl_print_string(const char* name, const StringInfo* data);
2991extern void
2992ssl_set_debug(const char* name);
2993extern void
2994ssl_debug_flush(void);
2995#else
2996
2997/* No debug: nullify debug operation*/
2998static inline void G_GNUC_PRINTF(1,2)
2999ssl_debug_printf(const char* fmt _U_,...)
3000{
3001}
3002#define ssl_print_data(a, b, c)
3003#define ssl_print_string(a, b)
3004#define ssl_set_debug(name)
3005#define ssl_debug_flush()
3006
3007#endif /* SSL_DECRYPT_DEBUG */
3008
3009
3010uint32_t
3011ssl_dissect_ext_ech_echconfiglist(ssl_common_dissect_t *hf, tvbuff_t *tvb, packet_info *pinfo,
3012 proto_tree *tree, uint32_t offset, uint32_t offset_end);
3013
3014#endif /* __PACKET_TLS_UTILS_H__ */
3015
3016/*
3017 * Editor modelines - https://www.wireshark.org/tools/modelines.html
3018 *
3019 * Local variables:
3020 * c-basic-offset: 4
3021 * tab-width: 8
3022 * indent-tabs-mode: nil
3023 * End:
3024 *
3025 * vi: set shiftwidth=4 tabstop=8 expandtab:
3026 * :indentSize=4:tabSize=8:noTabs=true:
3027 */
Definition packet-tls-utils.h:341
Definition packet-tls-utils.h:357
StringInfo dtls13_aad
Definition packet-tls-utils.h:368
StringInfo app_traffic_secret
Definition packet-tls-utils.h:371
uint64_t seq
Definition packet-tls-utils.h:367
Definition packet-tls-utils.c:2802
Definition packet-tls-utils.h:529
Definition packet-tls-utils.h:349
Definition packet-tls-utils.h:433
SslFlow * flow
Definition packet-tls-utils.h:439
uint64_t record_seq
Definition packet-tls-utils.h:441
unsigned data_len
Definition packet-tls-utils.h:435
uint32_t seq
Definition packet-tls-utils.h:442
int id
Definition packet-tls-utils.h:436
ContentType type
Definition packet-tls-utils.h:438
unsigned char * plain_data
Definition packet-tls-utils.h:434
Definition packet-tls-utils.h:469
Definition packet-tls-utils.h:266
Definition packet-tls-utils.h:450
unsigned reassembly_id
Definition packet-tls-utils.h:453
uint8_t type
Definition packet-tls-utils.h:455
int is_last
Definition packet-tls-utils.h:456
uint32_t offset
Definition packet-tls-utils.h:454
unsigned record_id
Definition packet-tls-utils.h:451
Definition address.h:58
Definition packet_info.h:43
Definition proto.h:907
Definition value_string.h:289
Definition packet-tls-utils.h:571
Definition value_string.h:130
Definition value_string.h:167
Definition value_string.h:27
Definition wmem_allocator.h:27
Definition wmem_list.c:23
Definition wmem_strbuf.h:39
Definition wmem_tree-int.h:48
Definition packet-tls-utils.h:428
Definition packet-tls-utils.h:460
Definition packet-tls-utils.h:565
Definition conversation.h:230
Definition packet.c:837
Definition packet.c:97
Definition packet-tls-utils.h:1243
Definition expert.h:39
Definition packet-tls-utils.h:1258
Definition prefs-int.h:27
Definition packet-tls-utils.h:867
Definition packet-tls-utils.h:579
Definition packet-tls-utils.h:1251
Definition packet-tls-utils.h:585
Definition tvbuff-int.h:35